@qwen-code/qwen-code 0.21.4 → 0.21.5-nightly.20260805.32e274157

package/chunks/{chunk-B3EBXISV.js → chunk-5DVP76WL.js}

@@ -17,7 +17,7 @@ import {
 } from "./chunk-OCPBI7J5.js";
 import {
   defaultSpawnChannelFactory
-} from "./chunk-UWSXFI6E.js";
+} from "./chunk-2U7GPHA6.js";
 import {
   BridgeChannelClosedError,
   BridgeTimeoutError,
@@ -26,7 +26,7 @@ import {
   STATUS_SCHEMA_VERSION,
   createIdleWorkspaceExtensionsStatus,
   createIdleWorkspaceHooksStatus
-} from "./chunk-PDDYAXL2.js";
+} from "./chunk-WIRAPZ62.js";
 import {
   CHANNEL_STARTUP_PROFILE_META_KEY,
   CHANNEL_STARTUP_PROFILE_VERSION,
@@ -74,6 +74,11 @@ import {
   MAX_SUB_SESSION_NAME_CHARS,
   MAX_SUB_SESSION_PROMPT_CHARS
 } from "./chunk-BK2UNYWD.js";
+import {
+  EXTERNAL_TOOL_GUARD_READY_META_KEY,
+  EXTERNAL_TOOL_GUARD_REQUIRED_VALUE,
+  isValidExternalToolGuardDenialReason
+} from "./chunk-BKHCW2BI.js";
 import {
   ClientSideConnection,
   PROTOCOL_VERSION,
@@ -90,16 +95,16 @@ import {
   metadataBudgetBytes,
   normalizeSnapshotPayload,
   stableSessionArtifactId
-} from "./chunk-E2SYUEIA.js";
+} from "./chunk-5OAMVWFL.js";
 import {
   DAEMON_TRACEPARENT_META_KEY,
   DAEMON_TRACESTATE_META_KEY
-} from "./chunk-RPYYTL7E.js";
+} from "./chunk-MGSSJT27.js";
 import {
   INVOCATION_CONTEXT_META_KEY,
   PRIVATE_ACP_CAPABILITY_ENV,
   PRIVATE_PARENT_CAPABILITY_META_KEY
-} from "./chunk-JDJ7SC4E.js";
+} from "./chunk-NMBDPO63.js";
 import {
   init_esbuild_shims
 } from "./chunk-5O2XNYP6.js";
@@ -1582,6 +1587,25 @@ function isRecord2(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 __name(isRecord2, "isRecord");
+function normalizeExternalToolGuardResult(value) {
+  if (!isRecord2(value)) {
+    throw new Error("External tool guard handler returned an invalid result.");
+  }
+  const keys = Object.keys(value);
+  if (value["allowed"] === true && keys.length === 1 && keys[0] === "allowed") {
+    return { allowed: true };
+  }
+  if (value["allowed"] !== false || keys.some((key) => key !== "allowed" && key !== "reason")) {
+    throw new Error("External tool guard handler returned an invalid result.");
+  }
+  if (!Object.hasOwn(value, "reason")) return { allowed: false };
+  const reason = value["reason"];
+  if (!isValidExternalToolGuardDenialReason(reason)) {
+    throw new Error("External tool guard handler returned an invalid result.");
+  }
+  return { allowed: false, reason };
+}
+__name(normalizeExternalToolGuardResult, "normalizeExternalToolGuardResult");
 function isBoundedChannelDeliveryString(value) {
   return typeof value === "string" && value.trim().length > 0 && value.length <= MAX_CHANNEL_DELIVERY_FIELD_CHARS;
 }
@@ -1811,7 +1835,7 @@ function sliceLineRange(content, startLine, endLine) {
 }
 __name(sliceLineRange, "sliceLineRange");
 var BridgeClient = class {
-  constructor(resolveEntry, resolvePendingRestoreEvents, mediator, permissionTimeoutMs, maxPendingPerSession, fileSystem, onModelPromoted, onModePromoted, clientMcpSender, ownsSession = () => true, onTokenUsage, onCreateSubSession, onGenerationEvent, onWorkspaceGenerationEvent, onChannelDelivery, hasSessionSpawnInFlight = () => false) {
+  constructor(resolveEntry, resolvePendingRestoreEvents, mediator, permissionTimeoutMs, maxPendingPerSession, fileSystem, onModelPromoted, onModePromoted, clientMcpSender, ownsSession = () => true, onTokenUsage, onCreateSubSession, onGenerationEvent, onWorkspaceGenerationEvent, onChannelDelivery, hasSessionSpawnInFlight = () => false, externalToolGuard) {
     this.resolveEntry = resolveEntry;
     this.resolvePendingRestoreEvents = resolvePendingRestoreEvents;
     this.mediator = mediator;
@@ -1828,6 +1852,7 @@ var BridgeClient = class {
     this.onWorkspaceGenerationEvent = onWorkspaceGenerationEvent;
     this.onChannelDelivery = onChannelDelivery;
     this.hasSessionSpawnInFlight = hasSessionSpawnInFlight;
