bazilion 0.7.0 → 0.9.0

package/dist/worker.js

@@ -1,93 +1,99 @@
 #!/usr/bin/env node
 
 // ../daemon/src/runtime/worker/entry.ts
-import { randomUUID as randomUUID6 } from "crypto";
-import { join as join16 } from "path";
+import { randomUUID as randomUUID14 } from "crypto";
+import { join as join17 } from "path";
 
 // ../daemon/src/core/agent/delete.ts
-import { existsSync, rmSync } from "fs";
+import { randomUUID } from "crypto";
+import { existsSync, renameSync, rmSync } from "fs";
 
-// ../daemon/src/core/agent/resolve.ts
+// ../daemon/src/core/agent/move.ts
+import { readFileSync, writeFileSync } from "fs";
 import { join } from "path";
 
+// ../daemon/src/core/agent/resolve.ts
+import { join as join2 } from "path";
+
 // ../daemon/src/core/profile/identity.ts
-import { readFileSync } from "fs";
+import { readFileSync as readFileSync2 } from "fs";
 
 // ../daemon/src/core/agent/spawn.ts
-import { randomUUID } from "crypto";
-import { mkdirSync as mkdirSync3, writeFileSync as writeFileSync3 } from "fs";
-import { join as join6 } from "path";
+import { randomUUID as randomUUID2 } from "crypto";
+import { mkdirSync as mkdirSync3, rmSync as rmSync3, writeFileSync as writeFileSync4 } from "fs";
+import { join as join7 } from "path";
 
 // ../daemon/src/core/profile/load.ts
-import { existsSync as existsSync2, readFileSync as readFileSync2 } from "fs";
-import { join as join2 } from "path";
+import { existsSync as existsSync2, readFileSync as readFileSync3 } from "fs";
+import { join as join3 } from "path";
 
 // ../daemon/src/core/profile/seed.ts
-import { existsSync as existsSync4, readFileSync as readFileSync3, writeFileSync as writeFileSync2 } from "fs";
-import { join as join4 } from "path";
+import { existsSync as existsSync4, readFileSync as readFileSync4, writeFileSync as writeFileSync3 } from "fs";
+import { join as join5 } from "path";
 
-// ../daemon/src/core/group/register.ts
-import { existsSync as existsSync3, mkdirSync, statSync, symlinkSync } from "fs";
+// ../daemon/src/core/team/register.ts
+import { existsSync as existsSync3, mkdirSync, rmSync as rmSync2, statSync, symlinkSync } from "fs";
 import { resolve } from "path";
 
 // ../daemon/src/core/profile/create.ts
-import { mkdirSync as mkdirSync2, writeFileSync } from "fs";
-import { join as join3 } from "path";
+import { mkdirSync as mkdirSync2, writeFileSync as writeFileSync2 } from "fs";
+import { join as join4 } from "path";
 
 // ../daemon/src/core/skills/discover.ts
 import { existsSync as existsSync5, readdirSync } from "fs";
-import { join as join5 } from "path";
+import { join as join6 } from "path";
 
 // ../daemon/src/core/db/client.ts
 import { DatabaseSync } from "node:sqlite";
 
 // ../daemon/src/core/db/migrate.ts
-import { readdirSync as readdirSync2, readFileSync as readFileSync4 } from "fs";
-import { dirname, join as join7 } from "path";
+import { readdirSync as readdirSync2, readFileSync as readFileSync5 } from "fs";
+import { dirname, join as join8 } from "path";
 import { fileURLToPath } from "url";
-var migrationsDir = join7(dirname(fileURLToPath(import.meta.url)), "migrations");
+var migrationsDir = join8(dirname(fileURLToPath(import.meta.url)), "migrations");
 
 // ../daemon/src/core/paths.ts
 import { homedir } from "os";
-import { join as join8 } from "path";
+import { join as join9 } from "path";
 function resolvePaths(home) {
-  const root = home ?? process.env.BAZILION_HOME ?? join8(homedir(), ".bazilion");
+  const root = home ?? process.env.BAZILION_HOME ?? join9(homedir(), ".bazilion");
   return {
     home: root,
-    db: join8(root, "bazilion.db"),
-    authFile: join8(root, "auth.json"),
-    profilesDir: join8(root, "profiles"),
-    agentsDir: join8(root, "agents"),
-    skillsDir: join8(root, "skills"),
-    groupsDir: join8(root, "groups"),
-    logsDir: join8(root, "logs"),
+    db: join9(root, "bazilion.db"),
+    authFile: join9(root, "auth.json"),
+    profilesDir: join9(root, "profiles"),
+    agentsDir: join9(root, "agents"),
+    skillsDir: join9(root, "skills"),
+    teamsDir: join9(root, "teams"),
+    logsDir: join9(root, "logs"),
     profileDir(id) {
-      return join8(root, "profiles", id);
+      return join9(root, "profiles", id);
     },
     agentDir(id) {
-      return join8(root, "agents", id);
+      return join9(root, "agents", id);
     },
     skillDir(name) {
-      return join8(root, "skills", name);
+      return join9(root, "skills", name);
     },
-    groupDir(slug) {
-      return join8(root, "groups", slug);
+    teamDir(slug) {
+      return join9(root, "teams", slug);
     }
   };
 }
 
