@team-agent/installer 0.5.65 → 0.5.66

package/crates/team-agent/src/tmux_backend.rs

@@ -2557,6 +2557,25 @@ impl Transport for TmuxBackend {
         Ok(SetEnvOutcome::Applied)
     }
 
+    fn set_window_option(
+        &self,
+        session: &SessionName,
+        window: &WindowName,
+        option: &str,
+        value: &str,
+    ) -> Result<(), TransportError> {
+        let target = format!("{}:{}", session.as_str(), window.as_str());
+        let argv = vec![
+            "tmux".to_string(),
+            "set-window-option".to_string(),
+            "-t".to_string(),
+            target,
+            option.to_string(),
+            value.to_string(),
+        ];
+        self.run_ok(&argv)
+    }
+
     fn kill_server(&self) -> Result<(), TransportError> {
         TmuxBackend::kill_server(self);
         Ok(())

package/crates/team-agent/src/transport/test_support.rs

@@ -35,6 +35,7 @@ struct OfflineState {
     calls: Vec<&'static str>,
     spawns: Vec<SpawnRecord>,
     pane_titles: Vec<(String, String, String, String)>,
+    window_options: Vec<(String, String)>,
     inject_targets: Vec<Target>,
     inject_payloads: Vec<String>,
     tmux_endpoint: Option<String>,
@@ -70,6 +71,7 @@ impl Default for OfflineState {
             calls: Vec::new(),
             spawns: Vec::new(),
             pane_titles: Vec::new(),
+            window_options: Vec::new(),
             inject_targets: Vec::new(),
             inject_payloads: Vec::new(),
             tmux_endpoint: None,
@@ -267,6 +269,10 @@ impl OfflineTransport {
         self.with_state(|state| state.pane_titles.clone())
     }
 
+    pub fn window_options(&self) -> Vec<(String, String)> {
+        self.with_state(|state| state.window_options.clone())
+    }
+
     pub fn inject_targets(&self) -> Vec<Target> {
         self.with_state(|state| state.inject_targets.clone())
     }
@@ -555,6 +561,20 @@ impl Transport for OfflineTransport {
         Ok(SetEnvOutcome::Applied)
     }
 
+    fn set_window_option(
+        &self,
+        _session: &SessionName,
+        _window: &WindowName,
+        option: &str,
+        value: &str,
+    ) -> Result<(), TransportError> {
+        self.with_state(|state| {
+            state.calls.push("set_window_option");
+            state.window_options.push((option.to_string(), value.to_string()));
+        });
+        Ok(())
+    }
+
     fn kill_session(&self, session: &SessionName) -> Result<(), TransportError> {
         self.with_state(|state| {
             state.calls.push("kill_session");

package/crates/team-agent/src/transport.rs

@@ -762,6 +762,23 @@ pub trait Transport: Send + Sync {
         value: &str,
     ) -> Result<SetEnvOutcome, TransportError>;
 
+    /// A-55 (window rename race): set a tmux per-window option (e.g.
+    /// `allow-rename off`, `automatic-rename off`) on an existing window.
+    /// tmux=`set-window-option -t SESSION:WINDOW`; non-tmux backends refuse
+    /// via the default (typed unsupported).
+    fn set_window_option(
+        &self,
+        _session: &SessionName,
+        _window: &WindowName,
+        _option: &str,
+        _value: &str,
+    ) -> Result<(), TransportError> {
+        Err(TransportError::MuxUnavailable {
+            backend: self.kind(),
+            detail: "set-window-option is tmux-only".to_string(),
+        })
+    }
+
     // —— LIFECYCLE(SL)——
 
     fn kill_server(&self) -> Result<(), TransportError> {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@team-agent/installer",
-  "version": "0.5.65",
+  "version": "0.5.66",
   "description": "npx installer for Team Agent",
   "keywords": [
     "codex",
@@ -20,9 +20,9 @@
     "team-agent-installer": "npm/install.mjs"
   },
   "optionalDependencies": {
-    "@team-agent/cli-darwin-arm64": "0.5.65",
-    "@team-agent/cli-darwin-x64": "0.5.65",
-    "@team-agent/cli-linux-x64": "0.5.65"
+    "@team-agent/cli-darwin-arm64": "0.5.66",
+    "@team-agent/cli-darwin-x64": "0.5.66",
+    "@team-agent/cli-linux-x64": "0.5.66"
   },
   "scripts": {
     "postinstall": "node npm/bincheck.mjs",

