orkestrator 2.34.5-beta → 2.35.0-beta

package/resources/codex-bridge/dist/index.js

@@ -331,7 +331,7 @@ function createBridgeDiagnostics(bridge, state, metrics) {
 import { execFile as execFileCallback2 } from "node:child_process";
 import { randomBytes, timingSafeEqual } from "node:crypto";
 import { appendFile as appendFile5, mkdir as mkdir9, readFile as readFile7, writeFile as writeFile6 } from "node:fs/promises";
-import { join as join21 } from "node:path";
+import { join as join22 } from "node:path";
 import { promisify as promisify2 } from "node:util";
 
 // ../../node_modules/.bun/@hono+node-server@2.1.5+c539cad7f494f5c9/node_modules/@hono/node-server/dist/constants-BLSFu_RU.mjs
@@ -13147,6 +13147,7 @@ var COORDINATOR_CONTROL_TOOL_NAMES = Object.freeze([
   "stop_node_environment",
   "stop_worker_turn",
   "switch_provider_account",
+  "set_account_auto_switch",
   "transfer_files",
   "update_schedule",
   "update_ticket"
@@ -15153,6 +15154,87 @@ function agentMailCapabilities(tabType, agent, locked = true) {
 }
 var NATIVE_AGENT_MAIL_CAPABILITIES = Object.freeze(Object.fromEntries(AGENT_PLATFORMS.map((agent) => [agent, agentMailCapabilities("agent-native", agent)])));
 
+// ../protocol/src/agent-system-instructions.ts
+var AGENT_IMAGE_PREVIEW_INSTRUCTION = "Orkestrator renders Markdown images inline in the transcript. When you show the user an image in your reply (a screenshot, rendered preview, or chart) using Markdown image syntax, reference it by its absolute path. In a managed worktree or container environment, save the file inside the working directory, preferably in a git-ignored folder so preview files stay out of the change set. Local image previews are limited to Orkestrator-managed workspace storage or the container's /workspace. Project-home checkouts are excluded from host preview reads, even when they are the working directory, so images saved there cannot be previewed from a local Markdown path. Paths outside previewable storage, such as /tmp, also show a placeholder.";
+var AGENT_DOCUMENT_INSTRUCTION = "When the user asks for a document (a report, design doc, plan, analysis, guide, or other writing to keep), prefer writing it as a Markdown file in a `docs/` folder at the root of the working directory, and tell the user the file's path. Project instructions (such as AGENTS.md or CLAUDE.md), local skills, and the user's own request take priority over this default when they say where or how to write documents.";
+var GENERAL_AGENT_INSTRUCTIONS = [
+  AGENT_IMAGE_PREVIEW_INSTRUCTION,
+  AGENT_DOCUMENT_INSTRUCTION
+];
+function agentSystemInstructions(providerSpecific = []) {
+  return [...GENERAL_AGENT_INSTRUCTIONS, ...providerSpecific].filter((line) => line.trim().length > 0).join(`
+
+`);
+}
+var REPOSITORY_INSTRUCTIONS_FILE = "AGENTS.md";
+function repositoryInstructionsBlock(path, content, truncated) {
+  return [
+    `# Repository instructions (${REPOSITORY_INSTRUCTIONS_FILE})`,
+    `This session does not load the repository's ${REPOSITORY_INSTRUCTIONS_FILE} on its own, so Orkestrator includes it here. Follow it as project instructions. Contents of ${path}:`,
+    content.trimEnd(),
+    ...truncated ? [
+      `[${REPOSITORY_INSTRUCTIONS_FILE} is longer than this session can hold, so it is cut here. Read the rest from ${path} before relying on anything it may say.]`
+    ] : []
+  ].join(`
+
+`);
+}
+
+// ../protocol/src/node/repository-instructions.ts
+import { open as open4, realpath } from "node:fs/promises";
+import { join as join12, relative as relative2, isAbsolute as isAbsolute7 } from "node:path";
+var MAX_REPOSITORY_INSTRUCTIONS_BYTES = 256 * 1024;
+async function readRepositoryInstructions(cwd, maxBytes = MAX_REPOSITORY_INSTRUCTIONS_BYTES) {
+  const path = join12(cwd, REPOSITORY_INSTRUCTIONS_FILE);
+  try {
+    const [root, target] = await Promise.all([realpath(cwd), realpath(path)]);
+    const inside = relative2(root, target);
+    if (!inside || inside.startsWith("..") || isAbsolute7(inside))
+      return;
+    const handle = await open4(target, "r");
+    try {
+      const buffer = Buffer.alloc(maxBytes + 1);
+      const { bytesRead } = await handle.read(buffer, 0, maxBytes + 1, 0);
+      const truncated = bytesRead > maxBytes;
+      const text = new TextDecoder().decode(buffer.subarray(0, Math.min(bytesRead, maxBytes))).replace(/�$/, "");
+      return text.trim() ? repositoryInstructionsBlock(path, text, truncated) : undefined;
+    } finally {
+      await handle.close();
+    }
+  } catch {
+    return;
+  }
+}
+
+// ../protocol/src/build-pipeline-key-information.ts
+var KEY_INFORMATION_LIMITS = Object.freeze({
+  proseLength: 4000,
+  itemLength: 600,
+  listItems: 30,
+  decisions: 12,
+  decisionLength: 400,
+  options: 6,
+  optionLength: 300,
+  prosCons: 6,
+  rationaleLength: 1000,
+  tests: 40,
+  testNameLength: 400,
+  issues: 60,
+  issueLength: 400,
+  severityLength: 40,
+  resolutionLength: 1000,
+  verifications: 20,
+  summaryLength: 2000,
+  checks: 30,
+  checkLength: 400,
+  updates: 30,
+  maxRound: 1000
+});
+var KEY_INFORMATION_TOOL_NAMES = Object.freeze([
+  "get_key_information",
+  "update_key_information"
+]);
+
 // ../protocol/src/transcript-artifacts.ts
 var ARTIFACT_TOOL_NAMES = Object.freeze([
   "create_artifact",
@@ -15167,9 +15249,9 @@ var ORKESTRATOR_ARTIFACT_MCP_SERVER_NAME = "orkestrator-artifacts";
 var ORKESTRATOR_ARTIFACT_MCP_PATH = "/artifact-mcp";
 
