@letta-ai/letta-code 0.34.27 → 0.34.29

package/letta.js

@@ -6044,7 +6044,7 @@ var package_default;
 var init_package = __esm(() => {
   package_default = {
     name: "@letta-ai/letta-code",
-    version: "0.34.27",
+    version: "0.34.29",
     lettaStartupLogProtocol: 1,
     lettaConfigDirProtocol: 1,
     description: "Letta Code is a CLI tool for interacting with stateful Letta agents from the terminal.",
@@ -102800,6 +102800,83 @@ async function getMemoryGitDir(memoryDir) {
 }
 var init_memory_git_dir = () => {};
 
+// src/agent/memory-git-process.ts
+import { spawn as spawn2 } from "node:child_process";
+async function execGit(args, options) {
+  let termination = Promise.resolve();
+  let timedOut = false;
+  const child = spawn2("git", args, {
+    cwd: options.cwd,
+    env: options.env,
+    detached: process.platform !== "win32",
+    stdio: ["ignore", "pipe", "pipe"],
+    windowsHide: true
+  });
+  let stdout = "";
+  let stderr = "";
+  let bufferError;
+  const collect = (stream11, data) => {
+    if (bufferError)
+      return;
+    if (stream11 === "stdout")
+      stdout += data;
+    else
+      stderr += data;
+    if (Buffer.byteLength(stream11 === "stdout" ? stdout : stderr) > 10 * 1024 * 1024) {
+      bufferError = new Error(`git ${stream11} exceeded maxBuffer`);
+      terminate();
+    }
+  };
+  child.stdout.setEncoding("utf8").on("data", (data) => collect("stdout", data));
+  child.stderr.setEncoding("utf8").on("data", (data) => collect("stderr", data));
+  const closed = new Promise((resolve7) => child.once("close", resolve7));
+  const result = new Promise((resolve7, reject) => {
+    child.once("error", reject);
+    child.once("close", (code2, signal) => {
+      if (timedOut || bufferError || code2 !== 0) {
+        reject(Object.assign(bufferError ?? new Error(`git ${args.join(" ")} failed${timedOut ? " (ETIMEDOUT)" : ""}: ${stderr}`), { code: timedOut ? "ETIMEDOUT" : code2, signal, stdout, stderr }));
+      } else
+        resolve7({ stdout, stderr });
+    });
+  });
+  function terminate() {
+    if (!child.pid)
+      return;
+    if (process.platform === "win32") {
+      termination = new Promise((resolve7) => {
+        const killer = spawn2("taskkill.exe", ["/pid", String(child.pid), "/t", "/f"], { stdio: "ignore", windowsHide: true });
+        killer.once("error", () => {
+          child.kill("SIGKILL");
+          resolve7();
+        });
+        killer.once("close", (code2) => {
+          if (code2 !== 0)
+            child.kill("SIGKILL");
+          resolve7();
+        });
+      });
+    } else {
+      try {
+        process.kill(-child.pid, "SIGKILL");
+      } catch {
+        child.kill("SIGKILL");
+      }
+    }
+  }
+  const timer = options.timeoutMs > 0 ? setTimeout(() => {
+    timedOut = true;
+    terminate();
+  }, options.timeoutMs) : undefined;
+  try {
+    return await result;
+  } finally {
+    clearTimeout(timer);
+    await termination;
+    await closed;
+  }
+}
+var init_memory_git_process = () => {};
+
 // src/backend/api/memfs-git-proxy.ts
 var exports_memfs_git_proxy = {};
 __export(exports_memfs_git_proxy, {
@@ -103472,7 +103549,6 @@ __export(exports_memory_git, {
   buildGitAuthArgs: () => buildGitAuthArgs,
   addGitMemoryTag: () => addGitMemoryTag
 });
-import { execFile as execFileCb } from "node:child_process";
 import {
   existsSync as existsSync8,
   mkdirSync as mkdirSync6,
@@ -103483,7 +103559,6 @@ import {
 } from "node:fs";
 import { platform } from "node:os";
 import { dirname as dirname8, join as join14 } from "node:path";
-import { promisify as promisify4 } from "node:util";
 function getAgentRootDir(agentId) {
   return join14(resolveGlobalConfigDir(), "agents", agentId);
 }
@@ -103746,11 +103821,10 @@ async function runGit(cwd, args, token, options) {
   const timeoutMs = options?.timeoutMs ?? GIT_DEFAULT_TIMEOUT_MS;
   let result;
   try {
-    result = await execFile3("git", allArgs, {
+    result = await execGit(allArgs, {
       cwd,
       env: buildNonInteractiveGitEnv(),
-      maxBuffer: 10 * 1024 * 1024,
-      timeout: timeoutMs
+      timeoutMs
     });
   } catch (error4) {
     throw redactGitAuthError(error4);
@@ -104622,10 +104696,11 @@ async function addGitMemoryTag(agentId, prefetchedAgent) {
     debugWarn("memfs-git", `Failed to add git-memory tag: ${err instanceof Error ? err.message : String(err)}`);
   }
 }
-var execFile3, RETRYABLE_GIT_HTTP_ERROR_RE, RETRYABLE_GIT_NETWORK_ERROR_RE, MISSING_CWD_GIT_ERROR_RE, NON_FAST_FORWARD_PUSH_ERROR_RE, UNRELATED_HISTORY_PULL_ERROR_RE, NO_UPSTREAM_PULL_ERROR_RE, AGENT_DISPLAY_NAME_TIMEOUT_MS = 3000, HOSTED_BACKEND_HEADER = "x-letta-memfs-backend", HOSTED_BACKEND_VALUE = "hosted", GIT_DEFAULT_TIMEOUT_MS = 60000, GIT_CLONE_TIMEOUT_MS = 180000, gitConfig = (dir, args) => withSerializedGitConfigMutation(dir, () => runGit(dir, args)), MEMORY_REPOSITORY_CONFIG_KEY = "letta.memoryRepository.url", MEMORY_REPOSITORY_PUSH_LOG = "memory-repository-push.log";
+var RETRYABLE_GIT_HTTP_ERROR_RE, RETRYABLE_GIT_NETWORK_ERROR_RE, MISSING_CWD_GIT_ERROR_RE, NON_FAST_FORWARD_PUSH_ERROR_RE, UNRELATED_HISTORY_PULL_ERROR_RE, NO_UPSTREAM_PULL_ERROR_RE, AGENT_DISPLAY_NAME_TIMEOUT_MS = 3000, HOSTED_BACKEND_HEADER = "x-letta-memfs-backend", HOSTED_BACKEND_VALUE = "hosted", GIT_DEFAULT_TIMEOUT_MS = 60000, GIT_CLONE_TIMEOUT_MS = 180000, gitConfig = (dir, args) => withSerializedGitConfigMutation(dir, () => runGit(dir, args)), MEMORY_REPOSITORY_CONFIG_KEY = "letta.memoryRepository.url", MEMORY_REPOSITORY_PUSH_LOG = "memory-repository-push.log";
 var init_memory_git = __esm(() => {
   init_memory_constraints_audit();
   init_memory_git_dir();
+  init_memory_git_process();
   init_memfs_git_proxy();
   init_checkout_readiness();
   init_debug();
@@ -104638,7 +104713,6 @@ var init_memory_git = __esm(() => {
   init_memory_git_hooks();
   init_memory_git_signing();
   init_memory_git_windows_credentials();
-  execFile3 = promisify4(execFileCb);
   RETRYABLE_GIT_HTTP_ERROR_RE = /(?:\bHTTP\s+(?:503|520|521|522|523|524)\b|The requested URL returned error:\s*(?:503|520|521|522|523|524))/i;
   RETRYABLE_GIT_NETWORK_ERROR_RE = /(remote end hung up unexpectedly|connection reset by peer|operation timed out|timed out|SIGTERM|ETIMEDOUT)/i;
   MISSING_CWD_GIT_ERROR_RE = /(Unable to read current working directory: No such file or directory|\buv_cwd\b|\bcwd\b.*\bENOENT\b)/i;
@@ -104654,7 +104728,7 @@ __export(exports_personality_default_files, {
   seedPersonalityDefaultMemoryFiles: () => seedPersonalityDefaultMemoryFiles,
   getPersonalityAssetPath: () => getPersonalityAssetPath
 });
-import { execFile as execFileCb2 } from "node:child_process";
+import { execFile as execFileCb } from "node:child_process";
 import {
   constants as constants2,
   copyFileSync,
@@ -104664,7 +104738,7 @@ import {
 } from "node:fs";
 import { dirname as dirname9, isAbsolute as isAbsolute4, join as join15, relative } from "node:path";
 import { fileURLToPath } from "node:url";
-import { promisify as promisify5 } from "node:util";
+import { promisify as promisify4 } from "node:util";
 function getBundledPersonalityAssetsPath() {
   const thisDir = dirname9(fileURLToPath(import.meta.url));
   if (thisDir.replaceAll("\\", "/").endsWith("/src/agent")) {
@@ -104705,7 +104779,7 @@ function resolveMemoryPath(memoryDir, path8) {
 }
 async function hasMemoryFileHistory(memoryDir, relativePath) {
   try {
-    const { stdout } = await execFile4("git", ["log", "-1", "--format=%H", "--all", "--", relativePath], { cwd: memoryDir, timeout: 1e4 });
+    const { stdout } = await execFile3("git", ["log", "-1", "--format=%H", "--all", "--", relativePath], { cwd: memoryDir, timeout: 1e4 });
     return stdout.trim().length > 0;
   } catch {
     return false;
@@ -104716,7 +104790,7 @@ async function discardUncommittedFile(memoryDir, relativePath, absolutePath) {
     unlinkSync3(absolutePath);
   } catch {}
   try {
-    await execFile4("git", ["reset", "--quiet", "--", relativePath], {
+    await execFile3("git", ["reset", "--quiet", "--", relativePath], {
       cwd: memoryDir,
       timeout: 1e4
     });
@@ -104811,13 +104885,13 @@ async function seedPersonalityDefaultMemoryFilesBestEffort(params) {
     };
   }
 }
-var execFile4;
+var execFile3;
 var init_personality_default_files = __esm(() => {
   init_backend2();
   init_debug();
   init_memory_git();
   init_personality_presets();
-  execFile4 = promisify5(execFileCb2);
+  execFile3 = promisify4(execFileCb);
 });
 
 // src/backend/api/providers.ts
@@ -120370,10 +120444,10 @@ __export(exports_personality, {
   buildCreateAgentOptionsForPersonality: () => buildCreateAgentOptionsForPersonality,
   applyPersonalityToMemory: () => applyPersonalityToMemory
 });
-import { execFile as execFileCb3 } from "node:child_process";
+import { execFile as execFileCb2 } from "node:child_process";
 import { existsSync as existsSync17, mkdirSync as mkdirSync11, readFileSync as readFileSync10, writeFileSync as writeFileSync10 } from "node:fs";
 import { dirname as dirname11, join as join24 } from "node:path";
-import { promisify as promisify6 } from "node:util";
+import { promisify as promisify5 } from "node:util";
 function ensureTrailingNewline2(content) {
   return `${content.trimEnd()}
 `;
@@ -120532,7 +120606,7 @@ async function applyPersonalityToMemory(params) {
   const isLocalMemfs = getBackend().capabilities.localMemfs;
   const blockDefinitions = getPersonalityBlockDefinitions(params.personalityId, isLocalMemfs ? "local" : "cloud");
   const repoDir = isLocalMemfs ? getScopedMemoryFilesystemRoot(params.agentId) : getMemoryRepoDir(params.agentId);
-  const statusResult = await execFile5("git", ["status", "--porcelain"], {
+  const statusResult = await execFile4("git", ["status", "--porcelain"], {
     cwd: repoDir,
     timeout: 1e4
   });
@@ -120596,7 +120670,7 @@ async function applyPersonalityToMemory(params) {
     commitMessage
   };
 }
-var execFile5, PRIMARY_PERSONA_RELATIVE_PATH = "system/persona.md", LEGACY_PERSONA_RELATIVE_PATH = "memory/system/persona.md", PRIMARY_HUMAN_RELATIVE_PATH = "system/human.md", LEGACY_HUMAN_RELATIVE_PATH = "memory/system/human.md";
+var execFile4, PRIMARY_PERSONA_RELATIVE_PATH = "system/persona.md", LEGACY_PERSONA_RELATIVE_PATH = "memory/system/persona.md", PRIMARY_HUMAN_RELATIVE_PATH = "system/human.md", LEGACY_HUMAN_RELATIVE_PATH = "memory/system/human.md";
 var init_personality = __esm(() => {
   init_backend2();
   init_server_url();
@@ -120605,7 +120679,7 @@ var init_personality = __esm(() => {
   init_memory_filesystem2();
   init_memory_git();
   init_personality_presets();
-  execFile5 = promisify6(execFileCb3);
+  execFile4 = promisify5(execFileCb2);
 });
 
 // src/browser-discovery-server.ts
@@ -157665,13 +157739,13 @@ var exports_image_resize_sips = {};
 __export(exports_image_resize_sips, {
   convertHeicToJpegWithSips: () => convertHeicToJpegWithSips
 });
-import { execFile as execFile6 } from "node:child_process";
+import { execFile as execFile5 } from "node:child_process";
 import { mkdtemp as mkdtemp2, readFile as readFile5, rm as rm2, writeFile as writeFile4 } from "node:fs/promises";
 import { tmpdir as tmpdir5 } from "node:os";
 import { join as join27 } from "node:path";
 function execFileAsync2(file, args) {
   return new Promise((resolve11, reject2) => {
-    execFile6(file, args, (error4) => {
+    execFile5(file, args, (error4) => {
       if (error4) {
         reject2(error4);
         return;
@@ -157705,7 +157779,7 @@ async function convertHeicToJpegWithSips(buffer) {
 var init_image_resize_sips = () => {};
 
 // src/utils/image-resize.ts
-import { spawn as spawn2 } from "node:child_process";
+import { spawn as spawn3 } from "node:child_process";
 import { existsSync as existsSync19 } from "node:fs";
 import { fileURLToPath as fileURLToPath2 } from "node:url";
 function resolveImageWorkerPath() {
@@ -157722,7 +157796,7 @@ function resolveImageWorkerPath() {
 function resizeWithSharpWorker(buffer, inputMediaType) {
   return new Promise((resolve11, reject2) => {
     const workerPath = resolveImageWorkerPath();
-    const child = spawn2(process.execPath, [workerPath, inputMediaType], {
+    const child = spawn3(process.execPath, [workerPath, inputMediaType], {
       shell: false,
       stdio: ["pipe", "pipe", "pipe"],
       windowsHide: true
@@ -159325,7 +159399,7 @@ function parsePositiveIntFlag(options) {
 }
 
 // src/cli/helpers/file-autocomplete.ts
-import { spawn as spawn3, spawnSync as spawnSync3 } from "node:child_process";
+import { spawn as spawn4, spawnSync as spawnSync3 } from "node:child_process";
 import {
   chmodSync as chmodSync4,
   createWriteStream as createWriteStream2,
@@ -159471,7 +159545,7 @@ async function walkDirectoryWithFd(baseDir, fdPath, query3, maxResults, signal)
       resolve12([]);
       return;
     }
-    const child = spawn3(fdPath, args, {
+    const child = spawn4(fdPath, args, {
       stdio: ["ignore", "pipe", "pipe"]
     });
     let stdout = "";
@@ -163489,7 +163563,7 @@ __export(exports_auto_update, {
   acquireUpdateLock: () => acquireUpdateLock
 });
 import {
-  execFile as execFile7
+  execFile as execFile6
 } from "node:child_process";
 import { randomUUID as randomUUID12 } from "node:crypto";
 import {
@@ -163509,7 +163583,7 @@ import {
 import { readdir as readdir3, rm as rm3 } from "node:fs/promises";
 import { homedir as homedir8 } from "node:os";
 import { dirname as dirname12, join as join32 } from "node:path";
-import { promisify as promisify7 } from "node:util";
+import { promisify as promisify6 } from "node:util";
 function debugLog2(...args) {
   if (DEBUG) {
     console.error("[auto-update]", ...args);
@@ -164041,7 +164115,7 @@ var init_auto_update = __esm(() => {
   init_error_reporting();
   init_process_liveness();
   init_version();
-  execFileAsync3 = promisify7(execFile7);
+  execFileAsync3 = promisify6(execFile6);
   DEBUG = process.env.LETTA_DEBUG_AUTOUPDATE === "1";
   INSTALL_ARG_PREFIX = {
     npm: ["install", "-g"],
@@ -164489,7 +164563,7 @@ var require_cross_spawn = __commonJS((exports, module3) => {
   var cp3 = __require("child_process");
   var parse4 = require_parse2();
   var enoent = require_enoent();
-  function spawn4(command, args, options) {
+  function spawn5(command, args, options) {
     const parsed = parse4(command, args, options);
     const spawned = cp3.spawn(parsed.command, parsed.args, parsed.options);
     enoent.hookChildProcess(spawned, parsed);
@@ -164501,8 +164575,8 @@ var require_cross_spawn = __commonJS((exports, module3) => {
     result2.error = result2.error || enoent.verifyENOENTSync(result2.status, parsed);
     return result2;
   }
-  module3.exports = spawn4;
-  module3.exports.spawn = spawn4;
+  module3.exports = spawn5;
+  module3.exports.spawn = spawn5;
   module3.exports.sync = spawnSync4;
   module3.exports._parse = parse4;
   module3.exports._enoent = enoent;
@@ -164510,13 +164584,13 @@ var require_cross_spawn = __commonJS((exports, module3) => {
 
