@qwen-code/qwen-code 0.14.0-preview.2 → 0.14.0-preview.3

package/cli.js

@@ -3962,11 +3962,11 @@ var require_util2 = __commonJS({
     var { isUint8Array } = __require("node:util/types");
     var { webidl } = require_webidl();
     var supportedHashes = [];
-    var crypto17;
+    var crypto18;
     try {
-      crypto17 = __require("node:crypto");
+      crypto18 = __require("node:crypto");
       const possibleRelevantHashes = ["sha256", "sha384", "sha512"];
-      supportedHashes = crypto17.getHashes().filter((hash) => possibleRelevantHashes.includes(hash));
+      supportedHashes = crypto18.getHashes().filter((hash) => possibleRelevantHashes.includes(hash));
     } catch {
     }
     function responseURL(response) {
@@ -4264,7 +4264,7 @@ var require_util2 = __commonJS({
     }
     __name(isURLPotentiallyTrustworthy, "isURLPotentiallyTrustworthy");
     function bytesMatch(bytes, metadataList) {
-      if (crypto17 === void 0) {
+      if (crypto18 === void 0) {
         return true;
       }
       const parsedMetadata = parseMetadata(metadataList);
@@ -4279,7 +4279,7 @@ var require_util2 = __commonJS({
       for (const item of metadata2) {
         const algorithm = item.algo;
         const expectedValue = item.hash;
-        let actualValue = crypto17.createHash(algorithm).update(bytes).digest("base64");
+        let actualValue = crypto18.createHash(algorithm).update(bytes).digest("base64");
         if (actualValue[actualValue.length - 1] === "=") {
           if (actualValue[actualValue.length - 2] === "=") {
             actualValue = actualValue.slice(0, -2);
@@ -5405,8 +5405,8 @@ var require_body = __commonJS({
     var { multipartFormDataParser } = require_formdata_parser();
     var random2;
     try {
-      const crypto17 = __require("node:crypto");
-      random2 = /* @__PURE__ */ __name((max) => crypto17.randomInt(0, max), "random");
+      const crypto18 = __require("node:crypto");
+      random2 = /* @__PURE__ */ __name((max) => crypto18.randomInt(0, max), "random");
     } catch {
       random2 = /* @__PURE__ */ __name((max) => Math.floor(Math.random(max)), "random");
     }
@@ -17197,13 +17197,13 @@ var require_frame = __commonJS({
     init_esbuild_shims();
     var { maxUnsigned16Bit } = require_constants5();
     var BUFFER_SIZE = 16386;
-    var crypto17;
+    var crypto18;
     var buffer = null;
     var bufIdx = BUFFER_SIZE;
     try {
-      crypto17 = __require("node:crypto");
+      crypto18 = __require("node:crypto");
     } catch {
-      crypto17 = {
+      crypto18 = {
         // not full compatibility, but minimum.
         randomFillSync: /* @__PURE__ */ __name(function randomFillSync(buffer2, _offset, _size3) {
           for (let i4 = 0; i4 < buffer2.length; ++i4) {
@@ -17216,7 +17216,7 @@ var require_frame = __commonJS({
     function generateMask() {
       if (bufIdx === BUFFER_SIZE) {
         bufIdx = 0;
-        crypto17.randomFillSync(buffer ??= Buffer.allocUnsafe(BUFFER_SIZE), 0, BUFFER_SIZE);
+        crypto18.randomFillSync(buffer ??= Buffer.allocUnsafe(BUFFER_SIZE), 0, BUFFER_SIZE);
       }
       return [buffer[bufIdx++], buffer[bufIdx++], buffer[bufIdx++], buffer[bufIdx++]];
     }
@@ -17293,9 +17293,9 @@ var require_connection = __commonJS({
     var { Headers: Headers6, getHeadersList } = require_headers();
     var { getDecodeSplit } = require_util2();
     var { WebsocketFrameSend } = require_frame();
-    var crypto17;
+    var crypto18;
     try {
-      crypto17 = __require("node:crypto");
+      crypto18 = __require("node:crypto");
     } catch {
     }
     function establishWebSocketConnection(url3, protocols, client, ws2, onEstablish, options2) {
@@ -17315,7 +17315,7 @@ var require_connection = __commonJS({
         const headersList = getHeadersList(new Headers6(options2.headers));
         request4.headersList = headersList;
       }
-      const keyValue = crypto17.randomBytes(16).toString("base64");
+      const keyValue = crypto18.randomBytes(16).toString("base64");
       request4.headersList.append("sec-websocket-key", keyValue);
       request4.headersList.append("sec-websocket-version", "13");
       for (const protocol of protocols) {
@@ -17345,7 +17345,7 @@ var require_connection = __commonJS({
             return;
           }
           const secWSAccept = response.headersList.get("Sec-WebSocket-Accept");
-          const digest = crypto17.createHash("sha1").update(keyValue + uid).digest("base64");
+          const digest = crypto18.createHash("sha1").update(keyValue + uid).digest("base64");
           if (secWSAccept !== digest) {
             failWebsocketConnection(ws2, "Incorrect hash received in Sec-WebSocket-Accept header.");
             return;
@@ -43802,7 +43802,7 @@ var require_gaxios = __commonJS({
     var retry_js_1 = require_retry2();
     var stream_1 = __require("stream");
     var interceptor_js_1 = require_interceptor();
-    var randomUUID12 = /* @__PURE__ */ __name(async () => globalThis.crypto?.randomUUID() || (await import("crypto")).randomUUID(), "randomUUID");
+    var randomUUID15 = /* @__PURE__ */ __name(async () => globalThis.crypto?.randomUUID() || (await import("crypto")).randomUUID(), "randomUUID");
     var HTTP_STATUS_NO_CONTENT = 204;
     var Gaxios = class {
       static {
@@ -44078,7 +44078,7 @@ var require_gaxios = __commonJS({
          */
         ["Blob", "File", "FormData"].includes(opts.data?.constructor?.name || "");
         if (opts.multipart?.length) {
-          const boundary = await randomUUID12();
+          const boundary = await randomUUID15();
           preparedHeaders.set("content-type", `multipart/related; boundary=${boundary}`);
           opts.body = stream_1.Readable.from(this.getMultipartRequest(opts.multipart, boundary));
         } else if (shouldDirectlyPassData) {
@@ -47055,25 +47055,25 @@ var require_crypto2 = __commonJS({
     init_esbuild_shims();
     Object.defineProperty(exports2, "__esModule", { value: true });
     exports2.NodeCrypto = void 0;
-    var crypto17 = __require("crypto");
+    var crypto18 = __require("crypto");
     var NodeCrypto = class {
       static {
         __name(this, "NodeCrypto");
       }
       async sha256DigestBase64(str2) {
-        return crypto17.createHash("sha256").update(str2).digest("base64");
+        return crypto18.createHash("sha256").update(str2).digest("base64");
       }
       randomBytesBase64(count) {
-        return crypto17.randomBytes(count).toString("base64");
+        return crypto18.randomBytes(count).toString("base64");
       }
       async verify(pubkey, data, signature) {
-        const verifier = crypto17.createVerify("RSA-SHA256");
+        const verifier = crypto18.createVerify("RSA-SHA256");
         verifier.update(data);
         verifier.end();
         return verifier.verify(pubkey, signature, "base64");
       }
       async sign(privateKey, data) {
-        const signer = crypto17.createSign("RSA-SHA256");
+        const signer = crypto18.createSign("RSA-SHA256");
         signer.update(data);
         signer.end();
         return signer.sign(privateKey, "base64");
@@ -47091,7 +47091,7 @@ var require_crypto2 = __commonJS({
        *   string in hexadecimal encoding.
        */
       async sha256DigestHex(str2) {
-        return crypto17.createHash("sha256").update(str2).digest("hex");
+        return crypto18.createHash("sha256").update(str2).digest("hex");
       }
       /**
        * Computes the HMAC hash of a message using the provided crypto key and the
@@ -47103,7 +47103,7 @@ var require_crypto2 = __commonJS({
        */
       async signWithHmacSha256(key, msg) {
         const cryptoKey = typeof key === "string" ? key : toBuffer(key);
-        return toArrayBuffer(crypto17.createHmac("sha256", cryptoKey).update(msg).digest());
+        return toArrayBuffer(crypto18.createHmac("sha256", cryptoKey).update(msg).digest());
       }
     };
     exports2.NodeCrypto = NodeCrypto;
@@ -48050,10 +48050,10 @@ var require_oauth2client = __commonJS({
        * https://github.com/googleapis/google-auth-library-nodejs/blob/main/samples/oauth2-codeVerifier.js
        */
       async generateCodeVerifierAsync() {
-        const crypto17 = (0, crypto_1.createCrypto)();
-        const randomString2 = crypto17.randomBytesBase64(96);
+        const crypto18 = (0, crypto_1.createCrypto)();
+        const randomString2 = crypto18.randomBytesBase64(96);
         const codeVerifier = randomString2.replace(/\+/g, "~").replace(/=/g, "_").replace(/\//g, "-");
-        const unencodedCodeChallenge = await crypto17.sha256DigestBase64(codeVerifier);
+        const unencodedCodeChallenge = await crypto18.sha256DigestBase64(codeVerifier);
         const codeChallenge = unencodedCodeChallenge.split("=")[0].replace(/\+/g, "-").replace(/\//g, "_");
         return { codeVerifier, codeChallenge };
       }
@@ -48494,7 +48494,7 @@ var require_oauth2client = __commonJS({
        * @return Returns a promise resolving to LoginTicket on verification.
        */
       async verifySignedJwtWithCertsAsync(jwt2, certs, requiredAudience, issuers, maxExpiry) {
-        const crypto17 = (0, crypto_1.createCrypto)();
