@qwen-code/qwen-code 0.23.1-preview.1 → 0.23.1

package/chunks/{chunk-PTFFWTTO.js → chunk-XZ3Z43XL.js}

@@ -7,10 +7,10 @@ import {
   jsonStringPayloadByteLength,
   observeAcpToolResultProjection,
   truncateJsonStringPayload
-} from "./chunk-KK2GZGBK.js";
+} from "./chunk-TWWS7XUW.js";
 import {
   isA2uiToolMeta
-} from "./chunk-NAKALAL4.js";
+} from "./chunk-2TMJRF46.js";
 import {
   redactLogCredentials
 } from "./chunk-M5GB774H.js";
@@ -20,7 +20,7 @@ import {
   parseGoalSnapshotV2,
   parseGoalStateCause,
   restorableAskUserQuestionCallIds
-} from "./chunk-I72PHOKL.js";
+} from "./chunk-PDUMGZ2P.js";
 import {
   init_esbuild_shims
 } from "./chunk-5O2XNYP6.js";

package/chunks/{chunk-QSC5YOEC.js → chunk-YAC7H4K3.js}

@@ -2,10 +2,10 @@
 "use strict";
 import {
   getRateLimitErrorDetails
-} from "./chunk-W4LL5RZO.js";
+} from "./chunk-4ALNJDHL.js";
 import {
   isInternalPromptId
-} from "./chunk-P5LDR7FI.js";
+} from "./chunk-6QV7Z74P.js";
 import {
   createDebugLogger
 } from "./chunk-ZAFYHRVY.js";

package/chunks/{chunk-43JNQAHO.js → chunk-YCEKI7QX.js}

@@ -8,10 +8,10 @@ import {
 } from "./chunk-TXASDT2M.js";
 import {
   t
-} from "./chunk-MUZCSTOO.js";
+} from "./chunk-CRZBDVP2.js";
 import {
   So
-} from "./chunk-I72PHOKL.js";
+} from "./chunk-PDUMGZ2P.js";
 import {
   createDebugLogger
 } from "./chunk-ZAFYHRVY.js";
@@ -93,6 +93,24 @@ function escapePS(s) {
   return s.replace(/'/g, "''");
 }
 __name(escapePS, "escapePS");
+function resolveUpdateBaseUrl() {
+  const value = process.env["QWEN_UPDATE_BASE_URL"]?.trim();
+  if (!value) return void 0;
+  const invalidUrl = /* @__PURE__ */ __name(() => new Error(
+    "QWEN_UPDATE_BASE_URL must be an absolute HTTPS URL without credentials, query parameters, or a fragment."
+  ), "invalidUrl");
+  let url;
+  try {
+    url = new URL(value);
+  } catch {
+    throw invalidUrl();
+  }
+  if (!/^https:\/\//i.test(value) || url.username || url.password || /[?#\s]/.test(value)) {
+    throw invalidUrl();
+  }
+  return url.href.replace(/\/+$/, "");
+}
+__name(resolveUpdateBaseUrl, "resolveUpdateBaseUrl");
 async function tryFetch(url, timeoutMs = FETCH_TIMEOUT_MS) {
   try {
     const { fetch } = await loadUndici();
@@ -110,7 +128,17 @@ async function tryFetch(url, timeoutMs = FETCH_TIMEOUT_MS) {
   }
 }
 __name(tryFetch, "tryFetch");
-async function downloadWithFallback(versionPath, filename, timeoutMs = FETCH_TIMEOUT_MS) {
+async function downloadWithFallback(versionPath, filename, timeoutMs = FETCH_TIMEOUT_MS, baseUrl) {
+  if (baseUrl) {
+    const result = await tryFetch(
+      `${baseUrl}/${versionPath}/${filename}`,
+      timeoutMs
+    );
+    if (result.response) return result.response;
+    throw new Error(
+      `Failed to download ${filename} from QWEN_UPDATE_BASE_URL: ${result.error.message}`
+    );
+  }
   const ossUrl = `${OSS_BASE}/${versionPath}/${filename}`;
   const ossResult = await tryFetch(ossUrl, timeoutMs);
   if (ossResult.response) return ossResult.response;
@@ -122,13 +150,23 @@ async function downloadWithFallback(versionPath, filename, timeoutMs = FETCH_TIM
   );
 }
