@qwen-code/qwen-code 0.18.1-preview.0 → 0.18.1-preview.1

package/README.md

@@ -256,7 +256,7 @@ Use the `/model` command at any time to switch between all configured models.
 }
 ```
 
-> Subscribe to the Coding Plan and get your API key at [Alibaba Cloud ModelStudio(Beijing)](https://bailian.console.aliyun.com/cn-beijing?tab=coding-plan#/efm/coding-plan-index) or [Alibaba Cloud ModelStudio(intl)](https://modelstudio.console.alibabacloud.com/?tab=coding-plan#/efm/coding-plan-index).
+> Subscribe to the Coding Plan and get your API key at [Alibaba Cloud ModelStudio (Beijing)](https://bailian.console.aliyun.com/cn-beijing?tab=coding-plan#/efm/coding-plan-index) or [Alibaba Cloud ModelStudio (intl)](https://modelstudio.console.alibabacloud.com/?tab=coding-plan#/efm/coding-plan-index).
 
 </details>
 
@@ -561,6 +561,7 @@ The most commonly used top-level fields in `settings.json`:
 
 Looking for a graphical interface?
 
+- [**Qwen Code Desktop**](https://github.com/QwenLM/qwen-code/releases/tag/desktop-latest) Official desktop app for macOS, Windows, and Linux
 - [**AionUi**](https://github.com/iOfficeAI/AionUi) A modern GUI for command-line AI tools including Qwen Code
 - [**Gemini CLI Desktop**](https://github.com/Piebald-AI/gemini-cli-desktop) A cross-platform desktop/web/mobile UI for Qwen Code
 

package/bundled/qc-helper/docs/features/channels/feishu.md

@@ -11,11 +11,25 @@ This guide covers setting up a Qwen Code channel on Feishu (飞书) / Lark.
 
 1. Go to the [Feishu Open Platform](https://open.feishu.cn)
 2. Create a new application (or use an existing one)
+
+![](https://gw.alicdn.com/imgextra/i4/O1CN01ORb10i1JM0MQfhnsV_!!6000000001013-2-tps-2219-931.png)
+
 3. Under the application, enable the **Bot** capability (添加应用能力 → 机器人)
+
+![](https://gw.alicdn.com/imgextra/i4/O1CN01bClpxu1FZxyH4kNjJ_!!6000000000502-2-tps-2219-931.png)
+
 4. In **Event Subscriptions** (事件与回调), select **Long Connection** (使用长连接接收事件)
+
+![](https://gw.alicdn.com/imgextra/i1/O1CN01uIwzbl1ph8Kwq7hTI_!!6000000005391-2-tps-2219-1166.png)
+
 5. Add the event `im.message.receive_v1` (接收消息)
+
+![](https://gw.alicdn.com/imgextra/i2/O1CN01n7sZmV28s6WX0aDhw_!!6000000007987-2-tps-2219-1090.png)
+
 6. Note the **App ID** (Client ID) and **App Secret** (Client Secret) from the application credentials page
 
+![](https://gw.alicdn.com/imgextra/i2/O1CN01ag1yBh1DxfEUb4xmE_!!6000000000283-2-tps-2219-1166.png)
+
 ### Required Permissions
 
 Enable the following permissions under **Permissions & Scopes** (权限管理):
@@ -28,6 +42,8 @@ Enable the following permissions under **Permissions & Scopes** (权限管理):
 
 After configuring permissions and events, create a version and publish it. The bot won't work until the application is published and approved.
 
+![](https://gw.alicdn.com/imgextra/i1/O1CN01GbNRcj1lVuACnkV6M_!!6000000004825-2-tps-2219-1090.png)
+
 ## Configuration
 
 Add the channel to `~/.qwen/settings.json`:

package/bundled/qc-helper/docs/features/mcp.md

@@ -281,7 +281,7 @@ OAuth configuration properties:
 
 OAuth tokens are automatically:
 
-- **Stored securely** in `~/.qwen/mcp-oauth-tokens.json`
+- **Stored securely** in `~/.qwen/mcp-oauth-tokens-v2.json` (AES-256-GCM encrypted), with keychain storage preferred when available
 - **Refreshed** when expired (if refresh tokens are available)
 - **Validated** before each connection attempt
 

package/bundled/qc-helper/docs/qwen-serve.md

@@ -70,18 +70,29 @@ curl http://127.0.0.1:4170/health
 # → {"status":"ok"}
 
 curl http://127.0.0.1:4170/capabilities
-# → {"v":1,"mode":"http-bridge","features":["health","capabilities","session_create",...],"workspaceCwd":"/path/to/your-project"}
+# → {"v":1,"mode":"http-bridge","features":["health","daemon_status","capabilities","session_create",...],"workspaceCwd":"/path/to/your-project"}
+
+curl http://127.0.0.1:4170/daemon/status
+# → {"v":1,"detail":"summary","status":"ok","runtime":{...}}
 ```
 
 The `workspaceCwd` field surfaces the bound workspace so clients can pre-flight check + omit `cwd` on `POST /session`.
 The `limits.maxPendingPromptsPerSession` field advertises the active per-session prompt admission cap; `null` means the cap is disabled.
 