 // src/utils/package-manager-spawn.ts
 import {
-  spawn as spawn4
+  spawn as spawn5
 } from "node:child_process";
 function isWindowsCommandShim(command) {
   return /\.(?:cmd|bat)$/i.test(command);
 }
 function getPackageManagerProcessFactory({
-  nativeSpawn = spawn4,
+  nativeSpawn = spawn5,
   platform: platform4 = process.platform,
   windowsSpawn = import_cross_spawn.default
 } = {}) {
@@ -168979,7 +169053,7 @@ async function resolveSlackMessageFiles(params) {
       oldest: params.messageTs,
       latest: params.messageTs,
       inclusive: true,
-      limit: 1
+      limit: 2
     }));
     const message2 = messages2.find((entry) => entry.ts === params.messageTs);
     return message2 ? collectSlackFiles(message2) : null;
@@ -179295,7 +179369,7 @@ var init_runtime5 = __esm(() => {
 });
 
 // src/channels/signal/setup-runtime.ts
-import { execFileSync as execFileSync6, spawn as spawn5 } from "node:child_process";
+import { execFileSync as execFileSync6, spawn as spawn6 } from "node:child_process";
 import { existsSync as existsSync28 } from "node:fs";
 function getSignalDockerRunCommand() {
   return [
@@ -179357,7 +179431,7 @@ function runNativeSignalCli(args) {
 }
 function runNativeSignalCliInteractive(args, onOutput) {
   return new Promise((resolve13) => {
-    const child = spawn5("signal-cli", args, {
+    const child = spawn6("signal-cli", args, {
       stdio: ["ignore", "pipe", "pipe"]
     });
     let output = "";
@@ -185691,9 +185765,9 @@ function defineLazyProperty(object3, propertyName, valueGetter) {
 }
 
 // node_modules/default-browser-id/index.js
-import { promisify as promisify8 } from "node:util";
+import { promisify as promisify7 } from "node:util";
 import process15 from "node:process";
-import { execFile as execFile8 } from "node:child_process";
+import { execFile as execFile7 } from "node:child_process";
 async function defaultBrowserId() {
   if (process15.platform !== "darwin") {
     throw new Error("macOS only");
@@ -185704,13 +185778,13 @@ async function defaultBrowserId() {
 }
 var execFileAsync4;
 var init_default_browser_id = __esm(() => {
-  execFileAsync4 = promisify8(execFile8);
+  execFileAsync4 = promisify7(execFile7);
 });
 
 // node_modules/run-applescript/index.js
 import process16 from "node:process";
-import { promisify as promisify9 } from "node:util";
-import { execFile as execFile9, execFileSync as execFileSync7 } from "node:child_process";
+import { promisify as promisify8 } from "node:util";
+import { execFile as execFile8, execFileSync as execFileSync7 } from "node:child_process";
 async function runAppleScript(script4, { humanReadableOutput = true, signal } = {}) {
   if (process16.platform !== "darwin") {
     throw new Error("macOS only");
@@ -185725,7 +185799,7 @@ async function runAppleScript(script4, { humanReadableOutput = true, signal } =
 }
 var execFileAsync5;
 var init_run_applescript = __esm(() => {
-  execFileAsync5 = promisify9(execFile9);
+  execFileAsync5 = promisify8(execFile8);
 });
 
 // node_modules/bundle-name/index.js
@@ -185738,8 +185812,8 @@ var init_bundle_name = __esm(() => {
 });
 
 // node_modules/default-browser/windows.js
-import { promisify as promisify10 } from "node:util";
-import { execFile as execFile10 } from "node:child_process";
+import { promisify as promisify9 } from "node:util";
+import { execFile as execFile9 } from "node:child_process";
 async function defaultBrowser(_execFileAsync = execFileAsync6) {
   const { stdout } = await _execFileAsync("reg", [
     "QUERY",
@@ -185760,7 +185834,7 @@ async function defaultBrowser(_execFileAsync = execFileAsync6) {
 }
 var execFileAsync6, windowsBrowserProgIds, UnknownBrowserError;
 var init_windows = __esm(() => {
-  execFileAsync6 = promisify10(execFile10);
+  execFileAsync6 = promisify9(execFile9);
   windowsBrowserProgIds = {
     AppXq0fevzme2pys62n3e0fbqa7peapykr8v: { name: "Edge", id: "com.microsoft.edge.old" },
     MSEdgeDHTML: { name: "Edge", id: "com.microsoft.edge" },
@@ -185777,9 +185851,9 @@ var init_windows = __esm(() => {
 });
 
 // node_modules/default-browser/index.js
-import { promisify as promisify11 } from "node:util";
+import { promisify as promisify10 } from "node:util";
 import process17 from "node:process";
-import { execFile as execFile11 } from "node:child_process";
+import { execFile as execFile10 } from "node:child_process";
 async function defaultBrowser2() {
   if (process17.platform === "darwin") {
     const id2 = await defaultBrowserId();
@@ -185802,7 +185876,7 @@ var init_default_browser = __esm(() => {
   init_default_browser_id();
   init_bundle_name();
   init_windows();
-  execFileAsync7 = promisify11(execFile11);
+  execFileAsync7 = promisify10(execFile10);
 });
 
 // node_modules/open/index.js
@@ -185816,14 +185890,14 @@ import process18 from "node:process";
 import { Buffer as Buffer5 } from "node:buffer";
 import path8 from "node:path";
 import { fileURLToPath as fileURLToPath3 } from "node:url";
-import { promisify as promisify12 } from "node:util";
+import { promisify as promisify11 } from "node:util";
 import childProcess from "node:child_process";
 import fs13, { constants as fsConstants2 } from "node:fs/promises";
 async function getWindowsDefaultBrowserFromWsl() {
   const powershellPath = await powerShellPath();
   const rawCommand = String.raw`(Get-ItemProperty -Path "HKCU:\Software\Microsoft\Windows\Shell\Associations\UrlAssociations\http\UserChoice").ProgId`;
   const encodedCommand = Buffer5.from(rawCommand, "utf16le").toString("base64");
-  const { stdout } = await execFile12(powershellPath, [
+  const { stdout } = await execFile11(powershellPath, [
     "-NoProfile",
     "-NonInteractive",
     "-ExecutionPolicy",
@@ -185859,7 +185933,7 @@ function detectPlatformBinary({ [platform4]: platformBinary }, { wsl }) {
   }
   return detectArchBinary(platformBinary);
 }
-var execFile12, __dirname2, localXdgOpenPath, platform4, arch2, pTryEach = async (array2, mapper) => {
+var execFile11, __dirname2, localXdgOpenPath, platform4, arch2, pTryEach = async (array2, mapper) => {
   let latestError;
   for (const item of array2) {
     try {
@@ -186038,7 +186112,7 @@ var init_open = __esm(() => {
   init_wsl_utils();
   init_default_browser();
   init_is_inside_container();
-  execFile12 = promisify12(childProcess.execFile);
+  execFile11 = promisify11(childProcess.execFile);
   __dirname2 = path8.dirname(fileURLToPath3(import.meta.url));
   localXdgOpenPath = path8.join(__dirname2, "xdg-open");
   ({ platform: platform4, arch: arch2 } = process18);
@@ -211476,7 +211550,7 @@ var init_mcp_client = __esm(() => {
   init_streamableHttp();
   DEFAULT_CLIENT_INFO = {
     name: "letta-code",
-    version: "0.34.27"
+    version: "0.34.29"
   };
 });
 
@@ -214704,19 +214778,27 @@ function getProcessStart(pid, platform5 = process.platform, run = (executable, a
     return null;
   }
 }
-function currentDurableLockOwner(processStartTimeoutMs = PROCESS_START_PROBE_TIMEOUT_MS) {
-  let processStart = cachedCurrentProcessStart;
-  if (processStart === undefined) {
-    processStart = getProcessStart(process.pid, process.platform, undefined, processStartTimeoutMs);
-    if (processStart !== null)
-      cachedCurrentProcessStart = processStart;
-  }
-  return {
-    token: randomUUID30(),
-    pid: process.pid,
-    processStart: processStart ?? null
+function createCurrentDurableLockOwner(readStart = (timeoutMs) => getProcessStart(process.pid, process.platform, undefined, timeoutMs), now2 = () => performance.now()) {
+  let cachedProcessStart;
+  let retryAt = -Infinity;
+  return (processStartTimeoutMs = PROCESS_START_PROBE_TIMEOUT_MS) => {
+    if (cachedProcessStart === undefined && now2() >= retryAt) {
+      const processStart = readStart(processStartTimeoutMs);
+      if (processStart === null)
+        retryAt = now2() + PROCESS_START_RETRY_DELAY_MS;
+      else
+        cachedProcessStart = processStart;
+    }
+    return {
+      token: randomUUID30(),
+      pid: process.pid,
+      processStart: cachedProcessStart ?? null
+    };
   };
 }
+function currentDurableLockOwner(processStartTimeoutMs = PROCESS_START_PROBE_TIMEOUT_MS) {
+  return readCurrentDurableLockOwner(processStartTimeoutMs);
+}
 function durableLockOwnerIsAlive(owner, readStart = getProcessStart, probe = (pid) => process.kill(pid, 0)) {
   if (!Number.isSafeInteger(owner.pid) || owner.pid <= 0)
     return false;
@@ -215132,8 +215214,10 @@ function acquireDurableFileLock(path12, options = {}) {
     released = true;
   };
 }
-var MAX_OWNER_BYTES = 4096, WAIT_SLICE_MS = 5, PROCESS_START_PROBE_TIMEOUT_MS = 250, MAX_CANDIDATE_SWEEP = 128, INSTALLING_OWNER_NAME = ".installing", cachedCurrentProcessStart;
-var init_durable_file_lock = () => {};
+var MAX_OWNER_BYTES = 4096, WAIT_SLICE_MS = 5, PROCESS_START_PROBE_TIMEOUT_MS = 250, MAX_CANDIDATE_SWEEP = 128, INSTALLING_OWNER_NAME = ".installing", PROCESS_START_RETRY_DELAY_MS = 5000, readCurrentDurableLockOwner;
+var init_durable_file_lock = __esm(() => {
+  readCurrentDurableLockOwner = createCurrentDurableLockOwner();
+});
 
 // src/websocket/listener/interrupted-turn-input-ownership.ts
 import { readdirSync as readdirSync10 } from "node:fs";
@@ -215530,7 +215614,7 @@ Important:
 var init_Bash = () => {};
 
 // src/tools/descriptions/CodeMode.md
-var CodeMode_default = "Run a JavaScript async function body that calls tools and returns only the results you need.\n\nCall built-in tools with `await tools.<name>(args)` and MCP tools with `await tools.mcp__server__tool(args)`; `listTools()` and `describeTool(name)` list tools and their schemas. Failed calls throw. `args` holds optional input, and `console.log()` output is captured.\n\nReturns `{ result, output }`. Like Bash, a script still running after a brief wait continues in the background and its result arrives as a task notification; `run_in_background: true` returns the task ID immediately. TaskStop aborts it.\n\nNested calls follow permission rules; calls that need approval fail, so call those tools directly. This is not a security sandbox.\n\nExample:\n\n    const texts = await Promise.all(args.paths.map(file_path => tools.Read({ file_path })));\n    return texts.map((text, i) => ({ path: args.paths[i], lines: text.split('\\n').length }));\n";
+var CodeMode_default = "Run a JavaScript async function body that calls tools and returns only the results you need.\n\nCall built-in and server-side tools with `await tools.<name>(args)` and MCP tools with `await tools.mcp__server__tool(args)`; `listTools()` and `describeTool(name)` list tools and their schemas. Failed calls throw. `args` holds optional input, `process.env` holds the variables a Bash command sees plus the agent's secrets, and `console.log()` output is captured.\n\nReturns `{ result, output }`. Like Bash, a script still running after a brief wait continues in the background and its result arrives as a task notification; `run_in_background: true` returns the task ID immediately. TaskStop aborts it.\n\nNested calls follow permission rules; calls that need approval fail, so call those tools directly. This is not a security sandbox.\n\nExample:\n\n    const texts = await Promise.all(args.paths.map(file_path => tools.Read({ file_path })));\n    return texts.map((text, i) => ({ path: args.paths[i], lines: text.split('\\n').length }));\n";
 var init_CodeMode = () => {};
 
 // src/tools/descriptions/Edit.md
@@ -215634,7 +215718,7 @@ Do not use this tool for root memory files (already loaded) or skills/ (use Skil
 var init_Memory = () => {};
 
