deepseeker-code 1.0.1 → 1.0.3

package/dist/cli.mjs

@@ -67,6 +67,13 @@ var init_strings = __esm({
 ${yellow}   \u5DE5\u5177\u5C06\u4EE5\u8BE5\u76EE\u5F55\u4E3A\u9879\u76EE\u6839\u8BFB\u5199\u6587\u4EF6\uFF0C\u5EFA\u8BAE\u5148 cd \u5230\u5177\u4F53\u9879\u76EE\u76EE\u5F55\u518D\u8FD0\u884C\u3002${reset}
 ${dim}   \u9879\u76EE\u952E\uFF1A${projectKey}${reset}
 
+`;
+        },
+        updateAvailable: (latest, current) => {
+          const cyan = "\x1B[36m", dim = "\x1B[2m", reset = "\x1B[0m";
+          return `${cyan}\u21BB \u68C0\u6D4B\u5230\u65B0\u7248\u672C ${latest}${reset} ${dim}\uFF08\u5F53\u524D ${current}\uFF09${reset}
+${dim}  \u8FD0\u884C npm i -g deepseeker-code@latest \u66F4\u65B0${reset}
+
 `;
         },
         cmdHelp: "\u67E5\u770B\u5E2E\u52A9\u4E0E\u5FEB\u6377\u952E",
@@ -188,6 +195,13 @@ Set it as an env var and retry, or start serve for the Web UI.`,
 ${yellow}   Tools will read/write files with this as project root\u2014cd into the actual project first.${reset}
 ${dim}   Project key: ${projectKey}${reset}
 