 // ../daemon/src/core/profile/delete.ts
-import { existsSync as existsSync6, rmSync as rmSync2 } from "fs";
+import { existsSync as existsSync6, rmSync as rmSync4 } from "fs";
 
-// ../daemon/src/core/profile/update.ts
-import { writeFileSync as writeFileSync4 } from "fs";
-import { join as join9 } from "path";
+// ../daemon/src/core/repos/teamTemplates.ts
+import { randomUUID as randomUUID3 } from "crypto";
 
-// ../daemon/src/core/profile-group/spawn.ts
-import { readdirSync as readdirSync3, rmSync as rmSync4 } from "fs";
+// ../daemon/src/core/profile/update.ts
+import { writeFileSync as writeFileSync5 } from "fs";
+import { join as join10 } from "path";
 
-// ../daemon/src/core/profile-group/rm-with-retry.ts
-import { rmSync as rmSync3 } from "fs";
+// ../daemon/src/core/repos/communicationApprovals.ts
+import { createHash, randomUUID as randomUUID4 } from "crypto";
+var DEFAULT_TTL_MS = 24 * 60 * 60 * 1e3;
 
 // ../daemon/src/core/services.ts
 var SERVICES = [
@@ -448,7 +454,7 @@ var SERVICES = [
     id: "firecrawl",
     displayName: "Firecrawl",
     category: "service",
-    group: "Web Search",
+    team: "Web Search",
     hint: "web_fetch fallback for JS-heavy/blocked pages \xB7 firecrawl.dev (free tier available)",
     fields: [
       {
@@ -470,7 +476,7 @@ var SERVICES = [
     id: "brave-search",
     displayName: "Brave Search",
     category: "service",
-    group: "Web Search",
+    team: "Web Search",
     hint: "Web search tool \xB7 free tier at brave.com/search/api/",
     fields: [{ envVar: "BRAVE_API_KEY", kind: "secret", label: "API key", placeholder: "BSA..." }]
   },
@@ -478,7 +484,7 @@ var SERVICES = [
     id: "searxng",
     displayName: "SearXNG",
     category: "service",
-    group: "Web Search",
+    team: "Web Search",
     hint: "Self-hosted meta-search engine \xB7 searxng.org",
     fields: [
       {
@@ -493,7 +499,7 @@ var SERVICES = [
     id: "browser",
     displayName: "Browser Automation",
     category: "service",
-    group: "Browser",
+    team: "Browser",
     hint: "Playwright-driven browser tools (navigate, snapshot, click, screenshot). Run `pnpm exec playwright install chromium` once.",
     fields: [
       {
@@ -591,44 +597,64 @@ var CONFIG_KEYS = [
 var CONFIG_KEY_SET = new Set(CONFIG_KEYS);
 
 // ../daemon/src/core/repos/mcpServers.ts
-import { randomUUID as randomUUID2 } from "crypto";
+import { randomUUID as randomUUID5 } from "crypto";
 
 // ../daemon/src/core/repos/messages.ts
-import { randomUUID as randomUUID3 } from "crypto";
+import { randomUUID as randomUUID6 } from "crypto";
 
 // ../daemon/src/core/repos/secrets.ts
 import { createCipheriv, createDecipheriv, pbkdf2Sync, randomBytes } from "crypto";
 
 // ../daemon/src/core/repos/triggers.ts
-import { randomUUID as randomUUID4 } from "crypto";
+import { randomUUID as randomUUID7 } from "crypto";
 
 // ../daemon/src/core/repos/webTokens.ts
-import { createHash, randomBytes as randomBytes2, randomUUID as randomUUID5 } from "crypto";
+import { createHash as createHash2, randomBytes as randomBytes2, randomUUID as randomUUID8 } from "crypto";
 
 // ../daemon/src/core/secrets.ts
-import { existsSync as existsSync7, readFileSync as readFileSync5 } from "fs";
+import { existsSync as existsSync7, readFileSync as readFileSync6 } from "fs";
 
 // ../daemon/src/core/skills/import.ts
-import { cpSync, existsSync as existsSync8, mkdtempSync, readdirSync as readdirSync4, rmSync as rmSync5, statSync as statSync2 } from "fs";
+import { cpSync, existsSync as existsSync8, mkdtempSync, readdirSync as readdirSync3, rmSync as rmSync5, statSync as statSync2 } from "fs";
 import { tmpdir } from "os";
-import { basename, join as join10, resolve as resolve2, sep } from "path";
+import { basename, join as join11, resolve as resolve2, sep } from "path";
 import AdmZip from "adm-zip";
 
