@qwen-code/qwen-code 0.21.13 → 0.21.14-preview.0

package/chunks/{validateNonInterActiveAuth-LTEI2TB6.js → validateNonInterActiveAuth-MZXSAITU.js}

@@ -2,53 +2,54 @@
 "use strict";
 import {
   JsonOutputAdapter
-} from "./chunk-V26NVGAU.js";
+} from "./chunk-YIWH3MKK.js";
 import {
   StreamJsonOutputAdapter
-} from "./chunk-UZPM4XHR.js";
-import "./chunk-NNHNLJ2X.js";
-import "./chunk-N5YPT6PH.js";
+} from "./chunk-6VDPDHIP.js";
+import "./chunk-XO24LIZC.js";
+import "./chunk-X3YA3YGG.js";
 import {
   validateAuthMethod
-} from "./chunk-IGGGG5CX.js";
-import "./chunk-O4D7SPJN.js";
+} from "./chunk-KSGWAYNE.js";
+import "./chunk-73G3Z7QS.js";
 import "./chunk-4WGODMVR.js";
 import "./chunk-3SH53ANB.js";
 import "./chunk-NYX53SV4.js";
-import "./chunk-DXIBNLBZ.js";
+import "./chunk-SNQZZ765.js";
 import "./chunk-EKTCKZV5.js";
 import "./chunk-2M55OBEB.js";
-import "./chunk-GO7STP6N.js";
-import "./chunk-JUEPY766.js";
-import "./chunk-NEFOOD54.js";
+import "./chunk-K3CECR5C.js";
+import "./chunk-LRDB2OLB.js";
+import "./chunk-4V4DFJBS.js";
 import "./chunk-YAF2MQZ6.js";
-import "./chunk-QRCNA3SR.js";
+import "./chunk-RAQBBGS6.js";
 import "./chunk-6H67XLET.js";
-import "./chunk-RLKC46YT.js";
-import "./chunk-BZ263IKX.js";
-import "./chunk-4NFY2S7N.js";
-import "./chunk-3U3VAL47.js";
+import "./chunk-EOCQCNV4.js";
+import "./chunk-OVY67CYC.js";
+import "./chunk-E7REAOTN.js";
+import "./chunk-57KOJ2KZ.js";
 import "./chunk-2MIN6GRR.js";
 import "./chunk-QHTIBUWB.js";
 import "./chunk-3Z43GZUQ.js";
 import "./chunk-TQOF5KBL.js";
 import "./chunk-UXEO7E3V.js";
-import "./chunk-QIH2HAEN.js";
+import "./chunk-7OCSX7FC.js";
 import "./chunk-WGHHA7ZH.js";
-import "./chunk-XHRY7BXD.js";
+import "./chunk-G6FFFICU.js";
 import "./chunk-7U5G6JXI.js";
 import "./chunk-WCCLLK7X.js";
-import "./chunk-ZYYTZUI2.js";
+import "./chunk-ISRHAMNL.js";
 import "./chunk-Z4X5MTRT.js";
-import "./chunk-TUGSVUJB.js";
-import "./chunk-QV5YN5YD.js";
+import "./chunk-2JXDFSVE.js";
+import "./chunk-HGPMOXLZ.js";
 import "./chunk-57OAHC2Y.js";
-import "./chunk-OD2WU5QY.js";
+import "./chunk-NRPXRNN4.js";
 import "./chunk-45NQKMYB.js";
-import "./chunk-A4QRWUDE.js";
+import "./chunk-5IYS4WWR.js";
 import "./chunk-V6WHFGST.js";
 import "./chunk-ZLCT4C5A.js";
-import "./chunk-BKPPWD33.js";
+import "./chunk-DRKYT2TR.js";
+import "./chunk-WP4WIUOJ.js";
 import "./chunk-6PLDPT2C.js";
 import "./chunk-FYJ7W2PI.js";
 import "./chunk-YP5KH5Y7.js";
@@ -60,50 +61,50 @@ import "./chunk-3VUENPWF.js";
 import "./chunk-AW27A43Y.js";
 import "./chunk-IW6RQPQB.js";
 import "./chunk-H4A72DE5.js";
-import "./chunk-JOOFMXGF.js";
-import "./chunk-A267JX7H.js";
+import "./chunk-QECSDJET.js";
+import "./chunk-OLZSWUZR.js";
 import "./chunk-RKUWKYED.js";
-import "./chunk-E23IPNGS.js";
+import "./chunk-YFPZ3NNC.js";
 import "./chunk-GOXKNSDZ.js";
 import "./chunk-IDS7MSUP.js";
-import "./chunk-HUTNYWBG.js";
+import "./chunk-IOTPI425.js";
 import "./chunk-5EJZE3FP.js";
-import "./chunk-MC4TLKEI.js";
-import "./chunk-MS7GNABG.js";
-import "./chunk-CU6GJD55.js";
+import "./chunk-SGLPDKRT.js";
+import "./chunk-CXJHQVEK.js";
+import "./chunk-6DFPR7CS.js";
 import "./chunk-WZMH7II3.js";
-import "./chunk-IWPYVAO2.js";
+import "./chunk-YXC7JYUI.js";
 import "./chunk-NPQ5ZKRP.js";
 import "./chunk-MR3PXB6E.js";
 import "./chunk-XFSFZCM5.js";
-import "./chunk-4S5337WV.js";
+import "./chunk-XC377TLN.js";
 import "./chunk-GOFAQQZA.js";
 import "./chunk-5M6IDOMF.js";
