@google/gemini-cli-a2a-server 0.48.0-nightly.20260612.g4e10a34be → 0.48.0-preview.0

package/dist/a2a-server.mjs

@@ -1850,7 +1850,7 @@ var require_ms = __commonJS({
       options = options || {};
       var type2 = typeof val;
       if (type2 === "string" && val.length > 0) {
-        return parse8(val);
+        return parse9(val);
       } else if (type2 === "number" && isFinite(val)) {
         return options.long ? fmtLong(val) : fmtShort(val);
       }
@@ -1858,7 +1858,7 @@ var require_ms = __commonJS({
         "val is not a non-empty string or a valid number. val=" + JSON.stringify(val)
       );
     };
-    function parse8(str2) {
+    function parse9(str2) {
       str2 = String(str2);
       if (str2.length > 100) {
         return;
@@ -2406,7 +2406,7 @@ var require_fecha_umd = __commonJS({
           return literals.shift();
         });
       };
-      function parse8(dateStr, format3, i18n) {
+      function parse9(dateStr, format3, i18n) {
         if (i18n === void 0) {
           i18n = {};
         }
@@ -2501,7 +2501,7 @@ var require_fecha_umd = __commonJS({
       }
       var fecha = {
         format: format2,
-        parse: parse8,
+        parse: parse9,
         defaultI18n,
         setGlobalDateI18n,
         setGlobalDateMasks
@@ -2509,7 +2509,7 @@ var require_fecha_umd = __commonJS({
       exports3.assign = assign;
       exports3.default = fecha;
       exports3.format = format2;
-      exports3.parse = parse8;
+      exports3.parse = parse9;
       exports3.defaultI18n = defaultI18n;
       exports3.setGlobalDateI18n = setGlobalDateI18n;
       exports3.setGlobalDateMasks = setGlobalDateMasks;
@@ -10278,7 +10278,7 @@ var require_bytes = __commonJS({
     "use strict";
     module2.exports = bytes;
     module2.exports.format = format2;
-    module2.exports.parse = parse8;
+    module2.exports.parse = parse9;
     var formatThousandsRegExp = /\B(?=(\d{3})+(?!\d))/g;
     var formatDecimalsRegExp = /(?:\.0*|(\.[^0]+)0+)$/;
     var map3 = {
@@ -10292,7 +10292,7 @@ var require_bytes = __commonJS({
     var parseRegExp = /^((-|\+)?(\d+(?:\.\d+)?)) *(kb|mb|gb|tb|pb)$/i;
     function bytes(value, options) {
       if (typeof value === "string") {
-        return parse8(value);
+        return parse9(value);
       }
       if (typeof value === "number") {
         return format2(value, options);
@@ -10336,7 +10336,7 @@ var require_bytes = __commonJS({
       }
       return str2 + unitSeparator + unit;
     }
-    function parse8(val) {
+    function parse9(val) {
       if (typeof val === "number" && !isNaN(val)) {
         return val;
       }
@@ -18256,7 +18256,7 @@ var require_content_type = __commonJS({
     var QUOTE_REGEXP = /([\\"])/g;
     var TYPE_REGEXP = /^[!#$%&'*+.^_`|~0-9A-Za-z-]+\/[!#$%&'*+.^_`|~0-9A-Za-z-]+$/;
     exports2.format = format2;
-    exports2.parse = parse8;
+    exports2.parse = parse9;
     function format2(obj) {
       if (!obj || typeof obj !== "object") {
         throw new TypeError("argument obj is required");
@@ -18280,7 +18280,7 @@ var require_content_type = __commonJS({
       }
       return string4;
     }
-    function parse8(string4) {
+    function parse9(string4) {
       if (!string4) {
         throw new TypeError("argument string is required");
       }
@@ -27862,7 +27862,7 @@ var require_media_typer = __commonJS({
     var TYPE_NAME_REGEXP = /^[A-Za-z0-9][A-Za-z0-9!#$&^_-]{0,126}$/;
     var TYPE_REGEXP = /^ *([A-Za-z0-9][A-Za-z0-9!#$&^_-]{0,126})\/([A-Za-z0-9][A-Za-z0-9!#$&^_.+-]{0,126}) *$/;
     exports2.format = format2;
-    exports2.parse = parse8;
+    exports2.parse = parse9;
     exports2.test = test;
     function format2(obj) {
       if (!obj || typeof obj !== "object") {
@@ -27895,7 +27895,7 @@ var require_media_typer = __commonJS({
       }
       return TYPE_REGEXP.test(string4.toLowerCase());
     }
-    function parse8(string4) {
+    function parse9(string4) {
       if (!string4) {
         throw new TypeError("argument string is required");
       }
@@ -28081,7 +28081,7 @@ var require_read = __commonJS({
     var hasBody = require_type_is().hasBody;
     var { getCharset } = require_utils();
     module2.exports = read2;
-    function read2(req, res, next, parse8, debug2, options) {
+    function read2(req, res, next, parse9, debug2, options) {
       if (onFinished.isFinished(req)) {
         debug2("body already parsed");
         next();
@@ -28169,7 +28169,7 @@ var require_read = __commonJS({
         try {
           debug2("parse body");
           str2 = typeof body2 !== "string" && encoding !== null ? iconv.decode(body2, encoding) : body2;
-          req.body = parse8(str2, encoding);
+          req.body = parse9(str2, encoding);
         } catch (err2) {
           next(createError(400, err2, {
             body: str2,
@@ -28242,7 +28242,7 @@ var require_json2 = __commonJS({
       const normalizedOptions = normalizeOptions(options, "application/json");
       var reviver = options?.reviver;
       var strict2 = options?.strict !== false;
-      function parse8(body2) {
+      function parse9(body2) {
         if (body2.length === 0) {
           return {};
         }
@@ -28269,7 +28269,7 @@ var require_json2 = __commonJS({
         isValidCharset: (charset) => charset.slice(0, 4) === "utf-"
       };
       return function jsonParser(req, res, next) {
-        read2(req, res, next, parse8, debug2, readOptions);
+        read2(req, res, next, parse9, debug2, readOptions);
       };
     }
     function createStrictSyntaxError(str2, char) {
@@ -30847,11 +30847,11 @@ var require_lib3 = __commonJS({
   "node_modules/qs/lib/index.js"(exports2, module2) {
     "use strict";
     var stringify5 = require_stringify();
-    var parse8 = require_parse();
+    var parse9 = require_parse();
     var formats = require_formats();
     module2.exports = {
       formats,
-      parse: parse8,
+      parse: parse9,