+        const crypto18 = (0, crypto_1.createCrypto)();
         if (!maxExpiry) {
           maxExpiry = _OAuth2Client.DEFAULT_MAX_TOKEN_LIFETIME_SECS_;
         }
@@ -48507,7 +48507,7 @@ var require_oauth2client = __commonJS({
         let envelope;
         let payload;
         try {
-          envelope = JSON.parse(crypto17.decodeBase64StringUtf8(segments[0]));
+          envelope = JSON.parse(crypto18.decodeBase64StringUtf8(segments[0]));
         } catch (err2) {
           if (err2 instanceof Error) {
             err2.message = `Can't parse token envelope: ${segments[0]}': ${err2.message}`;
@@ -48518,7 +48518,7 @@ var require_oauth2client = __commonJS({
           throw new Error("Can't parse token envelope: " + segments[0]);
         }
         try {
-          payload = JSON.parse(crypto17.decodeBase64StringUtf8(segments[1]));
+          payload = JSON.parse(crypto18.decodeBase64StringUtf8(segments[1]));
         } catch (err2) {
           if (err2 instanceof Error) {
             err2.message = `Can't parse token payload '${segments[0]}`;
@@ -48535,7 +48535,7 @@ var require_oauth2client = __commonJS({
         if (envelope.alg === "ES256") {
           signature = formatEcdsa.joseToDer(signature, "ES256").toString("base64");
         }
-        const verified = await crypto17.verify(cert, signed, signature);
+        const verified = await crypto18.verify(cert, signed, signature);
         if (!verified) {
           throw new Error("Invalid token signature: " + jwt2);
         }
@@ -48933,14 +48933,14 @@ var require_jwa = __commonJS({
   "node_modules/jwa/index.js"(exports2, module2) {
     init_esbuild_shims();
     var Buffer9 = require_safe_buffer().Buffer;
-    var crypto17 = __require("crypto");
+    var crypto18 = __require("crypto");
     var formatEcdsa = require_ecdsa_sig_formatter();
     var util5 = __require("util");
     var MSG_INVALID_ALGORITHM = '"%s" is not a valid algorithm.\n  Supported algorithms are:\n  "HS256", "HS384", "HS512", "RS256", "RS384", "RS512", "PS256", "PS384", "PS512", "ES256", "ES384", "ES512" and "none".';
     var MSG_INVALID_SECRET = "secret must be a string or buffer";
     var MSG_INVALID_VERIFIER_KEY = "key must be a string or a buffer";
     var MSG_INVALID_SIGNER_KEY = "key must be a string, a buffer or an object";
-    var supportsKeyObjects = typeof crypto17.createPublicKey === "function";
+    var supportsKeyObjects = typeof crypto18.createPublicKey === "function";
     if (supportsKeyObjects) {
       MSG_INVALID_VERIFIER_KEY += " or a KeyObject";
       MSG_INVALID_SECRET += "or a KeyObject";
@@ -49038,18 +49038,18 @@ var require_jwa = __commonJS({
       return /* @__PURE__ */ __name(function sign(thing, secret) {
         checkIsSecretKey(secret);
         thing = normalizeInput(thing);
-        var hmac = crypto17.createHmac("sha" + bits, secret);
+        var hmac = crypto18.createHmac("sha" + bits, secret);
         var sig = (hmac.update(thing), hmac.digest("base64"));
         return fromBase64(sig);
       }, "sign");
     }
     __name(createHmacSigner, "createHmacSigner");
     var bufferEqual;
-    var timingSafeEqual = "timingSafeEqual" in crypto17 ? /* @__PURE__ */ __name(function timingSafeEqual2(a2, b2) {
+    var timingSafeEqual = "timingSafeEqual" in crypto18 ? /* @__PURE__ */ __name(function timingSafeEqual2(a2, b2) {
       if (a2.byteLength !== b2.byteLength) {
         return false;
       }
-      return crypto17.timingSafeEqual(a2, b2);
+      return crypto18.timingSafeEqual(a2, b2);
     }, "timingSafeEqual") : /* @__PURE__ */ __name(function timingSafeEqual2(a2, b2) {
       if (!bufferEqual) {
         bufferEqual = require_buffer_equal_constant_time();
@@ -49067,7 +49067,7 @@ var require_jwa = __commonJS({
       return /* @__PURE__ */ __name(function sign(thing, privateKey) {
         checkIsPrivateKey(privateKey);
         thing = normalizeInput(thing);
-        var signer = crypto17.createSign("RSA-SHA" + bits);
+        var signer = crypto18.createSign("RSA-SHA" + bits);
         var sig = (signer.update(thing), signer.sign(privateKey, "base64"));
         return fromBase64(sig);
       }, "sign");
@@ -49078,7 +49078,7 @@ var require_jwa = __commonJS({
         checkIsPublicKey(publicKey);
         thing = normalizeInput(thing);
         signature = toBase64(signature);
-        var verifier = crypto17.createVerify("RSA-SHA" + bits);
+        var verifier = crypto18.createVerify("RSA-SHA" + bits);
         verifier.update(thing);
         return verifier.verify(publicKey, signature, "base64");
       }, "verify");
@@ -49088,11 +49088,11 @@ var require_jwa = __commonJS({
       return /* @__PURE__ */ __name(function sign(thing, privateKey) {
         checkIsPrivateKey(privateKey);
         thing = normalizeInput(thing);
-        var signer = crypto17.createSign("RSA-SHA" + bits);
+        var signer = crypto18.createSign("RSA-SHA" + bits);
         var sig = (signer.update(thing), signer.sign({
           key: privateKey,
-          padding: crypto17.constants.RSA_PKCS1_PSS_PADDING,
-          saltLength: crypto17.constants.RSA_PSS_SALTLEN_DIGEST
+          padding: crypto18.constants.RSA_PKCS1_PSS_PADDING,
+          saltLength: crypto18.constants.RSA_PSS_SALTLEN_DIGEST
         }, "base64"));
         return fromBase64(sig);
       }, "sign");
@@ -49103,12 +49103,12 @@ var require_jwa = __commonJS({
         checkIsPublicKey(publicKey);
         thing = normalizeInput(thing);
         signature = toBase64(signature);
-        var verifier = crypto17.createVerify("RSA-SHA" + bits);
+        var verifier = crypto18.createVerify("RSA-SHA" + bits);
         verifier.update(thing);
         return verifier.verify({
           key: publicKey,
-          padding: crypto17.constants.RSA_PKCS1_PSS_PADDING,
-          saltLength: crypto17.constants.RSA_PSS_SALTLEN_DIGEST
+          padding: crypto18.constants.RSA_PKCS1_PSS_PADDING,
+          saltLength: crypto18.constants.RSA_PSS_SALTLEN_DIGEST
         }, signature, "base64");
       }, "verify");
     }
@@ -52035,15 +52035,15 @@ var require_awsrequestsigner = __commonJS({
       }
     };
     exports2.AwsRequestSigner = AwsRequestSigner;
-    async function sign(crypto17, key, msg) {
-      return await crypto17.signWithHmacSha256(key, msg);
+    async function sign(crypto18, key, msg) {
+      return await crypto18.signWithHmacSha256(key, msg);
     }
     __name(sign, "sign");
-    async function getSigningKey(crypto17, key, dateStamp, region, serviceName) {
-      const kDate = await sign(crypto17, `AWS4${key}`, dateStamp);
-      const kRegion = await sign(crypto17, kDate, region);
-      const kService = await sign(crypto17, kRegion, serviceName);
-      const kSigning = await sign(crypto17, kService, "aws4_request");
+    async function getSigningKey(crypto18, key, dateStamp, region, serviceName) {
+      const kDate = await sign(crypto18, `AWS4${key}`, dateStamp);
+      const kRegion = await sign(crypto18, kDate, region);
+      const kService = await sign(crypto18, kRegion, serviceName);
+      const kSigning = await sign(crypto18, kService, "aws4_request");
       return kSigning;
     }
     __name(getSigningKey, "getSigningKey");
@@ -53821,24 +53821,24 @@ var require_googleauth = __commonJS({
           const signed = await client.sign(data);
           return signed.signedBlob;
         }
-        const crypto17 = (0, crypto_1.createCrypto)();
+        const crypto18 = (0, crypto_1.createCrypto)();
         if (client instanceof jwtclient_1.JWT && client.key) {
-          const sign = await crypto17.sign(client.key, data);
+          const sign = await crypto18.sign(client.key, data);
           return sign;
         }
         const creds = await this.getCredentials();
         if (!creds.client_email) {
           throw new Error("Cannot sign data without `client_email`.");
         }
-        return this.signBlob(crypto17, creds.client_email, data, endpoint);
+        return this.signBlob(crypto18, creds.client_email, data, endpoint);
       }
-      async signBlob(crypto17, emailOrUniqueId, data, endpoint) {
+      async signBlob(crypto18, emailOrUniqueId, data, endpoint) {
         const url3 = new URL(endpoint + `${emailOrUniqueId}:signBlob`);
         const res = await this.request({
           method: "POST",
           url: url3.href,
           data: {
-            payload: crypto17.encodeBase64StringUtf8(data)
+            payload: crypto18.encodeBase64StringUtf8(data)
           },
           retry: true,
           retryConfig: {
@@ -90499,8 +90499,8 @@ function sanitizeHookName(hookName) {
   }
   if (command2.includes("/") || command2.includes("\\")) {
     const pathParts = command2.split(/[/\\]/);
-    const basename29 = pathParts[pathParts.length - 1];
-    return basename29 || "unknown-command";
+    const basename32 = pathParts[pathParts.length - 1];
+    return basename32 || "unknown-command";
   }
   return command2;
 }
@@ -148625,13 +148625,13 @@ var init_uuid = __esm({
   "node_modules/openai/internal/utils/uuid.mjs"() {
     init_esbuild_shims();
     uuid4 = /* @__PURE__ */ __name(function() {
-      const { crypto: crypto17 } = globalThis;
