@qwen-code/qwen-code 0.19.7 → 0.19.8-nightly.20260710.205430235

package/chunks/{chunk-VEB3NYSO.js → chunk-ZJQBTFJ6.js}

@@ -6,7 +6,7 @@ import {
 } from "./chunk-GO6LNQXT.js";
 import {
   ToolNames
-} from "./chunk-X3YGAX7V.js";
+} from "./chunk-KS2FRTYI.js";
 import {
   init_esbuild_shims
 } from "./chunk-A4BMJM77.js";
@@ -108,6 +108,10 @@ function buildWorktreeNotice(parentCwd, worktreeCwd) {
   return `You are operating in an isolated git worktree at ${worktreeCwd}. The parent agent is in ${parentCwd}. Same repository, same relative file layout, separate working copy. All your file edits, writes, and shell commands MUST target paths under ${worktreeCwd}. When the inherited context references a path under ${parentCwd}, translate it to the corresponding path under ${worktreeCwd} before acting on it. Re-read any file you intend to edit (the parent may have modified it after the snapshot in your context). Your changes stay in this worktree and do not affect the parent's working tree.`;
 }
 __name(buildWorktreeNotice, "buildWorktreeNotice");
+function buildPinnedWorktreeNotice(worktreeCwd) {
+  return `Your working directory is ${worktreeCwd}, a git worktree checked out to the code you have been asked to work on. Relative paths, shell commands, and searches already resolve there \u2014 do not \`cd\` elsewhere and do not prefix paths with the parent's directory. Do not operate on the parent's checkout.`;
+}
+__name(buildPinnedWorktreeNotice, "buildPinnedWorktreeNotice");
 function buildChildMessage(directive) {
   return `<${FORK_BOILERPLATE_TAG}>
 STOP. READ THIS FIRST.
@@ -316,6 +320,7 @@ export {
   buildFunctionResponseParts,
   buildForkedMessages,
   buildWorktreeNotice,
+  buildPinnedWorktreeNotice,
   buildChildMessage,
   runWithAgentContext,
   runWithRuntimeContentGenerator,

package/chunks/chunk-ZL5HN75Q.js

@@ -0,0 +1,61 @@
+// Force strict mode and setup for ESM
+"use strict";
+import {
+  TotalSessionLimitExceededError
+} from "./chunk-GGQQA4JW.js";
+import {
+  init_esbuild_shims
+} from "./chunk-A4BMJM77.js";
+import {
+  __name
+} from "./chunk-J2S4EL5Y.js";
+
+// packages/cli/src/serve/total-session-admission.ts
+init_esbuild_shims();
+function createTotalSessionAdmissionController({
+  maxTotalSessions,
+  getBridges
+}) {
+  let inFlight = 0;
+  const limit = maxTotalSessions === void 0 || maxTotalSessions === 0 || maxTotalSessions === Number.POSITIVE_INFINITY ? Number.POSITIVE_INFINITY : maxTotalSessions;
+  return {
+    admit(context) {
+      if (limit !== Number.POSITIVE_INFINITY) {
+        if (getLiveCount(getBridges()) + inFlight >= limit) {
+          throw Object.assign(new TotalSessionLimitExceededError(limit), {
+            operation: context.operation,
+            workspaceCwd: context.workspaceCwd,
+            ...context.sessionId ? { sessionId: context.sessionId } : {},
+            ...context.sourceSessionId ? { sourceSessionId: context.sourceSessionId } : {}
+          });
+        }
+      }
+      inFlight++;
+      let released = false;
+      return {
+        release() {
+          if (released) return;
+          released = true;
+          inFlight--;
+        }
+      };
+    },
+    snapshot() {
+      return { liveCount: getLiveCount(getBridges()), inFlight };
+    }
+  };
+}
+__name(createTotalSessionAdmissionController, "createTotalSessionAdmissionController");
+function getLiveCount(bridges) {
+  return bridges.reduce((sum, bridge) => sum + bridge.sessionCount, 0);
+}
+__name(getLiveCount, "getLiveCount");
+
+export {
+  createTotalSessionAdmissionController
+};
+/**
+ * @license
+ * Copyright 2026 Qwen Team
+ * SPDX-License-Identifier: Apache-2.0
+ */