+    this.externalToolGuard = externalToolGuard;
   }
   static {
     __name(this, "BridgeClient");
@@ -2108,6 +2133,9 @@ var BridgeClient = class {
     if (method === SERVE_CONTROL_EXT_METHODS.channelDelivery) {
       return this.handleChannelDelivery(params);
     }
+    if (method === SERVE_CONTROL_EXT_METHODS.externalToolGuardPrepare) {
+      return this.handleExternalToolGuardPrepare(params);
+    }
     if (method === TODO_STOP_GUARD_CONTINUATION_CLAIM_METHOD) {
       return this.handleTodoStopGuardContinuationClaim(params);
     }
@@ -2149,6 +2177,52 @@ var BridgeClient = class {
     }
     return { messages, hasQueuedPrompt };
   }
+  async handleExternalToolGuardPrepare(params) {
+    if (!this.externalToolGuard) {
+      throw RequestError.methodNotFound(
+        SERVE_CONTROL_EXT_METHODS.externalToolGuardPrepare
+      );
+    }
+    const sessionId = params["sessionId"];
+    const promptId = params["promptId"];
+    const toolCallId = params["toolCallId"];
+    const toolName = params["toolName"];
+    const args = params["arguments"];
+    if (typeof sessionId !== "string" || sessionId.length === 0 || typeof promptId !== "string" || promptId.length === 0 || typeof toolCallId !== "string" || toolCallId.length === 0 || typeof toolName !== "string" || toolName.length === 0 || !isRecord2(args)) {
+      throw RequestError.invalidParams(
+        void 0,
+        "Invalid external tool guard request"
+      );
+    }
+    if (!this.ownsSession(sessionId)) {
+      throw RequestError.invalidParams(
+        void 0,
+        "External tool guard session is not owned by this connection"
+      );
+    }
+    const entry = this.resolveEntry(sessionId);
+    if (!entry || !entry.promptActive || entry.activePromptId !== promptId) {
+      throw RequestError.invalidParams(
+        void 0,
+        "External tool guard prompt is not the active prompt"
+      );
+    }
+    const decision = await this.externalToolGuard({
+      sessionId: entry.sessionId,
+      promptId: entry.activePromptId,
+      toolCallId,
+      toolName,
+      arguments: args
+    });
+    const currentEntry = this.resolveEntry(sessionId);
+    if (!this.ownsSession(sessionId) || currentEntry !== entry || !currentEntry.promptActive || currentEntry.activePromptId !== promptId) {
+      throw RequestError.invalidParams(
+        void 0,
+        "External tool guard prompt is no longer active"
+      );
+    }
+    return normalizeExternalToolGuardResult(decision);
+  }
   handleTodoStopGuardContinuationClaim(params) {
     const sessionId = typeof params["sessionId"] === "string" && params["sessionId"].length > 0 ? params["sessionId"] : void 0;
     if (!sessionId) return { claimed: false, hasQueuedPrompt: false };
@@ -6485,7 +6559,8 @@ function createAcpSessionBridge(opts) {
             }).catch(() => void 0);
           },
           opts.onChannelDelivery,
-          () => channelInfo?.sessionIds === sessionIds && channelInfo.sessionSpawnsInFlight > 0
+          () => channelInfo?.sessionIds === sessionIds && channelInfo.sessionSpawnsInFlight > 0,
+          opts.externalToolGuard
         );
         connection = new ClientSideConnection(() => client, channel.stream);
       } catch (error) {
@@ -6623,6 +6698,14 @@ function createAcpSessionBridge(opts) {
               initTimeoutMs,
               "initialize"
             );
+            if (opts.externalToolGuard) {
+              const guardAck = response._meta?.[EXTERNAL_TOOL_GUARD_READY_META_KEY];
+              if (guardAck !== EXTERNAL_TOOL_GUARD_REQUIRED_VALUE) {
+                throw new Error(
+                  `ACP child did not acknowledge the required external tool guard (received: ${JSON.stringify(guardAck)}).`
+                );
+              }
+            }
             try {
               const attributes = getChannelStartupProfileAttributes(
                 response,