 import "./chunk-TWPJO254.js";
 import "./chunk-CQ35AJ4Z.js";
-import "./chunk-DGZEMW5R.js";
-import "./chunk-WSH6GRKG.js";
-import "./chunk-CKSJECTU.js";
-import "./chunk-OVZPVYZB.js";
+import "./chunk-FS5NGKWC.js";
+import "./chunk-SLILKYV2.js";
+import "./chunk-NVRMCWTP.js";
+import "./chunk-AKBOLMUF.js";
 import "./chunk-6PVPNMXU.js";
-import "./chunk-5EYKMUUY.js";
+import "./chunk-SR2LYSMT.js";
 import "./chunk-IRH27ZC2.js";
 import "./chunk-QHWCP53L.js";
-import "./chunk-Y3YCSWG5.js";
-import "./chunk-UPDOZBWO.js";
+import "./chunk-OBJYN4MX.js";
+import "./chunk-2C6HJMG3.js";
 import "./chunk-O6GEWCJA.js";
 import "./chunk-T26EAKDL.js";
 import "./chunk-ZPJWUGCS.js";
 import "./chunk-CPBF7KYF.js";
 import "./chunk-RWDNJBWN.js";
-import "./chunk-25EYDK42.js";
+import "./chunk-WPVUOVYX.js";
 import "./chunk-MIPFDQAF.js";
 import "./chunk-MLXTMF7H.js";
 import "./chunk-KV27IEHM.js";
 import "./chunk-E3DYKPYZ.js";
-import "./chunk-OMLJNPBE.js";
-import "./chunk-OXCMMLED.js";
-import "./chunk-TIGA2IVL.js";
+import "./chunk-4ZMS3JCR.js";
+import "./chunk-DGJ7O55J.js";
+import "./chunk-OO4FKHLO.js";
 import "./chunk-SAH4BD2J.js";
 import "./chunk-XLLKYULU.js";
 import "./chunk-PT4I7NBA.js";
@@ -113,7 +114,7 @@ import "./chunk-SG7ZP5PG.js";
 import "./chunk-K623ENWT.js";
 import "./chunk-AQ37AY7B.js";
 import "./chunk-KBXKR5R2.js";
-import "./chunk-GMIEIY3Y.js";
+import "./chunk-I3N2Z25H.js";
 import "./chunk-NAVJD2PQ.js";
 import "./chunk-ROIYNTHJ.js";
 import "./chunk-2B2BF7P7.js";
@@ -121,34 +122,35 @@ import "./chunk-P3QQPMQA.js";
 import "./chunk-YZHRN3CF.js";
 import "./chunk-FAAUPSY2.js";
 import "./chunk-KM73TBQ4.js";
-import "./chunk-MPHPFVKK.js";
 import "./chunk-AXMWHKXA.js";
 import "./chunk-GLCZKT5V.js";
 import "./chunk-DJ2GSRLV.js";
 import "./chunk-QFJ5JHQR.js";
-import "./chunk-RVOJ2FBP.js";
+import "./chunk-KC4WMLZO.js";
 import "./chunk-YRLW2MSX.js";
 import "./chunk-VGC4I5JJ.js";
+import "./chunk-3PWCMXIR.js";
 import "./chunk-CHHABXPE.js";
 import "./chunk-MA2HEDVP.js";
 import "./chunk-XUJNK7Y6.js";
 import "./chunk-6HY6IF3Z.js";
-import "./chunk-4PKCUT7F.js";
+import "./chunk-QIHHJKXT.js";
 import "./chunk-F6WFNA7U.js";
-import "./chunk-46UV252V.js";
+import "./chunk-WZAD4ZNJ.js";
 import "./chunk-FPGTNKCP.js";
+import "./chunk-YHC2EYYG.js";
 import "./chunk-CPHEPGAO.js";
-import "./chunk-P7MPQI75.js";
-import "./chunk-FDGGZIYW.js";
-import "./chunk-EL5SXY3T.js";
+import "./chunk-DVR7XKO5.js";
+import "./chunk-YECDICIO.js";
+import "./chunk-XT4RKHVE.js";
 import "./chunk-HHJLM3WQ.js";
-import "./chunk-K5IDV3PC.js";
+import "./chunk-D34RDOLP.js";
 import "./chunk-BUQDLC2G.js";
 import "./chunk-VOQXFAY5.js";
-import "./chunk-AW4TRXOC.js";
+import "./chunk-TNPWODIZ.js";
 import {
   runExitCleanup
-} from "./chunk-X26JYGTD.js";
+} from "./chunk-L6CCLB3G.js";
 import {
   writeStderrLine
 } from "./chunk-KGJGEEVR.js";

package/chunks/{version-G5A5DGVS.js → version-PJC6ZNXV.js}

@@ -2,7 +2,7 @@
 "use strict";
 import {
   getCliVersion
-} from "./chunk-CU6GJD55.js";
+} from "./chunk-6DFPR7CS.js";
 import "./chunk-WZMH7II3.js";
 import "./chunk-5O2XNYP6.js";
 import "./chunk-J2S4EL5Y.js";

package/chunks/{web-fetch-RTEQTR5Z.js → web-fetch-XXICVGKQ.js}

@@ -14,11 +14,13 @@ import "./chunk-YZHRN3CF.js";
 import "./chunk-FAAUPSY2.js";
 import {
   MAX_SESSION_BYTES,
-  extractPDFText,
   import_lru_cache
-} from "./chunk-RVOJ2FBP.js";
+} from "./chunk-KC4WMLZO.js";
