@sortedyuan/maybecode 0.3.2 → 0.5.0

package/dist/cli/chunk-MNBYXL5Y.js

@@ -0,0 +1,132 @@
+import { createRequire as __createRequire } from "node:module"; const require = __createRequire(import.meta.url);
+import {
+  __name
+} from "./chunk-E732GDOI.js";
+
+// apps/maybecode/src/policy.ts
+import { resolveWritableWorkspacePath } from "@sortedyuan/coding-tools";
+import { realpath } from "node:fs/promises";
+import { relative } from "node:path";
+function parsePermissionMode(value) {
+  if (value === "default" || value === "yolo") return value;
+  throw new TypeError('permissionMode must be "default" or "yolo"');
+}
+__name(parsePermissionMode, "parsePermissionMode");
+function createCodingPermissionPolicy(options = {}) {
+  const policy = options.policy ?? defaultCodingPermission;
+  return async (check) => {
+    if (options.readOnly && ![
+      "read",
+      "glob",
+      "grep",
+      "skill_read",
+      "session_history",
+      "session_history_search",
+      "session_history_read",
+      "get_context_remaining",
+      "context_notes",
+      "new_context",
+      "get_goal"
+    ].includes(check.tool.name))
+      return "deny";
+    let decision = await policy(check);
+    if (options.persistent && check.tool.name === "fetch" && options.policy === void 0) {
+      const url = stringField(check.input, "url");
+      if (url !== void 0) {
+        const origin = new URL(url).origin;
+        decision = {
+          decision: "ask",
+          grantKey: `network:${origin}`,
+          persistent: { scopeId: options.persistent.scopeId, description: `network \xB7 ${origin}` }
+        };
+      }
+    }
+    if (options.persistent && ["read", "edit", "write"].includes(check.tool.name)) {
+      const path = stringField(check.input, "path");
+      if (path !== void 0) {
+        const target = await resolveWritableWorkspacePath(options.persistent.workspace, path);
+        const root = await realpath(options.persistent.workspace);
+        const normalized = relative(root, target.absolute).replace(/\\/gu, "/");
+        const key = process.platform === "win32" ? normalized.toLowerCase() : normalized;
+        const rules = await resolveWritableWorkspacePath(options.persistent.workspace, ".may/permission-rules.json");
+        const rulesRelative = relative(root, rules.absolute).replace(/\\/gu, "/");
+        const rulesKey = process.platform === "win32" ? rulesRelative.toLowerCase() : rulesRelative;
+        if (key === rulesKey || key.startsWith(`${rulesKey}.`)) return "deny";
+        if (options.policy === void 0 && check.tool.name !== "read" && decision !== "deny" && !(typeof decision === "object" && decision.decision === "deny")) {
+          const scoped = typeof decision === "object" ? decision : { decision };
+          const persistent = typeof decision === "object" ? decision.persistent : void 0;
+          decision = {
+            ...scoped,
+            grantKey: persistent && typeof decision === "object" ? decision.grantKey : `${check.tool.name}:${key}`,
+            persistent: persistent ?? {
+              scopeId: options.persistent.scopeId,
+              description: `${check.tool.name} \xB7 ${root} \xB7 ${key}`
+            }
+          };
+        }
+      }
+    }
+    const asks = decision === "ask" || typeof decision === "object" && decision !== null && decision.decision === "ask" && typeof decision.grantKey === "string" && decision.grantKey.trim() !== "";
+    if (options.mode?.() === "yolo" && asks && !(typeof decision === "object" && decision.requireApproval)) {
+      return typeof decision === "object" ? { ...decision, decision: "allow" } : "allow";
+    }
+    return decision;
+  };
+}
+__name(createCodingPermissionPolicy, "createCodingPermissionPolicy");
+function defaultCodingPermission(check) {
+  if ([
+    "read",
+    "glob",
+    "grep",
+    "skill_read",
+    "session_history",
+    "session_history_search",
+    "session_history_read",
+    "get_context_remaining",
+    "context_notes",
+    "new_context",
+    "get_goal",
+    "update_goal",
+    "delegate_tasks"
+  ].includes(check.tool.name)) {
+    return "allow";
+  }
+  if (check.tool.name === "shell" || check.tool.name === "bash") {