 // ../daemon/src/core/skills/parse.ts
-import { readFileSync as readFileSync6 } from "fs";
+import { readFileSync as readFileSync7 } from "fs";
 import { parse as parseYaml } from "yaml";
 
+// ../daemon/src/core/team/delete.ts
+import { randomUUID as randomUUID9 } from "crypto";
+import { existsSync as existsSync9, renameSync as renameSync2, rmSync as rmSync6 } from "fs";
+
+// ../daemon/src/core/team-policy/adopt.ts
+import { randomUUID as randomUUID10 } from "crypto";
+
+// ../daemon/src/core/team-policy/authorization.ts
+import { createHash as createHash3, randomUUID as randomUUID11 } from "crypto";
+
+// ../daemon/src/core/team-policy/source.ts
+import { randomUUID as randomUUID12 } from "crypto";
+
+// ../daemon/src/core/team-policy/spawn.ts
+import { randomUUID as randomUUID13 } from "crypto";
+import { readdirSync as readdirSync4, rmSync as rmSync8 } from "fs";
+
+// ../daemon/src/core/team-policy/rm-with-retry.ts
+import { rmSync as rmSync7 } from "fs";
+
 // ../daemon/src/runtime/memory/qmd.ts
 import {
-  existsSync as existsSync9,
+  existsSync as existsSync10,
   mkdirSync as mkdirSync4,
   readdirSync as readdirSync5,
-  readFileSync as readFileSync7,
-  rmSync as rmSync6,
+  readFileSync as readFileSync8,
+  rmSync as rmSync9,
   statSync as statSync3,
-  writeFileSync as writeFileSync5
+  writeFileSync as writeFileSync6
 } from "fs";
-import { dirname as dirname2, join as join11 } from "path";
+import { dirname as dirname2, join as join12 } from "path";
 import { createStore, extractSnippet } from "@tobilu/qmd";
 var INDEX_FILENAME = ".qmd-index.sqlite";
 var COLLECTION_NAME = "memory";
@@ -638,7 +664,7 @@ function getStore(dir) {
   let p = storeCache.get(dir);
   if (!p) {
     p = createStore({
-      dbPath: join11(dir, INDEX_FILENAME),
+      dbPath: join12(dir, INDEX_FILENAME),
       config: {
         collections: {
           [COLLECTION_NAME]: { path: dir, pattern: PATTERN }
@@ -653,13 +679,13 @@ function safeKey(root, key) {
   if (key.includes("..") || key.startsWith("/") || key.includes("\0")) {
     throw new Error(`unsafe memory key: ${key}`);
   }
-  return join11(root, key);
+  return join12(root, key);
 }
 function walkMd(dir, prefix, out) {
-  if (!existsSync9(dir)) return;
+  if (!existsSync10(dir)) return;
   for (const e of readdirSync5(dir, { withFileTypes: true })) {
     if (e.name.startsWith(".")) continue;
-    const full = join11(dir, e.name);
+    const full = join12(dir, e.name);
     const key = prefix ? `${prefix}/${e.name}` : e.name;
     if (e.isDirectory()) {
       walkMd(full, key, out);
@@ -667,7 +693,7 @@ function walkMd(dir, prefix, out) {
       const stats = statSync3(full);
       out.push({
         key,
-        content: readFileSync7(full, "utf8"),
+        content: readFileSync8(full, "utf8"),
         updatedAt: stats.mtimeMs
       });
     }
@@ -682,20 +708,20 @@ function qmdBackend(root) {
     },
     async read(key) {
       const path = safeKey(root, key);
-      if (!existsSync9(path)) {
+      if (!existsSync10(path)) {
         throw new Error(`memory entry not found: ${key}`);
       }
       const stats = statSync3(path);
       return {
         key,
-        content: readFileSync7(path, "utf8"),
+        content: readFileSync8(path, "utf8"),
         updatedAt: stats.mtimeMs
       };
     },
     async write(key, content) {
       const path = safeKey(root, key);
       mkdirSync4(dirname2(path), { recursive: true });
-      writeFileSync5(path, content);
+      writeFileSync6(path, content);
       const stats = statSync3(path);
       const store = await getStore(root);
       await store.update();
@@ -715,7 +741,7 @@ function qmdBackend(root) {
         let content = r.body ?? "";
         if (!content) {
           try {
-            content = readFileSync7(join11(root, key), "utf8");
+            content = readFileSync8(join12(root, key), "utf8");
           } catch {
             content = "";
           }
@@ -732,7 +758,7 @@ function qmdBackend(root) {
     },
     async remove(key) {
       const path = safeKey(root, key);
-      if (existsSync9(path)) rmSync6(path);
+      if (existsSync10(path)) rmSync9(path);
       const store = await getStore(root);
       await store.update();
     }
@@ -889,8 +915,8 @@ function piMessagesToProviderView(messages) {
 }
 
