@qwen-code/qwen-code 0.18.3-preview.0 → 0.18.4-preview.0

package/chunks/{workflow-AIC3XOX5.js → workflow-CDROZNXC.js}

@@ -7,52 +7,54 @@ import {
   WorkspaceContext,
   generateAgentWorktreeSlug,
   rebuildToolRegistryOnOverride,
+  stripAnsiAndControl,
   writeWorktreeSessionMarker
-} from "./chunk-VFW7VM7A.js";
+} from "./chunk-MP436DDQ.js";
 import "./chunk-K5PGHDBN.js";
-import "./chunk-VIEIRAK3.js";
-import "./chunk-O4PICXES.js";
-import "./chunk-TW522KN6.js";
-import "./chunk-BJ5HQ23U.js";
-import "./chunk-SFRV6BGY.js";
-import "./chunk-ZOFNJQNJ.js";
-import "./chunk-WPTCDQN6.js";
-import "./chunk-OMX7CUOE.js";
+import "./chunk-7GX7XYZU.js";
+import "./chunk-7OCZ77KA.js";
+import "./chunk-2ES3D3TW.js";
+import "./chunk-2MPVVENX.js";
+import "./chunk-ZTQ26VBE.js";
+import "./chunk-4HMWGHPP.js";
+import "./chunk-4TW2JM5Q.js";
+import "./chunk-M5VYHAHT.js";
 import "./chunk-MLZQVCF3.js";
 import "./chunk-LD2XBG6Z.js";
-import "./chunk-CPVI5J2L.js";
-import "./chunk-ZMIBJS45.js";
+import "./chunk-JIJBNW4A.js";
+import "./chunk-E5SRTXRG.js";
 import "./chunk-77WXWU44.js";
-import "./chunk-B4ZF2KSI.js";
-import "./chunk-P5CE42XM.js";
+import "./chunk-WWU2KUSR.js";
+import "./chunk-JP3LQIMW.js";
 import "./chunk-3PJXIDKI.js";
 import "./chunk-UWCTAVOD.js";
 import "./chunk-OFEVLU4C.js";
-import "./chunk-IQHSD7K5.js";
-import "./chunk-LYRSMKLS.js";
+import "./chunk-OMX7CUOE.js";
+import "./chunk-FPZF3BNV.js";
+import "./chunk-VWPDSQZY.js";
 import {
   SyntheticOutputTool
-} from "./chunk-RTTAC5VW.js";
+} from "./chunk-AQDPHFDZ.js";
 import {
   BaseDeclarativeTool,
   BaseToolInvocation,
   ToolDisplayNames,
   ToolNames
-} from "./chunk-ZNUMXPNK.js";
-import "./chunk-IDYDPBBN.js";
-import "./chunk-FIQECJTQ.js";
+} from "./chunk-JJHY7NAD.js";
+import "./chunk-DZCZZPCY.js";
+import "./chunk-F6FP3URI.js";
 import {
   createChildAbortController
 } from "./chunk-64WXLC72.js";
-import "./chunk-LXYWINWF.js";
-import "./chunk-NNIYWQIS.js";
-import "./chunk-LYSND7KR.js";
+import "./chunk-N5QHMPZU.js";
+import "./chunk-HU3RKEK2.js";
+import "./chunk-PTGKSUUJ.js";
 import "./chunk-55ZMG67I.js";
 import "./chunk-H6BD2ELD.js";
 import "./chunk-5IFG2VC4.js";
 import {
   createDebugLogger
-} from "./chunk-HA2UEYZP.js";
+} from "./chunk-IKOWINH4.js";
 import "./chunk-ZERZSAZL.js";
 import "./chunk-QN5NZ3UQ.js";
 import "./chunk-BR4QREVK.js";
@@ -726,6 +728,91 @@ ${stripped}
 }
 __name(createWorkflowSandbox, "createWorkflowSandbox");
 
+// packages/core/src/agents/runtime/workflow-budget.ts
+init_esbuild_shims();
+var debugLogger2 = createDebugLogger("WORKFLOW_BUDGET");
+var MAX_TOKENS_PER_WORKFLOW_ENV = "QWEN_CODE_MAX_TOKENS_PER_WORKFLOW";
+var HARD_MAX_TOKENS_CEILING = 1e8;
+function resolveMaxTokensPerWorkflow(env = process.env) {
+  const raw = env[MAX_TOKENS_PER_WORKFLOW_ENV];
+  if (raw === void 0 || raw.trim() === "") {
+    return null;
+  }
+  const parsed = Number(raw);
+  if (!Number.isInteger(parsed) || parsed < 1) {
+    debugLogger2.warn(
+      `Invalid ${MAX_TOKENS_PER_WORKFLOW_ENV}=${JSON.stringify(raw)}, treating as unset (no cap)`
+    );
+    return null;
+  }
+  if (parsed > HARD_MAX_TOKENS_CEILING) {
+    debugLogger2.warn(
+      `${MAX_TOKENS_PER_WORKFLOW_ENV}=${parsed} exceeds hard ceiling (${HARD_MAX_TOKENS_CEILING}); clamping.`
+    );
+    return HARD_MAX_TOKENS_CEILING;
+  }
+  return parsed;
+}
+__name(resolveMaxTokensPerWorkflow, "resolveMaxTokensPerWorkflow");
+var WorkflowBudgetImpl = class _WorkflowBudgetImpl {
