@team-agent/installer 0.5.65 → 0.5.68

package/crates/team-agent/src/messaging/tests/e23.rs

@@ -18,6 +18,15 @@ fn e23_fallback_pane_has_single_shared_noisy_surface() {
                 .unwrap(),
         "primary-ok guard must run before any fallback audit/inject attempt"
     );
+    let already = leader_receiver
+        .split("fn message_already_delivered")
+        .nth(1)
+        .unwrap_or("");
+    assert!(
+        already.contains("submitted_pending_acceptance")
+            && already.contains("injected_awaiting_receipt"),
+        "fallback already-delivered set must include the live post-submit statuses, not only the dead string submitted"
+    );
 }
 
 #[test]

package/crates/team-agent/src/messaging/tests/leader_inject_acceptance.rs

@@ -99,6 +99,72 @@ fn attached_leader_mailbox_is_rechecked_by_the_normal_delivery_tick() {
     assert!(case.events().contains("leader_receiver.mailbox_requeued"));
 }
 
+#[test]
+fn claimed_leader_delivery_revalidates_a_stale_unattached_snapshot() {
+    let workspace = tmp_ws("leader-inject-acceptance-stale-attach");
+    let rollout = workspace.join("leader.jsonl");
+    std::fs::write(&rollout, "").unwrap();
+    let current_state = serde_json::json!({
+        "active_team_key": "acceptance-team",
+        "session_name": "team-acceptance",
+        "leader_receiver": {
+            "pane_id": "%leader",
+            "status": "attached",
+            "provider": "claude",
+            "rollout_path": rollout,
+        },
+        "teams": {
+            "acceptance-team": {
+                "session_name": "team-acceptance",
+            }
+        }
+    });
+    crate::state::persist::save_runtime_state(&workspace, &current_state).unwrap();
+    let store = MessageStore::open(&workspace).unwrap();
+    let event_log = EventLog::new(&workspace);
+    let message_id = store
+        .create_message(
+            None,
+            "worker",
+            "leader",
+            "stale attach canary",
+            None,
+            false,
+            Some("acceptance-team"),
+        )
+        .unwrap();
+    let stale_state = serde_json::json!({
+        "active_team_key": "acceptance-team",
+        "teams": {
+            "acceptance-team": {
+                "session_name": "team-acceptance"
+            }
+        }
+    });
+    let transport = RecordingTransport::new("");
+
+    let outcome = deliver_pending_message(
+        &workspace,
+        &store,
+        &transport,
+        &message_id,
+        &event_log,
+        &stale_state,
+    )
+    .expect("delivery from stale coordinator snapshot");
+
+    assert_ne!(
+        outcome.reason,
+        Some(DeliveryRefusal::LeaderNotAttached),
+        "a claim made after attach must revalidate durable state before writing leader_not_attached"
+    );
+    assert_ne!(
+        outcome.message_status.0, "failed",
+        "a stale pre-attach snapshot must not strand the requeued row"
+    );
+    assert_eq!(transport.inject_count(), 1);
+}
+
 #[test]
 fn leader_submit_without_receipt_source_cannot_park_forever_without_a_completion_writer() {
     let case = Case::new_without_rollout("missing-receipt-source");

package/crates/team-agent/src/messaging/tests/main_preserved.rs

@@ -94,7 +94,7 @@ fn collect_result_file_ingests_valid_known_task_envelope_into_results() {
     .unwrap();
     std::fs::write(
         team.join("agents").join("w1.md"),
-        "---\nname: w1\nrole: Worker\nprovider: codex\nmodel: gpt-5.5\nauth_mode: subscription\ntools:\n  - mcp_team\n---\n\nW1.\n",
+        "---\nname: w1\nrole: Worker\nprovider: codex\nmodel: gpt-5.5\nauth_mode: subscription\ndangerously_skip_permissions: false\ntools:\n  - mcp_team\n---\n\nW1.\n",
     )
     .unwrap();
     let spec = crate::compiler::compile_team(&team).expect("compile collect team");

