@qwen-code/qwen-code 0.19.2 → 0.19.3-nightly.20260701.a974594d7

package/chunks/{dist-BOOH5JWN.js → dist-SU6L7ZNJ.js}

@@ -6,8 +6,10 @@ import {
   require_proxy_from_env
 } from "./chunk-J37FGIOA.js";
 import {
-  ChannelBase
-} from "./chunk-JXQ23SNT.js";
+  ChannelBase,
+  sanitizeLogText,
+  sanitizeSenderName
+} from "./chunk-2JKEQWDZ.js";
 import "./chunk-7RYW5LQV.js";
 import "./chunk-UFC57OYT.js";
 import "./chunk-K5PGHDBN.js";
@@ -36,6 +38,7 @@ import { mkdirSync, writeFileSync } from "node:fs";
 import { randomUUID } from "node:crypto";
 import { basename, join } from "node:path";
 import { tmpdir } from "node:os";
+import { Buffer as Buffer2 } from "node:buffer";
 
 // node_modules/dingtalk-stream-sdk-nodejs/dist/index.mjs
 init_esbuild_shims();
@@ -4485,7 +4488,7 @@ var ACK_REACTION_NAME = "\u{1F440}";
 var ACK_EMOTION_ID = "2659900";
 var ACK_EMOTION_BG_ID = "im_bg_1";
 var EMOTION_API = "https://api.dingtalk.com/v1.0/robot/emotion";
-var DingtalkChannel = class extends ChannelBase {
+var DingtalkChannel = class _DingtalkChannel extends ChannelBase {
   static {
     __name(this, "DingtalkChannel");
   }
@@ -4503,6 +4506,86 @@ var DingtalkChannel = class extends ChannelBase {
       clientId: config.clientId,
       clientSecret: config.clientSecret
     });
+    this.installStructuredDownstreamHandler();
+  }
+  installStructuredDownstreamHandler() {
+    const client = this.client;
+    client.debug = false;
+    client.onDownStream = (raw) => {
+      this.onDownStream(raw, client);
+    };
+  }
+  onDownStream(raw, client) {
+    const decoded = this.decodeDownStream(raw);
+    let msg;
+    try {
+      const parsed = JSON.parse(decoded.text);
+      if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) {
+        process.stderr.write(`[DingTalk:${this.name}] downstream parsed to non-object, ignoring.
+`);
+        return;
+      }
+      msg = parsed;
+    } catch (err) {
+      process.stderr.write(`[DingTalk:${this.name}] Failed to parse downstream: ${sanitizeLogText(String(err), 200)}
+`);
+      return;
+    }
+    const headers = msg.headers && typeof msg.headers === "object" ? msg.headers : {};
+    const type = typeof msg.type === "string" ? msg.type : "";
+    const topic = typeof headers["topic"] === "string" ? headers["topic"] : "";
+    const messageId = typeof headers["messageId"] === "string" ? headers["messageId"] : "";
+    process.stderr.write(`[DingTalk:${this.name}] downstream type=${sanitizeLogText(type, 40)} topic=${sanitizeLogText(topic, 80)} messageId=${sanitizeLogText(messageId, 80)} bytes=${decoded.bytes}
+`);
+    if ((type === "CALLBACK" || type === "EVENT") && (!topic || !messageId)) {
+      process.stderr.write(`[DingTalk:${this.name}] Ignoring downstream with invalid routing headers.
+`);
+      return;
+    }
+    const normalizedMsg = {
+      ...msg,
+      headers: { ...headers, topic, messageId }
+    };
+    switch (type) {
+      case "SYSTEM":
+        this.callDownStreamHandler(client, "onSystem", normalizedMsg);
+        break;
+      case "EVENT":
+        this.callDownStreamHandler(client, "onEvent", normalizedMsg);
+        break;
+      case "CALLBACK":
+        this.callDownStreamHandler(client, "onCallback", normalizedMsg);
+        break;
+      default:
+        process.stderr.write(`[DingTalk:${this.name}] Ignoring downstream type ${sanitizeLogText(type || "unknown", 40)}.