 __name(downloadWithFallback, "downloadWithFallback");
-async function verifyChecksum(actualHash, filename, versionPath) {
-  const response = await downloadWithFallback(versionPath, "SHA256SUMS");
+async function verifyChecksum(actualHash, filename, versionPath, baseUrl) {
+  const response = await downloadWithFallback(
+    versionPath,
+    "SHA256SUMS",
+    FETCH_TIMEOUT_MS,
+    baseUrl
+  );
   const text = await response.text();
   const requireSig = process.env["QWEN_REQUIRE_SIGNATURE"] === "1";
   let sigResponse;
   try {
-    sigResponse = await downloadWithFallback(versionPath, "SHA256SUMS.sig");
+    sigResponse = await downloadWithFallback(
+      versionPath,
+      "SHA256SUMS.sig",
+      FETCH_TIMEOUT_MS,
+      baseUrl
+    );
   } catch (err) {
     debugLogger.debug("SHA256SUMS.sig not available:", err);
   }
@@ -163,11 +201,12 @@ async function verifyChecksum(actualHash, filename, versionPath) {
 }
 __name(verifyChecksum, "verifyChecksum");
 var MAX_DOWNLOAD_BYTES = 512 * 1024 * 1024;
-async function downloadToFile(versionPath, filename, destPath) {
+async function downloadToFile(versionPath, filename, destPath, baseUrl) {
   const response = await downloadWithFallback(
     versionPath,
     filename,
-    ARCHIVE_TIMEOUT_MS
+    ARCHIVE_TIMEOUT_MS,
+    baseUrl
   );
   const body = response.body;
   if (!body) throw new Error("Empty response body");
@@ -772,6 +811,7 @@ function detectTarget() {
 __name(detectTarget, "detectTarget");
 async function performStandaloneUpdate(standaloneDir, newVersion) {
   const versionPath = normalizeVersion(newVersion);
+  const baseUrl = resolveUpdateBaseUrl();
   let target;
   let isFirstTimeMigration = false;
   const manifestPath = path.join(standaloneDir, "manifest.json");
@@ -823,10 +863,11 @@ async function performStandaloneUpdate(standaloneDir, newVersion) {
     const archiveHash = await downloadToFile(
       versionPath,
       filename,
-      archivePath
+      archivePath,
+      baseUrl
     );
     debugLogger.info("Verifying checksum...");
-    await verifyChecksum(archiveHash, filename, versionPath);
+    await verifyChecksum(archiveHash, filename, versionPath, baseUrl);
     debugLogger.info("Extracting archive...");
     await extractArchive(archivePath, extractDir, target);
     const newInstallDir = path.join(extractDir, "qwen-code");

package/chunks/{chunk-7IKXTGZT.js → chunk-YI2YCNSP.js}

@@ -3,7 +3,7 @@
 import {
   TotalSessionLimitExceededError,
   WorkspaceDrainingError
-} from "./chunk-F47DITLZ.js";
+} from "./chunk-FAWTMDX7.js";
 import {
   init_esbuild_shims
 } from "./chunk-5O2XNYP6.js";

package/chunks/{chunk-VUSSAGKI.js → chunk-YZTGGCEE.js}

@@ -2,7 +2,7 @@
 "use strict";
 import {
   readRuntimeStatus
-} from "./chunk-43NOB5NM.js";
+} from "./chunk-HIXUUCGY.js";
 import {
   atomicWriteJSON
 } from "./chunk-XFFRI3WM.js";
@@ -34,7 +34,7 @@ var RUNTIME_STATUS_SCAN_SKIP_DIRS = /* @__PURE__ */ new Set([
 function isValidWorktreeSession(value) {
   if (value === null || typeof value !== "object") return false;
   const v = value;
