@team-agent/installer 0.5.61 → 0.5.63

package/crates/team-agent/src/coordinator/types.rs

@@ -1,5 +1,5 @@
 //! coordinator 共享数据面:常量 / newtype / 穷尽 enum / metadata / schema health /
-//! report 结构 / CoordinatorEvent / abnormal-track 数据型 / WatchCursor / cross-dep 占位。
+//! report 结构 / abnormal-track 数据型 / WatchCursor / cross-dep 占位。
 
 use std::collections::BTreeSet;
 use std::path::{Path, PathBuf};
@@ -9,11 +9,10 @@ use serde_json::Value;
 use thiserror::Error;
 
 // ── REUSE — committed model types(不重定义)──────────────────────────────────
-use crate::model::enums::{AuthMode, Provider};
-// AuthMode/PaneLiveness 经 provider/transport 间接复用;此处只点名直接用到的。
+use crate::model::enums::Provider;
 
 // ── REUSE — step 8 provider(经 trait,MUST-NOT-13:绝不依赖 provider client crate)──
-use crate::provider::{ProcessLiveness, ProviderAdapter, RolloutPath, TurnId, TurnState};
+use crate::provider::{ProviderAdapter, RolloutPath, TurnState};
 
 // ===========================================================================
 // CONSTANTS(metadata.py:13 / __main__.py:101)
@@ -354,137 +353,10 @@ pub struct StopReport {
     pub pid: Option<Pid>,
 }
 
-// ===========================================================================
-// CoordinatorEvent(§3/§22:typed event enum,serde tag 与 Python 字节级一致)
-// ===========================================================================
-
-/// 本 step 发出的事件(card 表整列;事件名稳定契约由 step 4 EventLog 拥有,本卡只点名
-/// coordinator 发的那批)。serde `tag = "event"` + 精确 rename 锁死字节(与 events.jsonl 一致)。
-/// 渲染(`watch::render_event_line`)是它的 `Display` 投影。
-#[derive(Debug, Clone, PartialEq, Serialize, Deserialize)] // 无 Eq:某变体含 f64
-#[serde(tag = "event")]
-pub enum CoordinatorEvent {
-    #[serde(rename = "coordinator.boot")]
-    Boot { workspace: String, once: bool },
-    #[serde(rename = "coordinator.started")]
-    Started { pid: Pid, log: String },
-    #[serde(rename = "coordinator.stopped")]
-    Stopped { pid: Pid },
-    #[serde(rename = "coordinator.exit")]
-    Exit { stop: bool },
-    #[serde(rename = "coordinator.session_missing")]
-    SessionMissing { session: String },
-    #[serde(rename = "coordinator.orphan_self_terminate")]
-    OrphanSelfTerminate {
-        initial_ppid: u32,
-        current_ppid: u32,
-        workspace: String,
-    },
-    #[serde(rename = "coordinator.tick_error")]
-    TickError {
-        error: String,
-        exc_type: String,
-        consecutive_failures: u32,
-        next_sleep_sec: f64,
-    },
-    #[serde(rename = "coordinator.tick_error.suppressed")]
-    TickErrorSuppressed {
-        consecutive_failures: u32,
-        next_sleep_sec: f64,
-    },
-    #[serde(rename = "coordinator.tick_recovered")]
-    TickRecovered { consecutive_failures: u32 },
-    #[serde(rename = "coordinator.restart_incompatible")]
-    RestartIncompatible {
-        pid: Option<Pid>,
-        expected_protocol: u32,
-        expected_schema: i64,
-    },
-    #[serde(rename = "coordinator.restart_incompatible_stop_failed")]
-    RestartIncompatibleStopFailed { pid: Option<Pid> },
-    #[serde(rename = "coordinator.schema_incompatible")]
-    SchemaIncompatible {
-        table: Option<String>,
-        missing_columns: Vec<String>,
-    },
-    #[serde(rename = "idle_takeover.unknown_persistent")]
-    IdleTakeoverUnknownPersistent {
-        node_id: String,
-        provider: Option<Provider>,
-        auth_mode: Option<AuthMode>,
-        consecutive_ticks: u32,
-        rollout_path: Option<RolloutPath>,
-    },
-    #[serde(rename = "abnormal.notify")]
-    AbnormalNotify {
-        signature: String,
-        turn_id: Option<TurnId>,
-        decision: AbnormalDecision,
-    },
-    #[serde(rename = "worker.abnormal_exit")]
-    WorkerAbnormalExit {
-        team_id: String,
-        agent_id: String,
-        provider: Provider,
-        path: String,
-        provider_process_dead: bool,
-        latest_explicit_error: bool,
-        signature: String,
-        turn_id: Option<TurnId>,
-        process_liveness: ProcessLiveness,
-    },
-    #[serde(rename = "worker.abnormal_exit.check")]
-    WorkerAbnormalExitCheck {
-        team_id: String,
-        agent_id: String,
-        provider: Provider,
-        path: String,
-        provider_process_dead: bool,
-        latest_explicit_error: bool,
-        notification: bool,
-        suppressed_reason: Option<String>,
-    },
-    #[serde(rename = "abnormal_exit.single_signal_suppressed")]
-    AbnormalExitSingleSignalSuppressed {
-        team_id: String,
-        agent_id: String,
-        provider: Provider,
-        path: String,
-        reason: String,
-        provider_process_dead: bool,
-        dead_process: bool,
-        latest_explicit_error: bool,
-    },
-    #[serde(rename = "abnormal.whole_team_gone")]
-    AbnormalWholeTeamGone { classification: WholeTeamGoneClass },
-    #[serde(rename = "leader_notification.log_pruned")]
-    LeaderNotificationLogPruned { removed: u64 },
-    #[serde(rename = "leader_notification.prune_failed")]
-    LeaderNotificationPruneFailed { error: String },
-    #[serde(rename = "runtime.state.save_failed")]
-    RuntimeStateSaveFailed {
-        phase: String,
-        error: String,
-        exc_type: String,
-    },
-}
-
 // ===========================================================================
 // 异常轨 abnormal_track(abnormal_track.py)—— provider-neutral 数据型
 // ===========================================================================
 