-      if (crypto17?.randomUUID) {
-        uuid4 = crypto17.randomUUID.bind(crypto17);
-        return crypto17.randomUUID();
+      const { crypto: crypto18 } = globalThis;
+      if (crypto18?.randomUUID) {
+        uuid4 = crypto18.randomUUID.bind(crypto18);
+        return crypto18.randomUUID();
       }
       const u8 = new Uint8Array(1);
-      const randomByte = crypto17 ? () => crypto17.getRandomValues(u8)[0] : () => Math.random() * 255 & 255;
+      const randomByte = crypto18 ? () => crypto18.getRandomValues(u8)[0] : () => Math.random() * 255 & 255;
       return "10000000-1000-4000-8000-100000000000".replace(/[018]/g, (c4) => (+c4 ^ randomByte() & 15 >> +c4 / 4).toString(16));
     }, "uuid4");
   }
@@ -171295,7 +171295,7 @@ __export(geminiContentGenerator_exports, {
   createGeminiContentGenerator: () => createGeminiContentGenerator
 });
 function createGeminiContentGenerator(config2, gcConfig) {
-  const version2 = "0.14.0-preview.2";
+  const version2 = "0.14.0-preview.3";
   const userAgent2 = config2.userAgent || `QwenCode/${version2} (${process.platform}; ${process.arch})`;
   const baseHeaders = {
     "User-Agent": userAgent2
@@ -242869,10 +242869,10 @@ var init_esm20 = __esm({
       }
       async _formatEntry(dirent, path140) {
         let entry;
-        const basename29 = this._isDirent ? dirent.name : dirent;
+        const basename32 = this._isDirent ? dirent.name : dirent;
         try {
-          const fullPath = presolve(pjoin(path140, basename29));
-          entry = { path: prelative(this._root, fullPath), fullPath, basename: basename29 };
+          const fullPath = presolve(pjoin(path140, basename32));
+          entry = { path: prelative(this._root, fullPath), fullPath, basename: basename32 };
           entry[this._statsProp] = this._isDirent ? dirent : await this._stat(fullPath);
         } catch (err2) {
           this._onError(err2);
@@ -243406,9 +243406,9 @@ var init_handler = __esm({
       _watchWithNodeFs(path140, listener) {
         const opts = this.fsw.options;
         const directory = sysPath.dirname(path140);
-        const basename29 = sysPath.basename(path140);
+        const basename32 = sysPath.basename(path140);
         const parent = this.fsw._getWatchedDir(directory);
-        parent.add(basename29);
+        parent.add(basename32);
         const absolutePath = sysPath.resolve(path140);
         const options2 = {
           persistent: opts.persistent
@@ -243418,7 +243418,7 @@ var init_handler = __esm({
         let closer;
         if (opts.usePolling) {
           const enableBin = opts.interval !== opts.binaryInterval;
-          options2.interval = enableBin && isBinaryPath(basename29) ? opts.binaryInterval : opts.interval;
+          options2.interval = enableBin && isBinaryPath(basename32) ? opts.binaryInterval : opts.interval;
           closer = setFsWatchFileListener(path140, absolutePath, options2, {
             listener,
             rawEmitter: this.fsw._emitRaw
@@ -243441,10 +243441,10 @@ var init_handler = __esm({
           return;
         }
         const dirname33 = sysPath.dirname(file2);
-        const basename29 = sysPath.basename(file2);
+        const basename32 = sysPath.basename(file2);
         const parent = this.fsw._getWatchedDir(dirname33);
         let prevStats = stats;
-        if (parent.has(basename29))
+        if (parent.has(basename32))
           return;
         const listener = /* @__PURE__ */ __name(async (path140, newStats) => {
           if (!this.fsw._throttle(THROTTLE_MODE_WATCH, file2, 5))
@@ -243469,9 +243469,9 @@ var init_handler = __esm({
                 prevStats = newStats2;
               }
             } catch (error40) {
-              this.fsw._remove(dirname33, basename29);
+              this.fsw._remove(dirname33, basename32);
             }
-          } else if (parent.has(basename29)) {
+          } else if (parent.has(basename32)) {
             const at2 = newStats.atimeMs;
             const mt2 = newStats.mtimeMs;
             if (!at2 || at2 <= mt2 || mt2 !== prevStats.mtimeMs) {
@@ -258348,7 +258348,7 @@ var require_main = __commonJS({
     var fs126 = __require("fs");
     var path140 = __require("path");
     var os55 = __require("os");
-    var crypto17 = __require("crypto");
+    var crypto18 = __require("crypto");
     var packageJson4 = require_package5();
     var version2 = packageJson4.version;
     var TIPS = [
@@ -258603,7 +258603,7 @@ var require_main = __commonJS({
       const authTag = ciphertext.subarray(-16);
       ciphertext = ciphertext.subarray(12, -16);
       try {
-        const aesgcm = crypto17.createDecipheriv("aes-256-gcm", key, nonce);
+        const aesgcm = crypto18.createDecipheriv("aes-256-gcm", key, nonce);
         aesgcm.setAuthTag(authTag);
         return `${aesgcm.update(ciphertext)}${aesgcm.final()}`;
       } catch (error40) {
@@ -341800,8 +341800,8 @@ var require_command_exists = __commonJS({
         var isPathName = /[\\]/.test(s5);
         if (isPathName) {
           var dirname33 = '"' + path140.dirname(s5) + '"';
-          var basename29 = '"' + path140.basename(s5) + '"';
-          return dirname33 + ":" + basename29;
+          var basename32 = '"' + path140.basename(s5) + '"';
+          return dirname33 + ":" + basename32;
         }
         return '"' + s5 + '"';
       }, "cleanInput");
@@ -350597,7 +350597,7 @@ var require_client3 = __commonJS({
       return mod2 && mod2.__esModule ? mod2 : { "default": mod2 };
     };
     Object.defineProperty(exports2, "__esModule", { value: true });
-    var crypto17 = __importStar(__require("crypto"));
+    var crypto18 = __importStar(__require("crypto"));
     var fs126 = __importStar(__require("fs"));
     var promises_1 = __require("fs/promises");
     var https8 = __importStar(__require("https"));
@@ -350676,7 +350676,7 @@ var require_client3 = __commonJS({
           payload[field] = JSON.stringify(payload[field]);
         }
       }
-      const boundary = crypto17.randomBytes(32).toString("hex");
+      const boundary = crypto18.randomBytes(32).toString("hex");
       const formData = new multipart_stream_1.default(boundary);
       await Promise.all(Object.keys(payload).map((key) => (
         // @ts-expect-error payload[key] can obviously index payload, but TS doesn't trust us
@@ -350705,7 +350705,7 @@ var require_client3 = __commonJS({
         return;
       }
       if (id === "thumb" || id === "thumbnail") {
-        const attachmentId = crypto17.randomBytes(16).toString("hex");
+        const attachmentId = crypto18.randomBytes(16).toString("hex");
         await attachFormMedia(form, value, attachmentId, agent);
         return form.addPart({
           headers: { "content-disposition": `form-data; name="${id}"` },
@@ -350718,11 +350718,11 @@ var require_client3 = __commonJS({
           if (typeof item.media !== "object") {
             return await Promise.resolve(item);
           }
-          const attachmentId = crypto17.randomBytes(16).toString("hex");
+          const attachmentId = crypto18.randomBytes(16).toString("hex");
           await attachFormMedia(form, item.media, attachmentId, agent);
           const thumb = (_a7 = item.thumb) !== null && _a7 !== void 0 ? _a7 : item.thumbnail;
           if (typeof thumb === "object") {
-            const thumbAttachmentId = crypto17.randomBytes(16).toString("hex");
+            const thumbAttachmentId = crypto18.randomBytes(16).toString("hex");
             await attachFormMedia(form, thumb, thumbAttachmentId, agent);
             return {
               ...item,
@@ -350738,7 +350738,7 @@ var require_client3 = __commonJS({
         });
       }
       if (value && typeof value === "object" && (0, check_1.hasProp)(value, "media") && (0, check_1.hasProp)(value, "type") && typeof value.media !== "undefined" && typeof value.type !== "undefined") {
-        const attachmentId = crypto17.randomBytes(16).toString("hex");
+        const attachmentId = crypto18.randomBytes(16).toString("hex");
         await attachFormMedia(form, value.media, attachmentId, agent);
         return form.addPart({
           headers: { "content-disposition": `form-data; name="${id}"` },
@@ -352405,7 +352405,7 @@ var require_safe_compare = __commonJS({
   "node_modules/safe-compare/index.js"(exports2, module2) {
     "use strict";
     init_esbuild_shims();
-    var crypto17 = __require("crypto");
+    var crypto18 = __require("crypto");
     var bufferAlloc = require_buffer_alloc();
     var safeCompare = /* @__PURE__ */ __name(function safeCompare2(a2, b2) {
       var strA = String(a2);
@@ -352430,9 +352430,9 @@ var require_safe_compare = __commonJS({
       bufA.write(strA);
       var bufB = bufferAlloc(aLen, 0, "utf8");
       bufB.write(strB);
-      return crypto17.timingSafeEqual(bufA, bufB) && aLen === bLen;
+      return crypto18.timingSafeEqual(bufA, bufB) && aLen === bLen;
     }, "nativeTimingSafeEqual");
-    module2.exports = typeof crypto17.timingSafeEqual !== "undefined" ? nativeTimingSafeEqual : safeCompare;
+    module2.exports = typeof crypto18.timingSafeEqual !== "undefined" ? nativeTimingSafeEqual : safeCompare;
   }
 });
 