+`);
+    }
+  }
+  callDownStreamHandler(client, method, msg) {
+    try {
+      client[method](msg);
+    } catch (err) {
+      process.stderr.write(`[DingTalk:${this.name}] ${method} failed: ${sanitizeLogText(String(err), 200)}
+`);
+    }
+  }
+  decodeDownStream(raw) {
+    if (typeof raw === "string") {
+      return { text: raw, bytes: Buffer2.byteLength(raw) };
+    }
+    if (Buffer2.isBuffer(raw)) {
+      return { text: raw.toString("utf8"), bytes: raw.length };
+    }
+    if (raw instanceof Uint8Array) {
+      return { text: Buffer2.from(raw).toString("utf8"), bytes: raw.byteLength };
+    }
+    if (raw instanceof ArrayBuffer) {
+      return {
+        text: Buffer2.from(raw).toString("utf8"),
+        bytes: raw.byteLength
+      };
+    }
+    return { text: String(raw), bytes: Buffer2.byteLength(String(raw)) };
   }
   async connect() {
     this.client.registerCallbackListener(TOPIC_ROBOT, (msg) => {
@@ -4524,6 +4607,14 @@ var DingtalkChannel = class extends ChannelBase {
     process.stderr.write(`[DingTalk:${this.name}] Connected via stream.
 `);
   }
+  /**
+   * A group message with no conversationId can't be routed to a stable shared
+   * session (chatId would fall back to the expiring sessionWebhook), so it is
+   * dropped on ingestion. Exposed for testing the drop rule.
+   */
+  static isUnroutableGroupMessage(isGroup, conversationId) {
+    return isGroup && !conversationId;
+  }
   async sendMessage(chatId, text) {
     const webhook = this.webhooks.get(chatId);
     if (!webhook) {
@@ -4798,7 +4889,9 @@ var DingtalkChannel = class extends ChannelBase {
   onMessage(downstream) {
     try {
       const data = typeof downstream.data === "string" ? JSON.parse(downstream.data) : downstream.data;
-      const msgId = data.msgId || downstream.headers.messageId;
+      const dataMsgId = typeof data.msgId === "string" ? data.msgId : void 0;
+      const headerMsgId = typeof downstream.headers.messageId === "string" ? downstream.headers.messageId : void 0;
+      const msgId = dataMsgId || headerMsgId;
       if (msgId && this.seenMessages.has(msgId)) {
         return;
       }
@@ -4806,17 +4899,27 @@ var DingtalkChannel = class extends ChannelBase {
         this.seenMessages.set(msgId, Date.now());
       }
       const isGroup = data.conversationType === "2";
-      const sessionWebhook = data.sessionWebhook;
-      const conversationId = data.conversationId;
+      const sessionWebhook = typeof data.sessionWebhook === "string" ? data.sessionWebhook : void 0;
+      const conversationId = typeof data.conversationId === "string" ? data.conversationId : void 0;
+      const isMentioned = Boolean(data.isInAtList);
+      const senderNick = typeof data.senderNick === "string" ? data.senderNick : void 0;
+      const senderStaffId = typeof data.senderStaffId === "string" ? data.senderStaffId : void 0;
+      const senderIdValue = typeof data.senderId === "string" ? data.senderId : void 0;
       if (!sessionWebhook) {
         process.stderr.write(`[DingTalk:${this.name}] No sessionWebhook in message, skipping.
