@team-agent/installer 0.5.84 → 0.5.86

package/Cargo.lock

@@ -581,7 +581,7 @@ dependencies = [
 
 [[package]]
 name = "team-agent"
-version = "0.5.84"
+version = "0.5.86"
 dependencies = [
  "anyhow",
  "chrono",

package/Cargo.toml

@@ -9,7 +9,7 @@ members = ["crates/team-agent", "crates/win-conpty-phase0", "crates/conpty-trans
 
 [workspace.package]
 edition = "2021"
-version = "0.5.84"
+version = "0.5.86"
 license = "AGPL-3.0"
 rust-version = "1.95"
 

package/crates/team-agent/src/cli/mod.rs

@@ -3646,7 +3646,6 @@ pub mod lifecycle_port {
                     dry_run: false,
                     tmux_endpoint: None,
                     routes: Vec::new(),
-                    permissions: Vec::new(),
                     leader_receiver_attached: true,
                     leader_bind_stage: None,
                     leader_bind_reason: None,

package/crates/team-agent/src/cli/profile.rs

@@ -222,18 +222,10 @@ fn set_owner_only_permissions(path: &Path) -> Result<(), CliError> {
 
 fn read_profile_env(path: &Path) -> Result<Map<String, Value>, CliError> {
     let raw = std::fs::read_to_string(path)?;
-    let mut values = Map::new();
-    for line in raw.lines() {
-        let trimmed = line.trim();
-        if trimmed.is_empty() || trimmed.starts_with('#') {
-            continue;
-        }
-        let Some((key, value)) = trimmed.split_once('=') else {
-            continue;
-        };
-        values.insert(key.to_string(), Value::String(value.to_string()));
-    }
-    Ok(values)
+    Ok(crate::lifecycle::profile_launch::parse_env_text(&raw)
+        .into_iter()
+        .map(|(key, value)| (key, Value::String(value)))
+        .collect())
 }
 
 fn redacted_values(values: &Map<String, Value>) -> Value {

package/crates/team-agent/src/cli/tests/verb_profile.rs

@@ -322,3 +322,69 @@ fn profile_show_routes_and_preserves_redacted_secret_contract() {
     );
     let _ = std::fs::remove_dir_all(&ws);
 }
+
+#[test]
+fn config_authority_t04_show_doctor_and_runtime_parse_the_same_profile_bytes() {
+    let ws = tmp_workspace();
+    let runtime_dir = ws.join(".team/runtime");
+    std::fs::remove_dir(&runtime_dir).unwrap();
+    assert!(
+        !runtime_dir.exists(),
+        "T04 fixture must start without a runtime directory"
+    );
+    let dir = profiles_dir(&ws);
+    std::fs::create_dir_all(&dir).unwrap();
+    let body = "# synthetic fixture\nexport AUTH_MODE = 'compatible_api'\nPROXY_MODE=inherit\nexport PROXY_MODE = \"direct\"\nMODEL = 'synthetic-model'\nBASE_URL = \"http://127.0.0.1:9/v1\"\nexport API_KEY = 'synthetic-secret-placeholder'\nPLAIN=plain\nBAD-KEY=ignored\n1BAD=ignored\nMISSING_EQUALS\n";
+    std::fs::write(dir.join("syntax.env"), body).unwrap();
+    let runtime = crate::lifecycle::profile_launch::load_profile(&ws, "syntax", None).unwrap();
+    assert!(
+        !runtime_dir.exists(),
+        "load_profile must not create the runtime directory"
+    );
+    for (key, value) in [
+        ("AUTH_MODE", "compatible_api"),
+        ("PROXY_MODE", "direct"),
+        ("MODEL", "synthetic-model"),
+        ("PLAIN", "plain"),
+    ] {
+        assert_eq!(runtime.values.get(key).map(String::as_str), Some(value));
+    }
+    assert!(!runtime.values.contains_key("BAD-KEY"));
+    assert!(!runtime.values.contains_key("1BAD"));
+    for command in ["show", "doctor"] {
+        let result = cmd_profile(&ProfileArgs {
+            command: command.into(),
+            name: "syntax".into(),
+            workspace: ws.clone(),
+            team: None,
+            auth_mode: None,
+            proxy_mode: None,
+            json: true,
+        })
+        .unwrap();
+        let CmdOutput::Json(output) = result.output else {
+            panic!("expected JSON")
+        };
+        assert!(
+            !runtime_dir.exists(),
+            "profile {command} must not create the runtime directory"
+        );
+        assert_eq!(output["auth_mode"], runtime.values["AUTH_MODE"]);
+        assert_eq!(output["proxy_mode"], runtime.values["PROXY_MODE"]);
+        assert_eq!(output["credential_present"], true);
+        assert_eq!(output["secret_values_printed"], false);
+        assert!(!output.to_string().contains("synthetic-secret-placeholder"));
+        assert!(!output.to_string().contains("BAD-KEY"));
+        if command == "show" {
+            assert_eq!(output["values"]["MODEL"]["value"], "synthetic-model");
+            assert_eq!(output["values"]["API_KEY"]["redacted"], true);
+            assert_eq!(output["missing_common"], serde_json::json!([]));
+        }
+    }
+    assert_eq!(
+        std::fs::read_to_string(dir.join("syntax.env")).unwrap(),
+        body
+    );
+    assert!(!dir.join("syntax.example.env").exists());
+    assert!(!ws.join(".team/runtime").exists());
+}

package/crates/team-agent/src/compiler/tests.rs

@@ -190,7 +190,7 @@ fn front_matter_non_object_errors() {
 // separators=(",",":"))` with the workspace path templated to __WS__.
 // (team-agent-public v0.2.11, /tmp/probe_compiler.py.)
 
