@sentry/junior 0.159.0 → 0.160.0

package/dist/chat/tools/search-conversation-events.d.ts

@@ -9,7 +9,7 @@ export declare function createSearchConversationEventsTool(context: ToolRuntimeC
         after_seq?: number | null | undefined;
         before_seq?: number | null | undefined;
         limit?: number | null | undefined;
-        types?: ("message" | "message_handled" | "assistant_message" | "turn_routed" | "guardian_action_reviewed" | "turn_context" | "structured_event" | "compaction" | "handoff" | "user_message" | "tool_result" | "mcp_provider_connected" | "mcp_provider_connected_unowned" | "authorization_requested" | "authorization_completed" | "tool_execution_started" | "message_updated" | "messages_summarized" | "turn_started" | "turn_completed" | "turn_failed" | "subagent_started" | "subagent_ended")[] | null | undefined;
+        types?: ("message" | "message_handled" | "assistant_message" | "turn_routed" | "guardian_action_reviewed" | "turn_context" | "structured_event" | "attachments_delivered" | "compaction" | "handoff" | "user_message" | "tool_result" | "mcp_provider_connected" | "mcp_provider_connected_unowned" | "authorization_requested" | "authorization_completed" | "tool_execution_started" | "message_updated" | "messages_summarized" | "turn_started" | "turn_completed" | "turn_failed" | "subagent_started" | "subagent_ended")[] | null | undefined;
     };
     execute?: ((input: unknown, options: import("./definition").ToolExecuteOptions) => {
         [x: string]: unknown;

package/dist/{chunk-UP6KQVF5.js → chunk-2MK6S2UA.js}

@@ -1,6 +1,6 @@
 import {
   createAndEnqueueAgentInvocation
-} from "./chunk-27UQ7UB3.js";
+} from "./chunk-WACYTIIK.js";
 import {
   actorFromRun,
   toolInvocationDestination

package/dist/{chunk-CNHELV2P.js → chunk-2SFMRMDV.js}

@@ -1,6 +1,6 @@
 import {
   createPluginCatalogRuntime
-} from "./chunk-YCBZ47LC.js";
+} from "./chunk-42E7432W.js";
 
 // src/chat/plugins/catalog-runtime.ts
 var pluginCatalogRuntime = createPluginCatalogRuntime();

package/dist/{chunk-UKKOKMRE.js → chunk-3AHIB66R.js}

@@ -1,18 +1,18 @@
 import {
   persistConversationMessages
-} from "./chunk-54O6IKUS.js";
+} from "./chunk-RLOXMHLA.js";
 import {
   JUNIOR_THREAD_STATE_TTL_MS
 } from "./chunk-3Y47VMHV.js";
 import {
   getDb
-} from "./chunk-QODFNKQS.js";
+} from "./chunk-JQZIUESN.js";
 import {
   juniorLocationConfigurations
-} from "./chunk-O2DZWUPQ.js";
+} from "./chunk-4UO3UAW7.js";
 import {
   getStateAdapter
-} from "./chunk-Q5X37U6G.js";
+} from "./chunk-UNDTW2PY.js";
 import {
   juniorDestinations
 } from "./chunk-VFUK3X5B.js";
@@ -20,7 +20,7 @@ import {
   isRecord,
   toOptionalNumber,
   toOptionalString
-} from "./chunk-TD7ZQZ5W.js";
+} from "./chunk-ZNBGWMVQ.js";
 
 // src/chat/conversations/turn-lifecycle.ts
 var ConversationTurnLifecycleService = class {

package/dist/{chunk-YCBZ47LC.js → chunk-42E7432W.js}

@@ -5,7 +5,7 @@ import {
   logInfo,
   logWarn,
   setSpanAttributes
-} from "./chunk-TD7ZQZ5W.js";
+} from "./chunk-ZNBGWMVQ.js";
 import {
   discoverInstalledPluginPackageContent,
   normalizePluginPackageNames

package/dist/{chunk-UG673UVL.js → chunk-472VVYYV.js}

@@ -1,6 +1,6 @@
 import {
   getStateAdapter
-} from "./chunk-Q5X37U6G.js";
+} from "./chunk-UNDTW2PY.js";
 import {
   getClient
 } from "./chunk-6GWA276C.js";

package/dist/{chunk-O2DZWUPQ.js → chunk-4UO3UAW7.js}

@@ -1,6 +1,6 @@
 import {
   DEFAULT_SQL_STATEMENT_TIMEOUT_MS
-} from "./chunk-L2PEQ2PY.js";
+} from "./chunk-J77DLAPE.js";
 import {
   juniorDestinations,
   timestamptz

package/dist/{chunk-IJ6KWS3V.js → chunk-56TFPTZU.js}

@@ -5,7 +5,7 @@ import {
 } from "./chunk-V7YE4WCP.js";
 import {
   toOptionalString
-} from "./chunk-TD7ZQZ5W.js";
+} from "./chunk-ZNBGWMVQ.js";
 
