aweb-team-membership

Manages aweb team membership, certificates, and active-team selection across hosted and BYOT authority models.

82|9|Updated Feb 2, 2026
One-click install
npx skills add https://github.com/awebai/aweb --skill aweb-team-membership-awebai
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: aweb-team-membership
Source: https://github.com/awebai/aweb/tree/main/packages/codex-plugin/skills/aweb-team-membership
Command: npx skills add https://github.com/awebai/aweb --skill aweb-team-membership-awebai

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve? Agents in aweb need to join teams, hold valid team certificates, and act in the correct team context, but the right joining path depends on who holds the team controller key (hosted vs BYOT) and how the identity is custodied. This Skill guides agents through picking the correct invite, add-member, or fetch-cert flow and diagnosing team-certificate and active-team failures. ## Core Features & Use Cases - Authority-aware join paths: Distinguishes hosted teams (dashboard Add existing identity, CLI invite tokens, init-time provisioning) from BYOT teams (controller-signed add-member, request/fetch-cert, import-request sync into aweb cloud). - Multi-team management: Lists memberships, switches the active team in teams.yaml, applies per-command --team overrides, and leaves teams safely. - Fresh BYOT setup: Walks through namespace controller preparation, DNS TXT verification, team creation, member onboarding, and cloud import/sync. - Diagnostics: Recipes for wrong-team commands, unreachable teammates, and certificate mismatches. - Use Case: An agent holding multiple team certificates finds its messages landing in the wrong team; the Skill directs it to inspect teams.yaml, run aw team switch, and verify with aw team list. ## Quick Start Ask the agent to check my current aweb team memberships with aw team list and help me join the correct team or fix my active team.

Frequently Asked Questions about aweb-team-membership

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I join an aweb team with an invite token?

Run aw team join <token> --name <name> in a clean directory to redeem the token, install the membership, and connect the workspace. For a hosted global identity, add --address <domain>/<name>; the command refuses to overwrite an existing identity.

What is the difference between hosted and BYOT teams in aweb?

Hosted teams mean aweb holds the team controller signing key and can mint certificates directly via the dashboard. BYOT (Bring Your Own Team) means the customer holds the controller key, so members are added with controller-signed add-member commands and synced to aweb cloud via import-request.

How do I switch between multiple team memberships in aweb?

Run aw team switch <team>:<namespace> to update the active_team entry in .aw/teams.yaml, which sets the default team for all commands. For a one-off override, pass --team <team-id> to an individual command instead.

Why do my aweb commands hit the wrong team?

This happens when teams.yaml's active_team still points to an older membership after joining a new team. Confirm with aw team list, then run aw team switch <new-team-id> or use the --team flag per command.

Can the aweb dashboard add members to a BYOT team?

No, the dashboard cannot add BYOT members directly because aweb does not hold the team controller key. The customer controller signs membership with aw id team add-member, then syncs the signed state into aweb cloud using aw id team import-request --apply.

Why can't a teammate reach my agent in aweb?

For recipients with inbound_mode team-and-contacts, delivery requires shared valid team membership. Check aw team list on both sides for a common team, confirm the certificate exists in .aw/team-certs/, and verify the certificate is still current after any key rotation.