+    const command = stringField(check.input, "command");
+    return command === void 0 ? "ask" : { decision: "ask", grantKey: `${check.tool.name}:${command}` };
+  }
+  if (check.tool.name === "edit" || check.tool.name === "write") {
+    const path = stringField(check.input, "path");
+    return path === void 0 ? "ask" : {
+      decision: "ask",
+      grantKey: `${check.tool.name}:${path}`
+    };
+  }
+  if (check.tool.name.startsWith("mcp__")) {
+    return {
+      decision: "ask",
+      grantKey: `mcp:${check.tool.name}`
+    };
+  }
+  if (check.tool.name === "fetch") {
+    const url = stringField(check.input, "url");
+    return url === void 0 ? "ask" : { decision: "ask", grantKey: `network:${new URL(url).origin}` };
+  }
+  return "ask";
+}
+__name(defaultCodingPermission, "defaultCodingPermission");
+function stringField(value, name) {
+  if (typeof value !== "object" || value === null || !(name in value)) {
+    return void 0;
+  }
+  const field = value[name];
+  return typeof field === "string" && field !== "" ? field : void 0;
+}
+__name(stringField, "stringField");
+
+export {
+  parsePermissionMode,
+  createCodingPermissionPolicy
+};
+//# sourceMappingURL=chunk-MNBYXL5Y.js.map

package/dist/cli/chunk-MNBYXL5Y.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../src/policy.ts"],
+  "sourcesContent": ["import type { PermissionCheck, PermissionDecision, PermissionPolicy } from \"@sortedyuan/may/permissions\";\nimport { resolveWritableWorkspacePath } from \"@sortedyuan/coding-tools\";\nimport { realpath } from \"node:fs/promises\";\nimport { relative } from \"node:path\";\n\nexport type MaybeCodePermissionMode = \"default\" | \"yolo\";\n\nexport function parsePermissionMode(value: unknown): MaybeCodePermissionMode {\n  if (value === \"default\" || value === \"yolo\") return value;\n  throw new TypeError('permissionMode must be \"default\" or \"yolo\"');\n}\n\nexport function createCodingPermissionPolicy(\n  options: {\n    readonly mode?: () => MaybeCodePermissionMode;\n    readonly readOnly?: boolean;\n    readonly policy?: PermissionPolicy;\n    readonly persistent?: { readonly workspace: string; readonly scopeId: string };\n  } = {},\n): PermissionPolicy {\n  const policy = options.policy ?? defaultCodingPermission;\n  return async (check) => {\n    if (\n      options.readOnly &&\n      ![\n        \"read\",\n        \"glob\",\n        \"grep\",\n        \"skill_read\",\n        \"session_history\",\n        \"session_history_search\",\n        \"session_history_read\",\n        \"get_context_remaining\",\n        \"context_notes\",\n        \"new_context\",\n        \"get_goal\",\n      ].includes(check.tool.name)\n    )\n      return \"deny\";\n    let decision = await policy(check);\n    if (options.persistent && check.tool.name === \"fetch\" && options.policy === undefined) {\n      const url = stringField(check.input, \"url\");\n      if (url !== undefined) {\n        const origin = new URL(url).origin;\n        decision = {\n          decision: \"ask\",\n          grantKey: `network:${origin}`,\n          persistent: { scopeId: options.persistent.scopeId, description: `network \u00B7 ${origin}` },\n        };\n      }\n    }\n    if (options.persistent && [\"read\", \"edit\", \"write\"].includes(check.tool.name)) {\n      const path = stringField(check.input, \"path\");\n      if (path !== undefined) {\n        const target = await resolveWritableWorkspacePath(options.persistent.workspace, path);\n        const root = await realpath(options.persistent.workspace);\n        const normalized = relative(root, target.absolute).replace(/\\\\/gu, \"/\");\n        const key = process.platform === \"win32\" ? normalized.toLowerCase() : normalized;\n        const rules = await resolveWritableWorkspacePath(options.persistent.workspace, \".may/permission-rules.json\");\n        const rulesRelative = relative(root, rules.absolute).replace(/\\\\/gu, \"/\");\n        const rulesKey = process.platform === \"win32\" ? rulesRelative.toLowerCase() : rulesRelative;\n        if (key === rulesKey || key.startsWith(`${rulesKey}.`)) return \"deny\";\n        if (\n          options.policy === undefined &&\n          check.tool.name !== \"read\" &&\n          decision !