@team-agent/installer 0.5.75 → 0.5.78

package/crates/team-agent/src/cli/profile.rs

@@ -20,17 +20,20 @@ pub fn cmd_profile(args: &ProfileArgs) -> Result<CmdResult, CliError> {
 fn init_profile(args: &ProfileArgs) -> Result<Value, CliError> {
     let auth_mode = args.auth_mode.as_deref().unwrap_or("subscription");
     validate_auth_mode(auth_mode)?;
+    let proxy_mode = args.proxy_mode.as_deref().unwrap_or("inherit");
+    validate_proxy_mode(proxy_mode)?;
     let dir = profile_dir(args);
     std::fs::create_dir_all(&dir)?;
     let path = dir.join(format!("{}.env", args.name));
     let template_path = dir.join(format!("{}.example.env", args.name));
-    let body = profile_template(&args.name, auth_mode);
+    let body = profile_template(&args.name, auth_mode, proxy_mode);
     let created_profile = write_new_file(&path, &body)?;
     if created_profile {
         set_owner_only_permissions(&path)?;
     }
     let created_template = write_new_file(&template_path, &body)?;
     write_boundary_files(&dir)?;
+    let actual_proxy_mode = display_proxy_mode(&read_profile_env(&path)?);
 
     let mut obj = Map::new();
     obj.insert("ok".to_string(), Value::Bool(true));
@@ -39,6 +42,14 @@ fn init_profile(args: &ProfileArgs) -> Result<Value, CliError> {
         "auth_mode".to_string(),
         Value::String(auth_mode.to_string()),
     );
+    obj.insert(
+        "proxy_mode".to_string(),
+        Value::String(actual_proxy_mode),
+    );
+    obj.insert(
+        "proxy_mode_changed".to_string(),
+        Value::Bool(created_profile),
+    );
     obj.insert("path".to_string(), path_value(&path));
     obj.insert("template_path".to_string(), path_value(&template_path));
     obj.insert("created_profile".to_string(), Value::Bool(created_profile));
@@ -72,6 +83,7 @@ fn doctor_profile(args: &ProfileArgs) -> Result<Value, CliError> {
     let values = read_profile_env(&path)?;
     let auth_mode =
         profile_value(&values, "AUTH_MODE").unwrap_or_else(|| "subscription".to_string());
+    let proxy_mode = display_proxy_mode(&values);
     let secret_keys = secret_keys_present(&values);
     let keys = sorted_keys(&values);
     let mut obj = Map::new();
@@ -83,6 +95,7 @@ fn doctor_profile(args: &ProfileArgs) -> Result<Value, CliError> {
         Value::Bool(credential_present(&values)),
     );
     obj.insert("auth_mode".to_string(), Value::String(auth_mode));
+    obj.insert("proxy_mode".to_string(), Value::String(proxy_mode));
     obj.insert("keys_present".to_string(), string_array(keys));
     obj.insert(
         "raw_file_read_allowed_for_agents".to_string(),
@@ -112,6 +125,7 @@ fn show_profile(args: &ProfileArgs) -> Result<Value, CliError> {
     let values = read_profile_env(&path)?;
     let auth_mode =
         profile_value(&values, "AUTH_MODE").unwrap_or_else(|| "subscription".to_string());
+    let proxy_mode = display_proxy_mode(&values);
     let secret_keys = secret_keys_present(&values);
     let missing_common = missing_common_keys(&values, &auth_mode);
     let mut obj = Map::new();
@@ -122,6 +136,7 @@ fn show_profile(args: &ProfileArgs) -> Result<Value, CliError> {
         Value::Bool(credential_present(&values)),
     );
     obj.insert("auth_mode".to_string(), Value::String(auth_mode));
+    obj.insert("proxy_mode".to_string(), Value::String(proxy_mode));
     obj.insert("values".to_string(), redacted_values(&values));
     obj.insert(
         "keys_present".to_string(),
@@ -157,12 +172,21 @@ fn validate_auth_mode(auth_mode: &str) -> Result<(), CliError> {
     }
 }
 
-fn profile_template(name: &str, auth_mode: &str) -> String {
+fn validate_proxy_mode(proxy_mode: &str) -> Result<(), CliError> {
+    match proxy_mode {
+        "direct" | "inherit" => Ok(()),
+        other => Err(CliError::Usage(format!(
+            "invalid --proxy-mode: {other} (expected direct|inherit)"
+        ))),
+    }
+}
+
+fn profile_template(name: &str, auth_mode: &str, proxy_mode: &str) -> String {
     match auth_mode {
         "compatible_api" | "official_api" => {
-            format!("AUTH_MODE={auth_mode}\nPROFILE_NAME={name}\nBASE_URL=\nAPI_KEY=\nMODEL=\n")
+            format!("AUTH_MODE={auth_mode}\nPROFILE_NAME={name}\nPROXY_MODE={proxy_mode}\nBASE_URL=\nAPI_KEY=\nMODEL=\n")
         }
-        _ => format!("AUTH_MODE=subscription\nPROFILE_NAME={name}\n"),
+        _ => format!("AUTH_MODE=subscription\nPROFILE_NAME={name}\nPROXY_MODE={proxy_mode}\n"),
     }
 }
 
