@qwen-code/qwen-code 0.21.5 → 0.21.6-preview.0

package/chunks/external-tool-guard-provider-5HTGOPGU.js

@@ -0,0 +1,273 @@
+// Force strict mode and setup for ESM
+"use strict";
+import {
+  EXTERNAL_TOOL_GUARD_TOKEN_ENV,
+  containsUnsafeExternalToolGuardControlCharacter,
+  isValidExternalToolGuardDenialReason
+} from "./chunk-BKHCW2BI.js";
+import {
+  init_esbuild_shims
+} from "./chunk-5O2XNYP6.js";
+import {
+  __name
+} from "./chunk-J2S4EL5Y.js";
+
+// packages/cli/src/serve/external-tool-guard-provider.ts
+init_esbuild_shims();
+import { randomUUID } from "node:crypto";
+import * as http from "node:http";
+import * as https from "node:https";
+var EXTERNAL_TOOL_GUARD_PROTOCOL_VERSION = 1;
+var DEFAULT_EXTERNAL_TOOL_GUARD_TIMEOUT_MS = 3e3;
+var MIN_EXTERNAL_TOOL_GUARD_TIMEOUT_MS = 100;
+var MAX_EXTERNAL_TOOL_GUARD_TIMEOUT_MS = 3e4;
+var MAX_RESPONSE_BYTES = 64 * 1024;
+var MAX_REQUEST_BYTES = 1024 * 1024;
+function isRecord(value) {
+  return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+__name(isRecord, "isRecord");
+function hasExactKeys(value, required, optional = []) {
+  const keys = Object.keys(value);
+  const allowed = /* @__PURE__ */ new Set([...required, ...optional]);
+  return required.every((key) => Object.hasOwn(value, key)) && keys.every((key) => allowed.has(key));
+}
+__name(hasExactKeys, "hasExactKeys");
+function normalizeEndpoint(raw) {
+  if (typeof raw !== "string") {
+    throw new TypeError(
+      "Invalid external tool guard endpoint: expected an absolute loopback HTTP(S) origin."
+    );
+  }
+  let endpoint;
+  try {
+    endpoint = new URL(raw);
+  } catch {
+    throw new TypeError(
+      "Invalid external tool guard endpoint: expected an absolute loopback HTTP(S) origin."
+    );
+  }
+  const hostname = endpoint.hostname.toLowerCase();
+  if (endpoint.protocol !== "http:" && endpoint.protocol !== "https:" || hostname !== "127.0.0.1" && hostname !== "localhost" && hostname !== "::1" && hostname !== "[::1]" || endpoint.username !== "" || endpoint.password !== "" || endpoint.pathname !== "/" || endpoint.search !== "" || endpoint.hash !== "") {
+    throw new TypeError(
+      "Invalid external tool guard endpoint: expected an origin-only loopback HTTP(S) URL."
