@qwen-code/qwen-code 0.16.0-preview.0 → 0.16.1

package/chunks/{chunk-NAID3ZWF.js → chunk-DMIMF3CG.js}

@@ -3,7 +3,7 @@
 import {
   TextTokenizer,
   isSupportedImageMimeType
-} from "./chunk-VTPOO6GV.js";
+} from "./chunk-CSWBPY3P.js";
 import {
   createDebugLogger
 } from "./chunk-XP27SJMH.js";

package/chunks/{chunk-2B7UBDY5.js → chunk-GGNTZ2NH.js}

@@ -1202,6 +1202,23 @@ var CredentialsClearRequiredError = class extends Error {
     __name(this, "CredentialsClearRequiredError");
   }
 };
+var QwenOAuthPollError = class extends Error {
+  static {
+    __name(this, "QwenOAuthPollError");
+  }
+  status;
+  oauthError;
+  description;
+  constructor(opts) {
+    super(
+      `Device token poll failed: ${opts.oauthError ?? "Unknown error"} - ${opts.description ?? "(no description)"}`
+    );
+    this.name = "QwenOAuthPollError";
+    this.oauthError = opts.oauthError;
+    this.description = opts.description;
+    this.status = opts.status;
+  }
+};
 function isDeviceAuthorizationSuccess(response) {
   return "device_code" in response;
 }
@@ -1245,7 +1262,7 @@ var QwenOAuth2Client = class {
       return { token: void 0 };
     }
   }
-  async requestDeviceAuthorization(options) {
+  async requestDeviceAuthorization(options, fetchOpts) {
     const bodyData = {
       client_id: QWEN_OAUTH_CLIENT_ID,
       scope: options.scope,
@@ -1259,7 +1276,13 @@ var QwenOAuth2Client = class {
         Accept: "application/json",
         "x-request-id": randomUUID2()
       },
-      body: objectToUrlEncoded(bodyData)
+      body: objectToUrlEncoded(bodyData),
+      // PR #4255 — daemon device-flow registry passes its
+      // `cancelController.signal` so dispose / cancel during a slow
+      // device-authorization request actually aborts the in-flight
+      // socket immediately. Pre-existing CLI callers omit it; the
+      // optional shape preserves backward compatibility.
+      ...fetchOpts?.signal ? { signal: fetchOpts.signal } : {}
     });
     if (!response.ok) {
       const errorData = await response.text();
@@ -1268,7 +1291,18 @@ var QwenOAuth2Client = class {
       );
     }
     const result = await response.json();
-    debugLogger2.debug("Device authorization result:", result);
+    if (isDeviceAuthorizationSuccess(result)) {
+      debugLogger2.debug("Device authorization result (sanitized):", {
+        ok: true,
+        expires_in: result.expires_in
+      });
+    } else {
+      const errorData = result;
+      debugLogger2.debug("Device authorization result (sanitized):", {
+        ok: false,
+        error: errorData?.error
+      });
+    }
     if (!isDeviceAuthorizationSuccess(result)) {
       const errorData = result;
       throw new Error(
@@ -1277,7 +1311,7 @@ var QwenOAuth2Client = class {
     }
     return result;
   }
-  async pollDeviceToken(options) {
+  async pollDeviceToken(options, fetchOpts) {
     const bodyData = {
       grant_type: QWEN_OAUTH_GRANT_TYPE,
       client_id: QWEN_OAUTH_CLIENT_ID,
@@ -1290,7 +1324,12 @@ var QwenOAuth2Client = class {
         "Content-Type": "application/x-www-form-urlencoded",
         Accept: "application/json"
       },
-      body: objectToUrlEncoded(bodyData)
+      body: objectToUrlEncoded(bodyData),
+      // PR #4255 — daemon device-flow registry passes its per-entry
+      // `cancelController.signal` so cancel() / dispose() during a
+      // slow IdP response actually aborts the in-flight socket
+      // instead of waiting for the upstream timeout.
