@qwen-code/qwen-code 0.22.2-preview.0 → 0.22.2

package/chunks/{chunk-RQAMNZ4Y.js → chunk-F5SZP77N.js}

@@ -1,8 +1,5 @@
 // Force strict mode and setup for ESM
 "use strict";
-import {
-  contextCommand
-} from "./chunk-XO4NGYRP.js";
 import {
   ExtensionRefreshState,
   clearSkillArgs,
@@ -11,7 +8,13 @@ import {
   staleArgsWarning,
   validateAuthMethod,
   writeSkillArgs
-} from "./chunk-GQAIZL3H.js";
+} from "./chunk-BAJKAAOY.js";
+import {
+  isKittyProtocolEnabled
+} from "./chunk-NYX53SV4.js";
+import {
+  contextCommand
+} from "./chunk-AGR5UROZ.js";
 import {
   calculateCost,
   computeSessionStats,
@@ -20,28 +23,25 @@ import {
   findInlineMathExpressions,
   getSystemInfoFields,
   levelLabel
-} from "./chunk-DX5FZGHZ.js";
+} from "./chunk-K2NQPH5D.js";
 import {
   VSCODE_SHIFT_ENTER_SEQUENCE,
   isWaylandSession,
   writeOsc52
-} from "./chunk-2FN2HNTI.js";
+} from "./chunk-FDY5RMGH.js";
 import {
   formatDuration,
   formatTokenCount
 } from "./chunk-3SH53ANB.js";
-import {
-  isKittyProtocolEnabled
-} from "./chunk-NYX53SV4.js";
 import {
   rollbackStandaloneUpdate
-} from "./chunk-4PLAO7FS.js";
+} from "./chunk-QP4C6WCE.js";
 import {
   themeManager
-} from "./chunk-WEGXPP5E.js";
+} from "./chunk-QFCDF5PL.js";
 import {
   getErrorMessage as getErrorMessage2
-} from "./chunk-BGWT7VBV.js";
+} from "./chunk-L6YT5H34.js";
 import {
   GITHUB_WORKFLOW_PATHS,
   INSIGHT_CSS,
@@ -54,7 +54,7 @@ import {
   toJson,
   toJsonl,
   toMarkdown
-} from "./chunk-JJJD6QCC.js";
+} from "./chunk-3SGB2UHX.js";
 import {
   stripUnsafeCharacters,
   toCodePoints,
@@ -70,16 +70,16 @@ import {
   isVoiceEnabled,
   readVoiceMode,
   readVoiceModel
-} from "./chunk-2MHGD7EE.js";
+} from "./chunk-XRSOI3DL.js";
 import {
   getExtendedSystemInfo,
   getGitVersion,
   getNpmVersion
-} from "./chunk-7XKW4CVK.js";
+} from "./chunk-RJC5EIKY.js";
 import {
   isInlineModelOverrideAllowed,
   parseAcpModelOption
-} from "./chunk-HOANA6GC.js";
+} from "./chunk-Q26AYA62.js";
 import {
   OUTPUT_LANGUAGE_AUTO,
   getAllSettingKeys,
@@ -91,12 +91,12 @@ import {
   resolveOutputLanguageOrPreserveAuto,
   validateSettingValue,
   writeOutputLanguageAndRegisterPath
-} from "./chunk-C2BAEV64.js";
+} from "./chunk-F7TNAPZ4.js";
 import {
   getCurrentLanguage,
   setLanguageAsync,
   t
-} from "./chunk-W2WRNJKX.js";
+} from "./chunk-LDP5OD6N.js";
 import {
   SUPPORTED_LANGUAGES,
   getSupportedLanguageIds,
@@ -104,11 +104,11 @@ import {
 } from "./chunk-5EJZE3FP.js";
 import {
   getInstallationInfo
-} from "./chunk-7DPKPBOQ.js";
+} from "./chunk-V2NDP3I4.js";
 import {
   isFolderTrustEnabled,
   loadTrustedFolders
-} from "./chunk-RQ5ASDFQ.js";
+} from "./chunk-V4QXXQJ2.js";
 import {
   require_strip_json_comments
 } from "./chunk-NPQ5ZKRP.js";
@@ -122,24 +122,27 @@ import {
   buildLearnSkillPrompt,
   buildLearnVideoSkillRequest,
   buildManagedRememberPrompt,
+  canonicalizeMsgId,
+  describeHoldCause,
   encodeInsightErrorMessage,
   encodeInsightProgressMessage,
   encodeInsightReadyMessage,
   findProviderByCredentials,
+  flattenPeerLabel,
   generateSessionRecap,
   getIdeInstaller,
   getMCPServerPrompts,
   isWsl,
   parseLearnVideoInput,
   readPathFromWorkspace
-} from "./chunk-RUQBJS34.js";
+} from "./chunk-KUX5D6DK.js";
 import {
   listSavedWorkflows,
   listWorkflowSnapshots
-} from "./chunk-LRLMDV5X.js";
