@qwen-code/qwen-code 0.21.5 → 0.21.6

package/chunks/{chunk-ZPGMDT4S.js → chunk-PX5DNLSA.js}

@@ -1,5 +1,8 @@
 // Force strict mode and setup for ESM
 "use strict";
+import {
+  defaultModalities
+} from "./chunk-WOJZWRAZ.js";
 import {
   Mutex
 } from "./chunk-VGC4I5JJ.js";
@@ -19,15 +22,12 @@ import {
 } from "./chunk-D7D7RXIJ.js";
 import {
   DEFAULT_QWEN_MODEL
-} from "./chunk-XD2PNH3K.js";
+} from "./chunk-BOGOR4HB.js";
 import {
   estimateTextTokens,
   generateLegacyMcpToolName,
   normalizeToolNameForProvider
 } from "./chunk-46UV252V.js";
-import {
-  normalize
-} from "./chunk-ZBVS26BY.js";
 import {
   InstallationManager
 } from "./chunk-TYERNYH4.js";
@@ -8982,7 +8982,7 @@ async function readTextCursorWindowFromHandle(fileHandle, request2) {
   let truncatedByBytes = false;
   let stop = false;
   let skipRestOfLine = false;
-  let sawCrlf = false;
+  let sawCrlf = await precededByCrlfTerminator(fileHandle, startOffset);
   const emit = /* @__PURE__ */ __name((line, hadNewline) => {
     const separator = lines.length > 0 ? 1 : 0;
     const lineBytes = Buffer.byteLength(line, "utf8");
@@ -9069,6 +9069,9 @@ async function readTextCursorWindowFromHandle(fileHandle, request2) {
       true
     );
     consumedBytes = resumeAt - startOffset;
+    if (!sawCrlf) {
+      sawCrlf = await precededByCrlfTerminator(fileHandle, resumeAt);
+    }
   }
   const content = lines.join("\n");
   const nextOffset = startOffset + consumedBytes;
@@ -9085,6 +9088,14 @@ async function readTextCursorWindowFromHandle(fileHandle, request2) {
 __name(readTextCursorWindowFromHandle, "readTextCursorWindowFromHandle");
 var UTF8_BOM_BYTES = 3;
 var LINE_FEED = 10;
+var CARRIAGE_RETURN = 13;
+async function precededByCrlfTerminator(fileHandle, startOffset) {
+  if (startOffset < 2) return false;
+  const probe = Buffer.alloc(2);
+  const { bytesRead } = await fileHandle.read(probe, 0, 2, startOffset - 2);
+  return bytesRead === 2 && probe[0] === CARRIAGE_RETURN && probe[1] === LINE_FEED;
+}
+__name(precededByCrlfTerminator, "precededByCrlfTerminator");
 async function hasUtf8Bom(fileHandle, fileSize) {
   if (fileSize < UTF8_BOM_BYTES) return false;
   const probe = Buffer.alloc(UTF8_BOM_BYTES);
@@ -14451,6 +14462,9 @@ var DiscoveredMCPToolInvocation = class _DiscoveredMCPToolInvocation extends Bas
     if (isAbortError(error)) {
       return false;
     }
+    if (this.cliConfig?.getToolInvocationGuard?.()) {
+      return false;
+    }
     if (getMCPServerStatus(this.serverName) === "disconnected" /* DISCONNECTED */) {
       return true;
     }
@@ -16086,92 +16100,6 @@ __name(getFileReadDefaultPermission, "getFileReadDefaultPermission");
 // packages/core/src/services/visionBridge/vision-bridge-service.ts
 init_esbuild_shims();
 