       stringify: stringify5
     };
   }
@@ -30873,7 +30873,7 @@ var require_urlencoded = __commonJS({
         throw new TypeError("option defaultCharset must be either utf-8 or iso-8859-1");
       }
       var queryparse = createQueryParser(options);
-      function parse8(body2, encoding) {
+      function parse9(body2, encoding) {
         return body2.length ? queryparse(body2, encoding) : {};
       }
       const readOptions = {
@@ -30882,7 +30882,7 @@ var require_urlencoded = __commonJS({
         isValidCharset: (charset) => charset === "utf-8" || charset === "iso-8859-1"
       };
       return function urlencodedParser(req, res, next) {
-        read2(req, res, next, parse8, debug2, readOptions);
+        read2(req, res, next, parse9, debug2, readOptions);
       };
     }
     function createQueryParser(options) {
@@ -31066,7 +31066,7 @@ var require_parseurl = __commonJS({
   "node_modules/parseurl/index.js"(exports2, module2) {
     "use strict";
     var url5 = __require("url");
-    var parse8 = url5.parse;
+    var parse9 = url5.parse;
     var Url = url5.Url;
     module2.exports = parseurl;
     module2.exports.original = originalurl;
@@ -31098,7 +31098,7 @@ var require_parseurl = __commonJS({
     }
     function fastparse(str2) {
       if (typeof str2 !== "string" || str2.charCodeAt(0) !== 47) {
-        return parse8(str2);
+        return parse9(str2);
       }
       var pathname = str2;
       var query = null;
@@ -31126,7 +31126,7 @@ var require_parseurl = __commonJS({
           /* #  */
           case 160:
           case 65279:
-            return parse8(str2);
+            return parse9(str2);
         }
       }
       var url6 = Url !== void 0 ? new Url() : {};
@@ -31417,7 +31417,7 @@ var require_forwarded = __commonJS({
       if (!req) {
         throw new TypeError("argument req is required");
       }
-      var proxyAddrs = parse8(req.headers["x-forwarded-for"] || "");
+      var proxyAddrs = parse9(req.headers["x-forwarded-for"] || "");
       var socketAddr = getSocketAddr(req);
       var addrs = [socketAddr].concat(proxyAddrs);
       return addrs;
@@ -31425,7 +31425,7 @@ var require_forwarded = __commonJS({
     function getSocketAddr(req) {
       return req.socket ? req.socket.remoteAddress : req.connection.remoteAddress;
     }
-    function parse8(header) {
+    function parse9(header) {
       var end = header.length;
       var list = [];
       var start2 = header.length;
@@ -32454,7 +32454,7 @@ var require_dist = __commonJS({
     "use strict";
     Object.defineProperty(exports2, "__esModule", { value: true });
     exports2.PathError = exports2.TokenData = void 0;
-    exports2.parse = parse8;
+    exports2.parse = parse9;
     exports2.compile = compile2;
     exports2.match = match2;
     exports2.pathToRegexp = pathToRegexp;
@@ -32488,7 +32488,7 @@ var require_dist = __commonJS({
       }
     };
     exports2.PathError = PathError;
-    function parse8(str2, options = {}) {
+    function parse9(str2, options = {}) {
       const { encodePath = NOOP_VALUE } = options;
       const chars = [...str2];
       let index = 0;
@@ -32570,7 +32570,7 @@ var require_dist = __commonJS({
     }
     function compile2(path98, options = {}) {
       const { encode = encodeURIComponent, delimiter: delimiter3 = DEFAULT_DELIMITER } = options;
-      const data = typeof path98 === "object" ? path98 : parse8(path98, options);
+      const data = typeof path98 === "object" ? path98 : parse9(path98, options);
       const fn2 = tokensToFunction(data.tokens, delimiter3, encode);
       return function path99(params = {}) {
         const missing = [];
@@ -32677,7 +32677,7 @@ var require_dist = __commonJS({
             process16(p3);
           return;
         }
-        const data = typeof path99 === "object" ? path99 : parse8(path99, options);
+        const data = typeof path99 === "object" ? path99 : parse9(path99, options);
         flatten2(data.tokens, 0, [], (tokens) => {
           if (combinations >= 256) {
             throw new PathError("Too many path combinations", data.originalPath);
@@ -34503,7 +34503,7 @@ var require_request = __commonJS({
     var http5 = __require("node:http");
     var fresh = require_fresh();
     var parseRange = require_range_parser();
-    var parse8 = require_parseurl();
+    var parse9 = require_parseurl();
     var proxyaddr = require_proxy_addr();
     var req = Object.create(http5.IncomingMessage.prototype);
     module2.exports = req;
@@ -34548,7 +34548,7 @@ var require_request = __commonJS({
       if (!queryparse) {
         return /* @__PURE__ */ Object.create(null);
       }
-      var querystring2 = parse8(this).query;
+      var querystring2 = parse9(this).query;
       return queryparse(querystring2);
     });
     req.is = function is2(types5) {
@@ -34592,7 +34592,7 @@ var require_request = __commonJS({
       return subdomains2.slice(offset);
     });
     defineGetter(req, "path", function path98() {
-      return parse8(this).pathname;
+      return parse9(this).pathname;
     });
     defineGetter(req, "host", function host() {
       var trust = this.app.get("trust proxy fn");
@@ -34646,7 +34646,7 @@ var require_content_disposition = __commonJS({
   "node_modules/content-disposition/index.js"(exports2, module2) {
     "use strict";
     module2.exports = contentDisposition;
-    module2.exports.parse = parse8;
+    module2.exports.parse = parse9;
     var basename12 = __require("path").basename;
     var ENCODE_URL_ATTR_CHAR_REGEXP = /[\x00-\x20"'()*,/:;<=>?@[\\\]{}\x7f]/g;
     var HEX_ESCAPE_REGEXP = /%[0-9A-Fa-f]{2}/;
@@ -34737,7 +34737,7 @@ var require_content_disposition = __commonJS({
     function getlatin1(val) {
       return String(val).replace(NON_LATIN1_REGEXP, "?");
     }
-    function parse8(string4) {
+    function parse9(string4) {
       if (!string4 || typeof string4 !== "string") {
