@sentry/junior 0.271.0 → 0.273.0

package/dist/{agent-runner-BiHsH8O_.js → agent-runner-D7Qz-lGO.js}

@@ -1,45 +1,45 @@
 import { t as __exportAll } from "./rolldown-runtime-nwUcYXjP.js";
-import { $ as saveEventAutomation, A as readAutomationRuns, Ar as trimTrailingAssistantMessages, B as readScheduledAutomation, Br as estimateTextTokens, Bt as recordMcpProviderConnected, C as readAutomationExecutionByConversationId, Cn as loadTurnCheckpoint, Cr as isAssistantMessage, Ct as requireEventIdentifier, D as readAutomationExecutionStatusHours, Dr as normalizeToolNameFromResult, Dt as loadConnectedMcpProviders, E as readAutomationExecutionStatusDays, Er as isToolResultMessage, Fr as buildDeterministicTurnId, Ft as recordAttachmentsDelivered, Hr as getAgentContextInputLimitTokens, Ht as recordToolExecutionStarted, I as createScheduledAutomation, J as deleteEventAutomation, Jr as historyItemFromPiMessage, L as deleteScheduledAutomation, Mr as SESSION_CONTEXT_SECTION_TAG, Mt as loadTurnRoute, Nr as TURN_CONTEXT_TAG, Nt as openConversationProjection, O as readAutomationExecutionSummaries, Or as retainRuntimeTurnContext, Ot as loadConversationProjection, Pt as recordAgentsInstructionsUpdated, Q as parseEventAutomationRow, Qt as resolveTaskTitle, Rt as recordAuthorizationRequested, Sn as continuableMessages, St as registeredResourceTypeSchema, T as readAutomationExecutionHours, Tr as isToolResultError, Ut as recordTurnRoute, V as saveScheduledAutomation, Vr as getAgentContextCompactionTriggerTokens, Wr as isExperimentalFeatureEnabled, X as getEventAutomation, Xr as getConfigDefaults, Yr as piMessageFromHistoryItem, Z as listDeletedEventAutomationsCreatedBy, Zt as fallbackShortTitle, _n as abandonReplacedPendingAuth, _r as extractAssistantText, _t as eventWatchUnavailable, at as listAutomationVersions, br as getUserMessageInstructionText, bt as registeredEventTriggerProblems, c as getDispatchIdForConversation, cr as TURN_LIMIT_WRAP_UP_MESSAGE, dn as PluginCredentialFailureError, dr as TurnToolCallLimitExceededError, et as setEventAutomationStatus, fn as createPluginAuthOrchestration, ft as automationEventCatalog, gn as AuthorizationPauseError, gt as eventNamespaceSchema, hn as AuthorizationFlowDisabledError, hr as CODEMODE_TOOL_NAME, jr as REQUEST_CONTEXT_SECTION_TAG, k as readAutomationExecutions, kr as stripRuntimeTurnContext, kt as loadLastModelProfile, l as getDispatchInputMessageId, lr as TurnBudgetExceededError, lt as automationRevision, mn as AuthPausePersistenceError, mr as isTurnExecutionLimitExceededError, ot as readAutomationVersion, pn as authorizationId, pr as createTurnLimitGate, pt as describeRegisteredEventTrigger, q as createEventAutomation, rt as automationDefinition, st as sameDefinitionValue, t as resolveConversationRouting, u as getDispatchRecord, un as createPluginEgress, ur as TurnSliceLimitExceededError, ut as requireAutomationRevision, vn as canReusePendingAuthLink, vr as getPiMessageRole, vt as hasEventCatalogEntries, w as readAutomationExecutionDays, wn as saveTurnCheckpoint, wr as isContinuablePiBoundary, wt as requireValidEventTrigger, x as emptyAutomationRunWindows, xr as hasRuntimeTurnContext, xt as registeredEventTypeSchema, yr as getTerminalAssistantMessages, yt as registeredEventMatchSchema, z as parseScheduledAutomationRow, zt as recordGuardianActionReviewed } from "./turn-session-routing-BFVp8TbU.js";
-import { _ as getProviderErrorAttributes, a as completeText, b as getGatewayApiKey, c as COMPACTION_SUMMARY_PREFIX, d as renderCurrentInstruction, f as unwrapCurrentInstruction, g as findProviderError, h as createProviderError, i as completeObject, l as hasCompactedConversationContext, m as ProviderError, n as GEN_AI_SERVER_ADDRESS, p as escapeXml, s as resolveGatewayModel, t as GEN_AI_PROVIDER_NAME, u as isCompactionSummaryText, x as resolveGatewayCredential, y as isProviderRetryError } from "./client-B0jlQSgO.js";
-import { n as botConfig, v as normalizeSlackEmojiName } from "./config-DrAeD8sr.js";
-import { B as isRecord$4, C as summarizeMessageText, E as withSpan, H as toOptionalString, S as setTags, T as withLogContext, _ as runBestEffort, a as extractGenAiUsageSummary, b as setSpanAttributes, f as logError, g as normalizeGenAiFinishReason, h as logWarn, i as extractGenAiUsageAttributes, l as getLogContextAttributesForSpan, m as logInfo, p as logException, u as getTracePropagationHeaders, v as serializeGenAiAttribute, x as setSpanStatus, z as normalizeIdentityEmail } from "./logging-DuwXUuIY.js";
+import { $ as loadTurnCheckpoint, $n as canAgentChangeReviewItem, $r as isAlreadyExistsError, $t as isAssistantMessage, Ai as findMatchingWatches, An as getPluginSystemPromptContributions, Ar as formatProviderLabel, B as createPluginEgress, Ba as matchSlackAttachments, Bn as closeReviewItem, Br as addReactionToMessage, Bt as TurnSliceLimitExceededError, Ci as STOP_WATCHING_TOOL_NAME, Cn as getOAuthAccountProviders, Cr as hash, D as fallbackShortTitle, Di as createTimerWatch, En as createPluginHookRunner, Er as getSandboxProvider, G as AuthorizationFlowDisabledError, Ga as createPluginAnnotations, Gi as getSlackClient, Gn as insertReviewItem, Gt as CODEMODE_TOOL_NAME, H as createPluginAuthOrchestration, Hi as downloadPrivateSlackFile, Hn as dismissOpenReviewItems, Hr as getSlackMessagePermalink, Ir as normalizeSlackReplyMarkdown, J as canReusePendingAuthLink, Ja as defaultTimezone, Ji as normalizeSlackConversationId, Jn as searchReviewItems, Jr as updateSlackMessage, Jt as getPiMessageRole, K as AuthorizationPauseError, Ki as isConversationScopedChannel, Kr as postSlackMessage, Mi as listWatches, Mn as getPluginUserPromptContributions, Mr as resolveBaseUrl, Nn as getPlugins, O as resolveTaskTitle, Oi as createWatch, Pr as escapeSlackMrkdwnText, Q as continuableMessages, Qr as isAbortError, Rr as slackMention, Rt as TURN_LIMIT_WRAP_UP_MESSAGE, Si as RESOURCE_WATCH_TOOL_SOURCE, Sn as createUserTokenStore, Sr as create, Ti as cancelWatch, Tr as ensureDockerDaemon, U as authorizationId, Ui as getFilePermalink, Un as getOpenReviewItemByDedupeKey, Ur as openSlackDirectMessage, Ut as createTurnLimitGate, V as PluginCredentialFailureError, Vi as SlackActionError, Vr as deleteSlackMessage, Vt as TurnToolCallLimitExceededError, W as AuthPausePersistenceError, Wa as saveObjectAnnotations, Wn as getReviewItem, Wt as isTurnExecutionLimitExceededError, Xi as withSlackRetries, Xn as updateReviewItemContent, Xt as getUserMessageInstructionText, Ya as resolveUserTimezone, Yi as runWithSlackInstallationToken, Yr as uploadFilesToConversation, Yt as getTerminalAssistantMessages, Zi as sleep, Zn as PLUGIN_REVIEW_ITEM_KEY_PREFIX, Zt as hasRuntimeTurnContext, _a as sandboxSkillDir, _i as workspaceRepoCheckoutPath, _n as getAgentContextCompactionTriggerTokens, _r as WorkspaceValidationError, a as loadLastModelProfile, ai as workspaceSnapshotNotReadyUserMessage, an as stripRuntimeTurnContext, bi as RESOURCE_SUBSCRIPTION_DEFAULT_TTL_MS, bn as isExperimentalFeatureEnabled, br as setWorkspaceSnapshot, c as loadTurnRoute, ca as buildCommandScript, ci as consumeSandboxEgressPermissionDeniedSignal, cn as SESSION_CONTEXT_SECTION_TAG, cr as resolveAssignee, d as recordAttachmentsDelivered, da as SANDBOX_COMMAND_PATH, dn as buildDeterministicTurnId, dr as deleteWorkspace, ei as throwSandboxOperationError, en as isContinuablePiBoundary, eo as historyItemFromPiMessage, er as canReadReviewItem, et as saveTurnCheckpoint, fa as SANDBOX_DATA_ROOT, fi as buildSandboxEgressNetworkPolicy, fr as getWorkspace, g as recordMcpProviderConnected, ga as SANDBOX_WORKSPACE_ROOT, gi as tryWorkspaceRepoCheckoutPath, gn as estimateTextTokens, gr as updateWorkspace, h as recordGuardianActionReviewed, ha as SANDBOX_SKILLS_ROOT, hi as SANDBOX_RUNTIME, i as loadConversationProjection, ia as getDashboardTaskLink, ii as isWorkspaceSnapshotNotReadyError, in as retainRuntimeTurnContext, io as getConfigDefaults, ir as requireReviewItemLinks, ji as getWatch, jn as getPluginTools, ki as deliverWatch, kr as deliverOAuthAuthorization, l as openConversationProjection, la as buildNonInteractiveShellScript, li as createSandboxEgressCredentialToken, ln as TURN_CONTEXT_TAG, lr as resolveAssignees, m as recordAuthorizationRequested, ma as SANDBOX_REPOS_ROOT, mr as listWorkspaces, ni as WorkspaceSnapshotNotReadyError, nn as isToolResultMessage, no as JUNIOR_NATIVE_EVENT_NAMESPACE, nr as readReviewItemAgentScope, oa as ToolInputError, oi as clearSandboxEgressSignals, on as trimTrailingAssistantMessages, or as EVERYONE_ASSIGNEE, pa as SANDBOX_JUNIOR_ROOT, pi as resolveSandboxCommandEnvironment, pr as getWorkspaceByName, q as abandonReplacedPendingAuth, qt as extractAssistantText, r as loadConnectedMcpProviders, ra as getDashboardReviewItemLink, ri as getWorkspaceSnapshotNotReadyError, rn as normalizeToolNameFromResult, ro as conversationNoteEvent, rr as requireReviewItemAssignees, sa as PluginToolDeniedError, si as consumeSandboxEgressAuthRequiredSignal, sn as REQUEST_CONTEXT_SECTION_TAG, sr as automationCreatorUserId, ta as getDashboardConversationLink, ti as wrapSandboxSetupError, tn as isToolResultError, to as piMessageFromHistoryItem, u as recordAgentsInstructionsUpdated, ua as runNonInteractiveCommand, ur as createWorkspace, v as recordToolExecutionStarted, va as sandboxSkillFile, vi as resolveChannelCapabilities, vn as getAgentContextInputLimitTokens, vr as invalidateReadySnapshot, wi as cancelSubscriptions, wr as isStale, xi as RESOURCE_SUBSCRIPTION_MAX_TTL_MS, xr as setWorkspaceSnapshotBuild, y as recordTurnRoute, ya as sandboxSkillPathResolution, yi as getSlackToolContext, yr as loadSnapshotsForProfile, zt as TurnBudgetExceededError } from "./projection-BOpi891B.js";
+import { S as resolveGatewayCredential, _ as findProviderError, a as completeText, b as isProviderRetryError, c as resolveGatewayModel, d as isCompactionSummaryText, f as renderCurrentInstruction, g as createProviderError, h as ProviderError, i as completeObject, l as COMPACTION_SUMMARY_PREFIX, m as escapeXml, n as GEN_AI_SERVER_ADDRESS, p as unwrapCurrentInstruction, t as GEN_AI_PROVIDER_NAME, u as hasCompactedConversationContext, v as getProviderErrorAttributes, x as getGatewayApiKey } from "./client-DhqbV0Fe.js";
+import { _ as normalizeSlackEmojiName, n as botConfig } from "./config-C6FTd7PX.js";
+import { B as isRecord$4, C as summarizeMessageText, E as withSpan, H as toOptionalString, S as setTags, T as withLogContext, _ as runBestEffort, a as extractGenAiUsageSummary, b as setSpanAttributes, f as logError, g as normalizeGenAiFinishReason, h as logWarn, i as extractGenAiUsageAttributes, l as getLogContextAttributesForSpan, m as logInfo, p as logException, u as getTracePropagationHeaders, v as serializeGenAiAttribute, x as setSpanStatus, z as normalizeIdentityEmail } from "./logging-CNs1e04n.js";
 import { g as withActiveSpan, i as getActiveSpan, m as startInactiveSpan } from "./sentry-MDkYAVPV.js";
-import { a as toCanonicalInputMessage, c as toGenAiPayloadMetadata, i as runWithConversationPrivacy, l as toGenAiPayloadTraceAttributes, o as toCanonicalOutputMessage, r as resolveConversationPrivacy, s as toGenAiMessagesTraceAttributes, t as canExposeConversationPayload } from "./conversation-privacy-D1NhUxyo.js";
+import { a as toCanonicalInputMessage, c as toGenAiPayloadMetadata, i as runWithConversationPrivacy, l as toGenAiPayloadTraceAttributes, o as toCanonicalOutputMessage, r as resolveConversationPrivacy, s as toGenAiMessagesTraceAttributes, t as canExposeConversationPayload } from "./conversation-privacy-BeRgrsph.js";
 import { a as formatModelProfile, c as modelProfileSchema, l as profileConfig, n as ModelProfileNotConfiguredError, o as formatModelProfiles, r as boundProfile, s as modelIdForProfile, u as TURN_REASONING_LEVELS } from "./model-profile-B998sjVd.js";
 import { d as parseSlackChannelReferenceId, f as parseSlackTeamId, h as parseSlackMessageTs, n as createSlackActor, o as isUserActor, p as parseSlackUserId, u as parseSlackChannelId } from "./actor-B4DYygOB.js";
-import { C as getSqlExecutor, M as resolveActorIdentityId, Q as sameDestination, S as getDb, U as addAgentTurnUsage, W as agentTurnCostUsd, X as parseDestination, a as readActorIdentityFromSql, b as getConversationMessageSearchStore, f as identityAvatarUrl, h as readUserAvatarUrls, i as readActorIdentity, j as SYSTEM_IDENTITY_ID, q as hasAgentTurnUsage, x as getConversationStore, y as getConversationEventStore } from "./viewer-D3jhuP66.js";
+import { $ as sameDestination, C as getSqlExecutor, G as agentTurnCostUsd, J as hasAgentTurnUsage, M as SYSTEM_IDENTITY_ID, N as resolveActorIdentityId, S as getDb, W as addAgentTurnUsage, Z as parseDestination, a as readActorIdentityFromSql, b as getConversationMessageSearchStore, f as identityAvatarUrl, h as readUserAvatarUrls, i as readActorIdentity, x as getConversationStore, y as getConversationEventStore } from "./viewer-C6Y1aXjZ.js";
 import { a as juniorAgentInvocations, c as juniorIdentities, d as juniorDestinations, i as juniorAgentBindings, l as juniorUsers, s as juniorConversations } from "./agent-invocations-C1RNOCs8.js";
-import { T as juniorArtifacts, d as juniorAutomations, f as juniorStats, g as juniorConversationBriefs, l as juniorAutomationRuns, s as juniorReviewItemSlackCards, w as juniorAttachments, x as juniorConversationAnnotations } from "./executor-C2cRw0hZ.js";
+import { E as juniorArtifacts, S as juniorConversationAnnotations, T as juniorAttachments, _ as juniorConversationBriefs, d as juniorAutomations, f as juniorStats, l as juniorAutomationRuns, s as juniorReviewItemSlackCards } from "./executor-BafgvQcc.js";
 import { _ as sameActorIdentity, g as instructionProvenanceFor, h as instructionActors, i as KNOWN_CONVERSATION_EVENT_TYPES, m as contextProvenance, n as detectImageMediaType, p as agentInstructionProvenance, r as isVisionImageMediaType } from "./media-U6Tuz6Mi.js";
 import { a as listReferenceFiles, c as soulPathCandidates, l as worldPathCandidates } from "./package-discovery-DJBompdd.js";
-import { c as fetchWithBoundedOAuthErrorBodies, d as actorLogContext, f as credentialContextForActor, g as credentialUserSubjectId, i as resolvePluginHeaderEnvRefs, l as getOAuthProviderErrorAttributes, s as OAuthProviderError } from "./registry-BPtbAVFo.js";
-import { n as pluginCatalogRuntime } from "./catalog-runtime-Bw9kjGVu.js";
-import { a as parseSkillInvocation, i as parseSkillFile, n as findSkillByName, r as loadSkillsByName, t as discoverSkills } from "./skills-DHK7L9Eo.js";