 import "./chunk-YRLW2MSX.js";
 import "./chunk-VGC4I5JJ.js";
+import {
+  extractPDFText
+} from "./chunk-3PWCMXIR.js";
 import "./chunk-CHHABXPE.js";
 import {
   runSideQuery
@@ -30,16 +32,17 @@ import {
   ToolDisplayNames,
   ToolNames
 } from "./chunk-6HY6IF3Z.js";
-import "./chunk-4PKCUT7F.js";
+import "./chunk-QIHHJKXT.js";
 import "./chunk-F6WFNA7U.js";
-import "./chunk-46UV252V.js";
+import "./chunk-WZAD4ZNJ.js";
 import "./chunk-FPGTNKCP.js";
+import "./chunk-YHC2EYYG.js";
 import "./chunk-CPHEPGAO.js";
-import "./chunk-P7MPQI75.js";
-import "./chunk-FDGGZIYW.js";
-import "./chunk-EL5SXY3T.js";
+import "./chunk-DVR7XKO5.js";
+import "./chunk-YECDICIO.js";
+import "./chunk-XT4RKHVE.js";
 import "./chunk-HHJLM3WQ.js";
-import "./chunk-K5IDV3PC.js";
+import "./chunk-D34RDOLP.js";
 import {
   createDebugLogger,
   getErrorMessage

package/chunks/{web-search-5OXHEZPV.js → web-search-LHPM6QWC.js}

@@ -3,7 +3,7 @@
 import {
   buildModelIdContext,
   resolveModelId
-} from "./chunk-5EYKMUUY.js";
+} from "./chunk-SR2LYSMT.js";
 import {
   DASHSCOPE_REGIONAL_HOSTS,
   OpenAI
@@ -25,7 +25,7 @@ import {
   ToolDisplayNames,
   ToolNames
 } from "./chunk-6HY6IF3Z.js";
-import "./chunk-4PKCUT7F.js";
+import "./chunk-QIHHJKXT.js";
 import "./chunk-F6WFNA7U.js";
 import "./chunk-FPGTNKCP.js";
 import {

package/chunks/{workflow-ISQJHPG2.js → workflow-4CUO2BV7.js}

@@ -9,27 +9,28 @@ import {
   generateAgentWorktreeSlug,
   isTerminalWorkflowStatus,
   rebuildToolRegistryOnOverride,
+  resolveExternalWorktreeDir,
   resolveSavedWorkflowScript,
   toModelVisibleSubagentResult,
   writeWorkflowSnapshot,
   writeWorktreeSessionMarker
-} from "./chunk-4S5337WV.js";
+} from "./chunk-XC377TLN.js";
 import "./chunk-GOFAQQZA.js";
 import "./chunk-5M6IDOMF.js";
 import "./chunk-TWPJO254.js";
 import "./chunk-CQ35AJ4Z.js";
-import "./chunk-DGZEMW5R.js";
-import "./chunk-WSH6GRKG.js";
-import "./chunk-CKSJECTU.js";
-import "./chunk-OVZPVYZB.js";
+import "./chunk-FS5NGKWC.js";
+import "./chunk-SLILKYV2.js";
+import "./chunk-NVRMCWTP.js";
+import "./chunk-AKBOLMUF.js";
 import {
   parsePositiveIntegerEnv
 } from "./chunk-6PVPNMXU.js";
-import "./chunk-5EYKMUUY.js";
+import "./chunk-SR2LYSMT.js";
 import "./chunk-IRH27ZC2.js";
 import "./chunk-QHWCP53L.js";
-import "./chunk-Y3YCSWG5.js";
-import "./chunk-UPDOZBWO.js";
+import "./chunk-OBJYN4MX.js";
+import "./chunk-2C6HJMG3.js";
 import "./chunk-O6GEWCJA.js";
 import "./chunk-T26EAKDL.js";
 import "./chunk-ZPJWUGCS.js";
@@ -37,14 +38,14 @@ import "./chunk-CPBF7KYF.js";
 import {
   SUBAGENT_PLAN_LIFECYCLE_TOOLS
 } from "./chunk-RWDNJBWN.js";
-import "./chunk-25EYDK42.js";
+import "./chunk-WPVUOVYX.js";
 import "./chunk-MIPFDQAF.js";
 import "./chunk-MLXTMF7H.js";
 import "./chunk-KV27IEHM.js";
 import "./chunk-E3DYKPYZ.js";
-import "./chunk-OMLJNPBE.js";
-import "./chunk-OXCMMLED.js";
-import "./chunk-TIGA2IVL.js";
+import "./chunk-4ZMS3JCR.js";
+import "./chunk-DGJ7O55J.js";
+import "./chunk-OO4FKHLO.js";
 import "./chunk-SAH4BD2J.js";
 import "./chunk-XLLKYULU.js";
 import {
@@ -58,7 +59,7 @@ import "./chunk-AQ37AY7B.js";
 import {
   WorkspaceContext
 } from "./chunk-KBXKR5R2.js";
-import "./chunk-GMIEIY3Y.js";
+import "./chunk-I3N2Z25H.js";
 import "./chunk-NAVJD2PQ.js";
 import "./chunk-ROIYNTHJ.js";
 import "./chunk-2B2BF7P7.js";
@@ -66,7 +67,6 @@ import "./chunk-P3QQPMQA.js";
 import "./chunk-YZHRN3CF.js";
 import "./chunk-FAAUPSY2.js";
 import "./chunk-KM73TBQ4.js";