         throw new TypeError("argument string is required");
       }
@@ -34826,7 +34826,7 @@ var require_cookie_signature = __commonJS({
 var require_cookie = __commonJS({
   "node_modules/cookie/index.js"(exports2) {
     "use strict";
-    exports2.parse = parse8;
+    exports2.parse = parse9;
     exports2.serialize = serialize2;
     var __toString = Object.prototype.toString;
     var __hasOwnProperty = Object.prototype.hasOwnProperty;
@@ -34834,7 +34834,7 @@ var require_cookie = __commonJS({
     var cookieValueRegExp = /^("?)[\u0021\u0023-\u002B\u002D-\u003A\u003C-\u005B\u005D-\u007E]*\1$/;
     var domainValueRegExp = /^([.]?[a-z0-9]([a-z0-9-]{0,61}[a-z0-9])?)([.][a-z0-9]([a-z0-9-]{0,61}[a-z0-9])?)*$/i;
     var pathValueRegExp = /^[\u0020-\u003A\u003D-\u007E]*$/;
-    function parse8(str2, opt) {
+    function parse9(str2, opt) {
       if (typeof str2 !== "string") {
         throw new TypeError("argument str must be a string");
       }
@@ -35485,7 +35485,7 @@ var require_vary = __commonJS({
       if (!field) {
         throw new TypeError("field argument is required");
       }
-      var fields = !Array.isArray(field) ? parse8(String(field)) : field;
+      var fields = !Array.isArray(field) ? parse9(String(field)) : field;
       for (var j3 = 0; j3 < fields.length; j3++) {
         if (!FIELD_NAME_REGEXP.test(fields[j3])) {
           throw new TypeError("field argument contains an invalid header name");
@@ -35495,7 +35495,7 @@ var require_vary = __commonJS({
         return header;
       }
       var val = header;
-      var vals = parse8(header.toLowerCase());
+      var vals = parse9(header.toLowerCase());
       if (fields.indexOf("*") !== -1 || vals.indexOf("*") !== -1) {
         return "*";
       }
@@ -35508,7 +35508,7 @@ var require_vary = __commonJS({
       }
       return val;
     }
-    function parse8(header) {
+    function parse9(header) {
       var end = 0;
       var list = [];
       var start2 = 0;
@@ -61511,7 +61511,7 @@ var require_parse4 = __commonJS({
         return typeof arg === "undefined" ? prev : prev.concat(arg);
       }, []);
     }
-    module2.exports = function parse8(s5, env, opts) {
+    module2.exports = function parse9(s5, env, opts) {
       var mapped = parseInternal(s5, env, opts);
       if (typeof env !== "function") {
         return mapped;
@@ -69473,8 +69473,23 @@ function stripShellWrapper(command) {
   const match2 = command.match(pattern);
   if (match2) {
     let newCommand = command.substring(match2[0].length).trim();
-    if (newCommand.startsWith('"') && newCommand.endsWith('"') || newCommand.startsWith("'") && newCommand.endsWith("'")) {
-      newCommand = newCommand.substring(1, newCommand.length - 1);
+    if (newCommand.length >= 2 && (newCommand.startsWith('"') && newCommand.endsWith('"') || newCommand.startsWith("'") && newCommand.endsWith("'"))) {
+      const isPosixShell = match2[0].trim().endsWith("-c");
+      if (isPosixShell && newCommand.startsWith('"')) {
+        try {
+          const parsed = (0, import_shell_quote.parse)(newCommand, (key) => "$" + key);
+          const firstEntry = parsed[0];
+          if (parsed.length === 1 && typeof firstEntry === "string") {
+            newCommand = firstEntry;
+          } else {
+            newCommand = newCommand.substring(1, newCommand.length - 1);
+          }
+        } catch {
+          newCommand = newCommand.substring(1, newCommand.length - 1);
+        }
+      } else {
+        newCommand = newCommand.substring(1, newCommand.length - 1);
+      }
     }
     return newCommand;
   }
@@ -90345,7 +90360,7 @@ var require_extension = __commonJS({
       if (dest[name3] === void 0) dest[name3] = [elem];
       else dest[name3].push(elem);
     }
-    function parse8(header) {
+    function parse9(header) {
       const offers = /* @__PURE__ */ Object.create(null);
       let params = /* @__PURE__ */ Object.create(null);
       let mustUnescape = false;
@@ -90485,7 +90500,7 @@ var require_extension = __commonJS({
         }).join(", ");
       }).join(", ");
     }
-    module2.exports = { format: format2, parse: parse8 };
+    module2.exports = { format: format2, parse: parse9 };
   }
 });
 
@@ -90518,7 +90533,7 @@ var require_websocket = __commonJS({
     var {
       EventTarget: { addEventListener, removeEventListener }
     } = require_event_target();
-    var { format: format2, parse: parse8 } = require_extension();
+    var { format: format2, parse: parse9 } = require_extension();
     var { toBuffer } = require_buffer_util();
     var closeTimeout = 30 * 1e3;
     var kAborted = Symbol("kAborted");
@@ -91185,7 +91200,7 @@ var require_websocket = __commonJS({
           }
           let extensions;
           try {
-            extensions = parse8(secWebSocketExtensions);
+            extensions = parse9(secWebSocketExtensions);
           } catch (err2) {
             const message = "Invalid Sec-WebSocket-Extensions header";
             abortHandshake(websocket, socket, message);
@@ -91475,7 +91490,7 @@ var require_subprotocol = __commonJS({
   "node_modules/ws/lib/subprotocol.js"(exports2, module2) {
     "use strict";
     var { tokenChars } = require_validation();
-    function parse8(header) {
+    function parse9(header) {
       const protocols = /* @__PURE__ */ new Set();
       let start2 = -1;
       let end = -1;
@@ -91511,7 +91526,7 @@ var require_subprotocol = __commonJS({
       protocols.add(protocol);
       return protocols;
     }
-    module2.exports = { parse: parse8 };
+    module2.exports = { parse: parse9 };
   }
 });
 
@@ -111483,21 +111498,21 @@ var require_fast_uri = __commonJS({
         normalizeString(uri, options);
       } else if (typeof uri === "object") {
         uri = /** @type {T} */
-        parse8(serialize2(uri, options), options);
+        parse9(serialize2(uri, options), options);
       }
       return uri;
     }