+`;
+        },
+        updateAvailable: (latest, current) => {
+          const cyan = "\x1B[36m", dim = "\x1B[2m", reset = "\x1B[0m";
+          return `${cyan}\u21BB New version ${latest} available${reset} ${dim}(current ${current})${reset}
+${dim}  Run npm i -g deepseeker-code@latest to update${reset}
+
 `;
         },
         cmdHelp: "Show help & shortcuts",
@@ -1947,7 +1961,7 @@ import fsSync from "fs";
 import path9 from "path";
 import ignore from "ignore";
 import { AsyncLocalStorage } from "node:async_hooks";
-var WORKSPACE_ROOT, workspaceAls, getActiveWorkspaceRoot, runWithWorkspaceRoot, runWithSessionContext, BUILTIN_IGNORE_RULES, ignoreCache, ignoreBuilding, allowedRootsReal, getAllowedWorkspaceRoots, getContainingRoot, allowedBoundaryRoots, resolveSafePath, assertWithinWorkspace, PROTECTED_WRITE_DIRS, COMMAND_ENV_DENYLIST, SENSITIVE_ENV_PATTERN, scrubCommandEnv, isProtectedWrite, scanIgnoreFilesRecursive, buildIgnoreEngine, getIgnoreForBase, initializeWorkspaceIgnore, checkIsPathIgnored, requestApproval;
+var WORKSPACE_ROOT, workspaceAls, getActiveWorkspaceRoot, runWithWorkspaceRoot, runWithSessionContext, BUILTIN_IGNORE_RULES, ignoreCache, ignoreBuilding, allowedRootsReal, getAllowedWorkspaceRoots, getContainingRoot, allowedBoundaryRoots, resolveSafePath, resolveReadablePath, assertWithinWorkspace, PROTECTED_WRITE_DIRS, COMMAND_ENV_DENYLIST, SENSITIVE_ENV_PATTERN, scrubCommandEnv, isProtectedWrite, scanIgnoreFilesRecursive, buildIgnoreEngine, getIgnoreForBase, initializeWorkspaceIgnore, checkIsPathIgnored, requestApproval;
 var init_guard = __esm({
   "../core/src/tool/guard.ts"() {
     "use strict";
@@ -2049,6 +2063,19 @@ var init_guard = __esm({
       }
       return truePhysicalPath;
     };
+    resolveReadablePath = (rel) => {
+      const root = getActiveWorkspaceRoot();
+      const absPath = path9.resolve(root, rel);
+      if (!fsSync.existsSync(absPath)) {
+        const rootName = path9.basename(root);
+        const firstSeg = rel.split(/[\\/]/)[0];
+        if (rootName && firstSeg === rootName) {
+          const alt = path9.resolve(root, rel.slice(firstSeg.length + 1));
+          if (fsSync.existsSync(alt)) return alt;
+        }
+      }
+      return absPath;
+    };
     assertWithinWorkspace = (absPath, base) => {
       const root = base ?? getActiveWorkspaceRoot();
       let truePhysicalPath = absPath;
@@ -4544,13 +4571,17 @@ var init_fs = __esm({
     init_type();
     init_tsHost();
     init_guard();
-    isSensitiveReadTarget = (rel) => {
-      const p = rel.toLowerCase().replace(/\\/g, "/");
+    isSensitiveReadTarget = (resolvedPath) => {
+      const p = resolvedPath.toLowerCase().replace(/\\/g, "/");
       return [
         /\.env(\.|$|\/)/,
         // .env / .env.local / .env.production
         /\.npmrc$/,
         // npm 凭证（_authToken）
+        /\.netrc$/,
+        // ~/.netrc 明文 API token（跨界读暴露面增大，补拦）
+        /(^|\/)\.htpasswd$/i,
+        // HTTP 基本认证凭证文件
         /\.pem$/,
         /\.key$/,
         /\.pfx$/,
@@ -4560,7 +4591,9 @@ var init_fs = __esm({
         /(^|\/)id_(rsa|ecdsa|ed25519|dsa)(\.pub)?$/,
         // SSH 私钥（含子目录路径，如 deploy_keys/id_rsa）
         /(^|\/)secrets?\.(json|ya?ml|toml|ini|conf)$/i,
-        /(^|\/)credentials?\.(json|ya?ml|toml|ini|conf)$/i
+        /(^|\/)credentials?\.(json|ya?ml|toml|ini|conf)$/i,
+        /(^|\/)credentials?$/i
+        // 无扩展名凭证文件（AWS ~/.aws/credentials 等）
       ].some((re) => re.test(p));
     };
     stripReadFileLineNumbers = (s) => {
@@ -4607,8 +4640,8 @@ var init_fs = __esm({
       await walk(wsRoot);
       return removed;
     };
-    assertReadable = async (relForCheck, displayPath, base) => {
-      if (isSensitiveReadTarget(relForCheck)) {
+    assertReadable = async (absPath, displayPath) => {
+      if (isSensitiveReadTarget(absPath)) {
         return `\u{1F512} [\u5B89\u5168\u62E6\u622A]\uFF1A[${displayPath}] \u5C5E\u4E8E\u654F\u611F\u51ED\u8BC1\u6587\u4EF6\uFF08.env / \u79C1\u94A5 / \u5BC6\u94A5\u5E93 / \u51ED\u8BC1\uFF09\uFF0C\u5DF2\u62D2\u7EDD\u8BFB\u53D6\u4EE5\u9632\u673A\u5BC6\u5916\u6CC4\u3002\u5982\u786E\u9700\u67E5\u770B\u8BF7\u4EBA\u5DE5\u5904\u7406\u3002`;
       }
       return null;
@@ -4638,9 +4671,19 @@ var init_fs = __esm({
       }
       if (hits.length === 0) return { ok: false, reason: "none", count: 0 };
       if (!replaceAll && hits.length > 1) return { ok: false, reason: "conflict", count: hits.length };
-      const newLines = newBlock.split("\n");
       const out = [...contentLines];
-      for (let k = hits.length - 1; k >= 0; k--) out.splice(hits[k], oldLines.length, ...newLines);
+      for (let k = hits.length - 1; k >= 0; k--) {
+        const start = hits[k];
+        let baseIndent = "";
+        for (let j = start; j < start + oldLines.length; j++) {
+          if (contentLines[j].trim() !== "") {
+            baseIndent = contentLines[j].match(/^[ \t]*/)?.[0] ?? "";
+            break;
+          }
+        }
+        const aligned = baseIndent ? reindentToBase(newBlock, baseIndent) : newBlock;
+        out.splice(start, oldLines.length, ...aligned.split("\n"));
+      }
       return { ok: true, content: out.join("\n"), count: hits.length };
     };
     diagnoseOldStr = (content, oldBlock) => {
@@ -4682,7 +4725,7 @@ var init_fs = __esm({
           parameters: {
             type: "object",
             properties: {
-              path: { type: "string", description: "\u6587\u4EF6\u76F8\u5BF9\u8DEF\u5F84" },
+              path: { type: "string", description: "\u6587\u4EF6\u8DEF\u5F84\uFF1A\u76F8\u5BF9\u6D3B\u52A8\u5DE5\u4F5C\u533A\u6839\uFF08\u652F\u6301 ../ \u8DE8\u5144\u5F1F\u9879\u76EE\uFF09\u3001\u6216\u7EDD\u5BF9\u8DEF\u5F84" },
               start_line: { type: "number", description: "\u8D77\u59CB\u884C\u53F7\uFF08\u4ECE 1 \u5F00\u59CB\uFF0C\u9ED8\u8BA4 1\uFF09" },
               end_line: { type: "number", description: "\u7ED3\u675F\u884C\u53F7\uFF08\u9ED8\u8BA4\u6700\u591A\u5F80\u540E\u8BFB 2000 \u884C\uFF09" }
             },
@@ -4697,14 +4740,12 @@ var init_fs = __esm({
           privacyMaskingRules: maskSecretsInContent,
           async execute(args) {
             try {
-              const absPath = resolveSafePath(args.path);
+              const absPath = resolveReadablePath(args.path);
               const lowerExt = absPath.toLowerCase();
               if (lowerExt.endsWith(".xlsx")) return `\u26A0\uFE0F [${args.path}] \u662F Excel \u4E8C\u8FDB\u5236\u6587\u4EF6\uFF0Cread_file \u8BFB\u4E0D\u4E86\uFF08UTF-8 \u89E3\u7801\u6EE1\u5C4F\u4E71\u7801\uFF09\u3002\u8BF7\u6539\u7528 read_xlsx\uFF08\u652F\u6301 sheet \u9009\u62E9 / \u7FFB\u9875 / Markdown \u8868\u683C\u8F93\u51FA\uFF09\u3002`;
               if (lowerExt.endsWith(".docx")) return `\u26A0\uFE0F [${args.path}] \u662F Word \u4E8C\u8FDB\u5236\u6587\u6863\uFF0Cread_file \u8BFB\u4E0D\u4E86\u3002\u8BF7\u6539\u7528 read_docx \u63D0\u53D6\u6B63\u6587\u6587\u672C\u3002`;
               if (lowerExt.endsWith(".pdf")) return `\u26A0\uFE0F [${args.path}] \u662F PDF \u4E8C\u8FDB\u5236\u6587\u6863\uFF0Cread_file \u8BFB\u4E0D\u4E86\u3002\u8BF7\u6539\u7528 read_pdf \u63D0\u53D6\u6587\u5B57\u5C42\u3002`;
-              const checkBase = getContainingRoot(absPath);
-              const relForCheck = path15.relative(checkBase, absPath).replace(/\\/g, "/");
-              const readBlock = await assertReadable(relForCheck, args.path, checkBase);
+              const readBlock = await assertReadable(absPath, args.path);
               if (readBlock) return readBlock;
               const start = args.start_line ? Math.max(1, args.start_line) : 1;
               const maxLinesToRead = 2e3;
@@ -5052,10 +5093,8 @@ ${args.new_str}`,
           privacyMaskingRules: maskSecretsInContent,
           async execute(args) {
             try {
-              const absPath = resolveSafePath(args.path);
-              const checkBase = getContainingRoot(absPath);
-              const relForCheck = path15.relative(checkBase, absPath).replace(/\\/g, "/");
-              const readBlock = await assertReadable(relForCheck, args.path, checkBase);
+              const absPath = resolveReadablePath(args.path);
+              const readBlock = await assertReadable(absPath, args.path);
               if (readBlock) return readBlock;
               const statForSize = await fs12.stat(absPath);
               if (statForSize.size > 1024 * 1024) {
@@ -5219,7 +5258,7 @@ var init_search = __esm({
                   });
                   if (hit) return hit;
                 }
-                return resolveSafePath(args.path);
+                return resolveReadablePath(args.path);
               };
               const searchRoot = resolveSearchRoot().replace(/\\/g, "/");
               const rgArgs = [
@@ -5589,7 +5628,7 @@ var init_glob = __esm({
               const cleanPattern = (args.pattern || "").trim();
               if (!cleanPattern) return "\u274C [Glob\u5931\u8D25]\uFF1A\u4F20\u5165\u7684\u68C0\u7D22 pattern \u4E0D\u80FD\u4E3A\u7A7A\u3002";
               const activeRoot = ctx?.cwd ?? getActiveWorkspaceRoot();
-              const root = args.path ? resolveSafePath(args.path) : activeRoot;
+              const root = args.path ? resolveReadablePath(args.path) : activeRoot;
               const re = globToRegex2(cleanPattern);
               await initializeWorkspaceIgnore();
               const hits = [];
@@ -6506,9 +6545,7 @@ var init_typescript = __esm({
       return abs.replace(/\\/g, "/").split("/").slice(-3).join("/");
     };
     precheck = async (displayPath, absPath) => {
-      const checkBase = getContainingRoot(absPath);
-      const relForCheck = path19.relative(checkBase, absPath).replace(/\\/g, "/");
-      const readBlock = await assertReadable(relForCheck, displayPath, checkBase);
+      const readBlock = await assertReadable(absPath, displayPath);
       if (readBlock) return readBlock;
       const stat = await fs16.stat(absPath);
       if (stat.size > MAX_FILE_BYTES) {
@@ -6540,7 +6577,7 @@ var init_typescript = __esm({
             try {
               const TS = await getTs();
               if (!TS) return `\u26A0\uFE0F [\u7C7B\u578B\u8BCA\u65AD\u4E0D\u53EF\u7528]\uFF1Atypescript \u6A21\u5757\u672A\u52A0\u8F7D\uFF08VSCode \u6269\u5C55\u5185\u53EF\u7528\uFF1BCLI \u73AF\u5883\u672A\u5FC5\u5B89\u88C5 typescript\uFF09\u3002\u53EF\u6539\u7528 run_command \u8DD1 \`tsc --noEmit\`\u3002`;
-              const absPath = realpathNative(resolveSafePath(args.path));
+              const absPath = realpathNative(resolveReadablePath(args.path));
               const block = await precheck(args.path, absPath);
               if (block) return block;
               const { ls } = await getLanguageService(TS, absPath, { checkJs: args.check_js });
@@ -6612,7 +6649,7 @@ ${body}${tail}`;
             try {
               const TS = await getTs();
               if (!TS) return `\u26A0\uFE0F [\u8DF3\u8F6C\u5B9A\u4E49\u4E0D\u53EF\u7528]\uFF1Atypescript \u6A21\u5757\u672A\u52A0\u8F7D\uFF08VSCode \u6269\u5C55\u5185\u53EF\u7528\uFF1BCLI \u73AF\u5883\u672A\u5FC5\u5B89\u88C5 typescript\uFF09\u3002`;
-              const absPath = realpathNative(resolveSafePath(displayPath));
+              const absPath = realpathNative(resolveReadablePath(displayPath));
               const block = await precheck(displayPath, absPath);
               if (block) return block;
               const { ls } = await getLanguageService(TS, absPath);
@@ -8186,7 +8223,6 @@ ${lines.join("\n")}`;
 });
 
