@qwen-code/qwen-code 0.22.2 → 0.22.3-nightly.20260831.3a0c4c6108

package/chunks/agent-4Z4NTJXD.js

@@ -0,0 +1,99 @@
+// Force strict mode and setup for ESM
+"use strict";
+import {
+  AgentTool,
+  TOOL_REGISTRY_REBUILT,
+  createApprovalModeOverride,
+  findBackgroundedAncestorAgentId,
+  hasRebuiltToolRegistry,
+  rebuildToolRegistryOnOverride,
+  resolveSubagentApprovalMode,
+  stampBackgroundPromptPolicy
+} from "./chunk-ZBDYI7VM.js";
+import "./chunk-GOFAQQZA.js";
+import "./chunk-5M6IDOMF.js";
+import "./chunk-6HUXPLB5.js";
+import "./chunk-TWPJO254.js";
+import "./chunk-CQ35AJ4Z.js";
+import "./chunk-SMJYTKTB.js";
+import "./chunk-AI35S34R.js";
+import "./chunk-FIWZOMBF.js";
+import "./chunk-6PVPNMXU.js";
+import "./chunk-OKTNXDVO.js";
+import "./chunk-DJBQCO2E.js";
+import "./chunk-IRH27ZC2.js";
+import "./chunk-QHWCP53L.js";
+import "./chunk-UJ4DUYIH.js";
+import "./chunk-O6GEWCJA.js";
+import "./chunk-YDQ4OCDK.js";
+import "./chunk-SDCHI64N.js";
+import "./chunk-B2RIIK3K.js";
+import "./chunk-373DQUVA.js";
+import "./chunk-OSTQZIOY.js";
+import "./chunk-U6D2PPMN.js";
+import "./chunk-PDXYZBBQ.js";
+import "./chunk-QJNDUTOL.js";
+import "./chunk-ZHO2CW6D.js";
+import "./chunk-AF3QB6OL.js";
+import "./chunk-7TBU7PU2.js";
+import "./chunk-E4JNFXNI.js";
+import "./chunk-4P7PPAHN.js";
+import "./chunk-7J6OTNGO.js";
+import "./chunk-CHEIIBT3.js";
+import "./chunk-VYSZUQGU.js";
+import "./chunk-JX6XHPTX.js";
+import "./chunk-MLXTMF7H.js";
+import "./chunk-NAVJD2PQ.js";
+import "./chunk-KFN2IZYR.js";
+import "./chunk-GB4UKWY5.js";
+import "./chunk-QHMLYMMS.js";
+import "./chunk-UXEW7TQS.js";
+import "./chunk-PQEISIKS.js";
+import "./chunk-RT4QNQ5P.js";
+import "./chunk-26SIKQIC.js";
+import "./chunk-S6LOFUVP.js";
+import "./chunk-CFKIH3D3.js";
+import "./chunk-2LD5U7Q3.js";
+import "./chunk-DJ2GSRLV.js";
+import "./chunk-S2T7H5MI.js";
+import "./chunk-LKODFJRD.js";
+import "./chunk-FXUSWLBF.js";
+import "./chunk-XBVNNDPK.js";
+import "./chunk-VGC4I5JJ.js";
+import "./chunk-67AY5D3M.js";
+import "./chunk-HT5S5TRQ.js";
+import "./chunk-LMMHS3RS.js";
+import "./chunk-WZAD4ZNJ.js";
+import "./chunk-FPGTNKCP.js";
+import "./chunk-EIJT2PQ6.js";
+import "./chunk-H5GPPDGY.js";
+import "./chunk-XZA32HII.js";
+import "./chunk-KHP66DFN.js";
+import "./chunk-22UH7VTP.js";
+import "./chunk-HHJLM3WQ.js";
+import "./chunk-TBJ3SNS3.js";
+import "./chunk-74TONY4F.js";
+import "./chunk-IXHV5MIC.js";
+import "./chunk-D7D3HSYQ.js";
+import "./chunk-YKADANK6.js";
+import "./chunk-AQ37AY7B.js";
+import "./chunk-ODZF64DM.js";
+import "./chunk-LYSZVCCD.js";
