This is a comment left during a code review.
Path: src/shared/chat-envelope.ts
Line: 23:24

Comment:
**Regex only strips the header line, not the full block**

The `/m` flag makes `$` match end-of-*line* (not just end-of-string). Because `[\s\S]*?` is non-greedy, it matches zero characters when the `$` alternative in the lookahead immediately succeeds at the end of the `"Conversation info (untrusted metadata):"` line. The entire ` ```json\n{...}\n``` ` code block is left behind.

Verified by running the regex against the actual format produced by `buildInboundUserContextPrefix` in `src/auto-reply/reply/inbound-meta.ts`:

```
Input:  "Conversation info (untrusted metadata):\n```json\n{\"id\":\"abc\"}\n```\n\nHello!"
Match:  "Conversation info (untrusted metadata):"   // only the header line!
Result: "```json\n{\"id\":\"abc\"}\n```\n\nHello!"   // JSON block leaks through
```

A possible fix would be to explicitly match through the closing code fence instead of relying on the non-greedy + lookahead approach:

```suggestion
const UNTRUSTED_METADATA_PATTERN =
  /^Conversation info \(untrusted metadata\):[\s\S]*?```\s*/m;
```

How can I resolve this? If you propose a fix, please make it concise.

This is a comment left during a code review.
Path: src/shared/chat-envelope.ts
Line: 36:41

Comment:
**Early return prevents stripping both envelope and metadata**

`stripEnvelope` returns as soon as it matches either the metadata block or the envelope header — it never strips both. In the real message format (confirmed via `get-reply-run.ts`), the envelope header wraps the metadata block:

```
[WebChat 2026-02-17T10:00Z] Conversation info (untrusted metadata):
```json
{...}
```

Hello!
```

Since the metadata regex requires `^` at start-of-line and the message starts with `[WebChat ...]`, the metadata check fails. The function then falls through to the envelope strip, removing only `[WebChat 2026-02-17T10:00Z] ` and returning — leaving the entire metadata block in the output.

The metadata stripping should happen *after* envelope stripping (or the function should apply both transforms), not as an early-return alternative. For example:

```suggestion
export function stripEnvelope(text: string): string {
  // Strip envelope header first (if present)
  const match = text.match(ENVELOPE_PREFIX);
  let stripped = text;
  if (match) {
    const header = match[1] ?? "";
    if (looksLikeEnvelopeHeader(header)) {
      stripped = text.slice(match[0].length);
    }
  }

  // Then strip "Conversation info (untrusted metadata):" blocks
  const metadataMatch = stripped.match(UNTRUSTED_METADATA_PATTERN);
  if (metadataMatch) {
    return stripped.replace(metadataMatch[0], "").trim();
  }

  return stripped;
```

How can I resolve this? If you propose a fix, please make it concise.