+} from "./chunk-3DXFGHAJ.js";
 import {
   resolveOpenAILogDir
-} from "./chunk-OX44MOAN.js";
+} from "./chunk-MIIVI25Q.js";
 import {
   ArenaManager,
   ConditionalRulesRegistry,
@@ -181,7 +184,7 @@ import {
   resolveSlimmingConfig,
   runForkedAgent,
   tryGenerateSessionTitle
-} from "./chunk-D6XO27Z5.js";
+} from "./chunk-TGWAQ5RB.js";
 import {
   external_exports
 } from "./chunk-CQ35AJ4Z.js";
@@ -189,7 +192,7 @@ import {
   buildRuntimeSnapshotId,
   resolveModelId,
   stripRuntimeSnapshotPrefix
-} from "./chunk-AYVIGUUK.js";
+} from "./chunk-JB4JIVTJ.js";
 import {
   getAutoSkillCuratorStatus,
   parse,
@@ -197,31 +200,31 @@ import {
   restoreArchivedAutoSkill,
   runAutoSkillCurator,
   setAutoSkillPinned
-} from "./chunk-5Y2JCJAH.js";
+} from "./chunk-EFUM7RVY.js";
 import {
   HookEventName,
   sanitizeUserPromptExpansionAdditionalContext
-} from "./chunk-T2CRBIDJ.js";
+} from "./chunk-TTX2JUE6.js";
 import {
   canUseRipgrep
-} from "./chunk-77TOMRBG.js";
+} from "./chunk-43GGFFLY.js";
 import {
   glob
-} from "./chunk-DEYPMJPD.js";
+} from "./chunk-SMPR7SPO.js";
 import {
   checkArgumentSafety,
   checkCommandPermissions,
   escapeShellArg,
   getShellConfiguration
-} from "./chunk-T6OODF2U.js";
+} from "./chunk-JWALNCLT.js";
 import {
   GoalPersistenceUnavailableError,
   emptyGoalSnapshot,
   projectUserTranscriptForDisplay
-} from "./chunk-FN5C6C7G.js";
+} from "./chunk-WKK5BQNP.js";
 import {
   APPROVAL_MODES
-} from "./chunk-BVE5EMIG.js";
+} from "./chunk-V5J4J5TP.js";
 import {
   openBrowserSecurely
 } from "./chunk-NAVJD2PQ.js";
@@ -242,37 +245,37 @@ import {
   read,
   recordSkillInvocation,
   uiTelemetryService
-} from "./chunk-UX3IFLJM.js";
+} from "./chunk-L2M46FP5.js";
 import {
   getCurrentGeminiMdFilename
-} from "./chunk-WBT3STGU.js";
+} from "./chunk-3I6UTTDX.js";
 import {
   getAutoMemoryRoot
-} from "./chunk-PVBT5QPD.js";
+} from "./chunk-6PJOTWAN.js";
 import {
   runSideQuery
-} from "./chunk-IPQA4SR5.js";
+} from "./chunk-BWORX6FA.js";
 import {
   AuthType
-} from "./chunk-GTUKW3I6.js";
+} from "./chunk-PPKZ7JOE.js";
 import {
   normalizeContent,
   redactUrlCredentials
-} from "./chunk-6US7BF3G.js";
+} from "./chunk-L6BZRIUL.js";
 import {
   FORK_SUBAGENT_TYPE,
   stripStartupContext
-} from "./chunk-JUIJ3FXC.js";
+} from "./chunk-CAJTKR6W.js";
 import {
   applySkillAllowedTools,
   buildSkillLlmContent
-} from "./chunk-E6FGMDFQ.js";
+} from "./chunk-ZU4UDIWX.js";
 import {
   ToolDisplayNamesMigration,
   ToolNames,
   canonicalToolName,
   isShellProgressData
-} from "./chunk-KOJ6MHD5.js";
+} from "./chunk-UTLCH2FK.js";
 import {
   Storage,
   createDebugLogger,
@@ -281,12 +284,12 @@ import {
   isSubpath,
   resolvePath,
   updateSymlink
-} from "./chunk-2NNTE2ED.js";
+} from "./chunk-UHQFIS7N.js";
 import {
   isCpuProfileRecording,
   startCpuProfile,
   stopCpuProfile
-} from "./chunk-YT5XN3HV.js";
+} from "./chunk-W5MJJ2V7.js";
 import {
   init_esbuild_shims
 } from "./chunk-5O2XNYP6.js";
@@ -2435,7 +2438,7 @@ var approvalModeCommand = {
         };
       }
     }
-    const autoModeNotices = mode === "auto" /* AUTO */ && priorMode !== "auto" /* AUTO */ && config ? await import("./useAutoAcceptIndicator-VBT3NKDM.js") : void 0;
+    const autoModeNotices = mode === "auto" /* AUTO */ && priorMode !== "auto" /* AUTO */ && config ? await import("./useAutoAcceptIndicator-UI4SNL2O.js") : void 0;