+    );
+  }
+  return endpoint;
+}
+__name(normalizeEndpoint, "normalizeEndpoint");
+function normalizeToken(raw) {
+  if (typeof raw !== "string" || containsUnsafeExternalToolGuardControlCharacter(raw)) {
+    throw new TypeError(
+      `Invalid ${EXTERNAL_TOOL_GUARD_TOKEN_ENV}: expected a non-blank token without control characters.`
+    );
+  }
+  const token = raw.trim();
+  if (token.length === 0 || token.length > 8192) {
+    throw new TypeError(
+      `Invalid ${EXTERNAL_TOOL_GUARD_TOKEN_ENV}: expected a non-blank token without control characters.`
+    );
+  }
+  return token;
+}
+__name(normalizeToken, "normalizeToken");
+function normalizeTimeout(timeoutMs) {
+  const value = timeoutMs ?? DEFAULT_EXTERNAL_TOOL_GUARD_TIMEOUT_MS;
+  if (typeof value !== "number" || !Number.isSafeInteger(value) || value < MIN_EXTERNAL_TOOL_GUARD_TIMEOUT_MS || value > MAX_EXTERNAL_TOOL_GUARD_TIMEOUT_MS) {
+    throw new TypeError(
+      `Invalid external tool guard timeout: expected an integer in [${MIN_EXTERNAL_TOOL_GUARD_TIMEOUT_MS}, ${MAX_EXTERNAL_TOOL_GUARD_TIMEOUT_MS}] ms.`
+    );
+  }
+  return value;
+}
+__name(normalizeTimeout, "normalizeTimeout");
+function validateHandshakeResponse(value, nonce) {
+  if (!isRecord(value) || !hasExactKeys(value, ["protocolVersion", "nonce", "capabilities"]) || value["protocolVersion"] !== EXTERNAL_TOOL_GUARD_PROTOCOL_VERSION || value["nonce"] !== nonce || !isRecord(value["capabilities"]) || !hasExactKeys(value["capabilities"], ["prepare"]) || value["capabilities"]["prepare"] !== true) {
+    throw new Error("External tool guard handshake response is incompatible.");
+  }
+}
+__name(validateHandshakeResponse, "validateHandshakeResponse");
+function validatePrepareResponse(value, requestId) {
+  if (!isRecord(value) || !hasExactKeys(
+    value,
+    ["protocolVersion", "requestId", "allowed"],
+    ["reason"]
+  ) || value["protocolVersion"] !== EXTERNAL_TOOL_GUARD_PROTOCOL_VERSION || value["requestId"] !== requestId || typeof value["allowed"] !== "boolean") {
+    throw new Error("External tool guard prepare response is invalid.");
+  }
+  if (value["allowed"]) {
+    if (Object.hasOwn(value, "reason")) {
+      throw new Error("External tool guard allow response contains a reason.");
+    }
+    return { allowed: true };
+  }
+  if (!Object.hasOwn(value, "reason")) return { allowed: false };
+  const reason = value["reason"];
+  if (!isValidExternalToolGuardDenialReason(reason)) {
+    throw new Error(
+      "External tool guard denial response contains an unsafe reason."
+    );
+  }
+  return { allowed: false, reason };
+}
+__name(validatePrepareResponse, "validatePrepareResponse");
+var RequiredExternalToolGuard = class {
+  static {
+    __name(this, "RequiredExternalToolGuard");
+  }
+  endpoint;
+  token;
+  timeoutMs;
+  initialized = false;
+  constructor(options) {
+    this.endpoint = normalizeEndpoint(options.endpoint);
+    this.token = normalizeToken(options.token);
+    this.timeoutMs = normalizeTimeout(options.timeoutMs);
+  }
+  async initialize() {
+    const nonce = randomUUID();
+    const response = await this.request("/v1/handshake", {
+      protocolVersion: EXTERNAL_TOOL_GUARD_PROTOCOL_VERSION,
+      nonce,
+      client: "qwen-code"
+    });
+    validateHandshakeResponse(response, nonce);
+    this.initialized = true;
+  }
+  prepare = /* @__PURE__ */ __name(async (request) => {
+    if (!this.initialized) {
+      throw new Error("External tool guard has not completed its handshake.");
+    }
+    const requestId = randomUUID();
+    const response = await this.request("/v1/prepare", {
+      protocolVersion: EXTERNAL_TOOL_GUARD_PROTOCOL_VERSION,
+      requestId,
+      sessionId: request.sessionId,
+      promptId: request.promptId,
+      toolCallId: request.toolCallId,
+      toolName: request.toolName,
+      arguments: request.arguments
+    });
+    return validatePrepareResponse(response, requestId);
+  }, "prepare");
+  request(pathname, value) {
+    let body;
+    try {
+      body = Buffer.from(JSON.stringify(value), "utf8");
+    } catch {
+      return Promise.reject(
+        new Error("External tool guard request is not JSON serializable.")
+      );
+    }
+    if (body.byteLength > MAX_REQUEST_BYTES) {
+      return Promise.reject(
+        new Error("External tool guard request exceeds the size limit.")