-// packages/core/src/core/modalityDefaults.ts
-init_esbuild_shims();
-var FULL_MULTIMODAL = {
-  image: true,
-  pdf: true,
-  audio: true,
-  video: true
-};
-var MODALITY_PATTERNS = [
-  // -------------------
-  // Google Gemini — full multimodal
-  // -------------------
-  [/^gemini-3/, FULL_MULTIMODAL],
-  [/^gemini-/, FULL_MULTIMODAL],
-  // -------------------
-  // OpenAI — image by default for all gpt/o-series models
-  // -------------------
-  [/^gpt-5/, { image: true }],
-  [/^gpt-/, { image: true }],
-  [/^o\d/, { image: true }],
-  // -------------------
-  // Anthropic Claude — image + pdf
-  // -------------------
-  [/^claude-/, { image: true, pdf: true }],
-  // -------------------
-  // Alibaba / Qwen
-  // -------------------
-  // Qwen Plus models: image + video support
-  [/^qwen3\.5-plus/, { image: true, video: true }],
-  [/^qwen3\.6-plus/, { image: true, video: true }],
-  [/^qwen3\.7-plus/, { image: true, video: true }],
-  // Qwen Max models (3.8+): image support
-  [/^qwen3\.8-max/, { image: true }],
-  [/^coder-model$/, { image: true, video: true }],
-  // Qwen VL (vision-language) models: image + video
-  [/^qwen-vl-/, { image: true, video: true }],
-  [/^qwen3-vl-/, { image: true, video: true }],
-  // Qwen coder / text models: text-only
-  [/^qwen3-coder-/, {}],
-  // Qwen3.6-35B-A3B (local quant variants) — image + video
-  [/^qwen3\.6-35b/, { image: true, video: true }],
-  [/^qwen/, {}],
-  // -------------------
-  // DeepSeek — text-only
-  // -------------------
-  [/^deepseek/, {}],
-  // -------------------
-  // Zhipu GLM
-  // -------------------
-  [/^glm-4\.5v/, { image: true }],
-  [/^glm-5(?:-|$)/, {}],
-  [/^glm-/, {}],
-  // -------------------
-  // MiniMax — M3 supports image + video input; older models default to text-only
-  // -------------------
-  [/^minimax-m3/i, { image: true, video: true }],
-  [/^minimax-/, {}],
-  // -------------------
-  // Moonshot / Kimi
-  // -------------------
-  [/^kimi-k3/, { image: true, video: true }],
-  [/^kimi-k2\./, { image: true, video: true }],
-  [/^kimi-/, {}],
-  // -------------------
-  // ByteDance Doubao — Seed-series and *-vision / *-vl models accept image
-  // input; other Doubao models (pro / lite / text) are text-only.
-  // (QwenLM/qwen-code#4876)
-  // -------------------
-  // seedance (text→video) and seedream (text→image) are generation models with
-  // text-only input — exclude them before the multimodal Seed chat series.
-  [/^doubao-seed(ance|ream)/, {}],
-  [/^doubao-seed/, { image: true }],
-  [/^doubao-.*(vision|vl)/, { image: true }],
-  [/^doubao/, {}]
-];
-function defaultModalities(model) {
-  const norm = normalize(model);
-  for (const [regex, modalities] of MODALITY_PATTERNS) {
-    if (regex.test(norm)) {
-      return { ...modalities };
-    }
-  }
-  return {};
-}
-__name(defaultModalities, "defaultModalities");
-
 // packages/core/src/utils/sideQuery.ts
 init_esbuild_shims();
 import { readFile as readFile2 } from "node:fs/promises";
@@ -17025,7 +16953,6 @@ var ReadFileTool = class _ReadFileTool extends BaseDeclarativeTool {
 };
 
 export {
-  defaultModalities,
   runSideQuery,
   VISION_BRIDGE_MAX_IMAGES,
   VISION_BRIDGE_MAX_IMAGE_BASE64_BYTES,

package/chunks/{chunk-FEUXV3DC.js → chunk-Q5RM32DR.js}

@@ -2,7 +2,7 @@
 "use strict";
 import {
   BaseJsonOutputAdapter
-} from "./chunk-N3RERU5N.js";
+} from "./chunk-NGJOAKJY.js";
 import {
   init_esbuild_shims
 } from "./chunk-5O2XNYP6.js";

package/chunks/{chunk-AEWOKOJY.js → chunk-QZKYZCN3.js}

@@ -5,7 +5,7 @@ import {
 } from "./chunk-6O5DVH27.js";
 import {
   isInternalPromptId
-} from "./chunk-ZPGMDT4S.js";
+} from "./chunk-PX5DNLSA.js";
 import {
   createDebugLogger
 } from "./chunk-3RXUYQJI.js";

package/chunks/{chunk-UKZEXS6K.js → chunk-R574ATRM.js}

@@ -3,6 +3,9 @@
 import {
   init_esbuild_shims
 } from "./chunk-5O2XNYP6.js";
+import {
+  __name
+} from "./chunk-J2S4EL5Y.js";
 
