@qwen-code/qwen-code 0.23.3 → 0.23.4

package/chunks/{chunk-MF6E7FSA.js → chunk-MFPAVOYJ.js}

@@ -1,22 +1,22 @@
 // Force strict mode and setup for ESM
 "use strict";
 import {
-  resolveModelConfig,
-  resolveProviderProtocol
-} from "./chunk-N7VWZDWW.js";
+  sanitizeProviderBaseUrl
+} from "./chunk-INGBUYL6.js";
 import {
-  external_exports
-} from "./chunk-CQ35AJ4Z.js";
+  resolveModelConfig
+} from "./chunk-DCRVSIK6.js";
 import {
+  resolveProviderProtocol,
   stripRuntimeSnapshotPrefix
-} from "./chunk-ZTTC7T4X.js";
+} from "./chunk-5JG3DAKS.js";
 import {
   REASONING_EFFORT_TIERS,
   normalizeReasoningEffort
-} from "./chunk-3FPYT6QC.js";
+} from "./chunk-ARDHE6MM.js";
 import {
   MODEL_GENERATION_CONFIG_FIELDS
-} from "./chunk-3UXUOFO6.js";
+} from "./chunk-7W2Y3PZD.js";
 import {
   AuthType
 } from "./chunk-ERU3SDXT.js";
@@ -27,191 +27,6 @@ import {
   __name
 } from "./chunk-J2S4EL5Y.js";
 
