@qwen-code/qwen-code 0.23.5-dev.codemode-responses.20260915.af4da34719 → 0.23.5-preview.0

package/chunks/{chunk-6IHJLXNF.js → chunk-CXY6BICQ.js}

@@ -1,20 +1,23 @@
 // Force strict mode and setup for ESM
 "use strict";
+import {
+  listCommand
+} from "./chunk-FBY32737.js";
+import {
+  getErrorMessage as getErrorMessage2
+} from "./chunk-B6RMK4ED.js";
+import {
+  loadSandboxConfig
+} from "./chunk-QT6Z2IBF.js";
 import {
   CUSTOM_SANDBOX_IMAGE_ENV_VAR
-} from "./chunk-5CDDYYNI.js";
+} from "./chunk-B5TJK7B3.js";
 import {
   isOwnInterfaceAddress
 } from "./chunk-24FVUD5P.js";
 import {
   serveCommand
-} from "./chunk-B6KSTADQ.js";
-import {
-  listCommand
-} from "./chunk-3ADU34IF.js";
-import {
-  getErrorMessage as getErrorMessage2
-} from "./chunk-7MKB7L25.js";
+} from "./chunk-ZMYKNKET.js";
 import {
   OBSERVED_CONTACT_MAX_FRESH_WITHIN_SECONDS,
   ObservedChannelContactStore
@@ -56,18 +59,18 @@ import {
 import {
   resolvePath
 } from "./chunk-Y53DG2HA.js";
-import {
-  normalizeSkillNames,
-  resolveSkillSettings
-} from "./chunk-LMJSPC55.js";
 import {
   CLI_VERSION
-} from "./chunk-B2VSRPS6.js";
+} from "./chunk-3LLEB5CU.js";
 import {
   collectProviderModelsForProtocol,
   getAuthTypeFromEnv,
   resolveCliGenerationConfig
-} from "./chunk-JBS56C7O.js";
+} from "./chunk-UZSB57EV.js";
+import {
+  normalizeSkillNames,
+  resolveSkillSettings
+} from "./chunk-D7JMO2GP.js";
 import {
   channelLoopPath,
   createChannel,
@@ -85,17 +88,17 @@ import {
   resolveChannelLocale,
   selectFirstModel,
   sessionsPath
-} from "./chunk-VN5G33G7.js";
+} from "./chunk-WZWTY7SG.js";
 import {
   getExtensionManager,
   requestChoicePluginNonInteractive,
   requestConsentNonInteractive,
   requestConsentOrFail,
   resolveExtensionCommandScope
-} from "./chunk-HJAJ6MR6.js";
+} from "./chunk-E2VSBAFA.js";
 import {
   parseChannelConfig
-} from "./chunk-IAS753HG.js";
+} from "./chunk-SYMXYRM5.js";
 import {
   findCliEntryPath
 } from "./chunk-V6WHFGST.js";
@@ -113,6 +116,10 @@ import {
   isChannelStartupReportAckMessage,
   isChannelWebhookTaskMessage
 } from "./chunk-STUJ7IMZ.js";
+import {
+  normalizeWorkerDiagnostic,
+  sanitizeWorkerDiagnostic
+} from "./chunk-L3SNMEDW.js";
 import {
   CHANNEL_DAEMON_WORKER_SENTINEL,
   CHANNEL_WORKER_HEARTBEAT_INTERVAL_MS,
@@ -121,13 +128,13 @@ import {
   QWEN_DAEMON_WORKSPACE_ENV,
   QWEN_SERVER_TOKEN_ENV
 } from "./chunk-GYTKQYDB.js";
-import {
-  normalizeWorkerDiagnostic,
-  sanitizeWorkerDiagnostic
-} from "./chunk-WD6YQI5M.js";
 import {
   normalizeServeChannelSelection
 } from "./chunk-GDWE23OR.js";
+import {
+  CHANNEL_WORKER_KILL_GRACE_MS,
+  CHANNEL_WORKER_STOP_GRACE_MS
+} from "./chunk-CJ3DHN5I.js";
 import {
   ChannelDeliveryError,
   MAX_CHANNEL_DELIVERIES_IN_FLIGHT,
@@ -135,15 +142,11 @@ import {
   isChannelDeliveryMessage
 } from "./chunk-RKFGE7JH.js";
 import {
-  CHANNEL_WORKER_KILL_GRACE_MS,
-  CHANNEL_WORKER_STOP_GRACE_MS
-} from "./chunk-CJ3DHN5I.js";
+  redactLogCredentials
+} from "./chunk-M5GB774H.js";
 import {
   EXTERNAL_TOOL_GUARD_TOKEN_ENV
 } from "./chunk-3VUENPWF.js";
-import {
-  redactLogCredentials
-} from "./chunk-M5GB774H.js";
 import {
   pidFilePath,
   readServiceInfo,
@@ -158,7 +161,7 @@ import {
   clearAccount,
   loadAccount,
   saveAccount
-} from "./chunk-LWWRJRCD.js";
+} from "./chunk-ESBYWATJ.js";
 import {
   AcpBridge,
   ChannelLoopScheduler,
@@ -169,15 +172,15 @@ import {
   isChannelProactiveDeliveryError,
   sanitizeLogText,
   sanitizePromptText
-} from "./chunk-EPVEPTI3.js";
+} from "./chunk-PZRXWQUA.js";
 import {
   assembleMcpServers,
   getPendingGatedMcpServers,
   mcpCommand
-} from "./chunk-RD2HAF25.js";
+} from "./chunk-WL36KHUQ.js";
 import {
   loadSettings
-} from "./chunk-65BKWMMH.js";
+} from "./chunk-RRI764F7.js";
 import {
   detectSystemLanguage,
   getCurrentLanguage,
@@ -185,32 +188,19 @@ import {
   resolveLanguage,
   resolveLanguageSetting,
   t
-} from "./chunk-I6YJZGHS.js";
+} from "./chunk-GSAOVDTH.js";
 import {
   isFileSourcedEnvKey,
   loadEnvironment
-} from "./chunk-FZQQMVLB.js";
+} from "./chunk-NKTMUPHJ.js";
 import {
   resolveAcpChannelFallback,
   scrubAndReportInheritedLoaderEnv
-} from "./chunk-XX5HQLCZ.js";
-import {
-  hideBin,
-  yargs_default
-} from "./chunk-XFSFZCM5.js";
-import {
-  readPackageUpSync
-} from "./chunk-2EAZ43JQ.js";
-import {
-  getCliVersion
-} from "./chunk-IOXJX7XE.js";
-import {
-  getPackageJson
-} from "./chunk-W3N5XAZ6.js";
+} from "./chunk-6OTF7TTE.js";
 import {
   isWorkspaceTrusted,
   parseJsoncObject
-} from "./chunk-V77DTVCM.js";
+} from "./chunk-NQ272MQG.js";
 import {
   require_strip_json_comments
 } from "./chunk-NPQ5ZKRP.js";
@@ -232,7 +222,17 @@ import {
   removeChannelMemoryEntries,
   removePeerController,
   updateChannelMemoryEntry
-} from "./chunk-JATZTB7X.js";
+} from "./chunk-347O2YZJ.js";
+import {
+  hideBin,
+  yargs_default
+} from "./chunk-XFSFZCM5.js";
+import {
+  readPackageUpSync
+} from "./chunk-2EAZ43JQ.js";
+import {
+  getCliVersion
+} from "./chunk-AQP3H22J.js";
 import {
   FINDING_BASELINES,
   FINDING_CONFIDENCES,
@@ -241,10 +241,10 @@ import {
   FINDING_SEVERITIES,
   FINDING_SOURCES,
   compressFindingSummary
-} from "./chunk-EKMJR7M3.js";
+} from "./chunk-X7AYIXC7.js";
 import {
   resolveReviewWorkflowConcurrency
-} from "./chunk-MZ3W3F44.js";
+} from "./chunk-SFHX5G2S.js";
 import {
   Config,
   DEFAULT_TRUNCATE_TOOL_OUTPUT_THRESHOLD,
@@ -260,12 +260,9 @@ import {
   checkForExtensionUpdate,
   getScopedEnvContents,
   ideContextStore,
-  isBareMode,
   isExtensionCommittedWithWarningsError,
   isGitIgnored,
-  isSafeModeEnv,
   isToolEnabled,
-  isTruthy,
   isUnusableScriptEntry,
   loadServerHierarchicalMemory,
   normalizeProxyUrl,
@@ -274,7 +271,7 @@ import {
   sanitizeFilenameComponent,
   unquoteCStylePath,
   updateSetting
-} from "./chunk-AYMSNIYL.js";
+} from "./chunk-KAYC5FBN.js";
 import {
   parsePositiveIntegerEnv
 } from "./chunk-6PVPNMXU.js";
@@ -282,14 +279,6 @@ import {
   nextFireTime,
   parseCron
 } from "./chunk-5EZRLTLQ.js";
-import {
-  parseBooleanEnvFlag,
-  require_dist,
-  resolveTelemetrySettings
-} from "./chunk-NJ2OFVUX.js";
-import {
-  resolveBundleDir
-} from "./chunk-ACHCT36C.js";
 import {
   describeSessionKind,
   listLiveSessions
@@ -297,52 +286,66 @@ import {
 import {
   isSameProcess
 } from "./chunk-CH2YDT6X.js";
+import {
+  parseBooleanEnvFlag,
+  require_dist,
+  resolveTelemetrySettings
+} from "./chunk-P42KMMU6.js";
+import {
+  isSafeModeEnv
+} from "./chunk-ADN5KESB.js";
+import {
+  resolveBundleDir
+} from "./chunk-ACHCT36C.js";
 import {
   APPROVAL_MODES
 } from "./chunk-JX6XHPTX.js";
+import {
+  isBareMode,
+  isTruthy
+} from "./chunk-SK3RZOPS.js";
 import {
   require_proper_lockfile
 } from "./chunk-MLXTMF7H.js";
 import {
   BUILT_IN_OUTPUT_STYLES
-} from "./chunk-AXZMWAJV.js";
+} from "./chunk-36SDZ2Q4.js";
 import {
   addDaemonRequestAttribute
-} from "./chunk-L6DIANLD.js";
+} from "./chunk-G45B3INR.js";
 import {
   parseLineTolerant
-} from "./chunk-UB2MATP5.js";
+} from "./chunk-CDDP4ONL.js";
 import {
   Mutex
 } from "./chunk-VGC4I5JJ.js";
 import {
   getAllMemoryFilenames,
   setMemoryFilename
-} from "./chunk-QZW6WRB7.js";
-import {
-  DEFAULT_QWEN_EMBEDDING_MODEL,
-  VERTEX_ADC_HINT,
-  hasVertexProjectConfigured
-} from "./chunk-OIDF7L67.js";
+} from "./chunk-5NUKK2DT.js";
 import {
   atomicWriteFileSync,
   atomicWriteJSON
 } from "./chunk-XFFRI3WM.js";
+import {
+  DEFAULT_QWEN_EMBEDDING_MODEL,
+  VERTEX_ADC_HINT,
+  hasVertexProjectConfigured
+} from "./chunk-GJKP6XOB.js";
 import {
   isTlsVerificationDisabled
-} from "./chunk-EWJTAP3Y.js";
+} from "./chunk-7O5PYQ3M.js";
 import {
   recordChannelMemoryRecallMetrics,
   redactUrlCredentials,
   stripAnsiAndControl
-} from "./chunk-4Y2I3CI3.js";
+} from "./chunk-6USYH3EU.js";
 import {
   SchemaValidator,
   ToolNames
 } from "./chunk-RSWBT7AZ.js";
 import {
   FatalConfigError,
-  FatalSandboxError,
   Storage,
   createDebugLogger,
   getErrorMessage,
@@ -373,167 +376,9 @@ import {
   __commonJS,
   __export,
   __name,
-  __require,
   __toESM
 } from "./chunk-J2S4EL5Y.js";
 
