@sentry/junior 0.210.2 → 0.212.0

package/dist/{agent-DruBLdjK.js → agent-Cgc7jAIH.js}

@@ -1,28 +1,28 @@
-import { C as resolveGatewayCredential, S as getGatewayApiKey, _ as findProviderError, b as isProviderRetryError, c as COMPACTION_SUMMARY_PREFIX, d as isCompactionSummaryText, f as renderCurrentInstruction, g as createProviderError, h as ProviderError, i as completeText, l as MODEL_HANDOFF_SUMMARY_PREFIX, m as escapeXml, n as GEN_AI_SERVER_ADDRESS, o as resolveGatewayModel, p as unwrapCurrentInstruction, r as completeObject, s as ACTIVE_TURN_COMPACTION_SUMMARY_PREFIX, t as GEN_AI_PROVIDER_NAME, u as hasCompactedConversationContext, v as getProviderErrorAttributes, x as MISSING_GATEWAY_CREDENTIALS_ERROR } from "./client-Dstl8V7v.js";
-import { C as withSpan, F as isRecord$2, P as normalizeIdentityEmail, S as withLogContext, _ as setSpanAttributes, a as extractGenAiUsageSummary, b as summarizeMessageText, c as getTracePropagationHeaders, d as logInfo, f as logWarn, h as serializeGenAiAttribute, i as extractGenAiUsageAttributes, l as logError, p as normalizeGenAiFinishReason, s as getLogContextAttributesForSpan, u as logException, v as setSpanStatus, y as setTags } from "./logging-CKkKExae.js";
+import { C as resolveGatewayCredential, S as getGatewayApiKey, _ as findProviderError, b as isProviderRetryError, c as COMPACTION_SUMMARY_PREFIX, d as isCompactionSummaryText, f as renderCurrentInstruction, g as createProviderError, h as ProviderError, i as completeText, l as MODEL_HANDOFF_SUMMARY_PREFIX, m as escapeXml, n as GEN_AI_SERVER_ADDRESS, o as resolveGatewayModel, p as unwrapCurrentInstruction, r as completeObject, s as ACTIVE_TURN_COMPACTION_SUMMARY_PREFIX, t as GEN_AI_PROVIDER_NAME, u as hasCompactedConversationContext, v as getProviderErrorAttributes, x as MISSING_GATEWAY_CREDENTIALS_ERROR } from "./client-C1KycWNq.js";
+import { C as withSpan, F as isRecord$2, P as normalizeIdentityEmail, S as withLogContext, _ as setSpanAttributes, a as extractGenAiUsageSummary, b as summarizeMessageText, c as getTracePropagationHeaders, d as logInfo, f as logWarn, h as serializeGenAiAttribute, i as extractGenAiUsageAttributes, l as logError, p as normalizeGenAiFinishReason, s as getLogContextAttributesForSpan, u as logException, v as setSpanStatus, y as setTags } from "./logging-B5-PLvDo.js";
 import { m as startInactiveSpan, v as withActiveSpan } from "./sentry-CgWZM_kV.js";
-import { a as toCanonicalInputMessage, c as toGenAiPayloadMetadata, i as runWithConversationPrivacy, l as toGenAiPayloadTraceAttributes, o as toCanonicalOutputMessage, r as resolveConversationPrivacy, s as toGenAiMessagesTraceAttributes, t as canExposeConversationPayload } from "./conversation-privacy-BIClFm9b.js";
-import { h as normalizeSlackEmojiName, n as botConfig } from "./config-QWyCRQ8L.js";
+import { a as toCanonicalInputMessage, c as toGenAiPayloadMetadata, i as runWithConversationPrivacy, l as toGenAiPayloadTraceAttributes, o as toCanonicalOutputMessage, r as resolveConversationPrivacy, s as toGenAiMessagesTraceAttributes, t as canExposeConversationPayload } from "./conversation-privacy-BFzYxnTS.js";
+import { h as normalizeSlackEmojiName, n as botConfig } from "./config-C0-PnQoF.js";
 import { a as modelIdForProfile, c as TURN_REASONING_LEVELS, i as formatModelProfiles, o as modelProfileSchema, r as formatModelProfile, s as profileConfig, t as ModelProfileNotConfiguredError } from "./model-profile-CZmVoGdX.js";
 import { _ as parseSlackMessageTs, g as parseSlackUserId, h as parseSlackTeamId, i as credentialUserSubjectId, l as isUserActor, m as parseSlackChannelReferenceId, n as credentialContextSchema, p as parseSlackChannelId, t as credentialContextForActor } from "./context-Bplcgypl.js";
