@team-agent/installer 0.5.65 → 0.5.68

package/crates/team-agent/src/lifecycle/restart/remove.rs

@@ -1,11 +1,49 @@
+//! ---
+//! purpose: 摘掉一席，含双确认门、六态一致性判定、原子摘除与字节级回滚快照
+//! contract:
+//!   provides:
+//!     - name: remove_agent
+//!       what: 从 spec、state、team_state 与 role 文件原子摘除一席
+//!     - name: remove_agent_flag_requirements
+//!       what: 只做前置判定，告诉调用方这次需要哪些确认标志
+//!     - name: ForceRecreateSnapshot
+//!       what: 强制重建用的快照，可在失败后恢复席位并清掉本事务新起的 pane
+//!     - name: resolve_seat
+//!       what: 由期望、持久与物理三源定出席位的唯一身份与一致性态
+//!     - name: spec_without_agent
+//!       what: 生成摘掉该席位后的 spec，并清掉指向它的路由与启动项
+//!   depends:
+//!     - crate::lifecycle::lock
+//!     - crate::lifecycle::restart::agent
+//!     - crate::lifecycle::restart::team_state
+//!     - crate::state::projection
+//!     - crate::transport::Transport
+//! boundary:
+//!   - 未给 from_spec 确认或运行中未给 force 时拒绝，不擅自摘除
+//!   - 物理身份必须收敛到唯一的 session 加 window 加 pane，全局同名窗口不算身份
+//!   - 只删托管目录下的角色副本，用户自带的 role 文件不删
+//! maturity: wired
+//! ---
 use super::agent::{resolve_team_scoped_state_or_refuse, start_agent_at_paths};
 use super::common::*;
 use super::team_state::write_team_state;
 use super::*;
 use crate::lifecycle::lock::{acquire_agent_lifecycle_lock, LifecycleLockRequest};
 
+/// ---
+/// purpose: 摘掉一席的对外入口，取生命周期锁后走实体实现
+/// params:
+///   from_spec: 确认同时从 spec 里摘掉
+///   force: 席位仍在运行时必须给出
+/// returns: 摘除结果
+/// errors: 选不到 team 返回 TeamSelect；确认标志不足或一致性态不允许时返回 RequirementUnmet；写盘失败返回 StatePersist
+/// contract_id: lifecycle.remove_agent.entry
+/// ---
 /// `remove_agent(workspace, agent_id, from_spec, force, team)`(`lifecycle/agents.py:22`)。
-/// 从 spec/state/team_state/agent_health 原子摘除；role markdown 是用户资产，始终保留。
+/// 从 spec/state/team_state/agent_health 原子摘除。
+/// 托管目录 `.team/dynamic-role-files/` 下的物化副本随席位清掉；托管目录之外的
+/// `--role-file` 仍是用户资产，不删。A-28 对托管文件「默认保留」的承诺已由
+/// `ledger.seat-supply-prereq` 推翻。
 /// `_RemoveRollback` 字节级快照回滚全部运行时变更。未传 from_spec 确认 / 运行中未传 force → 拒绝。
 pub fn remove_agent(
     workspace: &Path,
@@ -35,6 +73,12 @@ pub fn remove_agent(
     )
 }
 
+/// ---
+/// purpose: 带注入 transport 的摘席入口，自行取锁
+/// returns: 摘除结果
+/// errors: 同 remove_agent
+/// contract_id: lifecycle.remove_agent.entry
+/// ---
 pub(crate) fn remove_agent_with_transport(
     workspace: &Path,
     agent_id: &AgentId,
@@ -63,6 +107,12 @@ pub(crate) fn remove_agent_with_transport(
     )
 }
 
+/// ---
+/// purpose: 调用方已持有生命周期锁时的摘席入口，本函数不再取锁
+/// returns: 摘除结果
+/// errors: 同 remove_agent
+/// contract_id: lifecycle.remove_agent.entry
+/// ---
 pub(crate) fn remove_agent_with_transport_locked(
     workspace: &Path,
     agent_id: &AgentId,
@@ -93,6 +143,11 @@ pub(crate) struct ForceRecreateSnapshot {
 }
 
 impl ForceRecreateSnapshot {
+/// ---
+/// purpose: 为强制重建拍一份可回滚的快照
+/// returns: 含逻辑回滚数据与摘除前物理 pane 身份的快照
+/// errors: 选不到 team 或席位解析失败时返回 LifecycleError
+/// ---
     pub(crate) fn capture(
         workspace: &Path,
         agent_id: &AgentId,
@@ -126,6 +181,10 @@ impl ForceRecreateSnapshot {
         })
     }
 