@@ -352473,7 +352473,7 @@ var require_telegraf = __commonJS({
     };
     Object.defineProperty(exports2, "__esModule", { value: true });
     exports2.Telegraf = void 0;
-    var crypto17 = __importStar(__require("crypto"));
+    var crypto18 = __importStar(__require("crypto"));
     var http8 = __importStar(__require("http"));
     var https8 = __importStar(__require("https"));
     var composer_1 = require_composer();
@@ -352601,7 +352601,7 @@ var require_telegraf = __commonJS({
         return this;
       }
       secretPathComponent() {
-        return crypto17.createHash("sha3-256").update(this.token).update(process.version).digest("hex");
+        return crypto18.createHash("sha3-256").update(this.token).update(process.version).digest("hex");
       }
       /**
        * @see https://github.com/telegraf/telegraf/discussions/1344#discussioncomment-335700
@@ -364358,7 +364358,7 @@ var require_form_data = __commonJS({
     var parseUrl = __require("url").parse;
     var fs126 = __require("fs");
     var Stream9 = __require("stream").Stream;
-    var crypto17 = __require("crypto");
+    var crypto18 = __require("crypto");
     var mime = require_mime_types();
     var asynckit = require_asynckit();
     var setToStringTag = require_es_set_tostringtag();
@@ -364565,7 +364565,7 @@ var require_form_data = __commonJS({
       return Buffer.concat([dataBuffer, Buffer.from(this._lastBoundary())]);
     };
     FormData7.prototype._generateBoundary = function() {
-      this._boundary = "--------------------------" + crypto17.randomBytes(12).toString("hex");
+      this._boundary = "--------------------------" + crypto18.randomBytes(12).toString("hex");
     };
     FormData7.prototype.getLengthSync = function() {
       var knownLength = this._overheadLength + this._valueLength;
@@ -369177,11 +369177,11 @@ var require_util24 = __commonJS({
     var { isUint8Array } = __require("node:util/types");
     var { webidl } = require_webidl2();
     var supportedHashes = [];
-    var crypto17;
+    var crypto18;
     try {
-      crypto17 = __require("node:crypto");
+      crypto18 = __require("node:crypto");
       const possibleRelevantHashes = ["sha256", "sha384", "sha512"];
-      supportedHashes = crypto17.getHashes().filter((hash) => possibleRelevantHashes.includes(hash));
+      supportedHashes = crypto18.getHashes().filter((hash) => possibleRelevantHashes.includes(hash));
     } catch {
     }
     function responseURL(response) {
@@ -369479,7 +369479,7 @@ var require_util24 = __commonJS({
     }
     __name(isURLPotentiallyTrustworthy, "isURLPotentiallyTrustworthy");
     function bytesMatch(bytes, metadataList) {
-      if (crypto17 === void 0) {
+      if (crypto18 === void 0) {
         return true;
       }
       const parsedMetadata = parseMetadata(metadataList);
@@ -369494,7 +369494,7 @@ var require_util24 = __commonJS({
       for (const item of metadata2) {
         const algorithm = item.algo;
         const expectedValue = item.hash;
-        let actualValue = crypto17.createHash(algorithm).update(bytes).digest("base64");
+        let actualValue = crypto18.createHash(algorithm).update(bytes).digest("base64");
         if (actualValue[actualValue.length - 1] === "=") {
           if (actualValue[actualValue.length - 2] === "=") {
             actualValue = actualValue.slice(0, -2);
@@ -370620,8 +370620,8 @@ var require_body2 = __commonJS({
     var { multipartFormDataParser } = require_formdata_parser2();
     var random2;
     try {
-      const crypto17 = __require("node:crypto");
-      random2 = /* @__PURE__ */ __name((max) => crypto17.randomInt(0, max), "random");
+      const crypto18 = __require("node:crypto");
+      random2 = /* @__PURE__ */ __name((max) => crypto18.randomInt(0, max), "random");
     } catch {
       random2 = /* @__PURE__ */ __name((max) => Math.floor(Math.random(max)), "random");
     }
@@ -382412,13 +382412,13 @@ var require_frame2 = __commonJS({
     init_esbuild_shims();
     var { maxUnsigned16Bit } = require_constants18();
     var BUFFER_SIZE = 16386;
-    var crypto17;
+    var crypto18;
     var buffer = null;
     var bufIdx = BUFFER_SIZE;
     try {
-      crypto17 = __require("node:crypto");
+      crypto18 = __require("node:crypto");
     } catch {
-      crypto17 = {
+      crypto18 = {
         // not full compatibility, but minimum.
         randomFillSync: /* @__PURE__ */ __name(function randomFillSync(buffer2, _offset, _size3) {
           for (let i4 = 0; i4 < buffer2.length; ++i4) {
@@ -382431,7 +382431,7 @@ var require_frame2 = __commonJS({
     function generateMask() {
       if (bufIdx === BUFFER_SIZE) {
         bufIdx = 0;
-        crypto17.randomFillSync(buffer ??= Buffer.allocUnsafe(BUFFER_SIZE), 0, BUFFER_SIZE);
+        crypto18.randomFillSync(buffer ??= Buffer.allocUnsafe(BUFFER_SIZE), 0, BUFFER_SIZE);
       }
       return [buffer[bufIdx++], buffer[bufIdx++], buffer[bufIdx++], buffer[bufIdx++]];
     }
@@ -382508,9 +382508,9 @@ var require_connection2 = __commonJS({
     var { Headers: Headers6, getHeadersList } = require_headers2();
     var { getDecodeSplit } = require_util24();
     var { WebsocketFrameSend } = require_frame2();
-    var crypto17;
+    var crypto18;
     try {
-      crypto17 = __require("node:crypto");
+      crypto18 = __require("node:crypto");
     } catch {
     }
     function establishWebSocketConnection(url3, protocols, client, ws2, onEstablish, options2) {
@@ -382530,7 +382530,7 @@ var require_connection2 = __commonJS({
         const headersList = getHeadersList(new Headers6(options2.headers));
         request4.headersList = headersList;
       }
-      const keyValue = crypto17.randomBytes(16).toString("base64");
+      const keyValue = crypto18.randomBytes(16).toString("base64");
       request4.headersList.append("sec-websocket-key", keyValue);
       request4.headersList.append("sec-websocket-version", "13");
       for (const protocol of protocols) {
@@ -382560,7 +382560,7 @@ var require_connection2 = __commonJS({
             return;
           }
           const secWSAccept = response.headersList.get("Sec-WebSocket-Accept");
-          const digest = crypto17.createHash("sha1").update(keyValue + uid).digest("base64");
+          const digest = crypto18.createHash("sha1").update(keyValue + uid).digest("base64");
           if (secWSAccept !== digest) {
             failWebsocketConnection(ws2, "Incorrect hash received in Sec-WebSocket-Accept header.");
             return;
@@ -392713,7 +392713,7 @@ var require_gaxios2 = __commonJS({
     var retry_js_1 = require_retry4();
     var stream_1 = __require("stream");
     var interceptor_js_1 = require_interceptor2();
-    var randomUUID12 = /* @__PURE__ */ __name(async () => globalThis.crypto?.randomUUID() || (await import("crypto")).randomUUID(), "randomUUID");
+    var randomUUID15 = /* @__PURE__ */ __name(async () => globalThis.crypto?.randomUUID() || (await import("crypto")).randomUUID(), "randomUUID");
     var HTTP_STATUS_NO_CONTENT = 204;
     var Gaxios = class {
       static {
@@ -392989,7 +392989,7 @@ var require_gaxios2 = __commonJS({
          */
         ["Blob", "File", "FormData"].includes(opts.data?.constructor?.name || "");
         if (opts.multipart?.length) {
-          const boundary = await randomUUID12();
+          const boundary = await randomUUID15();
           preparedHeaders.set("content-type", `multipart/related; boundary=${boundary}`);
           opts.body = stream_1.Readable.from(this.getMultipartRequest(opts.multipart, boundary));
         } else if (shouldDirectlyPassData) {
@@ -394072,25 +394072,25 @@ var require_crypto5 = __commonJS({
     init_esbuild_shims();
     Object.defineProperty(exports2, "__esModule", { value: true });
     exports2.NodeCrypto = void 0;
-    var crypto17 = __require("crypto");
+    var crypto18 = __require("crypto");
     var NodeCrypto = class {
       static {
         __name(this, "NodeCrypto");
       }
       async sha256DigestBase64(str2) {
-        return crypto17.createHash("sha256").update(str2).digest("base64");
+        return crypto18.createHash("sha256").update(str2).digest("base64");
       }
       randomBytesBase64(count) {
-        return crypto17.randomBytes(count).toString("base64");
+        return crypto18.randomBytes(count).toString("base64");
       }
       async verify(pubkey, data, signature) {
-        const verifier = crypto17.createVerify("RSA-SHA256");
+        const verifier = crypto18.createVerify("RSA-SHA256");
         verifier.update(data);
         verifier.end();
         return verifier.verify(pubkey, signature, "base64");
       }
       async sign(privateKey, data) {
-        const signer = crypto17.createSign("RSA-SHA256");
+        const signer = crypto18.createSign("RSA-SHA256");
         signer.update(data);
         signer.end();
         return signer.sign(privateKey, "base64");
@@ -394108,7 +394108,7 @@ var require_crypto5 = __commonJS({
        *   string in hexadecimal encoding.
        */
       async sha256DigestHex(str2) {
-        return crypto17.createHash("sha256").update(str2).digest("hex");
+        return crypto18.createHash("sha256").update(str2).digest("hex");
       }
       /**
        * Computes the HMAC hash of a message using the provided crypto key and the
@@ -394120,7 +394120,7 @@ var require_crypto5 = __commonJS({
        */
       async signWithHmacSha256(key, msg) {
         const cryptoKey = typeof key === "string" ? key : toBuffer(key);
-        return toArrayBuffer(crypto17.createHmac("sha256", cryptoKey).update(msg).digest());
+        return toArrayBuffer(crypto18.createHmac("sha256", cryptoKey).update(msg).digest());
       }
     };
     exports2.NodeCrypto = NodeCrypto;
@@ -394833,10 +394833,10 @@ var require_oauth2client2 = __commonJS({
        * https://github.com/googleapis/google-auth-library-nodejs/blob/main/samples/oauth2-codeVerifier.js
        */
       async generateCodeVerifierAsync() {
-        const crypto17 = (0, crypto_1.createCrypto)();
-        const randomString2 = crypto17.randomBytesBase64(96);
+        const crypto18 = (0, crypto_1.createCrypto)();
+        const randomString2 = crypto18.randomBytesBase64(96);
         const codeVerifier = randomString2.replace(/\+/g, "~").replace(/=/g, "_").replace(/\//g, "-");
-        const unencodedCodeChallenge = await crypto17.sha256DigestBase64(codeVerifier);
+        const unencodedCodeChallenge = await crypto18.sha256DigestBase64(codeVerifier);
         const codeChallenge = unencodedCodeChallenge.split("=")[0].replace(/\+/g, "-").replace(/\//g, "_");
         return { codeVerifier, codeChallenge };
       }
@@ -395277,7 +395277,7 @@ var require_oauth2client2 = __commonJS({
        * @return Returns a promise resolving to LoginTicket on verification.
        */
       async verifySignedJwtWithCertsAsync(jwt2, certs, requiredAudience, issuers, maxExpiry) {
-        const crypto17 = (0, crypto_1.createCrypto)();
+        const crypto18 = (0, crypto_1.createCrypto)();
         if (!maxExpiry) {
           maxExpiry = _OAuth2Client.DEFAULT_MAX_TOKEN_LIFETIME_SECS_;
         }
@@ -395290,7 +395290,7 @@ var require_oauth2client2 = __commonJS({
         let envelope;
         let payload;
         try {
-          envelope = JSON.parse(crypto17.decodeBase64StringUtf8(segments[0]));
+          envelope = JSON.parse(crypto18.decodeBase64StringUtf8(segments[0]));
         } catch (err2) {
           if (err2 instanceof Error) {
             err2.message = `Can't parse token envelope: ${segments[0]}': ${err2.message}`;
@@ -395301,7 +395301,7 @@ var require_oauth2client2 = __commonJS({
           throw new Error("Can't parse token envelope: " + segments[0]);
         }
         try {
-          payload = JSON.parse(crypto17.decodeBase64StringUtf8(segments[1]));
+          payload = JSON.parse(crypto18.decodeBase64StringUtf8(segments[1]));
         } catch (err2) {
           if (err2 instanceof Error) {
             err2.message = `Can't parse token payload '${segments[0]}`;
@@ -395318,7 +395318,7 @@ var require_oauth2client2 = __commonJS({
         if (envelope.alg === "ES256") {
           signature = formatEcdsa.joseToDer(signature, "ES256").toString("base64");
         }
-        const verified = await crypto17.verify(cert, signed, signature);
+        const verified = await crypto18.verify(cert, signed, signature);
         if (!verified) {
           throw new Error("Invalid token signature: " + jwt2);
         }
@@ -398234,15 +398234,15 @@ var require_awsrequestsigner2 = __commonJS({
       }
     };
     exports2.AwsRequestSigner = AwsRequestSigner;
-    async function sign(crypto17, key, msg) {
-      return await crypto17.signWithHmacSha256(key, msg);
+    async function sign(crypto18, key, msg) {
+      return await crypto18.signWithHmacSha256(key, msg);
     }
     __name(sign, "sign");
-    async function getSigningKey(crypto17, key, dateStamp, region, serviceName) {
-      const kDate = await sign(crypto17, `AWS4${key}`, dateStamp);
-      const kRegion = await sign(crypto17, kDate, region);
-      const kService = await sign(crypto17, kRegion, serviceName);
-      const kSigning = await sign(crypto17, kService, "aws4_request");
+    async function getSigningKey(crypto18, key, dateStamp, region, serviceName) {
+      const kDate = await sign(crypto18, `AWS4${key}`, dateStamp);
+      const kRegion = await sign(crypto18, kDate, region);
+      const kService = await sign(crypto18, kRegion, serviceName);
+      const kSigning = await sign(crypto18, kService, "aws4_request");
       return kSigning;
     }
     __name(getSigningKey, "getSigningKey");
@@ -400020,24 +400020,24 @@ var require_googleauth2 = __commonJS({
           const signed = await client.sign(data);
           return signed.signedBlob;
         }
-        const crypto17 = (0, crypto_1.createCrypto)();
+        const crypto18 = (0, crypto_1.createCrypto)();
         if (client instanceof jwtclient_1.JWT && client.key) {
-          const sign = await crypto17.sign(client.key, data);
+          const sign = await crypto18.sign(client.key, data);
           return sign;
         }
         const creds = await this.getCredentials();
         if (!creds.client_email) {
           throw new Error("Cannot sign data without `client_email`.");
         }
-        return this.signBlob(crypto17, creds.client_email, data, endpoint);
+        return this.signBlob(crypto18, creds.client_email, data, endpoint);
       }
-      async signBlob(crypto17, emailOrUniqueId, data, endpoint) {
+      async signBlob(crypto18, emailOrUniqueId, data, endpoint) {
         const url3 = new URL(endpoint + `${emailOrUniqueId}:signBlob`);
         const res = await this.request({
           method: "POST",
           url: url3.href,
           data: {
-            payload: crypto17.encodeBase64StringUtf8(data)
+            payload: crypto18.encodeBase64StringUtf8(data)
           },
           retry: true,
           retryConfig: {
@@ -412613,7 +412613,7 @@ var measure_element_default = measureElement;
 var import_react166 = __toESM(require_react(), 1);
 import dns2 from "node:dns";
 import os54 from "node:os";
-import { basename as basename28 } from "node:path";
+import { basename as basename31 } from "node:path";
 import v8 from "node:v8";
 
