@qwen-code/qwen-code 0.22.2 → 0.22.3-nightly.20260831.3a0c4c6108

package/chunks/{chunk-RXFQM6FQ.js → chunk-DMEUXLSS.js}

@@ -31,9 +31,24 @@ function isLoopbackBind(hostname) {
   return LOOPBACK_BINDS.has(normalized) || isIpv4Loopback(normalized);
 }
 __name(isLoopbackBind, "isLoopbackBind");
+function isLoopbackAddress(hostname) {
+  const normalized = hostname.toLowerCase();
+  return normalized === "::1" || normalized === "[::1]" || isIpv4Loopback(normalized);
+}
+__name(isLoopbackAddress, "isLoopbackAddress");
+function formatHostForAuthority(hostname) {
+  const normalized = hostname.toLowerCase();
+  if (normalized.startsWith("[") && normalized.endsWith("]")) {
+    return normalized;
+  }
+  return normalized.includes(":") ? `[${normalized}]` : normalized;
+}
+__name(formatHostForAuthority, "formatHostForAuthority");
 
 export {
-  isLoopbackBind
+  isLoopbackBind,
+  isLoopbackAddress,
+  formatHostForAuthority
 };
 /**
  * @license

package/chunks/{chunk-3AFMQUTI.js → chunk-E4JNFXNI.js}

@@ -2,13 +2,13 @@
 "use strict";
 import {
   isPrivateHost
-} from "./chunk-3JGZSIDA.js";
+} from "./chunk-KFN2IZYR.js";
 import {
   loadUndici
-} from "./chunk-PPKZ7JOE.js";
+} from "./chunk-22UH7VTP.js";
 import {
   getErrorMessage
-} from "./chunk-UHQFIS7N.js";
+} from "./chunk-EAHOJF6V.js";
 import {
   init_esbuild_shims
 } from "./chunk-5O2XNYP6.js";

package/chunks/{chunk-UHQFIS7N.js → chunk-EAHOJF6V.js}

@@ -1340,6 +1340,8 @@ var ensuredDebugDirPath = null;
 var hasWriteFailure = false;
 var globalSession = null;
 var lastAliasedKey = null;
+var aliasGeneration = 0;
+var aliasFailureStreak = 0;
 var aliasChain = Promise.resolve();
 var sessionContext = new AsyncLocalStorage3();
 function isDebugLogFileEnabled() {
@@ -1411,11 +1413,18 @@ function isDebugLoggingDegraded() {
 __name(isDebugLoggingDegraded, "isDebugLoggingDegraded");
 var DEBUG_LATEST_ALIAS = "latest";
 var SESSION_ID_PATTERN = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
-function doUpdateLatestDebugLogAlias(sessionId) {
+var MAX_CONSECUTIVE_ALIAS_FAILURES = 3;
+async function doUpdateLatestDebugLogAlias(sessionId) {
   const aliasPath = path4.join(Storage.getGlobalDebugDir(), DEBUG_LATEST_ALIAS);
   const targetPath = Storage.getDebugLogPath(sessionId);
-  return ensureDebugDirExists().then(() => updateSymlink(aliasPath, targetPath, { fallbackCopy: false })).catch(() => {
-  });
+  await ensureDebugDirExists();
+  await updateSymlink(aliasPath, targetPath, { fallbackCopy: false });
+  try {
+    const actualTarget = await fs4.readlink(aliasPath);
+    return actualTarget === path4.relative(path4.dirname(aliasPath), targetPath);
+  } catch {
+    return false;
+  }
 }
 __name(doUpdateLatestDebugLogAlias, "doUpdateLatestDebugLogAlias");
 function updateLatestDebugLogAlias(sessionId) {
@@ -1430,7 +1439,22 @@ function updateLatestDebugLogAlias(sessionId) {
     return;
   }
   lastAliasedKey = key;
-  aliasChain = aliasChain.then(() => doUpdateLatestDebugLogAlias(sessionId));
+  const generation = ++aliasGeneration;
+  aliasChain = aliasChain.then(async () => {
+    let updated = false;
+    try {
+      updated = await doUpdateLatestDebugLogAlias(sessionId);
+    } catch {
+    }
+    if (updated) {
+      aliasFailureStreak = 0;
+      return;
+    }
+    aliasFailureStreak += 1;
+    if (aliasFailureStreak < MAX_CONSECUTIVE_ALIAS_FAILURES && aliasGeneration === generation) {
+      lastAliasedKey = null;
+    }
+  });
 }
 __name(updateLatestDebugLogAlias, "updateLatestDebugLogAlias");
 function setDebugLogSession(session) {