package/crates/team-agent/src/messaging/tests/mod.rs

@@ -296,6 +296,7 @@ impl Drop for EnvGuardMsg {
 }
 
 mod basic;
+mod dup_inject;
 mod e23;
 mod leader_channel;
 mod leader_inject_acceptance;

package/crates/team-agent/src/messaging/types.rs

@@ -5,7 +5,7 @@ use serde::{Deserialize, Serialize};
 
 use crate::model::enums::Provider;
 use crate::model::ids::{LeaderSessionUuid, OwnerEpoch, TaskId, TeamKey};
-use crate::transport::PaneId;
+use crate::transport::{PaneId, TurnVerification};
 
 use super::helpers::MessageStatusShadow;
 
@@ -308,6 +308,9 @@ pub struct DeliveryOutcome {
     pub reason: Option<DeliveryRefusal>,
     /// fallback / broadcast / fanout 等通道标注 (`channel` 字段)。
     pub channel: Option<String>,
+    /// 入箱 vs 开跑。None = 本路径没观测（JSON 必须落成 not_yet_observed，不得报开跑）。
+    /// Gap42：只是 metadata，不是投递闸门。
+    pub turn_verification: Option<TurnVerification>,
 }
 
 /// trust retry payload (card §45;`delivery.py:273` scheduled_events.payload_json 的 typed 视图)。

package/crates/team-agent/src/model/enums.rs

@@ -21,6 +21,12 @@ pub enum Provider {
     /// AGENTS.md + `COPILOT_CUSTOM_INSTRUCTIONS_DIRS` env(B2 灵魂件降级,§C2)。
     Copilot,
     GeminiCli,
+    /// Grok CLI (0.5.67 provider-adapter). Append system prompt via `--rules`,
+    /// bypass `--always-approve`, session `--session-id`.
+    Grok,
+    /// Cursor `agent` CLI (0.5.67 provider-adapter). Append system prompt via
+    /// workspace `.cursor/rules/*.mdc` (方案 1 变体), bypass `--force`.
+    CursorAgent,
     Fake,
 }
 
@@ -33,7 +39,8 @@ pub enum Provider {
 /// Provider support:
 ///   - claude / claude_code: low|medium|high|xhigh|max → `--effort <level>`
 ///   - codex: low|medium|high|xhigh (NOT max) → `-c model_reasoning_effort=<level>`
-///   - copilot / gemini_cli / fake: unsupported — warning event, no flag
+///   - grok: low|medium|high|xhigh (NOT max) → `--effort <level>`
+///   - copilot / gemini_cli / cursor_agent / fake: unsupported — warning event, no flag
 #[derive(Debug, Clone, Copy, PartialEq, Eq, Hash, Serialize, Deserialize)]
 pub enum ProviderEffort {
     #[serde(rename = "low")]
@@ -78,13 +85,15 @@ impl ProviderEffort {
     }
 
     /// True when the given provider supports this effort level. `max` is
-    /// Claude-only; other levels are supported by Claude and Codex, ignored
-    /// by Copilot/Gemini/Fake (warning emitted at runtime).
+    /// Claude-only; other levels are supported by Claude, Codex, and Grok.
+    /// Copilot/Gemini/CursorAgent/Fake ignore the field (warning at runtime).
     pub fn is_supported_by(self, provider: Provider) -> bool {
         match provider {
             Provider::Claude | Provider::ClaudeCode => true,
-            Provider::Codex => !self.is_claude_only(),
-            Provider::Copilot | Provider::GeminiCli | Provider::Fake => false,
+            Provider::Codex | Provider::Grok => !self.is_claude_only(),
+            Provider::Copilot | Provider::GeminiCli | Provider::CursorAgent | Provider::Fake => {
+                false
+            }
         }
     }
 }