     function resolve23(baseURI, relativeURI, options) {
       const schemelessOptions = options ? Object.assign({ scheme: "null" }, options) : { scheme: "null" };
-      const resolved = resolveComponent(parse8(baseURI, schemelessOptions), parse8(relativeURI, schemelessOptions), schemelessOptions, true);
+      const resolved = resolveComponent(parse9(baseURI, schemelessOptions), parse9(relativeURI, schemelessOptions), schemelessOptions, true);
       schemelessOptions.skipEscape = true;
       return serialize2(resolved, schemelessOptions);
     }
     function resolveComponent(base, relative5, options, skipNormalization) {
       const target = {};
       if (!skipNormalization) {
-        base = parse8(serialize2(base, options), options);
-        relative5 = parse8(serialize2(relative5, options), options);
+        base = parse9(serialize2(base, options), options);
+        relative5 = parse9(serialize2(relative5, options), options);
       }
       options = options || {};
       if (!options.tolerant && relative5.scheme) {
@@ -111720,7 +111735,7 @@ var require_fast_uri = __commonJS({
       }
       return { parsed, malformedAuthorityOrPort };
     }
-    function parse8(uri, opts) {
+    function parse9(uri, opts) {
       return parseWithStatus(uri, opts).parsed;
     }
     function normalizeString(uri, opts) {
@@ -111749,7 +111764,7 @@ var require_fast_uri = __commonJS({
       resolveComponent,
       equal,
       serialize: serialize2,
-      parse: parse8
+      parse: parse9
     };
     module2.exports = fastUri;
     module2.exports.default = fastUri;
@@ -140233,7 +140248,7 @@ var require_root = __commonJS({
     var OneOf = require_oneof();
     var util5 = require_util7();
     var Type2;
-    var parse8;
+    var parse9;
     var common2;
     function Root2(options) {
       Namespace.call(this, "", options);
@@ -140293,8 +140308,8 @@ var require_root = __commonJS({
           if (!util5.isString(source))
             self2.setOptions(source.options).addJSON(source.nested);
           else {
-            parse8.filename = filename2;
-            var parsed = parse8(source, self2, options), resolved2, i5 = 0;
+            parse9.filename = filename2;
+            var parsed = parse9(source, self2, options), resolved2, i5 = 0;
             if (parsed.imports) {
               for (; i5 < parsed.imports.length; ++i5)
                 if (resolved2 = getBundledFileName(parsed.imports[i5]) || self2.resolvePath(filename2, parsed.imports[i5]))
@@ -140465,7 +140480,7 @@ var require_root = __commonJS({
     };
     Root2._configure = function(Type_, parse_2, common_) {
       Type2 = Type_;
-      parse8 = parse_2;
+      parse9 = parse_2;
       common2 = common_;
     };
   }
@@ -141736,9 +141751,9 @@ var require_tokenize = __commonJS({
 var require_parse5 = __commonJS({
   "node_modules/protobufjs/src/parse.js"(exports2, module2) {
     "use strict";
-    module2.exports = parse8;
-    parse8.filename = null;
-    parse8.defaults = { keepCase: false };
+    module2.exports = parse9;
+    parse9.filename = null;
+    parse9.defaults = { keepCase: false };
     var tokenize2 = require_tokenize();
     var Root2 = require_root();
     var Type2 = require_type2();
@@ -141760,13 +141775,13 @@ var require_parse5 = __commonJS({
     var numberRe = util5.patterns.numberRe;
     var nameRe = /^[a-zA-Z_][a-zA-Z_0-9]*$/;
     var typeRefRe = util5.patterns.typeRefRe;
-    function parse8(source, root, options) {
+    function parse9(source, root, options) {
       if (!(root instanceof Root2)) {
         options = root;
         root = new Root2();
       }
       if (!options)
-        options = parse8.defaults;
+        options = parse9.defaults;
       var preferTrailingComment = options.preferTrailingComment || false;
       var tn = tokenize2(source, options.alternateCommentMode || false), next = tn.next, push = tn.push, peek = tn.peek, skip = tn.skip, cmnt = tn.cmnt;
       var head = true, pkg2, imports, weakImports, edition = "proto2";
@@ -141786,9 +141801,9 @@ var require_parse5 = __commonJS({
         });
       }
       function illegal(token3, name3, insideTryCatch) {
-        var filename = parse8.filename;
+        var filename = parse9.filename;
         if (!insideTryCatch)
-          parse8.filename = null;
+          parse9.filename = null;
         return Error("illegal " + (name3 || "token") + " '" + token3 + "' (" + (filename ? filename + ", " : "") + "line " + tn.line + ")");
       }
       function readString() {
@@ -141987,7 +142002,7 @@ var require_parse5 = __commonJS({
           if (typeof obj.comment !== "string") {
             obj.comment = cmnt();
           }
-          obj.filename = parse8.filename;
+          obj.filename = parse9.filename;
         }
         if (skip("{", true)) {
           var token3;
@@ -142107,7 +142122,7 @@ var require_parse5 = __commonJS({
         var type2 = new Type2(name3);
         type2.group = true;
         var field = new Field(fieldName, id, name3, rule);
-        field.filename = parse8.filename;
+        field.filename = parse9.filename;
         ifBlock(type2, function parseGroup_block(token3) {
           switch (token3) {
             case "option":
@@ -142446,7 +142461,7 @@ var require_parse5 = __commonJS({
         }
       }
       resolveFileFeatures();
-      parse8.filename = null;
+      parse9.filename = null;
       return {
         "package": pkg2,
         "imports": imports,
@@ -179572,7 +179587,7 @@ var require_public_api2 = __commonJS({
       }
       return doc;
     }
-    function parse8(src, reviver, options) {
+    function parse9(src, reviver, options) {
       let _reviver = void 0;
       if (typeof reviver === "function") {
         _reviver = reviver;
@@ -179613,7 +179628,7 @@ var require_public_api2 = __commonJS({
         return value.toString(options);