 // ../daemon/src/runtime/pi/session.ts
-import { existsSync as existsSync12, mkdirSync as mkdirSync5, readdirSync as readdirSync7, statSync as statSync6 } from "fs";
-import { basename as basename3, join as join15 } from "path";
+import { existsSync as existsSync13, mkdirSync as mkdirSync5, readdirSync as readdirSync7, statSync as statSync6 } from "fs";
+import { basename as basename3, join as join16 } from "path";
 import {
   AuthStorage,
   createAgentSession,
@@ -905,7 +931,7 @@ import {
   getModel,
   streamSimple,
   Type
-} from "@earendil-works/pi-ai";
+} from "@earendil-works/pi-ai/compat";
 function defaultBaseUrlFor(providerName) {
   switch (providerName) {
     case "lmstudio":
@@ -950,8 +976,8 @@ function resolveModel(cfg, modelId) {
 import { loginOpenAICodex, refreshOpenAICodexToken } from "@earendil-works/pi-ai/oauth";
 
 // ../daemon/src/runtime/session/prompt.ts
-import { existsSync as existsSync10, readFileSync as readFileSync8 } from "fs";
-import { join as join12 } from "path";
+import { existsSync as existsSync11, readFileSync as readFileSync9 } from "fs";
+import { join as join13 } from "path";
 var CONTEXT_FILE_ORDER = [
   "AGENTS.md",
   "SOUL.md",
@@ -963,9 +989,9 @@ function buildSystemPrompt(agent) {
   const parts = [];
   const contextBlocks = [];
   for (const file of CONTEXT_FILE_ORDER) {
-    const path = join12(agent.agent.dir, file);
-    if (!existsSync10(path)) continue;
-    const content = readFileSync8(path, "utf8").trimEnd();
+    const path = join13(agent.agent.dir, file);
+    if (!existsSync11(path)) continue;
+    const content = readFileSync9(path, "utf8").trimEnd();
     if (!content) continue;
     contextBlocks.push(`## ${file}
 
@@ -976,9 +1002,9 @@ ${content}`);
 
 ${contextBlocks.join("\n\n")}`);
   }
-  const bootstrapPath = join12(agent.agent.dir, "BOOTSTRAP.md");
-  if (existsSync10(bootstrapPath)) {
-    const bootstrap = readFileSync8(bootstrapPath, "utf8").trimEnd();
+  const bootstrapPath = join13(agent.agent.dir, "BOOTSTRAP.md");
+  if (existsSync11(bootstrapPath)) {
+    const bootstrap = readFileSync9(bootstrapPath, "utf8").trimEnd();
     if (bootstrap) {
       parts.push(
         [
@@ -1017,31 +1043,31 @@ ${contextBlocks.join("\n\n")}`);
 You have access to the following skills: ${agent.skills.join(", ")}.`
     );
   }
-  const groupLines = [
-    "# Group",
+  const teamLines = [
+    "# Team",
     "",
-    `- ${agent.group.id} (${agent.group.name}): ${agent.group.path}`,
+    `- ${agent.team.id} (${agent.team.name}): ${agent.team.path}`,
     "",
-    "Your group is where work product lives \u2014 code, docs, artefacts, shared scratch. It may be shared with other agents in the same group. Your coding tools (`read`, `bash`, `edit`, `write`, `grep`, `find`, `ls`) are rooted at the group directory. Never use these tools to edit your identity/soul/behaviour files \u2014 those live in your home and are reached via `home_write` / `home_read`."
+    "Your team is where work product lives \u2014 code, docs, artefacts, shared scratch. It may be shared with other agents in the same team. Your coding tools (`read`, `bash`, `edit`, `write`, `grep`, `find`, `ls`) are rooted at the team directory. Never use these tools to edit your identity/soul/behaviour files \u2014 those live in your home and are reached via `home_write` / `home_read`."
   ];
-  parts.push(groupLines.join("\n"));
-  if (agent.group.userMd.trim()) {
+  parts.push(teamLines.join("\n"));
+  if (agent.team.userMd.trim()) {
     parts.push(
       `# About the User
 
-Shared context about the human you're working with in this group. Both you and the human curate it. To update: call \`user_md_get\` (returns current content + an etag), merge your change into the full text, then call \`user_md_write\` with the merged content and the etag. Use this for STABLE user-specific facts (preferences, role, working hours, how they like to be addressed) \u2014 and to CORRECT stale entries when the human tells you something different from what's recorded. For project knowledge use \`memory_write\` instead; for personal notes about yourself use \`home_write\` on IDENTITY.md. **Do NOT send peer messages announcing USER.md changes \u2014 every agent in the group sees the new content in their system prompt on their next turn automatically.**
+Shared context about the human you're working with in this team. Both you and the human curate it. To update: call \`user_md_get\` (returns current content + an etag), merge your change into the full text, then call \`user_md_write\` with the merged content and the etag. Use this for STABLE user-specific facts (preferences, role, working hours, how they like to be addressed) \u2014 and to CORRECT stale entries when the human tells you something different from what's recorded. For project knowledge use \`memory_write\` instead; for personal notes about yourself use \`home_write\` on IDENTITY.md. **Do NOT send peer messages announcing USER.md changes \u2014 every agent in the team sees the new content in their system prompt on their next turn automatically.**
 