+      );
+    }
+    const transport = this.endpoint.protocol === "https:" ? https : http;
+    return new Promise((resolve, reject) => {
+      let settled = false;
+      const finish = /* @__PURE__ */ __name((error, result) => {
+        if (settled) return;
+        settled = true;
+        clearTimeout(timer);
+        if (error) reject(error);
+        else resolve(result);
+      }, "finish");
+      const hostname = this.endpoint.hostname;
+      const localhost = hostname.toLowerCase() === "localhost";
+      const request = transport.request(
+        {
+          protocol: this.endpoint.protocol,
+          hostname: localhost ? "127.0.0.1" : hostname.startsWith("[") && hostname.endsWith("]") ? hostname.slice(1, -1) : hostname,
+          port: this.endpoint.port || void 0,
+          // A security boundary must not inherit a process-global Agent that
+          // an embedding or dependency could have replaced with proxy logic.
+          agent: false,
+          ...localhost && this.endpoint.protocol === "https:" ? { servername: "localhost" } : {},
+          method: "POST",
+          path: pathname,
+          headers: {
+            authorization: `Bearer ${this.token}`,
+            "content-type": "application/json",
+            accept: "application/json",
+            host: this.endpoint.host,
+            "content-length": String(body.byteLength)
+          }
+        },
+        (response) => {
+          const chunks = [];
+          let received = 0;
+          response.on("data", (chunk) => {
+            const bytes = Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk, "utf8");
+            received += bytes.byteLength;
+            if (received > MAX_RESPONSE_BYTES) {
+              finish(
+                new Error(
+                  "External tool guard response exceeds the size limit."
+                )
+              );
+              response.destroy();
+              return;
+            }
+            chunks.push(bytes);
+          });
+          response.on("end", () => {
+            if (response.statusCode !== 200) {
+              finish(
+                new Error(
+                  `External tool guard returned HTTP ${response.statusCode ?? "unknown"}.`
+                )
+              );
+              return;
+            }
+            const contentType = response.headers["content-type"];
+            if (typeof contentType !== "string" || !/^application\/json(?:\s*;|$)/iu.test(contentType)) {
+              finish(
+                new Error(
+                  "External tool guard returned a non-JSON content type."
+                )
+              );
+              return;
+            }
+            try {
+              finish(
+                void 0,
+                JSON.parse(Buffer.concat(chunks).toString("utf8"))
+              );
+            } catch {
+              finish(new Error("External tool guard returned malformed JSON."));
+            }
+          });
+          response.on("error", () => {
+            finish(new Error("External tool guard response failed."));
+          });
+          response.on("aborted", () => {