-import "./chunk-MPHPFVKK.js";
 import "./chunk-AXMWHKXA.js";
 import "./chunk-GLCZKT5V.js";
 import {
@@ -79,9 +79,10 @@ import {
   logWorkflowRun,
   read,
   writeLine
-} from "./chunk-RVOJ2FBP.js";
+} from "./chunk-KC4WMLZO.js";
 import "./chunk-YRLW2MSX.js";
 import "./chunk-VGC4I5JJ.js";
+import "./chunk-3PWCMXIR.js";
 import "./chunk-CHHABXPE.js";
 import "./chunk-MA2HEDVP.js";
 import {
@@ -93,18 +94,19 @@ import {
   ToolDisplayNames,
   ToolNames
 } from "./chunk-6HY6IF3Z.js";
-import "./chunk-4PKCUT7F.js";
+import "./chunk-QIHHJKXT.js";
 import "./chunk-F6WFNA7U.js";
-import "./chunk-46UV252V.js";
+import "./chunk-WZAD4ZNJ.js";
 import "./chunk-FPGTNKCP.js";
+import "./chunk-YHC2EYYG.js";
 import "./chunk-CPHEPGAO.js";
-import "./chunk-P7MPQI75.js";
-import "./chunk-FDGGZIYW.js";
+import "./chunk-DVR7XKO5.js";
+import "./chunk-YECDICIO.js";
 import {
   stripAnsiAndControl
-} from "./chunk-EL5SXY3T.js";
+} from "./chunk-XT4RKHVE.js";
 import "./chunk-HHJLM3WQ.js";
-import "./chunk-K5IDV3PC.js";
+import "./chunk-D34RDOLP.js";
 import {
   createDebugLogger
 } from "./chunk-BUQDLC2G.js";
@@ -915,7 +917,7 @@ function createWorkflowSandbox(opts) {
       // FIX-Round1-T13: throw on any opts key not in the allowlist \u2014 catches
       // typos like { scema: ... } that previously slipped through the
       // [key:string]: unknown index signature.
-      const KNOWN_AGENT_OPTS = ['label', 'phase', 'schema', 'model', 'isolation', 'agentType', 'stallMs'];
+      const KNOWN_AGENT_OPTS = ['label', 'phase', 'schema', 'model', 'isolation', 'agentType', 'stallMs', 'workingDir'];
       globalThis.agent = vmAsync(function (prompt, agentOpts) {
         agentOpts = agentOpts || {};
         const keys = Object.keys(agentOpts);
@@ -945,6 +947,34 @@ function createWorkflowSandbox(opts) {
             "Known modes are: 'worktree', 'remote'."
           );
         }
+        // NOTE: this init script is a host-side template literal \u2014 no
+        // backticks anywhere below, in code or comments.
+        //
+        // A non-number stallMs is silently dropped downstream and the
+        // default watchdog applies, contradicting "0 disables the watchdog"
+        // \u2014 refuse it loudly like the other option gates.
+        if (agentOpts.stallMs !== undefined && (typeof agentOpts.stallMs !== 'number' || !Number.isFinite(agentOpts.stallMs))) {
+          throw new Error("agent({stallMs}): must be a finite number of milliseconds (0 disables the watchdog).");
+        }
+        // workingDir pins the agent to a worktree the CALLER already owns;
+        // isolation creates and reaps one. Asking for both is a contradiction
+        // about who owns the directory's lifetime, so name it here rather than
+        // silently letting one win.
+        if (agentOpts.workingDir !== undefined) {
+          if (typeof agentOpts.workingDir !== 'string' || agentOpts.workingDir.trim().length === 0) {
+            throw new Error(
+              "agent({workingDir}): must be a non-empty string naming an existing " +
+              "git worktree of this repository."
+            );
+          }
+          if (agentOpts.isolation !== undefined) {
+            throw new Error(
+              "agent({workingDir, isolation}): incompatible options. workingDir " +
+              "pins the agent to a worktree you already own; isolation creates " +
+              "a fresh one and removes it afterwards. Pass one."
