@qwen-code/qwen-code 0.21.4 → 0.21.5-nightly.20260805.32e274157

package/chunks/{chunk-LPLMUGIM.js → chunk-5X76FZLI.js}

@@ -17,7 +17,7 @@ import {
 import {
   formatHistoryGapNotice,
   indexGapsByChild
-} from "./chunk-AFJSRJTO.js";
+} from "./chunk-2B6FBVWE.js";
 import {
   stringWidth
 } from "./chunk-2MIN6GRR.js";
@@ -29,21 +29,21 @@ import {
 } from "./chunk-3SH53ANB.js";
 import {
   t
-} from "./chunk-FV4TUUDE.js";
+} from "./chunk-O4WOWHMZ.js";
 import {
   getToolResponseDisplayText,
   stripTrailingUserPromptSubmitContextPart
-} from "./chunk-E2SYUEIA.js";
+} from "./chunk-5OAMVWFL.js";
 import {
   stripAnsi
 } from "./chunk-TWPJO254.js";
 import {
   GoalPersistenceUnavailableError,
   parseGoalStateRecordPayloadV2
-} from "./chunk-HFVW54NL.js";
+} from "./chunk-MBEMTXQT.js";
 import {
   ToolDisplayNames
-} from "./chunk-CFDR3GNL.js";
+} from "./chunk-D7D7RXIJ.js";
 import {
   init_esbuild_shims
 } from "./chunk-5O2XNYP6.js";

package/chunks/{chunk-M2L4TMH3.js → chunk-6HTEECQY.js}

@@ -2,14 +2,14 @@
 "use strict";
 import {
   functionResponsePartsToString
-} from "./chunk-WDLQGFWP.js";
+} from "./chunk-TYWI5NXY.js";
 import {
   parseAndFormatApiError
-} from "./chunk-E2SYUEIA.js";
+} from "./chunk-5OAMVWFL.js";
 import {
   formatVisionBridgeNoticeDisplay,
   isVisionBridgeNoticeDisplay
-} from "./chunk-JDJ7SC4E.js";
+} from "./chunk-NMBDPO63.js";
 import {
   init_esbuild_shims
 } from "./chunk-5O2XNYP6.js";

package/chunks/{chunk-KHSJSMFS.js → chunk-6I6WUVYI.js}

@@ -2,7 +2,7 @@
 "use strict";
 import {
   registerCleanup
-} from "./chunk-SV5X2EUV.js";
+} from "./chunk-FMU2QVA5.js";
 import {
   init_esbuild_shims
 } from "./chunk-5O2XNYP6.js";

package/chunks/{chunk-LLMGP5IC.js → chunk-6WBWIPBF.js}

@@ -6,10 +6,10 @@ import {
 } from "./chunk-S6LOFUVP.js";
 import {
   isInForkExecution
-} from "./chunk-7UXI6P72.js";
+} from "./chunk-WVAESIM6.js";
 import {
   ToolNames
-} from "./chunk-CFDR3GNL.js";
+} from "./chunk-D7D7RXIJ.js";
 import {
   init_esbuild_shims
 } from "./chunk-5O2XNYP6.js";

package/chunks/{chunk-PQ5JFCNL.js → chunk-762UTZQZ.js}

@@ -2,13 +2,13 @@
 "use strict";
 import {
   t
-} from "./chunk-FV4TUUDE.js";
+} from "./chunk-O4WOWHMZ.js";
 import {
   SessionReferenceService,
   SessionService,
   readManyFiles,
   stripTerminalControlSequences
-} from "./chunk-E2SYUEIA.js";
+} from "./chunk-5OAMVWFL.js";
 import {
   emptyMcpResourceText,
   formatMcpResourceContents,
@@ -16,7 +16,7 @@ import {
 } from "./chunk-ZPJWUGCS.js";
 import {
   shouldRunVisionBridge
-} from "./chunk-JDJ7SC4E.js";
+} from "./chunk-NMBDPO63.js";
 import {
   Storage,
   getErrorMessage,

package/chunks/{chunk-HBCKZF2A.js → chunk-7EW7CYLA.js}

@@ -14,7 +14,7 @@ import {
 init_esbuild_shims();
 async function getCliVersion() {
   const pkgJson = await getPackageJson();
-  return "0.21.4";
+  return "0.21.5-nightly.20260805.32e274157";
 }
 __name(getCliVersion, "getCliVersion");
 