 // src/chat/slack/context.ts
 import { z } from "zod";

package/dist/{chunk-X7AIXRVJ.js → chunk-756F567I.js}

@@ -4,7 +4,7 @@ import {
 import {
   formatProviderLabel,
   startOAuthFlow
-} from "./chunk-DJZPA72K.js";
+} from "./chunk-P7W3ZL5J.js";
 import {
   parseSandboxEgressAuthRequiredSignal
 } from "./chunk-7MA4HV4W.js";
@@ -12,16 +12,16 @@ import {
   abandonReplacedPendingAuth,
   canReusePendingAuthLink,
   recordAuthorizationRequested
-} from "./chunk-54O6IKUS.js";
+} from "./chunk-RLOXMHLA.js";
 import {
   AGENT_INVOCATION_MAILBOX_STATUSES
-} from "./chunk-O2DZWUPQ.js";
+} from "./chunk-4UO3UAW7.js";
 import {
   TURN_REASONING_LEVELS
-} from "./chunk-L2PEQ2PY.js";
+} from "./chunk-J77DLAPE.js";
 import {
   pluginCatalogRuntime
-} from "./chunk-CNHELV2P.js";
+} from "./chunk-2SFMRMDV.js";
 import {
   credentialContextSchema
 } from "./chunk-BDUENQD3.js";

package/dist/{chunk-PQWWCKNB.js → chunk-BGVQGEKB.js}

@@ -4,18 +4,18 @@ import {
 } from "./chunk-EM225ITJ.js";
 import {
   getStateAdapter
-} from "./chunk-Q5X37U6G.js";
+} from "./chunk-UNDTW2PY.js";
 import {
   toOptionalTrimmed
-} from "./chunk-L2PEQ2PY.js";
+} from "./chunk-J77DLAPE.js";
 import {
   pluginCatalogRuntime
-} from "./chunk-CNHELV2P.js";
+} from "./chunk-2SFMRMDV.js";
 import {
   setSpanAttributes,
   setSpanStatus,
   withSpan
-} from "./chunk-TD7ZQZ5W.js";
+} from "./chunk-ZNBGWMVQ.js";
 
 // src/chat/sandbox/resources.ts
 var configuredResources;

package/dist/{chunk-AIQKUJKK.js → chunk-FJR66CQT.js}

@@ -1,6 +1,6 @@
 import {
   getTurnRequestDeadline
-} from "./chunk-WTQ3CKC3.js";
+} from "./chunk-LNUZXEEI.js";
 import {
   CONVERSATION_WORK_CHECK_IN_INTERVAL_MS,
   CONVERSATION_WORK_MAX_RETRIES,
@@ -21,20 +21,20 @@ import {
   releaseConversationWork,
   requestAnotherSlice,
   startConversationWork
-} from "./chunk-FWDN67U3.js";
+} from "./chunk-FKMWPA4A.js";
 import {
   ConversationQueueMessageRejectedError
 } from "./chunk-JAL3CH4G.js";
 import {
   getChatConfig,
   isProviderRetryError
-} from "./chunk-L2PEQ2PY.js";
+} from "./chunk-J77DLAPE.js";
 import {
   logException,
   logInfo,
   logWarn,
   withLogContext
-} from "./chunk-TD7ZQZ5W.js";
+} from "./chunk-ZNBGWMVQ.js";
 
 // src/chat/task-execution/worker.ts
 var CONVERSATION_WORK_DEFER_DELAY_MS = 15e3;

package/dist/{chunk-FWDN67U3.js → chunk-FKMWPA4A.js}

@@ -8,14 +8,14 @@ import {
   getConversationStore,
   parseDestination,
   sameDestination
-} from "./chunk-QODFNKQS.js";
+} from "./chunk-JQZIUESN.js";
 import {
   getDefaultRedisStateAdapterFor,
   getStateAdapter
-} from "./chunk-Q5X37U6G.js";
+} from "./chunk-UNDTW2PY.js";
 import {
   getChatConfig
-} from "./chunk-L2PEQ2PY.js";
+} from "./chunk-J77DLAPE.js";
 import {
   parseStoredSlackActor
 } from "./chunk-V7YE4WCP.js";
@@ -23,7 +23,7 @@ import {
   isRecord,
   toOptionalNumber,
   toOptionalString
-} from "./chunk-TD7ZQZ5W.js";
+} from "./chunk-ZNBGWMVQ.js";
 