package/chunks/{chunk-OIVXBW3W.js → chunk-ED7DD7MV.js}

@@ -2,14 +2,14 @@
 "use strict";
 import {
   readRuntimeStatus
-} from "./chunk-EOGELB3H.js";
+} from "./chunk-SDCHI64N.js";
 import {
   atomicWriteJSON
-} from "./chunk-23RFD54N.js";
+} from "./chunk-KHP66DFN.js";
 import {
   Storage,
   isNodeError
-} from "./chunk-UHQFIS7N.js";
+} from "./chunk-EAHOJF6V.js";
 import {
   init_esbuild_shims
 } from "./chunk-5O2XNYP6.js";

package/chunks/{chunk-6DIGWMGT.js → chunk-EIJT2PQ6.js}

@@ -2,11 +2,11 @@
 "use strict";
 import {
   atomicWriteFileSync
-} from "./chunk-23RFD54N.js";
+} from "./chunk-KHP66DFN.js";
 import {
   Storage,
   createDebugLogger
-} from "./chunk-UHQFIS7N.js";
+} from "./chunk-EAHOJF6V.js";
 import {
   init_esbuild_shims
 } from "./chunk-5O2XNYP6.js";

package/chunks/{chunk-XQFT3QUF.js → chunk-ENYUKMFK.js}

@@ -2,7 +2,7 @@
 "use strict";
 import {
   createDebugLogger
-} from "./chunk-UHQFIS7N.js";
+} from "./chunk-EAHOJF6V.js";
 import {
   init_esbuild_shims
 } from "./chunk-5O2XNYP6.js";

package/chunks/{chunk-CQH5KTKC.js → chunk-ERHAMGAA.js}

@@ -8,7 +8,7 @@ import {
   BaseToolInvocation,
   ToolDisplayNames,
   ToolNames
-} from "./chunk-UTLCH2FK.js";
+} from "./chunk-LYSZVCCD.js";
 import {
   init_esbuild_shims
 } from "./chunk-5O2XNYP6.js";

package/chunks/{chunk-IOPCFOTF.js → chunk-ERRJA23L.js}

@@ -2,14 +2,14 @@
 "use strict";
 import {
   STATUS_SCHEMA_VERSION
-} from "./chunk-JHS74YAB.js";
+} from "./chunk-J4Y3QJHF.js";
 import {
   formatMemoryUsage
-} from "./chunk-TGWAQ5RB.js";
+} from "./chunk-CHEIIBT3.js";
 import {
   detectRuntime,
   redactProxyCredentials
-} from "./chunk-PPKZ7JOE.js";
+} from "./chunk-22UH7VTP.js";
 import {
   init_esbuild_shims
 } from "./chunk-5O2XNYP6.js";

package/chunks/{chunk-LDP5OD6N.js → chunk-EU2B4P3D.js}

@@ -5,13 +5,13 @@ import {
 } from "./chunk-5EJZE3FP.js";
 import {
   resolveBundleDir
-} from "./chunk-43GGFFLY.js";
+} from "./chunk-PDXYZBBQ.js";
 import {
   Storage
-} from "./chunk-UHQFIS7N.js";
+} from "./chunk-EAHOJF6V.js";
 import {
   writeStderrLine
-} from "./chunk-KGJGEEVR.js";
+} from "./chunk-7FA2II6K.js";
 import {
   init_esbuild_shims
 } from "./chunk-5O2XNYP6.js";
@@ -165,15 +165,15 @@ var MUST_TRANSLATE_KEYS = [
 