+import "./chunk-EAHOJF6V.js";
+import "./chunk-75DOP5OR.js";
+import "./chunk-DMTGGOSA.js";
+import "./chunk-YQ3U5MUC.js";
+import "./chunk-AMDSOFFV.js";
+import "./chunk-TBWQLLFO.js";
+import "./chunk-5O2XNYP6.js";
+import "./chunk-J2S4EL5Y.js";
+export {
+  AgentTool,
+  TOOL_REGISTRY_REBUILT,
+  createApprovalModeOverride,
+  findBackgroundedAncestorAgentId,
+  hasRebuiltToolRegistry,
+  rebuildToolRegistryOnOverride,
+  resolveSubagentApprovalMode,
+  stampBackgroundPromptPolicy
+};

package/chunks/agent-headless-TVUJXQWU.js

@@ -0,0 +1,89 @@
+// Force strict mode and setup for ESM
+"use strict";
+import {
+  AgentHeadless,
+  ContextState,
+  templateString
+} from "./chunk-ZBDYI7VM.js";
+import "./chunk-GOFAQQZA.js";
+import "./chunk-5M6IDOMF.js";
+import "./chunk-6HUXPLB5.js";
+import "./chunk-TWPJO254.js";
+import "./chunk-CQ35AJ4Z.js";
+import "./chunk-SMJYTKTB.js";
+import "./chunk-AI35S34R.js";
+import "./chunk-FIWZOMBF.js";
+import "./chunk-6PVPNMXU.js";
+import "./chunk-OKTNXDVO.js";
+import "./chunk-DJBQCO2E.js";
+import "./chunk-IRH27ZC2.js";
+import "./chunk-QHWCP53L.js";
+import "./chunk-UJ4DUYIH.js";
+import "./chunk-O6GEWCJA.js";
+import "./chunk-YDQ4OCDK.js";
+import "./chunk-SDCHI64N.js";
+import "./chunk-B2RIIK3K.js";
+import "./chunk-373DQUVA.js";
+import "./chunk-OSTQZIOY.js";
+import "./chunk-U6D2PPMN.js";
+import "./chunk-PDXYZBBQ.js";
+import "./chunk-QJNDUTOL.js";
+import "./chunk-ZHO2CW6D.js";
+import "./chunk-AF3QB6OL.js";
+import "./chunk-7TBU7PU2.js";
+import "./chunk-E4JNFXNI.js";
+import "./chunk-4P7PPAHN.js";
+import "./chunk-7J6OTNGO.js";
+import "./chunk-CHEIIBT3.js";
+import "./chunk-VYSZUQGU.js";
+import "./chunk-JX6XHPTX.js";
+import "./chunk-MLXTMF7H.js";
+import "./chunk-NAVJD2PQ.js";
+import "./chunk-KFN2IZYR.js";
+import "./chunk-GB4UKWY5.js";
+import "./chunk-QHMLYMMS.js";
+import "./chunk-UXEW7TQS.js";
+import "./chunk-PQEISIKS.js";
+import "./chunk-RT4QNQ5P.js";
+import "./chunk-26SIKQIC.js";
+import "./chunk-S6LOFUVP.js";
+import "./chunk-CFKIH3D3.js";
+import "./chunk-2LD5U7Q3.js";
+import "./chunk-DJ2GSRLV.js";
+import "./chunk-S2T7H5MI.js";
+import "./chunk-LKODFJRD.js";
+import "./chunk-FXUSWLBF.js";
+import "./chunk-XBVNNDPK.js";
+import "./chunk-VGC4I5JJ.js";
+import "./chunk-67AY5D3M.js";
+import "./chunk-HT5S5TRQ.js";
+import "./chunk-LMMHS3RS.js";
+import "./chunk-WZAD4ZNJ.js";
+import "./chunk-FPGTNKCP.js";
+import "./chunk-EIJT2PQ6.js";
+import "./chunk-H5GPPDGY.js";
+import "./chunk-XZA32HII.js";
+import "./chunk-KHP66DFN.js";
+import "./chunk-22UH7VTP.js";
