@sentry/junior 0.272.0 → 0.273.0

package/dist/{agent-runner-Cl6Usx2Y.js → agent-runner-D7Qz-lGO.js}

@@ -1,43 +1,43 @@
 import { t as __exportAll } from "./rolldown-runtime-nwUcYXjP.js";
-import { $ as saveEventAutomation, A as readAutomationRuns, Ar as trimTrailingAssistantMessages, B as readScheduledAutomation, Br as estimateTextTokens, Bt as recordMcpProviderConnected, C as readAutomationExecutionByConversationId, Cn as loadTurnCheckpoint, Cr as isAssistantMessage, Ct as requireEventIdentifier, D as readAutomationExecutionStatusHours, Dr as normalizeToolNameFromResult, Dt as loadConnectedMcpProviders, E as readAutomationExecutionStatusDays, Er as isToolResultMessage, Fr as buildDeterministicTurnId, Ft as recordAttachmentsDelivered, Hr as getAgentContextInputLimitTokens, Ht as recordToolExecutionStarted, I as createScheduledAutomation, J as deleteEventAutomation, Jr as historyItemFromPiMessage, L as deleteScheduledAutomation, Mr as SESSION_CONTEXT_SECTION_TAG, Mt as loadTurnRoute, Nr as TURN_CONTEXT_TAG, Nt as openConversationProjection, O as readAutomationExecutionSummaries, Or as retainRuntimeTurnContext, Ot as loadConversationProjection, Pt as recordAgentsInstructionsUpdated, Q as parseEventAutomationRow, Qt as resolveTaskTitle, Rt as recordAuthorizationRequested, Sn as continuableMessages, St as registeredResourceTypeSchema, T as readAutomationExecutionHours, Tr as isToolResultError, Ut as recordTurnRoute, V as saveScheduledAutomation, Vr as getAgentContextCompactionTriggerTokens, Wr as isExperimentalFeatureEnabled, X as getEventAutomation, Xr as getConfigDefaults, Yr as piMessageFromHistoryItem, Z as listDeletedEventAutomationsCreatedBy, Zt as fallbackShortTitle, _n as abandonReplacedPendingAuth, _r as extractAssistantText, _t as eventWatchUnavailable, at as listAutomationVersions, br as getUserMessageInstructionText, bt as registeredEventTriggerProblems, c as getDispatchIdForConversation, cr as TURN_LIMIT_WRAP_UP_MESSAGE, dn as PluginCredentialFailureError, dr as TurnToolCallLimitExceededError, et as setEventAutomationStatus, fn as createPluginAuthOrchestration, ft as automationEventCatalog, gn as AuthorizationPauseError, gt as eventNamespaceSchema, hn as AuthorizationFlowDisabledError, hr as CODEMODE_TOOL_NAME, jr as REQUEST_CONTEXT_SECTION_TAG, k as readAutomationExecutions, kr as stripRuntimeTurnContext, kt as loadLastModelProfile, l as getDispatchInputMessageId, lr as TurnBudgetExceededError, lt as automationRevision, mn as AuthPausePersistenceError, mr as isTurnExecutionLimitExceededError, ot as readAutomationVersion, pn as authorizationId, pr as createTurnLimitGate, pt as describeRegisteredEventTrigger, q as createEventAutomation, rt as automationDefinition, st as sameDefinitionValue, t as resolveConversationRouting, u as getDispatchRecord, un as createPluginEgress, ur as TurnSliceLimitExceededError, ut as requireAutomationRevision, vn as canReusePendingAuthLink, vr as getPiMessageRole, vt as hasEventCatalogEntries, w as readAutomationExecutionDays, wn as saveTurnCheckpoint, wr as isContinuablePiBoundary, wt as requireValidEventTrigger, x as emptyAutomationRunWindows, xr as hasRuntimeTurnContext, xt as registeredEventTypeSchema, yr as getTerminalAssistantMessages, yt as registeredEventMatchSchema, z as parseScheduledAutomationRow, zt as recordGuardianActionReviewed } from "./turn-session-routing-BV_gX7n3.js";
-import { _ as getProviderErrorAttributes, a as completeText, b as getGatewayApiKey, c as COMPACTION_SUMMARY_PREFIX, d as renderCurrentInstruction, f as unwrapCurrentInstruction, g as findProviderError, h as createProviderError, i as completeObject, l as hasCompactedConversationContext, m as ProviderError, n as GEN_AI_SERVER_ADDRESS, p as escapeXml, s as resolveGatewayModel, t as GEN_AI_PROVIDER_NAME, u as isCompactionSummaryText, x as resolveGatewayCredential, y as isProviderRetryError } from "./client-FRphcDWW.js";
-import { n as botConfig, v as normalizeSlackEmojiName } from "./config-BUP9wjiR.js";
-import { B as isRecord$4, C as summarizeMessageText, E as withSpan, H as toOptionalString, S as setTags, T as withLogContext, _ as runBestEffort, a as extractGenAiUsageSummary, b as setSpanAttributes, f as logError, g as normalizeGenAiFinishReason, h as logWarn, i as extractGenAiUsageAttributes, l as getLogContextAttributesForSpan, m as logInfo, p as logException, u as getTracePropagationHeaders, v as serializeGenAiAttribute, x as setSpanStatus, z as normalizeIdentityEmail } from "./logging-CjkDr-jP.js";
+import { $ as loadTurnCheckpoint, $n as canAgentChangeReviewItem, $r as isAlreadyExistsError, $t as isAssistantMessage, Ai as findMatchingWatches, An as getPluginSystemPromptContributions, Ar as formatProviderLabel, B as createPluginEgress, Ba as matchSlackAttachments, Bn as closeReviewItem, Br as addReactionToMessage, Bt as TurnSliceLimitExceededError, Ci as STOP_WATCHING_TOOL_NAME, Cn as getOAuthAccountProviders, Cr as hash, D as fallbackShortTitle, Di as createTimerWatch, En as createPluginHookRunner, Er as getSandboxProvider, G as AuthorizationFlowDisabledError, Ga as createPluginAnnotations, Gi as getSlackClient, Gn as insertReviewItem, Gt as CODEMODE_TOOL_NAME, H as createPluginAuthOrchestration, Hi as downloadPrivateSlackFile, Hn as dismissOpenReviewItems, Hr as getSlackMessagePermalink, Ir as normalizeSlackReplyMarkdown, J as canReusePendingAuthLink, Ja as defaultTimezone, Ji as normalizeSlackConversationId, Jn as searchReviewItems, Jr as updateSlackMessage, Jt as getPiMessageRole, K as AuthorizationPauseError, Ki as isConversationScopedChannel, Kr as postSlackMessage, Mi as listWatches, Mn as getPluginUserPromptContributions, Mr as resolveBaseUrl, Nn as getPlugins, O as resolveTaskTitle, Oi as createWatch, Pr as escapeSlackMrkdwnText, Q as continuableMessages, Qr as isAbortError, Rr as slackMention, Rt as TURN_LIMIT_WRAP_UP_MESSAGE, Si as RESOURCE_WATCH_TOOL_SOURCE, Sn as createUserTokenStore, Sr as create, Ti as cancelWatch, Tr as ensureDockerDaemon, U as authorizationId, Ui as getFilePermalink, Un as getOpenReviewItemByDedupeKey, Ur as openSlackDirectMessage, Ut as createTurnLimitGate, V as PluginCredentialFailureError, Vi as SlackActionError, Vr as deleteSlackMessage, Vt as TurnToolCallLimitExceededError, W as AuthPausePersistenceError, Wa as saveObjectAnnotations, Wn as getReviewItem, Wt as isTurnExecutionLimitExceededError, Xi as withSlackRetries, Xn as updateReviewItemContent, Xt as getUserMessageInstructionText, Ya as resolveUserTimezone, Yi as runWithSlackInstallationToken, Yr as uploadFilesToConversation, Yt as getTerminalAssistantMessages, Zi as sleep, Zn as PLUGIN_REVIEW_ITEM_KEY_PREFIX, Zt as hasRuntimeTurnContext, _a as sandboxSkillDir, _i as workspaceRepoCheckoutPath, _n as getAgentContextCompactionTriggerTokens, _r as WorkspaceValidationError, a as loadLastModelProfile, ai as workspaceSnapshotNotReadyUserMessage, an as stripRuntimeTurnContext, bi as RESOURCE_SUBSCRIPTION_DEFAULT_TTL_MS, bn as isExperimentalFeatureEnabled, br as setWorkspaceSnapshot, c as loadTurnRoute, ca as buildCommandScript, ci as consumeSandboxEgressPermissionDeniedSignal, cn as SESSION_CONTEXT_SECTION_TAG, cr as resolveAssignee, d as recordAttachmentsDelivered, da as SANDBOX_COMMAND_PATH, dn as buildDeterministicTurnId, dr as deleteWorkspace, ei as throwSandboxOperationError, en as isContinuablePiBoundary, eo as historyItemFromPiMessage, er as canReadReviewItem, et as saveTurnCheckpoint, fa as SANDBOX_DATA_ROOT, fi as buildSandboxEgressNetworkPolicy, fr as getWorkspace, g as recordMcpProviderConnected, ga as SANDBOX_WORKSPACE_ROOT, gi as tryWorkspaceRepoCheckoutPath, gn as estimateTextTokens, gr as updateWorkspace, h as recordGuardianActionReviewed, ha as SANDBOX_SKILLS_ROOT, hi as SANDBOX_RUNTIME, i as loadConversationProjection, ia as getDashboardTaskLink, ii