-The daemon also exposes read-only runtime snapshots for client UIs:
-`GET /workspace/mcp`, `GET /workspace/skills`, `GET /workspace/providers`,
-`GET /workspace/env`, `GET /workspace/preflight`,
+The daemon also exposes read-only runtime snapshots for client UIs and
+operators: `GET /daemon/status`, `GET /workspace/mcp`,
+`GET /workspace/skills`, `GET /workspace/providers`, `GET /workspace/env`,
+`GET /workspace/preflight`,
 `GET /session/:id/context`, `GET /session/:id/supported-commands`, and
 `GET /session/:id/tasks`.
 
+`GET /daemon/status` is the consolidated troubleshooting snapshot. The default
+`detail=summary` reads only in-memory daemon state (sessions, permissions,
+SSE/ACP transport counts, rate limit rejects, process memory, resolved limits)
+and does not start the ACP child. Use `GET /daemon/status?detail=full` for
+per-session diagnostics, ACP connection details, auth device-flow counts, and
+workspace status sections when you are actively investigating a problem.
+
 `GET /workspace/mcp`, `GET /workspace/skills`, and `GET /workspace/providers`
 report the live ACP runtime and do not start the ACP child when idle; an
 idle daemon returns `initialized: false` with an empty snapshot. Once a
@@ -320,9 +331,9 @@ To handle multiple **users** (each with their own quota, audit log, sandbox) or
 
 The daemon exposes ACP's `session/load` and resume flow over HTTP via two routes:
 
-| Route                      | Use when                                                                                                                                                                                                                      |
-| -------------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
-| `POST /session/:id/load`   | The client has **no** history rendered (cold reconnect, picker-then-open). The daemon replays every persisted turn through SSE so subscribers see the full transcript. Capability tag: `session_load`.                        |
+| Route                      | Use when                                                                                                                                                                                                                                                                                      |
+| -------------------------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
+| `POST /session/:id/load`   | The client has **no** history rendered (cold reconnect, picker-then-open). The daemon replays every persisted turn through SSE so subscribers see the full transcript. Capability tag: `session_load`.                                                                                        |
 | `POST /session/:id/resume` | The client already has the turns on screen and only needs the daemon-side handle back. Model context is restored on the agent side without UI replay — the SSE stream stays clean. Capability tag: `session_resume` (`unstable_session_resume` remains a deprecated alias for older clients). |
 
 The TypeScript SDK exposes both as static factories on `DaemonSessionClient`:

package/bundled/review/SKILL.md

@@ -573,20 +573,24 @@ gh api repos/{owner}/{repo}/pulls/{pr_number}/reviews \
   --input .qwen/tmp/qwen-review-{target}-review.json
 ```
 
-If there are **no confirmed findings**, submit a single-line review. Use `event=APPROVE` by default; if the presubmit JSON has `downgradeApprove=true`, use `event=COMMENT` and prepend the downgrade reasons to the body:
+If there are **no confirmed findings**, submit a short summary review. Use `event=APPROVE` by default; if the presubmit JSON has `downgradeApprove=true`, use `event=COMMENT` and prepend the downgrade reasons to the body. Separate the footer from the body with a blank line so it renders on its own line — `-f body` does not interpret `\n`, so use a real line break inside the quotes:
 
 ```bash
 # downgradeApprove=false (non-self PR, green CI):
 gh api repos/{owner}/{repo}/pulls/{pr_number}/reviews \
   -f commit_id="{commit_sha}" \
   -f event="APPROVE" \
-  -f body="No issues found. LGTM! ✅ _— YOUR_MODEL_ID via Qwen Code /review_"
+  -f body="No issues found. LGTM! ✅
+
+_— YOUR_MODEL_ID via Qwen Code /review_"
 