-// node_modules/command-exists/lib/command-exists.js
-var require_command_exists = __commonJS({
-  "node_modules/command-exists/lib/command-exists.js"(exports, module) {
-    "use strict";
-    init_esbuild_shims();
-    var exec = __require("child_process").exec;
-    var execSync = __require("child_process").execSync;
-    var fs4 = __require("fs");
-    var path6 = __require("path");
-    var access2 = fs4.access;
-    var accessSync4 = fs4.accessSync;
-    var constants6 = fs4.constants || fs4;
-    var isUsingWindows = process.platform == "win32";
-    var fileNotExists = /* @__PURE__ */ __name(function(commandName, callback) {
-      access2(
-        commandName,
-        constants6.F_OK,
-        function(err) {
-          callback(!err);
-        }
-      );
-    }, "fileNotExists");
-    var fileNotExistsSync = /* @__PURE__ */ __name(function(commandName) {
-      try {
-        accessSync4(commandName, constants6.F_OK);
-        return false;
-      } catch (e) {
-        return true;
-      }
-    }, "fileNotExistsSync");
-    var localExecutable = /* @__PURE__ */ __name(function(commandName, callback) {
-      access2(
-        commandName,
-        constants6.F_OK | constants6.X_OK,
-        function(err) {
-          callback(null, !err);
-        }
-      );
-    }, "localExecutable");
-    var localExecutableSync = /* @__PURE__ */ __name(function(commandName) {
-      try {
-        accessSync4(commandName, constants6.F_OK | constants6.X_OK);
-        return true;
-      } catch (e) {
-        return false;
-      }
-    }, "localExecutableSync");
-    var commandExistsUnix = /* @__PURE__ */ __name(function(commandName, cleanedCommandName, callback) {
-      fileNotExists(commandName, function(isFile) {
-        if (!isFile) {
-          var child = exec(
-            "command -v " + cleanedCommandName + " 2>/dev/null && { echo >&1 " + cleanedCommandName + "; exit 0; }",
-            function(error, stdout, stderr) {
-              callback(null, !!stdout);
-            }
-          );
-          return;
-        }
-        localExecutable(commandName, callback);
-      });
-    }, "commandExistsUnix");
-    var commandExistsWindows = /* @__PURE__ */ __name(function(commandName, cleanedCommandName, callback) {
-      if (!/^(?!(?:.*\s|.*\.|\W+)$)(?:[a-zA-Z]:)?(?:(?:[^<>:"\|\?\*\n])+(?:\/\/|\/|\\\\|\\)?)+$/m.test(commandName)) {
-        callback(null, false);
-        return;
-      }
-      var child = exec(
-        "where " + cleanedCommandName,
-        function(error) {
-          if (error !== null) {
-            callback(null, false);
-          } else {
-            callback(null, true);
-          }
-        }
-      );
-    }, "commandExistsWindows");
-    var commandExistsUnixSync = /* @__PURE__ */ __name(function(commandName, cleanedCommandName) {
-      if (fileNotExistsSync(commandName)) {
-        try {
-          var stdout = execSync(
-            "command -v " + cleanedCommandName + " 2>/dev/null && { echo >&1 " + cleanedCommandName + "; exit 0; }"
-          );
-          return !!stdout;
-        } catch (error) {
-          return false;
-        }
-      }
-      return localExecutableSync(commandName);
-    }, "commandExistsUnixSync");
-    var commandExistsWindowsSync = /* @__PURE__ */ __name(function(commandName, cleanedCommandName, callback) {
-      if (!/^(?!(?:.*\s|.*\.|\W+)$)(?:[a-zA-Z]:)?(?:(?:[^<>:"\|\?\*\n])+(?:\/\/|\/|\\\\|\\)?)+$/m.test(commandName)) {
-        return false;
-      }
-      try {
-        var stdout = execSync("where " + cleanedCommandName, { stdio: [] });
-        return !!stdout;
-      } catch (error) {
-        return false;
-      }
-    }, "commandExistsWindowsSync");
-    var cleanInput = /* @__PURE__ */ __name(function(s) {
-      if (/[^A-Za-z0-9_\/:=-]/.test(s)) {
-        s = "'" + s.replace(/'/g, "'\\''") + "'";
-        s = s.replace(/^(?:'')+/g, "").replace(/\\'''/g, "\\'");
-      }
-      return s;
-    }, "cleanInput");
-    if (isUsingWindows) {
-      cleanInput = /* @__PURE__ */ __name(function(s) {
-        var isPathName = /[\\]/.test(s);
-        if (isPathName) {
-          var dirname42 = '"' + path6.dirname(s) + '"';
-          var basename12 = '"' + path6.basename(s) + '"';
-          return dirname42 + ":" + basename12;
-        }
-        return '"' + s + '"';
-      }, "cleanInput");
-    }
-    module.exports = /* @__PURE__ */ __name(function commandExists2(commandName, callback) {
-      var cleanedCommandName = cleanInput(commandName);
-      if (!callback && typeof Promise !== "undefined") {
-        return new Promise(function(resolve43, reject) {
-          commandExists2(commandName, function(error, output) {
-            if (output) {
-              resolve43(commandName);
-            } else {
-              reject(error);
-            }
-          });
-        });
-      }
-      if (isUsingWindows) {
-        commandExistsWindows(commandName, cleanedCommandName, callback);
-      } else {
-        commandExistsUnix(commandName, cleanedCommandName, callback);
-      }
-    }, "commandExists");
-    module.exports.sync = function(commandName) {
-      var cleanedCommandName = cleanInput(commandName);
-      if (isUsingWindows) {
-        return commandExistsWindowsSync(commandName, cleanedCommandName);
-      } else {
-        return commandExistsUnixSync(commandName, cleanedCommandName);
-      }
-    };
-  }
-});
-
-// node_modules/command-exists/index.js
-var require_command_exists2 = __commonJS({
-  "node_modules/command-exists/index.js"(exports, module) {
-    init_esbuild_shims();
-    module.exports = require_command_exists();
-  }
-});
-
 // node_modules/punycode.js/punycode.js
 var require_punycode = __commonJS({
   "node_modules/punycode.js/punycode.js"(exports, module) {
@@ -1016,132 +861,6 @@ function normalizeDisabledToolList(raw) {
 }
 __name(normalizeDisabledToolList, "normalizeDisabledToolList");
 