-import { $ as loadSnapshotsForProfile, $n as sandboxSkillDir, $t as workspaceRepoCheckoutPath, A as updateReviewItemContent, An as normalizeSlackConversationId, B as EVERYONE_ASSIGNEE, Bn as getDashboardTaskLink, Bt as clearSandboxEgressSignals, C as getOpenReviewItemByDedupeKey, Cn as SlackActionError, Ct as openSlackDirectMessage, Dn as getSlackClient, Et as postSlackMessage, Ft as wrapSandboxSetupError, G as deleteWorkspace, Gn as buildNonInteractiveShellScript, H as resolveAssignee, Hn as ToolInputError, Ht as consumeSandboxEgressPermissionDeniedSignal, I as readReviewItemAgentScope, Ir as conversationNoteEvent, It as WorkspaceSnapshotNotReadyError, J as listWorkspaces, Jn as SANDBOX_DATA_ROOT, Jt as resolveSandboxCommandEnvironment, K as getWorkspace, Kn as runNonInteractiveCommand, L as requireReviewItemAssignees, Ln as getDashboardConversationLink, Lt as getWorkspaceSnapshotNotReadyError, Mn as withSlackRetries, Mr as JUNIOR_NATIVE_EVENT_NAMESPACE, Mt as isAbortError, N as canAgentChangeReviewItem, Nn as sleep, Nt as isAlreadyExistsError, O as searchReviewItems, On as isConversationScopedChannel, Or as defaultTimezone, Ot as updateSlackMessage, P as canReadReviewItem, Pt as throwSandboxOperationError, Q as invalidateReadySnapshot, Qn as SANDBOX_WORKSPACE_ROOT, Qt as tryWorkspaceRepoCheckoutPath, R as requireReviewItemLinks, Rt as isWorkspaceSnapshotNotReadyError, S as dismissOpenReviewItems, St as getSlackMessagePermalink, T as insertReviewItem, Tn as getFilePermalink, Tr as createPluginAnnotations, U as resolveAssignees, Un as PluginToolDeniedError, Ut as createSandboxEgressCredentialToken, V as automationCreatorUserId, Vt as consumeSandboxEgressAuthRequiredSignal, W as createWorkspace, Wn as buildCommandScript, X as updateWorkspace, Xn as SANDBOX_REPOS_ROOT, Yn as SANDBOX_JUNIOR_ROOT, Z as WorkspaceValidationError, Zn as SANDBOX_SKILLS_ROOT, Zt as SANDBOX_RUNTIME, an as STOP_WATCHING_TOOL_NAME, at as ensureDockerDaemon, b as closeReviewItem, br as matchSlackAttachments, bt as addReactionToMessage, d as getPluginTools, dn as deliverWatch, en as resolveChannelCapabilities, er as sandboxSkillFile, et as setWorkspaceSnapshot, f as getPluginUserPromptContributions, fn as findMatchingWatches, ft as resolveBaseUrl, gt as normalizeSlackReplyMarkdown, in as RESOURCE_WATCH_TOOL_SOURCE, it as isStale, j as PLUGIN_REVIEW_ITEM_KEY_PREFIX, jn as runWithSlackInstallationToken, kr as resolveUserTimezone, kt as uploadFilesToConversation, ln as createTimerWatch, lt as deliverOAuthAuthorization, mn as listWatches, mt as escapeSlackMrkdwnText, n as createUserTokenStore, nn as RESOURCE_SUBSCRIPTION_DEFAULT_TTL_MS, nt as create, o as createPluginHookRunner, on as cancelSubscriptions, ot as getSandboxProvider, p as getPlugins, pn as getWatch, q as getWorkspaceByName, qn as SANDBOX_COMMAND_PATH, qt as buildSandboxEgressNetworkPolicy, r as getOAuthAccountProviders, rn as RESOURCE_SUBSCRIPTION_MAX_TTL_MS, rt as hash, sn as cancelWatch, tn as getSlackToolContext, tr as sandboxSkillPathResolution, tt as setWorkspaceSnapshotBuild, u as getPluginSystemPromptContributions, un as createWatch, ut as formatProviderLabel, vt as slackMention, w as getReviewItem, wn as downloadPrivateSlackFile, wr as saveObjectAnnotations, xt as deleteSlackMessage, zn as getDashboardReviewItemLink, zt as workspaceSnapshotNotReadyUserMessage } from "./credentialed-mh7HBqey.js";
+import { c as fetchWithBoundedOAuthErrorBodies, d as actorLogContext, f as credentialContextForActor, g as credentialUserSubjectId, i as resolvePluginHeaderEnvRefs, l as getOAuthProviderErrorAttributes, s as OAuthProviderError } from "./registry-B-yUrv3h.js";
+import { n as pluginCatalogRuntime } from "./catalog-runtime-TygDsPOU.js";
+import { a as parseSkillInvocation, i as parseSkillFile, n as findSkillByName, r as loadSkillsByName, t as discoverSkills } from "./skills-BbtJSF2-.js";
 import { a as withLock, i as fenceLock } from "./locks-D-0h111u.js";
-import { r as getStateAdapter } from "./adapter-Bqbtr1RV.js";
+import { r as getStateAdapter } from "./adapter-umap1cth.js";
 import { i as isValidTimeZone, r as getZonedDateTimeParts, t as getFirstRunAtMs } from "./cadence-R7Em4RjE.js";
-import { B as removedCardSchema, J as conversationBriefSchema, K as briefLinkSchema, q as briefOutcomeStatusSchema } from "./conversation-AhOVzN_k.js";
-import { r as EVENT_AUTHOR_ID } from "./prompt-BPSdXYXV.js";
-import { A as AgentMessageQueueFullError, F as agentNameSchema, H as TurnInputCommitLostError, I as AGENT_TYPES, K as isTurnInputCommitLostError, M as AgentNameInUseError, N as CHILD_AGENT_RESULTS, P as PARENT_AGENT_TARGET, V as CooperativeTurnYieldError, _ as getLatestAgentInvocationForConversation, d as getAgentInvocationIdForResult, f as getAgentInvocationMessageId, g as getChildAgentLockName, j as AgentMessageTargetError, k as AgentInvocationLimitError, t as NON_TERMINAL_AGENT_INVOCATION_STATUSES, v as invocationFromRow, y as isTerminalAgentInvocation, z as formatAgentTypes } from "./store-Di0E4EvU.js";
-import { a as isNoReplyMarker, i as NO_REPLY_MARKER, n as getAssistantReplyText, r as sanitizeAssistantText, t as decideReply } from "./assistant-reply-DgtX9DaJ.js";
-import { A as automationResultSchema$1, F as remindMissingAutomationResult, P as readAutomationResult, _ as WORKSPACE_SNAPSHOT_FAILED_EVENT, a as EVENT_WAIT_MS, b as workspaceSnapshotWatch, d as getEventCatalog, k as FINISH_AUTOMATION_RUN_TOOL_NAME, n as markConversationsStopped, o as enqueueEventNotification, p as requireSlackChannelMessageScope, t as getConversationStoppedAtMs, v as WORKSPACE_SNAPSHOT_READY_EVENT, w as resolveSlackReplyTarget, y as workspaceSnapshotFinishedEvent } from "./session-stop-DuUB1rwQ.js";
+import { J as briefOutcomeStatusSchema, V as removedCardSchema, Y as conversationBriefSchema, q as briefLinkSchema } from "./conversation-T4oabbBi.js";
+import { r as EVENT_AUTHOR_ID } from "./prompt-B1ySjUyf.js";
+import { A as AgentMessagePausedError, F as CHILD_AGENT_RESULTS, I as PARENT_AGENT_TARGET, J as isTurnInputCommitLostError, L as agentNameSchema, M as AgentMessageTargetError, N as AgentNameInUseError, R as AGENT_TYPES, U as CooperativeTurnYieldError, V as formatAgentTypes, W as TurnInputCommitLostError, _ as invocationFromRow, d as getAgentInvocationMessageId, g as getLatestAgentInvocationForConversation, h as getChildAgentLockName, j as AgentMessageQueueFullError, k as AgentInvocationLimitError, t as NON_TERMINAL_AGENT_INVOCATION_STATUSES, u as getAgentInvocationIdForResult, v as isTerminalAgentInvocation } from "./store-C1xuZcLd.js";
+import { a as isNoReplyMarker, i as NO_REPLY_MARKER, n as getAssistantReplyText, r as sanitizeAssistantText, t as decideReply } from "./assistant-reply-wZ7i4OFa.js";
+import { E as resolveSlackReplyTarget, L as readAutomationResult, M as FINISH_AUTOMATION_RUN_TOOL_NAME, N as automationResultSchema$1, R as remindMissingAutomationResult, _ as slackChannelMessageTrigger, a as EVENT_WAIT_MS, b as workspaceSnapshotFinishedEvent, d as getEventCatalog, n as markConversationsStopped, o as enqueueEventNotification, p as requireSlackChannelMessageScope, t as getConversationStoppedAtMs, v as WORKSPACE_SNAPSHOT_FAILED_EVENT, x as workspaceSnapshotWatch, y as WORKSPACE_SNAPSHOT_READY_EVENT } from "./session-stop-DaT_7tYa.js";
 import { C as userCustomizationTextSchema, b as webMessageId, g as formatUserInputAnswer, h as buttonUserInputField, m as USER_INPUT_NOTE, p as USER_INPUT_LIMITS, s as sumUtcHoursIntoSixHours, v as normalizeUserInputAnswer, x as USER_CUSTOMIZATION_MAX_CHARS, y as userInputRequestSchema } from "./reporting-window-DgHgwQB3.js";
-import { a as setSnapshotSpanAttributes, i as postinstall, n as resolve$1, r as dependencies, s as getSandboxResources } from "./resolve-D44G1jJm.js";
-import { a as getVercelConversationWorkQueue, f as getTurnRequestDeadline, n as sendNextWorkspaceSnapshotJob, r as sendWorkspaceSnapshotJob } from "./job-queue-CEeLYkSj.js";
-import { D as stopConversationWork, n as appendAndEnqueueExclusiveInboundMessage, r as appendAndEnqueueInboundMessage } from "./store-BF2XEeQz.js";
-import { _ as getMcpProviderErrorAttributes, a as serviceAccountOnly, c as createMcpServiceAccountClientProvider, d as PluginMcpClient, f as McpProviderError, g as getMcpAwareTelemetryMessage, h as getMcpAwareErrorType, i as serviceAccountAllows, l as getMcpServiceAccountCredentials, m as McpToolError, p as McpServiceAccountRequiredError, u as McpAuthorizationRequiredError, v as toMcpProviderError } from "./service-account-CHO3YXpt.js";
-import { A as SCHEDULED_AUTOMATION_SYSTEM_ACTOR, D as taskOutcomeInputSchema, E as automationTitleSchema, F as scheduleIntentSchema, I as weekdaySchema, N as ScheduleIntentError, P as compileScheduleIntent, T as automationInstructionToolSchema, k as eventAutomationTriggerSchema, l as automationListQuerySchema } from "./automation-Dwh_xcqM.js";
+import { a as setSnapshotSpanAttributes, i as postinstall, n as resolve$1, r as dependencies, s as getSandboxResources } from "./resolve-DqVtd4Q9.js";
+import { a as getVercelConversationWorkQueue, f as getTurnRequestDeadline, n as sendNextWorkspaceSnapshotJob, r as sendWorkspaceSnapshotJob } from "./job-queue-C4lphW9Y.js";
+import { D as stopConversationWork, n as appendAndEnqueueExclusiveInboundMessage, r as appendAndEnqueueInboundMessage } from "./store-DaxUuOmD.js";
+import { $ as saveEventAutomation, A as readAutomationRuns, B as readScheduledAutomation, C as readAutomationExecutionByConversationId, Ct as requireEventIdentifier, D as readAutomationExecutionStatusHours, E as readAutomationExecutionStatusDays, I as createScheduledAutomation, J as deleteEventAutomation, L as deleteScheduledAutomation, O as readAutomationExecutionSummaries, Q as parseEventAutomationRow, St as registeredResourceTypeSchema, T as readAutomationExecutionHours, V as saveScheduledAutomation, X as getEventAutomation, Z as listDeletedEventAutomationsCreatedBy, _t as eventWatchUnavailable, at as listAutomationVersions, bt as registeredEventTriggerProblems, c as getDispatchIdForConversation, et as setEventAutomationStatus, ft as automationEventCatalog, gt as eventNamespaceSchema, k as readAutomationExecutions, l as getDispatchInputMessageId, lt as automationRevision, ot as readAutomationVersion, pt as describeRegisteredEventTrigger, q as createEventAutomation, rt as automationDefinition, st as sameDefinitionValue, t as resolveConversationRouting, u as getDispatchRecord, ut as requireAutomationRevision, vt as hasEventCatalogEntries, w as readAutomationExecutionDays, wt as requireValidEventTrigger, x as emptyAutomationRunWindows, xt as registeredEventTypeSchema, yt as registeredEventMatchSchema, z as parseScheduledAutomationRow } from "./turn-session-routing-BdCTDq9m.js";
+import { _ as getMcpProviderErrorAttributes, a as serviceAccountOnly, c as createMcpServiceAccountClientProvider, d as PluginMcpClient, f as McpProviderError, g as getMcpAwareTelemetryMessage, h as getMcpAwareErrorType, i as serviceAccountAllows, l as getMcpServiceAccountCredentials, m as McpToolError, p as McpServiceAccountRequiredError, u as McpAuthorizationRequiredError, v as toMcpProviderError } from "./service-account-smdPFWNy.js";
+import { A as SCHEDULED_AUTOMATION_SYSTEM_ACTOR, D as taskOutcomeInputSchema, E as automationTitleSchema, F as scheduleIntentSchema, I as weekdaySchema, N as ScheduleIntentError, P as compileScheduleIntent, T as automationInstructionToolSchema, k as eventAutomationTriggerSchema, l as automationListQuerySchema } from "./automation-yffXcZt9.js";
 import { n as privateTraceResultAttributes } from "./private-trace-result-CE7_lEdq.js";
 import { streamSimple } from "@earendil-works/pi-ai/compat";
 import { createGatewayProvider } from "@ai-sdk/gateway";
-import { generateText } from "ai";
+import { NoImageGeneratedError, generateImage, generateText } from "ai";
 import path from "node:path";
 import { isDeepStrictEqual } from "node:util";
-import { z } from "zod";
 import { createHash, randomBytes, randomInt, randomUUID } from "node:crypto";
+import { z } from "zod";
 import { and, asc, count, desc, eq, exists, gt, gte, inArray, isNotNull, isNull, lt, lte, ne, notExists, notInArray, or, sql } from "drizzle-orm";
-import { PluginToolInputError, createWebSource, eventMatchFieldSchema, eventReachSchema, eventSchema, eventTriggerText, localDestinationSchema, missingToolAnnotationKeys, ownedObjectAnnotationSchema, sourceSchema, stableEventMatchKey, watchResultSchema } from "@sentry/junior-plugin-api";
+import { PluginToolInputError, createWebSource, eventMatchFieldSchema, eventMatchSchema, eventReachSchema, eventSchema, eventTriggerText, localDestinationSchema, missingToolAnnotationKeys, ownedObjectAnnotationSchema, sourceSchema, stableEventMatchKey, watchResultSchema } from "@sentry/junior-plugin-api";
 import { alias } from "drizzle-orm/pg-core";
 import { Agent, estimateContextTokens } from "@earendil-works/pi-agent-core";
 import fs from "node:fs/promises";
@@ -48,6 +48,7 @@ import http from "node:http";
 import dns from "node:dns/promises";
 import net from "node:net";
 import { SignJWT, importPKCS8 } from "jose";
+import { performance as performance$1 } from "node:perf_hooks";
 import { createAssistantMessageEventStream, isRetryableAssistantError } from "@earendil-works/pi-ai";
 import { Bash, defineCommand } from "just-bash";
 import { structuredPatch } from "diff";
@@ -202,172 +203,6 @@ var SkillSandbox = class {
 		throw new Error("No active skill is loaded. Call loadSkill first or pass skill_name explicitly.");
 	}
 };
-// src/chat/tools/sandbox/file-utils.ts
-const MAX_TEXT_CHARS = 6e4;
-const RIPGREP_EXCLUDED_GLOBS = ["!**/.git/**", "!**/node_modules/**"];
-const DEFAULT_SEARCH_COMMAND_TIMEOUT_MS = 3e4;
-const SKIPPED_DIRECTORIES = /* @__PURE__ */ new Set([".git", "node_modules"]);
-/** Normalize model-supplied numeric knobs before they reach filesystem tools. */
-function positiveInteger$1(value) {
-	if (typeof value !== "number" || !Number.isFinite(value)) return;
-	const integer = Math.floor(value);
-	return integer > 0 ? integer : void 0;
-}
-/** Compare and slice text in one line-ending space while preserving callers' output rules. */
-function normalizeToLf$1(value) {
-	return value.replace(/\r\n/g, "\n").replace(/\r/g, "\n");
-}
-/** Keep tool output inside the model-facing budget with an explicit notice. */
-function truncateText$1(value, maxChars = MAX_TEXT_CHARS) {
-	if (value.length <= maxChars) return {
-		content: value,
-		truncated: false
-	};
-	const removed = value.length - maxChars;
-	return {
-		content: `${value.slice(0, maxChars)}\n\n[output truncated: ${removed} characters removed]`,
-		truncated: true
-	};
-}
-/** Detect model-facing missing paths without swallowing sandbox lifecycle/API failures. */
-function isMissingPathError(error) {
-	if (!error || typeof error !== "object") return false;
-	const candidate = error;
-	if (candidate.code === "ENOENT") return true;
-	return typeof candidate.message === "string" && candidate.message.startsWith("File not found:");
-}
-/** Reject an expected missing search/list path through the tool-error channel. */
-function missingPathSearchResult(params) {
-	const textPath = params.displayPath ?? params.missingPath ?? params.path;
-	throw new ToolInputError(`Path not found: ${textPath}`);
-}
-function escapeRegExp(value) {
-	return value.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
-}
-function globToRegExp(pattern) {
-	let source = "";
-	for (let index = 0; index < pattern.length; index += 1) {
-		const char = pattern.charAt(index);
-		const next = pattern[index + 1];
-		if (char === "*" && next === "*") {
-			if (pattern[index + 2] === "/") {
-				source += "(?:.*/)?";
-				index += 2;
-				continue;
-			}
-			source += ".*";
-			index += 1;
-			continue;
-		}
-		if (char === "*") {
-			source += "[^/]*";
-			continue;
-		}
-		if (char === "?") {
-			source += "[^/]";
-			continue;
-		}
-		source += escapeRegExp(char);
-	}
-	return new RegExp(`^${source}$`);
-}
-function matchesGlob(relativePath, pattern) {
-	const matcher = globToRegExp(pattern);
-	if (matcher.test(relativePath)) return true;
-	if (pattern.startsWith("**/") && matchesGlob(relativePath, pattern.slice(3))) return true;
-	return !pattern.includes("/") && matcher.test(path.posix.basename(relativePath));
-}
-/** Keep sandbox filesystem tools scoped to the mounted workspace root. */
-function resolveWorkspacePath(input, fallback = ".") {
-	const requested = (input ?? "").trim() || fallback;
-	const absolute = requested.startsWith("/") ? requested : path.posix.join(SANDBOX_WORKSPACE_ROOT, requested);
-	const normalized = path.posix.normalize(absolute);
-	if (normalized !== SANDBOX_WORKSPACE_ROOT && !normalized.startsWith(`${SANDBOX_WORKSPACE_ROOT}/`)) throw new ToolInputError(`Path must stay within ${SANDBOX_WORKSPACE_ROOT}: ${requested}`);
-	return normalized;
-}
-/** Anchor ripgrep paths and globs to the requested search root. */
-function getRipgrepSearchLocation(root, rootIsDirectory) {
-	if (rootIsDirectory) return {
-		cwd: root,
-		target: "."