-// packages/cli/src/utils/acpModelUtils.ts
-init_esbuild_shims();
-import { createHash } from "node:crypto";
-var ACP_ROUTE_ID_PREFIX = "qwen-route:v1:";
-function getRouteEndpointIdentity(baseUrl) {
-  if (!baseUrl) return null;
-  try {
-    const url = new URL(baseUrl);
-    url.username = "";
-    url.password = "";
-    url.search = "";
-    url.hash = "";
-    return url.href;
-  } catch {
-    return sanitizeProviderBaseUrl(baseUrl).split(/[?#]/, 1)[0] ?? null;
-  }
-}
-__name(getRouteEndpointIdentity, "getRouteEndpointIdentity");
-function formatAcpModelId(modelId, authType) {
-  return `${modelId}(${authType})`;
-}
-__name(formatAcpModelId, "formatAcpModelId");
-function buildAcpModelOptions(models) {
-  const candidates = models.filter(
-    (model) => model.fastOnly !== true && model.voiceOnly !== true && model.imageOnly !== true
-  ).map((model) => {
-    const effectiveModelId = model.isRuntimeModel && model.runtimeSnapshotId ? model.runtimeSnapshotId : model.id;
-    return {
-      model,
-      effectiveModelId,
-      legacyModelId: formatAcpModelId(effectiveModelId, model.authType)
-    };
-  });
-  const counts = /* @__PURE__ */ new Map();
-  for (const candidate of candidates) {
-    counts.set(
-      candidate.legacyModelId,
-      (counts.get(candidate.legacyModelId) ?? 0) + 1
-    );
-  }
-  const discriminators = /* @__PURE__ */ new Set();
-  return candidates.map(({ model, effectiveModelId, legacyModelId }) => {
-    const discriminator = [
-      legacyModelId,
-      model.label,
-      model.envKey ?? null,
-      model.registryBaseUrl === void 0,
-      getRouteEndpointIdentity(model.registryBaseUrl ?? model.baseUrl)
-    ];
-    const discriminatorKey = JSON.stringify(discriminator);
-    if (counts.get(legacyModelId) !== 1 && discriminators.has(discriminatorKey)) {
-      throw new Error(
-        `ACP model routes for "${legacyModelId}" need distinct names, envKey values, or public endpoints.`
-      );
-    }
-    discriminators.add(discriminatorKey);
-    return {
-      model,
-      effectiveModelId,
-      modelId: counts.get(legacyModelId) === 1 ? legacyModelId : `${ACP_ROUTE_ID_PREFIX}${createHash("sha256").update(discriminatorKey).digest("base64url").slice(0, 16)}`
-    };
-  });
-}
-__name(buildAcpModelOptions, "buildAcpModelOptions");
-function resolveAcpModelOption(input, models) {
-  const matched = buildAcpModelOptions(models).find(
-    (option) => option.modelId === input.trim()
-  );
-  if (!matched) return null;
-  return {
-    modelId: matched.effectiveModelId,
-    authType: matched.model.authType,
-    ...matched.model.registryBaseUrl !== void 0 ? { baseUrl: matched.model.registryBaseUrl } : {},
-    ...!matched.model.isRuntimeModel ? { registryBaseUrl: matched.model.registryBaseUrl ?? null } : {},
-    isRuntime: matched.model.isRuntimeModel === true
-  };
-}
-__name(resolveAcpModelOption, "resolveAcpModelOption");
-function getCurrentAcpModelId(options, modelId, authType, registryBaseUrl) {
-  if (!modelId || !authType) return modelId;
-  const matching = options.filter(
-    (option) => option.effectiveModelId === modelId && option.model.authType === authType
-  );
-  if (matching[0]?.model.isRuntimeModel) return matching[0].modelId;
-  if (registryBaseUrl !== void 0) {
-    const exact = matching.find(
-      (option) => (option.model.registryBaseUrl ?? null) === registryBaseUrl
-    );
-    return exact?.modelId ?? modelId;
-  }
-  return matching.length === 1 ? matching[0].modelId : formatAcpModelId(modelId, authType);
-}
-__name(getCurrentAcpModelId, "getCurrentAcpModelId");
-function sanitizeProviderBaseUrl(baseUrl) {
-  const scheme = baseUrl.match(/^[A-Za-z][A-Za-z\d+.-]*:\/\//);
-  if (!scheme) {
-    return baseUrl;
-  }
-  const authorityStart = scheme[0].length;
-  const stripAt = /* @__PURE__ */ __name((at) => `${baseUrl.slice(0, authorityStart)}${baseUrl.slice(at + 1)}`, "stripAt");
-  const authorityEnd = findAuthorityEnd(baseUrl, authorityStart);
-  const authorityAt = baseUrl.slice(authorityStart, authorityEnd).lastIndexOf("@");
-  const authorityAtIndex = authorityAt === -1 ? -1 : authorityStart + authorityAt;
-  try {
-    const parsed = new URL(baseUrl);
-    if (parsed.username || parsed.password) {
-      return authorityAtIndex >= authorityStart ? stripAt(authorityAtIndex) : baseUrl;
-    }
-    return baseUrl;
-  } catch {
-    if (authorityAtIndex >= authorityStart) {
-      return stripAt(authorityAtIndex);
-    }
-    const fallbackAt = findUnescapedUserInfoFallbackAt(
-      baseUrl,
-      authorityStart,
-      authorityEnd
-    );
-    return fallbackAt === -1 ? baseUrl : stripAt(fallbackAt);
-  }
-}
-__name(sanitizeProviderBaseUrl, "sanitizeProviderBaseUrl");
-function findUnescapedUserInfoFallbackAt(baseUrl, authorityStart, authorityEnd) {
-  const at = baseUrl.lastIndexOf("@");
-  if (at < authorityStart || authorityEnd >= at) {
-    return -1;
-  }
-  const colon = baseUrl.indexOf(":", authorityStart);
-  if (colon === -1 || colon > authorityEnd) {
-    return -1;
-  }
-  const portCandidate = baseUrl.slice(colon + 1, authorityEnd);
-  return /^\d+$/.test(portCandidate) ? -1 : at;
-}
-__name(findUnescapedUserInfoFallbackAt, "findUnescapedUserInfoFallbackAt");
-function findAuthorityEnd(baseUrl, authorityStart) {
-  const slash = baseUrl.indexOf("/", authorityStart);
-  const query = baseUrl.indexOf("?", authorityStart);
-  const hash = baseUrl.indexOf("#", authorityStart);
-  let end = baseUrl.length;
-  if (slash !== -1) end = Math.min(end, slash);
-  if (query !== -1) end = Math.min(end, query);
-  if (hash !== -1) end = Math.min(end, hash);
-  return end;
-}
-__name(findAuthorityEnd, "findAuthorityEnd");
-function parseAcpBaseModelId(value) {
-  const trimmed = value.trim();
-  const closeIdx = trimmed.lastIndexOf(")");
-  const openIdx = trimmed.lastIndexOf("(");
-  if (openIdx >= 0 && closeIdx === trimmed.length - 1 && openIdx < closeIdx) {
-    return trimmed.slice(0, openIdx);
-  }
-  return trimmed;
-}
-__name(parseAcpBaseModelId, "parseAcpBaseModelId");
-function parseAcpModelOption(input) {
-  const trimmed = input.trim();
-  const closeIdx = trimmed.lastIndexOf(")");
-  const openIdx = trimmed.lastIndexOf("(");
-  if (openIdx >= 0 && closeIdx === trimmed.length - 1 && openIdx < closeIdx) {
-    const maybeModelId = trimmed.slice(0, openIdx);
-    const maybeAuthType = trimmed.slice(openIdx + 1, closeIdx);
-    const parsedAuthType = external_exports.nativeEnum(AuthType).safeParse(maybeAuthType);
-    if (parsedAuthType.success) {
-      return { modelId: maybeModelId, authType: parsedAuthType.data };
-    }
-  }
-  return { modelId: trimmed };
-}
-__name(parseAcpModelOption, "parseAcpModelOption");
-function isInlineModelOverrideAllowed(config, modelId) {
-  const contentGeneratorConfig = config.getContentGeneratorConfig();
-  const authType = contentGeneratorConfig?.authType;
-  if (!authType) {
-    return false;
-  }
-  const activeBaseUrl = contentGeneratorConfig.baseUrl;
-  const activeEnvKey = contentGeneratorConfig.apiKeyEnvKey;
-  return config.getAvailableModelsForAuthType(authType).filter((m) => !m.fastOnly && !m.voiceOnly && !m.imageOnly).some(
-    (m) => m.id === modelId && (m.baseUrl ?? void 0) === (activeBaseUrl ?? void 0) && (m.envKey ?? void 0) === (activeEnvKey ?? void 0)
-  );
-}
-__name(isInlineModelOverrideAllowed, "isInlineModelOverrideAllowed");
-
 // packages/cli/src/utils/modelConfigUtils.ts
 init_esbuild_shims();
 var AUTH_ENV_MODEL_VARS = {
@@ -457,14 +272,6 @@ function resolveCliGenerationConfig(inputs) {
 __name(resolveCliGenerationConfig, "resolveCliGenerationConfig");
 