+            );
+          }
+        }
         if (typeof agentOpts.phase === 'string' && agentOpts.phase.length > 0) {
           if (__b.lastPhase() !== agentOpts.phase) {
             __b.pushPhase(agentOpts.phase);
@@ -1529,7 +1559,13 @@ var debugLogger4 = createDebugLogger("WORKFLOW_JOURNAL");
 var JOURNAL_KEY_VERSION = "v2";
 function canonicalizeAgentOpts(opts) {
   const projected = {};
-  for (const k of ["schema", "model", "isolation", "agentType"]) {
+  for (const k of [
+    "schema",
+    "model",
+    "isolation",
+    "agentType",
+    "workingDir"
+  ]) {
     const v = opts[k];
     if (v === void 0 || typeof v === "function") continue;
     projected[k] = v;
@@ -1783,8 +1819,49 @@ function resolveConcurrencyLimit(env = process.env) {
   return Math.max(1, Math.min(16, os.cpus().length - 2));
 }
 __name(resolveConcurrencyLimit, "resolveConcurrencyLimit");
-var WORKFLOW_SUBAGENT_MAX_TURNS = 50;
-var WORKFLOW_SUBAGENT_MAX_TIME_MINUTES = 10;
+var DEFAULT_WORKFLOW_SUBAGENT_MAX_TURNS = 50;
+var DEFAULT_WORKFLOW_SUBAGENT_MAX_TIME_MINUTES = 10;
+var WORKFLOW_SUBAGENT_MAX_TURNS_ENV = "QWEN_CODE_WORKFLOW_AGENT_MAX_TURNS";
+var WORKFLOW_SUBAGENT_MAX_MINUTES_ENV = "QWEN_CODE_WORKFLOW_AGENT_MAX_MINUTES";
+var HARD_WORKFLOW_SUBAGENT_MAX_TURNS_CEILING = 500;
+var HARD_WORKFLOW_SUBAGENT_MAX_MINUTES_CEILING = 100;
+function resolveSubagentBound(envName, defaultValue, ceiling, env) {
+  const raw = env[envName];
+  if (raw === void 0 || raw.trim() === "") return defaultValue;
+  const parsed = parsePositiveIntegerEnv(raw, 0);
+  if (parsed < 1) {
+    debugLogger.warn(
+      `Invalid ${envName}=${JSON.stringify(raw)}, using default (${defaultValue})`
+    );
+    return defaultValue;
+  }
+  if (parsed > ceiling) {
+    debugLogger.warn(
+      `${envName}=${parsed} exceeds hard ceiling (${ceiling}); clamping.`
+    );
+    return ceiling;
+  }
+  return parsed;
+}
+__name(resolveSubagentBound, "resolveSubagentBound");
+function resolveSubagentMaxTurns(env = process.env) {
+  return resolveSubagentBound(
+    WORKFLOW_SUBAGENT_MAX_TURNS_ENV,
+    DEFAULT_WORKFLOW_SUBAGENT_MAX_TURNS,
+    HARD_WORKFLOW_SUBAGENT_MAX_TURNS_CEILING,
+    env
+  );
+}
+__name(resolveSubagentMaxTurns, "resolveSubagentMaxTurns");
+function resolveSubagentMaxTimeMinutes(env = process.env) {
+  return resolveSubagentBound(
+    WORKFLOW_SUBAGENT_MAX_MINUTES_ENV,
+    DEFAULT_WORKFLOW_SUBAGENT_MAX_TIME_MINUTES,
+    HARD_WORKFLOW_SUBAGENT_MAX_MINUTES_CEILING,
+    env
+  );
+}
+__name(resolveSubagentMaxTimeMinutes, "resolveSubagentMaxTimeMinutes");
 var WORKFLOW_SUBAGENT_DISALLOWED_TOOLS = [
   ToolNames.ASK_USER_QUESTION,
   ToolNames.SEND_MESSAGE,
@@ -1907,11 +1984,11 @@ function attachDispatchTranscript(config, agentId, prompt, agentName, emitter, a
 }
 __name(attachDispatchTranscript, "attachDispatchTranscript");
 async function runSingleDispatch(config, prompt, opts, attemptSignal, emitter, workflowAgentId, agentIdentity, onTokens) {
-  const { AgentHeadless, ContextState } = await import("./agent-headless-GJCQMURW.js");
+  const { AgentHeadless, ContextState } = await import("./agent-headless-6WCF4J6N.js");
   const ctx = new ContextState();
   ctx.set("task_prompt", prompt);
   debugLogger.debug(`[workflow] Dispatch ${workflowAgentId}`);
-  if (opts.agentType === void 0 && opts.model === void 0 && opts.isolation === void 0 && opts.schema === void 0) {
+  if (opts.agentType === void 0 && opts.model === void 0 && opts.isolation === void 0 && opts.schema === void 0 && opts.workingDir === void 0) {
     const subagent = await AgentHeadless.create(
       agentIdentity.name,
       config,
@@ -1924,8 +2001,8 @@ async function runSingleDispatch(config, prompt, opts, attemptSignal, emitter, w
       // and the loop guards never tripped — combined with the cancellation
       // bug below, workflows were effectively unkillable.
       {
-        max_turns: WORKFLOW_SUBAGENT_MAX_TURNS,
-        max_time_minutes: WORKFLOW_SUBAGENT_MAX_TIME_MINUTES
+        max_turns: resolveSubagentMaxTurns(),
+        max_time_minutes: resolveSubagentMaxTimeMinutes()
       },
       // T11 (PR #4732 R1): disallow SendMessage / ExitPlanMode to align with
       // upstream Tg8 — closes the back-channel that would let a subagent
@@ -2023,12 +2100,34 @@ ${WORKFLOW_SUBAGENT_SYSTEM_PROMPT_WITH_SCHEMA}` : WORKFLOW_SUBAGENT_SYSTEM_PROMP
   };
   let worktreeIsolation = null;
   let effectiveContext = config;
+  if (opts.isolation !== void 0 && opts.workingDir !== void 0) {
+    throw new Error(
+      "agent({workingDir, isolation}): incompatible options. workingDir pins the agent to a worktree you already own; isolation creates a fresh one and removes it afterwards. Pass one."
