@qwen-code/qwen-code 0.21.0 → 0.21.1-nightly.20260731.702932cc7

package/chunks/{chunk-UUUTRMI2.js → chunk-7ULQIS27.js}

@@ -5,7 +5,7 @@ import {
   BaseToolInvocation,
   ToolDisplayNames,
   ToolNames
-} from "./chunk-PR75REBZ.js";
+} from "./chunk-MM7TH7ZM.js";
 import {
   init_esbuild_shims
 } from "./chunk-5O2XNYP6.js";

package/chunks/{chunk-BKHWX6I2.js → chunk-A5BZ722X.js}

@@ -2,14 +2,14 @@
 "use strict";
 import {
   functionResponsePartsToString
-} from "./chunk-LB6DUZ26.js";
+} from "./chunk-BTWSGZCT.js";
 import {
   parseAndFormatApiError
-} from "./chunk-PHOF65IG.js";
+} from "./chunk-FRXG4ARO.js";
 import {
   formatVisionBridgeNoticeDisplay,
   isVisionBridgeNoticeDisplay
-} from "./chunk-CIKQ7KKO.js";
+} from "./chunk-NVFSGPIF.js";
 import {
   init_esbuild_shims
 } from "./chunk-5O2XNYP6.js";
@@ -925,6 +925,14 @@ function checkResponsePartsForError(responseParts) {
 }
 __name(checkResponsePartsForError, "checkResponsePartsForError");
 function toolResultContent(response) {
+  if (response.visionBridgeNotice) {
+    const content = toolResultContent({
+      ...response,
+      visionBridgeNotice: void 0
+    });
+    return content ? `${response.visionBridgeNotice}
+${content}` : response.visionBridgeNotice;
+  }
   if (isVisionBridgeNoticeDisplay(response.resultDisplay)) {
     const notice = formatVisionBridgeNoticeDisplay(response.resultDisplay);
     if (response.error) {

