@qwen-code/qwen-code 0.19.10 → 0.19.11-nightly.20260718.767a32484

package/chunks/chunk-B7NUUEXC.js

@@ -1,311 +0,0 @@
-// Force strict mode and setup for ESM
-"use strict";
-import {
-  init_esbuild_shims
-} from "./chunk-5O2XNYP6.js";
-import {
-  __name
-} from "./chunk-J2S4EL5Y.js";
-
-// packages/core/src/core/tokenLimits.ts
-init_esbuild_shims();
-var DEFAULT_TOKEN_LIMIT = 2e5;
-var DEFAULT_OUTPUT_TOKEN_LIMIT = 32e3;
-var ESCALATED_MAX_TOKENS = 64e3;
-var OUTPUT_TOKEN_CEILING = ESCALATED_MAX_TOKENS;
-var MIN_CLAMPED_OUTPUT_TOKENS = 4e3;
-function outputClampMargin(contextWindowSize) {
-  return Math.max(1e4, Math.round(0.05 * contextWindowSize));
-}
-__name(outputClampMargin, "outputClampMargin");
-function clampOutputTokensToWindow(outputCeiling, contextWindowSize, promptTokens) {
-  const room = contextWindowSize - promptTokens - outputClampMargin(contextWindowSize);
-  return Math.min(outputCeiling, Math.max(MIN_CLAMPED_OUTPUT_TOKENS, room));
-}
-__name(clampOutputTokensToWindow, "clampOutputTokensToWindow");
-function parsePositiveIntegerEnvValue(raw) {
-  if (raw === void 0) return void 0;
-  const trimmed = raw.trim();
-  if (!/^\d+$/.test(trimmed)) return void 0;
-  const parsed = Number(trimmed);
-  if (!Number.isSafeInteger(parsed) || parsed <= 0) return void 0;
-  return parsed;
-}
-__name(parsePositiveIntegerEnvValue, "parsePositiveIntegerEnvValue");
-var LIMITS = {
-  "32k": 32768,
-  "64k": 65536,
-  "128k": 131072,
-  "192k": 196608,
-  // MiniMax-M2.5 context window
-  "200k": 2e5,
-  // vendor-declared decimal, used by OpenAI, Anthropic, etc.
-  "256k": 262144,
-  "272k": 272e3,
-  // vendor-declared decimal, GPT-5.x input (400K total - 128K output)
-  "384k": 384e3,
-  // vendor-declared decimal, DeepSeek V4 max output
-  "400k": 4e5,
-  // vendor-declared decimal, used by OpenAI GPT-5.x
-  "512k": 524288,
-  "1m": 1e6,
-  // Output token limits (typically much smaller than input limits)
-  "4k": 4096,
-  "8k": 8192,
-  "16k": 16384
-};
-function normalize(model) {
-  let s = (model ?? "").toLowerCase().trim();
-  s = s.replace(/^.*\//, "");
-  s = s.split("|").pop() ?? s;
-  s = s.split(":").pop() ?? s;
-  s = s.replace(/\s+/g, "-");
-  s = s.replace(/-preview/g, "");
-  if (!s.match(/^qwen-(?:plus|flash|vl-max)-latest$/) && !s.match(/^kimi-k2-\d{4}$/)) {
-    s = s.replace(
-      /-(?:\d{4,}|\d+x\d+b|v\d+(?:\.\d+)*|(?<=-[^-]+-)\d+(?:\.\d+)+|latest|exp)$/g,
-      ""
-    );
-  }
-  s = s.replace(/-(?:\d?bit|int[48]|bf16|fp16|q[45]|quantized)$/g, "");
-  return s;
-}
-__name(normalize, "normalize");
-var PATTERNS = [
-  // -------------------
-  // Google Gemini
-  // -------------------
-  [/^gemini-3/, LIMITS["1m"]],
-  // Gemini 3.x (Pro, Flash, 3.1, etc.): 1M
-  [/^gemini-/, LIMITS["1m"]],
-  // Gemini fallback (1.5, 2.x): 1M
-  // -------------------
-  // OpenAI
-  // -------------------
-  [/^gpt-5/, LIMITS["272k"]],
-  // GPT-5.x: 272K input (400K total - 128K output)
-  [/^gpt-/, LIMITS["128k"]],
-  // GPT fallback (4o, 4.1, etc.): 128K
-  [/^o\d/, LIMITS["200k"]],
-  // o-series (o3, o4-mini, etc.): 200K
-  // -------------------
-  // Anthropic Claude
-  // -------------------
-  [/^claude-opus-4-(?:6|7|8)/, LIMITS["1m"]],
-  // Opus 4.6-4.8: 1M
-  [/^claude-/, LIMITS["200k"]],
-  // All Claude models: 200K
-  // -------------------
-  // Alibaba / Qwen
-  // -------------------
-  // Commercial API models (1,000,000 context)