 // src/chat/task-execution/state.ts
 import { randomUUID } from "crypto";

package/dist/{chunk-OGMHLKNO.js → chunk-HDPH4CHJ.js}

@@ -1,6 +1,6 @@
 import {
   JUNIOR_VERSION
-} from "./chunk-LUIKMY35.js";
+} from "./chunk-YPMDNE7R.js";
 
 // src/deployment.ts
 var JUNIOR_HEARTBEAT_ROUTE = "/api/internal/heartbeat";

package/dist/{chunk-L2PEQ2PY.js → chunk-J77DLAPE.js}

@@ -3,7 +3,7 @@ import {
   toCanonicalInputMessage,
   toCanonicalOutputMessage,
   toGenAiMessagesTraceAttributes
-} from "./chunk-PT7B6A3O.js";
+} from "./chunk-TBRJGMTO.js";
 import {
   extractGenAiUsageAttributes,
   logException,
@@ -11,7 +11,7 @@ import {
   normalizeGenAiFinishReason,
   serializeGenAiAttribute,
   withSpan
-} from "./chunk-TD7ZQZ5W.js";
+} from "./chunk-ZNBGWMVQ.js";
 
 // src/chat/services/provider-error.ts
 var ProviderError = class extends Error {

package/dist/{chunk-QODFNKQS.js → chunk-JQZIUESN.js}

@@ -6,12 +6,12 @@ import {
   juniorConversations,
   juniorIdentities,
   juniorUsers
-} from "./chunk-O2DZWUPQ.js";
+} from "./chunk-4UO3UAW7.js";
 import {
   TURN_REASONING_LEVELS,
   getChatConfig,
   modelProfileSchema
-} from "./chunk-L2PEQ2PY.js";
+} from "./chunk-J77DLAPE.js";
 import {
   juniorDestinations
 } from "./chunk-VFUK3X5B.js";
@@ -22,7 +22,7 @@ import {
 } from "./chunk-V7YE4WCP.js";
 import {
   normalizeIdentityEmail
-} from "./chunk-TD7ZQZ5W.js";
+} from "./chunk-ZNBGWMVQ.js";
 
 // src/chat/conversations/sql/store.ts
 import { randomUUID as randomUUID2 } from "crypto";
@@ -1266,6 +1266,18 @@ var structuredConversationEventDataSchema = z3.object({
   turnId: z3.string().min(1).optional(),
   content: z3.record(z3.string(), z3.unknown())
 }).strict();
+var deliveredAttachmentSchema = z3.object({
+  id: z3.string().min(1),
+  filename: z3.string().min(1),
+  contentType: z3.string().min(1),
+  bytes: z3.number().int().nonnegative()
+}).strict();
+var attachmentsDeliveredEventDataSchema = z3.object({
+  type: z3.literal("attachments_delivered"),
+  attachments: z3.array(deliveredAttachmentSchema).min(1),
+  toolCallId: z3.string().min(1).optional(),
+  turnId: z3.string().min(1).optional()
+}).strict();
 var turnCompletedEventDataSchema = z3.object({
   type: z3.literal("turn_completed"),
   turnId: z3.string().min(1),
@@ -1310,6 +1322,7 @@ var appendableConversationEventDataSchema = z3.union([
   turnStartedEventDataSchema,
   turnContextEventDataSchema,
   structuredConversationEventDataSchema,
+  attachmentsDeliveredEventDataSchema,
   turnRoutedEventDataSchema,
   turnCompletedEventDataSchema,
   turnFailedEventDataSchema,
@@ -1338,6 +1351,7 @@ var KNOWN_CONVERSATION_EVENT_TYPES = [
   "turn_started",
   "turn_context",
   "structured_event",
+  "attachments_delivered",
   "turn_routed",
   "turn_completed",
   "turn_failed",

package/dist/{chunk-WTQ3CKC3.js → chunk-LNUZXEEI.js}

@@ -1,7 +1,7 @@
 import {
   FUNCTION_TIMEOUT_BUFFER_SECONDS,
   getChatConfig
-} from "./chunk-L2PEQ2PY.js";
+} from "./chunk-J77DLAPE.js";
 