       return new Document2.Document(value, _replacer, options).toString(options);
     }
-    exports2.parse = parse8;
+    exports2.parse = parse9;
     exports2.parseAllDocuments = parseAllDocuments;
     exports2.parseDocument = parseDocument2;
     exports2.stringify = stringify5;
@@ -188730,7 +188745,7 @@ var require_forwarded_parse = __commonJS({
         position
       );
     }
-    function parse8(header) {
+    function parse9(header) {
       var mustUnescape = false;
       var isEscaping = false;
       var inQuotes = false;
@@ -188817,7 +188832,7 @@ var require_forwarded_parse = __commonJS({
       output.push(forwarded);
       return output;
     }
-    module2.exports = parse8;
+    module2.exports = parse9;
   }
 });
 
@@ -211667,8 +211682,8 @@ var GIT_COMMIT_INFO, CLI_VERSION;
 var init_git_commit = __esm({
   "packages/core/dist/src/generated/git-commit.js"() {
     "use strict";
-    GIT_COMMIT_INFO = "4e10a34be";
-    CLI_VERSION = "0.48.0-nightly.20260612.g4e10a34be";
+    GIT_COMMIT_INFO = "4d3dcdce1";
+    CLI_VERSION = "0.48.0-preview.0";
   }
 });
 
@@ -252660,7 +252675,7 @@ var init_v12 = __esm({
 });
 
 // node_modules/eventid/node_modules/uuid/dist/esm-node/parse.js
-function parse2(uuid2) {
+function parse3(uuid2) {
   if (!validate_default3(uuid2)) {
     throw TypeError("Invalid UUID");
   }
@@ -252688,7 +252703,7 @@ var parse_default2;
 var init_parse2 = __esm({
   "node_modules/eventid/node_modules/uuid/dist/esm-node/parse.js"() {
     init_validate2();
-    parse_default2 = parse2;
+    parse_default2 = parse3;
   }
 });
 
@@ -290933,12 +290948,12 @@ var init_errors4 = __esm({
 });
 
 // node_modules/zod/v4/classic/parse.js
-var parse4, parseAsync2, safeParse3, safeParseAsync2;
+var parse5, parseAsync2, safeParse3, safeParseAsync2;
 var init_parse5 = __esm({
   "node_modules/zod/v4/classic/parse.js"() {
     init_core2();
     init_errors4();
-    parse4 = /* @__PURE__ */ _parse(ZodRealError);
+    parse5 = /* @__PURE__ */ _parse(ZodRealError);
     parseAsync2 = /* @__PURE__ */ _parseAsync(ZodRealError);
     safeParse3 = /* @__PURE__ */ _safeParse(ZodRealError);
     safeParseAsync2 = /* @__PURE__ */ _safeParseAsync(ZodRealError);
@@ -291174,7 +291189,7 @@ var init_schemas3 = __esm({
         reg.add(inst, meta);
         return inst;
       };
-      inst.parse = (data, params) => parse4(inst, data, params, { callee: inst.parse });
+      inst.parse = (data, params) => parse5(inst, data, params, { callee: inst.parse });
       inst.safeParse = (data, params) => safeParse3(inst, data, params);
       inst.parseAsync = async (data, params) => parseAsync2(inst, data, params, { callee: inst.parseAsync });
       inst.safeParseAsync = async (data, params) => safeParseAsync2(inst, data, params);
@@ -302485,7 +302500,7 @@ var require_parse6 = __commonJS({
       }
       return parsed;
     }
-    function parse8(command, args2, options) {
+    function parse9(command, args2, options) {
       if (args2 && !Array.isArray(args2)) {
         options = args2;
         args2 = null;
@@ -302504,7 +302519,7 @@ var require_parse6 = __commonJS({
       };
       return options.shell ? parsed : parseNonShell(parsed);
     }
-    module2.exports = parse8;
+    module2.exports = parse9;
   }
 });
 
@@ -302563,16 +302578,16 @@ var require_cross_spawn = __commonJS({
   "node_modules/cross-spawn/index.js"(exports2, module2) {
     "use strict";
     var cp = __require("child_process");
-    var parse8 = require_parse6();
+    var parse9 = require_parse6();
     var enoent = require_enoent();
     function spawn10(command, args2, options) {
-      const parsed = parse8(command, args2, options);
+      const parsed = parse9(command, args2, options);
       const spawned = cp.spawn(parsed.command, parsed.args, parsed.options);
       enoent.hookChildProcess(spawned, parsed);
       return spawned;
     }
     function spawnSync4(command, args2, options) {
-      const parsed = parse8(command, args2, options);
+      const parsed = parse9(command, args2, options);
       const result2 = cp.spawnSync(parsed.command, parsed.args, parsed.options);
       result2.error = result2.error || enoent.verifyENOENTSync(result2.status, parsed);
       return result2;
@@ -302580,7 +302595,7 @@ var require_cross_spawn = __commonJS({
     module2.exports = spawn10;
     module2.exports.spawn = spawn10;
     module2.exports.sync = spawnSync4;
-    module2.exports._parse = parse8;
+    module2.exports._parse = parse9;
     module2.exports._enoent = enoent;
   }
 });
@@ -328883,7 +328898,7 @@ var require_parse8 = __commonJS({
   "node_modules/semver/functions/parse.js"(exports2, module2) {
     "use strict";
     var SemVer = require_semver2();
-    var parse8 = (version4, options, throwErrors = false) => {
+    var parse9 = (version4, options, throwErrors = false) => {
       if (version4 instanceof SemVer) {
         return version4;
       }
@@ -328896,7 +328911,7 @@ var require_parse8 = __commonJS({
         throw er2;
       }
     };
-    module2.exports = parse8;
+    module2.exports = parse9;
   }
 });
 
@@ -328904,9 +328919,9 @@ var require_parse8 = __commonJS({
 var require_valid = __commonJS({
   "node_modules/semver/functions/valid.js"(exports2, module2) {
     "use strict";
-    var parse8 = require_parse8();
+    var parse9 = require_parse8();
     var valid = (version4, options) => {
-      const v2 = parse8(version4, options);
+      const v2 = parse9(version4, options);
       return v2 ? v2.version : null;
     };
     module2.exports = valid;
@@ -328917,9 +328932,9 @@ var require_valid = __commonJS({
 var require_clean = __commonJS({
   "node_modules/semver/functions/clean.js"(exports2, module2) {
     "use strict";
-    var parse8 = require_parse8();
+    var parse9 = require_parse8();
     var clean = (version4, options) => {
-      const s5 = parse8(version4.trim().replace(/^[=v]+/, ""), options);