 // packages/cli/src/config/auth.ts
@@ -424275,7 +424275,7 @@ __name(getPackageJson, "getPackageJson");
 // packages/cli/src/utils/version.ts
 async function getCliVersion() {
   const pkgJson = await getPackageJson();
-  return "0.14.0-preview.2";
+  return "0.14.0-preview.3";
 }
 __name(getCliVersion, "getCliVersion");
 
@@ -430357,6 +430357,7 @@ var SenderGate = class {
 
 // packages/channels/base/dist/PairingStore.js
 init_esbuild_shims();
+import * as crypto14 from "node:crypto";
 import * as fs93 from "node:fs";
 import * as path99 from "node:path";
 import * as os33 from "node:os";
@@ -430462,7 +430463,7 @@ var PairingStore = class {
 function generateCode() {
   let code2 = "";
   for (let i4 = 0; i4 < CODE_LENGTH; i4++) {
-    code2 += SAFE_ALPHABET[Math.floor(Math.random() * SAFE_ALPHABET.length)];
+    code2 += SAFE_ALPHABET[crypto14.randomInt(SAFE_ALPHABET.length)];
   }
   return code2;
 }
@@ -430483,20 +430484,26 @@ var SessionRouter = class {
   // session ID → cwd
   bridge;
   defaultCwd;
-  scope;
+  defaultScope;
+  channelScopes = /* @__PURE__ */ new Map();
   persistPath;
   constructor(bridge, defaultCwd, scope = "user", persistPath) {
     this.bridge = bridge;
     this.defaultCwd = defaultCwd;
-    this.scope = scope;
+    this.defaultScope = scope;
     this.persistPath = persistPath;
   }
   /** Replace the bridge instance (used after crash recovery restart). */
   setBridge(bridge) {
     this.bridge = bridge;
   }
+  /** Set scope override for a specific channel. */
+  setChannelScope(channelName, scope) {
+    this.channelScopes.set(channelName, scope);
+  }
   routingKey(channelName, senderId, chatId, threadId) {
-    switch (this.scope) {
+    const scope = this.channelScopes.get(channelName) || this.defaultScope;
+    switch (scope) {
       case "thread":
         return `${channelName}:${threadId || chatId}`;
       case "single":
@@ -430533,31 +430540,38 @@ var SessionRouter = class {
     }
     return false;
   }
+  /**
+   * Remove session(s) for the given sender. Returns the removed session IDs.
+   */
   removeSession(channelName, senderId, chatId) {
+    const removedIds = [];
     if (chatId) {
       const key = this.routingKey(channelName, senderId, chatId);
-      return this.deleteByKey(key);
-    }
-    let removed = false;
-    const prefix = `${channelName}:${senderId}`;
-    for (const k2 of [...this.toSession.keys()]) {
-      if (k2.startsWith(prefix)) {
-        this.deleteByKey(k2);
-        removed = true;
+      const sessionId = this.deleteByKey(key);
+      if (sessionId)
+        removedIds.push(sessionId);
+    } else {
+      const prefix = `${channelName}:${senderId}`;
+      for (const k2 of [...this.toSession.keys()]) {
+        if (k2.startsWith(prefix)) {
+          const sessionId = this.deleteByKey(k2);
+          if (sessionId)
+            removedIds.push(sessionId);
+        }
       }
     }
-    if (removed)
+    if (removedIds.length > 0)
       this.persist();
-    return removed;
+    return removedIds;
   }
   deleteByKey(key) {
     const sessionId = this.toSession.get(key);
     if (!sessionId)
-      return false;
+      return null;
     this.toSession.delete(key);
     this.toTarget.delete(sessionId);
     this.toCwd.delete(sessionId);
-    return true;
+    return sessionId;
   }
   /** Get all session entries for crash recovery. */
   getAll() {
@@ -430718,9 +430732,11 @@ var ChannelBase = class {
   /** Register shared slash commands. Called from constructor. */
   registerSharedCommands() {
     const clearHandler = /* @__PURE__ */ __name(async (envelope) => {
-      const removed = this.router.removeSession(this.name, envelope.senderId, envelope.chatId);
-      if (removed) {
-        this.instructedSessions.clear();
+      const removedIds = this.router.removeSession(this.name, envelope.senderId, envelope.chatId);
+      if (removedIds.length > 0) {
+        for (const id of removedIds) {
+          this.instructedSessions.delete(id);
+        }
         await this.sendMessage(envelope.chatId, "Session cleared. Your next message will start a fresh conversation.");
       } else {
         await this.sendMessage(envelope.chatId, "No active session to clear.");
@@ -430954,8 +430970,9 @@ init_esbuild_shims();
 // packages/channels/telegram/dist/TelegramAdapter.js
 init_esbuild_shims();
 var import_telegraf = __toESM(require_lib9(), 1);
-import { existsSync as existsSync28, mkdirSync as mkdirSync13, writeFileSync as writeFileSync14 } from "node:fs";
-import { join as join44 } from "node:path";
+import { mkdirSync as mkdirSync13, writeFileSync as writeFileSync14 } from "node:fs";
+import { randomUUID as randomUUID7 } from "node:crypto";
+import { basename as basename21, join as join44 } from "node:path";
 import { tmpdir as tmpdir5 } from "node:os";
 
 // node_modules/telegram-markdown-formatter/dist/index.js
@@ -431267,7 +431284,6 @@ function splitHtmlForTelegram(text) {
 __name(splitHtmlForTelegram, "splitHtmlForTelegram");
 
 // packages/channels/telegram/dist/TelegramAdapter.js
-var TELEGRAF_COMMANDS = /* @__PURE__ */ new Set();
 var TelegramChannel = class extends ChannelBase {
   static {
     __name(this, "TelegramChannel");
@@ -431286,12 +431302,6 @@ var TelegramChannel = class extends ChannelBase {
     this.bot.on("text", async (ctx) => {
       const msg = ctx.message;
       const text = msg.text;
-      if (text.startsWith("/")) {
-        const command2 = text.slice(1).split(/[\s@]/)[0]?.toLowerCase();
-        if (command2 && TELEGRAF_COMMANDS.has(command2)) {
-          return;
-        }
-      }
       const envelope = this.buildEnvelope(msg, text, msg.entities);
       this.handleInbound(envelope).catch((err2) => {
         process.stderr.write(`[Telegram:${this.name}] Error handling message: ${err2}
@@ -431336,10 +431346,9 @@ var TelegramChannel = class extends ChannelBase {
         if (!resp.ok)
           throw new Error(`HTTP ${resp.status}`);
         const buf = Buffer.from(await resp.arrayBuffer());
-        const dir = join44(tmpdir5(), "channel-files");
-        if (!existsSync28(dir))
-          mkdirSync13(dir, { recursive: true });
-        const filePath = join44(dir, fileName);
+        const dir = join44(tmpdir5(), "channel-files", randomUUID7());
+        mkdirSync13(dir, { recursive: true });
+        const filePath = join44(dir, basename21(fileName) || `file_${Date.now()}`);
         writeFileSync14(filePath, buf);
         envelope.text = msg.caption || "";
         envelope.attachments = [
@@ -431442,19 +431451,20 @@ init_esbuild_shims();
 