 // import("./locales/**/*.js") in packages/cli/src/i18n/index.ts
 var globImport_locales_js = __glob({
-  "./locales/ca.js": () => import("./ca-7HPYOYSZ.js"),
-  "./locales/de.js": () => import("./de-X6HLSIFE.js"),
-  "./locales/en.js": () => import("./en-YLXBXM4Z.js"),
-  "./locales/fr.js": () => import("./fr-FTZWF462.js"),
-  "./locales/ja.js": () => import("./ja-2GL5FKYJ.js"),
-  "./locales/pt.js": () => import("./pt-XN2YWJVM.js"),
-  "./locales/ru.js": () => import("./ru-OLTMFJEW.js"),
-  "./locales/zh-TW.js": () => import("./zh-TW-RPTMRTHG.js"),
-  "./locales/zh.js": () => import("./zh-UNY63FR3.js")
+  "./locales/ca.js": () => import("./ca-BNU7YNDE.js"),
+  "./locales/de.js": () => import("./de-T4BLOKEC.js"),
+  "./locales/en.js": () => import("./en-E4AYTX6H.js"),
+  "./locales/fr.js": () => import("./fr-BGHGYX6A.js"),
+  "./locales/ja.js": () => import("./ja-G3FTD5XE.js"),
+  "./locales/pt.js": () => import("./pt-D73IFYT7.js"),
+  "./locales/ru.js": () => import("./ru-QMISLKRH.js"),
+  "./locales/zh-TW.js": () => import("./zh-TW-UFXRZTXX.js"),
+  "./locales/zh.js": () => import("./zh-2BQ7P6OD.js")
 });
 
 // packages/cli/src/i18n/index.ts

package/chunks/{chunk-W5MJJ2V7.js → chunk-FHPYRXRH.js}

@@ -2,7 +2,7 @@
 "use strict";
 import {
   registerCleanup
-} from "./chunk-Y6LSMB6J.js";
+} from "./chunk-TV7BJ7TX.js";
 import {
   init_esbuild_shims
 } from "./chunk-5O2XNYP6.js";

package/chunks/{chunk-IZIVM7LZ.js → chunk-FIWZOMBF.js}

@@ -3,7 +3,7 @@
 import {
   getTasksDir,
   sanitizeName
-} from "./chunk-SFPGAQUL.js";
+} from "./chunk-373DQUVA.js";
 import {
   require_proper_lockfile
 } from "./chunk-MLXTMF7H.js";
@@ -12,11 +12,11 @@ import {
 } from "./chunk-VGC4I5JJ.js";
 import {
   atomicWriteJSON
-} from "./chunk-23RFD54N.js";
+} from "./chunk-KHP66DFN.js";
 import {
   createDebugLogger,
   isNodeError
-} from "./chunk-UHQFIS7N.js";
+} from "./chunk-EAHOJF6V.js";
 import {
   init_esbuild_shims
 } from "./chunk-5O2XNYP6.js";