 // src/tools/descriptions/Monitor.md
-var Monitor_default = 'Start a background monitor that streams events from a long-running script. Each stdout line is an event — you keep working and notifications arrive in the chat. Events arrive on their own schedule and are not replies from the user, even if one lands while you\'re waiting for the user to answer a question.\n\nPick by how many notifications you need:\n- **One** ("tell me when the server is ready / the build finishes") → use **Bash with `run_in_background`** and a command that exits when the condition is true, e.g. `until grep -q "Ready in" dev.log; do sleep 0.5; done`. You get a single completion notification when it exits.\n- **One per occurrence, indefinitely** ("tell me every time an ERROR line appears") → Monitor with an unbounded command (`tail -f`, `inotifywait -m`, `while true`).\n- **One per occurrence, until a known end** ("emit each CI step result, stop when the run completes") → Monitor with a command that emits lines and then exits.\n\nYour script\'s stdout is the event stream. Each line becomes a notification. Exit ends the watch.\n  # Each matching log line is an event\n  tail -f /var/log/app.log | grep --line-buffered "ERROR"\n  # Each file change is an event\n  inotifywait -m --format \'%e %f\' /watched/dir\n  # Node script that emits events as they arrive (e.g. WebSocket listener)\n  node watch-for-events.js\n\nFor open github.com pull requests, use WatchPR instead. It covers the whole PR surface and keeps watching after CI finishes. Use Monitor only when WatchPR does not apply.\n\n**Don\'t use an unbounded command for a single notification.** `tail -f`, `inotifywait -m`, and `while true` never exit on their own, so the monitor stays armed until timeout even after the event has fired. For "tell me when X is ready," use Bash `run_in_background` with an `until` loop instead (one notification, ends in seconds). Note that `tail -f log | grep -m 1 ...` does *not* fix this: if the log goes quiet after the match, `tail` never receives SIGPIPE and the pipeline hangs anyway.\n\n- Every pipe stage must flush per line or matches sit in its buffer unseen: `grep` needs `--line-buffered`, `awk` needs `fflush()`. `head` cannot flush at all — `| head -N` delivers nothing until N matches accumulate, then ends the stream.\n- In poll loops, handle transient failures (`curl ... || true`) — one failed request shouldn\'t kill the monitor.\n- Poll intervals: 30s+ for remote APIs (rate limits), 0.5–1s for local checks.\n- Write a specific `description` — it appears in every notification ("errors in deploy.log" not "watching logs").\n- Only stdout is the event stream. Stderr goes to the output file (readable via Read) but does not trigger notifications — for a command you run directly (e.g. `python train.py 2>&1 | grep --line-buffered ...`), merge stderr with `2>&1` so its failures reach your filter. (No effect on `tail -f` of an existing log — that file only contains what its writer redirected.)\n\n**Coverage — silence is not success.** When watching a job or process for an outcome, your filter must match every terminal state, not just the happy path. A monitor that greps only for the success marker stays silent through a crashloop, a hung process, or an unexpected exit — and silence looks identical to "still running." Before arming, ask: *if this process crashed right now, would my filter emit anything?* If not, widen it.\n  # Wrong — silent on crash, hang, or any non-success exit\n  tail -f run.log | grep --line-buffered "elapsed_steps="\n  # Right — one alternation covering progress + the failure signatures you\'d act on\n  tail -f run.log | grep -E --line-buffered "elapsed_steps=|Traceback|Error|FAILED|assert|Killed|OOM"\n\nFor poll loops checking job state, emit on every terminal status (`succeeded|failed|cancelled|timeout`), not just success. If you cannot confidently enumerate the failure signatures, broaden the grep alternation rather than narrow it — some extra noise is better than missing a crashloop.\n\n**Output volume**: Every stdout line is a conversation message, so the filter should be selective — but selective means "the lines you\'d act on," not "only good news." Never pipe raw logs; filter to exactly the success and failure signals you care about. Monitors that produce too many events are automatically stopped; restart with a tighter filter if this happens.\n\nStdout lines within 200ms are batched into a single notification, so multiline output from a single event groups naturally.\n\nThe script runs in the same shell environment as Bash. Exit ends the watch (exit code is reported). Timeout → killed. Set `persistent: true` for session-length watches (log tails, long-lived event streams). In managed Cloud sandboxes, every monitor stops after at most 1 hour, including persistent monitors; elsewhere persistent monitors run until TaskStop or session end. For longer Cloud waits, schedule a Wake or cron (which does not keep the sandbox running between turns) and combine it with shorter monitors. Use TaskStop to cancel early.\n\nWhen someone is waiting on the result, set `backup_after_seconds` (e.g. 900). If the monitor goes that long without an event, a durable Wake brings you back to check the real state, so a queued, hung, or dead watch can\'t leave them waiting in silence.\n\n**ws source** — open a WebSocket and stream each incoming text frame as an event. No shell, no polling: the server pushes, you get notified.\n    ws: {url: \'wss://events.example.com/stream\', protocols: [\'v1\']},\n    description: \'deploy events\',\n\nEach text frame becomes one notification (multiline frames stay as one event). Binary frames are reported as `[binary frame, N bytes]` rather than passed through. Socket close ends the watch with the close code surfaced; errors are surfaced before close. Same rate limiting as bash — a firehose will be suppressed and eventually stopped, so subscribe to a filtered feed where one exists.\n\nPrefer this over `command: \'websocat wss://…\'` — it avoids the extra process and line-buffering pitfalls. Use bash when you need to transform or filter frames with shell tools before they become events.\n';
+var Monitor_default = 'Start a background monitor that streams events from a long-running script. Each stdout line is an event — you keep working and notifications arrive in the chat. Events arrive on their own schedule and are not replies from the user, even if one lands while you\'re waiting for the user to answer a question.\n\nPick by how many notifications you need:\n- **One** ("tell me when the server is ready / the build finishes") → use **Bash with `run_in_background`** and a command that exits when the condition is true, e.g. `until grep -q "Ready in" dev.log; do sleep 0.5; done`. You get a single completion notification when it exits.\n- **One per occurrence, indefinitely** ("tell me every time an ERROR line appears") → Monitor with an unbounded command (`tail -f`, `inotifywait -m`, `while true`).\n- **One per occurrence, until a known end** ("emit each CI step result, stop when the run completes") → Monitor with a command that emits lines and then exits.\n\nYour script\'s stdout is the event stream. Each line becomes a notification. Exit ends the watch.\n  # Each matching log line is an event\n  tail -f /var/log/app.log | grep --line-buffered "ERROR"\n  # Each file change is an event\n  inotifywait -m --format \'%e %f\' /watched/dir\n  # Node script that emits events as they arrive (e.g. WebSocket listener)\n  node watch-for-events.js\n\nFor open github.com pull requests, use WatchPR instead. It covers the whole PR surface and keeps watching after CI finishes. Use Monitor only when WatchPR does not apply.\n\n**Don\'t use an unbounded command for a single notification.** `tail -f`, `inotifywait -m`, and `while true` never exit on their own, so the monitor stays armed until timeout even after the event has fired. For "tell me when X is ready," use Bash `run_in_background` with an `until` loop instead (one notification, ends in seconds). Note that `tail -f log | grep -m 1 ...` does *not* fix this: if the log goes quiet after the match, `tail` never receives SIGPIPE and the pipeline hangs anyway.\n\n- Every pipe stage must flush per line or matches sit in its buffer unseen: `grep` needs `--line-buffered`, `awk` needs `fflush()`. `head` cannot flush at all — `| head -N` delivers nothing until N matches accumulate, then ends the stream.\n- In poll loops, handle transient failures (`curl ... || true`) — one failed request shouldn\'t kill the monitor.\n- Poll intervals: 30s+ for remote APIs (rate limits), 0.5–1s for local checks.\n- Write a specific `description` — it appears in every notification ("errors in deploy.log" not "watching logs").\n- Only stdout is the event stream. Stderr goes to the output file (readable via Read) but does not trigger notifications — for a command you run directly (e.g. `python train.py 2>&1 | grep --line-buffered ...`), merge stderr with `2>&1` so its failures reach your filter. (No effect on `tail -f` of an existing log — that file only contains what its writer redirected.)\n\n**Coverage — silence is not success.** When watching a job or process for an outcome, your filter must match every terminal state, not just the happy path. A monitor that greps only for the success marker stays silent through a crashloop, a hung process, or an unexpected exit — and silence looks identical to "still running." Before arming, ask: *if this process crashed right now, would my filter emit anything?* If not, widen it.\n  # Wrong — silent on crash, hang, or any non-success exit\n  tail -f run.log | grep --line-buffered "elapsed_steps="\n  # Right — one alternation covering progress + the failure signatures you\'d act on\n  tail -f run.log | grep -E --line-buffered "elapsed_steps=|Traceback|Error|FAILED|assert|Killed|OOM"\n\nFor poll loops checking job state, emit on every terminal status (`succeeded|failed|cancelled|timeout`), not just success. If you cannot confidently enumerate the failure signatures, broaden the grep alternation rather than narrow it — some extra noise is better than missing a crashloop.\n\n**Output volume**: Every stdout line is a conversation message, so the filter should be selective — but selective means "the lines you\'d act on," not "only good news." Never pipe raw logs; filter to exactly the success and failure signals you care about. Monitors that produce too many events are automatically stopped; restart with a tighter filter if this happens.\n\nStdout lines within 200ms are batched into a single notification, so multiline output from a single event groups naturally.\n\nThe script runs in the same shell environment as Bash. Exit ends the watch (exit code is reported). Timeout → killed. Set `persistent: true` for session-length watches (log tails, long-lived event streams). In managed Cloud sandboxes, every monitor stops at the per-sandbox cap configured by LETTA_MONITOR_MAX_TIMEOUT_MS (default 1 hour, clamped to 1 hour through 7 days), including persistent monitors; elsewhere persistent monitors run until TaskStop or session end. Call Monitor again to re-arm it if you still need to watch. For much longer Cloud waits, schedule a Wake or cron (which does not keep the sandbox running between turns) and combine it with shorter monitors. Use TaskStop to cancel early.\n\nWhen someone is waiting on the result, set `backup_after_seconds` (e.g. 900). If the monitor goes that long without an event, a durable Wake brings you back to check the real state, so a queued, hung, or dead watch can\'t leave them waiting in silence.\n\n**ws source** — open a WebSocket and stream each incoming text frame as an event. No shell, no polling: the server pushes, you get notified.\n    ws: {url: \'wss://events.example.com/stream\', protocols: [\'v1\']},\n    description: \'deploy events\',\n\nEach text frame becomes one notification (multiline frames stay as one event). Binary frames are reported as `[binary frame, N bytes]` rather than passed through. Socket close ends the watch with the close code surfaced; errors are surfaced before close. Same rate limiting as bash — a firehose will be suppressed and eventually stopped, so subscribe to a filtered feed where one exists.\n\nPrefer this over `command: \'websocat wss://…\'` — it avoids the extra process and line-buffering pitfalls. Use bash when you need to transform or filter frames with shell tools before they become events.\n\n**script source** — a JavaScript watch loop with the same globals as CodeMode, plus `emit(text)` (one event) and `sleep(ms)`. Returning or throwing ends the watch.\n';
 var init_Monitor = () => {};
 
 // src/tools/descriptions/Read.md
@@ -216156,7 +216240,7 @@ var init_Wake = () => {};
 // src/tools/descriptions/WatchPR.md
 var WatchPR_default = `Watch one open github.com pull request until it merges, closes, is stopped with TaskStop, or the session ends.
 
-In managed Cloud sandboxes, WatchPR also stops after a hard 1-hour limit and sends a timeout notification. For checks beyond that window, use Wake or cron (which does not keep the sandbox running between turns) and combine it with shorter watches. Local watches have no duration limit.
+In managed Cloud sandboxes, WatchPR also stops after the per-sandbox cap configured by LETTA_MONITOR_MAX_TIMEOUT_MS (default 1 hour, clamped to 1 hour through 7 days) and sends a timeout notification. Call WatchPR again to re-arm it if you still need to watch. For much longer waits, use Wake or cron (which does not keep the sandbox running between turns) and combine it with shorter watches. Local watches have no duration limit.
 
 Use WatchPR instead of writing a Monitor or shell polling loop when you need ongoing notifications about a PR. Start at most one watch per PR. It reports:
 
@@ -216173,7 +216257,7 @@ Pass a URL ending at the PR number, such as \`https://github.com/owner/repo/pull
 var init_WatchPR = () => {};
 
 // src/tools/descriptions/Workflow.md
-var Workflow_default = "Execute a workflow script that orchestrates multiple subagents deterministically (loops, conditionals, fan-out) rather than model-driven.\n\nWorkflows run in the background: this tool returns immediately with a task ID, and a <task-notification> carrying the script's return value arrives when the workflow completes. Do not poll or sleep for it, and never fabricate the result before it arrives. TaskStop aborts the run. With `wait: true`, the workflow runs in the foreground instead and this tool returns the script's value directly.\n\nScripts that call `agent()` or `decide()` spend money on subagents and model calls. Run one only when the user explicitly asked for a workflow or multi-agent orchestration (\"use a workflow\", \"fan out agents\") or a skill's instructions call this tool; otherwise describe the workflow and ask first. For scripts that only call tools, use CodeMode instead.\n\nScripts can call tools directly: `await tools.<name>(args)` for this turn's built-in tools and `await tools.mcp__server__tool(args)` for the agent's MCP tools, subject to the user's permission rules. `await listTools()` returns `[{ name, description }]`; `await describeTool(name)` returns `{ name, description, inputSchema }`, or `undefined` for an unknown tool.\n\nScripts are plain JavaScript and must begin with `export const meta = {...}`, a pure literal (no variables, calls, or interpolation). Pass the work list via `args`. Prefer `pipeline()` so each item moves to its next stage as soon as it is ready. Await `agent()` calls: failures reject with the cause, `callIndex`, and `conversationId` when available. `parallel()` and `pipeline()` let siblings finish, then reject if any callback failed; a failed pipeline item skips its remaining stages. Catch errors explicitly inside callbacks for best-effort processing.\n\n  export const meta = {\n    name: 'review-files',\n    description: 'Review each file for bugs, verify each finding',\n    phases: [{ title: 'Review' }, { title: 'Verify' }],\n  }\n  const findings = {type: 'object', properties: {bugs: {type: 'array', items: {type: 'string'}}}, required: ['bugs']}\n  const verdict = {type: 'object', properties: {real: {type: 'boolean'}}, required: ['real']}\n  const results = await pipeline(\n    args.files,\n    f => agent(`Review ${f} for bugs.`, { phase: 'Review', schema: findings }),\n    (review, f) => parallel(review.bugs.map(bug => () =>\n      agent(`Is this a real bug in ${f}? ${bug}`, { phase: 'Verify', schema: verdict })\n        .then(v => v.real ? { file: f, bug } : null))),\n  )\n  return results.flat().filter(Boolean)\n\nBefore authoring a script, load the `workflow-authoring` skill — the script API, pipeline-vs-barrier rules, quality patterns, worked examples, and how to diagnose a run.\n";
+var Workflow_default = "Execute a workflow script that orchestrates multiple subagents deterministically (loops, conditionals, fan-out) rather than model-driven.\n\nWorkflows run in the background: this tool returns immediately with a task ID, and a <task-notification> carrying the script's return value arrives when the workflow completes. Do not poll or sleep for it, and never fabricate the result before it arrives. TaskStop aborts the run. With `wait: true`, the workflow runs in the foreground instead and this tool returns the script's value directly.\n\nScripts that call `agent()` or `decide()` spend money on subagents and model calls. Run one only when the user explicitly asked for a workflow or multi-agent orchestration (\"use a workflow\", \"fan out agents\") or a skill's instructions call this tool; otherwise describe the workflow and ask first. For scripts that only call tools, use CodeMode instead.\n\nScripts can call tools directly: `await tools.<name>(args)` for this turn's built-in tools and `await tools.mcp__server__tool(args)` for the agent's MCP tools, subject to the user's permission rules. `await listTools()` returns `[{ name, description }]`; `await describeTool(name)` returns `{ name, description, inputSchema }`, or `undefined` for an unknown tool.\n\nScripts are plain JavaScript and must begin with `export const meta = {...}`, a pure literal (no variables, calls, or interpolation). Pass the work list via `args`. `process.env` holds the variables a Bash command sees plus the agent's secrets. Prefer `pipeline()` so each item moves to its next stage as soon as it is ready. Await `agent()` calls: failures reject with the cause, `callIndex`, and `conversationId` when available. `parallel()` and `pipeline()` let siblings finish, then reject if any callback failed; a failed pipeline item skips its remaining stages. Catch errors explicitly inside callbacks for best-effort processing.\n\n  export const meta = {\n    name: 'review-files',\n    description: 'Review each file for bugs, verify each finding',\n    phases: [{ title: 'Review' }, { title: 'Verify' }],\n  }\n  const findings = {type: 'object', properties: {bugs: {type: 'array', items: {type: 'string'}}}, required: ['bugs']}\n  const verdict = {type: 'object', properties: {real: {type: 'boolean'}}, required: ['real']}\n  const results = await pipeline(\n    args.files,\n    f => agent(`Review ${f} for bugs.`, { phase: 'Review', schema: findings }),\n    (review, f) => parallel(review.bugs.map(bug => () =>\n      agent(`Is this a real bug in ${f}? ${bug}`, { phase: 'Verify', schema: verdict })\n        .then(v => v.real ? { file: f, bug } : null))),\n  )\n  return results.flat().filter(Boolean)\n\nBefore authoring a script, load the `workflow-authoring` skill — the script API, pipeline-vs-barrier rules, quality patterns, worked examples, and how to diagnose a run.\n";
 var init_Workflow = () => {};
 
 // src/tools/descriptions/Write.md
@@ -219263,7 +219347,7 @@ var init_github_pull_request_tracker = __esm(() => {
 });
 
 // src/tools/impl/shell-runner.ts
-import { spawn as spawn7 } from "node:child_process";
+import { spawn as spawn8 } from "node:child_process";
 import { StringDecoder } from "node:string_decoder";
 function buildSpawnError(err, executable, cwd2) {
   let message = `Failed to execute command: ${err?.message || "unknown error"}`;
@@ -219317,7 +219401,7 @@ function killChildProcessTree(childProcess2, signal = "SIGTERM") {
     return;
   }
   if (process.platform === "win32") {
-    const taskkill = spawn7("taskkill.exe", ["/pid", String(childProcess2.pid), "/t", "/f"], {
+    const taskkill = spawn8("taskkill.exe", ["/pid", String(childProcess2.pid), "/t", "/f"], {
       stdio: "ignore",
       windowsHide: true
     });
@@ -219349,12 +219433,36 @@ function interruptChildProcessTree(childProcess2) {
   }
   killChildProcessTree(childProcess2, "SIGINT");
 }
+function createPipeProcessKiller(childProcess2) {
+  let exited = false;
+  let forced = false;
+  let drainTimer;
+  childProcess2.once("close", () => clearTimeout(drainTimer));
+  const closePipes = () => {
+    if (!exited || !forced || drainTimer)
+      return;
+    drainTimer = setTimeout(() => {
+      childProcess2.stdin?.destroy();
+      childProcess2.stdout?.destroy();
+      childProcess2.stderr?.destroy();
+    }, 100);
+  };
+  childProcess2.once("exit", () => {
+    exited = true;
+    closePipes();
+  });
+  return (signal) => {
+    forced ||= process.platform === "win32" || signal === "SIGKILL" || signal === 9;
+    killChildProcessTree(childProcess2, signal);
+    closePipes();
+  };
+}
 function spawnPipeProcess(launcher, options, events) {
   const [executable, ...args] = launcher;
   if (!executable) {
     throw new ShellExecutionError("Executable is required");
   }
-  const childProcess2 = spawn7(executable, args, {
+  const childProcess2 = spawn8(executable, args, {
     cwd: options.cwd,
     env: options.env,
     shell: false,
@@ -219370,9 +219478,7 @@ function spawnPipeProcess(launcher, options, events) {
   childProcess2.on("error", events.error);
   childProcess2.on("close", events.close);
   return {
-    kill(signal) {
-      killChildProcessTree(childProcess2, signal);
-    },
+    kill: createPipeProcessKiller(childProcess2),
     interrupt() {
       interruptChildProcessTree(childProcess2);
     },
@@ -219384,7 +219490,7 @@ function spawnPtyBridgeProcess(launcher, options, events) {
   if (!executable) {
     throw new ShellExecutionError("Executable is required");
   }
-  const childProcess2 = spawn7("node", [
+  const childProcess2 = spawn8("node", [
     "-e",
     NODE_PTY_BRIDGE_SCRIPT,
     JSON.stringify({ executable, args, cwd: options.cwd })
@@ -219404,9 +219510,7 @@ function spawnPtyBridgeProcess(launcher, options, events) {
   childProcess2.on("error", events.error);
   childProcess2.on("close", events.close);
   return {
-    kill(signal) {
-      killChildProcessTree(childProcess2, signal);
-    },
+    kill: createPipeProcessKiller(childProcess2),
     interrupt() {
       interruptChildProcessTree(childProcess2);
     },
@@ -222499,7 +222603,7 @@ var init_prompt_executor = __esm(() => {
 });
 
