@qwen-code/qwen-code 0.19.2 → 0.19.3-nightly.20260701.a974594d7

package/chunks/{chunk-PRYMDRBV.js → chunk-NPQWQYU6.js}

@@ -2,7 +2,7 @@
 "use strict";
 import {
   createDebugLogger
-} from "./chunk-C4K3FEQ2.js";
+} from "./chunk-AVQDCKNF.js";
 import {
   init_esbuild_shims
 } from "./chunk-A4BMJM77.js";

package/chunks/{chunk-J6AW7O5D.js → chunk-NVTRORSK.js}

@@ -2,10 +2,10 @@
 "use strict";
 import {
   functionResponsePartsToString
-} from "./chunk-2TJ3YN6Q.js";
+} from "./chunk-NOYV2NXI.js";
 import {
   parseAndFormatApiError
-} from "./chunk-PXFFKNCO.js";
+} from "./chunk-35FH347N.js";
 import {
   init_esbuild_shims
 } from "./chunk-A4BMJM77.js";

package/chunks/{chunk-PF523XJX.js → chunk-OE5J6UA7.js}

@@ -2,7 +2,7 @@
 "use strict";
 import {
   registerCleanup
-} from "./chunk-GYZQA2FO.js";
+} from "./chunk-WJAY4WXR.js";
 import {
   init_esbuild_shims
 } from "./chunk-A4BMJM77.js";

package/chunks/{chunk-RS4HRC75.js → chunk-OEY3YAL2.js}

@@ -2,15 +2,16 @@
 "use strict";
 import {
   resolveModelConfig,
+  resolveProviderProtocol,
   stripRuntimeSnapshotPrefix
-} from "./chunk-PXFFKNCO.js";
+} from "./chunk-35FH347N.js";
 import {
   external_exports
 } from "./chunk-K5PGHDBN.js";
 import {
   AuthType,
   MODEL_GENERATION_CONFIG_FIELDS
-} from "./chunk-WA5OJGFL.js";
+} from "./chunk-B5MPZI4K.js";
 import {
   init_esbuild_shims
 } from "./chunk-A4BMJM77.js";
@@ -102,6 +103,19 @@ function parseAcpModelOption(input) {
   return { modelId: trimmed };
 }
 __name(parseAcpModelOption, "parseAcpModelOption");
+function isInlineModelOverrideAllowed(config, modelId) {
+  const contentGeneratorConfig = config.getContentGeneratorConfig();
+  const authType = contentGeneratorConfig?.authType;
+  if (!authType) {
+    return false;
+  }
+  const activeBaseUrl = contentGeneratorConfig.baseUrl;
+  const activeEnvKey = contentGeneratorConfig.apiKeyEnvKey;
+  return config.getAvailableModelsForAuthType(authType).filter((m) => !m.fastOnly && !m.voiceOnly).some(
+    (m) => m.id === modelId && (m.baseUrl ?? void 0) === (activeBaseUrl ?? void 0) && (m.envKey ?? void 0) === (activeEnvKey ?? void 0)
+  );
+}
+__name(isInlineModelOverrideAllowed, "isInlineModelOverrideAllowed");
 
