@qwen-code/qwen-code 0.22.0 → 0.22.1

package/chunks/{daemon-git-worktree-guard-3QY2BQYB.js → daemon-git-worktree-guard-LDBJXH2U.js}

@@ -4,97 +4,100 @@ import {
   EXTERNAL_TOOL_GUARD_MAX_DENIAL_REASON_CHARS,
   SHELL_EXECUTING_TOOL_NAMES
 } from "./chunk-3VUENPWF.js";
-import "./chunk-62JOGZL5.js";
-import "./chunk-5HJUPACR.js";
-import "./chunk-2GXYDNXP.js";
-import "./chunk-TBVSALA3.js";
-import "./chunk-7NBVNAJJ.js";
-import "./chunk-MZKWFWVG.js";
-import "./chunk-2Z6LSQMF.js";
-import "./chunk-RDQ7QB4Y.js";
+import "./chunk-VMDURMFY.js";
+import "./chunk-J7MLXFC5.js";
+import "./chunk-LRKMQPMD.js";
+import "./chunk-LJZSMWOH.js";
+import "./chunk-47SIHHPL.js";
+import "./chunk-JLGFGPZJ.js";
+import "./chunk-SKNVVYIJ.js";
+import "./chunk-UCSV2IZW.js";
+import "./chunk-T2HMXHYA.js";
+import "./chunk-3FSBMAYD.js";
+import "./chunk-XJS54K4A.js";
 import "./chunk-ZPJWUGCS.js";
-import "./chunk-O5BDEWBC.js";
-import "./chunk-KM73TBQ4.js";
-import "./chunk-EFB657PR.js";
-import "./chunk-T6XLJRQY.js";
+import "./chunk-ZWKGZB2K.js";
+import "./chunk-OX44MOAN.js";
+import "./chunk-XYX474JQ.js";
 import "./chunk-GOFAQQZA.js";
+import "./chunk-5M6IDOMF.js";
 import "./chunk-TWPJO254.js";
 import "./chunk-CQ35AJ4Z.js";
-import "./chunk-5M6IDOMF.js";
-import "./chunk-KVGR4MCF.js";
-import "./chunk-XZJKSETB.js";
-import "./chunk-YMVFIYHV.js";
+import "./chunk-3UZCLCXR.js";
+import "./chunk-TOF4UZHH.js";
+import "./chunk-O3BUXIPM.js";
+import "./chunk-ZLTEQYNC.js";
 import "./chunk-6PVPNMXU.js";
-import "./chunk-7DYNJFES.js";
-import "./chunk-DJEHYM4H.js";
+import "./chunk-AYVIGUUK.js";
 import "./chunk-IRH27ZC2.js";
 import "./chunk-QHWCP53L.js";
-import "./chunk-AZF6SME3.js";
+import "./chunk-JECO75XD.js";
 import "./chunk-O6GEWCJA.js";
 import "./chunk-T26EAKDL.js";
 import {
   GitWorktreeService
-} from "./chunk-GIWB5QLV.js";
+} from "./chunk-LJP2BBMK.js";
 import "./chunk-CPBF7KYF.js";
-import "./chunk-VUMLT7E5.js";
-import "./chunk-ISJMN3ML.js";
-import "./chunk-XLDFW44M.js";
-import "./chunk-Q54XG7IX.js";
+import "./chunk-5Y2JCJAH.js";
+import "./chunk-T2CRBIDJ.js";
+import "./chunk-77TOMRBG.js";
+import "./chunk-DEYPMJPD.js";
 import {
+  getShellConfiguration,
   require_shell_quote,
   splitCommands
-} from "./chunk-FEMQ6Y7W.js";
-import "./chunk-2TRNCJK4.js";
-import "./chunk-NUGZAFR2.js";
-import "./chunk-LDGWX737.js";
-import "./chunk-VLRBJ24J.js";
+} from "./chunk-T6OODF2U.js";
+import "./chunk-27ONXAFY.js";
+import "./chunk-ZEADBZLO.js";
+import "./chunk-FN5C6C7G.js";
+import "./chunk-BVE5EMIG.js";
 import "./chunk-MLXTMF7H.js";
 import "./chunk-NAVJD2PQ.js";
-import "./chunk-WRT324N6.js";
-import "./chunk-YDJRMQU4.js";
-import "./chunk-SJ4HB27T.js";
+import "./chunk-FVDQ5E67.js";
+import "./chunk-V3GINY6K.js";
+import "./chunk-QHMLYMMS.js";
+import "./chunk-SDVF6A42.js";
 import "./chunk-P3QQPMQA.js";
-import "./chunk-2UZJWSVD.js";
+import "./chunk-ILPXSKGQ.js";
 import "./chunk-VNOVK4I7.js";