as isWorkspaceSnapshotNotReadyError, in as retainRuntimeTurnContext, io as getConfigDefaults, ir as requireReviewItemLinks, ji as getWatch, jn as getPluginTools, ki as deliverWatch, kr as deliverOAuthAuthorization, l as openConversationProjection, la as buildNonInteractiveShellScript, li as createSandboxEgressCredentialToken, ln as TURN_CONTEXT_TAG, lr as resolveAssignees, m as recordAuthorizationRequested, ma as SANDBOX_REPOS_ROOT, mr as listWorkspaces, ni as WorkspaceSnapshotNotReadyError, nn as isToolResultMessage, no as JUNIOR_NATIVE_EVENT_NAMESPACE, nr as readReviewItemAgentScope, oa as ToolInputError, oi as clearSandboxEgressSignals, on as trimTrailingAssistantMessages, or as EVERYONE_ASSIGNEE, pa as SANDBOX_JUNIOR_ROOT, pi as resolveSandboxCommandEnvironment, pr as getWorkspaceByName, q as abandonReplacedPendingAuth, qt as extractAssistantText, r as loadConnectedMcpProviders, ra as getDashboardReviewItemLink, ri as getWorkspaceSnapshotNotReadyError, rn as normalizeToolNameFromResult, ro as conversationNoteEvent, rr as requireReviewItemAssignees, sa as PluginToolDeniedError, si as consumeSandboxEgressAuthRequiredSignal, sn as REQUEST_CONTEXT_SECTION_TAG, sr as automationCreatorUserId, ta as getDashboardConversationLink, ti as wrapSandboxSetupError, tn as isToolResultError, to as piMessageFromHistoryItem, u as recordAgentsInstructionsUpdated, ua as runNonInteractiveCommand, ur as createWorkspace, v as recordToolExecutionStarted, va as sandboxSkillFile, vi as resolveChannelCapabilities, vn as getAgentContextInputLimitTokens, vr as invalidateReadySnapshot, wi as cancelSubscriptions, wr as isStale, xi as RESOURCE_SUBSCRIPTION_MAX_TTL_MS, xr as setWorkspaceSnapshotBuild, y as recordTurnRoute, ya as sandboxSkillPathResolution, yi as getSlackToolContext, yr as loadSnapshotsForProfile, zt as TurnBudgetExceededError } from "./projection-BOpi891B.js";
+import { S as resolveGatewayCredential, _ as findProviderError, a as completeText, b as isProviderRetryError, c as resolveGatewayModel, d as isCompactionSummaryText, f as renderCurrentInstruction, g as createProviderError, h as ProviderError, i as completeObject, l as COMPACTION_SUMMARY_PREFIX, m as escapeXml, n as GEN_AI_SERVER_ADDRESS, p as unwrapCurrentInstruction, t as GEN_AI_PROVIDER_NAME, u as hasCompactedConversationContext, v as getProviderErrorAttributes, x as getGatewayApiKey } from "./client-DhqbV0Fe.js";
+import { _ as normalizeSlackEmojiName, n as botConfig } from "./config-C6FTd7PX.js";
+import { B as isRecord$4, C as summarizeMessageText, E as withSpan, H as toOptionalString, S as setTags, T as withLogContext, _ as runBestEffort, a as extractGenAiUsageSummary, b as setSpanAttributes, f as logError, g as normalizeGenAiFinishReason, h as logWarn, i as extractGenAiUsageAttributes, l as getLogContextAttributesForSpan, m as logInfo, p as logException, u as getTracePropagationHeaders, v as serializeGenAiAttribute, x as setSpanStatus, z as normalizeIdentityEmail } from "./logging-CNs1e04n.js";
 import { g as withActiveSpan, i as getActiveSpan, m as startInactiveSpan } from "./sentry-MDkYAVPV.js";
-import { a as toCanonicalInputMessage, c as toGenAiPayloadMetadata, i as runWithConversationPrivacy, l as toGenAiPayloadTraceAttributes, o as toCanonicalOutputMessage, r as resolveConversationPrivacy, s as toGenAiMessagesTraceAttributes, t as canExposeConversationPayload } from "./conversation-privacy-DiGvA9a3.js";
+import { a as toCanonicalInputMessage, c as toGenAiPayloadMetadata, i as runWithConversationPrivacy, l as toGenAiPayloadTraceAttributes, o as toCanonicalOutputMessage, r as resolveConversationPrivacy, s as toGenAiMessagesTraceAttributes, t as canExposeConversationPayload } from "./conversation-privacy-BeRgrsph.js";
 import { a as formatModelProfile, c as modelProfileSchema, l as profileConfig, n as ModelProfileNotConfiguredError, o as formatModelProfiles, r as boundProfile, s as modelIdForProfile, u as TURN_REASONING_LEVELS } from "./model-profile-B998sjVd.js";
 import { d as parseSlackChannelReferenceId, f as parseSlackTeamId, h as parseSlackMessageTs, n as createSlackActor, o as isUserActor, p as parseSlackUserId, u as parseSlackChannelId } from "./actor-B4DYygOB.js";
-import { C as getSqlExecutor, M as resolveActorIdentityId, Q as sameDestination, S as getDb, U as addAgentTurnUsage, W as agentTurnCostUsd, X as parseDestination, a as readActorIdentityFromSql, b as getConversationMessageSearchStore, f as identityAvatarUrl, h as readUserAvatarUrls, i as readActorIdentity, j as SYSTEM_IDENTITY_ID, q as hasAgentTurnUsage, x as getConversationStore, y as getConversationEventStore } from "./viewer-BCRuO8Wg.js";
+import { $ as sameDestination, C as getSqlExecutor, G as agentTurnCostUsd, J as hasAgentTurnUsage, M as SYSTEM_IDENTITY_ID, N as resolveActorIdentityId, S as getDb, W as addAgentTurnUsage, Z as parseDestination, a as readActorIdentityFromSql, b as getConversationMessageSearchStore, f as identityAvatarUrl, h as readUserAvatarUrls, i as readActorIdentity, x as getConversationStore, y as getConversationEventStore } from "./viewer-C6Y1aXjZ.js";
 import { a as juniorAgentInvocations, c as juniorIdentities, d as juniorDestinations, i as juniorAgentBindings, l as juniorUsers, s as juniorConversations } from "./agent-invocations-C1RNOCs8.js";
-import { E as juniorArtifacts, S as juniorConversationAnnotations, T as juniorAttachments, _ as juniorConversationBriefs, d as juniorAutomations, f as juniorStats, l as juniorAutomationRuns, s as juniorReviewItemSlackCards } from "./executor-DGDpyegI.js";
+import { E as juniorArtifacts, S as juniorConversationAnnotations, T as juniorAttachments, _ as juniorConversationBriefs, d as juniorAutomations, f as juniorStats, l as juniorAutomationRuns, s as juniorReviewItemSlackCards } from "./executor-BafgvQcc.js";
 import { _ as sameActorIdentity, g as instructionProvenanceFor, h as instructionActors, i as KNOWN_CONVERSATION_EVENT_TYPES, m as contextProvenance, n as detectImageMediaType, p as agentInstructionProvenance, r as isVisionImageMediaType } from "./media-U6Tuz6Mi.js";
 import { a as listReferenceFiles, c as soulPathCandidates, l as worldPathCandidates } from "./package-discovery-DJBompdd.js";
-import { c as fetchWithBoundedOAuthErrorBodies, d as actorLogContext, f as credentialContextForActor, g as credentialUserSubjectId, i as resolvePluginHeaderEnvRefs, l as getOAuthProviderErrorAttributes, s as OAuthProviderError } from "./registry-7XgwNgQe.js";
-import { n as pluginCatalogRuntime } from "./catalog-runtime-BNeCWIaF.js";
-import { a as parseSkillInvocation, i as parseSkillFile, n as findSkillByName, r as loadSkillsByName, t as discoverSkills } from "./skills-CsiKu3-g.js";