 # downgradeApprove=true (self-PR, CI failing, or CI still running):
 gh api repos/{owner}/{repo}/pulls/{pr_number}/reviews \
   -f commit_id="{commit_sha}" \
   -f event="COMMENT" \
-  -f body="No review findings. Downgraded from Approve to Comment: <downgradeReasons joined with '; '>. _— YOUR_MODEL_ID via Qwen Code /review_"
+  -f body="No review findings. Downgraded from Approve to Comment: <downgradeReasons joined with '; '>.
+
+_— YOUR_MODEL_ID via Qwen Code /review_"
 ```
 
 Clean up the JSON file in Step 11.

package/chunks/{agent-WK5GYOPC.js → agent-ZLVQLNIP.js}

@@ -7,9 +7,9 @@ import {
   hasRebuiltToolRegistry,
   rebuildToolRegistryOnOverride,
   resolveSubagentApprovalMode
-} from "./chunk-Q3NN2XUW.js";
+} from "./chunk-UKLVRIWE.js";
 import "./chunk-K5PGHDBN.js";
-import "./chunk-VXHYMZXW.js";
+import "./chunk-VIEIRAK3.js";
 import "./chunk-O4PICXES.js";
 import "./chunk-TW522KN6.js";
 import "./chunk-BJ5HQ23U.js";
@@ -23,14 +23,14 @@ import "./chunk-CPVI5J2L.js";
 import "./chunk-ZMIBJS45.js";
 import "./chunk-77WXWU44.js";
 import "./chunk-B4ZF2KSI.js";
-import "./chunk-E322ZT4P.js";
+import "./chunk-L6F7VZPZ.js";
 import "./chunk-3PJXIDKI.js";
 import "./chunk-UWCTAVOD.js";
 import "./chunk-OFEVLU4C.js";
 import "./chunk-IQHSD7K5.js";
 import "./chunk-LYRSMKLS.js";
-import "./chunk-26QELEL2.js";
-import "./chunk-6WPY6ES3.js";
+import "./chunk-RTTAC5VW.js";
+import "./chunk-ZNUMXPNK.js";
 import "./chunk-IDYDPBBN.js";
 import "./chunk-FIQECJTQ.js";
 import "./chunk-64WXLC72.js";

package/chunks/{agent-headless-KZJALDQF.js → agent-headless-H4ZT46GX.js}

@@ -4,9 +4,9 @@ import {
   AgentHeadless,
   ContextState,
   templateString
-} from "./chunk-Q3NN2XUW.js";
+} from "./chunk-UKLVRIWE.js";
 import "./chunk-K5PGHDBN.js";
-import "./chunk-VXHYMZXW.js";
+import "./chunk-VIEIRAK3.js";
 import "./chunk-O4PICXES.js";
 import "./chunk-TW522KN6.js";
 import "./chunk-BJ5HQ23U.js";
@@ -20,14 +20,14 @@ import "./chunk-CPVI5J2L.js";
 import "./chunk-ZMIBJS45.js";
 import "./chunk-77WXWU44.js";
 import "./chunk-B4ZF2KSI.js";
-import "./chunk-E322ZT4P.js";
+import "./chunk-L6F7VZPZ.js";
 import "./chunk-3PJXIDKI.js";
 import "./chunk-UWCTAVOD.js";
 import "./chunk-OFEVLU4C.js";
 import "./chunk-IQHSD7K5.js";
 import "./chunk-LYRSMKLS.js";
-import "./chunk-26QELEL2.js";
-import "./chunk-6WPY6ES3.js";
+import "./chunk-RTTAC5VW.js";
+import "./chunk-ZNUMXPNK.js";
 import "./chunk-IDYDPBBN.js";
 import "./chunk-FIQECJTQ.js";
 import "./chunk-64WXLC72.js";

package/chunks/{anthropicContentGenerator-DCI26OQF.js → anthropicContentGenerator-KLBHYGH6.js}

@@ -6,7 +6,7 @@ import {
 } from "./chunk-KQIKOTQJ.js";
 import {
   RequestTokenizer
-} from "./chunk-3NRO6NHX.js";
+} from "./chunk-MN5RAXVB.js";
 import {
   Blob,
   File,

package/chunks/{askUserQuestion-NDNFGC35.js → askUserQuestion-QPZXR3UO.js}

@@ -9,7 +9,7 @@ import {
   BaseToolInvocation,
   ToolDisplayNames,
   ToolNames
-} from "./chunk-6WPY6ES3.js";
+} from "./chunk-ZNUMXPNK.js";
 import {
   createDebugLogger
 } from "./chunk-HA2UEYZP.js";

package/chunks/{chunk-27STU35P.js → chunk-BRU4Z5BG.js}

@@ -6,7 +6,7 @@ import {
   getLanguageSettingsOptions,
   t,
   writeStderrLine
-} from "./chunk-BW7CMDF3.js";
+} from "./chunk-R53CLQY7.js";
 import {
   DEFAULT_STOP_HOOK_BLOCK_CAP,