== \"deny\" &&\n          !(typeof decision === \"object\" && decision.decision === \"deny\")\n        ) {\n          const scoped = typeof decision === \"object\" ? decision : { decision };\n          const persistent = typeof decision === \"object\" ? decision.persistent : undefined;\n          decision = {\n            ...scoped,\n            grantKey: persistent && typeof decision === \"object\" ? decision.grantKey : `${check.tool.name}:${key}`,\n            persistent: persistent ?? {\n              scopeId: options.persistent.scopeId,\n              description: `${check.tool.name} \u00B7 ${root} \u00B7 ${key}`,\n            },\n          };\n        }\n      }\n    }\n    const asks =\n      decision === \"ask\" ||\n      (typeof decision === \"object\" &&\n        decision !== null &&\n        decision.decision === \"ask\" &&\n        typeof decision.grantKey === \"string\" &&\n        decision.grantKey.trim() !== \"\");\n    if (options.mode?.() === \"yolo\" && asks && !(typeof decision === \"object\" && decision.requireApproval)) {\n      return typeof decision === \"object\" ? { ...decision, decision: \"allow\" } : \"allow\";\n    }\n    return decision;\n  };\n}\n\nfunction defaultCodingPermission(check: PermissionCheck): PermissionDecision {\n  if (\n    [\n      \"read\",\n      \"glob\",\n      \"grep\",\n      \"skill_read\",\n      \"session_history\",\n      \"session_history_search\",\n      \"session_history_read\",\n      \"get_context_remaining\",\n      \"context_notes\",\n      \"new_context\",\n      \"get_goal\",\n      \"update_goal\",\n      \"delegate_tasks\",\n    ].includes(check.tool.name)\n  ) {\n    // \u59D4\u6D3E\u662F\u5426\u88AB\u5141\u8BB8\u7531\u5BBF\u4E3B\u7684\u89D2\u8272\u6388\u6743\u51B3\u5B9A\uFF1A\u53EA\u6709\u5DF2\u6CE8\u518C\u4E14\u5BBF\u4E3B\u6388\u6743\u7684\u89D2\u8272\u80FD\u88AB\u521B\u5EFA\uFF0C\n    // \u8D85\u51FA\u6388\u6743\u8303\u56F4\u7684\u59D4\u6D3E\u4F1A\u5728\u5DE5\u5177\u6267\u884C\u65F6\u5931\u8D25\u3002\u663E\u5F0F\u63D0\u4F9B deny \u7684\u81EA\u5B9A\u4E49\u7B56\u7565\u4F9D\u7136\u6709\u6548\u3002\n    return \"allow\";\n  }\n\n  if (check.tool.name === \"shell\" || check.tool.name === \"bash\") {\n    const command = stringField(check.input, \"command\");\n    return command === undefined ? \"ask\" : { decision: \"ask\", grantKey: `${check.tool.name}:${command}` };\n  }\n\n  if (check.tool.name === \"edit\" || check.tool.name === \"write\") {\n    const path = stringField(check.input, \"path\");\n    return path === undefined\n      ? \"ask\"\n      : {\n          decision: \"ask\",\n          grantKey: `${check.tool.name}:${path}`,\n        };\n  }\n\n  if (check.tool.name.startsWith(\"mcp__\")) {\n    return {\n      decision: \"ask\",\n      grantKey: `mcp:${check.tool.name}`,\n    };\n  }\n\n  if (check.tool.name === \"fetch\") {\n    const url = stringField(check.input, \"url\");\n    return url === undefined ? \"ask\" : { decision: \"ask\", grantKey: `network:${new URL(url).origin}` };\n  }\n\n  return \"ask\";\n}\n\nfunction stringField(value: unknown, name: string): string | undefined {\n  if (typeof value !== \"object\" || value === null || !(name in value)) {\n    return undefined;\n  }\n  const field = value[name as keyof typeof value];\n  return typeof field === \"string\" && field !== \"\" ? field : undefined;\n}\n"],
+  "mappings": ";;;;;;AACA,SAAS,oCAAoC;AAC7C,SAAS,gBAAgB;AACzB,SAAS,gBAAgB;AAIlB,SAAS,oBAAoB,OAAyC;AAC3E,MAAI,UAAU,aAAa,UAAU,OAAQ,QAAO;AACpD,QAAM,IAAI,UAAU,4CAA4C;AAClE;AAHgB;AAKT,SAAS,6BACd,UAKI,CAAC,GACa;AAClB,QAAM,SAAS,QAAQ,UAAU;AACjC,SAAO,OAAO,UAAU;AACtB,QACE,QAAQ,YACR,CAAC;AAAA,MACC;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF,EAAE,SAAS,MAAM,KAAK,IAAI;AAE1B,aAAO;AACT,QAAI,WAAW,MAAM,OAAO,KAAK;AACjC,QAAI,QAAQ,cAAc,MAAM,KAAK,SAAS,WAAW,QAAQ,WAAW,QAAW;AACrF,YAAM,MAAM,YAAY,MAAM,OAAO,KAAK;AAC1C,UAAI,QAAQ,QAAW;AACrB,cAAM,SAAS,IAAI,IAAI,GAAG,EAAE;AAC5B,mBAAW;AAAA,UACT,UAAU;AAAA,UACV,UAAU,WAAW,MAAM;AAAA,UAC3B,YAAY,EAAE,SAAS,QAAQ,WAAW,SAAS,aAAa,gBAAa,MAAM,GAAG;AAAA,QACxF;AAAA,MACF;AAAA,IACF;AACA,QAAI,QAAQ,cAAc,CAAC,QAAQ,QAAQ,OAAO,EAAE,SAAS,MAAM,KAAK,IAAI,GAAG;AAC7E,YAAM,OAAO,YAAY,MAAM,OAAO,MAAM;AAC5C,UAAI,SAAS,QAAW;AACtB,cAAM,SAAS,MAAM,6BAA6B,QAAQ,WAAW,WAAW,IAAI;AACpF,cAAM,OAAO,MAAM,SAAS,QAAQ,WAAW,SAAS;AACxD,cAAM,aAAa,SAAS,MAAM,OAAO,QAAQ,EAAE,QAAQ,QAAQ,GAAG;AACtE,cAAM,MAAM,QAAQ,aAAa,UAAU,WAAW,YAAY,IAAI;AACtE,cAAM,QAAQ,MAAM,6BAA6B,QAAQ,WAAW,WAAW,4BAA4B;AAC3G,cAAM,gBAAgB,SAAS,MAAM,MAAM,QAAQ,EAAE,QAAQ,QAAQ,GAAG;AACxE,cAAM,WAAW,QAAQ,aAAa,UAAU,cAAc,YAAY,IAAI;AAC9E,YAAI,QAAQ,YAAY,IAAI,WAAW,GAAG,QAAQ,GAAG,EAAG,QAAO;AAC/D,YACE,QAAQ,WAAW,UACnB,MAAM,KAAK,SAAS,UACpB,aAAa,UACb,EAAE,OAAO,aAAa,YAAY,SAAS,aAAa,SACxD;AACA,gBAAM,SAAS,OAAO,aAAa,WAAW,WAAW,EAAE,SAAS;AACpE,gBAAM,aAAa,OAAO,aAAa,WAAW,SAAS,aAAa;AACxE,qBAAW;AAAA,YACT,GAAG;AAAA,YACH,UAAU,cAAc,OAAO,aAAa,WAAW,SAAS,WAAW,GAAG,MAAM,KAAK,IAAI,IAAI,GAAG;AAAA,YACpG,YAAY,cAAc;AAAA,cACxB,SAAS,QAAQ,WAAW;AAAA,cAC5B,aAAa,GAAG,MAAM,KAAK,IAAI,SAAM,IAAI,SAAM,GAAG;AAAA,YACpD;AAAA,UACF;AAAA,QACF;AAAA,MACF;AAAA,IACF;AACA,UAAM,OACJ,aAAa,SACZ,OAAO,aAAa,YACnB,aAAa,QACb,SAAS,aAAa,SACtB,OAAO,SAAS,aAAa,YAC7B,SAAS,SAAS,KAAK,MAAM;AACjC,QAAI,QAAQ,OAAO,MAAM,UAAU,QAAQ,EAAE,OAAO,aAAa,YAAY,SAAS,kBAAkB;AACtG,aAAO,OAAO,aAAa,WAAW,EAAE,GAAG,UAAU,UAAU,QAAQ,IAAI;AAAA,IAC7E;AACA,WAAO;AAAA,EACT;AACF;AAjFgB;AAmFhB,SAAS,wBAAwB,OAA4C;AAC3E,MACE;AAAA,IACE;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF,EAAE,SAAS,MAAM,KAAK,IAAI,GAC1B;AAGA,WAAO;AAAA,EACT;AAEA,MAAI,MAAM,KAAK,SAAS,WAAW,MAAM,KAAK,SAAS,QAAQ;AAC7D,UAAM,UAAU,YAAY,MAAM,OAAO,SAAS;AAClD,WAAO,YAAY,SAAY,QAAQ,EAAE,UAAU,OAAO,UAAU,GAAG,MAAM,KAAK,IAAI,IAAI,OAAO,GAAG;AAAA,EACtG;AAEA,MAAI,MAAM,KAAK,SAAS,UAAU,MAAM,KAAK,SAAS,SAAS;AAC7D,UAAM,OAAO,YAAY,MAAM,OAAO,MAAM;AAC5C,WAAO,SAAS,SACZ,QACA;AAAA,MACE,UAAU;AAAA,MACV,UAAU,GAAG,MAAM,KAAK,IAAI,IAAI,IAAI;AAAA,IACtC;AAAA,EACN;AAEA,MAAI,MAAM,KAAK,KAAK,WAAW,OAAO,GAAG;AACvC,WAAO;AAAA,MACL,UAAU;AAAA,MACV,UAAU,OAAO,MAAM,KAAK,IAAI;AAAA,IAClC;AAAA,EACF;AAEA,MAAI,MAAM,KAAK,SAAS,SAAS;AAC/B,UAAM,MAAM,YAAY,MAAM,OAAO,KAAK;AAC1C,WAAO,QAAQ,SAAY,QAAQ,EAAE,UAAU,OAAO,UAAU,WAAW,IAAI,IAAI,GAAG,EAAE,MAAM,GAAG;AAAA,EACnG;AAEA,SAAO;AACT;AAnDS;AAqDT,SAAS,YAAY,OAAgB,MAAkC;AACrE,MAAI,OAAO,UAAU,YAAY,UAAU,QAAQ,EAAE,QAAQ,QAAQ;AACnE,WAAO;AAAA,EACT;AACA,QAAM,QAAQ,MAAM,IAA0B;AAC9C,SAAO,OAAO,UAAU,YAAY,UAAU,KAAK,QAAQ;AAC7D;AANS;",
+  "names": []
+}

package/dist/cli/{chunk-F4XRPLUM.js → chunk-SLWLUEHQ.js}

@@ -2,9 +2,10 @@ import { createRequire as __createRequire } from "node:module"; const require =
 import {
   createMaybeCodeModel,
   getDefaultMaybeCodeDataDirectory,
-  loadMayConfig,
+  readMaybeCodeSettings,
+  resolveMaybeCodeRecording,
   selectMaybeCodeModel
-} from "./chunk-WOFEI42C.js";
+} from "./chunk-3IORPKBL.js";
 import {
   CoordinationRuntime,
   FileArtifactStore,
@@ -13,35 +14,89 @@ import {
   MaybeCodeUsageError,
   TaskWorkspaceManager,
   createApplicationAgent,
-  createReadTool,
-  defineAgent
-} from "./chunk-K5JWPNSY.js";
+  require_lib
+} from "./chunk-5SLWALZK.js";
 import {
-  __name
+  __name,
+  __toESM
 } from "./chunk-E732GDOI.js";
 
 // apps/maybecode/src/team.ts
-import { createHash, randomUUID } from "node:crypto";
-import { lstat, open, readFile, readdir, realpath, rename, stat } from "node:fs/promises";
-import { isAbsolute, join, relative, resolve, sep } from "node:path";
-import { resolveRunBudget } from "@sortedyuan/core";
-import { FileSessionStore } from "@sortedyuan/session/file-store";
-import { withFileAccess } from "@sortedyuan/session/file-access";
+import { createHash } from "node:crypto";
+import { lstat, open, readFile, readdir, realpath, stat } from "node:fs/promises";
+import { isAbsolute, join, relative, resolve as resolve2, sep } from "node:path";
+import { defineAgent } from "@sortedyuan/may";
+import { createReadTool, createGlobTool, createGrepTool } from "@sortedyuan/coding-tools";
+
+// apps/maybecode/src/team-execution.ts
+import { resolve } from "node:path";
+import {
+  openCodingExecutionEnvironment
+} from "@sortedyuan/coding-tools";
+var TeamExecutionEnvironments = class {
+  constructor(isolation = { mode: "host" }) {
+    this.isolation = isolation;
+  }
+  isolation;
+  static {
+    __name(this, "TeamExecutionEnvironments");
+  }
+  environments = /* @__PURE__ */ new Map();
+  closed = false;
+  get(workspace) {
+    if (this.closed) throw new Error("Team execution environments are closed");
+    const directory = resolve(workspace);
+    let environment = this.environments.get(directory);