@@ -235,6 +259,13 @@ fn profile_value(values: &Map<String, Value>, key: &str) -> Option<String> {
         .map(ToString::to_string)
 }
 
+fn display_proxy_mode(values: &Map<String, Value>) -> String {
+    profile_value(values, "PROXY_MODE")
+        .or_else(|| profile_value(values, "NETWORK_MODE"))
+        .map(|value| value.trim().to_ascii_lowercase())
+        .unwrap_or_else(|| "inherit".to_string())
+}
+
 fn missing_profile_value(args: &ProfileArgs, path: &Path, template_path: Option<&Path>) -> Value {
     let mut obj = Map::new();
     obj.insert("ok".to_string(), Value::Bool(false));

package/crates/team-agent/src/cli/spec.rs

@@ -159,6 +159,11 @@ pub(crate) struct CommandSpec {
     pub(crate) governance: Option<GovernanceNote>,
 }
 
+/// Visible default-help contract:
+/// - d40 / v0.5.77 published 15 names including `models` and excluding `results`.
+/// - `results` remains a public handler and must stay discoverable.
+/// - Exact composed set is d40 ∪ {results}. This is a frozen name set, not a
+///   numeric slack threshold.
 #[rustfmt::skip]
 pub(crate) const COMMAND_SPECS: &[CommandSpec] = &[
     CommandSpec { name: "quick-start", tier: CommandTier::Core, category: CommandCategory::Start, kind: CommandKind::Dispatch(DispatchKind::QuickStart), summary: "start or attach a team from TEAM.md", usage: "usage: team-agent quick-start [TEAMDIR] [--workspace WORKSPACE] [--name NAME] [--team-id TEAM|--team TEAM] [--yes] [--no-display] [--backend tmux|conpty] [--json]", default_help: true, command_help: true, suggestion_index: true, token_usage: TokenUsage::Conditional, alias_of: None, sunset: None, action: None, governance: None },
@@ -166,7 +171,7 @@ pub(crate) const COMMAND_SPECS: &[CommandSpec] = &[
     CommandSpec { name: "status", tier: CommandTier::Core, category: CommandCategory::Daily, kind: CommandKind::Dispatch(DispatchKind::Status), summary: "show current team status", usage: "usage: team-agent status [AGENT] [--workspace WORKSPACE] [--team TEAM] [--summary|--json] [--detail]", default_help: true, command_help: true, suggestion_index: true, token_usage: TokenUsage::No, alias_of: None, sunset: None, action: None, governance: None },
     CommandSpec { name: "models", tier: CommandTier::Core, category: CommandCategory::Observe, kind: CommandKind::Dispatch(DispatchKind::Models), summary: "list exact provider model ids", usage: "usage: team-agent models --provider pi [--search TEXT] [--json]", default_help: true, command_help: true, suggestion_index: true, token_usage: TokenUsage::No, alias_of: None, sunset: None, action: None, governance: None },
     CommandSpec { name: "collect", tier: CommandTier::Core, category: CommandCategory::Daily, kind: CommandKind::Dispatch(DispatchKind::Collect), summary: "collect reported results", usage: "usage: team-agent collect [--workspace WORKSPACE] [--team TEAM] [--result-file FILE] [--json]", default_help: true, command_help: true, suggestion_index: true, token_usage: TokenUsage::No, alias_of: None, sunset: None, action: None, governance: None },
-    CommandSpec { name: "results", tier: CommandTier::Core, category: CommandCategory::Daily, kind: CommandKind::Dispatch(DispatchKind::Results), summary: "read reported results for a case", usage: "usage: team-agent results --case CASE_ID [--workspace WORKSPACE] [--team TEAM] [--json]", default_help: false, command_help: true, suggestion_index: true, token_usage: TokenUsage::No, alias_of: None, sunset: None, action: None, governance: None },
+    CommandSpec { name: "results", tier: CommandTier::Core, category: CommandCategory::Daily, kind: CommandKind::Dispatch(DispatchKind::Results), summary: "read reported results for a case", usage: "usage: team-agent results --case CASE_ID [--workspace WORKSPACE] [--team TEAM] [--json]", default_help: true, command_help: true, suggestion_index: true, token_usage: TokenUsage::No, alias_of: None, sunset: None, action: None, governance: None },
     CommandSpec { name: "wait", tier: CommandTier::Core, category: CommandCategory::Daily, kind: CommandKind::Dispatch(DispatchKind::Wait), summary: "block until a task result is stored", usage: "usage: team-agent wait --task TASK [--workspace WORKSPACE] [--json]", default_help: false, command_help: true, suggestion_index: true, token_usage: TokenUsage::No, alias_of: None, sunset: None, action: None, governance: None },
