poe-code 3.0.203 → 3.0.205

package/dist/providers/codex.js

@@ -212,10 +212,171 @@ import path2 from "node:path";
 
 // packages/agent-harness-tools/src/log-stream.ts
 import nodeFs from "node:fs";
+var JOB_DIR = "/tmp/poe-jobs";
+var POLL_INTERVAL_MS = 250;
+async function* streamLogFile(env, jobId, opts) {
+  const fs = env.fs ?? nodeFs;
+  const file = jobLogPath(jobId);
+  let byteOffset = opts.sinceByte ?? 0;
+  while (true) {
+    if (opts.since !== void 0 && !await wasModifiedSince(fs, file, opts.since)) {
+      await waitForLogChange(fs, file);
+      continue;
+    }
+    const result = await readLogChunk(fs, file, byteOffset);
+    if (result !== null) {
+      byteOffset = result.nextByteOffset;
+      yield result.chunk;
+      continue;
+    }
+    await waitForLogChange(fs, file);
+  }
+}
+async function wasModifiedSince(fs, file, since) {
+  if (fs.promises.stat === void 0) {
+    return true;
+  }
+  try {
+    const stat2 = await fs.promises.stat(file);
+    return stat2.mtimeMs >= since.getTime();
+  } catch (error2) {
+    if (isNodeError(error2) && error2.code === "ENOENT") {
+      return false;
+    }
+    throw error2;
+  }
+}
+async function waitForExit(env, jobId, opts = {}) {
+  const fs = env.fs ?? nodeFs;
+  const file = jobExitPath(jobId);
+  while (true) {
+    throwIfAborted(opts.signal);
+    const contents = await readTextFileIfExists(fs, file);
+    if (contents !== null) {
+      const text4 = contents.trim();
+      const exitCode = Number(text4);
+      if (text4.length === 0 || !Number.isInteger(exitCode)) {
+        throw new Error(`Invalid exit code in ${file}: ${contents}`);
+      }
+      return { exitCode };
+    }
+    await sleep(POLL_INTERVAL_MS, opts.signal);
+  }
+}
+function jobLogPath(jobId) {
+  return `${JOB_DIR}/${jobId}.log`;
+}
+function jobExitPath(jobId) {
+  return `${JOB_DIR}/${jobId}.exit`;
+}
+async function readLogChunk(fs, file, byteOffset) {
+  const contents = await readFileIfExists(fs, file);
+  if (contents === null || byteOffset >= contents.byteLength) {
+    return null;
+  }
+  return {
+    chunk: {
+      byteOffset,
+      data: contents.subarray(byteOffset).toString("utf8")
+    },
+    nextByteOffset: contents.byteLength
+  };
+}
+async function readTextFileIfExists(fs, file) {
+  const contents = await readFileIfExists(fs, file);
+  return contents?.toString("utf8") ?? null;
+}
+async function readFileIfExists(fs, file) {
+  try {
+    const contents = await fs.promises.readFile(file);
+    return Buffer.isBuffer(contents) ? contents : Buffer.from(contents);
+  } catch (error2) {
+    if (isNodeError(error2) && error2.code === "ENOENT") {
+      return null;
+    }
+    throw error2;
+  }
+}
+async function waitForLogChange(fs, file) {
+  const watch = fs.watch;
+  if (typeof watch !== "function") {
+    await sleep(POLL_INTERVAL_MS);
+    return;
+  }
+  await new Promise((resolve2) => {
+    let watcher = null;
+    const timer = setTimeout(done, POLL_INTERVAL_MS);
+    function done() {
+      clearTimeout(timer);
+      watcher?.close();
+      resolve2();
+    }
+    try {
+      watcher = watch(file, done);
+    } catch {
+      done();
+    }
+  });
+}
+function sleep(ms, signal) {
+  return new Promise((resolve2, reject) => {
+    let timer = null;
+    const abort = () => {
+      if (timer !== null) {
+        clearTimeout(timer);
+      }
+      reject(new Error("waitForExit aborted."));
+    };
+    if (signal?.aborted) {
+      abort();
+      return;
+    }
+    timer = setTimeout(() => {
+      signal?.removeEventListener("abort", abort);
+      resolve2();
+    }, ms);
+    signal?.addEventListener("abort", abort, { once: true });
+  });
+}
+function throwIfAborted(signal) {
+  if (signal?.aborted) {
+    throw new Error("waitForExit aborted.");
+  }
+}
+function isNodeError(error2) {
+  return error2 instanceof Error && "code" in error2;
+}
 
 // packages/agent-harness-tools/src/run-poe-command.ts
 import { randomBytes } from "node:crypto";
 
+// packages/agent-harness-tools/src/binary-exists.ts
+function createBinaryExistsDetectors(binaryName) {
+  const commonPaths = [
+    `/usr/local/bin/${binaryName}`,
+    `/usr/bin/${binaryName}`,
+    `$HOME/.local/bin/${binaryName}`,
+    `$HOME/.claude/local/bin/${binaryName}`
+  ];
+  return [
+    {
+      command: "which",
+      args: [binaryName],
+      validate: (result) => result.exitCode === 0
+    },
+    {
+      command: "where",
+      args: [binaryName],
+      validate: (result) => result.exitCode === 0 && result.stdout.trim().length > 0
+    },
+    {
+      command: "sh",
+      args: ["-c", commonPaths.map((p) => `test -f "${p}"`).join(" || ")],
+      validate: (result) => result.exitCode === 0
+    }
+  ];
+}
+
 // packages/agent-harness-tools/src/poe-command-execution.ts
 import { existsSync as existsSync2, readFileSync } from "node:fs";
 import os3 from "node:os";
@@ -277,6 +438,11 @@ var runtimeConfigScope = {
       default: "",
       doc: "Path to the Docker build context"
     },
+    workspace_dir: {
+      type: "string",
+      default: "/workspace",
+      doc: "Sandbox-local workspace directory for E2B runtime upload, execution, and download"
+    },
     engine: {
       type: "string",
       default: "",
@@ -298,6 +464,11 @@ var runtimeConfigScope = {
       default: "",
       doc: "Prebuilt E2B template id"
     },
+    from_template: {
+      type: "string",
+      default: "",
+      doc: "Existing E2B template alias to extend instead of using the Dockerfile FROM image"
+    },
     cpu: {
       type: "json",
       default: void 0,
@@ -321,11 +492,6 @@ var runtimeConfigScope = {
       default: void 0,
       parse: parseOptionalNumber,
       doc: "Hours to keep an E2B sandbox alive after job exit"
-    },
-    api_key_env: {
-      type: "string",
-      default: "",
-      doc: "Environment variable name containing the E2B API key"
     }
   }
 };
@@ -345,6 +511,7 @@ function parseRunner(raw) {
     detach: parseOptionalBoolean(record.detach, "runner.detach") ?? false,
     upload_max_file_mb: uploadMaxFileMb,
     download_conflict: parseDownloadConflict(record.download_conflict),
+    sync: parseRunnerSync(record.sync),
     workspace: parseRunnerWorkspace(record.workspace)
   });
 }
@@ -353,6 +520,7 @@ function createDefaultRunnerScope() {
     detach: false,
     upload_max_file_mb: 100,
     download_conflict: "refuse",
+    sync: "both",
     workspace: {
       exclude: [...defaultWorkspaceExclude]
     }
@@ -383,6 +551,15 @@ function parseDownloadConflict(value) {
   }
   throw new Error('runner.download_conflict: expected "refuse" or "overwrite".');
 }
+function parseRunnerSync(value) {
+  if (value === void 0) {
+    return "both";
+  }
+  if (value === "both" || value === "upload" || value === "none") {
+    return value;
+  }
+  throw new Error('runner.sync: expected "both", "upload", or "none".');
+}
 function parseBuildArgs(value) {
   if (value === void 0) {
     return {};
@@ -476,6 +653,43 @@ function defineScope(scope, schema) {
     schema
   };
 }
+var integrationsConfigScope = defineScope("integrations", {
+  braintrust: {
+    type: "json",
+    default: {
+      enabled: false
+    },
+    parse: parseBraintrustIntegrationConfig,
+    doc: "Braintrust integration configuration"
+  }
+});
+function parseBraintrustIntegrationConfig(value) {
+  if (!isRecord(value)) {
+    throw new Error("expected an object");
+  }
+  const enabled = value.enabled === void 0 ? false : value.enabled;
+  if (typeof enabled !== "boolean") {
+    throw new Error("enabled must be a boolean");
+  }
+  return {
+    enabled,
+    ...optionalStringEntry("apiKey", value.apiKey),
+    ...optionalStringEntry("apiUrl", value.apiUrl),
+    ...optionalStringEntry("project", value.project)
+  };
+}
+function optionalStringEntry(key, value) {
+  if (value === void 0) {
+    return {};
+  }
+  if (typeof value !== "string") {
+    throw new Error(`${key} must be a string`);
+  }
+  return { [key]: value };
+}
+function isRecord(value) {
+  return typeof value === "object" && value !== null && !Array.isArray(value);
+}
 