-	};
-	return {
-		cwd: path.posix.dirname(root),
-		target: path.posix.basename(root)
-	};
-}
-/** Share bounded workspace traversal across search tools so their skip rules stay aligned. */
-async function collectFiles(params) {
-	const files = [];
-	let limitReached = false;
-	let missingPath;
-	const visit = async (dirPath) => {
-		if (missingPath) return;
-		let entries;
-		try {
-			entries = (await params.fs.readdir(dirPath)).sort((a, b) => a.toLowerCase().localeCompare(b.toLowerCase()));
-		} catch (error) {
-			if (isMissingPathError(error)) {
-				missingPath = dirPath;
-				return;
-			}
-			throw error;
-		}
-		for (const entry of entries) {
-			const fullPath = path.posix.join(dirPath, entry);
-			let stat;
-			try {
-				stat = await params.fs.stat(fullPath);
-			} catch (error) {
-				if (isMissingPathError(error)) {
-					missingPath = fullPath;
-					return;
-				}
-				throw error;
-			}
-			if (stat.isDirectory()) {
-				if (!SKIPPED_DIRECTORIES.has(entry)) await visit(fullPath);
-				if (limitReached) return;
-				continue;
-			}
-			const relativePath = path.posix.relative(params.root, fullPath);
-			if (!params.pattern || matchesGlob(relativePath, params.pattern)) {
-				files.push(fullPath);
-				if (params.limit && files.length >= params.limit) {
-					limitReached = true;
-					return;
-				}
-			}
-		}
-	};
-	let stat;
-	try {
-		stat = await params.fs.stat(params.root);
-	} catch (error) {
-		if (isMissingPathError(error)) return {
-			files,
-			limitReached: false,
-			missingPath: params.root,
-			missingRoot: true
-		};
-		throw error;
-	}
-	if (!stat.isDirectory()) {
-		const relativePath = path.posix.basename(params.root);
-		return {
-			files: !params.pattern || matchesGlob(relativePath, params.pattern) ? [params.root] : [],
-			limitReached: false,
-			missingRoot: false
-		};
-	}
-	await visit(params.root);
-	return {
-		files,
-		limitReached,
-		missingPath,
-		missingRoot: missingPath === params.root
-	};
-}
 // src/chat/repository-instructions.ts
 const AGENTS_FILENAME = "AGENTS.md";
 const MAX_REPOSITORY_INSTRUCTIONS_BYTES = 32768;
@@ -382,81 +217,207 @@ const REPOSITORY_SKILLS_HEADER = [
 ].join("\n");
 const AGENTS_REPLACEMENT_NOTICE = "These AGENTS.md instructions replace all previously provided AGENTS.md instructions.";
 const AGENTS_REMOVAL_NOTICE = "The previously provided AGENTS.md instructions no longer apply.";
-async function pathExists(fs, target) {
-	try {
-		await fs.stat(target);
-		return true;
-	} catch (error) {
-		if (isMissingPathError(error)) return false;
-		throw error;
-	}
+/**
+* Read limit for each AGENTS.md and SKILL.md file. It is 3 bytes past the
+* budget: a UTF-8 character has at most 4 bytes, so a character cut at this
+* limit starts after the budget, and the budgeted text is the same as with a
+* full read.
+*/
+const FILE_READ_LIMIT_BYTES = 32771;
+/**
+* Print every path and file that the instructions read needs, one record per
+* line. The cwd is the workspace root, and all paths are relative to it.
+*
+* Arguments: the file read limit, then `repos` to read every Git worktree in
+* it or "", then one group for each selected directory. A group holds the
+* directories from the selected directory up to the workspace root, then "".
+* A group stops at its first directory with `.git`.
+*
+* Records: `R <dir>` for a Git worktree in repos/, `G <dir>/.git`, `D <path>`
+* for a directory in a skill root, `E <path>` for another entry in a skill
+* root, and `F <base64> <path>` for an AGENTS.md or SKILL.md file. File
+* tests follow symlinks like `stat -L`. Globs skip dot entries like `ls -1`,
+* which the Vercel Sandbox `readdir` runs.
+*/
+const READ_SCRIPT = `
+limit=$1
+repos=$2
+shift 2
+
+nl='
+'
+# A glob result is an entry when it exists. Like the lines of \`ls -1\`, a
+# name with a line break does not name an entry.
+listed() {
+  case $1 in *"$nl"*) return 1 ;; esac
+  [ -e "$1" ] || [ -L "$1" ]
 }
-async function directoryExists(fs, target) {
-	try {
-		return (await fs.stat(target)).isDirectory();
-	} catch (error) {
-		if (isMissingPathError(error)) return false;
-		throw error;
-	}
+
+emit_file() {
+  [ -f "$1" ] || return 0
+  if [ ! -r "$1" ]; then
+    printf 'cannot read %s\\n' "$1" >&2
+    exit 1
+  fi
+  printf 'F '
+  head -c "$limit" < "$1" | base64 | tr -d '\\n'
+  printf ' %s\\n' "$1"
+}
+
+emit_skills() {
+  for entry in "$1/.agents/skills"/* "$1/.claude/skills"/*; do
+    listed "$entry" || continue
+    # The first skill root wins for each name. Skip entries that it shadows.
+    case $entry in
+      "$1/.claude/skills/"*) listed "$1/.agents/skills/\${entry##*/}" && continue ;;
+    esac
+    if [ -d "$entry" ]; then
+      printf 'D %s\\n' "$entry"
+      emit_file "$entry/SKILL.md"
+    else
+      printf 'E %s\\n' "$entry"
+    fi
+  done
 }
-async function findGitRoot(fs, cwd) {
+
+if [ -n "$repos" ]; then
+  for repo in "$repos"/*; do
+    if listed "$repo" && [ -d "$repo" ] && [ -e "$repo/.git" ]; then
+      printf 'R %s\\n' "$repo"
+      set -- "$@" "$repo" ""
+    fi
+  done
+fi
+
+found=
+for dir in "$@"; do
+  if [ -z "$dir" ]; then
+    found=
+  elif [ -z "$found" ]; then
+    emit_file "$dir/AGENTS.md"
+    if [ -e "$dir/.git" ]; then
+      printf 'G %s/.git\\n' "$dir"
+      emit_skills "$dir"
+      found=1
+    fi
+  fi
+done
+`;
+const BASE64_PATTERN = /^[A-Za-z0-9+/]*={0,2}$/;
+function compareStrings(left, right) {
+	return left < right ? -1 : left > right ? 1 : 0;
+}
+/** Directories that the Git root search checks, from cwd up to the workspace root. */
+function gitRootCandidates(cwd) {
+	const candidates = [];
 	let current = cwd;
 	for (;;) {
-		if (await pathExists(fs, path.posix.join(current, ".git"))) return current;
-		if (current === SANDBOX_WORKSPACE_ROOT) return;
+		candidates.push(current);
+		if (current === SANDBOX_WORKSPACE_ROOT) return candidates;
 		const parent = path.posix.dirname(current);
-		if (parent === current || parent !== SANDBOX_WORKSPACE_ROOT && !parent.startsWith(`${SANDBOX_WORKSPACE_ROOT}/`)) return;
+		if (parent === current || parent !== SANDBOX_WORKSPACE_ROOT && !parent.startsWith(`${SANDBOX_WORKSPACE_ROOT}/`)) return candidates;
 		current = parent;
 	}
 }
-/** Return Git worktrees under repos/, sorted for stable instruction capture. */
-async function listRepositoryDirectories(fs) {
-	if (!await directoryExists(fs, SANDBOX_REPOS_ROOT)) return [];
-	const entries = await fs.readdir(SANDBOX_REPOS_ROOT);
-	const repositories = [];
-	for (const entry of entries) {
-		const candidate = path.posix.join(SANDBOX_REPOS_ROOT, entry);
-		if (await directoryExists(fs, candidate) && await pathExists(fs, path.posix.join(candidate, ".git"))) repositories.push(candidate);
+function findGitRoot(tree, cwd) {
+	return gitRootCandidates(cwd).find((directory) => tree.gitMarkers.has(path.posix.join(directory, ".git")));
+}
+function invalidOutput() {
+	return /* @__PURE__ */ new Error("Repository instructions read printed invalid output");
+}
+function parseRepositoryTree(stdout) {
+	const tree = {
+		entries: /* @__PURE__ */ new Map(),
+		files: /* @__PURE__ */ new Map(),
+		gitMarkers: /* @__PURE__ */ new Set(),
+		repositories: []
+	};
+	const lines = stdout.split("\n");
+	if (lines.pop() !== "") throw invalidOutput();
+	for (const line of lines) {
+		const kind = line.slice(0, 2);
+		let target = line.slice(2);
+		let content = "";
+		if (kind === "F ") {
+			const separator = target.indexOf(" ");
+			if (separator < 0) throw invalidOutput();
+			content = target.slice(0, separator);
+			target = target.slice(separator + 1);
+			if (!BASE64_PATTERN.test(content)) throw invalidOutput();
+		}
+		if (!target) throw invalidOutput();
+		const absolute = path.posix.join(SANDBOX_WORKSPACE_ROOT, target);
+		switch (kind) {
+			case "R ":
+				tree.repositories.push(absolute);
+				break;
+			case "G ":
+				tree.gitMarkers.add(absolute);
+				break;
+			case "D ":
+			case "E ": {
+				const root = path.posix.dirname(absolute);
+				const entries = tree.entries.get(root) ?? /* @__PURE__ */ new Map();
+				entries.set(path.posix.basename(absolute), kind === "D ");
+				tree.entries.set(root, entries);
+				break;
+			}
+			case "F ":
+				tree.files.set(absolute, Buffer.from(content, "base64").toString("utf8"));
+				break;
+			default: throw invalidOutput();
+		}
 	}
-	return repositories.sort((left, right) => left < right ? -1 : left > right ? 1 : 0);
+	tree.repositories.sort(compareStrings);
+	return tree;
 }
-async function readInstructionFile(fs, filePath) {
-	try {
-		const content = await fs.readFile(filePath, { encoding: "utf8" });
-		return content.trim() ? content : void 0;
-	} catch (error) {
-		if (isMissingPathError(error)) return;
-		throw error;
-	}
+/** Read what the selected directories need with one sandbox command. */
+async function readRepositoryTree(args) {
+	const relative = (target) => path.posix.relative(SANDBOX_WORKSPACE_ROOT, target) || ".";
+	const result = await args.runCommand({
+		cmd: "sh",
+		args: [
+			"-c",
+			READ_SCRIPT,
+			"sh",
+			String(FILE_READ_LIMIT_BYTES),
+			args.discover ? relative(SANDBOX_REPOS_ROOT) : "",
+			...args.directories.flatMap((directory) => [...gitRootCandidates(directory).map(relative), ""])
+		],
+		cwd: SANDBOX_WORKSPACE_ROOT
+	});
+	if (result.exitCode !== 0) throw new Error(`Repository instructions read failed with exit code ${result.exitCode}: ${result.stderr.trim()}`);
+	return parseRepositoryTree(result.stdout);
 }
-async function readOptionalDirectory(fs, directory) {
-	try {
-		return await fs.readdir(directory);
-	} catch (error) {
-		if (isMissingPathError(error)) return [];
-		throw error;
-	}
+function readInstructionFile(tree, filePath) {
+	const content = tree.files.get(filePath);
+	return content?.trim() ? content : void 0;
 }
 /** Read model-invocable skills from the repository skill directories. */
-async function readRepositorySkills(fs, gitRoot) {
-	const roots = REPOSITORY_SKILL_ROOTS.map((root) => path.posix.join(gitRoot, root));
-	const listings = await Promise.all(roots.map(async (root) => await readOptionalDirectory(fs, root)));
+function readRepositorySkills(tree, gitRoot) {
 	const candidates = /* @__PURE__ */ new Map();
-	listings.forEach((entries, index) => {
-		for (const entry of [...entries].sort()) if (!candidates.has(entry)) candidates.set(entry, path.posix.join(roots[index], entry));
-	});
-	return (await Promise.all([...candidates].map(async ([name, skillDirectory]) => {
-		if (!await directoryExists(fs, skillDirectory)) return;
-		const filePath = path.posix.join(skillDirectory, "SKILL.md");
-		const raw = await readInstructionFile(fs, filePath);
+	for (const root of REPOSITORY_SKILL_ROOTS) {
+		const rootPath = path.posix.join(gitRoot, root);
+		const entries = [...tree.entries.get(rootPath) ?? []].sort(([left], [right]) => compareStrings(left, right));
+		for (const [name, directory] of entries) if (!candidates.has(name)) candidates.set(name, {
+			directory,
+			path: path.posix.join(rootPath, name)
+		});
+	}
+	const skills = [];
+	for (const [name, candidate] of candidates) {
+		if (!candidate.directory) continue;
+		const filePath = path.posix.join(candidate.path, "SKILL.md");
+		const raw = readInstructionFile(tree, filePath);
 		const parsed = raw ? parseSkillFile(raw, name) : void 0;
-		if (!parsed?.ok || parsed.skill.disableModelInvocation) return;
-		return {
+		if (!parsed?.ok || parsed.skill.disableModelInvocation) continue;
+		skills.push({
 			description: parsed.skill.description.replace(/\s+/g, " ").trim(),
 			name,
 			path: filePath
-		};
-	}))).filter((skill) => Boolean(skill)).sort((left, right) => left.name < right.name ? -1 : left.name > right.name ? 1 : 0);
+		});
+	}
+	return skills.sort((left, right) => compareStrings(left.name, right.name));
 }
 function sourceBytes(sources) {
 	return sources.reduce((total, source) => total + Buffer.byteLength(source.content, "utf8"), 0);
@@ -465,7 +426,7 @@ function skillListBytes(skills) {
 	return skills.reduce((total, skill) => total + repositorySkillBytes(skill), 0);
 }
 /** Read root-to-cwd AGENTS.md files within the byte budget. */
-async function readAgentsSources(args) {
+function readAgentsSources(args) {
 	const directories = [];
 	let current = args.cwd;
 	for (;;) {
@@ -479,7 +440,7 @@ async function readAgentsSources(args) {
 	for (const directory of directories) {
 		if (remaining <= 0) break;
 		const filePath = path.posix.join(directory, AGENTS_FILENAME);
-		const content = await readInstructionFile(args.fs, filePath);
+		const content = readInstructionFile(args.tree, filePath);
 		if (!content) continue;
 		const bytes = Buffer.from(content, "utf8");
 		const bounded = bytes.length <= remaining ? content : bytes.subarray(0, remaining).toString("utf8");
@@ -492,11 +453,11 @@ async function readAgentsSources(args) {
 	return sources;
 }
 /** Read repository skills that fit the byte budget, keeping each entry whole. */
-async function readRepositorySkillsWithinBudget(args) {
+function readRepositorySkillsWithinBudget(args) {
 	const skills = [];
 	let remaining = args.maxBytes;
 	if (remaining <= 0) return skills;
-	for (const skill of await readRepositorySkills(args.fs, args.gitRoot)) {
+	for (const skill of readRepositorySkills(args.tree, args.gitRoot)) {
 		const bytes = repositorySkillBytes(skill);
 		if (bytes > remaining) break;
 		skills.push(skill);
@@ -556,19 +517,33 @@ function mergeRepositoryInstructions(bundles) {
 		text
 	};
 }
-/** Resolve AGENTS.md instructions for each selected repository directory. */
-async function resolveRepositoryInstructionsForDirectories(args) {
-	const uniqueDirectories = [...new Set(args.directories.filter((directory) => directory === SANDBOX_WORKSPACE_ROOT || directory.startsWith(`${SANDBOX_WORKSPACE_ROOT}/`)))].sort((left, right) => left < right ? -1 : left > right ? 1 : 0);
+/**
+* Read AGENTS.md instructions and repository skills for the selected
+* directories with one sandbox command. Without directories, use every Git
+* worktree under repos/.