+import "./chunk-HHJLM3WQ.js";
+import "./chunk-TBJ3SNS3.js";
+import "./chunk-74TONY4F.js";
+import "./chunk-IXHV5MIC.js";
+import "./chunk-D7D3HSYQ.js";
+import "./chunk-YKADANK6.js";
+import "./chunk-AQ37AY7B.js";
+import "./chunk-ODZF64DM.js";
+import "./chunk-LYSZVCCD.js";
+import "./chunk-EAHOJF6V.js";
+import "./chunk-75DOP5OR.js";
+import "./chunk-DMTGGOSA.js";
+import "./chunk-YQ3U5MUC.js";
+import "./chunk-AMDSOFFV.js";
+import "./chunk-TBWQLLFO.js";
+import "./chunk-5O2XNYP6.js";
+import "./chunk-J2S4EL5Y.js";
+export {
+  AgentHeadless,
+  ContextState,
+  templateString
+};

package/chunks/{anthropicContentGenerator-HGMBACVE.js → anthropicContentGenerator-VSSPG7XV.js}

@@ -16,13 +16,16 @@ import {
 import "./chunk-5WV5S2GT.js";
 import "./chunk-XWRJCPHC.js";
 import {
-  parseToolCallArguments
-} from "./chunk-ZYNTSXWK.js";
+  parseToolCallArguments,
+  resolveStreamIdleTimeoutMs,
+  resolveStreamMaxLifetimeMs,
+  withStreamGuards
+} from "./chunk-ADJD4LZF.js";
 import {
   convertSchema,
   safeJsonParse,
   setGenAiUsageProvenance
-} from "./chunk-ABS25QER.js";
+} from "./chunk-ANVG3BVV.js";
 import {
   runtimeDiagnostics
 } from "./chunk-VNOVK4I7.js";
@@ -31,7 +34,11 @@ import {
   reportAnthropicFollowingRequest,
   reportAnthropicRequest,
   reportAnthropicResponse
-} from "./chunk-B7CDU2SL.js";
+} from "./chunk-MOF6VZN2.js";
+import {
+  InvalidStreamError,
+  setToolCallPreparations
+} from "./chunk-CFKIH3D3.js";
 import {
   clampReasoningEffort,
   resolveRequestTimeout
@@ -41,13 +48,8 @@ import {
 } from "./chunk-DJ2GSRLV.js";
 import {
   classifyRetryError
-} from "./chunk-J2OSJFP3.js";
-import {
-  InvalidStreamError,
-  setToolCallPreparations
-} from "./chunk-CFKIH3D3.js";
-import "./chunk-4FTKQNWJ.js";
-import "./chunk-Y3QL45LS.js";
+} from "./chunk-S2T7H5MI.js";
+import "./chunk-LKODFJRD.js";
 import {
   normalizeMcpToolName
 } from "./chunk-WZAD4ZNJ.js";
@@ -61,10 +63,10 @@ import {
 import {
   buildRuntimeFetchOptions,
   redactProxyError
-} from "./chunk-PPKZ7JOE.js";
+} from "./chunk-22UH7VTP.js";
 import {
   createDebugLogger
-} from "./chunk-UHQFIS7N.js";
+} from "./chunk-EAHOJF6V.js";
 import {
   require_ms
 } from "./chunk-YQ3U5MUC.js";
@@ -4261,7 +4263,7 @@ var AnthropicContentConverter = class {
    * Per-request tool ID sanitization state (see {@link resolveToolUseId}).
    * The converter instance is long-lived across requests (constructed once
    * per generator), so this state is reset at the top of every
-   * `convertGeminiRequestToAnthropic` call rather than at construction.