package/crates/team-agent/src/lifecycle/launch/approval.rs

@@ -1,134 +0,0 @@
-use std::path::Path;
-
-use crate::lifecycle::{DangerousApproval, DangerousApprovalSource, LifecycleError};
-
-/// `detect_inherited_dangerous_permissions`(`launch/config.py`):扫进程祖先链找
-/// `--dangerously-*` flag,产出危险审批继承态。launch 在 inherited=false 且无 --yes 时拒。
-pub fn detect_dangerous_approval() -> Result<DangerousApproval, LifecycleError> {
-    if let Ok(raw) = std::env::var("TEAM_AGENT_TEST_PROCESS_ANCESTRY_ARGV_JSON") {
-        let argv_tokens = serde_json::from_str::<Vec<String>>(&raw).map_err(|e| {
-            LifecycleError::StatePersist(format!("invalid test ancestry argv: {e}"))
-        })?;
-        return Ok(detect_dangerous_approval_in_argv(&argv_tokens)
-            .unwrap_or_else(disabled_dangerous_approval));
-    }
-    for argv_tokens in process_ancestry_argv(std::process::id()) {
-        if let Some(detected) = detect_dangerous_approval_in_argv(&argv_tokens) {
-            return Ok(detected);
-        }
-    }
-    Ok(disabled_dangerous_approval())
-}
-
-pub(super) fn disabled_dangerous_approval() -> DangerousApproval {
-    DangerousApproval {
-        enabled: false,
-        source: DangerousApprovalSource::Disabled,
-        inherited: false,
-        provider: None,
-        flag: None,
-        worker_capability_above_leader: false,
-        ancestry_binary_name: None,
-        unexpected_binary: false,
-    }
-}
-
-pub(super) fn detect_dangerous_approval_in_argv(
-    argv_tokens: &[String],
-) -> Option<DangerousApproval> {
-    let argv0 = argv_tokens.first().map(String::as_str).unwrap_or("");
-    let ancestry_binary_name = binary_name(argv0);
-    for token in argv_tokens {
-        for (provider, flag) in dangerous_leader_flags() {
-            if token == flag {
-                let unexpected_binary =
-                    !binary_matches_provider(provider, ancestry_binary_name.as_deref());
-                return Some(DangerousApproval {
-                    enabled: true,
-                    source: DangerousApprovalSource::LeaderProcess,
-                    inherited: true,
-                    provider: Some((*provider).to_string()),
-                    flag: Some((*flag).to_string()),
-                    worker_capability_above_leader: false,
-                    ancestry_binary_name,
-                    unexpected_binary,
-                });
-            }
-        }
-    }
-    None
-}
-
-pub(super) fn dangerous_leader_flags() -> &'static [(&'static str, &'static str)] {
-    // Process argv command grammar, not persisted provider identity parsing.
-    &[
-        ("claude", "--dangerously-skip-permissions"),
-        ("claude", "--dangerously-skip-permission"),
-        ("codex", "--dangerously-bypass-approvals-and-sandbox"),
-        // 0.3.27 P1 (E54 symptom 2): copilot's full-permission flags. Without
-        // these entries, a copilot leader running with --allow-all / --yolo would
-        // NOT propagate bypass to claude/codex workers because
-        // detect_dangerous_approval scans the coordinator's ancestor argv and
-        // only matches entries in THIS table.
-        ("copilot", "--allow-all"),
-        ("copilot", "--yolo"),
-    ]
-}
-
-pub(super) fn binary_matches_provider(provider: &str, binary: Option<&str>) -> bool {
-    // Binary-name command grammar, not provider identity parsing.
-    match (provider, binary) {
-        ("codex", Some("codex")) => true,
-        ("claude", Some("claude" | "claude-code" | "claude_code")) => true,
-        // 0.3.27 P1 (E54): copilot binary detection for dangerous-approval scan.
-        ("copilot", Some("copilot" | "github-copilot" | "gh-copilot")) => true,
-        _ => false,
-    }
-}
-
-pub(super) fn binary_name(argv0: &str) -> Option<String> {
-    Path::new(argv0)
-        .file_name()
-        .and_then(|v| v.to_str())
-        .filter(|s| !s.is_empty())
-        .map(str::to_string)
-}
-
-pub(super) fn process_ancestry_argv(pid: u32) -> Vec<Vec<String>> {
-    let mut out = Vec::new();
-    let mut current = pid;
-    let mut seen = std::collections::BTreeSet::new();
-    for _ in 0..12 {
-        if current == 0 || !seen.insert(current) {
-            break;
-        }
-        if let Some(argv_tokens) = process_argv_tokens(current) {
-            out.push(argv_tokens);
-        }
-        let Some(parent) = process_parent_pid(current) else {
-            break;
-        };
-        if parent <= 1 || parent == current {
-            break;
-        }
-        current = parent;
-    }
-    out
-}
-
-// 0.5.x Windows portability Batch 4: `process_argv_tokens` and
-// `process_parent_pid` route through `crate::platform::argv`. Unix
-// impls are byte-preserving (Linux `/proc/<pid>/cmdline`, macOS
-// `sysctl(KERN_PROCARGS2)`, other Unix `ps -p ... -o command=`).
-// Windows returns `None` per design §Batch 4 conservative anchor:
-// unknown argv must never infer elevated approval; callers already
-// treat `None` as "no elevation inherited" via
-// `disabled_dangerous_approval()`.
-
-pub(super) fn process_argv_tokens(pid: u32) -> Option<Vec<String>> {
-    crate::platform::argv::argv_tokens(pid)
-}
-
-pub(super) fn process_parent_pid(pid: u32) -> Option<u32> {
-    crate::platform::argv::parent_pid(pid)
-}