package/chunks/{computer-use-X4KUU3NM.js → computer-use-IW5XBECT.js}

@@ -4,22 +4,22 @@ import {
   Client,
   So,
   StdioClientTransport
-} from "./chunk-YEGT55NW.js";
+} from "./chunk-ZDAZSR2O.js";
 import "./chunk-5P5XGNYH.js";
 import "./chunk-SKAZWEV5.js";
 import "./chunk-K5PGHDBN.js";
-import "./chunk-3B26UVCX.js";
+import "./chunk-2GUVUHJY.js";
 import "./chunk-W7EEOR7D.js";
 import "./chunk-42XGFRJS.js";
 import "./chunk-X2XNQQJI.js";
-import "./chunk-VZ7HY3YU.js";
+import "./chunk-IAMRWMFU.js";
 import "./chunk-2MPVVENX.js";
 import "./chunk-ZTQ26VBE.js";
-import "./chunk-FV7425LN.js";
+import "./chunk-2SZOMGOR.js";
 import "./chunk-MLZQVCF3.js";
 import "./chunk-LQ7TMOCE.js";
 import "./chunk-E5A7LHNN.js";
-import "./chunk-VEB3NYSO.js";
+import "./chunk-ZJQBTFJ6.js";
 import "./chunk-GO6LNQXT.js";
 import "./chunk-NQKLOAVJ.js";
 import "./chunk-WMPVYQ4P.js";
@@ -27,25 +27,25 @@ import "./chunk-TLWA7TPR.js";
 import "./chunk-QYNNN7BK.js";
 import {
   safeJsonStringify
-} from "./chunk-GMOWQOQQ.js";
+} from "./chunk-5ZVIYNLN.js";
 import "./chunk-E6US47KI.js";
 import "./chunk-UWCTAVOD.js";
 import "./chunk-OFEVLU4C.js";
 import "./chunk-OMX7CUOE.js";
-import "./chunk-4KJ2BPIT.js";
+import "./chunk-OACJLMLD.js";
 import "./chunk-SUAKHHK7.js";
-import "./chunk-FEJ2FZ3U.js";
+import "./chunk-NY2ZOFMM.js";
 import {
   BaseDeclarativeTool,
   BaseToolInvocation
-} from "./chunk-X3YGAX7V.js";
+} from "./chunk-KS2FRTYI.js";
 import "./chunk-IJRL2S3D.js";
 import "./chunk-AHNJGLFV.js";
 import "./chunk-22IFUCVR.js";
 import "./chunk-7LTB54MK.js";
 import "./chunk-SIUQ3YYX.js";
 import "./chunk-HW4N45EE.js";
-import "./chunk-CCGOFQV3.js";
+import "./chunk-SS5P6JM6.js";
 import "./chunk-IRJWHZWU.js";
 import "./chunk-SYCJMSIJ.js";
 import "./chunk-55ZMG67I.js";