package/chunks/{chunk-TEHGS6UP.js → chunk-A5T5W7PR.js}

@@ -21,12 +21,12 @@ import {
   getLanguageNameFromLocale,
   getLanguageSettingsOptions,
   t
-} from "./chunk-LKEJ26GS.js";
+} from "./chunk-B3TA3IF5.js";
 import {
   getHomeEnvFallbackVars,
   loadEnvironment,
   preResolveHomeEnvOverrides
-} from "./chunk-LH2BYDQ5.js";
+} from "./chunk-X2E5TFJ5.js";
 import {
   ENV_CORRUPTED_PATH,
   ENV_WAS_RECOVERED
@@ -34,7 +34,7 @@ import {
 import {
   isWorkspaceTrusted,
   updateSettingsFilePreservingFormat
-} from "./chunk-Z2BC6UJ5.js";
+} from "./chunk-UU2B5YG6.js";
 import {
   require_strip_json_comments
 } from "./chunk-ALGGS7UH.js";
@@ -46,23 +46,23 @@ import {
   DEFAULT_TOOL_RESULTS_TOTAL_CHARS_THRESHOLD,
   DEFAULT_TRUNCATE_TOOL_OUTPUT_LINES,
   DEFAULT_TRUNCATE_TOOL_OUTPUT_THRESHOLD
-} from "./chunk-PHOF65IG.js";
+} from "./chunk-FRXG4ARO.js";
 import {
   stripRuntimeSnapshotPrefix
-} from "./chunk-MZAXJAUM.js";
+} from "./chunk-26JK4RPD.js";
 import {
   DEFAULT_QWEN_CUSTOM_IGNORE_FILE_NAMES
-} from "./chunk-M5JM7OSF.js";
+} from "./chunk-N4ACHWNH.js";
 import {
   DEFAULT_SENSITIVE_SPAN_ATTRIBUTE_MAX_LENGTH,
   SENSITIVE_SPAN_ATTRIBUTE_MAX_LENGTH_LIMIT
-} from "./chunk-BULDBTYC.js";
+} from "./chunk-G7XXKQYS.js";
 import {
   FatalConfigError,
   Storage,
   createDebugLogger,
   getErrorMessage
-} from "./chunk-NL7LTRLR.js";
+} from "./chunk-E2BHWIDT.js";
 import {
   init_esbuild_shims
 } from "./chunk-5O2XNYP6.js";
@@ -891,9 +891,9 @@ var SETTINGS_SCHEMA = {
         type: "boolean",
         label: "Virtualized History (reduces flicker on long sessions)",
         category: "UI",
-        requiresRestart: false,
-        default: false,
-        description: "Render conversation history in an in-app scrollable viewport instead of the terminal scrollback buffer. Recommended if you see flicker, scroll-storm, or interface freeze on long sessions, after Ctrl+O, after Ctrl+E / Ctrl+F (expand), after window resize, or when alt-tabbing back. Scroll with Shift+\u2191/\u2193 (line), PgUp/PgDn (page), Ctrl+Home/End (top/bottom), or the mouse wheel. Also enables mouse interactions: click an option in a menu/dialog to select it, hover to highlight it, and click in the prompt to position the cursor. Does NOT use the host terminal scrollback while enabled. Drag to select text in the viewport (double/triple click selects a word/line), copied on release. To use the terminal\u2019s own selection instead, hold Shift (or Option on macOS) while dragging.",
+        requiresRestart: true,
+        default: true,
+        description: "Render conversation history in an in-app scrollable viewport instead of the terminal scrollback buffer. Enabled by default in compatible interactive terminals to avoid flicker, scroll-storm, and interface freeze on long sessions, after Ctrl+O, after Ctrl+E / Ctrl+F (expand), after window resize, or when alt-tabbing back. Screen reader mode and non-interactive output such as piped stdout or CI use append-only terminal output instead. Scroll with Shift+\u2191/\u2193 (line), PgUp/PgDn (page), Ctrl+Home/End (top/bottom), or the mouse wheel. Also enables mouse interactions: click an option in a menu/dialog to select it, hover to highlight it, and click in the prompt to position the cursor. Does NOT use the host terminal scrollback while enabled. Drag to select text in the viewport (double/triple click selects a word/line), copied on release. To use the terminal\u2019s own selection instead, hold Shift (or Option on macOS) while dragging.",
         showInDialog: true
       },
       showScrollbar: {
@@ -1064,6 +1064,10 @@ var SETTINGS_SCHEMA = {
     jsonSchemaOverride: {
       type: "object",
       properties: {
+        userId: {
+          description: "Stable end-user identifier written to GenAI spans as gen_ai.user.id for ARMS session analysis. This value is linkable personal data: prefer a pseudonymous ID, and configure it only when one process represents one user.",
+          type: "string"
+        },
         includeSensitiveSpanAttributes: {
           description: "When enabled, user prompts, system prompts, tool inputs/outputs, and model responses are written to native OTel span attributes in addition to the log-to-span bridge. Warning: this may expose sensitive data (file contents, shell commands, conversation history) to your OTLP backend.",
           type: "boolean",
@@ -1365,6 +1369,28 @@ var SETTINGS_SCHEMA = {
             parentKey: "generationConfig",
             showInDialog: false
           },
+          retryInitialDelayMs: {
+            type: "number",
+            label: "Retry Initial Delay",
+            category: "Generation Configuration",
+            requiresRestart: false,
+            default: void 0,
+            description: "Initial delay in milliseconds for stream rate-limit retries.",
+            minimum: 1,
+            parentKey: "generationConfig",
+            showInDialog: false
+          },
+          retryMaxDelayMs: {
+            type: "number",
+            label: "Retry Max Delay",
+            category: "Generation Configuration",
+            requiresRestart: false,
+            default: void 0,