-import { A as tryWorkspaceRepoCheckoutPath, B as downloadPrivateSlackFile, C as invalidateReadySnapshot, D as SANDBOX_RUNTIME, E as setWorkspaceSnapshotBuild, Gt as getDb, Ht as getConversationEventStore, J as withSlackRetries, K as normalizeSlackConversationId, Kt as getSqlExecutor, M as resolveChannelCapabilities, O as deleteWorkspaceSnapshotBuilders, Q as readActorIdentity, S as WorkspaceValidationError, T as setWorkspaceSnapshot, U as getSlackClient, Ut as getConversationMessageSearchStore, V as getFilePermalink, W as isConversationScopedChannel, Wt as getConversationStore, _ as deleteWorkspace, an as parseDestination, at as STOP_WATCHING_TOOL_NAME, b as listWorkspaces, bt as createPluginLogger, c as getPluginTools, dt as findMatchingWatches, ft as listWatches, g as createWorkspace, ht as getDashboardTaskLink, it as RESOURCE_WATCH_TOOL_SOURCE, j as workspaceRepoCheckoutPath, k as getWorkspaceSnapshotBuilder, l as getPluginUserPromptContributions, lt as createWatch, mt as getDashboardConversationLink, nt as RESOURCE_SUBSCRIPTION_DEFAULT_TTL_MS, ot as cancelSubscriptions, pt as JUNIOR_THREAD_STATE_TTL_MS, r as createPluginHookRunner, s as getPluginSystemPromptContributions, st as cancelWatch, tt as getSlackToolContext, u as getPlugins, ut as deliverWatch, v as getWorkspace, w as loadSnapshotsForProfile, x as updateWorkspace, y as getWorkspaceByName, z as SlackActionError } from "./agent-hooks-BYZAFpgB.js";
+import { A as tryWorkspaceRepoCheckoutPath, B as downloadPrivateSlackFile, C as invalidateReadySnapshot, D as SANDBOX_RUNTIME, E as setWorkspaceSnapshotBuild, Gt as getDb, Ht as getConversationEventStore, J as withSlackRetries, K as normalizeSlackConversationId, Kt as getSqlExecutor, M as resolveChannelCapabilities, O as deleteWorkspaceSnapshotBuilders, Q as readActorIdentity, S as WorkspaceValidationError, T as setWorkspaceSnapshot, U as getSlackClient, Ut as getConversationMessageSearchStore, V as getFilePermalink, W as isConversationScopedChannel, Wt as getConversationStore, _ as deleteWorkspace, at as STOP_WATCHING_TOOL_NAME, b as listWorkspaces, bt as createPluginLogger, c as getPluginTools, dt as findMatchingWatches, en as addAgentTurnUsage, ft as listWatches, g as createWorkspace, ht as getDashboardTaskLink, in as hasAgentTurnUsage, it as RESOURCE_WATCH_TOOL_SOURCE, j as workspaceRepoCheckoutPath, k as getWorkspaceSnapshotBuilder, l as getPluginUserPromptContributions, lt as createWatch, mt as getDashboardConversationLink, nt as RESOURCE_SUBSCRIPTION_DEFAULT_TTL_MS, ot as cancelSubscriptions, pt as JUNIOR_THREAD_STATE_TTL_MS, r as createPluginHookRunner, s as getPluginSystemPromptContributions, st as cancelWatch, tt as getSlackToolContext, u as getPlugins, un as parseDestination, ut as deliverWatch, v as getWorkspace, w as loadSnapshotsForProfile, x as updateWorkspace, y as getWorkspaceByName, z as SlackActionError } from "./agent-hooks-B2Yt2b88.js";
 import { n as juniorDestinations } from "./destinations-BeBiJeEM.js";
-import { D as juniorArtifacts, S as juniorAttachments, T as juniorIdentities, a as juniorSchedulerRuns, d as AGENT_INVOCATION_MAILBOX_STATUSES, g as juniorConversationBriefs, w as juniorConversations, y as juniorConversationAnnotations } from "./executor-C5onDgaC.js";
-import { A as briefLinkSchema, F as KNOWN_CONVERSATION_EVENT_TYPES, G as instructionProvenanceFor, K as sameActorIdentity, M as conversationBriefSchema, U as contextProvenance, W as instructionActors, j as briefOutcomeStatusSchema } from "./conversation-AA4R1VUn.js";
+import { D as juniorIdentities, E as juniorConversations, a as juniorSchedulerRuns, d as AGENT_INVOCATION_MAILBOX_STATUSES, g as juniorConversationBriefs, k as juniorArtifacts, w as juniorAttachments, x as juniorConversationAnnotations } from "./executor-CaVeGYeA.js";
+import { A as briefLinkSchema, G as sameActorIdentity, H as contextProvenance, M as conversationBriefSchema, P as KNOWN_CONVERSATION_EVENT_TYPES, U as instructionActors, W as instructionProvenanceFor, j as briefOutcomeStatusSchema } from "./conversation-CRWntH-A.js";