 export {
-  ACP_ROUTE_ID_PREFIX,
-  buildAcpModelOptions,
-  resolveAcpModelOption,
-  getCurrentAcpModelId,
-  sanitizeProviderBaseUrl,
-  parseAcpBaseModelId,
-  parseAcpModelOption,
-  isInlineModelOverrideAllowed,
   collectProviderModelsForProtocol,
   getAuthTypeFromEnv,
   resolveCliGenerationConfig

package/chunks/{chunk-BV6Q5HMY.js → chunk-MJHLKWGJ.js}

@@ -2,17 +2,18 @@
 "use strict";
 import {
   ACP_ROUTE_ID_PREFIX
-} from "./chunk-MF6E7FSA.js";
+} from "./chunk-INGBUYL6.js";
 import {
   isOpenRouterHostname
-} from "./chunk-CXTPVBFA.js";
+} from "./chunk-GSS4SZNG.js";
 import {
   REASONING_EFFORT_TIERS,
   clampReasoningEffort,
   getGptReasoningCapabilities,
   isReasoningEffortPlaceholder,
-  parseModelReasoningCapabilities
-} from "./chunk-3FPYT6QC.js";
+  parseModelReasoningCapabilities,
+  reasoningEffortsForCapability
+} from "./chunk-ARDHE6MM.js";
 import {
   init_esbuild_shims
 } from "./chunk-5O2XNYP6.js";
@@ -185,9 +186,9 @@ function getConfiguredModelReasoning(config, modelId = config.getModel?.(), fall
 __name(getConfiguredModelReasoning, "getConfiguredModelReasoning");
 function getReasoningEffortsForConfig(config) {
   const modelId = config.getModel?.();
-  const reasoning = getConfiguredModelReasoning(config, modelId, false);
-  if (reasoning) return reasoning.toggleOnly ? [] : reasoning.efforts;
-  return REASONING_EFFORT_TIERS;
+  return reasoningEffortsForCapability(
+    getConfiguredModelReasoning(config, modelId, false)
+  );
 }
 __name(getReasoningEffortsForConfig, "getReasoningEffortsForConfig");
 function parseReasoningSelection(value) {