 // src/chat/runtime/request-deadline.ts
 import { AsyncLocalStorage } from "async_hooks";

package/dist/{chunk-SQOVZSWF.js → chunk-M5HCOMDR.js}

@@ -7,7 +7,7 @@ import {
   PluginCredentialFailureError,
   agentNameSchema,
   createPluginAuthOrchestration
-} from "./chunk-X7AIXRVJ.js";
+} from "./chunk-756F567I.js";
 import {
   authorizationId
 } from "./chunk-DIB4GX3G.js";
@@ -32,7 +32,7 @@ import {
   searchSlackUsers,
   selectPluginGrant,
   toMcpProviderError
-} from "./chunk-AZW5HKC5.js";
+} from "./chunk-PVIM2RWO.js";
 import {
   RetryableDeliveryError,
   actorFromRun,
@@ -48,7 +48,7 @@ import {
   getSlackMessagePermalink,
   resolveBaseUrl,
   uploadFilesToConversation
-} from "./chunk-DJZPA72K.js";
+} from "./chunk-P7W3ZL5J.js";
 import {
   parseSandboxEgressAuthRequiredSignal,
   parseSandboxEgressPermissionDeniedSignal,
@@ -74,7 +74,7 @@ import {
   runNonInteractiveCommand,
   throwSandboxOperationError,
   wrapSandboxSetupError
-} from "./chunk-PQWWCKNB.js";
+} from "./chunk-BGVQGEKB.js";
 import {
   SCHEDULED_TASK_SYSTEM_ACTOR,
   compactEventTask,
@@ -107,10 +107,10 @@ import {
   scheduledTaskAttributes,
   storeAttachments,
   writableEventTask
-} from "./chunk-NT6V5WEE.js";
+} from "./chunk-RJGRXDA7.js";
 import {
   parseSlackThreadId
-} from "./chunk-IJ6KWS3V.js";
+} from "./chunk-56TFPTZU.js";
 import {
   AGENTS_REMOVAL_NOTICE,
   AGENTS_REPLACEMENT_NOTICE,
@@ -165,6 +165,7 @@ import {
   piMessageFromHistoryItem,
   positiveInteger,
   recordAgentsInstructionsUpdated,
+  recordAttachmentsDelivered,
   recordAuthorizationRequested,
   recordGuardianActionReviewed,
   recordMcpProviderConnected,
@@ -180,7 +181,7 @@ import {
   stripRuntimeTurnContext,
   trimTrailingAssistantMessages,
   truncateText
-} from "./chunk-54O6IKUS.js";
+} from "./chunk-RLOXMHLA.js";
 import {
   JUNIOR_THREAD_STATE_TTL_MS
 } from "./chunk-3Y47VMHV.js";
@@ -196,7 +197,7 @@ import {
   getSlackToolContext,
   readActorIdentity,
   resolveChannelCapabilities
-} from "./chunk-EBP6IS66.js";
+} from "./chunk-U26KRMYX.js";
 import {
   SlackActionError,
   downloadPrivateSlackFile,
@@ -205,7 +206,7 @@ import {
   isConversationScopedChannel,
   normalizeSlackConversationId,
   withSlackRetries
-} from "./chunk-K2LAI7RW.js";
+} from "./chunk-OUAZDZTZ.js";
 import {
   KNOWN_CONVERSATION_EVENT_TYPES,
   contextProvenance,
@@ -217,10 +218,10 @@ import {
   instructionActors,
   instructionProvenanceFor,
   sameActorIdentity
-} from "./chunk-QODFNKQS.js";
+} from "./chunk-JQZIUESN.js";
 import {
   juniorIdentities
-} from "./chunk-O2DZWUPQ.js";
+} from "./chunk-4UO3UAW7.js";
 import {
   SANDBOX_DATA_ROOT,
   SANDBOX_SKILLS_ROOT,
@@ -232,7 +233,7 @@ import {
 } from "./chunk-EM225ITJ.js";
 import {
   getStateAdapter
-} from "./chunk-Q5X37U6G.js";
+} from "./chunk-UNDTW2PY.js";
 import {
   ACTIVE_TURN_COMPACTION_SUMMARY_PREFIX,
   COMPACTION_SUMMARY_PREFIX,
@@ -265,7 +266,7 @@ import {
   resolveGatewayCredential,
   resolveGatewayModel,
   unwrapCurrentInstruction
-} from "./chunk-L2PEQ2PY.js";
+} from "./chunk-J77DLAPE.js";
 import {
   canExposeConversationPayload,
   resolveConversationPrivacy,
@@ -275,16 +276,16 @@ import {
   toGenAiMessagesTraceAttributes,
   toGenAiPayloadMetadata,
   toGenAiPayloadTraceAttributes
-} from "./chunk-PT7B6A3O.js";
+} from "./chunk-TBRJGMTO.js";
 import {
   discoverSkills,
   findSkillByName,
   loadSkillsByName,
   parseSkillInvocation
-} from "./chunk-U7D4VLUF.js";
+} from "./chunk-XPX3DYG7.js";
 import {