+*/
+async function readRepositoryInstructions(args) {
+	const selected = [...new Set((args.directories ?? []).filter((directory) => directory === SANDBOX_WORKSPACE_ROOT || directory.startsWith(`${SANDBOX_WORKSPACE_ROOT}/`)))].sort(compareStrings);
+	if (args.directories && selected.length === 0) return {
+		directories: args.directories,
+		instructions: void 0
+	};
+	const tree = await readRepositoryTree({
+		directories: selected,
+		discover: !args.directories,
+		runCommand: args.runCommand
+	});
+	const cwds = args.directories ? selected : tree.repositories;
 	let remaining = MAX_REPOSITORY_INSTRUCTIONS_BYTES;
 	const repositories = [];
-	for (const directory of uniqueDirectories) {
-		const gitRoot = await findGitRoot(args.fs, directory);
+	for (const directory of cwds) {
+		const gitRoot = findGitRoot(tree, directory);
 		if (!gitRoot) continue;
-		const sources = await readAgentsSources({
+		const sources = readAgentsSources({
 			cwd: directory,
-			fs: args.fs,
 			gitRoot,
-			maxBytes: remaining
+			maxBytes: remaining,
+			tree
 		});
 		remaining -= sourceBytes(sources);
 		repositories.push({
@@ -579,16 +554,19 @@ async function resolveRepositoryInstructionsForDirectories(args) {
 	}
 	const bundles = [];
 	for (const repository of repositories) {
-		const skills = await readRepositorySkillsWithinBudget({
-			fs: args.fs,
+		const skills = readRepositorySkillsWithinBudget({
 			gitRoot: repository.gitRoot,
-			maxBytes: remaining
+			maxBytes: remaining,
+			tree
 		});
 		remaining -= skillListBytes(skills);
 		const bundle = buildRepositoryInstructions(repository.directory, repository.sources, skills);
 		if (bundle) bundles.push(bundle);
 	}
-	return mergeRepositoryInstructions(bundles);
+	return {
+		directories: args.directories ?? cwds,
+		instructions: mergeRepositoryInstructions(bundles)
+	};
 }
 /** Render repository instructions with Codex's exact model-visible wrapper. */
 function renderAgentsInstructions(args) {
@@ -725,6 +703,7 @@ function buildChatEndAttributes(message, mode) {
 	Object.assign(attributes, extractGenAiUsageAttributes(message));
 	if (message.stopReason) attributes["gen_ai.response.finish_reasons"] = [normalizeGenAiFinishReason(message.stopReason)];
 	if (message.model) attributes["gen_ai.response.model"] = message.model;
+	if (message.responseId) attributes["gen_ai.response.id"] = message.responseId;
 	if (message.stopReason === "error") {
 		const providerError = createProviderError(message.errorMessage ?? "");
 		Object.assign(attributes, getProviderErrorAttributes(providerError));
@@ -761,6 +740,22 @@ function createResponseTiming(requestStartedAtMs) {
 		}
 	};
 }
+function traceResponseHeaders(span, options) {
+	const eventLoopStart = performance$1.eventLoopUtilization();
+	const onResponse = options?.onResponse;
+	return {
+		...options,
+		onResponse: async (response, model) => {
+			try {
+				const vercelId = response.headers["x-vercel-id"];
+				if (vercelId) span.setAttribute("app.ai.gateway.vercel_id", vercelId);
+				const { utilization } = performance$1.eventLoopUtilization(eventLoopStart);
+				span.setAttribute("app.ai.event_loop.utilization", Math.round(utilization * 1e3) / 1e3);
+			} catch {}
+			await onResponse?.(response, model);
+		}
+	};
+}
 function relayStream(source, onEvent) {
 	const relayed = createAssistantMessageEventStream();
 	const finished = (async () => {
@@ -801,7 +796,7 @@ function createTracedStreamFn(baseOrOptions = streamSimple) {
 		});
 		try {
 			const requestStartedAtMs = Date.now();
-			const stream = await withActiveSpan(span, () => Promise.resolve(base(model, context, options)));
+			const stream = await withActiveSpan(span, () => Promise.resolve(base(model, context, traceResponseHeaders(span, options))));
 			const responseTiming = createResponseTiming(requestStartedAtMs);
 			const relay = relayStream(stream, responseTiming.observe);
 			relay.finished.then(() => stream.result()).then((finalMessage) => {
@@ -847,7 +842,7 @@ function shouldEmitDevAgentTrace() {
 	return process.env.NODE_ENV === "development";
 }
 // src/chat/agent-invocations/blocked-report.ts
-/** Blocked report of a child agent. See "Delivery rules" in AGENTS.md. */
+/** Blocked report of a child agent. */
 /** Model-facing tool that ends a child agent run as blocked. */
 const REPORT_BLOCKED_TOOL_NAME = "reportBlocked";
 const blockedReportSchema = z.object({ missing: z.string().trim().min(1) });
@@ -2217,8 +2212,8 @@ function buildTurnContextPrompt(params) {
 /**
 * Conversation notes: short facts that core attaches to a Conversation without
 * starting a Turn. The next Turn shows them to the model in its runtime turn
-* context. A failed Turn also becomes a note for the next Turn. See
-* "Conversation notes" in AGENTS.md.
+* context. A failed Turn also becomes a note for the next Turn. A note is
+* context, never user intent, and only core adds one.
 */
 /**
 * Tell the next Turn that a Turn failed. Pi drops a failed assistant message
@@ -3961,9 +3956,10 @@ function createSandboxRuntime(options) {
 			withSpan: withSandboxSpan
 		});
 	};
+	const ensureDocker = async (targetSandbox) => await withSandboxSpan("sandbox.docker.ensure", "sandbox.docker.ensure", {}, async () => await ensureDockerDaemon(targetSandbox));
 	const prepareSandbox = async (targetSandbox) => {
 		await syncSkills(targetSandbox);
-		await withSandboxSpan("sandbox.docker.ensure", "sandbox.docker.ensure", {}, async () => await ensureDockerDaemon(targetSandbox));
+		await ensureDocker(targetSandbox);
 		await options.onSandboxPrepare?.(targetSandbox);
 	};
 	const applyNetworkPolicy = async (targetSandbox, traceHeaders) => {
@@ -4187,10 +4183,17 @@ function createSandboxRuntime(options) {
 			}
 			throw new Error("sandbox restore failed", { cause: error });
 		}
-		let networkPolicyKey;
 		try {
-			networkPolicyKey = await applyNetworkPolicy(hintedSandbox);
-			await prepareSandbox(hintedSandbox);
+			const steps = await Promise.allSettled([
+				applyNetworkPolicy(hintedSandbox),
+				syncSkills(hintedSandbox),
+				ensureDocker(hintedSandbox)
+			]);
+			const failures = steps.flatMap((step) => step.status === "rejected" ? [step.reason] : []);
+			if (failures.length > 0) throw failures.find((error) => getSandboxProvider().errors.isUnavailable(error)) ?? failures[0];
+			const [policy] = steps;
+			const networkPolicyKey = policy.status === "fulfilled" ? policy.value : void 0;
+			await options.onSandboxPrepare?.(hintedSandbox);
 			dependencyProfileHash = ref.profileHash ?? dependencyProfileHash;
 			await persistSandboxRef({
 				...ref,
@@ -4212,17 +4215,26 @@ function createSandboxRuntime(options) {
 			const cachedSandbox = await tryReuseCachedSandbox();
 			if (cachedSandbox) {
 				setSpanAttributes({ "app.sandbox.acquire.outcome": "memory" });
-				return cachedSandbox;
+				return {
+					session: cachedSandbox,
+					fresh: false
+				};
 			}
 			signal?.throwIfAborted();
 			const hintedSandbox = await tryRestoreHintedSandbox(signal);
 			if (hintedSandbox) {
 				setSpanAttributes({ "app.sandbox.acquire.outcome": "resumed" });
-				return hintedSandbox;
+				return {
+					session: hintedSandbox,
+					fresh: true
+				};
 			}
 			const createdSandbox = await createFreshSandbox(signal);
 			setSpanAttributes({ "app.sandbox.acquire.outcome": "created" });
-			return createdSandbox;
+			return {
+				session: createdSandbox,
+				fresh: true
+			};
 		});
 	};
 	const getOrAcquireSandbox = async (signal) => {
@@ -4378,10 +4390,12 @@ function createSandboxRuntime(options) {
 		};
 	};
 	const ensureReadySandbox = async (signal) => {
-		const session = await getOrAcquireSandbox(signal);
-		signal?.throwIfAborted();
-		await probeSession(session);
+		const { session, fresh } = await getOrAcquireSandbox(signal);
 		signal?.throwIfAborted();
+		if (!fresh) {
+			await probeSession(session);
+			signal?.throwIfAborted();
+		}
 		await extendKeepAlive(session);
 		startKeepAlive(session);
 		return session;
@@ -4410,42 +4424,208 @@ function createSandboxRuntime(options) {
 			} catch (error) {
 				await stopSession(candidate?.session);
 				throw error;
-			} finally {
-				signal?.removeEventListener("abort", stopSwitching);
+			} finally {
+				signal?.removeEventListener("abort", stopSwitching);
+			}
+			const previous = activeSandbox;
+			if (keepAliveTimer) {
+				clearTimeout(keepAliveTimer);
+				keepAliveTimer = void 0;
+			}
+			activeWorkspace = candidate.workspace;
+			dependencyProfileHash = candidate.profileHash;
+			activeSandbox = {
+				session: candidate.session,
+				networkPolicyKey: candidate.networkPolicyKey
+			};
+			startKeepAlive(candidate.session);
+			await stopSession(previous?.session);
+		},
+		async acquire(signal) {
+			return (await getOrAcquireSandbox(signal)).session;
+		},
+		async tools(signal) {
+			return createToolExecutors(await ensureReadySandbox(signal));
+		},
+		async refreshNetworkPolicy(traceHeaders) {
+			const active = activeSandbox;
+			if (!active) return;
+			await applyNetworkPolicy(active.session, traceHeaders);
+		},
+		close() {
+			closed = true;
+			if (keepAliveTimer) {
+				clearTimeout(keepAliveTimer);
+				keepAliveTimer = void 0;
+			}
+		}
+	};
+}
+// src/chat/tools/sandbox/file-utils.ts
+const MAX_TEXT_CHARS = 6e4;
+const RIPGREP_EXCLUDED_GLOBS = ["!**/.git/**", "!**/node_modules/**"];
+const DEFAULT_SEARCH_COMMAND_TIMEOUT_MS = 3e4;
+const SKIPPED_DIRECTORIES = /* @__PURE__ */ new Set([".git", "node_modules"]);
+/** Normalize model-supplied numeric knobs before they reach filesystem tools. */
+function positiveInteger$1(value) {
+	if (typeof value !== "number" || !Number.isFinite(value)) return;
+	const integer = Math.floor(value);
+	return integer > 0 ? integer : void 0;
+}
+/** Compare and slice text in one line-ending space while preserving callers' output rules. */
+function normalizeToLf$1(value) {
+	return value.replace(/\r\n/g, "\n").replace(/\r/g, "\n");
+}
+/** Keep tool output inside the model-facing budget with an explicit notice. */
+function truncateText$1(value, maxChars = MAX_TEXT_CHARS) {
+	if (value.length <= maxChars) return {
+		content: value,
+		truncated: false
+	};
+	const removed = value.length - maxChars;
+	return {
+		content: `${value.slice(0, maxChars)}\n\n[output truncated: ${removed} characters removed]`,
+		truncated: true
+	};
+}
+/** Detect model-facing missing paths without swallowing sandbox lifecycle/API failures. */
+function isMissingPathError(error) {
+	if (!error || typeof error !== "object") return false;
+	const candidate = error;
+	if (candidate.code === "ENOENT") return true;
+	return typeof candidate.message === "string" && candidate.message.startsWith("File not found:");
+}
+/** Reject an expected missing search/list path through the tool-error channel. */
+function missingPathSearchResult(params) {
+	const textPath = params.displayPath ?? params.missingPath ?? params.path;
+	throw new ToolInputError(`Path not found: ${textPath}`);
+}
+function escapeRegExp(value) {
+	return value.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+}
+function globToRegExp(pattern) {
+	let source = "";
+	for (let index = 0; index < pattern.length; index += 1) {
+		const char = pattern.charAt(index);
+		const next = pattern[index + 1];
+		if (char === "*" && next === "*") {
+			if (pattern[index + 2] === "/") {
+				source += "(?:.*/)?";
+				index += 2;
+				continue;
+			}
+			source += ".*";
+			index += 1;
+			continue;
+		}
+		if (char === "*") {
+			source += "[^/]*";
+			continue;
+		}
+		if (char === "?") {
+			source += "[^/]";
+			continue;
+		}
+		source += escapeRegExp(char);
+	}
+	return new RegExp(`^${source}$`);
+}
+function matchesGlob(relativePath, pattern) {
+	const matcher = globToRegExp(pattern);
+	if (matcher.test(relativePath)) return true;
+	if (pattern.startsWith("**/") && matchesGlob(relativePath, pattern.slice(3))) return true;
+	return !pattern.includes("/") && matcher.test(path.posix.basename(relativePath));
+}
+/** Keep sandbox filesystem tools scoped to the mounted workspace root. */
+function resolveWorkspacePath(input, fallback = ".") {
+	const requested = (input ?? "").trim() || fallback;
+	const absolute = requested.startsWith("/") ? requested : path.posix.join(SANDBOX_WORKSPACE_ROOT, requested);
+	const normalized = path.posix.normalize(absolute);
+	if (normalized !== SANDBOX_WORKSPACE_ROOT && !normalized.startsWith(`${SANDBOX_WORKSPACE_ROOT}/`)) throw new ToolInputError(`Path must stay within ${SANDBOX_WORKSPACE_ROOT}: ${requested}`);
+	return normalized;
+}
+/** Anchor ripgrep paths and globs to the requested search root. */
+function getRipgrepSearchLocation(root, rootIsDirectory) {
+	if (rootIsDirectory) return {
+		cwd: root,
+		target: "."