-const BASE_NOPROFILE_JSON: &str = r#"{"version":1,"team":{"name":"doc-team","mode":"supervisor_worker","objective":"Compile role docs.","workspace":"__WS__"},"leader":{"id":"leader","role":"leader","provider":"codex","model":"gpt-5.5","tools":["fs_read","fs_list","mcp_team"],"context_policy":{"keep_user_thread":true,"receive_worker_outputs":"business_messages_and_short_summaries","max_worker_result_tokens":2000}},"agents":[{"id":"implementer","role":"Implementation Engineer","provider":"codex","model":"gpt-5.5","auth_mode":"subscription","working_directory":"__WS__","system_prompt":{"inline":"Implement bounded tasks and report result_envelope_v1.","file":null},"tools":["fs_read","fs_write","execute_bash","mcp_team"],"dangerously_skip_permissions":false,"communication_mode":"leader_centric","preferred_for":["implementer","Implementation Engineer"],"avoid_for":[],"output_contract":{"format":"result_envelope_v1","required_fields":["task_id","status","summary","artifacts"]}}],"routing":{"default_assignee":"implementer","rules":[{"id":"route-implementer","match":{"assignee":["implementer"]},"assign_to":"implementer","priority":10}]},"communication":{"protocol":"mcp_inbox","topology":"leader_centered","worker_to_worker":true,"ack_timeout_sec":60,"result_format":"result_envelope_v1","message_store":{"sqlite":".team/runtime/team.db","mirror_files":".team/messages"}},"runtime":{"backend":"tmux","display_backend":"adaptive","session_name":"team-doc-team","auto_launch":true,"require_user_approval_before_launch":true,"max_active_agents":1,"startup_order":["implementer"],"fast":false,"tick_interval_sec":2,"push_min_interval_sec":60,"stuck_timeout_sec":300},"context":{"state_file":"team_state.md","artifact_dir":".team/artifacts","log_dir":".team/logs","summarization":{"worker_full_logs":"retain_outside_leader_context","state_update":"after_each_result"}},"tasks":[{"id":"task_initial","title":"Initial document-driven team task","type":"implementation","assignee":"implementer","deps":[],"acceptance":["Worker reports valid result_envelope_v1"],"status":"pending","requires_tools":["mcp_team"],"files":[],"risk":"low"}]}"#;
+const BASE_NOPROFILE_JSON: &str = r#"{"version":1,"team":{"name":"doc-team","mode":"supervisor_worker","objective":"Compile role docs.","workspace":"__WS__"},"leader":{"id":"leader","role":"leader","provider":"codex","model":"gpt-5.5","context_policy":{"keep_user_thread":true,"receive_worker_outputs":"business_messages_and_short_summaries","max_worker_result_tokens":2000}},"agents":[{"id":"implementer","role":"Implementation Engineer","provider":"codex","model":"gpt-5.5","auth_mode":"subscription","working_directory":"__WS__","system_prompt":{"inline":"Implement bounded tasks and report result_envelope_v1.","file":null},"dangerously_skip_permissions":false,"communication_mode":"leader_centric","preferred_for":["implementer","Implementation Engineer"],"avoid_for":[],"output_contract":{"format":"result_envelope_v1","required_fields":["task_id","status","summary","artifacts"]}}],"routing":{"default_assignee":"implementer","rules":[{"id":"route-implementer","match":{"assignee":["implementer"]},"assign_to":"implementer","priority":10}]},"communication":{"protocol":"mcp_inbox","topology":"leader_centered","worker_to_worker":true,"ack_timeout_sec":60,"result_format":"result_envelope_v1","message_store":{"sqlite":".team/runtime/team.db","mirror_files":".team/messages"}},"runtime":{"backend":"tmux","display_backend":"adaptive","session_name":"team-doc-team","auto_launch":true,"require_user_approval_before_launch":true,"max_active_agents":1,"startup_order":["implementer"],"fast":false,"tick_interval_sec":2,"push_min_interval_sec":60,"stuck_timeout_sec":300},"context":{"state_file":"team_state.md","artifact_dir":".team/artifacts","log_dir":".team/logs","summarization":{"worker_full_logs":"retain_outside_leader_context","state_update":"after_each_result"}},"tasks":[{"id":"task_initial","title":"Initial document-driven team task","type":"implementation","assignee":"implementer","deps":[],"acceptance":["Worker reports valid result_envelope_v1"],"status":"pending","requires_tools":["mcp_team"],"files":[],"risk":"low"}]}"#;
 
 #[test]
 fn compile_base_noprofile_matches_python_dict_order_and_values() {
@@ -261,7 +261,7 @@ dangerously_skip_permissions: false
 Implement bounded tasks.
 ";
 