     if (config) {
       try {
         config.setApprovalMode(mode);
@@ -2533,6 +2536,175 @@ var branchCommand = {
   }, "action")
 };
 
+// packages/cli/src/ui/commands/peers-command.ts
+init_esbuild_shims();
+function shortId(msgId) {
+  return msgId.replace(/-/g, "").slice(0, 6);
+}
+__name(shortId, "shortId");
+function displayHandle(entry, held) {
+  const own = canonicalizeMsgId(entry.frame.msgId);
+  let length = Math.min(shortId(entry.frame.msgId).length, own.length);
+  const collides = /* @__PURE__ */ __name((len) => held.some(
+    (other) => other !== entry && canonicalizeMsgId(other.frame.msgId).startsWith(own.slice(0, len))
+  ), "collides");
+  while (length < own.length && collides(length)) {
+    length += 1;
+  }
+  return own.slice(0, length);
+}
+__name(displayHandle, "displayHandle");
+function preview(text, max = 100) {
+  const oneLine = flattenPeerLabel(text).replace(/\s+/g, " ").trim();
+  return oneLine.length > max ? `${oneLine.slice(0, max - 1)}\u2026` : oneLine;
+}
+__name(preview, "preview");
+function formatHeldList(held) {
+  if (held.length === 0) return "No messages from other sessions are waiting.";
+  const lines = held.map((entry) => {
+    const who = flattenPeerLabel(
+      entry.frame.fromName ?? entry.frame.from ?? "unknown session"
+    );
+    const handle = flattenPeerLabel(displayHandle(entry, held));
+    return `  ${handle}  ${who}
+      ${preview(entry.frame.message.content)}
+      held because ${describeHoldCause(entry.cause)}`;
+  });
+  return [
+    `${held.length} message${held.length === 1 ? "" : "s"} waiting for your review:`,
+    ...lines,
+    "",
+    "Release with /peers accept <id|all>, or drop with /peers deny <id|all>."
+  ].join("\n");
+}
+__name(formatHeldList, "formatHeldList");
+function resolveHeld(held, token) {
+  const needle = token.toLowerCase();
+  const exact = held.filter(
+    (entry) => canonicalizeMsgId(entry.frame.msgId) === needle
+  );
+  if (exact.length === 1) return { kind: "one", msgId: exact[0].frame.msgId };
+  const matches = held.filter(
+    (entry) => canonicalizeMsgId(entry.frame.msgId).startsWith(needle) || entry.frame.msgId.toLowerCase().startsWith(needle)
+  );
+  if (matches.length === 0) return { kind: "none" };
+  if (matches.length > 1) return { kind: "ambiguous" };
+  return { kind: "one", msgId: matches[0].frame.msgId };
+}
+__name(resolveHeld, "resolveHeld");
+var peersCommand = {
+  name: "peers",
+  kind: "built-in" /* BUILT_IN */,
+  get description() {
+    return t(
+      "Review messages held from other Qwen Code sessions (accept | deny)"
+    );
+  },
+  action: /* @__PURE__ */ __name(async (context, args) => {
+    const peerMessaging = context.services.peerMessaging;
+    if (!peerMessaging) {
+      const enabled = context.services.settings?.merged?.agents?.crossSessionMessaging === true;
+      return {
+        type: "message",
+        messageType: enabled ? "error" : "info",
+        content: enabled ? "Cross-session messaging is on, but this session has no inbox: it either failed to register in the session registry or failed to bind its socket. Re-run with DEBUG=1 to see the bind error." : 'Cross-session messaging is off. Enable it with "agents.crossSessionMessaging": true in settings.json, then restart.'