 import { a as listReferenceFiles, c as soulPathCandidates, l as worldPathCandidates } from "./package-discovery-7a9YqLhE.js";
-import { a as resolvePluginCommandEnv, c as getOAuthProviderErrorAttributes, i as resolveAuthTokenPlaceholder, o as OAuthProviderError, s as fetchWithBoundedOAuthErrorBodies, u as CredentialUnavailableError } from "./registry-BiaaVqDO.js";
-import { n as pluginCatalogRuntime } from "./catalog-runtime-Ddk0rxU3.js";
-import { a as parseSkillInvocation, n as findSkillByName, r as loadSkillsByName, t as discoverSkills } from "./skills-DNxkkZnA.js";
-import { A as normalizeToLf$1, At as retainRuntimeTurnContext, B as openConversationProjection, C as DEFAULT_SEARCH_COMMAND_TIMEOUT_MS, Ct as hasRuntimeTurnContext, D as getRipgrepSearchLocation, Dt as isToolResultError, E as collectFiles, Et as isContinuablePiBoundary, G as recordAuthorizationRequested, H as recordAttachmentsDelivered, I as loadConnectedMcpProviders, K as recordGuardianActionReviewed, L as loadConversationProjection, M as resolveWorkspacePath, Mt as trimTrailingAssistantMessages, N as truncateText$1, Nt as TURN_CONTEXT_TAG, O as isMissingPathError, Ot as isToolResultMessage, S as resolveRepositoryInstructionsForDirectories, St as getUserMessageInstructionText, T as RIPGREP_EXCLUDED_GLOBS, Tt as isAssistantMessage, V as recordAgentsInstructionsUpdated, X as recordTurnRoute, Y as recordToolExecutionStarted, _ as AGENTS_REPLACEMENT_NOTICE, _t as historyItemFromPiMessage, b as listRepositoryDirectories, bt as getPiMessageRole, f as TurnSliceLimitExceededError, g as AGENTS_REMOVAL_NOTICE, gt as getAgentContextInputLimitTokens, h as isTurnExecutionLimitExceededError, ht as getAgentContextCompactionTriggerTokens, j as positiveInteger$1, jt as stripRuntimeTurnContext, k as missingPathSearchResult, kt as normalizeToolNameFromResult, mt as estimateTextTokens, n as loadTurnCheckpoint, p as assertTurnToolCallLimit, q as recordMcpProviderConnected, r as saveTurnCheckpoint, t as continuableMessages, v as buildAgentsInstructionsMessage, vt as piMessageFromHistoryItem, w as MAX_TEXT_CHARS, x as renderAgentsInstructions, xt as getTerminalAssistantMessages, y as findVisibleAgentsInstructions, yt as extractAssistantText, z as loadTurnRoute } from "./checkpoint-Cto3lP0d.js";
-import { a as hasAgentTurnUsage, c as generateShortTitle, l as resolveTaskTitle, o as ToolInputError, t as addAgentTurnUsage } from "./usage-BU5d5wmV.js";
-import { A as sleep$1, D as fenceLock, E as acquireActiveLock, F as sandboxSkillDir, I as sandboxSkillFile, L as sandboxSkillPathResolution, M as SANDBOX_REPOS_ROOT, N as SANDBOX_SKILLS_ROOT, P as SANDBOX_WORKSPACE_ROOT, _ as workspaceSnapshotNotReadyUserMessage, a as isAbortError, b as buildNonInteractiveShellScript, c as isSandboxCommandStreamInterruptedError, d as isSnapshottingError, f as throwSandboxOperationError, g as isWorkspaceSnapshotNotReadyError, h as getWorkspaceSnapshotNotReadyError, i as ensureDockerDaemon, j as SANDBOX_DATA_ROOT, k as withLock, l as isSandboxMissingError, m as WorkspaceSnapshotNotReadyError, n as hash, o as isAlreadyExistsError, p as wrapSandboxSetupError, r as isStale, s as isSandboxApiTransientError, t as create, u as isSandboxUnavailableError, v as getVercelSandboxCredentials, w as getStateAdapter, x as runNonInteractiveCommand, y as buildCommandScript } from "./profile-DU-tdAeS.js";