 // ../../bridges/codex-bridge/src/engine/app-server-engine.ts
-import { open as open7 } from "node:fs/promises";
+import { open as open8 } from "node:fs/promises";
 import { createHash as createHash11 } from "node:crypto";
-import { isAbsolute as isAbsolute8, join as join18 } from "node:path";
+import { isAbsolute as isAbsolute9, join as join19 } from "node:path";
 
 // ../../bridges/codex-bridge/src/app-server/process-supervisor.ts
 import { execFile as execFile3, spawn as spawn2 } from "node:child_process";
@@ -15177,14 +15259,14 @@ import { randomUUID as randomUUID6 } from "node:crypto";
 import {
   link,
   mkdir as mkdir6,
-  open as open4,
+  open as open5,
   readFile as readFile5,
   readlink,
   rename as rename4,
   rm as rm5,
   stat as stat5
 } from "node:fs/promises";
-import { join as join13 } from "node:path";
+import { join as join14 } from "node:path";
 
 // ../../bridges/codex-bridge/src/app-server/errors.ts
 var APP_SERVER_OVERLOAD_CODE = -32001;
@@ -15784,7 +15866,7 @@ class SerialQueue {
 
 // ../../bridges/codex-bridge/src/app-server/notification-recorder.ts
 import { appendFile as appendFile4, mkdir as mkdir5 } from "node:fs/promises";
-import { join as join12 } from "node:path";
+import { join as join13 } from "node:path";
 var DEFAULT_MAX_RECORDING_BYTES = 64 * 1024 * 1024;
 var DEFAULT_FLUSH_INTERVAL_MS = 250;
 var DEFAULT_WARN_INTERVAL_MS = 60000;
@@ -15810,7 +15892,7 @@ class NotificationRecorder {
   stats;
   constructor(options) {
     this.options = options;
-    this.path = join12(options.directory, options.fileName);
+    this.path = join13(options.directory, options.fileName);
     this.maxBytes = options.maxBytes ?? DEFAULT_MAX_RECORDING_BYTES;
     this.flushIntervalMs = options.flushIntervalMs ?? DEFAULT_FLUSH_INTERVAL_MS;
     this.warnIntervalMs = options.warnIntervalMs ?? DEFAULT_WARN_INTERVAL_MS;
@@ -16537,10 +16619,10 @@ class AppServerSupervisor {
     } catch {}
   }
   pidFileDir() {
-    return join13(this.options.codexHome, "orkestrator-bridge");
+    return join14(this.options.codexHome, "orkestrator-bridge");
   }
   pidFilePath() {
-    return join13(this.pidFileDir(), `app-server-${hashPath(this.options.cwd)}.pid`);
+    return join14(this.pidFileDir(), `app-server-${hashPath(this.options.cwd)}.pid`);
   }
   async readOwnedPidRecord(path) {
     let raw;
@@ -16579,7 +16661,7 @@ class AppServerSupervisor {
       instanceId
     }), "utf8");
     const temporary = `${path}.${this.pidOwnerToken}.update`;
-    const handle = await open4(temporary, "wx", 384);
+    const handle = await open5(temporary, "wx", 384);
     try {
       await handle.write(payload, 0, payload.length, 0);
       await handle.sync();
@@ -16603,7 +16685,7 @@ class AppServerSupervisor {
     await mkdir6(this.pidFileDir(), { recursive: true });
     for (let attempt = 0;attempt < PID_ACQUISITION_MAX_ATTEMPTS; attempt += 1) {
       try {
-        const handle = await open4(this.pidFilePath(), "wx", 384);
+        const handle = await open5(this.pidFilePath(), "wx", 384);
         try {
           const record = {
             ownerToken: this.pidOwnerToken,
@@ -17033,10 +17115,11 @@ function describeApproval(options) {
   } : undefined;
   const networkContext = isRecord9(params.networkApprovalContext) ? str2(params.networkApprovalContext.host) : undefined;
   const command = commandText(params.command) ?? commandActionsText(params.commandActions);