+    if (environment === void 0) {
+      environment = openCodingExecutionEnvironment({ workspace: directory, isolation: this.isolation });
+      this.environments.set(directory, environment);
+    }
+    return environment;
+  }
+  async close() {
+    this.closed = true;
+    const results = await Promise.allSettled(
+      [...this.environments.values()].map(async (environment) => (await environment).close())
+    );
+    const failures = results.flatMap((result) => result.status === "rejected" ? [result.reason] : []);
+    if (failures.length) throw new AggregateError(failures, "Unable to close team execution environments");
+  }
+};
+
+// apps/maybecode/src/team.ts
+import { loadMayConfig } from "@sortedyuan/may/config";
+var import_write_file_atomic = __toESM(require_lib(), 1);
+import { resolveRunBudget } from "@sortedyuan/may/core";
+import { FileSessionStore } from "@sortedyuan/may/session/file-store";
+import { hasErrorCode, withFileAccess } from "@sortedyuan/may/storage";
 var VERSION = "maybecode-team-v1";
 var RESERVATION_TOKENS = 32768;
 async function runMaybeCodeTeamCommand(command, dependencies) {
-  if (command.action === "run") return (await import("./team-v2-JGBBQ7FR.js")).runTeamV2Command(command, dependencies);
+  if (command.action === "run") return (await import("./team-v2-YYO2G7DJ.js")).runTeamV2Command(command, dependencies);
   if (!/^[A-Za-z0-9_-]{1,128}$/u.test(command.value)) throw new MaybeCodeUsageError("Invalid team id");
-  const path = join(resolve(command.dataDirectory ?? getDefaultMaybeCodeDataDirectory()), "teams", command.value, "manifest.json");
-  const manifest = await withFileAccess(path, "shared", async () => JSON.parse(await readFile(path, "utf8")));
-  if (manifest.version === "maybecode-team-v2") return (await import("./team-v2-JGBBQ7FR.js")).runTeamV2Command(command, dependencies);
+  const path = join(
+    resolve2(command.dataDirectory ?? getDefaultMaybeCodeDataDirectory()),
+    "teams",
+    command.value,
+    "manifest.json"
+  );
+  const manifest = await withFileAccess(
+    path,
+    "shared",
+    async () => JSON.parse(await readFile(path, "utf8"))
+  );
+  if (manifest.version === "maybecode-team-v2")
+    return (await import("./team-v2-YYO2G7DJ.js")).runTeamV2Command(command, dependencies);
   const action = command.action;
-  if (action !== "resume" && action !== "status" && action !== "cancel") throw new MaybeCodeUsageError("Legacy v1 teams retain read-only resume/status/cancel. New controls require a new v2 team; authority is never silently upgraded.");
+  if (action !== "resume" && action !== "status" && action !== "cancel")
+    throw new MaybeCodeUsageError(
+      "Legacy v1 teams retain read-only resume/status/cancel. New controls require a new v2 team; authority is never silently upgraded."
+    );
   return runLegacyMaybeCodeTeamCommand({ ...command, action }, dependencies);
 }
 __name(runMaybeCodeTeamCommand, "runMaybeCodeTeamCommand");
 async function runLegacyMaybeCodeTeamCommand(command, dependencies) {
-  const data = resolve(command.dataDirectory ?? getDefaultMaybeCodeDataDirectory(), "teams");
+  const data = resolve2(command.dataDirectory ?? getDefaultMaybeCodeDataDirectory(), "teams");
   const id = command.value;
   if (!/^[A-Za-z0-9_-]{1,128}$/u.test(id)) throw new MaybeCodeUsageError("Invalid team id");
   const directory = join(data, id);
@@ -58,7 +113,7 @@ Model profile: ${manifest.model}
       write(`${await withFileAccess(path, "shared", () => readFile(path, "utf8"))}
 `);
     } catch (error) {
-      if (!isMissing(error)) throw error;
+      if (!hasErrorCode(error, "ENOENT")) throw error;
       write("No execution snapshot yet.\n");
     }
     write(`Records: ${directory}
@@ -67,14 +122,19 @@ Model profile: ${manifest.model}
   }
   if (command.action === "cancel") {
     await writeDurable(join(directory, "cancel.request.json"), { id, requestedAt: (/* @__PURE__ */ new Date()).toISOString() });
-    write(`Cancellation requested for ${id}. The active owner will consume it; otherwise resume the team to record cancellation.
-`);
+    write(
+      `Cancellation requested for ${id}. The active owner will consume it; otherwise resume the team to record cancellation.