-const RUNTIME_DEFAULTS_JSON: &str = r#"{"version":1,"team":{"name":"doc-team","mode":"supervisor_worker","objective":"Compile role docs.","workspace":"__WS__"},"leader":{"id":"leader","role":"leader","provider":"codex","model":null,"tools":["fs_read","fs_list","mcp_team"],"context_policy":{"keep_user_thread":true,"receive_worker_outputs":"business_messages_and_short_summaries","max_worker_result_tokens":2000}},"agents":[{"id":"implementer","role":"Implementation Engineer","provider":"codex","model":"gpt-5.4","auth_mode":"subscription","working_directory":"__WS__","system_prompt":{"inline":"Implement bounded tasks.","file":null},"tools":["fs_read","mcp_team"],"dangerously_skip_permissions":false,"communication_mode":"leader_centric","preferred_for":["implementer","Implementation Engineer"],"avoid_for":[],"output_contract":{"format":"result_envelope_v1","required_fields":["task_id","status","summary","artifacts"]}}],"routing":{"default_assignee":"implementer","rules":[{"id":"route-implementer","match":{"assignee":["implementer"]},"assign_to":"implementer","priority":10}]},"communication":{"protocol":"mcp_inbox","topology":"leader_centered","worker_to_worker":true,"ack_timeout_sec":60,"result_format":"result_envelope_v1","message_store":{"sqlite":".team/runtime/team.db","mirror_files":".team/messages"}},"runtime":{"backend":"tmux","display_backend":"ghostty_window","session_name":"team-doc-team","auto_launch":true,"require_user_approval_before_launch":true,"max_active_agents":1,"startup_order":["implementer"],"fast":true,"tick_interval_sec":1,"push_min_interval_sec":3,"stuck_timeout_sec":5},"context":{"state_file":"team_state.md","artifact_dir":".team/artifacts","log_dir":".team/logs","summarization":{"worker_full_logs":"retain_outside_leader_context","state_update":"after_each_result"}},"tasks":[{"id":"task_initial","title":"Initial document-driven team task","type":"implementation","assignee":"implementer","deps":[],"acceptance":["Worker reports valid result_envelope_v1"],"status":"pending","requires_tools":["mcp_team"],"files":[],"risk":"low"}]}"#;
+const RUNTIME_DEFAULTS_JSON: &str = r#"{"version":1,"team":{"name":"doc-team","mode":"supervisor_worker","objective":"Compile role docs.","workspace":"__WS__"},"leader":{"id":"leader","role":"leader","provider":"codex","model":null,"context_policy":{"keep_user_thread":true,"receive_worker_outputs":"business_messages_and_short_summaries","max_worker_result_tokens":2000}},"agents":[{"id":"implementer","role":"Implementation Engineer","provider":"codex","model":"gpt-5.4","auth_mode":"subscription","working_directory":"__WS__","system_prompt":{"inline":"Implement bounded tasks.","file":null},"dangerously_skip_permissions":false,"communication_mode":"leader_centric","preferred_for":["implementer","Implementation Engineer"],"avoid_for":[],"output_contract":{"format":"result_envelope_v1","required_fields":["task_id","status","summary","artifacts"]}}],"routing":{"default_assignee":"implementer","rules":[{"id":"route-implementer","match":{"assignee":["implementer"]},"assign_to":"implementer","priority":10}]},"communication":{"protocol":"mcp_inbox","topology":"leader_centered","worker_to_worker":true,"ack_timeout_sec":60,"result_format":"result_envelope_v1","message_store":{"sqlite":".team/runtime/team.db","mirror_files":".team/messages"}},"runtime":{"backend":"tmux","display_backend":"ghostty_window","session_name":"team-doc-team","auto_launch":true,"require_user_approval_before_launch":true,"max_active_agents":1,"startup_order":["implementer"],"fast":true,"tick_interval_sec":1,"push_min_interval_sec":3,"stuck_timeout_sec":5},"context":{"state_file":"team_state.md","artifact_dir":".team/artifacts","log_dir":".team/logs","summarization":{"worker_full_logs":"retain_outside_leader_context","state_update":"after_each_result"}},"tasks":[{"id":"task_initial","title":"Initial document-driven team task","type":"implementation","assignee":"implementer","deps":[],"acceptance":["Worker reports valid result_envelope_v1"],"status":"pending","requires_tools":["mcp_team"],"files":[],"risk":"low"}]}"#;
 
 #[test]
 fn compile_runtime_front_matter_defaults_match_python() {
@@ -302,7 +302,7 @@ dangerously_skip_permissions: false
 Edit and defend the argument.
 ";
 
-const ALIAS_JSON: &str = r#"{"version":1,"team":{"name":"debate-team","mode":"supervisor_worker","objective":"Compile thin role docs.","workspace":"__WS__"},"leader":{"id":"leader","role":"leader","provider":"codex","model":null,"tools":["fs_read","fs_list","mcp_team"],"context_policy":{"keep_user_thread":true,"receive_worker_outputs":"business_messages_and_short_summaries","max_worker_result_tokens":2000}},"agents":[{"id":"editor","role":"Editor and Defender","provider":"claude_code","model":"claude-sonnet-4-6","auth_mode":"subscription","working_directory":"__WS__","system_prompt":{"inline":"Edit and defend the argument.","file":null},"tools":["mcp_team"],"dangerously_skip_permissions":false,"communication_mode":"leader_centric","preferred_for":["editor","Editor and Defender"],"avoid_for":[],"output_contract":{"format":"result_envelope_v1","required_fields":["task_id","status","summary","artifacts"]}}],"routing":{"default_assignee":"editor","rules":[{"id":"route-editor","match":{"assignee":["editor"]},"assign_to":"editor","priority":10}]},"communication":{"protocol":"mcp_inbox","topology":"leader_centered","worker_to_worker":true,"ack_timeout_sec":60,"result_format":"result_envelope_v1","message_store":{"sqlite":".team/runtime/team.db","mirror_files":".team/messages"}},"runtime":{"backend":"tmux","display_backend":"none","session_name":"team-debate-team","auto_launch":true,"require_user_approval_before_launch":true,"max_active_agents":1,"startup_order":["editor"],"fast":false,"tick_interval_sec":2,"push_min_interval_sec":60,"stuck_timeout_sec":300},"context":{"state_file":"team_state.md","artifact_dir":".team/artifacts","log_dir":".team/logs","summarization":{"worker_full_logs":"retain_outside_leader_context","state_update":"after_each_result"}},"tasks":[{"id":"task_initial","title":"Initial document-driven team task","type":"implementation","assignee":"editor","deps":[],"acceptance":["Worker reports valid result_envelope_v1"],"status":"pending","requires_tools":["mcp_team"],"files":[],"risk":"low"}]}"#;
+const ALIAS_JSON: &str = r#"{"version":1,"team":{"name":"debate-team","mode":"supervisor_worker","objective":"Compile thin role docs.","workspace":"__WS__"},"leader":{"id":"leader","role":"leader","provider":"codex","model":null,"context_policy":{"keep_user_thread":true,"receive_worker_outputs":"business_messages_and_short_summaries","max_worker_result_tokens":2000}},"agents":[{"id":"editor","role":"Editor and Defender","provider":"claude_code","model":"claude-sonnet-4-6","auth_mode":"subscription","working_directory":"__WS__","system_prompt":{"inline":"Edit and defend the argument.","file":null},"dangerously_skip_permissions":false,"communication_mode":"leader_centric","preferred_for":["editor","Editor and Defender"],"avoid_for":[],"output_contract":{"format":"result_envelope_v1","required_fields":["task_id","status","summary","artifacts"]}}],"routing":{"default_assignee":"editor","rules":[{"id":"route-editor","match":{"assignee":["editor"]},"assign_to":"editor","priority":10}]},"communication":{"protocol":"mcp_inbox","topology":"leader_centered","worker_to_worker":true,"ack_timeout_sec":60,"result_format":"result_envelope_v1","message_store":{"sqlite":".team/runtime/team.db","mirror_files":".team/messages"}},"runtime":{"backend":"tmux","display_backend":"none","session_name":"team-debate-team","auto_launch":true,"require_user_approval_before_launch":true,"max_active_agents":1,"startup_order":["editor"],"fast":false,"tick_interval_sec":2,"push_min_interval_sec":60,"stuck_timeout_sec":300},"context":{"state_file":"team_state.md","artifact_dir":".team/artifacts","log_dir":".team/logs","summarization":{"worker_full_logs":"retain_outside_leader_context","state_update":"after_each_result"}},"tasks":[{"id":"task_initial","title":"Initial document-driven team task","type":"implementation","assignee":"editor","deps":[],"acceptance":["Worker reports valid result_envelope_v1"],"status":"pending","requires_tools":["mcp_team"],"files":[],"risk":"low"}]}"#;
 