 // packages/poe-code-config/src/plan-scope.ts
 var planConfigScope = defineScope("plan", {
@@ -492,14 +706,427 @@ import path8 from "node:path";
 
 // packages/config-extends/src/discover.ts
 import path4 from "node:path";
+async function findBase(name, bases, fs) {
+  const checkedPaths = [];
+  for (const basePath of bases) {
+    for (const extension of [".md", ".yaml", ".yml", ".json"]) {
+      const filePath = path4.join(basePath, `${name}${extension}`);
+      checkedPaths.push(filePath);
+      try {
+        return {
+          content: await fs.readFile(filePath, "utf8"),
+          filePath
+        };
+      } catch (error2) {
+        if (hasCode(error2, "ENOENT")) {
+          continue;
+        }
+        throw error2;
+      }
+    }
+  }
+  throw new Error(`Base "${name}" not found.
+Checked paths:
+- ${checkedPaths.join("\n- ")}`);
+}
+function hasCode(error2, code) {
+  return typeof error2 === "object" && error2 !== null && "code" in error2 && error2.code === code;
+}
 
 // packages/config-extends/src/parse.ts
 import path5 from "node:path";
 import matter from "gray-matter";
 import { parse as parseYaml } from "yaml";
+function parseDocument(content, filePath) {
+  const normalizedContent = stripBom(content);
+  const format = detectFormat(normalizedContent, filePath);
+  const data = format === "markdown" ? parseMarkdown(normalizedContent) : toData(format === "json" ? JSON.parse(normalizedContent) : parseYaml(normalizedContent));
+  const hasExtendsField = Object.hasOwn(data, "extends");
+  const extendsValue = data.extends === true;
+  delete data.extends;
+  return {
+    data,
+    format,
+    extends: extendsValue,
+    hasExtendsField
+  };
+}
+function detectFormat(content, filePath) {
+  const extension = path5.extname(filePath).toLowerCase();
+  if (extension === ".md") {
+    return "markdown";
+  }
+  if (extension === ".yaml" || extension === ".yml") {
+    return "yaml";
+  }
+  if (extension === ".json") {
+    return "json";
+  }
+  if (content.startsWith("{")) {
+    return "json";
+  }
+  if (content.startsWith("---\n") || content.startsWith("---\r\n")) {
+    return "markdown";
+  }
+  return "yaml";
+}
+function parseMarkdown(content) {
+  const document = matter(content);
+  return {
+    ...toData(document.data),
+    prompt: document.content
+  };
+}
+function toData(value) {
+  if (!value || typeof value !== "object" || Array.isArray(value)) {
+    return {};
+  }
+  return { ...value };
+}
+function stripBom(content) {
+  if (!content.startsWith("\uFEFF")) {
+    return content;
+  }
+  return content.slice(1);
+}
+
+// packages/config-extends/src/merge.ts
+function mergeLayers(layers) {
+  return mergeObjectLayers(layers, []);
+}
+function mergeObjectLayers(layers, path22) {
+  const data = {};
+  const sources = {};
+  for (const key of collectKeys(layers)) {
+    const resolved = resolveKey(layers, key, path22);
+    if (resolved === void 0) {
+      continue;
+    }
+    data[key] = resolved.value;
+    Object.assign(sources, resolved.sources);
+  }
+  return { data, sources };
+}
+function collectKeys(layers) {
+  const keys = /* @__PURE__ */ new Set();
+  for (const layer of layers) {
+    for (const key of Object.keys(layer.data)) {
+      keys.add(key);
+    }
+  }
+  return [...keys];
+}
+function resolveKey(layers, key, path22) {
+  let winningSource;
+  let winningValue;
+  const objectLayers = [];
+  for (const layer of layers) {
+    const candidate = layer.data[key];
+    if (!isWinningCandidate(key, candidate)) {
+      continue;
+    }
+    if (winningSource === void 0) {
+      winningSource = layer.source;
+      winningValue = candidate;
+      if (isPlainObject(candidate)) {
+        objectLayers.push({
+          source: layer.source,
+          data: candidate
+        });
+      }
+      continue;
+    }
+    if (isPlainObject(winningValue) && isPlainObject(candidate)) {
+      objectLayers.push({
+        source: layer.source,
+        data: candidate
+      });
+    }
+  }
+  if (winningSource === void 0) {
+    return void 0;
+  }
+  const fullPath = buildPath(path22, key);
+  if (isPlainObject(winningValue)) {
+    const merged = mergeObjectLayers(objectLayers, [...path22, key]);
+    return {
+      value: merged.data,
+      sources: {
+        [fullPath]: winningSource,
+        ...merged.sources
+      }
+    };
+  }
+  return {
+    value: cloneValue(winningValue),
+    sources: {
+      [fullPath]: winningSource
+    }
+  };
+}
+function isWinningCandidate(key, value) {
+  if (value === void 0) {
+    return false;
+  }
+  if (key === "prompt" && value === "") {
+    return false;
+  }
+  return true;
+}
+function buildPath(path22, key) {
+  return [...path22, key].join(".");
+}
+function isPlainObject(value) {
+  if (value === null || Array.isArray(value) || typeof value !== "object") {
+    return false;
+  }
+  const prototype = Object.getPrototypeOf(value);
+  return prototype === Object.prototype || prototype === null;
+}
+function cloneValue(value) {
+  if (Array.isArray(value)) {
+    return value.map((entry) => cloneValue(entry));
+  }
+  if (!isPlainObject(value)) {
+    return value;
+  }
+  const clone = Object.create(Object.getPrototypeOf(value));
+  for (const [key, entry] of Object.entries(value)) {
+    clone[key] = cloneValue(entry);
+  }
+  return clone;
+}
 