-  const exactCommand = options.method === "item/commandExecution/requestApproval" && (params.kind === undefined || params.kind === null || params.kind === "command") && typeof params.command === "string" && params.command.length > 0;
-  const ruleEligible = networkContext !== undefined ? kind === "command" && exactCommand : kind === "command" ? exactCommand : kind === "file-change" ? str2(params.grantRoot) === undefined : false;
+  const v2Command = options.method === "item/commandExecution/requestApproval" && (params.kind === undefined || params.kind === null || params.kind === "command");
+  const exactCommand = v2Command && typeof params.command === "string" && params.command.length > 0;
+  const ruleEligible = networkContext !== undefined ? v2Command && (exactCommand || command === undefined) : kind === "command" ? exactCommand : kind === "file-change" ? str2(params.grantRoot) === undefined : false;
   const proposal = exactCommand ? proposedPrefix(params.proposedExecpolicyAmendment) : undefined;
-  const actionable = kind === "command" ? command !== undefined : kind === "file-change" ? Boolean(changes?.length) : permissions !== undefined && (permissions.network || permissions.fileSystem);
+  const actionable = kind === "command" ? command !== undefined || networkContext !== undefined : kind === "file-change" ? Boolean(changes?.length) : permissions !== undefined && (permissions.network || permissions.fileSystem);
   return {
     approvalId: options.approvalId,
     kind,
@@ -17101,7 +17184,7 @@ function describeApprovalOutcome(request, decision, resolution) {
     return null;
   if (isGrantingApprovalDecision(decision))
     return null;
-  const subject = request.kind === "command" ? request.command ? `permission to run \`${request.command}\`` : "permission to run a command" : request.kind === "file-change" ? request.changes?.length ? `permission to change ${request.changes.length} file(s)` : "permission to apply a file change" : "additional permissions";
+  const subject = request.kind === "command" ? request.command ? `permission to run \`${request.command}\`` : request.networkHost ? `permission to reach \`${request.networkHost}\`` : "permission to run a command" : request.kind === "file-change" ? request.changes?.length ? `permission to change ${request.changes.length} file(s)` : "permission to apply a file change" : "additional permissions";
   switch (resolution) {
     case "timed-out":
       return `Codex asked for ${subject}. The request expired without an answer, so it was declined.`;
@@ -18040,6 +18123,9 @@ function reduceNotification(notification, generation, handle) {
       if (!isRecord10(params) || !isRecord10(params.rateLimits))
         return { events: [] };
       const snapshot = params.rateLimits;
+      const limitId = str3(snapshot.limitId);
+      if (limitId && limitId !== "codex")
+        return { events: [] };
       const windows = [];
       const limitName = typeof snapshot.limitName === "string" && snapshot.limitName.length > 0 ? snapshot.limitName : undefined;
       if (!isRecord10(snapshot.primary) && limitName !== undefined) {
@@ -18421,8 +18507,8 @@ function redactSecrets(value) {
 
 // ../../bridges/codex-bridge/src/sessions/dispatch-journal.ts
 import { createHash as createHash10 } from "node:crypto";
-import { mkdir as mkdir8, open as open5, rename as rename6, rm as rm7, writeFile as writeFile5 } from "node:fs/promises";
-import { join as join15 } from "node:path";
+import { mkdir as mkdir8, open as open6, rename as rename6, rm as rm7, writeFile as writeFile5 } from "node:fs/promises";
+import { join as join16 } from "node:path";
 
