@qwen-code/qwen-code 0.21.12-preview.4 → 0.21.12

package/bundled/qc-helper/docs/features/channels/overview.md

@@ -61,7 +61,7 @@ Channels are configured under the `channels` key in `settings.json`. Each channe
 | `model`                  | No               | Model to use for this channel (e.g., `qwen3.5-plus`). Overrides the default model. Useful for multimodal models that support image input                                                                                |
 | `senderPolicy`           | No               | Who can talk to the bot: `allowlist` (default), `open`, or `pairing`                                                                                                                                                    |
 | `allowedUsers`           | No               | List of user IDs allowed to use the bot (used by `allowlist` and `pairing` policies)                                                                                                                                    |
-| `sessionScope`           | No               | How sessions are scoped: `user` (default), `thread`, or `single`                                                                                                                                                        |
+| `sessionScope`           | No               | How sessions are scoped: `user` (default), `chat_thread`, or `single`. Legacy `thread` remains compatible when already configured but is not offered for new Web Shell configurations                                   |
 | `cwd`                    | No               | Working directory for the agent. Defaults to the current directory                                                                                                                                                      |
 | `approvalMode`           | No               | Tool approval mode for channel sessions. Unattended webhook tasks require `yolo`; the setting applies to every session on the channel                                                                                   |
 | `instructions`           | No               | Custom instructions prepended to the first message of each session                                                                                                                                                      |

package/bundled/qc-helper/docs/features/channels/plugins.md

@@ -46,17 +46,17 @@ The `type` must match a channel type registered by an installed extension. Check
 
 All standard channel options work with custom channels:
 
-| Option         | Description                                    |
-| -------------- | ---------------------------------------------- |
-| `senderPolicy` | `allowlist`, `pairing`, or `open`              |
-| `allowedUsers` | Static allowlist of sender IDs                 |
-| `sessionScope` | `user`, `thread`, or `single`                  |
-| `cwd`          | Working directory for the agent                |
-| `instructions` | Prepended to the first message of each session |
-| `model`        | Model override for the channel                 |
-| `groupPolicy`  | `disabled`, `allowlist`, `pairing`, or `open`  |
-| `dmPolicy`     | `open` or `disabled`                           |
-| `groups`       | Per-group settings                             |
+| Option         | Description                                                                                        |
+| -------------- | -------------------------------------------------------------------------------------------------- |
+| `senderPolicy` | `allowlist`, `pairing`, or `open`                                                                  |
+| `allowedUsers` | Static allowlist of sender IDs                                                                     |
+| `sessionScope` | `user`, `chat_thread`, or `single`; legacy `thread` remains compatible for existing configurations |
+| `cwd`          | Working directory for the agent                                                                    |
+| `instructions` | Prepended to the first message of each session                                                     |
+| `model`        | Model override for the channel                                                                     |
+| `groupPolicy`  | `disabled`, `allowlist`, `pairing`, or `open`                                                      |
+| `dmPolicy`     | `open` or `disabled`                                                                               |
+| `groups`       | Per-group settings                                                                                 |
 
 See [Overview](./overview) for details on each option.
 

package/bundled/qc-helper/docs/qwen-serve.md

@@ -434,6 +434,71 @@ Notes:
 >   matched case-sensitively by yargs `choices` (`--memory-project-scope
 Workspace` is rejected). Use lowercase values when copying between the two.
 