+      };
+    }
+    const held = peerMessaging.getHeld();
+    const [verb, ...rest] = args.trim().split(/\s+/).filter(Boolean);
+    if (verb === void 0 || verb === "list") {
+      peerMessaging.recordHeldListing(held);
+      return {
+        type: "message",
+        messageType: "info",
+        content: formatHeldList(held)
+      };
+    }
+    if (verb !== "accept" && verb !== "deny") {
+      return {
+        type: "message",
+        messageType: "error",
+        content: `Unknown subcommand "${verb}". Use /peers, /peers accept <id|all>, or /peers deny <id|all>.`
+      };
+    }
+    const decision = verb === "accept" ? "approve" : "deny";
+    const target = rest[0];
+    if (target === void 0) {
+      return {
+        type: "message",
+        messageType: "error",
+        content: `Which message? Use /peers ${verb} <id|all> \u2014 /peers lists the ids.`
+      };
+    }
+    if (peerMessaging.heldSetChangedSinceListing()) {
+      return {
+        type: "message",
+        messageType: "error",
+        content: "The waiting list changed since you listed it \u2014 run /peers again to review what is waiting now."
+      };
+    }
+    if (held.length === 0) {
+      return {
+        type: "message",
+        messageType: "info",
+        content: "No messages from other sessions are waiting."
+      };
+    }
+    if (target.toLowerCase() === "all") {
+      const ids = held.map((entry) => entry.frame.msgId);
+      let count = 0;
+      let failed = 0;
+      for (const msgId of ids) {
+        const outcome2 = peerMessaging.decide(msgId, decision);
+        if (outcome2 === "done") count += 1;
+        else if (outcome2 === "failed") failed += 1;
+      }
+      peerMessaging.recordHeldListing(peerMessaging.getHeld());
+      return {
+        type: "message",
+        messageType: "info",
+        content: `${verb === "accept" ? "Released" : "Dropped"} ${count} message${count === 1 ? "" : "s"}.` + (failed > 0 ? ` ${failed} could not be delivered and ${failed === 1 ? "is" : "are"} still waiting \u2014 try again once the session catches up.` : "")
+      };
+    }
+    const resolved = resolveHeld(held, target);
+    if (resolved.kind === "none") {
+      return {
+        type: "message",
+        messageType: "error",
+        content: `No held message matches "${target}". Run /peers to see what is waiting.`
+      };
+    }
+    if (resolved.kind === "ambiguous") {
+      return {
+        type: "message",
+        messageType: "error",
+        content: `"${target}" matches more than one held message. Use more characters of the id.`
+      };
+    }
+    const outcome = peerMessaging.decide(resolved.msgId, decision);
+    peerMessaging.recordHeldListing(peerMessaging.getHeld());
+    if (outcome === "gone") {
+      return {
+        type: "message",
+        messageType: "info",
+        content: "That message is no longer waiting \u2014 it may have expired or already been decided."
+      };
+    }
+    if (outcome === "failed") {
+      return {
+        type: "message",
+        messageType: "error",
+        content: "The session could not take the message just now \u2014 its input queue is full. It is still waiting; try again in a moment."
+      };
+    }
+    return {
+      type: "message",
+      messageType: "info",
+      content: verb === "accept" ? "Released to this session. It will be picked up on the next turn." : "Dropped. The sending session has been told."