 // ../core/src/tool/registry/spreadsheet.ts
-import path28 from "path";
 var getExcelJs, colLetter, cellToText, esc, spreadsheetTools;
 var init_spreadsheet = __esm({
   "../core/src/tool/registry/spreadsheet.ts"() {
@@ -8244,10 +8280,8 @@ var init_spreadsheet = __esm({
           privacyMaskingRules: maskSecretsInContent,
           async execute(args) {
             try {
-              const absPath = resolveSafePath(args.path);
-              const checkBase = getContainingRoot(absPath);
-              const relForCheck = path28.relative(checkBase, absPath).replace(/\\/g, "/");
-              const readBlock = await assertReadable(relForCheck, args.path, checkBase);
+              const absPath = resolveReadablePath(args.path);
+              const readBlock = await assertReadable(absPath, args.path);
               if (readBlock) return readBlock;
               if (!absPath.toLowerCase().endsWith(".xlsx")) {
                 return `\u274C [\u683C\u5F0F\u4E0D\u652F\u6301]\uFF1A[${args.path}] \u4E0D\u662F .xlsx\u3002read_xlsx \u4EC5\u89E3\u6790 Excel \u5DE5\u4F5C\u7C3F\uFF08.xls \u8BF7\u5148\u53E6\u5B58\u4E3A .xlsx\uFF09\uFF1B\u5176\u5B83\u6587\u4EF6\u8BF7\u7528 read_file\u3002`;
@@ -8304,7 +8338,6 @@ var init_spreadsheet = __esm({
 });
 
 // ../core/src/tool/registry/document.ts
-import path29 from "path";
 import fs26 from "fs/promises";
 var getMammoth, getUnpdf, documentTools;
 var init_document = __esm({
@@ -8340,10 +8373,8 @@ var init_document = __esm({
           privacyMaskingRules: maskSecretsInContent,
           async execute(args) {
             try {
-              const absPath = resolveSafePath(args.path);
-              const checkBase = getContainingRoot(absPath);
-              const relForCheck = path29.relative(checkBase, absPath).replace(/\\/g, "/");
-              const readBlock = await assertReadable(relForCheck, args.path, checkBase);
+              const absPath = resolveReadablePath(args.path);
+              const readBlock = await assertReadable(absPath, args.path);
               if (readBlock) return readBlock;
               if (!absPath.toLowerCase().endsWith(".docx")) {
                 return `\u274C [\u683C\u5F0F\u4E0D\u652F\u6301]\uFF1A[${args.path}] \u4E0D\u662F .docx\u3002read_docx \u4EC5\u89E3\u6790 Word \u6587\u6863\uFF08.doc \u8001\u683C\u5F0F\u8BF7\u5148\u53E6\u5B58\u4E3A .docx\uFF09\uFF1B\u5176\u5B83\u6587\u4EF6\u7528 read_file\u3002`;
@@ -8389,10 +8420,8 @@ var init_document = __esm({
           privacyMaskingRules: maskSecretsInContent,
           async execute(args) {
             try {
-              const absPath = resolveSafePath(args.path);
-              const checkBase = getContainingRoot(absPath);
-              const relForCheck = path29.relative(checkBase, absPath).replace(/\\/g, "/");
-              const readBlock = await assertReadable(relForCheck, args.path, checkBase);
+              const absPath = resolveReadablePath(args.path);
+              const readBlock = await assertReadable(absPath, args.path);
               if (readBlock) return readBlock;
               if (!absPath.toLowerCase().endsWith(".pdf")) {
                 return `\u274C [\u683C\u5F0F\u4E0D\u652F\u6301]\uFF1A[${args.path}] \u4E0D\u662F .pdf\u3002read_pdf \u4EC5\u89E3\u6790 PDF \u6587\u6863\uFF1B\u5176\u5B83\u6587\u4EF6\u7528 read_file\u3002`;
@@ -8604,7 +8633,7 @@ var init_backgroundTool = __esm({
 });
 