-import { $ as workspaceSnapshotFinishedEvent, B as createEventAutomation, C as SCHEDULED_AUTOMATION_SYSTEM_ACTOR, D as eventAutomationMatchesDestination, E as eventAutomationListToolResultSchema, F as effectiveTaskOutcomes, Gt as makeStructuredToolOutput, I as moveTaskOutcomes, L as resolveTaskOutcomes, M as requireEventAutomationSlackContext, N as requireSupportedEventAutomationTrigger, O as eventAutomationToolResult, P as writableEventAutomation, Q as WORKSPACE_SNAPSHOT_READY_EVENT, R as taskOutcomeInputSchema, T as compactEventAutomation, Ut as injectContinuationToolName, V as deleteEventAutomation, W as getEventAutomation, Wt as juniorToolOutputSchema, X as getEventCatalog, Y as saveEventAutomation, Z as WORKSPACE_SNAPSHOT_FAILED_EVENT, at as normalizeCatalogEventIdentifier, c as parseSlackThreadId, ct as registeredEventTypeSchema, et as workspaceSnapshotWatch, f as createScheduledAutomation, g as listScheduledAutomationsForTeam, i as readLiveAttachment, it as hasPluginEventCatalogEntries, j as registeredEventAutomationTriggerSchema, k as eventAutomationToolResultSchema, lt as registeredResourceTypeSchema, nt as eventNamespaceSchema, ot as pluginSupportsEvent, pt as appendAndEnqueueInboundMessage, q as listEventAutomationsForTeam, rt as hasEventCatalogEntries, s as storeAttachments, st as registeredEventMatchSchema, t as incrementStat, tt as eventGuidance, ut as requireSupportedEventMatch, v as readScheduledAutomation, y as saveScheduledAutomation } from "./stats-BvEUKgru.js";
-import { _ as isTurnInputCommitLostError, c as sanitizeAssistantText, f as CooperativeTurnYieldError, l as NO_REPLY_MARKER, n as canReusePendingAuthLink, o as decideReply, p as TurnInputCommitLostError, s as getAssistantReplyText, t as abandonReplacedPendingAuth, u as isNoReplyMarker } from "./pending-auth-CUOLqzoR.js";
-import { C as toolInvocationDestination, S as surfaceFromRun, _ as uploadFilesToConversation, b as assertRunConsistency, h as postSlackMessage, i as formatProviderLabel, m as getSlackMessagePermalink, o as resolveBaseUrl, p as addReactionToMessage, r as deliverOAuthAuthorization, s as startOAuthFlow, v as RetryableDeliveryError, x as isAgentRunFeatureDisabled, y as actorFromRun } from "./agent-runner-Be5K-k2o.js";
-import { r as EVENT_AUTHOR_ID } from "./prompt-C1IA4qkj.js";
-import { a as createSandboxSession, c as postinstall, d as getSandboxResources, i as bindSandboxFileSystem, l as setSnapshotSpanAttributes, n as isMissingError, o as stopSession, r as resolve$1, s as dependencies } from "./resolve-B178kFFr.js";
+import { a as resolvePluginCommandEnv, c as getOAuthProviderErrorAttributes, i as resolveAuthTokenPlaceholder, o as OAuthProviderError, s as fetchWithBoundedOAuthErrorBodies, u as CredentialUnavailableError } from "./registry-BIeo1ST6.js";
+import { n as pluginCatalogRuntime } from "./catalog-runtime-BvN_lNVo.js";
+import { a as parseSkillInvocation, n as findSkillByName, r as loadSkillsByName, t as discoverSkills } from "./skills-DlrAH1on.js";
+import { A as TURN_CONTEXT_TAG, C as isContinuablePiBoundary, D as retainRuntimeTurnContext, E as normalizeToolNameFromResult, H as recordAuthorizationRequested, I as loadTurnRoute, K as recordToolExecutionStarted, L as openConversationProjection, N as loadConnectedMcpProviders, O as stripRuntimeTurnContext, P as loadConversationProjection, R as recordAgentsInstructionsUpdated, S as isAssistantMessage, T as isToolResultMessage, U as recordGuardianActionReviewed, W as recordMcpProviderConnected, _ as getPiMessageRole, b as hasRuntimeTurnContext, dt as estimateTextTokens, f as TurnSliceLimitExceededError, ft as getAgentContextCompactionTriggerTokens, g as extractAssistantText, h as isTurnExecutionLimitExceededError, ht as piMessageFromHistoryItem, k as trimTrailingAssistantMessages, mt as historyItemFromPiMessage, n as loadTurnCheckpoint, p as assertTurnToolCallLimit, pt as getAgentContextInputLimitTokens, q as recordTurnRoute, r as saveTurnCheckpoint, t as continuableMessages, v as getTerminalAssistantMessages, w as isToolResultError, y as getUserMessageInstructionText, z as recordAttachmentsDelivered } from "./checkpoint-EAQ5Xerb.js";
+import { n as generateShortTitle, r as resolveTaskTitle } from "./short-title-CxQHLU3_.js";