+/// ---
+/// purpose: 按快照恢复席位的逻辑状态
+/// returns: 恢复过程中的错误描述列表，空表示恢复干净
+/// ---
     pub(crate) fn restore(
         &self,
         team: Option<&str>,
@@ -135,6 +194,10 @@ impl ForceRecreateSnapshot {
             .restore(&self.run_workspace, &self.spec_workspace, team, transport)
     }
 
+/// ---
+/// purpose: 旧 pane 已被消费后的恢复，先杀掉本次事务新起的 pane 再恢复逻辑快照
+/// returns: 错误描述列表；恢复干净时还会校验物理身份是否回到摘除前的 session 与窗口
+/// ---
     /// The old pane has already been consumed. Any exact pane now resolved for
     /// this seat belongs to this force-recreate transaction and must be removed
     /// before the logical snapshot is restored, otherwise rollback can leave a
@@ -193,6 +256,11 @@ impl ForceRecreateSnapshot {
         errors
     }
 
+/// ---
+/// purpose: 强制重建之后要求席位处于一致态
+/// returns: 一致时返回空值
+/// errors: 解析失败透传；解析出的一致性态不是 Coherent 时返回 StatePersist
+/// ---
     pub(crate) fn require_coherent(
         &self,
         agent_id: &AgentId,
@@ -217,6 +285,11 @@ impl ForceRecreateSnapshot {
     }
 }
 
+/// ---
+/// purpose: 只做前置判定，给出这次摘席需要哪些确认标志
+/// returns: 标志要求；不做任何摘除动作
+/// errors: 选不到 team 或席位解析失败时返回 LifecycleError
+/// ---
 pub fn remove_agent_flag_requirements(
     workspace: &Path,
     agent_id: &AgentId,
@@ -263,6 +336,13 @@ pub(super) struct ResolvedSeat {
     pub(super) consistency: SeatConsistency,
 }
 
+/// ---
+/// purpose: 由 spec、runtime state 与物理 pane 三源定出席位身份与一致性态
+/// params:
+///   transport: 已绑定该 team endpoint 的 transport
+/// returns: 席位解析结果，含所在 session、窗口、物理 pane 与六态之一的一致性判定
+/// errors: 团队作用域 state 取不到或 owner 门不过时返回 LifecycleError
+/// ---
 /// Resolve one seat from the selected team's desired, persisted and physical
 /// sources. The transport is already bound to the selected team's endpoint;
 /// physical identity is then narrowed to exactly one `(session, window, pane)`
@@ -552,6 +632,7 @@ fn remove_agent_inner(
     // after the stop (stop_agent persisted it); otherwise the originally-resolved projection drives the
     // removal. Either way we operate on the PROJECTION, never a raw load_runtime_state.
     let working_state = state;
+    let recorded_role_file = recorded_dynamic_role_file(&working_state, agent_id);
     let mut stopped = false;
     let mut cleared_locations = Vec::new();
     if force {
@@ -620,10 +701,16 @@ fn remove_agent_inner(
         "team.spec.yaml",
         None,
     )?;
-    // Role markdown is user-owned input, including files under the registered
-    // dynamic-role path. Removing a seat only unregisters runtime state/spec;
-    // cleanup is intentionally not part of the default operation.
-    let role_file_removed = false;
+    // Managed copies under `.team/dynamic-role-files/` are framework residue
+    // and must not block the next same-id clone. External --role-file paths
+    // stay user-owned. Classify by the path's directory (do not follow a
+    // last-component symlink); unlink with remove_file so only the link dies.
+    let role_file_removed = clear_managed_role_residue(
+        paths.run_workspace,
+        agent_id,
+        recorded_role_file.as_deref(),
+        &mut cleared_locations,
+    )?;
     let agent_health_deleted = delete_agent_health(paths.run_workspace, team_key, agent_id)?;
     cleared_locations.push(serde_json::json!("agent_health"));
     write_remove_step_event(
@@ -663,6 +750,94 @@ struct RemoveSuccess {
     cleared_locations: Vec<serde_json::Value>,
 }
 