+	};
+	return {
+		cwd: path.posix.dirname(root),
+		target: path.posix.basename(root)
+	};
+}
+/** Share bounded workspace traversal across search tools so their skip rules stay aligned. */
+async function collectFiles(params) {
+	const files = [];
+	let limitReached = false;
+	let missingPath;
+	const visit = async (dirPath) => {
+		if (missingPath) return;
+		let entries;
+		try {
+			entries = (await params.fs.readdir(dirPath)).sort((a, b) => a.toLowerCase().localeCompare(b.toLowerCase()));
+		} catch (error) {
+			if (isMissingPathError(error)) {
+				missingPath = dirPath;
+				return;
+			}
+			throw error;
+		}
+		for (const entry of entries) {
+			const fullPath = path.posix.join(dirPath, entry);
+			let stat;
+			try {
+				stat = await params.fs.stat(fullPath);
+			} catch (error) {
+				if (isMissingPathError(error)) {
+					missingPath = fullPath;
+					return;
+				}
+				throw error;
 			}
-			const previous = activeSandbox;
-			if (keepAliveTimer) {
-				clearTimeout(keepAliveTimer);
-				keepAliveTimer = void 0;
+			if (stat.isDirectory()) {
+				if (!SKIPPED_DIRECTORIES.has(entry)) await visit(fullPath);
+				if (limitReached) return;
+				continue;
 			}
-			activeWorkspace = candidate.workspace;
-			dependencyProfileHash = candidate.profileHash;
-			activeSandbox = {
-				session: candidate.session,
-				networkPolicyKey: candidate.networkPolicyKey
-			};
-			startKeepAlive(candidate.session);
-			await stopSession(previous?.session);
-		},
-		async acquire(signal) {
-			return await getOrAcquireSandbox(signal);
-		},
-		async tools(signal) {
-			return createToolExecutors(await ensureReadySandbox(signal));
-		},
-		async refreshNetworkPolicy(traceHeaders) {
-			const active = activeSandbox;
-			if (!active) return;
-			await applyNetworkPolicy(active.session, traceHeaders);
-		},
-		close() {
-			closed = true;
-			if (keepAliveTimer) {
-				clearTimeout(keepAliveTimer);
-				keepAliveTimer = void 0;
+			const relativePath = path.posix.relative(params.root, fullPath);
+			if (!params.pattern || matchesGlob(relativePath, params.pattern)) {
+				files.push(fullPath);
+				if (params.limit && files.length >= params.limit) {
+					limitReached = true;
+					return;
+				}
 			}
 		}
 	};
+	let stat;
+	try {
+		stat = await params.fs.stat(params.root);
+	} catch (error) {
+		if (isMissingPathError(error)) return {
+			files,
+			limitReached: false,
+			missingPath: params.root,
+			missingRoot: true
+		};
+		throw error;
+	}
+	if (!stat.isDirectory()) {
+		const relativePath = path.posix.basename(params.root);
+		return {
+			files: !params.pattern || matchesGlob(relativePath, params.pattern) ? [params.root] : [],
+			limitReached: false,
+			missingRoot: false
+		};
+	}
+	await visit(params.root);
+	return {
+		files,
+		limitReached,
+		missingPath,
+		missingRoot: missingPath === params.root
+	};
 }
 // src/chat/tools/sandbox/text-edits.ts
 const MAX_DIFF_LINE_CHARS = 4e3;
@@ -5706,13 +5886,12 @@ function createSandbox(options) {
 	return {
 		async captureRepositoryInstructions() {
 			if (!runtime.sandboxRef()) return;
-			const { fs } = await runtime.tools();
+			const { runCommand } = await runtime.tools();
 			const workspaceDirectories = activeWorkspace?.repos.map((repo) => tryWorkspaceRepoCheckoutPath(repo.repo)).filter((checkoutPath) => Boolean(checkoutPath)).map((checkoutPath) => `${SANDBOX_WORKSPACE_ROOT}/${checkoutPath}`) ?? [];
 			return await withSandboxSpan("sandbox.repository_instructions.read", "sandbox.repository_instructions.read", {}, async (setSpanAttributes) => {
-				const directories = workspaceDirectories.length > 0 ? workspaceDirectories : await listRepositoryDirectories(fs);
-				const instructions = await resolveRepositoryInstructionsForDirectories({
-					directories,
-					fs
+				const { directories, instructions } = await readRepositoryInstructions({
+					...workspaceDirectories.length > 0 ? { directories: workspaceDirectories } : void 0,
+					runCommand
 				});
 				setSpanAttributes({
 					"app.repository_instructions.repo_count": directories.length,
@@ -6647,7 +6826,6 @@ async function enrichImagePrompt(rawPrompt) {
 async function shrinkImage(image, maxBytes) {
 	const { default: sharp } = await import("sharp");
 	const { hasAlpha } = await sharp(image.data).metadata();
-	const mimeType = hasAlpha ? "image/webp" : "image/jpeg";
 	for (const edge of RESIZE_LONGEST_EDGES) {
 		const resized = sharp(image.data).rotate().resize({
 			width: edge,
@@ -6659,8 +6837,7 @@ async function shrinkImage(image, maxBytes) {
 		if (data.byteLength <= maxBytes) return {
 			image: {
 				path: image.path,
-				data,
-				mimeType
+				data
 			},
 			width: info.width,
 			height: info.height
@@ -6710,17 +6887,6 @@ function extensionForMediaType$1(mediaType) {
 	if (mediaType === "image/gif") return "gif";
 	return "bin";
 }
-function parseImageGenerationError(status, body, model) {
-	if (!body) return `image generation failed: ${status}`;
-	try {
-		const message = JSON.parse(body).error?.message?.trim();
-		if (!message) return `image generation failed: ${status} ${body}`;
-		if (message.includes("not an image model")) return `image generation failed: configured model "${model}" is not an image generation model. Set AI_IMAGE_MODEL to a compatible image model.`;
-		return `image generation failed: ${status} ${message}`;
-	} catch {
-		return `image generation failed: ${status} ${body}`;
-	}
-}
 /** Create the image tool with sandbox artifact guidance matched to file-send capability. */
 function createImageGenerateTool(hooks, options, deps = {}) {
 	return zodTool({
@@ -6737,8 +6903,10 @@ function createImageGenerateTool(hooks, options, deps = {}) {
 		}),
 		outputSchema: imageGenerateOutputSchema,
 		execute: async ({ prompt, images = [] }) => {
-			const fetchImpl = deps.fetch ?? fetch;
-			const apiKey = await getGatewayApiKey();
+			const gateway = createGatewayProvider({
+				apiKey: await getGatewayApiKey(),
+				...deps.fetch ? { fetch: deps.fetch } : void 0
+			});
 			const model = options.modelId;
 			const { images: inputImages, resized } = await fitImagesToRequest(await Promise.all(images.map(async (path) => ({
 				path,
@@ -6749,58 +6917,26 @@ function createImageGenerateTool(hooks, options, deps = {}) {
 				resize_notice: "Some input images were too large for the image model, so they were resized first. Tell the user which images were resized."
 			} : {};
 			const enrichedPrompt = inputImages.length > 0 ? prompt : await enrichImagePrompt(prompt);
-			const content = inputImages.length > 0 ? [{
-				type: "text",
-				text: enrichedPrompt
-			}, ...inputImages.map((image) => ({
-				type: "image_url",
-				image_url: { url: `data:${image.mimeType};base64,${image.data.toString("base64")}` }
-			}))] : enrichedPrompt;
-			const response = await fetchImpl("https://ai-gateway.vercel.sh/v1/chat/completions", {
-				method: "POST",
-				headers: {
-					"content-type": "application/json",
-					authorization: `Bearer ${apiKey}`
-				},
-				body: JSON.stringify({
-					model,
-					messages: [{
-						role: "user",
-						content
-					}],
-					modalities: ["image"]
-				})
-			});
-			if (!response.ok) {
-				const text = await response.text();
-				throw new Error(parseImageGenerationError(response.status, text, model));
-			}
-			const payload = await response.json();
-			const uploads = [];
-			const generatedImages = payload.choices?.[0]?.message?.images ?? [];
-			for (const [index, image] of generatedImages.entries()) {
-				let bytes = null;
-				let mimeType = "image/png";
-				const url = image.image_url?.url;
-				if (typeof url === "string" && url.startsWith("data:")) {
-					const match = url.match(/^data:([^;,]+);base64,(.+)$/);
-					if (!match) continue;
-					mimeType = match[1] ?? mimeType;
-					bytes = Buffer.from(match[2] ?? "", "base64");
-				} else if (typeof url === "string" && url.length > 0) {
-					const fetched = await fetchImpl(url);
-					if (!fetched.ok) continue;
-					mimeType = fetched.headers.get("content-type") ?? mimeType;
-					bytes = Buffer.from(await fetched.arrayBuffer());
-				}
-				if (!bytes) continue;
-				const extension = extensionForMediaType$1(mimeType);
-				uploads.push({
-					data: bytes,
-					filename: `generated-image-${Date.now()}-${index + 1}.${extension}`,
-					mimeType
-				});
+			let generatedImages;
+			try {
+				({images: generatedImages} = await generateImage({
+					model: gateway.imageModel(model),
+					prompt: inputImages.length > 0 ? {
+						text: enrichedPrompt,
+						images: inputImages.map((image) => image.data)
+					} : enrichedPrompt,
+					n: 1
+				}));
+			} catch (error) {
+				if (NoImageGeneratedError.isInstance(error)) generatedImages = [];
+				else if (error instanceof Error && error.message.includes("not an image model")) throw new Error(`image generation failed: configured model "${model}" is not an image generation model. Set AI_IMAGE_MODEL to an AI Gateway image model.`);
+				else throw error;
 			}
+			const uploads = generatedImages.map((image, index) => ({
+				data: Buffer.from(image.uint8Array),
+				filename: `generated-image-${Date.now()}-${index + 1}.${extensionForMediaType$1(image.mediaType)}`,
+				mimeType: image.mediaType
+			}));
 			if (uploads.length > 0) {
 				const artifactRefs = await hooks.writeGeneratedArtifacts(uploads);
 				return {
@@ -7448,10 +7584,13 @@ const messageAgentOutputSchema = juniorToolOutputSchema.extend({
 	conversation_id: z.string().min(1).describe("Target conversation ID"),
 	delivery: z.enum(["started", "queued"]).describe("started: the child agent starts work on the message now. queued: the target reads the message at its next step or after its current work.")
 });
-/** Create the tool that sends one message to the parent or a child agent. */
+/**
+* Create the tool that sends one message to the parent, a child agent, or
+* another top-level agent.
+*/
 function createMessageAgentTool(messageAgent) {
 	return zodTool({
-		description: `Send a message to your parent agent or to a child agent that this conversation started. Use it to give an existing child agent more work, an answer, or a correction, and to send your parent agent a finding or a question while you keep working. A message to a child continues its history. If the child is still working, it reads the message at its next step or after its current work, and one result covers both. The result arrives later as a new task in this conversation; do not wait or poll for it. A message to your parent does not end your task. Use spawnAgent only to start a new child agent. Your text is not user approval. A child's action review reads the user's own messages in the root conversation.`,
+		description: `Send a message to your parent agent or to a child agent that this conversation started. Use it to give an existing child agent more work, an answer, or a correction, and to send your parent agent a finding or a question while you keep working. A message to a child continues its history. If the child is still working, it reads the message at its next step or after its current work, and one result covers both. The result arrives later as a new task in this conversation; do not wait or poll for it. A message to your parent does not end your task. A top-level agent (its conversation is not a child agent, such as a Slack thread) can also message another top-level agent by its conversation_id, such as one from slackThreadRead. Both conversations must be public, or both private. A private one also needs the person in this Turn to be a member. The target runs the message as its own task and sends no result. Use spawnAgent only to start a new child agent. Your text is not user approval. A child's action review reads the user's own messages in the root conversation.`,
 		exposure: "modelOnly",
 		annotations: {
 			destructiveHint: false,
@@ -7460,7 +7599,7 @@ function createMessageAgentTool(messageAgent) {
 			readOnlyHint: false
 		},
 		inputSchema: z.object({
-			to: z.string().trim().min(1).describe(`"${PARENT_AGENT_TARGET}" for your parent agent, or the name or conversation_id of a child agent from spawnAgent or listAgents`),
+			to: z.string().trim().min(1).describe(`"${PARENT_AGENT_TARGET}" for your parent agent, the name or conversation_id of a child agent from spawnAgent or listAgents, or the conversation_id of another top-level agent`),
 			text: z.string().trim().min(1).max(MESSAGE_AGENT_TEXT_MAX_LENGTH).describe("Message text. Include all context the target needs.")
 		}).strict(),
 		outputSchema: messageAgentOutputSchema,
@@ -7477,6 +7616,7 @@ function createMessageAgentTool(messageAgent) {
 				});
 			} catch (error) {
 				if (error instanceof AgentMessageTargetError) throw new ToolInputError(`${error.message}. Use listAgents to find a child agent.`, { cause: error });
+				if (error instanceof AgentMessagePausedError) throw new ToolInputError(`${error.message}. Do not send it more messages. Tell the user instead.`, { cause: error });
 				if (error instanceof AgentMessageQueueFullError) throw new ToolInputError(`${error.message}. Wait for its result, then send one message with everything it needs.`, { cause: error });
 				if (error instanceof AgentInvocationLimitError) throw new ToolInputError(`${error.message}. Wait for active children to finish before you give more work.`, { cause: error });
 				throw error;
@@ -8390,7 +8530,6 @@ function renderReviewItemMessage(item, change) {
 			"",
 			item.request && item.answer ? formatUserInputAnswer(item.request, item.answer) : "(no answer)"
 		].join("\n");
-		case "completed": return [`${personName$1(change.user)} marked ${label} done.`, ...question].join("\n");
 		case "dismissed": return [`${personName$1(change.user)} dismissed ${label}.`, ...question].join("\n");
 		case "taken": return [`${personName$1(change.user)} took ${label}. They are now its only assignee.`, ...question].join("\n");
 		case "replied": return [
@@ -9019,7 +9158,7 @@ function createSearchEventTypesTool(catalog) {
 			openWorldHint: false,
 			readOnlyHint: true
 		},
-		description: "Search the event types currently enabled without creating anything. Use only when the user asks what events are supported or the required resource type or event name is unclear. Includes plugin resources and core Workspace snapshot events. namespaces gives the reach of each event. With reach \"all\" or { anyOf }, an event can start an event automation for every resource of its namespace: leave out identifier and resourceType, and narrow it with match filters from that namespace. For { anyOf }, set at least one of those filters. With reach \"resource\", the automation needs an identifier. Use watchEvents for temporary updates in the current conversation; use createAutomation with an event trigger for durable automation. This tool does not watch a resource, create an automation, or list concrete resources.",
+		description: "Search the event types currently enabled without creating anything. Use only when the user asks what events are supported or the required resource type or event name is unclear. Includes plugin resources and core Workspace snapshot events. namespaces gives the reach of each event. An event automation selects its events with match filters from the matchFields of its namespace. With reach \"all\", match can be left out to run for every resource. With { anyOf }, match must set at least one of those filters. With reach \"resource\", only watchEvents can use the event. Use watchEvents for temporary updates in the current conversation; use createAutomation with an event trigger for durable automation. This tool does not watch a resource, create an automation, or list concrete resources.",
 		inputSchema: z.object({
 			query: z.string().nullable().describe("Optional terms matching a namespace, resource type, or event name. Resource types that match more terms come first. Empty lists all enabled event types.").optional(),
 			namespace: eventNamespaceSchema(catalog).nullable().describe("Optional enabled plugin namespace to search within.").optional(),
@@ -9461,11 +9600,16 @@ function requireCredentialStart(automation, isCreator) {
 	if (isCreator || automation.credentialMode !== "creator") return;
 	throw new AutomationEditError(`This ${"schedule" in automation ? "scheduled" : "event"} automation uses its creator's credentials. Only the creator can resume it or run it now. Switch it to system credentials first.`, "credentialMode");
 }
-/** Apply shared title, instruction, outcome, and creator credential rules. */
+/**
+* Apply shared title, instruction, outcome, and creator credential rules.