 // packages/acp-bridge/src/bridgeTypes.ts
 init_esbuild_shims();
@@ -16,6 +19,12 @@ var REQUESTED_SESSION_ID_META_KEY = "qwen-code/sessionId";
 var CHANNEL_STARTUP_PROFILE_META_KEY = "qwen.daemon.channelStartupProfile";
 var CHANNEL_STARTUP_PROFILE_VERSION = 1;
 var WORKTREE_MCP_DEFER_META_KEY = "qwen.session.deferMcpDiscovery";
+var DAEMON_MODEL_PROMPT_META_KEY = "qwen.daemon.modelPrompt";
+var MAX_TRUSTED_MODEL_PROMPT_CHARS = 64 * 1024;
+function isValidTrustedModelPrompt(value) {
+  return typeof value === "string" && value.trim().length > 0 && value.length <= MAX_TRUSTED_MODEL_PROMPT_CHARS;
+}
+__name(isValidTrustedModelPrompt, "isValidTrustedModelPrompt");
 var DAEMON_CHANNEL_DELIVERY_META_KEY = "qwen.daemon.channelDelivery";
 var MID_TURN_QUEUE_DRAIN_METHOD = "craft/drainMidTurnQueue";
 var TODO_STOP_GUARD_CONTINUATION_CLAIM_METHOD = "craft/claimTodoStopGuardContinuation";
@@ -34,6 +43,8 @@ export {
   CHANNEL_STARTUP_PROFILE_META_KEY,
   CHANNEL_STARTUP_PROFILE_VERSION,
   WORKTREE_MCP_DEFER_META_KEY,
+  DAEMON_MODEL_PROMPT_META_KEY,
+  isValidTrustedModelPrompt,
   DAEMON_CHANNEL_DELIVERY_META_KEY,
   MID_TURN_QUEUE_DRAIN_METHOD,
   TODO_STOP_GUARD_CONTINUATION_CLAIM_METHOD,

package/chunks/{chunk-OGAARVN7.js → chunk-R5RBXLNC.js}

@@ -8,16 +8,16 @@ import {
   initializeI18n,
   resolveLanguageSetting,
   t
-} from "./chunk-K64OI7S7.js";
+} from "./chunk-KHUA3NQV.js";
 import {
   IdeClient
-} from "./chunk-YLL3SC5S.js";
+} from "./chunk-A4VTILZT.js";
 import {
   AuthEvent,
   IdeConnectionEvent,
   logAuth,
   logIdeConnection
-} from "./chunk-ZPGMDT4S.js";
+} from "./chunk-PX5DNLSA.js";
 import {
   getErrorMessage
 } from "./chunk-3RXUYQJI.js";

package/chunks/{chunk-5HWAJ4BK.js → chunk-RFUHDCNF.js}

@@ -2,7 +2,7 @@
 "use strict";
 import {
   t
-} from "./chunk-K64OI7S7.js";
+} from "./chunk-KHUA3NQV.js";
 import {
   init_esbuild_shims
 } from "./chunk-5O2XNYP6.js";

package/chunks/{chunk-LSYVASZS.js → chunk-RHTTKJTP.js}

@@ -64,7 +64,7 @@ async function runExitCleanup(options = {}) {
 }
 __name(runExitCleanup, "runExitCleanup");
 async function cleanupCheckpoints() {
-  const { Storage } = await import("./deferred-core-runtime-O54YPTBU.js");
+  const { Storage } = await import("./deferred-core-runtime-QWAEBTR5.js");
   const storage = new Storage(process.cwd());
   const tempDir = storage.getProjectTempDir();
   const checkpointsDir = join(tempDir, "checkpoints");

package/chunks/{chunk-LYPXNRBX.js → chunk-RK2EE3T7.js}

@@ -8,7 +8,7 @@ import {
 } from "./chunk-6PEXNQTX.js";
 import {
   isWorkspaceTrusted
-} from "./chunk-B3EBIZUY.js";
+} from "./chunk-ACZRB7AD.js";
 import {
   require_main
 } from "./chunk-5M6IDOMF.js";