 // src/hooks/executor.ts
-import { spawn as spawn8 } from "node:child_process";
+import { spawn as spawn9 } from "node:child_process";
 function truncateHookFeedback(text2, workingDirectory) {
   return truncateByChars(scrubAmbientSecrets(text2), LIMITS.HOOK_OUTPUT_CHARS, "Hook", {
     workingDirectory,
@@ -222532,7 +222636,7 @@ function trySpawnWithLauncher(launcher, workingDirectory, input) {
     LETTA_WORKING_DIR: _lettaWorkingDir,
     ...parentEnv
   } = process.env;
-  return spawn8(executable, args, {
+  return spawn9(executable, args, {
     cwd: workingDirectory,
     env: {
       ...parentEnv,
@@ -224201,6 +224305,34 @@ var init_external_tool_background_eligibility = __esm(() => {
   listenerRegistrations = new WeakMap;
 });
 
+// src/tools/tool-context-retention.ts
+function retainToolContext(contextId) {
+  holders.set(contextId, (holders.get(contextId) ?? 0) + 1);
+}
+function releaseRetainedToolContext(contextId) {
+  const count = (holders.get(contextId) ?? 0) - 1;
+  if (count > 0) {
+    holders.set(contextId, count);
+    return false;
+  }
+  holders.delete(contextId);
+  return deferredReleases.delete(contextId);
+}
+function isToolContextRetained(contextId) {
+  return holders.has(contextId);
+}
+function deferToolContextRelease(contextId) {
+  if (!holders.has(contextId))
+    return false;
+  deferredReleases.add(contextId);
+  return true;
+}
+var holders, deferredReleases;
+var init_tool_context_retention = __esm(() => {
+  holders = new Map;
+  deferredReleases = new Set;
+});
+
 // src/tools/external-tool-content.ts
 function normalizeExternalToolResultContent(content) {
   const normalized = content.flatMap((part) => {
@@ -231005,12 +231137,11 @@ function saveExecutionContext(snapshot) {
   const contexts = getExecutionContexts();
   const contextId = `ctx-${Date.now()}-${toolExecutionContextCounter++}`;
   contexts.set(contextId, snapshot);
-  const MAX_CONTEXTS = 4096;
-  if (contexts.size > MAX_CONTEXTS) {
-    const oldestContextId = contexts.keys().next().value;
-    if (oldestContextId) {
-      contexts.delete(oldestContextId);
-    }
+  for (const id2 of contexts.keys()) {
+    if (contexts.size <= 4096)
+      break;
+    if (!isToolContextRetained(id2))
+      contexts.delete(id2);
   }
   return contextId;
 }
@@ -231056,7 +231187,8 @@ function clearCapturedToolExecutionContexts() {
   getExecutionContexts().clear();
 }
 function releaseToolExecutionContext(contextId) {
-  getExecutionContexts().delete(contextId);
+  if (!deferToolContextRelease(contextId))
+    getExecutionContexts().delete(contextId);
 }
 function acquireSwitchLock() {
   const lock = getSwitchLock();
@@ -232208,6 +232340,7 @@ var init_manager2 = __esm(async () => {
   init_telemetry();
   init_external_tool_background();
   init_external_tool_background_eligibility();
+  init_tool_context_retention();
   init_checkout_readiness();
   init_debug();
   init_secrets_store();
@@ -234219,6 +234352,51 @@ var init_mcp = __esm(() => {
 
 // src/tools/script-tool-scope.ts
 import { randomUUID as randomUUID33 } from "node:crypto";
+async function loadServerTools(agentId, builtins) {
+  const tools = new Map;
+  if (!agentId || !getBackend().capabilities.serverSideToolManagement) {
+    return tools;
+  }
+  try {
+    const agent = await (await getClient()).agents.retrieve(agentId, {
+      include: ["agent.tools"]
+    });
+    const approvalRules = new Set((agent.tool_rules ?? []).filter((rule) => rule.type === "requires_approval").map((rule) => rule.tool_name));
+    for (const tool of agent.tools ?? []) {
+      const name = tool.name;
+      if (!name || tool.tool_type === "external_mcp")
+        continue;
+      if (builtins.has(name) || SCRIPT_EXCLUDED_TOOLS.has(name))
+        continue;
+      tools.set(name, {
+        name,
+        description: tool.description ?? "",
+        inputSchema: tool.json_schema?.parameters ?? {},
+        requiresApproval: tool.default_requires_approval === true || approvalRules.has(name)
+      });
+    }
+  } catch {}
+  return tools;
+}
+async function callServerTool(agentId, tool, args, signal) {
+  if (!agentId)
+    throw new Error(`${tool.name} requires an invoking agent.`);
+  if (tool.requiresApproval) {
+    throw new Error(`${tool.name} needs approval, which a script cannot request; call it directly.`);
+  }
+  const result2 = await (await getClient()).agents.tools.run(tool.name, { agent_id: agentId, args }, signal ? { signal } : {});
+  const value = result2.status === "success" ? result2.func_return : result2.stderr?.join(`
+`) ?? result2.func_return;
+  return {
+    content: [
+      {
+        type: "text",
+        text: typeof value === "string" ? value : JSON.stringify(value ?? null)
+      }
+    ],
+    isError: result2.status !== "success"
+  };
+}
 function isOwningAgentId(value) {
   return value?.startsWith("agent-") === true && !value.startsWith("agent-free:");
 }
@@ -234245,8 +234423,9 @@ async function createScriptToolScope(parentAgentId, signal) {
   const permissionCwd = getCurrentWorkingDirectory();
   const context3 = toolContextId ? manager.getExecutionContextById(toolContextId) : undefined;
   const builtinSchemas = (context3 ? serializeClientTools(context3.toolRegistry, context3.externalTools, context3.modTools, manager.getServerToolName) : []).filter((schema5) => !SCRIPT_EXCLUDED_TOOLS.has(schema5.name));
-  const builtinToolNames = builtinSchemas.map((schema5) => schema5.name);
-  const builtins = new Set(builtinToolNames);
+  const builtins = new Set(builtinSchemas.map((schema5) => schema5.name));
+  const serverTools = await loadServerTools(parentAgentId, builtins);
+  const builtinToolNames = [...builtins, ...serverTools.keys()];
   let mcpSession;
   const mcp = () => {
     if (!parentAgentId)
@@ -234254,8 +234433,22 @@ async function createScriptToolScope(parentAgentId, signal) {
     mcpSession ??= Promise.resolve().then(() => (init_mcp(), exports_mcp)).then((module3) => module3.createAgentMcpSession(parentAgentId));
     return mcpSession;
   };
+  const { getShellEnv: getShellEnv2 } = await Promise.resolve().then(() => (init_shell_env(), exports_shell_env));
+  const secrets2 = await Promise.resolve().then(() => (init_secrets_store(), exports_secrets_store));
+  if (parentAgentId)
+    await secrets2.ensureSecretsLoaded(parentAgentId).catch(() => {
+      return;
+    });
+  const env6 = {};
+  for (const [key2, value] of Object.entries(getShellEnv2())) {
+    if (typeof value === "string")
+      env6[key2] = value;
+  }
+  if (parentAgentId)
+    Object.assign(env6, secrets2.loadSecrets(parentAgentId));
   return {
     builtinToolNames,
+    env: env6,
     listTools: async () => {
       const mcpTools = parentAgentId ? await (await mcp()).listTools().catch(() => []) : [];
       return [
@@ -234264,6 +234457,7 @@ async function createScriptToolScope(parentAgentId, signal) {
           description: schema5.description,
           inputSchema: schema5.parameters
         })),
+        ...serverTools.values(),
         ...mcpTools.map((tool) => ({
           name: tool.name,
           description: tool.description ?? "",
@@ -234273,6 +234467,10 @@ async function createScriptToolScope(parentAgentId, signal) {
     },
     callTool: async (toolName2, toolArgs) => {
       signal?.throwIfAborted();
+      const serverTool = serverTools.get(toolName2);
+      if (serverTool) {
+        return callServerTool(parentAgentId, serverTool, toolArgs, signal);
+      }
       const toolCallId = `script-${randomUUID33()}`;
       const { decision } = await manager.checkToolPermission(toolName2, toolArgs, permissionCwd, permissionModeState && { ...permissionModeState }, parentAgentId ?? undefined, toolContextId, toolCallId);
       if (decision !== "allow") {
@@ -234303,12 +234501,14 @@ var SCRIPT_EXCLUDED_TOOLS;
 var init_script_tool_scope = __esm(() => {
   init_context();
   init_backend2();
+  init_client4();
   init_runtime_context();
   init_client_tool_serialization();
   SCRIPT_EXCLUDED_TOOLS = new Set([
     "AskUserQuestion",
     "Workflow",
-    "CodeMode"
+    "CodeMode",
+    "Monitor"
   ]);
 });
 
@@ -234670,13 +234870,10 @@ async function executeWorkflow(spawner, options) {
   return executeScript(spawner, options, meta2);
 }
 async function executeToolScript(options) {
-  const run = await executeScript(undefined, options, {
-    name: "code-mode",
-    description: "Combine tools with JavaScript"
-  });
+  const run = await executeScript(undefined, options, { name: "code-mode", description: "Combine tools with JavaScript" }, options.globals);
   return run.result;
 }
-async function executeScript(spawner, options, meta2) {
+async function executeScript(spawner, options, meta2, extraGlobals) {
   const signal = options.signal ?? new AbortController().signal;
   let settled = false;
   const emit = (event) => {
@@ -234952,7 +235149,9 @@ async function executeScript(spawner, options, meta2) {
     describeTool,
     ...spawner ? { agent, decide, parallel, pipeline: pipeline7, phase, log: log3 } : {},
     args: options.args,
-    console: { log: log3, warn: log3, error: log3, info: log3 }
+    console: { log: log3, warn: log3, error: log3, info: log3 },
+    process: Object.freeze({ env: Object.freeze({ ...options.env }) }),
+    ...extraGlobals
   });
   const wrapped = `(async () => { "use strict";
 ${spawner ? stripMetaExport(options.script) : options.script}
@@ -236025,8 +236224,8 @@ var init_constants3 = __esm(() => {
 });
 
 // src/cli/helpers/git-context.ts
-import { execFile as execFile13, execFileSync as execFileSync10 } from "node:child_process";
-import { promisify as promisify13 } from "node:util";
+import { execFile as execFile12, execFileSync as execFileSync10 } from "node:child_process";
+import { promisify as promisify12 } from "node:util";
 function runGit2(args, cwd2) {
   try {
     return execFileSync10("git", args, {
@@ -236135,7 +236334,7 @@ async function getGitContextAsync(cwd2, options = {}) {
 }
 var execFileAsync8, GIT_ASYNC_TIMEOUT_MS = 1e4;
 var init_git_context = __esm(() => {
-  execFileAsync8 = promisify13(execFile13);
+  execFileAsync8 = promisify12(execFile12);
 });
 
 // src/websocket/listener/device-git-context.ts
@@ -238959,9 +239158,9 @@ var init_exit_worktree = __esm(async () => {
 });
 
 // src/tools/impl/glob.ts
-import { execFile as execFile14 } from "node:child_process";
+import { execFile as execFile13 } from "node:child_process";
 import * as path25 from "node:path";
-import { promisify as promisify14 } from "node:util";
+import { promisify as promisify13 } from "node:util";
 function applyFileLimit(files, workingDirectory) {
   const totalFiles = files.length;
   if (totalFiles <= LIMITS.GLOB_MAX_FILES) {
@@ -239028,13 +239227,13 @@ var init_glob = __esm(() => {
   init_runtime_context();
   init_ripgrep_manager();
   init_truncation();
-  execFileAsync9 = promisify14(execFile14);
+  execFileAsync9 = promisify13(execFile13);
 });
 
 // src/tools/impl/grep.ts
-import { execFile as execFile15 } from "node:child_process";
+import { execFile as execFile14 } from "node:child_process";
 import * as path26 from "node:path";
-import { promisify as promisify15 } from "node:util";
+import { promisify as promisify14 } from "node:util";
 function applyOffsetAndLimit(items3, offset, limit4) {
   const sliced = items3.slice(offset);
   if (limit4 > 0) {
@@ -239196,7 +239395,7 @@ var init_grep = __esm(() => {
   init_runtime_context();
   init_ripgrep_manager();
   init_truncation();
-  execFileAsync10 = promisify15(execFile15);
+  execFileAsync10 = promisify14(execFile14);
 });
 
 // node_modules/picomatch/lib/constants.js
@@ -241570,11 +241769,243 @@ var init_monitor_event_stream = __esm(() => {
   MONITOR_EVENT_BUFFER_CHARS = 1024 * 1024;
 });
 