 #[test]
 fn compile_provider_models_claude_code_falls_back_to_claude_alias() {
@@ -336,7 +336,7 @@ tools:
 Implement bounded tasks.
 ";
 
-const BUILTIN_JSON: &str = r#"{"version":1,"team":{"name":"default-model-team","mode":"supervisor_worker","objective":"Compile role docs without model fields.","workspace":"__WS__"},"leader":{"id":"leader","role":"leader","provider":"codex","model":null,"tools":["fs_read","fs_list","mcp_team"],"context_policy":{"keep_user_thread":true,"receive_worker_outputs":"business_messages_and_short_summaries","max_worker_result_tokens":2000}},"agents":[{"id":"implementer","role":"Implementation Engineer","provider":"codex","model":"gpt-5.5","auth_mode":"subscription","working_directory":"__WS__","system_prompt":{"inline":"Implement bounded tasks.","file":null},"tools":["mcp_team"],"dangerously_skip_permissions":false,"communication_mode":"leader_centric","preferred_for":["implementer","Implementation Engineer"],"avoid_for":[],"output_contract":{"format":"result_envelope_v1","required_fields":["task_id","status","summary","artifacts"]}}],"routing":{"default_assignee":"implementer","rules":[{"id":"route-implementer","match":{"assignee":["implementer"]},"assign_to":"implementer","priority":10}]},"communication":{"protocol":"mcp_inbox","topology":"leader_centered","worker_to_worker":true,"ack_timeout_sec":60,"result_format":"result_envelope_v1","message_store":{"sqlite":".team/runtime/team.db","mirror_files":".team/messages"}},"runtime":{"backend":"tmux","display_backend":"none","session_name":"team-default-model-team","auto_launch":true,"require_user_approval_before_launch":true,"max_active_agents":1,"startup_order":["implementer"],"fast":false,"tick_interval_sec":2,"push_min_interval_sec":60,"stuck_timeout_sec":300},"context":{"state_file":"team_state.md","artifact_dir":".team/artifacts","log_dir":".team/logs","summarization":{"worker_full_logs":"retain_outside_leader_context","state_update":"after_each_result"}},"tasks":[{"id":"task_initial","title":"Initial document-driven team task","type":"implementation","assignee":"implementer","deps":[],"acceptance":["Worker reports valid result_envelope_v1"],"status":"pending","requires_tools":["mcp_team"],"files":[],"risk":"low"}]}"#;
+const BUILTIN_JSON: &str = r#"{"version":1,"team":{"name":"default-model-team","mode":"supervisor_worker","objective":"Compile role docs without model fields.","workspace":"__WS__"},"leader":{"id":"leader","role":"leader","provider":"codex","model":null,"context_policy":{"keep_user_thread":true,"receive_worker_outputs":"business_messages_and_short_summaries","max_worker_result_tokens":2000}},"agents":[{"id":"implementer","role":"Implementation Engineer","provider":"codex","model":"gpt-5.5","auth_mode":"subscription","working_directory":"__WS__","system_prompt":{"inline":"Implement bounded tasks.","file":null},"dangerously_skip_permissions":false,"communication_mode":"leader_centric","preferred_for":["implementer","Implementation Engineer"],"avoid_for":[],"output_contract":{"format":"result_envelope_v1","required_fields":["task_id","status","summary","artifacts"]}}],"routing":{"default_assignee":"implementer","rules":[{"id":"route-implementer","match":{"assignee":["implementer"]},"assign_to":"implementer","priority":10}]},"communication":{"protocol":"mcp_inbox","topology":"leader_centered","worker_to_worker":true,"ack_timeout_sec":60,"result_format":"result_envelope_v1","message_store":{"sqlite":".team/runtime/team.db","mirror_files":".team/messages"}},"runtime":{"backend":"tmux","display_backend":"none","session_name":"team-default-model-team","auto_launch":true,"require_user_approval_before_launch":true,"max_active_agents":1,"startup_order":["implementer"],"fast":false,"tick_interval_sec":2,"push_min_interval_sec":60,"stuck_timeout_sec":300},"context":{"state_file":"team_state.md","artifact_dir":".team/artifacts","log_dir":".team/logs","summarization":{"worker_full_logs":"retain_outside_leader_context","state_update":"after_each_result"}},"tasks":[{"id":"task_initial","title":"Initial document-driven team task","type":"implementation","assignee":"implementer","deps":[],"acceptance":["Worker reports valid result_envelope_v1"],"status":"pending","requires_tools":["mcp_team"],"files":[],"risk":"low"}]}"#;
 