package/chunks/{chunk-CIUUYB23.js → chunk-S7CV4KO6.js}

@@ -2,17 +2,17 @@
 "use strict";
 import {
   CLIENT_MCP_OVER_WS_CONFIG_FLAG
-} from "./chunk-UKZEXS6K.js";
+} from "./chunk-R574ATRM.js";
 import {
   SessionNotFoundError
 } from "./chunk-J26HHFI5.js";
 import {
   ChannelWorkerStartupError
-} from "./chunk-FHPKHXHT.js";
+} from "./chunk-MKVZE4ZJ.js";
 import {
   ChannelDeliveryError,
   ChannelWebhookEnqueueError
-} from "./chunk-QONSRAEV.js";
+} from "./chunk-YP5KH5Y7.js";
 import {
   CHANNEL_LOOP_MCP_SERVER_NAME
 } from "./chunk-DIEFUBV6.js";

package/chunks/{chunk-4NNR24EP.js → chunk-SKNE3KQC.js}

@@ -2,19 +2,19 @@
 "use strict";
 import {
   t
-} from "./chunk-K64OI7S7.js";
+} from "./chunk-KHUA3NQV.js";
 import {
   computeThresholds,
   getCoreSystemPrompt,
   resolveInteractionMode
-} from "./chunk-YLL3SC5S.js";
+} from "./chunk-A4VTILZT.js";
 import {
   buildSkillLlmContent
 } from "./chunk-K623ENWT.js";
 import {
   DiscoveredMCPTool,
   uiTelemetryService
-} from "./chunk-ZPGMDT4S.js";
+} from "./chunk-PX5DNLSA.js";
 import {
   ToolNames
 } from "./chunk-D7D7RXIJ.js";

package/chunks/{chunk-JDNWIXHJ.js → chunk-SLSWFHDF.js}

@@ -2,13 +2,13 @@
 "use strict";
 import {
   t
-} from "./chunk-K64OI7S7.js";
+} from "./chunk-KHUA3NQV.js";
 import {
   SessionReferenceService,
   SessionService,
   readManyFiles,
   stripTerminalControlSequences
-} from "./chunk-YLL3SC5S.js";
+} from "./chunk-A4VTILZT.js";
 import {
   emptyMcpResourceText,
   formatMcpResourceContents,
@@ -16,7 +16,7 @@ import {
 } from "./chunk-ZPJWUGCS.js";
 import {
   shouldRunVisionBridge
-} from "./chunk-ZPGMDT4S.js";
+} from "./chunk-PX5DNLSA.js";
 import {
   Storage,
   getErrorMessage,

package/chunks/{chunk-UWSXFI6E.js → chunk-SQC6K5HI.js}

@@ -2,7 +2,10 @@
 "use strict";
 import {
   MissingCliEntryError
-} from "./chunk-PDDYAXL2.js";
+} from "./chunk-UGTWD35F.js";
+import {
+  EXTERNAL_TOOL_GUARD_TOKEN_ENV
+} from "./chunk-BKHCW2BI.js";
 import {
   redactLogCredentials
 } from "./chunk-M5GB774H.js";
@@ -389,7 +392,8 @@ __name(createSpawnChannelFactory, "createSpawnChannelFactory");
 var defaultSpawnChannelFactory = createSpawnChannelFactory();
 var SCRUBBED_CHILD_ENV_KEYS = /* @__PURE__ */ new Set([
   "QWEN_SERVER_TOKEN",
-  "QWEN_CODE_SIMPLE"
+  "QWEN_CODE_SIMPLE",
+  EXTERNAL_TOOL_GUARD_TOKEN_ENV
 ]);
 function scrubChildEnv(source, scrubbed, overrides) {
   const childEnv = { ...source };

package/chunks/{chunk-P3SLTSNY.js → chunk-SQOMTWQT.js}

@@ -3,17 +3,17 @@
 import {
   getGitVersion,
   getNpmVersion
-} from "./chunk-IK3RYLAD.js";
+} from "./chunk-K2B3X3E7.js";
 import {
   buildEnvStatusFromEnv,
   snapshotProcessEnv
-} from "./chunk-BWLUCN35.js";
+} from "./chunk-ULPQQSDN.js";
 import {
   mapDomainErrorToErrorKind
-} from "./chunk-PDDYAXL2.js";
+} from "./chunk-UGTWD35F.js";
 import {
   canUseRipgrep
-} from "./chunk-YLL3SC5S.js";
+} from "./chunk-A4VTILZT.js";
 import {
   init_esbuild_shims
 } from "./chunk-5O2XNYP6.js";