-/// `_classify` 决策(`abnormal_track.py:198-204`)。whitelist > blacklist > default(C9 catch-bias)。
-#[derive(Debug, Clone, Copy, PartialEq, Eq, Hash, Serialize, Deserialize)]
-#[serde(rename_all = "snake_case")]
-pub enum AbnormalDecision {
-    /// whitelist 命中 → 不通知(`abnormal_track.py:201`)。
-    Skip,
-    /// blacklist 命中 → 通知(`abnormal_track.py:203`)。
-    NotifyBlacklist,
-    /// 结构化 fault 默认通知(C9 catch-bias,`abnormal_track.py:204`)。
-    NotifyDefault,
-}
-
 /// `detect_whole_team_gone` 分类(`abnormal_track.py:130/132/143`)。
 #[derive(Debug, Clone, Copy, PartialEq, Eq, Hash, Serialize, Deserialize)]
 #[serde(rename_all = "snake_case")]
@@ -498,35 +370,6 @@ pub enum WholeTeamGoneClass {
     UnexpectedExit,
 }
 
-/// `process_abnormal_records` 单条通知(`abnormal_track.py:70-79`)。
-/// dedup key = `(signature, turn_id|fingerprint)`(C8,`abnormal_track.py:64-66`):turn_id 缺失退化为
-/// per-record content fingerprint 桶,**绝不**把不同 fault 折叠进一个全局桶。
-#[derive(Debug, Clone, PartialEq, Eq)]
-pub struct AbnormalNotification {
-    pub signature: String,
-    pub turn_id: Option<TurnId>,
-    /// `kind == "approval"` → blocked_on_human,否则 abnormal(`abnormal_track.py:74`)。
-    pub state: TurnState,
-    pub decision: AbnormalDecision,
-    pub provider: Option<Provider>,
-    /// 原始 fault fact(provider reader 产出的结构化记录;本 module 不读屏不命名 provider)。
-    pub raw: Value,
-}
-
-/// `process_abnormal_records` 返回(`abnormal_track.py:83-88` typed 版)。
-#[derive(Debug, Clone, PartialEq, Eq)]
-pub struct AbnormalProcessOutput {
-    pub notifications: Vec<AbnormalNotification>,
-    /// 更新后的去重状态(`seen` 集合,`abnormal_track.py:82`)——caller 回存。
-    pub notification_state: AbnormalNotificationState,
-}
-
-/// abnormal 去重状态(`abnormal_track.py:31-32,82`)。`seen` = `signature\0bucket` key 集合。
-#[derive(Debug, Clone, Default, PartialEq, Eq, Serialize, Deserialize)]
-pub struct AbnormalNotificationState {
-    pub seen: BTreeSet<String>,
-}
-
 /// `detect_whole_team_gone` 返回(`abnormal_track.py:140-147` typed 版)。
 #[derive(Debug, Clone, PartialEq, Eq)]
 pub struct WholeTeamGoneReport {
@@ -551,13 +394,6 @@ pub struct TeamPresenceSnapshot {
     pub restart_in_progress: bool,
 }
 