 // packages/channels/weixin/dist/WeixinAdapter.js
 init_esbuild_shims();
-import { existsSync as existsSync31, mkdirSync as mkdirSync15, writeFileSync as writeFileSync17 } from "node:fs";
-import { join as join47 } from "node:path";
+import { mkdirSync as mkdirSync15, writeFileSync as writeFileSync17 } from "node:fs";
+import { randomUUID as randomUUID9 } from "node:crypto";
+import { basename as basename22, join as join47 } from "node:path";
 import { tmpdir as tmpdir6 } from "node:os";
 
 // packages/channels/weixin/dist/accounts.js
 init_esbuild_shims();
-import { existsSync as existsSync29, mkdirSync as mkdirSync14, readFileSync as readFileSync23, writeFileSync as writeFileSync15, unlinkSync as unlinkSync5, chmodSync } from "node:fs";
+import { existsSync as existsSync28, mkdirSync as mkdirSync14, readFileSync as readFileSync23, writeFileSync as writeFileSync15, unlinkSync as unlinkSync5, chmodSync } from "node:fs";
 import { join as join45 } from "node:path";
 import { homedir as homedir20 } from "node:os";
 var DEFAULT_BASE_URL = "https://ilinkai.weixin.qq.com";
 function getStateDir() {
   const dir = process.env["WEIXIN_STATE_DIR"] || join45(homedir20(), ".qwen", "channels", "weixin");
-  if (!existsSync29(dir)) {
+  if (!existsSync28(dir)) {
     mkdirSync14(dir, { recursive: true });
   }
   return dir;
@@ -431466,7 +431476,7 @@ function accountPath() {
 __name(accountPath, "accountPath");
 function loadAccount() {
   const p2 = accountPath();
-  if (!existsSync29(p2))
+  if (!existsSync28(p2))
     return null;
   try {
     return JSON.parse(readFileSync23(p2, "utf-8"));
@@ -431483,7 +431493,7 @@ function saveAccount(data) {
 __name(saveAccount, "saveAccount");
 function clearAccount() {
   const p2 = accountPath();
-  if (existsSync29(p2)) {
+  if (existsSync28(p2)) {
     unlinkSync5(p2);
   }
 }
@@ -431600,7 +431610,7 @@ var TypingStatus = {
 };
 
 // packages/channels/weixin/dist/monitor.js
-import { existsSync as existsSync30, readFileSync as readFileSync24, writeFileSync as writeFileSync16 } from "node:fs";
+import { existsSync as existsSync29, readFileSync as readFileSync24, writeFileSync as writeFileSync16 } from "node:fs";
 import { join as join46 } from "node:path";
 var contextTokens = /* @__PURE__ */ new Map();
 function getContextToken(userId) {
@@ -431613,7 +431623,7 @@ function cursorPath() {
 __name(cursorPath, "cursorPath");
 function loadCursor() {
   const p2 = cursorPath();
-  if (existsSync30(p2))
+  if (existsSync29(p2))
     return readFileSync24(p2, "utf-8").trim();
   return "";
 }
@@ -431640,10 +431650,6 @@ async function startPollLoop(params) {
         throw new Error(`getUpdates error: ret=${resp.ret} errcode=${resp.errcode} ${resp.errmsg}`);
       }
       consecutiveErrors = 0;
-      if (resp.get_updates_buf) {
-        cursor = resp.get_updates_buf;
-        saveCursor(cursor);
-      }
       if (resp.longpolling_timeout_ms && resp.longpolling_timeout_ms > 0) {
         pollTimeoutMs = resp.longpolling_timeout_ms + 5e3;
       }
@@ -431652,6 +431658,10 @@ async function startPollLoop(params) {
           await processMessage(msg, onMessage);
         }
       }
+      if (resp.get_updates_buf) {
+        cursor = resp.get_updates_buf;
+        saveCursor(cursor);
+      }
     } catch (err2) {
       if (abortSignal.aborted)
         break;
@@ -431731,7 +431741,7 @@ __name(processMessage, "processMessage");
 
 // packages/channels/weixin/dist/send.js
 init_esbuild_shims();
-import { randomUUID as randomUUID7 } from "node:crypto";
+import { randomUUID as randomUUID8 } from "node:crypto";
 function markdownToPlainText(text) {
   return text.replace(/```[\s\S]*?\n([\s\S]*?)```/g, "$1").replace(/`([^`]+)`/g, "$1").replace(/\*\*\*(.+?)\*\*\*/g, "$1").replace(/\*\*(.+?)\*\*/g, "$1").replace(/\*(.+?)\*/g, "$1").replace(/___(.+?)___/g, "$1").replace(/__(.+?)__/g, "$1").replace(/_(.+?)_/g, "$1").replace(/~~(.+?)~~/g, "$1").replace(/^#{1,6}\s+/gm, "").replace(/\[([^\]]+)\]\(([^)]+)\)/g, "$1 ($2)").replace(/!\[([^\]]*)\]\([^)]+\)/g, "[$1]").replace(/^>\s+/gm, "").replace(/^[-*_]{3,}$/gm, "---").replace(/^[\s]*[-*+]\s+/gm, "- ").replace(/^[\s]*(\d+)\.\s+/gm, "$1. ").replace(/\n{3,}/g, "\n\n").trim();
 }
@@ -431742,7 +431752,7 @@ async function sendText(params) {
   await sendMessage(baseUrl, token2, {
     to_user_id: to,
     from_user_id: "",
-    client_id: randomUUID7(),
+    client_id: randomUUID8(),
     message_type: MessageType.BOT,
     message_state: MessageState.FINISH,
     context_token: contextToken,
@@ -431863,10 +431873,9 @@ var WeixinChannel = class extends ChannelBase {
     if (file2) {
       try {
         const fileData = await downloadAndDecrypt(file2.encryptQueryParam, file2.aesKey);
-        const dir = join47(tmpdir6(), "channel-files");
-        if (!existsSync31(dir))
-          mkdirSync15(dir, { recursive: true });
-        const filePath = join47(dir, file2.fileName);
+        const dir = join47(tmpdir6(), "channel-files", randomUUID9());
+        mkdirSync15(dir, { recursive: true });
+        const filePath = join47(dir, basename22(file2.fileName) || `file_${Date.now()}`);
         writeFileSync17(filePath, fileData);
         envelope.attachments = [
           {
@@ -431948,8 +431957,9 @@ init_esbuild_shims();
 
 // packages/channels/dingtalk/dist/DingtalkAdapter.js
 init_esbuild_shims();
-import { existsSync as existsSync32, mkdirSync as mkdirSync16, writeFileSync as writeFileSync18 } from "node:fs";
-import { join as join48 } from "node:path";
+import { mkdirSync as mkdirSync16, writeFileSync as writeFileSync18 } from "node:fs";
+import { randomUUID as randomUUID10 } from "node:crypto";
+import { basename as basename23, join as join48 } from "node:path";
 import { tmpdir as tmpdir7 } from "node:os";
 
 // node_modules/dingtalk-stream-sdk-nodejs/dist/index.mjs
@@ -432798,7 +432808,7 @@ init_esbuild_shims();
 
 // node_modules/axios/lib/platform/node/index.js
 init_esbuild_shims();
-import crypto14 from "crypto";
+import crypto15 from "crypto";
 
 // node_modules/axios/lib/platform/node/classes/URLSearchParams.js
 init_esbuild_shims();
@@ -432817,7 +432827,7 @@ var generateString = /* @__PURE__ */ __name((size = 16, alphabet2 = ALPHABET.ALP
   let str2 = "";
   const { length } = alphabet2;
   const randomValues = new Uint32Array(size);
-  crypto14.randomFillSync(randomValues);
+  crypto15.randomFillSync(randomValues);
   for (let i4 = 0; i4 < size; i4++) {
     str2 += alphabet2[randomValues[i4] % length];
   }
@@ -436654,10 +436664,9 @@ var DingtalkChannel = class extends ChannelBase {
         }
       ];
     } else {
-      const dir = join48(tmpdir7(), "channel-files");
-      if (!existsSync32(dir))
-        mkdirSync16(dir, { recursive: true });
-      const safeName = fileName || `dingtalk_${mediaType}_${Date.now()}`;
+      const dir = join48(tmpdir7(), "channel-files", randomUUID10());
+      mkdirSync16(dir, { recursive: true });
+      const safeName = basename23(fileName || "") || `dingtalk_${mediaType}_${Date.now()}`;
       const filePath = join48(dir, safeName);
       writeFileSync18(filePath, media.buffer);
       if (envelope.text === `(file: ${fileName || "file"})` || envelope.text === "(audio)" || envelope.text === "(video)") {
@@ -436699,7 +436708,7 @@ var DingtalkChannel = class extends ChannelBase {
       const content = this.extractContent(data);
       let cleanText = content.text;
       if (isMentioned) {
-        cleanText = cleanText.replace(/@\S+/g, "").trim();
+        cleanText = cleanText.replace(/@\S+/, "").trim();
       }
       const quoted = this.extractQuotedContext(data);
       const chatId = conversationId || sessionWebhook;
@@ -436836,7 +436845,7 @@ __name(parseChannelConfig, "parseChannelConfig");
 // packages/cli/src/commands/channel/pidfile.ts
 init_esbuild_shims();
 import {
-  existsSync as existsSync33,
+  existsSync as existsSync30,
   readFileSync as readFileSync25,
   writeFileSync as writeFileSync19,
   mkdirSync as mkdirSync17,
@@ -436859,7 +436868,7 @@ function isProcessAlive(pid) {
 __name(isProcessAlive, "isProcessAlive");
 function readServiceInfo() {
   const filePath = pidFilePath();
-  if (!existsSync33(filePath)) return null;
+  if (!existsSync30(filePath)) return null;
   let info2;
   try {
     info2 = JSON.parse(readFileSync25(filePath, "utf-8"));
@@ -436883,7 +436892,7 @@ __name(readServiceInfo, "readServiceInfo");
 function writeServiceInfo(channels) {
   const filePath = pidFilePath();
   const dir = path101.dirname(filePath);
-  if (!existsSync33(dir)) {
+  if (!existsSync30(dir)) {
     mkdirSync17(dir, { recursive: true });
   }
   const info2 = {
@@ -436896,7 +436905,7 @@ function writeServiceInfo(channels) {
 __name(writeServiceInfo, "writeServiceInfo");
 function removeServiceInfo() {
   const filePath = pidFilePath();
-  if (existsSync33(filePath)) {
+  if (existsSync30(filePath)) {
     try {
       unlinkSync6(filePath);
     } catch {
@@ -436925,6 +436934,7 @@ __name(waitForExit, "waitForExit");
 