-  return typeof v["slug"] === "string" && typeof v["worktreePath"] === "string" && typeof v["worktreeBranch"] === "string" && typeof v["originalCwd"] === "string" && (v["workspaceCwd"] === void 0 || typeof v["workspaceCwd"] === "string") && typeof v["originalBranch"] === "string" && typeof v["originalHeadCommit"] === "string";
+  return typeof v["slug"] === "string" && typeof v["worktreePath"] === "string" && typeof v["worktreeBranch"] === "string" && typeof v["originalCwd"] === "string" && (v["workspaceCwd"] === void 0 || typeof v["workspaceCwd"] === "string") && typeof v["originalBranch"] === "string" && typeof v["originalHeadCommit"] === "string" && (v["supersededBy"] === void 0 || typeof v["supersededBy"] === "string") && (v["supersedes"] === void 0 || typeof v["supersedes"] === "string");
 }
 __name(isValidWorktreeSession, "isValidWorktreeSession");
 async function readWorktreeSession(filePath, options = {}) {
@@ -340,6 +340,14 @@ async function restoreWorktreeContext(sidecarPath, onWarn) {
     }
     return { contextMessage: null, session: null };
   }
+  if (session.supersededBy !== void 0) {
+    onWarn?.(
+      new Error(
+        `worktree session was superseded by ${session.supersededBy}; not restoring its worktree context.`
+      )
+    );
+    return { contextMessage: null, session: null };
+  }
   const expectedParent = path.join(session.originalCwd, ".qwen", "worktrees");
   const resolvedWorktree = path.resolve(session.worktreePath);
   if (!resolvedWorktree.startsWith(expectedParent + path.sep)) {

package/chunks/{chunk-WR3SH3EY.js → chunk-ZNO5BUAD.js}

@@ -8,7 +8,7 @@ import {
   staleArgsWarning,
   validateAuthMethod,
   writeSkillArgs
-} from "./chunk-ZAZ3NFL6.js";
+} from "./chunk-DXQ6Z7AH.js";
 import {
   calculateCost,
   computeSessionStats,
@@ -19,7 +19,7 @@ import {
   getCompressionFailureStatusText,
   getSystemInfoFields,
   levelLabel
-} from "./chunk-2RYWGYB3.js";
+} from "./chunk-MFYH2VXV.js";
 import {
   formatDuration,
   formatTokenCount
@@ -31,19 +31,19 @@ import {
   VSCODE_SHIFT_ENTER_SEQUENCE,
   isWaylandSession,
   writeOsc52
-} from "./chunk-HY3DXYZK.js";
+} from "./chunk-UYDQYDW2.js";
 import {
   contextCommand
-} from "./chunk-JOPC3FND.js";
+} from "./chunk-HUX2DOTF.js";
 import {
   themeManager
 } from "./chunk-2XRE4KE4.js";
 import {
   getErrorMessage as getErrorMessage2
-} from "./chunk-54TF2ZIQ.js";
+} from "./chunk-6JXHO7LG.js";
 import {
   rollbackStandaloneUpdate
-} from "./chunk-43JNQAHO.js";
+} from "./chunk-YCEKI7QX.js";
 import {
   GITHUB_WORKFLOW_PATHS,
   INSIGHT_CSS,
@@ -56,7 +56,7 @@ import {
   toJson,
   toJsonl,
   toMarkdown
-} from "./chunk-KK2GZGBK.js";
+} from "./chunk-TWWS7XUW.js";
 import {
   stripUnsafeCharacters,
   toCodePoints,
@@ -72,16 +72,19 @@ import {
   isVoiceEnabled,
   readVoiceMode,
   readVoiceModel
-} from "./chunk-XOVVCGZX.js";
+} from "./chunk-NB3NDQQK.js";
 import {
   getExtendedSystemInfo,
   getGitVersion,
   getNpmVersion
-} from "./chunk-P6LATTDG.js";
+} from "./chunk-5IL2BZHW.js";
+import {
+  getReasoningEffortsForConfig
+} from "./chunk-JGDRB4FP.js";
 import {
   isInlineModelOverrideAllowed,
   parseAcpModelOption
-} from "./chunk-O2GG7H4C.js";