package/chunks/{chunk-4HV6HH33.js → chunk-FPMQT2YY.js}

@@ -24,14 +24,6 @@ import {
   isChannelWebhookEnqueueErrorCode,
   isChannelWebhookTaskResultMessage
 } from "./chunk-STUJ7IMZ.js";
-import {
-  createWorkerDiagnosticRedactor,
-  normalizeWorkerDiagnostic,
-  sanitizeWorkerDiagnostic
-} from "./chunk-JVPFTDBK.js";
-import {
-  channelSelectionNames
-} from "./chunk-ALMR3E6Q.js";
 import {
   CHANNEL_DAEMON_WORKER_SENTINEL,
   CHANNEL_WORKER_HEARTBEAT_INTERVAL_MS,
@@ -40,6 +32,14 @@ import {
   QWEN_DAEMON_WORKSPACE_ENV,
   QWEN_SERVER_TOKEN_ENV
 } from "./chunk-GYTKQYDB.js";
+import {
+  createWorkerDiagnosticRedactor,
+  normalizeWorkerDiagnostic,
+  sanitizeWorkerDiagnostic
+} from "./chunk-3EGEBDTW.js";
+import {
+  channelSelectionNames
+} from "./chunk-ALMR3E6Q.js";
 import {
   CHANNEL_DELIVERY_IPC_TIMEOUT_MS,
   ChannelDeliveryError,
@@ -57,7 +57,7 @@ import {
 } from "./chunk-5HBA2Z7V.js";
 import {
   sanitizeLogText
-} from "./chunk-E55H6BZ7.js";
+} from "./chunk-IXEZHTDR.js";
 import {
   init_esbuild_shims
 } from "./chunk-5O2XNYP6.js";

package/chunks/{chunk-Z7VOMGDC.js → chunk-FTJMWDND.js}

@@ -43,20 +43,6 @@ var WorkspaceSkillNotFoundError = class extends Error {
     __name(this, "WorkspaceSkillNotFoundError");
   }
 };
-var WorkspaceSkillNotToggleableError = class extends Error {
-  constructor(skillName, reason, lockedScope) {
-    super(
-      lockedScope ? `Skill ${skillName} is locked by ${lockedScope} settings` : `Skill ${skillName} is not toggleable: ${reason}`
-    );
-    this.skillName = skillName;
-    this.reason = reason;
-    this.lockedScope = lockedScope;
-    this.name = "WorkspaceSkillNotToggleableError";
-  }
-  static {
-    __name(this, "WorkspaceSkillNotToggleableError");
-  }
-};
 function mapWorkspaceSkillToggleError(error) {
   if (error instanceof WorkspaceSkillNotFoundError) {
     return {
@@ -65,15 +51,6 @@ function mapWorkspaceSkillToggleError(error) {
       error: error.message
     };
   }
-  if (error instanceof WorkspaceSkillNotToggleableError) {
-    return {
-      skillName: error.skillName,
-      code: error.reason === "inactive_extension" ? "skill_inactive_extension" : "skill_not_toggleable",
-      error: error.message,
-      reason: error.reason,
-      ...error.lockedScope ? { lockedScope: error.lockedScope } : {}
-    };
-  }
   return void 0;
 }
 __name(mapWorkspaceSkillToggleError, "mapWorkspaceSkillToggleError");
@@ -82,7 +59,6 @@ export {
   WorkspaceSettingsPartialPersistError,
   WorkspacePermissionRulesSessionRequiredError,
   WorkspaceSkillNotFoundError,
-  WorkspaceSkillNotToggleableError,
   mapWorkspaceSkillToggleError
 };
 /**