   DEFAULT_TOOL_OUTPUT_BATCH_BUDGET,
@@ -17,11 +17,11 @@ import {
   SkillError,
   ideContextStore,
   require_main
-} from "./chunk-Q3NN2XUW.js";
+} from "./chunk-UKLVRIWE.js";
 import {
   isWithinRoot,
   stripRuntimeSnapshotPrefix
-} from "./chunk-E322ZT4P.js";
+} from "./chunk-L6F7VZPZ.js";
 import {
   atomicWriteFileSync
 } from "./chunk-LXYWINWF.js";
@@ -19966,7 +19966,7 @@ __name(getPackageJson, "getPackageJson");
 // packages/cli/src/utils/version.ts
 async function getCliVersion() {
   const pkgJson = await getPackageJson();
-  return "0.18.1-preview.0";
+  return "0.18.1-preview.1";
 }
 __name(getCliVersion, "getCliVersion");
 
@@ -20108,6 +20108,10 @@ function createLoadedSettingsAdapter(settings, scope) {
 }
 __name(createLoadedSettingsAdapter, "createLoadedSettingsAdapter");
 
+// packages/acp-bridge/src/bridgeTypes.ts
+init_esbuild_shims();
+var MID_TURN_QUEUE_DRAIN_METHOD = "craft/drainMidTurnQueue";
+
 // packages/cli/src/utils/systemInfo.ts
 init_esbuild_shims();
 import process4 from "node:process";
@@ -20116,7 +20120,7 @@ import { execFile } from "node:child_process";
 
 // packages/cli/src/generated/git-commit.ts
 init_esbuild_shims();
-var GIT_COMMIT_INFO = "d638823b9";
+var GIT_COMMIT_INFO = "4d9e554b7";
 
 // packages/cli/src/utils/systemInfo.ts
 var debugLogger4 = createDebugLogger("STATUS");
@@ -20379,6 +20383,7 @@ export {
   ACP_PREFLIGHT_KINDS,
   createIdleAcpPreflightCells,
   mapDomainErrorToErrorKind,
+  MID_TURN_QUEUE_DRAIN_METHOD,
   formatMemoryUsage,
   formatRelativeTime,
   formatTokenCount,

package/chunks/{chunk-JZFEL3RB.js → chunk-C64WAJOC.js}

@@ -2,7 +2,7 @@
 "use strict";
 import {
   ToolNames
-} from "./chunk-6WPY6ES3.js";
+} from "./chunk-ZNUMXPNK.js";
 import {
   init_esbuild_shims
 } from "./chunk-A4BMJM77.js";

package/chunks/{chunk-DYCU43TE.js → chunk-HISY5FYZ.js}

@@ -2,21 +2,21 @@
 "use strict";
 import {
   t
-} from "./chunk-BW7CMDF3.js";
+} from "./chunk-R53CLQY7.js";
 import {
   computeThresholds,
   getCoreSystemPrompt
-} from "./chunk-Q3NN2XUW.js";
+} from "./chunk-UKLVRIWE.js";
 import {
   buildSkillLlmContent
 } from "./chunk-CPVI5J2L.js";
 import {
   DiscoveredMCPTool,
   uiTelemetryService
-} from "./chunk-E322ZT4P.js";
+} from "./chunk-L6F7VZPZ.js";
 import {
   ToolNames
-} from "./chunk-6WPY6ES3.js";
+} from "./chunk-ZNUMXPNK.js";
 import {
   DEFAULT_TOKEN_LIMIT
 } from "./chunk-LYSND7KR.js";

package/chunks/{chunk-E322ZT4P.js → chunk-L6F7VZPZ.js}

@@ -26,13 +26,13 @@ import {
 } from "./chunk-LYRSMKLS.js";
 import {
   STRUCTURED_OUTPUT_REDACTED_ARGS
-} from "./chunk-26QELEL2.js";
+} from "./chunk-RTTAC5VW.js";
 import {
   BaseDeclarativeTool,
   BaseToolInvocation,
   ToolDisplayNames,
   ToolNames
-} from "./chunk-6WPY6ES3.js";
+} from "./chunk-ZNUMXPNK.js";
 import {
   atomicWriteFile
 } from "./chunk-LXYWINWF.js";
@@ -72004,11 +72004,11 @@ async function createContentGenerator(generatorConfig, config, isInitialAuth) {
   let baseGenerator;
   try {
     if (authType === "openai" /* USE_OPENAI */) {
-      const { createOpenAIContentGenerator } = await import("./openaiContentGenerator-P772OZ6K.js");
+      const { createOpenAIContentGenerator } = await import("./openaiContentGenerator-BPRGR5FJ.js");
       baseGenerator = createOpenAIContentGenerator(generatorConfig, config);