package/chunks/{chunk-NFYEQRLG.js → chunk-MQRLLBMQ.js}

@@ -2,7 +2,7 @@
 "use strict";
 import {
   isPrivateHost
-} from "./chunk-YBUMTY7B.js";
+} from "./chunk-66N6C4EH.js";
 import {
   loadUndici
 } from "./chunk-EWJTAP3Y.js";

package/chunks/{chunk-O4KNCAX4.js → chunk-NCPFOLM2.js}

@@ -19583,8 +19583,19 @@ var findRootNode = /* @__PURE__ */ __name((node) => {
 var useBoxMetrics = /* @__PURE__ */ __name((ref) => {
   const [metrics, setMetrics] = (0, import_react33.useState)(emptyMetrics);
   const [hasMeasured, setHasMeasured] = (0, import_react33.useState)(false);
+  const guardRef = (0, import_react33.useRef)({ count: 0, windowStart: 0 });
   const { stdout } = use_stdout_default();
   const updateMetrics = (0, import_react33.useCallback)(() => {
+    const guard = guardRef.current;
+    const now = performance.now();
+    if (now - guard.windowStart >= 16) {
+      guard.count = 0;
+      guard.windowStart = now;
+    }
+    if (guard.count >= 32) {
+      return;
+    }
+    guard.count += 1;
     const layout = ref.current?.yogaNode?.getComputedLayout() ?? emptyMetrics;
     setMetrics((previousMetrics) => {
       const hasChanged = previousMetrics.width !== layout.width || previousMetrics.height !== layout.height || previousMetrics.left !== layout.left || previousMetrics.top !== layout.top;

package/chunks/{chunk-2SZH22YO.js → chunk-NJ2OFVUX.js}

@@ -16,7 +16,7 @@ import {
   getMeter,
   isTelemetrySdkInitialized,
   isValidSensitiveSpanAttributeMaxLength
-} from "./chunk-W5ZQMAEM.js";
+} from "./chunk-4Y2I3CI3.js";
 import {
   FatalConfigError,
   QWEN_DIR,
@@ -8489,6 +8489,117 @@ async function resolveTelemetrySettings(options) {
 }
 __name(resolveTelemetrySettings, "resolveTelemetrySettings");
 