+* Anyone who can manage the Automation can change any field except turning on
+* creator credentials. A non-creator change to execution or outcomes switches
+* it to system credentials, so creator credential output stays where the
+* creator approved.
+*/
 async function editAutomationFields(current, input, isCreator, changesExecution) {
 	const kind = "schedule" in current ? "scheduled" : "event";
 	if (input.credentialMode === "creator" && !isCreator) throw new AutomationEditError(`Only the ${kind} automation creator can enable creator credential use.`, "credentialMode");
-	if (input.outcomes !== void 0 && !isCreator) throw new AutomationEditError(`Only the ${kind} automation creator can change message destinations.`, "outcomes");
 	let outcomes = current.outcomes;
 	if (input.outcomes !== void 0) {
 		for (const outcome of input.outcomes) if (typeof outcome.destination !== "string" && !current.outcomes.some((stored) => isDeepStrictEqual(stored, outcome))) throw new AutomationEditError("Use the current Destination or the creator for a new message outcome.", "outcomes");
@@ -9479,10 +9623,11 @@ async function editAutomationFields(current, input, isCreator, changesExecution)
 			destination: outcome.destination
 		});
 	}
+	const changesOutcomes = !isDeepStrictEqual(outcomes, current.outcomes);
 	return {
 		title: input.title ?? current.title,
 		task: { text: input.instruction ?? current.task.text },
-		credentialMode: changesExecution && !isCreator ? "system" : input.credentialMode ?? current.credentialMode,
+		credentialMode: (changesExecution || changesOutcomes) && !isCreator ? "system" : input.credentialMode ?? current.credentialMode,
 		outcomes
 	};
 }
@@ -9535,14 +9680,32 @@ function registeredEventAutomationTriggerSchema(catalog) {
 	const plugins = automationEventCatalog(catalog);
 	return z.object({
 		namespace: eventNamespaceSchema(plugins),
-		identifier: z.string().trim().min(1).max(300).nullable().describe("Exact resource identifier. Use null, with a null resourceType, to run for every resource of the namespace. Only events whose searchEventTypes reach is \"all\" or { anyOf } can run that way, and match must set one of the anyOf filters. When creating, omit it to run for every resource. When updating, omit it to keep the saved identifier.").optional(),
-		resourceType: registeredResourceTypeSchema(plugins).nullable().describe("Resource type of the identifier. Use null when identifier is null. When updating, omit it to keep the saved resource type.").optional(),
 		label: z.string().trim().min(1).max(500),
 		events: z.array(registeredEventTypeSchema(plugins)).min(1),
-		match: registeredEventMatchSchema()
+		match: registeredEventMatchSchema().describe("Filters that select the events, from the matchFields of the namespace. Use the match of a subscribable tool result to select one resource, such as { repo, pullRequest } for one pull request. Leave it out to run for every resource, when the reach of each event allows that. A single value must equal the event data. A list means the event value may be any one entry. For a field with list: true, the event value is a list, and it matches when it includes the value or any entry.")
 	}).strict();
 }
 /**
+* Filter changes of an update. A value sets the filter, and null removes it.
+* A filter that is left out keeps its saved value, so an update cannot make
+* a trigger broader by leaving out a filter.
+*/
+const eventMatchChangesSchema = z.record(z.string(), z.union([eventMatchSchema.valueType, z.null()])).optional().describe("Filter changes, from the matchFields of the namespace. A value sets the filter, null removes it, and a filter that is left out keeps its saved value. When the namespace changes, the saved filters are dropped.");
+/** Build the event trigger that the update tool accepts. */
+function registeredEventAutomationTriggerChangesSchema(catalog) {
+	return registeredEventAutomationTriggerSchema(catalog).extend({ match: eventMatchChangesSchema });
+}
+/**
+* Apply filter changes to the saved trigger, key by key. A change to another
+* namespace starts from no filters.
+*/
+function changedEventMatch(saved, namespace, changes) {
+	const match = { ...namespace === saved.namespace ? saved.match : void 0 };
+	for (const [key, value] of Object.entries(changes ?? {})) if (value === null) delete match[key];
+	else match[key] = value;
+	return Object.keys(match).length > 0 ? match : void 0;
+}
+/**
 * Check a new event-automation trigger with the enabled plugins and return
 * it as it is saved. It names a resource type and an identifier, or neither.
 * The identifier gets its plugin's convention. Events and list values lose
@@ -9655,15 +9818,16 @@ function changesEventAutomationTrigger(current, next) {
 async function editEventAutomation(current, input, isCreator, catalog) {
 	let trigger = current.trigger;
 	if (input.trigger !== void 0) {
-		if (changesEventAutomationTrigger(current.trigger, input.trigger) || current.trigger.resourceType !== input.trigger.resourceType) try {
-			trigger = requireEventAutomationTrigger(catalog, input.trigger);
+		const inputTrigger = slackChannelMessageTrigger(input.trigger, current.destination.channelId);
+		if (changesEventAutomationTrigger(current.trigger, inputTrigger) || current.trigger.resourceType !== inputTrigger.resourceType) try {
+			trigger = requireEventAutomationTrigger(catalog, inputTrigger);
 		} catch (error) {
 			if (error instanceof ToolInputError) throw new AutomationEditError(error.message, "trigger");
 			throw error;
 		}
 		else trigger = {
 			...current.trigger,
-			label: input.trigger.label
+			label: inputTrigger.label
 		};
 	}
 	const changesExecution = input.instruction !== void 0 && input.instruction !== current.task.text || changesEventAutomationTrigger(current.trigger, trigger);
@@ -10173,7 +10337,7 @@ async function readConversationSourceTask(args) {
 // src/chat/automations/edit.ts
 /**
 * Web edits and lifecycle actions. Anyone who can read an Automation can
-* manage it. Creator-only fields and credential rules still apply.
+* manage it. Creator credential rules still apply.
 */
 /** Owners and public Destination readers can manage. Others get not found. */
 async function requireEditableAutomation(user, id) {
@@ -10298,7 +10462,7 @@ async function restorableOutcomes(current, outcomes) {
 			});
 			continue;
 		}
-		if (current.ownedByViewer && !task.outcomes.some((stored) => sameDefinitionValue(stored, outcome))) {
+		if (!task.outcomes.some((stored) => sameDefinitionValue(stored, outcome))) {
 			creatorDm ??= (await resolveTaskOutcomes([{
 				action: "send_message",
 				destination: "task_creator"
@@ -10778,15 +10942,23 @@ const automationSearchResultSchema = juniorToolOutputSchema.extend({
 	automations: z.array(automationResultSchema),
 	truncated: z.boolean()
 }).strict();
+const scheduleTriggerSchema = z.object({
+	type: z.literal("schedule"),
+	schedule: scheduleIntentSchema.describe("When the automation runs. The scheduler computes the exact next run from this intent and the server clock.")
+}).strict();
 /**
-* Build the trigger input of the create and update tools: a schedule, or the
-* events of an enabled plugin.
+* Build the trigger input of the create tool: a schedule, or the events of an
+* enabled plugin.
 */
 function automationTriggerSchema(catalog) {
-	return z.discriminatedUnion("type", [z.object({
-		type: z.literal("schedule"),
-		schedule: scheduleIntentSchema.describe("When the automation runs. The scheduler computes the exact next run from this intent and the server clock.")
-	}).strict(), registeredEventAutomationTriggerSchema(catalog).extend({ type: z.literal("event") })]);
+	return z.discriminatedUnion("type", [scheduleTriggerSchema, registeredEventAutomationTriggerSchema(catalog).extend({ type: z.literal("event") })]);
+}
+/**
+* Build the trigger input of the update tool. An event trigger changes its
+* filters key by key.
+*/
+function automationTriggerChangesSchema(catalog) {
+	return z.discriminatedUnion("type", [scheduleTriggerSchema, registeredEventAutomationTriggerChangesSchema(catalog).extend({ type: z.literal("event") })]);
 }
 /** Return the Automation kind of a trigger input. */
 function triggerKind(trigger) {
@@ -10980,7 +11152,7 @@ function createAutomationTool(context, catalog) {
 				creator: createdBy,
 				destinationChannelId: destination.channelId
 			});
-			const eventTrigger = input.trigger.type === "event" ? requireEventAutomationTrigger(catalog, input.trigger) : void 0;
+			const eventTrigger = input.trigger.type === "event" ? requireEventAutomationTrigger(catalog, slackChannelMessageTrigger(input.trigger, destination.channelId)) : void 0;
 			const toolCallId = options.toolCallId?.trim();
 			if (!toolCallId) throw new Error("Automation creation requires a tool-call identity.");
 			const id = automationIdForToolCall({
@@ -11045,205 +11217,75 @@ function createDeleteAutomationTool(context, catalog) {
 }
 // src/chat/automations/tools/run-now.ts
 /** Create the tool that marks an active scheduled Automation due now. */
-function createRunAutomationNowTool(context, catalog) {
-	return zodTool({
-		approvalMode: "review",
-		annotations: {
-			destructiveHint: false,
-			idempotentHint: false,
-			openWorldHint: true,
-			readOnlyHint: false
-		},
-		executionMode: "sequential",
-		description: "Queue an existing active scheduled automation to run as soon as possible, without changing its schedule. Use when the user asks to run it now. Anyone who can manage the automation can run it. When it uses its creator's credentials, only the creator can run it now. Event automations run only when a matching event arrives, so they cannot run now.",
-		inputSchema: z.object({ automationId: z.string().min(1).describe("ID of the active scheduled automation to run now, from searchAutomations or its dashboard URL.") }).strict(),
-		outputSchema: automationToolResultSchema.omit({ objectCards: true }),
-		async execute({ automationId }) {
-			const current = await requireToolAutomation(await requireToolCaller(context), automationId);
-			if (current.kind !== "scheduled") throw new ToolInputError("Only scheduled automations can run now. Event automations run when a matching event arrives.");
-			const { task, ownedByViewer } = current;
-			if (task.status !== "active") throw new ToolInputError("Scheduled automation must be active before it can be run now.");
-			requireCredentialStart(task, ownedByViewer);
-			const nowMs = Date.now();
-			const next = {
-				...task,
-				updatedAtMs: nowMs,
-				runNowAtMs: nowMs
-			};
-			await saveScheduledAutomation(getDb(), next, automationRevision(task));
-			return { automation: compactAutomation({
-				...current,
-				task: next
-			}, catalog) };
-		}
-	});
-}
-// src/chat/automations/tools/search.ts
-/**
-* Create the tool that searches scheduled and event Automations with the
-* dashboard Automations search. It also finds the Automations that deliver
-* to this Conversation.
-*/
-function createSearchAutomationsTool(context, catalog) {
-	return zodTool({
-		annotations: {
-			destructiveHint: false,
-			idempotentHint: true,
-			openWorldHint: false,
-			readOnlyHint: true
-		},
-		description: "Search scheduled and event automations. It finds the requester's automations, automations in public channels, and automations that deliver to this conversation. Each result has its type and says whether the requester is the creator (isCreator); only the creator can change its credential use. For an event automation, warn when trigger.available is false and explain trigger.problems: the automation stays stored, but a plugin no longer supports its resource type, an event, or a filter. Update the trigger to fix it.",
-		inputSchema: automationSearchInputSchema,
-		outputSchema: automationSearchResultSchema,
-		async execute(input) {
-			const { automations, truncated } = await searchToolAutomations(context, await requireToolCaller(context), input);
-			return {
-				automations: automations.map((candidate) => compactAutomation(candidate, catalog)),
-				truncated
-			};
-		}
-	});
-}
-// src/chat/automations/tools/update.ts
-/** Reject a move while an occurrence is pending or running. */
-async function requireNoIncompleteRun(automationId) {
-	if ((await getDb().select({ id: juniorAutomationRuns.id }).from(juniorAutomationRuns).where(and(eq(juniorAutomationRuns.automationId, automationId), inArray(juniorAutomationRuns.status, ["pending", "running"]))).limit(1)).length > 0) throw new ToolInputError("Scheduled automation cannot be moved while an occurrence is already running. Try again after the current run finishes.");
-}
-/** Edit and save a scheduled Automation, including a move to this Conversation. */
-async function updateScheduled(context, current, input, editor) {
-	const { task, ownedByViewer: isCreator } = current;
-	const destination = input.destination ? requireToolDestination(context) : void 0;
-	const moving = destination !== void 0 && !sameDestination(task.destination, destination);
-	if (destination && !moving && Object.keys(input).every((key) => key === "destination" || key === "credentialMode" && input.credentialMode === task.credentialMode)) return current;
-	if (moving) await requireNoIncompleteRun(task.id);
-	const next = await editScheduledAutomation(task, {
-		title: input.title,
-		instruction: input.instruction,
-		schedule: input.trigger?.type === "schedule" ? input.trigger.schedule : void 0,
-		credentialMode: input.credentialMode,
-		outcomes: moving ? void 0 : input.outcomes
-	}, isCreator, context.now?.() ?? Date.now());
-	if (moving) {
-		next.destination = destination;
-		next.conversationAccess = getConversationAccess(destination, context.visibility);
-		next.outcomes = input.outcomes === void 0 ? moveTaskOutcomes(task.outcomes, task.destination, destination) : await resolveTaskOutcomes(input.outcomes, destination, task.createdBy.slackUserId);
-	}
-	const saved = await saveScheduledAutomation(getDb(), next, automationRevision(task), editor);
-	if (moving) logInfo("scheduled_automation.move.completed", scheduledAutomationAttributes(saved));
-	return {
-		...current,
-		task: saved
-	};
-}
-/** Edit and save an event Automation. */
-async function updateEvent(current, input, editor, catalog) {
-	const { task } = current;
-	const trigger = input.trigger?.type === "event" ? input.trigger : void 0;
-	const next = await editEventAutomation(task, {
-		title: input.title,
-		instruction: input.instruction,
-		trigger: trigger ? {
-			...trigger,
-			identifier: trigger.identifier === void 0 ? task.trigger.identifier : trigger.identifier ?? void 0,
-			resourceType: trigger.resourceType === void 0 ? task.trigger.resourceType : trigger.resourceType ?? void 0
-		} : void 0,
-		outcomes: input.outcomes,
-		credentialMode: input.credentialMode
-	}, current.ownedByViewer, catalog);
-	const saved = await saveEventAutomation(getDb(), next, automationRevision(task), editor);
-	if (!saved) throw new ToolInputError("Automation was not found.");
-	return {
-		...current,
-		task: saved
-	};
-}
-/** Create the tool that edits, pauses, resumes, or moves one Automation. */
-function createUpdateAutomationTool(context, catalog) {
-	const trigger = automationTriggerSchema(catalog);
-	return zodTool({
-		approvalMode: "review",
-		annotations: {
-			destructiveHint: true,
-			idempotentHint: true,
-			openWorldHint: true,
-			readOnlyHint: false
-		},
-		executionMode: "sequential",
-		description: "Update the title, instruction, trigger, outcomes, credential use, or status of a scheduled or event automation. Anyone in the workspace can update an automation in a public channel. Automations in private channels and DMs can be updated from there or by their creator. Only the creator can enable creator credentials, change outcomes, or move it. A non-creator who changes the instruction or trigger switches it to system credentials. The trigger type cannot change. Set destination to \"current_conversation\" to move a scheduled automation to the channel or DM of this conversation.",
-		inputSchema: z.object({
-			automationId: z.string().min(1).describe("ID of the automation, from searchAutomations or its dashboard URL."),
-			title: automationTitleSchema.optional(),
-			instruction: automationInstructionToolSchema.nullable().optional(),
-			trigger: trigger.nullable().describe("Complete replacement trigger of the same type. For an event trigger, omit identifier or resourceType to keep the saved one. Omit or use null to keep the trigger.").optional(),
-			outcomes: z.array(taskOutcomeInputSchema).max(5).nullable().describe("Replacement messages to send after successful work. Use an empty list to send nothing. Omit or use null to leave unchanged.").optional(),
-			credentialMode: z.enum(["system", "creator"]).nullable().describe("Set creator to make the automation creator's credentials available, or system to disable them. Creator always means the automation's createdBy actor, never the current requester. Only that creator may enable creator mode. Omit or use null to leave unchanged.").optional(),
-			status: z.enum(["active", "paused"]).nullable().describe("Set active to resume a paused or blocked automation, or paused to stop it. When it uses its creator's credentials, only the creator can resume it. Omit or use null to leave unchanged.").optional(),
-			destination: z.literal("current_conversation").nullable().describe("Set to \"current_conversation\" to move the creator's scheduled automation into the channel or DM of this conversation. Omit to keep its destination.").optional()
-		}).strict(),
-		prepareArguments(args) {
-			return Object.fromEntries(Object.entries(args).filter(([, value]) => value != null));
-		},