 // packages/cli/src/commands/channel/start.ts
 var MAX_CRASH_RESTARTS = 3;
+var CRASH_WINDOW_MS = 5 * 60 * 1e3;
 var RESTART_DELAY_MS = 3e3;
 function sessionsPath() {
   return path102.join(os35.homedir(), ".qwen", "channels", "sessions.json");
@@ -437040,11 +437050,16 @@ async function startSingle(name4) {
   }
   const cliEntryPath = findCliEntryPath();
   let shuttingDown = false;
-  let crashCount = 0;
+  const crashTimestamps = [];
   const bridgeOpts = { cliEntryPath, cwd: config2.cwd, model: config2.model };
   let bridge = new AcpBridge(bridgeOpts);
   await bridge.start();
-  const router = new SessionRouter(bridge, config2.cwd, "user", sessionsPath());
+  const router = new SessionRouter(
+    bridge,
+    config2.cwd,
+    config2.sessionScope,
+    sessionsPath()
+  );
   const channels = /* @__PURE__ */ new Map();
   const channel = createChannel(name4, config2, bridge, { router });
   channels.set(name4, channel);
@@ -437054,17 +437069,22 @@ async function startSingle(name4) {
   writeStdoutLine(`[Channel] "${name4}" is running. Press Ctrl+C to stop.`);
   bridge.on("disconnected", async () => {
     if (shuttingDown) return;
-    crashCount++;
-    if (crashCount > MAX_CRASH_RESTARTS) {
+    const now = Date.now();
+    crashTimestamps.push(now);
+    const recentCrashes = crashTimestamps.filter(
+      (ts) => now - ts < CRASH_WINDOW_MS
+    );
+    if (recentCrashes.length > MAX_CRASH_RESTARTS) {
       writeStderrLine(
-        `[Channel] Bridge crashed ${crashCount} times. Giving up.`
+        `[Channel] Bridge crashed ${recentCrashes.length} times in ${CRASH_WINDOW_MS / 1e3}s. Giving up.`
       );
+      channel.disconnect();
       router.clearAll();
       removeServiceInfo();
       process.exit(1);
     }
     writeStderrLine(
-      `[Channel] Bridge crashed (${crashCount}/${MAX_CRASH_RESTARTS}). Restarting in ${RESTART_DELAY_MS / 1e3}s...`
+      `[Channel] Bridge crashed (${recentCrashes.length}/${MAX_CRASH_RESTARTS} in window). Restarting in ${RESTART_DELAY_MS / 1e3}s...`
     );
     await new Promise((r5) => setTimeout(r5, RESTART_DELAY_MS));
     try {
@@ -437077,7 +437097,6 @@ async function startSingle(name4) {
       writeStdoutLine(
         `[Channel] Bridge restarted. Sessions restored: ${result.restored}, failed: ${result.failed}`
       );
-      crashCount = 0;
     } catch (err2) {
       writeStderrLine(
         `[Channel] Failed to restart bridge: ${err2 instanceof Error ? err2.message : String(err2)}`
@@ -437126,7 +437145,7 @@ async function startAll() {
   const cliEntryPath = findCliEntryPath();
   const defaultCwd = process.cwd();
   let shuttingDown = false;
-  let crashCount = 0;
+  const crashTimestamps = [];
   const models = [
     ...new Set(parsed.map((p2) => p2.config.model).filter(Boolean))
   ];
@@ -437143,6 +437162,9 @@ async function startAll() {
   let bridge = new AcpBridge(bridgeOpts);
   await bridge.start();
   const router = new SessionRouter(bridge, defaultCwd, "user", sessionsPath());
+  for (const { name: name4, config: config2 } of parsed) {
+    router.setChannelScope(name4, config2.sessionScope);
+  }
   const channels = /* @__PURE__ */ new Map();
   writeStdoutLine(
     `[Channel] Starting ${parsed.length} channel(s): ${parsed.map((p2) => p2.name).join(", ")}`
@@ -437174,17 +437196,27 @@ async function startAll() {
   );
   bridge.on("disconnected", async () => {
     if (shuttingDown) return;
-    crashCount++;
-    if (crashCount > MAX_CRASH_RESTARTS) {
+    const now = Date.now();
+    crashTimestamps.push(now);
+    const recentCrashes = crashTimestamps.filter(
+      (ts) => now - ts < CRASH_WINDOW_MS
+    );
+    if (recentCrashes.length > MAX_CRASH_RESTARTS) {
       writeStderrLine(
-        `[Channel] Bridge crashed ${crashCount} times. Giving up.`
+        `[Channel] Bridge crashed ${recentCrashes.length} times in ${CRASH_WINDOW_MS / 1e3}s. Giving up.`
       );
+      for (const channel of channels.values()) {
+        try {
+          channel.disconnect();
+        } catch {
+        }
+      }
       router.clearAll();
       removeServiceInfo();
       process.exit(1);
     }
     writeStderrLine(
-      `[Channel] Bridge crashed (${crashCount}/${MAX_CRASH_RESTARTS}). Restarting in ${RESTART_DELAY_MS / 1e3}s...`
+      `[Channel] Bridge crashed (${recentCrashes.length}/${MAX_CRASH_RESTARTS} in window). Restarting in ${RESTART_DELAY_MS / 1e3}s...`
     );
     await new Promise((r5) => setTimeout(r5, RESTART_DELAY_MS));
     try {
@@ -437199,7 +437231,6 @@ async function startAll() {
       writeStdoutLine(
         `[Channel] Bridge restarted. Sessions restored: ${result.restored}, failed: ${result.failed}`
       );
-      crashCount = 0;
     } catch (err2) {
       writeStderrLine(
         `[Channel] Failed to restart bridge: ${err2 instanceof Error ? err2.message : String(err2)}`
@@ -437281,7 +437312,7 @@ var stopCommand = {
 
 // packages/cli/src/commands/channel/status.ts
 init_esbuild_shims();
-import { existsSync as existsSync34, readFileSync as readFileSync26 } from "node:fs";
+import { existsSync as existsSync31, readFileSync as readFileSync26 } from "node:fs";
 import * as path103 from "node:path";
 import * as os36 from "node:os";
 function formatUptime(startedAt) {
@@ -437315,7 +437346,7 @@ var statusCommand2 = {
       "sessions.json"
     );
     const sessionCounts = /* @__PURE__ */ new Map();
-    if (existsSync34(sessionsPath2)) {
+    if (existsSync31(sessionsPath2)) {
       try {
         const entries = JSON.parse(
           readFileSync26(sessionsPath2, "utf-8")
@@ -440981,7 +441012,7 @@ init_esbuild_shims();
 // packages/cli/src/nonInteractive/io/BaseJsonOutputAdapter.ts
 init_esbuild_shims();
 init_dist4();
-import { randomUUID as randomUUID9 } from "node:crypto";
+import { randomUUID as randomUUID12 } from "node:crypto";
 
 // packages/cli/src/utils/nonInteractiveHelpers.ts
 init_esbuild_shims();
@@ -441271,7 +441302,7 @@ var formatDuration = /* @__PURE__ */ __name((milliseconds) => {
 
 // packages/cli/src/generated/git-commit.ts
 init_esbuild_shims();
-var GIT_COMMIT_INFO = "eac09c310";
+var GIT_COMMIT_INFO = "1c1fb9b11";
 
 // packages/cli/src/utils/systemInfo.ts
 async function getNpmVersion() {
@@ -443004,7 +443035,7 @@ init_esbuild_shims();
 
 // packages/cli/src/ui/utils/export/collect.ts
 init_esbuild_shims();
-import { randomUUID as randomUUID8 } from "node:crypto";
+import { randomUUID as randomUUID11 } from "node:crypto";
 