+} from "./chunk-ARYNBBBM.js";
 import {
   getInstallationInfo
 } from "./chunk-N6VQ37ZZ.js";
@@ -96,12 +99,12 @@ import {
   resolveOutputLanguageOrPreserveAuto,
   validateSettingValue,
   writeOutputLanguageAndRegisterPath
-} from "./chunk-AQ5NAGWI.js";
+} from "./chunk-66JBCTJF.js";
 import {
   getCurrentLanguage,
   setLanguageAsync,
   t
-} from "./chunk-MUZCSTOO.js";
+} from "./chunk-CRZBDVP2.js";
 import {
   SUPPORTED_LANGUAGES,
   getSupportedLanguageIds,
@@ -110,7 +113,7 @@ import {
 import {
   isFolderTrustEnabled,
   loadTrustedFolders
-} from "./chunk-XY3USGFE.js";
+} from "./chunk-3VDLQUR2.js";
 import {
   require_strip_json_comments
 } from "./chunk-NPQ5ZKRP.js";
@@ -135,22 +138,24 @@ import {
   getLastPeerInboxFailure,
   getMCPServerPrompts,
   isWsl,
+  listPeerControllers,
   loadOutputStyleCatalog,
   parseLearnVideoInput,
-  readPathFromWorkspace
-} from "./chunk-UEZOXZNI.js";
+  readPathFromWorkspace,
+  removePeerController
+} from "./chunk-ZU2T5JIS.js";
 import {
   listSavedWorkflows,
   listWorkflowSnapshots
-} from "./chunk-JPEAQJNS.js";
+} from "./chunk-WJDXKQIO.js";
 import {
   canonicalizeMsgId,
   describeHoldCause,
   flattenPeerLabel
-} from "./chunk-HFTB354P.js";
+} from "./chunk-5Z4FCEPY.js";
 import {
   resolveOpenAILogDir
-} from "./chunk-QSC5YOEC.js";
+} from "./chunk-YAC7H4K3.js";
 import {
   ArenaManager,
   ConditionalRulesRegistry,
@@ -191,7 +196,7 @@ import {
   resolveSlimmingConfig,
   runForkedAgent,
   tryGenerateSessionTitle
-} from "./chunk-I72PHOKL.js";
+} from "./chunk-PDUMGZ2P.js";
 import {
   external_exports
 } from "./chunk-CQ35AJ4Z.js";
@@ -205,7 +210,7 @@ import {
 } from "./chunk-FDOGGKAA.js";
 import {
   canUseRipgrep
-} from "./chunk-PZV2FASB.js";
+} from "./chunk-TRWQQBVH.js";
 import {
   glob
 } from "./chunk-QJNDUTOL.js";
@@ -214,7 +219,7 @@ import {
   checkCommandPermissions,
   escapeShellArg,
   getShellConfiguration
-} from "./chunk-OECNP26L.js";
+} from "./chunk-N6S3NUYJ.js";
 import {
   escapeJsonTagCharacters,
   formatMemoryUsage
@@ -229,11 +234,7 @@ import {
   restoreArchivedAutoSkill,
   runAutoSkillCurator,
   setAutoSkillPinned
-} from "./chunk-R355CUNQ.js";
-import {
-  HookEventName,
-  sanitizeUserPromptExpansionAdditionalContext
-} from "./chunk-4VUVBN3Y.js";
+} from "./chunk-CLKE4IY3.js";
 import {
   BUILT_IN_OUTPUT_STYLES,
   getArenaSystemReminder,
@@ -242,7 +243,7 @@ import {
   getProjectSummaryPrompt,
   isSystemMdActive,
   resolveMainSessionOutputStyle
-} from "./chunk-GXZHYPHZ.js";
+} from "./chunk-3LPJ776W.js";
 import {
   openBrowserSecurely
 } from "./chunk-NAVJD2PQ.js";
@@ -250,7 +251,7 @@ import {
   REASONING_EFFORT_TIERS,
   applyReasoningEffort,
   normalizeReasoningEffort
-} from "./chunk-2LD5U7Q3.js";
+} from "./chunk-6YEOCHSE.js";
 import {
   COMBINED_PASS_TOLERANCE_FACTOR,
   IdeConnectionEvent,
@@ -264,7 +265,7 @@ import {
   recordSkillInvocation,
   runSideQuery,
   uiTelemetryService
-} from "./chunk-P5LDR7FI.js";
+} from "./chunk-6QV7Z74P.js";
 import {
   getCurrentMemoryFilename
 } from "./chunk-J6MB5ZHZ.js";
@@ -281,18 +282,21 @@ import {
 import {