package/crates/team-agent/src/model/permissions.rs

@@ -189,6 +189,9 @@ fn provider_enforcement(provider: Provider, tool: Tool) -> Enforcement {
             FsRead | FsWrite | FsList | ExecuteBash | GitDiff | ProviderBuiltin => Hard,
         },
         Provider::Fake => Hard,
+        // 0.5.67: grok/cursor_agent 无 deny-kind 概念 (同 codex 精神), 诚实
+        // prompt_only, 不替 provider 决。
+        Provider::Grok | Provider::CursorAgent => PromptOnly,
         // Copilot(C-2-1 cr verdict):execute_bash/fs_write/network/mcp_team = hard,
         // fs_read/fs_list/git_diff/provider_builtin = prompt_only(诚实:copilot 无
         // 对应 deny kind,framework 不替决,留给 provider prompt 控制;MUST-NOT-13)。

package/crates/team-agent/src/model/spec.rs

@@ -354,8 +354,31 @@ fn basic_schema_errors(spec: &Yaml) -> Vec<String> {
     );
     match spec.get("agents") {
         Some(Yaml::List(agents)) if !agents.is_empty() => {
+            // 0.5.66 bypass 单源:收集缺/错 `dangerously_skip_permissions` 的角色清单,
+            // 循环后一次性报出,满足"缺字段错误消息含每个缺字段的角色 id 清单"硬要求。
+            let mut missing_bypass: Vec<String> = Vec::new();
+            let mut bad_type_bypass: Vec<String> = Vec::new();
             for (idx, agent) in agents.iter().enumerate() {
                 check_agent(agent, &format!("/agents/{idx}"), &mut e);
+                match agent.get("dangerously_skip_permissions") {
+                    None => missing_bypass.push(agent_label(agent, idx)),
+                    Some(value) if !matches!(value, Yaml::Bool(_)) => {
+                        bad_type_bypass.push(agent_label(agent, idx))
+                    }
+                    Some(_) => {}
+                }
+            }
+            if !missing_bypass.is_empty() {
+                e.push(format!(
+                    "/agents/dangerously_skip_permissions: missing required field (role id(s): {}). This field must be declared explicitly; it controls whether the agent launches with permission prompts bypassed.",
+                    missing_bypass.join(", ")
+                ));
+            }
+            if !bad_type_bypass.is_empty() {
+                e.push(format!(
+                    "/agents/dangerously_skip_permissions: must be a boolean (role id(s): {}). This field must be declared explicitly; it controls whether the agent launches with permission prompts bypassed.",
+                    bad_type_bypass.join(", ")
+                ));
             }
         }
         _ => e.push("/agents: must be a non-empty list".to_string()),
@@ -384,7 +407,7 @@ fn check_agent(agent: &Yaml, path: &str, errors: &mut Vec<String>) {
         "working_directory",
         "system_prompt",
         "tools",
-        "permission_mode",
+        "dangerously_skip_permissions",
         "preferred_for",
         "avoid_for",
         "output_contract",
@@ -397,7 +420,7 @@ fn check_agent(agent: &Yaml, path: &str, errors: &mut Vec<String>) {
         "working_directory",
         "system_prompt",
         "tools",
-        "permission_mode",
+        "dangerously_skip_permissions",
         "preferred_for",
         "avoid_for",
         "output_contract",
@@ -407,6 +430,10 @@ fn check_agent(agent: &Yaml, path: &str, errors: &mut Vec<String>) {
         "profile",
         "credential_ref",
         "forked_from",
+        // 存量角色 md 的 `permission_mode` 是历史无效值(compiler 曾恒发 restricted)。
+        // 0.5.66 起不再被 compiler 消费;保留在 allowed 以免存量文件 fail-loud
+        // (§3.1 迁移时顺手删除,0.6.0 可收紧)。
+        "permission_mode",
         // 0.4.x provider effort MVP step 3: per-agent effort override (resolved at compile).
         "effort",
     ];
@@ -481,6 +508,15 @@ fn check_agent(agent: &Yaml, path: &str, errors: &mut Vec<String>) {
     }
 }
 