 // packages/cli/src/utils/modelConfigUtils.ts
 init_esbuild_shims();
@@ -112,6 +126,68 @@ var AUTH_ENV_MODEL_VARS = {
   ["anthropic" /* USE_ANTHROPIC */]: ["ANTHROPIC_MODEL"],
   ["qwen-oauth" /* QWEN_OAUTH */]: []
 };
+function collectProviderModelsForProtocol(modelProviders, providerProtocol, protocol) {
+  if (!modelProviders) {
+    return [];
+  }
+  const out = [];
+  for (const [providerId, models] of Object.entries(modelProviders)) {
+    if (!Array.isArray(models)) {
+      continue;
+    }
+    if (resolveProviderProtocol(providerId, providerProtocol) === protocol) {
+      out.push(...models);
+    }
+  }
+  return out;
+}
+__name(collectProviderModelsForProtocol, "collectProviderModelsForProtocol");
+function findProviderIdForModel(modelProviders, providerProtocol, protocol, modelProvider) {
+  if (!modelProviders || !modelProvider) {
+    return void 0;
+  }
+  for (const [providerId, models] of Object.entries(modelProviders)) {
+    if (!Array.isArray(models)) {
+      continue;
+    }
+    if (resolveProviderProtocol(providerId, providerProtocol) !== protocol) {
+      continue;
+    }
+    if (models.includes(modelProvider)) {
+      return providerId;
+    }
+  }
+  return void 0;
+}
+__name(findProviderIdForModel, "findProviderIdForModel");
+function buildSkippedProviderWarnings(modelProviders, providerProtocol) {
+  if (!modelProviders) {
+    return [];
+  }
+  const warnings = [];
+  const known = Object.values(AuthType).join(", ");
+  for (const [providerId, models] of Object.entries(modelProviders)) {
+    if (!Array.isArray(models) || models.length === 0) {
+      continue;
+    }
+    const protocol = resolveProviderProtocol(providerId, providerProtocol);
+    if (protocol === "qwen-oauth" /* QWEN_OAUTH */ && providerId !== "qwen-oauth" /* QWEN_OAUTH */) {
+      warnings.push(
+        `Warning: modelProviders provider "${providerId}" maps to "qwen-oauth" via providerProtocol, but qwen-oauth uses hard-coded models only; its ${models.length} model(s) are ignored.`
+      );
+      continue;
+    }
+    if (protocol !== void 0) {
+      continue;
+    }
+    const mapped = providerProtocol && Object.hasOwn(providerProtocol, providerId) ? providerProtocol[providerId] : void 0;
+    warnings.push(
+      mapped !== void 0 ? `Warning: providerProtocol["${providerId}"] = "${mapped}" is not a known protocol (expected one of: ${known}); its ${models.length} model(s) are ignored.` : `Warning: modelProviders provider "${providerId}" is not a built-in protocol (${known}) and has no providerProtocol mapping; its ${models.length} model(s) are ignored. Add providerProtocol["${providerId}"] (e.g. "openai") to enable them.`
+    );
+  }
+  return warnings;
+}
+__name(buildSkippedProviderWarnings, "buildSkippedProviderWarnings");
 function getIgnoredTopLevelGenerationConfigFields(settingsGenerationConfig, modelProvider) {
   if (!settingsGenerationConfig || !modelProvider) {
     return [];
@@ -122,7 +198,7 @@ function getIgnoredTopLevelGenerationConfigFields(settingsGenerationConfig, mode
   );
 }
 __name(getIgnoredTopLevelGenerationConfigFields, "getIgnoredTopLevelGenerationConfigFields");
-function buildIgnoredTopLevelGenerationConfigWarning(authType, modelProvider, ignoredFields) {
+function buildIgnoredTopLevelGenerationConfigWarning(providerId, modelProvider, ignoredFields) {
   if (ignoredFields.length === 0) {
     return void 0;
   }
@@ -131,7 +207,7 @@ function buildIgnoredTopLevelGenerationConfigWarning(authType, modelProvider, ig
   const verb = isSingular ? "is" : "are";
   const fieldReference = isSingular ? "this field" : "these fields";
   const pronoun = isSingular ? "it" : "them";
-  return `Warning: ${fieldList} ${verb} ignored for provider model "${modelProvider.id}" from modelProviders.${authType}. Move ${fieldReference} to modelProviders.${authType}[].generationConfig for that model if you want ${pronoun} to apply.`;
+  return `Warning: ${fieldList} ${verb} ignored for provider model "${modelProvider.id}" from modelProviders.${providerId}. Move ${fieldReference} to modelProviders.${providerId}[].generationConfig for that model if you want ${pronoun} to apply.`;
 }
 __name(buildIgnoredTopLevelGenerationConfigWarning, "buildIgnoredTopLevelGenerationConfigWarning");
 function getAuthTypeFromEnv() {
@@ -177,8 +253,12 @@ function resolveCliGenerationConfig(inputs) {
   let modelProvider;
   let disambiguationWarning;
   if (resolvedModel && authType && settings.modelProviders) {
-    const providers = settings.modelProviders[authType];
-    if (providers && Array.isArray(providers)) {
+    const providers = collectProviderModelsForProtocol(
+      settings.modelProviders,
+      settings.providerProtocol,
+      authType
+    );
+    if (providers.length > 0) {
       const persistedBaseUrl = settings.model?.baseUrl;
       if (resolvedFromSettings && persistedBaseUrl) {
         const exactMatch = providers.find(
@@ -225,7 +305,12 @@ function resolveCliGenerationConfig(inputs) {
   };
   const resolved = resolveModelConfig(configSources);
   const ignoredGenerationConfigWarning = authType && modelProvider ? buildIgnoredTopLevelGenerationConfigWarning(
-    authType,
+    findProviderIdForModel(
+      settings.modelProviders,
+      settings.providerProtocol,
+      authType,
+      modelProvider
+    ) ?? authType,
     modelProvider,
     getIgnoredTopLevelGenerationConfigFields(
       settings.model?.generationConfig,
@@ -248,7 +333,11 @@ function resolveCliGenerationConfig(inputs) {
     warnings: [
       ...resolved.warnings,
       ...disambiguationWarning ? [disambiguationWarning] : [],
-      ...ignoredGenerationConfigWarning ? [ignoredGenerationConfigWarning] : []
+      ...ignoredGenerationConfigWarning ? [ignoredGenerationConfigWarning] : [],
+      ...buildSkippedProviderWarnings(
+        settings.modelProviders,
+        settings.providerProtocol
+      )
     ]
   };
 }
@@ -259,6 +348,8 @@ export {
   sanitizeProviderBaseUrl,
   parseAcpBaseModelId,
   parseAcpModelOption,
+  isInlineModelOverrideAllowed,
+  collectProviderModelsForProtocol,
   getAuthTypeFromEnv,
   resolveCliGenerationConfig
 };