+fn recorded_dynamic_role_file(
+    state: &serde_json::Value,
+    agent_id: &AgentId,
+) -> Option<std::path::PathBuf> {
+    state
+        .get("agents")
+        .and_then(|v| v.get(agent_id.as_str()))
+        .and_then(|v| v.get("dynamic_role_file"))
+        .and_then(|v| v.as_str())
+        .map(str::trim)
+        .filter(|s| !s.is_empty())
+        .map(std::path::PathBuf::from)
+}
+
+fn resolve_role_path(workspace: &Path, role_file: &Path) -> std::path::PathBuf {
+    if role_file.is_absolute() {
+        role_file.to_path_buf()
+    } else {
+        workspace.join(role_file)
+    }
+}
+
+fn default_managed_role_file(workspace: &Path, agent_id: &AgentId) -> std::path::PathBuf {
+    workspace
+        .join(".team")
+        .join("dynamic-role-files")
+        .join(format!("{}.md", agent_id.as_str()))
+}
+
+/// Same prefix rule as `role_source_ownership`, but canonicalize the parent
+/// only. Following the last component would classify a managed symlink whose
+/// target lives outside the managed dir as external, and leave residue.
+fn role_path_is_managed(workspace: &Path, role_file: &Path) -> bool {
+    let managed_root = workspace.join(".team").join("dynamic-role-files");
+    let Ok(root) = std::fs::canonicalize(&managed_root) else {
+        return false;
+    };
+    let abs = resolve_role_path(workspace, role_file);
+    let Some(parent) = abs.parent() else {
+        return false;
+    };
+    match std::fs::canonicalize(parent) {
+        Ok(parent_canon) => parent_canon.starts_with(&root),
+        Err(_) => false,
+    }
+}
+
+fn unlink_role_path(path: &Path) -> Result<bool, LifecycleError> {
+    match std::fs::symlink_metadata(path) {
+        Err(err) if err.kind() == std::io::ErrorKind::NotFound => Ok(false),
+        Err(err) => Err(LifecycleError::StatePersist(format!(
+            "inspect managed role file {}: {err}",
+            path.display()
+        ))),
+        Ok(_) => std::fs::remove_file(path).map(|_| true).map_err(|err| {
+            LifecycleError::StatePersist(format!(
+                "remove managed role file {}: {err}",
+                path.display()
+            ))
+        }),
+    }
+}
+
+fn clear_managed_role_residue(
+    workspace: &Path,
+    agent_id: &AgentId,
+    recorded: Option<&Path>,
+    cleared_locations: &mut Vec<serde_json::Value>,
+) -> Result<bool, LifecycleError> {
+    let target = match recorded {
+        Some(recorded) => {
+            let abs = resolve_role_path(workspace, recorded);
+            if !role_path_is_managed(workspace, &abs) {
+                return Ok(false);
+            }
+            abs
+        }
+        None => default_managed_role_file(workspace, agent_id),
+    };
+    if !unlink_role_path(&target)? {
+        return Ok(false);
+    }
+    let resource = target.to_string_lossy().into_owned();
+    write_remove_step_event(workspace, agent_id, "role_file", &resource, None)?;
+    cleared_locations.push(serde_json::json!(resource));
+    Ok(true)
+}
+
 fn write_remove_step_event(
     workspace: &Path,
     agent_id: &AgentId,
@@ -780,6 +955,13 @@ fn remove_agent_from_state(
     }
 }
 
+/// ---
+/// purpose: 在 state 里给该席位打上退役标记
+/// params:
+///   state: 就地写 agent_lifecycle 下该席位的状态、时间与原因
+/// returns: 已是退役态时幂等返回
+/// errors: state 根、agent_lifecycle 或该条目不是对象时返回 StatePersist
+/// ---
 pub(crate) fn mark_agent_retired_in_state(
     state: &mut serde_json::Value,
     agent_id: &AgentId,
@@ -814,6 +996,11 @@ pub(crate) fn mark_agent_retired_in_state(
     Ok(())
 }
 
+/// ---
+/// purpose: 清掉该席位的退役标记
+/// params:
+///   state: 就地删除；只有当前确为退役态才删
+/// ---
 pub(crate) fn clear_agent_retirement_in_state(state: &mut serde_json::Value, agent_id: &AgentId) {
     let Some(lifecycle) = state
         .get_mut("agent_lifecycle")
@@ -831,6 +1018,10 @@ pub(crate) fn clear_agent_retirement_in_state(state: &mut serde_json::Value, age
     }
 }
 