+import { A as sleep$1, D as fenceLock, E as acquireActiveLock, F as sandboxSkillDir, I as sandboxSkillFile, L as sandboxSkillPathResolution, M as SANDBOX_REPOS_ROOT, N as SANDBOX_SKILLS_ROOT, P as SANDBOX_WORKSPACE_ROOT, _ as workspaceSnapshotNotReadyUserMessage, a as isAbortError, b as buildNonInteractiveShellScript, c as isSandboxCommandStreamInterruptedError, d as isSnapshottingError, f as throwSandboxOperationError, g as isWorkspaceSnapshotNotReadyError, h as getWorkspaceSnapshotNotReadyError, i as ensureDockerDaemon, j as SANDBOX_DATA_ROOT, k as withLock, l as isSandboxMissingError, m as WorkspaceSnapshotNotReadyError, n as hash, o as isAlreadyExistsError, p as wrapSandboxSetupError, r as isStale, s as isSandboxApiTransientError, t as create, u as isSandboxUnavailableError, v as getVercelSandboxCredentials, w as getStateAdapter, x as runNonInteractiveCommand, y as buildCommandScript } from "./profile-BcZ6EBQ4.js";
+import { $ as workspaceSnapshotFinishedEvent, B as createEventAutomation, C as SCHEDULED_AUTOMATION_SYSTEM_ACTOR, D as eventAutomationMatchesDestination, E as eventAutomationListToolResultSchema, F as effectiveTaskOutcomes, Gt as makeStructuredToolOutput, I as moveTaskOutcomes, Jt as ToolInputError, L as resolveTaskOutcomes, M as requireEventAutomationSlackContext, N as requireSupportedEventAutomationTrigger, O as eventAutomationToolResult, P as writableEventAutomation, Q as WORKSPACE_SNAPSHOT_READY_EVENT, R as taskOutcomeInputSchema, T as compactEventAutomation, Ut as injectContinuationToolName, V as deleteEventAutomation, W as getEventAutomation, Wt as juniorToolOutputSchema, X as getEventCatalog, Y as saveEventAutomation, Z as WORKSPACE_SNAPSHOT_FAILED_EVENT, at as normalizeCatalogEventIdentifier, c as parseSlackThreadId, ct as registeredEventTypeSchema, et as workspaceSnapshotWatch, f as createScheduledAutomation, g as listScheduledAutomationsForTeam, i as readLiveAttachment, it as hasPluginEventCatalogEntries, j as registeredEventAutomationTriggerSchema, k as eventAutomationToolResultSchema, lt as registeredResourceTypeSchema, nt as eventNamespaceSchema, ot as pluginSupportsEvent, pt as appendAndEnqueueInboundMessage, q as listEventAutomationsForTeam, rt as hasEventCatalogEntries, s as storeAttachments, st as registeredEventMatchSchema, t as incrementStat, tt as eventGuidance, ut as requireSupportedEventMatch, v as readScheduledAutomation, y as saveScheduledAutomation } from "./stats-D5OWazLs.js";
+import { _ as isTurnInputCommitLostError, c as sanitizeAssistantText, f as CooperativeTurnYieldError, l as NO_REPLY_MARKER, n as canReusePendingAuthLink, o as decideReply, p as TurnInputCommitLostError, s as getAssistantReplyText, t as abandonReplacedPendingAuth, u as isNoReplyMarker } from "./pending-auth-CDndLOLO.js";
+import { C as toolInvocationDestination, S as surfaceFromRun, _ as uploadFilesToConversation, b as assertRunConsistency, h as postSlackMessage, i as formatProviderLabel, m as getSlackMessagePermalink, o as resolveBaseUrl, p as addReactionToMessage, r as deliverOAuthAuthorization, s as startOAuthFlow, v as RetryableDeliveryError, x as isAgentRunFeatureDisabled, y as actorFromRun } from "./agent-runner-CkNX-ynf.js";
+import { r as EVENT_AUTHOR_ID } from "./prompt-kRlibHYT.js";
+import { a as createSandboxSession, c as postinstall, d as getSandboxResources, i as bindSandboxFileSystem, l as setSnapshotSpanAttributes, n as isMissingError, o as stopSession, r as resolve$1, s as dependencies } from "./resolve-BgAZ4KxF.js";
 import { t as getVercelConversationWorkQueue } from "./vercel-queue-DIkVcfK4.js";
-import { a as getTurnRequestDeadline, n as sendNextWorkspaceSnapshotJob, r as sendWorkspaceSnapshotJob } from "./job-queue-Dpfxr7U6.js";
+import { a as getTurnRequestDeadline, n as sendNextWorkspaceSnapshotJob, r as sendWorkspaceSnapshotJob } from "./job-queue-BhaNX9DL.js";
