@qwen-code/qwen-code 0.19.4 → 0.19.5

package/chunks/chunk-2Z43HUXT.js

@@ -0,0 +1,99 @@
+// Force strict mode and setup for ESM
+"use strict";
+import {
+  init_esbuild_shims
+} from "./chunk-A4BMJM77.js";
+import {
+  __name
+} from "./chunk-J2S4EL5Y.js";
+
+// packages/acp-bridge/src/logRedaction.ts
+init_esbuild_shims();
+var REDACTED = "<redacted>";
+var CREDENTIAL_PATTERNS = [
+  // Bearer tokens (Feishu, Weixin, Daemon SDK).
+  // Charset covers RFC 6750 token68 plus base64 (+, /, =, ~, .).
+  {
+    pattern: /(Bearer\s+)[A-Za-z0-9._~+/=-]+/gi,
+    replacement: `$1${REDACTED}`
+  },
+  // QQ Bot tokens (uses "QQBot" prefix instead of "Bearer")
+  {
+    pattern: /(QQBot\s+)[A-Za-z0-9._~+/=-]+/gi,
+    replacement: `$1${REDACTED}`
+  },
+  // Authorization header catch-all (Basic and single-credential schemes).
+  // Matches "<scheme> <credential>" (up to 2 tokens). Multi-parameter
+  // schemes like Digest are only partially redacted — acceptable since
+  // channel SDKs use Bearer/Basic exclusively.
+  // Must come after Bearer/QQBot so those get the more specific replacement.
+  {
+    pattern: /(Authorization:\s*)\S+(?:\s+\S+)?/gi,
+    replacement: `$1${REDACTED}`
+  },
+  // DingTalk custom access token header
+  {
+    pattern: /(x-acs-dingtalk-access-token:\s*)\S+/gi,
+    replacement: `$1${REDACTED}`
+  },
+  // API keys with common prefixes (≥20 chars to avoid false positives on
+  // short test fixtures like "sk-test"). Includes hyphens for compound
+  // prefixes like sk-proj-, sk-ant-api03-.
+  {
+    pattern: /sk-[a-zA-Z0-9-]{20,}/g,
+    replacement: `sk-${REDACTED}`
+  },
+  // GitHub / GitLab / Slack tokens.
+  // Includes github_pat_ (fine-grained PATs) and ghu_ (app user tokens).
+  // Slack tokens use hyphens as separators: xoxb-NNN-NNN-alphanum.
+  {
+    pattern: /(?:ghp_|gho_|ghs_|ghu_|github_pat_|glpat-|xoxb-|xoxp-)[a-zA-Z0-9_-]{20,}/g,
+    replacement: REDACTED
+  },
+  // AWS access key IDs (permanent AKIA + temporary STS ASIA)
+  {
+    pattern: /(?:AKIA|ASIA)[A-Z0-9]{16}/g,
+    replacement: REDACTED
+  },
+  // Key=value assignments for simple secret names (token=, secret=, etc.)
+  {
+    pattern: /((?:api[_-]?key|token|secret|password|pwd)[_-]?[=:]\s*)\S{10,}/gi,
+    replacement: `$1${REDACTED}`
+  },
+  // Compound env-var keys ending in _KEY, _TOKEN, _SECRET, or _PASSWORD
+  // (e.g. AWS_SECRET_ACCESS_KEY=, QWEN_DAEMON_TOKEN=).
+  // Segment lengths are capped to prevent quadratic backtracking on long
+  // all-uppercase input.
+  {
+    pattern: /([A-Z][A-Z0-9]{0,50}(?:_[A-Z0-9]{1,50}){0,10}_(?:KEY|TOKEN|SECRET|PASSWORD)\s*[=:]\s*)\S{10,}/g,
+    replacement: `$1${REDACTED}`
+  },
+  // JSON-quoted secret fields: "token":"...", "client_secret":"...", etc.
+  // Uses an explicit key list to avoid backtracking on quoted content.
+  {
+    pattern: /("(?:api_key|api-key|apikey|token|secret|password|pwd|access_token|client_secret|app_secret|authorization)"\s*:\s*")[^"]{10,}(")/gi,
+    replacement: `$1${REDACTED}$2`
+  },
+  // URL-embedded credentials (scheme://user:pass@host)
+  {
+    pattern: /\b([a-z][a-z0-9+.-]{0,31}:\/\/)(?:[^/\s]+@)+/gi,
+    replacement: `$1${REDACTED}@`
+  }
+];
+function redactLogCredentials(line) {
+  let result = line;
+  for (const { pattern, replacement } of CREDENTIAL_PATTERNS) {
+    result = result.replace(pattern, replacement);
+  }
+  return result;
+}
+__name(redactLogCredentials, "redactLogCredentials");
+
+export {
+  redactLogCredentials
+};
+/**
+ * @license
+ * Copyright 2025 Qwen Team
+ * SPDX-License-Identifier: Apache-2.0
+ */