+  static {
+    __name(this, "WorkflowBudgetImpl");
+  }
+  total;
+  _spent;
+  constructor(total) {
+    this.total = total;
+    this._spent = 0;
+  }
+  spent() {
+    return this._spent;
+  }
+  remaining() {
+    if (this.total === null) return Infinity;
+    return Math.max(0, this.total - this._spent);
+  }
+  /**
+   * Host-side increment. NOT exposed to the script — the
+   * `WorkflowBudget` interface deliberately omits any setter so a
+   * malicious workflow cannot inflate / deflate the budget. Only the
+   * orchestrator (in `countedDispatch`) calls this after a dispatch
+   * resolves with the agent's output token count.
+   *
+   * Non-positive deltas are silently dropped (some dispatches return
+   * `output_tokens: 0` on early failures); negative deltas would be a
+   * caller bug and are also dropped rather than silently rewinding
+   * the counter.
+   */
+  recordSpent(deltaTokens) {
+    if (!Number.isFinite(deltaTokens) || deltaTokens <= 0) return;
+    this._spent += deltaTokens;
+  }
+  /**
+   * Factory: build a budget from the current environment. Convenience
+   * over `new WorkflowBudgetImpl(resolveMaxTokensPerWorkflow(env))`.
+   */
+  static fromEnv(env = process.env) {
+    return new _WorkflowBudgetImpl(resolveMaxTokensPerWorkflow(env));
+  }
+};
+var WorkflowBudgetExceededError = class extends Error {
+  static {
+    __name(this, "WorkflowBudgetExceededError");
+  }
+  name = "WorkflowBudgetExceededError";
+  runId;
+  budgetTotal;
+  spent;
+  constructor(runId, budgetTotal, spent) {
+    super(
+      `Workflow ${runId} exceeded the token budget (${spent} / ${budgetTotal} output tokens spent).`
+    );
+    this.runId = runId;
+    this.budgetTotal = budgetTotal;
+    this.spent = spent;
+  }
+};
+
 // packages/core/src/agents/runtime/workflow-prompts.ts
 init_esbuild_shims();
 var WORKFLOW_SUBAGENT_SYSTEM_PROMPT = 'You are a subagent spawned by a workflow orchestration script. Use the tools available to complete the task.\nCRITICAL: Your final text response is returned **verbatim** as a string to the calling script \u2014 it is your return value, not a message to a human.\n- Output the literal result (data, JSON, text). Do NOT output confirmations like "Done." or "Sent."\n- If asked for JSON, return ONLY the raw JSON \u2014 no code fences, no prose, no markdown.\n- Do NOT use SendUserMessage to deliver your answer. Put your answer in your final text response.\n- Be concise. The script will parse your output.';
@@ -854,12 +941,12 @@ function generateRunId() {
 }
 __name(generateRunId, "generateRunId");
 function sanitizeForErrorMessage(value) {
-  return value.replace(/[\u0000-\u001f\u007f]+/g, " ");
+  return stripAnsiAndControl(value);
 }
 __name(sanitizeForErrorMessage, "sanitizeForErrorMessage");
-function createProductionDispatch(config, signal) {
+function createProductionDispatch(config, signal, onTokens) {
   return async (prompt, opts) => {
-    const { AgentHeadless, ContextState } = await import("./agent-headless-7FQ7NX6G.js");
+    const { AgentHeadless, ContextState } = await import("./agent-headless-5SGQIWGS.js");
     const ctx = new ContextState();
     ctx.set("task_prompt", prompt);
     if (opts.agentType === void 0 && opts.model === void 0 && opts.isolation === void 0 && opts.schema === void 0) {
@@ -884,7 +971,11 @@ function createProductionDispatch(config, signal) {
         // deliver its answer via user message instead of the script's read.