-${agent.group.userMd.trim()}`
+${agent.team.userMd.trim()}`
     );
   } else {
     parts.push(
       `# About the User
 
-This group's USER.md is empty. As you learn STABLE facts about the human (preferences, role, working hours, how they like to be addressed), populate it via \`user_md_get\` then \`user_md_write\` (always get first \u2014 you need the etag). Reserve this for things you're confident are durable \u2014 project knowledge belongs in \`memory_write\`, personal notes about yourself in \`home_write\` on IDENTITY.md. **Do NOT send peer messages announcing USER.md changes \u2014 every agent in the group sees the new content in their system prompt on their next turn automatically.**`
+This team's USER.md is empty. As you learn STABLE facts about the human (preferences, role, working hours, how they like to be addressed), populate it via \`user_md_get\` then \`user_md_write\` (always get first \u2014 you need the etag). Reserve this for things you're confident are durable \u2014 project knowledge belongs in \`memory_write\`, personal notes about yourself in \`home_write\` on IDENTITY.md. **Do NOT send peer messages announcing USER.md changes \u2014 every agent in the team sees the new content in their system prompt on their next turn automatically.**`
     );
   }
   parts.push(
-    "# Memory\n\nYou share a persistent memory backend with every other agent in this group. Use `memory_write` to remember things across sessions, and `memory_search` / `memory_read` / `memory_list` to recall them. This memory is for project knowledge \u2014 codebase notes, decisions, things the user told you about the work. For personal notes about yourself (preferences, persona quirks), use `home_write` on IDENTITY.md instead. Always check memory at the start of a session: another agent in the group may have already learned something useful. **Do NOT send peer messages announcing memory writes \u2014 every agent has access to the same store via `memory_search` and will find your note when they need it.**"
+    "# Memory\n\nYou share a persistent memory backend with every other agent in this team. Use `memory_write` to remember things across sessions, and `memory_search` / `memory_read` / `memory_list` to recall them. This memory is for project knowledge \u2014 codebase notes, decisions, things the user told you about the work. For personal notes about yourself (preferences, persona quirks), use `home_write` on IDENTITY.md instead. Always check memory at the start of a session: another agent in the team may have already learned something useful. **Do NOT send peer messages announcing memory writes \u2014 every agent has access to the same store via `memory_search` and will find your note when they need it.**"
   );
   return parts.join("\n\n---\n\n");
 }
@@ -1050,8 +1076,8 @@ This group's USER.md is empty. As you learn STABLE facts about the human (prefer
 import { Type as Type2 } from "typebox";
 
 // ../daemon/src/runtime/tools/bootstrap.ts
-import { existsSync as existsSync11, rmSync as rmSync7 } from "fs";
-import { join as join13 } from "path";
+import { existsSync as existsSync12, rmSync as rmSync10 } from "fs";
+import { join as join14 } from "path";
 function bootstrapTool(agentDir) {
   return {
     def: {
@@ -1060,9 +1086,9 @@ function bootstrapTool(agentDir) {
       parameters: { type: "object", properties: {} }
     },
     async invoke() {
-      const path = join13(agentDir, "BOOTSTRAP.md");
-      if (existsSync11(path)) {
-        rmSync7(path);
+      const path = join14(agentDir, "BOOTSTRAP.md");
+      if (existsSync12(path)) {
+        rmSync10(path);
         return "BOOTSTRAP.md removed. Bootstrap is complete.";
       }
       return "BOOTSTRAP.md was already removed.";
@@ -1200,7 +1226,7 @@ function browserTools(host, agentId) {
 }
 
 // ../daemon/src/runtime/tools/deliver-file.ts
-import { readFileSync as readFileSync9, statSync as statSync4 } from "fs";
+import { readFileSync as readFileSync10, statSync as statSync4 } from "fs";
 import { basename as basename2, extname, isAbsolute, resolve as resolve3 } from "path";
 var MAX_DELIVER_BYTES = 25 * 1024 * 1024;
 var MIME = {
@@ -1251,15 +1277,15 @@ function deliverFileTool(cwd, sink) {
       }
       const name = basename2(abs);
       const mimeType = MIME[extname(abs).toLowerCase()] ?? "application/octet-stream";
-      sink({ name, mimeType, data: readFileSync9(abs).toString("base64") });
+      sink({ name, mimeType, data: readFileSync10(abs).toString("base64") });
       return `Delivered "${name}" (${mimeType}) to the user.`;
     }
   };
 }
 