 // ../core/src/tool/autoPermission.ts
-import path30 from "path";
+import path28 from "path";
 var AUTO_SCOPE, AUTO_DEFAULT_EXTRA, AUTO_AGGRESSIVE_EXTRA, isMcpTool, BUILTIN_AUTO_DENY, matchBuiltinDeny, COMMAND_DENY, matchCommandDeny, hasShellMetachars, READONLY_HEADS, hasWriteModifier, SENSITIVE_FILE_ARG_RE, hasSensitiveFileArg, isReadOnlyCommand, isWithinWorkspace, runAutoCheck;
 var init_autoPermission = __esm({
   "../core/src/tool/autoPermission.ts"() {
@@ -8739,9 +8768,9 @@ var init_autoPermission = __esm({
     isWithinWorkspace = (p, cwd) => {
       if (!p || !cwd) return false;
       try {
-        const abs = path30.isAbsolute(p) ? p : path30.resolve(cwd, p);
-        const rel = path30.relative(cwd, abs);
-        return rel === "" || !rel.startsWith("..") && !path30.isAbsolute(rel);
+        const abs = path28.isAbsolute(p) ? p : path28.resolve(cwd, p);
+        const rel = path28.relative(cwd, abs);
+        return rel === "" || !rel.startsWith("..") && !path28.isAbsolute(rel);
       } catch {
         return false;
       }
@@ -9887,7 +9916,7 @@ var init_subagent = __esm({
 
 // ../core/src/hooks/loader.ts
 import fs27 from "fs/promises";
-import path31 from "path";
+import path29 from "path";
 var readHooksConfig, appendValidated, validateRule, parseAgentDecision, compileRule2, loadHooks, initHooks;
 var init_loader4 = __esm({
   "../core/src/hooks/loader.ts"() {
@@ -9902,9 +9931,9 @@ var init_loader4 = __esm({
     readHooksConfig = async (includeProject) => {
       const merged = {};
       const paths = [
-        path31.join(appConfig.dataDir, "settings.json"),
+        path29.join(appConfig.dataDir, "settings.json"),
         // 全局用户级
-        ...includeProject ? [path31.join(process.cwd(), ".deepseeker-code", "settings.json")] : []
+        ...includeProject ? [path29.join(process.cwd(), ".deepseeker-code", "settings.json")] : []
         // 项目级（叠加）；未信任时省略
       ];
       for (const configPath of paths) {
@@ -10213,7 +10242,7 @@ ${m.context}`;
 
 // ../core/src/skills/loader.ts
 import fs28 from "fs/promises";
-import path32 from "path";
+import path30 from "path";
 import { fileURLToPath } from "url";
 var BUILTIN_DIR, SOURCES2, MAX_SKILL_BODY_BYTES, splitList, parseSkillAt, loadSkills, initSkills;
 var init_loader5 = __esm({
@@ -10224,11 +10253,11 @@ var init_loader5 = __esm({
     init_registry3();
     init_skill();
     init_registry2();
-    BUILTIN_DIR = path32.join(path32.dirname(fileURLToPath(import.meta.url)), "builtin");
+    BUILTIN_DIR = path30.join(path30.dirname(fileURLToPath(import.meta.url)), "builtin");
     SOURCES2 = [
       { dir: BUILTIN_DIR, source: "builtin" },
-      { dir: path32.join(appConfig.dataDir, "skills"), source: "global" },
-      { dir: path32.join(process.cwd(), ".deepseeker-code", "skills"), source: "project" }
+      { dir: path30.join(appConfig.dataDir, "skills"), source: "global" },
+      { dir: path30.join(process.cwd(), ".deepseeker-code", "skills"), source: "project" }
     ];
     MAX_SKILL_BODY_BYTES = 64 * 1024;
     splitList = (raw) => (raw ?? "").split(",").map((s) => s.trim()).filter(Boolean);
@@ -10274,7 +10303,7 @@ var init_loader5 = __esm({
     loadSkills = async (includeProject) => {
       const picked = await scanSources(
         filterSources(SOURCES2, includeProject),
-        (e, dir) => e.isDirectory() ? path32.join(dir, e.name, "SKILL.md") : void 0,
+        (e, dir) => e.isDirectory() ? path30.join(dir, e.name, "SKILL.md") : void 0,
         parseSkillAt
       );
       for (const { item } of picked) registerSkill(item);
@@ -10306,7 +10335,7 @@ var init_loader5 = __esm({
 
 // ../core/src/agents/loader.ts
 import fs29 from "fs/promises";
-import path33 from "path";
+import path31 from "path";
 import { fileURLToPath as fileURLToPath2 } from "url";
 var BUILTIN_DIR2, SOURCES3, parseAgentAt, initAgents;
 var init_loader6 = __esm({
@@ -10316,11 +10345,11 @@ var init_loader6 = __esm({
     init_frontmatter();
     init_registry4();
     init_registry2();
-    BUILTIN_DIR2 = path33.join(path33.dirname(fileURLToPath2(import.meta.url)), "builtin");
+    BUILTIN_DIR2 = path31.join(path31.dirname(fileURLToPath2(import.meta.url)), "builtin");
     SOURCES3 = [
       { dir: BUILTIN_DIR2, source: "builtin" },
-      { dir: path33.join(appConfig.dataDir, "agents"), source: "global" },
-      { dir: path33.join(process.cwd(), ".deepseeker-code", "agents"), source: "project" }
+      { dir: path31.join(appConfig.dataDir, "agents"), source: "global" },
+      { dir: path31.join(process.cwd(), ".deepseeker-code", "agents"), source: "project" }
     ];
     parseAgentAt = async (file, dir, source) => {
       let raw;
@@ -10360,7 +10389,7 @@ var init_loader6 = __esm({
         const known = new Set(into.map((t) => t.function.name));
         const picked = await scanSources(
           filterSources(SOURCES3, includeProject),
-          (e, dir) => e.isFile() && e.name.endsWith(".agent.md") ? path33.join(dir, e.name) : void 0,
+          (e, dir) => e.isFile() && e.name.endsWith(".agent.md") ? path31.join(dir, e.name) : void 0,
           parseAgentAt
         );
         for (const { item: m, file, source } of picked) {
@@ -10398,7 +10427,7 @@ var init_registry7 = __esm({
 