 // packages/config-extends/src/resolve.ts
 import path6 from "node:path";
+var MAX_EXTENDS_DEPTH = 5;
+var YIELD_TOKEN = "{{yield}}";
+async function resolve(chain, options) {
+  const { baseLayers, documentIndex, documentLayer } = classifyChain(chain);
+  const parsedDocument = parseDocument(documentLayer.content, documentLayer.filePath);
+  const resolvedBase = shouldResolveBase(parsedDocument, options.autoExtend) ? await resolveBaseChain({
+    name: documentLayer.baseName ?? getBaseName(documentLayer.filePath),
+    baseLayers,
+    options,
+    optional: !parsedDocument.extends,
+    visited: /* @__PURE__ */ new Set([documentLayer.filePath]),
+    depth: 1
+  }) : void 0;
+  const composedPrompt = composePromptChain(
+    {
+      source: documentLayer.source,
+      data: parsedDocument.data
+    },
+    resolvedBase?.layers ?? []
+  );
+  const merged = mergeLayers([
+    ...collectDataLayers(chain.slice(0, documentIndex)),
+    {
+      source: documentLayer.source,
+      data: withResolvedPrompt(parsedDocument.data, composedPrompt?.prompt)
+    },
+    ...stripResolvedBasePrompts(resolvedBase?.layers ?? [], composedPrompt?.consumedBaseIndexes ?? /* @__PURE__ */ new Set()),
+    ...collectDataLayers(chain.slice(documentIndex + 1))
+  ]);
+  if (composedPrompt !== void 0 && merged.sources.prompt === documentLayer.source && composedPrompt.source !== void 0) {
+    merged.sources.prompt = composedPrompt.source;
+  }
+  return {
+    data: merged.data,
+    sources: merged.sources,
+    chain: [documentLayer.filePath, ...resolvedBase?.chain ?? []]
+  };
+}
+function classifyChain(chain) {
+  const baseLayers = [];
+  const documentLayers = [];
+  for (const [index, layer] of chain.entries()) {
+    if (isDataLayer(layer)) {
+      continue;
+    }
+    if (isDocumentLayer(layer)) {
+      documentLayers.push({ index, layer });
+      continue;
+    }
+    if (isBaseLayer(layer)) {
+      baseLayers.push(layer);
+    }
+  }
+  if (documentLayers.length !== 1) {
+    throw new Error(`Exactly one document layer is required, received ${documentLayers.length}.`);
+  }
+  return {
+    baseLayers,
+    documentIndex: documentLayers[0].index,
+    documentLayer: documentLayers[0].layer
+  };
+}
+async function resolveBaseChain({
+  name,
+  baseLayers,
+  options,
+  optional,
+  visited,
+  depth
+}) {
+  if (depth > MAX_EXTENDS_DEPTH) {
+    throw new Error(`Maximum extends depth exceeded (${MAX_EXTENDS_DEPTH}).`);
+  }
+  let discoveredBase;
+  try {
+    discoveredBase = await findBase(
+      name,
+      baseLayers.map((layer) => layer.path),
+      options.fs
+    );
+  } catch (error2) {
+    if (optional && isBaseNotFoundError(error2)) {
+      return void 0;
+    }
+    throw error2;
+  }
+  if (visited.has(discoveredBase.filePath)) {
+    if (optional) {
+      return void 0;
+    }
+    throw new Error(
+      `Circular extends detected.
+Visited files:
+- ${[...visited, discoveredBase.filePath].join("\n- ")}`
+    );
+  }
+  const matchedBaseIndex = baseLayers.findIndex(
+    (layer) => layer.path === path6.dirname(discoveredBase.filePath)
+  );
+  if (matchedBaseIndex === -1) {
+    throw new Error(`Resolved base is outside configured base paths: ${discoveredBase.filePath}`);
+  }
+  const parsedBase = parseDocument(discoveredBase.content, discoveredBase.filePath);
+  const nextVisited = new Set(visited);
+  nextVisited.add(discoveredBase.filePath);
+  const nestedBase = parsedBase.extends ? await resolveBaseChain({
+    name: getBaseName(discoveredBase.filePath),
+    baseLayers: baseLayers.slice(matchedBaseIndex + 1),
+    options,
+    optional: false,
+    visited: nextVisited,
+    depth: depth + 1
+  }) : void 0;
+  return {
+    layers: [
+      {
+        source: baseLayers[matchedBaseIndex].source,
+        data: parsedBase.data
+      },
+      ...nestedBase?.layers ?? []
+    ],
+    chain: [discoveredBase.filePath, ...nestedBase?.chain ?? []]
+  };
+}
+function collectDataLayers(chain) {
+  return chain.filter(isDataLayer);
+}
+function composePromptChain(documentLayer, baseLayers) {
+  const documentPrompt = documentLayer.data.prompt;
+  if (documentPrompt !== void 0 && typeof documentPrompt !== "string") {
+    return void 0;
+  }
+  if (documentPrompt !== void 0) {
+    assertValidYieldCount(documentPrompt);
+  }
+  let prompt = documentPrompt;
+  let source = prompt === void 0 || prompt === "" ? void 0 : documentLayer.source;
+  const consumedBaseIndexes = /* @__PURE__ */ new Set();
+  for (const [index, layer] of baseLayers.entries()) {
+    const candidate = layer.data.prompt;
+    if (candidate === void 0) {
+      continue;
+    }
+    if (typeof candidate !== "string") {
+      break;
+    }
+    assertValidYieldCount(candidate);
+    consumedBaseIndexes.add(index);
+    prompt = composeAdjacentPrompts(prompt, candidate);
+    if (source === void 0 && candidate !== "") {
+      source = layer.source;
+    }
+  }
+  if (prompt !== void 0 && prompt.includes(YIELD_TOKEN)) {
+    throw new Error('Final resolved prompt contains an unresolved "{{yield}}" token.');
+  }
+  if (prompt === void 0) {
+    return void 0;
+  }
+  return {
+    consumedBaseIndexes,
+    prompt,
+    source
+  };
+}
+function composeAdjacentPrompts(high, low) {
+  if (high === void 0 || high === "") {
+    return low.includes(YIELD_TOKEN) ? replaceYield(low, "") : low;
+  }
+  if (high.includes(YIELD_TOKEN)) {
+    return replaceYield(high, low);
+  }
+  if (low.includes(YIELD_TOKEN)) {
+    return replaceYield(low, high);
+  }
+  return high;
+}
+function replaceYield(prompt, replacement) {
+  return prompt.replace(YIELD_TOKEN, replacement);
+}
+function assertValidYieldCount(prompt) {
+  if (countYieldTokens(prompt) > 1) {
+    throw new Error('Prompt composition supports exactly one "{{yield}}" token per prompt.');
+  }
+}
+function countYieldTokens(prompt) {
+  return prompt.split(YIELD_TOKEN).length - 1;
+}
+function withResolvedPrompt(data, prompt) {
+  if (prompt === void 0) {
+    return data;
+  }
+  return {
+    ...data,
+    prompt
+  };
+}
+function stripResolvedBasePrompts(layers, consumedBaseIndexes) {
+  return layers.map((layer, index) => {
+    if (!consumedBaseIndexes.has(index) || typeof layer.data.prompt !== "string") {
+      return layer;
+    }
+    const { prompt: ignoredPrompt, ...data } = layer.data;
+    void ignoredPrompt;
+    return {
+      source: layer.source,
+      data
+    };
+  });
+}
+function getBaseName(filePath) {
+  return path6.basename(filePath, path6.extname(filePath));
+}
+function shouldResolveBase(parsedDocument, autoExtend) {
+  return parsedDocument.extends || autoExtend === true && !parsedDocument.hasExtendsField;
+}
+function isBaseNotFoundError(error2) {
+  return error2 instanceof Error && error2.message.startsWith('Base "') && error2.message.includes('" not found.\nChecked paths:');
+}
+function isDataLayer(layer) {
+  return "data" in layer;
+}
+function isDocumentLayer(layer) {
+  return "filePath" in layer && "content" in layer;
+}
+function isBaseLayer(layer) {
+  return "path" in layer;
+}
 
 // packages/config-mutations/src/mutations/config-mutation.ts
 function merge(options) {
@@ -881,16 +1508,16 @@ function getConfigFormat(pathOrFormat) {
   }
   return formatRegistry[formatName];
 }
-function detectFormat(path18) {
-  const ext = getExtension(path18);
+function detectFormat2(path22) {
+  const ext = getExtension(path22);
   return extensionMap[ext];
 }
-function getExtension(path18) {
-  const lastDot = path18.lastIndexOf(".");
+function getExtension(path22) {
+  const lastDot = path22.lastIndexOf(".");
   if (lastDot === -1) {
     return "";
   }
-  return path18.slice(lastDot).toLowerCase();
+  return path22.slice(lastDot).toLowerCase();
 }
 
 // packages/config-mutations/src/execution/path-utils.ts
@@ -941,7 +1568,7 @@ function resolvePath(rawPath, homeDir, pathMapper) {
 function isNotFound(error2) {
   return typeof error2 === "object" && error2 !== null && "code" in error2 && error2.code === "ENOENT";
 }
-async function readFileIfExists(fs, target) {
+async function readFileIfExists2(fs, target) {
   try {
     return await fs.readFile(target, "utf8");
   } catch (error2) {
@@ -1225,7 +1852,7 @@ async function applyBackup(mutation, context, options) {
     label: mutation.label ?? describeMutation(mutation.kind, targetPath),
     targetPath
   };
-  const content = await readFileIfExists(context.fs, targetPath);
+  const content = await readFileIfExists2(context.fs, targetPath);
   if (content === null) {
     return {
       outcome: { changed: false, effect: "none", detail: "noop" },
@@ -1249,14 +1876,14 @@ async function applyConfigMerge(mutation, context, options) {
     label: mutation.label ?? describeMutation(mutation.kind, targetPath),
     targetPath
   };
-  const formatName = mutation.format ?? detectFormat(rawPath);
+  const formatName = mutation.format ?? detectFormat2(rawPath);
   if (!formatName) {
     throw new Error(
       `Cannot detect config format for "${rawPath}". Provide explicit format option.`
     );
   }
   const format = getConfigFormat(formatName);
-  const rawContent = await readFileIfExists(context.fs, targetPath);
+  const rawContent = await readFileIfExists2(context.fs, targetPath);
   let current;
   try {
     current = rawContent === null ? {} : format.parse(rawContent);
@@ -1295,14 +1922,14 @@ async function applyConfigPrune(mutation, context, options) {
     label: mutation.label ?? describeMutation(mutation.kind, targetPath),
     targetPath
   };
-  const rawContent = await readFileIfExists(context.fs, targetPath);
+  const rawContent = await readFileIfExists2(context.fs, targetPath);
   if (rawContent === null) {
     return {
       outcome: { changed: false, effect: "none", detail: "noop" },
       details
     };
   }
-  const formatName = mutation.format ?? detectFormat(rawPath);
+  const formatName = mutation.format ?? detectFormat2(rawPath);
   if (!formatName) {
     throw new Error(
       `Cannot detect config format for "${rawPath}". Provide explicit format option.`
@@ -1358,14 +1985,14 @@ async function applyConfigTransform(mutation, context, options) {
     label: mutation.label ?? describeMutation(mutation.kind, targetPath),
     targetPath
   };
-  const formatName = mutation.format ?? detectFormat(rawPath);
+  const formatName = mutation.format ?? detectFormat2(rawPath);
   if (!formatName) {
     throw new Error(
       `Cannot detect config format for "${rawPath}". Provide explicit format option.`
     );
   }
   const format = getConfigFormat(formatName);
-  const rawContent = await readFileIfExists(context.fs, targetPath);
+  const rawContent = await readFileIfExists2(context.fs, targetPath);
   let current;
   try {
     current = rawContent === null ? {} : format.parse(rawContent);
@@ -1465,7 +2092,7 @@ async function applyTemplateMerge(mutation, context, options, formatName) {
       { cause: error2 }
     );
   }
-  const rawContent = await readFileIfExists(context.fs, targetPath);
+  const rawContent = await readFileIfExists2(context.fs, targetPath);
   let current;
   try {
     current = rawContent === null ? {} : format.parse(rawContent);
@@ -1546,28 +2173,220 @@ function isConfigObject5(value) {
 }
 