+### Built-in daemon Git relocation guard
+
+Every managed daemon ACP session applies a built-in pre-execution guard for
+model shell commands, independent of `--external-tool-guard-mode` and without
+any capability advertisement. The daemon owns the bound workspace and the
+session's current effective working directory; both are supplied from trusted
+session state and never accepted from the ACP child.
+
+The guard inspects the tools that run a shell command line — `run_shell_command`
+and `monitor` — and denies a mutating Git
+command before execution when its repository location resolves outside the
+session's effective working directory. Relocation is recognized for literal
+forms of `git -C <path>`, `git --git-dir[=]<path>`,
+`git --work-tree[=]<path>`, leading
+`GIT_DIR`/`GIT_WORK_TREE`/`GIT_COMMON_DIR`/`GIT_INDEX_FILE` assignments (also
+when made through `export`/`declare`/`readonly`, which keep them in the
+environment of every later command in the chain),
+directory-shifting wrapper flags (`env -C`, `sudo -D`), and `cd`, `pushd`, or
+`popd` builtins earlier in the same command chain. Common wrapper prefixes
+(`sh -c`, `bash -c`, `eval`, `sudo`, `nohup`, `timeout`, `exec`, `command`,
+`builtin`,
+`env`, path-qualified `git` binaries, and `{ …; }` / `! …` shell syntax) are
+unwrapped so the same policy applies to the inner Git invocation, and `$(…)`
+or backtick substitution bodies are analyzed as commands of their own.
+
+A sub-agent pinned to its own worktree is contained to that worktree rather
+than to the session's directory; a shell call whose execution directory the
+daemon cannot place is denied.
+
+Relative targets resolve from the command's effective starting directory
+(`arguments.directory` when present, otherwise the session's current effective
+working directory) after canonical path resolution, including `.git` gitfile
+redirects, symlinks, and per-worktree administrative directories. A relocated
+target that cannot be fully resolved before execution — a dynamic target
+(`$VAR`, backticks, `~`, globs), a path that does not exist yet, or an
+unreadable indirection — is denied for mutating or unclassifiable subcommands.
+A relocated target that cannot be resolved is denied whatever the subcommand
+is — including the read-only ones. Relocated commands whose subcommand is one
+of a small verified read-only set (`rev-parse`, `cat-file`) remain allowed
+once the target resolves, unless the command carries command-executing `-c`
+config, or
+it carries a `--output`, `--textconv`, or `--filters` flag: those write a file
+or run the target repository's configured drivers. Commands with no recognized
+relocation keep their existing behavior.
+Denials are final and are reported to the model as
+`Daemon shell guard denied a mutating Git command…` for a resolved, dynamic,
+or unresolvable repository location, and as
+`Daemon shell guard denied a shell command…` when the command could not be
+parsed, its payload could not be resolved, or an unrecognized program may run
+a relocated Git command.
+
+The guard is reliable against Git relocation written in the literal forms
+above — the mis-targeted command this control exists for — and is
+**best-effort, not a boundary**, against shell text written to defeat it:
+constructions that hide the relocation from a static reader may pass, and new
+ones will keep being found. Do not grant a daemon broader trust on the
+strength of it. It does not interpret script files,
+track environment variable values across commands, or analyze heredoc bodies
+(Git-shaped text inside a heredoc can be denied even though the shell never
+executes it). `/fork` and agent-backed workspace memory remember/dream remain
+available under the built-in guard; they are only restricted while the
+external provider mode below is active. An optional external tool guard
+remains an additional policy and receives the same request only after the
+built-in policy allows it.
+
 ### Required external Tool Guard
 