+            description: "Maximum delay in milliseconds for stream rate-limit retries.",
+            minimum: 1,
+            parentKey: "generationConfig",
+            showInDialog: false
+          },
           enableCacheControl: {
             type: "boolean",
             label: "Enable Cache Control",
@@ -1733,6 +1759,26 @@ var SETTINGS_SCHEMA = {
         showInDialog: false,
         mergeStrategy: "union" /* UNION */
       },
+      defaultDisabled: {
+        type: "array",
+        label: "Default Disabled Skills",
+        category: "Advanced",
+        requiresRestart: false,
+        default: void 0,
+        description: "Skill names disabled by default unless explicitly enabled through skills.enabled. Matched case-insensitively and UNION-merged across settings scopes. skills.disabled always wins.",
+        showInDialog: false,
+        mergeStrategy: "union" /* UNION */
+      },
+      enabled: {
+        type: "array",
+        label: "Enabled Skills",
+        category: "Advanced",
+        requiresRestart: false,
+        default: void 0,
+        description: "Explicit opt-ins that override matching skills.defaultDisabled entries. Matched case-insensitively and UNION-merged across settings scopes. Cannot override skills.disabled.",
+        showInDialog: false,
+        mergeStrategy: "union" /* UNION */
+      },
       directories: {
         type: "array",
         label: "Skill Directories",
@@ -2012,6 +2058,25 @@ var SETTINGS_SCHEMA = {
             default: true,
             description: "When enabled, MCP tools are loaded on-demand via ToolSearch to reduce prompt size. Disable this for models that rely on prefix-based KV caching (e.g. DeepSeek) to keep the prompt prefix stable and maximize cache hit rates.",
             showInDialog: true
+          },
+          threshold: {
+            type: "number",
+            label: "Deferred Tool Preload Threshold (%)",
+            category: "Tools",
+            requiresRestart: true,
+            default: 10,
+            description: "Context-window percentage used as the session-start budget for preloading deferred tools (bundled built-ins and MCP alike). When every deferred tool schema fits within the budget, all are declared upfront instead of loaded on demand, keeping the prompt prefix stable for KV caching. Set 0 to always load deferred tools on demand.",
+            showInDialog: true,
+            // A percentage of the context window: values above 100 would set a
+            // budget larger than the window and unconditionally preload every
+            // deferred tool, defeating the point of the threshold. Bound it the
+            // way autoCompactThreshold bounds its fraction.
+            jsonSchemaOverride: {
+              type: "number",
+              minimum: 0,
+              maximum: 100,
+              default: 10
+            }
           }
         }
       },
@@ -2454,6 +2519,15 @@ var SETTINGS_SCHEMA = {
           type: "string",
           description: "URL pattern (supports * wildcard)"
         }
+      },
+      allowPrivateNetworkHooks: {
+        type: "boolean",
+        label: "Allow Private Network Hooks",
+        category: "Security",
+        requiresRestart: false,
+        default: false,
+        description: "When true, HTTP hooks may target private/link-local IP ranges (the SSRF IP-range checks are skipped). Cloud metadata hostnames (e.g. 169.254.169.254, metadata.google.internal) remain blocked. Only honored from User, System, and SystemDefaults settings scopes; values set in Workspace settings are ignored so a cloned repository cannot self-grant this bypass. Enable only in trusted, managed environments, and pair with security.allowedHttpHookUrls.",
+        showInDialog: false
       }
     }
   },
@@ -2547,6 +2621,30 @@ var SETTINGS_SCHEMA = {
           }
         }
       },
+      modelGrades: {
+        type: "object",
+        label: "Model Grades",
+        category: "Model",
+        requiresRestart: true,
+        default: void 0,
+        description: "Maps semantic model grade names exposed to the Agent tool to concrete model selectors.",
+        showInDialog: false,
+        mergeStrategy: "shallow_merge" /* SHALLOW_MERGE */,
+        jsonSchemaOverride: {
+          type: "object",
+          additionalProperties: { type: "string" }
+        }
+      },
+      allowedGrades: {
+        type: "array",
+        label: "Allowed Model Grades",
+        category: "Model",
+        requiresRestart: true,
+        default: void 0,
+        description: "Optional whitelist of model grade names the Agent tool may use.",
+        showInDialog: false,
+        items: { type: "string" }
+      },
       maxParallelAgents: {
         type: "number",
         label: "Max Parallel Agents",
@@ -2727,6 +2825,17 @@ var SETTINGS_SCHEMA = {
         mergeStrategy: "concat" /* CONCAT */,
         items: HOOK_DEFINITION_ITEMS
       },
+      StopFailure: {
+        type: "array",
+        label: "After Agent Failure Hooks",
+        category: "Advanced",
+        requiresRestart: false,
+        default: [],