+// src/tools/impl/monitor-script.ts
+function rateLimitToolCalls(call2, signal) {
+  let tokens = TOOL_CALL_BURST;
+  let refilledAt = Date.now();
+  return (toolName2, toolArgs) => {
+    if (signal.aborted)
+      return new Promise(() => {});
+    const now2 = Date.now();
+    const refill = Math.floor((now2 - refilledAt) / TOOL_CALL_REFILL_MS);
+    if (refill > 0) {
+      tokens = Math.min(TOOL_CALL_BURST, tokens + refill);
+      refilledAt += refill * TOOL_CALL_REFILL_MS;
+    }
+    if (tokens === 0) {
+      throw new Error(`Monitor script exceeded ${1000 / TOOL_CALL_REFILL_MS} tool calls per second; add sleep() between polls.`);
+    }
+    tokens -= 1;
+    return call2(toolName2, toolArgs);
+  };
+}
+function abortableSleep3(ms, signal) {
+  const delay3 = Number(ms);
+  if (!Number.isFinite(delay3) || delay3 < 0) {
+    return Promise.reject(new Error("sleep(ms) needs a non-negative number."));
+  }
+  return new Promise((resolve34) => {
+    if (signal.aborted)
+      return;
+    const onAbort = () => clearTimeout(timer);
+    const timer = setTimeout(() => {
+      signal.removeEventListener("abort", onAbort);
+      resolve34();
+    }, delay3);
+    signal.addEventListener("abort", onAbort, { once: true });
+  });
+}
+function formatReturnValue(value) {
+  if (value === undefined)
+    return "The script returned without a value.";
+  let text2;
+  try {
+    text2 = typeof value === "string" ? value : JSON.stringify(value);
+  } catch (error5) {
+    return `The script returned a value that is not JSON-serializable: ${String(error5)}`;
+  }
+  return text2.length <= MAX_RESULT_CHARS ? text2 : `${text2.slice(0, MAX_RESULT_CHARS)}
+[truncated; see the output file]`;
+}
+async function releaseToolContext(contextId) {
+  if (!contextId || !releaseRetainedToolContext(contextId))
+    return;
+  const manager = await init_manager2().then(() => exports_manager);
+  manager.releaseToolExecutionContext(contextId);
+}
+async function startScriptMonitor(args, hooks) {
+  assertBackgroundProcessCapacity();
+  const toolContextId = getRuntimeContext()?.toolContextId ?? null;
+  if (toolContextId)
+    retainToolContext(toolContextId);
+  const controller = new AbortController;
+  const parentAgentId = await resolveScriptParentAgentId(args).catch(async (error5) => {
+    await releaseToolContext(toolContextId);
+    throw error5;
+  });
+  const toolScope = await createScriptToolScope(parentAgentId, controller.signal).catch(async (error5) => {
+    await releaseToolContext(toolContextId);
+    throw error5;
+  });
+  const taskId = getNextMonitorId();
+  const outputFile = createBackgroundOutputFile(taskId);
+  const output = hooks.createOutput(outputFile);
+  const scope = resolveNotificationScope(args.parentScope);
+  const actingUserId = getRuntimeActingUserAttribution();
+  const secrets2 = captureSecretRedactions(parentAgentId ?? undefined);
+  const scrub = (text2) => scrubSecretsFromString(text2, secrets2);
+  let timeout;
+  const stop = (reason, note) => {
+    if (processState.status !== "running")
+      return;
+    processState.completionNotificationSuppressed = true;
+    if (note)
+      output.append(note);
+    hooks.markFinished(taskId, processState, "failed", null);
+    controller.abort(new Error(reason));
+  };
+  const events = createMonitorEventStream({
+    emit(event) {
+      hooks.queueEvent({ taskId, event, scope, actingUserId, secrets: secrets2 });
+    },
+    stopSource() {
+      stop("output rate too high", `
+[stopped: output rate too high]
+`);
+    }
+  });
+  const firstLine = args.script.trim().split(`
+`)[0] ?? "";
+  const processState = {
+    process: {
+      kill() {
+        events.cancel();
+        controller.abort(new Error("Monitor stopped via TaskStop"));
+      }
+    },
+    command: `script: ${firstLine.slice(0, 80)}`,
+    status: "running",
+    exitCode: null,
+    startTime: new Date,
+    outputFile,
+    runtimeScope: scope,
+    actingUserId,
+    kind: "monitor",
+    description: args.description,
+    monitorSource: "script",
+    persistent: args.persistent,
+    secrets: secrets2
+  };
+  backgroundProcesses.set(taskId, processState);
+  notifyBackgroundProcessStateChanged(scope);
+  const emit = (value) => {
+    if (processState.status !== "running")
+      return;
+    const text2 = scrub(typeof value === "string" ? value : String(value));
+    if (!text2.trim())
+      return;
+    const line = text2.endsWith(`
+`) ? text2 : `${text2}
+`;
+    if (!output.append(line)) {
+      stop("output file write failed");
+      return;
+    }
+    events.onData(line);
+  };
+  const finish = (status, detail) => {
+    events.finish();
+    output.append(`
+[${status === "completed" ? "result" : "error"}] ${detail}
+`);
+    if (processState.status !== "running")
+      return;
+    hooks.markFinished(taskId, processState, status, status === "completed" ? 0 : 1);
+    const durationMs = Date.now() - (processState.startTime?.getTime() ?? 0);
+    addToMessageQueue({
+      kind: "task_notification",
+      text: formatTaskNotification({
+        taskId,
+        status,
+        summary: status === "completed" ? `Monitor "${args.description}" script returned` : `Monitor "${args.description}" script failed`,
+        result: detail,
+        outputFile,
+        usage: { durationMs }
+      }),
+      ...scope,
+      ...actingUserId !== undefined ? { actingUserId } : {}
+    });
+  };
+  const stopped = new Promise((_resolve, reject2) => {
+    controller.signal.addEventListener("abort", () => reject2(controller.signal.reason), { once: true });
+  });
+  const run = executeToolScript({
+    ...toolScope,
+    callTool: rateLimitToolCalls(toolScope.callTool, controller.signal),
+    maxTotalToolCalls: Number.POSITIVE_INFINITY,
+    script: args.script,
+    args: args.args,
+    signal: new AbortController().signal,
+    globals: {
+      emit,
+      sleep: (ms) => abortableSleep3(ms, controller.signal)
+    },
+    onProgress: (event) => {
+      if (event.kind === "log")
+        output.append(`${scrub(event.message)}
+`);
+    }
+  });
+  run.catch(() => {});
+  Promise.race([run, stopped]).then((value) => finish("completed", scrub(formatReturnValue(value))), (error5) => finish("failed", scrub(error5 instanceof Error ? error5.message : String(error5)))).finally(async () => {
+    if (timeout)
+      clearTimeout(timeout);
+    await toolScope.cleanup();
+    await releaseToolContext(toolContextId);
+  });
+  if (!args.persistent) {
+    timeout = setTimeout(() => {
+      if (processState.status !== "running")
+        return;
+      events.finish();
+      hooks.queueEvent({
+        taskId,
+        event: hooks.timeoutEvent(args.timeout_ms),
+        scope,
+        actingUserId,
+        secrets: secrets2
+      });
+      stop("timeout", `
+[timeout after ${args.timeout_ms}ms]
+`);
+    }, args.timeout_ms);
+    unrefTimer(timeout);
+  }
+  return { taskId, outputFile };
+}
+var TOOL_CALL_BURST = 120, TOOL_CALL_REFILL_MS = 500, MAX_RESULT_CHARS = 30000;
+var init_monitor_script = __esm(() => {
+  init_runtime_context();
+  init_script_tool_scope();
+  init_secret_substitution();
+  init_tool_context_retention();
+  init_workflow_engine();
+  init_message_queue_bridge();
+  init_task_notifications();
+  init_monitor_event_stream();
+  init_process_manager();
+});
+
+// src/tools/impl/monitor-timeout.ts
+function getMonitorMaxTimeoutMs() {
+  const value = process.env.LETTA_MONITOR_MAX_TIMEOUT_MS;
+  if (!value || !/^\d+$/.test(value))
+    return DEFAULT_MAX_TIMEOUT_MS;
+  const parsed = Number(value);
+  if (!Number.isInteger(parsed) || parsed <= 0)
+    return DEFAULT_MAX_TIMEOUT_MS;
+  return Math.min(SEVEN_DAYS_MS, Math.max(DEFAULT_MAX_TIMEOUT_MS, parsed));
+}
+var DEFAULT_MAX_TIMEOUT_MS = 3600000, SEVEN_DAYS_MS;
+var init_monitor_timeout = __esm(() => {
+  SEVEN_DAYS_MS = 7 * 24 * 60 * 60 * 1000;
+});
+
 // src/tools/impl/monitor.ts
 import { appendFileSync as appendFileSync7, readFileSync as readFileSync37, writeFileSync as writeFileSync28 } from "node:fs";
 import { WebSocket as WebSocket4 } from "ws";
-function getMonitorTimeoutEvent(timeoutMs) {
-  return isManagedCloudRuntime() && timeoutMs === MONITOR_MAX_TIMEOUT_MS ? "Monitor stopped at the 1-hour Cloud sandbox limit. Cloud monitors have a hard 1-hour limit to avoid keeping sandbox resources unnecessarily running. For later checks, schedule a Wake or cron, which does not keep the sandbox running between turns, and combine it with shorter monitors when needed." : "[Monitor timed out — re-arm if needed.]";
+function getMonitorTimeoutEvent(timeoutMs, tool = "Monitor") {
+  return isManagedCloudRuntime() && timeoutMs === getMonitorMaxTimeoutMs() ? `${tool} stopped at the ${timeoutMs / 3600000}-hour Cloud sandbox limit. If you still need to watch, simply re-arm it by calling ${tool} again. For much longer waits, schedule a Wake or cron, which does not keep the sandbox running between turns.` : "[Monitor timed out — re-arm if needed.]";
 }
 function buildMonitorResult(taskId, timeoutMs, persistent, outputFile) {
   const lifetime = persistent ? "persistent — runs until TaskStop or session end" : `timeout ${timeoutMs}ms`;
@@ -241685,8 +242116,8 @@ function normalizeMonitorArgs(args) {
   if (typeof normalized.description !== "string") {
     throw new Error("Monitor description is required");
   }
-  if (typeof normalized.timeout_ms !== "number" || !Number.isFinite(normalized.timeout_ms) || normalized.timeout_ms < MIN_TIMEOUT_MS || !normalized.persistent && normalized.timeout_ms > MONITOR_MAX_TIMEOUT_MS) {
-    throw new Error(`Monitor timeout_ms must be between ${MIN_TIMEOUT_MS} and ${MONITOR_MAX_TIMEOUT_MS}`);
+  if (typeof normalized.timeout_ms !== "number" || !Number.isFinite(normalized.timeout_ms) || normalized.timeout_ms < MIN_TIMEOUT_MS || !normalized.persistent && normalized.timeout_ms > getMonitorMaxTimeoutMs()) {
+    throw new Error(`Monitor timeout_ms must be between ${MIN_TIMEOUT_MS} and ${getMonitorMaxTimeoutMs()}`);
   }
   if (typeof normalized.persistent !== "boolean") {
     throw new Error("Monitor persistent must be a boolean");
@@ -241698,10 +242129,18 @@ function normalizeMonitorArgs(args) {
   if (normalized.command !== undefined && typeof normalized.command !== "string") {
     throw new Error("Monitor command must be a string");
   }
+  if (normalized.script !== undefined && typeof normalized.script !== "string") {
+    throw new Error("Monitor script must be a string");
+  }
+  const hasScript = typeof normalized.script === "string" && normalized.script.trim() !== "";
   const hasCommand = typeof normalized.command === "string" && normalized.command.length > 0;
   const hasWebSocket = normalized.ws !== undefined && !(typeof normalized.ws === "object" && normalized.ws !== null && normalized.ws.url === "");
-  if (Number(hasCommand) + Number(hasWebSocket) !== 1) {
-    throw new Error("Monitor requires exactly one of command or ws");
+  if (Number(hasCommand) + Number(hasWebSocket) + Number(hasScript) !== 1) {
+    throw new Error("Monitor requires exactly one of command, ws, or script");
+  }
+  if (!hasScript) {
+    delete normalized.script;
+    delete normalized.args;
   }
   if (!hasCommand) {
     delete normalized.command;
@@ -241720,7 +242159,7 @@ function normalizeMonitorArgs(args) {
   }
   if (isManagedCloudRuntime() && normalized.persistent) {
     normalized.persistent = false;
-    normalized.timeout_ms = MONITOR_MAX_TIMEOUT_MS;
+    normalized.timeout_ms = getMonitorMaxTimeoutMs();
   }
   return normalized;
 }
@@ -242152,6 +242591,22 @@ function startWebSocketMonitor(args) {
   }
   return buildMonitorResult(taskId, args.persistent ? 0 : args.timeout_ms, args.persistent, outputFile);
 }
+async function startScriptSource(args) {
+  const { taskId, outputFile } = await startScriptMonitor({
+    description: args.description,
+    script: args.script,
+    args: args.args,
+    timeout_ms: args.timeout_ms,
+    persistent: args.persistent,
+    parentScope: args.parentScope
+  }, {
+    createOutput: (path27) => new MonitorOutputWriter(path27),
+    queueEvent: queueMonitorEvent,
+    markFinished: markMonitorFinished,
+    timeoutEvent: getMonitorTimeoutEvent
+  });
+  return buildMonitorResult(taskId, args.persistent ? 0 : args.timeout_ms, args.persistent, outputFile);
+}
 function backupScopeFor(taskId) {
   const processState = backgroundProcesses.get(taskId);
   const runtimeScope = processState?.runtimeScope;
@@ -242163,7 +242618,7 @@ async function monitor(args) {
   args.signal?.throwIfAborted();
   const normalized = normalizeMonitorArgs(args);
   installMonitorProcessExitCleanup();
-  const result3 = normalized.command !== undefined ? startCommandMonitor(normalized) : startWebSocketMonitor(normalized);
+  const result3 = normalized.script !== undefined ? await startScriptSource(normalized) : normalized.command !== undefined ? startCommandMonitor(normalized) : startWebSocketMonitor(normalized);
   if (normalized.backup_after_seconds === undefined)
     return result3;
   const note = await armMonitorBackup({
@@ -242199,7 +242654,7 @@ function installMonitorProcessExitCleanup() {
   monitorProcessExitCleanupInstalled = true;
   process.once("exit", stopMonitorsForProcessExit);
 }
-var MIN_TIMEOUT_MS = 1000, MONITOR_MAX_TIMEOUT_MS = 3600000, DEFAULT_TIMEOUT_MS3 = 300000, MONITOR_OUTPUT_FILE_BYTES, WEBSOCKET_MAX_PAYLOAD_BYTES, WEBSOCKET_PROTOCOL_PATTERN, monitorProcessExitCleanupInstalled = false;
+var MIN_TIMEOUT_MS = 1000, DEFAULT_TIMEOUT_MS3 = 300000, MONITOR_OUTPUT_FILE_BYTES, WEBSOCKET_MAX_PAYLOAD_BYTES, WEBSOCKET_PROTOCOL_PATTERN, monitorProcessExitCleanupInstalled = false;
 var init_monitor = __esm(async () => {
   init_strip_ansi();
   init_runtime_context();
@@ -242207,6 +242662,8 @@ var init_monitor = __esm(async () => {
   init_message_queue_bridge();
   init_task_notifications();
   init_monitor_event_stream();
+  init_monitor_script();
+  init_monitor_timeout();
   init_process_manager();
   init_shell_env();
   init_shell_launchers();
@@ -242702,9 +243159,9 @@ var init_typescript = __esm(() => {
           throw new Error("LSP auto-download is disabled. Please install typescript-language-server manually: npm install -g typescript-language-server typescript");
         }
         console.log("[LSP] Installing typescript-language-server and typescript...");
-        const { spawn: spawn9 } = await import("node:child_process");
+        const { spawn: spawn10 } = await import("node:child_process");
         return new Promise((resolve34, reject2) => {
-          const proc = spawn9("npm", ["install", "-g", "typescript-language-server", "typescript"], {
+          const proc = spawn10("npm", ["install", "-g", "typescript-language-server", "typescript"], {
             stdio: "inherit"
           });
           proc.on("exit", (code2) => {
@@ -242777,7 +243234,7 @@ class LSPManager {
       return existing.client;
     }
     try {
-      const { spawn: spawn9 } = await import("node:child_process");
+      const { spawn: spawn10 } = await import("node:child_process");
       const rootUri = process.cwd();
       if (serverDef.autoInstall) {
         const isAvailable = await serverDef.autoInstall.check();
@@ -242791,7 +243248,7 @@ class LSPManager {
         console.error(`[LSP] ${serverDef.id} has no command configured`);
         return null;
       }
-      const proc = spawn9(command, serverDef.command.slice(1), {
+      const proc = spawn10(command, serverDef.command.slice(1), {
         cwd: rootUri,
         env: {
           ...process.env,
@@ -243312,7 +243769,7 @@ async function resolveAgentMessageDestination(input, backend3, signal) {
 var init_agent_message = () => {};
 
 // src/agent/subagents/subagent-process.ts
-import { spawn as spawn9 } from "node:child_process";
+import { spawn as spawn10 } from "node:child_process";
 function signalProcessGroup(childProcess2, signal) {
   if (!childProcess2.pid)
     return;
@@ -243345,7 +243802,7 @@ async function killWindowsProcessTree(childProcess2) {
   if (!childProcess2.pid)
     return;
   await new Promise((resolve35) => {
-    const taskkill = spawn9("taskkill.exe", ["/pid", String(childProcess2.pid), "/t", "/f"], { stdio: "ignore", windowsHide: true });
+    const taskkill = spawn10("taskkill.exe", ["/pid", String(childProcess2.pid), "/t", "/f"], { stdio: "ignore", windowsHide: true });
     let settled = false;
     const finish = (succeeded) => {
       if (settled)
@@ -243377,7 +243834,7 @@ async function terminateSubagentProcessTree(childProcess2, forceKillGraceMs) {
   await waitForProcessGroupExit(pid, FORCE_KILL_SETTLE_MS);
 }
 function spawnSubagentProcess(command, args, options) {
-  const childProcess2 = spawn9(command, args, {
+  const childProcess2 = spawn10(command, args, {
     cwd: options.cwd,
     env: options.env,
     detached: process.platform !== "win32"
@@ -244042,7 +244499,7 @@ class CodexAppServerClient {
     await this.request("initialize", {
       clientInfo: {
         name: "letta-code",
-        version: "0.34.27"
+        version: "0.34.29"
       },
       capabilities: null
     });
@@ -249565,11 +250022,11 @@ var init_manager4 = __esm(async () => {
 });
 
 // src/agent/memory-conflict-repair.ts
-import { execFile as execFile16 } from "node:child_process";
+import { execFile as execFile15 } from "node:child_process";
 import { randomUUID as randomUUID42 } from "node:crypto";
 import { readFile as readFile16, rm as rm9, writeFile as writeFile13 } from "node:fs/promises";
 import { join as join68 } from "node:path";
-import { promisify as promisify16 } from "node:util";
+import { promisify as promisify15 } from "node:util";
 async function readOptional(path29) {
   try {
     return (await readFile16(path29, "utf8")).trim();
@@ -249580,7 +250037,7 @@ async function readOptional(path29) {
 async function describeMemoryConflict(memoryDir, gitDir) {
   let head4 = "";
   try {
-    const { stdout } = await promisify16(execFile16)("git", [
+    const { stdout } = await promisify15(execFile15)("git", [
       "-C",
       memoryDir,
       "rev-parse",
@@ -249595,7 +250052,7 @@ async function describeMemoryConflict(memoryDir, gitDir) {
 }
 async function describeInvalidMemoryHistory(memoryDir) {
   try {
-    const { stdout } = await promisify16(execFile16)("git", [
+    const { stdout } = await promisify15(execFile15)("git", [
       "-C",
       memoryDir,
       "rev-parse",
@@ -249939,7 +250396,7 @@ ${result3.report}
   });
   return { execution, unsubscribe };
 }
-async function ensureMemoryRepair(params, spawn10, claimRepair = claimMemoryConflictRepair) {
+async function ensureMemoryRepair(params, spawn11, claimRepair = claimMemoryConflictRepair) {
   let claim;
   try {
     const kind = params.result.status === "invalid" ? "invalid" : "conflict";
@@ -249947,7 +250404,7 @@ async function ensureMemoryRepair(params, spawn10, claimRepair = claimMemoryConf
     if (claim.status !== "claimed")
       return claim.status === "in_progress";
     const invalid2 = params.result.status === "invalid";
-    spawn10({
+    spawn11({
       subagentType: "memory",
       description: invalid2 ? "Repair invalid committed memory" : "Repair memory Git conflict",
       prompt: invalid2 ? `The committed memory tree fails the repository's validation, usually because concurrent memory updates were combined. Make one new commit that brings the current memory within the limits while preserving its information: move detail out of oversized files and behind indexes instead of deleting it. Do not change or disable the limits, rewrite history, or perform unrelated edits. If the committed memory already passes validation, stop.
@@ -252633,8 +253090,8 @@ query($id: ID!, $before: String) {
 }`;
 