-  [/^qwen3-coder-plus/, LIMITS["1m"]],
-  [/^qwen3-coder-flash/, LIMITS["1m"]],
-  [/^qwen3\.\d/, LIMITS["1m"]],
-  [/^qwen-plus-latest$/, LIMITS["1m"]],
-  [/^qwen-flash-latest$/, LIMITS["1m"]],
-  [/^coder-model$/, LIMITS["1m"]],
-  // Commercial API models (256K context)
-  [/^qwen3-max/, LIMITS["256k"]],
-  // Open-source Qwen3 variants: 256K native
-  [/^qwen3-coder-/, LIMITS["256k"]],
-  // Qwen fallback (VL, turbo, plus, 2.5, etc.): 256K
-  [/^qwen/, LIMITS["256k"]],
-  // -------------------
-  // DeepSeek
-  // -------------------
-  [/^deepseek-v4/, LIMITS["1m"]],
-  // DeepSeek V4 (flash, pro): 1M
-  [/^deepseek/, LIMITS["128k"]],
-  // -------------------
-  // Zhipu GLM
-  // -------------------
-  // 1M context is the forward default for new GLM releases (GLM-5.2+, GLM-6.x,
-  // and beyond) so they need no future code change. Confirmed 200K families
-  // (GLM-5 / 5.0 / 5.1, GLM-4.x and older) are pinned explicitly first.
-  [/^glm-5(\.[01])?(-|$)/, 202752],
-  // GLM-5 / 5.0 / 5.1: 200K
-  [/^glm-(?:[5-9]|\d{2,})/, LIMITS["1m"]],
-  // GLM-5.2+, 6.x..9.x, 10.x+: 1M
-  [/^glm-/, 202752],
-  // GLM <=4.x / non-numeric fallback: 200K
-  // -------------------
-  // MiniMax
-  // -------------------
-  [/^minimax-m3/i, LIMITS["1m"]],
-  // MiniMax-M3: 1,000,000
-  [/^minimax-m2\.5/i, LIMITS["192k"]],
-  // MiniMax-M2.5: 196,608
-  [/^minimax-/i, LIMITS["200k"]],
-  // MiniMax fallback: 200K
-  // -------------------
-  // Moonshot / Kimi
-  // -------------------
-  [/^kimi-/, LIMITS["256k"]],
-  // Kimi fallback: 256K
-  // -------------------
-  // ByteDance Seed-OSS (512K)
-  // -------------------
-  [/^seed-oss/, LIMITS["512k"]]
-];
-var OUTPUT_PATTERNS = [
-  // Google Gemini
-  [/^gemini-3/, LIMITS["64k"]],
-  // Gemini 3.x: 64K
-  [/^gemini-/, LIMITS["8k"]],
-  // Gemini fallback: 8K
-  // OpenAI
-  [/^gpt-5/, LIMITS["128k"]],
-  // GPT-5.x: 128K
-  [/^gpt-/, LIMITS["16k"]],
-  // GPT fallback: 16K
-  [/^o\d/, LIMITS["128k"]],
-  // o-series: 128K
-  // Anthropic Claude
-  [/^claude-opus-4-(?:6|7|8)/, 128e3],
-  // Opus 4.6-4.8: 128K
-  [/^claude-sonnet-4-6/, LIMITS["64k"]],
-  // Sonnet 4.6: 64K
-  [/^claude-/, LIMITS["64k"]],
-  // Claude fallback: 64K
-  // Alibaba / Qwen
-  [/^qwen3\.\d/, LIMITS["64k"]],
-  [/^coder-model$/, LIMITS["64k"]],
-  [/^qwen/, LIMITS["32k"]],
-  // Qwen fallback (VL, turbo, plus, etc.): 32K
-  // DeepSeek
-  [/^deepseek-v4/, LIMITS["384k"]],
-  // DeepSeek V4 (flash, pro): 384K
-  [/^deepseek-reasoner/, LIMITS["64k"]],
-  [/^deepseek-r1/, LIMITS["64k"]],
-  [/^deepseek-chat/, LIMITS["8k"]],
-  // Zhipu GLM
-  [/^glm-5(?:\.\d+)?(?:-|$)/, LIMITS["128k"]],
-  [/^glm-4\.7/, LIMITS["16k"]],
-  // MiniMax
-  [/^minimax-m2\.5/i, LIMITS["64k"]],
-  // Kimi
-  [/^kimi-k2\.5/, LIMITS["32k"]]
-];
-function findTokenLimit(model, type = "input") {
-  const norm = normalize(model);
-  const patterns = type === "output" ? OUTPUT_PATTERNS : PATTERNS;
-  for (const [regex, limit] of patterns) {
-    if (regex.test(norm)) {
-      return limit;
-    }
-  }
-  return void 0;
-}
-__name(findTokenLimit, "findTokenLimit");
-function hasExplicitOutputLimit(model) {
-  const norm = normalize(model);
-  return OUTPUT_PATTERNS.some(([regex]) => regex.test(norm));
-}
-__name(hasExplicitOutputLimit, "hasExplicitOutputLimit");
-function knownTokenLimit(model, type = "input") {
-  return findTokenLimit(model, type);
-}
-__name(knownTokenLimit, "knownTokenLimit");