+   * `convertLlmRequestToAnthropic` call rather than at construction.
    */
   toolIdMap = /* @__PURE__ */ new Map();
   usedToolIds = /* @__PURE__ */ new Set();
@@ -4270,7 +4272,7 @@ var AnthropicContentConverter = class {
     this.schemaCompliance = schemaCompliance;
     this.enableCacheControl = enableCacheControl;
   }
-  convertGeminiRequestToAnthropic(request, options = {}) {
+  convertLlmRequestToAnthropic(request, options = {}) {
     this.resetToolIdState();
     let messages = [];
     const systemText = this.extractTextFromContentUnion(
@@ -4331,9 +4333,9 @@ var AnthropicContentConverter = class {
       messages
     };
   }
-  async convertGeminiToolsToAnthropic(geminiTools, options = {}) {
+  async convertLlmToolsToAnthropic(llmTools, options = {}) {
     const tools = [];
-    for (const tool of geminiTools) {
+    for (const tool of llmTools) {
       let actualTool;
       if ("tool" in tool) {
         actualTool = await tool.tool();
@@ -4387,8 +4389,8 @@ var AnthropicContentConverter = class {
     }
     return tools;
   }
-  convertAnthropicResponseToGemini(response) {
-    const geminiResponse = new GenerateContentResponse();
+  convertAnthropicResponseToLlm(response) {
+    const llmResponse = new GenerateContentResponse();
     const parts = [];
     for (const block of response.content || []) {
       const blockType = String(block["type"] || "");
@@ -4429,19 +4431,19 @@ var AnthropicContentConverter = class {
       index: 0,
       safetyRatings: []
     };
-    const finishReason = this.mapAnthropicFinishReasonToGemini(
+    const finishReason = this.mapAnthropicFinishReasonToLlm(
       response.stop_reason
     );
     if (finishReason) {
       candidate.finishReason = finishReason;
     }
-    geminiResponse.candidates = [candidate];
-    geminiResponse.responseId = response.id;
-    geminiResponse.createTime = Date.now().toString();
-    geminiResponse.modelVersion = response.model || void 0;
-    geminiResponse.promptFeedback = { safetyRatings: [] };
+    llmResponse.candidates = [candidate];
+    llmResponse.responseId = response.id;
+    llmResponse.createTime = Date.now().toString();
+    llmResponse.modelVersion = response.model || void 0;
+    llmResponse.promptFeedback = { safetyRatings: [] };
     if (response.usage) {
-      geminiResponse.usageMetadata = buildAnthropicUsageMetadata({
+      llmResponse.usageMetadata = buildAnthropicUsageMetadata({
         inputTokens: response.usage.input_tokens || 0,
         cacheReadTokens: response.usage.cache_read_input_tokens || 0,
         cacheCreationTokens: response.usage.cache_creation_input_tokens || 0,
@@ -4450,7 +4452,7 @@ var AnthropicContentConverter = class {
         cacheCreationTokensReported: typeof response.usage.cache_creation_input_tokens === "number"
       });
     }
-    return geminiResponse;
+    return llmResponse;
   }
   processContents(contents, messages) {
     if (Array.isArray(contents)) {
@@ -4571,7 +4573,7 @@ var AnthropicContentConverter = class {
    * The same source ID always resolves to the same wire ID within a
    * request (memoized in `toolIdMap`), so a `tool_use`/`tool_result` pair
    * that shares a source ID still links up correctly after sanitization.
-   * State is scoped to a single `convertGeminiRequestToAnthropic` call
+   * State is scoped to a single `convertLlmRequestToAnthropic` call
    * (reset via {@link resetToolIdState}), since the converter instance
    * itself is long-lived across requests.