-// packages/cli/src/config/sandboxConfig.ts
-init_esbuild_shims();
-var import_command_exists = __toESM(require_command_exists2(), 1);
-import { spawnSync } from "node:child_process";
-import * as os from "node:os";
-var VALID_SANDBOX_COMMANDS = [
-  "docker",
-  "podman",
-  "sandbox-exec"
-];
-function isSandboxCommand(value) {
-  return VALID_SANDBOX_COMMANDS.includes(value);
-}
-__name(isSandboxCommand, "isSandboxCommand");
-var SANDBOX_PROBE_TIMEOUT_MS = 5e3;
-var probeCache = /* @__PURE__ */ new Map();
-function probeSandboxCommand(command) {
-  if (command === "sandbox-exec") {
-    return void 0;
-  }
-  if (probeCache.has(command)) {
-    return probeCache.get(command);
-  }
-  const failure = runSandboxProbe(command);
-  probeCache.set(command, failure);
-  return failure;
-}
-__name(probeSandboxCommand, "probeSandboxCommand");
-function runSandboxProbe(command) {
-  try {
-    const result = spawnSync(command, ["version"], {
-      encoding: "utf8",
-      stdio: "pipe",
-      timeout: SANDBOX_PROBE_TIMEOUT_MS
-    });
-    if (result.error) {
-      return result.error.message;
-    }
-    if (result.status === 0) {
-      return void 0;
-    }
-    const output = `${result.stderr ?? ""}
-${result.stdout ?? ""}`;
-    const firstLine = output.split("\n").map((line) => line.trim()).find((line) => line.length > 0);
-    const stripped = firstLine ? stripAnsiAndControl(firstLine).trim() : "";
-    return stripped || `'${command} version' exited with ${result.status}`;
-  } catch (error) {
-    return error instanceof Error ? error.message : String(error);
-  }
-}
-__name(runSandboxProbe, "runSandboxProbe");
-function getSandboxCommand(sandbox) {
-  if (process.env["SANDBOX"]) {
-    return "";
-  }
-  const environmentConfiguredSandbox = process.env["QWEN_SANDBOX"]?.toLowerCase().trim() ?? "";
-  sandbox = environmentConfiguredSandbox?.length > 0 ? environmentConfiguredSandbox : sandbox;
-  if (sandbox === "1" || sandbox === "true") sandbox = true;
-  else if (sandbox === "0" || sandbox === "false" || !sandbox) sandbox = false;
-  if (sandbox === false) {
-    return "";
-  }
-  const sandboxSource = environmentConfiguredSandbox.length > 0 ? " (from QWEN_SANDBOX)" : "";
-  if (typeof sandbox === "string" && sandbox) {
-    if (!isSandboxCommand(sandbox)) {
-      throw new FatalSandboxError(
-        `Invalid sandbox command '${sandbox}'. Must be one of ${VALID_SANDBOX_COMMANDS.join(
-          ", "
-        )}`
-      );
-    }
-    if (import_command_exists.default.sync(sandbox)) {
-      const failure = probeSandboxCommand(sandbox);
-      if (failure) {
-        throw new FatalSandboxError(
-          `Sandbox command '${sandbox}'${sandboxSource} is installed but cannot run: ${failure}`
-        );
-      }
-      return sandbox;
-    }
-    throw new FatalSandboxError(
-      `Missing sandbox command '${sandbox}'${sandboxSource}`
-    );
-  }
-  const candidates = [];
-  if (os.platform() === "darwin" && import_command_exists.default.sync("sandbox-exec")) {
-    candidates.push("sandbox-exec");
-  }
-  if (sandbox === true) {
-    candidates.push("docker", "podman");
-  }
-  let firstFailure;
-  for (const candidate of candidates) {
-    if (!import_command_exists.default.sync(candidate)) {
-      continue;
-    }
-    const failure = probeSandboxCommand(candidate);
-    if (!failure) {
-      return candidate;
-    }
-    firstFailure ??= { command: candidate, detail: failure };
-  }
-  if (sandbox === true) {
-    const enabledLabel = sandboxSource ? "QWEN_SANDBOX is true" : "Sandbox is enabled";
-    const specifyHint = sandboxSource ? "specify command in QWEN_SANDBOX" : "specify command via --sandbox or QWEN_SANDBOX";
-    if (firstFailure) {
-      throw new FatalSandboxError(
-        `${enabledLabel} and '${firstFailure.command}' is installed but cannot run: ${firstFailure.detail}; start it, try another installed runtime, or ${specifyHint}`
-      );
-    }
-    throw new FatalSandboxError(
-      `${enabledLabel} but failed to determine command for sandbox; install docker or podman or ${specifyHint}`
-    );
-  }
-  return "";
-}
-__name(getSandboxCommand, "getSandboxCommand");
-async function loadSandboxConfig(settings, argv) {
-  const sandboxOption = argv.sandbox ?? settings.tools?.sandbox;
-  const command = getSandboxCommand(sandboxOption);
-  const packageJson = await getPackageJson();
-  const image2 = argv.sandboxImage ?? process.env["QWEN_SANDBOX_IMAGE"] ?? settings.tools?.sandboxImage ?? packageJson?.config?.sandboxImageUri;
-  return command && image2 ? { command, image: image2 } : void 0;
-}
-__name(loadSandboxConfig, "loadSandboxConfig");
-
 // packages/cli/src/utils/events.ts
 init_esbuild_shims();
 import { EventEmitter } from "node:events";
@@ -2821,12 +2540,26 @@ var hooksCommand = {
   }, "handler")
 };
 
+// packages/cli/src/config/hook-settings.ts
+init_esbuild_shims();
+function resolveHookSettingsForConfig(mergedHooks, separated, hooksDisabled) {
+  if (hooksDisabled) {
+    return { userHooks: void 0, projectHooks: void 0, hooks: void 0 };
+  }
+  return {
+    userHooks: separated?.userHooks ?? mergedHooks,
+    projectHooks: separated?.projectHooks,
+    hooks: mergedHooks
+  };
+}
+__name(resolveHookSettingsForConfig, "resolveHookSettingsForConfig");
+
 // node_modules/yargs/helpers/helpers.mjs
 init_esbuild_shims();
 
 // packages/cli/src/config/config.ts
 var import_strip_json_comments = __toESM(require_strip_json_comments(), 1);
-import * as fs3 from "node:fs";
+import * as fs4 from "node:fs";
 import * as path5 from "node:path";
 import { homedir as homedir2 } from "node:os";
 import { randomUUID as randomUUID4 } from "node:crypto";
@@ -3722,7 +3455,7 @@ var stopCommand = {
     if (argv["daemon-url"]) {
       const token = argv.token ?? process.env[QWEN_SERVER_TOKEN_ENV] ?? process.env[QWEN_DAEMON_TOKEN_ENV];
       try {
-        const sdk = await import("./daemon-NJB4PWZ7.js");
+        const sdk = await import("./daemon-INCM4VBX.js");
         const client = new sdk.DaemonClient({
           baseUrl: argv["daemon-url"],
           ...token ? { token } : {}
@@ -3917,7 +3650,7 @@ var statusCommand = {
     if (argv["daemon-url"]) {
       const token = argv.token ?? process.env[QWEN_SERVER_TOKEN_ENV] ?? process.env[QWEN_DAEMON_TOKEN_ENV];
       try {
-        const sdk = await import("./daemon-NJB4PWZ7.js");
+        const sdk = await import("./daemon-INCM4VBX.js");
         const client = new sdk.DaemonClient({
           baseUrl: argv["daemon-url"],
           ...token ? { token } : {}
@@ -4028,7 +3761,7 @@ var reloadCommand = {
     const token = resolveToken(argv.token);
     let sdk;
     try {
-      sdk = await import("./daemon-NJB4PWZ7.js");
+      sdk = await import("./daemon-INCM4VBX.js");
     } catch (err) {
       writeStderrLine(
         `[Channel] Failed to load daemon SDK: ${safeChannelCommandErrorMessage(err)}`
@@ -4108,7 +3841,7 @@ var setCommand2 = {
     const selection = names[0] === "all" ? { mode: "all" } : { mode: "names", names };
     let sdk;
     try {
-      sdk = await import("./daemon-NJB4PWZ7.js");
+      sdk = await import("./daemon-INCM4VBX.js");
     } catch (error) {
       writeStderrLine(
         `[Channel] Failed to load daemon SDK: ${safeChannelCommandErrorMessage(error)}`
@@ -4266,7 +3999,7 @@ function createDaemonChannelBridgeFacade(bridge, opts) {
 }
 __name(createDaemonChannelBridgeFacade, "createDaemonChannelBridgeFacade");
 async function loadDaemonSdk() {
-  return await import("./daemon-NJB4PWZ7.js");
+  return await import("./daemon-INCM4VBX.js");
 }
 __name(loadDaemonSdk, "loadDaemonSdk");
 function selectedChannelNames(channelsConfig, selection) {
@@ -6670,11 +6403,11 @@ __name(ensureAuthenticated, "ensureAuthenticated");
 
 // packages/cli/src/commands/review/lib/git.ts
 init_esbuild_shims();
-import { execFileSync as execFileSync3, spawnSync as spawnSync3 } from "node:child_process";
+import { execFileSync as execFileSync3, spawnSync as spawnSync2 } from "node:child_process";
 