+/// 汇总错误里引用 agent 的可读标签:`<id>` 优先,退回 `<index> (role: <role>)`。
+fn agent_label(agent: &Yaml, idx: usize) -> String {
+    agent
+        .get("id")
+        .and_then(Yaml::as_str)
+        .map(|id| format!("`{id}`"))
+        .unwrap_or_else(|| format!("agents[{idx}]"))
+}
+
 fn check_routing(routing: Option<&Yaml>, errors: &mut Vec<String>) {
     check_keys_y(
         routing,
@@ -564,7 +600,6 @@ fn check_runtime(runtime: Option<&Yaml>, errors: &mut Vec<String>) {
         "max_active_agents",
         "startup_order",
         "display_backend",
-        "dangerous_auto_approve",
         "auto_attach_leader",
         "fast",
         "tick_interval_sec",
@@ -588,9 +623,6 @@ fn check_runtime(runtime: Option<&Yaml>, errors: &mut Vec<String>) {
             errors.push("/runtime/display_backend: invalid display backend".to_string());
         }
     }
-    if get("dangerous_auto_approve").is_some_and(|v| !matches!(v, Yaml::Bool(_))) {
-        errors.push("/runtime/dangerous_auto_approve: must be a boolean".to_string());
-    }
     if get("auto_trust_own_workspace").is_some_and(|v| !matches!(v, Yaml::Bool(_))) {
         errors.push("/runtime/auto_trust_own_workspace: must be a boolean".to_string());
     }
@@ -1020,6 +1052,58 @@ mod tests {
         );
     }
 