package/chunks/{chunk-ZXCVPMIK.js → chunk-4MCC4XHH.js}

@@ -3,13 +3,7 @@
 import {
   isValidSessionId,
   validateAuthMethod
-} from "./chunk-MVZXZWGT.js";
-import {
-  isKittyProtocolEnabled
-} from "./chunk-JZSY4WP3.js";
-import {
-  contextCommand
-} from "./chunk-SFN4TEHY.js";
+} from "./chunk-EJ7BN3EN.js";
 import {
   VSCODE_SHIFT_ENTER_SEQUENCE,
   calculateCost,
@@ -18,24 +12,28 @@ import {
   expandCollapsedHistory,
   filterCommandsForMode,
   getSystemInfoFields,
+  levelLabel,
   useKeypress,
   writeOsc52
-} from "./chunk-75X2VLSH.js";
+} from "./chunk-UJT42DB6.js";
+import {
+  isKittyProtocolEnabled
+} from "./chunk-JZSY4WP3.js";
+import {
+  contextCommand
+} from "./chunk-WZ724G6K.js";
 import {
   isTerminalGoalStatusKind
 } from "./chunk-KSPVDFE4.js";
 import {
   Text
-} from "./chunk-2X2JUE47.js";
+} from "./chunk-XKZXGIRM.js";
 import {
   require_react
 } from "./chunk-KYMBIKIW.js";
 import {
   themeManager
 } from "./chunk-HTWHAN44.js";
-import {
-  getErrorMessage as getErrorMessage2
-} from "./chunk-OAFUMTWW.js";
 import {
   GITHUB_WORKFLOW_PATHS,
   setupGithub
@@ -46,12 +44,23 @@ import {
 import {
   stripUnsafeCharacters,
   toCodePoints
-} from "./chunk-HRZB5CSC.js";
+} from "./chunk-2CAII5HD.js";
+import {
+  formatUnsupportedVoiceModelMessage,
+  getVoiceSettingsScope,
+  isSelectableVoiceModel,
+  isVoiceEnabled,
+  readVoiceMode,
+  readVoiceModel
+} from "./chunk-Y4UQT3PM.js";
+import {
+  getErrorMessage as getErrorMessage2
+} from "./chunk-JJ6B3ZD3.js";
 import {
   getExtendedSystemInfo,
   getGitVersion,
   getNpmVersion
-} from "./chunk-W2ZOAX7F.js";
+} from "./chunk-JKGCBO3O.js";
 import {
   formatDuration,
   formatMemoryUsage,
@@ -60,15 +69,7 @@ import {
 import {
   isInlineModelOverrideAllowed,
   parseAcpModelOption
-} from "./chunk-BQNJBEUA.js";
-import {
-  formatUnsupportedVoiceModelMessage,
-  getVoiceSettingsScope,
-  isSelectableVoiceModel,
-  isVoiceEnabled,
-  readVoiceMode,
-  readVoiceModel
-} from "./chunk-Q7VHIRDD.js";
+} from "./chunk-K4I4STSL.js";
 import {
   OUTPUT_LANGUAGE_AUTO,
   getAllSettingKeys,
@@ -80,7 +81,7 @@ import {
   resolveOutputLanguage,
   validateSettingValue,
   writeOutputLanguageAndRegisterPath
-} from "./chunk-MKHC4BYZ.js";
+} from "./chunk-BC4R5C5R.js";
 import {
   SUPPORTED_LANGUAGES,
   getCurrentLanguage,
@@ -88,16 +89,15 @@ import {
   resolveSupportedLanguage,
   setLanguageAsync,
   t
-} from "./chunk-UQYOMM6J.js";
+} from "./chunk-DM4E337C.js";
 import {
   isFolderTrustEnabled,
   loadTrustedFolders
-} from "./chunk-ZJP5T7IA.js";
+} from "./chunk-Z7XNVNPM.js";
 import {
   require_strip_json_comments
 } from "./chunk-QYUE6W3T.js";
 import {
-  APPROVAL_MODES,
   ArenaManager,
   BTW_MAX_INPUT_LENGTH,
   ConditionalRulesRegistry,
@@ -168,13 +168,16 @@ import {
   stripStartupContext,
   tryGenerateSessionTitle,
   unregisterGoalHook
-} from "./chunk-BFG6OZN7.js";
+} from "./chunk-6QTCOQX7.js";
 import {
   external_exports
 } from "./chunk-K5PGHDBN.js";
 import {
   runSideQuery
-} from "./chunk-MEQWZGK5.js";
+} from "./chunk-L7OJ3ZO3.js";
+import {
+  APPROVAL_MODES
+} from "./chunk-BPFJQGY7.js";
 import {
   applySkillAllowedTools,
   buildSkillLlmContent
@@ -195,16 +198,20 @@ import {
   recordSkillInvocation,
   resolveOpenAILogDir,
   uiTelemetryService
-} from "./chunk-HJDF3ZVU.js";
+} from "./chunk-CHY5C5T4.js";
 import {
   getAutoMemoryRoot
 } from "./chunk-MOUXUCXQ.js";
 import {
   ToolNames
-} from "./chunk-4VZH35PN.js";
+} from "./chunk-MTNTVOJR.js";
 import {
   openBrowserSecurely
 } from "./chunk-22IFUCVR.js";
+import {
+  REASONING_EFFORT_TIERS,
+  normalizeReasoningEffort
+} from "./chunk-SIUQ3YYX.js";
 import {
   Storage,
   createDebugLogger,
@@ -218,7 +225,7 @@ import {
   isCpuProfileRecording,
   startCpuProfile,
   stopCpuProfile
-} from "./chunk-XCUFHOAD.js";
+} from "./chunk-M5ITDKSM.js";
 import {
   init_esbuild_shims
 } from "./chunk-A4BMJM77.js";
@@ -6946,6 +6953,98 @@ var editorCommand = {
   }), "action")
 };
 