+    };
+  }, "action")
+};
+
 // packages/cli/src/ui/commands/btwCommand.ts
 init_esbuild_shims();
 function formatBtwError(error) {
@@ -5808,8 +5980,8 @@ function formatSmapsRollup(smapsRollup) {
   if (rssLine) {
     return rssLine;
   }
-  const preview = smapsRollup.slice(0, 80).trim().replace(/\s+/g, " ");
-  return `${t("parse error")}: ${preview}`;
+  const preview2 = smapsRollup.slice(0, 80).trim().replace(/\s+/g, " ");
+  return `${t("parse error")}: ${preview2}`;
 }
 __name(formatSmapsRollup, "formatSmapsRollup");
 function formatCoreDiagnostics(diagnostics) {
@@ -6229,11 +6401,13 @@ var effortCommand = {
       };
     }
     applyReasoningEffort(config, tier);
-    settings.setValue(
-      getPersistScopeForModelSelection(settings),
-      "model.reasoningEffort",
-      tier
-    );
+    if (context.executionPolicy?.persistModelSelection !== false) {
+      settings.setValue(
+        getPersistScopeForModelSelection(settings),
+        "model.reasoningEffort",
+        tier
+      );
+    }
     return {
       type: "message",
       messageType: "info",
@@ -7239,7 +7413,7 @@ var expandNowCommand = {
         content: t("History is already expanded in this session.")
       };
     }
-    const { expandCollapsedHistory } = await import("./resumeHistoryUtils-GFPJD2XB.js");
+    const { expandCollapsedHistory } = await import("./resumeHistoryUtils-CZ4JRDVW.js");
     const updated = expandCollapsedHistory(history);
     loadHistory(updated);
     refreshStatic();
@@ -8622,6 +8796,15 @@ var importConfigCommand = {
 ${usage()}`
       };
     }
+    if (parsed.scope === "project" && context.executionPolicy?.allowWorkspaceSettingsWrite === false) {
+      return {
+        type: "message",
+        messageType: "error",
+        content: t(
+          "Project configuration imports are not available in this session."
+        )
+      };
+    }
     try {
       const importSource = resolveImportSourceForScope(
         parsed.source,
@@ -8816,6 +8999,15 @@ function validateUiScopeFlags(context, parsed) {
       )
     };
   }
+  if (parsed.scope === "Workspace" /* Workspace */ && context.executionPolicy?.allowWorkspaceSettingsWrite === false) {
+    return {
+      type: "message",
+      messageType: "error",
+      content: t(
+        "Project language settings are not available in this session."
+      )
+    };
+  }
   if (parsed.scope === "Workspace" /* Workspace */ && context.services.settings && !context.services.settings.isTrusted) {
     return {
       type: "message",
@@ -9296,7 +9488,7 @@ function persistSetting(settings, path18, value, scopeOverride) {
   settings.setValue(resolveScope(settings, scopeOverride), path18, value);
 }
 __name(persistSetting, "persistSetting");
-async function switchMainModel(config, settings, currentAuthType, modelArg, scopeOverride) {
+async function switchMainModel(config, settings, currentAuthType, modelArg, scopeOverride, persistSelection = true) {
   const parsed = parseAcpModelOption(modelArg);
   if (parsed.authType) {
     await config.switchModel(
@@ -9304,19 +9496,23 @@ async function switchMainModel(config, settings, currentAuthType, modelArg, scop
       parsed.modelId,
       parsed.authType !== currentAuthType && parsed.authType === "qwen-oauth" /* QWEN_OAUTH */ ? { requireCachedCredentials: true } : void 0
     );
-    persistSetting(
-      settings,
-      "security.auth.selectedType",
-      parsed.authType,
-      scopeOverride
-    );
-    persistSetting(settings, "model.name", parsed.modelId, scopeOverride);
-    persistSetting(settings, "model.baseUrl", "", scopeOverride);
+    if (persistSelection) {
+      persistSetting(
+        settings,
+        "security.auth.selectedType",
+        parsed.authType,
+        scopeOverride
+      );
+      persistSetting(settings, "model.name", parsed.modelId, scopeOverride);
+      persistSetting(settings, "model.baseUrl", "", scopeOverride);
+    }
     return parsed.modelId;
   }
   await config.switchModel(currentAuthType, modelArg, void 0);
-  persistSetting(settings, "model.name", modelArg, scopeOverride);
-  persistSetting(settings, "model.baseUrl", "", scopeOverride);
+  if (persistSelection) {
+    persistSetting(settings, "model.name", modelArg, scopeOverride);
+    persistSetting(settings, "model.baseUrl", "", scopeOverride);
+  }
   return modelArg;
 }
 __name(switchMainModel, "switchMainModel");
@@ -9540,6 +9736,14 @@ var modelCommand = {
         )
       };
     }
+    const auxiliarySelection = /(?:^|\s)--(?:fast|voice|vision|compaction|image)(?:\s|$)/.test(rawArgs);
+    if (hasProject && context.executionPolicy?.allowWorkspaceSettingsWrite === false || context.executionPolicy?.persistModelSelection === false && (hasProject || hasGlobal || auxiliarySelection)) {
+      return {
+        type: "message",
+        messageType: "error",
+        content: t("This model selection is not available in this session.")