 import "./chunk-SAH4BD2J.js";
-import "./chunk-VSNPOSDN.js";
-import "./chunk-I432KXWD.js";
+import "./chunk-ZKAZP2ZG.js";
+import "./chunk-DP7LABIB.js";
 import "./chunk-S6LOFUVP.js";
-import "./chunk-7IV52LTO.js";
-import "./chunk-AXMWHKXA.js";
+import "./chunk-2LD5U7Q3.js";
 import "./chunk-DJ2GSRLV.js";
-import "./chunk-2J3OJGTL.js";
-import "./chunk-LI4YHTQK.js";
-import "./chunk-QKBYFU2Q.js";
-import "./chunk-C72BXMJ5.js";
-import "./chunk-FDD2IUEL.js";
+import "./chunk-I6VVOZDK.js";
+import "./chunk-K2OJUPOE.js";
+import "./chunk-CFKIH3D3.js";
+import "./chunk-EB4VDXNI.js";
+import "./chunk-FJWICLG7.js";
+import "./chunk-UX3IFLJM.js";
 import "./chunk-YRLW2MSX.js";
 import "./chunk-VGC4I5JJ.js";
 import {
   isWithinRoot
-} from "./chunk-IWOWEENB.js";
-import "./chunk-HIK2OF33.js";
-import "./chunk-ZRYQMWEP.js";
-import "./chunk-2E3V7G6Y.js";
-import "./chunk-F6WFNA7U.js";
+} from "./chunk-WBT3STGU.js";
+import "./chunk-PVBT5QPD.js";
+import "./chunk-IPQA4SR5.js";
 import "./chunk-WZAD4ZNJ.js";
 import "./chunk-FPGTNKCP.js";
-import "./chunk-YHC2EYYG.js";
-import "./chunk-PZRUV52H.js";
-import "./chunk-JGUBDRBC.js";
-import "./chunk-HDKCKCYO.js";
+import "./chunk-SLEWBQWM.js";
+import "./chunk-ICWGPK23.js";
+import "./chunk-XZA32HII.js";
+import "./chunk-7QGEJI7M.js";
+import "./chunk-GTUKW3I6.js";
 import "./chunk-HHJLM3WQ.js";
-import "./chunk-GAHYKJPV.js";
+import "./chunk-6US7BF3G.js";
 import "./chunk-74TONY4F.js";
-import "./chunk-XL5K4SVK.js";
-import "./chunk-WZDM44SB.js";
-import "./chunk-K623ENWT.js";
+import "./chunk-VL4YX3FH.js";
+import "./chunk-JUIJ3FXC.js";
+import "./chunk-E6FGMDFQ.js";
 import "./chunk-AQ37AY7B.js";
-import "./chunk-K52PZNU4.js";
-import "./chunk-6NFAEG54.js";
+import "./chunk-RRKNX553.js";
+import "./chunk-KOJ6MHD5.js";
 import {
   realpathNearestExistingAsync
-} from "./chunk-A5F2YNO6.js";
+} from "./chunk-2NNTE2ED.js";
 import "./chunk-75DOP5OR.js";
 import "./chunk-DMTGGOSA.js";
 import "./chunk-YQ3U5MUC.js";
@@ -183,6 +186,17 @@ var GIT_UNRESOLVABLE_ENV_KEYS = /* @__PURE__ */ new Set([
 var GIT_NUMBERED_CONFIG_ENV_PATTERN = /^GIT_CONFIG_(KEY|VALUE)_\d+$/;
 var SHELL_WRAPPER_PROGRAMS = /* @__PURE__ */ new Set(["bash", "dash", "ksh", "sh", "zsh"]);
 var SHELL_WRAPPER_VALUE_FLAGS = /* @__PURE__ */ new Set(["-o", "-O"]);
+var WINDOWS_SHELL_PROGRAMS = /* @__PURE__ */ new Set(["cmd", "powershell", "pwsh"]);
+var POWERSHELL_LOCATION_PROGRAMS = /* @__PURE__ */ new Set([
+  "set-location",
+  "sl",
+  "push-location",
+  "pop-location"
+]);
+var POWERSHELL_ENV_MUTATION_PATTERNS = [
+  /^\$\{?env:[A-Za-z_][A-Za-z0-9_]*\}?\s*\+?=(?!=)/i,
+  /^\[Environment\]::SetEnvironmentVariable\s*\(/i
+];
 function shellBundleRequestsCommand(flag) {
   if (!flag.startsWith("-") || flag.startsWith("--")) return false;
   return flag.slice(1).includes("c");
@@ -233,6 +247,14 @@ var SUDO_CHDIR_FLAGS = /* @__PURE__ */ new Set(["-D", "--chdir"]);
 var SUDO_CHROOT_FLAGS = /* @__PURE__ */ new Set(["-R", "--chroot"]);