+            finish(new Error("External tool guard response was aborted."));
+          });
+        }
+      );
+      const timer = setTimeout(() => {
+        request.destroy();
+        finish(new Error("External tool guard request timed out."));
+      }, this.timeoutMs);
+      timer.unref();
+      request.on("error", () => {
+        finish(new Error("External tool guard request failed."));
+      });
+      request.end(body);
+    });
+  }
+};
+export {
+  DEFAULT_EXTERNAL_TOOL_GUARD_TIMEOUT_MS,
+  EXTERNAL_TOOL_GUARD_PROTOCOL_VERSION,
+  MAX_EXTERNAL_TOOL_GUARD_TIMEOUT_MS,
+  MIN_EXTERNAL_TOOL_GUARD_TIMEOUT_MS,
+  RequiredExternalToolGuard
+};
+/**
+ * @license
+ * Copyright 2025 Qwen Team
+ * SPDX-License-Identifier: Apache-2.0
+ */

package/chunks/{fast-path-YQJPIKMP.js → fast-path-JHQJSIMZ.js}

@@ -1,11 +1,11 @@
 // Force strict mode and setup for ESM
 "use strict";
-import {
-  getHeadlessYoloSafetyWarning
-} from "./chunk-6H67XLET.js";
 import {
   RUNTIME_STARTUP_CANCELLED_MESSAGE
 } from "./chunk-QUPXZXLV.js";
+import {
+  getHeadlessYoloSafetyWarning
+} from "./chunk-6H67XLET.js";
 import {
   isValidMemoryBudgetMb,
   memoryBudgetRangeError
@@ -341,7 +341,7 @@ async function maybeOpenWebShellBrowser(handle, open) {
   } catch {
     return;
   }
-  const { maybeOpenWebShellBrowser: openBrowser } = await import("./serve-ROEGMS3I.js");
+  const { maybeOpenWebShellBrowser: openBrowser } = await import("./serve-ZCCQ2G2L.js");
   await openBrowser(handle, true);
 }
 __name(maybeOpenWebShellBrowser, "maybeOpenWebShellBrowser");
@@ -403,7 +403,7 @@ async function tryRunServeFastPath(rawArgv = process.argv.slice(2)) {
     process.exit(1);
   }
   writeServeWarnings(parsed);
-  const { runQwenServe } = await import("./run-qwen-serve-K5W6MM6M.js");
+  const { runQwenServe } = await import("./run-qwen-serve-UYEMGPKA.js");
   let handle;
   try {
     handle = await runQwenServe(parsed.options, {

package/chunks/{gemini-FUF5SSPR.js → gemini-O44ETOKT.js}

@@ -2,10 +2,10 @@
 "use strict";
 import {
   registerMcpHotReload
-} from "./chunk-YMUZQ3MQ.js";
+} from "./chunk-RTWF7FF7.js";
 import {
   startEarlyStartupPrefetches
-} from "./chunk-4NEBUDWS.js";
+} from "./chunk-N47ZM2KI.js";
 import {
   ExtensionRefreshState,
   appEvents,
@@ -16,7 +16,7 @@ import {
   loadSandboxConfig,
   parseArguments,
   validateAuthMethod
-} from "./chunk-GP4IMBX5.js";
+} from "./chunk-XOZ2R6XI.js";
 import {
   CUSTOM_SANDBOX_IMAGE_ENV_VAR,
   HOST_UPDATE_RELAUNCH_ENV_VAR,
@@ -25,8 +25,8 @@ import {
   UPDATE_COMPLETE_EXIT_CODE,
   UPDATE_ON_EXIT_MESSAGE,
   UPDATE_RELAUNCH_EXIT_CODE
-} from "./chunk-D7QAZ5DF.js";
-import "./chunk-SVIEVA3L.js";
+} from "./chunk-CXYBX4AL.js";
+import "./chunk-WPKIU4PA.js";
 import {
   getHeadlessYoloSafetyWarning
 } from "./chunk-6H67XLET.js";
@@ -35,8 +35,8 @@ import {
   markAcpStartup,
   recordAcpConfigStartupEvent
 } from "./chunk-M744OFVE.js";
-import "./chunk-ZLGPHA34.js";
-import "./chunk-VJPF6GF2.js";
+import "./chunk-BU4BRCPX.js";
+import "./chunk-EHMN6SEG.js";
 import "./chunk-DYA25Y7U.js";
 import {
   sanitizeTerminalText
@@ -48,15 +48,15 @@ import "./chunk-RXFQM6FQ.js";
 import "./chunk-HGCQ5SE7.js";
 import "./chunk-JELIWHXD.js";