+    // 0.5.66 bypass 单源 §4.1:缺 `dangerously_skip_permissions` 字段 → 错误消息
+    // 必须列出每个缺字段的角色 id + 用户可读的必填说明。
+    #[test]
+    fn test_missing_dangerously_field_reports_role_list() {
+        // 从 fixture 文本里删掉第一个 agent 的字段,模拟该角色缺字段。
+        let text = include_str!("testdata/team.spec.yaml");
+        let without_first = text.replacen("    dangerously_skip_permissions: false\n", "", 1);
+        assert_ne!(text, without_first, "fixture must contain the field");
+        let spec = yaml::loads(&without_first).unwrap();
+        let errors = all_spec_errors(&spec);
+        let missing: Vec<&String> = errors
+            .iter()
+            .filter(|m| m.starts_with("/agents/dangerously_skip_permissions: missing"))
+            .collect();
+        assert_eq!(missing.len(), 1, "exactly one missing-field error, got: {errors:#?}");
+        assert!(
+            missing[0].contains("`codex_implementer`"),
+            "must name the role id, got: {}",
+            missing[0]
+        );
+        assert!(
+            missing[0].contains("This field must be declared explicitly; it controls whether the agent launches with permission prompts bypassed."),
+            "must carry the user-facing required-field message, got: {}",
+            missing[0]
+        );
+    }
+
+    // 0.5.66 bypass 单源 §4.1:非 bool 值 → fail-loud 类型错,同样带角色清单 + 硬串。
+    #[test]
+    fn test_invalid_dangerously_type_rejected() {
+        let text = include_str!("testdata/team.spec.yaml");
+        let bad = text.replacen("    dangerously_skip_permissions: false\n", "    dangerously_skip_permissions: \"yes\"\n", 1);
+        assert_ne!(text, bad, "fixture must contain the field");
+        let spec = yaml::loads(&bad).unwrap();
+        let errors = all_spec_errors(&spec);
+        let type_errs: Vec<&String> = errors
+            .iter()
+            .filter(|m| m.starts_with("/agents/dangerously_skip_permissions: must be a boolean"))
+            .collect();
+        assert_eq!(type_errs.len(), 1, "exactly one type error, got: {errors:#?}");
+        assert!(
+            type_errs[0].contains("`codex_implementer`"),
+            "must name the role id, got: {}",
+            type_errs[0]
+        );
+        assert!(
+            type_errs[0].contains("This field must be declared explicitly; it controls whether the agent launches with permission prompts bypassed."),
+            "must carry the user-facing required-field message, got: {}",
+            type_errs[0]
+        );
+    }
+
     #[test]
     fn empty_spec_matches_python_golden() {
         let spec = yaml::loads("{}").unwrap();
@@ -1050,4 +1134,43 @@ mod tests {
             ]
         );
     }
+
+    // 0.5.66 bypass 单源 §4.1:7 触发面共用同一 spec 校验层——compile_team 是它们的共同
+    // 必经点(quick-start/restart/add/fork 都调用),缺字段一律 fail-loud。此处验证
+    // compile 级校验确实 fail-loud,即各触发面(经 compile_team)都被覆盖。
+    #[test]
+    fn test_all_7_triggers_run_field_check() {
+        // compile_team 是 7 触发面的 spec 校验必经点:
+        //   quick-start(quick_start.rs:233 compile_team)
+        //   restart(rebuild.rs:3245 rebuild_runtime_spec_from_roles → compile_team)
+        //   add-agent(add_agent.rs:331 compile_role_agent)
+        //   clone-agent(clone_agent.rs:62 → add_agent)
+        //   fork-agent(fork_agent.rs:96 validate_spec)
+        //   start-agent / reset-agent(操作已编译 spec,团队创建时经 compile_team 校验)
+        // 验证 compile_team 对缺字段的角色文档 fail-loud。
+        let team = std::env::temp_dir().join(format!(
+            "ta-spec-7trigger-{}",
+            std::process::id()
+        ));
+        let _ = std::fs::remove_dir_all(&team);
+        std::fs::create_dir_all(team.join("agents")).unwrap();
+        std::fs::write(
+            team.join("TEAM.md"),
+            "---\nname: t7\nobjective: 7 trigger.\nprovider: codex\n---\n\nteam.\n",
+        )
+        .unwrap();
+        // 角色文档故意缺 dangerously_skip_permissions
+        std::fs::write(
+            team.join("agents").join("w.md"),
+            "---\nname: w\nrole: Worker\nprovider: codex\ntools:\n  - mcp_team\n---\n\nw.\n",
+        )
+        .unwrap();
+        let err = crate::compiler::compile_team(&team).unwrap_err().to_string();
+        assert!(
+            err.contains("missing front matter field dangerously_skip_permissions")
+                && err.contains("This field must be declared explicitly; it controls whether the agent launches with permission prompts bypassed."),
+            "compile_team must fail-loud on missing field (shared by all 7 triggers); got {err}"
+        );
+        let _ = std::fs::remove_dir_all(&team);
+    }
 }

package/crates/team-agent/src/model/testdata/spec_invalid_a.yaml

@@ -39,6 +39,7 @@ agents:
       - "provider_builtin"
       - "banana"
     permission_mode: "restricted"
+    dangerously_skip_permissions: false
     preferred_for:
       - "implementation"
       - "bug_fix"
@@ -69,6 +70,7 @@ agents:
       - "mcp_team"
       - "provider_builtin"
     permission_mode: "restricted"
+    dangerously_skip_permissions: false
     preferred_for:
       - "research"
       - "architecture"
@@ -99,6 +101,7 @@ agents:
       - "mcp_team"
       - "provider_builtin"
     permission_mode: "restricted"
+    dangerously_skip_permissions: false
     preferred_for:
       - "review"
       - "risk_check"
@@ -141,7 +144,6 @@ runtime:
   session_name: "teamspec-full-example"
   auto_launch: true
   require_user_approval_before_launch: true
-  dangerous_auto_approve: false
   max_active_agents: 3
   startup_order:
     - "codex_implementer"