-import { $ as loadSnapshotsForProfile, $n as sandboxSkillDir, $t as workspaceRepoCheckoutPath, A as updateReviewItemContent, An as normalizeSlackConversationId, B as EVERYONE_ASSIGNEE, Bn as getDashboardTaskLink, Bt as clearSandboxEgressSignals, C as getOpenReviewItemByDedupeKey, Cn as SlackActionError, Ct as openSlackDirectMessage, Dn as getSlackClient, Et as postSlackMessage, Ft as wrapSandboxSetupError, G as deleteWorkspace, Gn as buildNonInteractiveShellScript, H as resolveAssignee, Hn as ToolInputError, Ht as consumeSandboxEgressPermissionDeniedSignal, I as readReviewItemAgentScope, Ir as conversationNoteEvent, It as WorkspaceSnapshotNotReadyError, J as listWorkspaces, Jn as SANDBOX_DATA_ROOT, Jt as resolveSandboxCommandEnvironment, K as getWorkspace, Kn as runNonInteractiveCommand, L as requireReviewItemAssignees, Ln as getDashboardConversationLink, Lt as getWorkspaceSnapshotNotReadyError, Mn as withSlackRetries, Mr as JUNIOR_NATIVE_EVENT_NAMESPACE, Mt as isAbortError, N as canAgentChangeReviewItem, Nn as sleep, Nt as isAlreadyExistsError, O as searchReviewItems, On as isConversationScopedChannel, Or as defaultTimezone, Ot as updateSlackMessage, P as canReadReviewItem, Pt as throwSandboxOperationError, Q as invalidateReadySnapshot, Qn as SANDBOX_WORKSPACE_ROOT, Qt as tryWorkspaceRepoCheckoutPath, R as requireReviewItemLinks, Rt as isWorkspaceSnapshotNotReadyError, S as dismissOpenReviewItems, St as getSlackMessagePermalink, T as insertReviewItem, Tn as getFilePermalink, Tr as createPluginAnnotations, U as resolveAssignees, Un as PluginToolDeniedError, Ut as createSandboxEgressCredentialToken, V as automationCreatorUserId, Vt as consumeSandboxEgressAuthRequiredSignal, W as createWorkspace, Wn as buildCommandScript, X as updateWorkspace, Xn as SANDBOX_REPOS_ROOT, Yn as SANDBOX_JUNIOR_ROOT, Z as WorkspaceValidationError, Zn as SANDBOX_SKILLS_ROOT, Zt as SANDBOX_RUNTIME, an as STOP_WATCHING_TOOL_NAME, at as ensureDockerDaemon, b as closeReviewItem, br as matchSlackAttachments, bt as addReactionToMessage, d as getPluginTools, dn as deliverWatch, en as resolveChannelCapabilities, er as sandboxSkillFile, et as setWorkspaceSnapshot, f as getPluginUserPromptContributions, fn as findMatchingWatches, ft as resolveBaseUrl, gt as normalizeSlackReplyMarkdown, in as RESOURCE_WATCH_TOOL_SOURCE, it as isStale, j as PLUGIN_REVIEW_ITEM_KEY_PREFIX, jn as runWithSlackInstallationToken, kr as resolveUserTimezone, kt as uploadFilesToConversation, ln as createTimerWatch, lt as deliverOAuthAuthorization, mn as listWatches, mt as escapeSlackMrkdwnText, n as createUserTokenStore, nn as RESOURCE_SUBSCRIPTION_DEFAULT_TTL_MS, nt as create, o as createPluginHookRunner, on as cancelSubscriptions, ot as getSandboxProvider, p as getPlugins, pn as getWatch, q as getWorkspaceByName, qn as SANDBOX_COMMAND_PATH, qt as buildSandboxEgressNetworkPolicy, r as getOAuthAccountProviders, rn as RESOURCE_SUBSCRIPTION_MAX_TTL_MS, rt as hash, sn as cancelWatch, tn as getSlackToolContext, tr as sandboxSkillPathResolution, tt as setWorkspaceSnapshotBuild, u as getPluginSystemPromptContributions, un as createWatch, ut as formatProviderLabel, vt as slackMention, w as getReviewItem, wn as downloadPrivateSlackFile, wr as saveObjectAnnotations, xt as deleteSlackMessage, zn as getDashboardReviewItemLink, zt as workspaceSnapshotNotReadyUserMessage } from "./credentialed-CgTulRDH.js";
+import { c as fetchWithBoundedOAuthErrorBodies, d as actorLogContext, f as credentialContextForActor, g as credentialUserSubjectId, i as resolvePluginHeaderEnvRefs, l as getOAuthProviderErrorAttributes, s as OAuthProviderError } from "./registry-B-yUrv3h.js";
+import { n as pluginCatalogRuntime } from "./catalog-runtime-TygDsPOU.js";
+import { a as parseSkillInvocation, i as parseSkillFile, n as findSkillByName, r as loadSkillsByName, t as discoverSkills } from "./skills-BbtJSF2-.js";
 import { a as withLock, i as fenceLock } from "./locks-D-0h111u.js";
-import { r as getStateAdapter } from "./adapter-BDYDi1F9.js";
+import { r as getStateAdapter } from "./adapter-umap1cth.js";
 import { i as isValidTimeZone, r as getZonedDateTimeParts, t as getFirstRunAtMs } from "./cadence-R7Em4RjE.js";
-import { J as briefOutcomeStatusSchema, V as removedCardSchema, Y as conversationBriefSchema, q as briefLinkSchema } from "./conversation-BtQzLoK8.js";
-import { r as EVENT_AUTHOR_ID } from "./prompt-vfceH0c-.js";
-import { A as AgentMessagePausedError, F as CHILD_AGENT_RESULTS, I as PARENT_AGENT_TARGET, J as isTurnInputCommitLostError, L as agentNameSchema, M as AgentMessageTargetError, N as AgentNameInUseError, R as AGENT_TYPES, U as CooperativeTurnYieldError, V as formatAgentTypes, W as TurnInputCommitLostError, _ as invocationFromRow, d as getAgentInvocationMessageId, g as getLatestAgentInvocationForConversation, h as getChildAgentLockName, j as AgentMessageQueueFullError, k as AgentInvocationLimitError, t as NON_TERMINAL_AGENT_INVOCATION_STATUSES, u as getAgentInvocationIdForResult, v as isTerminalAgentInvocation } from "./store-DyVKH0QB.js";
-import { a as isNoReplyMarker, i as NO_REPLY_MARKER, n as getAssistantReplyText, r as sanitizeAssistantText, t as decideReply } from "./assistant-reply-DN2w6JL_.js";
-import { E as resolveSlackReplyTarget, L as readAutomationResult, M as FINISH_AUTOMATION_RUN_TOOL_NAME, N as automationResultSchema$1, R as remindMissingAutomationResult, _ as slackChannelMessageTrigger, a as EVENT_WAIT_MS, b as workspaceSnapshotFinishedEvent, d as getEventCatalog, n as markConversationsStopped, o as enqueueEventNotification, p as requireSlackChannelMessageScope, t as getConversationStoppedAtMs, v as WORKSPACE_SNAPSHOT_FAILED_EVENT, x as workspaceSnapshotWatch, y as WORKSPACE_SNAPSHOT_READY_EVENT } from "./session-stop-HKl0ECX0.js";
+import { J as briefOutcomeStatusSchema, V as removedCardSchema, Y as conversationBriefSchema, q as briefLinkSchema } from "./conversation-T4oabbBi.js";
+import { r as EVENT_AUTHOR_ID } from "./prompt-B1ySjUyf.js";
+import { A as AgentMessagePausedError, F as CHILD_AGENT_RESULTS, I as PARENT_AGENT_TARGET, J as isTurnInputCommitLostError, L as agentNameSchema, M as AgentMessageTargetError, N as AgentNameInUseError, R as AGENT_TYPES, U as CooperativeTurnYieldError, V as formatAgentTypes, W as TurnInputCommitLostError, _ as invocationFromRow, d as getAgentInvocationMessageId, g as getLatestAgentInvocationForConversation, h as getChildAgentLockName, j as AgentMessageQueueFullError, k as AgentInvocationLimitError, t as NON_TERMINAL_AGENT_INVOCATION_STATUSES, u as getAgentInvocationIdForResult, v as isTerminalAgentInvocation } from "./store-C1xuZcLd.js";
+import { a as isNoReplyMarker, i as NO_REPLY_MARKER, n as getAssistantReplyText, r as sanitizeAssistantText, t as decideReply } from "./assistant-reply-wZ7i4OFa.js";
+import { E as resolveSlackReplyTarget, L as readAutomationResult, M as FINISH_AUTOMATION_RUN_TOOL_NAME, N as automationResultSchema$1, R as remindMissingAutomationResult, _ as slackChannelMessageTrigger, a as EVENT_WAIT_MS, b as workspaceSnapshotFinishedEvent, d as getEventCatalog, n as markConversationsStopped, o as enqueueEventNotification, p as requireSlackChannelMessageScope, t as getConversationStoppedAtMs, v as WORKSPACE_SNAPSHOT_FAILED_EVENT, x as workspaceSnapshotWatch, y as WORKSPACE_SNAPSHOT_READY_EVENT } from "./session-stop-DaT_7tYa.js";
 import { C as userCustomizationTextSchema, b as webMessageId, g as formatUserInputAnswer, h as buttonUserInputField, m as USER_INPUT_NOTE, p as USER_INPUT_LIMITS, s as sumUtcHoursIntoSixHours, v as normalizeUserInputAnswer, x as USER_CUSTOMIZATION_MAX_CHARS, y as userInputRequestSchema } from "./reporting-window-DgHgwQB3.js";
-import { a as setSnapshotSpanAttributes, i as postinstall, n as resolve$1, r as dependencies, s as getSandboxResources } from "./resolve-CuuxNfWG.js";
-import { a as getVercelConversationWorkQueue, f as getTurnRequestDeadline, n as sendNextWorkspaceSnapshotJob, r as sendWorkspaceSnapshotJob } from "./job-queue-CjB97sii.js";
-import { D as stopConversationWork, n as appendAndEnqueueExclusiveInboundMessage, r as appendAndEnqueueInboundMessage } from "./store-CPF2kzbu.js";
-import { _ as getMcpProviderErrorAttributes, a as serviceAccountOnly, c as createMcpServiceAccountClientProvider, d as PluginMcpClient, f as McpProviderError, g as getMcpAwareTelemetryMessage, h as getMcpAwareErrorType, i as serviceAccountAllows, l as getMcpServiceAccountCredentials, m as McpToolError, p as McpServiceAccountRequiredError, u as McpAuthorizationRequiredError, v as toMcpProviderError } from "./service-account-H45LIAG2.js";
-import { A as SCHEDULED_AUTOMATION_SYSTEM_ACTOR, D as taskOutcomeInputSchema, E as automationTitleSchema, F as scheduleIntentSchema, I as weekdaySchema, N as ScheduleIntentError, P as compileScheduleIntent, T as automationInstructionToolSchema, k as eventAutomationTriggerSchema, l as automationListQuerySchema } from "./automation-CV7g5h3A.js";