+        description: "Hooks that execute when a turn ends due to an API error or loop detection, instead of the normal Stop hooks. Receives error type and details.",
+        showInDialog: false,
+        mergeStrategy: "concat" /* CONCAT */,
+        items: HOOK_DEFINITION_ITEMS
+      },
       MessageDisplay: {
         type: "array",
         label: "Message Display Hooks",
@@ -2888,6 +2997,15 @@ var SETTINGS_SCHEMA = {
         description: "Allow daemon and ACP sessions to continue an unfinished top-level Todo list for at most two consecutive primary-model calls without new user input. Mid-turn user input starts a fresh two-attempt stage. Disabled in safe, bare, and Approval plan modes.",
         showInDialog: false
       },
+      sessionWriterLease: {
+        type: "boolean",
+        label: "Enable ACP Session Writer Lease",
+        category: "Experimental",
+        requiresRestart: true,
+        default: false,
+        description: "Enable cross-process write fencing for persisted ACP and daemon sessions. The effective value is frozen when the ACP or daemon process starts. Every concurrent ACP or daemon writer must enable the setting; interactive and headless writers remain outside the protocol.",
+        showInDialog: true
+      },
       cronRecurringMaxAgeDays: {
         type: "number",
         label: "Recurring Cron Max Age (Days)",
@@ -4378,6 +4496,12 @@ function getSettingsWarnings(loadedSettings) {
   for (const warning of getModelProvidersOverrideWarnings(loadedSettings)) {
     warningSet.add(warning);
   }
+  const workspaceFile = loadedSettings.forScope("Workspace" /* Workspace */);
+  if (workspaceFile.rawJson !== void 0 && workspaceFile.originalSettings.security?.allowPrivateNetworkHooks !== void 0) {
+    warningSet.add(
+      `Warning: security.allowPrivateNetworkHooks in workspace settings (${workspaceFile.path}) is ignored. This setting is only honored from User, System, or SystemDefaults scope settings.`
+    );
+  }
   return [...warningSet];
 }
 __name(getSettingsWarnings, "getSettingsWarnings");
@@ -4393,8 +4517,19 @@ function tagMcpServerScope(settings, scope) {
   return { ...settings, mcpServers: tagged };
 }
 __name(tagMcpServerScope, "tagMcpServerScope");
+function stripWorkspacePrivateNetworkHooks(settings) {
+  if (settings.security?.allowPrivateNetworkHooks === void 0) {
+    return settings;
+  }
+  const { allowPrivateNetworkHooks: _stripped, ...restSecurity } = settings.security;
+  return { ...settings, security: restSecurity };
+}
+__name(stripWorkspacePrivateNetworkHooks, "stripWorkspacePrivateNetworkHooks");
 function mergeSettings(system, systemDefaults, user, workspace, isTrusted) {
-  const safeWorkspace = isTrusted ? tagMcpServerScope(workspace, "workspace") : {};
+  const safeWorkspace = isTrusted ? tagMcpServerScope(
+    stripWorkspacePrivateNetworkHooks(workspace),
+    "workspace"
+  ) : {};
   return customDeepMerge(
     getMergeStrategyForPath,
     {},
@@ -4461,10 +4596,11 @@ var LoadedSettings = class {
         throw new Error(`Invalid scope: ${scope}`);
     }
   }
-  setValue(scope, key, value) {
+  setValue(scope, key, value, assertCanCommit) {
     if (key === "model.name" && typeof value === "string") {
       value = stripRuntimeSnapshotPrefix(value);
     }
+    assertCanCommit?.();
     const settingsFile = this.forScope(scope);
     setNestedPropertySafe(settingsFile.settings, key, value);
     setNestedPropertySafe(settingsFile.originalSettings, key, value);
@@ -4472,7 +4608,7 @@ var LoadedSettings = class {
     const replacePath = key === "mcpServers" ? key.split(".") : [];
     saveSettings(settingsFile, createSettingsUpdate(key, value), replacePath);
   }
-  setValues(writes, onScopeCommitted) {
+  setValues(writes, onScopeCommitted, assertCanCommit) {
     const scopes = /* @__PURE__ */ new Set();
     for (const write of writes) {
       const value = write.key === "model.name" && typeof write.value === "string" ? stripRuntimeSnapshotPrefix(write.value) : write.value;
@@ -4486,6 +4622,7 @@ var LoadedSettings = class {
     for (let i = 0; i < scopeList.length; i++) {
       const scope = scopeList[i];
       try {
+        assertCanCommit?.();
         saveSettings(this.forScope(scope), void 0, void 0, {
           throwOnWriteFailure: true
         });
@@ -4739,7 +4876,7 @@ function loadSettings(workspaceDir = process.cwd(), consumeCorruptionEnvVars = t
     settings: {},
     rawJson: void 0
   };
-  const workspaceSettingsActive = realWorkspaceDir !== realHomeDir;
+  const workspaceSettingsActive = !opts.skipWorkspaceSettings && realWorkspaceDir !== realHomeDir;
   if (workspaceSettingsActive) {
     workspaceResult = loadAndMigrate(
       workspaceSettingsPath,
@@ -4784,7 +4921,7 @@ function loadSettings(workspaceDir = process.cwd(), consumeCorruptionEnvVars = t
     systemSettings,
     userSettings
   );
-  const isTrusted = isWorkspaceTrusted(
+  const isTrusted = opts.workspaceTrusted ?? isWorkspaceTrusted(
     initialTrustCheckSettings,
     void 0,
     realWorkspaceDir
@@ -4915,6 +5052,7 @@ export {
   backupSettingsFile,
   restoreSettingsFromBackup,
   cleanupSettingsBackup,
+  v1ToV2Migration,
   getUserSettingsPath,
   getUserSettingsDir,
   SETTINGS_VERSION,