+      ...fetchOpts?.signal ? { signal: fetchOpts.signal } : {}
     });
     if (!response.ok) {
       const responseText = await response.text();
@@ -1298,11 +1337,11 @@ var QwenOAuth2Client = class {
       try {
         errorData = JSON.parse(responseText);
       } catch (_parseError) {
-        const error2 = new Error(
+        const error = new Error(
           `Device token poll failed: ${response.status} ${response.statusText}. Response: ${responseText}`
         );
-        error2.status = response.status;
-        throw error2;
+        error.status = response.status;
+        throw error;
       }
       if (response.status === 400 && errorData.error === "authorization_pending") {
         return { status: "pending" };
@@ -1313,11 +1352,11 @@ var QwenOAuth2Client = class {
           slowDown: true
         };
       }
-      const error = new Error(
-        `Device token poll failed: ${errorData.error || "Unknown error"} - ${errorData.error_description}`
-      );
-      error.status = response.status;
-      throw error;
+      throw new QwenOAuthPollError({
+        oauthError: errorData.error,
+        description: errorData.error_description,
+        status: response.status
+      });
     }
     return await response.json();
   }
@@ -1608,10 +1647,6 @@ async function authWithQwenDeviceFlow(client, config) {
           };
           client.setCredentials(credentials);
           await cacheQwenCredentials(credentials);
-          try {
-            SharedTokenManager.getInstance().clearCache();
-          } catch {
-          }
           emitAuthProgress(
             "success",
             "Authentication successful! Access token obtained."
@@ -1712,12 +1747,45 @@ Server requested to slow down, increasing poll interval to ${pollInterval}ms'`
   }
 }
 __name(authWithQwenDeviceFlow, "authWithQwenDeviceFlow");
-async function cacheQwenCredentials(credentials) {
+var QWEN_CREDENTIAL_FILE_MODE = 384;
+async function cacheQwenCredentials(credentials, opts) {
   const filePath = getQwenCachedCredentialPath();
   try {
     await fs7.mkdir(path3.dirname(filePath), { recursive: true });
     const credString = JSON.stringify(credentials, null, 2);
-    await fs7.writeFile(filePath, credString);
+    const tempPath = `${filePath}.tmp.${process.pid}.${randomUUID2()}`;
+    try {
+      await fs7.writeFile(tempPath, credString, {
+        mode: QWEN_CREDENTIAL_FILE_MODE,
+        ...opts?.signal ? { signal: opts.signal } : {}
+      });
+      try {
+        await fs7.chmod(tempPath, QWEN_CREDENTIAL_FILE_MODE);
+      } catch (chmodErr) {
+        if (process.platform !== "win32") {
+          throw new Error(
+            `cacheQwenCredentials: refusing to publish credentials \u2014 chmod 0o${QWEN_CREDENTIAL_FILE_MODE.toString(8)} on temp file failed: ${chmodErr instanceof Error ? chmodErr.message : String(chmodErr)}`
+          );
+        }
+        debugLogger2.warn(
+          `cacheQwenCredentials: chmod 0o${QWEN_CREDENTIAL_FILE_MODE.toString(8)} on Windows temp file ${tempPath} failed; relying on NTFS ACL: ${chmodErr instanceof Error ? chmodErr.message : String(chmodErr)}`
+        );
+      }
+      await fs7.rename(tempPath, filePath);
+    } catch (writeErr) {
+      try {
+        await fs7.unlink(tempPath);
+      } catch {
+      }
+      throw writeErr;
+    }
+    try {
+      SharedTokenManager.getInstance().clearCache();
+    } catch (clearErr) {
+      debugLogger2.warn(
+        `cacheQwenCredentials: SharedTokenManager.clearCache failed; in-process callers may serve stale credentials until the next mtime poll: ${clearErr instanceof Error ? clearErr.message : String(clearErr)}`
+      );
+    }
   } catch (error) {
     const errorMessage = error instanceof Error ? error.message : String(error);
     const errorCode = error instanceof Error && "code" in error ? error.code : void 0;
@@ -1766,6 +1834,7 @@ export {
   generateCodeChallenge,
   generatePKCEPair,
   CredentialsClearRequiredError,
+  QwenOAuthPollError,
   isDeviceAuthorizationSuccess,