 import { n as privateTraceResultAttributes } from "./private-trace-result-BLvBjy_e.js";
 import { streamSimple } from "@earendil-works/pi-ai/compat";
 import { createGatewayProvider } from "@ai-sdk/gateway";
@@ -218,6 +218,339 @@ var SkillSandbox = class {
 	}
 };
 //#endregion
+//#region src/chat/tools/sandbox/file-utils.ts
+const MAX_TEXT_CHARS = 6e4;
+const RIPGREP_EXCLUDED_GLOBS = ["!**/.git/**", "!**/node_modules/**"];
+const DEFAULT_SEARCH_COMMAND_TIMEOUT_MS = 3e4;
+const SKIPPED_DIRECTORIES = /* @__PURE__ */ new Set([".git", "node_modules"]);
+/** Normalize model-supplied numeric knobs before they reach filesystem tools. */
+function positiveInteger$1(value) {
+	if (typeof value !== "number" || !Number.isFinite(value)) return;
+	const integer = Math.floor(value);
+	return integer > 0 ? integer : void 0;
+}
+/** Compare and slice text in one line-ending space while preserving callers' output rules. */
+function normalizeToLf$1(value) {
+	return value.replace(/\r\n/g, "\n").replace(/\r/g, "\n");
+}
+/** Keep tool output inside the model-facing budget with an explicit notice. */
+function truncateText$1(value, maxChars = MAX_TEXT_CHARS) {
+	if (value.length <= maxChars) return {
+		content: value,
+		truncated: false
+	};
+	const removed = value.length - maxChars;
+	return {
+		content: `${value.slice(0, maxChars)}\n\n[output truncated: ${removed} characters removed]`,
+		truncated: true
+	};
+}
+/** Detect model-facing missing paths without swallowing sandbox lifecycle/API failures. */
+function isMissingPathError(error) {
+	if (!error || typeof error !== "object") return false;
+	const candidate = error;
+	if (candidate.code === "ENOENT") return true;
+	return typeof candidate.message === "string" && candidate.message.startsWith("File not found:");
+}
+/** Reject an expected missing search/list path through the tool-error channel. */
+function missingPathSearchResult(params) {
+	const textPath = params.displayPath ?? params.missingPath ?? params.path;
+	throw new ToolInputError(`Path not found: ${textPath}`);
+}
+function escapeRegExp(value) {
+	return value.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+}
+function globToRegExp(pattern) {
+	let source = "";
+	for (let index = 0; index < pattern.length; index += 1) {
+		const char = pattern[index];
+		const next = pattern[index + 1];
+		if (char === "*" && next === "*") {
+			if (pattern[index + 2] === "/") {
+				source += "(?:.*/)?";
+				index += 2;
+				continue;
+			}
+			source += ".*";
+			index += 1;
+			continue;
+		}
+		if (char === "*") {
+			source += "[^/]*";
+			continue;
+		}
+		if (char === "?") {
+			source += "[^/]";
+			continue;
+		}
+		source += escapeRegExp(char);
+	}
+	return new RegExp(`^${source}$`);
+}
+function matchesGlob(relativePath, pattern) {
+	const matcher = globToRegExp(pattern);
+	if (matcher.test(relativePath)) return true;
+	if (pattern.startsWith("**/") && matchesGlob(relativePath, pattern.slice(3))) return true;
+	return !pattern.includes("/") && matcher.test(path.posix.basename(relativePath));
+}
+/** Keep sandbox filesystem tools scoped to the mounted workspace root. */
+function resolveWorkspacePath(input, fallback = ".") {
+	const requested = (input ?? "").trim() || fallback;
+	const absolute = requested.startsWith("/") ? requested : path.posix.join(SANDBOX_WORKSPACE_ROOT, requested);
+	const normalized = path.posix.normalize(absolute);
+	if (normalized !== SANDBOX_WORKSPACE_ROOT && !normalized.startsWith(`${SANDBOX_WORKSPACE_ROOT}/`)) throw new ToolInputError(`Path must stay within ${SANDBOX_WORKSPACE_ROOT}: ${requested}`);
+	return normalized;
+}
+/** Anchor ripgrep paths and globs to the requested search root. */
+function getRipgrepSearchLocation(root, rootIsDirectory) {
+	if (rootIsDirectory) return {
+		cwd: root,
+		target: "."