 import "./chunk-Z4X5MTRT.js";
-import "./chunk-VOA2UPZM.js";
-import "./chunk-3GOCVBYR.js";
+import "./chunk-CDHNGCJI.js";
+import "./chunk-C4GRKMUL.js";
 import "./chunk-57OAHC2Y.js";
 import "./chunk-GLWP3FDB.js";
 import "./chunk-XCGIMOLN.js";
-import "./chunk-WU5NBSLD.js";
-import "./chunk-LEZFUYPM.js";
-import "./chunk-DTAPI453.js";
+import "./chunk-6KEN3RIC.js";
+import "./chunk-7GYP5COR.js";
 import "./chunk-VWOVHOTT.js";
+import "./chunk-DTAPI453.js";
 import "./chunk-V6WHFGST.js";
 import "./chunk-UKZEXS6K.js";
 import "./chunk-6PLDPT2C.js";
@@ -65,12 +65,17 @@ import "./chunk-QONSRAEV.js";
 import "./chunk-24ER7UV4.js";
 import "./chunk-ALMR3E6Q.js";
 import "./chunk-BK2UNYWD.js";
+import {
+  EXTERNAL_TOOL_GUARD_REQUIRED_VALUE,
+  EXTERNAL_TOOL_GUARD_TOKEN_ENV,
+  PRIVATE_EXTERNAL_TOOL_GUARD_ENV
+} from "./chunk-BKHCW2BI.js";
 import "./chunk-M5GB774H.js";
 import "./chunk-XC2VAFVZ.js";
 import "./chunk-WUC6ZFXO.js";
 import "./chunk-DIEFUBV6.js";
 import "./chunk-UDXSXLER.js";
-import "./chunk-SJMCYCUQ.js";
+import "./chunk-T4XY5CT4.js";
 import {
   createMinimalSettings,
   getFlattenedSchema,
@@ -78,28 +83,28 @@ import {
   getUserSettingsDir,
   initializeLlmOutputLanguage,
   loadSettings
-} from "./chunk-RM3F46UT.js";
+} from "./chunk-YUVTZ4UH.js";
 import "./chunk-RKUWKYED.js";
 import "./chunk-GOXKNSDZ.js";
 import "./chunk-IDS7MSUP.js";
 import {
   initializeI18n,
   resolveLanguageSetting
-} from "./chunk-K64OI7S7.js";
+} from "./chunk-546CDN6D.js";
 import {
   SETTINGS_DIRECTORY_NAME,
   preResolveHomeEnvOverrides
-} from "./chunk-LYPXNRBX.js";
+} from "./chunk-IKXE3AAC.js";
 import {
   ENV_CORRUPTED_PATH,
   ENV_WAS_RECOVERED
 } from "./chunk-6PEXNQTX.js";
 import {
   getInstallationInfo
-} from "./chunk-CAX76R46.js";
-import "./chunk-IZ2CMEYO.js";
+} from "./chunk-ZQL73PPE.js";
+import "./chunk-NKST54XA.js";
 import "./chunk-VJNBRRZG.js";
-import "./chunk-B3EBIZUY.js";
+import "./chunk-72DZPDH4.js";
 import "./chunk-ALGGS7UH.js";
 import "./chunk-MR3PXB6E.js";
 import "./chunk-XFSFZCM5.js";
@@ -120,7 +125,7 @@ import {
   worktreeBranchForSlug,
   writeWorktreeSession,
   writeWorktreeSessionMarker
-} from "./chunk-YLL3SC5S.js";
+} from "./chunk-DOA7MCDY.js";
 import "./chunk-GOFAQQZA.js";
 import "./chunk-5M6IDOMF.js";
 import "./chunk-TWPJO254.js";
@@ -130,11 +135,11 @@ import "./chunk-I7JDGNG6.js";
 import "./chunk-A6SX5TAH.js";
 import "./chunk-33FNCQSY.js";
 import "./chunk-6PVPNMXU.js";
-import "./chunk-7W5KOBYU.js";
+import "./chunk-6D6V55ZQ.js";
 import "./chunk-IRH27ZC2.js";
 import "./chunk-QHWCP53L.js";
 import "./chunk-MOHAWIAW.js";
-import "./chunk-7MFQLOHZ.js";
+import "./chunk-3PRJYMXC.js";
 import "./chunk-O6GEWCJA.js";
 import "./chunk-T26EAKDL.js";
 import "./chunk-ZPJWUGCS.js";
@@ -151,7 +156,7 @@ import "./chunk-WVAESIM6.js";
 import "./chunk-K623ENWT.js";
 import "./chunk-AQ37AY7B.js";
 import "./chunk-432XCUHF.js";
-import "./chunk-4LLUH3A7.js";
+import "./chunk-HU5TUALO.js";
 import "./chunk-XC656O42.js";
 import "./chunk-NAVJD2PQ.js";
 import "./chunk-QYPT3QUD.js";
@@ -160,7 +165,7 @@ import "./chunk-DGEIYUC3.js";
 import "./chunk-MPHPFVKK.js";
 import "./chunk-GLNBDYUX.js";