 // ../core/src/commands/loader.ts
 import fs30 from "fs/promises";
-import path34 from "path";
+import path32 from "path";
 import { fileURLToPath as fileURLToPath3 } from "url";
 var BUILTIN_DIR3, SOURCES4, MAX_COMMAND_BODY_BYTES, parseCommandAt, loadCommands, initCommands;
 var init_loader7 = __esm({
@@ -10408,11 +10437,11 @@ var init_loader7 = __esm({
     init_frontmatter();
     init_registry7();
     init_registry2();
-    BUILTIN_DIR3 = path34.join(path34.dirname(fileURLToPath3(import.meta.url)), "builtin");
+    BUILTIN_DIR3 = path32.join(path32.dirname(fileURLToPath3(import.meta.url)), "builtin");
     SOURCES4 = [
       { dir: BUILTIN_DIR3, source: "builtin" },
-      { dir: path34.join(appConfig.dataDir, "commands"), source: "global" },
-      { dir: path34.join(process.cwd(), ".deepseeker-code", "commands"), source: "project" }
+      { dir: path32.join(appConfig.dataDir, "commands"), source: "global" },
+      { dir: path32.join(process.cwd(), ".deepseeker-code", "commands"), source: "project" }
     ];
     MAX_COMMAND_BODY_BYTES = 64 * 1024;
     parseCommandAt = async (file, _dir, source) => {
@@ -10429,7 +10458,7 @@ var init_loader7 = __esm({
       }
       const name = parsed.frontmatter.name;
       const description = parsed.frontmatter.description;
-      const fallbackName = path34.basename(file, ".md");
+      const fallbackName = path32.basename(file, ".md");
       const finalName = name || fallbackName;
       if (!description) {
         console.warn(`\u26A0\uFE0F [commands] \u7F3A\u5C11 description\uFF08${file}\uFF09\uFF0C\u5DF2\u8DF3\u8FC7`);
@@ -10455,7 +10484,7 @@ var init_loader7 = __esm({
     loadCommands = async (includeProject) => {
       const picked = await scanSources(
         filterSources(SOURCES4, includeProject),
-        (e, dir) => e.isFile() && e.name.endsWith(".md") ? path34.join(dir, e.name) : void 0,
+        (e, dir) => e.isFile() && e.name.endsWith(".md") ? path32.join(dir, e.name) : void 0,
         parseCommandAt
       );
       for (const { item } of picked) registerCommand(item);
@@ -10474,7 +10503,7 @@ var init_loader7 = __esm({
 
 // ../core/src/outputStyles/loader.ts
 import fs31 from "fs/promises";
-import path35 from "path";
+import path33 from "path";
 import { fileURLToPath as fileURLToPath4 } from "url";
 var BUILTIN_DIR4, MAX_STYLE_BODY_BYTES, SOURCES5, parseStyleAt, loadOutputStyles, initOutputStyles;
 var init_loader8 = __esm({
@@ -10484,12 +10513,12 @@ var init_loader8 = __esm({
     init_frontmatter();
     init_registry5();
     init_registry2();
-    BUILTIN_DIR4 = path35.join(path35.dirname(fileURLToPath4(import.meta.url)), "builtin");
+    BUILTIN_DIR4 = path33.join(path33.dirname(fileURLToPath4(import.meta.url)), "builtin");
     MAX_STYLE_BODY_BYTES = 64 * 1024;
     SOURCES5 = [
       { dir: BUILTIN_DIR4, source: "builtin" },
-      { dir: path35.join(appConfig.dataDir, "output-styles"), source: "global" },
-      { dir: path35.join(process.cwd(), ".deepseeker-code", "output-styles"), source: "project" }
+      { dir: path33.join(appConfig.dataDir, "output-styles"), source: "global" },
+      { dir: path33.join(process.cwd(), ".deepseeker-code", "output-styles"), source: "project" }
     ];
     parseStyleAt = async (file, _dir, source) => {
       let raw;
@@ -10526,7 +10555,7 @@ var init_loader8 = __esm({
     loadOutputStyles = async (includeProject) => {
       const picked = await scanSources(
         filterSources(SOURCES5, includeProject),
-        (e, dir) => e.isFile() && e.name.endsWith(".md") ? path35.join(dir, e.name) : void 0,
+        (e, dir) => e.isFile() && e.name.endsWith(".md") ? path33.join(dir, e.name) : void 0,
         parseStyleAt
       );
       for (const { item } of picked) registerOutputStyle(item);
@@ -10568,16 +10597,26 @@ var init_bootstrap = __esm({
       if (typeof AbortSignal.any !== "function" || typeof AbortSignal.timeout !== "function") {
         console.error("\u274C \u5F53\u524D Node \u7248\u672C\u7F3A\u5C11 AbortSignal.any/timeout\uFF08\u9700 Node 20.3+\uFF09\uFF0Cweb_fetch \u76F8\u5173\u80FD\u529B\u5C06\u4E0D\u53EF\u7528\uFF0C\u5EFA\u8BAE\u5347\u7EA7 Node\u3002");
       }
-      await sweepOrphanedWorktrees().catch((e) => console.warn(`\u26A0\uFE0F [worktree] \u542F\u52A8\u671F\u6E05\u626B\u5931\u8D25\uFF08\u5DF2\u5FFD\u7565\uFF09: ${e?.message ?? e}`));
-      await initMcpTools(into);
-      await initHooks(includeProject);
-      await initPermissions(includeProject);
+      await Promise.all([
+        // P2-13 worktree 孤儿清扫：进程重启 = 上次 run_workflow 未清理的 worktree 全是孤儿。best-effort，失败不阻断。
+        sweepOrphanedWorktrees().catch((e) => console.warn(`worktree \u542F\u52A8\u671F\u6E05\u626B\u5931\u8D25\uFF08\u5DF2\u5FFD\u7565\uFF09: ${e?.message ?? e}`)),
+        // 连接配置的 MCP 服务器并注入其工具（★ 通常最慢：spawn 子进程 + stdio 握手；无配置静默跳过）。仅读全局 mcp.json，不受 includeProject 影响。
+        initMcpTools(into),
+        // 加载声明式 hooks（settings.json；无配置时静默跳过）。未信任时跳过项目级（hooks 会 spawn 执行命令，高风险）
+        initHooks(includeProject),
+        // 加载细粒度权限规则（settings.json permissions.{allow,deny,ask}；无配置时静默跳过）。未信任时跳过项目级（防 auto-approve 绕审批）
+        initPermissions(includeProject),
+        // 缓存项目指引（CLAUDE.md/AGENTS.md/AGENT.md）到内存，供每轮自动注入 system prompt。未信任时整体跳过（无全局源，防提示注入）
+        initProjectGuide(includeProject),
+        // 加载斜杠命令（builtin/global/project；用户输入 /<name> 时前置展开）。未信任时跳过项目级
+        initCommands(includeProject),
+        // 加载输出风格（builtin/global/project；用户经 CLI /output-style <name> 选用，runAgent 注入 persona）。未信任时跳过项目级
+        initOutputStyles(includeProject),
+        // 加载持久记忆（global/project；runAgent 注入一行索引，memory_read 按需召回全文）。未信任时跳过项目级（防提示注入）
+        initMemories(includeProject)
+      ]);
       await initSkills(into, includeProject);
       await initAgents(into, includeProject);
-      await initProjectGuide(includeProject);
-      await initCommands(includeProject);
-      await initOutputStyles(includeProject);
-      await initMemories(includeProject);
       return () => {
         try {
           disposeAllMcpClients();
@@ -10598,7 +10637,7 @@ var init_bootstrap = __esm({
 