         { tools: ["*"], disallowedTools: WORKFLOW_SUBAGENT_DISALLOWED_TOOLS }
       );
-      await subagent.execute(ctx, signal);
+      try {
+        await subagent.execute(ctx, signal);
+      } finally {
+        reportTokens(subagent, opts, onTokens);
+      }
       const mode = subagent.getTerminateMode();
       if (mode !== "GOAL" /* GOAL */) {
         throw new Error(
@@ -893,11 +984,21 @@ function createProductionDispatch(config, signal) {
       }
       return subagent.getFinalText();
     }
-    return runOverridePath(config, ctx, opts, signal);
+    return runOverridePath(config, ctx, opts, signal, onTokens);
   };
 }
 __name(createProductionDispatch, "createProductionDispatch");
-async function runOverridePath(config, ctx, opts, signal) {
+function reportTokens(subagent, opts, onTokens) {
+  if (!onTokens) return;
+  try {
+    const summary = subagent.getExecutionSummary();
+    onTokens(summary.outputTokens, opts);
+  } catch (e) {
+    debugLogger.warn("onTokens callback threw:", e);
+  }
+}
+__name(reportTokens, "reportTokens");
+async function runOverridePath(config, ctx, opts, signal, onTokens) {
   if (opts.isolation === "remote") {
     throw new Error(
       "agent({isolation:'remote'}) is not available in this build."
@@ -994,7 +1095,11 @@ ${WORKFLOW_SUBAGENT_SYSTEM_PROMPT_WITH_SCHEMA}` : WORKFLOW_SUBAGENT_SYSTEM_PROMP
       }
     );
     try {
-      await subagent.execute(ctx, dispatchSignal);
+      try {
+        await subagent.execute(ctx, dispatchSignal);
+      } finally {
+        reportTokens(subagent, opts, onTokens);
+      }
       if (schemaState) {
         if (schemaState.result !== null) {
           if (worktreeIsolation) {
@@ -1261,7 +1366,16 @@ var WorkflowOrchestrator = class {
     const limiter = createConcurrencyLimiter(resolveConcurrencyLimit(), signal);
     let agentCount = 0;
     const emitter = req.emitter;
+    const budget = req.budget;
     const countedDispatch = /* @__PURE__ */ __name((prompt, opts) => {
+      if (budget && budget.total !== null && budget.remaining() <= 0) {
+        debugLogger.warn(
+          `[Workflow] budget gate refused dispatch at entry: runId=${runId} spent=${budget.spent()} total=${budget.total}`
+        );
+        return Promise.reject(
+          new WorkflowBudgetExceededError(runId, budget.total, budget.spent())
+        );
+      }
       agentCount += 1;
       if (agentCount > maxAgents) {
         return Promise.reject(
@@ -1276,13 +1390,32 @@ var WorkflowOrchestrator = class {
       } catch (e) {
         debugLogger.warn("emitter.agentDispatched threw:", e);
       }
-      return limiter.run(() => this.dispatch(prompt, opts)).then(
+      return limiter.run(() => {
+        if (budget && budget.total !== null && budget.remaining() <= 0) {
+          debugLogger.warn(
+            `[Workflow] budget gate refused dispatch at slot-acquire: runId=${runId} spent=${budget.spent()} total=${budget.total}`