 // src/tools/impl/github-pull-request-watch.ts
-import { execFile as execFile17 } from "node:child_process";
-import { promisify as promisify17 } from "node:util";
+import { execFile as execFile16 } from "node:child_process";
+import { promisify as promisify16 } from "node:util";
 function authorLogin(author) {
   return author?.login || "unknown";
 }
@@ -253163,7 +253620,7 @@ async function fetchGitHubPullRequestSnapshot(ref5, options) {
 }
 var execFileAsync11, MAX_CONSISTENCY_READ_ATTEMPTS = 3, PullRequestChangedDuringReadError;
 var init_github_pull_request_watch = __esm(() => {
-  execFileAsync11 = promisify17(execFile17);
+  execFileAsync11 = promisify16(execFile16);
   PullRequestChangedDuringReadError = class PullRequestChangedDuringReadError extends Error {
   };
 });
@@ -253217,6 +253674,7 @@ ${describeGitHubPullRequestSnapshot(initial2)}
   const secrets2 = {};
   let processState;
   const persistent = !isManagedCloudRuntime();
+  const maxTimeoutMs = getMonitorMaxTimeoutMs();
   let timeout;
   const events = createMonitorEventStream({
     emit(event) {
@@ -253283,7 +253741,7 @@ ${describeGitHubPullRequestSnapshot(initial2)}
       events.finish();
       if (processState.status !== "running")
         return;
-      const event = getMonitorTimeoutEvent(MONITOR_MAX_TIMEOUT_MS);
+      const event = getMonitorTimeoutEvent(maxTimeoutMs, "WatchPR");
       output.append(`
 ${event}
 `);
@@ -253291,7 +253749,7 @@ ${event}
       processState.completionNotificationSuppressed = true;
       markMonitorFinished(taskId, processState, "failed", null);
       processState.process.kill();
-    }, MONITOR_MAX_TIMEOUT_MS);
+    }, maxTimeoutMs);
     unrefTimer(timeout);
   }
   const wait = deps.wait ?? defaultWait;
@@ -253362,7 +253820,7 @@ ${event}
     content: [
       {
         type: "text",
-        text: `WatchPR started (task ${taskId}). It will keep watching after CI finishes and report new failures, reviews, comments, conflicts, head changes, merge-state changes, and watcher errors. It stops when the PR merges/closes, on TaskStop, or when this session ends.${persistent ? "" : " A hard 1-hour limit applies in this Cloud sandbox; use Wake or cron for later checks."}
+        text: `WatchPR started (task ${taskId}). It will keep watching after CI finishes and report new failures, reviews, comments, conflicts, head changes, merge-state changes, and watcher errors. It stops when the PR merges/closes, on TaskStop, or when this session ends.${persistent ? "" : ` A hard ${maxTimeoutMs / 3600000}-hour limit applies in this Cloud sandbox; call WatchPR again to re-arm it, or use Wake or cron for much longer waits.`}
 
 Current state:
 ${describeGitHubPullRequestSnapshot(initial2)}
@@ -253384,6 +253842,7 @@ var init_watch_pr = __esm(async () => {
   init_github_pull_request_diff();
   init_github_pull_request_watch();
   init_monitor_event_stream();
+  init_monitor_timeout();
   init_process_manager();
   await init_monitor();
   WATCH_MAX_POLL_MS = 5 * 60000;
@@ -254049,7 +254508,8 @@ function toolOptions(handle2) {
   return {
     ...handle2.callTool ? { callTool: handle2.callTool } : {},
     ...handle2.builtinToolNames ? { builtinToolNames: handle2.builtinToolNames } : {},
-    ...handle2.listTools ? { listTools: handle2.listTools } : {}
+    ...handle2.listTools ? { listTools: handle2.listTools } : {},
+    ...handle2.env ? { env: handle2.env } : {}
   };
 }
 function formatWorkflowProgressLine(event) {
@@ -254853,12 +255313,12 @@ var init_Monitor2 = __esm(() => {
         type: "number",
         minimum: 1000,
         default: 300000,
-        description: "Kill the monitor after this deadline. Default 300000ms, max 3600000ms. Ignored when persistent is true."
+        description: "Kill the monitor after this deadline. Default 300000ms. Maximum is LETTA_MONITOR_MAX_TIMEOUT_MS (default 3600000ms, clamped to 1 hour through 7 days). Ignored when persistent is true."
       },
       persistent: {
         type: "boolean",
         default: false,
-        description: "Run until TaskStop or session end. In managed Cloud sandboxes, a hard 1-hour limit still applies; elsewhere there is no timeout. For longer waits in Cloud, use Wake/cron rather than keeping a monitor running."
+        description: "Run until TaskStop or session end. In managed Cloud sandboxes, the configured monitor cap still applies (default 1 hour); elsewhere there is no timeout. Call Monitor again to re-arm it. For much longer waits in Cloud, use Wake/cron."
       },
       backup_after_seconds: {
         type: "integer",
@@ -254891,7 +255351,14 @@ var init_Monitor2 = __esm(() => {
         },
         required: ["url"],
         additionalProperties: false,
-        description: "WebSocket to open. Each text frame is an event; binary frames are reported as a placeholder line. Socket close ends the watch. Cannot be combined with command."
+        description: "WebSocket to open. Each text frame is an event; binary frames are reported as a placeholder line. Socket close ends the watch. Cannot be combined with command or script."
+      },
+      script: {
+        type: "string",
+        description: "JavaScript watch loop with CodeMode's globals plus emit(text) and sleep(ms). Cannot be combined with command or ws."
+      },
+      args: {
+        description: "Optional input exposed to script as args."
       }
     },
     required: ["description"],
@@ -260680,19 +261147,6 @@ function getDequeuedClientMessageIds(runtime, batch) {
 function shouldQueueInboundMessage(parsed) {
   return parsed.messages.some((payload) => ("content" in payload));
 }
-function shouldProcessInboundMessageDirectly(runtime, parsed) {
-  if (!shouldQueueInboundMessage(parsed)) {
-    return false;
-  }
-  if (runtime.queueRuntime.length > 0 || runtime.queuePumpActive || runtime.queuePumpScheduled || runtime.pendingTurns > 0 || runtime.queuedMessagesByItemId.size > 0 || runtime.turnLifecycle.kind !== "idle" || runtime.pendingApprovalResolvers.size > 0 || runtime.pendingApprovalBatchByToolCallId.size > 0 || runtime.recoveredApprovalState !== null || runtime.pendingInterruptedResults !== null || runtime.pendingInterruptedContext !== null || (runtime.pendingInterruptedToolCallIds?.length ?? 0) > 0) {
-    return false;
-  }
-  const activeScope = resolveRuntimeScope(runtime.listener, {
-    agent_id: runtime.agentId,
-    conversation_id: runtime.conversationId
-  });
-  return getListenerBlockedReason(runtime.turnLifecycle.snapshot(), activeScope ? getPendingControlRequestCount(runtime.listener, activeScope) : 0) === null;
-}
 function consumeQueuedTurn(runtime) {
   const queuedItems = runtime.queueRuntime.peekReady();
   const firstQueuedItem = queuedItems[0];
@@ -260838,6 +261292,10 @@ function emitQueuePumpBoundary(operation) {
   }
 }
 function resolveQueuePumpTransport(runtime, socket) {
+  const first = runtime.queueRuntime.peekReady()[0];
+  if (first?.kind === "message" && first.noCoalesce === true && runtime.queuedMessagesByItemId.get(first.id)?.processOwnedTurn === true) {
+    return getOrCreateProcessTransport(runtime.listener);
+  }
   if (runtime.listener.connections.size > 0 || runtime.listener.processTransport !== null) {
     const transport3 = getOrCreateProcessTransport(runtime.listener);
     if (!isListenerTransportOpen(transport3))
@@ -265226,7 +265684,7 @@ var init_listen_log = __esm(() => {
 });
 
 // src/utils/machine-metadata.ts
-import { execFile as execFile18 } from "node:child_process";
+import { execFile as execFile17 } from "node:child_process";
 import { readFile as readFile20 } from "node:fs/promises";
 import { cpus, totalmem } from "node:os";
 function getMachineMetadata() {
@@ -265244,7 +265702,7 @@ function localSources() {
     memoryBytes: Math.min(totalmem(), limit4 || Number.POSITIVE_INFINITY),
     read: (path32, signal) => readFile20(path32, { encoding: "utf8", signal }),
     run: (command, args, signal) => new Promise((resolve38, reject2) => {
-      execFile18(command, args, {
+      execFile17(command, args, {
         encoding: "utf8",
         signal,
         killSignal: "SIGKILL",
@@ -268472,9 +268930,9 @@ function handleMemoryProtocolCommand(parsed, context3) {
   if (isMemoryHistoryCommand(parsed)) {
     runDetachedListenerTask("memory_history", async () => {
       const { getScopedMemoryFilesystemRoot: getScopedMemoryFilesystemRoot2 } = await Promise.resolve().then(() => (init_memory_filesystem2(), exports_memory_filesystem));
-      const { execFile: execFileCb4 } = await import("node:child_process");
-      const { promisify: promisify18 } = await import("node:util");
-      const execFileAsync12 = promisify18(execFileCb4);
+      const { execFile: execFileCb3 } = await import("node:child_process");
+      const { promisify: promisify17 } = await import("node:util");
+      const execFileAsync12 = promisify17(execFileCb3);
       const memoryRoot = getScopedMemoryFilesystemRoot2(parsed.agent_id);
       const limit4 = parsed.limit ?? 50;
       const gitArgs = ["log", `--max-count=${limit4}`, "--format=%H|%s|%aI|%an"];
@@ -268508,9 +268966,9 @@ function handleMemoryProtocolCommand(parsed, context3) {
   if (isMemoryFileAtRefCommand(parsed)) {
     runDetachedListenerTask("memory_file_at_ref", async () => {
       const { getScopedMemoryFilesystemRoot: getScopedMemoryFilesystemRoot2 } = await Promise.resolve().then(() => (init_memory_filesystem2(), exports_memory_filesystem));
-      const { execFile: execFileCb4 } = await import("node:child_process");
-      const { promisify: promisify18 } = await import("node:util");
-      const execFileAsync12 = promisify18(execFileCb4);
+      const { execFile: execFileCb3 } = await import("node:child_process");
+      const { promisify: promisify17 } = await import("node:util");
+      const execFileAsync12 = promisify17(execFileCb3);
       const memoryRoot = getScopedMemoryFilesystemRoot2(parsed.agent_id);
       try {
         const { stdout } = await execFileAsync12("git", ["show", `${parsed.ref}:${parsed.file_path}`], { cwd: memoryRoot, timeout: 1e4 });
@@ -268539,9 +268997,9 @@ function handleMemoryProtocolCommand(parsed, context3) {
   if (isMemoryCommitDiffCommand(parsed)) {
     runDetachedListenerTask("memory_commit_diff", async () => {
       const { getScopedMemoryFilesystemRoot: getScopedMemoryFilesystemRoot2 } = await Promise.resolve().then(() => (init_memory_filesystem2(), exports_memory_filesystem));
-      const { execFile: execFileCb4 } = await import("node:child_process");
-      const { promisify: promisify18 } = await import("node:util");
-      const execFileAsync12 = promisify18(execFileCb4);
+      const { execFile: execFileCb3 } = await import("node:child_process");
+      const { promisify: promisify17 } = await import("node:util");
+      const execFileAsync12 = promisify17(execFileCb3);
       const memoryRoot = getScopedMemoryFilesystemRoot2(parsed.agent_id);
       try {
         const { stdout } = await execFileAsync12("git", ["show", parsed.sha, "--format=", "--no-color"], { cwd: memoryRoot, timeout: 1e4 });
@@ -441825,7 +442283,7 @@ function installExternalToolBridge(runtime) {
     const connectionId = registrationKey ? getConnectionIdsByRegistrationKey(runtime).get(registrationKey) : undefined;
     const connection = connectionId ? runtime.connections.get(connectionId) : undefined;
     if (!connection || !isListenerTransportOpen(connection.writer) || runtime.intentionallyClosed) {
-      throw new Error("External tool controller is not connected");
+      throw new Error("External tool controller is not connected; the tool call was not sent and is safe to retry.");
     }
     const writer = connection.writer;
     const requestId = `external-tool-${crypto.randomUUID()}`;
@@ -441835,6 +442293,9 @@ function installExternalToolBridge(runtime) {
       agent_id: toolRuntime.agentId ?? null,
       conversation_id: toolRuntime.conversationId
     } : undefined;
+    const conversation = requestRuntime ? runtime.conversationRuntimes?.get(getConversationRuntimeKey(requestRuntime.agent_id, requestRuntime.conversation_id)) : null;
+    const lease = conversation?.turnLifecycle.currentLease;
+    const isOwningTurnCurrent = conversation && lease ? () => conversation.turnLifecycle.isCurrent(lease) && !lease.signal.aborted : undefined;
     const request2 = {
       type: "external_tool_call_request",
       request_id: requestId,
@@ -441844,6 +442305,7 @@ function installExternalToolBridge(runtime) {
       tool_name: toolName2,
       input
     };
+    const requestFrame = JSON.stringify(request2);
     const timeoutMs = context3?.tool.timeoutMs ?? EXTERNAL_TOOL_CALL_TIMEOUT_MS;
     const result3 = await new Promise((resolve38, reject2) => {
       const timeout = setTimeout(() => {
@@ -441852,6 +442314,9 @@ function installExternalToolBridge(runtime) {
       }, timeoutMs);
       getPendingExternalToolCalls(runtime).set(requestKey, {
         connectionId: connection.id,
+        isOwningTurnCurrent,
+        requestFrame,
+        sentOn: writer,
         resolve: (response) => {
           resolve38({
             content: [...response.content],
@@ -441862,7 +442327,7 @@ function installExternalToolBridge(runtime) {
         timeout
       });
       try {
-        writer.send(JSON.stringify(request2));
+        writer.send(requestFrame);
       } catch (error5) {
         clearTimeout(timeout);
         getPendingExternalToolCalls(runtime).delete(requestKey);
@@ -441923,6 +442388,25 @@ function handleExternalToolCallResponseCommand(runtime, connectionId, command) {
   pending2.resolve(command.result);
   return true;
 }
+function resendPendingExternalToolCallsForConnection(runtime, connection) {
+  const pendingExternalToolCalls = getPendingExternalToolCalls(runtime);
+  for (const [requestKey, pending2] of pendingExternalToolCalls) {
+    if (pending2.connectionId !== connection.id || pending2.sentOn === connection.writer) {
+      continue;
+    }
+    try {
+      if (pending2.isOwningTurnCurrent && !pending2.isOwningTurnCurrent()) {
+        throw new Error("External tool call was not resent because its owning turn is no longer active.");
+      }
+      connection.writer.send(pending2.requestFrame);
+      pending2.sentOn = connection.writer;
+    } catch (error5) {
+      clearTimeout(pending2.timeout);
+      pendingExternalToolCalls.delete(requestKey);
+      pending2.reject(error5 instanceof Error ? error5 : new Error(String(error5)));
+    }
+  }
+}
 function rejectPendingExternalToolCallsForConnection(runtime, connectionId, reason) {
   const pendingExternalToolCalls = getPendingExternalToolCalls(runtime);
   for (const [requestKey, pending2] of pendingExternalToolCalls) {
@@ -443833,6 +444317,19 @@ function getInterruptApprovalsForEmission(runtime, params) {
   }
   return runtime.pendingInterruptedResults;
 }
+function emitInterruptApprovals(socket, runtime, params) {
+  const approvals = getInterruptApprovalsForEmission(runtime, params);
+  if (!approvals)
+    return;
+  const { runId, agentId, conversationId } = params;
+  emitToolExecutionFinishedEvents(socket, runtime, {
+    approvals,
+    runId,
+    agentId,
+    conversationId
+  });
+  emitInterruptToolReturnMessage(socket, runtime, approvals, runId || undefined);
+}
 function populateInterruptQueue(runtime, input) {
   const shouldPopulate = !runtime.pendingInterruptedResults || runtime.pendingInterruptedResults.length === 0 || !runtime.pendingInterruptedContext;
   if (!shouldPopulate)
@@ -449194,7 +449691,8 @@ async function resolveStaleApprovals(runtime, socket, turnLease, deps = {}) {
   runtime.currentToolset = preparedToolContext.toolset;
   runtime.currentToolsetPreference = preparedToolContext.toolsetPreference;
   runtime.currentLoadedTools = preparedToolContext.preparedToolContext.loadedToolNames;
-  const recoveryActingUserId = readInterruptedTurn(runtime)?.actingUserId;
+  const recoveryRecord = (deps.readInterruptedTurn ?? readInterruptedTurn)(runtime);
+  const recoveryActingUserId = recoveryRecord?.actingUserId;
   pendingApprovals = await filterStillPending(pendingApprovals);
   while (pendingApprovals.length > 0) {
     assertCurrentTurnLease();
@@ -449203,10 +449701,16 @@ async function resolveStaleApprovals(runtime, socket, turnLease, deps = {}) {
       throw new Error("Ambiguous pending approval batch mapping during recovery");
     }
     rememberPendingApprovalBatchIds(runtime, pendingApprovals, recoveryBatchId);
-    const approvalResults = buildFreshDenialApprovals(pendingApprovals, STALE_APPROVAL_RECOVERY_DENIAL_REASON);
+    const pendingToolCallIds = pendingApprovals.map((approval) => approval.toolCallId);
+    const approvalResults = recoveryRecord ? recordedToolResults(recoveryRecord, pendingToolCallIds) : buildFreshDenialApprovals(pendingApprovals, STALE_APPROVAL_RECOVERY_DENIAL_REASON);
     if (approvalResults.length === 0) {
       return null;
     }
+    if (recoveryRecord && allRecordedResults(recoveryRecord).some((result3) => pendingToolCallIds.includes(result3.tool_call_id))) {
+      runtime.pendingInterruptedResults = null;
+      runtime.pendingInterruptedContext = null;
+      runtime.pendingInterruptedToolCallIds = null;
+    }
     try {
       const continuationInput = createTurnInputState([
         {
@@ -449591,6 +450095,7 @@ var init_send = __esm(async () => {
   init_constants3();
   init_cwd();
   init_permission_mode();
+  init_recorded_tool_results();
   init_turn_input_state();
   await __promiseAll([
     init_message(),
@@ -452448,6 +452953,7 @@ async function handleApprovalStop(params) {
     if (shouldInterrupt()) {
       return interruptTermination(nextTurnInput, continuationBatchId);
     }
+    params.onContinuationSendError?.(interruptTermination());
     throw error5;
   }
   if (sendResult.kind === "terminal") {
@@ -455077,7 +455583,7 @@ var init_core5 = __esm(() => {
 });
 