+    );
+  }
   if (opts.isolation === "worktree") {
     worktreeIsolation = await provisionWorkflowWorktree(config);
-    effectiveContext = createWorktreeConfigOverride(
+    effectiveContext = createDirScopedConfigOverride(
       config,
       worktreeIsolation.path
     );
+  } else if (opts.workingDir !== void 0) {
+    if (typeof opts.workingDir !== "string" || opts.workingDir.trim().length === 0) {
+      throw new Error(
+        "agent({workingDir}): must be a non-empty string naming an existing git worktree of this repository."
+      );
+    }
+    const resolved = await resolveExternalWorktreeDir(
+      config,
+      opts.workingDir,
+      "workingDir"
+    );
+    if ("error" in resolved) {
+      throw new Error(
+        `agent({workingDir: ${sanitizeForErrorMessage(JSON.stringify(opts.workingDir))}}): ${sanitizeForErrorMessage(resolved.error)}`
+      );
+    }
+    effectiveContext = createDirScopedConfigOverride(config, resolved.path);
   }
   let onParentAbort;
   try {
@@ -2066,8 +2165,8 @@ ${WORKFLOW_SUBAGENT_SYSTEM_PROMPT_WITH_SCHEMA}` : WORKFLOW_SUBAGENT_SYSTEM_PROMP
         // own runConfig / maxTurns — these are workflow-level safety bounds,
         // not subagent-level preferences. P5 will refine via budget.
         runConfigOverrides: {
-          max_turns: WORKFLOW_SUBAGENT_MAX_TURNS,
-          max_time_minutes: WORKFLOW_SUBAGENT_MAX_TIME_MINUTES
+          max_turns: resolveSubagentMaxTurns(),
+          max_time_minutes: resolveSubagentMaxTimeMinutes()
         },
         eventEmitter
       }
@@ -2221,7 +2320,7 @@ async function provisionWorkflowWorktree(config) {
   };
 }
 __name(provisionWorkflowWorktree, "provisionWorkflowWorktree");
-function createWorktreeConfigOverride(base, wtPath) {
+function createDirScopedConfigOverride(base, wtPath) {
   const ov = Object.create(base);
   ov.targetDir = wtPath;
   ov.cwd = wtPath;
@@ -2229,7 +2328,10 @@ function createWorktreeConfigOverride(base, wtPath) {
   ov.getCwd = () => wtPath;
   ov.getWorkingDir = () => wtPath;
   ov.getProjectRoot = () => wtPath;
-  const wtFileService = new FileDiscoveryService(wtPath);
+  const wtFileService = new FileDiscoveryService(
+    wtPath,
+    base.getFileFilteringOptions().customIgnoreFiles
+  );
   ov.fileDiscoveryService = wtFileService;
   ov.getFileService = () => wtFileService;
   const wtWorkspace = new WorkspaceContext(wtPath);
@@ -2237,7 +2339,7 @@ function createWorktreeConfigOverride(base, wtPath) {
   ov.getWorkspaceContext = () => wtWorkspace;
   return ov;
 }
-__name(createWorktreeConfigOverride, "createWorktreeConfigOverride");
+__name(createDirScopedConfigOverride, "createDirScopedConfigOverride");
 async function cleanupWorkflowWorktree(isolation) {
   const wtService = new GitWorktreeService(isolation.repoRoot);
   const [hasChanges, hasUnmerged] = await Promise.all([
@@ -2853,7 +2955,7 @@ var WORKFLOW_PARAM_SCHEMA = {
   properties: {
     script: {
       type: "string",
-      description: `JavaScript source of the workflow. Wrapped as an async IIFE. May call the injected globals \`phase(title)\`, \`log(msg)\`, \`agent(prompt, opts?)\`, and read \`args\`. agent() opts: \`{ label?, phase?, schema?, model?, agentType?, isolation? }\`. \`schema\` (JSON Schema object): the subagent must deliver its result by calling \`structured_output\` with arguments matching the schema; agent() resolves to the validated object. Two failed attempts produce a terminal error "subagent completed without calling StructuredOutput (after 2 in-conversation nudges)". \`agentType\` (string): resolves against the declarative-agents registry (\`.qwen/agents/<name>.md\`, project then user then built-in). Unresolved names throw "agent({agentType}): agent type 'X' not found". \`model\` (string): per-call model override; routes provider correctly via the subagent runtime view. \`isolation\`: \`'worktree'\` provisions a fresh git worktree under \`<projectRoot>/.qwen/worktrees/agent-<7hex>\`; the worktree is auto-removed if no changes, otherwise the path and branch are returned alongside the result. \`'remote'\` throws "agent({isolation:'remote'}) is not available in this build" (parity with upstream). isolation=worktree refuses to run when the parent working tree has uncommitted changes (the subagent would see a stale HEAD). Workflow subagents always have SendMessage / Monitor / EnterPlanMode / ExitPlanMode in their disallowed-tool floor regardless of agentType. Concurrency: \`parallel([() => agent(...), ...])