 // ../../bridges/codex-bridge/src/sessions/persistence.ts
 import { createHash as createHash9, randomUUID as randomUUID7 } from "node:crypto";
@@ -18437,7 +18523,7 @@ import {
   stat as stat6,
   writeFile as writeFile4
 } from "node:fs/promises";
-import { join as join14 } from "node:path";
+import { join as join15 } from "node:path";
 var BRIDGE_SESSION_REGISTRY_VERSION = 2;
 var SESSION_TITLE_SOURCES = new Set([
   "codex",
@@ -18542,20 +18628,20 @@ class BridgeSessionStore {
     return codexBridgeStateDir(this.codexHome);
   }
   path() {
-    return join14(this.dir(), `bridge-sessions-${this.cwdHash}.json`);
+    return join15(this.dir(), `bridge-sessions-${this.cwdHash}.json`);
   }
   recordsDir() {
-    return join14(this.dir(), `bridge-sessions-${this.cwdHash}`);
+    return join15(this.dir(), `bridge-sessions-${this.cwdHash}`);
   }
   loginRecordsDir() {
-    const directory = join14(codexLoginBridgeDir(this.codexHome), `bridge-sessions-${this.cwdHash}`);
+    const directory = join15(codexLoginBridgeDir(this.codexHome), `bridge-sessions-${this.cwdHash}`);
     return directory === this.recordsDir() ? undefined : directory;
   }
   recordKey(bridgeSessionId) {
     return createHash9("sha256").update(bridgeSessionId).digest("hex");
   }
   recordPath(bridgeSessionId) {
-    return join14(this.recordsDir(), `${this.recordKey(bridgeSessionId)}.json`);
+    return join15(this.recordsDir(), `${this.recordKey(bridgeSessionId)}.json`);
   }
   async ensurePrivateStorage() {
     await mkdir7(this.dir(), { recursive: true, mode: PRIVATE_DIRECTORY_MODE });
@@ -18583,7 +18669,7 @@ class BridgeSessionStore {
       return legacy;
     }
     const records = await Promise.all(names.map(async (name) => {
-      const path = join14(this.recordsDir(), name);
+      const path = join15(this.recordsDir(), name);
       if (name.endsWith(".tmp")) {
         await chmod(path, PRIVATE_FILE_MODE).catch(() => {
           return;
@@ -18695,8 +18781,8 @@ class BridgeSessionStore {
       return;
     await this.ensurePrivateStorage();
     await Promise.all(names.map(async (name) => {
-      const from = join14(source, name);
-      const target = join14(this.recordsDir(), name);
+      const from = join15(source, name);
+      const target = join15(this.recordsDir(), name);
       const temporary = `${target}.${process.pid}.${randomUUID7()}.tmp`;
       await writeFile4(temporary, await readFile6(from), { mode: PRIVATE_FILE_MODE });
       await chmod(temporary, PRIVATE_FILE_MODE);
@@ -18855,7 +18941,7 @@ class DispatchJournal {
     this.persist = options.persist !== false;
   }
   path() {
-    return join15(codexBridgeStateDir(this.codexHome), `dispatch-journal-${this.cwdHash}.json`);
+    return join16(codexBridgeStateDir(this.codexHome), `dispatch-journal-${this.cwdHash}.json`);
   }
   async load() {
     if (this.loaded)
@@ -18865,7 +18951,7 @@ class DispatchJournal {
       this.loadSettled = true;
       return;
     }
-    const legacy = join15(codexLoginBridgeDir(this.codexHome), `dispatch-journal-${this.cwdHash}.json`);
+    const legacy = join16(codexLoginBridgeDir(this.codexHome), `dispatch-journal-${this.cwdHash}.json`);
     try {
       const hadCurrent = await this.loadPath(this.path());
       const mergedLegacy = legacy !== this.path() && await this.loadPath(legacy, true);
@@ -18941,7 +19027,7 @@ class DispatchJournal {
     return true;
   }
   async readBounded(path) {
-    const handle = await open5(path, "r");
+    const handle = await open6(path, "r");
     try {
       const metadata = await handle.stat();
       if (!metadata.isFile() || metadata.size > this.maxBytes) {
@@ -19417,7 +19503,7 @@ function coordinatorCapabilityPolicy(mode) {
 // ../../bridges/codex-bridge/src/codex-config.ts
 import { existsSync as existsSync3, readdirSync as readdirSync3, realpathSync, statSync as statSync2 } from "node:fs";
 import { homedir as homedir2 } from "node:os";
-import { isAbsolute as isAbsolute7, join as join16, relative as relative2, sep } from "node:path";
+import { isAbsolute as isAbsolute8, join as join17, relative as relative3, sep } from "node:path";
 