package/crates/team-agent/src/model/testdata/team.spec.golden.yaml

@@ -38,6 +38,7 @@ agents:
       - "mcp_team"
       - "provider_builtin"
     permission_mode: "restricted"
+    dangerously_skip_permissions: false
     preferred_for:
       - "implementation"
       - "bug_fix"
@@ -68,6 +69,7 @@ agents:
       - "mcp_team"
       - "provider_builtin"
     permission_mode: "restricted"
+    dangerously_skip_permissions: false
     preferred_for:
       - "research"
       - "architecture"
@@ -98,6 +100,7 @@ agents:
       - "mcp_team"
       - "provider_builtin"
     permission_mode: "restricted"
+    dangerously_skip_permissions: false
     preferred_for:
       - "review"
       - "risk_check"
@@ -140,7 +143,6 @@ runtime:
   session_name: "teamspec-full-example"
   auto_launch: true
   require_user_approval_before_launch: true
-  dangerous_auto_approve: false
   max_active_agents: 3
   startup_order:
     - "codex_implementer"

package/crates/team-agent/src/model/testdata/team.spec.yaml

@@ -38,6 +38,7 @@ agents:
       - mcp_team
       - provider_builtin
     permission_mode: restricted
+    dangerously_skip_permissions: false
     preferred_for:
       - implementation
       - bug_fix
@@ -68,6 +69,7 @@ agents:
       - mcp_team
       - provider_builtin
     permission_mode: restricted
+    dangerously_skip_permissions: false
     preferred_for:
       - research
       - architecture
@@ -98,6 +100,7 @@ agents:
       - mcp_team
       - provider_builtin
     permission_mode: restricted
+    dangerously_skip_permissions: false
     preferred_for:
       - review
       - risk_check
@@ -140,7 +143,6 @@ runtime:
   session_name: teamspec-full-example
   auto_launch: true
   require_user_approval_before_launch: true
-  dangerous_auto_approve: false
   max_active_agents: 3
   startup_order:
     - codex_implementer

package/crates/team-agent/src/os_probe.rs

@@ -1,10 +1,31 @@
+//! ---
+//! purpose: 为运行时提供有界的进程输出读取与前台进程组探测
+//! contract:
+//!   provides:
+//!     - name: bounded_command_output_with_probe
+//!       what: 在固定超时内执行命令并读取 stdout，超时后终止子进程
+//!     - name: pane_foreground_and_root_pgrp
+//!       what: 读取 pane PID 的前台与根进程组 ID，无法判定时返回 None
+//!   depends:
+//!     - std
+//! boundary:
+//!   - 只负责有界探测、临时 stdout 文件的独占创建与清理
+//!   - 不决定 shutdown 状态，不重试探测，不修改调用方行为
+//! arch:
+//!   allowed_dependencies:
+//!     - std
+//! maturity: wired
+//! ---
+
 use std::cell::RefCell;
 use std::fs::OpenOptions;
 use std::io::{self, Read};
 use std::process::{Command, ExitStatus, Stdio};
+use std::sync::atomic::{AtomicU64, Ordering};
 use std::time::{Duration, Instant, SystemTime, UNIX_EPOCH};
 
 const DEFAULT_TIMEOUT: Duration = Duration::from_millis(900);
+static NEXT_TEMP_OUTPUT_ID: AtomicU64 = AtomicU64::new(0);
 
 thread_local! {
     static PROBE_TIMEOUT: RefCell<Option<ProbeTimeout>> = const { RefCell::new(None) };
@@ -23,19 +44,31 @@ pub(crate) struct BoundedCommandOutput {
     pub(crate) stdout: Vec<u8>,
 }
 
+/// ---
+/// purpose: 清除当前线程记录的探测超时
+/// ---
 pub(crate) fn clear_probe_timeout() {
     PROBE_TIMEOUT.with(|timeout| *timeout.borrow_mut() = None);
 }
 