-function tokenLimit(model, type = "input") {
-  return knownTokenLimit(model, type) ?? (type === "output" ? DEFAULT_OUTPUT_TOKEN_LIMIT : DEFAULT_TOKEN_LIMIT);
-}
-__name(tokenLimit, "tokenLimit");
-function defaultOutputCeiling(model) {
-  const outputLimit = tokenLimit(model, "output");
-  if (/^claude-opus-4-(?:6|7|8)/.test(normalize(model))) {
-    return outputLimit;
-  }
-  return Math.min(outputLimit, OUTPUT_TOKEN_CEILING);
-}
-__name(defaultOutputCeiling, "defaultOutputCeiling");
-function reconcileMaxTokens(configMaxTokens, requestMaxTokens) {
-  if (typeof configMaxTokens === "number" && typeof requestMaxTokens === "number") {
-    return Math.min(configMaxTokens, requestMaxTokens);
-  }
-  return void 0;
-}
-__name(reconcileMaxTokens, "reconcileMaxTokens");
-
-// packages/core/src/core/openaiContentGenerator/constants.ts
-init_esbuild_shims();
-var DEFAULT_TIMEOUT = 12e4;
-var DISABLED_REQUEST_TIMEOUT_MS = 2147483647;
-function resolveRequestTimeout(timeout) {
-  if (timeout === void 0 || timeout === null) {
-    return DEFAULT_TIMEOUT;
-  }
-  return timeout <= 0 ? DISABLED_REQUEST_TIMEOUT_MS : timeout;
-}
-__name(resolveRequestTimeout, "resolveRequestTimeout");
-var DEFAULT_STREAM_IDLE_TIMEOUT_MS = 24e4;
-var QWEN_STREAM_IDLE_TIMEOUT_MS_ENV = "QWEN_STREAM_IDLE_TIMEOUT_MS";
-var MAX_STREAM_IDLE_TIMEOUT_MS = 2147483647;
-var DEFAULT_MAX_RETRIES = 3;
-var DEFAULT_OPENAI_BASE_URL = "https://api.openai.com/v1";
-var DEFAULT_DASHSCOPE_BASE_URL = "https://dashscope.aliyuncs.com/compatible-mode/v1";
-var DASHSCOPE_PROXY_BASE_URL = process.env["DASHSCOPE_PROXY_BASE_URL"];
-
-// packages/core/src/utils/request-tokenizer/supportedImageFormats.ts
-init_esbuild_shims();
-var SUPPORTED_IMAGE_MIME_TYPES = [
-  "image/bmp",
-  "image/gif",
-  "image/jpeg",
-  "image/jpg",
-  // Alternative MIME type for JPEG
-  "image/png",
-  "image/tiff",
-  "image/webp",
-  "image/heic"
-];
-function isSupportedImageMimeType(mimeType) {
-  return SUPPORTED_IMAGE_MIME_TYPES.includes(
-    mimeType
-  );
-}
-__name(isSupportedImageMimeType, "isSupportedImageMimeType");
-function getSupportedImageFormatsString() {
-  return SUPPORTED_IMAGE_MIME_TYPES.map(
-    (type) => type.replace("image/", "").toUpperCase()
-  ).join(", ");
-}
-__name(getSupportedImageFormatsString, "getSupportedImageFormatsString");
-function getUnsupportedImageFormatWarning() {
-  return `Only the following image formats are supported: ${getSupportedImageFormatsString()}. Other formats may not work as expected.`;
-}
-__name(getUnsupportedImageFormatWarning, "getUnsupportedImageFormatWarning");
-
-export {
-  DEFAULT_TOKEN_LIMIT,
-  DEFAULT_OUTPUT_TOKEN_LIMIT,
-  ESCALATED_MAX_TOKENS,
-  OUTPUT_TOKEN_CEILING,
-  MIN_CLAMPED_OUTPUT_TOKENS,
-  outputClampMargin,
-  clampOutputTokensToWindow,
-  parsePositiveIntegerEnvValue,
-  normalize,
-  hasExplicitOutputLimit,
-  knownTokenLimit,
-  tokenLimit,
-  defaultOutputCeiling,
-  reconcileMaxTokens,
-  resolveRequestTimeout,
-  DEFAULT_STREAM_IDLE_TIMEOUT_MS,
-  QWEN_STREAM_IDLE_TIMEOUT_MS_ENV,
-  MAX_STREAM_IDLE_TIMEOUT_MS,
-  DEFAULT_MAX_RETRIES,
-  DEFAULT_OPENAI_BASE_URL,
-  DEFAULT_DASHSCOPE_BASE_URL,
-  DASHSCOPE_PROXY_BASE_URL,
-  SUPPORTED_IMAGE_MIME_TYPES,
-  isSupportedImageMimeType,
-  getSupportedImageFormatsString,
-  getUnsupportedImageFormatWarning
-};
-/**
- * @license
- * Copyright 2025 Qwen
- * SPDX-License-Identifier: Apache-2.0
- */