package/chunks/{chunk-L2M46FP5.js → chunk-FXUSWLBF.js}

@@ -2,7 +2,7 @@
 "use strict";
 import {
   defaultModalities
-} from "./chunk-YRLW2MSX.js";
+} from "./chunk-XBVNNDPK.js";
 import {
   Mutex
 } from "./chunk-VGC4I5JJ.js";
@@ -14,23 +14,23 @@ import {
   isCacheableReadResult,
   parsePDFPageRange,
   processSingleFileContent
-} from "./chunk-3I6UTTDX.js";
+} from "./chunk-67AY5D3M.js";
 import {
   isAnyAutoMemPath
-} from "./chunk-6PJOTWAN.js";
+} from "./chunk-HT5S5TRQ.js";
 import {
   runSideQuery
-} from "./chunk-BWORX6FA.js";
+} from "./chunk-LMMHS3RS.js";
 import {
   generateLegacyMcpToolName,
   normalizeToolNameForProvider
 } from "./chunk-WZAD4ZNJ.js";
 import {
   InstallationManager
-} from "./chunk-6DIGWMGT.js";
+} from "./chunk-EIJT2PQ6.js";
 import {
   atomicWriteFile
-} from "./chunk-23RFD54N.js";
+} from "./chunk-KHP66DFN.js";
 import {
   safeJsonStringify
 } from "./chunk-HHJLM3WQ.js";
@@ -102,7 +102,7 @@ import {
   recordTokenUsageMetrics,
   recordToolCallMetrics,
   recordToolExecutionMetrics
-} from "./chunk-L6BZRIUL.js";
+} from "./chunk-TBJ3SNS3.js";
 import {
   SemanticAttributes,
   init_esm,
@@ -110,14 +110,14 @@ import {
 } from "./chunk-74TONY4F.js";
 import {
   STRUCTURED_OUTPUT_REDACTED_ARGS
-} from "./chunk-XF63PKEN.js";
+} from "./chunk-IXHV5MIC.js";
 import {
   BaseDeclarativeTool,
   BaseToolInvocation,
   StructuredToolError,
   ToolDisplayNames,
   ToolNames
-} from "./chunk-UTLCH2FK.js";
+} from "./chunk-LYSZVCCD.js";
 import {
   Storage,
   createDebugLogger,
@@ -128,7 +128,7 @@ import {
   realpathNearestExisting,
   shortenPath,
   unescapePath
-} from "./chunk-UHQFIS7N.js";
+} from "./chunk-EAHOJF6V.js";
 import {
   require_dist
 } from "./chunk-75DOP5OR.js";
@@ -2599,7 +2599,7 @@ var QwenLogger = class _QwenLogger {
     this.flushIfNeeded();
   }
   // Phase 4b — HTTP-status retry from retryWithBackoff (429/5xx). Distinct from
-  // logContentRetryEvent which is fired by geminiChat's content-recovery loop.
+  // logContentRetryEvent which is fired by llmChat's content-recovery loop.
   logApiRetryEvent(event) {
     const rumEvent = this.createActionEvent("misc", "api_retry", {
       properties: {
@@ -2932,7 +2932,7 @@ var UiTelemetryService = class _UiTelemetryService extends EventEmitter {
    *
    * `outgoingSessionId` is the session the process was on when the replay
    * begins — the swap transaction's begin-time `outgoingHint`, falling back
-   * to `GeminiClient.initializedSessionId`. An earlier failed swap's abort
+   * to `LlmClient.initializedSessionId`. An earlier failed swap's abort
    * clears `initializedSessionId`, so keying on it alone would capture no
    * outgoing session and lose the live bucket (#9844 review). Its bucket and
    * closed flag are captured too: the `/branch` rollback re-initializes that
@@ -5481,6 +5481,189 @@ function collectText(parts) {
 }
 __name(collectText, "collectText");
 