+// packages/core/src/skills/types.ts
+init_esbuild_shims();
+function parseModelField(frontmatter) {
+  const raw = frontmatter["model"];
+  if (raw === void 0) {
+    return void 0;
+  }
+  if (typeof raw !== "string") {
+    throw new Error('"model" must be a string');
+  }
+  const trimmed = raw.trim();
+  if (trimmed === "" || trimmed === "inherit") {
+    return void 0;
+  }
+  return trimmed;
+}
+__name(parseModelField, "parseModelField");
+function parseUserInvocableField(frontmatter) {
+  const raw = frontmatter["user-invocable"];
+  if (raw === void 0) {
+    return void 0;
+  }
+  if (raw === true || raw === "true") {
+    return true;
+  }
+  if (raw === false || raw === "false") {
+    return false;
+  }
+  return void 0;
+}
+__name(parseUserInvocableField, "parseUserInvocableField");
+function parsePathsField(frontmatter) {
+  const raw = frontmatter["paths"];
+  if (raw === void 0 || raw === null) {
+    return void 0;
+  }
+  if (!Array.isArray(raw)) {
+    throw new Error('"paths" must be an array of glob patterns');
+  }
+  const cleaned = raw.map((p) => String(p).trim()).filter((p) => p.length > 0);
+  for (const pattern of cleaned) {
+    const normalized = pattern.replace(/\\/g, "/");
+    if (normalized.startsWith("/") || /^[A-Za-z]:/.test(normalized)) {
+      throw new Error(
+        `"paths" entry "${pattern}" looks absolute; patterns are project-root-relative \u2014 drop the leading slash / drive letter`
+      );
+    }
+    const segments = normalized.split("/");
+    if (segments.some((seg) => seg === "..")) {
+      throw new Error(
+        `"paths" entry "${pattern}" contains a ".." segment that escapes the project root; patterns must stay within the project`
+      );
+    }
+  }
+  return cleaned.length > 0 ? cleaned : void 0;
+}
+__name(parsePathsField, "parsePathsField");
+var SKILL_NAME_PATTERN = /^[\p{L}\p{N}_:.-]+$/u;
+function parseAllowedToolsField(frontmatter) {
+  const raw = frontmatter["allowedTools"];
+  if (raw == null) {
+    return void 0;
+  }
+  if (!Array.isArray(raw)) {
+    throw new Error('"allowedTools" must be an array');
+  }
+  return raw.map(String);
+}
+__name(parseAllowedToolsField, "parseAllowedToolsField");
+function validateSkillName(name) {
+  if (!SKILL_NAME_PATTERN.test(name)) {
+    throw new Error(
+      `"name" must match ${SKILL_NAME_PATTERN} (letters, digits, _, :, ., -); got "${name}"`
+    );
+  }
+}
+__name(validateSkillName, "validateSkillName");
+function qualifySkillName(extensionName, authoredName) {
+  return `${extensionName}:${authoredName}`;
+}
+__name(qualifySkillName, "qualifySkillName");
+function skillRestrictionNames(skill) {
+  const { name, authoredName } = skill;
+  const canonical = name.trim().toLowerCase();
+  const authored = authoredName?.trim().toLowerCase();
+  return authored && authored !== canonical ? [canonical, authored] : [canonical];
+}
+__name(skillRestrictionNames, "skillRestrictionNames");
+function authoredSkillName(skill) {
+  return skill.authoredName ?? skill.name;
+}
+__name(authoredSkillName, "authoredSkillName");
+var SkillError = class extends Error {
+  constructor(message, code, skillName) {
+    super(message);
+    this.code = code;
+    this.skillName = skillName;
+    this.name = "SkillError";
+  }
+  static {
+    __name(this, "SkillError");
+  }
+};
+var SkillErrorCode = {
+  NOT_FOUND: "NOT_FOUND",
+  INVALID_CONFIG: "INVALID_CONFIG",
+  INVALID_NAME: "INVALID_NAME",
+  FILE_ERROR: "FILE_ERROR",
+  PARSE_ERROR: "PARSE_ERROR"
+};
+
 // packages/core/src/skills/skill-curator.ts
 init_esbuild_shims();
 var import_proper_lockfile = __toESM(require_proper_lockfile(), 1);
@@ -8733,102 +8844,6 @@ async function assertRealProjectSkillPath(targetPath, projectRoot) {
 }
 __name(assertRealProjectSkillPath, "assertRealProjectSkillPath");
 