+`);
+        return;
+      }
+      if (_DingtalkChannel.isUnroutableGroupMessage(isGroup, conversationId)) {
+        process.stderr.write(`[DingTalk:${this.name}] Group message has no conversationId, skipping (msgId=${msgId || "unknown"}, sender=${sanitizeSenderName(senderNick || senderStaffId || "unknown")})
 `);
         return;
       }
       if (conversationId) {
         this.webhooks.set(conversationId, sessionWebhook);
       }
-      const isMentioned = Boolean(data.isInAtList);
+      process.stderr.write(`[DingTalk:${this.name}] message msgId=${sanitizeLogText(msgId || "unknown", 80)} conversationId=${sanitizeLogText(conversationId || "", 120)} isGroup=${isGroup} isMentioned=${isMentioned} senderNick=${sanitizeLogText(senderNick || "", 80)} senderStaffId=${sanitizeLogText(senderStaffId || "", 80)} senderId=${sanitizeLogText(senderIdValue || "", 80)}
+`);
       const content = this.extractContent(data);
       let cleanText = content.text;
       if (isMentioned) {
@@ -4825,10 +4928,12 @@ var DingtalkChannel = class extends ChannelBase {
       const quoted = this.extractQuotedContext(data);
       const chatId = conversationId || sessionWebhook;
       const envelopeText = isMentioned ? cleanText : cleanText || content.text;
+      const senderId = senderStaffId || senderIdValue || "";
+      const senderName = senderNick || senderId || "Unknown";
       const envelope = {
         channelName: this.name,
-        senderId: data.senderStaffId || data.senderId || "",
-        senderName: data.senderNick || "Unknown",
+        senderId,
+        senderName,
         chatId,
         text: envelopeText,
         isGroup,

package/chunks/{dist-QHJRBCMP.js → dist-UKPWQJCL.js}

@@ -2,7 +2,7 @@
 "use strict";
 import {
   ChannelBase
-} from "./chunk-JXQ23SNT.js";
+} from "./chunk-2JKEQWDZ.js";
 import "./chunk-UFC57OYT.js";
 import "./chunk-K5PGHDBN.js";
 import {
@@ -9658,6 +9658,21 @@ function splitHtmlForTelegram(text) {
 __name(splitHtmlForTelegram, "splitHtmlForTelegram");
 
 // packages/channels/telegram/dist/TelegramAdapter.js
+var TELEGRAM_BOT_COMMANDS = [
+  { command: "start", description: "Show quick-start help" },
+  { command: "help", description: "Show available commands" },
+  { command: "new", description: "Start a fresh conversation" },
+  { command: "cancel", description: "Cancel the running request" },
+  { command: "status", description: "Show session info" }
+];
+var TELEGRAM_START_MESSAGE = [
+  "Qwen Code Telegram bot",
+  "",
+  "Send any message to chat with Qwen Code.",
+  "Use /new to start a fresh conversation.",
+  "Use /cancel to stop a running request.",
+  "Use /help to see available commands."
+].join("\n");
 var TelegramChannel = class extends ChannelBase {
   static {
     __name(this, "TelegramChannel");
@@ -9673,6 +9688,11 @@ var TelegramChannel = class extends ChannelBase {
       }
     } : void 0;
     this.bot = new import_grammy.Bot(config.token, botConfig);
+    this.registerCommand("start", async (envelope) => {
+      await this.sendMessage(envelope.chatId, TELEGRAM_START_MESSAGE);
+      return true;
+    });
+    this.registerCancelCommand();
   }
   getFileUrl(filePath) {
     return `https://api.telegram.org/file/bot${this.bot.token}/${filePath}`;
@@ -9681,6 +9701,7 @@ var TelegramChannel = class extends ChannelBase {
     const botInfo = await this.bot.api.getMe();
     this.botId = botInfo.id;
     this.botUsername = botInfo.username ?? "";
+    await this.registerBotCommands();
     this.bot.on("message:text", async (ctx) => {
       const msg = ctx.message;
       const text = msg.text;
@@ -9803,6 +9824,14 @@ var TelegramChannel = class extends ChannelBase {
     process.once("SIGINT", () => this.bot.stop());
     process.once("SIGTERM", () => this.bot.stop());
   }
+  async registerBotCommands() {
+    try {
+      await this.bot.api.setMyCommands(TELEGRAM_BOT_COMMANDS);
+    } catch (err) {
+      process.stderr.write(`[Telegram:${this.name}] Failed to register bot commands: ${err instanceof Error ? err.message : err}
+`);
+    }
+  }
   /** Per-chat typing interval — repeats every 4s since Telegram expires it after 5s. */