    */
@@ -4723,7 +4725,7 @@ var AnthropicContentConverter = class {
     }
     return {};
   }
-  mapAnthropicFinishReasonToGemini(reason) {
+  mapAnthropicFinishReasonToLlm(reason) {
     if (!reason) return void 0;
     const mapping = {
       end_turn: FinishReason.STOP,
@@ -4733,7 +4735,7 @@ var AnthropicContentConverter = class {
       content_filter: FinishReason.SAFETY,
       // Anthropic's refusal stop_reason is a provider safety decision; it
       // must land in the content-filter family so downstream gates (e.g.
-      // the quiet post-tool-result acceptance in geminiChat, #9026) keep
+      // the quiet post-tool-result acceptance in llmChat, #9026) keep
       // it fatal instead of masking it with an "(empty content)" turn.
       refusal: FinishReason.SAFETY
     };
@@ -5000,7 +5002,7 @@ var AnthropicContentConverter = class {
    * synthetic user turn to satisfy Anthropic's "must end with a user
    * message" requirement (Opus/Sonnet 4.6+, every 5.x family) when the
    * conversation would otherwise end on a non-empty assistant message.
-   * See {@link ConvertGeminiRequestToAnthropicOptions.stripTrailingAssistantPrefill}.
+   * See {@link ConvertLlmRequestToAnthropicOptions.stripTrailingAssistantPrefill}.
    */
   stripTrailingAssistantPrefill(messages) {
     while (messages.length > 0) {
@@ -5377,6 +5379,12 @@ var AnthropicContentGenerator = class {
       contentGeneratorConfig.schemaCompliance,
       contentGeneratorConfig.enableCacheControl
     );
+    this.streamIdleTimeoutMs = resolveStreamIdleTimeoutMs(
+      contentGeneratorConfig
+    );
+    this.streamMaxLifetimeMs = resolveStreamMaxLifetimeMs(
+      contentGeneratorConfig
+    );
   }
   static {
     __name(this, "AnthropicContentGenerator");
@@ -5388,6 +5396,13 @@ var AnthropicContentGenerator = class {
   effortClampWarned = false;
   budgetDropWarned = false;
   temperatureDropWarned = false;
+  // Stream watchdog tuning, resolved once (config field > env > default) so
+  // the env read + any invalid-value warning happen per generator, not per
+  // streaming request. Same guards the OpenAI pipeline applies — the two
+  // wires must not differ on whether a stalled stream is recoverable
+  // (issue #9005 finding 4).
+  streamIdleTimeoutMs;
+  streamMaxLifetimeMs;
   async generateContent(request) {
     let response;
     const parentSignal = request.config?.abortSignal;
@@ -5407,7 +5422,7 @@ var AnthropicContentGenerator = class {
     } finally {
       perRequestAc?.abort();
     }
-    return this.converter.convertAnthropicResponseToGemini(response);
+    return this.converter.convertAnthropicResponseToLlm(response);
   }
   async generateContentStream(request) {
     const anthropicRequest = await this.buildRequest(request);
@@ -5434,10 +5449,24 @@ var AnthropicContentGenerator = class {
       perRequestAc.abort();
       throw redactProxyError(error);
     }
+    const idleMs = this.streamIdleTimeoutMs;
+    const maxLifetimeMs = this.streamMaxLifetimeMs;
+    const guardedStream = idleMs > 0 || maxLifetimeMs > 0 ? withStreamGuards(
+      stream,
+      idleMs,
+      maxLifetimeMs,
+      () => perRequestAc.abort(),
+      request.config?.abortSignal
+    ) : stream;
     const inner = this.processStreamWithEmptyFallback(
-      this.redactStreamErrors(stream),
+      this.redactStreamErrors(guardedStream),
       anthropicRequest,
-      perRequestAc.signal,
+      // The empty-stream fallback probe needs a signal that is still live
+      // after the source stream drains. The shared stream guard aborts
+      // `perRequestAc` in its `finally` the moment the source drains — which
+      // happens before the probe runs — so pass the caller's signal instead;
+      // the probe derives its own short-lived child from it.