package/chunks/{chunk-4PZ7SPD5.js → chunk-7FKLLD4X.js}

@@ -8,7 +8,7 @@ import {
 } from "./chunk-6PEXNQTX.js";
 import {
   isWorkspaceTrusted
-} from "./chunk-URVJ4AZC.js";
+} from "./chunk-MKMUBBEX.js";
 import {
   require_main
 } from "./chunk-5M6IDOMF.js";

package/chunks/{chunk-XSOAW7FC.js → chunk-AE7AKP3E.js}

@@ -7,22 +7,22 @@ import {
   parseAcpBaseModelId,
   resolveCliGenerationConfig,
   sanitizeProviderBaseUrl
-} from "./chunk-IMGNGOGC.js";
+} from "./chunk-PQ2J56BJ.js";
 import {
   snapshotProcessEnv
-} from "./chunk-GDREW3U5.js";
+} from "./chunk-OIVG6IHL.js";
 import {
   STATUS_SCHEMA_VERSION
-} from "./chunk-PDDYAXL2.js";
+} from "./chunk-WIRAPZ62.js";
 import {
   loadSettings
-} from "./chunk-KB6VSG2U.js";
+} from "./chunk-GXP44JOS.js";
 import {
   ModelsConfig
-} from "./chunk-E2SYUEIA.js";
+} from "./chunk-5OAMVWFL.js";
 import {
   APPROVAL_MODES
-} from "./chunk-LLMGP5IC.js";
+} from "./chunk-6WBWIPBF.js";
 import {
   tokenLimit
 } from "./chunk-ZBVS26BY.js";

package/chunks/{chunk-UATJZOAJ.js → chunk-ASS3UQB5.js}

@@ -8,16 +8,16 @@ import {
   initializeI18n,
   resolveLanguageSetting,
   t
-} from "./chunk-FV4TUUDE.js";
+} from "./chunk-O4WOWHMZ.js";
 import {
   IdeClient
-} from "./chunk-E2SYUEIA.js";
+} from "./chunk-5OAMVWFL.js";
 import {
   AuthEvent,
   IdeConnectionEvent,
   logAuth,
   logIdeConnection
-} from "./chunk-JDJ7SC4E.js";
+} from "./chunk-NMBDPO63.js";
 import {
   getErrorMessage
 } from "./chunk-3RXUYQJI.js";

package/chunks/{chunk-XGA6XHH3.js → chunk-AXOFMDZC.js}

@@ -2,16 +2,16 @@
 "use strict";
 import {
   useKeypress
-} from "./chunk-OOPFAIWP.js";
+} from "./chunk-Q7EXR3W2.js";
 import {
   require_react
 } from "./chunk-5QWWOFGG.js";
 import {
   t
-} from "./chunk-FV4TUUDE.js";
+} from "./chunk-O4WOWHMZ.js";
 import {
   APPROVAL_MODES
-} from "./chunk-LLMGP5IC.js";
+} from "./chunk-6WBWIPBF.js";
 import {
   init_esbuild_shims
 } from "./chunk-5O2XNYP6.js";

package/chunks/chunk-BKHCW2BI.js

@@ -0,0 +1,41 @@
+// Force strict mode and setup for ESM
+"use strict";
+import {
+  init_esbuild_shims
+} from "./chunk-5O2XNYP6.js";
+import {
+  __name
+} from "./chunk-J2S4EL5Y.js";
+
+// packages/acp-bridge/src/externalToolGuard.ts
+init_esbuild_shims();
+var PRIVATE_EXTERNAL_TOOL_GUARD_ENV = "QWEN_CODE_PRIVATE_EXTERNAL_TOOL_GUARD";
+var EXTERNAL_TOOL_GUARD_READY_META_KEY = "qwen-code/external-tool-guard-ready";
+var EXTERNAL_TOOL_GUARD_REQUIRED_VALUE = "required-v1";
+var EXTERNAL_TOOL_GUARD_TOKEN_ENV = "QWEN_CODE_EXTERNAL_TOOL_GUARD_TOKEN";
+var EXTERNAL_TOOL_GUARD_MAX_DENIAL_REASON_CHARS = 500;
+function containsUnsafeExternalToolGuardControlCharacter(value) {
+  return [...value].some((character) => {
+    const code = character.charCodeAt(0);
+    return code < 32 || code >= 127 && code <= 159 || code === 8232 || code === 8233;
+  });
+}
+__name(containsUnsafeExternalToolGuardControlCharacter, "containsUnsafeExternalToolGuardControlCharacter");
+function isValidExternalToolGuardDenialReason(reason) {
+  return typeof reason === "string" && reason.trim().length > 0 && reason.length <= EXTERNAL_TOOL_GUARD_MAX_DENIAL_REASON_CHARS && !containsUnsafeExternalToolGuardControlCharacter(reason);
+}
+__name(isValidExternalToolGuardDenialReason, "isValidExternalToolGuardDenialReason");
+
+export {
+  PRIVATE_EXTERNAL_TOOL_GUARD_ENV,
+  EXTERNAL_TOOL_GUARD_READY_META_KEY,
+  EXTERNAL_TOOL_GUARD_REQUIRED_VALUE,
+  EXTERNAL_TOOL_GUARD_TOKEN_ENV,
+  containsUnsafeExternalToolGuardControlCharacter,
+  isValidExternalToolGuardDenialReason
+};
+/**
+ * @license
+ * Copyright 2025 Qwen Team
+ * SPDX-License-Identifier: Apache-2.0
+ */