 var TIMEOUT_VALUE_FLAGS = /* @__PURE__ */ new Set(["-k", "-s", "--kill-after", "--signal"]);
 var PATH_RELINKING_PROGRAMS = /* @__PURE__ */ new Set(["cp", "ln", "mv"]);
+var WIN32_PATH_RELINKING_PROGRAMS = /* @__PURE__ */ new Set([
+  ...PATH_RELINKING_PROGRAMS,
+  "copy",
+  "mklink",
+  "move",
+  "robocopy",
+  "xcopy"
+]);
 var PATH_EXTRACTING_PROGRAMS = /* @__PURE__ */ new Set(["cpio", "rsync", "tar", "unzip"]);
 var PROGRAMS_WITH_OWN_C_FLAG = /* @__PURE__ */ new Set([
   "cmake",
@@ -255,6 +277,8 @@ var EXTERNAL_GUARD_UNSUPPORTED_TOOLS = /* @__PURE__ */ new Set([
 ]);
 var DYNAMIC_RELOCATION_DENIAL = "Daemon shell guard denied a mutating Git command with a dynamic repository location.";
 var UNPARSEABLE_COMMAND_DENIAL = "Daemon shell guard denied a shell command that could not be parsed before execution.";
+var CMD_REWRITE_SYNTAX_DENIAL = "Daemon shell guard denied a shell command containing cmd.exe rewrite syntax it cannot evaluate before execution.";
+var WINDOWS_UNMODELLED_SYNTAX_DENIAL = "Daemon shell guard denied a shell command containing Windows shell syntax it cannot evaluate before execution.";
 var UNRESOLVED_TARGET_DENIAL_PREFIX = "Daemon shell guard denied a mutating Git command with an unresolvable repository location: ";
 var OUTSIDE_TARGET_DENIAL_PREFIX = "Daemon shell guard denied a mutating Git command outside the session working directory: ";
 var UNDECIDABLE_PAYLOAD_DENIAL = "Daemon shell guard denied a shell command whose payload could not be resolved before execution.";
@@ -326,6 +350,135 @@ var REDIRECT_OPERATORS = /* @__PURE__ */ new Set([
   "&>",
   "&>>"
 ]);
+var WINDOWS_CMD_BOUNDARY_CHARS = /* @__PURE__ */ new Set([
+  " ",
+  "	",
+  ";",
+  "|",
+  "&",
+  "<",
+  ">",
+  "(",
+  ")"
+]);
+function preserveWindowsPathSeparators(segment, platform = process.platform, shell = getShellConfiguration().shell) {
+  if (platform !== "win32" || shell === "bash") return segment;
+  let single = false;
+  let double = false;
+  let out = "";
+  for (let index = 0; index < segment.length; index++) {
+    const character = segment[index];
+    if (single) {
+      if (character === "'") single = false;
+      out += character;
+      continue;
+    }
+    if (double) {
+      if (character === '"') {
+        double = false;
+      } else if (character === "\\") {
+        out += "\\\\";
+        continue;
+      }
+      out += character;
+      continue;
+    }
+    if (character === "'") {
+      single = true;
+      out += character;
+      continue;
+    }
+    if (character === '"') {
+      double = true;
+      out += character;
+      continue;
+    }
+    if (character === "\\") {
+      const next = segment[index + 1];
+      out += next !== void 0 && WINDOWS_CMD_BOUNDARY_CHARS.has(next) ? '"\\\\"' : "\\\\";
+      continue;
+    }
+    out += character;
+  }
+  return out;
+}
+__name(preserveWindowsPathSeparators, "preserveWindowsPathSeparators");