+/// ---
+/// purpose: 生成摘掉该席位后的 spec
+/// returns: 去掉该 agent、去掉它的启动项、并清掉指向它的路由引用后的 spec；spec 不是 map 时原样返回
+/// ---
 /// Build the persisted spec after removing one worker. Besides deleting the worker and startup entry,
 /// prune routing references that would otherwise point at the removed worker.
 pub(crate) fn spec_without_agent(spec: &YamlValue, agent_id: &AgentId) -> YamlValue {

package/crates/team-agent/src/lifecycle/restart/selection.rs

@@ -1,7 +1,39 @@
+//! ---
+//! purpose: restart 与 start 的纯决策层，定启动模式、first_send_at 分类与整队 resume 计划
+//! contract:
+//!   provides:
+//!     - name: decide_start_mode
+//!       what: 由 session_id 与 resume 依据决定 Resumed/Fresh/FreshAfterMissingRollout/Noop
+//!     - name: classify_first_send_at
+//!       what: 严格分类 first_send_at，绝不靠真值性
+//!     - name: restart_agent_has_context_to_preserve
+//!       what: 判断该席位是否有会被静默 fresh 丢掉的上下文
+//!     - name: classify_restart_plan
+//!       what: 纯计算出整队的 resume 决策、损坏条目与不可 resume 名单
+//!     - name: python_type_name
+//!       what: 给出与 Python 一致的类型名，用于审计载荷
+//!   depends:
+//!     - crate::provider::wire
+//! boundary:
+//!   - 纯计算，不 spawn、不 kill、不写盘
+//!   - 拒绝结论必须先于任何 teardown 产出，本层不执行任何破坏性动作
+//!   - 类型名用 Python 命名而非 serde 命名，保持与真相源一致
+//! maturity: wired
+//! ---
 use super::common::*;
 use super::*;
 use crate::provider::wire::{parse_canonical_provider, requires_resume_backing};
 
+/// ---
+/// purpose: 定出该席位这次的启动模式
+/// params:
+///   provider: provider wire 名，不支持 resume 时视为无 resume 依据
+///   session_id: 已记录的会话；为空直接 Fresh
+///   _rollout_path: 未参与判定
+///   rollout_exists: resume 依据是否存在
+///   allow_fresh: 依据缺失时是否允许改跑全新会话
+/// returns: 依据齐全为 Resumed；缺依据且允许时为 FreshAfterMissingRollout；缺依据且不允许时为 Noop
+/// ---
 /// bug-085 四象限 `start_mode` 决策(`start.py:179-188` + `_resume_rollout_missing` `start.py:66-69`),
 /// **从 start_agent 的整条 lock+spawn 路径里分离出的纯函数**(gate gap:porter 需要单元级 RED
 /// for `FreshAfterMissingRollout`,而 start_agent 全路径不可单测)。语义:
@@ -31,10 +63,20 @@ pub fn decide_start_mode(
     }
 }
 
+/// ---
+/// purpose: 判断该 provider 的 resume 是否必须有落盘依据
+/// returns: 能解析成规范 provider 且它要求依据时为 true
+/// ---
 pub(crate) fn resumable_provider_requires_backing(provider: &str) -> bool {
     parse_canonical_provider(provider).is_some_and(requires_resume_backing)
 }
 
+/// ---
+/// purpose: 严格分类 first_send_at 取值
+/// params:
+///   raw: 原始 JSON 值
+/// returns: 空值为 Absent，合法 ISO 时间串为 Valid，其余一切取值都是 Corrupt
+/// ---
 /// `first_send_at` 严格分类(`_classify_first_send_at`,`orchestration.py:399`)。
 /// **绝不靠 truthiness**:`""`/`0`/`False`/`"null"`/非 ISO → `Corrupt`。
 pub(crate) fn classify_first_send_at(raw: &serde_json::Value) -> FirstSendAtState {
@@ -54,6 +96,10 @@ pub(crate) fn classify_first_send_at(raw: &serde_json::Value) -> FirstSendAtStat
     }
 }
 
+/// ---
+/// purpose: 判断该席位是否有一旦静默 fresh 就会丢掉的上下文
+/// returns: first_send_at 合法、有 last_result_at 或标了已投递首任务，任一成立即 true
+/// ---
 /// RESTART-RESUME-001 (0.4.8): true if the agent has any signal of prior
 /// interaction whose context would be lost by silent fresh-start. Checks
 /// `first_send_at` (leader→worker delivery), `last_result_at` (worker
@@ -90,6 +136,12 @@ pub(crate) fn restart_agent_has_context_to_preserve(agent: &serde_json::Value) -
         .unwrap_or(false)
 }
 