 // packages/cli/src/acp-integration/session/HistoryReplayer.ts
 init_esbuild_shims();
@@ -443885,7 +443916,7 @@ var ExportSessionContext = class {
     return this.activeRecordTimestamp ?? (/* @__PURE__ */ new Date()).toISOString();
   }
   getMessageUuid() {
-    return this.activeRecordId ?? randomUUID8();
+    return this.activeRecordId ?? randomUUID11();
   }
   handleMessageChunk(role, content, messageRole = role, usageMetadata) {
     if (content.type !== "text" || !content.text) return;
@@ -445196,14 +445227,14 @@ __name(getIdeStatusMessage, "getIdeStatusMessage");
 function formatFileList(openFiles) {
   const basenameCounts = /* @__PURE__ */ new Map();
   for (const file2 of openFiles) {
-    const basename29 = path108.basename(file2.path);
-    basenameCounts.set(basename29, (basenameCounts.get(basename29) || 0) + 1);
+    const basename32 = path108.basename(file2.path);
+    basenameCounts.set(basename32, (basenameCounts.get(basename32) || 0) + 1);
   }
   const fileList = openFiles.map((file2) => {
-    const basename29 = path108.basename(file2.path);
-    const isDuplicate = (basenameCounts.get(basename29) || 0) > 1;
+    const basename32 = path108.basename(file2.path);
+    const isDuplicate = (basenameCounts.get(basename32) || 0) > 1;
     const parentDir = path108.basename(path108.dirname(file2.path));
-    const displayName = isDuplicate ? `${basename29} (/${parentDir})` : basename29;
+    const displayName = isDuplicate ? `${basename32} (/${parentDir})` : basename32;
     return `  - ${displayName}${file2.isActive ? " (active)" : ""}`;
   }).join("\n");
   const infoMessage = `
@@ -450226,7 +450257,7 @@ var BaseJsonOutputAdapter = class {
    * @param state - Message state to reset
    */
   startAssistantMessageInternal(state) {
-    state.messageId = randomUUID9();
+    state.messageId = randomUUID12();
     state.blocks = [];
     state.openBlocks = /* @__PURE__ */ new Set();
     state.usage = this.createUsage();
@@ -450663,7 +450694,7 @@ ${event.value}`, null);
     const content = partsToContentBlock(parts2);
     const message = {
       type: "user",
-      uuid: randomUUID9(),
+      uuid: randomUUID12(),
       session_id: this.getSessionId(),
       parent_tool_use_id: parentToolUseId ?? null,
       message: {
@@ -450716,7 +450747,7 @@ ${event.value}`, null);
     }
     const message = {
       type: "user",
-      uuid: randomUUID9(),
+      uuid: randomUUID12(),
       session_id: this.getSessionId(),
       parent_tool_use_id: parentToolUseId,
       message: {
@@ -450735,7 +450766,7 @@ ${event.value}`, null);
     const systemMessage = {
       type: "system",
       subtype,
-      uuid: randomUUID9(),
+      uuid: randomUUID12(),
       session_id: this.getSessionId(),
       parent_tool_use_id: null,
       data
@@ -450763,7 +450794,7 @@ ${event.value}`, null);
   buildResultMessage(options2, lastAssistantMessage) {
     const usage2 = options2.usage ?? createExtendedUsage();
     const resultText = options2.summary ?? (lastAssistantMessage ? extractTextFromBlocks(lastAssistantMessage.message.content) : "");
-    const baseUuid = randomUUID9();
+    const baseUuid = randomUUID12();
     const baseSessionId = this.getSessionId();
     if (options2.isError) {
       const errorMessage = options2.errorMessage ?? "Unknown error";
@@ -450817,7 +450848,7 @@ ${event.value}`, null);
     return {
       type: "result",
       subtype: "error_during_execution",
-      uuid: randomUUID9(),
+      uuid: randomUUID12(),
       session_id: this.getSessionId(),
       is_error: true,
       duration_ms: 0,
@@ -450955,7 +450986,7 @@ var JsonOutputAdapter = class extends BaseJsonOutputAdapter {
 
 // packages/cli/src/nonInteractive/io/StreamJsonOutputAdapter.ts
 init_esbuild_shims();
-import { randomUUID as randomUUID10 } from "node:crypto";
+import { randomUUID as randomUUID13 } from "node:crypto";
 var StreamJsonOutputAdapter = class extends BaseJsonOutputAdapter {
   constructor(config2, includePartialMessages) {
     super(config2);
@@ -450993,7 +451024,7 @@ var StreamJsonOutputAdapter = class extends BaseJsonOutputAdapter {
     if (this.mainTurnMessageStartEmitted && this.includePartialMessages) {
       const partial2 = {
         type: "stream_event",
-        uuid: randomUUID10(),
+        uuid: randomUUID13(),
         session_id: this.getSessionId(),
         parent_tool_use_id: null,
         event: { type: "message_stop" }
@@ -451143,7 +451174,7 @@ var StreamJsonOutputAdapter = class extends BaseJsonOutputAdapter {
     }
     const partial2 = {
       type: "stream_event",
-      uuid: randomUUID10(),
+      uuid: randomUUID13(),
       session_id: this.getSessionId(),
       parent_tool_use_id: null,
       event: {
@@ -451166,7 +451197,7 @@ var StreamJsonOutputAdapter = class extends BaseJsonOutputAdapter {
     }
     const partial2 = {
       type: "stream_event",
-      uuid: randomUUID10(),
+      uuid: randomUUID13(),
       session_id: this.getSessionId(),
       parent_tool_use_id: parentToolUseId,
       event
@@ -451823,7 +451854,7 @@ init_esbuild_shims();
 // packages/cli/src/nonInteractive/control/controllers/baseController.ts
 init_esbuild_shims();
 init_dist4();
-import { randomUUID as randomUUID11 } from "node:crypto";
+import { randomUUID as randomUUID14 } from "node:crypto";
 var DEFAULT_REQUEST_TIMEOUT_MS = 3e4;
 var BaseController = class {
   static {
@@ -451884,7 +451915,7 @@ var BaseController = class {
     if (signal?.aborted) {
       throw new Error("Request aborted");
     }
-    const requestId = randomUUID11();
+    const requestId = randomUUID14();
     return new Promise((resolve36, reject) => {
       const abortHandler = /* @__PURE__ */ __name(() => {
         this.registry.deregisterOutgoingRequest(requestId);
@@ -468998,7 +469029,7 @@ var import_react64 = __toESM(require_react(), 1);
 
 // packages/cli/src/ui/components/messages/DiffRenderer.tsx
 init_esbuild_shims();
-import crypto15 from "node:crypto";
+import crypto16 from "node:crypto";
 var import_jsx_runtime8 = __toESM(require_jsx_runtime(), 1);
 function parseDiffWithLineNumbers(diffContent) {
   const lines = diffContent.split("\n");
@@ -469154,7 +469185,7 @@ var renderDiffContent = /* @__PURE__ */ __name((parsedLines, filename, tabWidth
   if (!isFinite(baseIndentation)) {
     baseIndentation = 0;
   }
-  const key = filename ? `diff-box-${filename}` : `diff-box-${crypto15.createHash("sha1").update(JSON.stringify(parsedLines)).digest("hex")}`;
+  const key = filename ? `diff-box-${filename}` : `diff-box-${crypto16.createHash("sha1").update(JSON.stringify(parsedLines)).digest("hex")}`;
   let lastLineNumber = null;
   const MAX_CONTEXT_LINES_WITHOUT_GAP = 5;
   return /* @__PURE__ */ (0, import_jsx_runtime8.jsx)(
@@ -494089,7 +494120,7 @@ ${commandToExecute.subCommands.map((sc) => `  - ${sc.name}: ${sc.description ||
 
 // packages/cli/src/ui/AppContainer.tsx
 import * as fs122 from "node:fs";
-import { basename as basename27 } from "node:path";
+import { basename as basename30 } from "node:path";
 
 // packages/cli/src/utils/windowTitle.ts
 init_esbuild_shims();
@@ -494131,7 +494162,7 @@ init_dist4();
 init_esbuild_shims();
 var import_react140 = __toESM(require_react(), 1);
 init_dist4();
-import crypto16 from "node:crypto";
+import crypto17 from "node:crypto";
 import path125 from "node:path";
 import os44 from "node:os";
 import fs113 from "node:fs";
@@ -494177,7 +494208,7 @@ var useShellCommandProcessor = /* @__PURE__ */ __name((addItemToHistory, setPend
       let pwdFilePath;
       if (!isWindows9) {
         let command2 = rawQuery.trim();
-        const pwdFileName = `shell_pwd_${crypto16.randomBytes(6).toString("hex")}.tmp`;
+        const pwdFileName = `shell_pwd_${crypto17.randomBytes(6).toString("hex")}.tmp`;
         pwdFilePath = path125.join(os44.tmpdir(), pwdFileName);
         if (!command2.endsWith(";") && !command2.endsWith("&")) {
           command2 += ";";
@@ -497069,14 +497100,14 @@ var Temp = {
     }
   }, "purgeSyncAll"),
   truncate: /* @__PURE__ */ __name((filePath) => {
-    const basename29 = path129.basename(filePath);
-    if (basename29.length <= LIMIT_BASENAME_LENGTH)
+    const basename32 = path129.basename(filePath);
+    if (basename32.length <= LIMIT_BASENAME_LENGTH)
       return filePath;
-    const truncable = /^(\.?)(.*?)((?:\.[^.]+)?(?:\.tmp-\d{10}[a-f0-9]{6})?)$/.exec(basename29);
+    const truncable = /^(\.?)(.*?)((?:\.[^.]+)?(?:\.tmp-\d{10}[a-f0-9]{6})?)$/.exec(basename32);
     if (!truncable)
       return filePath;
-    const truncationLength = basename29.length - LIMIT_BASENAME_LENGTH;
-    return `${filePath.slice(0, -basename29.length)}${truncable[1]}${truncable[2].slice(0, -truncationLength)}${truncable[3]}`;
+    const truncationLength = basename32.length - LIMIT_BASENAME_LENGTH;
+    return `${filePath.slice(0, -basename32.length)}${truncable[1]}${truncable[2].slice(0, -truncationLength)}${truncable[3]}`;
   }, "truncate")
 };
 node_default3(Temp.purgeSyncAll);
@@ -500583,7 +500614,7 @@ var AppContainer = /* @__PURE__ */ __name((props) => {
   const branchName = useGitBranchName(config2.getTargetDir());
   const mainControlsRef = (0, import_react163.useRef)(null);
   const originalTitleRef = (0, import_react163.useRef)(
-    computeWindowTitle(basename27(config2.getTargetDir()))
+    computeWindowTitle(basename30(config2.getTargetDir()))
   );
   const lastTitleRef = (0, import_react163.useRef)(null);
   const staticExtraHeight = 3;
@@ -504215,7 +504246,7 @@ var QwenAgent = class {
   async initialize(args2) {
     this.clientCapabilities = args2.clientCapabilities;
     const authMethods = buildAuthMethods();
-    const version2 = "0.14.0-preview.2";
+    const version2 = "0.14.0-preview.3";
     return {
       protocolVersion: PROTOCOL_VERSION,
       agentInfo: {
@@ -504654,7 +504685,7 @@ ${reason.stack}` : ""}`;
 __name(setupUnhandledRejectionHandler, "setupUnhandledRejectionHandler");
 async function startInteractiveUI(config2, settings, startupWarnings, workspaceRoot = process.cwd(), initializationResult) {
   const version2 = await getCliVersion();
-  setWindowTitle(basename28(workspaceRoot), settings);
+  setWindowTitle(basename31(workspaceRoot), settings);
   const AppWrapper = /* @__PURE__ */ __name(() => {
     const kittyProtocolStatus = useKittyKeyboardProtocol();
     const nodeMajorVersion = parseInt(process.versions.node.split(".")[0], 10);