Test revoke behavior

Stop the API with Ctrl+C. Then revoke the client grant:

$env:AGENTIC_OS_DIR="$env:TEMP\aios-team-manual"
npm run team:client -- revoke --team demo --client acme --user member@example.test --by owner@example.test
npm run team:client -- grants --team demo

Restart the API with the same environment from the API startup step.

Then run:

npm run team -- clients
npm run team -- sync manifest --client acme

Expected result: acme is no longer available to the member.

The Company Owner still sees acme because Full access is implicit. Revoking a Member grant does not change Company or direct Team authority.

Next: Test file sync