+`
+    );
     return 0;
   }
   const config = await (dependencies.loadConfig ?? loadMayConfig)({ path: manifest.configPath });
   const selected = selectMaybeCodeModel(config, { model: manifest.model });
-  if (fingerprint(selected) !== manifest.modelFingerprint) throw new Error("Team model configuration changed; restore the original profile before resuming");
-  const runBudget = resolveRunBudget(config.apps?.maybecode?.runBudget, {
+  const recording = resolveMaybeCodeRecording(config);
+  const executionEnvironments = new TeamExecutionEnvironments(readMaybeCodeSettings(config).execution);
+  if (fingerprint(selected) !== manifest.modelFingerprint)
+    throw new Error("Team model configuration changed; restore the original profile before resuming");
+  const runBudget = resolveRunBudget(readMaybeCodeSettings(config).runBudget, {
     maxSteps: 10,
     maxModelCalls: 10,
     maxToolCalls: 24,
@@ -83,7 +143,9 @@ Model profile: ${manifest.model}
   const outputLimit = Math.min(
     4096,
     selected.limits?.maxOutputTokens ?? 4096,
-    ...[selected.options.maxTokens, selected.options.maxOutputTokens].filter((value) => typeof value === "number" && Number.isSafeInteger(value) && value > 0)
+    ...[selected.options.maxTokens, selected.options.maxOutputTokens].filter(
+      (value) => typeof value === "number" && Number.isSafeInteger(value) && value > 0
+    )
   );
   const selection = {
     ...selected,
@@ -100,9 +162,31 @@ Model profile: ${manifest.model}
   let relay;
   let cancellationTimer;
   let cancelling;
+  const backgroundTasks = /* @__PURE__ */ new Set();
+  const backgroundErrors = [];
+  let failBackground;
+  const backgroundFailed = new Promise((resolve3) => {
+    failBackground = resolve3;
+  });
+  const trackBackground = /* @__PURE__ */ __name((operation) => {
+    const task = operation.then(
+      () => {
+        backgroundTasks.delete(task);
+      },
+      (error) => {
+        backgroundTasks.delete(task);
+        backgroundErrors.push(error);
+        failBackground(error);
+        cancel();
+      }
+    );
+    backgroundTasks.add(task);
+  }, "trackBackground");
   const cancel = /* @__PURE__ */ __name(() => {
-    if (runtime) cancelling ??= runtime.cancel(`cancel-${id}`);
-    void cancelling?.catch(() => void 0);
+    if (runtime && !cancelling) {
+      cancelling = runtime.cancel(`cancel-${id}`);
+      trackBackground(cancelling);
+    }
   }, "cancel");
   try {
     artifacts = await FileArtifactStore.open(join(directory, "artifacts"), id, {
@@ -112,24 +196,50 @@ Model profile: ${manifest.model}
       maxArtifactBytes: 262144,
       maxTotalBytes: 2097152
     });
-    workspaces = await TaskWorkspaceManager.open({ sourceDirectory: manifest.workspace, directory: join(directory, "workspaces") });
-    const model = ledger.wrapModel((dependencies.createModel ?? createMaybeCodeModel)(selection), { reservation: { totalTokens: RESERVATION_TOKENS } });
+    workspaces = await TaskWorkspaceManager.open({
+      sourceDirectory: manifest.workspace,
+      directory: join(directory, "workspaces")
+    });
+    const model = ledger.wrapModel((dependencies.createModel ?? createMaybeCodeModel)(selection), {
+      reservation: { totalTokens: RESERVATION_TOKENS }
+    });
     const store = new FileSessionStore(join(directory, "sessions"));
     const createRole = /* @__PURE__ */ __name((role) => {
-      const adapter = /* @__PURE__ */ __name((execution, workspace) => createApplicationAgent({
-        version: VERSION,
-        store,
-        delegation: role === "supervisor",
-        messaging: true,
-        definition: /* @__PURE__ */ __name(({ tools }) => defineAgent({
-          model,
-          instructions: roleInstructions(role),
-          tools: [createReadTool({ cwd: workspace, maxBytes: 262144, maxLines: 160 }), createListTool(workspace), ...artifacts.forTask(execution.task.id).tools(), ...tools],
-          toolScope: { workspaceId: workspace },
-          runBudget,
-          permissionPolicy: /* @__PURE__ */ __name((check) => ["read", "list_files", "publish_artifact", "read_artifact", "delegate_tasks", "send_message", "wait_for_messages"].includes(check.tool.name) ? "allow" : "deny", "permissionPolicy")
-        }), "definition")
-      }), "adapter");
+      const adapter = /* @__PURE__ */ __name(async (execution, workspace) => {
+        const environment = await executionEnvironments.get(workspace);
+        return createApplicationAgent({
+          version: VERSION,
+          store,