 // packages/poe-code-config/src/store.ts
-var EMPTY_DOCUMENT = `${JSON.stringify({}, null, 2)}
-`;
-
-// packages/poe-code-config/src/inspect.ts
-import path9 from "node:path";
-var EMPTY_DOCUMENT2 = `${JSON.stringify({}, null, 2)}
-`;
-
-// packages/poe-code-config/src/state/index.ts
-import os2 from "node:os";
-
-// packages/poe-code-config/src/state/jobs.ts
-import path10 from "node:path";
-
-// packages/poe-code-config/src/state/fs.ts
-import * as nodeFs2 from "node:fs/promises";
-
-// packages/poe-code-config/src/state/templates.ts
-import path11 from "node:path";
-
-// packages/agent-harness-tools/src/execution-env.ts
-var executionEnvFactories = /* @__PURE__ */ new Map();
+async function readMergedDocument(fs, globalPath, projectPath) {
+  const globalDocument = await readStoredDocument(fs, globalPath);
+  if (!projectPath || projectPath === globalPath) {
+    return globalDocument.data;
+  }
+  const projectDocument = await readStoredDocument(fs, projectPath);
+  const resolved = await resolve(
+    [
+      {
+        source: "project",
+        filePath: projectPath,
+        content: projectDocument.content
+      },
+      {
+        source: "base",
+        path: path8.dirname(globalPath)
+      }
+    ],
+    {
+      fs: createResolvedConfigFs(fs, globalPath, globalDocument.content),
+      autoExtend: true
+    }
+  );
+  return normalizeDocument(resolved.data);
+}
+async function readStoredDocument(fs, filePath) {
+  try {
+    const raw = await fs.readFile(filePath, "utf8");
+    return await parseStoredDocument(fs, filePath, raw);
+  } catch (error2) {
+    if (isNotFound(error2)) {
+      return {
+        content: EMPTY_DOCUMENT,
+        data: {}
+      };
+    }
+    throw error2;
+  }
+}
+async function parseStoredDocument(fs, filePath, raw) {
+  try {
+    return {
+      content: raw,
+      data: normalizeDocument(JSON.parse(raw))
+    };
+  } catch (error2) {
+    if (error2 instanceof SyntaxError) {
+      await recoverInvalidDocument(fs, filePath, raw);
+      return {
+        content: EMPTY_DOCUMENT,
+        data: {}
+      };
+    }
+    throw error2;
+  }
+}
+function normalizeDocument(value) {
+  if (!isRecord2(value)) {
+    return {};
+  }
+  const document = {};
+  for (const [scope, scopeValues] of Object.entries(value)) {
+    const normalizedValues = normalizeScopeValues(scopeValues);
+    if (Object.keys(normalizedValues).length > 0) {
+      document[scope] = normalizedValues;
+    }
+  }
+  return document;
+}
+function normalizeScopeValues(value) {
+  if (!isRecord2(value)) {
+    return {};
+  }
+  const normalized = {};
+  for (const [key, entry] of Object.entries(value)) {
+    if (entry !== void 0) {
+      normalized[key] = entry;
+    }
+  }
+  return normalized;
+}
+function createResolvedConfigFs(fs, globalPath, globalContent) {
+  return {
+    readFile(filePath, _encoding) {
+      if (filePath === globalPath) {
+        return Promise.resolve(globalContent);
+      }
+      return fs.readFile(filePath, "utf8");
+    }
+  };
+}
+async function recoverInvalidDocument(fs, filePath, content) {
+  await fs.mkdir(path8.dirname(filePath), { recursive: true });
+  const backupPath = createInvalidBackupPath(filePath);
+  await fs.writeFile(backupPath, content, { encoding: "utf8" });
+  await fs.writeFile(filePath, EMPTY_DOCUMENT, { encoding: "utf8" });
+}
+function createInvalidBackupPath(filePath) {
+  const directory = path8.dirname(filePath);
+  const baseName = path8.basename(filePath);
+  return path8.join(directory, `${baseName}.invalid-${createTimestamp()}.json`);
+}
+function isRecord2(value) {
+  return Boolean(value && typeof value === "object" && !Array.isArray(value));
+}
+function resolveConfigPath(homeDir) {
+  return path8.join(homeDir, ".poe-code", "config.json");
+}
+function resolveProjectConfigPath(cwd) {
+  return path8.join(cwd, ".poe-code", "config.json");
+}
+var EMPTY_DOCUMENT = `${JSON.stringify({}, null, 2)}
+`;
+
+// packages/poe-code-config/src/resolve.ts
+function resolveScope(schema, fileValues, env = {}) {
+  const resolved = {};
+  for (const key of Object.keys(schema)) {
+    const field = schema[key];
+    const envValue = resolveEnvValue(field, env, key);
+    const fileValue = resolveFileValue(field, fileValues?.[key], key);
+    resolved[key] = envValue ?? fileValue ?? field.default;
+  }
+  return resolved;
+}
+function resolveEnvValue(field, env, key) {
+  if (!field.env) {
+    return void 0;
+  }
+  const raw = env[field.env];
+  if (raw === void 0) {
+    return void 0;
+  }
+  return coerceValue(field, raw, key);
+}
+function resolveFileValue(field, value, key) {
+  return coerceValue(field, value, key);
+}
+function coerceValue(field, value, key) {
+  switch (field.type) {
+    case "string":
+      return typeof value === "string" ? value : void 0;
+    case "number":
+      return coerceNumber(value);
+    case "boolean":
+      return coerceBoolean(value);
+    case "json":
+      return coerceJson(field, value, key);
+  }
+}
+function coerceNumber(value) {
+  if (typeof value === "number" && Number.isFinite(value)) {
+    return value;
+  }
+  if (typeof value !== "string" || value.length === 0) {
+    return void 0;
+  }
+  const parsed = Number(value);
+  return Number.isNaN(parsed) ? void 0 : parsed;
+}
+function coerceBoolean(value) {
+  if (typeof value === "boolean") {
+    return value;
+  }
+  if (value === "true" || value === "1") {
+    return true;
+  }
+  if (value === "false" || value === "0") {
+    return false;
+  }
+  return void 0;
+}
+function coerceJson(field, value, key) {
+  if (value === void 0) {
+    return void 0;
+  }
+  const parsedValue = parseJsonValue(value, key);
+  try {
+    return field.parse(parsedValue);
+  } catch (error2) {
+    const message2 = error2 instanceof Error ? error2.message : "Invalid JSON value.";
+    throw new Error(`Invalid config value for "${key}": ${message2}`);
+  }
+}
+function parseJsonValue(value, key) {
+  if (typeof value !== "string") {
+    return value;
+  }
+  try {
+    return JSON.parse(value);
+  } catch {
+    throw new Error(`Invalid config value for "${key}": expected valid JSON.`);
+  }
+}
+
+// packages/poe-code-config/src/inspect.ts
+import path9 from "node:path";
+var EMPTY_DOCUMENT2 = `${JSON.stringify({}, null, 2)}
+`;
+
+// packages/poe-code-config/src/state/index.ts
+import os2 from "node:os";
+
+// packages/poe-code-config/src/state/jobs.ts
+import path10 from "node:path";
+
+// packages/poe-code-config/src/state/fs.ts
+import * as nodeFs2 from "node:fs/promises";
+
+// packages/poe-code-config/src/state/templates.ts
+import path11 from "node:path";
+
+// packages/agent-harness-tools/src/execution-env.ts
+var executionEnvFactories = /* @__PURE__ */ new Map();
 function registerExecutionEnvFactory(factory) {
   executionEnvFactories.set(factory.type, factory);
 }
@@ -1805,14 +2624,15 @@ var dockerExecutionEnvFactory = {
       context
     });
   },
-  async attach(envId) {
+  async attach(envId, context) {
     const engine = detectEngine();
     return createDockerEnv({
       id: envId,
-      spec: createAttachedSpec(),
+      spec: createAttachedSpec(context?.cwd),
       runner: createHostRunner(),
       engine,
-      context: detectContext()
+      context: detectContext(),
+      attachedJobId: context?.jobId
     });
   }
 };
@@ -1820,7 +2640,7 @@ function createDockerEnv(input) {
   const containerRef = input.id;
   return {
     id: containerRef,
-    job: null,
+    job: input.attachedJobId === void 0 ? null : createContainerJob(containerRef, input.runner, input.engine, input.context, input.attachedJobId),
     async uploadWorkspace() {
       const tempDir = mkdtempSync(path14.join(tmpdir(), "poe-docker-upload-"));
       const archivePath = path14.join(tempDir, "workspace.tar");
@@ -1955,35 +2775,57 @@ async function resolveImage(input) {
   if (input.runtime.image !== void 0) {
     return input.runtime.image;
   }
+  const result = await buildDockerRuntimeTemplate({
+    cwd: input.spec.cwd,
+    runtime: input.runtime,
+    state: input.spec.state,
+    runner: input.runner
+  });
+  return result.image;
+}
+async function buildDockerRuntimeTemplate(input) {
+  const runner = input.runner ?? createHostRunner();
+  const engine = input.runtime.engine ?? detectEngine();
+  const context = detectContext();
   const dockerfilePath = path14.resolve(
-    input.spec.cwd,
+    input.cwd,
     input.runtime.dockerfile ?? path14.join(".poe-code", "Dockerfile")
   );
-  const buildContext = path14.resolve(input.spec.cwd, input.runtime.build_context ?? ".");
+  const buildContext = path14.resolve(input.cwd, input.runtime.build_context ?? ".");
   const dockerfileBytes = await readFile2(dockerfilePath);
   const hash = hashDockerTemplate(dockerfileBytes, input.runtime.build_args ?? {});
-  const cached2 = await input.spec.state?.templates.get("docker", hash);
+  const cached2 = input.force ? null : await input.state?.templates.get("docker", hash);
   if (cached2?.image !== void 0) {
-    return cached2.image;
+    return {
+      backend: "docker",
+      hash,
+      image: cached2.image,
+      cached: true
+    };
   }
   const image = `poe-code/local:${hash}`;
   await buildImage({
-    runner: input.runner,
-    engine: input.engine,
-    context: input.context,
+    runner,
+    engine,
+    context,
     image,
     dockerfilePath,
     buildContext,
     buildArgs: input.runtime.build_args ?? {}
   });
-  await input.spec.state?.templates.put("docker", {
+  await input.state?.templates.put("docker", {
     hash,
     image,
     runtime_type: "docker",
     dockerfile_path: dockerfilePath,
     built_at: (/* @__PURE__ */ new Date()).toISOString()
   });
-  return image;
+  return {
+    backend: "docker",
+    hash,
+    image,
+    cached: false
+  };
 }
 function hashDockerTemplate(dockerfileBytes, buildArgs) {
   const hash = createHash2("sha256");
@@ -2068,9 +2910,9 @@ function buildEnvArgs(env) {
 function createContainerName() {
   return `poe-env-${randomBytes3(6).toString("hex")}`;
 }
-async function createContainerJob(containerId, runner, engine, context) {
+function createContainerJob(containerId, runner, engine, context, jobId = containerId) {
   return {
-    id: containerId,
+    id: jobId,
     envId: containerId,
     tool: "docker",
     argv: ["attach", containerId],
@@ -2094,7 +2936,25 @@ async function createContainerJob(containerId, runner, engine, context) {
       }
       return stdout.trim() === "running" ? "running" : "exited";
     },
-    async *stream() {
+    async *stream(opts) {
+      const handle = runner.exec({
+        command: engine,
+        args: [
+          ...buildContextArgs(engine, context),
+          "exec",
+          containerId,
+          "sh",
+          "-c",
+          `test -f ${shellQuote(`/tmp/poe-jobs/${jobId}.log`)} && tail -c +${(opts?.sinceByte ?? 0) + 1} ${shellQuote(`/tmp/poe-jobs/${jobId}.log`)} || true`
+        ],
+        stdout: "pipe",
+        stderr: "pipe"
+      });
+      const stdout = await readStream(handle.stdout);
+      await handle.result;
+      if (stdout.length > 0) {
+        yield { byteOffset: opts?.sinceByte ?? 0, data: stdout };
+      }
     },
     async wait() {
       const handle = runner.exec({
@@ -2118,9 +2978,9 @@ async function createContainerJob(containerId, runner, engine, context) {
     }
   };
 }
-function createAttachedSpec() {
+function createAttachedSpec(cwd = "/workspace") {
   return {
-    cwd: "/workspace",
+    cwd,
     runtime: {
       type: "docker",
       image: "attached",
@@ -2192,12 +3052,778 @@ var hostExecutionEnvFactory = {
 // packages/process-runner/src/testing/mock-runner.ts
 import { Readable, Writable } from "node:stream";
 