     CommandSpec { name: "restart", tier: CommandTier::Core, category: CommandCategory::TeamLifecycle, kind: CommandKind::Dispatch(DispatchKind::Restart), summary: "restart the selected team", usage: "usage: team-agent restart [WORKSPACE] [--team TEAM] [--allow-fresh] [--session-converge-deadline SECONDS] [--json]", default_help: true, command_help: true, suggestion_index: true, token_usage: TokenUsage::Conditional, alias_of: None, sunset: None, action: None, governance: None },
     CommandSpec { name: "shutdown", tier: CommandTier::Core, category: CommandCategory::TeamLifecycle, kind: CommandKind::Dispatch(DispatchKind::Shutdown), summary: "stop the selected team", usage: "usage: team-agent shutdown [--workspace WORKSPACE] [--team TEAM] [--keep-logs] [--json]", default_help: true, command_help: true, suggestion_index: true, token_usage: TokenUsage::No, alias_of: None, sunset: None, action: None, governance: None },
@@ -201,7 +206,7 @@ pub(crate) const COMMAND_SPECS: &[CommandSpec] = &[
     CommandSpec { name: "clone-agent", tier: CommandTier::Secondary, category: CommandCategory::WorkerLifecycle, kind: CommandKind::Dispatch(DispatchKind::CloneAgent), summary: "clone a worker role into a fresh session", usage: "usage: team-agent clone-agent SOURCE_AGENT --as AGENT [--label LABEL] [--workspace WORKSPACE] [--team TEAM] [--no-display] [--json]", default_help: false, command_help: true, suggestion_index: false, token_usage: TokenUsage::Conditional, alias_of: None, sunset: None, action: None, governance: None },
     CommandSpec { name: "allow-peer-talk", tier: CommandTier::Secondary, category: CommandCategory::Setup, kind: CommandKind::Dispatch(DispatchKind::AllowPeerTalk), summary: "allow direct worker peer talk", usage: "usage: team-agent allow-peer-talk A B [--workspace WORKSPACE] [--json]", default_help: false, command_help: true, suggestion_index: false, token_usage: TokenUsage::No, alias_of: None, sunset: None, action: None, governance: Some(GovernanceNote { decision: "secondary", reason: "capability/config surface" }) },
     CommandSpec { name: "approvals", tier: CommandTier::Secondary, category: CommandCategory::Observe, kind: CommandKind::Dispatch(DispatchKind::Approvals), summary: "inspect provider approval state", usage: "usage: team-agent approvals [AGENT] [--workspace WORKSPACE] [--team TEAM] [--json]", default_help: false, command_help: true, suggestion_index: false, token_usage: TokenUsage::No, alias_of: None, sunset: None, action: None, governance: Some(GovernanceNote { decision: "secondary", reason: "approval diagnostics" }) },
-    CommandSpec { name: "profile", tier: CommandTier::Secondary, category: CommandCategory::Setup, kind: CommandKind::Dispatch(DispatchKind::Profile), summary: "manage provider profiles", usage: "usage: team-agent profile COMMAND NAME [--workspace WORKSPACE] [--team TEAM] [--auth-mode MODE] [--json]", default_help: false, command_help: true, suggestion_index: false, token_usage: TokenUsage::No, alias_of: None, sunset: None, action: None, governance: Some(GovernanceNote { decision: "secondary", reason: "provider/profile setup" }) },
+    CommandSpec { name: "profile", tier: CommandTier::Secondary, category: CommandCategory::Setup, kind: CommandKind::Dispatch(DispatchKind::Profile), summary: "manage provider profiles", usage: "usage: team-agent profile COMMAND NAME [--workspace WORKSPACE] [--team TEAM] [--auth-mode MODE] [--proxy-mode direct|inherit] [--json]", default_help: false, command_help: true, suggestion_index: false, token_usage: TokenUsage::No, alias_of: None, sunset: None, action: None, governance: Some(GovernanceNote { decision: "secondary", reason: "provider/profile setup" }) },
     CommandSpec { name: "install-skill", tier: CommandTier::Secondary, category: CommandCategory::Setup, kind: CommandKind::Dispatch(DispatchKind::InstallSkill), summary: "install or uninstall Team Agent skills", usage: "usage: team-agent install-skill (--source DIR | --uninstall) [--target codex|claude|copilot|all] [--dest DIR] [--dry-run] [--json]", default_help: false, command_help: true, suggestion_index: false, token_usage: TokenUsage::No, alias_of: None, sunset: None, action: None, governance: Some(GovernanceNote { decision: "secondary", reason: "capability setup" }) },
     CommandSpec { name: "inbox", tier: CommandTier::Secondary, category: CommandCategory::Observe, kind: CommandKind::Dispatch(DispatchKind::Inbox), summary: "inspect queued messages", usage: "usage: team-agent inbox AGENT [--workspace WORKSPACE] [--team TEAM] [--limit N] [--since CURSOR] [--json]", default_help: false, command_help: true, suggestion_index: false, token_usage: TokenUsage::No, alias_of: None, sunset: None, action: None, governance: None },