+          );
+          throw new WorkflowBudgetExceededError(
+            runId,
+            budget.total,
+            budget.spent()
+          );
+        }
+        return this.dispatch(prompt, opts);
+      }).then(
         (result) => {
           try {
             emitter?.agentCompleted?.(label);
           } catch (e) {
             debugLogger.warn("emitter.agentCompleted threw:", e);
           }
+          if (budget) {
+            try {
+              emitter?.budgetUpdated?.(budget.spent(), budget.total);
+            } catch (e) {
+              debugLogger.warn("emitter.budgetUpdated threw:", e);
+            }
+          }
           return result;
         },
         (err) => {
@@ -1292,6 +1425,13 @@ var WorkflowOrchestrator = class {
           } catch (e) {
             debugLogger.warn("emitter.agentCompleted threw:", e);
           }
+          if (budget) {
+            try {
+              emitter?.budgetUpdated?.(budget.spent(), budget.total);
+            } catch (e) {
+              debugLogger.warn("emitter.budgetUpdated threw:", e);
+            }
+          }
           throw err;
         }
       );
@@ -1304,7 +1444,8 @@ var WorkflowOrchestrator = class {
       parallel: parallelImpl,
       pipeline: pipelineImpl,
       abortOnTimeout: req.abortOnTimeout,
-      emitter
+      emitter,
+      budget
     });
     try {
       const result = await sandbox.run(req.script);
@@ -1441,7 +1582,15 @@ var WorkflowToolInvocation = class extends BaseToolInvocation {
   }
   async execute(signal, updateOutput, _shellExecutionConfig) {
     const dispatchController = createChildAbortController(signal);
-    const dispatch = this.toolOptions.dispatch ?? createProductionDispatch(this.config, dispatchController.signal);
+    const budget = WorkflowBudgetImpl.fromEnv();
+    const dispatch = this.toolOptions.dispatch ?? createProductionDispatch(
+      this.config,
+      dispatchController.signal,
+      // P5 T3: production-dispatch onTokens callback. Test-injected
+      // dispatches (`toolOptions.dispatch`) handle their own
+      // recording — they don't surface stats the same way.
+      (outputTokens) => budget.recordSpent(outputTokens)
+    );
     const orchestrator = new WorkflowOrchestrator(dispatch);
     const runId = `wf_${randomBytes2(8).toString("hex")}`;
     const registry = this.config.getWorkflowRunRegistry?.();
@@ -1453,7 +1602,11 @@ var WorkflowToolInvocation = class extends BaseToolInvocation {
       startTime: Date.now(),
       outputFile: "",
       // P4b reserves the field but doesn't materialize
-      abortController: dispatchController
+      abortController: dispatchController,
+      // P5: seed the cap so the dialog can render the `M / N` form
+      // immediately, before the first `budgetUpdated` fires. Stays
+      // `null` when no env override.