\` runs thunks through a shared per-run window (default \`max(1, min(16, cpus-2))\` agents in flight; override via \`${MAX_WORKFLOW_CONCURRENCY_ENV}\`) and resolves to a position-aligned array \u2014 a thunk that throws, or resolves to a non-JSON-serializable value, becomes \`null\` at its index (errors-as-data); parallel() itself rejects only on invalid arguments or abort. \`pipeline(items, ...stages)\` runs each item through the stages (staggered, no inter-stage barrier); a stage that throws, returns \`null\`, or returns a non-JSON-serializable value drops that item to \`null\`. Pass THUNKS to parallel, not eager calls: \`parallel([() => agent(...)])\`, not \`parallel([agent(...)])\`. At most ${DEFAULT_MAX_AGENTS_PER_RUN} agent() calls per run (override via \`${MAX_WORKFLOW_AGENTS_ENV}\`). \`Date.now()\` and \`Math.random()\` both throw \u2014 workflow scripts must be deterministic for resume. \`export const meta = {...}\` declarations are stripped before execution.`
+      description: `JavaScript source of the workflow. Wrapped as an async IIFE. May call the injected globals \`phase(title)\`, \`log(msg)\`, \`agent(prompt, opts?)\`, and read \`args\`. agent() opts: \`{ label?, phase?, schema?, model?, agentType?, isolation?, workingDir?, stallMs? }\`. \`schema\` (JSON Schema object): the subagent must deliver its result by calling \`structured_output\` with arguments matching the schema; agent() resolves to the validated object. Two failed attempts produce a terminal error "subagent completed without calling StructuredOutput (after 2 in-conversation nudges)". \`agentType\` (string): resolves against the declarative-agents registry (\`.qwen/agents/<name>.md\`, project then user then built-in). Unresolved names throw "agent({agentType}): agent type 'X' not found". \`model\` (string): per-call model override; routes provider correctly via the subagent runtime view. \`isolation\`: \`'worktree'\` provisions a fresh git worktree under \`<projectRoot>/.qwen/worktrees/agent-<7hex>\`; the worktree is auto-removed if no changes, otherwise the path and branch are returned alongside the result. \`'remote'\` throws "agent({isolation:'remote'}) is not available in this build" (parity with upstream). isolation=worktree refuses to run when the parent working tree has uncommitted changes (the subagent would see a stale HEAD). \`workingDir\` (string): pin the subagent to an EXISTING git worktree of this repository that the caller owns \u2014 nothing is created and nothing is removed. Use it when the directory the agent must work in already exists and its uncommitted state is the point (a review worktree, a checkout a previous step provisioned) \u2014 exactly the case isolation cannot serve. Mutually exclusive with \`isolation\`. The path must be a linked worktree of this repository registered via \`git worktree add\` (it may live anywhere on disk) \u2014 the main checkout is not eligible. \`stallMs\` (number, ms): a no-progress watchdog, not a wall-clock cap. The dispatch is aborted and retried (up to ${MAX_STALL_ATTEMPTS} attempts total) after this many milliseconds with no observable subagent progress once progress has begun (a dispatch that produces no first response is bounded by the subagent time cap, not this watchdog); the timer is suspended while a tool is in flight, so a legitimately slow tool is not a stall. Default ${DEFAULT_STALL_MS} (override via \`${MAX_WORKFLOW_STALL_MS_ENV}\`, whole seconds); \`0\` disables the watchdog. Wall time per attempt is bounded separately. Workflow subagents always have SendMessage / Monitor / EnterPlanMode / ExitPlanMode in their disallowed-tool floor regardless of agentType. Concurrency: \`parallel([() => agent(...), ...])\` runs thunks through a shared per-run window (default \`max(1, min(16, cpus-2))\` agents in flight; override via \`${MAX_WORKFLOW_CONCURRENCY_ENV}\`) and resolves to a position-aligned array \u2014 a thunk that throws, or resolves to a non-JSON-serializable value, becomes \`null\` at its index (errors-as-data); parallel() itself rejects only on invalid arguments or abort. \`pipeline(items, ...stages)\` runs each item through the stages (staggered, no inter-stage barrier); a stage that throws, returns \`null\`, or returns a non-JSON-serializable value drops that item to \`null\`. Pass THUNKS to parallel, not eager calls: \`parallel([() => agent(...)])\`, not \`parallel([agent(...)])\`. At most ${DEFAULT_MAX_AGENTS_PER_RUN} agent() calls per run (override via \`${MAX_WORKFLOW_AGENTS_ENV}\`). \`Date.now()\` and \`Math.random()\` both throw \u2014 workflow scripts must be deterministic for resume. \`export const meta = {...}\` declarations are stripped before execution.`
     },
     scriptPath: {
       type: "string",
@@ -3090,7 +3192,7 @@ Reach for one to be comprehensive (decompose the work and cover every part in pa
 