+// packages/cli/src/ui/commands/effort-command.ts
+init_esbuild_shims();
+var TIER_LIST = REASONING_EFFORT_TIERS.join(", ");
+var effortCommand = {
+  name: "effort",
+  get description() {
+    return t(
+      "Set how hard reasoning-capable models think ({{tiers}}); mapped and clamped per provider.",
+      { tiers: TIER_LIST }
+    );
+  },
+  // The tiers show up as a placeholder via argumentHint rather than as
+  // autocompletion suggestions: bare `/effort` should open the picker dialog
+  // (no tier auto-selected), while `/effort <tier>` still sets one directly. A
+  // completion function would surface the tiers as submenu-like entries and let
+  // Enter auto-pick the first one, which we don't want here.
+  argumentHint: "[low|medium|high|xhigh|max]",
+  kind: "built-in" /* BUILT_IN */,
+  supportedModes: ["interactive", "non_interactive", "acp"],
+  action: /* @__PURE__ */ __name(async (context, actionArgs) => {
+    const { services } = context;
+    const { config, settings } = services;
+    if (!config) {
+      return {
+        type: "message",
+        messageType: "error",
+        content: t("Configuration not available.")
+      };
+    }
+    const args = context.invocation?.args?.trim() || actionArgs.trim();
+    if (!args) {
+      if (context.executionMode === "interactive") {
+        return { type: "dialog", dialog: "effort" };
+      }
+      const current = config.getReasoningEffort();
+      return {
+        type: "message",
+        messageType: "info",
+        content: current ? t(
+          'Current reasoning effort: {{current}}\nAvailable: {{tiers}}\nUse "/effort <tier>" to change it.',
+          { current, tiers: TIER_LIST }
+        ) : t(
+          'Reasoning effort: not set (using the model/provider default).\nAvailable: {{tiers}}\nUse "/effort <tier>" to set it.',
+          { tiers: TIER_LIST }
+        )
+      };
+    }
+    const tier = normalizeReasoningEffort(args);
+    if (!tier) {
+      return {
+        type: "message",
+        messageType: "error",
+        content: t(
+          'Unknown reasoning effort "{{value}}". Choose one of: {{tiers}}.',
+          { value: args, tiers: TIER_LIST }
+        )
+      };
+    }
+    if (!settings) {
+      return {
+        type: "message",
+        messageType: "error",
+        content: t("Settings service not available.")
+      };
+    }
+    config.setReasoningEffort(tier);
+    settings.setValue(
+      getPersistScopeForModelSelection(settings),
+      "model.reasoningEffort",
+      tier
+    );
+    if (config.getReasoningEffort() !== tier) {
+      return {
+        type: "message",
+        messageType: "info",
+        content: t(
+          "Reasoning effort set to {{tier}}, but thinking is currently disabled \u2014 it will take effect when thinking is re-enabled.",
+          { tier }
+        )
+      };
+    }
+    return {
+      type: "message",
+      messageType: "info",
+      content: t(
+        "Reasoning effort: {{tier}} (requested; the effective tier depends on the active provider/model).",
+        { tier }
+      )
+    };
+  }, "action")
+};
+
 // packages/cli/src/ui/commands/exportCommand.ts
 init_esbuild_shims();