+/// ---
+/// purpose: 判断该席位从未被捕获过会话，因而可以安全地直接 fresh
+/// params:
+///   session_id: 外部已知的会话 id，与席位行里的一并检查
+/// returns: 无会话且无待保留上下文时为 true
+/// ---
 /// RESTART-RESUME-001: an agent is "never-captured" when its session_id is
 /// absent AND there is no context to preserve. Such an agent is safe to
 /// auto-fresh without `--allow-fresh` and should NOT be required to capture
@@ -154,6 +206,10 @@ fn normalize_iso_separator(raw: &str) -> String {
     out
 }
 
+/// ---
+/// purpose: 给出与 Python 一致的类型名
+/// returns: NoneType、str、bool、list、dict、int 或 float
+/// ---
 /// Python `type(value).__name__` 映射(`orchestration.py:446`):corrupt first_send_at
 /// 条目的 `raw_first_send_at_type` golden。锁死跨语言一致:`null→"NoneType"`、`""/"x"→"str"`、
 /// `0/123→"int"`、`false→"bool"`、`[]→"list"`、`{}→"dict"`、float→`"float"`。
@@ -176,6 +232,14 @@ pub(crate) fn python_type_name(value: &serde_json::Value) -> &'static str {
     }
 }
 
+/// ---
+/// purpose: 纯计算出整队的 restart 计划
+/// params:
+///   allow_fresh: 允许无会话席位改跑全新会话
+/// returns: 每个非 paused 席位的 resume 决策、损坏的 first_send_at 条目与不可 resume 名单
+/// errors: 计算过程中的错误以 LifecycleError 返回
+/// contract_id: lifecycle.selection.classify_restart_plan
+/// ---
 /// Route B 全量验证(纯计算,**无破坏性副作用**;`_emit_resume_decisions` +
 /// `_collect_corrupt_first_send_at`,`orchestration.py:430/467`)。读 fixture state 的
 /// `agents.<id>`,对每非 paused worker:
@@ -193,6 +257,14 @@ pub(crate) fn classify_restart_plan(
     classify_restart_plan_with_resume_validation(None, state, allow_fresh)
 }
 
+/// ---
+/// purpose: 同上，并可带 workspace 以校验 resume 依据是否真的在盘上
+/// params:
+///   workspace: 给出时才做落盘依据校验
+/// returns: 同 classify_restart_plan
+/// errors: 计算过程中的错误以 LifecycleError 返回
+/// contract_id: lifecycle.selection.classify_restart_plan
+/// ---
 pub(crate) fn classify_restart_plan_with_resume_validation(
     workspace: Option<&Path>,
     state: &serde_json::Value,

package/crates/team-agent/src/lifecycle/restart/team_state.rs

@@ -1,5 +1,27 @@
+//! ---
+//! purpose: 把 spec 与 runtime state 渲染成人读的 team_state.md
+//! contract:
+//!   provides:
+//!     - name: write_team_state
+//!       what: 按固定版式写出目标、成员、任务图、阻塞与下一步
+//!   depends:
+//!     - crate::model::yaml
+//!     - std::fs
+//! boundary:
+//!   - 只渲染与落盘，不改 runtime state
+//!   - 版式与分节顺序是对外契约，不随手调整
+//! maturity: wired
+//! ---
 use super::*;
 
+/// ---
+/// purpose: 渲染并写出 team_state.md
+/// params:
+///   spec: 提供团队名、目标、成员与兜底任务列表
+///   state: 提供 session 名、leader 收件端、各席位状态与任务实况，任务以 state 为先
+/// returns: 写出的文件路径，路径取 spec 的 context.state_file，缺省为 team_state.md
+/// errors: 建目录或写文件失败时返回 StatePersist
+/// ---
 pub(crate) fn write_team_state(
     workspace: &Path,
     spec: &YamlValue,