   pluginCatalogRuntime
-} from "./chunk-CNHELV2P.js";
+} from "./chunk-2SFMRMDV.js";
 import {
   CredentialUnavailableError,
   OAuthProviderError,
@@ -292,7 +293,7 @@ import {
   getOAuthProviderErrorAttributes,
   resolveAuthTokenPlaceholder,
   resolvePluginCommandEnv
-} from "./chunk-YCBZ47LC.js";
+} from "./chunk-42E7432W.js";
 import {
   credentialUserSubjectId
 } from "./chunk-BDUENQD3.js";
@@ -320,7 +321,7 @@ import {
   summarizeMessageText,
   withLogContext,
   withSpan
-} from "./chunk-TD7ZQZ5W.js";
+} from "./chunk-ZNBGWMVQ.js";
 import {
   startInactiveSpan,
   withActiveSpan
@@ -10545,7 +10546,8 @@ var sendFilesResultSchema = juniorToolOutputSchema.extend({
   attachment_refs: z42.array(
     z42.object({
       id: z42.string().min(1),
-      name: z42.string().min(1)
+      // Same noun as storage, delivery events, and the report API.
+      filename: z42.string().min(1)
     })
   )
 });
@@ -10583,7 +10585,7 @@ function createSendFilesTool(context, state, materializeFile, attachments) {
       )
     }),
     outputSchema: sendFilesResultSchema,
-    execute: async ({ files }) => {
+    execute: async ({ files }, options) => {
       const filesToSend = normalizeFiles(files);
       const activeChannelId = context.sourceChannelId;
       if (!activeChannelId) {
@@ -10605,8 +10607,15 @@ function createSendFilesTool(context, state, materializeFile, attachments) {
       });
       const cached = state.getOperationResult(operationKey);
       if (cached) {
+        if (attachments && cached.delivered.length > 0) {
+          await recordAttachmentsDelivered({
+            attachments: cached.delivered,
+            conversationId: attachments.conversationId,
+            ...cached.toolCallId ? { toolCallId: cached.toolCallId } : {}
+          });
+        }
         return sendFilesResultSchema.parse({
-          ...cached,
+          ...cached.result,
           deduplicated: true
         });
       }
@@ -10625,13 +10634,36 @@ function createSendFilesTool(context, state, materializeFile, attachments) {
         files: uploads,
         threadTs
       });
+      const delivered = stored.map(
+        (attachment, index) => {
+          const file = materializedFiles[index];
+          return {
+            id: attachment.id,
+            filename: file.filename,
+            contentType: file.mimeType,
+            bytes: file.bytes
+          };
+        }
+      );
       const response = {
-        attachment_refs: stored.map((attachment, index) => ({
+        // Tool result stays minimal; transcript/report carries full metadata.
+        attachment_refs: delivered.map((attachment) => ({
           id: attachment.id,
-          name: materializedFiles[index].filename
+          filename: attachment.filename
         }))
       };
-      state.setOperationResult(operationKey, response);
+      state.setOperationResult(operationKey, {
+        delivered,
+        result: response,
+        ...options.toolCallId ? { toolCallId: options.toolCallId } : {}
+      });
+      if (attachments && delivered.length > 0) {
+        await recordAttachmentsDelivered({
+          attachments: delivered,
+          conversationId: attachments.conversationId,
+          ...options.toolCallId ? { toolCallId: options.toolCallId } : {}
+        });
+      }
       return response;
     }
   });
@@ -13519,6 +13551,9 @@ function buildSandboxInput(toolName, params) {
 import { PluginToolInputError } from "@sentry/junior-plugin-api";
 