 // ../daemon/src/runtime/tools/home.ts
-import { readdirSync as readdirSync6, readFileSync as readFileSync10, statSync as statSync5, writeFileSync as writeFileSync6 } from "fs";
-import { join as join14 } from "path";
+import { readdirSync as readdirSync6, readFileSync as readFileSync11, statSync as statSync5, writeFileSync as writeFileSync7 } from "fs";
+import { join as join15 } from "path";
 var HOME_FILES_READABLE = [
   "IDENTITY.md",
   "SOUL.md",
@@ -1296,9 +1322,9 @@ function homeTools(agentDir) {
             `home_read: "file" must be one of ${HOME_FILES_READABLE.join(", ")}; got "${file}"`
           );
         }
-        const path = join14(agentDir, file);
+        const path = join15(agentDir, file);
         try {
-          return readFileSync10(path, "utf8");
+          return readFileSync11(path, "utf8");
         } catch (err) {
           const msg = err instanceof Error ? err.message : String(err);
           throw new Error(`home_read: could not read ${file}: ${msg}`);
@@ -1308,7 +1334,7 @@ function homeTools(agentDir) {
     {
       def: {
         name: "home_write",
-        description: "Overwrite one of your own home files. Use this to update your name, personality, or persistent self-definition. Do NOT use this for work output (use `write` / `edit` \u2014 those land in your group's shared directory) or for facts you want to remember (use `memory_write`). BOOTSTRAP.md is not writable here; call `bootstrap_done` to retire it.",
+        description: "Overwrite one of your own home files. Use this to update your name, personality, or persistent self-definition. Do NOT use this for work output (use `write` / `edit` \u2014 those land in your team's shared directory) or for facts you want to remember (use `memory_write`). BOOTSTRAP.md is not writable here; call `bootstrap_done` to retire it.",
         parameters: {
           type: "object",
           properties: {
@@ -1326,8 +1352,8 @@ function homeTools(agentDir) {
           );
         }
         const content = typeof args.content === "string" ? args.content : "";
-        const path = join14(agentDir, file);
-        writeFileSync6(path, content, "utf8");
+        const path = join15(agentDir, file);
+        writeFileSync7(path, content, "utf8");
         return `wrote ${file} (${Buffer.byteLength(content, "utf8")} bytes)`;
       }
     },
@@ -1340,7 +1366,7 @@ function homeTools(agentDir) {
       async invoke() {
         const entries = [];
         for (const file of HOME_FILES_READABLE) {
-          const path = join14(agentDir, file);
+          const path = join15(agentDir, file);
           try {
             const s = statSync5(path);
             entries.push(`${file} (${s.size}b)`);
@@ -1381,7 +1407,7 @@ function memoryTools(memory) {
     {
       def: {
         name: "memory_write",
-        description: 'Write or update a memory note in the GROUP-SHARED memory. All agents in this group can read what you write. Use it for project knowledge, codebase notes, decisions, and findings \u2014 anything other agents in the group should benefit from. For personal notes about yourself (preferences, persona) use `home_write` on IDENTITY.md. For STABLE facts about the human you\'re working with (their preferences, role, working hours, how they like to be addressed) use `user_md_get` then `user_md_write` \u2014 those land in every agent\'s system prompt directly. Key is a path-like string with a markdown extension, e.g. "auth-flow.md" or "decisions/2026-05-migration.md".',
+        description: 'Write or update a memory note in the GROUP-SHARED memory. All agents in this team can read what you write. Use it for project knowledge, codebase notes, decisions, and findings \u2014 anything other agents in the team should benefit from. For personal notes about yourself (preferences, persona) use `home_write` on IDENTITY.md. For STABLE facts about the human you\'re working with (their preferences, role, working hours, how they like to be addressed) use `user_md_get` then `user_md_write` \u2014 those land in every agent\'s system prompt directly. Key is a path-like string with a markdown extension, e.g. "auth-flow.md" or "decisions/2026-05-migration.md".',
         parameters: {
           type: "object",
           properties: {
@@ -1402,7 +1428,7 @@ function memoryTools(memory) {
     {
       def: {
         name: "memory_search",
-        description: "Search the group-shared memory by substring. Returns matching entry keys with short snippets around the match.",
+        description: "Search the team-shared memory by substring. Returns matching entry keys with short snippets around the match.",
         parameters: {
           type: "object",
           properties: {
@@ -1424,7 +1450,7 @@ function memoryTools(memory) {
     {
       def: {
         name: "memory_read",
-        description: "Read a single entry from the group-shared memory by key.",
+        description: "Read a single entry from the team-shared memory by key.",
         parameters: {
           type: "object",
           properties: { key: { type: "string" } },
@@ -1441,7 +1467,7 @@ function memoryTools(memory) {
     {
       def: {
         name: "memory_list",
-        description: "List every entry in the group-shared memory with its byte size.",
+        description: "List every entry in the team-shared memory with its byte size.",
         parameters: { type: "object", properties: {} }
       },
       async invoke() {
@@ -1467,7 +1493,7 @@ function messagingTools(host, fromAgentId) {
     {
       def: {
         name: "send_message",
-        description: `Send a message to another agent. Use the recipient's agent id (UUID). Use this ONLY for things the recipient needs to ACT on: delegating a task, asking a peer for information you cannot get yourself, escalating a decision. Do NOT use it for status updates or to announce changes to group-shared resources \u2014 USER.md and the group memory backend both propagate to every agent in the group automatically on their next turn, so messages like "I updated USER.md" or "I wrote a new memory note" are pure noise and will trigger an inbox-wake loop on the recipient.`,
+        description: `Send a message to another agent. Use the recipient's agent id (UUID). Use this ONLY for things the recipient needs to ACT on: delegating a task, asking a peer for information you cannot get yourself, escalating a decision. Do NOT use it for status updates or to announce changes to team-shared resources \u2014 USER.md and the team memory backend both propagate to every agent in the team automatically on their next turn, so messages like "I updated USER.md" or "I wrote a new memory note" are pure noise and will trigger an inbox-wake loop on the recipient.`,
         parameters: {
           type: "object",
           properties: {
@@ -1499,6 +1525,31 @@ function messagingTools(host, fromAgentId) {
         return `sent message ${messageId}`;
       }
     },
+    {
+      def: {
+        name: "approval_status",
+        description: "Check the current status of a communication approval request that you created.",
+        parameters: {
+          type: "object",
+          properties: {
+            approval_id: {
+              type: "string",
+              description: "Approval request id returned by a protected communication attempt"
+            }
+          },
+          required: ["approval_id"]
+        }
+      },
+      async invoke(args) {
+        const approvalId = String(args.approval_id ?? "");
+        if (!approvalId) throw new Error('approval_status: "approval_id" is required');
+        const approval = await host.approvalStatus(fromAgentId, approvalId);
+        if (!approval) throw new Error(`approval_status: approval not found: ${approvalId}`);
+        const decision = approval.decidedBy ? `; decided by ${approval.decidedBy}${approval.decisionReason ? ` (${approval.decisionReason})` : ""}` : "";
+        const failure = approval.deliveryError ? `; delivery error: ${approval.deliveryError}` : "";
+        return `approval ${approval.id}: ${approval.status}; expires ${approval.expiresAt}${decision}${failure}`;
+      }
+    },
     {
       def: {
         name: "read_inbox",
@@ -1572,19 +1623,19 @@ function messagingTools(host, fromAgentId) {
 }
 