package/crates/team-agent/src/lifecycle/restart.rs

@@ -1,3 +1,21 @@
+//! ---
+//! purpose: restart 子模块的装配层，转出单席起停重置删、整队重建、plan halt 与 status
+//! contract:
+//!   provides:
+//!     - name: lifecycle_run_workspace
+//!       what: 把入参 workspace 归一成 canonical run workspace
+//!     - name: input_has_no_local_team_context
+//!       what: 入口早退门，判断给定目录附近有没有本地 team 上下文
+//!   depends:
+//!     - crate::model::paths
+//!     - crate::state::selector
+//!     - crate::state::persist
+//!     - crate::tmux_backend
+//! boundary:
+//!   - 本文件只做装配与路径解析，真正的行为在 agent/rebuild/remove/selection 等子文件
+//!   - 不直接拼 provider 命令，也不直接操作 pane
+//! maturity: wired
+//! ---
 //!
 //! lifecycle::restart —— 单 worker 起/停/重置/删 + 整队 Route B 重建 + plan halt/status。
 
@@ -92,6 +110,11 @@ pub use selection::decide_start_mode;
 pub(crate) use selection::classify_restart_plan_with_resume_validation;
 pub(crate) use team_state::write_team_state;
 
+/// ---
+/// purpose: 把调用方给的 workspace 归一成 canonical run workspace
+/// returns: 归一后的绝对路径
+/// errors: 归一失败时返回 StatePersist
+/// ---
 pub(crate) fn lifecycle_run_workspace(
     workspace: &Path,
 ) -> Result<std::path::PathBuf, LifecycleError> {
@@ -142,6 +165,12 @@ fn lifecycle_paths(workspace: &Path, team: Option<&str>) -> Result<LifecyclePath
     })
 }
 
+/// ---
+/// purpose: 判断给定目录既不含 team spec、也不含 .team、也不含 runtime state，且不在 .team 内外一层
+/// params:
+///   workspace: 已经过 canonical_run_workspace 归一的路径
+/// returns: true 表示这里没有本地 team 上下文，调用方应早退
+/// ---
 pub(crate) fn input_has_no_local_team_context(workspace: &Path) -> bool {
     !workspace.join("team.spec.yaml").exists()
         && !workspace.join(".team").exists()

package/crates/team-agent/src/lifecycle/tests/acceptance_b_batch_red.rs

@@ -393,7 +393,7 @@ fn write_min_team(ws: &Path, name: &str) -> PathBuf {
     .unwrap();
     std::fs::write(
         team.join("agents/worker_a.md"),
-        "---\nname: worker_a\nrole: Worker\nprovider: codex\nmodel: gpt-5.5\nauth_mode: subscription\ntools:\n  - mcp_team\n---\n\nWorker.\n",
+        "---\nname: worker_a\nrole: Worker\nprovider: codex\nmodel: gpt-5.5\nauth_mode: subscription\ndangerously_skip_permissions: false\ntools:\n  - mcp_team\n---\n\nWorker.\n",
     )
     .unwrap();
     team

package/crates/team-agent/src/lifecycle/tests/agent_ops.rs

@@ -269,9 +269,8 @@ fn lanea_fork_agent_duplicate_target_is_already_exists_before_session_check() {
         fork_agent(&ws, &aid("alpha"), &aid("bravo"), None, false, None)
     );
     assert!(
-        text.contains("already exists"),
-        "fork_agent must reject a DUPLICATE target 'bravo' as 'agent id already exists' BEFORE the session-id \
-         check (golden precedence, the first guard); the stub returns 'source session_id is missing'; got {text}"
+        text.contains("unverified") || text.contains("未验证") || text.contains("refuses --as"),
+        "codex fork is unverified in-window; duplicate --as is not reached. got {text}"
     );
 }
 
@@ -330,7 +329,7 @@ fn add_agent_joins_w2_into_running_roster_and_existing_session() {
     let role_file = team_dir.join("w2-role.md");
     std::fs::write(
         &role_file,
-        "---\nname: w2\nrole: Worker Two\nprovider: codex\nmodel: gpt-5.5\nauth_mode: subscription\ntools:\n  - mcp_team\n---\n\nWorker two.\n",
+        "---\nname: w2\nrole: Worker Two\nprovider: codex\nmodel: gpt-5.5\nauth_mode: subscription\ndangerously_skip_permissions: false\ntools:\n  - mcp_team\n---\n\nWorker two.\n",
     )
     .unwrap();
     let transport = OfflineTransport::new().with_session_present(true);