 // ../core/src/statusLine/config.ts
 import fs32 from "fs/promises";
-import path36 from "path";
+import path34 from "path";
 var parseBlock, readStatusLineConfig;
 var init_config2 = __esm({
   "../core/src/statusLine/config.ts"() {
@@ -10614,9 +10653,9 @@ var init_config2 = __esm({
     };
     readStatusLineConfig = async (includeProject) => {
       const paths = [
-        path36.join(appConfig.dataDir, "settings.json"),
+        path34.join(appConfig.dataDir, "settings.json"),
         // 全局用户级
-        ...includeProject ? [path36.join(process.cwd(), ".deepseeker-code", "settings.json")] : []
+        ...includeProject ? [path34.join(process.cwd(), ".deepseeker-code", "settings.json")] : []
         // 项目级（覆盖）；未信任时省略
       ];
       let result = null;
@@ -10644,7 +10683,7 @@ var init_config2 = __esm({
 // ../core/src/statusLine/runner.ts
 import { spawn as spawn5 } from "child_process";
 import fs33 from "fs";
-import path37 from "path";
+import path35 from "path";
 import { fileURLToPath as fileURLToPath5 } from "url";
 var STATUSLINE_TIMEOUT_MS, cachedVersion, runStatusLine;
 var init_runner = __esm({
@@ -10653,11 +10692,11 @@ var init_runner = __esm({
     init_guard();
     STATUSLINE_TIMEOUT_MS = 3e3;
     try {
-      const here = path37.dirname(fileURLToPath5(import.meta.url));
+      const here = path35.dirname(fileURLToPath5(import.meta.url));
       const candidates = [
-        path37.join(here, "../../../package.json"),
+        path35.join(here, "../../../package.json"),
         // src/core/package.json
-        path37.join(here, "../../../../package.json")
+        path35.join(here, "../../../../package.json")
         // 仓库根 package.json
       ];
       for (const p of candidates) {
@@ -10721,7 +10760,7 @@ var init_createModel = __esm({
 });
 
 // ../core/src/observability/store.ts
-import path38 from "path";
+import path36 from "path";
 import fs34 from "fs/promises";
 var getTraceDirPath, getTracePath, tracePathCache, ensuredTraceDirs, ensureTraceDir, getGlobalClockPath, getTraceStorePath;
 var init_store3 = __esm({
@@ -10732,10 +10771,10 @@ var init_store3 = __esm({
     init_common();
     getTraceDirPath = (mainTraceId) => {
       assertSafeSessionId(mainTraceId, "traceId");
-      return path38.join(appConfig.dataDir, "trace", appConfig.userWorkspaceDir, getFileName(mainTraceId));
+      return path36.join(appConfig.dataDir, "trace", appConfig.userWorkspaceDir, getFileName(mainTraceId));
     };
     getTracePath = () => {
-      return path38.join(appConfig.dataDir, "trace");
+      return path36.join(appConfig.dataDir, "trace");
     };
     tracePathCache = /* @__PURE__ */ new Map();
     ensuredTraceDirs = /* @__PURE__ */ new Set();
@@ -10746,7 +10785,7 @@ var init_store3 = __esm({
       ensuredTraceDirs.add(dir);
     };
     getGlobalClockPath = () => {
-      return path38.join(getTracePath(), "trace-cleanup-clock.json");
+      return path36.join(getTracePath(), "trace-cleanup-clock.json");
     };
     getTraceStorePath = async (mainTraceId) => {
       assertSafeSessionId(mainTraceId, "traceId");
@@ -10764,7 +10803,7 @@ var init_store3 = __esm({
         const todayStr = getTodayDateString();
         fileName = `trace-${todayStr}__${rootId}.jsonl`;
       }
-      const resolved = path38.join(dir, fileName);
+      const resolved = path36.join(dir, fileName);
       tracePathCache.set(rootId, resolved);
       return resolved;
     };
@@ -10773,7 +10812,7 @@ var init_store3 = __esm({
 
 // ../core/src/observability/trace.ts
 import fs35 from "fs/promises";
-import path39 from "path";
+import path37 from "path";
 async function emitTrace(base) {
   const event = {
     sessionId: base.sessionId,
@@ -10827,7 +10866,7 @@ async function maybeCleanupAfterAppend(sessionId) {
     lastSizeCleanupAt2 = now;
     diskLastCleanupAt2 = now;
     const clockPath = getGlobalClockPath();
-    await fs35.mkdir(path39.dirname(clockPath), { recursive: true });
+    await fs35.mkdir(path37.dirname(clockPath), { recursive: true });
     await fs35.writeFile(clockPath, JSON.stringify({ lastCleanupAt: now, updatedAt: (/* @__PURE__ */ new Date()).toISOString() }, null, 2), "utf-8");
     if (deletedCount > 0) {
       console.log(`\u2728 [Trace\u8FD0\u7EF4] \u5171\u9500\u6BC1 ${deletedCount} \u4E2A\u4F1A\u8BDD\u65E5\u5FD7\uFF08\u8F6F\u89C4\u5219\u8FC7\u671F\u6E05\u7406 + \u5BB9\u91CF\u786C\u9A71\u9010\uFF09\uFF0C\u78C1\u76D8\u6C34\u4F4D\u56DE\u843D\u3002`);
@@ -10854,12 +10893,12 @@ async function cleanupOldTraceFiles() {
   }
   const re = /^trace-(\d{4}-\d{2}-\d{2})__([\w-]+)\.jsonl$/;
   for (const relativePath of relativePaths) {
-    const fileName = path39.basename(relativePath);
+    const fileName = path37.basename(relativePath);
     const m = fileName.match(re);
     if (!m) continue;
     const fileBornDay = /* @__PURE__ */ new Date(`${m[1]}T00:00:00`);
     if (fileBornDay >= cutoff) continue;
-    const fullPath = path39.join(dir, relativePath);
+    const fullPath = path37.join(dir, relativePath);
     try {
       const st = await fs35.stat(fullPath);
       if (now - st.mtimeMs < ACTIVE_GRACE_MS2) continue;
@@ -10881,11 +10920,11 @@ async function evictOldestForSize2(targetBytes) {
   const re = /^trace-(\d{4}-\d{2}-\d{2})__([\w-]+)\.jsonl$/;
   const candidates = [];
   for (const relativePath of relativePaths) {
-    const fileName = path39.basename(relativePath);
+    const fileName = path37.basename(relativePath);
     if (!re.test(fileName)) continue;
     try {
-      const st = await fs35.stat(path39.join(dir, relativePath));
-      candidates.push({ mtime: st.mtimeMs, fullPath: path39.join(dir, relativePath), size: st.size });
+      const st = await fs35.stat(path37.join(dir, relativePath));
+      candidates.push({ mtime: st.mtimeMs, fullPath: path37.join(dir, relativePath), size: st.size });
     } catch {
     }
   }
@@ -11072,7 +11111,7 @@ ${PLAN_MODE_AUTO_ENTER_HINT}
 });
 