 // ../../bridges/codex-bridge/src/engine/mcp-tool-availability.ts
 var ORKESTRATOR_MCP_STARTUP_TIMEOUT_SEC = 15;
@@ -19503,7 +19589,7 @@ function codexNetworkDeniedConfig(policy) {
   };
 }
 function codexProjectTrustConfig(policy, cwd) {
-  if (!policy || policy.projectResources || !cwd || !isAbsolute7(cwd))
+  if (!policy || policy.projectResources || !cwd || !isAbsolute8(cwd))
     return {};
   const roots = new Set([cwd]);
   try {
@@ -19528,20 +19614,20 @@ function codexCoordinatorSkillExtraRoots(env = process.env, cwd = env.CWD?.trim(
     return [];
   const userDir = env[COORDINATOR_CODEX_USER_SKILLS_DIR_ENV]?.trim();
   return [
-    ...userDir && isAbsolute7(userDir) ? [userDir] : [],
-    ...cwd && isAbsolute7(cwd) ? [join16(cwd, ".claude", "skills")] : []
+    ...userDir && isAbsolute8(userDir) ? [userDir] : [],
+    ...cwd && isAbsolute8(cwd) ? [join17(cwd, ".claude", "skills")] : []
   ].filter((dir) => existsSync3(dir));
 }
 var MAX_SKILL_READ_GRANTS = 256;
 function isWithin(parent, child) {
-  const path = relative2(parent, child);
-  return path === "" || !path.startsWith(`..${sep}`) && path !== ".." && !isAbsolute7(path);
+  const path = relative3(parent, child);
+  return path === "" || !path.startsWith(`..${sep}`) && path !== ".." && !isAbsolute8(path);
 }
 function codexCoordinatorSkillReadRoots(env = process.env, home = env.HOME?.trim() || homedir2()) {
   const userDir = env[COORDINATOR_CODEX_USER_SKILLS_DIR_ENV]?.trim();
   const roots = [
-    ...userDir && isAbsolute7(userDir) ? [userDir] : [],
-    join16(home, ".agents", "skills")
+    ...userDir && isAbsolute8(userDir) ? [userDir] : [],
+    join17(home, ".agents", "skills")
   ];
   const homeReal = (() => {
     try {
@@ -19575,8 +19661,8 @@ function codexCoordinatorSkillReadRoots(env = process.env, home = env.HOME?.trim
         break;
       let target;
       try {
-        target = realpathSync(join16(real, entry));
-        if (!statSync2(target).isDirectory() || !existsSync3(join16(target, "SKILL.md")))
+        target = realpathSync(join17(real, entry));
+        if (!statSync2(target).isDirectory() || !existsSync3(join17(target, "SKILL.md")))
           continue;
       } catch {
         continue;
@@ -19601,7 +19687,7 @@ function codexProjectSkillsConfig(listed) {
       const { path, scope, enabled } = skill ?? {};
       if (enabled === true && typeof scope === "string" && KEPT_SKILL_SCOPES.has(scope))
         continue;
-      if (typeof path !== "string" || !isAbsolute7(path)) {
+      if (typeof path !== "string" || !isAbsolute8(path)) {
         throw new Error("Codex listed a project skill without a path it can be disabled by");
       }
       disabled.add(path);
@@ -19730,11 +19816,11 @@ function codexAppServerConfigOverrides(env = process.env) {
     const readableRuntimeRoot = env.CODEX_BRIDGE_READABLE_RUNTIME_ROOT?.trim();
     const projectRoot = env.CWD?.trim();
     const attachmentRoot = env[BRIDGE_ATTACHMENT_ROOT_ENV]?.trim();