 import "./chunk-DJ2GSRLV.js";
-import "./chunk-AEWOKOJY.js";
+import "./chunk-AU3XNTMV.js";
 import "./chunk-MGSSJT27.js";
 import "./chunk-2J3OJGTL.js";
 import "./chunk-P3QQPMQA.js";
@@ -171,12 +176,13 @@ import {
   PRIVATE_ACP_CAPABILITY_ENV,
   logUserPrompt,
   uiTelemetryService
-} from "./chunk-ZPGMDT4S.js";
+} from "./chunk-O656RSMC.js";
+import "./chunk-WOJZWRAZ.js";
 import "./chunk-VGC4I5JJ.js";
 import "./chunk-E4WHKETF.js";
 import "./chunk-ZPPP6VCL.js";
 import "./chunk-D7D7RXIJ.js";
-import "./chunk-XD2PNH3K.js";
+import "./chunk-P7LKADIT.js";
 import "./chunk-46UV252V.js";
 import "./chunk-ZBVS26BY.js";
 import "./chunk-BFHXDAR7.js";
@@ -199,11 +205,6 @@ import {
   handleUncaughtException,
   isExpectedPtyRaceError
 } from "./chunk-QL4TN4HS.js";
-import {
-  cleanupCheckpoints,
-  registerCleanup,
-  runExitCleanup
-} from "./chunk-LSYVASZS.js";
 import {
   finalizeStartupProfile,
   isStartupProfilerEnabled,
@@ -212,6 +213,11 @@ import {
   setInteractiveMode
 } from "./chunk-QSWDGAIC.js";
 import "./chunk-Q7YDKOGY.js";
+import {
+  cleanupCheckpoints,
+  registerCleanup,
+  runExitCleanup
+} from "./chunk-QG2ACINA.js";
 import {
   writeStderrLine,
   writeStderrLineSafe
@@ -2595,16 +2601,24 @@ async function main() {
   initializeWarningHandler();
   const privateAcpParentCapability = process.env[PRIVATE_ACP_CAPABILITY_ENV];
   delete process.env[PRIVATE_ACP_CAPABILITY_ENV];
+  const privateExternalToolGuard = process.env[PRIVATE_EXTERNAL_TOOL_GUARD_ENV] === EXTERNAL_TOOL_GUARD_REQUIRED_VALUE ? EXTERNAL_TOOL_GUARD_REQUIRED_VALUE : void 0;
+  delete process.env[PRIVATE_EXTERNAL_TOOL_GUARD_ENV];
   if (process.argv.includes("--bare")) {
     process.env[QWEN_CODE_SIMPLE_ENV_VAR] = "1";
   }
   preResolveHomeEnvOverrides();
   markAcpStartup("argsParseStart");
   let argv = await parseArguments();
+  delete process.env[EXTERNAL_TOOL_GUARD_TOKEN_ENV];
   markAcpStartup("argsParseEnd");
   profileCheckpoint("after_parse_arguments");
   const isAcpMode = argv.acp || argv.experimentalAcp;
-  const privateAcpChildEnv = isAcpMode && privateAcpParentCapability !== void 0 ? { [PRIVATE_ACP_CAPABILITY_ENV]: privateAcpParentCapability } : void 0;
+  const privateAcpChildEnv = isAcpMode && privateAcpParentCapability !== void 0 ? {
+    [PRIVATE_ACP_CAPABILITY_ENV]: privateAcpParentCapability,
+    ...privateExternalToolGuard ? {
+      [PRIVATE_EXTERNAL_TOOL_GUARD_ENV]: privateExternalToolGuard
+    } : {}
+  } : void 0;
   if ((argv.acp || argv.experimentalAcp) && process.env["QWEN_CODE_SCRUB_ELECTRON_RUN_AS_NODE"] === "1") {
     delete process.env["ELECTRON_RUN_AS_NODE"];
     if (process.env["QWEN_CODE_NO_RELAUNCH"] || process.env["SANDBOX"]) {
@@ -2636,7 +2650,7 @@ async function main() {
     await initializeI18n(
       resolveLanguageSetting(settings.merged.general?.language)
     );
-    const { handleList: handleListExtensions } = await import("./list-JA2EWRHJ.js");
+    const { handleList: handleListExtensions } = await import("./list-7XLPV5GC.js");
     await handleListExtensions();
     process.exit(0);
   }
@@ -2650,7 +2664,7 @@ async function main() {
   dns.setDefaultResultOrder(