+      request.config?.abortSignal,
       headers,
       telemetryAttempt
     );
@@ -5635,7 +5664,7 @@ var AnthropicContentGenerator = class {
     const useGlobalCacheScope = this.useGlobalCacheScope();
     const cacheRetention = this.contentGeneratorConfig.cacheRetention;
     const cacheRetentionByBlock = this.contentGeneratorConfig.cacheRetentionByBlock;
-    const { system, messages } = this.converter.convertGeminiRequestToAnthropic(
+    const { system, messages } = this.converter.convertLlmRequestToAnthropic(
       request,
       {
         // DeepSeek normalization and injection run together. Proxy-hosted
@@ -5658,15 +5687,12 @@ var AnthropicContentGenerator = class {
         staticSystemPrefix: this.cliConfig.getStaticSystemPrefix()
       }
     );
-    const tools = request.config?.tools ? await this.converter.convertGeminiToolsToAnthropic(
-      request.config.tools,
-      {
-        enableCacheControl,
-        useGlobalCacheScope,
-        cacheRetention,
-        cacheRetentionByBlock
-      }
-    ) : void 0;
+    const tools = request.config?.tools ? await this.converter.convertLlmToolsToAnthropic(request.config.tools, {
+      enableCacheControl,
+      useGlobalCacheScope,
+      cacheRetention,
+      cacheRetentionByBlock
+    }) : void 0;
     const toolChoice = this.resolveToolChoice(request, tools);
     return {
       model: this.contentGeneratorConfig.model,
@@ -5977,7 +6003,7 @@ var AnthropicContentGenerator = class {
             signature: type === "thinking" && "signature" in event.content_block && typeof event.content_block.signature === "string" ? event.content_block.signature : ""
           });
           if (type === "tool_use" && typeof id === "string" && id.length > 0 && typeof name === "string" && name.length > 0) {
-            const chunk = this.buildGeminiChunk(
+            const chunk = this.buildLlmChunk(
               void 0,
               messageId,
               model,
@@ -5997,7 +6023,7 @@ var AnthropicContentGenerator = class {
           if (deltaType === "text_delta") {
             const text = "text" in event.delta ? event.delta.text : "";
             if (text) {
-              const chunk = this.buildGeminiChunk(
+              const chunk = this.buildLlmChunk(
                 { text },
                 messageId,
                 model,
@@ -6010,7 +6036,7 @@ var AnthropicContentGenerator = class {
           } else if (deltaType === "thinking_delta") {
             const thinking = event.delta.thinking || "";
             if (thinking) {
-              const chunk = this.buildGeminiChunk(
+              const chunk = this.buildLlmChunk(
                 { text: thinking, thought: true },
                 messageId,
                 model,
@@ -6024,7 +6050,7 @@ var AnthropicContentGenerator = class {
             const signature = event.delta.signature || "";
             if (signature) {
               blockState.signature += signature;
-              const chunk = this.buildGeminiChunk(
+              const chunk = this.buildLlmChunk(
                 { thought: true, thoughtSignature: signature },
                 messageId,
                 model,
@@ -6055,7 +6081,7 @@ var AnthropicContentGenerator = class {
                 hasNonObjectToolCall = true;
               }
             } else {
-              const chunk = this.buildGeminiChunk(
+              const chunk = this.buildLlmChunk(
                 {
                   functionCall: {
                     id: blockState.id,
@@ -6136,7 +6162,7 @@ var AnthropicContentGenerator = class {
           }
           if (finishReason || event.usage) {
             messageStartUsagePending = false;
-            const chunk = this.buildGeminiChunk(
+            const chunk = this.buildLlmChunk(
               void 0,
               messageId,
               model,
@@ -6158,7 +6184,7 @@ var AnthropicContentGenerator = class {
         case "message_stop": {
           if (promptTokensReported || completionTokensReported || cachedTokensReported || cacheCreationTokensReported) {
             messageStartUsagePending = false;
-            const chunk = this.buildGeminiChunk(
+            const chunk = this.buildLlmChunk(
               void 0,
               messageId,
               model,
@@ -6226,6 +6252,7 @@ var AnthropicContentGenerator = class {
       "Anthropic stream ended without assistant payload or finish reason; probing once with a non-streaming request to surface provider errors."