package/chunks/chunk-CARU2RR2.js

@@ -1,24 +0,0 @@
-// Force strict mode and setup for ESM
-"use strict";
-import {
-  init_esbuild_shims
-} from "./chunk-5O2XNYP6.js";
-
-// packages/core/src/config/models.ts
-init_esbuild_shims();
-var DEFAULT_QWEN_MODEL = "coder-model";
-var DEFAULT_QWEN_FLASH_MODEL = "coder-model";
-var DEFAULT_QWEN_EMBEDDING_MODEL = "text-embedding-v4";
-var MAINLINE_CODER_MODEL = "qwen3.5-plus";
-
-export {
-  DEFAULT_QWEN_MODEL,
-  DEFAULT_QWEN_FLASH_MODEL,
-  DEFAULT_QWEN_EMBEDDING_MODEL,
-  MAINLINE_CODER_MODEL
-};
-/**
- * @license
- * Copyright 2025 Google LLC
- * SPDX-License-Identifier: Apache-2.0
- */

package/chunks/chunk-GYTKQYDB.js

@@ -1,23 +0,0 @@
-// Force strict mode and setup for ESM
-"use strict";
-import {
-  init_esbuild_shims
-} from "./chunk-5O2XNYP6.js";
-
-// packages/cli/src/serve/channel-worker-env.ts
-init_esbuild_shims();
-var CHANNEL_DAEMON_WORKER_SENTINEL = "QWEN_CHANNEL_DAEMON_WORKER";
-var CHANNEL_WORKER_HEARTBEAT_INTERVAL_MS = 15e3;
-var QWEN_DAEMON_TOKEN_ENV = "QWEN_DAEMON_TOKEN";
-var QWEN_DAEMON_URL_ENV = "QWEN_DAEMON_URL";
-var QWEN_DAEMON_WORKSPACE_ENV = "QWEN_DAEMON_WORKSPACE";
-var QWEN_SERVER_TOKEN_ENV = "QWEN_SERVER_TOKEN";
-
-export {
-  CHANNEL_DAEMON_WORKER_SENTINEL,
-  CHANNEL_WORKER_HEARTBEAT_INTERVAL_MS,
-  QWEN_DAEMON_TOKEN_ENV,
-  QWEN_DAEMON_URL_ENV,
-  QWEN_DAEMON_WORKSPACE_ENV,
-  QWEN_SERVER_TOKEN_ENV
-};