 This opt-in is for managed ACP deployments that need an external allow/deny

package/chunks/{MaxSizedBox-GFI5RYXH.js → MaxSizedBox-ZSJJ2D5S.js}

@@ -4,84 +4,84 @@ import {
   MINIMUM_MAX_HEIGHT,
   MaxSizedBox,
   setMaxSizedBoxDebugging
-} from "./chunk-OSA2TFDI.js";
-import "./chunk-JOVJCXN4.js";
+} from "./chunk-CGM3E75C.js";
+import "./chunk-OWGRUU7F.js";
 import "./chunk-SV5PQVQE.js";
-import "./chunk-6LDLDK6E.js";
-import "./chunk-2SB4SLKC.js";
+import "./chunk-OYWVIXHT.js";
+import "./chunk-2IIJTXYF.js";
 import "./chunk-5QWWOFGG.js";
 import "./chunk-4NFY2S7N.js";
 import "./chunk-2MIN6GRR.js";
 import "./chunk-QHTIBUWB.js";
 import "./chunk-RKUWKYED.js";
-import "./chunk-GHOUZ5X4.js";
+import "./chunk-EBPLKY6U.js";
 import "./chunk-GOFAQQZA.js";
 import "./chunk-5M6IDOMF.js";
 import "./chunk-TWPJO254.js";
 import "./chunk-CQ35AJ4Z.js";
-import "./chunk-NM33GGOM.js";
-import "./chunk-A4BAHMJF.js";
-import "./chunk-ZPZANKVP.js";
-import "./chunk-A6GQUQ7I.js";
+import "./chunk-QPBFRWCP.js";
+import "./chunk-JRIVMPD2.js";
+import "./chunk-YILJKX2T.js";
+import "./chunk-D2RNVVH6.js";
 import "./chunk-6PVPNMXU.js";
-import "./chunk-JBZYGFIB.js";
+import "./chunk-I7BT2MME.js";
 import "./chunk-IRH27ZC2.js";
 import "./chunk-QHWCP53L.js";
-import "./chunk-AAZWJAPQ.js";
-import "./chunk-7WUMS2UA.js";
+import "./chunk-AKBFSOC5.js";
+import "./chunk-DEDESZDL.js";
 import "./chunk-O6GEWCJA.js";
 import "./chunk-T26EAKDL.js";
 import "./chunk-ZPJWUGCS.js";
 import "./chunk-CPBF7KYF.js";
-import "./chunk-SNHBRO4C.js";
-import "./chunk-KTWUFHS4.js";
+import "./chunk-5RUCD4ED.js";
 import "./chunk-KRXPRVGL.js";
-import "./chunk-2ASWIM4A.js";
-import "./chunk-67F2BEYW.js";
-import "./chunk-TNETSI2A.js";
-import "./chunk-B66LYK4B.js";
-import "./chunk-VPZMLGD3.js";
-import "./chunk-U5C2GIN2.js";
+import "./chunk-YBVVOSOH.js";
+import "./chunk-CPFFU46D.js";
+import "./chunk-ULNWG62W.js";
+import "./chunk-DPTMKFIH.js";
+import "./chunk-63FNZTWG.js";
+import "./chunk-3GM5DLBI.js";
+import "./chunk-K34GJQOZ.js";
 import "./chunk-SAH4BD2J.js";