+// packages/core/src/tools/mcp-classifier-input.ts
+init_esbuild_shims();
+var MCP_CLASSIFIER_MAX_STRING_CHARS = 2e3;
+var MCP_CLASSIFIER_MAX_TOTAL_CHARS = 16e3;
+var MCP_CLASSIFIER_MAX_DEPTH = 8;
+var MCP_CLASSIFIER_MAX_ENTRIES = 64;
+var MCP_CLASSIFIER_MAX_NAME_CHARS = 200;
+var ENTRY_OVERHEAD = 2 * MCP_CLASSIFIER_MAX_DEPTH + 8;
+var CONTAINER_OVERHEAD = 2 * MCP_CLASSIFIER_MAX_DEPTH + 4;
+var ANNOTATION_KEYS = [
+  "readOnlyHint",
+  "destructiveHint",
+  "idempotentHint",
+  "openWorldHint"
+];
+function charge(budget, chars) {
+  budget.remaining -= chars;
+}
+__name(charge, "charge");
+function marker(budget, text) {
+  budget.truncated = true;
+  charge(budget, text.length);
+  return text;
+}
+__name(marker, "marker");
+function fitString(value, limit, budget) {
+  value = value.replace(/[\p{Cc}\p{Zl}\p{Zp}]/gu, " ");
+  let encoded = JSON.stringify(value);
+  if (encoded.length - 2 <= limit) {
+    charge(budget, encoded.length);
+    return value;
+  }
+  budget.truncated = true;
+  let keep = Math.min(value.length, Math.max(0, limit));
+  let cut = value.slice(0, keep);
+  encoded = JSON.stringify(cut);
+  while (keep > 0 && encoded.length - 2 > limit) {
+    keep = Math.min(
+      keep - 1,
+      Math.floor(keep * limit / (encoded.length - 2))
+    );
+    cut = value.slice(0, Math.max(0, keep));
+    encoded = JSON.stringify(cut);
+  }
+  const note = `\u2026[truncated ${value.length - cut.length} chars]`;
+  charge(budget, encoded.length + note.length);
+  return cut + note;
+}
+__name(fitString, "fitString");
+function stringLimit(budget) {
+  return Math.max(
+    0,
+    Math.min(MCP_CLASSIFIER_MAX_STRING_CHARS, budget.remaining)
+  );
+}
+__name(stringLimit, "stringLimit");
+function uniqueKey(out, wanted) {
+  let key = wanted;
+  while (key in out) key += "\u2026";
+  return key;
+}
+__name(uniqueKey, "uniqueKey");
+function projectValue(value, depth, budget) {
+  if (budget.remaining <= 0) {
+    return marker(budget, "[omitted: argument budget exhausted]");
+  }
+  if (typeof value === "string") {
+    return fitString(value, stringLimit(budget), budget);
+  }
+  if (value === null || typeof value === "number" || typeof value === "boolean") {
+    charge(budget, String(value).length);
+    return value;
+  }
+  if (typeof value !== "object") {
+    if (value === void 0) {
+      charge(budget, 4);
+      return null;
+    }
+    return fitString(String(value), stringLimit(budget), budget);
+  }
+  if (depth >= MCP_CLASSIFIER_MAX_DEPTH) {
+    return marker(budget, "[omitted: nesting too deep]");
+  }
+  charge(budget, CONTAINER_OVERHEAD);
+  if (Array.isArray(value)) {
+    const out2 = [];
+    for (let i = 0; i < value.length; i++) {
+      const left = value.length - i;
+      if (i >= MCP_CLASSIFIER_MAX_ENTRIES) {
+        out2.push(marker(budget, `[omitted: ${left} more entries]`));
+        break;
+      }
+      if (budget.remaining <= 0) {
+        out2.push(
+          marker(
+            budget,
+            `[omitted: ${left} more entries, argument budget exhausted]`
+          )
+        );
+        break;
+      }
+      charge(budget, ENTRY_OVERHEAD);
+      out2.push(projectValue(value[i], depth + 1, budget));
+    }
+    return out2;
+  }
+  const out = /* @__PURE__ */ Object.create(null);
+  const entries = Object.entries(value);
+  for (let i = 0; i < entries.length; i++) {
+    const left = entries.length - i;
+    if (i >= MCP_CLASSIFIER_MAX_ENTRIES) {
+      out[uniqueKey(out, "\u2026")] = marker(budget, `[omitted: ${left} more keys]`);
+      break;
+    }
+    if (budget.remaining <= 0) {
+      out[uniqueKey(out, "\u2026")] = marker(
+        budget,
+        `[omitted: ${left} more keys, argument budget exhausted]`
+      );
+      break;