   typingIntervals = /* @__PURE__ */ new Map();
   onPromptStart(chatId) {
@@ -9843,7 +9872,20 @@ var TelegramChannel = class extends ChannelBase {
   }
   buildEnvelope(msg, text, entities) {
     const isGroup = msg.chat.type === "group" || msg.chat.type === "supergroup";
-    const isMentioned = entities?.some((e) => e.type === "mention" && this.botUsername && text.slice(e.offset, e.offset + e.length).toLowerCase() === `@${this.botUsername.toLowerCase()}`) ?? false;
+    const isMentioned = entities?.some((e) => {
+      if (!this.botUsername)
+        return false;
+      const value = text.slice(e.offset, e.offset + e.length).toLowerCase();
+      const username = this.botUsername.toLowerCase();
+      if (e.type === "mention") {
+        return value === `@${username}`;
+      }
+      if (e.type === "bot_command") {
+        const mentionIndex = value.indexOf("@");
+        return mentionIndex !== -1 && value.slice(mentionIndex + 1) === username;
+      }
+      return false;
+    }) ?? false;
     const isReplyToBot = msg.reply_to_message?.from?.id === this.botId;
     let cleanText = text;
     if (isMentioned && this.botUsername) {

package/chunks/{dist-QFFZWACU.js → dist-VD7HXTML.js}

@@ -3,8 +3,11 @@
 import {
   ChannelBase,
   SessionRouter,
-  getGlobalQwenDir
-} from "./chunk-JXQ23SNT.js";
+  getGlobalQwenDir,
+  sanitizeLogText,
+  sanitizePromptText,
+  sanitizeSenderName
+} from "./chunk-2JKEQWDZ.js";
 import "./chunk-UFC57OYT.js";
 import "./chunk-K5PGHDBN.js";
 import {
@@ -1483,7 +1486,11 @@ var QQChannel = class extends ChannelBase {
     const sessionsPath = join2(stateDir, `${safeName}-sessions.json`);
     const hasExternalRouter = Boolean(options?.router);
     const router = options?.router ?? new SessionRouter(bridge, config.cwd, config.sessionScope, sessionsPath);
-    super(name, config, bridge, { ...options, router });
+    super(name, config, bridge, {
+      ...options,
+      router,
+      registerBridgeEvents: options?.registerBridgeEvents ?? !hasExternalRouter
+    });
     this.qqConfig = config;
     this.qqStatePath = join2(stateDir, `${safeName}-state.json`);
     this.globalSessionsPath = hasExternalRouter ? join2(stateDir, "sessions.json") : sessionsPath;
@@ -1696,15 +1703,16 @@ var QQChannel = class extends ChannelBase {
     }
   }
   /**
-   * Workaround for SessionRouter.restoreSessions() storing undefined sessionIds
-   * when ACP bridge.loadSession() fails to return a session_id.
+   * Compatibility repair for legacy restored session state where older router
+   * code could keep an empty session id after bridge.loadSession() failed to
+   * return a session_id.
    *
    * **Fragile**: accesses SessionRouter's private `toSession`/`toTarget`/`toCwd`
    * maps via type coercion. If SessionRouter internals change, this breaks
    * silently. The only signal will be cross-server conversations failing to
    * restore after daemon restart — no crash, no log.
    *
-   * If upstream SessionRouter adds a public fix for this, remove this method.
+   * Keep this while old persisted files may still exist.
    */
   fixRestoredSessions() {
     try {
@@ -2095,11 +2103,13 @@ var QQChannel = class extends ChannelBase {
     if (!cleanText)
       return;
     const isSlash = cleanText.startsWith("/");
+    const safeName = sanitizeSenderName(senderName);
     if (isSlash) {
-      process.stderr.write(`[QQ:${this.name}] Slash cmd from ${senderName} (${chatId}): ${cleanText}
+      const loggedCmd = sanitizeLogText(cleanText, 80);
+      process.stderr.write(`[QQ:${this.name}] Slash cmd from ${safeName} (${chatId}): ${loggedCmd}
 `);
     }
-    const text = isSlash ? cleanText : `[${senderName}]: ${cleanText}`;
+    const text = isSlash ? cleanText : `[${safeName}]: ${sanitizePromptText(cleanText)}`;
     this.handleInbound({
       channelName: this.name,
       senderId: event.author.user_openid || event.author.id,
@@ -2111,7 +2121,8 @@ var QQChannel = class extends ChannelBase {
       isMentioned: true,
       // QQ Bot only receives group messages when explicitly @mentioned, so
       // every group message is semantically a reply to the bot.