-    if (!permissionProfile || !/^[A-Za-z0-9_-]+$/.test(permissionProfile) || !readableRuntimeRoot || !isAbsolute7(readableRuntimeRoot) || !projectRoot || !isAbsolute7(projectRoot)) {
+    if (!permissionProfile || !/^[A-Za-z0-9_-]+$/.test(permissionProfile) || !readableRuntimeRoot || !isAbsolute8(readableRuntimeRoot) || !projectRoot || !isAbsolute8(projectRoot)) {
       throw new Error("Coordinator Codex permission profile configuration is invalid");
     }
     overrides.default_permissions = JSON.stringify(permissionProfile);
-    overrides[`permissions.${permissionProfile}.filesystem`] = `{ ":root" = "deny", ":minimal" = "read", ":tmpdir" = "deny", ` + `":slash_tmp" = "deny", ${JSON.stringify(readableRuntimeRoot)} = "read", ` + (attachmentRoot && isAbsolute7(attachmentRoot) ? `${JSON.stringify(attachmentRoot)} = "read", ` : "") + codexCoordinatorSkillReadRoots(env).map((root) => `${JSON.stringify(root)} = "read", `).join("") + `":workspace_roots" = { "." = "read" } }`;
+    overrides[`permissions.${permissionProfile}.filesystem`] = `{ ":root" = "deny", ":minimal" = "read", ":tmpdir" = "deny", ` + `":slash_tmp" = "deny", ${JSON.stringify(readableRuntimeRoot)} = "read", ` + (attachmentRoot && isAbsolute8(attachmentRoot) ? `${JSON.stringify(attachmentRoot)} = "read", ` : "") + codexCoordinatorSkillReadRoots(env).map((root) => `${JSON.stringify(root)} = "read", `).join("") + `":workspace_roots" = { "." = "read" } }`;
     overrides[`permissions.${permissionProfile}.network.enabled`] = "false";
     overrides.web_search = JSON.stringify(codexNetworkDeniedSearchMode(codexCoordinatorPolicy(env)));
     overrides["features.standalone_web_search"] = "false";
@@ -19794,7 +19880,8 @@ function codexAppServerConfigOverrides(env = process.env) {
           for (const name of [
             ...AGENT_MAIL_TOOL_NAMES,
             ...ARTIFACT_TOOL_NAMES,
-            ...AGENT_GOAL_TOOL_NAMES
+            ...AGENT_GOAL_TOOL_NAMES,
+            ...KEY_INFORMATION_TOOL_NAMES
           ]) {
             overrides[`mcp_servers.orkestrator.tools.${name}.approval_mode`] = JSON.stringify("approve");
           }
@@ -19808,7 +19895,7 @@ function codexAppServerConfigOverrides(env = process.env) {
 // ../../bridges/codex-bridge/src/github-credential-config.ts
 import { mkdtemp as mkdtemp2 } from "node:fs/promises";
 import { tmpdir as tmpdir2 } from "node:os";
-import { join as join17 } from "node:path";
+import { join as join18 } from "node:path";
 var CODEX_INHERITED_GIT_CONFIG_PATTERNS = Object.freeze([
   "GIT_CONFIG_COUNT",
   "GIT_CONFIG_KEY_*",
@@ -19843,7 +19930,7 @@ function codexGitHubCredentialThreadConfig(policy, options) {
 }
 var withheldGhConfigDir;
 function emptyGhConfigDir() {
-  withheldGhConfigDir ??= mkdtemp2(join17(tmpdir2(), "orkestrator-gh-withheld-")).catch((error) => {
+  withheldGhConfigDir ??= mkdtemp2(join18(tmpdir2(), "orkestrator-gh-withheld-")).catch((error) => {
     withheldGhConfigDir = undefined;
     throw error;
   });
@@ -19851,11 +19938,11 @@ function emptyGhConfigDir() {
 }
 