+      };
+    }
     if (scopeOverride === "Workspace" /* Workspace */ && settings && !settings.isTrusted) {
       return {
         type: "message",
@@ -10036,7 +10240,8 @@ ${formatNonVisionModelWarning(modelName2)}`;
         settings,
         authType,
         modelName,
-        scopeOverride
+        scopeOverride,
+        context.executionPolicy?.persistModelSelection !== false
       );
       if (context.executionMode === "acp") {
         await recordDaemonSessionModelFromConfig(config);
@@ -14518,10 +14723,10 @@ var updateCommand = {
       { performStandaloneUpdate },
       installationInfo
     ] = await Promise.all([
-      import("./updateCheck-JCLP5JFT.js"),
-      import("./processUtils-ENAY2GSA.js"),
-      import("./standalone-update-IRFRNGAA.js"),
-      import("./installationInfo-HVDQOSIE.js")
+      import("./updateCheck-7QBDXZRT.js"),
+      import("./processUtils-IQZBYWSB.js"),
+      import("./standalone-update-RGILUQVK.js"),
+      import("./installationInfo-Y7AULNMX.js")
     ]);
     const { formatUpdateInstructions, getInstallationInfo: getInstallationInfo2 } = installationInfo;
     const settings = context.services.settings;
@@ -14682,6 +14887,7 @@ var BuiltinCommandLoader = class {
       approvalModeCommand,
       authCommand,
       branchCommand,
+      peersCommand,
       btwCommand,
       forkCommand,
       bugCommand,
@@ -16057,6 +16263,12 @@ function getSkillCommandName(command) {
   return command.skillDetail?.name ?? command.name;
 }
 __name(getSkillCommandName, "getSkillCommandName");
+function isCommandAllowedByPolicy(command, policy) {
+  if (!policy || command.kind !== "built-in" /* BUILT_IN */) return true;
+  if (command.name === "clear" && !policy.allowSessionReset) return false;
+  return !policy.blockedBuiltinCommandNames.includes(command.name);
+}
+__name(isCommandAllowedByPolicy, "isCommandAllowedByPolicy");
 function handleCommandResult(result, outputHistoryItems) {
   switch (result.type) {
     case "submit_prompt":
@@ -16176,12 +16388,12 @@ async function fireUserPromptExpansionHook(config, commandName, commandArgs, con
   };
 }
 __name(fireUserPromptExpansionHook, "fireUserPromptExpansionHook");
-async function registerModelInvocableCommands(commandService, config, executionMode, settings) {
+async function registerModelInvocableCommands(commandService, config, executionMode, settings, executionPolicy) {
   if (!settings) {
     return;
   }
   config.setModelInvocableCommandsProvider(
-    () => commandService.getModelInvocableCommands().map((cmd) => ({
+    () => commandService.getModelInvocableCommands().filter((cmd) => isCommandAllowedByPolicy(cmd, executionPolicy)).map((cmd) => ({
       name: cmd.name,
       description: cmd.modelDescription ?? cmd.description
     }))
@@ -16189,7 +16401,9 @@ async function registerModelInvocableCommands(commandService, config, executionM
   config.setModelInvocableCommandsExecutor(
     async (name, args = "") => {
       const commands = commandService.getModelInvocableCommands();
-      const cmd = commands.find((c) => c.name === name);
+      const cmd = commands.find(
+        (candidate) => candidate.name === name && isCommandAllowedByPolicy(candidate, executionPolicy)
+      );
       if (!cmd?.action) return null;
       const minimalContext = {
         executionMode,
@@ -16198,7 +16412,8 @@ async function registerModelInvocableCommands(commandService, config, executionM
           name,
           args
         },
-        services: { config, settings, logger: null }
+        services: { config, settings, logger: null },
+        ...executionPolicy ? { executionPolicy } : {}