 // src/chat/tool-support/action-review.ts
+import {
+  missingToolAnnotationKeys as missingToolAnnotationKeys2
+} from "@sentry/junior-plugin-api";
 var ACTION_CONFIRMATION_INSTRUCTIONS = [
   "The action was not executed because explicit user confirmation is required.",
   "Stop tool use for this turn and respond to the user now with a direct, concise confirmation question that names the exact action, target, and material side effects.",
@@ -13531,6 +13566,13 @@ var ACTION_DENIAL_INSTRUCTIONS = [
   "If the reason is missing or withheld authorization and exact confirmation could make the action allowable, stop tool use for this turn and respond to the user now with a direct, concise confirmation question that names the exact action, target, and material side effects.",
   "Proceed only with a materially safer alternative. Otherwise, stop and explain the specific risk to the user without mentioning Guardian or internal review mechanics."
 ].join("\n");
+var ACTION_REVIEW_LIMIT_INSTRUCTIONS = [
+  "This action was rejected due to unacceptable risk.",
+  "Action review rejected three consecutive tool execution attempts.",
+  "Do not retry this action or an equivalent write this turn.",
+  "Stop tool use for this turn and respond to the user now with a direct, concise explanation of the risk.",
+  "Do not mention Guardian, the runtime, policy, or internal review mechanics."
+].join("\n");
 var ToolActionRejectedError = class extends Error {
   decision;
   reason;
@@ -13538,11 +13580,9 @@ var ToolActionRejectedError = class extends Error {
   riskLevel;
   userAuthorization;
   constructor(decision, reason, assessment = {}) {
-    super(
-      decision === "ask" ? `${ACTION_CONFIRMATION_INSTRUCTIONS}
-Reason: ${reason}` : `${ACTION_DENIAL_INSTRUCTIONS}
-Reason: ${reason}`
-    );
+    const instructions = assessment.instructions ?? (decision === "ask" ? ACTION_CONFIRMATION_INSTRUCTIONS : ACTION_DENIAL_INSTRUCTIONS);
+    super(`${instructions}
+Reason: ${reason}`);
     this.name = "ToolActionRejectedError";
     this.decision = decision;
     this.reason = reason;
@@ -13565,7 +13605,7 @@ var ToolActionReviewUnavailableError = class extends Error {
 var ToolActionReviewLimitError = class extends Error {
   constructor() {
     super(
-      "Action review rejected three consecutive tool execution attempts; the run was interrupted."
+      "Action review rejected three consecutive tool execution attempts."
     );
     this.name = "ToolActionReviewLimitError";
   }
@@ -13582,6 +13622,9 @@ function effectiveApprovalMode(tool, resolved) {
     return "review";
   }
   const annotations = resolved?.annotations ?? tool.annotations;
+  if (missingToolAnnotationKeys2(annotations).length > 0) {
+    return "review";
+  }
   if (annotations?.destructiveHint === true || annotations?.openWorldHint === true || annotations?.readOnlyHint === false) {
     return "review";
   }
@@ -13782,10 +13825,19 @@ function createToolActionReview(options) {
       const reviewedAction = projectedRejection(proposal, decision);
       appendVisibleRejection(priorRejections, reviewedAction);
       consecutiveRejections += 1;
-      if (consecutiveRejections >= MAX_CONSECUTIVE_REJECTIONS) {
-        const limitError = new ToolActionReviewLimitError();
-        options.onFatal(limitError);
-        throw limitError;
+      const exhausted = consecutiveRejections >= MAX_CONSECUTIVE_REJECTIONS;
+      if (exhausted) {
+        logException(
+          new ToolActionReviewLimitError(),
+          "guardian.action_review.exhausted",
+          {
+            "app.guardian.decision": decision.decision,
+            "app.guardian.risk_level": decision.riskLevel,
+            "app.guardian.user_authorization": decision.userAuthorization,
+            "gen_ai.tool.name": proposal.tool.name,
+            "gen_ai.tool.call.id": toolCallId
+          }
+        );
       }
       pendingRejections.set(toolCallId, {
         decision: decision.decision,
@@ -13798,7 +13850,8 @@ function createToolActionReview(options) {
       throw new ToolActionRejectedError(decision.decision, decision.reason, {
         riskLevel: decision.riskLevel,
         reviewedAction,
-        userAuthorization: decision.userAuthorization
+        userAuthorization: decision.userAuthorization,
+        ...exhausted ? { instructions: ACTION_REVIEW_LIMIT_INSTRUCTIONS } : {}
       });
     },
     projectToolResult(toolCallId, result) {