+// packages/runner-e2b/src/factory.ts
+import path18 from "node:path";
+
+// packages/runner-e2b/src/sdk.ts
+import { Template, Sandbox } from "e2b";
+async function createSandbox(opts) {
+  return Sandbox.create(opts.templateId, {
+    apiKey: opts.apiKey,
+    envs: opts.env,
+    ...opts.timeoutMinutes === void 0 ? {} : { timeoutMs: opts.timeoutMinutes * 6e4 }
+  });
+}
+async function connectSandbox(id, apiKey) {
+  return Sandbox.connect(id, apiKey === void 0 ? void 0 : { apiKey });
+}
+async function buildTemplate(opts) {
+  const template = Template({ fileContextPath: opts.buildContext }).fromDockerfile(
+    opts.dockerfilePath
+  );
+  if (opts.fromTemplate !== void 0 && opts.fromTemplate.length > 0) {
+    template.fromTemplate(opts.fromTemplate);
+  }
+  const result = await Template.build(template, opts.name, {
+    apiKey: opts.apiKey,
+    ...opts.cpu === void 0 ? {} : { cpuCount: opts.cpu },
+    ...opts.memoryMb === void 0 ? {} : { memoryMB: opts.memoryMb },
+    ...opts.onLog ? { onBuildLogs: opts.onLog } : {}
+  });
+  return { templateId: result.templateId };
+}
+function toArrayBuffer(buffer) {
+  const output = new ArrayBuffer(buffer.byteLength);
+  new Uint8Array(output).set(buffer);
+  return output;
+}
+async function readableToString(stream) {
+  if (stream === null) {
+    return "";
+  }
+  stream.setEncoding("utf8");
+  const chunks = [];
+  for await (const chunk of stream) {
+    chunks.push(String(chunk));
+  }
+  return chunks.join("");
+}
+
+// packages/runner-e2b/src/template-build.ts
+import { createHash as createHash3 } from "node:crypto";
+import { readdir, readFile as readFile3 } from "node:fs/promises";
+import path15 from "node:path";
+var BUILD_LOG_TAIL_SIZE = 30;
+async function buildE2bRuntimeTemplate(input) {
+  const dockerfileBytes = await readFile3(input.dockerfilePath);
+  const buildContextFiles = await readBuildContextFiles(input.buildContext);
+  const hash = hashTemplate(dockerfileBytes, buildContextFiles, input.runtime.build_args);
+  const cached2 = input.force === true ? null : await input.state?.templates.get("e2b", hash);
+  if (cached2?.template_id !== void 0) {
+    return { backend: "e2b", hash, templateId: cached2.template_id, cached: true };
+  }
+  const tail = [];
+  const onLog = (entry) => {
+    tail.push(entry.message);
+    if (tail.length > BUILD_LOG_TAIL_SIZE) {
+      tail.shift();
+    }
+    input.onLog?.(entry);
+  };
+  let built;
+  try {
+    built = await buildTemplate({
+      apiKey: input.apiKey,
+      name: `poe-code-${hash.slice(0, 32)}`,
+      dockerfilePath: input.dockerfilePath,
+      buildContext: input.buildContext,
+      cpu: input.runtime.cpu,
+      memoryMb: input.runtime.memory_mb,
+      fromTemplate: input.runtime.from_template,
+      onLog
+    });
+  } catch (error2) {
+    throw decorateBuildError(error2, tail);
+  }
+  await input.state?.templates.put("e2b", {
+    hash,
+    template_id: built.templateId,
+    runtime_type: "e2b",
+    dockerfile_path: input.dockerfilePath,
+    built_at: (/* @__PURE__ */ new Date()).toISOString()
+  });
+  return { backend: "e2b", hash, templateId: built.templateId, cached: false };
+}
+function decorateBuildError(error2, tail) {
+  const original = error2 instanceof Error ? error2 : new Error(String(error2));
+  if (tail.length === 0) {
+    return original;
+  }
+  const decorated = new Error(`${original.message}
+
+Last build output:
+${tail.join("\n")}`);
+  decorated.stack = original.stack;
+  decorated.cause = original;
+  return decorated;
+}
+function hashTemplate(dockerfileBytes, buildContextFiles, buildArgs) {
+  const hash = createHash3("sha256");
+  hash.update(dockerfileBytes);
+  hash.update("\0");
+  for (const file of buildContextFiles) {
+    hash.update(file.relativePath);
+    hash.update("\0");
+    hash.update(file.bytes);
+    hash.update("\0");
+  }
+  for (const [key, value] of Object.entries(buildArgs).sort(
+    ([left], [right]) => left.localeCompare(right)
+  )) {
+    hash.update(key);
+    hash.update("=");
+    hash.update(value);
+    hash.update("\0");
+  }
+  return hash.digest("hex");
+}
+async function readBuildContextFiles(buildContext) {
+  const files = [];
+  await collectBuildContextFiles(buildContext, "", files);
+  return files.sort((left, right) => left.relativePath.localeCompare(right.relativePath));
+}
+async function collectBuildContextFiles(buildContext, relativeDir, files) {
+  const absoluteDir = path15.join(buildContext, relativeDir);
+  const entries = await readdir(absoluteDir, { withFileTypes: true });
+  for (const entry of entries) {
+    const relativePath = path15.join(relativeDir, entry.name);
+    if (entry.isDirectory()) {
+      await collectBuildContextFiles(buildContext, relativePath, files);
+      continue;
+    }
+    if (!entry.isFile()) {
+      continue;
+    }
+    files.push({
+      relativePath: relativePath.split(path15.sep).join("/"),
+      bytes: await readFile3(path15.join(buildContext, relativePath))
+    });
+  }
+}
+
+// packages/runner-e2b/src/opened-env.ts
+import { mkdtempSync as mkdtempSync2, rmSync as rmSync2 } from "node:fs";
+import { readFile as readFile4, writeFile } from "node:fs/promises";
+import { tmpdir as tmpdir2 } from "node:os";
+import path17 from "node:path";
+import { PassThrough, Writable as Writable2 } from "node:stream";
+
+// packages/runner-e2b/src/job-handle.ts
+import path16 from "node:path";
+var JOB_DIR2 = "/tmp/poe-jobs";
+function createE2bJobHandle(input) {
+  const fs = createE2bLogStreamFs(input.sandbox);
+  return {
+    id: input.jobId,
+    envId: input.envId,
+    tool: input.tool,
+    argv: input.argv,
+    async status() {
+      const exit = await readExitCode(input.sandbox, input.jobId);
+      if (exit !== null) {
+        return "exited";
+      }
+      const processes = await input.sandbox.commands.list();
+      const isRunning = input.pid === void 0 ? processes.some((process2) => processMentionsJob(process2, input.jobId)) : processes.some((process2) => process2.pid === input.pid);
+      return isRunning ? "running" : "lost";
+    },
+    stream(opts = {}) {
+      return streamLogFile({ fs }, input.jobId, opts);
+    },
+    async wait() {
+      const result = await waitForExit({ fs }, input.jobId);
+      const preserveMs = input.preserveAfterExitHours * 60 * 60 * 1e3;
+      if (preserveMs > 0) {
+        await input.sandbox.setTimeout(preserveMs);
+      }
+      return result;
+    },
+    async kill() {
+      const pids = input.pid === void 0 ? (await input.sandbox.commands.list()).filter((process2) => processMentionsJob(process2, input.jobId)).map((process2) => process2.pid) : [input.pid];
+      await Promise.all(pids.map((pid) => input.sandbox.commands.kill(pid)));
+    }
+  };
+}
+function createE2bLogStreamFs(sandbox) {
+  return {
+    promises: {
+      async readFile(filePath) {
+        return Buffer.from(await sandbox.files.read(filePath, { format: "bytes" }));
+      },
+      async stat(filePath) {
+        const result = await sandbox.commands.run(
+          `stat -c %Y ${shellQuote2(filePath)} 2>/dev/null || stat -f %m ${shellQuote2(filePath)}`
+        );
+        if (!("stdout" in result)) {
+          throw new Error(`Unable to stat ${filePath}`);
+        }
+        const seconds = Number(result.stdout?.trim());
+        if (!Number.isFinite(seconds)) {
+          throw new Error(`Unable to stat ${filePath}`);
+        }
+        return { mtimeMs: seconds * 1e3 };
+      }
+    },
+    watch(filePath, listener) {
+      let closed = false;
+      let stop = null;
+      void sandbox.files.watchDir(path16.dirname(filePath), listener, { recursive: false }).then((handle) => {
+        if (closed) {
+          void handle.stop();
+          return;
+        }
+        stop = () => {
+          void handle.stop();
+        };
+      });
+      return {
+        close() {
+          closed = true;
+          stop?.();
+        }
+      };
+    }
+  };
+}
+function processMentionsJob(process2, jobId) {
+  const needle = `/tmp/poe-jobs/${jobId}`;
+  return process2.cmd.includes(needle) || process2.args.some((arg) => arg.includes(needle));
+}
+function shellQuote2(value) {
+  return `'${value.replaceAll("'", "'\\''")}'`;
+}
+async function readExitCode(sandbox, jobId) {
+  try {
+    const contents = await sandbox.files.read(`${JOB_DIR2}/${jobId}.exit`);