package/chunks/{chunk-D7QAZ5DF.js → chunk-SUKEUUAA.js}

@@ -2,7 +2,7 @@
 "use strict";
 import {
   runExitCleanup
-} from "./chunk-LSYVASZS.js";
+} from "./chunk-RHTTKJTP.js";
 import {
   init_esbuild_shims
 } from "./chunk-5O2XNYP6.js";

package/chunks/{chunk-WTM5QONI.js → chunk-T4JSA7KU.js}

@@ -2,13 +2,13 @@
 "use strict";
 import {
   useKeypress
-} from "./chunk-3P4GP4S2.js";
+} from "./chunk-75QMRMO7.js";
 import {
   require_react
 } from "./chunk-5QWWOFGG.js";
 import {
   t
-} from "./chunk-K64OI7S7.js";
+} from "./chunk-KHUA3NQV.js";
 import {
   APPROVAL_MODES
 } from "./chunk-6WBWIPBF.js";

package/chunks/{chunk-I7JDGNG6.js → chunk-T5U6IM4C.js}

@@ -75,7 +75,7 @@ var LOCK_OPTIONS = {
   // Stale locks from crashed processes are expected in multi-agent
   // scenarios; log at debug level for traceability without noise.
   onCompromised: /* @__PURE__ */ __name((err) => {
-    debug.debug("mailbox lock compromised:", err?.message ?? err);
+    debug.debug("mailbox lock compromised:", err);
   }, "onCompromised")
 };
 var inboxLocks = /* @__PURE__ */ new Map();
@@ -106,7 +106,11 @@ async function withInboxLock(inboxPath, fn) {
     try {
       return await fn();
     } finally {
-      await release();
+      try {
+        await release();
+      } catch (error) {
+        debug.debug("Failed to release mailbox lock:", error);
+      }
     }
   });
 }

package/chunks/{chunk-2JBETW4S.js → chunk-TGGEZINK.js}

@@ -7,19 +7,19 @@ import {
   parseAcpBaseModelId,
   resolveCliGenerationConfig,
   sanitizeProviderBaseUrl
-} from "./chunk-WU5NBSLD.js";
+} from "./chunk-5MJGUQU5.js";
 import {
   snapshotProcessEnv
-} from "./chunk-BWLUCN35.js";
+} from "./chunk-ULPQQSDN.js";
 import {
   STATUS_SCHEMA_VERSION
-} from "./chunk-PDDYAXL2.js";
+} from "./chunk-UGTWD35F.js";
 import {
   loadSettings
-} from "./chunk-RM3F46UT.js";
+} from "./chunk-PPUOYL77.js";
 import {
   ModelsConfig
-} from "./chunk-YLL3SC5S.js";
+} from "./chunk-A4VTILZT.js";
 import {
   APPROVAL_MODES
 } from "./chunk-6WBWIPBF.js";

package/chunks/{chunk-C6ARWPCG.js → chunk-TOGZTG4X.js}

@@ -5,12 +5,12 @@ import {
 } from "./chunk-4NFY2S7N.js";
 import {
   t
-} from "./chunk-K64OI7S7.js";
+} from "./chunk-KHUA3NQV.js";
 import {
   fetchGitDiff,
   findProviderByCredentials,
   resolveMetadataKey
-} from "./chunk-YLL3SC5S.js";
+} from "./chunk-A4VTILZT.js";
 import {
   init_esbuild_shims
 } from "./chunk-5O2XNYP6.js";

package/chunks/{chunk-A6SX5TAH.js → chunk-TSERKWCX.js}

@@ -58,7 +58,7 @@ var LOCK_OPTIONS = {
   },
   stale: 5e3,
   onCompromised: /* @__PURE__ */ __name((err) => {
-    debug.warn("task lock compromised:", err?.message ?? err);
+    debug.warn("task lock compromised:", err);
   }, "onCompromised")
 };
 var taskFileLocks = /* @__PURE__ */ new Map();
@@ -83,7 +83,11 @@ async function withTaskFileLock(taskPath, fn, onMissing) {
     try {
       return await fn();
     } finally {
-      await release();
+      try {
+        await release();
+      } catch (error) {
+        debug.warn("Failed to release task lock:", error);
+      }
     }
   });
 }