+	};
+	return {
+		cwd: path.posix.dirname(root),
+		target: path.posix.basename(root)
+	};
+}
+/** Share bounded workspace traversal across search tools so their skip rules stay aligned. */
+async function collectFiles(params) {
+	const files = [];
+	let limitReached = false;
+	let missingPath;
+	const visit = async (dirPath) => {
+		if (missingPath) return;
+		let entries;
+		try {
+			entries = (await params.fs.readdir(dirPath)).sort((a, b) => a.toLowerCase().localeCompare(b.toLowerCase()));
+		} catch (error) {
+			if (isMissingPathError(error)) {
+				missingPath = dirPath;
+				return;
+			}
+			throw error;
+		}
+		for (const entry of entries) {
+			const fullPath = path.posix.join(dirPath, entry);
+			let stat;
+			try {
+				stat = await params.fs.stat(fullPath);
+			} catch (error) {
+				if (isMissingPathError(error)) {
+					missingPath = fullPath;
+					return;
+				}
+				throw error;
+			}
+			if (stat.isDirectory()) {
+				if (!SKIPPED_DIRECTORIES.has(entry)) await visit(fullPath);
+				if (limitReached) return;
+				continue;
+			}
+			const relativePath = path.posix.relative(params.root, fullPath);
+			if (!params.pattern || matchesGlob(relativePath, params.pattern)) {
+				files.push(fullPath);
+				if (params.limit && files.length >= params.limit) {
+					limitReached = true;
+					return;
+				}
+			}
+		}
+	};
+	let stat;
+	try {
+		stat = await params.fs.stat(params.root);
+	} catch (error) {
+		if (isMissingPathError(error)) return {
+			files,
+			limitReached: false,
+			missingPath: params.root,
+			missingRoot: true
+		};
+		throw error;
+	}
+	if (!stat.isDirectory()) {
+		const relativePath = path.posix.basename(params.root);
+		return {
+			files: !params.pattern || matchesGlob(relativePath, params.pattern) ? [params.root] : [],
+			limitReached: false,
+			missingRoot: false
+		};
+	}
+	await visit(params.root);
+	return {
+		files,
+		limitReached,
+		missingPath,
+		missingRoot: missingPath === params.root
+	};
+}
+//#endregion
+//#region src/chat/repository-instructions.ts
+const AGENTS_FILENAME = "AGENTS.md";
+const MAX_REPOSITORY_INSTRUCTIONS_BYTES = 32768;
+const AGENTS_REPLACEMENT_NOTICE = "These AGENTS.md instructions replace all previously provided AGENTS.md instructions.";
+const AGENTS_REMOVAL_NOTICE = "The previously provided AGENTS.md instructions no longer apply.";
+async function pathExists(fs, target) {
+	try {
+		await fs.stat(target);
+		return true;
+	} catch (error) {
+		if (isMissingPathError(error)) return false;
+		throw error;
+	}
+}
+async function directoryExists(fs, target) {
+	try {
+		return (await fs.stat(target)).isDirectory();
+	} catch (error) {
+		if (isMissingPathError(error)) return false;
+		throw error;
+	}
+}
+async function findGitRoot(fs, cwd) {
+	let current = cwd;
+	for (;;) {
+		if (await pathExists(fs, path.posix.join(current, ".git"))) return current;
+		if (current === SANDBOX_WORKSPACE_ROOT) return;
+		const parent = path.posix.dirname(current);
+		if (parent === current || parent !== SANDBOX_WORKSPACE_ROOT && !parent.startsWith(`${SANDBOX_WORKSPACE_ROOT}/`)) return;
+		current = parent;
+	}
+}
+/** Return Git worktrees under repos/, sorted for stable instruction capture. */
+async function listRepositoryDirectories(fs) {
+	if (!await directoryExists(fs, SANDBOX_REPOS_ROOT)) return [];
+	const entries = await fs.readdir(SANDBOX_REPOS_ROOT);
+	const repositories = [];
+	for (const entry of entries) {
+		const candidate = path.posix.join(SANDBOX_REPOS_ROOT, entry);
+		if (await directoryExists(fs, candidate) && await pathExists(fs, path.posix.join(candidate, ".git"))) repositories.push(candidate);
+	}
+	return repositories.sort((left, right) => left < right ? -1 : left > right ? 1 : 0);
+}
+async function readInstructionFile(fs, filePath) {
+	try {
+		const content = await fs.readFile(filePath, { encoding: "utf8" });
+		return content.trim() ? content : void 0;
+	} catch (error) {
+		if (isMissingPathError(error)) return;
+		throw error;
+	}
+}
+/** Resolve the effective root-to-cwd AGENTS.md bundle for one selected directory. */
+async function resolveRepositoryInstructions(args) {
+	const gitRoot = await findGitRoot(args.fs, args.cwd);
+	if (!gitRoot) return;
+	const directories = [];
+	let current = args.cwd;
+	for (;;) {
+		directories.push(current);
+		if (current === gitRoot) break;
+		current = path.posix.dirname(current);
+	}
+	directories.reverse();
+	const sources = [];
+	let remaining = Math.max(0, args.maxBytes ?? MAX_REPOSITORY_INSTRUCTIONS_BYTES);
+	for (const directory of directories) {
+		if (remaining <= 0) break;
+		const filePath = path.posix.join(directory, AGENTS_FILENAME);
+		const content = await readInstructionFile(args.fs, filePath);
+		if (!content) continue;