+    const exitCode = Number(contents.trim());
+    return Number.isInteger(exitCode) ? exitCode : null;
+  } catch {
+    return null;
+  }
+}
+
+// packages/runner-e2b/src/opened-env.ts
+var REMOTE_COMMAND_STDERR_TAIL_SIZE = 30;
+function createOpenedE2bEnv(input) {
+  const hostRunner = input.spec.hostRunner ?? createHostRunner();
+  const hostWorkspaceDir = path17.resolve(input.spec.cwd);
+  const sandboxWorkspaceDir = normalizeSandboxWorkspaceDir(input.runtime.workspace_dir);
+  let lastProcess = null;
+  let detachedJobContext = null;
+  const mapWorkspaceCwd = (cwd) => {
+    if (cwd === void 0) {
+      return void 0;
+    }
+    if (path17.isAbsolute(cwd) && path17.resolve(cwd) === hostWorkspaceDir) {
+      return sandboxWorkspaceDir;
+    }
+    return cwd;
+  };
+  const attachedJobId = input.spec.detachedJobId;
+  const env = {
+    id: input.sandbox.sandboxId,
+    job: attachedJobId ? createE2bJobHandle({
+      sandbox: input.sandbox,
+      envId: input.sandbox.sandboxId,
+      jobId: attachedJobId,
+      tool: input.spec.jobLabel.tool,
+      argv: input.spec.jobLabel.argv,
+      preserveAfterExitHours: input.runtime.preserve_after_exit_hours ?? 24
+    }) : null,
+    fs: createE2bLogStreamFs(input.sandbox),
+    setDetachedJobContext(context) {
+      detachedJobContext = context;
+    },
+    async uploadWorkspace() {
+      if (input.spec.runner?.sync === "none") {
+        return { files: 0, bytes: 0, skipped: [] };
+      }
+      const tempDir = mkdtempSync2(path17.join(tmpdir2(), "poe-e2b-upload-"));
+      const archivePath = path17.join(tempDir, "workspace.tar");
+      try {
+        await runOrThrow2(hostRunner, {
+          command: "tar",
+          args: [
+            ...input.spec.uploadIgnoreFiles.flatMap((ignored) => ["--exclude", ignored]),
+            "-cf",
+            archivePath,
+            "-C",
+            input.spec.cwd,
+            "."
+          ],
+          stdout: "pipe",
+          stderr: "pipe"
+        });
+        await input.sandbox.files.write(
+          "/tmp/poe-workspace-upload.tar",
+          toArrayBuffer(await readFile4(archivePath))
+        );
+        await runRemoteOrThrow(
+          input.sandbox,
+          createUploadWorkspaceCommand(sandboxWorkspaceDir)
+        );
+        return { files: 0, bytes: 0, skipped: [] };
+      } finally {
+        rmSync2(tempDir, { recursive: true, force: true });
+      }
+    },
+    async downloadWorkspace(opts) {
+      if (input.spec.runner?.sync === "upload" || input.spec.runner?.sync === "none") {
+        return { files: 0, bytes: 0, conflicts: [] };
+      }
+      const tempDir = mkdtempSync2(path17.join(tmpdir2(), "poe-e2b-download-"));
+      const archivePath = path17.join(tempDir, "workspace.tar");
+      try {
+        await runRemoteOrThrow(
+          input.sandbox,
+          `tar -cf /tmp/poe-workspace-download.tar -C ${shellQuote3(sandboxWorkspaceDir)} .`
+        );
+        const archive = await input.sandbox.files.read("/tmp/poe-workspace-download.tar", {
+          format: "bytes"
+        });
+        await writeFile(archivePath, Buffer.from(archive));
+        await runOrThrow2(hostRunner, {
+          command: "tar",
+          args: [
+            opts.conflictPolicy === "refuse" ? "-xkf" : "-xf",
+            archivePath,
+            "-C",
+            input.spec.cwd
+          ],
+          stdout: "pipe",
+          stderr: "pipe"
+        });
+        return { files: 0, bytes: archive.byteLength, conflicts: [] };
+      } finally {
+        rmSync2(tempDir, { recursive: true, force: true });
+      }
+    },
+    exec(spec) {
+      const handle = runE2bCommand(input.sandbox, {
+        ...spec,
+        cwd: mapWorkspaceCwd(spec.cwd),
+        env: resolveSandboxCommandEnv(spec.env)
+      });
+      lastProcess = { started: handle.started };
+      return handle;
+    },
+    async detach() {
+      if (detachedJobContext === null) {
+        throw new Error("Cannot detach E2B environment before a job context is registered.");
+      }
+      if (lastProcess === null) {
+        throw new Error("Cannot detach E2B environment before a command is running.");
+      }
+      const command = await lastProcess.started;
+      const preserveAfterExitHours = input.runtime.preserve_after_exit_hours ?? 24;
+      const preserveMs = preserveAfterExitHours * 60 * 60 * 1e3;
+      if (preserveMs > 0) {
+        await input.sandbox.setTimeout(preserveMs);
+      }
+      return createE2bJobHandle({
+        sandbox: input.sandbox,
+        envId: input.sandbox.sandboxId,
+        jobId: detachedJobContext.id,
+        tool: detachedJobContext.tool,
+        argv: detachedJobContext.argv,
+        pid: command.pid,
+        preserveAfterExitHours
+      });
+    },
+    shell() {
+      const shellSpec = input.spec.shellSpec;
+      const command = shellSpec?.command ?? input.spec.env.SHELL ?? "sh";
+      return runE2bPty(input.sandbox, {
+        command,
+        ...shellSpec?.args ? { args: shellSpec.args } : {},
+        cwd: mapWorkspaceCwd(shellSpec?.cwd ?? input.spec.cwd),
+        env: resolveSandboxCommandEnv(
+          shellSpec && "env" in shellSpec ? shellSpec.env : input.spec.env
+        ),
+        stdin: "inherit",
+        stdout: "inherit",
+        stderr: "inherit",
+        tty: true
+      });
+    },
+    async close() {
+      await input.sandbox.kill();
+    }
+  };
+  return env;
+}
+function runE2bCommand(sandbox, spec) {
+  const stdout = spec.stdout === "inherit" ? null : new PassThrough();
+  const stderr = spec.stderr === "inherit" ? null : new PassThrough();
+  let e2bHandle = null;
+  const command = shellCommand([spec.command, ...spec.args ?? []]);
+  const started = sandbox.commands.run(command, {
+    background: true,
+    cwd: spec.cwd,
+    envs: spec.env,
+    stdin: spec.stdin === "pipe",
+    onStdout(data) {
+      stdout?.write(data);
+      if (spec.stdout === "inherit") {
+        process.stdout.write(data);
+      }
+    },
+    onStderr(data) {
+      stderr?.write(data);
+      if (spec.stderr === "inherit") {
+        process.stderr.write(data);
+      }
+    }
+  });
+  const stdin = spec.stdin === "pipe" ? new Writable2({
+    write(chunk, _encoding, callback) {
+      started.then(
+        (handle) => sandbox.commands.sendStdin(
+          handle.pid,
+          Buffer.isBuffer(chunk) ? chunk : Buffer.from(String(chunk))
+        )
+      ).then(() => callback(), callback);
+    },
+    final(callback) {
+      if (sandbox.commands.closeStdin === void 0) {
+        callback();
+        return;
+      }
+      started.then((handle) => sandbox.commands.closeStdin(handle.pid)).then(() => callback(), callback);
+    }
+  }) : null;
+  const result = started.then((handle) => {
+    e2bHandle = handle;
+    return handle.wait();
+  }).then(
+    (result2) => {
+      stdout?.end();
+      stderr?.end();
+      return { exitCode: result2.exitCode ?? 0 };
+    },
+    (error2) => {
+      stdout?.end();
+      stderr?.end();
+      if (isExitError(error2)) {
+        return { exitCode: error2.exitCode };
+      }
+      return { exitCode: 1 };
+    }
+  );
+  return {
+    get pid() {
+      return e2bHandle?.pid ?? null;
+    },
+    stdin,
+    stdout,
+    stderr,
+    result,
+    kill() {
+      void e2bHandle?.kill();
+    },
+    get e2bHandle() {
+      return e2bHandle;
+    },
+    started
+  };
+}
+function runE2bPty(sandbox, spec) {
+  const stdout = new PassThrough();
+  let handleRef = null;
+  const stdin = new Writable2({
+    write(chunk, _encoding, callback) {
+      if (handleRef === null) {
+        callback(new Error("E2B PTY stdin is not ready."));
+        return;
+      }
+      sandbox.pty.sendInput(handleRef.pid, Buffer.isBuffer(chunk) ? chunk : Buffer.from(String(chunk))).then(() => callback(), callback);
+    }
+  });
+  const started = sandbox.pty.create({
+    cols: process.stdout.columns || 80,
+    rows: process.stdout.rows || 24,
+    cwd: spec.cwd,
+    envs: spec.env,
+    onData(data) {
+      stdout.write(Buffer.from(data));
+      if (spec.stdout === "inherit") {
+        process.stdout.write(Buffer.from(data));
+      }
+    }
+  });
+  const result = started.then((handle) => {
+    handleRef = handle;
+    return handle.wait();
+  }).then(
+    (result2) => {
+      stdout.end();
+      return { exitCode: result2.exitCode ?? 0 };
+    },