   isDeviceTokenSuccess,
   isDeviceTokenPending,
@@ -1774,6 +1843,8 @@ export {
   QwenOAuth2Event,
   qwenOAuth2Events,
   getQwenOAuthClient,
+  QWEN_CREDENTIAL_FILE_MODE,
+  cacheQwenCredentials,
   clearQwenCredentials,
   clearCachedCredentialFile
 };

package/chunks/chunk-HW5S7L73.js

@@ -0,0 +1,379 @@
+// Force strict mode and setup for ESM
+"use strict";
+import {
+  resolveBundleDir
+} from "./chunk-BAZDG3QU.js";
+import {
+  Storage
+} from "./chunk-XP27SJMH.js";
+import {
+  init_esbuild_shims
+} from "./chunk-A4BMJM77.js";
+import {
+  __glob,
+  __name
+} from "./chunk-J2S4EL5Y.js";
+
+// packages/cli/src/utils/stdioHelpers.ts
+init_esbuild_shims();
+var writeStdoutLine = /* @__PURE__ */ __name((message) => {
+  process.stdout.write(message.endsWith("\n") ? message : `${message}
+`);
+}, "writeStdoutLine");
+var writeStderrLine = /* @__PURE__ */ __name((message) => {
+  process.stderr.write(message.endsWith("\n") ? message : `${message}
+`);
+}, "writeStderrLine");
+var clearScreen = /* @__PURE__ */ __name(() => {
+  console.clear();
+}, "clearScreen");
+
+// packages/cli/src/i18n/index.ts
+init_esbuild_shims();
+import * as fs from "node:fs";
+import * as path from "node:path";
+import { pathToFileURL } from "node:url";
+
+// packages/cli/src/i18n/languages.ts
+init_esbuild_shims();
+var SUPPORTED_LANGUAGES = [
+  {
+    code: "en",
+    id: "en-US",
+    fullName: "English",
+    nativeName: "English"
+  },
+  {
+    code: "zh-TW",
+    id: "zh-TW",
+    fullName: "Traditional Chinese",
+    nativeName: "\u7E41\u9AD4\u4E2D\u6587",
+    strictParity: true
+  },
+  {
+    code: "zh",
+    id: "zh-CN",
+    fullName: "Chinese",
+    nativeName: "\u4E2D\u6587",
+    strictParity: true
+  },
+  {
+    code: "ru",
+    id: "ru-RU",
+    fullName: "Russian",
+    nativeName: "\u0420\u0443\u0441\u0441\u043A\u0438\u0439"
+  },
+  {
+    code: "de",
+    id: "de-DE",
+    fullName: "German",
+    nativeName: "Deutsch"
+  },
+  {
+    code: "ja",
+    id: "ja-JP",
+    fullName: "Japanese",
+    nativeName: "\u65E5\u672C\u8A9E"
+  },
+  {
+    code: "pt",
+    id: "pt-BR",
+    fullName: "Portuguese",
+    nativeName: "Portugu\xEAs"
+  },
+  {
+    code: "fr",
+    id: "fr-FR",
+    fullName: "French",
+    nativeName: "Fran\xE7ais"
+  },
+  {
+    code: "ca",
+    id: "ca-ES",
+    fullName: "Catalan",
+    nativeName: "Catal\xE0"
+  }
+];
+function normalizeLanguageCandidate(input) {
+  return input.trim().replace(/_/g, "-").toLowerCase();
+}
+__name(normalizeLanguageCandidate, "normalizeLanguageCandidate");
+function matchesLocaleToken(candidate, token) {
+  return candidate === token || candidate.startsWith(`${token}-`) || candidate.startsWith(`${token}.`) || candidate.startsWith(`${token}@`);
+}
+__name(matchesLocaleToken, "matchesLocaleToken");
+function getMatchedLocaleTokenLength(candidate, language) {
+  const code = language.code.toLowerCase();
+  const id = language.id.toLowerCase();
+  if (matchesLocaleToken(candidate, id)) {
+    return id.length;
+  }
+  if (matchesLocaleToken(candidate, code)) {
+    return code.length;
+  }
+  return void 0;
+}
+__name(getMatchedLocaleTokenLength, "getMatchedLocaleTokenLength");
+function resolveSupportedLanguage(input) {
+  const normalized = normalizeLanguageCandidate(input);
+  if (!normalized) {
+    return void 0;
+  }
+  let bestMatch;
+  for (const language of SUPPORTED_LANGUAGES) {
+    if (normalized === language.fullName.toLowerCase() || language.nativeName && normalized === language.nativeName.toLowerCase()) {
+      return language.code;
+    }
+    const tokenLength = getMatchedLocaleTokenLength(normalized, language);
+    if (tokenLength !== void 0 && (!bestMatch || tokenLength > bestMatch.tokenLength)) {
+      bestMatch = { code: language.code, tokenLength };
+    }
+  }
+  return bestMatch?.code;
+}
+__name(resolveSupportedLanguage, "resolveSupportedLanguage");
+function getLanguageNameFromLocale(locale) {
+  const resolved = resolveSupportedLanguage(locale);