package/chunks/{chunk-DZPOYHBT.js → chunk-D6FISK43.js}

@@ -2,7 +2,7 @@
 "use strict";
 import {
   AuthType
-} from "./chunk-TXZDRD36.js";
+} from "./chunk-LCCBAGRT.js";
 import {
   init_esbuild_shims
 } from "./chunk-5O2XNYP6.js";

package/chunks/{chunk-CFDR3GNL.js → chunk-D7D7RXIJ.js}

@@ -15061,6 +15061,16 @@ __name(fixStringValues, "fixStringValues");
 
 // packages/core/src/tools/tool-error.ts
 init_esbuild_shims();
+var StructuredToolError = class extends Error {
+  constructor(message, errorType) {
+    super(message);
+    this.errorType = errorType;
+  }
+  static {
+    __name(this, "StructuredToolError");
+  }
+  name = "StructuredToolError";
+};
 
 // packages/core/src/tools/tools.ts
 init_esbuild_shims();
@@ -15694,6 +15704,7 @@ export {
   require_fast_uri,
   require_dist,
   SchemaValidator,
+  StructuredToolError,
   AgentStatistics,
   BaseToolInvocation,
   BaseDeclarativeTool,

package/chunks/{chunk-FPPVCCAH.js → chunk-DNPP267F.js}

@@ -2,7 +2,7 @@
 "use strict";
 import {
   t
-} from "./chunk-FV4TUUDE.js";
+} from "./chunk-O4WOWHMZ.js";
 import {
   init_esbuild_shims
 } from "./chunk-5O2XNYP6.js";

package/chunks/{chunk-I32URQI7.js → chunk-EA2CKB6L.js}

@@ -2,7 +2,7 @@
 "use strict";
 import {
   HistoryReplayer
-} from "./chunk-DHNFB7NC.js";
+} from "./chunk-2QOLRESU.js";
 import {
   ChannelDeliveryError,
   MAX_CHANNEL_DELIVERY_TEXT_LENGTH
@@ -13,7 +13,7 @@ import {
 import {
   getUserSettingsPath,
   loadSettings
-} from "./chunk-KB6VSG2U.js";
+} from "./chunk-GXP44JOS.js";
 import {
   getSystemDefaultsPath,
   getSystemSettingsPath
@@ -21,18 +21,18 @@ import {
 import {
   findEnvFiles,
   preResolveHomeEnvOverrides
-} from "./chunk-4PZ7SPD5.js";
+} from "./chunk-7FKLLD4X.js";
 import {
   getResponseText,
   ideContextStore
-} from "./chunk-E2SYUEIA.js";
+} from "./chunk-5OAMVWFL.js";
 import {
   MAX_CHANNEL_DELIVERY_NAME_LENGTH,
   MAX_CHANNEL_DELIVERY_TARGET_ID_LENGTH
 } from "./chunk-MOHAWIAW.js";
 import {
   parseGoalSnapshotV2
-} from "./chunk-HFVW54NL.js";
+} from "./chunk-MBEMTXQT.js";
 import {
   Storage,
   createDebugLogger

package/chunks/{chunk-C5YFS6VR.js → chunk-EL4W7MGQ.js}

@@ -2,22 +2,22 @@
 "use strict";
 import {
   t
-} from "./chunk-FV4TUUDE.js";
+} from "./chunk-O4WOWHMZ.js";
 import {
   computeThresholds,
   getCoreSystemPrompt,
   resolveInteractionMode
-} from "./chunk-E2SYUEIA.js";
+} from "./chunk-5OAMVWFL.js";
 import {
   buildSkillLlmContent
 } from "./chunk-K623ENWT.js";
 import {
   DiscoveredMCPTool,
   uiTelemetryService
-} from "./chunk-JDJ7SC4E.js";
+} from "./chunk-NMBDPO63.js";
 import {
   ToolNames
-} from "./chunk-CFDR3GNL.js";
+} from "./chunk-D7D7RXIJ.js";
 import {
   DEFAULT_TOKEN_LIMIT
 } from "./chunk-ZBVS26BY.js";