+function containsCmdRewriteSyntax(segment, platform = process.platform, shell = getShellConfiguration().shell) {
+  if (platform !== "win32" || shell !== "cmd") return false;
+  let doubleQuoted = false;
+  let percents = 0;
+  let bangs = 0;
+  for (const character of segment) {
+    if (character === '"') {
+      doubleQuoted = !doubleQuoted;
+      continue;
+    }
+    if (character === "^" && !doubleQuoted) return true;
+    if (character === "%") percents++;
+    else if (character === "!") bangs++;
+  }
+  return percents >= 2 || bangs >= 2;
+}
+__name(containsCmdRewriteSyntax, "containsCmdRewriteSyntax");
+function containsUnmodelledWindowsSyntax(command, platform = process.platform, shell = getShellConfiguration().shell) {
+  if (platform !== "win32" || shell === "bash") return false;
+  const trimmed = command.trim();
+  if (shell === "cmd" && trimmed.length > 1 && trimmed.startsWith('"') && trimmed.endsWith('"') && trimmed.slice(1, -1).includes('"')) {
+    return true;
+  }
+  let single = false;
+  let double = false;
+  for (let index = 0; index < command.length; index++) {
+    const character = command[index];
+    if (single) {
+      if (character === "'") {
+        if (shell === "powershell" && command[index + 1] === "'") return true;
+        single = false;
+      }
+      continue;
+    }
+    if (double) {
+      if (character === '"') double = false;
+      continue;
+    }
+    if (character === "'") {
+      if (shell === "cmd") return true;
+      single = true;
+      continue;
+    }
+    if (character === '"') {
+      double = true;
+      continue;
+    }
+    if (character === "(" || character === ")") return true;
+    if (character === "&") {
+      if (command[index + 1] === "&") {
+        index++;
+        continue;
+      }
+      if (command[index + 1] === ">") {
+        index += command[index + 2] === ">" ? 2 : 1;
+        continue;
+      }
+      const previous = command[index - 1];
+      if (previous === ">" || previous === "<") continue;
+      return true;
+    }
+    if (shell === "cmd" && (character === "#" || character === ";")) {
+      return true;
+    }
+    if (shell === "powershell" && command.startsWith("--%", index)) {
+      return true;
+    }
+    if (shell === "powershell" && POWERSHELL_ENV_MUTATION_PATTERNS.some(
+      (pattern) => pattern.test(command.slice(index))
+    )) {
+      return true;
+    }
+  }
+  return false;
+}
+__name(containsUnmodelledWindowsSyntax, "containsUnmodelledWindowsSyntax");
 function tokenizeSegment(segment, startDepth) {
   let parsed;
   try {
@@ -448,12 +601,13 @@ function hasGitRelocationMarker(tokens) {
 }
 __name(hasGitRelocationMarker, "hasGitRelocationMarker");
 var GIT_WORD_PATTERN = /\bgit\b/i;
-var TEXT_RELOCATION_MARKER_WITHOUT_C_PATTERN = /(^|\s)(--git-dir=?|--work-tree=?|-execdir)|(^|[\s;&|(){}])(cd|pushd)([\s;&|]|$)|(^|[\s;&|(){}])(GIT_DIR|GIT_WORK_TREE|GIT_COMMON_DIR|GIT_INDEX_FILE|GIT_EXEC_PATH|PATH)\+?=/;