 import * as fs7 from "node:fs/promises";
@@ -7130,7 +7229,7 @@ async function extractMetadata(conversation, config) {
   const gitBranch = firstRecord?.gitBranch;
   let gitRepo;
   if (cwd) {
-    const { getGitRepoName } = await import("./src-OVZLTVVM.js");
+    const { getGitRepoName } = await import("./src-T5A7P7FS.js");
     gitRepo = getGitRepoName(cwd);
   }
   let model;
@@ -12186,14 +12285,21 @@ var skillsCommand = {
   action: /* @__PURE__ */ __name(async (context) => {
     const skillManager = context.services.config?.getSkillManager();
     if (!skillManager) {
-      context.ui.addItem(
-        {
-          type: "error" /* ERROR */,
-          text: t("Could not retrieve skill manager.")
-        },
-        Date.now()
-      );
-      return;
+      if (context.executionMode === "interactive") {
+        context.ui.addItem(
+          {
+            type: "error" /* ERROR */,
+            text: t("Could not retrieve skill manager.")
+          },
+          Date.now()
+        );
+        return;
+      }
+      return {
+        type: "message",
+        messageType: "error",
+        content: t("Could not retrieve skill manager.")
+      };
     }
     if (context.executionMode === "interactive") {
       return { type: "dialog", dialog: "skills_manage" };
@@ -12207,26 +12313,32 @@ var skillsCommand = {
       (s) => !disabled.has(s.name.toLowerCase())
     );
     if (visibleSkills.length === 0) {
-      const text = skills.length > 0 && userInvocableSkills.length === 0 ? t("All skills are marked as non-user-invocable.") : userInvocableSkills.length === 0 ? t("No skills are currently available.") : t(
+      const content = skills.length > 0 && userInvocableSkills.length === 0 ? t("All skills are marked as non-user-invocable.") : userInvocableSkills.length === 0 ? t("No skills are currently available.") : t(
         "All available skills are disabled. Edit ~/.qwen/settings.json or .qwen/settings.json (skills.disabled) to re-enable."
       );
-      context.ui.addItem(
-        {
-          type: "info" /* INFO */,
-          text
-        },
-        Date.now()
-      );
-      return;
+      return {
+        type: "message",
+        messageType: "info",
+        content
+      };
     }
     const sortedSkills = [...visibleSkills].sort(
       (a, b) => normalizeSkillPriority(b.priority) - normalizeSkillPriority(a.priority) || a.name.localeCompare(b.name)
     );
-    const skillsListItem = {
-      type: "skills_list" /* SKILLS_LIST */,
-      skills: sortedSkills.map((skill) => ({ name: skill.name }))
+    const sanitize = /* @__PURE__ */ __name((text, max) => {
+      const oneLine = text.replace(/[\r\n]+/g, " ").trim();
+      return oneLine.length <= max ? oneLine : `${oneLine.slice(0, Math.max(0, max - 1))}\u2026`;
+    }, "sanitize");
+    const lines = sortedSkills.map(
+      (s) => `  - ${s.name}${s.description ? `  ${sanitize(s.description, 80)}` : ""}${s.level ? `  (${levelLabel(s.level)})` : ""}`
+    );
+    return {
+      type: "message",
+      messageType: "info",
+      content: `${t("Available skills:")}
+
+${lines.join("\n")}`
     };
-    context.ui.addItem(skillsListItem, Date.now());
   }, "action")
 };
 