 // packages/cli/src/commands/review/lib/worktree.ts
 init_esbuild_shims();
-import { spawnSync as spawnSync2 } from "node:child_process";
+import { spawnSync } from "node:child_process";
 import {
   accessSync,
   constants,
@@ -7003,7 +6736,7 @@ function resolvedCommonDir(cwd) {
 }
 __name(resolvedCommonDir, "resolvedCommonDir");
 function revParse(cwd, ...flags) {
-  const resolved = spawnSync2(
+  const resolved = spawnSync(
     "git",
     [
       "-c",
@@ -7225,7 +6958,7 @@ function filterCommandsIn(commonDir, gitDir) {
   const dangling = /* @__PURE__ */ new Set();
   const visited = /* @__PURE__ */ new Set();
   const read = /* @__PURE__ */ __name((file) => {
-    const r = spawnSync2(
+    const r = spawnSync(
       "git",
       ["config", "--file", file, "-z", "--get-regexp", SCREEN_KEYS],
       {
@@ -7361,7 +7094,7 @@ __name(filterBlankEnv, "filterBlankEnv");
 var UNRESOLVED_REPO = "the repository's git directories could not be resolved (git rev-parse failed) \u2014 not screened";
 function screenForTree(worktree) {
   const discover = /* @__PURE__ */ __name((flag) => {
-    const r = spawnSync2("git", ["rev-parse", "--path-format=absolute", flag], {
+    const r = spawnSync("git", ["rev-parse", "--path-format=absolute", flag], {
       cwd: worktree,
       encoding: "utf8",
       env: sanitizedGitEnv()
@@ -7398,18 +7131,18 @@ function discardWorktree(cwd, tree) {
   const ownAdminDir = adminDirOf(tree);
   let sweep;
   if (!symlink) {
-    sweep = spawnSync2("git", ["worktree", "remove", "--force", tree], {
+    sweep = spawnSync("git", ["worktree", "remove", "--force", tree], {
       cwd,
       encoding: "utf8",
       env: sanitizedGitEnv()
     });
     if (sweep.status !== 0) {
-      spawnSync2("git", ["worktree", "unlock", tree], {
+      spawnSync("git", ["worktree", "unlock", tree], {
         cwd,
         encoding: "utf8",
         env: sanitizedGitEnv()
       });
-      sweep = spawnSync2(
+      sweep = spawnSync(
         "git",
         ["worktree", "remove", "--force", "--force", tree],
         { cwd, encoding: "utf8", env: sanitizedGitEnv() }
@@ -7432,7 +7165,7 @@ function dropWorktreeRegistration(cwd, tree, adminDir) {
     }
     return;
   }
-  const common = spawnSync2(
+  const common = spawnSync(
     "git",
     ["rev-parse", "--path-format=absolute", "--git-common-dir"],
     { cwd, encoding: "utf8", env: sanitizedGitEnv() }
@@ -7516,7 +7249,7 @@ function inPipelineFootprint(rec) {
 }
 __name(inPipelineFootprint, "inPipelineFootprint");
 function ignoreSourcesOf(cwd, paths, anchor = []) {
-  const r = spawnSync2(
+  const r = spawnSync(
     "git",
     [
       ...anchor,
@@ -7557,7 +7290,7 @@ function trackedIgnoreSources(cwd, sources, anchor = []) {
     (s) => s.length > 0 && !isAbsolute3(s) && !s.split("/").some((p) => p === "..")
   );
   if (inside.length === 0) return /* @__PURE__ */ new Set();
-  const r = spawnSync2("git", [...anchor, "ls-files", "-z", "--", ...inside], {
+  const r = spawnSync("git", [...anchor, "ls-files", "-z", "--", ...inside], {
     cwd,
     encoding: "utf8",
     maxBuffer: 64 * 1024 * 1024,
@@ -7607,7 +7340,7 @@ function worktreeResidue(cwd, cap = RESIDUE_PATH_CAP, expectedHeadSha) {
     }
   }
   const discover = /* @__PURE__ */ __name((flag) => {
-    const r2 = spawnSync2("git", ["rev-parse", "--path-format=absolute", flag], {
+    const r2 = spawnSync("git", ["rev-parse", "--path-format=absolute", flag], {
       cwd,
       encoding: "utf8",
       env: sanitizedGitEnv()
@@ -7672,7 +7405,7 @@ function worktreeResidue(cwd, cap = RESIDUE_PATH_CAP, expectedHeadSha) {
         `--work-tree=${realpathSync3(toplevel)}`
       ];
       if (expectedHeadSha !== void 0) {
-        const head = spawnSync2("git", [...anchor, "rev-parse", "HEAD"], {
+        const head = spawnSync("git", [...anchor, "rev-parse", "HEAD"], {
           cwd,
           encoding: "utf8",
           env: sanitizedGitEnv()
@@ -7707,7 +7440,7 @@ function worktreeResidue(cwd, cap = RESIDUE_PATH_CAP, expectedHeadSha) {
       unmeasured: "the path is not a git worktree (repository discovery walks up into the enclosing checkout)"
     };
   }
-  const r = spawnSync2(
+  const r = spawnSync(
     "git",
     [
       ...anchor,
@@ -7756,7 +7489,7 @@ function worktreeResidue(cwd, cap = RESIDUE_PATH_CAP, expectedHeadSha) {
       paths.push(records[++i]);
     }
   }
-  const others = spawnSync2(
+  const others = spawnSync(
     "git",
     [...anchor, "-c", "core.fsmonitor=", "ls-files", "--others", "-z"],
     {
@@ -7805,7 +7538,7 @@ function worktreeResidue(cwd, cap = RESIDUE_PATH_CAP, expectedHeadSha) {
       paths.push(rec);
     }
   }
-  const stage = spawnSync2(
+  const stage = spawnSync(
     "git",
     [...anchor, "-c", "core.fsmonitor=", "ls-files", "-s", "-z"],
     {
@@ -7834,7 +7567,7 @@ function worktreeResidue(cwd, cap = RESIDUE_PATH_CAP, expectedHeadSha) {
       unmeasured: "git status cannot see inside the committed submodule path(s) " + blind.join(", ")
     };
   }
-  const bits = spawnSync2(
+  const bits = spawnSync(
     "git",
     [...anchor, "-c", "core.fsmonitor=", "ls-files", "-v", "-z"],
     {
@@ -8227,7 +7960,7 @@ __name(gitOpts, "gitOpts");
 var trustedLaunchDir = null;
 function kernelCwd() {
   try {
-    const r = spawnSync3("/bin/pwd", ["-P"], {
+    const r = spawnSync2("/bin/pwd", ["-P"], {
       encoding: "utf8",
       timeout: 5e3,
       env: sanitizedGitEnv()
@@ -16024,7 +15757,7 @@ __name(repositoryContextOf, "repositoryContextOf");
 
 // packages/cli/src/commands/review/script-lint.ts
 init_esbuild_shims();
-import { spawnSync as spawnSync4 } from "node:child_process";
+import { spawnSync as spawnSync3 } from "node:child_process";
 import { createHash as createHash4 } from "node:crypto";
 import {
   readFileSync as readFileSync10,
@@ -16168,7 +15901,7 @@ function runTool(tool, absPath) {
     };
   }
   const { argv, env, timeoutMs } = buildToolInvocation(tool, absPath);
-  const r = spawnSync4(tool, argv, {
+  const r = spawnSync3(tool, argv, {
     encoding: "utf8",
     maxBuffer: 32 * 1024 * 1024,
     timeout: timeoutMs,
@@ -26736,13 +26469,13 @@ import { writeFileSync as writeFileSync11 } from "node:fs";
 
 // packages/cli/src/commands/review/build-test.ts
 init_esbuild_shims();
-import { spawnSync as spawnSync6 } from "node:child_process";
+import { spawnSync as spawnSync5 } from "node:child_process";
 import { existsSync as existsSync12, readFileSync as readFileSync22, statSync as statSync14, writeFileSync as writeFileSync10 } from "node:fs";
 import { join as join21, resolve as resolve14 } from "node:path";
 
 // packages/cli/src/commands/review/lib/sandboxed-exec.ts
 init_esbuild_shims();
-import { spawnSync as spawnSync5 } from "node:child_process";
+import { spawnSync as spawnSync4 } from "node:child_process";
 import { realpathSync as realpathSync9 } from "node:fs";
 import { basename as basename8, dirname as dirname13, join as join19, resolve as resolve13 } from "node:path";
 import { fileURLToPath } from "node:url";
@@ -26774,7 +26507,7 @@ function firstAnsweringRuntime(answers) {
 }
 __name(firstAnsweringRuntime, "firstAnsweringRuntime");
 function daemonAnswers(runtime) {
-  const r = spawnSync5(runtime, ["info"], {
+  const r = spawnSync4(runtime, ["info"], {
     stdio: "ignore",
     timeout: 3e4,
     env: runtimeClientEnv()
@@ -26788,7 +26521,7 @@ function runtimeIsRootless(runtime, read = cachedInfoDocument) {
 __name(runtimeIsRootless, "runtimeIsRootless");
 function readInfoDocument(runtime) {
   try {
-    const r = spawnSync5(runtime, ["info", "--format", "{{json .}}"], {
+    const r = spawnSync4(runtime, ["info", "--format", "{{json .}}"], {
       encoding: "utf8",
       timeout: 3e4,
       maxBuffer: 8 * 1024 * 1024,
@@ -26902,7 +26635,7 @@ function boxedRunLeftContainer(status) {
   return status === null;
 }
 __name(boxedRunLeftContainer, "boxedRunLeftContainer");
-function killContainer(runtime, name, spawn2 = spawnSync5) {
+function killContainer(runtime, name, spawn2 = spawnSync4) {
   try {
     spawn2(runtime, ["rm", "-f", name], {
       stdio: "ignore",
@@ -27726,7 +27459,7 @@ function run(command, cwd, timeoutMs, kind = "test") {
   const started = Date.now();
   const deadlineMs = Math.max(1, Math.round(timeoutMs));
   const boxed = containerised(command, cwd, kind);
-  const r = boxed ? spawnSync6(boxed.file, boxed.args, {
+  const r = boxed ? spawnSync5(boxed.file, boxed.args, {
     cwd,
     encoding: "utf8",
     timeout: deadlineMs,
@@ -27747,7 +27480,7 @@ function run(command, cwd, timeoutMs, kind = "test") {
     // PATH and nothing from the review, minus the daemon-selecting
     // variables a repository could have shipped in its own `.env`.
     env: runtimeClientEnv()
-  }) : spawnSync6(command, {
+  }) : spawnSync5(command, {
     cwd,
     shell: true,
     encoding: "utf8",
@@ -28260,7 +27993,7 @@ function sha256OfFile(path6) {
   }
 }
 __name(sha256OfFile, "sha256OfFile");
-function tryResume(args, wt, platform2) {
+function tryResume(args, wt, platform) {
   const { pr_number: prNumber, owner_repo: ownerRepo, out } = args;
   let prev = null;
   try {
@@ -28270,7 +28003,7 @@ function tryResume(args, wt, platform2) {
   }
   let liveHeadSha = null;
   try {
-    const oid = platform2.getFetchMeta(Number(prNumber), ownerRepo).headRefOid;
+    const oid = platform.getFetchMeta(Number(prNumber), ownerRepo).headRefOid;
     liveHeadSha = typeof oid === "string" && oid !== "" ? oid : null;
   } catch {
     liveHeadSha = null;
@@ -28414,12 +28147,12 @@ async function runFetchPr(args) {
     } catch {
       remoteUrl = void 0;
     }
-    const platform2 = getPlatformReader({ remoteUrl, host: args.host?.trim() });
-    platform2.ensureAuthenticated();
+    const platform = getPlatformReader({ remoteUrl, host: args.host?.trim() });
+    platform.ensureAuthenticated();
     let resumeRefusal = null;
     let priorFetchedSha = null;
     if (args.resume) {
-      const outcome = tryResume(args, wt, platform2);
+      const outcome = tryResume(args, wt, platform);
       if (outcome.resumed) return;
       try {
         validateDeadlineFlag(process.env, args.deadline);
@@ -28442,7 +28175,7 @@ async function runFetchPr(args) {
       git(
         "fetch",
         remote,
-        `${platform2.fetchHeadRefSpec(Number(prNumber))}:${ref}`
+        `${platform.fetchHeadRefSpec(Number(prNumber))}:${ref}`
       );
     } catch (err) {
       throw new Error(
@@ -28452,7 +28185,7 @@ async function runFetchPr(args) {
     const fetchedSha = git("rev-parse", `refs/heads/${ref}`);
     let meta;
     try {
-      const fetchMeta = platform2.getFetchMeta(Number(prNumber), ownerRepo);
+      const fetchMeta = platform.getFetchMeta(Number(prNumber), ownerRepo);
       meta = {
         headRefName: fetchMeta.headRefName ?? prNumber,
         headRefOid: fetchMeta.headRefOid,
@@ -28476,7 +28209,7 @@ async function runFetchPr(args) {
         `Failed to fetch PR #${prNumber} metadata: ${err.message}`
       );
     }
-    const needsLocalStats = platform2.kind !== "github";
+    const needsLocalStats = platform.kind !== "github";
     const freshUntrusted = untrustedRepositoryFrom(process.cwd());
     if (freshUntrusted !== null) {
       throw new Error(
@@ -28618,7 +28351,7 @@ async function runFetchPr(args) {
           // update also rebased) — rule it without ancestry; the two heads'
           // diff is the update's delta. A force-pushed GitHub history keeps
           // the tests: there they are the detection.
-          { noAncestry: platform2.kind === "aone" }
+          { noAncestry: platform.kind === "aone" }
         );
       } catch (err) {
         if (!(err instanceof GitUnavailable)) throw err;
@@ -31949,7 +31682,7 @@ function renderLedgerSection(ledger, running, author = null, merged = false, per
   ].join("\n");
 }
 __name(renderLedgerSection, "renderLedgerSection");
-function buildMarkdown(prNumber, ownerRepo, meta, inline2, issue, reviews, prevLedger = null, me = "", prevLedgerAuthor = null, prevLedgerMerged = false, host, persistedSha = null, platform2 = "github", prevLedgerAnchorFromRound) {
+function buildMarkdown(prNumber, ownerRepo, meta, inline2, issue, reviews, prevLedger = null, me = "", prevLedgerAuthor = null, prevLedgerMerged = false, host, persistedSha = null, platform = "github", prevLedgerAnchorFromRound) {
   const {
     openRoots,
     openBlockerRoots,
@@ -31959,7 +31692,7 @@ function buildMarkdown(prNumber, ownerRepo, meta, inline2, issue, reviews, prevL
     blockerLeads
   } = classifyInlineThreads(inline2, me);
   const allBlockerRoots = [...repliedBlockerRoots, ...openBlockerRoots];
-  const ctx = { ownerRepo, prNumber, host, platform: platform2 };
+  const ctx = { ownerRepo, prNumber, host, platform };
   const blockerIssue = issue.filter((c) => isIssueBlocker(c.body));
   const settledIssue = issue.filter((c) => !isIssueBlocker(c.body));
   const parts = [];
@@ -32110,9 +31843,9 @@ async function runPrContext(args) {
     );
   }
   rmSync10(out, { force: true });
-  const platform2 = getPlatformReader({ host: args.host });
-  platform2.ensureAuthenticated();
-  const ctx = platform2.getReviewContext(prNum, ownerRepo);
+  const platform = getPlatformReader({ host: args.host });
+  platform.ensureAuthenticated();
+  const ctx = platform.getReviewContext(prNum, ownerRepo);
   const meta = {
     title: ctx.title,
     body: ctx.body,
@@ -32154,7 +31887,7 @@ async function runPrContext(args) {
   if (carriers.length || inline2.length) {
     let lookupError = null;
     try {
-      const login = platform2.getCurrentUser();
+      const login = platform.getCurrentUser();
       identityKnown = login !== "";
       me = login;
     } catch (err) {
@@ -32208,7 +31941,7 @@ async function runPrContext(args) {
   );
   const resolvedHost = resolveGhHost(args.host);
   const flagHost = args.host?.trim();
-  const bakeHost = platform2.kind === "aone" ? flagHost !== void 0 && flagHost !== "" && HOSTNAME_RE.test(flagHost) ? flagHost : void 0 : resolvedHost !== void 0 && HOSTNAME_RE.test(resolvedHost) ? resolvedHost : void 0;
+  const bakeHost = platform.kind === "aone" ? flagHost !== void 0 && flagHost !== "" && HOSTNAME_RE.test(flagHost) ? flagHost : void 0 : resolvedHost !== void 0 && HOSTNAME_RE.test(resolvedHost) ? resolvedHost : void 0;
   const md = buildMarkdown(
     prNumber,
     ownerRepo,
@@ -32222,7 +31955,7 @@ async function runPrContext(args) {
     prevLedgerMerged,
     bakeHost,
     persistedSha,
-    platform2.kind,
+    platform.kind,
     prevRecovered?.anchorFromRound
   );
   mkdirSync18(dirname18(out), { recursive: true });
@@ -36890,7 +36623,7 @@ var emitWorkflowCommand = {
 