 #[test]
 fn compile_subscription_without_model_uses_builtin_provider_default() {
@@ -378,7 +378,7 @@ tools:
 Bravo body.
 ";
 
-const TWO_AGENTS_JSON: &str = r#"{"version":1,"team":{"name":"doc-team","mode":"supervisor_worker","objective":"Compile role docs.","workspace":"__WS__"},"leader":{"id":"leader","role":"leader","provider":"codex","model":"gpt-5.5","tools":["fs_read","fs_list","mcp_team"],"context_policy":{"keep_user_thread":true,"receive_worker_outputs":"business_messages_and_short_summaries","max_worker_result_tokens":2000}},"agents":[{"id":"alpha","role":"Alpha Worker","provider":"codex","model":"gpt-5.5","auth_mode":"subscription","working_directory":"__WS__","system_prompt":{"inline":"Alpha body.","file":null},"tools":["mcp_team"],"dangerously_skip_permissions":false,"communication_mode":"leader_centric","preferred_for":["alpha","Alpha Worker"],"avoid_for":[],"output_contract":{"format":"result_envelope_v1","required_fields":["task_id","status","summary","artifacts"]}},{"id":"bravo","role":"Bravo Worker","provider":"codex","model":"gpt-5.5","auth_mode":"subscription","working_directory":"__WS__","system_prompt":{"inline":"Bravo body.","file":null},"tools":["mcp_team"],"dangerously_skip_permissions":false,"communication_mode":"leader_centric","preferred_for":["bravo","Bravo Worker"],"avoid_for":[],"output_contract":{"format":"result_envelope_v1","required_fields":["task_id","status","summary","artifacts"]}}],"routing":{"default_assignee":"alpha","rules":[{"id":"route-alpha","match":{"assignee":["alpha"]},"assign_to":"alpha","priority":10},{"id":"route-bravo","match":{"assignee":["bravo"]},"assign_to":"bravo","priority":10}]},"communication":{"protocol":"mcp_inbox","topology":"leader_centered","worker_to_worker":true,"ack_timeout_sec":60,"result_format":"result_envelope_v1","message_store":{"sqlite":".team/runtime/team.db","mirror_files":".team/messages"}},"runtime":{"backend":"tmux","display_backend":"adaptive","session_name":"team-doc-team","auto_launch":true,"require_user_approval_before_launch":true,"max_active_agents":2,"startup_order":["alpha","bravo"],"fast":false,"tick_interval_sec":2,"push_min_interval_sec":60,"stuck_timeout_sec":300},"context":{"state_file":"team_state.md","artifact_dir":".team/artifacts","log_dir":".team/logs","summarization":{"worker_full_logs":"retain_outside_leader_context","state_update":"after_each_result"}},"tasks":[{"id":"task_initial","title":"Initial document-driven team task","type":"implementation","assignee":"alpha","deps":[],"acceptance":["Worker reports valid result_envelope_v1"],"status":"pending","requires_tools":["mcp_team"],"files":[],"risk":"low"}]}"#;
+const TWO_AGENTS_JSON: &str = r#"{"version":1,"team":{"name":"doc-team","mode":"supervisor_worker","objective":"Compile role docs.","workspace":"__WS__"},"leader":{"id":"leader","role":"leader","provider":"codex","model":"gpt-5.5","context_policy":{"keep_user_thread":true,"receive_worker_outputs":"business_messages_and_short_summaries","max_worker_result_tokens":2000}},"agents":[{"id":"alpha","role":"Alpha Worker","provider":"codex","model":"gpt-5.5","auth_mode":"subscription","working_directory":"__WS__","system_prompt":{"inline":"Alpha body.","file":null},"dangerously_skip_permissions":false,"communication_mode":"leader_centric","preferred_for":["alpha","Alpha Worker"],"avoid_for":[],"output_contract":{"format":"result_envelope_v1","required_fields":["task_id","status","summary","artifacts"]}},{"id":"bravo","role":"Bravo Worker","provider":"codex","model":"gpt-5.5","auth_mode":"subscription","working_directory":"__WS__","system_prompt":{"inline":"Bravo body.","file":null},"dangerously_skip_permissions":false,"communication_mode":"leader_centric","preferred_for":["bravo","Bravo Worker"],"avoid_for":[],"output_contract":{"format":"result_envelope_v1","required_fields":["task_id","status","summary","artifacts"]}}],"routing":{"default_assignee":"alpha","rules":[{"id":"route-alpha","match":{"assignee":["alpha"]},"assign_to":"alpha","priority":10},{"id":"route-bravo","match":{"assignee":["bravo"]},"assign_to":"bravo","priority":10}]},"communication":{"protocol":"mcp_inbox","topology":"leader_centered","worker_to_worker":true,"ack_timeout_sec":60,"result_format":"result_envelope_v1","message_store":{"sqlite":".team/runtime/team.db","mirror_files":".team/messages"}},"runtime":{"backend":"tmux","display_backend":"adaptive","session_name":"team-doc-team","auto_launch":true,"require_user_approval_before_launch":true,"max_active_agents":2,"startup_order":["alpha","bravo"],"fast":false,"tick_interval_sec":2,"push_min_interval_sec":60,"stuck_timeout_sec":300},"context":{"state_file":"team_state.md","artifact_dir":".team/artifacts","log_dir":".team/logs","summarization":{"worker_full_logs":"retain_outside_leader_context","state_update":"after_each_result"}},"tasks":[{"id":"task_initial","title":"Initial document-driven team task","type":"implementation","assignee":"alpha","deps":[],"acceptance":["Worker reports valid result_envelope_v1"],"status":"pending","requires_tools":["mcp_team"],"files":[],"risk":"low"}]}"#;
 