package/chunks/chunk-LQU7EVFA.js

@@ -1,30 +0,0 @@
-// Force strict mode and setup for ESM
-"use strict";
-import {
-  runExitCleanup
-} from "./chunk-TISZXPAX.js";
-import {
-  init_esbuild_shims
-} from "./chunk-5O2XNYP6.js";
-import {
-  __name
-} from "./chunk-J2S4EL5Y.js";
-
-// packages/cli/src/utils/processUtils.ts
-init_esbuild_shims();
-var RELAUNCH_EXIT_CODE = 42;
-async function relaunchApp() {
-  await runExitCleanup();
-  process.exit(RELAUNCH_EXIT_CODE);
-}
-__name(relaunchApp, "relaunchApp");
-
-export {
-  RELAUNCH_EXIT_CODE,
-  relaunchApp
-};
-/**
- * @license
- * Copyright 2025 Google LLC
- * SPDX-License-Identifier: Apache-2.0
- */

package/chunks/chunk-OCPBI7J5.js

@@ -1,18 +0,0 @@
-// Force strict mode and setup for ESM
-"use strict";
-import {
-  init_esbuild_shims
-} from "./chunk-5O2XNYP6.js";
-
-// packages/acp-bridge/src/mcpTimeouts.ts
-init_esbuild_shims();
-var MCP_RESTART_SERVER_DEADLINE_MS = 3e5;
-
-export {
-  MCP_RESTART_SERVER_DEADLINE_MS
-};
-/**
- * @license
- * Copyright 2025 Qwen Team
- * SPDX-License-Identifier: Apache-2.0
- */

package/chunks/chunk-OJAMDVF5.js

@@ -1,66 +0,0 @@
-// Force strict mode and setup for ESM
-"use strict";
-import {
-  init_esbuild_shims
-} from "./chunk-5O2XNYP6.js";
-import {
-  __name
-} from "./chunk-J2S4EL5Y.js";
-
-// packages/cli/src/serve/channel-webhook-ipc.ts
-init_esbuild_shims();
-import { randomUUID } from "node:crypto";
-var CHANNEL_WEBHOOK_ENQUEUE_ERROR_CODES = /* @__PURE__ */ new Set([
-  "channel_worker_unavailable",
-  "channel_webhook_enqueue_timeout",
-  "channel_webhook_queue_full",
-  "channel_webhook_target_unavailable",
-  "channel_webhook_invalid_task",
-  "channel_webhook_enqueue_failed"
-]);
-var ChannelWebhookEnqueueError = class extends Error {
-  constructor(code, message) {
-    super(message);
-    this.code = code;
-    this.name = "ChannelWebhookEnqueueError";
-  }
-  static {
-    __name(this, "ChannelWebhookEnqueueError");
-  }
-};
-function isChannelWebhookEnqueueErrorCode(value) {
-  return typeof value === "string" && CHANNEL_WEBHOOK_ENQUEUE_ERROR_CODES.has(value);
-}
-__name(isChannelWebhookEnqueueErrorCode, "isChannelWebhookEnqueueErrorCode");
-function isChannelWebhookEnqueueError(value) {
-  return value instanceof ChannelWebhookEnqueueError || typeof value === "object" && value !== null && isChannelWebhookEnqueueErrorCode(value.code) && typeof value.message === "string";
-}
-__name(isChannelWebhookEnqueueError, "isChannelWebhookEnqueueError");
-var CHANNEL_WEBHOOK_TASK_IPC_TIMEOUT_MS = 3e4;
-function createChannelWebhookTaskMessage(task) {
-  return {
-    type: "webhook_task",
-    id: randomUUID(),
-    expiresAt: Date.now() + CHANNEL_WEBHOOK_TASK_IPC_TIMEOUT_MS,
-    task
-  };
-}
-__name(createChannelWebhookTaskMessage, "createChannelWebhookTaskMessage");
-function isChannelWebhookTaskMessage(value) {
-  return typeof value === "object" && value !== null && value.type === "webhook_task" && typeof value.id === "string" && typeof value.expiresAt === "number" && typeof value.task === "object" && value.task !== null;
-}
-__name(isChannelWebhookTaskMessage, "isChannelWebhookTaskMessage");
-function isChannelWebhookTaskResultMessage(value) {
-  return typeof value === "object" && value !== null && value.type === "webhook_task_result" && typeof value.id === "string" && typeof value.ok === "boolean";
-}
-__name(isChannelWebhookTaskResultMessage, "isChannelWebhookTaskResultMessage");
-
-export {
-  ChannelWebhookEnqueueError,
-  isChannelWebhookEnqueueErrorCode,
-  isChannelWebhookEnqueueError,
-  CHANNEL_WEBHOOK_TASK_IPC_TIMEOUT_MS,
-  createChannelWebhookTaskMessage,
-  isChannelWebhookTaskMessage,
-  isChannelWebhookTaskResultMessage
-};