-/// abnormal track 错误(provider reader 翻译 fault facts 失败)。
-#[derive(Debug, Error)]
-pub enum AbnormalError {
-    #[error("provider: {0}")]
-    Provider(#[from] crate::provider::ProviderError),
-}
-
 // ===========================================================================
 // WatchCursor(watch/__init__.py)
 // ===========================================================================
@@ -591,15 +427,6 @@ pub use crate::model::ids::AgentId;
 pub trait ProviderRegistry {
     /// 拿某 provider 的 adapter(`providers.get_adapter`)。
     fn adapter_for(&self, provider: Provider) -> Box<dyn ProviderAdapter>;
-    /// 该 provider 的 error 黑白名单(`get_provider_registry(provider)["error_lists"]`,abnormal_track 用)。
-    fn error_lists(&self, provider: Provider) -> ErrorLists;
-}
-
-/// provider error 黑白名单(`abnormal_track.py:184-195`)。**PLACEHOLDER**(step 8 拥有)。
-#[derive(Debug, Clone, Default, PartialEq, Eq)]
-pub struct ErrorLists {
-    pub whitelist: Vec<String>,
-    pub blacklist: Vec<String>,
 }
 
 /// idle take-over 候选 node(`idle_takeover_wiring.build_idle_nodes`,step 8/11 拥有真名)。

package/crates/team-agent/src/db/agent_health_capture.rs

@@ -1,3 +1,4 @@
+//!
 //! Phase-DX E2: `agent_health` row capture/restore for the remove-agent flow.
 //!
 //! Extracted from `lifecycle/restart/remove.rs` so the SQL column reference to

package/crates/team-agent/src/db/message_store.rs

@@ -4,6 +4,7 @@
 // physical relocation (zero behavior change).
 #![allow(clippy::unwrap_used, clippy::expect_used, clippy::panic)]
 
+//!
 //! step 7 · message_store — core message lifecycle over `team.db`.
 //!
 //! Truth source (READ-ONLY): `team-agent-public` @ v0.2.11,
@@ -205,7 +206,7 @@ pub struct PersistMessageInput<'a> {
 
 /// `leader_notification_log._legacy_epoch_from_uuid` (line 145-147):
 /// `int(zlib.crc32(str(uuid or "").encode("utf-8")) & 0x7FFFFFFF)`.
-pub fn legacy_epoch_from_uuid(leader_session_uuid: Option<&str>) -> i64 {
+fn legacy_epoch_from_uuid(leader_session_uuid: Option<&str>) -> i64 {
     let mut crc = 0xFFFF_FFFFu32;
     for byte in leader_session_uuid.unwrap_or("").as_bytes() {
         crc ^= u32::from(*byte);

package/crates/team-agent/src/db/migration.rs

@@ -1,3 +1,4 @@
+//!
 //! `team.db` 列布局迁移(Gap 46;真相源 `message_store/schema_migration.py`)。
 //!
 //! 检测**物理列序漂移**(`pragma table_info` 顺序 vs canonical),在**一个原子事务**
@@ -141,7 +142,7 @@ fn create_table_ddl(table: &str, name: &str) -> Option<String> {
 