+  const lang = resolved ? SUPPORTED_LANGUAGES.find((language) => language.code === resolved) : void 0;
+  return lang?.fullName || "English";
+}
+__name(getLanguageNameFromLocale, "getLanguageNameFromLocale");
+function getLanguageSettingsOptions() {
+  return [
+    { value: "auto", label: "Auto (detect from system)" },
+    ...SUPPORTED_LANGUAGES.map((l) => ({
+      value: l.code,
+      label: l.nativeName ? `${l.nativeName} (${l.fullName})` : `${l.fullName} (${l.id})`
+    }))
+  ];
+}
+__name(getLanguageSettingsOptions, "getLanguageSettingsOptions");
+function getSupportedLanguageIds(separator = "|") {
+  return SUPPORTED_LANGUAGES.map((l) => l.id).join(separator);
+}
+__name(getSupportedLanguageIds, "getSupportedLanguageIds");
+
+// packages/cli/src/i18n/translationDict.ts
+init_esbuild_shims();
+function getTranslationModuleExport(module) {
+  return Object.prototype.hasOwnProperty.call(module, "default") ? module["default"] : module;
+}
+__name(getTranslationModuleExport, "getTranslationModuleExport");
+function isTranslationDict(value) {
+  return value !== null && typeof value === "object" && !Array.isArray(value) && Object.keys(value).length > 0;
+}
+__name(isTranslationDict, "isTranslationDict");
+
+// packages/cli/src/i18n/mustTranslateKeys.ts
+init_esbuild_shims();
+
+// import("./locales/**/*.js") in packages/cli/src/i18n/index.ts
+var globImport_locales_js = __glob({
+  "./locales/ca.js": () => import("./ca-UZ7BANMN.js"),
+  "./locales/de.js": () => import("./de-V4IE2OOZ.js"),
+  "./locales/en.js": () => import("./en-HGJ2SPLM.js"),
+  "./locales/fr.js": () => import("./fr-CJULI7ZX.js"),
+  "./locales/ja.js": () => import("./ja-L7CHRQEW.js"),
+  "./locales/pt.js": () => import("./pt-M6JULLEQ.js"),
+  "./locales/ru.js": () => import("./ru-QILM4HBC.js"),
+  "./locales/zh-TW.js": () => import("./zh-TW-S3YGWICZ.js"),
+  "./locales/zh.js": () => import("./zh-PWL2NKY3.js")
+});
+
+// packages/cli/src/i18n/index.ts
+var currentLanguage = "en";
+var translations = {};
+var translationCache = {};
+var loadingPromises = {};
+var getBuiltinLocalesDir = /* @__PURE__ */ __name(() => path.join(resolveBundleDir(import.meta.url), "locales"), "getBuiltinLocalesDir");
+var getUserLocalesDir = /* @__PURE__ */ __name(() => path.join(Storage.getGlobalQwenDir(), "locales"), "getUserLocalesDir");
+var getLocalePath = /* @__PURE__ */ __name((lang, useUserDir = false) => {
+  const baseDir = useUserDir ? getUserLocalesDir() : getBuiltinLocalesDir();
+  return path.join(baseDir, `${lang}.js`);
+}, "getLocalePath");
+function detectSystemLanguage() {
+  const envLang = process.env["QWEN_CODE_LANG"] || process.env["LANG"];
+  if (envLang) {
+    const resolved = resolveSupportedLanguage(envLang);
+    if (resolved) {
+      return resolved;
+    }
+  }
+  try {
+    const locale = Intl.DateTimeFormat().resolvedOptions().locale;
+    const resolved = resolveSupportedLanguage(locale);
+    if (resolved) {
+      return resolved;
+    }
+  } catch {
+  }
+  return "en";
+}
+__name(detectSystemLanguage, "detectSystemLanguage");
+async function tryImportTranslations(moduleSpecifier) {
+  try {
+    const module = await import(moduleSpecifier);
+    const result = getTranslationModuleExport(module);
+    if (isTranslationDict(result)) {
+      return { translations: result };
+    }
+    return {
+      error: new Error("Module loaded but result is empty or invalid")
+    };
+  } catch (error) {
+    return {
+      error: error instanceof Error ? error : new Error(String(error))
+    };
+  }
+}
+__name(tryImportTranslations, "tryImportTranslations");
+async function tryImportBundledTranslations(lang) {
+  try {
+    const module = await globImport_locales_js(`./locales/${lang}.js`);
+    const result = getTranslationModuleExport(module);
+    if (isTranslationDict(result)) {
+      return { translations: result };
+    }
+    return {
+      error: new Error("Module loaded but result is empty or invalid")
+    };
+  } catch (error) {
+    return {
+      error: error instanceof Error ? error : new Error(String(error))