+import { a as setSnapshotSpanAttributes, i as postinstall, n as resolve$1, r as dependencies, s as getSandboxResources } from "./resolve-DqVtd4Q9.js";
+import { a as getVercelConversationWorkQueue, f as getTurnRequestDeadline, n as sendNextWorkspaceSnapshotJob, r as sendWorkspaceSnapshotJob } from "./job-queue-C4lphW9Y.js";
+import { D as stopConversationWork, n as appendAndEnqueueExclusiveInboundMessage, r as appendAndEnqueueInboundMessage } from "./store-DaxUuOmD.js";
+import { $ as saveEventAutomation, A as readAutomationRuns, B as readScheduledAutomation, C as readAutomationExecutionByConversationId, Ct as requireEventIdentifier, D as readAutomationExecutionStatusHours, E as readAutomationExecutionStatusDays, I as createScheduledAutomation, J as deleteEventAutomation, L as deleteScheduledAutomation, O as readAutomationExecutionSummaries, Q as parseEventAutomationRow, St as registeredResourceTypeSchema, T as readAutomationExecutionHours, V as saveScheduledAutomation, X as getEventAutomation, Z as listDeletedEventAutomationsCreatedBy, _t as eventWatchUnavailable, at as listAutomationVersions, bt as registeredEventTriggerProblems, c as getDispatchIdForConversation, et as setEventAutomationStatus, ft as automationEventCatalog, gt as eventNamespaceSchema, k as readAutomationExecutions, l as getDispatchInputMessageId, lt as automationRevision, ot as readAutomationVersion, pt as describeRegisteredEventTrigger, q as createEventAutomation, rt as automationDefinition, st as sameDefinitionValue, t as resolveConversationRouting, u as getDispatchRecord, ut as requireAutomationRevision, vt as hasEventCatalogEntries, w as readAutomationExecutionDays, wt as requireValidEventTrigger, x as emptyAutomationRunWindows, xt as registeredEventTypeSchema, yt as registeredEventMatchSchema, z as parseScheduledAutomationRow } from "./turn-session-routing-BdCTDq9m.js";
+import { _ as getMcpProviderErrorAttributes, a as serviceAccountOnly, c as createMcpServiceAccountClientProvider, d as PluginMcpClient, f as McpProviderError, g as getMcpAwareTelemetryMessage, h as getMcpAwareErrorType, i as serviceAccountAllows, l as getMcpServiceAccountCredentials, m as McpToolError, p as McpServiceAccountRequiredError, u as McpAuthorizationRequiredError, v as toMcpProviderError } from "./service-account-smdPFWNy.js";
+import { A as SCHEDULED_AUTOMATION_SYSTEM_ACTOR, D as taskOutcomeInputSchema, E as automationTitleSchema, F as scheduleIntentSchema, I as weekdaySchema, N as ScheduleIntentError, P as compileScheduleIntent, T as automationInstructionToolSchema, k as eventAutomationTriggerSchema, l as automationListQuerySchema } from "./automation-yffXcZt9.js";
 import { n as privateTraceResultAttributes } from "./private-trace-result-CE7_lEdq.js";
 import { streamSimple } from "@earendil-works/pi-ai/compat";
 import { createGatewayProvider } from "@ai-sdk/gateway";
 import { NoImageGeneratedError, generateImage, generateText } from "ai";
 import path from "node:path";
 import { isDeepStrictEqual } from "node:util";
-import { z } from "zod";
 import { createHash, randomBytes, randomInt, randomUUID } from "node:crypto";
+import { z } from "zod";
 import { and, asc, count, desc, eq, exists, gt, gte, inArray, isNotNull, isNull, lt, lte, ne, notExists, notInArray, or, sql } from "drizzle-orm";
 import { PluginToolInputError, createWebSource, eventMatchFieldSchema, eventMatchSchema, eventReachSchema, eventSchema, eventTriggerText, localDestinationSchema, missingToolAnnotationKeys, ownedObjectAnnotationSchema, sourceSchema, stableEventMatchKey, watchResultSchema } from "@sentry/junior-plugin-api";
 import { alias } from "drizzle-orm/pg-core";
@@ -48,6 +48,7 @@ import http from "node:http";
 import dns from "node:dns/promises";
 import net from "node:net";
 import { SignJWT, importPKCS8 } from "jose";
+import { performance as performance$1 } from "node:perf_hooks";
 import { createAssistantMessageEventStream, isRetryableAssistantError } from "@earendil-works/pi-ai";
 import { Bash, defineCommand } from "just-bash";
 import { structuredPatch } from "diff";
@@ -202,172 +203,6 @@ var SkillSandbox = class {
 		throw new Error("No active skill is loaded. Call loadSkill first or pass skill_name explicitly.");
 	}
 };
-// src/chat/tools/sandbox/file-utils.ts
-const MAX_TEXT_CHARS = 6e4;
-const RIPGREP_EXCLUDED_GLOBS = ["!**/.git/**", "!**/node_modules/**"];
-const DEFAULT_SEARCH_COMMAND_TIMEOUT_MS = 3e4;
-const SKIPPED_DIRECTORIES = /* @__PURE__ */ new Set([".git", "node_modules"]);
-/** Normalize model-supplied numeric knobs before they reach filesystem tools. */
-function positiveInteger$1(value) {
-	if (typeof value !== "number" || !Number.isFinite(value)) return;
-	const integer = Math.floor(value);
-	return integer > 0 ? integer : void 0;
-}
-/** Compare and slice text in one line-ending space while preserving callers' output rules. */
-function normalizeToLf$1(value) {
-	return value.replace(/\r\n/g, "\n").replace(/\r/g, "\n");
-}
-/** Keep tool output inside the model-facing budget with an explicit notice. */
-function truncateText$1(value, maxChars = MAX_TEXT_CHARS) {
-	if (value.length <= maxChars) return {
-		content: value,
-		truncated: false
-	};
-	const removed = value.length - maxChars;
-	return {
-		content: `${value.slice(0, maxChars)}\n\n[output truncated: ${removed} characters removed]`,
-		truncated: true
-	};
-}
-/** Detect model-facing missing paths without swallowing sandbox lifecycle/API failures. */
-function isMissingPathError(error) {
-	if (!error || typeof error !== "object") return false;
-	const candidate = error;
-	if (candidate.code === "ENOENT") return true;
-	return typeof candidate.message === "string" && candidate.message.startsWith("File not found:");
-}
-/** Reject an expected missing search/list path through the tool-error channel. */
-function missingPathSearchResult(params) {
-	const textPath = params.displayPath ?? params.missingPath ?? params.path;
-	throw new ToolInputError(`Path not found: ${textPath}`);
-}
-function escapeRegExp(value) {
-	return value.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
-}
-function globToRegExp(pattern) {
-	let source = "";
-	for (let index = 0; index < pattern.length; index += 1) {
-		const char = pattern.charAt(index);
-		const next = pattern[index + 1];
-		if (char === "*" && next === "*") {
-			if (pattern[index + 2] === "/") {
-				source += "(?:.*/)?";
-				index += 2;
-				continue;
-			}
-			source += ".*";
-			index += 1;
-			continue;
-		}
-		if (char === "*") {
-			source += "[^/]*";
-			continue;
-		}
-		if (char === "?") {
-			source += "[^/]";
-			continue;
-		}
-		source += escapeRegExp(char);
-	}
-	return new RegExp(`^${source}$`);
-}
-function matchesGlob(relativePath, pattern) {
-	const matcher = globToRegExp(pattern);
-	if (matcher.test(relativePath)) return true;
-	if (pattern.startsWith("**/") && matchesGlob(relativePath, pattern.slice(3))) return true;
-	return !pattern.includes("/") && matcher.test(path.posix.basename(relativePath));
-}
-/** Keep sandbox filesystem tools scoped to the mounted workspace root. */
-function resolveWorkspacePath(input, fallback = ".") {
-	const requested = (input ?? "").trim() || fallback;
-	const absolute = requested.startsWith("/") ? requested : path.posix.join(SANDBOX_WORKSPACE_ROOT, requested);
-	const normalized = path.posix.normalize(absolute);
-	if (normalized !== SANDBOX_WORKSPACE_ROOT && !normalized.startsWith(`${SANDBOX_WORKSPACE_ROOT}/`)) throw new ToolInputError(`Path must stay within ${SANDBOX_WORKSPACE_ROOT}: ${requested}`);
-	return normalized;
-}
-/** Anchor ripgrep paths and globs to the requested search root. */
-function getRipgrepSearchLocation(root, rootIsDirectory) {
-	if (rootIsDirectory) return {
-		cwd: root,
-		target: "."