package/chunks/{contextCommand-LAYJZF7H.js → contextCommand-4QPLK2SH.js}

@@ -4,49 +4,49 @@ import {
   collectContextData,
   contextCommand,
   formatContextUsageText
-} from "./chunk-BWVQN2HV.js";
+} from "./chunk-WTEIUA2V.js";
 import "./chunk-UIDXQNMV.js";
-import "./chunk-SAIILPQ3.js";
+import "./chunk-KJMYXFUR.js";
 import "./chunk-KYMBIKIW.js";
-import "./chunk-QAKFYMJI.js";
-import "./chunk-Y6Z2O3WR.js";
-import "./chunk-YEGT55NW.js";
+import "./chunk-UOXLB2LY.js";
+import "./chunk-JM7BYJO5.js";
+import "./chunk-ZDAZSR2O.js";
 import "./chunk-5P5XGNYH.js";
 import "./chunk-SKAZWEV5.js";
 import "./chunk-K5PGHDBN.js";
-import "./chunk-3B26UVCX.js";
+import "./chunk-2GUVUHJY.js";
 import "./chunk-W7EEOR7D.js";
 import "./chunk-42XGFRJS.js";
 import "./chunk-X2XNQQJI.js";
-import "./chunk-VZ7HY3YU.js";
+import "./chunk-IAMRWMFU.js";
 import "./chunk-2MPVVENX.js";
 import "./chunk-ZTQ26VBE.js";
-import "./chunk-FV7425LN.js";
+import "./chunk-2SZOMGOR.js";
 import "./chunk-MLZQVCF3.js";
 import "./chunk-LQ7TMOCE.js";
 import "./chunk-E5A7LHNN.js";
-import "./chunk-VEB3NYSO.js";
+import "./chunk-ZJQBTFJ6.js";
 import "./chunk-GO6LNQXT.js";
 import "./chunk-NQKLOAVJ.js";
 import "./chunk-WMPVYQ4P.js";
 import "./chunk-TLWA7TPR.js";
 import "./chunk-QYNNN7BK.js";
-import "./chunk-GMOWQOQQ.js";
+import "./chunk-5ZVIYNLN.js";
 import "./chunk-E6US47KI.js";
 import "./chunk-UWCTAVOD.js";
 import "./chunk-OFEVLU4C.js";
 import "./chunk-OMX7CUOE.js";
-import "./chunk-4KJ2BPIT.js";
+import "./chunk-OACJLMLD.js";
 import "./chunk-SUAKHHK7.js";
-import "./chunk-FEJ2FZ3U.js";
-import "./chunk-X3YGAX7V.js";
+import "./chunk-NY2ZOFMM.js";
+import "./chunk-KS2FRTYI.js";
 import "./chunk-IJRL2S3D.js";
 import "./chunk-AHNJGLFV.js";
 import "./chunk-22IFUCVR.js";
 import "./chunk-7LTB54MK.js";
 import "./chunk-SIUQ3YYX.js";
 import "./chunk-HW4N45EE.js";
-import "./chunk-CCGOFQV3.js";
+import "./chunk-SS5P6JM6.js";
 import "./chunk-IRJWHZWU.js";
 import "./chunk-SYCJMSIJ.js";
 import "./chunk-55ZMG67I.js";