+    }
+    const [key, item] = entries[i];
+    charge(budget, ENTRY_OVERHEAD);
+    const projectedKey = uniqueKey(
+      out,
+      fitString(key, stringLimit(budget), budget)
+    );
+    out[projectedKey] = projectValue(item, depth + 1, budget);
+  }
+  return out;
+}
+__name(projectValue, "projectValue");
+function projectMcpArgumentsWithBudget(args, budget) {
+  if (args === null || typeof args !== "object" || Array.isArray(args)) {
+    return { value: {}, truncated: args !== void 0 && args !== null };
+  }
+  const value = projectValue(args, 0, budget);
+  return { value, truncated: budget.truncated };
+}
+__name(projectMcpArgumentsWithBudget, "projectMcpArgumentsWithBudget");
+function fitName(name, budget) {
+  const limit = Math.max(
+    0,
+    Math.min(MCP_CLASSIFIER_MAX_NAME_CHARS, budget.remaining)
+  );
+  return fitString(name, limit, budget);
+}
+__name(fitName, "fitName");
+function projectAnnotations(annotations) {
+  if (!annotations) return void 0;
+  const out = {};
+  for (const key of ANNOTATION_KEYS) {
+    if (typeof annotations[key] === "boolean") out[key] = annotations[key];
+  }
+  return Object.keys(out).length > 0 ? out : void 0;
+}
+__name(projectAnnotations, "projectAnnotations");
+function buildMcpClassifierInput(options) {
+  const budget = {
+    remaining: MCP_CLASSIFIER_MAX_TOTAL_CHARS,
+    truncated: false
+  };
+  const server = fitName(options.serverName, budget);
+  const tool = fitName(options.serverToolName, budget);
+  const nameTruncated = budget.truncated;
+  budget.truncated = false;
+  const { value, truncated } = projectMcpArgumentsWithBudget(
+    options.params,
+    budget
+  );
+  const annotations = projectAnnotations(options.annotations);
+  const input = {
+    server,
+    tool,
+    ...annotations ? { annotations } : {},
+    arguments: value
+  };
+  if (truncated) input.arguments_truncated = true;
+  if (nameTruncated) input.name_truncated = true;
+  return input;
+}
+__name(buildMcpClassifierInput, "buildMcpClassifierInput");
+
 // packages/core/src/tools/mcp-tool.ts
 var debugLogger5 = createDebugLogger("MCP_TOOL");
 var MCP_DEAD_SESSION_ERROR_PATTERN = /session (not found|terminated|expired)/i;
@@ -6083,6 +6266,36 @@ var DiscoveredMCPTool = class _DiscoveredMCPTool extends BaseDeclarativeTool {
     );
     return legacyName === this.name ? [] : [legacyName];
   }
+  /**
+   * AUTO-mode classifier projection.
+   *
+   * Forwards the server name, the server-side tool name, the server's
+   * self-reported annotations, and a bounded copy of the arguments (see
+   * `mcp-classifier-input.ts` for the caps). Without the arguments the
+   * classifier can only see the tool name, cannot apply its
+   * data-exfiltration or external-write rules, and — being told to err on
+   * the side of blocking — rejects most MCP calls outright, which pushes
+   * users toward blanket `mcp__server` allow rules that skip the
+   * classifier entirely.
+   *
+   * The arguments are the agent's own output (already sent to the model
+   * provider as a function call), so forwarding them to a classifier on
+   * the same model configuration is not a new disclosure. Deployments that
+   * route the classifier elsewhere can opt out with
+   * `permissions.autoMode.mcp.forwardArguments: false`, which restores the
+   * name-only projection.
+   */
+  toAutoClassifierInput(params) {
+    if (this.cliConfig?.getAutoModeSettings?.()?.mcp?.forwardArguments === false) {
+      return "";
+    }
+    return buildMcpClassifierInput({
+      serverName: this.serverName,
+      serverToolName: this.serverToolName,
+      annotations: this.annotations,
+      params
+    });
+  }
   asFullyQualifiedTool() {
     return new _DiscoveredMCPTool(
       this.mcpTool,