     validateDnsResolutionOrder(settings.merged.advanced?.dnsResolutionOrder)
   );
-  const { themeManager, AUTO_THEME_NAME } = await import("./theme-manager-EKZBY34I.js");
+  const { themeManager, AUTO_THEME_NAME } = await import("./theme-manager-CMVKD2JH.js");
   themeManager.loadCustomThemes(settings.merged.ui?.customThemes);
   const configuredTheme = settings.merged.ui?.theme;
   if (configuredTheme && configuredTheme !== AUTO_THEME_NAME) {
@@ -2667,7 +2681,7 @@ async function main() {
       await initializeI18n(
         resolveLanguageSetting(settings.merged.general?.language)
       );
-      const { updateBeforeRelaunch } = await import("./update-relaunch-PJWXMPCR.js");
+      const { updateBeforeRelaunch } = await import("./update-relaunch-JBLI6LJF.js");
       const shouldRelaunch = await updateBeforeRelaunch(
         settings,
         updateProjectRoot,
@@ -2835,7 +2849,7 @@ ${finalArgs[promptIndex + 1]}`;
     );
     let resolvedSessionId;
     if (argv.resume === "") {
-      const { showResumeSessionPicker } = await import("./StandaloneSessionPicker-B6MI5NTB.js");
+      const { showResumeSessionPicker } = await import("./StandaloneSessionPicker-NGLY26I4.js");
       resolvedSessionId = await showResumeSessionPicker();
     } else if (!isValidSessionId(argv.resume)) {
       const sessionService = new SessionService(process.cwd());
@@ -2846,7 +2860,7 @@ ${finalArgs[promptIndex + 1]}`;
         writeStderrLine(
           `Multiple sessions found with title "${argv.resume}". Please select one:`
         );
-        const { showResumeSessionPicker } = await import("./StandaloneSessionPicker-B6MI5NTB.js");
+        const { showResumeSessionPicker } = await import("./StandaloneSessionPicker-NGLY26I4.js");
         resolvedSessionId = await showResumeSessionPicker(
           process.cwd(),
           matches
@@ -2968,7 +2982,7 @@ ${finalArgs[promptIndex + 1]}`;
       registerCleanup(installInteractiveSignalHandlers(wasRaw));
     }
     if (config.isInteractive() && !wasRaw && process.stdin.isTTY) {
-      const { startEarlyInputCapture, stopAndGetCapturedInput } = await import("./earlyInputCapture-CBIT2RGT.js");
+      const { startEarlyInputCapture, stopAndGetCapturedInput } = await import("./earlyInputCapture-WUNYYFOS.js");
       const { detectAndEnableKittyProtocol } = await import("./kittyProtocolDetector-BFLAKYXH.js");
       process.stdin.setRawMode(true);
       startEarlyInputCapture();
@@ -2981,11 +2995,11 @@ ${finalArgs[promptIndex + 1]}`;
       }
     }
     if (config.isInteractive()) {
-      const { setMaxSizedBoxDebugging } = await import("./MaxSizedBox-2MWU5JYB.js");
+      const { setMaxSizedBoxDebugging } = await import("./MaxSizedBox-A3UYJS6B.js");
       setMaxSizedBoxDebugging(isDebugMode3);
     }
     const inputFormat = process.stdin.isTTY ? "text" /* TEXT */ : typeof config.getInputFormat === "function" ? config.getInputFormat() : "text" /* TEXT */;
-    const { initializeApp } = await import("./initializer-74A7DMMD.js");
+    const { initializeApp } = await import("./initializer-CEZ4RPQV.js");
     let input = config.getQuestion();
     const hasRemoteInput = Boolean(config.getInputFile?.());
