@qwen-code/qwen-code 0.21.6-preview.0 → 0.21.7

package/chunks/chunk-NKLP3DCK.js

@@ -0,0 +1,22 @@
+// Force strict mode and setup for ESM
+"use strict";
+import {
+  init_esbuild_shims
+} from "./chunk-5O2XNYP6.js";
+
+// packages/cli/src/serve/live/types.ts
+init_esbuild_shims();
+var LIVE_HOST_PROTOCOL_VERSION = 6;
+var LIVE_HOST_BUNDLE_ID = "com.alibaba.qwen-code.live-host";
+var LIVE_INPUT_AUDIO_EPOCH_BYTES = 8;
+
+export {
+  LIVE_HOST_PROTOCOL_VERSION,
+  LIVE_HOST_BUNDLE_ID,
+  LIVE_INPUT_AUDIO_EPOCH_BYTES
+};
+/**
+ * @license
+ * Copyright 2026 Qwen Team
+ * SPDX-License-Identifier: Apache-2.0
+ */

package/chunks/{chunk-WIRAPZ62.js → chunk-NLREQJFK.js}

@@ -2,7 +2,7 @@
 "use strict";
 import {
   SkillError
-} from "./chunk-MISUEWB4.js";
+} from "./chunk-J6SZID63.js";
 import {
   init_esbuild_shims
 } from "./chunk-5O2XNYP6.js";
@@ -90,6 +90,9 @@ var SERVE_CONTROL_EXT_METHODS = {
   sessionTitle: "qwen/control/session/title",
   sessionParent: "qwen/control/session/parent",
   sessionSource: "qwen/control/session/source",
+  sessionLiveConversation: "qwen/control/session/live-conversation",
+  sessionLiveTranscript: "qwen/control/session/live-transcript",
+  sessionBackgroundNotification: "qwen/control/session/background_notification",
   sessionArtifactsPersist: "qwen/control/session/artifacts/persist",
   workspaceMcpRestart: "qwen/control/workspace/mcp/restart",
   workspaceMcpManage: "qwen/control/workspace/mcp/manage",
@@ -147,6 +150,9 @@ var SERVE_CONTROL_EXT_METHODS = {
    * `first-turn` mode, which waits for the sub-session's first turn to finish).
    */
   createSubSession: "qwen/control/create-sub-session",
+  liveCaptureScreenContext: "qwen/control/live/capture-screen-context",
+  liveTaskTool: "qwen/control/live/task-tool",
+  liveSpeakToUser: "qwen/control/live/speak-to-user",
   channelDelivery: "qwen/control/channel-delivery"
 };
 var IDLE_HOOK_EVENTS = {

package/chunks/{chunk-N47ZM2KI.js → chunk-OFI7IGST.js}

@@ -2,32 +2,32 @@
 "use strict";
 import {
   appEvents
-} from "./chunk-XOZ2R6XI.js";
+} from "./chunk-KKJJB5X6.js";
 import {
   CUSTOM_SANDBOX_IMAGE_ENV_VAR,
   HOST_UPDATE_RELAUNCH_ENV_VAR,
   SKIP_UPDATE_CHECK_ENV_VAR,
   requestUpdateOnExit
-} from "./chunk-CXYBX4AL.js";
+} from "./chunk-HQB2KUAN.js";
 import {
   loadUndici
 } from "./chunk-3Z43GZUQ.js";
 import {
   IdeClient,
   getAllProviderBaseUrls
-} from "./chunk-DOA7MCDY.js";
+} from "./chunk-Y7E5LNLO.js";
 import {
   detectRuntime,
   getOrCreateSharedDispatcher,
   preloadRuntimeFetchModule,
   redactProxyCredentials
-} from "./chunk-BFHXDAR7.js";
+} from "./chunk-KKBPOU75.js";
 import {
   initializeTelemetry
-} from "./chunk-5L6CQ4ZU.js";
+} from "./chunk-6M26GBKX.js";
 import {
   createDebugLogger
-} from "./chunk-3RXUYQJI.js";
+} from "./chunk-OIVKILPI.js";
 import {
   recordStartupEvent
 } from "./chunk-QSWDGAIC.js";
@@ -231,11 +231,11 @@ function startPostRenderPrefetches(config, settings, options = {}) {
         { updateEventEmitter },
         { t }
       ] = await Promise.all([
-        import("./updateCheck-FDAVGOFT.js"),
-        import("./handleAutoUpdate-TOO52D6H.js"),
-        import("./installationInfo-AEGIIQAT.js"),
+        import("./updateCheck-QRZ3DVT5.js"),
+        import("./handleAutoUpdate-A5WFVWIA.js"),
+        import("./installationInfo-J6QDHNTK.js"),
         import("./updateEventEmitter-5MKC7BLQ.js"),
-        import("./i18n-ARJYXZQ5.js")
+        import("./i18n-PLVQ4FBZ.js")
       ]);
       const updateCheckSkippedMessage = /* @__PURE__ */ __name((error) => t("Update check skipped ({{reason}}) \u2014 run /update to retry.", {
         reason: describeUpdateCheckFailure(error)
@@ -308,7 +308,7 @@ ${t(
         state: "connecting"
       });
       try {
-        const { connectIdeForStartup } = await import("./initializer-CEZ4RPQV.js");
+        const { connectIdeForStartup } = await import("./initializer-CVAIKZYL.js");
         await withTimeout(
           connectIdeForStartup(config),
           "ide_connect",
@@ -332,7 +332,7 @@ ${t(
   }
   if (config.isInteractive()) {
     runDeferredTask("background_housekeeping", async () => {
-      const { startBackgroundHousekeeping } = await import("./scheduler-VFUVGDE5.js");
+      const { startBackgroundHousekeeping } = await import("./scheduler-365PJHNR.js");
       startBackgroundHousekeeping(config, settings);
     });
   }