       };
       const result = await cmd.action(minimalContext, args);
       if (!result || result.type !== "submit_prompt") return null;
@@ -16227,7 +16442,7 @@ async function registerModelInvocableCommands(commandService, config, executionM
   await skillManager?.notifyConfigChanged();
 }
 __name(registerModelInvocableCommands, "registerModelInvocableCommands");
-var handleSlashCommand = /* @__PURE__ */ __name(async (rawQuery, abortController, config, settings, sessionHooks) => {
+var handleSlashCommand = /* @__PURE__ */ __name(async (rawQuery, abortController, config, settings, sessionHooks, executionPolicy) => {
   const trimmed = rawQuery.trim();
   if (!trimmed.startsWith("/")) {
     return { type: "no_command" };
@@ -16263,10 +16478,13 @@ var handleSlashCommand = /* @__PURE__ */ __name(async (rawQuery, abortController
     commandService,
     config,
     executionMode,
-    settings
+    settings,
+    executionPolicy
   );
   const allCommands = allCommandService.getCommands();
-  const filteredCommands = commandService.getCommandsForMode(executionMode).filter((cmd) => !isDisabled(cmd));
+  const filteredCommands = commandService.getCommandsForMode(executionMode).filter(
+    (cmd) => !isDisabled(cmd) && isCommandAllowedByPolicy(cmd, executionPolicy)
+  );
   const { commandToExecute, args } = parseSlashCommand(
     rawQuery,
     filteredCommands
@@ -16282,6 +16500,7 @@ var handleSlashCommand = /* @__PURE__ */ __name(async (rawQuery, abortController
       if (!skill.action) continue;
       const skillContext = {
         executionMode,
+        ...executionPolicy ? { executionPolicy } : {},
         invocation: {
           raw: `/${skill.name}`,
           name: skill.name,
@@ -16355,6 +16574,15 @@ var handleSlashCommand = /* @__PURE__ */ __name(async (rawQuery, abortController
           originalType: "filtered_command"
         };
       }
+      if (!isCommandAllowedByPolicy(knownCommand, executionPolicy)) {
+        return {
+          type: "unsupported",
+          reason: t('The command "/{{command}}" is not available here.', {
+            command: typedToken
+          }),
+          originalType: "unsupported_action"
+        };
+      }
       return {
         type: "unsupported",
         reason: t('The command "/{{command}}" is not supported in this mode.', {
@@ -16388,6 +16616,7 @@ var handleSlashCommand = /* @__PURE__ */ __name(async (rawQuery, abortController
   };
   const context = {
     executionMode,
+    ...executionPolicy ? { executionPolicy } : {},
     abortSignal: commandToExecute.name === "advisor" ? abortController.signal : void 0,
     services: {
       config,
@@ -16466,7 +16695,7 @@ var handleSlashCommand = /* @__PURE__ */ __name(async (rawQuery, abortController
     resolvedCommand
   };
 }, "handleSlashCommand");
-var getAvailableCommands = /* @__PURE__ */ __name(async (config, abortSignal, mode = "acp", settings) => {
+var getAvailableCommands = /* @__PURE__ */ __name(async (config, abortSignal, mode = "acp", settings, executionPolicy) => {
   try {
     const loaders = [
       new McpPromptLoader(config),
@@ -16486,9 +16715,12 @@ var getAvailableCommands = /* @__PURE__ */ __name(async (config, abortSignal, mo
       commandService,
       config,
       mode,
-      settings
+      settings,
+      executionPolicy
+    );
+    return commandService.getCommandsForMode(mode).filter(
+      (command) => isCommandAllowedByPolicy(command, executionPolicy)
     );
-    return commandService.getCommandsForMode(mode);
   } catch (error) {
     debugLogger20.error("Error loading available commands:", error);
     return [];