-		outputSchema: automationToolResultSchema,
-		async execute({ automationId, status: requestedStatus, ...fields }) {
-			const input = fields;
-			const status = requestedStatus ?? void 0;
-			const caller = await requireToolCaller(context);
-			const current = await requireToolAutomation(caller, automationId);
-			if (input.trigger && triggerKind(input.trigger) !== current.kind) throw new ToolInputError(`This automation runs on ${current.kind === "scheduled" ? "a schedule" : "events"}. The trigger type cannot change. Create a new automation instead.`);
-			if (Object.keys(input).length === 0 && status === void 0) throw new ToolInputError("Automation update requires a change.");
-			if (current.kind === "scheduled" && current.task.status === "completed") throw new ToolInputError("Completed scheduled automations cannot be updated. Create a new automation instead.");
-			if (input.destination && !current.ownedByViewer) throw new ToolInputError("Only the automation creator can move this automation.");
-			if (input.destination && current.kind === "event") throw new ToolInputError("Event automations cannot move. Create a new event automation in this conversation instead.");
-			const editor = automationEditor(caller.viewer, current);
-			if (input.instruction !== void 0 && input.instruction !== current.task.task.text) requireInstructionReferences(input.instruction, {
-				creator: current.task.createdBy,
-				destinationChannelId: current.task.destination.channelId,
-				requester: editor,
-				previousInstruction: current.task.task.text
-			});
-			let saved = current;
-			if (Object.keys(input).length > 0) saved = current.kind === "scheduled" ? await updateScheduled(context, current, input, editor) : await updateEvent(current, input, editor, catalog);
-			if (status !== void 0 && status !== saved.task.status) saved = await changeAutomationLifecycle(saved, {
-				action: status === "paused" ? "pause" : "resume",
-				revision: automationRevision(saved.task)
-			});
-			return automationToolResult(context.conversationId, saved, catalog);
+function createRunAutomationNowTool(context, catalog) {
+	return zodTool({
+		approvalMode: "review",
+		annotations: {
+			destructiveHint: false,
+			idempotentHint: false,
+			openWorldHint: true,
+			readOnlyHint: false
+		},
+		executionMode: "sequential",
+		description: "Queue an existing active scheduled automation to run as soon as possible, without changing its schedule. Use when the user asks to run it now. Anyone who can manage the automation can run it. When it uses its creator's credentials, only the creator can run it now. Event automations run only when a matching event arrives, so they cannot run now.",
+		inputSchema: z.object({ automationId: z.string().min(1).describe("ID of the active scheduled automation to run now, from searchAutomations or its dashboard URL.") }).strict(),
+		outputSchema: automationToolResultSchema.omit({ objectCards: true }),
+		async execute({ automationId }) {
+			const current = await requireToolAutomation(await requireToolCaller(context), automationId);
+			if (current.kind !== "scheduled") throw new ToolInputError("Only scheduled automations can run now. Event automations run when a matching event arrives.");
+			const { task, ownedByViewer } = current;
+			if (task.status !== "active") throw new ToolInputError("Scheduled automation must be active before it can be run now.");
+			requireCredentialStart(task, ownedByViewer);
+			const nowMs = Date.now();
+			const next = {
+				...task,
+				updatedAtMs: nowMs,
+				runNowAtMs: nowMs
+			};
+			await saveScheduledAutomation(getDb(), next, automationRevision(task));
+			return { automation: compactAutomation({
+				...current,
+				task: next
+			}, catalog) };
 		}
 	});
 }
-// src/chat/tools/definition.ts
-/** Distinguish legacy TypeBox schemas from JSON Schema projected from Zod. */
-function isTypeBoxInputSchema(schema) {
-	return typeof schema === "object" && schema !== null && Kind in schema;
-}
-/** Tool error text for a call to a tool that is disabled in this Turn. */
-function disabledToolMessage(toolName, reason) {
-	return `${toolName} is disabled in this Turn. ${reason} Do not call it again in this Turn.`;
-}
+// src/chat/automations/tools/search.ts
 /**
-* Disable tools for this Turn without removing them from the tool list.
-*
-* The tool adapter rejects their calls, and the Turn context lists them. An
-* unset reason keeps the tools enabled.
+* Create the tool that searches scheduled and event Automations with the
+* dashboard Automations search. It also finds the Automations that deliver
+* to this Conversation.
 */
-function disableTools(tools, reason) {
-	if (!reason) return tools;
-	return Object.fromEntries(Object.entries(tools).map(([name, tool]) => [name, {
-		...tool,
-		disabledReason: reason
-	}]));
+function createSearchAutomationsTool(context, catalog) {
+	return zodTool({
+		annotations: {
+			destructiveHint: false,
+			idempotentHint: true,
+			openWorldHint: false,
+			readOnlyHint: true
+		},
+		description: "Search scheduled and event automations. It finds the requester's automations, automations in public channels, and automations that deliver to this conversation. Each result has its type and says whether the requester is the creator (isCreator); only the creator can change its credential use. For an event automation, warn when trigger.available is false and explain trigger.problems: the automation stays stored, but a plugin no longer supports its resource type, an event, or a filter. Update the trigger to fix it.",
+		inputSchema: automationSearchInputSchema,
+		outputSchema: automationSearchResultSchema,
+		async execute(input) {
+			const { automations, truncated } = await searchToolAutomations(context, await requireToolCaller(context), input);
+			return {
+				automations: automations.map((candidate) => compactAutomation(candidate, catalog)),
+				truncated
+			};
+		}
+	});
 }
-// src/chat/tools/automations.ts
-/** Build the Automation tools. A Turn that no person started cannot use them. */
-function createAutomationTools(context, catalog) {
-	const automationContext = automationToolContext(context);
-	return disableTools({
-		createAutomation: createAutomationTool(automationContext, catalog),
-		searchAutomations: createSearchAutomationsTool(automationContext, catalog),
-		updateAutomation: createUpdateAutomationTool(automationContext, catalog),
-		deleteAutomation: createDeleteAutomationTool(automationContext, catalog),
-		runAutomationNow: createRunAutomationNowTool(automationContext, catalog)
-	}, automationToolsDisabledReason(context));
+// src/chat/conversations/destination-visibility.ts
+/** Read confirmed visibility from the current signal or persisted destination. */
+async function resolveDestinationVisibility(args) {
+	if (args.visibility) return args.visibility;
+	if (args.destination.platform === "local") return "private";
+	return await getConversationStore().getDestinationVisibility({
+		provider: "slack",
+		providerDestinationId: args.destination.channelId,
+		providerTenantId: args.destination.teamId
+	});
 }
 // src/chat/slack/channel.ts
 const replySubtypeSchema = z.object({ subtype: z.string().optional() });
@@ -11457,6 +11499,203 @@ async function resolveOptionalSlackChannelRef(input) {
 	if (input.defaultChannelId) return { channelId: input.defaultChannelId };
 	throw new ToolInputError("Provide `channel_id`, or use this tool in an active Slack channel context.");
 }
+// src/chat/automations/tools/update.ts
+/** Reject a move while an occurrence is pending or running. */
+async function requireNoIncompleteRun(automationId) {
+	if ((await getDb().select({ id: juniorAutomationRuns.id }).from(juniorAutomationRuns).where(and(eq(juniorAutomationRuns.automationId, automationId), inArray(juniorAutomationRuns.status, ["pending", "running"]))).limit(1)).length > 0) throw new ToolInputError("Scheduled automation cannot be moved while an occurrence is already running. Try again after the current run finishes.");
+}
+/**
+* Resolve where a move goes. "current_conversation" is this Conversation. A
+* channel reference must name a public Slack channel in this workspace, and
+* Junior joins it so the Automation can post there.
+*/
+async function requireMoveDestination(context, value) {
+	const here = requireToolDestination(context);
+	if (value === "current_conversation") return {
+		destination: here,
+		visibility: context.visibility
+	};
+	const teamId = parseSlackTeamId(here.teamId);
+	if (!teamId) throw new ToolInputError("Slack workspace is unavailable.");
+	const { channelId, channelName } = await resolveSlackChannelRef({
+		field: "destination",
+		value,
+		teamId
+	});
+	if (channelId === here.channelId) return {
+		destination: here,
+		visibility: context.visibility
+	};
+	const access = await checkSlackChannelReadAccess({
+		currentChannelIds: [],
+		targetChannelId: channelId,
+		teamId
+	});
+	if (!access.allowed) throw new ToolInputError(access.reason === "private" ? "Only a public channel can be named as a destination. To move an automation into a private channel or DM, ask from there." : access.error);
+	if (access.isMember !== true) {
+		const joined = await joinPublicChannelForRead({
+			targetChannelId: channelId,
+			...channelName ? { channelName } : void 0
+		});
+		if (!joined.ok) throw new ToolInputError(joined.error);
+	}
+	const destination = {
+		platform: "slack",
+		teamId,
+		channelId
+	};
+	const name = access.channelName ?? channelName;
+	await getConversationStore().recordDestinationVisibility({
+		destination,
+		...name ? { channelName: name } : void 0,
+		visibility: "public"
+	});
+	return {
+		destination,
+		visibility: "public"
+	};
+}
+/** Edit and save a scheduled Automation, including a move to a new Destination. */
+async function updateScheduled(context, current, input, editor) {
+	const { task, ownedByViewer: isCreator } = current;
+	const target = input.destination ? await requireMoveDestination(context, input.destination) : void 0;
+	const destination = target?.destination;
+	const moving = destination !== void 0 && !sameDestination(task.destination, destination);
+	if (destination && !moving && Object.keys(input).every((key) => key === "destination" || key === "credentialMode" && input.credentialMode === task.credentialMode)) return current;
+	if (moving) await requireNoIncompleteRun(task.id);
+	const next = await editScheduledAutomation(task, {
+		title: input.title,
+		instruction: input.instruction,
+		schedule: input.trigger?.type === "schedule" ? input.trigger.schedule : void 0,
+		credentialMode: input.credentialMode,
+		outcomes: moving ? void 0 : input.outcomes
+	}, isCreator, context.now?.() ?? Date.now());
+	if (moving) {
+		next.destination = destination;
+		next.conversationAccess = getConversationAccess(destination, target?.visibility);
+		if (!isCreator) next.credentialMode = "system";
+		next.outcomes = input.outcomes === void 0 ? moveTaskOutcomes(task.outcomes, task.destination, destination) : await resolveTaskOutcomes(input.outcomes, destination, task.createdBy.slackUserId);
+	}
+	const saved = await saveScheduledAutomation(getDb(), next, automationRevision(task), editor);
+	if (moving) logInfo("scheduled_automation.move.completed", scheduledAutomationAttributes(saved));
+	return {
+		...current,
+		task: saved
+	};
+}
+/** Edit and save an event Automation. */
+async function updateEvent(current, input, editor, catalog) {
+	const { task } = current;
+	const trigger = input.trigger?.type === "event" ? input.trigger : void 0;
+	const next = await editEventAutomation(task, {
+		title: input.title,
+		instruction: input.instruction,
+		trigger: trigger ? {
+			...trigger,
+			...trigger.namespace === task.trigger.namespace ? {
+				identifier: task.trigger.identifier,
+				resourceType: task.trigger.resourceType
+			} : void 0,
+			match: changedEventMatch(task.trigger, trigger.namespace, trigger.match)
+		} : void 0,
+		outcomes: input.outcomes,
+		credentialMode: input.credentialMode
+	}, current.ownedByViewer, catalog);
+	const saved = await saveEventAutomation(getDb(), next, automationRevision(task), editor);
+	if (!saved) throw new ToolInputError("Automation was not found.");
+	return {
+		...current,
+		task: saved
+	};
+}
+/** Create the tool that edits, pauses, resumes, or moves one Automation. */
+function createUpdateAutomationTool(context, catalog) {
+	const trigger = automationTriggerChangesSchema(catalog);
+	return zodTool({
+		approvalMode: "review",
+		annotations: {
+			destructiveHint: true,
+			idempotentHint: true,
+			openWorldHint: true,
+			readOnlyHint: false
+		},
+		executionMode: "sequential",
+		description: "Update the title, instruction, trigger, outcomes, credential use, or status of a scheduled or event automation. Anyone in the workspace can update anything on an automation in a public channel, including its outcomes and destination. Automations in private channels and DMs can be updated from there or by their creator, and only their creator can move them. Only the creator can enable creator credentials. A non-creator who changes the instruction, trigger, outcomes, or destination switches it to system credentials. The trigger type cannot change. Set destination to move a scheduled automation to this conversation or to a public channel.",
+		inputSchema: z.object({
+			automationId: z.string().min(1).describe("ID of the automation, from searchAutomations or its dashboard URL."),
+			title: automationTitleSchema.optional(),
+			instruction: automationInstructionToolSchema.nullable().optional(),
+			trigger: trigger.nullable().describe("Replacement trigger of the same type. For an event trigger, match changes only the filters that it names. Omit or use null to keep the trigger.").optional(),
+			outcomes: z.array(taskOutcomeInputSchema).max(5).nullable().describe("Replacement messages to send after successful work. Use an empty list to send nothing. Omit or use null to leave unchanged.").optional(),
+			credentialMode: z.enum(["system", "creator"]).nullable().describe("Set creator to make the automation creator's credentials available, or system to disable them. Creator always means the automation's createdBy actor, never the current requester. Only that creator may enable creator mode. Omit or use null to leave unchanged.").optional(),
+			status: z.enum(["active", "paused"]).nullable().describe("Set active to resume a paused or blocked automation, or paused to stop it. When it uses its creator's credentials, only the creator can resume it. Omit or use null to leave unchanged.").optional(),
+			destination: slackChannelRefParam.nullable().describe("Where to move a scheduled automation. Set \"current_conversation\" for the channel or DM of this conversation, or name a public Slack channel by id, mention, or known name. Omit to keep its destination.").optional()
+		}).strict(),
+		prepareArguments(args) {
+			return Object.fromEntries(Object.entries(args).filter(([, value]) => value != null));
+		},
+		outputSchema: automationToolResultSchema,
+		async execute({ automationId, status: requestedStatus, ...fields }) {
+			const input = fields;
+			const status = requestedStatus ?? void 0;
+			const caller = await requireToolCaller(context);
+			const current = await requireToolAutomation(caller, automationId);
+			if (input.trigger && triggerKind(input.trigger) !== current.kind) throw new ToolInputError(`This automation runs on ${current.kind === "scheduled" ? "a schedule" : "events"}. The trigger type cannot change. Create a new automation instead.`);
+			if (Object.keys(input).length === 0 && status === void 0) throw new ToolInputError("Automation update requires a change.");
+			if (current.kind === "scheduled" && current.task.status === "completed") throw new ToolInputError("Completed scheduled automations cannot be updated. Create a new automation instead.");
+			if (input.destination && current.kind === "event") throw new ToolInputError("Event automations cannot move. Create a new event automation in this conversation instead.");
+			if (input.destination && !current.ownedByViewer && await resolveDestinationVisibility({ destination: current.task.destination }) !== "public") throw new ToolInputError("Only the creator can move an automation out of a private channel or DM.");
+			const editor = automationEditor(caller.viewer, current);
+			if (input.instruction !== void 0 && input.instruction !== current.task.task.text) requireInstructionReferences(input.instruction, {
+				creator: current.task.createdBy,
+				destinationChannelId: current.task.destination.channelId,
+				requester: editor,
+				previousInstruction: current.task.task.text
+			});
+			let saved = current;
+			if (Object.keys(input).length > 0) saved = current.kind === "scheduled" ? await updateScheduled(context, current, input, editor) : await updateEvent(current, input, editor, catalog);
+			if (status !== void 0 && status !== saved.task.status) saved = await changeAutomationLifecycle(saved, {
+				action: status === "paused" ? "pause" : "resume",
+				revision: automationRevision(saved.task)
+			});
+			return automationToolResult(context.conversationId, saved, catalog);
+		}
+	});
+}
+// src/chat/tools/definition.ts
+/** Distinguish legacy TypeBox schemas from JSON Schema projected from Zod. */
+function isTypeBoxInputSchema(schema) {
+	return typeof schema === "object" && schema !== null && Kind in schema;
+}
+/** Tool error text for a call to a tool that is disabled in this Turn. */
+function disabledToolMessage(toolName, reason) {
+	return `${toolName} is disabled in this Turn. ${reason} Do not call it again in this Turn.`;
+}
+/**
+* Disable tools for this Turn without removing them from the tool list.