     );
     let response;
+    const probeAc = createChildAbortController(abortSignal);
     try {
       runtimeDiagnostics.recordAnthropicWireRequest(fallbackRequest);
       const fallbackAttempt = reportAnthropicFollowingRequest(
@@ -6233,23 +6260,25 @@ var AnthropicContentGenerator = class {
         telemetryAttempt
       );
       response = await this.client.messages.create(fallbackRequest, {
-        signal: abortSignal,
+        signal: probeAc.signal,
         ...headers ? { headers } : {}
       });
       reportAnthropicResponse(fallbackAttempt, response);
-      yield this.converter.convertAnthropicResponseToGemini(response);
+      yield this.converter.convertAnthropicResponseToLlm(response);
     } catch (error) {
       throw redactProxyError(error);
+    } finally {
+      probeAc.abort();
     }
   }
-  buildGeminiChunk(part, responseId, model, finishReason, usageMetadata) {
+  buildLlmChunk(part, responseId, model, finishReason, usageMetadata) {
     const response = new GenerateContentResponse();
     response.responseId = responseId;
     response.createTime = Date.now().toString();
     response.modelVersion = model || void 0;
     response.promptFeedback = { safetyRatings: [] };
     const candidateParts = part ? [part] : [];
-    const mappedFinishReason = finishReason !== void 0 ? this.converter.mapAnthropicFinishReasonToGemini(finishReason) : void 0;
+    const mappedFinishReason = finishReason !== void 0 ? this.converter.mapAnthropicFinishReasonToLlm(finishReason) : void 0;
     response.candidates = [
       {
         content: {

package/chunks/{artifact-tool-5YT4QF7Y.js → artifact-tool-TEYW6I4A.js}

@@ -1,5 +1,9 @@
 // Force strict mode and setup for ESM
 "use strict";
+import {
+  PUBLISHED_CONTENT_SHA256_METADATA_KEY
+} from "./chunk-DJBQCO2E.js";
+import "./chunk-7J6OTNGO.js";
 import {
   openBrowserSecurely
 } from "./chunk-NAVJD2PQ.js";
@@ -8,7 +12,7 @@ import {
   BaseToolInvocation,
   ToolDisplayNames,
   ToolNames
-} from "./chunk-UTLCH2FK.js";
+} from "./chunk-LYSZVCCD.js";
 import {
   Storage,
   createDebugLogger,
@@ -18,7 +22,7 @@ import {
   makeRelative,
   shortenPath,
   unescapePath
-} from "./chunk-UHQFIS7N.js";
+} from "./chunk-EAHOJF6V.js";
 import "./chunk-TBWQLLFO.js";
 import {
   init_esbuild_shims
@@ -29,6 +33,7 @@ import {
 
 // packages/core/src/tools/artifact/artifact-tool.ts
 init_esbuild_shims();
+import { createHash as createHash3 } from "node:crypto";
 import path4 from "node:path";
 
 // packages/core/src/tools/artifact/html.ts
@@ -637,7 +642,10 @@ ${url}`,
           url,
           managedId,
           mimeType: "text/html",
-          sizeBytes: bytes
+          sizeBytes: bytes,
+          metadata: {
+            [PUBLISHED_CONTENT_SHA256_METADATA_KEY]: createHash3("sha256").update(html).digest("hex")
+          }
         }
       ]
     };

package/chunks/{askUserQuestion-4SWJY65V.js → askUserQuestion-PYNBWV63.js}

@@ -1,15 +1,18 @@
 // Force strict mode and setup for ESM
 "use strict";
-import "./chunk-T26EAKDL.js";
+import {
+  resolveInteractionMode
+} from "./chunk-YDQ4OCDK.js";
+import "./chunk-ZHO2CW6D.js";
 import {
   BaseDeclarativeTool,
   BaseToolInvocation,
   ToolDisplayNames,
   ToolNames
-} from "./chunk-UTLCH2FK.js";
+} from "./chunk-LYSZVCCD.js";
 import {
   createDebugLogger
-} from "./chunk-UHQFIS7N.js";
+} from "./chunk-EAHOJF6V.js";
 import "./chunk-TBWQLLFO.js";
 import {
   init_esbuild_shims
@@ -126,18 +129,54 @@ var AskUserQuestionToolInvocation = class extends BaseToolInvocation {
     const questionCount = this.params.questions.length;
     return `Ask user ${questionCount} question${questionCount > 1 ? "s" : ""}`;
   }
+  /**
+   * Whether a host is present that can put the questions in front of the
+   * user *and* answer them. ACP hosts (VSCode extension, Zed, stream-json
+   * clients) run in non-interactive mode but still collect answers through
+   * the confirmation channel.