 #[test]
 fn compile_two_agents_sorted_by_filename_with_routing_and_startup_order() {
@@ -633,36 +633,25 @@ fn fix_a5_session_name_override_wins() {
 // ── A6 tools ──
 
 #[test]
-fn fix_a6_tools_shell_maps_to_execute_bash() {
-    let role = "---\nname: w\nrole: R\nprovider: codex\nauth_mode: subscription\ndangerously_skip_permissions: false\ntools:\n  - shell\n  - mcp_team\n---\nb\n";
+fn fix_a6_tools_are_transparent_compatibility_metadata() {
+    let role = "---\nname: w\nrole: R\nprovider: codex\nauth_mode: subscription\ndangerously_skip_permissions: false\ntools:\n  - shell\n  - provider_builtin\n---\nb\n";
     let team = build_team(TM_CODEX, &[("w.md", role)], &[]);
-    let spec = compile_team(&team).expect("shell must normalize to execute_bash and compile");
-    assert_eq!(
-        agent0(&spec).get("tools"),
-        Some(&list_str(vec!["execute_bash", "mcp_team"]))
-    );
+    let spec = compile_team(&team).expect("tools metadata must not gate compilation");
+    assert!(agent0(&spec).get("tools").is_none());
 }
 
 #[test]
-fn fix_a6_missing_tools_errors() {
+fn fix_a6_missing_tools_is_allowed() {
     let role = "---\nname: w\nrole: R\nprovider: codex\nauth_mode: subscription\ndangerously_skip_permissions: false\n---\nb\n";
     let team = build_team(TM_CODEX, &[("w.md", role)], &[]);
-    let err = compile_team(&team).unwrap_err();
-    assert!(
-        err.to_string().contains("missing front matter field tools"),
-        "got: {err}"
-    );
+    compile_team(&team).expect("omitted tools metadata must compile");
 }
 
 #[test]
-fn fix_a6_tools_not_a_list_errors() {
+fn fix_a6_tools_non_list_is_transparent() {
     let role = "---\nname: w\nrole: R\nprovider: codex\nauth_mode: subscription\ndangerously_skip_permissions: false\ntools: justastring\n---\nb\n";
     let team = build_team(TM_CODEX, &[("w.md", role)], &[]);
-    let err = compile_team(&team).unwrap_err();
-    assert!(
-        err.to_string().contains("tools must be a list"),
-        "got: {err}"
-    );
+    compile_team(&team).expect("any YAML tools metadata must compile");
 }
 
 // ── A7 system_prompt inline ──

package/crates/team-agent/src/compiler.rs

@@ -30,8 +30,7 @@ use std::path::Path;
 use crate::communication_mode::CommunicationMode;
 use crate::model::enums::{Provider, ProviderEffort};
 use crate::model::yaml::Value;
-use crate::model::{paths, permissions, spec, yaml, ModelError};
-use crate::provider::adapters::pi::first_unsupported_pi_tool_category;
+use crate::model::{paths, spec, yaml, ModelError};
 use crate::provider::wire::{
     builtin_provider_model as wire_builtin_provider_model, is_claude_family,
     parse_canonical_provider, provider_model_keys,
@@ -233,7 +232,6 @@ pub fn compile_team(team_dir: &Path) -> Result<Value, ModelError> {
                 ("role", Value::Str(leader_role)),
                 ("provider", Value::Str(leader_provider)),
                 ("model", leader_model),
-                ("tools", list_str(vec!["fs_read", "fs_list", "mcp_team"])),
                 (
                     "context_policy",
                     map(vec![
@@ -526,7 +524,6 @@ fn compile_role_agent_with_mode(
             role_path.display(),
         )));
     }
-    let tools = required_tools(&meta, role_path)?;
     let prompt_inline = non_empty_trimmed(&body).unwrap_or_else(|| role.clone());
     let mut agent_items = vec![
         ("id", Value::Str(id.clone())),
@@ -542,7 +539,6 @@ fn compile_role_agent_with_mode(
                 ("file", Value::Null),
             ]),
         ),
-        ("tools", list_str(tools)),
         // 0.5.66 bypass 单源:compiler 透传角色 md 的 `dangerously_skip_permissions`
         // (必填 bool,spec 校验保证存在)。取代旧"恒发 permission_mode: restricted"。
         (
@@ -758,25 +754,6 @@ fn validate_pi_role_fields(meta: &Value, path: &Path, provider: &str) -> Result<
             )));
         }
     }
-    let tools = required_tools(meta, path)?;
-    if !tools.iter().any(|tool| tool == "mcp_team") {
-        return Err(ModelError::Validation(format!(
-            "{}: Pi roles require mcp_team",
-            path.display()
-        )));
-    }
-    let expanded = permissions::expand_tool_strings(tools.iter().map(String::as_str));
-    if let Some(category) = first_unsupported_pi_tool_category(
-        expanded
-            .iter()
-            .filter(|category| permissions::is_canonical_tool(category))
-            .map(String::as_str),
-    ) {
-        return Err(ModelError::Validation(format!(
-            "{}: Pi does not support Team Agent tool category {category:?}; remove it from the role's tools",
-            path.display()
-        )));
-    }
     Ok(())
 }
 