-      isReplyToBot: true
+      isReplyToBot: true,
+      ...isSlash ? {} : { alreadyPrefixed: true }
     }).catch((e) => process.stderr.write(`[QQ:${this.name}] Group handler error: ${e}
 `));
   }

package/chunks/{earlyInputCapture-X6KMCSHD.js → earlyInputCapture-FFFEC6P4.js}

@@ -7,48 +7,49 @@ import {
   startEarlyInputCapture,
   stopAndGetCapturedInput,
   stopEarlyInputCapture
-} from "./chunk-X6EDWN44.js";
-import "./chunk-PXFFKNCO.js";
+} from "./chunk-LWGLBVWA.js";
+import "./chunk-35FH347N.js";
 import "./chunk-K5PGHDBN.js";
 import "./chunk-5P5XGNYH.js";
 import "./chunk-SKAZWEV5.js";
-import "./chunk-TXVGVZYR.js";
-import "./chunk-XU5P23GN.js";
-import "./chunk-2BIF2NVV.js";
-import "./chunk-BG4BIP7F.js";
-import "./chunk-ZD3NW5KL.js";
+import "./chunk-ESVSWG6Z.js";
+import "./chunk-CA4ML3VH.js";
+import "./chunk-HWG4XLD7.js";
+import "./chunk-YCRTJYSQ.js";
+import "./chunk-FZY7NH37.js";
 import "./chunk-2MPVVENX.js";
 import "./chunk-ZTQ26VBE.js";
-import "./chunk-GZCJS5WH.js";
+import "./chunk-SJBIFVD2.js";
 import "./chunk-MLZQVCF3.js";
 import "./chunk-LQ7TMOCE.js";
 import "./chunk-LD2XBG6Z.js";
-import "./chunk-OTBK43JR.js";
-import "./chunk-HGNSRCRB.js";
-import "./chunk-EEEZIVFJ.js";
-import "./chunk-PRYMDRBV.js";
-import "./chunk-WA5OJGFL.js";
+import "./chunk-B236XPGF.js";
+import "./chunk-YXK4GPYO.js";
+import "./chunk-TOAUDIS7.js";
+import "./chunk-NPQWQYU6.js";
+import "./chunk-B5MPZI4K.js";
 import "./chunk-3PJXIDKI.js";
 import "./chunk-UWCTAVOD.js";
 import "./chunk-OFEVLU4C.js";
 import "./chunk-OMX7CUOE.js";
-import "./chunk-BNXANYLH.js";
-import "./chunk-T2VDEFUU.js";
-import "./chunk-OIC6S73E.js";
-import "./chunk-TOEGRAVX.js";
-import "./chunk-BGUDAULQ.js";
-import "./chunk-EW6C27XX.js";
+import "./chunk-MOUXUCXQ.js";
+import "./chunk-BZHLWC6T.js";
+import "./chunk-E5I6YSNO.js";
+import "./chunk-JV7A66DR.js";
+import "./chunk-LXGWLOCM.js";
+import "./chunk-QHHNFG22.js";
 import "./chunk-22IFUCVR.js";
-import "./chunk-64WXLC72.js";
-import "./chunk-3UALQ56H.js";
-import "./chunk-F6XNTYNE.js";
-import "./chunk-CGEGHF2C.js";
+import "./chunk-T42ACHFI.js";
+import "./chunk-YTFBURQD.js";
+import "./chunk-YPCPZSZB.js";
 import "./chunk-IRJWHZWU.js";
 import "./chunk-SYCJMSIJ.js";
 import "./chunk-55ZMG67I.js";
 import "./chunk-H6BD2ELD.js";
 import "./chunk-5IFG2VC4.js";
-import "./chunk-C4K3FEQ2.js";
+import "./chunk-64WXLC72.js";
+import "./chunk-FQDMX5IL.js";
+import "./chunk-AVQDCKNF.js";
 import "./chunk-ZERZSAZL.js";
 import "./chunk-QN5NZ3UQ.js";
 import "./chunk-BR4QREVK.js";

package/chunks/{edit-7J6WXARF.js → edit-32ILSGZY.js}

@@ -1,5 +1,8 @@
 // Force strict mode and setup for ESM
 "use strict";
+import {
+  checkTeamMemorySecrets
+} from "./chunk-XKSCTXPK.js";
 import {
   CommitAttributionService,
   DEFAULT_DIFF_OPTIONS,
@@ -11,25 +14,25 @@ import {
   getDiffStat,
   needsUtf8Bom,
   safeLiteralReplace
-} from "./chunk-PXFFKNCO.js";
+} from "./chunk-35FH347N.js";
 import "./chunk-K5PGHDBN.js";