 /// 一张表的布局 diff。
 #[derive(Debug, Clone)]
-pub struct Diff {
+struct Diff {
     pub table: &'static str,
     pub expected: Vec<&'static str>,
     pub actual: Vec<String>,
@@ -187,7 +188,7 @@ fn table_count(conn: &Connection, table: &str) -> Result<i64, DbError> {
     Ok(conn.query_row(&format!("select count(*) from {table}"), [], |r| r.get(0))?)
 }
 
-pub fn pragma_user_version(conn: &Connection) -> Result<i64, DbError> {
+fn pragma_user_version(conn: &Connection) -> Result<i64, DbError> {
     Ok(conn.query_row("pragma user_version", [], |r| r.get(0))?)
 }
 
@@ -230,7 +231,7 @@ fn run_version_migrations(conn: &Connection, schema_version: i64) -> Result<(),
 
 /// `schema_migration.py:_layout_diffs`:按 `table_info` 物理列序检测漂移。
 /// 无任何 managed 表存在(fresh DB)→ 空(initialize 随后建表)。
-pub fn layout_diffs(conn: &Connection) -> Result<Vec<Diff>, DbError> {
+fn layout_diffs(conn: &Connection) -> Result<Vec<Diff>, DbError> {
     let mut any = false;
     for (t, _) in MANAGED_TABLE_LAYOUTS {
         if table_exists(conn, t)? {
@@ -419,7 +420,7 @@ pub fn ensure_table_layout(
 }
 
 /// `schema_migration.py:schema_diagnosis`:只读判定(不变更 DB)。
-pub fn schema_diagnosis(db_path: &Path, schema_version: i64) -> Result<Diagnosis, DbError> {
+fn schema_diagnosis(db_path: &Path, schema_version: i64) -> Result<Diagnosis, DbError> {
     if !db_path.exists() {
         // T3-3 cr verdict (A parity lock, 2026-06-10): a missing db is the LEGAL
         // first-use state — ok:true is layered with the explicit status axis and the

package/crates/team-agent/src/db/mod.rs

@@ -1,3 +1,4 @@
+//!
 //! step 3 · db — `team.db`(SQLite)的 schema 与迁移层(真相源 `message_store/schema*.py`)。
 //!
 //! §6 step 3:schema/migrations/indexes/WAL+busy-timeout/只读兼容。**消息操作本身(send/

package/crates/team-agent/src/db/schema.rs

@@ -1,3 +1,4 @@
+//!
 //! `team.db` schema 初始化(真相源 `message_store/schema.py` + `schema_migration.py`)。
 //!
 //! slice 1:fresh DB schema —— 8 表 DDL、6 索引、ALTER 式列迁移、agent_health 重建、

package/crates/team-agent/src/diagnose/comms.rs

@@ -1,3 +1,4 @@
+
 use std::path::Path;
 
 use serde_json::{json, Value};
@@ -212,7 +213,7 @@ fn verifies_json(check: &SelftestCheck) -> Value {
     serde_json::to_value(check.verifies).unwrap_or_else(|_| json!("unknown"))
 }
 
-pub fn receiver_binding_mismatches(
+fn receiver_binding_mismatches(
     owner_pane_id: &Value,
     caller_pane_id: &Value,
     pane_id: &Value,

package/crates/team-agent/src/diagnose/mod.rs

@@ -1,3 +1,4 @@
+//!
 //! Shared doctor gate seams.
 
 use std::path::Path;

package/crates/team-agent/src/diagnose/orphans.rs

@@ -1,3 +1,4 @@
+
 use std::collections::{BTreeMap, BTreeSet};
 use std::path::{Path, PathBuf};
 use std::process::Command;

package/crates/team-agent/src/layout/manager.rs

@@ -1,3 +1,4 @@
+//!
 //! 0.3.28 layout step 2 — leader placement.
 //!
 //! Public API for managed-mode leader placement. The runtime calls
@@ -34,6 +35,7 @@ pub enum LeaderPlacement {
     },
 }
 
+///
 /// Compute the placement for a leader given its identity, the desired
 /// `LeaderStartMode`, and the environment (used to detect `$TMUX`).
 ///
@@ -58,13 +60,6 @@ pub fn leader_placement(
     }
 }
 