+          delegation: role === "supervisor",
+          messaging: true,
+          definition: /* @__PURE__ */ __name(({ tools }) => defineAgent({
+            ...recording,
+            model,
+            instructions: roleInstructions(role),
+            tools: [
+              createReadTool({ cwd: workspace, maxBytes: 262144, maxLines: 160 }),
+              createGlobTool({ cwd: workspace, execution: environment }),
+              createGrepTool({ cwd: workspace, execution: environment }),
+              createListTool(workspace),
+              ...artifacts.forTask(execution.task.id).tools(),
+              ...tools
+            ],
+            toolScope: { workspaceId: workspace },
+            runBudget,
+            permissionPolicy: /* @__PURE__ */ __name((check) => [
+              "read",
+              "glob",
+              "grep",
+              "list_files",
+              "publish_artifact",
+              "read_artifact",
+              "delegate_tasks",
+              "send_message",
+              "wait_for_messages"
+            ].includes(check.tool.name) ? "allow" : "deny", "permissionPolicy")
+          }), "definition")
+        });
+      }, "adapter");
       const publish = /* @__PURE__ */ __name(async (execution, output) => {
         await artifacts.forTask(execution.task.id).publish(`${execution.task.dispatchId}-${execution.task.turn ?? 0}-final`, {
           name: `${execution.task.id.slice(0, 100)}-result.md`,
@@ -141,12 +251,12 @@ Model profile: ${manifest.model}
         version: VERSION,
         async execute(execution, context) {
           const isolated = await workspaces.prepare(execution.task.id);
-          const result2 = await adapter(execution, isolated.directory).execute(execution, context);
+          const result2 = await (await adapter(execution, isolated.directory)).execute(execution, context);
           if (!("yielded" in result2)) await publish(execution, result2);
           return result2;
         },
         async recover(execution) {
-          const result2 = await adapter(execution, manifest.workspace).recover(execution);
+          const result2 = await (await adapter(execution, manifest.workspace)).recover(execution);
           if (result2.status === "completed") await publish(execution, result2.output);
           return result2;
         }
@@ -164,11 +274,13 @@ Model profile: ${manifest.model}
       }
     };
     runtime = await CoordinationRuntime.resume(options);
-    write(`Team ${id}
+    write(
+      `Team ${id}
 Model profile: ${manifest.model}
 Mode: read-only, isolated workspaces; shell/MCP/source writes disabled.
 Records: ${directory}
-`);
+`
+    );
     const statuses = /* @__PURE__ */ new Map();
     relay = (async () => {
       for await (const event of runtime.events) {
@@ -187,14 +299,14 @@ Records: ${directory}
         } else if (event.type === "runtime.failed") write("Team runtime failed; inspect its local recovery records.\n");
       }
     })();
-    void relay.catch(cancel);
+    trackBackground(relay);
     const checkCancellation = /* @__PURE__ */ __name(async () => {
       const path = join(directory, "cancel.request.json");
       try {
         await withFileAccess(path, "shared", () => stat(path));
         cancel();
       } catch (error) {
-        if (!isMissing(error)) {
+        if (!hasErrorCode(error, "ENOENT")) {
           cancel();
           throw error;
         }
@@ -204,10 +316,15 @@ Records: ${directory}
     await checkCancellation();
     if (dependencies.signal?.aborted) cancel();
     cancellationTimer = setInterval(() => {
-      void checkCancellation().catch(cancel);
+      trackBackground(checkCancellation());
     }, 300);
     await cancelling;
-    const result = await runtime.wait();
+    const result = await Promise.race([
+      runtime.wait(),
+      backgroundFailed.then((error) => {
+        throw error;
+      })
+    ]);
     await cancelling;
     await writeStatus(directory, result);
     const summary = result.tasks.find((task) => task.id === "summary");
@@ -224,19 +341,29 @@ Team ${complete ? "completed" : "stopped with unfinished or failed tasks"}.
 `);
     for (const ref of await artifacts.snapshot()) write(`Artifact [${ref.ownerTaskId}]: ${JSON.stringify(ref)}
 `);
-    if (!complete) write(`Inspect: maybecode team status ${id}
+    if (!complete)
+      write(
+        `Inspect: maybecode team status ${id}
 Resume: maybecode team resume ${id}
 Unknown side effects or usage require verified host reconciliation; resume never blindly repeats them.