package/chunks/{chunk-R36VMVEP.js → chunk-PLQTLKMR.js}

@@ -3,24 +3,24 @@
 import {
   AUTO_THEME_NAME,
   themeManager
-} from "./chunk-TMBPDHXD.js";
+} from "./chunk-HTWHAN44.js";
 import {
   initializeI18n,
   resolveLanguageSetting,
   t
-} from "./chunk-5JZLXFPD.js";
+} from "./chunk-3O2BJMFW.js";
 import {
   IdeClient
-} from "./chunk-PXFFKNCO.js";
+} from "./chunk-35FH347N.js";
 import {
   AuthEvent,
   IdeConnectionEvent,
   logAuth,
   logIdeConnection
-} from "./chunk-WA5OJGFL.js";
+} from "./chunk-B5MPZI4K.js";
 import {
   getErrorMessage
-} from "./chunk-C4K3FEQ2.js";
+} from "./chunk-AVQDCKNF.js";
 import {
   init_esbuild_shims
 } from "./chunk-A4BMJM77.js";

package/chunks/{chunk-UN3C6GOR.js → chunk-PPFWEV7G.js}

@@ -4,83 +4,9 @@ import {
   init_esbuild_shims
 } from "./chunk-A4BMJM77.js";
 import {
-  __commonJS,
   __name
 } from "./chunk-J2S4EL5Y.js";
 