package/chunks/{chunk-VIA5XA4U.js → chunk-A5UODYG3.js}

@@ -2,7 +2,7 @@
 "use strict";
 import {
   SkillError
-} from "./chunk-PHOF65IG.js";
+} from "./chunk-FRXG4ARO.js";
 import {
   init_esbuild_shims
 } from "./chunk-5O2XNYP6.js";
@@ -77,6 +77,7 @@ var SERVE_CONTROL_EXT_METHODS = {
   sessionClose: "qwen/control/session/close",
   sessionApprovalMode: "qwen/control/session/approval_mode",
   sessionBranch: "qwen/control/session/branch",
+  sessionSideTask: "qwen/control/session/side_task",
   sessionForkAgent: "qwen/control/session/fork_agent",
   sessionRecap: "qwen/control/session/recap",
   sessionGenerationStart: "qwen/control/session/generation/start",
@@ -111,6 +112,8 @@ var SERVE_CONTROL_EXT_METHODS = {
    * `{ sessionId }`; result: `{ active: ActiveGoalView | null }`.
    */
   sessionGoalGet: "qwen/control/session/goal/get",
+  sessionMcpRuntimeAdd: "qwen/control/session/mcp/runtime-add",
+  sessionMcpRuntimeRemove: "qwen/control/session/mcp/runtime-remove",
   workspaceMcpRuntimeAdd: "qwen/control/workspace/mcp/runtime-add",
   workspaceMcpRuntimeRemove: "qwen/control/workspace/mcp/runtime-remove",
   workspaceReload: "qwen/control/workspace/reload",

package/chunks/{chunk-JLU636DO.js → chunk-ALMR3E6Q.js}

@@ -43,6 +43,7 @@ function channelSelectionNames(selection) {
 __name(channelSelectionNames, "channelSelectionNames");
 
 export {
+  isAllChannelSelectionName,
   normalizeServeChannelSelection,
   channelSelectionNames
 };