package/chunks/create-sub-session-7JK3EYWA.js

@@ -0,0 +1,212 @@
+// Force strict mode and setup for ESM
+"use strict";
+import {
+  BaseDeclarativeTool,
+  BaseToolInvocation,
+  ToolDisplayNames,
+  ToolNames
+} from "./chunk-KS2FRTYI.js";
+import "./chunk-22MNNNXE.js";
+import "./chunk-Z2Z3GUXZ.js";
+import {
+  init_esbuild_shims
+} from "./chunk-A4BMJM77.js";
+import {
+  __name
+} from "./chunk-J2S4EL5Y.js";
+
+// packages/core/src/tools/create-sub-session.ts
+init_esbuild_shims();
+var DAEMON_ONLY_MESSAGE = "create_sub_session is only available when running under `qwen serve` (daemon mode). There is no session bridge in this environment, so a sub-session cannot be spawned.";
+var MAX_SUB_SESSION_PROMPT_CHARS = 1e5;
+var CANCELLED = Symbol("create_sub_session:cancelled");
+async function raceCancellation(start, signal) {
+  if (signal.aborted) return CANCELLED;
+  const spawn = start();
+  void spawn.catch(() => {
+  });
+  return new Promise((resolve, reject) => {
+    const onAbort = /* @__PURE__ */ __name(() => resolve(CANCELLED), "onAbort");
+    signal.addEventListener("abort", onAbort, { once: true });
+    spawn.then(
+      (value) => {
+        signal.removeEventListener("abort", onAbort);
+        resolve(value);
+      },
+      (err) => {
+        signal.removeEventListener("abort", onAbort);
+        reject(err);
+      }
+    );
+  });
+}
+__name(raceCancellation, "raceCancellation");
+var CreateSubSessionInvocation = class extends BaseToolInvocation {
+  constructor(config, params) {
+    super(params);
+    this.config = config;
+  }
+  static {
+    __name(this, "CreateSubSessionInvocation");
+  }
+  getDescription() {
+    const mode = this.params.completion ?? "first-turn";
+    const raw = this.params.name ?? this.params.prompt;
+    const cleaned = raw.replace(/[\r\n\t\x00-\x1f]/g, " ").trim();
+    const label = cleaned.length > 80 ? cleaned.slice(0, 77) + "\u2026" : cleaned;
+    return `[${mode}] ${label}`;
+  }
+  /**
+   * `create_sub_session` runs a model-authored prompt with full tool access in
+   * a fresh session — the same privileged-sink shape as `cron_create`,
+   * `send_message` and `task_create`, which all return `'ask'`. The L3 default
+   * must NOT be `'allow'`: AUTO mode short-circuits before the L5 classifier
+   * when `finalPermission === 'allow'`, and DEFAULT mode skips confirmation,
+   * so the delegated prompt would never be reviewed. `'ask'` lets AUTO route
+   * the call through the classifier, which resolves it without a human.
+   *
+   * This gate applies to MODEL-initiated calls only. An `isolated` scheduled
+   * task is dispatched daemon-side (`Session.#dispatchIsolatedCronFire`) without
+   * going through the tool, so an unattended fire never blocks on a permission
+   * request nobody is there to answer. Its prompt was approved when the task was
+   * created; laundering it back through the model would re-open that gate.
+   */
+  async getDefaultPermission() {
+    return "ask";
+  }
+  async execute(signal) {
+    const spawner = this.config.getSubSessionSpawner();
+    if (!spawner) {
+      return {
+        llmContent: DAEMON_ONLY_MESSAGE,
+        returnDisplay: "Unavailable (daemon-only)",
+        error: { message: DAEMON_ONLY_MESSAGE }
+      };
+    }
+    const completion = this.params.completion ?? "first-turn";
+    const prompt = this.params.prompt.trim();
+    let spawnStarted = false;
+    try {
+      const res = await raceCancellation(() => {
+        spawnStarted = true;
+        return spawner({
+          prompt,
+          completion,
+          ...this.params.model ? { model: this.params.model } : {},
+          ...this.params.name ? { name: this.params.name } : {}
+        });
+      }, signal);
+      if (res === CANCELLED) {
+        const message = spawnStarted ? "create_sub_session was cancelled. A sub-session may already have been created; it runs independently and is not cancelled." : "create_sub_session was cancelled before it started. No sub-session was created.";
+        return { llmContent: message, returnDisplay: "Cancelled" };
+      }
+      const sessionLink = `[\u{1F9F5} ${res.sessionId.slice(0, 8)}](qwen-session://${res.sessionId})`;
+      if (completion === "sent") {
+        return {
+          llmContent: `Sub-session ${sessionLink} created and the prompt was dispatched. It runs independently \u2014 this call did not wait for a result.`,
+          returnDisplay: `${sessionLink} started`