+		const bytes = Buffer.from(content, "utf8");
+		const bounded = bytes.length <= remaining ? content : bytes.subarray(0, remaining).toString("utf8");
+		sources.push({
+			content: bounded,
+			path: filePath
+		});
+		remaining -= Buffer.byteLength(bounded, "utf8");
+	}
+	if (sources.length === 0) return;
+	const text = formatInstructionSources(sources);
+	const fingerprint = createHash("sha256").update(JSON.stringify({
+		directory: args.cwd,
+		sources
+	})).digest("hex");
+	return {
+		directory: args.cwd,
+		fingerprint,
+		sources,
+		text
+	};
+}
+function formatInstructionSources(sources) {
+	if (sources.length === 1) return sources[0].content;
+	return sources.map((source) => `## ${path.posix.dirname(source.path)}\n\n${source.content}`).join("\n\n");
+}
+/** Combine AGENTS.md bundles from one or more repository directories. */
+function mergeRepositoryInstructions(bundles) {
+	if (bundles.length === 0) return;
+	if (bundles.length === 1) return bundles[0];
+	const sources = bundles.flatMap((bundle) => bundle.sources);
+	const text = formatInstructionSources(sources);
+	return {
+		fingerprint: createHash("sha256").update(JSON.stringify({
+			directories: bundles.map((bundle) => bundle.directory ?? null),
+			sources
+		})).digest("hex"),
+		sources,
+		text
+	};
+}
+/** Resolve AGENTS.md instructions for each selected repository directory. */
+async function resolveRepositoryInstructionsForDirectories(args) {
+	const uniqueDirectories = [...new Set(args.directories.filter((directory) => directory === SANDBOX_WORKSPACE_ROOT || directory.startsWith(`${SANDBOX_WORKSPACE_ROOT}/`)))].sort((left, right) => left < right ? -1 : left > right ? 1 : 0);
+	let remaining = MAX_REPOSITORY_INSTRUCTIONS_BYTES;
+	const bundles = [];
+	for (const directory of uniqueDirectories) {
+		if (remaining <= 0) break;
+		const instructions = await resolveRepositoryInstructions({
+			cwd: directory,
+			fs: args.fs,
+			maxBytes: remaining
+		});
+		if (!instructions) continue;
+		bundles.push(instructions);
+		remaining -= instructions.sources.reduce((total, source) => total + Buffer.byteLength(source.content, "utf8"), 0);
+	}
+	return mergeRepositoryInstructions(bundles);
+}
+/** Render repository instructions with Codex's exact model-visible wrapper. */
+function renderAgentsInstructions(args) {
+	return `# AGENTS.md instructions${args.directory ? ` for ${args.directory}` : ""}\n\n<INSTRUCTIONS>\n${args.text}\n</INSTRUCTIONS>`;
+}
+/** Build one user-role repository-instructions context message. */
+function buildAgentsInstructionsMessage(args) {
+	return {
+		role: "user",
+		content: [{
+			type: "text",
+			text: renderAgentsInstructions(args)
+		}],
+		timestamp: args.timestamp ?? Date.now()
+	};
+}
+/** Read the latest effective AGENTS.md state from model-visible history. */
+function findVisibleAgentsInstructions(messages) {
+	for (let messageIndex = messages.length - 1; messageIndex >= 0; messageIndex -= 1) {
+		const message = messages[messageIndex];
+		if (message.role !== "user" || !Array.isArray(message.content)) continue;
+		for (let partIndex = message.content.length - 1; partIndex >= 0; partIndex -= 1) {
+			const part = message.content[partIndex];
+			if (part.type !== "text" || typeof part.text !== "string" || !part.text.startsWith("# AGENTS.md instructions")) continue;
+			const match = part.text.match(/^# AGENTS\.md instructions(?: for ([^\n]+))?\n\n<INSTRUCTIONS>\n([\s\S]*)\n<\/INSTRUCTIONS>$/);
+			if (!match) continue;
+			let text = match[2];
+			if (text === "The previously provided AGENTS.md instructions no longer apply.") return { active: false };
+			if (text.startsWith(`These AGENTS.md instructions replace all previously provided AGENTS.md instructions.\n\n`)) text = text.slice(86);
+			return {
+				active: true,
+				...match[1] ? { directory: match[1] } : void 0,
+				text
+			};
+		}
+	}
+}
+//#endregion
 //#region src/chat/agent/repository-context.ts
 function findRestoredInstructions(messages, provenance) {
 	const restoredContext = messages?.map((message, index) => ({
@@ -5449,9 +5782,8 @@ function createSandbox(options) {
 			if (!runtime.sandboxRef()) return;
 			const { fs } = await runtime.tools();
 			const workspaceDirectories = activeWorkspace?.repos.map((repo) => tryWorkspaceRepoCheckoutPath(repo.repo)).filter((checkoutPath) => Boolean(checkoutPath)).map((checkoutPath) => `${SANDBOX_WORKSPACE_ROOT}/${checkoutPath}`) ?? [];
-			const directories = workspaceDirectories.length > 0 ? workspaceDirectories : await listRepositoryDirectories(fs);
 			return await resolveRepositoryInstructionsForDirectories({
-				directories,
+				directories: workspaceDirectories.length > 0 ? workspaceDirectories : await listRepositoryDirectories(fs),
 				fs
 			});
 		},