   FORK_SUBAGENT_TYPE,
   stripStartupContext
-} from "./chunk-D6PIMKY3.js";
+} from "./chunk-4VY3ITHR.js";
 import {
-  applySkillAllowedTools,
-  buildSkillLlmContent,
-  canApplySkillSideEffects
-} from "./chunk-NGX4NUNP.js";
+  applySkillSideEffects,
+  buildSkillLlmContent
+} from "./chunk-O2FEO2CB.js";
+import {
+  HookEventName,
+  sanitizeUserPromptExpansionAdditionalContext
+} from "./chunk-G6UUOCUT.js";
 import {
   ToolDisplayNamesMigration,
   ToolNames,
   canonicalToolName,
   isShellProgressData
-} from "./chunk-RPBMP6BN.js";
+} from "./chunk-MWIO7MF6.js";
 import {
   Storage,
   createDebugLogger,
@@ -306,7 +310,7 @@ import {
   isCpuProfileRecording,
   startCpuProfile,
   stopCpuProfile
-} from "./chunk-TDP7UULF.js";
+} from "./chunk-OPMKGOLD.js";
 import {
   init_esbuild_shims
 } from "./chunk-5O2XNYP6.js";
@@ -2456,7 +2460,7 @@ var approvalModeCommand = {
         };
       }
     }
-    const autoModeNotices = mode === "auto" /* AUTO */ && priorMode !== "auto" /* AUTO */ && config ? await import("./useAutoAcceptIndicator-LAWYHY3U.js") : void 0;
+    const autoModeNotices = mode === "auto" /* AUTO */ && priorMode !== "auto" /* AUTO */ && config ? await import("./useAutoAcceptIndicator-XNED4NRB.js") : void 0;
     if (config) {
       try {
         config.setApprovalMode(mode);
@@ -2590,10 +2594,11 @@ __name(describeRemaining, "describeRemaining");
 function formatHeldList(held, expiryMs = null) {
   if (held.length === 0) return "No messages from other sessions are waiting.";
   const lines = held.map((entry) => {
-    const peerLabel = flattenPeerLabel(
+    const peerLabel = entry.controller ? flattenPeerLabel(entry.controller.label) : flattenPeerLabel(
       entry.frame.fromName ?? entry.frame.from ?? (entry.selfSent ? "this session" : "unknown session")
     );
-    const who = `${entry.selfSent ? "[own process]" : "[peer]"} ${peerLabel}`;
+    const origin = entry.controller ? "[controller]" : entry.selfSent ? "[own process]" : "[peer]";
+    const who = `${origin} ${peerLabel}`;
     const handle = flattenPeerLabel(displayHandle(entry, held));
     return `  ${handle}  ${who}
       ${preview(entry.frame.message.content)}
@@ -2621,15 +2626,91 @@ function resolveHeld(held, token) {
   return { kind: "one", msgId: matches[0].frame.msgId };
 }
 __name(resolveHeld, "resolveHeld");
+async function listControllers() {
+  try {
+    return await listPeerControllers();
+  } catch (error) {
+    return { error: error instanceof Error ? error.message : String(error) };
+  }
+}
+__name(listControllers, "listControllers");
+function formatControllerList(controllers) {
+  if (!Array.isArray(controllers)) {
+    return `Could not read the trusted controllers: ${controllers.error}`;
+  }
+  if (controllers.length === 0) {
+    return `No trusted controllers. Without an explicit "accept" setting, a message that asserts no review class is held for your review, except one from a process this session started, which is always accepted. A sender's own review-class claim is not authenticated; set agents.crossSessionInbound to "hold" to review every inbound message.