 import "./chunk-5P5XGNYH.js";
 import "./chunk-SKAZWEV5.js";
-import "./chunk-TXVGVZYR.js";
-import "./chunk-XU5P23GN.js";
-import "./chunk-2BIF2NVV.js";
-import "./chunk-BG4BIP7F.js";
-import "./chunk-ZD3NW5KL.js";
+import "./chunk-ESVSWG6Z.js";
+import "./chunk-CA4ML3VH.js";
+import "./chunk-HWG4XLD7.js";
+import "./chunk-YCRTJYSQ.js";
+import "./chunk-FZY7NH37.js";
 import "./chunk-2MPVVENX.js";
 import "./chunk-ZTQ26VBE.js";
-import "./chunk-GZCJS5WH.js";
+import "./chunk-SJBIFVD2.js";
 import "./chunk-MLZQVCF3.js";
 import "./chunk-LQ7TMOCE.js";
 import "./chunk-LD2XBG6Z.js";
-import "./chunk-OTBK43JR.js";
-import "./chunk-HGNSRCRB.js";
-import "./chunk-EEEZIVFJ.js";
-import "./chunk-PRYMDRBV.js";
+import "./chunk-B236XPGF.js";
+import "./chunk-YXK4GPYO.js";
+import "./chunk-TOAUDIS7.js";
+import "./chunk-NPQWQYU6.js";
 import {
   FileOperationEvent,
   ReadFileTool,
@@ -37,40 +40,43 @@ import {
   getLanguageFromFilePath,
   getSpecificMimeType,
   logFileOperation
-} from "./chunk-WA5OJGFL.js";
+} from "./chunk-B5MPZI4K.js";
 import "./chunk-3PJXIDKI.js";
 import "./chunk-UWCTAVOD.js";
 import "./chunk-OFEVLU4C.js";
 import "./chunk-OMX7CUOE.js";
 import {
-  isAnyAutoMemPath
-} from "./chunk-BNXANYLH.js";
-import "./chunk-T2VDEFUU.js";
-import "./chunk-OIC6S73E.js";
+  isAnyAutoMemPath,
+  isTeamAutoMemPath
+} from "./chunk-MOUXUCXQ.js";
+import "./chunk-BZHLWC6T.js";
+import "./chunk-E5I6YSNO.js";
 import {
   BaseDeclarativeTool,
   ToolDisplayNames,
   ToolNames
-} from "./chunk-TOEGRAVX.js";
-import "./chunk-BGUDAULQ.js";
-import "./chunk-EW6C27XX.js";
+} from "./chunk-JV7A66DR.js";
+import "./chunk-LXGWLOCM.js";
+import "./chunk-QHHNFG22.js";
 import "./chunk-22IFUCVR.js";
-import "./chunk-64WXLC72.js";
-import "./chunk-3UALQ56H.js";
-import "./chunk-F6XNTYNE.js";
-import "./chunk-CGEGHF2C.js";
+import "./chunk-T42ACHFI.js";
+import "./chunk-YTFBURQD.js";
+import "./chunk-YPCPZSZB.js";
 import "./chunk-IRJWHZWU.js";
 import "./chunk-SYCJMSIJ.js";
 import "./chunk-55ZMG67I.js";
 import "./chunk-H6BD2ELD.js";
 import "./chunk-5IFG2VC4.js";
+import "./chunk-64WXLC72.js";
+import "./chunk-FQDMX5IL.js";
 import {
   createDebugLogger,
+  getErrorMessage,
   isNodeError,
   makeRelative,
   shortenPath,
   unescapePath
-} from "./chunk-C4K3FEQ2.js";
+} from "./chunk-AVQDCKNF.js";
 import "./chunk-ZERZSAZL.js";
 import "./chunk-QN5NZ3UQ.js";
 import "./chunk-BR4QREVK.js";
@@ -565,6 +571,26 @@ var EditToolInvocation = class {
         type: "edit_no_change" /* EDIT_NO_CHANGE */
       };
     }
+    if (!error) {
+      const teamMemoryError = checkTeamMemorySecrets(
+        params.file_path,
+        newContent,
+        this.config.getProjectRoot()
+      );
+      if (teamMemoryError) {
+        const preExisting = currentContent !== null && checkTeamMemorySecrets(
+          params.file_path,
+          currentContent,
+          this.config.getProjectRoot()
+        ) !== null;