-import "./chunk-2RTRFLWH.js";
-import "./chunk-SKRHR6N2.js";
+import "./chunk-KLOMACIR.js";
+import "./chunk-VPV7WBVT.js";
 import "./chunk-S6LOFUVP.js";
 import "./chunk-2J3OJGTL.js";
-import "./chunk-UAAWNTOC.js";
-import "./chunk-YRLW2MSX.js";
-import "./chunk-VGC4I5JJ.js";
-import "./chunk-6OJDN5ZT.js";
-import "./chunk-JRTJEGSP.js";
-import "./chunk-O6SLWH4X.js";
-import "./chunk-C2DR57L6.js";
-import "./chunk-TROB4PZY.js";
+import "./chunk-TTRH3RTQ.js";
 import "./chunk-K623ENWT.js";
 import "./chunk-AQ37AY7B.js";
-import "./chunk-UHF5VBKO.js";
-import "./chunk-ZRT36RSF.js";
-import "./chunk-CDDLHCC2.js";
+import "./chunk-FRHQQC2Z.js";
+import "./chunk-DG4IQ6JG.js";
 import "./chunk-NAVJD2PQ.js";
-import "./chunk-YI5G32RU.js";
-import "./chunk-QEWAHAW2.js";
+import "./chunk-KEC5FHLM.js";
+import "./chunk-2ZWH53I4.js";
 import "./chunk-P3QQPMQA.js";
-import "./chunk-FTGU6G45.js";
-import "./chunk-PSTHNTHF.js";
-import "./chunk-XJ6IMYUS.js";
-import "./chunk-F6WFNA7U.js";
-import "./chunk-NW7SPXVG.js";
+import "./chunk-TB4YFWXG.js";
+import "./chunk-D7QGE3RT.js";
 import "./chunk-KM73TBQ4.js";
 import "./chunk-MPHPFVKK.js";
 import "./chunk-AXMWHKXA.js";
 import "./chunk-GLCZKT5V.js";
-import "./chunk-KK3FEHPJ.js";
+import "./chunk-DJ2GSRLV.js";
+import "./chunk-NLFLYSS4.js";
+import "./chunk-4KM2SYK5.js";
+import "./chunk-YRLW2MSX.js";
+import "./chunk-VGC4I5JJ.js";
+import "./chunk-G6MUFRNI.js";
+import "./chunk-LSRI3ND3.js";
+import "./chunk-PVXEJB66.js";
+import "./chunk-YIGGWOJE.js";
+import "./chunk-KWX56CHZ.js";
+import "./chunk-F6WFNA7U.js";
 import "./chunk-46UV252V.js";
 import "./chunk-FPGTNKCP.js";
-import "./chunk-DJ2GSRLV.js";
-import "./chunk-H6BFLALJ.js";
-import "./chunk-3MJ44LNC.js";
+import "./chunk-4AOVQPJU.js";
+import "./chunk-PZW46OTB.js";
+import "./chunk-YBHUXEC6.js";
+import "./chunk-N4SVADAV.js";
 import "./chunk-HHJLM3WQ.js";
 import "./chunk-K5IDV3PC.js";
-import "./chunk-YMB77M76.js";
+import "./chunk-HOSVOUDK.js";
 import "./chunk-VOQXFAY5.js";
 import "./chunk-75DOP5OR.js";
 import "./chunk-DMTGGOSA.js";