+      tokenBudgetTotal: budget.total
     });
     const emitter = {
       phaseStarted: /* @__PURE__ */ __name((title) => {
@@ -1466,10 +1619,13 @@ var WorkflowToolInvocation = class extends BaseToolInvocation {
       }, "agentDispatched"),
       agentCompleted: /* @__PURE__ */ __name(() => {
         registry?.onAgentCompleted(runId);
-        safeEmitUpdate(updateOutput, registryEntry);
       }, "agentCompleted"),
       logAppended: /* @__PURE__ */ __name(() => {
-      }, "logAppended")
+      }, "logAppended"),
+      budgetUpdated: /* @__PURE__ */ __name((spent, total) => {
+        registry?.onBudgetUpdated(runId, spent, total);
+        safeEmitUpdate(updateOutput, registryEntry);
+      }, "budgetUpdated")
     };
     try {
       const outcome = await orchestrator.run({
@@ -1477,7 +1633,8 @@ var WorkflowToolInvocation = class extends BaseToolInvocation {
         args: this.params.args,
         abortOnTimeout: dispatchController,
         runId,
-        emitter
+        emitter,
+        budget
       });
       if (registryEntry) {
         registryEntry.meta = outcome.meta;
@@ -1487,17 +1644,34 @@ var WorkflowToolInvocation = class extends BaseToolInvocation {
       }
       registry?.setRecentLogs(runId, outcome.logs);
       registry?.complete(runId, outcome.result, Date.now());
+      const usageBanner = resolveUsageBanner(
+        this.config,
+        registry,
+        budget.total
+      );
       const llmText = safeStringifyResult(outcome.result);
       const displayJson = safeStringifyDisplayPayload({
         runId: outcome.runId,
         ...outcome.meta ? { meta: outcome.meta } : {},
         phases: outcome.phases,
         logs: outcome.logs,
-        result: outcome.result
+        result: outcome.result,
+        // P5: surface the per-run token total in the terminal display so
+        // the user sees actual usage even without opening the dialog.
+        // P5 R1 (#11): align with `buildLivePhaseTreeDisplay` — include
+        // tokens whenever ANY usage is reported OR a cap is set, not
+        // only when spend > 0. A capped-but-zero-spend run still wants
+        // the cap visible so the user sees the gate engaged.
+        ...budget.spent() > 0 || budget.total !== null ? {
+          tokens: {
+            spent: budget.spent(),
+            total: budget.total
+          }
+        } : {}
       });
       return {
         llmContent: [{ text: llmText }],
-        returnDisplay: "```json\n" + displayJson + "\n```"
+        returnDisplay: usageBanner + "```json\n" + displayJson + "\n```"
       };
     } catch (err) {
       const message = extractErrorMessage2(err);
@@ -1543,6 +1717,12 @@ function buildLivePhaseTreeDisplay(entry) {
     agentsDispatched: entry.agentsDispatched,
     agentsCompleted: entry.agentsCompleted
   };
+  if (entry.tokensSpent > 0 || entry.tokenBudgetTotal !== null) {
+    payload["tokens"] = {
+      spent: entry.tokensSpent,
+      total: entry.tokenBudgetTotal
+    };
+  }
   try {
     return "```json\n" + JSON.stringify(payload, null, 2) + "\n```";
   } catch {
@@ -1550,6 +1730,24 @@ function buildLivePhaseTreeDisplay(entry) {
   }
 }
 __name(buildLivePhaseTreeDisplay, "buildLivePhaseTreeDisplay");
+function resolveUsageBanner(config, registry, budgetTotal) {
+  if (!registry) return "";
+  if (config.getSkipWorkflowUsageWarning?.()) return "";
+  if (!registry.shouldShowUsageWarning()) return "";
+  return buildUsageBanner(budgetTotal);
+}
+__name(resolveUsageBanner, "resolveUsageBanner");
+function buildUsageBanner(total) {
+  if (total === null) {
+    return `> Workflows have no per-run token cap. Set \`${MAX_TOKENS_PER_WORKFLOW_ENV}=<n>\` (env) for a soft cap. Suppress this notice with \`skipWorkflowUsageWarning: true\` in settings.
+
+`;
+  }
+  return `> Workflow token cap is ${total} (per \`${MAX_TOKENS_PER_WORKFLOW_ENV}\`). Suppress this notice with \`skipWorkflowUsageWarning: true\` in settings.