package/chunks/chunk-QAW7PIHT.js

@@ -1,168 +0,0 @@
-// Force strict mode and setup for ESM
-"use strict";
-import {
-  isTeamAutoMemPath
-} from "./chunk-FBU7WRZI.js";
-import {
-  createDebugLogger
-} from "./chunk-7NFB7LBQ.js";
-import {
-  init_esbuild_shims
-} from "./chunk-5O2XNYP6.js";
-import {
-  __name
-} from "./chunk-J2S4EL5Y.js";
-
-// packages/core/src/memory/team-memory-secret-guard.ts
-init_esbuild_shims();
-
-// packages/core/src/memory/secret-scanner.ts
-init_esbuild_shims();
-var SECRET_RULES = [
-  // Cloud providers
-  {
-    id: "aws-access-token",
-    // Suffix is base62 ([A-Z0-9]) per gitleaks; base32 [A-Z2-7] missed 0/1/8/9.
-    source: "\\b((?:A3T[A-Z0-9]|AKIA|ASIA|ABIA|ACCA)[A-Z0-9]{16})\\b"
-  },
-  {
-    id: "alibaba-cloud-access-key",
-    source: "\\b(LTAI[a-zA-Z0-9]{12,20})\\b"
-  },
-  // A distinctive prefix + a high-entropy length is enough to identify these;
-  // no trailing delimiter is required (requiring one missed secrets followed by
-  // `.` `,` `)` `}` — common in prose and code samples).
-  {
-    id: "gcp-api-key",
-    source: "AIza[\\w-]{35}"
-  },
-  {
-    // Google OAuth client secret (GOCSPX- prefix + 24 base64url chars).
-    id: "gcp-oauth-client-secret",
-    source: "GOCSPX-[\\w-]{24}"
-  },
-  {
-    id: "digitalocean-pat",
-    source: "dop_v1_[a-f0-9]{64}"
-  },
-  // AI APIs
-  {
-    id: "anthropic-api-key",
-    source: "sk-ant-[a-zA-Z0-9_-]{20,}"
-  },
-  {
-    // New project/service/admin prefixes, the T3BlbkFJ-marker format, and the
-    // retired bare `sk-` + 48 base62 chars (archived legacy keys).
-    // Both classes around the T3BlbkFJ literal are upper-bounded ({20,512}, like
-    // `private-key`): two unbounded {20,} quantifiers around a literal that may
-    // be absent backtrack in O(n²) on crafted `sk-…` input (ReDoS). Real keys
-    // are far shorter than the bound, so genuine matches are unaffected.
-    id: "openai-api-key",
-    source: "sk-(?:proj|svcacct|admin)-[a-zA-Z0-9_-]{20,}|sk-[a-zA-Z0-9_-]{20,512}T3BlbkFJ[a-zA-Z0-9_-]{20,512}|sk-[a-zA-Z0-9]{48}"
-  },
-  {
-    id: "huggingface-access-token",
-    source: "hf_[a-zA-Z0-9]{34,}"
-  },
-  // Version control
-  { id: "github-pat", source: "ghp_[0-9a-zA-Z]{36}" },
-  { id: "github-fine-grained-pat", source: "github_pat_\\w{82}" },
-  { id: "github-app-token", source: "(?:ghu|ghs)_[0-9a-zA-Z]{36}" },
-  { id: "github-oauth", source: "gho_[0-9a-zA-Z]{36}" },
-  { id: "gitlab-pat", source: "glpat-[\\w-]{20}" },
-  // Communication
-  {
-    id: "slack-bot-token",
-    // The [b] class avoids embedding a Slack token prefix that vsce flags.
-    source: "xox[b]-[0-9]{10,13}-[0-9]{10,13}[a-zA-Z0-9-]*"