package/chunks/{chunk-DBIEZC7T.js → chunk-OH2VKQXH.js}

@@ -2,7 +2,7 @@
 "use strict";
 import {
   theme
-} from "./chunk-U25CMJYY.js";
+} from "./chunk-EKPKKXY2.js";
 import {
   require_jsx_runtime
 } from "./chunk-SV5PQVQE.js";
@@ -14,10 +14,14 @@ import {
 import {
   require_react
 } from "./chunk-5QWWOFGG.js";
+import {
+  collectInlineImages,
+  extractInlineContentRuns
+} from "./chunk-2VSTGY6M.js";
 import {
   formatHistoryGapNotice,
   indexGapsByChild
-} from "./chunk-NAYPZ72V.js";
+} from "./chunk-KXSDEOFU.js";
 import {
   stringWidth
 } from "./chunk-2MIN6GRR.js";
@@ -29,21 +33,21 @@ import {
 } from "./chunk-3SH53ANB.js";
 import {
   t
-} from "./chunk-546CDN6D.js";
+} from "./chunk-DBOFL3LQ.js";
 import {
   getToolResponseDisplayText,
   stripTrailingUserPromptSubmitContextPart
-} from "./chunk-DOA7MCDY.js";
+} from "./chunk-Y7E5LNLO.js";
 import {
   stripAnsi
 } from "./chunk-TWPJO254.js";
 import {
   GoalPersistenceUnavailableError,
   parseGoalStateRecordPayloadV2
-} from "./chunk-MBEMTXQT.js";
+} from "./chunk-3K7FH2KQ.js";
 import {
   ToolDisplayNames
-} from "./chunk-D7D7RXIJ.js";
+} from "./chunk-IC4Z6LX6.js";
 import {
   init_esbuild_shims
 } from "./chunk-5O2XNYP6.js";
@@ -3183,7 +3187,7 @@ function convertToHistoryItems(conversation, config, historyGaps) {
       case "assistant": {
         const parts = record.message?.parts;
         const thoughtText = !config ? extractThoughtTextFromParts(parts) : "";
-        const text = extractTextFromParts(parts);
+        const displayRuns = extractInlineContentRuns(parts, "\n");
         const functionCalls = extractFunctionCalls(parts);
         if (thoughtText) {
           if (currentToolGroup.length > 0) {
@@ -3195,7 +3199,7 @@ function convertToHistoryItems(conversation, config, historyGaps) {
           }
           items.push({ type: "gemini_thought", text: thoughtText });
         }
-        if (text) {
+        if (displayRuns.length > 0) {
           if (currentToolGroup.length > 0) {
             items.push({
               type: "tool_group",
@@ -3203,11 +3207,27 @@ function convertToHistoryItems(conversation, config, historyGaps) {
             });
             currentToolGroup = [];
           }
-          items.push({
-            type: "gemini",
-            text,
-            timestamp: new Date(record.timestamp).getTime()
-          });
+          for (const [index, run] of displayRuns.entries()) {
+            const type = index === 0 ? "gemini" : "gemini_content";
+            const timestamp = index === 0 ? { timestamp: new Date(record.timestamp).getTime() } : {};
+            if (run.kind === "text") {
+              items.push({ type, text: run.text, ...timestamp });
+            } else if (run.kind === "image") {
+              items.push({
+                type,
+                text: "",
+                images: [run.image],
+                ...timestamp
+              });
+            } else {
+              items.push({
+                type,
+                text: "",
+                omittedImageCount: run.count,
+                ...timestamp
+              });
+            }
+          }
         }
         for (const fc of functionCalls) {
           const tool = getTool(config, fc.name);
@@ -3229,6 +3249,7 @@ function convertToHistoryItems(conversation, config, historyGaps) {
           const callId = record.toolCallResult.callId;
           const toolCall = currentToolGroup.find((t2) => t2.callId === callId);
           if (toolCall) {
+            const responseParts = record.toolCallResult.responseParts ?? record.message?.parts;
             const rawDisplay = record.toolCallResult.resultDisplay;
             toolCall.resultDisplay = rawDisplay;
             if (record.toolCallResult.visionBridgeNotice !== void 0) {
@@ -3236,10 +3257,15 @@ function convertToHistoryItems(conversation, config, historyGaps) {
             }
             const rawStatus = record.toolCallResult["status"];
             toolCall.status = rawStatus === "error" ? "Error" /* Error */ : "Success" /* Success */;
+            const { images, omittedImageCount } = collectInlineImages(responseParts);
+            if (images.length > 0) {
+              toolCall.images = images;
+            }
+            if (omittedImageCount > 0) {
+              toolCall.omittedImageCount = omittedImageCount;
+            }
             if (toolCall.status === "Success" /* Success */ && isCollapsibleTool(toolCall.name)) {
-              toolCall.detailedDisplay = getToolResponseDisplayText(
-                record.toolCallResult.responseParts ?? record.message?.parts
-              );
+              toolCall.detailedDisplay = getToolResponseDisplayText(responseParts);
             }
           }
           pendingToolCalls.delete(callId || "");