-/// The leader session name for a given provider + workspace. `LeaderIdentity`
-/// in this codebase does not carry the provider field; the caller supplies it
-/// explicitly (matches how `leader_session_name` itself is shaped).
-pub fn leader_session_for_provider(provider: Provider, workspace: &Path) -> SessionName {
-    leader_session_name(provider, workspace)
-}
-
 #[allow(dead_code)]
 fn _unused_identity_marker(_id: &LeaderIdentity) {}
 
@@ -74,6 +69,7 @@ use crate::layout::placement::{WorkerSpawnAction, WorkerSpawnTarget};
 use crate::model::yaml::Value as YamlValue;
 use crate::transport::Transport;
 
+///
 /// Compute the spawn target for a worker. Python parity: one window per
 /// agent in the worker session, named after `agent_id`. First worker
 /// (= session does not yet exist) → NewSession; otherwise NewWindow.

package/crates/team-agent/src/layout/mod.rs

@@ -1,3 +1,4 @@
+//!
 //! 0.3.28 — Unified adaptive layout manager.
 //!
 //! Single source of truth for tmux topology decisions in the runtime:
@@ -31,6 +32,5 @@ pub mod worker_env;
 pub mod worker_window_helpers;
 
 pub use runtime_sessions::{
-    LeaderLauncherSession, LeaderLauncherSessionError, RuntimeSessionAnomaly, RuntimeSessions,
-    WorkerSession, WorkerSessionError,
+    LeaderLauncherSession, RuntimeSessionAnomaly, RuntimeSessions, WorkerSession,
 };

package/crates/team-agent/src/layout/overlay.rs

@@ -1,3 +1,4 @@
+//!
 //! 0.3.28 layout step 8 — display overlay (3-pane tiling).
 //!
 //! Python truth source: 3-pane tiling exists ONLY in the display overlay
@@ -15,6 +16,7 @@ use crate::transport::{SessionName, WindowName};
 /// 3 panes per overlay window — Python parity.
 pub const OVERLAY_PANES_PER_WINDOW: usize = 3;
 
+///
 /// Overlay window name for a 0-based group index. Index 0 → `overview`;
 /// N ≥ 1 → `overview-{N+1}`. Names are scoped by `session_tag` so multiple
 /// teams can coexist on one leader session.
@@ -38,6 +40,7 @@ pub struct OverlayPlacement {
     pub window: WindowName,
 }
 
+///
 /// Compute the overlay placements for a list of agent_ids. Deterministic by
 /// input order: agent `i` → window `i / 3`, slot `i % 3`.
 pub fn plan_overlay_placements(session_tag: &str, agents: &[&str]) -> Vec<OverlayPlacement> {
@@ -53,9 +56,10 @@ pub fn plan_overlay_placements(session_tag: &str, agents: &[&str]) -> Vec<Overla
         .collect()
 }
 
+///
 /// True when a window name belongs to a display overlay (matches
 /// `team-agent:<...>:overview[-N]`).
-pub fn is_overlay_window(name: &WindowName) -> bool {
+fn is_overlay_window(name: &WindowName) -> bool {
     let n = name.as_str();
     if !n.starts_with("team-agent:") {
         return false;
@@ -63,6 +67,7 @@ pub fn is_overlay_window(name: &WindowName) -> bool {
     n.contains(":overview")
 }
 
+///
 /// 0.3.28 Step 8 invariant: `spawn_split` may ONLY be called from the
 /// overlay module. This helper emits a warn-level event when called from
 /// anywhere else (Step 9 promotes to a hard error / panic gate). The

package/crates/team-agent/src/layout/placement.rs

@@ -1,3 +1,4 @@
+//!
 //! 0.3.28 layout step 4 — typed worker placement target.
 //!
 //! Python parity (`runtime.py:1017-1020`): one window per agent in the

package/crates/team-agent/src/layout/recovery.rs

@@ -1,3 +1,4 @@
+//!
 //! 0.3.28 layout step 7 — leader pane recovery.
 //!
 //! Python truth source (`leader/__init__.py:885-887` +
@@ -28,6 +29,7 @@ pub enum RecoveryOutcome {
     NeedsUserAttach,
 }
 