-// packages/core/src/skills/types.ts
-init_esbuild_shims();
-function parseModelField(frontmatter) {
-  const raw = frontmatter["model"];
-  if (raw === void 0) {
-    return void 0;
-  }
-  if (typeof raw !== "string") {
-    throw new Error('"model" must be a string');
-  }
-  const trimmed = raw.trim();
-  if (trimmed === "" || trimmed === "inherit") {
-    return void 0;
-  }
-  return trimmed;
-}
-__name(parseModelField, "parseModelField");
-function parseUserInvocableField(frontmatter) {
-  const raw = frontmatter["user-invocable"];
-  if (raw === void 0) {
-    return void 0;
-  }
-  if (raw === true || raw === "true") {
-    return true;
-  }
-  if (raw === false || raw === "false") {
-    return false;
-  }
-  return void 0;
-}
-__name(parseUserInvocableField, "parseUserInvocableField");
-function parsePathsField(frontmatter) {
-  const raw = frontmatter["paths"];
-  if (raw === void 0 || raw === null) {
-    return void 0;
-  }
-  if (!Array.isArray(raw)) {
-    throw new Error('"paths" must be an array of glob patterns');
-  }
-  const cleaned = raw.map((p) => String(p).trim()).filter((p) => p.length > 0);
-  for (const pattern of cleaned) {
-    const normalized = pattern.replace(/\\/g, "/");
-    if (normalized.startsWith("/") || /^[A-Za-z]:/.test(normalized)) {
-      throw new Error(
-        `"paths" entry "${pattern}" looks absolute; patterns are project-root-relative \u2014 drop the leading slash / drive letter`
-      );
-    }
-    const segments = normalized.split("/");
-    if (segments.some((seg) => seg === "..")) {
-      throw new Error(
-        `"paths" entry "${pattern}" contains a ".." segment that escapes the project root; patterns must stay within the project`
-      );
-    }
-  }
-  return cleaned.length > 0 ? cleaned : void 0;
-}
-__name(parsePathsField, "parsePathsField");
-var SKILL_NAME_PATTERN = /^[\p{L}\p{N}_:.-]+$/u;
-function parseAllowedToolsField(frontmatter) {
-  const raw = frontmatter["allowedTools"];
-  if (raw == null) {
-    return void 0;
-  }
-  if (!Array.isArray(raw)) {
-    throw new Error('"allowedTools" must be an array');
-  }
-  return raw.map(String);
-}
-__name(parseAllowedToolsField, "parseAllowedToolsField");
-function validateSkillName(name) {
-  if (!SKILL_NAME_PATTERN.test(name)) {
-    throw new Error(
-      `"name" must match ${SKILL_NAME_PATTERN} (letters, digits, _, :, ., -); got "${name}"`
-    );
-  }
-}
-__name(validateSkillName, "validateSkillName");
-var SkillError = class extends Error {
-  constructor(message, code, skillName) {
-    super(message);
-    this.code = code;
-    this.skillName = skillName;
-    this.name = "SkillError";
-  }
-  static {
-    __name(this, "SkillError");
-  }
-};
-var SkillErrorCode = {
-  NOT_FOUND: "NOT_FOUND",
-  INVALID_CONFIG: "INVALID_CONFIG",
-  INVALID_NAME: "INVALID_NAME",
-  FILE_ERROR: "FILE_ERROR",
-  PARSE_ERROR: "PARSE_ERROR"
-};
-
 // packages/core/src/skills/skill-curator.ts
 var AUTO_SKILL_CURATOR_INTERVAL_MS = 7 * 24 * 60 * 60 * 1e3;
 var AUTO_SKILL_STALE_AFTER_MS = 30 * 24 * 60 * 60 * 1e3;
@@ -9588,6 +9603,9 @@ export {
   SKILL_NAME_PATTERN,
   parseAllowedToolsField,
   validateSkillName,
+  qualifySkillName,
+  skillRestrictionNames,
+  authoredSkillName,
   SkillError,
   SkillErrorCode,
   parse2 as parse,

package/chunks/{chunk-6MBXY6WM.js → chunk-NRQI3PGS.js}

@@ -26,7 +26,7 @@ function isExpectedPtyRaceError(error) {
   }
   const message = error.message;
   const code = getErrnoCode(error);
-  if (code === "EIO" && message.includes("read") || message.includes("read EIO")) {
+  if (code === "EIO" && message.includes("read") || message.includes("read EIO") || code === "EIO" && message.includes("write") || message.includes("write EIO")) {
     return true;
   }
   if (code === "EAGAIN" && message.includes("read") || message.includes("read EAGAIN")) {