+   *
+   * The modality half is `resolveInteractionMode()`. The responder half is
+   * what that helper cannot know: a stream-json session only has something
+   * to answer a confirmation round once the SDK control system is up. In
+   * stream-json *direct* mode the first stdin frame is a plain user message,
+   * so `Session.handleFirstMessage()` leaves the control system off, no
+   * `PermissionController` is built and `onToolCallsUpdate` is never wired
+   * (`nonInteractiveCli.ts`, gated on `options.controlService`). Claiming a
+   * host there parks the call in `awaiting_approval` forever: the scheduler's
+   * non-interactive auto-deny carries `getInputFormat() !== STREAM_JSON` as a
+   * required conjunct, so it does not fire either.
+   */
+  canCollectAnswers() {
+    if (resolveInteractionMode(this._config) === "headless") {
+      return false;
+    }
+    return this._config.isInteractive() || this._config.getExperimentalZedIntegration() || this._config.getInputFormat() !== "stream-json" /* STREAM_JSON */ || this._config.getSdkMode();
+  }
   /**
    * ask_user_question always requires user confirmation so the user can
    * provide answers. In non-interactive mode without ACP support, we skip
    * confirmation (and subsequently skip execution).
    */
   async getDefaultPermission() {
-    const isAcpMode = this._config.getExperimentalZedIntegration() || this._config.getInputFormat() === "stream-json" /* STREAM_JSON */;
-    if (!this._config.isInteractive() && !isAcpMode) {
+    if (!this.canCollectAnswers()) {
       return "allow";
     }
     return "ask";
   }
+  /**
+   * The confirmation dialog IS this tool: the answers are collected through
+   * `onConfirm`, so an approval that skips the dialog does not "allow" the
+   * tool, it silently answers "declined" on the user's behalf. Permission
+   * rules and automatic approval modes must therefore never satisfy it —
+   * a bare `ask_user_question` allow rule (a skill's `allowedTools` grant,
+   * `permissions.allow`, an "always allow" answer) would otherwise override
+   * the 'ask' default at L4 and the scheduler would run the tool with no
+   * dialog ever shown. Headless runs stay as they were: nothing can prompt
+   * there, and `execute()` reports that instead.
+   */
+  requiresUserInteraction() {
+    return this.canCollectAnswers();
+  }
   async getConfirmationDetails(_abortSignal) {
     const details = {
       type: "ask_user_question",
@@ -165,8 +204,7 @@ var AskUserQuestionToolInvocation = class extends BaseToolInvocation {
   }
   async execute(_signal) {
     try {
-      const isAcpMode = this._config.getExperimentalZedIntegration() || this._config.getInputFormat() === "stream-json" /* STREAM_JSON */;
-      if (!this._config.isInteractive() && !isAcpMode) {
+      if (!this.canCollectAnswers()) {
         const errorMessage = "Cannot ask user questions in non-interactive mode without ACP support. Please run in interactive mode or enable ACP mode to use this tool.";
         return {
           llmContent: errorMessage,