 // ../daemon/src/runtime/tools/user-md.ts
-function userMdTools(host, groupId) {
+function userMdTools(host, teamId) {
   return [
     {
       def: {
         name: "user_md_get",
-        description: "Read the group-shared USER.md (facts every agent in the group knows about the human). Returns the current content followed by an `etag:` line \u2014 you MUST pass that etag back as `if_match` on the next `user_md_write` so the daemon can detect concurrent edits by other agents in the group. Always call this immediately before any `user_md_write`.",
+        description: "Read the team-shared USER.md (facts every agent in the team knows about the human). Returns the current content followed by an `etag:` line \u2014 you MUST pass that etag back as `if_match` on the next `user_md_write` so the daemon can detect concurrent edits by other agents in the team. Always call this immediately before any `user_md_write`.",
         parameters: {
           type: "object",
           properties: {}
         }
       },
       async invoke() {
-        const { content, etag } = await host.get(groupId);
+        const { content, etag } = await host.get(teamId);
         const body = content.length > 0 ? content : "(USER.md is empty)";
         return `${body}
 
@@ -1595,7 +1646,7 @@ etag: ${etag}`;
     {
       def: {
         name: "user_md_write",
-        description: "Replace the group-shared USER.md with new content. Use this for STABLE user-specific facts (preferences, role, working hours, how the human likes to be addressed). MANDATORY workflow: (1) call `user_md_get` first, (2) integrate your change into the full content preserving everything unrelated, (3) call `user_md_write` with the merged content and the etag you got from `user_md_get`. If another agent in the group wrote to USER.md between your get and write, this returns an etag-mismatch error \u2014 just call `user_md_get` again and retry the merge. The full result must fit under 12 KB. For project knowledge use `memory_write`; for notes about yourself use `home_write` on IDENTITY.md.",
+        description: "Replace the team-shared USER.md with new content. Use this for STABLE user-specific facts (preferences, role, working hours, how the human likes to be addressed). MANDATORY workflow: (1) call `user_md_get` first, (2) integrate your change into the full content preserving everything unrelated, (3) call `user_md_write` with the merged content and the etag you got from `user_md_get`. If another agent in the team wrote to USER.md between your get and write, this returns an etag-mismatch error \u2014 just call `user_md_get` again and retry the merge. The full result must fit under 12 KB. For project knowledge use `memory_write`; for notes about yourself use `home_write` on IDENTITY.md.",
         parameters: {
           type: "object",
           properties: {
@@ -1619,7 +1670,7 @@ etag: ${etag}`;
             'user_md_write: "if_match" is required \u2014 call user_md_get first to obtain the current etag.'
           );
         }
-        const { etag, totalBytes } = await host.write(groupId, content, ifMatch);
+        const { etag, totalBytes } = await host.write(teamId, content, ifMatch);
         return `wrote USER.md (${totalBytes} bytes, new etag: ${etag})`;
       }
     }
@@ -2225,7 +2276,7 @@ function createBazilionCustomTools(opts) {
     handlers.push(...messagingTools(opts.messagingHost, opts.agent.agent.id));
   }
   if (opts.userMdHost) {
-    handlers.push(...userMdTools(opts.userMdHost, opts.agent.group.id));
+    handlers.push(...userMdTools(opts.userMdHost, opts.agent.team.id));
   }
   if (opts.browserHost) {
     handlers.push(...browserTools(opts.browserHost, opts.agent.agent.id));