+    };
+  }
+}
+__name(tryImportBundledTranslations, "tryImportBundledTranslations");
+async function loadTranslationsAsync(lang) {
+  if (translationCache[lang]) {
+    return translationCache[lang];
+  }
+  const existingPromise = loadingPromises[lang];
+  if (existingPromise) {
+    return existingPromise;
+  }
+  const loadPromise = (async () => {
+    const userJsPath = getLocalePath(lang, true);
+    if (fs.existsSync(getUserLocalesDir()) && fs.existsSync(userJsPath)) {
+      const userResult = await tryImportTranslations(
+        pathToFileURL(userJsPath).href
+      );
+      if (userResult.translations) {
+        translationCache[lang] = userResult.translations;
+        return userResult.translations;
+      }
+      writeStderrLine(
+        `Failed to load translations from user directory for ${lang}: ${userResult.error.message}`
+      );
+    }
+    const builtinJsPath = getLocalePath(lang, false);
+    const builtinModuleSpecifiers = [];
+    if (fs.existsSync(getBuiltinLocalesDir()) && fs.existsSync(builtinJsPath)) {
+      builtinModuleSpecifiers.push(pathToFileURL(builtinJsPath).href);
+    }
+    let lastBuiltinError;
+    for (const moduleSpecifier of builtinModuleSpecifiers) {
+      const builtinResult = await tryImportTranslations(moduleSpecifier);
+      if (builtinResult.translations) {
+        translationCache[lang] = builtinResult.translations;
+        return builtinResult.translations;
+      }
+      lastBuiltinError = builtinResult.error;
+    }
+    const bundledBuiltinResult = await tryImportBundledTranslations(lang);
+    if (bundledBuiltinResult.translations) {
+      translationCache[lang] = bundledBuiltinResult.translations;
+      return bundledBuiltinResult.translations;
+    }
+    lastBuiltinError = bundledBuiltinResult.error;
+    if (lastBuiltinError) {
+      writeStderrLine(
+        `Failed to load JS translations for ${lang}: ${lastBuiltinError.message}`
+      );
+    }
+    translationCache[lang] = {};
+    return {};
+  })();
+  loadingPromises[lang] = loadPromise;
+  loadPromise.finally(() => {
+    delete loadingPromises[lang];
+  });
+  return loadPromise;
+}
+__name(loadTranslationsAsync, "loadTranslationsAsync");
+function interpolate(template, params) {
+  if (!params) return template;
+  return template.replace(
+    /\{\{(\w+)\}\}/g,
+    (match, key) => params[key] ?? match
+  );
+}
+__name(interpolate, "interpolate");
+function resolveLanguage(lang) {
+  if (lang === "auto") {
+    return detectSystemLanguage();
+  }
+  return resolveSupportedLanguage(lang) ?? lang;
+}
+__name(resolveLanguage, "resolveLanguage");
+async function setLanguageAsync(lang) {
+  currentLanguage = resolveLanguage(lang);
+  translations = await loadTranslationsAsync(currentLanguage);
+}
+__name(setLanguageAsync, "setLanguageAsync");
+function getCurrentLanguage() {
+  return currentLanguage;
+}
+__name(getCurrentLanguage, "getCurrentLanguage");
+function t(key, params) {
+  const translation = translations[key] ?? key;
+  if (Array.isArray(translation)) {
+    return key;
+  }
+  return interpolate(translation, params);
+}
+__name(t, "t");
+function ta(key) {
+  const translation = translations[key];
+  if (Array.isArray(translation)) {
+    return translation;
+  }
+  return [];
+}
+__name(ta, "ta");
+async function initializeI18n(lang) {
+  await setLanguageAsync(lang ?? "auto");
+}
+__name(initializeI18n, "initializeI18n");
+
+export {
+  writeStdoutLine,
+  writeStderrLine,
+  clearScreen,
+  SUPPORTED_LANGUAGES,
+  resolveSupportedLanguage,
+  getLanguageNameFromLocale,
+  getLanguageSettingsOptions,
+  getSupportedLanguageIds,
+  detectSystemLanguage,
+  setLanguageAsync,
+  getCurrentLanguage,
+  t,
+  ta,
+  initializeI18n
+};
+/**
+ * @license
+ * Copyright 2025 Qwen Team
+ * SPDX-License-Identifier: Apache-2.0
+ */
+/**
+ * @license
+ * Copyright 2025 Qwen team
+ * SPDX-License-Identifier: Apache-2.0
+ */
+/**
+ * @license
+ * Copyright 2026 Qwen Team
+ * SPDX-License-Identifier: Apache-2.0
+ */