+    () => {
+      stdout.end();
+      return { exitCode: 1 };
+    }
+  );
+  return {
+    get pid() {
+      return handleRef?.pid ?? null;
+    },
+    stdin: spec.stdin === "inherit" ? process.stdin : stdin,
+    stdout: spec.stdout === "inherit" ? null : stdout,
+    stderr: null,
+    result,
+    kill() {
+      void (handleRef === null ? void 0 : sandbox.pty.kill(handleRef.pid));
+    }
+  };
+}
+async function runRemoteOrThrow(sandbox, command) {
+  const stdoutTail = createLineTail(REMOTE_COMMAND_STDERR_TAIL_SIZE);
+  const stderrTail = createLineTail(REMOTE_COMMAND_STDERR_TAIL_SIZE);
+  let result;
+  try {
+    result = await sandbox.commands.run(command, {
+      onStdout(data) {
+        stdoutTail.push(data);
+      },
+      onStderr(data) {
+        stderrTail.push(data);
+      }
+    });
+  } catch (error2) {
+    appendRemoteCommandOutput(error2, stdoutTail, stderrTail);
+    if (isCommandExitError(error2)) {
+      throw decorateRemoteCommandError(error2, command, stderrTail.values());
+    }
+    throw error2;
+  }
+  appendRemoteCommandOutput(result, stdoutTail, stderrTail);
+  if ("exitCode" in result && result.exitCode !== 0) {
+    throw decorateRemoteCommandError(
+      new Error(`E2B command failed with exit code ${result.exitCode}`),
+      command,
+      stderrTail.values()
+    );
+  }
+}
+function appendRemoteCommandOutput(source, stdoutTail, stderrTail) {
+  if (!source || typeof source !== "object") {
+    return;
+  }
+  const output = source;
+  if (typeof output.stdout === "string") {
+    stdoutTail.push(output.stdout);
+  }
+  if (typeof output.stderr === "string") {
+    stderrTail.push(output.stderr);
+  }
+}
+function decorateRemoteCommandError(error2, command, stderrTail) {
+  const original = error2 instanceof Error ? error2 : new Error(String(error2));
+  const tail = stderrTail.length === 0 ? "" : `
+
+Last stderr output:
+${stderrTail.join("\n")}`;
+  const decorated = new Error(`E2B command failed: ${command}
+${original.message}${tail}`);
+  decorated.stack = original.stack;
+  decorated.cause = original;
+  return decorated;
+}
+function createLineTail(maxLines) {
+  const lines = [];
+  let pending = "";
+  const appendLine = (line) => {
+    lines.push(trimTrailingCarriageReturn(line));
+    while (lines.length > maxLines) {
+      lines.shift();
+    }
+  };
+  return {
+    push(chunk) {
+      pending += chunk;
+      const parts = pending.split("\n");
+      pending = parts.pop() ?? "";
+      for (const line of parts) {
+        appendLine(line);
+      }
+    },
+    values() {
+      const output = [...lines];
+      if (pending.length > 0) {
+        output.push(trimTrailingCarriageReturn(pending));
+      }
+      return output.slice(-maxLines);
+    }
+  };
+}
+function trimTrailingCarriageReturn(value) {
+  return value.endsWith("\r") ? value.slice(0, -1) : value;
+}
+async function runOrThrow2(runner, spec) {
+  const handle = runner.exec(spec);
+  const stderr = readableToString(handle.stderr);
+  const result = await handle.result;
+  if (result.exitCode !== 0) {
+    throw new Error(
+      `Command failed with exit code ${result.exitCode}: ${spec.command} ${(spec.args ?? []).join(" ")}
+${await stderr}`
+    );
+  }
+}
+function shellCommand(argv) {
+  return argv.map(shellQuote3).join(" ");
+}
+function shellQuote3(value) {
+  return `'${value.replaceAll("'", "'\\''")}'`;
+}
+function createUploadWorkspaceCommand(sandboxWorkspaceDir) {
+  const quotedWorkspaceDir = shellQuote3(sandboxWorkspaceDir);
+  return [
+    `mkdir -p ${quotedWorkspaceDir} || { command -v sudo >/dev/null 2>&1 && sudo mkdir -p ${quotedWorkspaceDir} && sudo chown "$(id -u):$(id -g)" ${quotedWorkspaceDir}; }`,
+    `test -w ${quotedWorkspaceDir} && tar -xf /tmp/poe-workspace-upload.tar -C ${quotedWorkspaceDir}`
+  ].join("\n");
+}
+function resolveSandboxCommandEnv(env) {
+  if (env === void 0) {
+    return void 0;
+  }
+  return {
+    ...env,
+    HOME: "/home/user"
+  };
+}
+function normalizeSandboxWorkspaceDir(workspaceDir) {
+  const resolvedWorkspaceDir = workspaceDir ?? "/workspace";
+  if (!path17.posix.isAbsolute(resolvedWorkspaceDir)) {
+    throw new Error("E2B runtime workspace_dir must be an absolute sandbox path.");
+  }
+  let normalized = path17.posix.normalize(resolvedWorkspaceDir);
+  while (normalized.length > 1 && normalized.endsWith("/")) {
+    normalized = normalized.slice(0, -1);
+  }
+  return normalized;
+}
+function isExitError(error2) {
+  return Boolean(
+    error2 && typeof error2 === "object" && typeof error2.exitCode === "number"
+  );
+}
+function isCommandExitError(error2) {
+  return isExitError(error2) || Boolean(
+    error2 && typeof error2 === "object" && error2.name === "CommandExitError"
+  );
+}
+
+// packages/runner-e2b/src/auth-scope.ts
+import os4 from "node:os";
+import { promises as nodeFs4 } from "node:fs";
+var e2bAuthScope = defineScope("e2b", {
+  api_key: {
+    type: "string",
+    default: "",
+    doc: "E2B API key",
+    env: "E2B_API_KEY"
+  }
+});
+async function resolveE2bApiKey(input) {
+  const homeDir = input.homeDir ?? os4.homedir();
+  const fs = input.fs ?? nodeFs4;
+  const env = input.env ?? process.env;
+  const document = await readMergedDocument(
+    fs,
+    resolveConfigPath(homeDir),
+    resolveProjectConfigPath(input.cwd)
+  );
+  const resolved = resolveScope(e2bAuthScope.schema, document.e2b, env);
+  if (resolved.api_key.length === 0) {
+    throw new Error(
+      "No E2B API key. Set E2B_API_KEY or e2b.api_key in ~/.poe-code/config.json."
+    );
+  }
+  return resolved.api_key;
+}
+
+// packages/runner-e2b/src/factory.ts
+var e2bExecutionEnvFactory = {
+  type: "e2b",
+  supportsDetach: true,
+  async open(spec) {
+    const runtime = parseE2bRuntime(spec.runtime);
+    const runtimeCwd = spec.runtimeCwd ?? spec.cwd;
+    const apiKey = await resolveE2bApiKey({ cwd: runtimeCwd });
+    const templateId = runtime.template_id ?? (await buildE2bRuntimeTemplate({
+      runtime,
+      dockerfilePath: path18.resolve(
+        runtimeCwd,
+        runtime.dockerfile ?? path18.join(".poe-code", "Dockerfile")
+      ),
+      buildContext: path18.resolve(runtimeCwd, runtime.build_context ?? "."),
+      state: spec.state,
+      apiKey
+    })).templateId;
+    const sandbox = await createSandbox({
+      apiKey,
+      templateId,
+      env: spec.env,
+      timeoutMinutes: runtime.timeout_minutes
+    });
+    return createOpenedE2bEnv({ sandbox, spec, runtime });
+  },
+  async attach(envId, context) {
+    const cwd = context?.cwd ?? process.cwd();
+    const apiKey = await resolveE2bApiKey({ cwd });
+    const sandbox = await connectSandbox(envId, apiKey);
+    return createOpenedE2bEnv({
+      sandbox,
+      spec: {
+        cwd: context?.cwd ?? "/workspace",
+        runtime: {
+          type: "e2b",
+          build_args: {},
+          mounts: [],
+          workspace_dir: "/workspace",
+          preserve_after_exit_hours: 24
+        },
+        env: {},
+        uploadIgnoreFiles: [],
+        jobLabel: { tool: context?.tool ?? "e2b", argv: context?.argv ?? [] },
+        ...context?.jobId ? { detachedJobId: context.jobId } : {}
+      },
+      runtime: {
+        type: "e2b",
+        build_args: {},
+        mounts: [],
+        workspace_dir: "/workspace",
+        preserve_after_exit_hours: 24
+      }
+    });
+  }
+};
+function parseE2bRuntime(runtime) {
+  if (!runtime || typeof runtime !== "object" || Array.isArray(runtime)) {
+    throw new Error("e2b runtime must be an object");
+  }
+  const record = runtime;
+  if (record.type !== "e2b") {
+    throw new Error('e2b runtime type must be "e2b"');
+  }
+  return record;
+}
+
+// packages/runner-e2b/src/index.ts
+var e2bExecutionEnvFactory2 = e2bExecutionEnvFactory;
+
 // packages/agent-spawn/src/register-factories.ts
 registerExecutionEnvFactory(hostExecutionEnvFactory);
 registerExecutionEnvFactory(dockerExecutionEnvFactory);
-if (process.env.VITEST === "true") {
+registerExecutionEnvFactory(e2bExecutionEnvFactory2);
+if (isVitest()) {
   registerExecutionEnvFactory(createTestHostExecutionEnvFactory());
 }
+function isVitest() {
+  return process.env.VITEST !== void 0 || process.env.VITEST_POOL_ID !== void 0;
+}
 function createTestHostExecutionEnvFactory() {
   return {
     type: "host",
@@ -2559,7 +4185,7 @@ function listMcpSupportedAgents() {
 