@@ -2234,7 +2285,7 @@ function createBazilionCustomTools(opts) {
     handlers.push(...mcpProxyTools(opts.mcpHost, opts.mcpTools));
   }
   if (opts.fileSink) {
-    handlers.push(deliverFileTool(opts.agent.group.path, opts.fileSink));
+    handlers.push(deliverFileTool(opts.agent.team.path, opts.fileSink));
   }
   return handlers.map(ourToolToPiTool);
 }
@@ -2284,9 +2335,9 @@ async function createBazilionSession(opts) {
       apiKey: apiKey ?? "dummy"
     });
   }
-  const cwd = agent.group.path;
-  if (!existsSync12(cwd)) mkdirSync5(cwd, { recursive: true });
-  const sessionDir = join15(paths.agentDir(agent.agent.id), "sessions");
+  const cwd = agent.team.path;
+  if (!existsSync13(cwd)) mkdirSync5(cwd, { recursive: true });
+  const sessionDir = join16(paths.agentDir(agent.agent.id), "sessions");
   mkdirSync5(sessionDir, { recursive: true });
   const existing = findMostRecent(sessionDir);
   const sessionManager = existing ? SessionManager.open(existing, sessionDir, cwd) : SessionManager.create(cwd, sessionDir);
@@ -2316,7 +2367,7 @@ async function createBazilionSession(opts) {
   const allowedTools = [...BUILTIN_TOOL_NAMES, ...customTools.map((t) => t.name)];
   const { session } = await createAgentSession({
     cwd,
-    agentDir: join15(paths.home, "pi"),
+    agentDir: join16(paths.home, "pi"),
     model,
     thinkingLevel: toPiThinkingLevel(agent.reasoningLevel),
     tools: allowedTools,
@@ -2442,11 +2493,11 @@ function createBazilionResourceLoader(appendSystemPrompt) {
   };
 }
 function findMostRecent(sessionDir) {
-  if (!existsSync12(sessionDir)) return null;
+  if (!existsSync13(sessionDir)) return null;
   let newest = null;
   for (const entry of readdirSync7(sessionDir)) {
     if (!entry.endsWith(".jsonl")) continue;
-    const path = join15(sessionDir, entry);
+    const path = join16(sessionDir, entry);
     try {
       const s = statSync6(path);
       if (!newest || s.mtimeMs > newest.mtimeMs) newest = { path, mtimeMs: s.mtimeMs };
@@ -2490,7 +2541,7 @@ function createIpcClient() {
     if (!process.send) {
       return Promise.reject(new Error("worker: no IPC channel \u2014 daemon must spawn with stdio:ipc"));
     }
-    const id = randomUUID6();
+    const id = randomUUID14();
     const message = { type: "rpc", id, method, args };
     return new Promise((resolve4, reject) => {
       pending.set(id, { resolve: (v) => resolve4(v), reject });
@@ -2511,13 +2562,14 @@ function createIpcMessagingHost(call) {
     markRead: async (messageId) => {
       await call("markRead", { messageId });
     },
-    findReplies: (agentId, replyTo) => call("findReplies", { agentId, replyTo })
+    findReplies: (agentId, replyTo) => call("findReplies", { agentId, replyTo }),
+    approvalStatus: (agentId, approvalId) => call("approvalStatus", { agentId, approvalId })
   };
 }
 function createIpcUserMdHost(call) {
   return {
-    get: (groupId) => call("userMdGet", { groupId }),
-    write: (groupId, content, ifMatch) => call("userMdWrite", { groupId, content, ifMatch })
+    get: (teamId) => call("userMdGet", { teamId }),
+    write: (teamId, content, ifMatch) => call("userMdWrite", { teamId, content, ifMatch })
   };
 }
 function createIpcBrowserHost(call) {
@@ -2554,7 +2606,7 @@ async function main() {
   process.on("SIGINT", onSignal);
   const { agent, message, enabledProviders, apiKey, browserEnabled, mcpTools, images } = await readInput();
   const paths = resolvePaths();
-  const memory = qmdBackend(join16(agent.group.path, "memory"));
+  const memory = qmdBackend(join17(agent.team.path, "memory"));
   await memory.init();
   const ipcCall = createIpcClient();
   const messagingHost = createIpcMessagingHost(ipcCall);