     } else if (authType === "qwen-oauth" /* QWEN_OAUTH */) {
       const { getQwenOAuthClient: getQwenOauthClient } = await import("./qwenOAuth2-KK433U33.js");
-      const { QwenContentGenerator } = await import("./qwenContentGenerator-Y6YGZRHH.js");
+      const { QwenContentGenerator } = await import("./qwenContentGenerator-ENMXX47B.js");
       try {
         const qwenClient = await getQwenOauthClient(
           config,
@@ -72026,10 +72026,10 @@ async function createContentGenerator(generatorConfig, config, isInitialAuth) {
         throw new Error(error instanceof Error ? error.message : String(error));
       }
     } else if (authType === "anthropic" /* USE_ANTHROPIC */) {
-      const { createAnthropicContentGenerator } = await import("./anthropicContentGenerator-DCI26OQF.js");
+      const { createAnthropicContentGenerator } = await import("./anthropicContentGenerator-KLBHYGH6.js");
       baseGenerator = createAnthropicContentGenerator(generatorConfig, config);
     } else if (authType === "gemini" /* USE_GEMINI */ || authType === "vertex-ai" /* USE_VERTEX_AI */) {
-      const { createGeminiContentGenerator } = await import("./geminiContentGenerator-7D2QZ5FE.js");
+      const { createGeminiContentGenerator } = await import("./geminiContentGenerator-E2LZQIFZ.js");
       baseGenerator = createGeminiContentGenerator(generatorConfig, config);
     } else {
       throw new Error(

package/chunks/{chunk-3NRO6NHX.js → chunk-MN5RAXVB.js}

@@ -307,11 +307,11 @@ var ImageTokenizer = class _ImageTokenizer {
       if (entryOffset + 12 > buffer.length) break;
       const tag = isLittleEndian ? buffer.readUInt16LE(entryOffset) : buffer.readUInt16BE(entryOffset);
       const type = isLittleEndian ? buffer.readUInt16LE(entryOffset + 2) : buffer.readUInt16BE(entryOffset + 2);
-      const value = isLittleEndian ? buffer.readUInt32LE(entryOffset + 8) : buffer.readUInt32BE(entryOffset + 8);
+      const value = type === 3 ? isLittleEndian ? buffer.readUInt16LE(entryOffset + 8) : buffer.readUInt16BE(entryOffset + 8) : isLittleEndian ? buffer.readUInt32LE(entryOffset + 8) : buffer.readUInt32BE(entryOffset + 8);
       if (tag === 256) {
-        width = type === 3 ? value : value;
+        width = value;
       } else if (tag === 257) {
-        height = type === 3 ? value : value;
+        height = value;
       }
       if (width > 0 && height > 0) break;
     }

package/chunks/{chunk-RLFLJVHU.js → chunk-Q6WOQSR4.js}

@@ -2,12 +2,12 @@
 "use strict";
 import {
   RequestTokenizer
-} from "./chunk-3NRO6NHX.js";
+} from "./chunk-MN5RAXVB.js";
 import {
   OpenAIContentConverter,
   TaggedThinkingParser,
   openaiRequestCaptureContext
-} from "./chunk-E322ZT4P.js";
+} from "./chunk-L6F7VZPZ.js";
 import {
   createChildAbortController
 } from "./chunk-64WXLC72.js";

package/chunks/{chunk-BW7CMDF3.js → chunk-R53CLQY7.js}

@@ -2,7 +2,7 @@
 "use strict";
 import {
   resolveBundleDir
-} from "./chunk-Q3NN2XUW.js";
+} from "./chunk-UKLVRIWE.js";
 import {
   Storage
 } from "./chunk-HA2UEYZP.js";

package/chunks/{chunk-26QELEL2.js → chunk-RTTAC5VW.js}

@@ -5,7 +5,7 @@ import {
   BaseToolInvocation,
   ToolDisplayNames,
   ToolNames
-} from "./chunk-6WPY6ES3.js";
+} from "./chunk-ZNUMXPNK.js";
 import {
   init_esbuild_shims
 } from "./chunk-A4BMJM77.js";