+      const s5 = parse9(version4.trim().replace(/^[=v]+/, ""), options);
       return s5 ? s5.version : null;
     };
     module2.exports = clean;
@@ -329913,9 +329928,9 @@ var require_spdx_expression_parse = __commonJS({
   "node_modules/spdx-expression-parse/index.js"(exports2, module2) {
     "use strict";
     var scan = require_scan();
-    var parse8 = require_parse9();
+    var parse9 = require_parse9();
     module2.exports = function(source) {
-      return parse8(scan(source));
+      return parse9(scan(source));
     };
   }
 });
@@ -329923,11 +329938,11 @@ var require_spdx_expression_parse = __commonJS({
 // node_modules/spdx-correct/index.js
 var require_spdx_correct = __commonJS({
   "node_modules/spdx-correct/index.js"(exports2, module2) {
-    var parse8 = require_spdx_expression_parse();
+    var parse9 = require_spdx_expression_parse();
     var spdxLicenseIds = require_spdx_license_ids();
     function valid(string4) {
       try {
-        parse8(string4);
+        parse9(string4);
         return true;
       } catch (error2) {
         return false;
@@ -330256,7 +330271,7 @@ var require_spdx_correct = __commonJS({
 // node_modules/validate-npm-package-license/index.js
 var require_validate_npm_package_license = __commonJS({
   "node_modules/validate-npm-package-license/index.js"(exports2, module2) {
-    var parse8 = require_spdx_expression_parse();
+    var parse9 = require_spdx_expression_parse();
     var correct = require_spdx_correct();
     var genericWarning = 'license should be a valid SPDX license expression (without "LicenseRef"), "UNLICENSED", or "SEE LICENSE IN <filename>"';
     var fileReferenceRE = /^SEE LICEN[CS]E IN (.+)$/;
@@ -330274,7 +330289,7 @@ var require_validate_npm_package_license = __commonJS({
     module2.exports = function(argument) {
       var ast;
       try {
-        ast = parse8(argument);
+        ast = parse9(argument);
       } catch (e3) {
         var match2;
         if (argument === "UNLICENSED" || argument === "UNLICENCED") {
@@ -332856,7 +332871,7 @@ function getVersion() {
   }
   versionPromise = (async () => {
     const pkgJson = await getPackageJson(__dirname4);
-    return "0.48.0-nightly.20260612.g4e10a34be";
+    return "0.48.0-preview.0";
   })();
   return versionPromise;
 }
@@ -333510,8 +333525,9 @@ function classifyValidationRequiredError(googleApiError) {
 function classifyGoogleError(error2) {
   const googleApiError = parseGoogleApiError(error2);
   const status2 = googleApiError?.code ?? getErrorStatus(error2);
+  const errorMessage = googleApiError?.message || extractErrorMessage(error2);
   if (status2 === 404) {
-    const message = googleApiError?.message || (error2 instanceof Error ? error2.message : "Model not found");
+    const message = errorMessage.trim() || "Model not found";
     return new ModelNotFoundError(message, status2);
   }
   if (status2 === 403 && googleApiError) {
@@ -333520,26 +333536,34 @@ function classifyGoogleError(error2) {
       return validationError;
     }
   }
+  const lowerMessage = errorMessage.toLowerCase();
+  if ((status2 === 429 || status2 === 499 || status2 === 503) && /limit:\s*0(?!\d|\.\d)/.test(lowerMessage)) {
+    const cause = googleApiError ?? {
+      code: status2 ?? 429,
+      message: errorMessage,
+      details: []
+    };
+    return new TerminalQuotaError(errorMessage, cause);
+  }
   if (!googleApiError || googleApiError.code !== 429 && googleApiError.code !== 499 && googleApiError.code !== 503 || googleApiError.details.length === 0) {
-    const errorMessage2 = googleApiError?.message || (error2 instanceof Error ? error2.message : String(error2));
-    const match2 = errorMessage2.match(/Please retry in ([0-9.]+(?:ms|s))/);
+    const match2 = errorMessage.match(/Please retry in ([0-9.]+(?:ms|s))/);
     if (match2?.[1]) {
       const retryDelaySeconds = parseDurationInSeconds(match2[1]);
       if (retryDelaySeconds !== null) {
         const cause = googleApiError ?? {
           code: status2 ?? 429,
-          message: errorMessage2,
+          message: errorMessage,
           details: []
         };
         if (retryDelaySeconds > MAX_RETRYABLE_DELAY_SECONDS) {
-          return new TerminalQuotaError(errorMessage2, cause, retryDelaySeconds);
+          return new TerminalQuotaError(errorMessage, cause, retryDelaySeconds);
         }
-        return new RetryableQuotaError(errorMessage2, cause, retryDelaySeconds);
+        return new RetryableQuotaError(errorMessage, cause, retryDelaySeconds);
       }
     } else if (status2 === 429 || status2 === 499 || status2 === 503) {
-      return new RetryableQuotaError(errorMessage2, googleApiError ?? {
+      return new RetryableQuotaError(errorMessage, googleApiError ?? {
         code: status2,
-        message: errorMessage2,
+        message: errorMessage,
         details: []
       });
     }
@@ -333606,9 +333630,20 @@ Suggested retry after 60s.`, googleApiError, 60);
 Suggested retry after 60s.`, googleApiError, 60);
     }
   }
-  const errorMessage = googleApiError.message || (error2 instanceof Error ? error2.message : String(error2));
   return new RetryableQuotaError(errorMessage, googleApiError);
 }
+function extractErrorMessage(error2) {
+  if (typeof error2 === "string") {
+    return error2;
+  }
+  if (typeof error2 === "object" && error2 !== null && "message" in error2) {
+    const msg = error2.message;
+    if (typeof msg === "string") {
+      return msg;
+    }
+  }
+  return "";
+}
 var GoogleApiType, TerminalQuotaError, RetryableQuotaError, ValidationRequiredError, MAX_RETRYABLE_DELAY_SECONDS, CLOUDCODE_DOMAINS;
 var init_googleQuotaErrors = __esm({
   "packages/core/dist/src/utils/googleQuotaErrors.js"() {
@@ -338084,15 +338119,22 @@ async function createContentGenerator(config3, gcConfig, sessionId) {
       }
       const proxyUrl = config3.proxy?.trim();