-	};
-	return {
-		cwd: path.posix.dirname(root),
-		target: path.posix.basename(root)
-	};
-}
-/** Share bounded workspace traversal across search tools so their skip rules stay aligned. */
-async function collectFiles(params) {
-	const files = [];
-	let limitReached = false;
-	let missingPath;
-	const visit = async (dirPath) => {
-		if (missingPath) return;
-		let entries;
-		try {
-			entries = (await params.fs.readdir(dirPath)).sort((a, b) => a.toLowerCase().localeCompare(b.toLowerCase()));
-		} catch (error) {
-			if (isMissingPathError(error)) {
-				missingPath = dirPath;
-				return;
-			}
-			throw error;
-		}
-		for (const entry of entries) {
-			const fullPath = path.posix.join(dirPath, entry);
-			let stat;
-			try {
-				stat = await params.fs.stat(fullPath);
-			} catch (error) {
-				if (isMissingPathError(error)) {
-					missingPath = fullPath;
-					return;
-				}
-				throw error;
-			}
-			if (stat.isDirectory()) {
-				if (!SKIPPED_DIRECTORIES.has(entry)) await visit(fullPath);
-				if (limitReached) return;
-				continue;
-			}
-			const relativePath = path.posix.relative(params.root, fullPath);
-			if (!params.pattern || matchesGlob(relativePath, params.pattern)) {
-				files.push(fullPath);
-				if (params.limit && files.length >= params.limit) {
-					limitReached = true;
-					return;
-				}
-			}
-		}
-	};
-	let stat;
-	try {
-		stat = await params.fs.stat(params.root);
-	} catch (error) {
-		if (isMissingPathError(error)) return {
-			files,
-			limitReached: false,
-			missingPath: params.root,
-			missingRoot: true
-		};
-		throw error;
-	}
-	if (!stat.isDirectory()) {
-		const relativePath = path.posix.basename(params.root);
-		return {
-			files: !params.pattern || matchesGlob(relativePath, params.pattern) ? [params.root] : [],
-			limitReached: false,
-			missingRoot: false
-		};
-	}
-	await visit(params.root);
-	return {
-		files,
-		limitReached,
-		missingPath,
-		missingRoot: missingPath === params.root
-	};
-}
 // src/chat/repository-instructions.ts
 const AGENTS_FILENAME = "AGENTS.md";
 const MAX_REPOSITORY_INSTRUCTIONS_BYTES = 32768;
@@ -382,81 +217,207 @@ const REPOSITORY_SKILLS_HEADER = [
 ].join("\n");
 const AGENTS_REPLACEMENT_NOTICE = "These AGENTS.md instructions replace all previously provided AGENTS.md instructions.";
 const AGENTS_REMOVAL_NOTICE = "The previously provided AGENTS.md instructions no longer apply.";
-async function pathExists(fs, target) {
-	try {
-		await fs.stat(target);
-		return true;
-	} catch (error) {
-		if (isMissingPathError(error)) return false;
-		throw error;
-	}
+/**
+* Read limit for each AGENTS.md and SKILL.md file. It is 3 bytes past the
+* budget: a UTF-8 character has at most 4 bytes, so a character cut at this
+* limit starts after the budget, and the budgeted text is the same as with a
+* full read.
+*/
+const FILE_READ_LIMIT_BYTES = 32771;
+/**
+* Print every path and file that the instructions read needs, one record per
+* line. The cwd is the workspace root, and all paths are relative to it.
+*
+* Arguments: the file read limit, then `repos` to read every Git worktree in
+* it or "", then one group for each selected directory. A group holds the
+* directories from the selected directory up to the workspace root, then "".
+* A group stops at its first directory with `.git`.
+*
+* Records: `R <dir>` for a Git worktree in repos/, `G <dir>/.git`, `D <path>`
+* for a directory in a skill root, `E <path>` for another entry in a skill
+* root, and `F <base64> <path>` for an AGENTS.md or SKILL.md file. File
+* tests follow symlinks like `stat -L`. Globs skip dot entries like `ls -1`,
+* which the Vercel Sandbox `readdir` runs.
+*/
+const READ_SCRIPT = `
+limit=$1
+repos=$2
+shift 2
+
+nl='
+'
+# A glob result is an entry when it exists. Like the lines of \`ls -1\`, a
+# name with a line break does not name an entry.
+listed() {
+  case $1 in *"$nl"*) return 1 ;; esac
+  [ -e "$1" ] || [ -L "$1" ]
 }
-async function directoryExists(fs, target) {
-	try {
-		return (await fs.stat(target)).isDirectory();
-	} catch (error) {
-		if (isMissingPathError(error)) return false;
-		throw error;
-	}
+
+emit_file() {
+  [ -f "$1" ] || return 0
+  if [ ! -r "$1" ]; then
+    printf 'cannot read %s\\n' "$1" >&2
+    exit 1
+  fi
+  printf 'F '
+  head -c "$limit" < "$1" | base64 | tr -d '\\n'
+  printf ' %s\\n' "$1"
+}
+
+emit_skills() {
+  for entry in "$1/.agents/skills"/* "$1/.claude/skills"/*; do
+    listed "$entry" || continue
+    # The first skill root wins for each name. Skip entries that it shadows.
+    case $entry in
+      "$1/.claude/skills/"*) listed "$1/.agents/skills/\${entry##*/}" && continue ;;
+    esac
+    if [ -d "$entry" ]; then
+      printf 'D %s\\n' "$entry"
+      emit_file "$entry/SKILL.md"
+    else
+      printf 'E %s\\n' "$entry"
+    fi
+  done
 }
-async function findGitRoot(fs, cwd) {
+
+if [ -n "$repos" ]; then
+  for repo in "$repos"/*; do
+    if listed "$repo" && [ -d "$repo" ] && [ -e "$repo/.git" ]; then
+      printf 'R %s\\n' "$repo"
+      set -- "$@" "$repo" ""
+    fi
+  done
+fi
+
+found=
+for dir in "$@"; do
+  if [ -z "$dir" ]; then
+    found=
+  elif [ -z "$found" ]; then
+    emit_file "$dir/AGENTS.md"
+    if [ -e "$dir/.git" ]; then
+      printf 'G %s/.git\\n' "$dir"
+      emit_skills "$dir"
+      found=1
+    fi
+  fi
+done
+`;
+const BASE64_PATTERN = /^[A-Za-z0-9+/]*={0,2}$/;
+function compareStrings(left, right) {
+	return left < right ? -1 : left > right ? 1 : 0;
+}
+/** Directories that the Git root search checks, from cwd up to the workspace root. */
+function gitRootCandidates(cwd) {
+	const candidates = [];
 	let current = cwd;
 	for (;;) {
-		if (await pathExists(fs, path.posix.join(current, ".git"))) return current;
-		if (current === SANDBOX_WORKSPACE_ROOT) return;
+		candidates.push(current);
+		if (current === SANDBOX_WORKSPACE_ROOT) return candidates;
 		const parent = path.posix.dirname(current);
-		if (parent === current || parent !== SANDBOX_WORKSPACE_ROOT && !parent.startsWith(`${SANDBOX_WORKSPACE_ROOT}/`)) return;
+		if (parent === current || parent !== SANDBOX_WORKSPACE_ROOT && !parent.startsWith(`${SANDBOX_WORKSPACE_ROOT}/`)) return candidates;
 		current = parent;
 	}
 }
-/** Return Git worktrees under repos/, sorted for stable instruction capture. */
-async function listRepositoryDirectories(fs) {
-	if (!await directoryExists(fs, SANDBOX_REPOS_ROOT)) return [];
-	const entries = await fs.readdir(SANDBOX_REPOS_ROOT);
-	const repositories = [];
-	for (const entry of entries) {
-		const candidate = path.posix.join(SANDBOX_REPOS_ROOT, entry);
-		if (await directoryExists(fs, candidate) && await pathExists(fs, path.posix.join(candidate, ".git"))) repositories.push(candidate);
+function findGitRoot(tree, cwd) {
+	return gitRootCandidates(cwd).find((directory) => tree.gitMarkers.has(path.posix.join(directory, ".git")));
+}
+function invalidOutput() {
+	return /* @__PURE__ */ new Error("Repository instructions read printed invalid output");
+}
+function parseRepositoryTree(stdout) {
+	const tree = {
+		entries: /* @__PURE__ */ new Map(),
+		files: /* @__PURE__ */ new Map(),
+		gitMarkers: /* @__PURE__ */ new Set(),
+		repositories: []
+	};
+	const lines = stdout.split("\n");
+	if (lines.pop() !== "") throw invalidOutput();
+	for (const line of lines) {
+		const kind = line.slice(0, 2);
+		let target = line.slice(2);
+		let content = "";
+		if (kind === "F ") {
+			const separator = target.indexOf(" ");
+			if (separator < 0) throw invalidOutput();
+			content = target.slice(0, separator);
+			target = target.slice(separator + 1);
+			if (!BASE64_PATTERN.test(content)) throw invalidOutput();
+		}
+		if (!target) throw invalidOutput();
+		const absolute = path.posix.join(SANDBOX_WORKSPACE_ROOT, target);
+		switch (kind) {
+			case "R ":
+				tree.repositories.push(absolute);
+				break;
+			case "G ":
+				tree.gitMarkers.add(absolute);
+				break;
+			case "D ":
+			case "E ": {
+				const root = path.posix.dirname(absolute);
+				const entries = tree.entries.get(root) ?? /* @__PURE__ */ new Map();
+				entries.set(path.posix.basename(absolute), kind === "D ");
+				tree.entries.set(root, entries);
+				break;
+			}
+			case "F ":
+				tree.files.set(absolute, Buffer.from(content, "base64").toString("utf8"));
+				break;
+			default: throw invalidOutput();