     const deferIdeConnection = config.isInteractive() && !config.getExperimentalZedIntegration() && !input && !hasRemoteInput;
@@ -2997,10 +3011,11 @@ ${finalArgs[promptIndex + 1]}`;
     profileCheckpoint("after_initialize_app");
     if (config.getExperimentalZedIntegration()) {
       markAcpStartup("acpImportStart");
-      const { runAcpAgent } = await import("./acpAgent-MRPYN6FH.js");
+      const { runAcpAgent } = await import("./acpAgent-V54T2EEL.js");
       markAcpStartup("acpImportEnd");
       await runAcpAgent(config, settings, argv, {
-        privateParentCapability: isAcpMode ? privateAcpParentCapability : void 0
+        privateParentCapability: isAcpMode ? privateAcpParentCapability : void 0,
+        externalToolGuardRequired: isAcpMode && privateAcpParentCapability !== void 0 && privateExternalToolGuard === EXTERNAL_TOOL_GUARD_REQUIRED_VALUE
       });
       await runExitCleanup();
       process.exit(0);
@@ -3039,7 +3054,7 @@ ${finalArgs[promptIndex + 1]}`;
       setInteractiveMode(true);
       await kittyProtocolDetectionComplete;
       await themeAutoDetectionComplete;
-      const { startInteractiveUI } = await import("./startInteractiveUI-IX6I3Y2Z.js");
+      const { startInteractiveUI } = await import("./startInteractiveUI-6BDRXSMF.js");
       await startInteractiveUI(
         config,
         settings,
@@ -3100,7 +3115,7 @@ ${finalArgs[promptIndex + 1]}`;
 ${input}`;
       }
     }
-    const { validateNonInteractiveAuth } = await import("./validateNonInterActiveAuth-M7J7OTRH.js");
+    const { validateNonInteractiveAuth } = await import("./validateNonInterActiveAuth-Q4763ONQ.js");
     const nonInteractiveConfig = await validateNonInteractiveAuth(
       settings.merged.security?.auth?.useExternal,
       config,
@@ -3109,7 +3124,7 @@ ${input}`;
     const prompt_id = createNonInteractivePromptId(config.getSessionId());
     if (inputFormat === "stream-json" /* STREAM_JSON */) {
       const trimmedInput = (input ?? "").trim();
-      const { runNonInteractiveStreamJson } = await import("./session-RCDLDJA4.js");
+      const { runNonInteractiveStreamJson } = await import("./session-IQLCT32T.js");
       await runNonInteractiveStreamJson(
         nonInteractiveConfig,
         trimmedInput.length > 0 ? trimmedInput : "",
@@ -3133,7 +3148,7 @@ ${input}`;
       prompt_length: input.length
     });
     debugLogger5.debug(`Session ID: ${config.getSessionId()}`);
-    const { runNonInteractive } = await import("./nonInteractiveCli-HZBBBDJD.js");
+    const { runNonInteractive } = await import("./nonInteractiveCli-XEBIE7MG.js");
     const exitCode = await runNonInteractive(
       nonInteractiveConfig,
       settings,

package/chunks/{geminiContentGenerator-LLLZBOUG.js → geminiContentGenerator-TTM4TZJM.js}

@@ -283,7 +283,7 @@ var GeminiContentGenerator = class {
 
 // packages/core/src/core/geminiContentGenerator/index.ts
 function createGeminiContentGenerator(config, gcConfig) {
-  const version = "0.21.5";
+  const version = "0.21.6-preview.0";
   const userAgent = config.userAgent || `QwenCode/${version} (${process.platform}; ${process.arch})`;
   const baseHeaders = {
     "User-Agent": userAgent