-// node_modules/strip-json-comments/index.js
-var require_strip_json_comments = __commonJS({
-  "node_modules/strip-json-comments/index.js"(exports, module) {
-    "use strict";
-    init_esbuild_shims();
-    var singleComment = Symbol("singleComment");
-    var multiComment = Symbol("multiComment");
-    var stripWithoutWhitespace = /* @__PURE__ */ __name(() => "", "stripWithoutWhitespace");
-    var stripWithWhitespace = /* @__PURE__ */ __name((string, start, end) => string.slice(start, end).replace(/\S/g, " "), "stripWithWhitespace");
-    var isEscaped = /* @__PURE__ */ __name((jsonString, quotePosition) => {
-      let index = quotePosition - 1;
-      let backslashCount = 0;
-      while (jsonString[index] === "\\") {
-        index -= 1;
-        backslashCount += 1;
-      }
-      return Boolean(backslashCount % 2);
-    }, "isEscaped");
-    module.exports = (jsonString, options = {}) => {
-      if (typeof jsonString !== "string") {
-        throw new TypeError(`Expected argument \`jsonString\` to be a \`string\`, got \`${typeof jsonString}\``);
-      }
-      const strip = options.whitespace === false ? stripWithoutWhitespace : stripWithWhitespace;
-      let insideString = false;
-      let insideComment = false;
-      let offset = 0;
-      let result = "";
-      for (let i = 0; i < jsonString.length; i++) {
-        const currentCharacter = jsonString[i];
-        const nextCharacter = jsonString[i + 1];
-        if (!insideComment && currentCharacter === '"') {
-          const escaped = isEscaped(jsonString, i);
-          if (!escaped) {
-            insideString = !insideString;
-          }
-        }
-        if (insideString) {
-          continue;
-        }
-        if (!insideComment && currentCharacter + nextCharacter === "//") {
-          result += jsonString.slice(offset, i);
-          offset = i;
-          insideComment = singleComment;
-          i++;
-        } else if (insideComment === singleComment && currentCharacter + nextCharacter === "\r\n") {
-          i++;
-          insideComment = false;
-          result += strip(jsonString, offset, i);
-          offset = i;
-          continue;
-        } else if (insideComment === singleComment && currentCharacter === "\n") {
-          insideComment = false;
-          result += strip(jsonString, offset, i);
-          offset = i;
-        } else if (!insideComment && currentCharacter + nextCharacter === "/*") {
-          result += jsonString.slice(offset, i);
-          offset = i;
-          insideComment = multiComment;
-          i++;
-          continue;
-        } else if (insideComment === multiComment && currentCharacter + nextCharacter === "*/") {
-          i++;
-          insideComment = false;
-          result += strip(jsonString, offset, i + 1);
-          offset = i + 1;
-          continue;
-        }
-      }
-      return result + (insideComment ? strip(jsonString.slice(offset)) : jsonString.slice(offset));
-    };
-  }
-});
-
 // packages/cli/src/config/migration/versions/v1-to-v2-shared.ts
 init_esbuild_shims();
 var V1_TO_V2_MIGRATION_MAP = {
@@ -246,7 +172,16 @@ var PROJECT_ENV_HARDCODED_EXCLUSIONS = [
   "QWEN_CODE_MCP_APPROVALS_PATH",
   "QWEN_CODE_TRUSTED_FOLDERS_PATH",
   ENV_CORRUPTED_PATH,
-  ENV_WAS_RECOVERED
+  ENV_WAS_RECOVERED,
+  // QWEN_TLS_INSECURE (and NODE_TLS_REJECT_UNAUTHORIZED, which it mirrors)
+  // disable TLS certificate verification for all outbound API connections. A
+  // project `.env` must never enable either — that would let an untrusted repo
+  // silently turn off MITM protection. Opt-in stays with the user via the
+  // `--insecure` flag, the shell environment, or a home `.env`. The initial
+  // `.env` load only consults this list, so both keys must be here (not just
+  // RELOAD_EXCLUDED_KEYS, which only applies on reload).
+  "QWEN_TLS_INSECURE",
+  "NODE_TLS_REJECT_UNAUTHORIZED"
 ];
 var HOME_ENV_BOOTSTRAP_KEYS = [
   "QWEN_HOME",
@@ -308,35 +243,6 @@ function getSystemDefaultsPath() {
 }
 __name(getSystemDefaultsPath, "getSystemDefaultsPath");
 
-// packages/cli/src/config/path-comparison.ts
-init_esbuild_shims();
-import * as fs from "node:fs";
-import * as path2 from "node:path";
-function isWithinRoot(childPath, parentPath) {
-  const relativePath = path2.relative(parentPath, childPath);
-  return relativePath === "" || !relativePath.startsWith(`..${path2.sep}`) && relativePath !== ".." && !path2.isAbsolute(relativePath);
-}
-__name(isWithinRoot, "isWithinRoot");
-function getPathComparisonVariants(rawPath) {
-  const variants = /* @__PURE__ */ new Set([path2.normalize(path2.resolve(rawPath))]);
-  try {
-    variants.add(path2.normalize(fs.realpathSync(rawPath)));
-  } catch {
-  }
-  return variants;
-}
-__name(getPathComparisonVariants, "getPathComparisonVariants");
-function arePathsEquivalent(left, right) {
-  const rightVariants = getPathComparisonVariants(right);
-  for (const leftVariant of getPathComparisonVariants(left)) {
-    if (rightVariants.has(leftVariant)) {
-      return true;
-    }
-  }
-  return false;
-}
-__name(arePathsEquivalent, "arePathsEquivalent");
-
 // packages/cli/src/utils/envVarResolver.ts
 init_esbuild_shims();
 function resolveEnvVarsInString(value, customEnv) {
@@ -398,7 +304,6 @@ function resolveEnvVarsInObjectInternal(obj, visited, customEnv) {
 __name(resolveEnvVarsInObjectInternal, "resolveEnvVarsInObjectInternal");
 
 export {
-  require_strip_json_comments,
   V1_TO_V2_MIGRATION_MAP,
   V2_CONTAINER_KEYS,
   V1_TO_V2_PRESERVE_DISABLE_MAP,
@@ -414,9 +319,6 @@ export {
   getGlobalQwenDirLite,
   getSystemSettingsPath,
   getSystemDefaultsPath,
-  isWithinRoot,
-  getPathComparisonVariants,
-  arePathsEquivalent,
   resolveEnvVarsInObject
 };
 /**