 **Runtime** \u2014 see the \`script\` parameter for the detailed authoring contract.
 
-\`phase(title)\`, \`log(msg)\`, \`agent(prompt, opts?)\`, \`parallel(thunks)\`, \`pipeline(items, ...stages)\`, \`workflow(nameOrRef, args?)\`, plus the \`args\` and \`budget\` globals. \`workflow()\` runs a saved workflow inline under this run's caps and nests one level only \u2014 a workflow reached through \`workflow()\` cannot call \`workflow()\` itself, and doing so throws. Saved workflows are \`<name>.js\` files under \`<projectRoot>/.qwen/workflows\` (project scope, also surfaced as \`/<name>\` slash commands) or \`~/.qwen/workflows\` (user scope, lower precedence when both define the same name); \`workflow('<name>')\` resolves against those two directories, while \`scriptPath\` takes an absolute path to a script anywhere. Default \`max(1, min(16, cpus-2))\` agents in flight per run (\`${MAX_WORKFLOW_CONCURRENCY_ENV}\`), up to ${DEFAULT_MAX_AGENTS_PER_RUN} agents total (\`${MAX_WORKFLOW_AGENTS_ENV}\`), under a 30-minute wall-clock cap per run (\`QWEN_CODE_MAX_WORKFLOW_SECONDS\`) \u2014 a fan-out near the agent cap will not fit inside the default cap. A per-run output-token cap may also be in effect: read \`budget.total\` (\`null\` = uncapped) before committing to a large fan-out, because once the cap is reached every further \`agent()\` call is refused \u2014 a bare sequential \`await agent()\` sees the rejection, while inside \`parallel()\`/\`pipeline()\` the refused slot becomes \`null\` and the script keeps running on partial results. Per-call \`agent({ schema, agentType, model, isolation: 'worktree' })\` covers structured-output contracts, declarative-agent selection, model override, and git-worktree-isolated subagents. \`resumeFromRunId\` resumes a prior run \u2014 agent() calls whose rolling prefix-hash matches the journal are served from cache for the longest unchanged prefix. Runs appear in the background-tasks view and the \`/workflows\` dialog (live phase tree, token usage, cooperative pause/resume, cancel); \`run_in_background: true\` returns a run handle immediately in the interactive TUI and delivers completion through the conversation. Scripts run in a node:vm sandbox with no filesystem or shell access \u2014 all I/O happens through the spawned agents.
+\`phase(title)\`, \`log(msg)\`, \`agent(prompt, opts?)\`, \`parallel(thunks)\`, \`pipeline(items, ...stages)\`, \`workflow(nameOrRef, args?)\`, plus the \`args\` and \`budget\` globals. \`workflow()\` runs a saved workflow inline under this run's caps and nests one level only \u2014 a workflow reached through \`workflow()\` cannot call \`workflow()\` itself, and doing so throws. Saved workflows are \`<name>.js\` files under \`<projectRoot>/.qwen/workflows\` (project scope, also surfaced as \`/<name>\` slash commands) or \`~/.qwen/workflows\` (user scope, lower precedence when both define the same name); \`workflow('<name>')\` resolves against those two directories, while \`scriptPath\` takes an absolute path to a script anywhere. Default \`max(1, min(16, cpus-2))\` agents in flight per run (\`${MAX_WORKFLOW_CONCURRENCY_ENV}\`), up to ${DEFAULT_MAX_AGENTS_PER_RUN} agents total (\`${MAX_WORKFLOW_AGENTS_ENV}\`), under a 30-minute wall-clock cap per run (\`QWEN_CODE_MAX_WORKFLOW_SECONDS\`) \u2014 a fan-out near the agent cap will not fit inside the default cap. Each subagent attempt is separately capped at ${DEFAULT_WORKFLOW_SUBAGENT_MAX_TURNS} turns (\`${WORKFLOW_SUBAGENT_MAX_TURNS_ENV}\`) and ${DEFAULT_WORKFLOW_SUBAGENT_MAX_TIME_MINUTES} minutes (\`${WORKFLOW_SUBAGENT_MAX_MINUTES_ENV}\`) \u2014 an attempt that hits either becomes \`null\` in \`parallel()\`/\`pipeline()\`, indistinguishable from a missing agent, so raise them for legitimately long work. A per-run output-token cap may also be in effect: read \`budget.total\` (\`null\` = uncapped) before committing to a large fan-out, because once the cap is reached every further \`agent()\` call is refused \u2014 a bare sequential \`await agent()\` sees the rejection, while inside \`parallel()\`/\`pipeline()\` the refused slot becomes \`null\` and the script keeps running on partial results. Per-call \`agent({ schema, agentType, model, isolation: 'worktree', workingDir, stallMs })\` covers structured-output contracts, declarative-agent selection, model override, git-worktree-isolated subagents, pinning an agent to a caller-owned worktree, and the no-progress stall watchdog (\`stallMs: 0\` disables it). \`resumeFromRunId\` resumes a prior run \u2014 agent() calls whose rolling prefix-hash matches the journal are served from cache for the longest unchanged prefix. Runs appear in the background-tasks view and the \`/workflows\` dialog (live phase tree, token usage, cooperative pause/resume, cancel); \`run_in_background: true\` returns a run handle immediately in the interactive TUI and delivers completion through the conversation. Scripts run in a node:vm sandbox with no filesystem or shell access \u2014 all I/O happens through the spawned agents.
 
 **Scout first, then orchestrate**