 // ../../bridges/codex-bridge/src/sessions/tool-history-guard.ts
-import { open as open6 } from "node:fs/promises";
+import { open as open7 } from "node:fs/promises";
 var TOOL_HISTORY_MARKER = '"type":"additional_tools"';
 var MAX_TOOL_HISTORY_LINEAGE_DEPTH = 32;
 async function rolloutDeclaresToolHistory(path, end) {
-  const handle = await open6(path, "r");
+  const handle = await open7(path, "r");
   try {
     const size = (await handle.stat()).size;
     const limit = end === undefined ? size : Math.min(end, size);
@@ -19880,7 +19967,7 @@ async function rolloutDeclaresToolHistory(path, end) {
   }
 }
 async function historyBase(path) {
-  const handle = await open6(path, "r");
+  const handle = await open7(path, "r");
   try {
     const chunks = [];
     let filled = 0;
@@ -19963,10 +20050,12 @@ var APP_SERVER_CAPABILITIES = {
 };
 
 // ../../bridges/codex-bridge/src/engine/app-server-engine.ts
-var AGENT_MAIL_TOOL_APPROVALS = Object.fromEntries([...AGENT_MAIL_TOOL_NAMES, ...ARTIFACT_TOOL_NAMES, ...AGENT_GOAL_TOOL_NAMES].map((name) => [
-  name,
-  { approval_mode: "approve" }
-]));
+var AGENT_MAIL_TOOL_APPROVALS = Object.fromEntries([
+  ...AGENT_MAIL_TOOL_NAMES,
+  ...ARTIFACT_TOOL_NAMES,
+  ...AGENT_GOAL_TOOL_NAMES,
+  ...KEY_INFORMATION_TOOL_NAMES
+].map((name) => [name, { approval_mode: "approve" }]));
 var ROOT_THREAD_SOURCE_KINDS = ["cli", "vscode", "exec", "appServer", "unknown"];
 var CODEX_SIGN_IN_EXPIRED_NOTICE = "Codex sign-in expired. Sign in again to continue.";
 var CODEX_SIGN_IN_REQUIRED_MESSAGE = "You've been signed out of Codex. Sign in again to keep working.";
@@ -20317,7 +20406,7 @@ function signedOutAccountRead(error) {
 }
 async function readStoredLoginFingerprint(codexHome) {
   try {
-    const file = await open7(join18(codexHome, "auth.json"), "r");
+    const file = await open8(join19(codexHome, "auth.json"), "r");
     let raw;
     try {
       const bytes = Buffer.alloc(65537);
@@ -20891,7 +20980,26 @@ class AppServerEngine {
     ]);
     return { ...skills, ...mcp, ...credential };
   }
-  toThreadParams(config, extraConfig = {}) {
+  async developerInstructions(generation, config) {
+    const loadsProject = !config.policy || config.policy.projectResources;
+    const cwd = config.cwd ?? this.options.cwd;
+    const ours = [
+      ...config.policy?.id === "coordinator-read-only" ? [] : [agentSystemInstructions()],
+      ...loadsProject || config.sandbox === "read-only" || config.policy?.id === "coordinator-read-only" ? [] : [await readRepositoryInstructions(cwd)]
+    ].filter((part) => Boolean(part));
+    if (ours.length === 0)
+      return;
+    const read = this.options.readConfiguredDeveloperInstructions ?? ((projectCwd) => this.supervisor.requestOnGeneration(generation, "config/read", projectCwd ? { cwd: projectCwd } : {}).then((result) => result?.config?.developer_instructions));
+    const configured = await read(loadsProject ? cwd : undefined).catch(() => {
+      return;
+    });
+    if (typeof configured === "string" && configured.trim())
+      ours.push(configured);
+    return ours.join(`
+
+`);
+  }
+  toThreadParams(config, extraConfig = {}, developerInstructions) {
     const approveAgentMcpTools = config.policy?.approvals === "auto-approve" && (config.approvalPolicy ?? "never") === "never" && config.sandbox !== "read-only" || config.policy?.id === "coordinator-read-only" && Boolean(config.permissionProfile) || Boolean(config.workflowResultTool && config.agentMcp);
     const cwd = config.cwd ?? this.options.cwd;
     const threadConfig = {
@@ -20935,6 +21043,7 @@ class AppServerEngine {
       },
       ...config.model ? { model: config.model } : {},
       serviceTier: config.serviceTier ?? null,
+      ...developerInstructions ? { developerInstructions } : {},
       ...Object.keys(threadConfig).length > 0 ? { config: threadConfig } : {}
     };
   }
@@ -20997,7 +21106,8 @@ class AppServerEngine {
     const generation = await this.assertHostedNetworkLock(options.config);
     await this.assertToolHistoryLock(generation, options.config);
     const extra = await this.policyThreadConfig(generation, options.config);
-    const response = await this.supervisor.requestOnGeneration(generation, "thread/start", this.toThreadParams(options.config, extra));
+    const instructions = await this.developerInstructions(generation, options.config);
+    const response = await this.supervisor.requestOnGeneration(generation, "thread/start", this.toThreadParams(options.config, extra, instructions));
     this.assertPermissionProfile(response.activePermissionProfile, options.config);
     return this.bindThread(response.thread, options.config, response.model);
   }
@@ -21005,7 +21115,11 @@ class AppServerEngine {
     const generation = await this.assertHostedNetworkLock(options.config);
     await this.assertToolHistoryLock(generation, options.config);
     const extra = await this.policyThreadConfig(generation, options.config);
-    const response = await this.supervisor.requestOnGeneration(generation, "thread/resume", { threadId, ...this.toThreadParams(options.config, extra) });
+    const instructions = await this.developerInstructions(generation, options.config);
+    const response = await this.supervisor.requestOnGeneration(generation, "thread/resume", {
+      threadId,
+      ...this.toThreadParams(options.config, extra, instructions)
+    });
     this.assertPermissionProfile(response.activePermissionProfile, options.config);
     const thread = this.bindThread(response.thread, options.config, response.model);
     await this.assertNoToolHistory(thread.id ?? threadId, options.config, true);
@@ -21027,10 +21141,11 @@ class AppServerEngine {
     await this.assertToolHistoryLock(generation, config);
     await this.assertNoToolHistory(threadId, config, false);
     const extra = await this.policyThreadConfig(generation, config);
+    const instructions = await this.developerInstructions(generation, config);
     const response = await this.supervisor.requestOnGeneration(generation, "thread/fork", {
       threadId,
       ...lastTurnId ? { lastTurnId } : {},
-      ...this.toThreadParams(config, extra)
+      ...this.toThreadParams(config, extra, instructions)
     });
     this.assertPermissionProfile(response.activePermissionProfile, config);
     return this.bindThread(response.thread, config, response.model);
@@ -21360,7 +21475,7 @@ class AppServerEngine {
       thread.model = confirmedModel.trim();
     }
     if (thread.id) {
-      if (typeof raw.path === "string" && isAbsolute8(raw.path)) {
+      if (typeof raw.path === "string" && isAbsolute9(raw.path)) {
         this.rolloutPaths.set(thread.id, raw.path);
       }
       this.bindings.set(thread.id, {
@@ -23288,8 +23403,8 @@ function parseCommandToken(text, sigils = ["/"]) {
 