+///
 /// Compute the recovery outcome from the current environment.
 ///
 /// Reads `TMUX_PANE` from the supplied environment iterator (use
@@ -44,6 +46,7 @@ where
     RecoveryOutcome::NeedsUserAttach
 }
 
+///
 /// Emit the canonical `leader_receiver.rebind_required` event when the
 /// runtime falls through to `NeedsUserAttach`. Logs to stderr so operators
 /// see the cascade in event logs.

package/crates/team-agent/src/layout/runtime_sessions.rs

@@ -1,3 +1,4 @@
+//!
 //! unit-1 (Stage 1) — typed runtime session identity.
 //!
 //! Provides two compile-time-distinct newtypes plus a `RuntimeSessions`
@@ -35,7 +36,7 @@ pub struct LeaderLauncherSession(SessionName);
 
 /// Why `WorkerSession::new` rejected a name.
 #[derive(Debug, Clone, PartialEq, Eq)]
-pub enum WorkerSessionError {
+enum WorkerSessionError {
     /// The name is empty.
     Empty,
     /// The name carries the leader launcher prefix — must not be a worker
@@ -45,7 +46,7 @@ pub enum WorkerSessionError {
 
 /// Why `LeaderLauncherSession::new` rejected a name.
 #[derive(Debug, Clone, PartialEq, Eq)]
-pub enum LeaderLauncherSessionError {
+enum LeaderLauncherSessionError {
     /// The name is empty.
     Empty,
     /// The name does not carry the required leader launcher prefix.
@@ -136,6 +137,7 @@ pub enum RuntimeSessionAnomaly {
 }
 
 impl RuntimeSessions {
+    ///
     /// Read state.json's session-identity fields and wrap them in typed
     /// values. Never panics on bad state — anomalies are surfaced for
     /// callers to act on.
@@ -197,11 +199,13 @@ impl RuntimeSessions {
         }
     }
 
+    ///
     /// True if any session-identity anomaly was detected in state.
     pub fn has_anomalies(&self) -> bool {
         !self.anomalies.is_empty()
     }
 
+    ///
     /// True if a `state.session_name` looked like a leader launcher session
     /// — the exact 0.3.39 shape unit-3 must refuse before any kill.
     pub fn worker_session_name_is_leader_prefixed(&self) -> bool {
@@ -214,9 +218,10 @@ impl RuntimeSessions {
     }
 }
 
+///
 /// True when `name` is a leader launcher session (mirrors
 /// `layout::sessions::is_leader_session` on a raw &str).
-pub fn name_is_leader_launcher(name: &str) -> bool {
+fn name_is_leader_launcher(name: &str) -> bool {
     let session = SessionName::new(name);
     is_leader_session(&session)
 }

package/crates/team-agent/src/layout/sessions.rs

@@ -1,3 +1,4 @@
+//!
 //! 0.3.28 layout step 1 — session name constructors + topology invariant guard.
 //!
 //! Python 0.2.11 truth source (recap):
@@ -25,6 +26,7 @@ use serde_json::Value as JsonValue;
 /// code does not have to depend on the leader module's internals.
 pub const LEADER_SESSION_PREFIX: &str = crate::leader::start::LEADER_SESSION_PREFIX;
 
+///
 /// Leader's dedicated tmux session name.
 ///
 /// Format: `team-agent-leader-<provider_wire>-<folder>-<sha1(workspace)[:8]>`.
@@ -37,6 +39,7 @@ pub fn leader_session_name(provider: Provider, workspace: &Path) -> SessionName
     crate::leader::start::leader_session_name(provider, workspace)
 }
 
+///
 /// Worker tmux session name derived from the team spec.
 ///
 /// Format: `spec.runtime.session_name` if set, else `team-<team.name>`
@@ -48,13 +51,15 @@ pub fn worker_session_name(spec: &YamlValue) -> SessionName {
     crate::lifecycle::launch::worker_session_name_pub(spec)
 }
 
+///
 /// True when `name` starts with the leader session prefix.
 pub fn is_leader_session(name: &SessionName) -> bool {
     name.as_str().starts_with(LEADER_SESSION_PREFIX)
 }
 