-var TEXT_RELOCATION_MARKER_PATTERN = /(^|\s)(-C|--git-dir=?|--work-tree=?|-execdir)|(^|[\s;&|(){}])(cd|pushd)([\s;&|]|$)|(^|[\s;&|(){}])(GIT_DIR|GIT_WORK_TREE|GIT_COMMON_DIR|GIT_INDEX_FILE|GIT_EXEC_PATH|PATH)\+?=/;
+var TEXT_RELOCATION_MARKER_WITHOUT_C_PATTERN = /(^|\s)(--git-dir=?|--work-tree=?|-execdir)|(^|[\s;&|(){}])(cd|chdir|pushd)([\s;&|]|$)|(^|[\s;&|(){}])(GIT_DIR|GIT_WORK_TREE|GIT_COMMON_DIR|GIT_INDEX_FILE|GIT_EXEC_PATH|PATH)\+?=/;
+var TEXT_RELOCATION_MARKER_PATTERN = /(^|\s)(-C|--git-dir=?|--work-tree=?|-execdir)|(^|[\s;&|(){}])(cd|chdir|pushd)([\s;&|]|$)|(^|[\s;&|(){}])(GIT_DIR|GIT_WORK_TREE|GIT_COMMON_DIR|GIT_INDEX_FILE|GIT_EXEC_PATH|PATH)\+?=/;
 var GIT_PROGRAM_ENV_KEYS = /* @__PURE__ */ new Set(["GIT_EXEC_PATH", "PATH"]);
 function recordEnvAssignment(token, state) {
-  const key = leadingEnvAssignmentKey(token.text);
-  if (key === null) return;
+  const rawKey = leadingEnvAssignmentKey(token.text);
+  if (rawKey === null) return;
+  const key = process.platform === "win32" && getShellConfiguration().shell !== "bash" ? rawKey.toUpperCase() : rawKey;
   if (GIT_PROGRAM_ENV_KEYS.has(key) || GIT_UNRESOLVABLE_ENV_KEYS.has(key) || GIT_NUMBERED_CONFIG_ENV_PATTERN.test(key)) {
     state.unresolved = true;
     return;
@@ -720,11 +874,36 @@ var EXPORT_BUILTINS = /* @__PURE__ */ new Set([
   "typeset"
 ]);
 var CHDIR_OPTION_PATTERN = /^-[LPe@qs]+$/;
-function findChdirTarget(run, start, variant) {
+var FUSED_CHDIR_PATTERN = /^(cd|chdir|pushd|popd)([./\\].*)$/i;
+function splitFusedWindowsChdirs(run) {
+  for (let index = 0; index < run.length; index++) {
+    const token = run[index];
+    if (token.redirect || token.ambiguousFd) continue;
+    if (leadingEnvAssignmentKey(token.text) !== null) continue;
+    if (LEADING_SHELL_KEYWORDS.has(token.text)) continue;
+    const match = token.dynamic ? null : FUSED_CHDIR_PATTERN.exec(token.text);
+    if (match === null) return run;
+    const replacement = run.slice();
+    replacement.splice(
+      index,
+      1,
+      { text: match[1], dynamic: false },
+      { text: match[2], dynamic: false }
+    );
+    return replacement;
+  }
+  return run;
+}
+__name(splitFusedWindowsChdirs, "splitFusedWindowsChdirs");
+function findChdirTarget(run, start, variant, windows = false) {
   let index = start;
   while (index < run.length) {
     const token = run[index];
     if (token.text === "--") return run[index + 1];
+    if (windows && /^\/[dD]$/.test(token.text)) {
+      index++;
+      continue;
+    }
     if (variant === "cd" && CHDIR_OPTION_PATTERN.test(token.text)) {
       index++;
       continue;
@@ -817,7 +996,10 @@ function readDefinition(run) {
   return { name, body: joinArgvTexts(bodyTokens) };
 }
 __name(readDefinition, "readDefinition");
-function analyzeRun(run) {
+function analyzeRun(run, platform = process.platform) {
+  if (platform === "win32" && getShellConfiguration().shell !== "bash") {
+    run = splitFusedWindowsChdirs(run);