       const proxyAgent = proxyUrl ? baseUrl?.startsWith("http://") ? new import_http_proxy_agent.HttpProxyAgent(proxyUrl) : new import_https_proxy_agent2.HttpsProxyAgent(proxyUrl) : void 0;
+      const useVertex = config3.vertexai ?? config3.authType === AuthType2.USE_VERTEX_AI;
       const googleGenAI = new GoogleGenAI({
         apiKey: config3.authType === AuthType2.GATEWAY ? config3.apiKey : config3.apiKey === "" ? void 0 : config3.apiKey,
         vertexai: config3.vertexai ?? config3.authType === AuthType2.USE_VERTEX_AI,
         httpOptions,
         ...apiVersionEnv && { apiVersion: apiVersionEnv },
-        ...proxyAgent && {
+        // Merge proxy and GDCH endpoint into googleAuthOptions if either exists
+        ...(proxyAgent || useVertex && baseUrl) && {
           googleAuthOptions: {
             clientOptions: {
-              transporterOptions: { agent: proxyAgent }
+              ...proxyAgent && {
+                transporterOptions: { agent: proxyAgent }
+              },
+              ...useVertex && baseUrl && {
+                apiEndpoint: baseUrl
+              }
             }
           }
         }
@@ -382177,7 +382219,7 @@ var init_scheduler = __esm({
         return false;
       }
       _isParallelizable(request) {
-        if (request.name === UPDATE_TOPIC_TOOL_NAME) {
+        if (request.name === UPDATE_TOPIC_TOOL_NAME || EDIT_TOOL_NAMES.has(request.name)) {
           return false;
         }
         if (request.args) {
@@ -389388,7 +389430,7 @@ function parseStringResponse(result2, parsers12, texts, trim = true) {
         }
         return lines[i4 + offset];
       };
-      parsers12.some(({ parse: parse8 }) => parse8(line, result2));
+      parsers12.some(({ parse: parse9 }) => parse9(line, result2));
     }
   });
   return result2;
@@ -414264,7 +414306,7 @@ var require_parse11 = __commonJS({
       }
       return { risky: false };
     };
-    var parse8 = (input, options) => {
+    var parse9 = (input, options) => {
       if (typeof input !== "string") {
         throw new TypeError("Expected a string");
       }
@@ -414434,7 +414476,7 @@ var require_parse11 = __commonJS({
             output = token2.close = `)$))${extglobStar}`;
           }
           if (token2.inner.includes("*") && (rest = remaining()) && /^\.[^\\/.]+$/.test(rest)) {
-            const expression = parse8(rest, { ...options, fastpaths: false }).output;
+            const expression = parse9(rest, { ...options, fastpaths: false }).output;
             output = token2.close = `)${expression})${extglobStar})`;
           }
           if (token2.prev.type === "bos") {
@@ -414956,7 +414998,7 @@ var require_parse11 = __commonJS({
       }
       return state;
     };
-    parse8.fastpaths = (input, options) => {
+    parse9.fastpaths = (input, options) => {
       const opts = { ...options };
       const max = typeof opts.maxLength === "number" ? Math.min(MAX_LENGTH, opts.maxLength) : MAX_LENGTH;
       const len = input.length;
@@ -415021,7 +415063,7 @@ var require_parse11 = __commonJS({
       }
       return source;
     };
-    module2.exports = parse8;
+    module2.exports = parse9;
   }
 });
 
@@ -415030,7 +415072,7 @@ var require_picomatch = __commonJS({
   "packages/core/node_modules/picomatch/lib/picomatch.js"(exports2, module2) {
     "use strict";
     var scan = require_scan2();
-    var parse8 = require_parse11();
+    var parse9 = require_parse11();
     var utils = require_utils22();
     var constants3 = require_constants11();
     var isObject5 = (val) => val && typeof val === "object" && !Array.isArray(val);
@@ -415118,7 +415160,7 @@ var require_picomatch = __commonJS({
     picomatch2.isMatch = (str2, patterns, options) => picomatch2(patterns, options)(str2);
     picomatch2.parse = (pattern, options) => {
       if (Array.isArray(pattern)) return pattern.map((p3) => picomatch2.parse(p3, options));
-      return parse8(pattern, { ...options, fastpaths: false });
+      return parse9(pattern, { ...options, fastpaths: false });
     };
     picomatch2.scan = (input, options) => scan(input, options);
     picomatch2.compileRe = (state, options, returnOutput = false, returnState = false) => {
@@ -415144,10 +415186,10 @@ var require_picomatch = __commonJS({
       }
       let parsed = { negated: false, fastpaths: true };
       if (options.fastpaths !== false && (input[0] === "." || input[0] === "*")) {
-        parsed.output = parse8.fastpaths(input, options);
+        parsed.output = parse9.fastpaths(input, options);
       }
       if (!parsed.output) {
-        parsed = parse8(input, options);
+        parsed = parse9(input, options);
       }
       return picomatch2.compileRe(parsed, options, returnOutput, returnState);
     };
@@ -417139,7 +417181,7 @@ var require_main2 = __commonJS({
     var packageJson4 = require_package13();
     var version4 = packageJson4.version;
     var LINE = /(?:^|^)\s*(?:export\s+)?([\w.-]+)(?:\s*=\s*?|:\s+?)(\s*'(?:\\'|[^'])*'|\s*"(?:\\"|[^"])*"|\s*`(?:\\`|[^`])*`|[^#\r\n]+)?\s*(?:#.*)?(?:$|$)/mg;
-    function parse8(src) {
+    function parse9(src) {
       const obj = {};
       let lines = src.toString();
       lines = lines.replace(/\r\n?/mg, "\n");
@@ -417405,7 +417447,7 @@ var require_main2 = __commonJS({
       _parseVault,
       config: config3,
       decrypt,
-      parse: parse8,
+      parse: parse9,
       populate
     };
     module2.exports.configDotenv = DotenvModule.configDotenv;
@@ -433505,6 +433547,7 @@ function setPersistedState(metadata2, state) {
 }
 
 // packages/a2a-server/src/config/config.ts
+var INITIAL_FOLDER_TRUST = process.env["GEMINI_FOLDER_TRUST"];
 async function loadConfig(settings, extensionLoader, taskId, trusted = false) {
   const workspaceDir = process.cwd();
   const folderTrust = settings.folderTrust === true || process.env["GEMINI_FOLDER_TRUST"] === "true";
@@ -433521,9 +433564,9 @@ async function loadConfig(settings, extensionLoader, taskId, trusted = false) {