 // ../core/src/serve/chatProcessing.ts
-import path40 from "path";
+import path38 from "path";
 import fs36 from "fs";
 var handleUnifiedChat;
 var init_chatProcessing = __esm({
@@ -11130,14 +11169,14 @@ ${inject}`;
           activeReal = fs36.realpathSync(activeReal);
         } catch {
         }
-        const lines = roots.map((r) => `- ${path40.basename(r) || r}: ${r}${r === activeReal ? "\uFF08\u9ED8\u8BA4\u6839\uFF1A\u76F8\u5BF9\u8DEF\u5F84/\u547D\u4EE4\u57FA\u51C6\uFF09" : "\uFF08\u53EF\u76F4\u63A5\u8BFB\u5199\uFF09"}`);
+        const lines = roots.map((r) => `- ${path38.basename(r) || r}: ${r}${r === activeReal ? "\uFF08\u9ED8\u8BA4\u6839\uFF1A\u76F8\u5BF9\u8DEF\u5F84/\u547D\u4EE4\u57FA\u51C6\uFF09" : "\uFF08\u53EF\u76F4\u63A5\u8BFB\u5199\uFF09"}`);
         sysPrompt = sysPrompt + `
 
 \u3010\u5DE5\u4F5C\u533A\uFF08\u591A\u9879\u76EE\uFF09\u3011
 \u65E0\u9700\u5207\u6362\u9879\u76EE\uFF0C\u4EE5\u4E0B\u6240\u6709\u6839\u90FD\u53EF\u76F4\u63A5\u7528\u7EDD\u5BF9\u8DEF\u5F84\u8BBF\u95EE\uFF1B\u8DE8\u9879\u76EE\u7528\u7EDD\u5BF9\u8DEF\u5F84\u6216\u76F8\u5BF9\u9ED8\u8BA4\u6839\u7684 ../<\u5144\u5F1F\u76EE\u5F55>:
 ${lines.join("\n")}
-\u2605 \u8DEF\u5F84\u951A\u5B9A\u94C1\u5F8B\uFF1A\u5DE5\u5177\u7F3A\u7701\u53EA\u4F5C\u7528\u4E8E\u9ED8\u8BA4\u6839\uFF08${path40.basename(activeReal) || activeReal} = IDE \u5934\u90E8\u6240\u793A\u6839\uFF09\u3002\u5F53\u7528\u6237\u5728\u5BF9\u8BDD\u4E2D\u6307\u660E\u4E86\u67D0\u4E2A\u9879\u76EE\uFF08\u5982\u300C\u5728 A \u9879\u76EE\u300D\u300C\u6539\u524D\u7AEF\u7684 xxx\u300D\u300C\u641C\u540E\u7AEF\u300D\uFF09\uFF0C\u8BE5\u8F6E\u6240\u6709\u5E26 path \u53C2\u6570\u7684\u5DE5\u5177\u8C03\u7528\uFF08read_file / edit_file / search_grep / glob / list_dir / read_xlsx / read_docx \u7B49\uFF09\u5FC5\u987B\u628A\u5BF9\u5E94\u9879\u76EE\u6839\u4F5C\u4E3A path \u4F20\u5165\uFF08\u7EDD\u5BF9\u8DEF\u5F84\u3001../<\u5144\u5F1F\u76EE\u5F55>\u3001\u6216\u9879\u76EE\u76EE\u5F55\u540D\uFF09\uFF0C\u5426\u5219\u53EA\u4F1A\u8BFB\u5199/\u641C\u7D22\u9ED8\u8BA4\u6839\uFF0C\u4E0E\u7528\u6237\u610F\u56FE\u4E0D\u7B26\u3002
-\u6CE8\u610F\uFF1A\u9879\u76EE\u7EA7\u914D\u7F6E\uFF08.deepseeker-code/\uFF09\u4EC5\u5728\u9ED8\u8BA4\u6839 ${path40.basename(activeReal) || activeReal} \u751F\u6548\u3002`;
+\u2605 \u8DEF\u5F84\u951A\u5B9A\u94C1\u5F8B\uFF1A\u5DE5\u5177\u7F3A\u7701\u53EA\u4F5C\u7528\u4E8E\u9ED8\u8BA4\u6839\uFF08${path38.basename(activeReal) || activeReal} = IDE \u5934\u90E8\u6240\u793A\u6839\uFF09\u3002\u5F53\u7528\u6237\u5728\u5BF9\u8BDD\u4E2D\u6307\u660E\u4E86\u67D0\u4E2A\u9879\u76EE\uFF08\u5982\u300C\u5728 A \u9879\u76EE\u300D\u300C\u6539\u524D\u7AEF\u7684 xxx\u300D\u300C\u641C\u540E\u7AEF\u300D\uFF09\uFF0C\u8BE5\u8F6E\u6240\u6709\u5E26 path \u53C2\u6570\u7684\u5DE5\u5177\u8C03\u7528\uFF08read_file / edit_file / search_grep / glob / list_dir / read_xlsx / read_docx \u7B49\uFF09\u5FC5\u987B\u628A\u5BF9\u5E94\u9879\u76EE\u6839\u4F5C\u4E3A path \u4F20\u5165\uFF08\u7EDD\u5BF9\u8DEF\u5F84\u3001../<\u5144\u5F1F\u76EE\u5F55>\u3001\u6216\u9879\u76EE\u76EE\u5F55\u540D\uFF09\uFF0C\u5426\u5219\u53EA\u4F1A\u8BFB\u5199/\u641C\u7D22\u9ED8\u8BA4\u6839\uFF0C\u4E0E\u7528\u6237\u610F\u56FE\u4E0D\u7B26\u3002
+\u6CE8\u610F\uFF1A\u9879\u76EE\u7EA7\u914D\u7F6E\uFF08.deepseeker-code/\uFF09\u4EC5\u5728\u9ED8\u8BA4\u6839 ${path38.basename(activeReal) || activeReal} \u751F\u6548\u3002`;
       }
       let replyText = "";
       try {
@@ -13256,6 +13295,81 @@ ${listText}`);
   }
 });
 