package/crates/team-agent/src/lifecycle/tests/behavioral_diff_264_red.rs

@@ -528,7 +528,7 @@ fn write_team(workspace: &Path, fixture: &TeamFixture<'_>) -> PathBuf {
         std::fs::write(
             team.join("agents").join(format!("{}.md", agent.id)),
             format!(
-                "---\nname: {}\nrole: {}\nprovider: {}\n{model}auth_mode: {}\n{profile}tools:\n{tools}---\n\n{}\n",
+                "---\nname: {}\nrole: {}\nprovider: {}\n{model}auth_mode: {}\n{profile}dangerously_skip_permissions: false\ntools:\n{tools}---\n\n{}\n",
                 agent.id, agent.role, agent.provider, agent.auth_mode, agent.body
             ),
         )

package/crates/team-agent/src/lifecycle/tests/claude_compatible_config_red.rs

@@ -152,14 +152,14 @@ fn write_claude_profile_team(ws: &Path, team_key: &str, agent_id: &str) -> PathB
     std::fs::write(
         team.join("TEAM.md"),
         format!(
-            "---\nname: {team_key}\nobjective: Claude compatible config contract.\nprovider: claude\nauth_mode: compatible_api\n---\n\nTeam.\n"
+            "---\nname: {team_key}\nobjective: Claude compatible config contract.\nprovider: claude\nauth_mode: compatible_api\ndangerously_skip_permissions: false\n---\n\nTeam.\n"
         ),
     )
     .unwrap();
     std::fs::write(
         team.join("agents").join(format!("{agent_id}.md")),
         format!(
-            "---\nname: {agent_id}\nrole: Claude Worker\nprovider: claude\nauth_mode: compatible_api\nprofile: local\nmodel: null\ntools:\n  - mcp_team\n---\n\nWorker.\n"
+            "---\nname: {agent_id}\nrole: Claude Worker\nprovider: claude\nauth_mode: compatible_api\ndangerously_skip_permissions: false\nprofile: local\nmodel: null\ntools:\n  - mcp_team\n---\n\nWorker.\n"
         ),
     )
     .unwrap();

package/crates/team-agent/src/lifecycle/tests/claude_profile_launch_red.rs

@@ -218,14 +218,14 @@ fn write_claude_profile_team(ws: &Path, team_key: &str, agent_id: &str) -> PathB
     std::fs::write(
         team.join("TEAM.md"),
         format!(
-            "---\nname: {team_key}\nobjective: Claude compatible profile launch contract.\nprovider: claude\nauth_mode: compatible_api\n---\n\nTeam.\n"
+            "---\nname: {team_key}\nobjective: Claude compatible profile launch contract.\nprovider: claude\nauth_mode: compatible_api\ndangerously_skip_permissions: false\n---\n\nTeam.\n"
         ),
     )
     .unwrap();
     std::fs::write(
         team.join("agents").join(format!("{agent_id}.md")),
         format!(
-            "---\nname: {agent_id}\nrole: Claude Worker\nprovider: claude\nauth_mode: compatible_api\nprofile: local\nmodel: null\ntools:\n  - mcp_team\n---\n\nWorker.\n"
+            "---\nname: {agent_id}\nrole: Claude Worker\nprovider: claude\nauth_mode: compatible_api\ndangerously_skip_permissions: false\nprofile: local\nmodel: null\ntools:\n  - mcp_team\n---\n\nWorker.\n"
         ),
     )
     .unwrap();
@@ -247,14 +247,14 @@ fn write_claude_subscription_profile_team(ws: &Path, team_key: &str, agent_id: &
     std::fs::write(
         team.join("TEAM.md"),
         format!(
-            "---\nname: {team_key}\nobjective: Claude subscription profile launch contract.\nprovider: claude\nauth_mode: subscription\n---\n\nTeam.\n"
+            "---\nname: {team_key}\nobjective: Claude subscription profile launch contract.\nprovider: claude\nauth_mode: subscription\ndangerously_skip_permissions: false\n---\n\nTeam.\n"
         ),
     )
     .unwrap();
     std::fs::write(
         team.join("agents").join(format!("{agent_id}.md")),
         format!(
-            "---\nname: {agent_id}\nrole: Claude Worker\nprovider: claude\nauth_mode: subscription\nprofile: local\nmodel: null\ntools:\n  - mcp_team\n---\n\nWorker.\n"
+            "---\nname: {agent_id}\nrole: Claude Worker\nprovider: claude\nauth_mode: subscription\ndangerously_skip_permissions: false\nprofile: local\nmodel: null\ntools:\n  - mcp_team\n---\n\nWorker.\n"
         ),
     )
     .unwrap();