+  }
   const state = { relocations: [], unresolved: false };
   let index = 0;
   let assignments = 0;
@@ -846,6 +1028,25 @@ function analyzeRun(run) {
       for (const operand of operands) recordEnvAssignment(operand, state);
       return { kind: "export", state, operands };
     }
+    if (platform === "win32" && getShellConfiguration().shell !== "bash" && (program === "path" || program === "doskey")) {
+      state.unresolved = true;
+      return { kind: "export", state, operands: [] };
+    }
+    if (platform === "win32" && getShellConfiguration().shell !== "bash" && (program === "set" || program === "setx")) {
+      const operands = run.slice(index + 1);
+      if (program === "setx" || getShellConfiguration().shell === "powershell") {
+        state.unresolved = true;
+        return { kind: "export", state, operands: [] };
+      }
+      for (const operand of operands) {
+        if (operand.dynamic || leadingEnvAssignmentKey(operand.text) === null) {
+          state.unresolved = true;
+          return { kind: "export", state, operands: [] };
+        }
+        recordEnvAssignment(operand, state);
+      }
+      return { kind: "export", state, operands };
+    }
     if (program === "set") {
       if (requestsAllExport(run, index + 1)) {
         return { kind: "all-export", state };
@@ -892,6 +1093,9 @@ function analyzeRun(run) {
         propagatesCwd: true
       };
     }
+    if (platform === "win32" && WINDOWS_SHELL_PROGRAMS.has(program)) {
+      return { kind: "undecidable" };
+    }
     if (SHELL_WRAPPER_PROGRAMS.has(program)) {
       const scan = consumeShellWrapper(run, index);
       if (scan.kind === "none") {
@@ -915,14 +1119,19 @@ function analyzeRun(run) {
     if (program === "git") {
       return { kind: "git", tokens: run.slice(index), state };
     }
-    if (program === "cd" || program === "pushd" || program === "popd") {
+    if (program === "cd" || program === "pushd" || program === "popd" || platform === "win32" && program === "chdir" || platform === "win32" && getShellConfiguration().shell === "powershell" && POWERSHELL_LOCATION_PROGRAMS.has(program)) {
+      const variant = program === "chdir" || program === "set-location" || program === "sl" ? "cd" : program === "push-location" || program === "pushd" ? "pushd" : program === "pop-location" || program === "popd" ? "popd" : "cd";
+      const rest = run.slice(index + 1);
+      const namedIndex = rest.findIndex(
+        (token2) => token2.text === "-Path" || token2.text === "-LiteralPath"
+      );
       return {
         kind: "cd",
-        variant: program,
-        target: findChdirTarget(run, index + 1, program),
+        variant,
+        target: namedIndex >= 0 ? rest[namedIndex + 1] : findChdirTarget(rest, 0, variant, platform === "win32"),
         // `cd -P` resolves each component through its symlinks before
         // applying `..`, which a lexical resolve cannot reproduce.