 // node_modules/@letta-ai/trajectory/dist/adapters/deepagents/index.js
-import { spawn as spawn10 } from "node:child_process";
+import { spawn as spawn11 } from "node:child_process";
 import { accessSync as accessSync2, constants as constants6 } from "node:fs";
 import { homedir as homedir22 } from "node:os";
 import { join as join85 } from "node:path";
@@ -455108,7 +455614,7 @@ async function loadDeepAgentsCheckpoint(checkpoint) {
   const python = checkpoint.pythonExecutable ?? process.env.PYTHON ?? "python3";
   const helper = resolveHelperPath();
   return await new Promise((resolve38, reject2) => {
-    const child = spawn10(python, [helper], {
+    const child = spawn11(python, [helper], {
       stdio: ["pipe", "pipe", "pipe"],
       windowsHide: true
     });
@@ -456989,16 +457495,16 @@ var init_post_turn_reflection = __esm(() => {
 });
 
 // src/agent/memory-worktree.ts
-import { execFile as execFileCb4 } from "node:child_process";
+import { execFile as execFileCb3 } from "node:child_process";
 import { randomUUID as randomUUID52 } from "node:crypto";
 import { existsSync as existsSync62 } from "node:fs";
 import { mkdir as mkdir14 } from "node:fs/promises";
 import { dirname as dirname36, isAbsolute as isAbsolute25, join as join95, resolve as resolve38 } from "node:path";
-import { promisify as promisify18 } from "node:util";
+import { promisify as promisify17 } from "node:util";
 async function runGit4(cwd2, args) {
   try {
     const allArgs = [...GIT_DISABLE_COMMIT_SIGNING_ARGS, ...args];
-    const { stdout, stderr } = await execFile19("git", allArgs, {
+    const { stdout, stderr } = await execFile18("git", allArgs, {
       cwd: cwd2,
       env: {
         ...process.env,
@@ -457367,7 +457873,7 @@ async function finalizeReflectionMemoryWorktreeUnlocked(worktree, options) {
 async function finalizeReflectionMemoryWorktree(worktree, options) {
   return withMemoryOperation(worktree.parentMemoryDir, () => finalizeReflectionMemoryWorktreeUnlocked(worktree, options));
 }
-var execFile19, GIT_TIMEOUT_MS = 30000, HARNESS_GIT_ENV;
+var execFile18, GIT_TIMEOUT_MS = 30000, HARNESS_GIT_ENV;
 var init_memory_worktree = __esm(() => {
   init_memory_auth();
   init_memory_git();
@@ -457375,7 +457881,7 @@ var init_memory_worktree = __esm(() => {
   init_memory_operation();
   init_memfs_git_proxy();
   init_debug();
-  execFile19 = promisify18(execFileCb4);
+  execFile18 = promisify17(execFileCb3);
   HARNESS_GIT_ENV = {
     GIT_AUTHOR_NAME: "Letta Code",
     GIT_AUTHOR_EMAIL: "noreply@letta.com",
@@ -459384,7 +459890,7 @@ async function handleIncomingMessageInner(msg, socket, runtime, onStatusChange,
   const conversationId = requestedConversationId ?? "default";
   const turnWorkingDirectory = getConversationWorkingDirectory(runtime.listener, agentId, conversationId);
   const turnPermissionModeState = getOrCreateConversationPermissionModeStateRef(runtime.listener, agentId, conversationId);
-  let postStopApprovalRecoveryRetries = 0, deploymentRecoveryAttempts = 0, llmApiErrorRetries = 0, emptyResponseRetries = 0, chatgptPlanSwaps = 0, lastApprovalContinuationAccepted = false, activeDequeuedBatchId = dequeuedBatchId;
+  let postStopApprovalRecoveryRetries = 0, deploymentRecoveryAttempts = 0, llmApiErrorRetries = 0, emptyResponseRetries = 0, chatgptPlanSwaps = 0, lastApprovalContinuationAccepted = false, continuationSendFailed = false, activeDequeuedBatchId = dequeuedBatchId;
   const chatgptExhaustedProviders = new Set;
   const turnCorrelation = existingTurnCorrelation ?? createTurnCorrelation(runtime, msg, activeDequeuedBatchId);
   const msgRunIds = [];
@@ -459392,6 +459898,13 @@ async function handleIncomingMessageInner(msg, socket, runtime, onStatusChange,
   let lastExecutingToolCallIds = [];
   let lastNeedsUserInputToolCallIds = [];
   const durabilityOwnership = createTurnDurabilityOwnership();
+  const recordApprovalProgress = (progress) => {
+    ({
+      lastExecutionResults,
+      lastExecutingToolCallIds,
+      lastNeedsUserInputToolCallIds
+    } = durabilityOwnership.record(progress));
+  };
   const interruptedRevisionRef = { current: initialInterruptedRevision };
   durabilityOwnership.recordInput(msg);
   const turnLease = existingTurnLease ?? runtime.turnLifecycle.begin({
@@ -459891,6 +460404,10 @@ async function handleIncomingMessageInner(msg, socket, runtime, onStatusChange,
         recoveryLineageId,
         recoveryAuthorityStore,
         buildSendOptions,
+        onContinuationSendError: (progress) => {
+          continuationSendFailed = true;
+          recordApprovalProgress(progress);
+        },
         dependencies: recoveryEvidenceWriter ? { recordListenerWork: recoveryEvidenceWriter } : undefined
       });
       if (approvalResult.kind === "error") {
@@ -459911,11 +460428,7 @@ async function handleIncomingMessageInner(msg, socket, runtime, onStatusChange,
       activeDequeuedBatchId = approvalResult.dequeuedBatchId;
       pendingNormalizationInterruptedToolCallIds = approvalResult.pendingNormalizationInterruptedToolCallIds;
       turnToolContextId = approvalResult.turnToolContextId;
-      ({
-        lastExecutionResults,
-        lastExecutingToolCallIds,
-        lastNeedsUserInputToolCallIds
-      } = durabilityOwnership.record(approvalResult));
+      recordApprovalProgress(approvalResult);
       lastApprovalContinuationAccepted = approvalResult.lastApprovalContinuationAccepted;
       if (approvalResult.kind === "teleport") {
         const pending2 = approvalResult.pendingTeleport;
@@ -459963,29 +460476,24 @@ async function handleIncomingMessageInner(msg, socket, runtime, onStatusChange,
       context: "listener_turn_processing",
       runId: runtime.activeRunId || msgRunIds[msgRunIds.length - 1]
     });
+    const canParkUnsentResults = runtime.turnLifecycle.isCurrent(turnLease) && !lastApprovalContinuationAccepted;
+    if (canParkUnsentResults && (turnAbortSignal.aborted || continuationSendFailed)) {
+      populateInterruptQueue(runtime, {
+        lastExecutionResults,
+        lastExecutingToolCallIds,
+        lastNeedsUserInputToolCallIds,
+        agentId,
+        conversationId
+      });
+    }
     if (turnAbortSignal.aborted) {
-      if (runtime.turnLifecycle.isCurrent(turnLease) && !lastApprovalContinuationAccepted) {
-        populateInterruptQueue(runtime, {
+      if (canParkUnsentResults) {
+        emitInterruptApprovals(socket, runtime, {
           lastExecutionResults,
-          lastExecutingToolCallIds,
-          lastNeedsUserInputToolCallIds,
+          runId: runtime.activeRunId || msgRunIds[msgRunIds.length - 1],
           agentId,
           conversationId
         });
-        const approvalsForEmission = getInterruptApprovalsForEmission(runtime, {
-          lastExecutionResults,
-          agentId,
-          conversationId
-        });
-        if (approvalsForEmission) {
-          emitToolExecutionFinishedEvents(socket, runtime, {
-            approvals: approvalsForEmission,
-            runId: runtime.activeRunId || msgRunIds[msgRunIds.length - 1],
-            agentId,
-            conversationId
-          });
-          emitInterruptToolReturnMessage(socket, runtime, approvalsForEmission, runtime.activeRunId || msgRunIds[msgRunIds.length - 1] || undefined);
-        }
       }
       finishTurn({
         stopReason: "cancelled",
@@ -460320,7 +460828,7 @@ var init_connection_state_sync = __esm(async () => {
 });
 
 // src/websocket/listener/grep-in-files.ts
-import { execFile as execFile20 } from "node:child_process";
+import { execFile as execFile19 } from "node:child_process";
 import { createRequire as createRequire8 } from "node:module";
 import * as path42 from "node:path";
 import { fileURLToPath as fileURLToPath10 } from "node:url";
@@ -460376,7 +460884,7 @@ async function runGrepInFiles(args) {
 }
 function runRipgrep2(rgArgs) {
   return new Promise((resolve39, reject2) => {
-    const child = execFile20(rgPath, rgArgs, {
+    const child = execFile19(rgPath, rgArgs, {
       maxBuffer: 50 * 1024 * 1024
     }, (error5, stdout, _stderr) => {
       if (error5 && error5.code !== 1) {
@@ -462301,7 +462809,7 @@ var init_mod_commands = __esm(async () => {
 });
 
 // src/websocket/listener/commands.ts
-import { spawn as spawn11 } from "node:child_process";
+import { spawn as spawn12 } from "node:child_process";
 async function handleExecuteCommand(command, socket, conversationRuntime, opts) {
   const scope = {
     agent_id: conversationRuntime.agentId,
@@ -462538,7 +463046,7 @@ function scheduleRemoteRestart(connectionName, log3) {
   setTimeout(async () => {
     await flushRemoteSettingsWrites();
     log3(`spawning replacement listener: ${process.execPath} ${entrypoint} remote --computer-name ${connectionName}`);
-    const child = spawn11(process.execPath, [entrypoint, "remote", "--computer-name", connectionName], {
+    const child = spawn12(process.execPath, [entrypoint, "remote", "--computer-name", connectionName], {
       cwd: process.cwd(),
       detached: true,
       env: process.env,
@@ -463721,8 +464229,8 @@ var init_connect_providers = __esm(async () => {
 });
 
 // src/websocket/listener/commands/git-branches.ts
-import { execFile as execFile21 } from "node:child_process";
-import { promisify as promisify19 } from "node:util";
+import { execFile as execFile20 } from "node:child_process";
+import { promisify as promisify18 } from "node:util";
 function handleGitBranchCommand(parsed, context3) {
   const { socket, runtime, safeSocketSend, runDetachedListenerTask: runDetachedListenerTask2 } = context3;
   if (isSearchBranchesCommand(parsed)) {
@@ -463730,7 +464238,7 @@ function handleGitBranchCommand(parsed, context3) {
       try {
         const cwd2 = parsed.cwd ?? getBootWorkingDirectory(runtime);
         const maxResults = parsed.max_results ?? 20;
-        const execFileAsync12 = promisify19(execFile21);
+        const execFileAsync12 = promisify18(execFile20);
         const { stdout } = await execFileAsync12("git", ["branch", "-a", "--format=%(refname:short)\t%(HEAD)"], {
           cwd: cwd2,
           encoding: "utf-8",
@@ -463770,7 +464278,7 @@ function handleGitBranchCommand(parsed, context3) {
     runDetachedListenerTask2("checkout_branch", async () => {
       try {
         const cwd2 = parsed.cwd ?? getBootWorkingDirectory(runtime);
-        const execFileAsync12 = promisify19(execFile21);
+        const execFileAsync12 = promisify18(execFile20);
         const args = parsed.create ? ["checkout", "-b", parsed.branch] : ["checkout", parsed.branch];
         await execFileAsync12("git", args, {
           cwd: cwd2,
@@ -464007,7 +464515,7 @@ function dispatchInboundMessageWhenReady(params) {
         acknowledgeInput({ accepted: false });
         return;
       }
-      if (shouldQueueInboundMessage(incoming) && !shouldProcessInboundMessageDirectly(runtime, incoming)) {
+      if (shouldQueueInboundMessage(incoming)) {
         const committed = commitInputDisposition(runtime, reservation, "queued", { incoming: attributedIncoming, actingUserId });
         let accepted = false;
         try {
@@ -464050,18 +464558,8 @@ function dispatchInboundMessageWhenReady(params) {
         acknowledgeInput({ accepted: false });
         return;
       }
-      const directBatchId = `batch-direct-${crypto.randomUUID()}`;
-      if (identity2) {
-        runtime.dequeuedInputIdentitiesByBatchId.set(directBatchId, [
-          identity2
-        ]);
-      }
       acknowledgeInput({ accepted: true, disposition: "started" });
-      try {
-        await processIncomingMessage(attributedIncoming, getOrCreateProcessTransport(listener), runtime, options.onStatusChange, options.connectionId, directBatchId);
-      } finally {
-        runtime.dequeuedInputIdentitiesByBatchId.delete(directBatchId);
-      }
+      await processIncomingMessage(attributedIncoming, getOrCreateProcessTransport(listener), runtime, options.onStatusChange, options.connectionId);
       emitListenerStatus(listener, options.onStatusChange, options.connectionId);
       if (runtime.queueRuntime.length > 0 || runtime.queuePumpScheduled || runtime.queuePumpActive) {
         scheduleQueuePump(runtime, socket, options, processQueuedTurn);
@@ -464551,11 +465049,11 @@ async function routeInputFrame(deps) {
     return;
   }
   const scopedRuntime = getOrCreateScopedRuntime2(runtime, incoming.agentId, incoming.conversationId);
-  const processIncomingMessageDirectly = (directIncoming) => {
+  const dispatchNonContentMessage = (nonContentIncoming) => {
     dispatchInboundMessageWhenReady({
       listener: runtime,
       runtime: scopedRuntime,
-      incoming: directIncoming,
+      incoming: nonContentIncoming,
       socket,
       options: opts,
       processQueuedTurn,
@@ -464578,10 +465076,6 @@ async function routeInputFrame(deps) {
     if (!gateInputOriginatorAdmission()) {
       return;
     }
-    if (shouldProcessInboundMessageDirectly(scopedRuntime, stampedIncoming)) {
-      processIncomingMessageDirectly(stampedIncoming);
-      return;
-    }
     const admission = reserveInputDisposition(scopedRuntime, identity2);
     if (admission.kind === "duplicate") {
       acknowledgeAdmissionDuplicate(ackTransport, scopedRuntime, identity2, admission.disposition);
@@ -464624,7 +465118,7 @@ async function routeInputFrame(deps) {
   if (!gateInputOriginatorAdmission()) {
     return;
   }
-  processIncomingMessageDirectly(incoming);
+  dispatchNonContentMessage(incoming);
   return;
 }
 var init_input_frame_router = __esm(async () => {
@@ -467062,6 +467556,7 @@ async function startConnectedListenerRuntime(runtime, transport3, opts, processQ
     await opts.onConnectionReady?.(startupConnection);
     if (!isExactOpenConnection() || !startupConnection.ingressReady)
       return;
+    resendPendingExternalToolCallsForConnection(runtime, startupConnection);
     startupComplete = true;
   } finally {
     clearStartupDeadline();
@@ -470195,7 +470690,7 @@ __export(exports_gateway_supervisor, {
   startChannelGatewaySupervisor: () => startChannelGatewaySupervisor,
   CHANNEL_GATEWAY_READY_SIGNAL: () => CHANNEL_GATEWAY_READY_SIGNAL
 });
-import { spawn as spawn12 } from "node:child_process";
+import { spawn as spawn13 } from "node:child_process";
 function resolveLauncher(cwd2) {
   const invocation = resolveLettaInvocation(process.env, process.argv, process.execPath, cwd2);
   if (invocation)
@@ -470296,7 +470791,7 @@ async function startChannelGatewaySupervisor(options) {
   function launch() {
     if (stopping)
       return;
-    child = (options.spawnProcess ?? spawn12)(launcher.command, childArgs, {
+    child = (options.spawnProcess ?? spawn13)(launcher.command, childArgs, {
       cwd: cwd2,
       env: options.env ?? process.env,
       stdio: ["pipe", "pipe", "pipe"],
@@ -471894,11 +472389,11 @@ async function runMemorySubcommand(argv, deps = {}) {
         console.error("Not a git repo. Enable git-backed memory first.");
         return 1;
       }
-      const { execFile: execFileCb5 } = await import("node:child_process");
-      const { promisify: promisify20 } = await import("node:util");
-      const execFile22 = promisify20(execFileCb5);
+      const { execFile: execFileCb4 } = await import("node:child_process");
+      const { promisify: promisify19 } = await import("node:util");
+      const execFile21 = promisify19(execFileCb4);
       const dir = getScopedMemoryFilesystemRoot(agentId);
-      const { stdout } = await execFile22("git", ["diff"], { cwd: dir });
+      const { stdout } = await execFile21("git", ["diff"], { cwd: dir });
       if (stdout.trim()) {
         console.log(stdout);
         return 2;
@@ -473427,7 +473922,7 @@ var init_model2 = __esm(() => {
 });
 