-  },
-  {
-    id: "slack-app-token",
-    source: "xapp-\\d-[A-Z0-9]+-\\d+-[a-z0-9]+",
-    flags: "i"
-  },
-  {
-    // SendGrid API key: SG. + 22-char id . + 43-char secret (gitleaks).
-    id: "sendgrid-api-token",
-    source: "SG\\.[\\w-]{22}\\.[\\w-]{43}"
-  },
-  // Dev tooling
-  { id: "npm-access-token", source: "npm_[a-zA-Z0-9]{36}" },
-  {
-    id: "stripe-access-token",
-    source: "(?:sk|rk)_(?:test|live|prod)_[a-zA-Z0-9]{10,99}"
-  },
-  // Crypto
-  {
-    id: "private-key",
-    source: "-----BEGIN[ A-Z0-9_-]{0,100}PRIVATE KEY(?: BLOCK)?-----[\\s\\S-]{64,16384}?-----END[ A-Z0-9_-]{0,100}PRIVATE KEY(?: BLOCK)?-----",
-    flags: "i"
-  }
-];
-var compiledRules = null;
-function getCompiledRules() {
-  compiledRules ??= SECRET_RULES.map((r) => ({
-    id: r.id,
-    re: new RegExp(r.source, r.flags)
-  }));
-  return compiledRules;
-}
-__name(getCompiledRules, "getCompiledRules");
-var LABEL_SPECIAL_CASE = {
-  aws: "AWS",
-  gcp: "GCP",
-  api: "API",
-  pat: "PAT",
-  oauth: "OAuth",
-  npm: "NPM",
-  github: "GitHub",
-  gitlab: "GitLab",
-  openai: "OpenAI",
-  digitalocean: "DigitalOcean",
-  huggingface: "HuggingFace",
-  alibaba: "Alibaba",
-  sendgrid: "SendGrid"
-};
-function ruleIdToLabel(ruleId) {
-  return ruleId.split("-").map(
-    (part) => LABEL_SPECIAL_CASE[part] ?? part.charAt(0).toUpperCase() + part.slice(1)
-  ).join(" ");
-}
-__name(ruleIdToLabel, "ruleIdToLabel");
-function scanForSecrets(content) {
-  const matches = [];
-  for (const rule of getCompiledRules()) {
-    if (rule.re.test(content)) {
-      matches.push({ ruleId: rule.id, label: ruleIdToLabel(rule.id) });
-    }
-  }
-  return matches;
-}
-__name(scanForSecrets, "scanForSecrets");
-
-// packages/core/src/memory/team-memory-secret-guard.ts
-var debugLogger = createDebugLogger("TEAM_MEMORY_SECRET_GUARD");
-function checkTeamMemorySecrets(filePath, content, projectRoot) {
-  if (!isTeamAutoMemPath(filePath, projectRoot)) {
-    return null;
-  }
-  const matches = scanForSecrets(content);
-  if (matches.length === 0) {
-    return null;
-  }
-  debugLogger.debug(
-    `Blocked team-memory write; matched rules: ${matches.map((m) => m.ruleId).join(", ")}`
-  );
-  const labels = matches.map((m) => m.label).join(", ");
-  return `Content contains potential secrets (${labels}) and cannot be written to team memory. Team memory is shared with all repository collaborators. Remove the sensitive content and try again.`;
-}
-__name(checkTeamMemorySecrets, "checkTeamMemorySecrets");
-
-export {
-  checkTeamMemorySecrets
-};
-/**
- * @license
- * Copyright 2025 Google LLC
- * SPDX-License-Identifier: Apache-2.0
- */