+        const message = preExisting ? `${teamMemoryError} Note: the secret already exists in the current file content, so removing it from your edit alone is not enough \u2014 delete the committed secret from the file.` : teamMemoryError;
+        error = {
+          display: message,
+          raw: message,
+          type: "invalid_tool_params" /* INVALID_TOOL_PARAMS */
+        };
+      }
+    }
     return {
       currentContent,
       newContent,
@@ -577,12 +603,20 @@ var EditToolInvocation = class {
     };
   }
   /**
-   * Edit operations always need user confirmation, except for managed
-   * auto-memory files which are written autonomously by the model.
+   * Edit operations always need user confirmation, except for the private
+   * managed auto-memory files (user/project) which are written autonomously.
+   * Team memory is shared and committed to the repo, so it is NOT auto-allowed
+   * like the private tiers — edits default to 'ask'. (In AUTO_EDIT/YOLO the user
+   * has globally opted into auto-approval; team writes still surface in the git
+   * diff for review before commit.)
    */
   async getDefaultPermission() {
     const projectRoot = this.config.getProjectRoot();
-    if (isAnyAutoMemPath(path.resolve(this.params.file_path), projectRoot)) {
+    const filePath = path.resolve(this.params.file_path);
+    if (isTeamAutoMemPath(filePath, projectRoot)) {
+      return "ask";
+    }
+    if (isAnyAutoMemPath(filePath, projectRoot)) {
       return "allow";
     }
     return "ask";
@@ -598,7 +632,7 @@ var EditToolInvocation = class {
       if (abortSignal.aborted) {
         throw error;
       }
-      const errorMsg = error instanceof Error ? error.message : String(error);
+      const errorMsg = getErrorMessage(error);
       throw new Error(`Error preparing edit: ${errorMsg}`);
     }
     if (editData.error) {
@@ -655,7 +689,7 @@ var EditToolInvocation = class {
       if (signal.aborted) {
         throw error;
       }
-      const errorMsg = error instanceof Error ? error.message : String(error);
+      const errorMsg = getErrorMessage(error);
       return {
         llmContent: `Error preparing edit: ${errorMsg}`,
         returnDisplay: `Error preparing edit: ${errorMsg}`,
@@ -809,7 +843,7 @@ ${snippetResult.content}`;
         returnDisplay: displayResult
       };
     } catch (error) {
-      const errorMsg = error instanceof Error ? error.message : String(error);
+      const errorMsg = getErrorMessage(error);
       return {
         llmContent: `Error executing edit: ${errorMsg}`,
         returnDisplay: `Error writing file: ${errorMsg}`,
@@ -889,6 +923,14 @@ Expectation for required parameters:
     if (!path.isAbsolute(params.file_path)) {
       return `File path must be absolute: ${params.file_path}`;
     }
+    const teamMemoryError = checkTeamMemorySecrets(
+      params.file_path,
+      params.new_string ?? "",
+      this.config.getProjectRoot()
+    );
+    if (teamMemoryError) {
+      return teamMemoryError;
+    }
     return null;
   }
   createInvocation(params) {