+// src/updateCheck.ts
+var updateCheck_exports = {};
+__export(updateCheck_exports, {
+  getCachedLatestIfNewer: () => getCachedLatestIfNewer,
+  readLocalVersion: () => readLocalVersion,
+  refreshUpdateCache: () => refreshUpdateCache
+});
+import { readFileSync as readFileSync3, writeFileSync, mkdirSync } from "node:fs";
+import path39 from "node:path";
+import os4 from "os";
+import { fileURLToPath as fileURLToPath6 } from "node:url";
+var PKG_NAME, REGISTRY, CACHE_TTL_MS, FETCH_TIMEOUT_MS2, cacheFile, readLocalVersion, parseSemver, compareVersion, readCache, writeCache, getCachedLatestIfNewer, refreshUpdateCache;
+var init_updateCheck = __esm({
+  "src/updateCheck.ts"() {
+    "use strict";
+    PKG_NAME = "deepseeker-code";
+    REGISTRY = "https://registry.npmjs.org";
+    CACHE_TTL_MS = 6 * 60 * 60 * 1e3;
+    FETCH_TIMEOUT_MS2 = 3e3;
+    cacheFile = () => path39.join(os4.homedir(), ".deepseeker-code", "update-check.json");
+    readLocalVersion = () => {
+      try {
+        const here = path39.dirname(fileURLToPath6(import.meta.url));
+        return JSON.parse(readFileSync3(path39.join(here, "..", "package.json"), "utf8")).version ?? "0.0.0";
+      } catch {
+        return "0.0.0";
+      }
+    };
+    parseSemver = (v) => {
+      const m = String(v ?? "").match(/^(\d+)\.(\d+)\.(\d+)/);
+      return m ? [Number(m[1]), Number(m[2]), Number(m[3])] : [0, 0, 0];
+    };
+    compareVersion = (a, b) => {
+      const [a1, a2, a3] = parseSemver(a);
+      const [b1, b2, b3] = parseSemver(b);
+      return a1 - b1 || a2 - b2 || a3 - b3;
+    };
+    readCache = () => {
+      try {
+        const obj = JSON.parse(readFileSync3(cacheFile(), "utf8"));
+        return typeof obj.latestVersion === "string" && typeof obj.lastCheck === "number" ? obj : null;
+      } catch {
+        return null;
+      }
+    };
+    writeCache = (latestVersion) => {
+      try {
+        mkdirSync(path39.dirname(cacheFile()), { recursive: true });
+        writeFileSync(cacheFile(), JSON.stringify({ lastCheck: Date.now(), latestVersion }), "utf8");
+      } catch {
+      }
+    };
+    getCachedLatestIfNewer = (currentVersion) => {
+      const cache = readCache();
+      if (!cache) return null;
+      return compareVersion(cache.latestVersion, currentVersion) > 0 ? cache.latestVersion : null;
+    };
+    refreshUpdateCache = () => {
+      const cache = readCache();
+      if (cache && Date.now() - cache.lastCheck < CACHE_TTL_MS) return;
+      void (async () => {
+        try {
+          const res = await fetch(`${REGISTRY}/${PKG_NAME}/latest`, {
+            signal: AbortSignal.timeout(FETCH_TIMEOUT_MS2)
+          });
+          if (!res.ok) return;
+          const info = await res.json();
+          if (info.version) writeCache(info.version);
+        } catch {
+        }
+      })();
+    };
+  }
+});
+
 // src/preload-config.ts
 import { readFileSync } from "node:fs";
 import path from "node:path";
@@ -13305,8 +13419,8 @@ init_strings();
 init_prefs();
 init_trust();
 import { render } from "ink";
-import os4 from "os";
-import path41 from "path";
+import os5 from "os";
+import path40 from "path";
 import { emitKeypressEvents } from "node:readline";
 import { jsx as jsx17 } from "react/jsx-runtime";
 var parseArgs = (argv) => {
@@ -13318,6 +13432,7 @@ var parseArgs = (argv) => {
     else if (a === "--auto" || a === "-a") out.auto = true;
     else if (a === "--continue" || a === "-c") out.continue = true;
     else if (a === "--trust") out.trust = true;
+    else if (a === "--no-update-check") out.noUpdateCheck = true;
   }
   return out;
 };
@@ -13432,12 +13547,19 @@ var main = async () => {
   process.stdout.write("\x1B[2J\x1B[3J\x1B[1;1H");
   const cwdIsHome = () => {
     try {
-      return path41.resolve(cwd).toLowerCase() === path41.resolve(os4.homedir()).toLowerCase();
+      return path40.resolve(cwd).toLowerCase() === path40.resolve(os5.homedir()).toLowerCase();
     } catch {
       return false;
     }
   };
   process.stdout.write(S.startupBanner(cwd, appConfig2.userWorkspaceDir, cwdIsHome()));
+  if (!args.noUpdateCheck) {
+    const { readLocalVersion: readLocalVersion2, getCachedLatestIfNewer: getCachedLatestIfNewer2, refreshUpdateCache: refreshUpdateCache2 } = await Promise.resolve().then(() => (init_updateCheck(), updateCheck_exports));
+    const current = readLocalVersion2();
+    const latest = getCachedLatestIfNewer2(current);
+    if (latest) process.stdout.write(S.updateAvailable(latest, current));
+    refreshUpdateCache2();
+  }
   let resumeId = args.resume;
   if (!resumeId && args.continue) {
     const { getMostRecentSessionId: getMostRecentSessionId2 } = await Promise.resolve().then(() => (init_store(), store_exports));