   const policySettings = {
     mcpServers: settings.mcpServers,
     tools: {
-      core: settings.coreTools || settings.tools?.core,
-      exclude: settings.excludeTools || settings.tools?.exclude,
-      allowed: settings.allowedTools || settings.tools?.allowed
+      core: settings.tools?.core,
+      exclude: settings.tools?.exclude,
+      allowed: settings.tools?.allowed
     },
     policyPaths: settings.policyPaths,
     adminPolicyPaths: settings.adminPolicyPaths
@@ -433546,9 +433589,9 @@ async function loadConfig(settings, extensionLoader, taskId, trusted = false) {
     debugMode: process.env["DEBUG"] === "true" || false,
     question: "",
     // Not used in server mode directly like CLI
-    coreTools: settings.coreTools || settings.tools?.core || void 0,
-    excludeTools: settings.excludeTools || settings.tools?.exclude || void 0,
-    allowedTools: settings.allowedTools || settings.tools?.allowed || void 0,
+    coreTools: settings.tools?.core || void 0,
+    excludeTools: settings.tools?.exclude || void 0,
+    allowedTools: settings.tools?.allowed || void 0,
     showMemoryUsage: settings.showMemoryUsage || false,
     approvalMode,
     policyEngineConfig,
@@ -433605,6 +433648,12 @@ async function loadConfig(settings, extensionLoader, taskId, trusted = false) {
   await refreshAuthentication(config3, "Config");
   return config3;
 }
+function setIsTrusted(agentSettings) {
+  if (INITIAL_FOLDER_TRUST !== void 0) {
+    return INITIAL_FOLDER_TRUST === "true";
+  }
+  return !!agentSettings?.isTrusted;
+}
 function setTargetDir(agentSettings) {
   const originalCWD = process.cwd();
   const targetDir = process.env["CODER_AGENT_WORKSPACE_PATH"] ?? (agentSettings?.kind === "agent-settings" /* StateAgentSettingsEvent */ ? agentSettings.workspacePath : void 0);
@@ -434228,6 +434277,12 @@ var Task4 = class _Task {
       async () => "stop"
     );
   }
+  get hasPendingTools() {
+    return this.pendingToolCalls.size > 0;
+  }
+  get pendingToolsCount() {
+    return this.pendingToolCalls.size;
+  }
   static async create(id, contextId, config3, eventBus, autoExecute) {
     return new _Task(id, contextId, config3, eventBus, autoExecute);
   }
@@ -435157,8 +435212,8 @@ var CoderAgentExecutor = class {
   executingTasks = /* @__PURE__ */ new Set();
   async getConfig(agentSettings, taskId) {
     const workspaceRoot = setTargetDir(agentSettings);
-    const isTrusted = agentSettings.isTrusted ?? false;
     loadEnvironment();
+    const isTrusted = setIsTrusted(agentSettings);
     const settings = loadSettings(workspaceRoot, isTrusted);
     const extensions = loadExtensions(workspaceRoot);
     return loadConfig(
@@ -435538,38 +435593,45 @@ var CoderAgentExecutor = class {
           `[CoderAgentExecutor] Task ${taskId}: All pending tools completed or none were pending.`
         );
         if (abortSignal.aborted) throw new Error("Execution aborted");
-        const completedTools = currentTask.getAndClearCompletedTools();
-        if (completedTools.length > 0) {
-          if (completedTools.every((tool) => tool.status === "cancelled")) {
-            logger.info(
-              `[CoderAgentExecutor] Task ${taskId}: All tool calls were cancelled. Updating history and ending agent turn.`
-            );
-            currentTask.addToolResponsesToHistory(completedTools);
-            agentTurnActive = false;
-            const stateChange2 = {
-              kind: "state-change" /* StateChangeEvent */
-            };
-            currentTask.setTaskStateAndPublishUpdate(
-              "input-required",
-              stateChange2,
-              void 0,
-              void 0,
-              true
-            );
+        if (currentTask.hasPendingTools) {
+          logger.info(
+            `[CoderAgentExecutor] Task ${taskId}: There are still ${currentTask.pendingToolsCount} pending tools waiting for approval. Yielding to user.`
+          );
+          agentTurnActive = false;
+        } else {
+          const completedTools = currentTask.getAndClearCompletedTools();
+          if (completedTools.length > 0) {
+            if (completedTools.every((tool) => tool.status === "cancelled")) {
+              logger.info(
+                `[CoderAgentExecutor] Task ${taskId}: All tool calls were cancelled. Updating history and ending agent turn.`
+              );
+              currentTask.addToolResponsesToHistory(completedTools);
+              agentTurnActive = false;
+              const stateChange2 = {
+                kind: "state-change" /* StateChangeEvent */
+              };
+              currentTask.setTaskStateAndPublishUpdate(
+                "input-required",
+                stateChange2,
+                void 0,
+                void 0,
+                true
+              );
+            } else {
+              logger.info(
+                `[CoderAgentExecutor] Task ${taskId}: Found ${completedTools.length} completed tool calls. Sending results back to LLM.`
+              );
+              agentEvents = currentTask.sendCompletedToolsToLlm(
+                completedTools,
+                abortSignal
+              );
+            }
           } else {
             logger.info(
-              `[CoderAgentExecutor] Task ${taskId}: Found ${completedTools.length} completed tool calls. Sending results back to LLM.`
-            );
-            agentEvents = currentTask.sendCompletedToolsToLlm(
-              completedTools,
-              abortSignal
+              `[CoderAgentExecutor] Task ${taskId}: No more tool calls to process. Ending agent turn.`
             );
+            agentTurnActive = false;
           }
-        } else {
-          logger.info(
-            `[CoderAgentExecutor] Task ${taskId}: No more tool calls to process. Ending agent turn.`
-          );
-          agentTurnActive = false;
         }
       }
       logger.info(