 // src/mods/package-installer.ts
-import { spawn as spawn13 } from "node:child_process";
+import { spawn as spawn14 } from "node:child_process";
 import {
   copyFileSync as copyFileSync4,
   existsSync as existsSync67,
@@ -474285,7 +474780,7 @@ var init_package_installer = __esm(() => {
   init_package_registry();
   init_package_manager_spawn();
   SKIPPED_PACKAGE_COPY_NAMES = new Set([".git", "node_modules"]);
-  spawnGitInstallProcess = spawn13;
+  spawnGitInstallProcess = spawn14;
 });
 
 // src/mods/package-scaffolder.ts
@@ -478049,15 +478544,15 @@ function resolveSkillSourceSpecifier(input) {
   }
   return null;
 }
-async function execFile22(command, args, options = {}) {
-  const { execFile: execFileCb5 } = await import("node:child_process");
-  const { promisify: promisify20 } = await import("node:util");
-  return promisify20(execFileCb5)(command, args, options);
+async function execFile21(command, args, options = {}) {
+  const { execFile: execFileCb4 } = await import("node:child_process");
+  const { promisify: promisify19 } = await import("node:util");
+  return promisify19(execFileCb4)(command, args, options);
 }
 async function resolveBranchAndSubdir(location) {
   if (!location.subdir)
     return location;
-  const { stdout } = await execFile22("git", ["ls-remote", "--heads", location.repoUrl], {
+  const { stdout } = await execFile21("git", ["ls-remote", "--heads", location.repoUrl], {
     timeout: 60000
   });
   const branches = stdout.split(`
@@ -478084,7 +478579,7 @@ async function cloneSkillSource(location) {
     args.push("--branch", resolvedLocation.branch);
   }
   args.push(resolvedLocation.repoUrl, tmpDir);
-  await execFile22("git", args, { timeout: 120000 });
+  await execFile21("git", args, { timeout: 120000 });
   const sourceDir = resolvedLocation.subdir ? join102(tmpDir, resolvedLocation.subdir) : tmpDir;
   return { tmpDir, sourceDir };
 }
@@ -478197,7 +478692,7 @@ async function downloadClawHubSkillSource(location) {
     throw new Error(`ClawHub download failed for ${location.slug}@${version3}: ${response.status}`);
   }
   writeFileSync42(zipPath, Buffer.from(await response.arrayBuffer()));
-  const { stdout } = await execFile22("unzip", ["-Z1", zipPath], {
+  const { stdout } = await execFile21("unzip", ["-Z1", zipPath], {
     timeout: 30000
   });
   const members = stdout.split(`
@@ -478206,7 +478701,7 @@ async function downloadClawHubSkillSource(location) {
     throw new Error(`ClawHub download was empty for ${location.slug}@${version3}`);
   }
   members.forEach(assertSafeZipMember);
-  await execFile22("unzip", ["-q", zipPath, "-d", sourceDir], {
+  await execFile21("unzip", ["-q", zipPath, "-d", sourceDir], {
     timeout: 30000
   });
   return { tmpDir, sourceDir };
@@ -490216,12 +490711,12 @@ var init_cli_mod_context = __esm(() => {
 });
 
 // src/cli/helpers/reflection-arena-hf-upload.ts
-import { execFile as execFileCb5 } from "node:child_process";
+import { execFile as execFileCb4 } from "node:child_process";
 import { existsSync as existsSync73 } from "node:fs";
 import { appendFile as appendFile3, chmod, mkdir as mkdir18, writeFile as writeFile21 } from "node:fs/promises";
 import { homedir as homedir33 } from "node:os";
 import { join as join108 } from "node:path";
-import { promisify as promisify20 } from "node:util";
+import { promisify as promisify19 } from "node:util";
 function getReflectionArenaHfCacheRoot(env6 = process.env, fallbackHome = homedir33()) {
   return join108(resolveGlobalConfigDir(env6, fallbackHome), "reflection-arena", "hf-upload");
 }
@@ -490247,7 +490742,7 @@ function formatTokenStatus(token2) {
 }
 async function runGit6(cwd2, args, env6) {
   try {
-    await execFile23("git", args, {
+    await execFile22("git", args, {
       cwd: cwd2,
       env: env6,
       encoding: "utf-8",
@@ -490332,23 +490827,23 @@ async function maybeUploadReflectionArenaChoiceToHf(row) {
     };
   }
 }
-var execFile23, HF_REPO_ID = "letta-ai/reflection-arena", HF_REPO_URL, GIT_TIMEOUT_MS2 = 60000, HF_CACHE_ROOT, HF_REPO_DIR, HF_DATASET_PATH = "data/choices.jsonl";
+var execFile22, HF_REPO_ID = "letta-ai/reflection-arena", HF_REPO_URL, GIT_TIMEOUT_MS2 = 60000, HF_CACHE_ROOT, HF_REPO_DIR, HF_DATASET_PATH = "data/choices.jsonl";
 var init_reflection_arena_hf_upload = __esm(() => {
   init_secrets_store();
   init_settings_path();
   init_version();
-  execFile23 = promisify20(execFileCb5);
+  execFile22 = promisify19(execFileCb4);
   HF_REPO_URL = `https://huggingface.co/datasets/${HF_REPO_ID}`;
   HF_CACHE_ROOT = getReflectionArenaHfCacheRoot();
   HF_REPO_DIR = join108(HF_CACHE_ROOT, "repo");
 });
 
 // src/cli/helpers/reflection-arena.ts
-import { execFile as execFileCb6 } from "node:child_process";
+import { execFile as execFileCb5 } from "node:child_process";
 import { randomInt as randomInt2, randomUUID as randomUUID64 } from "node:crypto";
 import { appendFile as appendFile4, mkdir as mkdir19, readFile as readFile32, writeFile as writeFile22 } from "node:fs/promises";
 import { join as join109 } from "node:path";
-import { promisify as promisify21 } from "node:util";
+import { promisify as promisify20 } from "node:util";
 function sampleReflectionArenaComparisonModel(excludedModels = []) {
   const excluded = new Set(excludedModels);
   const candidates2 = REFLECTION_ARENA_COMPARISON_MODEL_POOL.filter((entry) => !excluded.has(entry.model));
@@ -490365,7 +490860,7 @@ function sampleReflectionArenaComparisonModel(excludedModels = []) {
 }
 async function getGitOutput(cwd2, args) {
   try {
-    const { stdout } = await execFile24("git", args, {
+    const { stdout } = await execFile23("git", args, {
       cwd: cwd2,
       encoding: "utf-8",
       timeout: 30000,
@@ -490921,7 +491416,7 @@ async function finalizeReflectionArenaChoice(options) {
     run: completedRun
   };
 }
-var execFile24, REFLECTION_ARENA_TELEMETRY_TRANSCRIPT_MAX_CHARS = 1e6, REFLECTION_ARENA_MODEL_A_DEFAULT = "letta/auto-memory", REFLECTION_ARENA_COMPARISON_MODEL_POOL, ANSI_BOLD = "\x1B[1m", ANSI_CYAN = "\x1B[36m", ANSI_MAGENTA = "\x1B[35m", ANSI_RESET_BOLD = "\x1B[22m", ANSI_RESET_FOREGROUND = "\x1B[39m", REFLECTION_ARENA_CANDIDATE_COUNT = 2, REFLECTION_ARENA_CHOICE_QUESTION = "Which reflection should be merged?", REFLECTION_ARENA_NOTES_QUESTION = "Optional feedback for this choice?", updateLocks;
+var execFile23, REFLECTION_ARENA_TELEMETRY_TRANSCRIPT_MAX_CHARS = 1e6, REFLECTION_ARENA_MODEL_A_DEFAULT = "letta/auto-memory", REFLECTION_ARENA_COMPARISON_MODEL_POOL, ANSI_BOLD = "\x1B[1m", ANSI_CYAN = "\x1B[36m", ANSI_MAGENTA = "\x1B[35m", ANSI_RESET_BOLD = "\x1B[22m", ANSI_RESET_FOREGROUND = "\x1B[39m", REFLECTION_ARENA_CANDIDATE_COUNT = 2, REFLECTION_ARENA_CHOICE_QUESTION = "Which reflection should be merged?", REFLECTION_ARENA_NOTES_QUESTION = "Optional feedback for this choice?", updateLocks;
 var init_reflection_arena = __esm(() => {
   init_memory_worktree();
   init_app_urls();
@@ -490932,7 +491427,7 @@ var init_reflection_arena = __esm(() => {
   init_telemetry();
   init_debug();
   init_settings_path();
-  execFile24 = promisify21(execFileCb6);
+  execFile23 = promisify20(execFileCb5);
   REFLECTION_ARENA_COMPARISON_MODEL_POOL = [
     { model: "lc-anthropic/claude-sonnet-5", weight: 1 },
     { model: "lc-anthropic/claude-opus-4-8", weight: 3 },
@@ -507225,10 +507720,10 @@ var exports_generate_memory_viewer = {};
 __export(exports_generate_memory_viewer, {
   generateAndOpenMemoryViewer: () => generateAndOpenMemoryViewer
 });
-import { execFile as execFileCb7 } from "node:child_process";
+import { execFile as execFileCb6 } from "node:child_process";
 import { chmodSync as chmodSync10, existsSync as existsSync76, mkdirSync as mkdirSync56, writeFileSync as writeFileSync47 } from "node:fs";
 import { join as join113 } from "node:path";
-import { promisify as promisify22 } from "node:util";
+import { promisify as promisify21 } from "node:util";
 function messagesFromOverview(overview) {
   return overview.messages?.map((message2) => ({
     id: message2.id,
@@ -507255,7 +507750,7 @@ function contextFromOverview(overview, model, contextWindow) {
 }
 async function runGitSafe(cwd2, args) {
   try {
-    const { stdout } = await execFile25("git", args, {
+    const { stdout } = await execFile24("git", args, {
       cwd: cwd2,
       maxBuffer: 10 * 1024 * 1024,
       timeout: 60000
@@ -507566,7 +508061,7 @@ async function generateAndOpenMemoryViewer(agentId, options) {
   }
   return { filePath, opened: !skipOpen };
 }
-var execFile25, VIEWERS_DIR, MAX_COMMITS = 500, RECENT_DIFF_COUNT = 50, PER_DIFF_CAP = 1e5, TOTAL_PAYLOAD_CAP = 5000000, RECORD_SEP = "\x1E", REFLECTION_PATTERN;
+var execFile24, VIEWERS_DIR, MAX_COMMITS = 500, RECENT_DIFF_COUNT = 50, PER_DIFF_CAP = 1e5, TOTAL_PAYLOAD_CAP = 5000000, RECORD_SEP = "\x1E", REFLECTION_PATTERN;
 var init_generate_memory_viewer = __esm(() => {
   init_memory_filesystem2();
   init_memory_scanner();
@@ -507578,7 +508073,7 @@ var init_generate_memory_viewer = __esm(() => {
   init_context_usage();
   init_local_memory_context();
   init_memory_viewer_template();
-  execFile25 = promisify22(execFileCb7);
+  execFile24 = promisify21(execFileCb6);
   VIEWERS_DIR = join113(resolveGlobalConfigDir(), "viewers");
   REFLECTION_PATTERN = /\(reflection\)|🔮|reflection:/i;
 });
@@ -518247,13 +518742,13 @@ var exports_generate_diff_viewer = {};
 __export(exports_generate_diff_viewer, {
   generateAndOpenDiffViewer: () => generateAndOpenDiffViewer
 });
-import { execFile as execFileCb8 } from "node:child_process";
+import { execFile as execFileCb7 } from "node:child_process";
 import { chmodSync as chmodSync11, existsSync as existsSync78, mkdirSync as mkdirSync57, writeFileSync as writeFileSync48 } from "node:fs";
 import { isAbsolute as isAbsolute28, join as join117, resolve as resolve43 } from "node:path";
-import { promisify as promisify23 } from "node:util";
+import { promisify as promisify22 } from "node:util";
 async function runGit8(cwd2, args) {
   try {
-    const { stdout } = await execFile26("git", args, {
+    const { stdout } = await execFile25("git", args, {
       cwd: cwd2,
       maxBuffer: GIT_MAX_BUFFER,
       timeout: GIT_TIMEOUT_MS3
@@ -518492,7 +518987,7 @@ async function generateAndOpenDiffViewer(targetPath) {
   }
   return { filePath, opened: !skipOpen, fileCount: rendered.files.length };
 }
-var execFile26, VIEWERS_DIR2, GIT_TIMEOUT_MS3 = 60000, GIT_MAX_BUFFER, MAX_RENDERED_FILES = 100, DIFF_UNSAFE_CSS = `
+var execFile25, VIEWERS_DIR2, GIT_TIMEOUT_MS3 = 60000, GIT_MAX_BUFFER, MAX_RENDERED_FILES = 100, DIFF_UNSAFE_CSS = `
 :host {
   --diffs-addition-color-override: #15803d;
   --diffs-deletion-color-override: #b91c1c;
@@ -518547,7 +519042,7 @@ var execFile26, VIEWERS_DIR2, GIT_TIMEOUT_MS3 = 60000, GIT_MAX_BUFFER, MAX_RENDE
 var init_generate_diff_viewer = __esm(() => {
   init_settings_path();
   init_diff_viewer_template();
-  execFile26 = promisify23(execFileCb8);
+  execFile25 = promisify22(execFileCb7);
   VIEWERS_DIR2 = join117(resolveGlobalConfigDir(), "viewers");
   GIT_MAX_BUFFER = 50 * 1024 * 1024;
 });
@@ -524862,7 +525357,7 @@ The deployment target for this project is CITATION-DOGFOOD-OK.
 });
 
 // src/mods/learning-harness.ts
-import { spawn as spawn14 } from "node:child_process";
+import { spawn as spawn15 } from "node:child_process";
 import { access as access2, copyFile as copyFile2, mkdir as mkdir20, readFile as readFile34, writeFile as writeFile23 } from "node:fs/promises";
 import path49 from "node:path";
 function slugify2(value) {
@@ -525802,7 +526297,7 @@ async function writeHistoryArtifacts(params) {
 async function defaultCommandRunner(command, args, options) {
   const startedAt = Date.now();
   return new Promise((resolve44) => {
-    const child = spawn14(command, args, {
+    const child = spawn15(command, args, {
       cwd: options.cwd,
       env: options.env,
       stdio: ["ignore", "pipe", "pipe"]
@@ -528614,12 +529109,12 @@ var exports_worktree_diff_list = {};
 __export(exports_worktree_diff_list, {
   listWorktreeDiffOptions: () => listWorktreeDiffOptions
 });
-import { execFile as execFileCb9 } from "node:child_process";
+import { execFile as execFileCb8 } from "node:child_process";
 import { basename as basename33 } from "node:path";
-import { promisify as promisify24 } from "node:util";
+import { promisify as promisify23 } from "node:util";
 async function runGit9(cwd2, args) {
   try {
-    const { stdout } = await execFile27("git", args, {
+    const { stdout } = await execFile26("git", args, {
       cwd: cwd2,
       maxBuffer: GIT_MAX_BUFFER2,
       timeout: GIT_TIMEOUT_MS4
@@ -528748,9 +529243,9 @@ async function listWorktreeDiffOptions(cwd2 = process.cwd()) {
   const worktrees = parseWorktreeList(output, currentPath);
   return Promise.all(worktrees.map((worktree) => summarizeWorktree(worktree)));
 }
-var execFile27, GIT_TIMEOUT_MS4 = 60000, GIT_MAX_BUFFER2;
+var execFile26, GIT_TIMEOUT_MS4 = 60000, GIT_MAX_BUFFER2;
 var init_worktree_diff_list = __esm(() => {
-  execFile27 = promisify24(execFileCb9);
+  execFile26 = promisify23(execFileCb8);
   GIT_MAX_BUFFER2 = 10 * 1024 * 1024;
 });
 
@@ -538684,4 +539179,4 @@ function registerBunOAuthFlows() {
 registerBunOAuthFlows();
 await init_src5().then(() => exports_src2);
 
-//# debugId=B77AE6C44CFEB3F664756E2164756E21
+//# debugId=395DF1A0E3F5616F64756E2164756E21