@@ -876,32 +853,6 @@ fn py_int_value(value: &Value) -> Option<i64> {
     }
 }
 
-fn required_tools(meta: &Value, path: &Path) -> Result<Vec<String>, ModelError> {
-    let Some(value) = meta.get("tools") else {
-        return Err(ModelError::Validation(format!(
-            "{}: missing front matter field tools",
-            path.display()
-        )));
-    };
-    let Some(items) = value.as_list() else {
-        return Err(ModelError::Validation(format!(
-            "{}: tools must be a list",
-            path.display()
-        )));
-    };
-    Ok(items
-        .iter()
-        .filter_map(Value::as_str)
-        .map(|tool| {
-            if tool == "shell" {
-                "execute_bash".to_string()
-            } else {
-                tool.to_string()
-            }
-        })
-        .collect())
-}
-
 fn resolve_model(role_meta: &Value, team_meta: &Value, provider: &str) -> Value {
     if let Some(model) = string_field(role_meta, "model") {
         return Value::Str(model);

package/crates/team-agent/src/leader/start.rs

@@ -304,7 +304,6 @@ fn leader_start_plan_with_ambient_authority(
             identity.team_id.as_str(),
         );
         let prompt = crate::lifecycle::worker_command_context::compile_pi_leader_system_prompt();
-        let tools = ["mcp_team", "fs_read", "fs_list", "fs_write", "execute_bash"];
         let team_mcp_tools = [
             "assign_task",
             "send_message",
@@ -327,7 +326,6 @@ fn leader_start_plan_with_ambient_authority(
                 model: parsed.model.as_deref(),
                 effort: parsed.effort,
                 system_prompt: &prompt,
-                tool_categories: &tools,
                 team_mcp_tools: &team_mcp_tools,
                 mcp_config: &mcp_config,
                 session_scope: crate::lifecycle::launch::pi_mcp::pi_leader_session_scope(

package/crates/team-agent/src/lifecycle/launch/add_agent.rs

@@ -31,7 +31,6 @@ use std::time::{SystemTime, UNIX_EPOCH};
 use crate::lifecycle::*;
 use crate::model::enums::{AuthMode, DisplayBackend, PaneLiveness, Provider, ProviderEffort};
 use crate::model::ids::AgentId;
-use crate::model::permissions::{self, AgentPermissionInput};
 use crate::model::yaml::{self, Value};
 use crate::state::persist::load_runtime_state;
 use crate::transport::{PaneId, SessionName, Target, Transport, WindowName};

package/crates/team-agent/src/lifecycle/launch/add_agent_state.rs

@@ -28,7 +28,6 @@ use std::process::Command;
 use crate::lifecycle::*;
 use crate::model::enums::{AuthMode, DisplayBackend, PaneLiveness, Provider, ProviderEffort};
 use crate::model::ids::AgentId;
-use crate::model::permissions::{self, AgentPermissionInput};
 use crate::model::yaml::{self, Value};
 use crate::state::persist::load_runtime_state;
 use crate::transport::{PaneId, SessionName, Target, Transport, WindowName};

package/crates/team-agent/src/lifecycle/launch/agent_state.rs

@@ -24,7 +24,6 @@ use std::process::Command;
 use crate::lifecycle::*;
 use crate::model::enums::{AuthMode, DisplayBackend, PaneLiveness, Provider, ProviderEffort};
 use crate::model::ids::AgentId;
-use crate::model::permissions::{self, AgentPermissionInput};
 use crate::model::yaml::{self, Value};
 use crate::state::persist::load_runtime_state;
 use crate::transport::{PaneId, SessionName, Target, Transport, WindowName};
@@ -106,11 +105,6 @@ pub(super) fn running_agent_state(
         "mcp_config".to_string(),
         serde_json::json!(mcp_config_path.to_string_lossy().to_string()),
     );
-    state.insert(
-        "permissions".to_string(),
-        permissions_json(agent, id, provider)
-            .map_err(|e| LifecycleError::Compile(e.to_string()))?,
-    );
     // 0.5.66 bypass 单源:policy 从 agent 字段派生,不再用全队 `DangerousApproval`。
     persist_effective_approval_policy_from_yaml_agent(&mut state, agent, provider);
     // 0.5.66 bypass 单源 §2.6:fresh spawn 记录运行面 bypass 值(供 restart drift 挡板)。

package/crates/team-agent/src/lifecycle/launch/identity.rs

@@ -33,7 +33,6 @@ use std::process::Command;
 use crate::lifecycle::*;
 use crate::model::enums::{AuthMode, DisplayBackend, PaneLiveness, Provider, ProviderEffort};
 use crate::model::ids::AgentId;
-use crate::model::permissions::{self, AgentPermissionInput};
 use crate::model::yaml::{self, Value};
 use crate::state::persist::load_runtime_state;
 use crate::transport::{PaneId, SessionName, Target, Transport, WindowName};

package/crates/team-agent/src/lifecycle/launch/layout.rs

@@ -25,7 +25,6 @@ use std::process::Command;
 use crate::lifecycle::*;
 use crate::model::enums::{AuthMode, DisplayBackend, PaneLiveness, Provider, ProviderEffort};
 use crate::model::ids::AgentId;
-use crate::model::permissions::{self, AgentPermissionInput};
 use crate::model::yaml::{self, Value};
 use crate::state::persist::load_runtime_state;
 use crate::transport::{PaneId, SessionName, Target, Transport, WindowName};

package/crates/team-agent/src/lifecycle/launch/leader_context.rs

@@ -31,7 +31,6 @@ use crate::lifecycle::profile_launch::parse_provider;
 use crate::lifecycle::*;
 use crate::model::enums::{AuthMode, DisplayBackend, PaneLiveness, Provider, ProviderEffort};
 use crate::model::ids::AgentId;
-use crate::model::permissions::{self, AgentPermissionInput};
 use crate::model::yaml::{self, Value};
 use crate::state::persist::load_runtime_state;
 use crate::transport::{PaneId, SessionName, Target, Transport, WindowName};

package/crates/team-agent/src/lifecycle/launch/mcp_config.rs

@@ -16,7 +16,6 @@
 //!       what: 把 argv 里的 MCP 配置参数改指到已落盘的文件
 //!   depends:
 //!     - crate::provider::McpConfig
-//!     - crate::model::permissions
 //!     - crate::event_log::EventLog
 //!     - crate::lifecycle::profile_launch
 //!     - std::fs
@@ -33,8 +32,6 @@ use std::process::Command;
 