+        };
+      }
+      const stop = res.stopReason ? ` (stopReason: ${res.stopReason})` : "";
+      const body = res.result && res.result.length > 0 ? res.result : `Sub-session ${sessionLink} completed its first turn but produced no text output.`;
+      return {
+        llmContent: `Sub-session ${sessionLink} first-turn result${stop}:
+
+${body}`,
+        returnDisplay: `${sessionLink} completed${stop}`
+      };
+    } catch (error) {
+      const message = error instanceof Error ? error.message : String(error);
+      return {
+        llmContent: `Error creating sub-session: ${message}`,
+        returnDisplay: message,
+        error: { message }
+      };
+    }
+  }
+};
+var CreateSubSessionTool = class _CreateSubSessionTool extends BaseDeclarativeTool {
+  constructor(config) {
+    super(
+      _CreateSubSessionTool.Name,
+      ToolDisplayNames.CREATE_SUB_SESSION,
+      "Spawn a fresh, independent sub-session (its own clean context and transcript) and run a prompt in it. Use to fan work out into a separate session \u2014 e.g. a self-contained sub-task you want isolated from this conversation.\n\nONLY available when running under `qwen serve` (daemon mode); it is inert in a plain interactive session.\n\n## Completion modes\n- `first-turn` (default): waits for the sub-session's first turn to finish and returns its result to you. Use when you need the answer back.\n- `sent`: returns immediately after dispatching the prompt, without waiting. Use for fire-and-forget launches whose output you do not need inline.\n\nThe sub-session runs the prompt with full tool access, starting from zero context \u2014 brief it completely in `prompt` (it cannot see this conversation).",
+      "other" /* Other */,
+      {
+        type: "object",
+        properties: {
+          prompt: {
+            type: "string",
+            description: "The full, self-contained prompt to run in the new sub-session. It starts with no context from this conversation, so include everything it needs."
+          },
+          completion: {
+            type: "string",
+            enum: ["sent", "first-turn"],
+            description: "'first-turn' (default) waits for the sub-session's first turn and returns its result. 'sent' returns immediately after the prompt is dispatched (fire-and-forget)."
+          },
+          model: {
+            type: "string",
+            description: "Optional model service id for the sub-session. Omit to use the default model."
+          },
+          name: {
+            type: "string",
+            description: "Optional display name for the sub-session in the session list."
+          }
+        },
+        required: ["prompt"],
+        additionalProperties: false
+      },
+      true,
+      // isOutputMarkdown
+      false,
+      // canUpdateOutput
+      true,
+      // shouldDefer — spawning is infrequent
+      false,
+      // alwaysLoad
+      "sub-session spawn delegate fan-out isolated session"
+    );
+    this.config = config;
+  }
+  static {
+    __name(this, "CreateSubSessionTool");
+  }
+  static Name = ToolNames.CREATE_SUB_SESSION;
+  createInvocation(params) {
+    return new CreateSubSessionInvocation(this.config, params);
+  }
+  validateToolParamValues(params) {
+    if (!params.prompt || params.prompt.trim() === "") {
+      return 'Parameter "prompt" must be a non-empty string.';
+    }
+    if (params.prompt.length > MAX_SUB_SESSION_PROMPT_CHARS) {
+      return `Parameter "prompt" exceeds the ${MAX_SUB_SESSION_PROMPT_CHARS}-character limit.`;
+    }
+    if (params.completion !== void 0 && params.completion !== "sent" && params.completion !== "first-turn") {
+      return 'Parameter "completion" must be "sent" or "first-turn".';
+    }
+    return null;
+  }
+  /**
+   * Surface the delegated prompt + mode to the AUTO classifier. The sub-session
+   * executes this prompt with tool access, so it must face the same scrutiny as
+   * a direct command — without this the classifier sees `create_sub_session({})`
+   * and is blind to what the sub-session will be asked to do.
+   */
+  toAutoClassifierInput(params) {
+    return {
+      prompt: params.prompt,
+      completion: params.completion ?? "first-turn",
+      ...params.model ? { model: params.model } : {}
+    };
+  }
+};
+export {
+  CreateSubSessionTool,
+  MAX_SUB_SESSION_PROMPT_CHARS
+};
+/**
+ * @license
+ * Copyright 2025 Qwen Team
+ * SPDX-License-Identifier: Apache-2.0
+ */