ACL pipeline, vector search, and sandbox API additions

Features

• Connector ACL pipeline and thread routing: Connectors now support an ACL pipeline stage, thread branching logic, and cron-based thread routing for more precise control over how messages are dispatched.
• Playbook vector search: Playbook bullets can now be retrieved via semantic vector search using an ONNX embedder, improving relevance when surfacing playbook content to agents.
• Expanded sandbox globals: The agent sandbox now exposes btoa/atob, crypto.subtle, and TextEncoder/TextDecoder, enabling base64 encoding, cryptographic operations, and text codec work directly in scripts.
• Team context files in UI: Context files are now visible in the UI with a per-team dropdown filter, making it easier to browse and manage context across teams.

Fixes

• Thread content visibility: Fixed an issue where the sent message content was not shown in the thread when a two-script send_message + pass sequence was executed.
• Chat context window divider: The context window divider is now hidden when no content has been trimmed, and the admin agent is correctly oriented to the injected context block.
• Team member script and cron management: Team members can now manage their own scripts and crons; trigger run-as identity is now displayed in the UI.
• Invite link copy after regeneration: The copyable invite link is now shown correctly after regenerating a team invite.
• Slack thread reply gating: Thread replies in Slack are now correctly gated on mentions-only mode before pipeline dispatch, preventing unintended replies.
• Agent team-scope isolation: Enforced team-scope isolation across all agent list tools, preventing cross-team data exposure.
• CLI worker reliability: Fixed cancel propagation, corrected tool ordering, and eliminated streaming deduplication issues in the CLI worker.
• Default team resolution: The dashboard and app creation flows now resolve the default team via a self-healing helper, fixing cases where the default team was not found.
• Cron preamble clarity: Clarified the roles of script_id vs prompt in the engineering block and cron preamble to reduce agent confusion.
• Credentials team selector: The credentials UI now shows the team selector for all teams the user can manage, not just the primary team.
• Credential decryption: Removed a legacy JSON-unwrap path from decryptValue that could cause decryption failures for newer credential formats.

Internal

• Added golangci-lint v2 with Cursor workspace integration and resolved all reported lint issues across the codebase.