@@ -15479,6 +15591,7 @@ var BuiltinCommandLoader = class {
       doctorCommand,
       directoryCommand,
       editorCommand,
+      effortCommand,
       exportCommand,
       extensionsCommand,
       helpCommand,

package/chunks/{chunk-J3F7X3LW.js → chunk-5B2WNM6V.js}

@@ -2,7 +2,7 @@
 "use strict";
 import {
   getGlobalQwenDir
-} from "./chunk-HI55Z6PR.js";
+} from "./chunk-7DMQRPC7.js";
 import {
   init_esbuild_shims
 } from "./chunk-A4BMJM77.js";

package/chunks/{chunk-VKGG724L.js → chunk-6KPZJJ6U.js}

@@ -3,18 +3,18 @@
 import {
   handleAtCommand,
   resolveAtCommandQuery
-} from "./chunk-MNDTD5E5.js";
+} from "./chunk-SJVPSHXU.js";
 import {
   isAtCommand,
   isBtwCommand,
   isSlashCommand,
   normalizePartList,
   recordGoalStatusItem
-} from "./chunk-ZXCVPMIK.js";
+} from "./chunk-4MCC4XHH.js";
 import {
   SHELL_COMMAND_NAME,
   useSessionStats
-} from "./chunk-TTFNVEO5.js";
+} from "./chunk-IMAMNLY6.js";
 import {
   require_react
 } from "./chunk-KYMBIKIW.js";
@@ -26,10 +26,10 @@ import {
 } from "./chunk-KHDZHZMH.js";
 import {
   isInlineModelOverrideAllowed
-} from "./chunk-BQNJBEUA.js";
+} from "./chunk-K4I4STSL.js";
 import {
   t
-} from "./chunk-UQYOMM6J.js";
+} from "./chunk-DM4E337C.js";
 import {
   AutonomousLoopTickResolver,
   CoreToolScheduler,
@@ -51,7 +51,7 @@ import {
   setActiveGoal,
   shouldRunVisionBridge,
   splitImageParts
-} from "./chunk-BFG6OZN7.js";
+} from "./chunk-6QTCOQX7.js";
 import {
   ApiCancelEvent,
   ConversationFinishedEvent,
@@ -61,13 +61,13 @@ import {
   logConversationFinishedEvent,
   logUserPrompt,
   logUserRetry
-} from "./chunk-HJDF3ZVU.js";
+} from "./chunk-CHY5C5T4.js";
 import {
   isAnyAutoMemPath
 } from "./chunk-MOUXUCXQ.js";
 import {
   ToolNames
-} from "./chunk-4VZH35PN.js";
+} from "./chunk-MTNTVOJR.js";
 import {
   getUnsupportedImageFormatWarning,
   isSupportedImageMimeType
@@ -1321,6 +1321,7 @@ var useGeminiStream = /* @__PURE__ */ __name((geminiClient, history, addItem, co
             id: insertedId,
             text: trimmedQuery
           };
+          await new Promise((r) => setImmediate(r));
         }
         if (isAtCommand(trimmedQuery)) {
           const atCommandResult = await handleAtCommand({