+Add one with: qwen sessions controllers add --label <name>`;
+  }
+  const lines = controllers.map(
+    (record) => `  ${record.id}  ${flattenPeerLabel(record.label)}  added ${formatCreated(
+      record.createdAt
+    )}`
+  );
+  return [
+    `${controllers.length} trusted controller${controllers.length === 1 ? "" : "s"}. Messages presenting one of these tokens are delivered without per-message review unless crossSessionInbound is "hold" or "refuse". A process this session started is always accepted; other senders' review-class claims are not authenticated, so set crossSessionInbound to "hold" to review every inbound message:`,
+    ...lines,
+    "",
+    "Revoke with /peers revoke <id>."
+  ].join("\n");
+}
+__name(formatControllerList, "formatControllerList");
+function formatCreated(createdAt) {
+  const date = new Date(createdAt);
+  return Number.isNaN(date.getTime()) ? "unknown" : date.toISOString().replace("T", " ").slice(0, 16);
+}
+__name(formatCreated, "formatCreated");
 var peersCommand = {
   name: "peers",
   kind: "built-in" /* BUILT_IN */,
   get description() {
     return t(
-      "Review messages held from other Qwen Code sessions (accept | deny)"
+      "Review messages held from other Qwen Code sessions (accept | deny), and manage trusted controllers (controllers | revoke)"
     );
   },
   action: /* @__PURE__ */ __name(async (context, args) => {
+    const [verb, ...rest] = args.trim().split(/\s+/).filter(Boolean);
+    if (verb === "controllers") {
+      return {
+        type: "message",
+        messageType: "info",
+        content: formatControllerList(await listControllers())
+      };
+    }
+    if (verb === "revoke") {
+      const id = rest[0];
+      if (id === void 0) {
+        return {
+          type: "message",
+          messageType: "error",
+          content: "Which controller? Use /peers revoke <id> \u2014 /peers controllers lists the ids."
+        };
+      }
+      let removed;
+      try {
+        removed = await removePeerController(id);
+      } catch (error) {
+        return {
+          type: "message",
+          messageType: "error",
+          content: `Could not revoke that controller: ${error instanceof Error ? error.message : String(error)}`
+        };
+      }
+      if (!removed) {
+        return {
+          type: "message",
+          messageType: "error",
+          content: `No controller has the id "${flattenPeerLabel(id)}". Run /peers controllers to see them.`
+        };
+      }
+      const forgotten = context.services.peerMessaging?.forgetController(removed.id) ?? 0;
+      const backlog = forgotten === 0 ? "No held messages in this session used that grant." : `${forgotten} held message${forgotten === 1 ? "" : "s"} from it ${forgotten === 1 ? "remains" : "remain"} parked for review as ${forgotten === 1 ? "an ordinary peer message" : "ordinary peer messages"}.`;
+      return {
+        type: "message",
+        messageType: "info",
+        content: `Revoked the controller "${flattenPeerLabel(removed.label)}" (${removed.id}). Running sessions revalidate active connections, and new connections can no longer use its token. ${backlog}`
+      };
+    }
     const peerMessaging = context.services.peerMessaging;
     if (!peerMessaging) {
       const enabled = context.services.settings?.merged?.agents?.crossSessionMessaging === true;
@@ -2641,7 +2722,6 @@ var peersCommand = {
       };
     }
     const held = peerMessaging.getHeld();
-    const [verb, ...rest] = args.trim().split(/\s+/).filter(Boolean);
     if (verb === void 0 || verb === "list") {
       peerMessaging.recordHeldListing(held);
       return {
@@ -2654,7 +2734,7 @@ var peersCommand = {
       return {
         type: "message",
         messageType: "error",
-        content: `Unknown subcommand "${verb}". Use /peers, /peers accept <id|all>, or /peers deny <id|all>.`
+        content: `Unknown subcommand "${verb}". Use /peers, /peers accept <id|all>, /peers deny <id|all>, /peers controllers, or /peers revoke <id>.`
       };
     }
     const decision = verb === "accept" ? "approve" : "deny";
@@ -6417,6 +6497,15 @@ var effortCommand = {
       };
     }
     const args = context.invocation?.args?.trim() || actionArgs.trim();
+    const availableTiers = getReasoningEffortsForConfig(config);
+    if (availableTiers.length === 0) {
+      return {
+        type: "message",
+        messageType: "info",
+        content: t("The current model does not expose reasoning effort tiers.")