+///
 /// True when `name` equals the worker session name derived from `spec`.
-pub fn is_worker_session(name: &SessionName, spec: &YamlValue) -> bool {
+fn is_worker_session(name: &SessionName, spec: &YamlValue) -> bool {
     worker_session_name(spec).as_str() == name.as_str()
 }
 
@@ -78,6 +83,7 @@ pub enum TopologyViolationKind {
     LeaderPaneIdCollidesWithAgent,
 }
 
+///
 /// Assert the runtime-state topology invariants (Step 1 — `warn!` only).
 ///
 /// Checks:
@@ -174,6 +180,7 @@ pub fn assert_topology_invariants(state: &JsonValue, spec: &YamlValue) -> Vec<To
     out
 }
 
+///
 /// Logs each violation in `violations` to stderr under the
 /// `team_agent::layout` tag. No-op when the list is empty. This is the
 /// Step-1 surface — `eprintln!` matches the codebase's existing logging

package/crates/team-agent/src/layout/tmux_endpoint.rs

@@ -1,3 +1,4 @@
+//!
 //! unit-9 (Stage 4) — tmux endpoint selection policy, separated from the
 //! concrete `TmuxBackend` execution layer.
 //!
@@ -55,6 +56,7 @@ pub struct TmuxEndpointSelection {
     pub source: TmuxEndpointSource,
 }
 
+///
 /// Pure policy: pick the tmux endpoint to use given a (maybe-present)
 /// `state.json` Value.
 ///
@@ -91,6 +93,7 @@ pub fn select_endpoint_from_state(state: Option<&Value>) -> Option<TmuxEndpointS
     None
 }
 
+///
 /// State-first endpoint selection with workspace fallback. Equivalent to
 /// what `tmux_backend_for_runtime_state_or_workspace` does internally,
 /// minus the backend construction.

package/crates/team-agent/src/layout/worker_env.rs

@@ -1,3 +1,4 @@
+//!
 //! 0.3.28 layout step 3 — worker spawn env (inherit-then-strip) + worker
 //! spawn cwd (YAML-only).
 //!
@@ -57,6 +58,7 @@ const WORKER_IDENTITY_EXACT: &[&str] = &["CLAUDECODE", "CLAUDE_EFFORT", "CODEX_T
 
 const WORKER_IDENTITY_PREFIXES: &[&str] = &["CLAUDE_CODE_"];
 
+///
 /// Build the worker spawn env per Python inherit-then-strip semantics.
 ///
 /// Inputs:
@@ -158,6 +160,7 @@ fn is_posix_shell_identifier(s: &str) -> bool {
     bytes.all(|b| b.is_ascii_alphanumeric() || b == b'_')
 }
 
+///
 /// Compute worker spawn cwd per Python semantics: YAML
 /// `agent.spawn_cwd` if set, else `workspace`. The persisted-state
 /// `agent.spawn_cwd` override (the pre-0.3.28 Rust extension that caused

package/crates/team-agent/src/layout/worker_window_helpers.rs

@@ -1,3 +1,4 @@
+//!
 //! 0.3.28 layout step 2 — small window grammar helper for layout-layer naming.
 //!
 //! Command/UI grammar, not provider identity parsing: leader window names
@@ -6,6 +7,7 @@
 
 use crate::model::enums::Provider;
 
+///
 /// Window name used inside the leader session. Mirrors
 /// Python's `leader_window_name = provider` (see
 /// `runtime/0.2.11/src/team_agent/leader/__init__.py:114-131`).

package/crates/team-agent/src/leader/helpers.rs

@@ -1,3 +1,4 @@
+//!
 //! leader 内部 helper —— provider/turn-state wire 串、JSON path 取值、rollout 读、
 //! workspace 路径归一 / session 文件夹消毒、uuid 前缀、时间戳、sha1。
 

package/crates/team-agent/src/leader/incident.rs

@@ -1,3 +1,4 @@
+//!
 #[derive(Debug, Clone, Copy, PartialEq, Eq)]
 pub enum LeaderIncident {
     LeaderAttached,