+		}
 	}
-	return repositories.sort((left, right) => left < right ? -1 : left > right ? 1 : 0);
+	tree.repositories.sort(compareStrings);
+	return tree;
 }
-async function readInstructionFile(fs, filePath) {
-	try {
-		const content = await fs.readFile(filePath, { encoding: "utf8" });
-		return content.trim() ? content : void 0;
-	} catch (error) {
-		if (isMissingPathError(error)) return;
-		throw error;
-	}
+/** Read what the selected directories need with one sandbox command. */
+async function readRepositoryTree(args) {
+	const relative = (target) => path.posix.relative(SANDBOX_WORKSPACE_ROOT, target) || ".";
+	const result = await args.runCommand({
+		cmd: "sh",
+		args: [
+			"-c",
+			READ_SCRIPT,
+			"sh",
+			String(FILE_READ_LIMIT_BYTES),
+			args.discover ? relative(SANDBOX_REPOS_ROOT) : "",
+			...args.directories.flatMap((directory) => [...gitRootCandidates(directory).map(relative), ""])
+		],
+		cwd: SANDBOX_WORKSPACE_ROOT
+	});
+	if (result.exitCode !== 0) throw new Error(`Repository instructions read failed with exit code ${result.exitCode}: ${result.stderr.trim()}`);
+	return parseRepositoryTree(result.stdout);
 }
-async function readOptionalDirectory(fs, directory) {
-	try {
-		return await fs.readdir(directory);
-	} catch (error) {
-		if (isMissingPathError(error)) return [];
-		throw error;
-	}
+function readInstructionFile(tree, filePath) {
+	const content = tree.files.get(filePath);
+	return content?.trim() ? content : void 0;
 }
 /** Read model-invocable skills from the repository skill directories. */
-async function readRepositorySkills(fs, gitRoot) {
-	const roots = REPOSITORY_SKILL_ROOTS.map((root) => path.posix.join(gitRoot, root));
-	const listings = await Promise.all(roots.map(async (root) => await readOptionalDirectory(fs, root)));
+function readRepositorySkills(tree, gitRoot) {
 	const candidates = /* @__PURE__ */ new Map();
-	listings.forEach((entries, index) => {
-		for (const entry of [...entries].sort()) if (!candidates.has(entry)) candidates.set(entry, path.posix.join(roots[index], entry));
-	});
-	return (await Promise.all([...candidates].map(async ([name, skillDirectory]) => {
-		if (!await directoryExists(fs, skillDirectory)) return;
-		const filePath = path.posix.join(skillDirectory, "SKILL.md");
-		const raw = await readInstructionFile(fs, filePath);
+	for (const root of REPOSITORY_SKILL_ROOTS) {
+		const rootPath = path.posix.join(gitRoot, root);
+		const entries = [...tree.entries.get(rootPath) ?? []].sort(([left], [right]) => compareStrings(left, right));
+		for (const [name, directory] of entries) if (!candidates.has(name)) candidates.set(name, {
+			directory,
+			path: path.posix.join(rootPath, name)
+		});
+	}
+	const skills = [];
+	for (const [name, candidate] of candidates) {
+		if (!candidate.directory) continue;
+		const filePath = path.posix.join(candidate.path, "SKILL.md");
+		const raw = readInstructionFile(tree, filePath);
 		const parsed = raw ? parseSkillFile(raw, name) : void 0;
-		if (!parsed?.ok || parsed.skill.disableModelInvocation) return;
-		return {
+		if (!parsed?.ok || parsed.skill.disableModelInvocation) continue;
+		skills.push({
 			description: parsed.skill.description.replace(/\s+/g, " ").trim(),
 			name,
 			path: filePath
-		};
-	}))).filter((skill) => Boolean(skill)).sort((left, right) => left.name < right.name ? -1 : left.name > right.name ? 1 : 0);
+		});
+	}
+	return skills.sort((left, right) => compareStrings(left.name, right.name));
 }
 function sourceBytes(sources) {
 	return sources.reduce((total, source) => total + Buffer.byteLength(source.content, "utf8"), 0);
@@ -465,7 +426,7 @@ function skillListBytes(skills) {
 	return skills.reduce((total, skill) => total + repositorySkillBytes(skill), 0);
 }
 /** Read root-to-cwd AGENTS.md files within the byte budget. */
-async function readAgentsSources(args) {
+function readAgentsSources(args) {
 	const directories = [];
 	let current = args.cwd;
 	for (;;) {
@@ -479,7 +440,7 @@ async function readAgentsSources(args) {
 	for (const directory of directories) {
 		if (remaining <= 0) break;
 		const filePath = path.posix.join(directory, AGENTS_FILENAME);
-		const content = await readInstructionFile(args.fs, filePath);
+		const content = readInstructionFile(args.tree, filePath);
 		if (!content) continue;
 		const bytes = Buffer.from(content, "utf8");
 		const bounded = bytes.length <= remaining ? content : bytes.subarray(0, remaining).toString("utf8");
@@ -492,11 +453,11 @@ async function readAgentsSources(args) {
 	return sources;
 }
 /** Read repository skills that fit the byte budget, keeping each entry whole. */
-async function readRepositorySkillsWithinBudget(args) {
+function readRepositorySkillsWithinBudget(args) {
 	const skills = [];
 	let remaining = args.maxBytes;
 	if (remaining <= 0) return skills;
-	for (const skill of await readRepositorySkills(args.fs, args.gitRoot)) {
+	for (const skill of readRepositorySkills(args.tree, args.gitRoot)) {
 		const bytes = repositorySkillBytes(skill);
 		if (bytes > remaining) break;
 		skills.push(skill);
@@ -556,19 +517,33 @@ function mergeRepositoryInstructions(bundles) {
 		text
 	};
 }
-/** Resolve AGENTS.md instructions for each selected repository directory. */
-async function resolveRepositoryInstructionsForDirectories(args) {
-	const uniqueDirectories = [...new Set(args.directories.filter((directory) => directory === SANDBOX_WORKSPACE_ROOT || directory.startsWith(`${SANDBOX_WORKSPACE_ROOT}/`)))].sort((left, right) => left < right ? -1 : left > right ? 1 : 0);
+/**
+* Read AGENTS.md instructions and repository skills for the selected
+* directories with one sandbox command. Without directories, use every Git
+* worktree under repos/.
+*/
+async function readRepositoryInstructions(args) {
+	const selected = [...new Set((args.directories ?? []).filter((directory) => directory === SANDBOX_WORKSPACE_ROOT || directory.startsWith(`${SANDBOX_WORKSPACE_ROOT}/`)))].sort(compareStrings);
+	if (args.directories && selected.length === 0) return {
+		directories: args.directories,
+		instructions: void 0
+	};
+	const tree = await readRepositoryTree({
+		directories: selected,
+		discover: !args.directories,
+		runCommand: args.runCommand
+	});
+	const cwds = args.directories ? selected : tree.repositories;
 	let remaining = MAX_REPOSITORY_INSTRUCTIONS_BYTES;
 	const repositories = [];
-	for (const directory of uniqueDirectories) {
-		const gitRoot = await findGitRoot(args.fs, directory);
+	for (const directory of cwds) {
+		const gitRoot = findGitRoot(tree, directory);
 		if (!gitRoot) continue;
-		const sources = await readAgentsSources({
+		const sources = readAgentsSources({
 			cwd: directory,
-			fs: args.fs,
 			gitRoot,
-			maxBytes: remaining
+			maxBytes: remaining,
+			tree
 		});
 		remaining -= sourceBytes(sources);
 		repositories.push({
@@ -579,16 +554,19 @@ async function resolveRepositoryInstructionsForDirectories(args) {
 	}
 	const bundles = [];
 	for (const repository of repositories) {
-		const skills = await readRepositorySkillsWithinBudget({
-			fs: args.fs,
+		const skills = readRepositorySkillsWithinBudget({
 			gitRoot: repository.gitRoot,
-			maxBytes: remaining
+			maxBytes: remaining,
+			tree
 		});
 		remaining -= skillListBytes(skills);
 		const bundle = buildRepositoryInstructions(repository.directory, repository.sources, skills);
 		if (bundle) bundles.push(bundle);
 	}
-	return mergeRepositoryInstructions(bundles);
+	return {
+		directories: args.directories ?? cwds,
+		instructions: mergeRepositoryInstructions(bundles)
+	};
 }
 /** Render repository instructions with Codex's exact model-visible wrapper. */
 function renderAgentsInstructions(args) {
@@ -725,6 +703,7 @@ function buildChatEndAttributes(message, mode) {
 	Object.assign(attributes, extractGenAiUsageAttributes(message));
 	if (message.stopReason) attributes["gen_ai.response.finish_reasons"] = [normalizeGenAiFinishReason(message.stopReason)];
 	if (message.model) attributes["gen_ai.response.model"] = message.model;
+	if (message.responseId) attributes["gen_ai.response.id"] = message.responseId;
 	if (message.stopReason === "error") {
 		const providerError = createProviderError(message.errorMessage ?? "");
 		Object.assign(attributes, getProviderErrorAttributes(providerError));