 // packages/cli/src/commands/review/base-tree.ts
 init_esbuild_shims();
-import { spawnSync as spawnSync7 } from "node:child_process";
+import { spawnSync as spawnSync6 } from "node:child_process";
 import {
   existsSync as existsSync15,
   mkdirSync as mkdirSync24,
@@ -36901,7 +36634,7 @@ import {
 } from "node:fs";
 import { dirname as dirname25, join as join27, resolve as resolve25 } from "node:path";
 function gitOut(cwd, ...args) {
-  const r = spawnSync7("git", args, {
+  const r = spawnSync6("git", args, {
     cwd,
     encoding: "utf8",
     env: sanitizedGitEnv()
@@ -36914,7 +36647,7 @@ function gitOut(cwd, ...args) {
 }
 __name(gitOut, "gitOut");
 function git2(cwd, ...args) {
-  const r = spawnSync7("git", args, {
+  const r = spawnSync6("git", args, {
     cwd,
     encoding: "utf8",
     env: sanitizedGitEnv()
@@ -37147,7 +36880,7 @@ var baseTreeCommand = {
 
 // packages/cli/src/commands/review/scratch-tree.ts
 init_esbuild_shims();
-import { spawnSync as spawnSync8 } from "node:child_process";
+import { spawnSync as spawnSync7 } from "node:child_process";
 import {
   existsSync as existsSync16,
   lstatSync as lstatSync17,
@@ -37199,7 +36932,7 @@ function discardStandaloneTree(worktree, tree) {
 }
 __name(discardStandaloneTree, "discardStandaloneTree");
 function gitOut2(cwd, ...args) {
-  const r = spawnSync8("git", [...NO_HOOKS, ...args], {
+  const r = spawnSync7("git", [...NO_HOOKS, ...args], {
     cwd,
     encoding: "utf8",
     maxBuffer: 64 * 1024 * 1024,
@@ -37653,7 +37386,7 @@ var testDeltaCommand = {
 
 // packages/cli/src/commands/review/drive.ts
 init_esbuild_shims();
-import { spawnSync as spawnSync9 } from "node:child_process";
+import { spawnSync as spawnSync8 } from "node:child_process";
 import {
   mkdirSync as mkdirSync27,
   writeFileSync as writeFileSync26,
@@ -37790,7 +37523,7 @@ function readCapped(path6, maxBytes) {
 }
 __name(readCapped, "readCapped");
 function spawnExec(cmd, args, input, timeoutMs = 3e4, killSignal) {
-  const r = spawnSync9(cmd, args, {
+  const r = spawnSync8(cmd, args, {
     encoding: "utf8",
     input,
     timeout: timeoutMs,
@@ -39417,7 +39150,7 @@ var extractStepCommand = {
 
 // packages/cli/src/commands/review/revert-hunk.ts
 init_esbuild_shims();
-import { spawnSync as spawnSync10 } from "node:child_process";
+import { spawnSync as spawnSync9 } from "node:child_process";
 import {
   accessSync as accessSync3,
   constants as constants5,
@@ -39576,7 +39309,7 @@ function parseHunkId(id) {
 }
 __name(parseHunkId, "parseHunkId");
 function gitApply(cwd, args) {
-  const r = spawnSync10("git", args, {
+  const r = spawnSync9("git", args, {
     cwd,
     encoding: "utf8",
     env: sanitizedGitEnv(),
@@ -39591,7 +39324,7 @@ function gitApply(cwd, args) {
 }
 __name(gitApply, "gitApply");
 function gitTreeState(tree) {
-  const r = spawnSync10("git", ["rev-parse", "--show-toplevel"], {
+  const r = spawnSync9("git", ["rev-parse", "--show-toplevel"], {
     cwd: tree,
     encoding: "utf8",
     env: sanitizedGitEnv(),
@@ -39661,7 +39394,7 @@ function p1TargetBytes(patch) {
 }
 __name(p1TargetBytes, "p1TargetBytes");
 function indexHasPath(tree, path6) {
-  const r = spawnSync10("git", ["ls-files", "-z"], {
+  const r = spawnSync9("git", ["ls-files", "-z"], {
     cwd: tree,
     encoding: "buffer",
     env: sanitizedGitEnv(),
@@ -39859,7 +39592,7 @@ function runRevertHunk(args) {
     };
   }
   const targetPath = treePath(tree, targetBytes);
-  const attr = spawnSync10("git", ["check-attr", "-z", "--stdin", "eol"], {
+  const attr = spawnSync9("git", ["check-attr", "-z", "--stdin", "eol"], {
     cwd: tree,
     encoding: "buffer",
     env: sanitizedGitEnv(),
@@ -41523,7 +41256,7 @@ var submitCommand = {
 