 // ../../bridges/codex-bridge/src/prompts/template-discovery.ts
 import { createHash as createHash13 } from "node:crypto";
-import { open as open8, readdir as readdir3, stat as stat7 } from "node:fs/promises";
-import { join as join19 } from "node:path";
+import { open as open9, readdir as readdir3, stat as stat7 } from "node:fs/promises";
+import { join as join20 } from "node:path";
 var TEMPLATE_LIMITS = Object.freeze({
   maxTemplates: 512,
   maxVisitedEntries: 2048,
@@ -23309,8 +23424,8 @@ var RESERVED_TEMPLATE_PREFIXES = ["/skill:", "/prompts:"];
 var TEMPLATE_ID_PREFIX = "codex-template:";
 function templateRoots(cwd, codexHome = getCodexHomeDir()) {
   return [
-    { origin: "project", dir: join19(cwd, ".codex", "prompts") },
-    { origin: "user", dir: join19(codexHome, "prompts") }
+    { origin: "project", dir: join20(cwd, ".codex", "prompts") },
+    { origin: "user", dir: join20(codexHome, "prompts") }
   ];
 }
 function templateCommandId(origin, relativePath) {
@@ -23335,7 +23450,7 @@ function isReservedName(name) {
 var metadataCache = new Map;
 var METADATA_CACHE_MAX = 1024;
 async function readBounded2(absolutePath, maxBytes) {
-  const handle = await open8(absolutePath, "r");
+  const handle = await open9(absolutePath, "r");
   try {
     const info = await handle.stat();
     if (!info.isFile())
@@ -23415,7 +23530,7 @@ async function scanPromptTemplates(roots, limits = TEMPLATE_LIMITS) {
         return;
       }
       visited += 1;
-      const absolutePath = join19(dir, entry.name);
+      const absolutePath = join20(dir, entry.name);
       const relativePath = relative ? `${relative}/${entry.name}` : entry.name;
       if (entry.isDirectory()) {
         if (depth + 1 > limits.maxDepth) {
@@ -23582,7 +23697,7 @@ async function loadTemplateBody(entry, limits = TEMPLATE_LIMITS) {
 }
 
 // ../../bridges/codex-bridge/src/commands/skill-inventory.ts
-import { isAbsolute as isAbsolute9 } from "node:path";
+import { isAbsolute as isAbsolute10 } from "node:path";
 var SKILL_INVENTORY_LIMITS = Object.freeze({
   maxSkills: 512,
   maxDescriptionBytes: 1000,
@@ -23634,7 +23749,7 @@ function normalizeSkillsList(raw, context) {
       }
       const name = nonEmpty(candidate.name);
       const path = typeof candidate.path === "string" ? candidate.path : undefined;
-      if (!name || !usableSkillName(name) || !path || !isAbsolute9(path)) {
+      if (!name || !usableSkillName(name) || !path || !isAbsolute10(path)) {
         truncated = true;
         continue;
       }
@@ -27372,7 +27487,7 @@ class CodexRuntimePrompt {
 }
 
 // ../../bridges/codex-bridge/src/app-server-runtime-tail.ts
-import { join as join20, relative as relative3, isAbsolute as isAbsolute10 } from "node:path";
+import { join as join21, relative as relative4, isAbsolute as isAbsolute11 } from "node:path";
 class CodexRuntimeTail {
   ctx;
   lifecycle;
@@ -27570,14 +27685,14 @@ class CodexRuntimeTail {
         cursor = page.nextCursor ?? undefined;
       } while (cursor);
     } catch {}
-    const archivedRoot = join20(this.ctx.options.codexHome, "archived_sessions");
+    const archivedRoot = join21(this.ctx.options.codexHome, "archived_sessions");
     const isArchived = (meta) => {
       if (archived.has(meta.id))
         return true;
       if (!meta.transcriptPath)
         return false;
-      const fromRoot = relative3(archivedRoot, meta.transcriptPath);
-      return fromRoot !== "" && !fromRoot.startsWith("..") && !isAbsolute10(fromRoot);
+      const fromRoot = relative4(archivedRoot, meta.transcriptPath);
+      return fromRoot !== "" && !fromRoot.startsWith("..") && !isAbsolute11(fromRoot);
     };
     let persisted = [];
     let generatedTitles = null;
@@ -28475,7 +28590,7 @@ async function writeCodexRawLog(sessionId, entry, logDir = codexRawLogDir) {
   try {
     await mkdir9(logDir, { recursive: true });
     const filename = `${sanitizeLogFileComponent(sessionId)}.jsonl`;
-    await appendFile5(join21(logDir, filename), `${JSON.stringify({
+    await appendFile5(join22(logDir, filename), `${JSON.stringify({
       timestamp: new Date().toISOString(),
       sessionId,
       ...entry
@@ -28667,10 +28782,10 @@ function emit(event) {
   }
 }
 function bridgeCacheDir() {
-  return join21(getCodexHomeDir(), "orkestrator-bridge");
+  return join22(getCodexHomeDir(), "orkestrator-bridge");
 }
 function bridgeCachePath() {
-  return join21(bridgeCacheDir(), "models-cache.json");
+  return join22(bridgeCacheDir(), "models-cache.json");
 }
 var BRIDGE_MODEL_CACHE_VERSION = 2;
 async function readPersistedBridgeCache() {
@@ -28694,7 +28809,7 @@ async function writePersistedBridgeCache(models) {
 }
 async function readCodexCliModelCache() {
   try {
-    const raw = await readFile7(join21(getCodexHomeDir(), "models_cache.json"), "utf8");
+    const raw = await readFile7(join22(getCodexHomeDir(), "models_cache.json"), "utf8");
     const models = parseModelCatalog(raw);
     return models.length > 0 ? models : null;
   } catch {