 // packages/agent-spawn/src/spawn.ts
 import { mkdirSync, openSync, writeSync, closeSync } from "node:fs";
-import path15 from "node:path";
+import path19 from "node:path";
 
 // packages/agent-spawn/src/configs/resolve-config.ts
 function resolveConfig(agentId) {
@@ -3058,7 +4684,7 @@ import chalk8 from "chalk";
 
 // packages/design-system/src/dashboard/terminal.ts
 import readline from "node:readline";
-import { PassThrough } from "node:stream";
+import { PassThrough as PassThrough2 } from "node:stream";
 
 // packages/design-system/src/prompts/index.ts
 import chalk15 from "chalk";
@@ -3090,9 +4716,9 @@ import chalk16 from "chalk";
 var DEFAULT_ACTIVITY_TIMEOUT_MS = 10 * 60 * 1e3;
 
 // packages/agent-spawn/src/acp/replay.ts
-import path16 from "node:path";
+import path20 from "node:path";
 import { homedir as homedir2 } from "node:os";
-import { open as open2, readdir } from "node:fs/promises";
+import { open as open2, readdir as readdir2 } from "node:fs/promises";
 import { createInterface } from "node:readline";
 
 // packages/poe-acp-client/src/acp-client.ts
@@ -3109,7 +4735,7 @@ import { homedir } from "node:os";
 import { join } from "node:path";
 
 // packages/agent-spawn/src/acp/middlewares/spawn-log.ts
-import path17 from "node:path";
+import path21 from "node:path";
 import { homedir as homedir3 } from "node:os";
 import { mkdir, open as open3 } from "node:fs/promises";
 
@@ -3160,34 +4786,7 @@ function createBinaryExistsCheck(binaryName, id, description) {
     id,
     description,
     async run({ runCommand: runCommand2 }) {
-      const commonPaths = [
-        `/usr/local/bin/${binaryName}`,
-        `/usr/bin/${binaryName}`,
-        `$HOME/.local/bin/${binaryName}`,
-        `$HOME/.claude/local/bin/${binaryName}`
-      ];
-      const detectors = [
-        {
-          command: "which",
-          args: [binaryName],
-          validate: (result) => result.exitCode === 0
-        },
-        {
-          command: "where",
-          args: [binaryName],
-          validate: (result) => result.exitCode === 0 && result.stdout.trim().length > 0
-        },
-        // Check common installation paths using shell expansion for $HOME
-        {
-          command: "sh",
-          args: [
-            "-c",
-            commonPaths.map((p) => `test -f "${p}"`).join(" || ")
-          ],
-          validate: (result) => result.exitCode === 0
-        }
-      ];
-      for (const detector of detectors) {
+      for (const detector of createBinaryExistsDetectors(binaryName)) {
         const result = await runCommand2(detector.command, detector.args);
         if (detector.validate(result)) {
           return;