package/chunks/{chunk-QXTGHZCX.js → chunk-FDLXWNCE.js}

@@ -2,17 +2,17 @@
 "use strict";
 import {
   performStandaloneUpdate
-} from "./chunk-THLV7YGY.js";
+} from "./chunk-XIKKANF4.js";
 import {
   updateEventEmitter
 } from "./chunk-YAF2MQZ6.js";
 import {
   t
-} from "./chunk-FV4TUUDE.js";
+} from "./chunk-O4WOWHMZ.js";
 import {
   getInstallationInfo,
   resolveUpdateCommand
-} from "./chunk-RNKGMZEW.js";
+} from "./chunk-MFTOMYE2.js";
 import {
   createDebugLogger
 } from "./chunk-3RXUYQJI.js";

package/chunks/{chunk-PCVMRBLN.js → chunk-FFCSRU3F.js}

@@ -2,7 +2,7 @@
 "use strict";
 import {
   runExitCleanup
-} from "./chunk-SV5X2EUV.js";
+} from "./chunk-FMU2QVA5.js";
 import {
   init_esbuild_shims
 } from "./chunk-5O2XNYP6.js";

package/chunks/{chunk-SV5X2EUV.js → chunk-FMU2QVA5.js}

@@ -64,7 +64,7 @@ async function runExitCleanup(options = {}) {
 }
 __name(runExitCleanup, "runExitCleanup");
 async function cleanupCheckpoints() {
-  const { Storage } = await import("./deferred-core-runtime-ZQ4JIAJD.js");
+  const { Storage } = await import("./deferred-core-runtime-QNEBJ3DP.js");
   const storage = new Storage(process.cwd());
   const tempDir = storage.getProjectTempDir();
   const checkpointsDir = join(tempDir, "checkpoints");

package/chunks/{chunk-2ON2O4MD.js → chunk-FV2JYSWS.js}

@@ -18,12 +18,15 @@ import {
 import {
   normalizeServeChannelSelection
 } from "./chunk-ALMR3E6Q.js";
+import {
+  EXTERNAL_TOOL_GUARD_TOKEN_ENV
+} from "./chunk-BKHCW2BI.js";
 import {
   loadSettings
-} from "./chunk-KB6VSG2U.js";
+} from "./chunk-GXP44JOS.js";
 import {
   MCP_BUDGET_WARN_FRACTION
-} from "./chunk-E2SYUEIA.js";
+} from "./chunk-5OAMVWFL.js";
 import {
   parsePositiveIntegerEnv
 } from "./chunk-6PVPNMXU.js";
@@ -214,6 +217,16 @@ var serveCommand = {
   }).option("permission-response-timeout-ms", {
     type: "number",
     description: "Wall-clock timeout for a single human permission / ask_user_question response in daemon (ACP) mode (ms). 0 = disabled (wait forever). Default: 300000 (5 min)."
+  }).option("external-tool-guard-mode", {
+    choices: ["off", "required"],
+    default: "off",
+    description: "Managed ACP pre-execution policy mode. Default off preserves current CLI and daemon behavior. Required fails startup unless a compatible loopback provider is available."
+  }).option("external-tool-guard-endpoint", {
+    type: "string",
+    description: "Origin-only loopback HTTP(S) endpoint for required external tool guarding, for example http://127.0.0.1:8787."
+  }).option("external-tool-guard-timeout-ms", {
+    type: "number",
+    description: "Per-handshake/prepare external tool guard timeout in milliseconds. Default: 3000."
   }).option("rate-limit", {
     type: "boolean",
     description: "Enable per-tier HTTP rate limiting. Tiers: prompt (10/min), mutation (30/min), read (120/min). Health, heartbeat, SSE, and /acp are exempt."
@@ -331,7 +344,9 @@ var serveCommand = {
         process.exit(1);
       }
     }
-    const { runQwenServe } = await import("./run-qwen-serve-3AIDNNHO.js");
+    const externalToolGuardToken = process.env[EXTERNAL_TOOL_GUARD_TOKEN_ENV] ?? "";
+    delete process.env[EXTERNAL_TOOL_GUARD_TOKEN_ENV];
+    const { runQwenServe } = await import("./run-qwen-serve-SEL3TISE.js");
     try {
       const handle = await runQwenServe({
         port: argv.port,
@@ -367,6 +382,16 @@ var serveCommand = {
         ...argv["permission-response-timeout-ms"] !== void 0 ? {
           permissionResponseTimeoutMs: argv["permission-response-timeout-ms"]
         } : {},
+        ...argv["external-tool-guard-mode"] === "required" ? {
+          externalToolGuard: {
+            mode: "required",
+            endpoint: argv["external-tool-guard-endpoint"] ?? "",
+            token: externalToolGuardToken,
+            ...argv["external-tool-guard-timeout-ms"] !== void 0 ? {
+              timeoutMs: argv["external-tool-guard-timeout-ms"]
+            } : {}
+          }
+        } : {},
         ...rateLimit ? { rateLimit: true } : {},
         ...rateLimitPrompt !== void 0 ? { rateLimitPrompt } : {},
         ...rateLimitMutation !== void 0 ? { rateLimitMutation } : {},