+      };
+    }
+    const availableTierList = availableTiers.join(", ");
     if (!args) {
       if (context.executionMode === "interactive") {
         return { type: "dialog", dialog: "effort" };
@@ -6427,21 +6516,21 @@ var effortCommand = {
         messageType: "info",
         content: current ? t(
           'Current reasoning effort: {{current}}\nAvailable: {{tiers}}\nUse "/effort <tier>" to change it.',
-          { current, tiers: TIER_LIST }
+          { current, tiers: availableTierList }
         ) : t(
           'Reasoning effort: not set (using the model/provider default).\nAvailable: {{tiers}}\nUse "/effort <tier>" to set it.',
-          { tiers: TIER_LIST }
+          { tiers: availableTierList }
         )
       };
     }
     const tier = normalizeReasoningEffort(args);
-    if (!tier) {
+    if (!tier || !availableTiers.includes(tier)) {
       return {
         type: "message",
         messageType: "error",
         content: t(
           'Unknown reasoning effort "{{value}}". Choose one of: {{tiers}}.',
-          { value: args, tiers: TIER_LIST }
+          { value: args, tiers: availableTierList }
         )
       };
     }
@@ -7469,7 +7558,7 @@ var expandNowCommand = {
         content: t("History is already expanded in this session.")
       };
     }
-    const { expandCollapsedHistory } = await import("./resumeHistoryUtils-QRXZEEBA.js");
+    const { expandCollapsedHistory } = await import("./resumeHistoryUtils-K7RV3QBN.js");
     const updated = expandCollapsedHistory(history);
     loadHistory(updated);
     refreshStatic();
@@ -14957,10 +15046,10 @@ var updateCommand = {
       { performStandaloneUpdate },
       installationInfo
     ] = await Promise.all([
-      import("./updateCheck-W6UZFURI.js"),
-      import("./processUtils-3XBB4FYV.js"),
-      import("./standalone-update-ZWVQUO64.js"),
-      import("./installationInfo-542MGC4S.js")
+      import("./updateCheck-WAVFLWNG.js"),
+      import("./processUtils-YFBGJK67.js"),
+      import("./standalone-update-L46XXNQ2.js"),
+      import("./installationInfo-232RA2OK.js")
     ]);
     const { formatUpdateInstructions, getInstallationInfo: getInstallationInfo2 } = installationInfo;
     const settings = context.services.settings;
@@ -15250,10 +15339,14 @@ var BundledSkillLoader = class {
           level: skill.level
         },
         action: /* @__PURE__ */ __name(async (context, _args) => {
-          applySkillAllowedTools(
-            this.config?.getPermissionManager(),
-            skill.allowedTools
-          );
+          if (this.config && !this.config.isSkillEnabled(skill)) {
+            return {
+              type: "message",
+              messageType: "error",
+              content: `Skill "${skill.name}" is disabled.`
+            };
+          }
+          applySkillSideEffects(this.config, skill);
           let body = skill.body;
           const modelId = this.config?.getModel()?.trim() || "";
           const cliVersion = this.config?.getCliVersion()?.trim() || "unknown";
@@ -16395,17 +16488,7 @@ var SkillCommandLoader = class {
                 content: `Skill "${skill.name}" is disabled.`
               };
             }
-            if (this.config && canApplySkillSideEffects(skill, this.config)) {
-              applySkillAllowedTools(
-                this.config.getPermissionManager(),
-                skill.allowedTools,
-                { trustGated: skill.level === "project" }
-              );
-            } else if (skill.allowedTools?.length) {
-              debugLogger20.warn(
-                `Skill "${skill.name}" is a project skill in an untrusted folder; ignoring its allowedTools.`
-              );
-            }
+            applySkillSideEffects(this.config, skill);
             const body = buildSkillLlmContent(
               dirname3(skill.filePath),
               skill.body