package/chunks/{StandaloneSessionPicker-JFWRY4V2.js → StandaloneSessionPicker-WHUHQXSA.js}

@@ -4,128 +4,127 @@ import {
   ConfigContext,
   SessionPicker,
   SettingsContext
-} from "./chunk-HWCHDINS.js";
-import "./chunk-O4MVJKSX.js";
-import "./chunk-VRQD5D7R.js";
-import "./chunk-QXFAQDBV.js";
-import "./chunk-OSA2TFDI.js";
-import "./chunk-XUBM2A4F.js";
-import "./chunk-JOVJCXN4.js";
+} from "./chunk-VLHR7F4E.js";
+import "./chunk-4XA4QIUA.js";
+import "./chunk-MDNUCDKZ.js";
+import "./chunk-CGM3E75C.js";
+import "./chunk-GXTMEATA.js";
+import "./chunk-3SH53ANB.js";
+import "./chunk-OWGRUU7F.js";
 import {
   KeypressProvider
-} from "./chunk-BNRIQWXW.js";
-import "./chunk-UPUAGRKY.js";
+} from "./chunk-56HVDG3M.js";
+import "./chunk-NW2GIPG3.js";
 import {
   require_jsx_runtime
 } from "./chunk-SV5PQVQE.js";
 import "./chunk-4WGODMVR.js";
 import "./chunk-EKTCKZV5.js";
-import "./chunk-6LDLDK6E.js";
+import "./chunk-OYWVIXHT.js";
 import "./chunk-KW7NOTN6.js";
 import {
   Box_default,
   render_default,
   use_app_default
-} from "./chunk-2SB4SLKC.js";
+} from "./chunk-2IIJTXYF.js";
 import {
   require_react
 } from "./chunk-5QWWOFGG.js";
-import "./chunk-6T5HCY34.js";
-import "./chunk-UQPLUR4A.js";
-import "./chunk-E74YSVIN.js";
-import "./chunk-VYDQD5J4.js";
+import "./chunk-RDVNSJQU.js";
+import "./chunk-ZBB5EZZV.js";
+import "./chunk-TXP5NGG3.js";
+import "./chunk-DFVXU5YM.js";
 import "./chunk-4NFY2S7N.js";
-import "./chunk-FNVF5RR4.js";
+import "./chunk-V6OBVAST.js";
 import "./chunk-2MIN6GRR.js";
 import "./chunk-QHTIBUWB.js";
-import "./chunk-3SH53ANB.js";
 import "./chunk-57OAHC2Y.js";
-import "./chunk-QSMZHJ62.js";
-import "./chunk-H2U4FK62.js";
+import "./chunk-2IVYL3IF.js";
+import "./chunk-3GDBZJD6.js";
 import "./chunk-RKUWKYED.js";
-import "./chunk-4X5J3V2I.js";
+import "./chunk-FA5K6YI2.js";
 import "./chunk-GOXKNSDZ.js";
 import "./chunk-IDS7MSUP.js";
-import "./chunk-JXS2JNMZ.js";
+import "./chunk-IRSLAS4M.js";
 import "./chunk-5EJZE3FP.js";
-import "./chunk-FXWGMPAP.js";
+import "./chunk-XH3KAV2G.js";
 import "./chunk-MS7GNABG.js";
-import "./chunk-ZA2JN5IZ.js";
+import "./chunk-ZMY2P4L3.js";
 import "./chunk-NPQ5ZKRP.js";
 import "./chunk-MR3PXB6E.js";
 import {
   SessionService,
   getGitBranch
-} from "./chunk-GHOUZ5X4.js";
+} from "./chunk-EBPLKY6U.js";
 import "./chunk-GOFAQQZA.js";
 import "./chunk-5M6IDOMF.js";
 import "./chunk-TWPJO254.js";
 import "./chunk-CQ35AJ4Z.js";
-import "./chunk-NM33GGOM.js";
-import "./chunk-A4BAHMJF.js";
-import "./chunk-ZPZANKVP.js";
-import "./chunk-A6GQUQ7I.js";
+import "./chunk-QPBFRWCP.js";
+import "./chunk-JRIVMPD2.js";
+import "./chunk-YILJKX2T.js";
+import "./chunk-D2RNVVH6.js";
 import "./chunk-6PVPNMXU.js";
-import "./chunk-JBZYGFIB.js";
+import "./chunk-I7BT2MME.js";
 import "./chunk-IRH27ZC2.js";
 import "./chunk-QHWCP53L.js";
-import "./chunk-AAZWJAPQ.js";
-import "./chunk-7WUMS2UA.js";
+import "./chunk-AKBFSOC5.js";
+import "./chunk-DEDESZDL.js";
 import "./chunk-O6GEWCJA.js";
 import "./chunk-T26EAKDL.js";
 import "./chunk-ZPJWUGCS.js";
 import "./chunk-CPBF7KYF.js";