@@ -761,6 +740,22 @@ function createResponseTiming(requestStartedAtMs) {
 		}
 	};
 }
+function traceResponseHeaders(span, options) {
+	const eventLoopStart = performance$1.eventLoopUtilization();
+	const onResponse = options?.onResponse;
+	return {
+		...options,
+		onResponse: async (response, model) => {
+			try {
+				const vercelId = response.headers["x-vercel-id"];
+				if (vercelId) span.setAttribute("app.ai.gateway.vercel_id", vercelId);
+				const { utilization } = performance$1.eventLoopUtilization(eventLoopStart);
+				span.setAttribute("app.ai.event_loop.utilization", Math.round(utilization * 1e3) / 1e3);
+			} catch {}
+			await onResponse?.(response, model);
+		}
+	};
+}
 function relayStream(source, onEvent) {
 	const relayed = createAssistantMessageEventStream();
 	const finished = (async () => {
@@ -801,7 +796,7 @@ function createTracedStreamFn(baseOrOptions = streamSimple) {
 		});
 		try {
 			const requestStartedAtMs = Date.now();
-			const stream = await withActiveSpan(span, () => Promise.resolve(base(model, context, options)));
+			const stream = await withActiveSpan(span, () => Promise.resolve(base(model, context, traceResponseHeaders(span, options))));
 			const responseTiming = createResponseTiming(requestStartedAtMs);
 			const relay = relayStream(stream, responseTiming.observe);
 			relay.finished.then(() => stream.result()).then((finalMessage) => {
@@ -3961,9 +3956,10 @@ function createSandboxRuntime(options) {
 			withSpan: withSandboxSpan
 		});
 	};
+	const ensureDocker = async (targetSandbox) => await withSandboxSpan("sandbox.docker.ensure", "sandbox.docker.ensure", {}, async () => await ensureDockerDaemon(targetSandbox));
 	const prepareSandbox = async (targetSandbox) => {
 		await syncSkills(targetSandbox);
-		await withSandboxSpan("sandbox.docker.ensure", "sandbox.docker.ensure", {}, async () => await ensureDockerDaemon(targetSandbox));
+		await ensureDocker(targetSandbox);
 		await options.onSandboxPrepare?.(targetSandbox);
 	};
 	const applyNetworkPolicy = async (targetSandbox, traceHeaders) => {
@@ -4187,10 +4183,17 @@ function createSandboxRuntime(options) {
 			}
 			throw new Error("sandbox restore failed", { cause: error });
 		}
-		let networkPolicyKey;
 		try {
-			networkPolicyKey = await applyNetworkPolicy(hintedSandbox);
-			await prepareSandbox(hintedSandbox);
+			const steps = await Promise.allSettled([
+				applyNetworkPolicy(hintedSandbox),
+				syncSkills(hintedSandbox),
+				ensureDocker(hintedSandbox)
+			]);
+			const failures = steps.flatMap((step) => step.status === "rejected" ? [step.reason] : []);
+			if (failures.length > 0) throw failures.find((error) => getSandboxProvider().errors.isUnavailable(error)) ?? failures[0];
+			const [policy] = steps;
+			const networkPolicyKey = policy.status === "fulfilled" ? policy.value : void 0;
+			await options.onSandboxPrepare?.(hintedSandbox);
 			dependencyProfileHash = ref.profileHash ?? dependencyProfileHash;
 			await persistSandboxRef({
 				...ref,
@@ -4212,17 +4215,26 @@ function createSandboxRuntime(options) {
 			const cachedSandbox = await tryReuseCachedSandbox();
 			if (cachedSandbox) {
 				setSpanAttributes({ "app.sandbox.acquire.outcome": "memory" });
-				return cachedSandbox;
+				return {
+					session: cachedSandbox,
+					fresh: false
+				};
 			}
 			signal?.throwIfAborted();
 			const hintedSandbox = await tryRestoreHintedSandbox(signal);
 			if (hintedSandbox) {
 				setSpanAttributes({ "app.sandbox.acquire.outcome": "resumed" });
-				return hintedSandbox;
+				return {
+					session: hintedSandbox,
+					fresh: true
+				};
 			}
 			const createdSandbox = await createFreshSandbox(signal);
 			setSpanAttributes({ "app.sandbox.acquire.outcome": "created" });
-			return createdSandbox;
+			return {
+				session: createdSandbox,
+				fresh: true
+			};
 		});
 	};
 	const getOrAcquireSandbox = async (signal) => {
@@ -4378,10 +4390,12 @@ function createSandboxRuntime(options) {
 		};
 	};
 	const ensureReadySandbox = async (signal) => {
-		const session = await getOrAcquireSandbox(signal);
-		signal?.throwIfAborted();
-		await probeSession(session);
+		const { session, fresh } = await getOrAcquireSandbox(signal);
 		signal?.throwIfAborted();
+		if (!fresh) {
+			await probeSession(session);
+			signal?.throwIfAborted();
+		}
 		await extendKeepAlive(session);
 		startKeepAlive(session);
 		return session;
@@ -4428,7 +4442,7 @@ function createSandboxRuntime(options) {
 			await stopSession(previous?.session);
 		},
 		async acquire(signal) {
-			return await getOrAcquireSandbox(signal);
+			return (await getOrAcquireSandbox(signal)).session;
 		},
 		async tools(signal) {
 			return createToolExecutors(await ensureReadySandbox(signal));
@@ -4447,6 +4461,172 @@ function createSandboxRuntime(options) {
 		}
 	};
 }
+// src/chat/tools/sandbox/file-utils.ts
+const MAX_TEXT_CHARS = 6e4;
+const RIPGREP_EXCLUDED_GLOBS = ["!**/.git/**", "!**/node_modules/**"];
+const DEFAULT_SEARCH_COMMAND_TIMEOUT_MS = 3e4;
+const SKIPPED_DIRECTORIES = /* @__PURE__ */ new Set([".git", "node_modules"]);
+/** Normalize model-supplied numeric knobs before they reach filesystem tools. */
+function positiveInteger$1(value) {
+	if (typeof value !== "number" || !Number.isFinite(value)) return;
+	const integer = Math.floor(value);
+	return integer > 0 ? integer : void 0;
+}
+/** Compare and slice text in one line-ending space while preserving callers' output rules. */
+function normalizeToLf$1(value) {
+	return value.replace(/\r\n/g, "\n").replace(/\r/g, "\n");
+}
+/** Keep tool output inside the model-facing budget with an explicit notice. */
+function truncateText$1(value, maxChars = MAX_TEXT_CHARS) {
+	if (value.length <= maxChars) return {
+		content: value,
+		truncated: false
+	};
+	const removed = value.length - maxChars;
+	return {
+		content: `${value.slice(0, maxChars)}\n\n[output truncated: ${removed} characters removed]`,
+		truncated: true
+	};
+}
+/** Detect model-facing missing paths without swallowing sandbox lifecycle/API failures. */
+function isMissingPathError(error) {
+	if (!error || typeof error !== "object") return false;
+	const candidate = error;
+	if (candidate.code === "ENOENT") return true;
+	return typeof candidate.message === "string" && candidate.message.startsWith("File not found:");
+}
+/** Reject an expected missing search/list path through the tool-error channel. */
+function missingPathSearchResult(params) {
+	const textPath = params.displayPath ?? params.missingPath ?? params.path;
+	throw new ToolInputError(`Path not found: ${textPath}`);
+}
+function escapeRegExp(value) {
+	return value.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+}
+function globToRegExp(pattern) {
+	let source = "";
+	for (let index = 0; index < pattern.length; index += 1) {
+		const char = pattern.charAt(index);
+		const next = pattern[index + 1];
+		if (char === "*" && next === "*") {
+			if (pattern[index + 2] === "/") {
+				source += "(?:.*/)?";
+				index += 2;
+				continue;
+			}
+			source += ".*";
+			index += 1;
+			continue;
+		}
+		if (char === "*") {
+			source += "[^/]*";
+			continue;
+		}
+		if (char === "?") {
+			source += "[^/]";
+			continue;
+		}
+		source += escapeRegExp(char);
+	}
+	return new RegExp(`^${source}$`);
+}
+function matchesGlob(relativePath, pattern) {
+	const matcher = globToRegExp(pattern);
+	if (matcher.test(relativePath)) return true;
+	if (pattern.startsWith("**/") && matchesGlob(relativePath, pattern.slice(3))) return true;
+	return !pattern.includes("/") && matcher.test(path.posix.basename(relativePath));
+}
+/** Keep sandbox filesystem tools scoped to the mounted workspace root. */
+function resolveWorkspacePath(input, fallback = ".") {
+	const requested = (input ?? "").trim() || fallback;
+	const absolute = requested.startsWith("/") ? requested : path.posix.join(SANDBOX_WORKSPACE_ROOT, requested);
+	const normalized = path.posix.normalize(absolute);
+	if (normalized !== SANDBOX_WORKSPACE_ROOT && !normalized.startsWith(`${SANDBOX_WORKSPACE_ROOT}/`)) throw new ToolInputError(`Path must stay within ${SANDBOX_WORKSPACE_ROOT}: ${requested}`);
+	return normalized;
+}
+/** Anchor ripgrep paths and globs to the requested search root. */
+function getRipgrepSearchLocation(root, rootIsDirectory) {
+	if (rootIsDirectory) return {
+		cwd: root,
+		target: "."