+
+`;
+}
+__name(buildUsageBanner, "buildUsageBanner");
 function safeEmitUpdate(updateOutput, entry) {
   if (!updateOutput || !entry) return;
   try {
@@ -1637,3 +1835,8 @@ export {
  * Copyright 2025 Qwen
  * SPDX-License-Identifier: Apache-2.0
  */
+/**
+ * @license
+ * Copyright 2026 Qwen Team
+ * SPDX-License-Identifier: Apache-2.0
+ */

package/chunks/{write-file-6GIRRW43.js → write-file-QY4X7MMO.js}

@@ -1,60 +1,59 @@
 // Force strict mode and setup for ESM
 "use strict";
-import {
-  StructuredToolError,
-  checkPriorRead
-} from "./chunk-C64WAJOC.js";
 import {
   CommitAttributionService,
   DEFAULT_DIFF_OPTIONS,
   FileEncoding,
+  StructuredToolError,
+  checkPriorRead,
   createPatch,
   detectLineEnding,
   getDiffStat,
   needsUtf8Bom
-} from "./chunk-VFW7VM7A.js";
+} from "./chunk-MP436DDQ.js";
 import "./chunk-K5PGHDBN.js";
-import "./chunk-VIEIRAK3.js";
-import "./chunk-O4PICXES.js";
-import "./chunk-TW522KN6.js";
-import "./chunk-BJ5HQ23U.js";
-import "./chunk-SFRV6BGY.js";
-import "./chunk-ZOFNJQNJ.js";
-import "./chunk-WPTCDQN6.js";
-import "./chunk-OMX7CUOE.js";
+import "./chunk-7GX7XYZU.js";
+import "./chunk-7OCZ77KA.js";
+import "./chunk-2ES3D3TW.js";
+import "./chunk-2MPVVENX.js";
+import "./chunk-ZTQ26VBE.js";
+import "./chunk-4HMWGHPP.js";
+import "./chunk-4TW2JM5Q.js";
+import "./chunk-M5VYHAHT.js";
 import "./chunk-MLZQVCF3.js";
 import "./chunk-LD2XBG6Z.js";
-import "./chunk-CPVI5J2L.js";
-import "./chunk-ZMIBJS45.js";
+import "./chunk-JIJBNW4A.js";
+import "./chunk-E5SRTXRG.js";
 import "./chunk-77WXWU44.js";
-import "./chunk-B4ZF2KSI.js";
+import "./chunk-WWU2KUSR.js";
 import {
   FileOperationEvent,
   fileExists,
   getLanguageFromFilePath,
   getSpecificMimeType,
   logFileOperation
-} from "./chunk-P5CE42XM.js";
+} from "./chunk-JP3LQIMW.js";
 import "./chunk-3PJXIDKI.js";
 import "./chunk-UWCTAVOD.js";
 import "./chunk-OFEVLU4C.js";
+import "./chunk-OMX7CUOE.js";
 import {
   isAnyAutoMemPath
-} from "./chunk-IQHSD7K5.js";
-import "./chunk-LYRSMKLS.js";
-import "./chunk-RTTAC5VW.js";
+} from "./chunk-FPZF3BNV.js";
+import "./chunk-VWPDSQZY.js";
+import "./chunk-AQDPHFDZ.js";
 import {
   BaseDeclarativeTool,
   BaseToolInvocation,
   ToolDisplayNames,
   ToolNames
-} from "./chunk-ZNUMXPNK.js";
-import "./chunk-IDYDPBBN.js";
-import "./chunk-FIQECJTQ.js";
+} from "./chunk-JJHY7NAD.js";
+import "./chunk-DZCZZPCY.js";
+import "./chunk-F6FP3URI.js";
 import "./chunk-64WXLC72.js";
-import "./chunk-LXYWINWF.js";
-import "./chunk-NNIYWQIS.js";
-import "./chunk-LYSND7KR.js";
+import "./chunk-N5QHMPZU.js";
+import "./chunk-HU3RKEK2.js";
+import "./chunk-PTGKSUUJ.js";
 import "./chunk-55ZMG67I.js";
 import "./chunk-H6BD2ELD.js";
 import "./chunk-5IFG2VC4.js";
@@ -65,7 +64,7 @@ import {
   makeRelative,
   shortenPath,
   unescapePath
-} from "./chunk-HA2UEYZP.js";
+} from "./chunk-IKOWINH4.js";
 import "./chunk-ZERZSAZL.js";
 import "./chunk-QN5NZ3UQ.js";
 import "./chunk-BR4QREVK.js";