 // packages/cli/src/commands/review/test-efficacy.ts
 init_esbuild_shims();
-import { spawnSync as spawnSync11 } from "node:child_process";
+import { spawnSync as spawnSync10 } from "node:child_process";
 import {
   mkdirSync as mkdirSync33,
   writeFileSync as writeFileSync31,
@@ -41552,7 +41285,7 @@ function planTestEfficacy(files, workspaceGlobs) {
 __name(planTestEfficacy, "planTestEfficacy");
 function committedSymlinkProbes(tree, probes) {
   if (probes.length === 0) return /* @__PURE__ */ new Set();
-  const r = spawnSync11(
+  const r = spawnSync10(
     "git",
     [
       "-c",
@@ -42083,7 +41816,7 @@ function filterScreenRefusal(hits, rewrite) {
 }
 __name(filterScreenRefusal, "filterScreenRefusal");
 function git4(cwd, ...args) {
-  const r = spawnSync11("git", args, {
+  const r = spawnSync10("git", args, {
     cwd,
     encoding: "utf8",
     env: sanitizedGitEnv()
@@ -42095,7 +41828,7 @@ function git4(cwd, ...args) {
 }
 __name(git4, "git");
 function gitOut3(cwd, ...args) {
-  const r = spawnSync11("git", args, {
+  const r = spawnSync10("git", args, {
     cwd,
     encoding: "utf8",
     env: sanitizedGitEnv()
@@ -42128,7 +41861,7 @@ function findVitestBin(worktree, resolveModule = createRequire(
 }
 __name(findVitestBin, "findVitestBin");
 function gitCapture(cwd, ...args) {
-  const r = spawnSync11("git", args, {
+  const r = spawnSync10("git", args, {
     cwd,
     encoding: "utf8",
     maxBuffer: 64 * 1024 * 1024,
@@ -42142,7 +41875,7 @@ function gitCapture(cwd, ...args) {
 }
 __name(gitCapture, "gitCapture");
 function existsAtRev(cwd, rev, path6) {
-  const r = spawnSync11("git", ["cat-file", "-e", `${rev}:${path6}`], {
+  const r = spawnSync10("git", ["cat-file", "-e", `${rev}:${path6}`], {
     cwd,
     env: sanitizedGitEnv()
   });
@@ -42219,7 +41952,7 @@ function restoreProbeTreeTracked(probeTree) {
   if (!existsSync19(join32(probeTree, ".git"))) {
     return `${probeTree} carries no .git, so there is no commit to put it back to`;
   }
-  const top = spawnSync11(
+  const top = spawnSync10(
     "git",
     [
       "rev-parse",
@@ -42277,7 +42010,7 @@ function restoreProbeTreeTracked(probeTree) {
     // planted config — goes.
     [...CHECKOUT_INERT, "clean", "-ffdx", "-e", "node_modules"]
   ]) {
-    const r = spawnSync11("git", args, {
+    const r = spawnSync10("git", args, {
       cwd: probeTree,
       encoding: "utf8",
       env: sanitizedGitEnv()
@@ -42289,7 +42022,7 @@ function restoreProbeTreeTracked(probeTree) {
       `git ${args[CHECKOUT_INERT.length]} exited ${r.status}`;
     }
   }
-  const bits = spawnSync11(
+  const bits = spawnSync10(
     "git",
     ["-c", "core.fsmonitor=", "ls-files", "-v", "-z"],
     {
@@ -42325,7 +42058,7 @@ function runProbeSuite(probeTree, probes, deadlineAt, now = Date.now, dependency
     findVitestBin(dependencyRoot)
   )} run --reporter=json ${probes.map(shellQuotePath).join(" ")}`;
   const boxed = probeContainer(suite, probeTree);
-  const r = boxed ? spawnSync11(boxed.file, boxed.args, {
+  const r = boxed ? spawnSync10(boxed.file, boxed.args, {
     cwd: probeTree,
     encoding: "utf8",
     timeout,
@@ -42344,7 +42077,7 @@ function runProbeSuite(probeTree, probes, deadlineAt, now = Date.now, dependency
     // variables a repository could have shipped in its own `.env` — the
     // container's own environment is the allowlist in `containerEnv`.
     env: runtimeClientEnv()
-  }) : spawnSync11(
+  }) : spawnSync10(
     process.execPath,
     [findVitestBin(dependencyRoot), "run", "--reporter=json", ...probes],
     {
@@ -42537,7 +42270,7 @@ function runOneHunkProbe(probeTree, hunk, probes, deadlineAt, now = Date.now, de
       )
     };
   }
-  const applied = spawnSync11("git", ["apply", "--reverse", "-"], {
+  const applied = spawnSync10("git", ["apply", "--reverse", "-"], {
     cwd: probeTree,
     input: hunk.patch,
     encoding: "utf8",
@@ -43683,9 +43416,9 @@ function fetchPrBody(ownerRepo, prNumber) {
 }
 __name(fetchPrBody, "fetchPrBody");
 function platformBodyFetcher(host) {
-  const platform2 = getPlatformReader({ host });
-  if (platform2.kind !== "aone") return fetchPrBody;
-  platform2.ensureAuthenticated();
+  const platform = getPlatformReader({ host });
+  if (platform.kind !== "aone") return fetchPrBody;
+  platform.ensureAuthenticated();
   return (ownerRepo, prNumber) => {
     const n = Number(prNumber);
     if (!/^\d+$/.test(prNumber) || !Number.isSafeInteger(n) || n <= 0) {
@@ -43693,7 +43426,7 @@ function platformBodyFetcher(host) {
         `expected a positive MR id, got ${JSON.stringify(prNumber)}`
       );
     }
-    return platform2.getFetchMeta(n, ownerRepo).body ?? "";
+    return platform.getFetchMeta(n, ownerRepo).body ?? "";
   };
 }
 __name(platformBodyFetcher, "platformBodyFetcher");
@@ -45631,14 +45364,14 @@ function runMeta(args) {
       `expected owner/repo, got ${JSON.stringify(args.repo)}`
     );
   }
-  const platform2 = getPlatformReader({ host: args.host });
+  const platform = getPlatformReader({ host: args.host });
   let host;
   let ownerRepo;
   if (args.repo !== void 0) {
     ownerRepo = args.repo;
-    if ((args.host === void 0 || args.host.trim() === "") && platform2.kind !== "github") {
+    if ((args.host === void 0 || args.host.trim() === "") && platform.kind !== "github") {
       throw new TypeError(
-        `--repo on a ${platform2.kind} target needs --host \u2014 there is no default host off GitHub`
+        `--repo on a ${platform.kind} target needs --host \u2014 there is no default host off GitHub`
       );
     }
     host = resolveGhHost(args.host) ?? "github.com";
@@ -45647,13 +45380,13 @@ function runMeta(args) {
         `cannot route at the ${args.host !== void 0 ? "--host flag" : "GH_HOST environment"} ${JSON.stringify(host)} \u2014 not a hostname the review subcommands accept`
       );
     }
-    platform2.ensureAuthenticated();
+    platform.ensureAuthenticated();
   } else {
-    platform2.ensureAuthenticated();
-    const id = platform2.resolveRepo();
+    platform.ensureAuthenticated();
+    const id = platform.resolveRepo();
     ownerRepo = `${id.owner}/${id.repo}`;
     host = id.host;
-    const routed = (platform2.kind === "github" ? resolveGhHost(args.host) : (args.host ?? "").trim() || void 0) ?? id.host;
+    const routed = (platform.kind === "github" ? resolveGhHost(args.host) : (args.host ?? "").trim() || void 0) ?? id.host;
     if (!HOSTNAME_RE.test(routed)) {
       throw new Error(
         `cannot route at the ${args.host !== void 0 ? "--host flag" : "discovered repo-URL host"} ${JSON.stringify(routed)} \u2014 not a hostname the review subcommands accept`
@@ -45661,9 +45394,9 @@ function runMeta(args) {
     }
     setGhHost(routed);
   }
-  const result = { platform: platform2.kind, host, ownerRepo };
+  const result = { platform: platform.kind, host, ownerRepo };
   if (args.prNumber !== void 0) {
-    const meta = platform2.getPrMeta(args.prNumber, ownerRepo);
+    const meta = platform.getPrMeta(args.prNumber, ownerRepo);
     result.number = meta.number;
     result.headSha = meta.headSha;
     result.webUrl = meta.webUrl;
@@ -45760,11 +45493,11 @@ function runIssueContext(args) {
     );
   }
   assertWritableOutPath(args.out);
-  const platform2 = getPlatformReader({ host: args.host });
-  platform2.ensureAuthenticated();
+  const platform = getPlatformReader({ host: args.host });
+  platform.ensureAuthenticated();
   const fetchOne = /* @__PURE__ */ __name((n, ownerRepo) => {
     try {
-      return { number: n, ownerRepo, issue: platform2.getIssue(n, ownerRepo) };
+      return { number: n, ownerRepo, issue: platform.getIssue(n, ownerRepo) };
     } catch (err) {
       return { number: n, ownerRepo, error: err.message };
     }
@@ -45772,7 +45505,7 @@ function runIssueContext(args) {
   let refs;
   let discoveryError;
   try {
-    refs = platform2.getClosingIssues(args.prNumber, args.repo);
+    refs = platform.getClosingIssues(args.prNumber, args.repo);
   } catch (err) {
     refs = [];
     discoveryError = err.message;
@@ -45925,9 +45658,9 @@ function runFetchDiff(args) {
     );
   }
   assertWritableOutPath(args.out);
-  const platform2 = getPlatformReader({ host: args.host });
-  platform2.ensureAuthenticated();
-  const diff = platform2.fetchDiff(args.prNumber, args.repo).replace(/\n+$/, "");
+  const platform = getPlatformReader({ host: args.host });
+  platform.ensureAuthenticated();
+  const diff = platform.fetchDiff(args.prNumber, args.repo).replace(/\n+$/, "");
   const diffPath = resolve40(args.out);
   mkdirSync38(dirname40(diffPath), { recursive: true });
   writeFileSync35(diffPath, diff === "" ? "" : diff + "\n", "latin1");
@@ -46011,14 +45744,14 @@ function runCommentBody(args) {
   if (args.out !== void 0) {
     assertWritableOutPath(args.out);
   }
-  const platform2 = getPlatformReader({ host: args.host });
-  if (platform2.kind === "aone" && args.prNumber === void 0) {
+  const platform = getPlatformReader({ host: args.host });
+  if (platform.kind === "aone" && args.prNumber === void 0) {
     throw new TypeError(
       "aone comment bodies are addressed per-MR \u2014 pass `--pr <mr id>`"
     );
   }
-  platform2.ensureAuthenticated();
-  const body = platform2.getCommentBody(
+  platform.ensureAuthenticated();
+  const body = platform.getCommentBody(
     args.kind,
     args.id,
     args.repo,
@@ -46182,7 +45915,7 @@ async function handleAdd(argv) {
   );
   writeStdoutLine(`  {"msgV":1,"type":"auth","token":"${token}"}`);
   writeStdoutLine(
-    "The target session must have agents.crossSessionMessaging enabled and be restarted after enabling it."
+    "The target session must not have agents.crossSessionMessaging turned off (it is on by default), and must be restarted after changing that setting."
   );
   writeStdoutLine(
     'Messages it sends are delivered without per-message review, unless agents.crossSessionInbound is "hold" or "refuse".'
@@ -47399,10 +47132,10 @@ var updateCommand3 = {
       stdioHelpers,
       { updateEventEmitter }
     ] = await Promise.all([
-      import("./settings-TJNUFBGG.js"),
-      import("./updateCheck-CUKTRHID.js"),
-      import("./installationInfo-DYOI4I5U.js"),
-      import("./standalone-update-O5LYCCMB.js"),
+      import("./settings-P4DHIIUP.js"),
+      import("./updateCheck-PKSSORPO.js"),
+      import("./installationInfo-2IJV5QKC.js"),
+      import("./standalone-update-H5OJ7MM7.js"),
       import("./stdioHelpers-AY6XCDY2.js"),
       import("./updateEventEmitter-5MKC7BLQ.js")
     ]);
@@ -47490,6 +47223,292 @@ var updateCommand3 = {
   }, "handler")
 };
 