package/chunks/{chunk-KB6VSG2U.js → chunk-GXP44JOS.js}

@@ -21,12 +21,12 @@ import {
   getLanguageNameFromLocale,
   getLanguageSettingsOptions,
   t
-} from "./chunk-FV4TUUDE.js";
+} from "./chunk-O4WOWHMZ.js";
 import {
   getHomeEnvFallbackVars,
   loadEnvironment,
   preResolveHomeEnvOverrides
-} from "./chunk-4PZ7SPD5.js";
+} from "./chunk-7FKLLD4X.js";
 import {
   ENV_CORRUPTED_PATH,
   ENV_WAS_RECOVERED
@@ -34,7 +34,7 @@ import {
 import {
   isWorkspaceTrusted,
   updateSettingsFilePreservingFormat
-} from "./chunk-URVJ4AZC.js";
+} from "./chunk-MKMUBBEX.js";
 import {
   require_strip_json_comments
 } from "./chunk-ALGGS7UH.js";
@@ -46,17 +46,17 @@ import {
   DEFAULT_TOOL_RESULTS_TOTAL_CHARS_THRESHOLD,
   DEFAULT_TRUNCATE_TOOL_OUTPUT_LINES,
   DEFAULT_TRUNCATE_TOOL_OUTPUT_THRESHOLD
-} from "./chunk-E2SYUEIA.js";
+} from "./chunk-5OAMVWFL.js";
 import {
   stripRuntimeSnapshotPrefix
-} from "./chunk-DZPOYHBT.js";
+} from "./chunk-D6FISK43.js";
 import {
   DEFAULT_QWEN_CUSTOM_IGNORE_FILE_NAMES
 } from "./chunk-432XCUHF.js";
 import {
   DEFAULT_SENSITIVE_SPAN_ATTRIBUTE_MAX_LENGTH,
   SENSITIVE_SPAN_ATTRIBUTE_MAX_LENGTH_LIMIT
-} from "./chunk-G7XXKQYS.js";
+} from "./chunk-LKRMNRSN.js";
 import {
   FatalConfigError,
   Storage,
@@ -1650,7 +1650,7 @@ var SETTINGS_SCHEMA = {
             category: "Context",
             requiresRestart: false,
             default: DEFAULT_TOOL_RESULTS_TOTAL_CHARS_THRESHOLD,
-            description: "Total compactable tool result output characters allowed in history before clearing oldest results. Use -1 to disable. This is a soft threshold: protected recent tool results may keep the total above it.",
+            description: "Total compactable tool result output characters allowed in history before clearing oldest results. When exceeded, oldest results are cleared down to half this threshold (best effort) to preserve the provider prompt cache on later turns. Use -1 to disable. This is a soft threshold: protected recent tool results may keep the total above it.",
             showInDialog: false
           }
         }

package/chunks/{chunk-BC4LTKEG.js → chunk-HP6MKLWU.js}

@@ -563,7 +563,7 @@ var WorkspaceRegistrationStore = class {
     return removed;
   }
   async update(mutate) {
-    const { atomicWriteFile } = await import("./deferred-core-runtime-ZQ4JIAJD.js");
+    const { atomicWriteFile } = await import("./deferred-core-runtime-QNEBJ3DP.js");
     return withInProcessLock(this.filePath, async () => {
       const lock = await acquireFileLock(this.filePath);
       let committed = false;