-import "./chunk-SNHBRO4C.js";
-import "./chunk-KTWUFHS4.js";
+import "./chunk-5RUCD4ED.js";
 import "./chunk-KRXPRVGL.js";
-import "./chunk-2ASWIM4A.js";
-import "./chunk-67F2BEYW.js";
-import "./chunk-TNETSI2A.js";
-import "./chunk-B66LYK4B.js";
-import "./chunk-VPZMLGD3.js";
-import "./chunk-U5C2GIN2.js";
+import "./chunk-YBVVOSOH.js";
+import "./chunk-CPFFU46D.js";
+import "./chunk-ULNWG62W.js";
+import "./chunk-DPTMKFIH.js";
+import "./chunk-63FNZTWG.js";
+import "./chunk-3GM5DLBI.js";
+import "./chunk-K34GJQOZ.js";
 import "./chunk-SAH4BD2J.js";
-import "./chunk-2RTRFLWH.js";
-import "./chunk-SKRHR6N2.js";
+import "./chunk-KLOMACIR.js";
+import "./chunk-VPV7WBVT.js";
 import "./chunk-S6LOFUVP.js";
 import "./chunk-2J3OJGTL.js";
-import "./chunk-UAAWNTOC.js";
-import "./chunk-YRLW2MSX.js";
-import "./chunk-VGC4I5JJ.js";
-import "./chunk-6OJDN5ZT.js";
-import "./chunk-JRTJEGSP.js";
-import "./chunk-O6SLWH4X.js";
-import "./chunk-C2DR57L6.js";
-import "./chunk-TROB4PZY.js";
+import "./chunk-TTRH3RTQ.js";
 import "./chunk-K623ENWT.js";
 import "./chunk-AQ37AY7B.js";
-import "./chunk-UHF5VBKO.js";
-import "./chunk-ZRT36RSF.js";
-import "./chunk-CDDLHCC2.js";
+import "./chunk-FRHQQC2Z.js";
+import "./chunk-DG4IQ6JG.js";
 import "./chunk-NAVJD2PQ.js";
-import "./chunk-YI5G32RU.js";
-import "./chunk-QEWAHAW2.js";
+import "./chunk-KEC5FHLM.js";
+import "./chunk-2ZWH53I4.js";
 import "./chunk-P3QQPMQA.js";
-import "./chunk-FTGU6G45.js";
-import "./chunk-PSTHNTHF.js";
-import "./chunk-XJ6IMYUS.js";
-import "./chunk-F6WFNA7U.js";
-import "./chunk-NW7SPXVG.js";
+import "./chunk-TB4YFWXG.js";
+import "./chunk-D7QGE3RT.js";
 import "./chunk-KM73TBQ4.js";
 import "./chunk-MPHPFVKK.js";
 import "./chunk-AXMWHKXA.js";
 import "./chunk-GLCZKT5V.js";
-import "./chunk-KK3FEHPJ.js";
+import "./chunk-DJ2GSRLV.js";
+import "./chunk-NLFLYSS4.js";
+import "./chunk-4KM2SYK5.js";
+import "./chunk-YRLW2MSX.js";
+import "./chunk-VGC4I5JJ.js";
+import "./chunk-G6MUFRNI.js";
+import "./chunk-LSRI3ND3.js";
+import "./chunk-PVXEJB66.js";
+import "./chunk-YIGGWOJE.js";
+import "./chunk-KWX56CHZ.js";
+import "./chunk-F6WFNA7U.js";
 import "./chunk-46UV252V.js";
 import "./chunk-FPGTNKCP.js";
-import "./chunk-DJ2GSRLV.js";
-import "./chunk-H6BFLALJ.js";
-import "./chunk-3MJ44LNC.js";
+import "./chunk-4AOVQPJU.js";
+import "./chunk-PZW46OTB.js";
+import "./chunk-YBHUXEC6.js";
+import "./chunk-N4SVADAV.js";
 import "./chunk-HHJLM3WQ.js";
 import "./chunk-K5IDV3PC.js";
-import "./chunk-YMB77M76.js";
+import "./chunk-HOSVOUDK.js";
 import "./chunk-VOQXFAY5.js";
-import "./chunk-NX5QZVRS.js";
+import "./chunk-OR64CU46.js";
 import {
   writeStdoutLine
 } from "./chunk-KGJGEEVR.js";

package/chunks/{acp-startup-profiler-TVI2OVUN.js → acp-startup-profiler-SVPUHLXV.js}

@@ -9,8 +9,8 @@ import {
   markAcpStartup,
   recordAcpConfigStartupEvent,
   resetAcpStartupProfilerForTesting
-} from "./chunk-ZZ7RUTJ4.js";
-import "./chunk-UFHPAMAV.js";
+} from "./chunk-FMIH5KMQ.js";
+import "./chunk-FQDCO3CJ.js";
 import "./chunk-5O2XNYP6.js";
 import "./chunk-J2S4EL5Y.js";
 export {