+// packages/cli/src/commands/sandbox.ts
+init_esbuild_shims();
+import fs3 from "node:fs";
+var sandboxCommand = {
+  command: "sandbox [cmd...]",
+  describe: "Inspect the sandbox backend, or run a command inside it",
+  builder: /* @__PURE__ */ __name((yargs) => yargs.parserConfiguration({
+    "populate--": true,
+    "parse-positional-numbers": false
+  }).positional("cmd", {
+    describe: "Command to run inside the sandbox",
+    type: "string",
+    array: true
+  }).option("verify", {
+    type: "boolean",
+    default: false,
+    describe: "Run the confinement behavior battery and report pass/fail"
+  }).option("sandbox", DEFAULT_COMMAND_OPTIONS.sandbox).option("sandbox-image", DEFAULT_COMMAND_OPTIONS["sandbox-image"]).example("$0 sandbox", "Report the resolved backend and writable roots").example("$0 sandbox --verify", "Prove the confinement actually holds").example("$0 sandbox -- sh -c 'ls /'", "Run one command confined").strict(), "builder"),
+  handler: /* @__PURE__ */ __name(async (argv) => {
+    const [
+      { loadSettings: loadSettings2 },
+      { loadSandboxConfig: loadSandboxConfig2 },
+      sandboxModule,
+      { writeStdoutLine: writeStdoutLine2, writeStderrLine: writeStderrLine2 },
+      { spawnSync: spawnSync11 },
+      { isBareMode: isBareMode2 },
+      { isSafeModeEnv: isSafeModeEnv2 }
+    ] = await Promise.all([
+      import("./settings-P4DHIIUP.js"),
+      import("./sandboxConfig-CY343YNJ.js"),
+      import("./sandbox-UIXL423Z.js"),
+      import("./stdioHelpers-AY6XCDY2.js"),
+      import("node:child_process"),
+      import("./bareMode-QWKZPLPX.js"),
+      import("./safe-mode-KLGUG54M.js")
+    ]);
+    const {
+      buildBwrapArgs,
+      buildBwrapEnv,
+      runBwrap,
+      resolveBwrapWritableRoots,
+      resolveSandboxNetworkMode
+    } = sandboxModule;
+    const args = argv;
+    const requestedCmd = [...args.cmd ?? [], ...args["--"] ?? []];
+    const writeReportLine = requestedCmd.length ? writeStderrLine2 : writeStdoutLine2;
+    const cwd = process.cwd();
+    const bare = isBareMode2(args.bare);
+    const settings = bare ? {} : loadSettings2(cwd, false).merged;
+    const effectiveSettings = bare || (args.safeMode ?? isSafeModeEnv2()) ? {} : settings;
+    if (process.env["SANDBOX"]) {
+      writeReportLine(`Already inside a sandbox: ${process.env["SANDBOX"]}`);
+      const enforcement = process.env["SANDBOX_ENFORCEMENT"];
+      if (enforcement) {
+        writeReportLine(`Enforcement: ${enforcement}`);
+      }
+      writeReportLine(
+        "Run this from outside the sandbox to inspect a backend."
+      );
+      if (args.verify || requestedCmd.length) {
+        writeStderrLine2("No verification or command was run.");
+        process.exitCode = 1;
+      }
+      return;
+    }
+    let sandboxConfig;
+    try {
+      sandboxConfig = await loadSandboxConfig2(settings, args);
+    } catch (error) {
+      writeStderrLine2(
+        `Sandbox unavailable: ${error instanceof Error ? error.message : String(error)}`
+      );
+      process.exitCode = 1;
+      return;
+    }
+    if (!sandboxConfig) {
+      writeReportLine("Backend: none (running unconfined)");
+      writeReportLine(
+        "Enable one with --sandbox, QWEN_SANDBOX=<command>, or tools.sandbox."
+      );
+      if (args.verify || requestedCmd.length) {
+        writeStderrLine2(
+          "No verification or command was run: no sandbox is configured."
+        );
+        process.exitCode = 1;
+      }
+      return;
+    }
+    writeReportLine(`Backend: ${sandboxConfig.command}`);
+    if (sandboxConfig.image) {
+      writeReportLine(`Image: ${sandboxConfig.image}`);
+    }
+    if (sandboxConfig.command !== "bwrap") {
+      writeReportLine(
+        `Inspection of writable roots is implemented for bwrap; '${sandboxConfig.command}' reports its backend only.`
+      );
+      if (args.verify || requestedCmd.length) {
+        writeStderrLine2(
+          `--verify and running a command are only supported for bwrap, not '${sandboxConfig.command}'.`
+        );
+        process.exitCode = 1;
+      }
+      return;
+    }
+    let networkMode;
+    let rootsResult;
+    try {
+      networkMode = resolveSandboxNetworkMode();
+      rootsResult = resolveBwrapWritableRoots(
+        (effectiveSettings.context?.includeDirectories ?? []).map(resolvePath)
+      );
+    } catch (error) {
+      writeStderrLine2(
+        `Sandbox unavailable: ${error instanceof Error ? error.message : String(error)}`
+      );
+      process.exitCode = 1;
+      return;
+    }
+    const { targetDir, roots, readOnlyOverrides } = rootsResult;
+    writeReportLine("Enforcement: full");
+    writeReportLine(
+      "Boundary: filesystem mounts; host Unix sockets remain reachable"
+    );
+    writeReportLine(
+      "Git metadata: granted repository config and hooks remain writable and can affect later unconfined Git commands."
+    );
+    writeReportLine(`Network: ${networkMode}`);
+    if (networkMode === "proxied") {
+      writeReportLine(
+        "Proxy settings are advisory; direct connections remain possible."
+      );
+    }
+    writeReportLine(`Target dir: ${targetDir}`);
+    writeReportLine(
+      "Writable roots (settings-derived; a session started with --include-directories also binds those):"
+    );
+    for (const root of roots) {
+      writeReportLine(`  ${root}`);
+    }
+    if (readOnlyOverrides.length > 0) {
+      writeReportLine("Read-only inside a writable root:");
+      for (const override of readOnlyOverrides) {
+        writeReportLine(`  ${override}`);
+      }
+    }
+    const runConfined = /* @__PURE__ */ __name((cmdArgv) => {
+      const result = spawnSync11(
+        "bwrap",
+        [
+          "--new-session",
+          ...buildBwrapArgs({
+            writableRoots: roots,
+            targetDir,
+            networkMode,
+            cliArgs: cmdArgv,
+            readOnlyOverrides
+          })
+        ],
+        // The battery matches on message text rendered by the confined
+        // libc, and glibc localizes strerror() through its own catalogs —
+        // under a non-English LC_ALL/LANG the EROFS message comes back
+        // localized and a holding confinement would report FAIL. The C
+        // locale pins the dialect for every message-based case at once.
+        // Only the probes get this; requested commands keep the user's locale.
+        {
+          encoding: "utf8",
+          env: { ...buildBwrapEnv(networkMode), LC_ALL: "C" }
+        }
+      );
+      const stdout = result.stdout ?? "";
+      return {
+        status: result.status,
+        stdout,
+        output: `${stdout}${result.stderr ?? ""}`
+      };
+    }, "runConfined");
+    if (requestedCmd.length) {
+      try {
+        process.exitCode = await runBwrap({
+          writableRoots: roots,
+          targetDir,
+          networkMode,
+          cliArgs: requestedCmd,
+          readOnlyOverrides
+        });
+      } catch (error) {
+        writeStderrLine2(
+          `Sandbox command failed: ${error instanceof Error ? error.message : String(error)}`
+        );
+        process.exitCode = 1;
+      }
+      return;
+    }
+    if (!args.verify) {
+      return;
+    }
+    let hostPidNamespace;
+    try {
+      hostPidNamespace = fs3.readlinkSync("/proc/self/ns/pid");
+    } catch (error) {
+      writeStderrLine2(
+        `Cannot verify sandbox PID namespace: ${error instanceof Error ? error.message : String(error)}`
+      );
+      process.exitCode = 1;
+      return;
+    }
+    writeStdoutLine2("");
+    const denied = /Read-only file system/;
+    const cases = [
+      {
+        name: "write inside the workspace succeeds",
+        // `mktemp`, not a fixed name: `touch X && rm X` on a workspace that
+        // already contains an `X` succeeds at the touch and then deletes the
+        // user's file. mktemp only ever creates a new one, and still fails
+        // when the directory is not writable, which is what this asserts.
+        argv: [
+          "sh",
+          "-c",
+          'f=$(mktemp ./.qwen-sandbox-probe.XXXXXX) && rm -f "$f"'
+        ],
+        expectation: "the workspace must stay writable, or no work is possible",
+        check: /* @__PURE__ */ __name(({ status }) => status === 0, "check")
+      },
+      {
+        name: "write outside the roots is denied",
+        argv: ["sh", "-c", "touch /usr/local/bin/qwen-sandbox-probe 2>&1"],
+        expectation: "a read-only host root is the confinement; without this there is none",
+        check: /* @__PURE__ */ __name(({ output }) => denied.test(output), "check")
+      },
+      {
+        name: "payload shares the host PID namespace",
+        argv: ["readlink", "/proc/self/ns/pid"],
+        expectation: "no PID namespace, so cross-process ownership records stay meaningful",
+        check: /* @__PURE__ */ __name(({ status, stdout }) => status === 0 && stdout.trim() === hostPidNamespace, "check")
+      },
+      {
+        name: networkMode === "closed" ? "network namespace is private in closed mode" : `host network is shared in ${networkMode} mode`,
+        // Reading `/proc/net/dev`, and neither of the two more obvious probes,
+        // both of which were measured to assert nothing here:
+        //   - `getent hosts localhost` answers from /etc/hosts without touching
+        //     the network stack, so it succeeds even under --unshare-net;
+        //   - `/sys/class/net` still lists the host interfaces, because