-        physical: run.slice(index + 1).some((token2) => /^-[A-Za-z]*P/.test(token2.text))
+        physical: rest.some((token2) => /^-[A-Za-z]*P/.test(token2.text))
       };
     }
     return { kind: "other", state, assignmentsOnly: false };
@@ -1078,9 +1287,12 @@ async function resolveGitDirRepository(canonicalGitDir) {
 }
 __name(resolveGitDirRepository, "resolveGitDirRepository");
 async function resolvePhysicalPath(base, target) {
-  let current = path.isAbsolute(target) ? path.parse(target).root : base;
+  const parsed = path.parse(target);
+  const absolute = path.isAbsolute(target);
+  let current = absolute ? parsed.root : base;
+  const walkable = absolute ? target.slice(parsed.root.length) : target;
   const separators = path.sep === "\\" ? /[\\/]+/ : /\/+/;
-  for (const segment of target.split(separators)) {
+  for (const segment of walkable.split(separators)) {
     if (segment === "" || segment === ".") continue;
     if (segment === "..") {
       current = path.dirname(await realpathNearestExistingAsync(current));
@@ -1498,18 +1710,45 @@ async function evaluateCommandWithCwd(command, startCwd, entryCwd, context, dept
     }
     return void 0;
   }, "invokeDefinedBody");
-  const segments = splitCommands(stripHeredocBodies(command));
-  const separators = readTopLevelSeparators(stripHeredocBodies(command));
+  const platformNow = process.platform;
+  const shellNow = getShellConfiguration().shell;
+  const windowsNative = platformNow === "win32" && shellNow !== "bash";
+  const strippedCommand = windowsNative ? command : stripHeredocBodies(command);
+  if (containsCmdRewriteSyntax(strippedCommand, platformNow, shellNow)) {
+    return {
+      denial: { allowed: false, reason: CMD_REWRITE_SYNTAX_DENIAL },
+      cwdAfter: trackedCwd
+    };
+  }
+  if (containsUnmodelledWindowsSyntax(strippedCommand, platformNow, shellNow)) {
+    return {
+      denial: { allowed: false, reason: WINDOWS_UNMODELLED_SYNTAX_DENIAL },
+      cwdAfter: trackedCwd
+    };
+  }
+  const normalizedCommand = preserveWindowsPathSeparators(
+    strippedCommand,
+    platformNow,
+    shellNow
+  );
+  const segments = splitCommands(normalizedCommand);
+  const separators = readTopLevelSeparators(normalizedCommand);
   const separatorsMatch = separators.length === segments.length - 1;
-  const isPipeComponent = /* @__PURE__ */ __name((index) => separatorsMatch ? (
-    // Both sides of a pipe run in subshells; for `&` only the segment it
-    // follows (the backgrounded one) does — the next segment is
-    // foreground.
-    separators[index - 1] === "|" || separators[index] === "|" || separators[index] === "&"
-  ) : (
-    // Structural disagreement with `splitCommands`: scope every segment
-    // rather than guess which ones ran in a subshell.
-    separators.some((separator) => separator === "|" || separator === "&")
+  const isPipeComponent = /* @__PURE__ */ __name((index) => (
+    // A PowerShell pipeline runs every stage in the one session — a `cd` on
+    // either side outlives the pipe — so no segment is scoped there.
+    windowsNative && shellNow === "powershell" ? false : separatorsMatch ? (
+      // Both sides of a pipe run in subshells; for `&` only the segment
+      // it follows (the backgrounded one) does — the next segment is
+      // foreground.
+      separators[index - 1] === "|" || separators[index] === "|" || separators[index] === "&"
+    ) : (
+      // Structural disagreement with `splitCommands`: scope every segment
+      // rather than guess which ones ran in a subshell.
+      separators.some(
+        (separator) => separator === "|" || separator === "&"
+      )
+    )
   ), "isPipeComponent");
   for (const [segmentIndex, segment] of segments.entries()) {
     const pipeComponent = isPipeComponent(segmentIndex);
@@ -1533,7 +1772,7 @@ async function evaluateCommandWithCwd(command, startCwd, entryCwd, context, dept
         cwdAfter: trackedCwd
       };
     }
-    const functionHeader = /^\s*([A-Za-z_][A-Za-z0-9_]*)\s*\(\s*\)/.exec(segment) ?? // The `function NAME` keyword form, with the `()` optional.