-`);
+`
+      );
     return complete ? 0 : 1;
   } finally {
     if (cancellationTimer) clearInterval(cancellationTimer);
     dependencies.signal?.removeEventListener("abort", cancel);
     try {
-      await runtime?.close();
-      await relay;
+      const results = await Promise.allSettled([...runtime ? [runtime.close()] : [], ...relay ? [relay] : []]);
+      while (backgroundTasks.size) await Promise.all(backgroundTasks);
+      const failures = [
+        .../* @__PURE__ */ new Set([
+          ...backgroundErrors,
+          ...results.flatMap((result) => result.status === "rejected" ? [result.reason] : [])
+        ])
+      ];
+      if (failures.length) throw new AggregateError(failures, "Team background operations failed");
     } finally {
-      await Promise.all([workspaces?.close(), artifacts?.close(), ledger.close()]);
+      await Promise.all([workspaces?.close(), artifacts?.close(), ledger.close(), executionEnvironments.close()]);
     }
   }
 }
@@ -250,15 +377,21 @@ function createListTool(workspace) {
   return {
     name: "list_files",
     description: "List up to 200 immediate non-symlink entries inside the isolated workspace.",
-    inputSchema: { type: "object", properties: { path: { type: "string", description: "Relative directory path; use . for root" } }, required: ["path"], additionalProperties: false },
+    inputSchema: {
+      type: "object",
+      properties: { path: { type: "string", description: "Relative directory path; use . for root" } },
+      required: ["path"],
+      additionalProperties: false
+    },
     parse(input) {
-      if (typeof input !== "object" || input === null || !("path" in input) || typeof input.path !== "string") throw new Error("list_files requires a relative path");
+      if (typeof input !== "object" || input === null || !("path" in input) || typeof input.path !== "string")
+        throw new Error("list_files requires a relative path");
       return { path: input.path };
     },
     async execute(input, context) {
       context.signal.throwIfAborted();
       if (isAbsolute(input.path)) throw new Error("Absolute paths are not allowed");
-      const target = resolve(workspace, input.path);
+      const target = resolve2(workspace, input.path);
       if (!inside(workspace, target)) throw new Error("Path leaves the workspace");
       const parts = relative(workspace, target).split(sep).filter(Boolean);
       let cursor = workspace;
@@ -269,26 +402,37 @@ function createListTool(workspace) {
       const actual = await realpath(target);
       if (!inside(await realpath(workspace), actual)) throw new Error("Path leaves the workspace");
       const entries = (await readdir(actual, { withFileTypes: true })).filter((entry) => !entry.isSymbolicLink()).sort((a, b) => a.name.localeCompare(b.name));
-      return { path: input.path, entries: entries.slice(0, 200).map((entry) => ({ name: entry.name, type: entry.isDirectory() ? "directory" : "file" })), truncated: entries.length > 200 };
+      return {
+        path: input.path,
+        entries: entries.slice(0, 200).map((entry) => ({ name: entry.name, type: entry.isDirectory() ? "directory" : "file" })),
+        truncated: entries.length > 200
+      };
     }
   };
 }
 __name(createListTool, "createListTool");
 function fingerprint(selection) {
-  return createHash("sha256").update(JSON.stringify({
-    profile: selection.profile,
-    provider: selection.provider,
-    adapter: selection.adapter,
-    model: selection.model,
-    options: selection.options,
-    baseURL: selection.providerConfig.baseURL,
-    limits: selection.limits
-  })).digest("hex");
+  return createHash("sha256").update(
+    JSON.stringify({
+      profile: selection.profile,
+      provider: selection.provider,
+      adapter: selection.adapter,
+      model: selection.model,
+      options: selection.options,
+      baseURL: selection.providerConfig.baseURL,
+      limits: selection.limits
+    })
+  ).digest("hex");
 }
 __name(fingerprint, "fingerprint");
 async function readManifest(path, id) {
-  const value = await withFileAccess(path, "shared", async () => JSON.parse(await readFile(path, "utf8")));
-  if (value.format !== 1 || value.version !== VERSION || value.id !== id || !isAbsolute(value.workspace) || !isAbsolute(value.configPath) || typeof value.model !== "string" || typeof value.prompt !== "string" || !/^[0-9a-f]{64}$/u.test(value.modelFingerprint) || ![value.maxModelCalls, value.maxTotalTokens, value.maxConcurrent].every((n) => Number.isSafeInteger(n) && n > 0)) throw new Error("Invalid or incompatible team manifest");
+  const value = await withFileAccess(
+    path,
+    "shared",
+    async () => JSON.parse(await readFile(path, "utf8"))
+  );
+  if (value.format !== 1 || value.version !== VERSION || value.id !== id || !isAbsolute(value.workspace) || !isAbsolute(value.configPath) || typeof value.model !== "string" || typeof value.prompt !== "string" || !/^[0-9a-f]{64}$/u.test(value.modelFingerprint) || ![value.maxModelCalls, value.maxTotalTokens, value.maxConcurrent].every((n) => Number.isSafeInteger(n) && n > 0))
+    throw new Error("Invalid or incompatible team manifest");
   return value;
 }
 __name(readManifest, "readManifest");
@@ -307,18 +451,17 @@ async function writeDurable(path, value) {
 __name(writeDurable, "writeDurable");
 async function writeStatus(directory, snapshot) {
   const path = join(directory, "status.txt");
-  await withFileAccess(path, "exclusive", async () => {
-    const temporary = `${path}.${randomUUID()}.tmp`;
-    const file = await open(temporary, "wx", 384);
-    try {
-      await file.writeFile(`Revision ${snapshot.revision}
+  await withFileAccess(
+    path,
+    "exclusive",
+    () => (0, import_write_file_atomic.default)(
+      path,
+      `Revision ${snapshot.revision}
 ${snapshot.tasks.map((task) => `${task.id}: ${task.status}`).join("\n")}
-`);
-    } finally {
-      await file.close();
-    }
-    await rename(temporary, path);
-  });
+`,
+      { mode: 384 }
+    )
+  );
 }
 __name(writeStatus, "writeStatus");
 function inside(root, path) {
@@ -330,13 +473,10 @@ function terminalSafe(text) {
   return text.replace(/[\u0000-\u0008\u000b-\u001f\u007f-\u009f]/gu, "");
 }
 __name(terminalSafe, "terminalSafe");
-function isMissing(error) {
-  return typeof error === "object" && error !== null && "code" in error && error.code === "ENOENT";
-}
-__name(isMissing, "isMissing");
 
 export {
+  TeamExecutionEnvironments,
   runMaybeCodeTeamCommand,
   createListTool
 };
-//# sourceMappingURL=chunk-F4XRPLUM.js.map
+//# sourceMappingURL=chunk-SLWLUEHQ.js.map