+        //     `--ro-bind / /` carries the host sysfs in and a bind mount does
+        //     not re-associate it with the new namespace.
+        // `/proc/net` is a per-process symlink to `self/net`, so it does follow
+        // the caller's network namespace. Needs no iproute2 and no connectivity.
+        argv: ["sh", "-c", "tail -n +3 /proc/net/dev | cut -d: -f1"],
+        expectation: networkMode === "closed" ? "closed mode unshares the network namespace, leaving only loopback" : "open and proxied modes keep the host interfaces visible",
+        check: /* @__PURE__ */ __name(({ status, stdout }) => {
+          if (status !== 0) {
+            return false;
+          }
+          const names = stdout.trim().split(/\s+/).filter(Boolean);
+          if (!names.includes("lo")) {
+            return false;
+          }
+          const nonLoopback = names.filter((name) => name !== "lo");
+          return networkMode === "closed" ? nonLoopback.length === 0 : nonLoopback.length > 0;
+        }, "check")
+      }
+    ];
+    let failures = 0;
+    for (const testCase of cases) {
+      const result = runConfined(testCase.argv);
+      if (testCase.check(result)) {
+        writeStdoutLine2(`  PASS  ${testCase.name}`);
+      } else {
+        failures += 1;
+        writeStdoutLine2(`  FAIL  ${testCase.name}`);
+        writeStdoutLine2(`        expected: ${testCase.expectation}`);
+        const detail = result.output.trim();
+        writeStdoutLine2(
+          `        got: exit ${result.status}${detail ? ` \u2014 ${detail}` : ""}`
+        );
+      }
+    }
+    writeStdoutLine2("");
+    writeStdoutLine2(
+      failures === 0 ? `Confinement verified (${cases.length} checks).` : `${failures} of ${cases.length} checks failed.`
+    );
+    if (failures > 0) {
+      process.exitCode = 1;
+    }
+  }, "handler")
+};
+
 // packages/cli/src/config/config.ts
 var debugLogger4 = createDebugLogger("CONFIG");
 function resolveLocaleForExtensions(settings) {
@@ -47614,7 +47633,7 @@ function resolveJsonSchemaArg(raw) {
     payloadSource = "file";
     payloadSourcePath = resolvedPath;
     try {
-      const stat = fs3.statSync(resolvedPath);
+      const stat = fs4.statSync(resolvedPath);
       if (!stat.isFile()) {
         throw new FatalConfigError(
           `--json-schema "@${resolvedPath}" must be a regular file.`
@@ -47625,7 +47644,7 @@ function resolveJsonSchemaArg(raw) {
           `--json-schema file "${resolvedPath}" is ${stat.size} bytes (>${MAX_JSON_SCHEMA_FILE_BYTES}). Refusing to read; this is almost certainly a wrong-path argument. Schemas should be small enough to fit in a few KiB; decompose with \`$ref\` if you need a large family of types.`
         );
       }
-      payload = fs3.readFileSync(resolvedPath, "utf8");
+      payload = fs4.readFileSync(resolvedPath, "utf8");
     } catch (err) {
       if (err instanceof FatalConfigError) throw err;
       throw new FatalConfigError(
@@ -47841,7 +47860,7 @@ async function parseArguments() {
       }
       return true;
     })
-  ).command(mcpCommand).command(extensionsCommand).command(authCommand).command(hooksCommand).command(channelCommand).command(boardCommand).command(reviewCommand).command(serveCommand).command(sessionsCommand).command(updateCommand3);
+  ).command(mcpCommand).command(extensionsCommand).command(authCommand).command(hooksCommand).command(channelCommand).command(boardCommand).command(reviewCommand).command(serveCommand).command(sessionsCommand).command(updateCommand3).command(sandboxCommand);
   for (const [option, message] of Object.entries(
     TOP_LEVEL_DEPRECATED_OPTIONS
   )) {
@@ -47850,7 +47869,7 @@ async function parseArguments() {
   yargsInstance.version(await getCliVersion()).alias("v", "version").help().alias("h", "help").strict().demandCommand(0, 0);
   yargsInstance.wrap(yargsInstance.terminalWidth());
   const result = await yargsInstance.parse();
-  if (result._.length > 0 && (result._[0] === "mcp" || result._[0] === "extensions" || result._[0] === "auth" || result._[0] === "hooks" || result._[0] === "channel" || result._[0] === "review" || result._[0] === "sessions" || result._[0] === "board" || result._[0] === "update")) {
+  if (result._.length > 0 && (result._[0] === "mcp" || result._[0] === "extensions" || result._[0] === "auth" || result._[0] === "hooks" || result._[0] === "channel" || result._[0] === "review" || result._[0] === "sessions" || result._[0] === "board" || result._[0] === "update" || result._[0] === "sandbox")) {
     process.exit(process.exitCode ?? 0);
   }
   const queryArg = result.query;
@@ -47879,8 +47898,8 @@ async function parseArguments() {
 }
 __name(parseArguments, "parseArguments");
 async function loadHierarchicalMemory(currentWorkingDirectory, includeDirectoriesToReadMemory = [], fileService, extensionContextFilePaths = [], folderTrust, memoryImportFormat = "tree", contextRuleExcludes = [], options = {}) {
-  const realCwd = fs3.realpathSync(path5.resolve(currentWorkingDirectory));
-  const realHome = fs3.realpathSync(path5.resolve(homedir2()));
+  const realCwd = fs4.realpathSync(path5.resolve(currentWorkingDirectory));
+  const realHome = fs4.realpathSync(path5.resolve(homedir2()));
   const isHomeDirectory = realCwd === realHome;
   const effectiveCwd = isHomeDirectory ? "" : currentWorkingDirectory;
   return loadServerHierarchicalMemory(
@@ -48051,9 +48070,9 @@ function parseMcpConfig(mcpConfigArg) {
   }
   try {
     let parsed;
-    if (fs3.existsSync(mcpConfigArg)) {
+    if (fs4.existsSync(mcpConfigArg)) {
       debugLogger4.debug(`Reading MCP config from file: ${mcpConfigArg}`);
-      const content = fs3.readFileSync(mcpConfigArg, "utf-8");
+      const content = fs4.readFileSync(mcpConfigArg, "utf-8");
       parsed = JSON.parse((0, import_strip_json_comments.default)(content));
     } else {
       debugLogger4.debug("Parsing MCP config as JSON string");
@@ -48210,9 +48229,9 @@ async function loadCliConfig(settings, argv, cwd = process.cwd(), overrideExtens
   );
   let outputLanguageFilePath;
   if (!bareMode && !safeMode) {
-    if (!provisionalWorkspace && fs3.existsSync(projectOutputLanguagePath)) {
+    if (!provisionalWorkspace && fs4.existsSync(projectOutputLanguagePath)) {
       outputLanguageFilePath = projectOutputLanguagePath;
-    } else if (fs3.existsSync(globalOutputLanguagePath)) {
+    } else if (fs4.existsSync(globalOutputLanguagePath)) {
       outputLanguageFilePath = globalOutputLanguagePath;
     }
   }
@@ -48553,7 +48572,7 @@ async function loadCliConfig(settings, argv, cwd = process.cwd(), overrideExtens
     enabledSkillNamesProvider: bareMode || safeMode ? void 0 : enabledSkillNamesProvider,
     skillSettingsListsProvider: bareMode || safeMode ? void 0 : buildSkillSettingsListsProvider(settings),
     terminalImageRenderSupportProvider: interactive ? async () => {
-      const { getTerminalImageRenderSupport } = await import("./terminal-image-renderer-4FK76L22.js");
+      const { getTerminalImageRenderSupport } = await import("./terminal-image-renderer-UDPJPGPQ.js");
       return getTerminalImageRenderSupport();
     } : void 0,
     disabledSkillLevels: bareMode || safeMode || !Array.isArray(settings.skills?.disabledLevels) ? void 0 : settings.skills.disabledLevels.filter(isSkillLevel),
@@ -48685,6 +48704,7 @@ async function loadCliConfig(settings, argv, cwd = process.cwd(), overrideExtens
     useRipgrep: settings.tools?.useRipgrep,
     useBuiltinRipgrep: settings.tools?.useBuiltinRipgrep,
     workflowsEnabled: settings.tools?.workflowsEnabled,
+    workflowSizeGuideline: settings.tools?.workflowSizeGuideline,
     modelProposedGoals: normalizeModelProposedGoals(
       settings.goals?.modelProposed
     ),
@@ -48726,9 +48746,11 @@ async function loadCliConfig(settings, argv, cwd = process.cwd(), overrideExtens
       settings.modelFallbacks
     ),
     // Use separated hooks if provided, otherwise fall back to merged hooks
-    userHooks: bareMode || safeMode ? void 0 : hooksConfig?.userHooks ?? settings.hooks,
-    projectHooks: bareMode || safeMode ? void 0 : hooksConfig?.projectHooks,
-    hooks: bareMode || safeMode ? void 0 : settings.hooks,
+    ...resolveHookSettingsForConfig(
+      settings.hooks,
+      hooksConfig,
+      bareMode || safeMode
+    ),
     disableAllHooks: bareMode || safeMode ? true : settings.disableAllHooks ?? false,
     stopHookBlockingCap: bareMode || safeMode ? void 0 : settings.stopHookBlockingCap,
     channel: argv.channel,
@@ -48769,9 +48791,9 @@ async function loadCliConfig(settings, argv, cwd = process.cwd(), overrideExtens
   };
   const config2 = new Config(configParams);
   config2.setExternalAgentExecutor({
-    create: /* @__PURE__ */ __name((params) => params.spec.kind === "codex" ? import("./codex-subagent-executor-6M7TD3MF.js").then(
+    create: /* @__PURE__ */ __name((params) => params.spec.kind === "codex" ? import("./codex-subagent-executor-AEAIQZDC.js").then(
       (module) => module.codexExternalAgentExecutor.create(params)
-    ) : import("./acp-subagent-executor-KIZBB2CL.js").then(
+    ) : import("./acp-subagent-executor-TND6W2O5.js").then(
       (module) => module.acpExternalAgentExecutor.create(params)
     ), "create")
   });
@@ -48969,7 +48991,7 @@ __name(isPromiseLike, "isPromiseLike");
 export {
   validateAuthMethod,
   normalizeDisabledToolList,
-  loadSandboxConfig,
+  resolveHookSettingsForConfig,
   appEvents,
   skillArgsPath,
   writeSkillArgs,