package/chunks/{chunk-3CZ2BQV6.js → chunk-NXUZFW3G.js}

@@ -15,11 +15,20 @@ init_esbuild_shims();
 import * as fs from "node:fs";
 import * as fsPromises from "node:fs/promises";
 import * as path from "node:path";
-import { execSync } from "node:child_process";
+import { execFileSync } from "node:child_process";
 import { stripVTControlCharacters } from "node:util";
 var debugLogger = createDebugLogger("GIT");
 var GIT_STATUS_TIMEOUT_MS = 5e3;
 var DETACHED_HEAD_LABEL = "(detached HEAD)";
+var NO_EXEC_CONFIG_SETTING = "core.fsmonitor=";
+var NO_EXEC_CONFIG_SETTINGS = [
+  NO_EXEC_CONFIG_SETTING,
+  "log.showSignature=false"
+];
+var NO_EXEC_CONFIG = NO_EXEC_CONFIG_SETTINGS.flatMap((setting) => [
+  "-c",
+  setting
+]);
 var MAX_GIT_METADATA_BYTES = 4096;
 async function readFirstLineNoFollow(filePath) {
   let fh;
@@ -85,11 +94,15 @@ function findGitRoot(directory) {
 __name(findGitRoot, "findGitRoot");
 var getGitBranch = /* @__PURE__ */ __name((cwd) => {
   try {
-    const branch = execSync("git rev-parse --abbrev-ref HEAD", {
-      cwd,
-      encoding: "utf8",
-      stdio: ["pipe", "pipe", "pipe"]
-    }).trim();
+    const branch = execFileSync(
+      "git",
+      [...NO_EXEC_CONFIG, "rev-parse", "--abbrev-ref", "HEAD"],
+      {
+        cwd,
+        encoding: "utf8",
+        stdio: ["pipe", "pipe", "pipe"]
+      }
+    ).trim();
     return branch || void 0;
   } catch {
     return void 0;
@@ -104,11 +117,15 @@ var getCachedGitBranch = /* @__PURE__ */ __name((cwd) => {
 }, "getCachedGitBranch");
 var getGitRepoName = /* @__PURE__ */ __name((cwd) => {
   try {
-    const remoteUrl = execSync("git remote get-url origin", {
-      cwd,
-      encoding: "utf8",
-      stdio: ["pipe", "pipe", "pipe"]
-    }).trim();
+    const remoteUrl = execFileSync(
+      "git",
+      [...NO_EXEC_CONFIG, "remote", "get-url", "origin"],
+      {
+        cwd,
+        encoding: "utf8",
+        stdio: ["pipe", "pipe", "pipe"]
+      }
+    ).trim();
     if (remoteUrl) {
       let normalizedUrl = remoteUrl;
       if (remoteUrl.startsWith("git@")) {
@@ -142,8 +159,15 @@ __name(formatGitPromptValue, "formatGitPromptValue");
 function getRecentGitStatus(cwd) {
   if (!isGitRepository(cwd)) return null;
   try {
-    const statusWithBranch = execSync(
-      "git --no-optional-locks status --short --branch",
+    const statusWithBranch = execFileSync(
+      "git",
+      [
+        ...NO_EXEC_CONFIG,
+        "--no-optional-locks",
+        "status",
+        "--short",
+        "--branch"
+      ],
       {
         cwd,
         encoding: "utf8",
@@ -161,12 +185,16 @@ function getRecentGitStatus(cwd) {
     const branchName = branchDescription.replace(/^(?:No commits yet|Initial commit) on /, "").split("...")[0];
     const branch = branchDescription === "HEAD (no branch)" || !branchName ? DETACHED_HEAD_LABEL : branchName;
     const status = statusLines.join("\n").trim();
-    const log = execSync("git --no-optional-locks log --oneline -n 5", {
-      cwd,
-      encoding: "utf8",
-      stdio: ["pipe", "pipe", "pipe"],
-      timeout: GIT_STATUS_TIMEOUT_MS
-    }).trim();
+    const log = execFileSync(
+      "git",
+      [...NO_EXEC_CONFIG, "--no-optional-locks", "log", "--oneline", "-n", "5"],
+      {
+        cwd,
+        encoding: "utf8",
+        stdio: ["pipe", "pipe", "pipe"],
+        timeout: GIT_STATUS_TIMEOUT_MS
+      }
+    ).trim();
     const MAX_STATUS_CHARS = 2e3;
     const truncatedStatus = status.length > MAX_STATUS_CHARS ? status.substring(0, MAX_STATUS_CHARS) + "\n... (truncated, run `git status` for full output)" : status;
     return [
@@ -190,6 +218,8 @@ ${log}`),
 __name(getRecentGitStatus, "getRecentGitStatus");
 
 export {
+  NO_EXEC_CONFIG_SETTINGS,
+  NO_EXEC_CONFIG,
   readFirstLineNoFollow,
   isGitRepository,
   findGitRoot,