+*
+* The tool adapter rejects their calls, and the Turn context lists them. An
+* unset reason keeps the tools enabled.
+*/
+function disableTools(tools, reason) {
+	if (!reason) return tools;
+	return Object.fromEntries(Object.entries(tools).map(([name, tool]) => [name, {
+		...tool,
+		disabledReason: reason
+	}]));
+}
+// src/chat/tools/automations.ts
+/** Build the Automation tools. A Turn that no person started cannot use them. */
+function createAutomationTools(context, catalog) {
+	const automationContext = automationToolContext(context);
+	return disableTools({
+		createAutomation: createAutomationTool(automationContext, catalog),
+		searchAutomations: createSearchAutomationsTool(automationContext, catalog),
+		updateAutomation: createUpdateAutomationTool(automationContext, catalog),
+		deleteAutomation: createDeleteAutomationTool(automationContext, catalog),
+		runAutomationNow: createRunAutomationNowTool(automationContext, catalog)
+	}, automationToolsDisabledReason(context));
+}
 // src/chat/slack/tools/channel-join.ts
 /** Create a tool that joins one public Slack channel. */
 function createSlackChannelJoinTool(context) {
@@ -12388,7 +12627,6 @@ const SLACK_REVIEW_ITEM_VIEW_ID = "junior_review_item";
 const ACTION_ID_PREFIX = "junior_review_item:";
 const CHOICE_ACTION_ID_PREFIX = `${ACTION_ID_PREFIX}choice:`;
 const ANSWER_ACTION_ID = `${ACTION_ID_PREFIX}answer`;
-const DONE_ACTION_ID = `${ACTION_ID_PREFIX}done`;
 const DISMISS_ACTION_ID = `${ACTION_ID_PREFIX}dismiss`;
 const MAX_BODY_CHARS = 3e3;
 const MAX_CONTEXT_CHARS = 3e3;
@@ -12424,13 +12662,7 @@ function controls(item) {
 		text: plainText("Dismiss"),
 		value: item.id
 	};
-	if (item.kind === "notice" || !item.request) return [{
-		type: "button",
-		action_id: DONE_ACTION_ID,
-		style: "primary",
-		text: plainText("Done"),
-		value: item.id
-	}, dismiss];
+	if (item.kind === "notice" || !item.request) return [dismiss];
 	const buttonField = buttonUserInputField(item.request);
 	if (!buttonField) return [{
 		type: "button",
@@ -12475,8 +12707,8 @@ function closedNote(item) {
 /**
 * Render a Review item as one Slack message. An open item shows its
 * controls: one button per choice when one click can answer it, an Answer
-* button that opens a form otherwise, and Done for a notice. A closed item
-* shows a note instead, so nobody can act on it again.
+* button that opens a form otherwise, and only Dismiss for a notice. A
+* closed item shows a note instead, so nobody can act on it again.
 */
 function buildSlackReviewItemCard(item) {
 	const text = itemText(item);
@@ -12544,10 +12776,6 @@ function parseSlackReviewItemClick(action) {
 		kind: "answer",
 		itemId: value
 	};
-	if (action.action_id === DONE_ACTION_ID) return {
-		kind: "done",
-		itemId: value
-	};
 	if (action.action_id === DISMISS_ACTION_ID) return {
 		kind: "dismiss",
 		itemId: value
@@ -16668,6 +16896,12 @@ function createToolActionReview(options) {
 	const pendingRejections = /* @__PURE__ */ new Map();
 	let consecutiveRejections = 0;
 	/**
+	* Rejection state of each attempt, so an attempt counts only once. Pi runs
+	* a `codemode` call alone, so no other attempt changes the count while
+	* its batches run.
+	*/
+	const attempts = /* @__PURE__ */ new Map();
+	/**
 	* Review one action and record its decision. Gate state does not change
 	* here, so concurrent reviews in one batch cannot corrupt it.
 	*/
@@ -16694,8 +16928,50 @@ function createToolActionReview(options) {
 			};
 		}
 	};
+	/**
+	* Count each attempt in the batch once, in batch order. An attempt with a
+	* rejection adds one to the count from before the attempt, also when it
+	* has allowed actions or spans several batches. An attempt with only
+	* allowed actions resets the count. Skipped and unavailable actions do not
+	* change it. Return the attempt state of each action.
+	*/
+	const countAttempts = (actions, steps) => {
+		const states = actions.map((action) => {
+			const id = action.attemptId ?? action.toolCallId;
+			let state = attempts.get(id);
+			if (!state) {
+				state = {
+					before: consecutiveRejections,
+					exhausted: false,
+					rejected: false
+				};
+				attempts.set(id, state);
+			}
+			return state;
+		});
+		states.forEach((state, index) => {
+			const step = steps[index];
+			if (step.kind !== "reviewed" || state.rejected) return;
+			if (step.decision.decision === "allow") {
+				consecutiveRejections = 0;
+				return;
+			}
+			state.rejected = true;
+			consecutiveRejections = state.before + 1;
+			if (consecutiveRejections < MAX_CONSECUTIVE_REJECTIONS) return;
+			state.exhausted = true;
+			logException(new ToolActionReviewLimitError(), "guardian.action_review.exhausted", {
+				"app.guardian.decision": step.decision.decision,
+				"app.guardian.risk_level": step.decision.riskLevel,
+				"app.guardian.user_authorization": step.decision.userAuthorization,
+				"gen_ai.tool.name": step.proposal.tool.name,
+				"gen_ai.tool.call.id": actions[index].toolCallId
+			});
+		});
+		return states;
+	};
 	/** Apply one review step to gate state and return the action's result. */
-	const settle = (toolCallId, step) => {
+	const settle = (toolCallId, step, exhausted) => {
 		if (step.kind === "skipped") return { allowed: true };
 		if (step.kind === "unavailable") {
 			options.onFatal(step.error);
@@ -16705,24 +16981,12 @@ function createToolActionReview(options) {
 			};
 		}
 		const { decision, proposal } = step;
-		if (decision.decision === "allow") {
-			consecutiveRejections = 0;
-			return {
-				allowed: true,
-				decision
-			};
-		}
+		if (decision.decision === "allow") return {
+			allowed: true,
+			decision
+		};
 		const reviewedAction = projectedRejection(proposal, decision);
 		addPriorRejection(priorRejections, reviewedAction);
-		consecutiveRejections += 1;
-		const exhausted = consecutiveRejections >= MAX_CONSECUTIVE_REJECTIONS;
-		if (exhausted) logException(new ToolActionReviewLimitError(), "guardian.action_review.exhausted", {
-			"app.guardian.decision": decision.decision,
-			"app.guardian.risk_level": decision.riskLevel,
-			"app.guardian.user_authorization": decision.userAuthorization,
-			"gen_ai.tool.name": proposal.tool.name,
-			"gen_ai.tool.call.id": toolCallId
-		});
 		pendingRejections.set(toolCallId, {
 			decision: decision.decision,
 			priorRejection: reviewedAction,
@@ -16749,7 +17013,8 @@ function createToolActionReview(options) {
 			return await withSpan("guardian.action_review", "guardian.action_review", {}, async () => {
 				const rejections = [...priorRejections];
 				const steps = await mapConcurrent(actions, MAX_CONCURRENT_REVIEWS, (action) => reviewStep(action, rejections, signal));
-				return new Map(actions.map((action, index) => [action.toolCallId, settle(action.toolCallId, steps[index])]));
+				const states = countAttempts(actions, steps);
+				return new Map(actions.map((action, index) => [action.toolCallId, settle(action.toolCallId, steps[index], states[index].exhausted)]));
 			}, { "app.guardian.batch.size": actions.length });
 		},
 		projectToolResult(toolCallId, result) {
@@ -17457,6 +17722,7 @@ async function runCodeModeScript(run) {
 			});
 			return await run.pipeline.reviewScriptCalls(actions.map((action) => ({
 				...action,
+				attemptId: run.toolCallId,
 				script: {
 					source: run.source,
 					calls: earlier
@@ -17619,7 +17885,8 @@ function renderScriptTools(tools) {
 		"declare const tools: {",
 		...shown.map((entry) => entry.text),
 		"};",
-		...omitted > 0 ? [`${omitted} more tools are not declared here. Each ${SEARCH_TOOLS_NAME} result is also callable as \`tools.<tool_name>(args)\`, with its input_schema.`] : []
+		...omitted > 0 ? [`${omitted} more tools are not declared here. To find one, call ${SEARCH_TOOLS_NAME} directly before the script. Then call each result as \`tools.<tool_name>(args)\`, with its input_schema. A script cannot call ${SEARCH_TOOLS_NAME} or ${EXECUTE_TOOL_NAME}.`] : [],
+		...Object.hasOwn(tools, "callMcpTool") ? ["Call an MCP tool as `tools.callMcpTool({ tool_name, arguments })`. `tools.mcp__<provider>__<tool>` does not exist."] : []
 	].join("\n");
 }
 function renderDescription(tools) {
@@ -21211,6 +21478,7 @@ async function executeAgentRunInPrivacyContext(run, conversationPrivacy, runLogC
 		};
 		agent = new Agent({
 			getApiKey: getGatewayApiKey,
+			sessionId: conversationId,
 			streamFn: createTracedStreamFn({
 				conversationPrivacy,
 				...streamFn ? { base: streamFn } : void 0
@@ -21664,4 +21932,4 @@ function createAgentRunner(execute, options) {
 		return await execute(nextRun, streamFn);
 	} };
 }
-export { effectiveTaskOutcomes as $, verifySlackSignature as A, RetryableDeliveryError as At, activateViewerAutomationVersion as B, syncReviewItemSlackCards as C, conversationSubtreeColumns as Ct, parseSlackReviewItemFormTarget as D, withoutSavedSteeringMessages as Dt, parseSlackReviewItemClick as E, buildSteeringPiMessage as Et, getConversationInfo as F, ViewerTaskNotFoundError as G, deleteViewerTask as H, joinPublicChannel as I, readViewerAutomationRuns as J, readConversationSourceTask as K, listThreadReplies as L, readSlackRawMessageContext as M, toolInvocationDestination as Mt, resolveSlackChannelIdFromMessage as N, readBlockedReport as Nt, parseSlackUserInputSubmission as O, readUserCustomization as Ot, resolveSlackChannelIdFromThreadId as P, shouldEmitDevAgentTrace as Pt, AutomationEditError as Q, logScheduledAutomationRunSkipped as R, readSlackReviewItemCardConversationId as S, conversationSubtree as St, buildSlackReviewItemModal as T, ingestEvent as Tt, readViewerAutomationEdit as U, changeViewerAutomationLifecycle as V, updateViewerAutomation as W, readViewerAutomationVersions as X, readViewerAutomationSummary as Y, readViewerAutomations as Z, unpublishedArtifactHeaders as _, stopConversationSession as _t, finalizeMcpAuthorization as a, conversationTurnIdForMessage as at, renderBlockText as b, listChildAgents as bt, deleteMcpServerSessionId as c, recordWebConversationActivity as ct, getMcpStoredOAuthCredentials as d, decodeInputImages as dt, listOwnedWatches as et, putMcpStoredOAuthCredentials as f, collectAttachmentGarbage as ft, readPublicArtifact as g, stopChildAgentsOf as gt, publicArtifactHeaders as h, storeAttachment as ht, buildAuthPauseResponse as i, appendAndEnqueueWebMessage as it, parseSlackThreadId as j, actorFromRun as jt, runWithSlackInstallation as k, saveUserCustomization as kt, deleteMcpStoredOAuthCredentials as l, webActorFromEmail as lt, readStats as m, requestAttachmentDeletion as mt, executeAgentRun as n, renderReviewItemMessage as nt, deleteMcpAuthSession as o, createAndEnqueueConversation as ot, latestProgressStatus as p, readLiveAttachment as pt, readViewerAutomationExecutions as q, createContextCompactor as r, acceptsWebMessages as rt, deleteMcpAuthSessionsForUserProvider as s, createConversationId as st, createAgentRunner as t, deliverReviewItemChange as tt, getMcpAuthSession as u, resolveConversationDestination as ut, lookupSlackUserProfile as v, recordSubagentEnded as vt, SLACK_REVIEW_ITEM_VIEW_ID as w, processWorkspaceSnapshotJob as wt, createSlackReviewItemShow as x, listUnreportedSiblingAgents as xt, renderAttachmentText as y, recordSubagentStarted as yt, scheduledAutomationRunAttributes as z };
+export { AutomationEditError as $, verifySlackSignature as A, saveUserCustomization as At, scheduledAutomationRunAttributes as B, syncReviewItemSlackCards as C, conversationSubtree as Ct, parseSlackReviewItemFormTarget as D, buildSteeringPiMessage as Dt, parseSlackReviewItemClick as E, ingestEvent as Et, getConversationInfo as F, shouldEmitDevAgentTrace as Ft, updateViewerAutomation as G, changeViewerAutomationLifecycle as H, joinPublicChannel as I, readViewerAutomationExecutions as J, ViewerTaskNotFoundError as K, listThreadReplies as L, readSlackRawMessageContext as M, actorFromRun as Mt, resolveSlackChannelIdFromMessage as N, toolInvocationDestination as Nt, parseSlackUserInputSubmission as O, withoutSavedSteeringMessages as Ot, resolveSlackChannelIdFromThreadId as P, readBlockedReport as Pt, readViewerAutomations as Q, resolveDestinationVisibility as R, readSlackReviewItemCardConversationId as S, listUnreportedSiblingAgents as St, buildSlackReviewItemModal as T, processWorkspaceSnapshotJob as Tt, deleteViewerTask as U, activateViewerAutomationVersion as V, readViewerAutomationEdit as W, readViewerAutomationSummary as X, readViewerAutomationRuns as Y, readViewerAutomationVersions as Z, unpublishedArtifactHeaders as _, stopChildAgentsOf as _t, finalizeMcpAuthorization as a, appendAndEnqueueWebMessage as at, renderBlockText as b, recordSubagentStarted as bt, deleteMcpServerSessionId as c, createConversationId as ct, getMcpStoredOAuthCredentials as d, resolveConversationDestination as dt, effectiveTaskOutcomes as et, putMcpStoredOAuthCredentials as f, decodeInputImages as ft, readPublicArtifact as g, storeAttachment as gt, publicArtifactHeaders as h, requestAttachmentDeletion as ht, buildAuthPauseResponse as i, acceptsWebMessages as it, parseSlackThreadId as j, RetryableDeliveryError as jt, runWithSlackInstallation as k, readUserCustomization as kt, deleteMcpStoredOAuthCredentials as l, recordWebConversationActivity as lt, readStats as m, readLiveAttachment as mt, executeAgentRun as n, deliverReviewItemChange as nt, deleteMcpAuthSession as o, conversationTurnIdForMessage as ot, latestProgressStatus as p, collectAttachmentGarbage as pt, readConversationSourceTask as q, createContextCompactor as r, renderReviewItemMessage as rt, deleteMcpAuthSessionsForUserProvider as s, createAndEnqueueConversation as st, createAgentRunner as t, listOwnedWatches as tt, getMcpAuthSession as u, webActorFromEmail as ut, lookupSlackUserProfile as v, stopConversationSession as vt, SLACK_REVIEW_ITEM_VIEW_ID as w, conversationSubtreeColumns as wt, createSlackReviewItemShow as x, listChildAgents as xt, renderAttachmentText as y, recordSubagentEnded as yt, logScheduledAutomationRunSkipped as z };