 use crate::lifecycle::*;
 use crate::model::enums::{AuthMode, DisplayBackend, PaneLiveness, Provider, ProviderEffort};
-use crate::model::ids::AgentId;
-use crate::model::permissions::{self, AgentPermissionInput};
 use crate::model::yaml::{self, Value};
 use crate::state::persist::load_runtime_state;
 use crate::transport::{PaneId, SessionName, Target, Transport, WindowName};
@@ -135,7 +132,7 @@ pub(crate) fn write_worker_mcp_config_for_provider(
             .map_err(|e| LifecycleError::StatePersist(format!("{}: {e}", parent.display())))?;
     }
     let raw = if matches!(provider, Some(Provider::Copilot)) {
-        copilot_translate_mcp_servers(&config.raw)
+        crate::provider::adapters::copilot::copilot_translate_mcp_config(&config.raw)
     } else {
         config.raw.clone()
     };
@@ -610,36 +607,6 @@ fn upsert_toml_table_prefixes(existing: &str, tables: &[&str], stanza: &str) ->
     }
 }
 
-/// ---
-/// purpose: 把 MCP 配置里每个 server 的 type 字段名换成 transport
-/// returns: 同结构的新值，其余字段全部保留；非对象原样返回
-/// ---
-/// C-3-4 cr verdict v2 — McpConfig.raw 是 `{name: {type, command, args, env}}` 形;
-/// copilot mcp add schema 取 `transport` 替 `type`(stdio|http|sse 同值)。仅
-/// 字段名变换,其余字段全保留。
-pub(super) fn copilot_translate_mcp_servers(raw: &serde_json::Value) -> serde_json::Value {
-    let Some(servers) = raw.as_object() else {
-        return raw.clone();
-    };
-    let mut translated = serde_json::Map::new();
-    for (name, server) in servers {
-        let Some(obj) = server.as_object() else {
-            translated.insert(name.clone(), server.clone());
-            continue;
-        };
-        let mut out = serde_json::Map::new();
-        for (key, value) in obj {
-            if key == "type" {
-                out.insert("transport".to_string(), value.clone());
-            } else {
-                out.insert(key.clone(), value.clone());
-            }
-        }
-        translated.insert(name.clone(), serde_json::Value::Object(out));
-    }
-    serde_json::Value::Object(translated)
-}
-
 /// ---
 /// purpose: 把 argv 里 provider 原生的 MCP 配置参数改指到已落盘的文件
 /// params:
@@ -674,58 +641,3 @@ pub(crate) fn point_native_mcp_config_at_file(
         _ => {}
     }
 }
-
-/// ---
-/// purpose: 解析该席位的权限并序列化成 JSON
-/// returns: 含 agent_id、provider、排序后的工具串、逐工具的执行强度与是否有仅提示项
-/// errors: 权限解析失败时返回 ModelError
-/// ---
-pub(super) fn permissions_json(
-    agent: &Value,
-    id: &str,
-    provider: Provider,
-) -> Result<serde_json::Value, crate::model::ModelError> {
-    let tools = agent.get("tools").and_then(Value::as_list).map(|items| {
-        items
-            .iter()
-            .filter_map(Value::as_str)
-            .map(str::to_string)
-            .collect::<Vec<_>>()
-    });
-    let resolved = permissions::resolve_permissions(&AgentPermissionInput {
-        id: Some(AgentId::new(id)),
-        provider,
-        role: agent
-            .get("role")
-            .and_then(Value::as_str)
-            .map(str::to_string),
-        tools,
-    })?;
-    let mut out = serde_json::Map::new();
-    out.insert("agent_id".to_string(), serde_json::json!(id));
-    out.insert("provider".to_string(), serde_json::json!(provider));
-    out.insert(
-        "tools".to_string(),
-        serde_json::json!(resolved.sorted_tool_strings()),
-    );
-    out.insert(
-        "resolved_tools".to_string(),
-        serde_json::Value::Array(
-            resolved
-                .resolved_tools
-                .iter()
-                .map(|tool| {
-                    serde_json::json!({
-                        "tool": tool.tool,
-                        "enforcement": tool.enforcement,
-                    })
-                })
-                .collect(),
-        ),
-    );
-    out.insert(
-        "has_prompt_only".to_string(),
-        serde_json::json!(resolved.has_prompt_only),
-    );
-    Ok(serde_json::Value::Object(out))
-}

package/crates/team-agent/src/lifecycle/launch/ownership.rs

@@ -25,7 +25,6 @@ use std::process::Command;
 use crate::lifecycle::*;
 use crate::model::enums::{AuthMode, DisplayBackend, PaneLiveness, Provider, ProviderEffort};
 use crate::model::ids::AgentId;
-use crate::model::permissions::{self, AgentPermissionInput};
 use crate::model::yaml::{self, Value};
 use crate::state::persist::load_runtime_state;
 use crate::transport::{PaneId, SessionName, Target, Transport, WindowName};

package/crates/team-agent/src/lifecycle/launch/pi_mcp.rs

@@ -995,7 +995,6 @@ pub(crate) struct PiMaterializeRequest<'a> {
     pub model: Option<&'a str>,
     pub effort: Option<ProviderEffort>,
     pub system_prompt: &'a str,
-    pub tool_categories: &'a [&'a str],
     pub team_mcp_tools: &'a [&'a str],
     pub mcp_config: &'a McpConfig,
     pub session_scope: PiSessionScope,
@@ -1093,7 +1092,6 @@ fn materialize_pi_plan_with_session(
             model: model.as_deref(),
             effort: request.effort,
             system_prompt: request.system_prompt,
-            tool_categories: request.tool_categories,
             session_dir,
             session: PiSessionSelector::Resume { path: &exact_path },
             agent_id: request.agent_id,
@@ -1106,7 +1104,6 @@ fn materialize_pi_plan_with_session(
             model: model.as_deref(),
             effort: request.effort,
             system_prompt: request.system_prompt,
-            tool_categories: request.tool_categories,
             session_dir,
             session: PiSessionSelector::Fresh {
                 session_id: session_id.as_str(),