+    const functionHeader = windowsNative ? null : /^\s*([A-Za-z_][A-Za-z0-9_]*)\s*\(\s*\)/.exec(segment) ?? // The `function NAME` keyword form, with the `()` optional.
     /^\s*function\s+([A-Za-z_][A-Za-z0-9_]*)\b/.exec(segment);
     if (functionHeader) {
       insideDefinition = functionHeader[1];
@@ -1640,7 +1879,7 @@ ${segment}`;
         if (denial) return { denial, cwdAfter: trackedCwd };
         continue;
       }
-      const analysis = analyzeRun(run);
+      const analysis = analyzeRun(run, platformNow);
       switch (analysis.kind) {
         case "cd": {
           const target = analysis.target === void 0 ? void 0 : expandShellLocals(analysis.target, shellLocals);
@@ -1845,7 +2084,7 @@ ${segment}`;
           allExport = false;
           break;
         case "other": {
-          const aliasDefinitions = readAliasDefinitions(run);
+          const aliasDefinitions = windowsNative ? [] : readAliasDefinitions(run);
           if (aliasDefinitions.length > 0) {
             for (const definition2 of aliasDefinitions) {
               definedBodies.set(definition2.name, {
@@ -1855,7 +2094,7 @@ ${segment}`;
             }
             break;
           }
-          const definition = readDefinition(run);
+          const definition = windowsNative ? void 0 : readDefinition(run);
           if (definition) {
             definedBodies.set(definition.name, {
               body: definition.body,
@@ -1864,7 +2103,7 @@ ${segment}`;
             break;
           }
           const programToken = readProgramWord(run);
-          const definitionName = readFunctionName(run);
+          const definitionName = windowsNative ? void 0 : readFunctionName(run);
           if (definitionName) {
             if (run.some((token) => GIT_WORD_PATTERN.test(token.text))) {
               gitShapedNames.add(definitionName);
@@ -1893,12 +2132,16 @@ ${segment}`;
           if (run.some((t) => PATH_EXTRACTING_PROGRAMS.has(executableBaseName(t)))) {
             if (trackedCwd !== void 0) relinkedTargets.push(trackedCwd);
           }
-          if (run.some((t) => PATH_RELINKING_PROGRAMS.has(executableBaseName(t)))) {
-            for (const operand of run) {
+          const relinkPrograms = platformNow === "win32" ? WIN32_PATH_RELINKING_PROGRAMS : PATH_RELINKING_PROGRAMS;
+          const relinkProgramIndex = run.findIndex(
+            (t) => !t.redirect && !t.ambiguousFd && relinkPrograms.has(executableBaseName(t))
+          );
+          if (relinkProgramIndex >= 0) {
+            for (const [operandIndex, operand] of run.entries()) {
+              if (operandIndex === relinkProgramIndex) continue;
+              if (operand.redirect || operand.ambiguousFd) continue;
               if (operand.text.startsWith("-")) continue;
-              if (PATH_RELINKING_PROGRAMS.has(executableBaseName(operand))) {
-                continue;
-              }
+              if (windowsNative && operand.text.startsWith("/")) continue;
               if (operand.dynamic || trackedCwd === void 0) {
                 scope.relink.gitDir = true;
                 continue;
@@ -2067,7 +2310,10 @@ function createDaemonToolGuard(externalGuard) {
 }
 __name(createDaemonToolGuard, "createDaemonToolGuard");
 export {
-  createDaemonToolGuard
+  containsCmdRewriteSyntax,
+  containsUnmodelledWindowsSyntax,
+  createDaemonToolGuard,
+  preserveWindowsPathSeparators
 };
 /**
  * @license