+	};
+	return {
+		cwd: path.posix.dirname(root),
+		target: path.posix.basename(root)
+	};
+}
+/** Share bounded workspace traversal across search tools so their skip rules stay aligned. */
+async function collectFiles(params) {
+	const files = [];
+	let limitReached = false;
+	let missingPath;
+	const visit = async (dirPath) => {
+		if (missingPath) return;
+		let entries;
+		try {
+			entries = (await params.fs.readdir(dirPath)).sort((a, b) => a.toLowerCase().localeCompare(b.toLowerCase()));
+		} catch (error) {
+			if (isMissingPathError(error)) {
+				missingPath = dirPath;
+				return;
+			}
+			throw error;
+		}
+		for (const entry of entries) {
+			const fullPath = path.posix.join(dirPath, entry);
+			let stat;
+			try {
+				stat = await params.fs.stat(fullPath);
+			} catch (error) {
+				if (isMissingPathError(error)) {
+					missingPath = fullPath;
+					return;
+				}
+				throw error;
+			}
+			if (stat.isDirectory()) {
+				if (!SKIPPED_DIRECTORIES.has(entry)) await visit(fullPath);
+				if (limitReached) return;
+				continue;
+			}
+			const relativePath = path.posix.relative(params.root, fullPath);
+			if (!params.pattern || matchesGlob(relativePath, params.pattern)) {
+				files.push(fullPath);
+				if (params.limit && files.length >= params.limit) {
+					limitReached = true;
+					return;
+				}
+			}
+		}
+	};
+	let stat;
+	try {
+		stat = await params.fs.stat(params.root);
+	} catch (error) {
+		if (isMissingPathError(error)) return {
+			files,
+			limitReached: false,
+			missingPath: params.root,
+			missingRoot: true
+		};
+		throw error;
+	}
+	if (!stat.isDirectory()) {
+		const relativePath = path.posix.basename(params.root);
+		return {
+			files: !params.pattern || matchesGlob(relativePath, params.pattern) ? [params.root] : [],
+			limitReached: false,
+			missingRoot: false
+		};
+	}
+	await visit(params.root);
+	return {
+		files,
+		limitReached,
+		missingPath,
+		missingRoot: missingPath === params.root
+	};
+}
 // src/chat/tools/sandbox/text-edits.ts
 const MAX_DIFF_LINE_CHARS = 4e3;
 /** Preserve a text artifact's dominant line-ending style across rewrites. */
@@ -5706,13 +5886,12 @@ function createSandbox(options) {
 	return {
 		async captureRepositoryInstructions() {
 			if (!runtime.sandboxRef()) return;
-			const { fs } = await runtime.tools();
+			const { runCommand } = await runtime.tools();
 			const workspaceDirectories = activeWorkspace?.repos.map((repo) => tryWorkspaceRepoCheckoutPath(repo.repo)).filter((checkoutPath) => Boolean(checkoutPath)).map((checkoutPath) => `${SANDBOX_WORKSPACE_ROOT}/${checkoutPath}`) ?? [];
 			return await withSandboxSpan("sandbox.repository_instructions.read", "sandbox.repository_instructions.read", {}, async (setSpanAttributes) => {
-				const directories = workspaceDirectories.length > 0 ? workspaceDirectories : await listRepositoryDirectories(fs);
-				const instructions = await resolveRepositoryInstructionsForDirectories({
-					directories,
-					fs
+				const { directories, instructions } = await readRepositoryInstructions({
+					...workspaceDirectories.length > 0 ? { directories: workspaceDirectories } : void 0,
+					runCommand
 				});
 				setSpanAttributes({
 					"app.repository_instructions.repo_count": directories.length,
@@ -16717,6 +16896,12 @@ function createToolActionReview(options) {
 	const pendingRejections = /* @__PURE__ */ new Map();
 	let consecutiveRejections = 0;
 	/**
+	* Rejection state of each attempt, so an attempt counts only once. Pi runs
+	* a `codemode` call alone, so no other attempt changes the count while
+	* its batches run.
+	*/
+	const attempts = /* @__PURE__ */ new Map();
+	/**
 	* Review one action and record its decision. Gate state does not change
 	* here, so concurrent reviews in one batch cannot corrupt it.
 	*/
@@ -16743,8 +16928,50 @@ function createToolActionReview(options) {
 			};
 		}
 	};
+	/**
+	* Count each attempt in the batch once, in batch order. An attempt with a
+	* rejection adds one to the count from before the attempt, also when it
+	* has allowed actions or spans several batches. An attempt with only
+	* allowed actions resets the count. Skipped and unavailable actions do not
+	* change it. Return the attempt state of each action.
+	*/
+	const countAttempts = (actions, steps) => {
+		const states = actions.map((action) => {
+			const id = action.attemptId ?? action.toolCallId;
+			let state = attempts.get(id);
+			if (!state) {
+				state = {
+					before: consecutiveRejections,
+					exhausted: false,
+					rejected: false
+				};
+				attempts.set(id, state);
+			}
+			return state;
+		});
+		states.forEach((state, index) => {
+			const step = steps[index];
+			if (step.kind !== "reviewed" || state.rejected) return;
+			if (step.decision.decision === "allow") {
+				consecutiveRejections = 0;
+				return;
+			}
+			state.rejected = true;
+			consecutiveRejections = state.before + 1;
+			if (consecutiveRejections < MAX_CONSECUTIVE_REJECTIONS) return;
+			state.exhausted = true;
+			logException(new ToolActionReviewLimitError(), "guardian.action_review.exhausted", {
+				"app.guardian.decision": step.decision.decision,
+				"app.guardian.risk_level": step.decision.riskLevel,
+				"app.guardian.user_authorization": step.decision.userAuthorization,
+				"gen_ai.tool.name": step.proposal.tool.name,
+				"gen_ai.tool.call.id": actions[index].toolCallId
+			});
+		});
+		return states;
+	};
 	/** Apply one review step to gate state and return the action's result. */
-	const settle = (toolCallId, step) => {
+	const settle = (toolCallId, step, exhausted) => {
 		if (step.kind === "skipped") return { allowed: true };
 		if (step.kind === "unavailable") {
 			options.onFatal(step.error);
@@ -16754,24 +16981,12 @@ function createToolActionReview(options) {
 			};
 		}
 		const { decision, proposal } = step;
-		if (decision.decision === "allow") {
-			consecutiveRejections = 0;
-			return {
-				allowed: true,
-				decision
-			};
-		}
+		if (decision.decision === "allow") return {
+			allowed: true,
+			decision
+		};
 		const reviewedAction = projectedRejection(proposal, decision);
 		addPriorRejection(priorRejections, reviewedAction);
-		consecutiveRejections += 1;
-		const exhausted = consecutiveRejections >= MAX_CONSECUTIVE_REJECTIONS;
-		if (exhausted) logException(new ToolActionReviewLimitError(), "guardian.action_review.exhausted", {
-			"app.guardian.decision": decision.decision,
-			"app.guardian.risk_level": decision.riskLevel,
-			"app.guardian.user_authorization": decision.userAuthorization,
-			"gen_ai.tool.name": proposal.tool.name,
-			"gen_ai.tool.call.id": toolCallId
-		});
 		pendingRejections.set(toolCallId, {
 			decision: decision.decision,
 			priorRejection: reviewedAction,
@@ -16798,7 +17013,8 @@ function createToolActionReview(options) {
 			return await withSpan("guardian.action_review", "guardian.action_review", {}, async () => {
 				const rejections = [...priorRejections];
 				const steps = await mapConcurrent(actions, MAX_CONCURRENT_REVIEWS, (action) => reviewStep(action, rejections, signal));
-				return new Map(actions.map((action, index) => [action.toolCallId, settle(action.toolCallId, steps[index])]));
+				const states = countAttempts(actions, steps);
+				return new Map(actions.map((action, index) => [action.toolCallId, settle(action.toolCallId, steps[index], states[index].exhausted)]));
 			}, { "app.guardian.batch.size": actions.length });
 		},
 		projectToolResult(toolCallId, result) {
@@ -17506,6 +17722,7 @@ async function runCodeModeScript(run) {
 			});
 			return await run.pipeline.reviewScriptCalls(actions.map((action) => ({
 				...action,
+				attemptId: run.toolCallId,
 				script: {
 					source: run.source,
 					calls: earlier
@@ -17668,7 +17885,8 @@ function renderScriptTools(tools) {
 		"declare const tools: {",
 		...shown.map((entry) => entry.text),
 		"};",
-		...omitted > 0 ? [`${omitted} more tools are not declared here. Each ${SEARCH_TOOLS_NAME} result is also callable as \`tools.<tool_name>(args)\`, with its input_schema.`] : []
+		...omitted > 0 ? [`${omitted} more tools are not declared here. To find one, call ${SEARCH_TOOLS_NAME} directly before the script. Then call each result as \`tools.<tool_name>(args)\`, with its input_schema. A script cannot call ${SEARCH_TOOLS_NAME} or ${EXECUTE_TOOL_NAME}.`] : [],
+		...Object.hasOwn(tools, "callMcpTool") ? ["Call an MCP tool as `tools.callMcpTool({ tool_name, arguments })`. `tools.mcp__<provider>__<tool>` does not exist."] : []
 	].join("\n");
 }
 function renderDescription(tools) {
@@ -21260,6 +21478,7 @@ async function executeAgentRunInPrivacyContext(run, conversationPrivacy, runLogC
 		};
 		agent = new Agent({
 			getApiKey: getGatewayApiKey,
+			sessionId: conversationId,
 			streamFn: createTracedStreamFn({
 				conversationPrivacy,
 				...streamFn ? { base: streamFn } : void 0