+/// ---
+/// purpose: 判断当前线程是否记录了探测超时
+/// ---
 pub(crate) fn probe_timed_out() -> bool {
     PROBE_TIMEOUT.with(|timeout| timeout.borrow().is_some())
 }
 
+/// ---
+/// purpose: 获取当前线程记录的探测超时详情
+/// ---
 pub(crate) fn probe_timeout() -> Option<ProbeTimeout> {
     PROBE_TIMEOUT.with(|timeout| timeout.borrow().clone())
 }
 
 #[cfg(test)]
+/// ---
+/// purpose: 为单元测试设置探测超时详情
+/// ---
 pub(crate) fn set_probe_timeout_for_test(probe: &'static str, pid: Option<u32>, timeout_ms: u64) {
     PROBE_TIMEOUT.with(|current| {
         *current.borrow_mut() = Some(ProbeTimeout {
@@ -46,6 +79,9 @@ pub(crate) fn set_probe_timeout_for_test(probe: &'static str, pid: Option<u32>,
     });
 }
 
+/// ---
+/// purpose: 执行一个带默认超时与探测标识的命令并读取 stdout
+/// ---
 pub(crate) fn bounded_command_output_with_probe(
     command: &mut Command,
     probe: &'static str,
@@ -114,9 +150,14 @@ fn temp_output_path(kind: &str) -> std::path::PathBuf {
         .duration_since(UNIX_EPOCH)
         .map(|duration| duration.as_nanos())
         .unwrap_or(0);
+    temp_output_path_with_nanos(kind, nanos)
+}
+
+fn temp_output_path_with_nanos(kind: &str, nanos: u128) -> std::path::PathBuf {
+    let unique_id = NEXT_TEMP_OUTPUT_ID.fetch_add(1, Ordering::Relaxed);
     std::env::temp_dir().join(format!(
-        "team-agent-os-probe-{}-{nanos}.{kind}",
-        std::process::id()
+        "team-agent-os-probe-{}-{nanos}-{unique_id}.{kind}",
+        std::process::id(),
     ))
 }
 
@@ -146,6 +187,9 @@ fn read_and_remove(path: &std::path::Path) -> Vec<u8> {
 ///
 /// Bounded via [`run_bounded_command`] so a wedged ps cannot stall the
 /// coordinator tick.
+/// ---
+/// purpose: 读取 pane PID 的前台与根进程组 ID，无法判定时返回 None
+/// ---
 pub(crate) fn pane_foreground_and_root_pgrp(pane_pid: u32) -> io::Result<Option<(u32, u32)>> {
     let mut command = Command::new("ps");
     command.args(["-o", "tpgid=,pgid=", "-p", &pane_pid.to_string()]);
@@ -206,4 +250,31 @@ mod fg_pgrp_tests {
             pane_foreground_and_root_pgrp(0xFFFF_FFFE).expect("must not error on missing pid");
         assert!(result.is_none(), "missing pid → None");
     }
+
+    #[test]
+    fn temp_output_create_new_requires_atomic_discriminator() {
+        let fixed_nanos = 0x5eed_u128;
+        let first_path = temp_output_path_with_nanos("stdout", fixed_nanos);
+        let second_path = temp_output_path_with_nanos("stdout", fixed_nanos);
+        let _ = std::fs::remove_file(&first_path);
+        let _ = std::fs::remove_file(&second_path);
+
+        let first = OpenOptions::new()
+            .create_new(true)
+            .read(true)
+            .write(true)
+            .open(&first_path)
+            .expect("first atomic path create");
+        let second = OpenOptions::new()
+            .create_new(true)
+            .read(true)
+            .write(true)
+            .open(&second_path)
+            .expect("second atomic path create");
+        assert_ne!(first_path, second_path, "atomic discriminator must advance");
+        drop(first);
+        drop(second);
+        let _ = std::fs::remove_file(first_path);
+        let _ = std::fs::remove_file(second_path);
+    }
 }