package/chunks/{chunk-C4GRKMUL.js → chunk-OHJLEW5J.js}

@@ -5,27 +5,27 @@ import {
 } from "./chunk-57OAHC2Y.js";
 import {
   loadSettings
-} from "./chunk-YUVTZ4UH.js";
+} from "./chunk-PQBHU2IA.js";
 import {
   getCurrentLanguage,
   t
-} from "./chunk-546CDN6D.js";
+} from "./chunk-DBOFL3LQ.js";
 import {
   isWorkspaceTrusted
-} from "./chunk-72DZPDH4.js";
+} from "./chunk-6XU3PH66.js";
 import {
   ExtensionManager,
   getExtensionDescription,
   getExtensionDisplayName,
   redactUrlCredentials,
   require_prompts
-} from "./chunk-DOA7MCDY.js";
+} from "./chunk-Y7E5LNLO.js";
 import {
   stripAnsi
 } from "./chunk-TWPJO254.js";
 import {
   writeStdoutLine
-} from "./chunk-OWAK7LMW.js";
+} from "./chunk-KGJGEEVR.js";
 import {
   init_esbuild_shims
 } from "./chunk-5O2XNYP6.js";

package/chunks/{chunk-3RXUYQJI.js → chunk-OIVKILPI.js}

@@ -479,6 +479,54 @@ function isSubpaths(parentPath, childPath) {
   return parentPath.some((p) => isSubpath(p, childPath));
 }
 __name(isSubpaths, "isSubpaths");
+function resolveLeafSymlink(inputPath) {
+  const maxHops = 40;
+  let current = path.resolve(inputPath);
+  for (let i = 0; i < maxHops; i++) {
+    let stat;
+    try {
+      stat = fs.lstatSync(current);
+    } catch {
+      return current;
+    }
+    if (!stat.isSymbolicLink()) {
+      return current;
+    }
+    const target = fs.readlinkSync(current);
+    if (path.isAbsolute(target)) {
+      current = target;
+    } else {
+      let parent;
+      try {
+        parent = fs.realpathSync(path.dirname(current));
+      } catch {
+        parent = path.dirname(current);
+      }
+      current = path.resolve(parent, target);
+    }
+  }
+  return current;
+}
+__name(resolveLeafSymlink, "resolveLeafSymlink");
+function realpathNearestExisting(inputPath) {
+  const resolved = resolveLeafSymlink(inputPath);
+  const missingSegments = [];
+  let current = resolved;
+  while (!fs.existsSync(current)) {
+    const parent = path.dirname(current);
+    if (parent === current) {
+      return resolved;
+    }
+    missingSegments.unshift(path.basename(current));
+    current = parent;
+  }
+  try {
+    return path.join(fs.realpathSync(current), ...missingSegments);
+  } catch {
+    return resolved;
+  }
+}
+__name(realpathNearestExisting, "realpathNearestExisting");
 function resolvePath(baseDir = process.cwd(), relativePath) {
   const expandedPath = expandTilde(relativePath);
   if (path.isAbsolute(expandedPath)) {
@@ -1136,6 +1184,7 @@ export {
   sanitizeCwd,
   isSubpath,
   isSubpaths,
+  realpathNearestExisting,
   resolvePath,
   resolveAndValidatePath,
   SKILL_PROVIDER_CONFIG_DIRS,

package/chunks/{chunk-VDLXPEI5.js → chunk-OMKQH5C5.js}

@@ -3,7 +3,7 @@
 import {
   getUserSettingsPath,
   v1ToV2Migration
-} from "./chunk-YUVTZ4UH.js";
+} from "./chunk-PQBHU2IA.js";
 import {
   getSystemDefaultsPath,
   getSystemSettingsPath
@@ -12,7 +12,7 @@ import {
   LoadedTrustedFolders,
   TrustLevel,
   getTrustedFoldersPath
-} from "./chunk-72DZPDH4.js";
+} from "./chunk-6XU3PH66.js";
 import {
   require_strip_json_comments
 } from "./chunk-ALGGS7UH.js";
@@ -21,7 +21,7 @@ import {
 } from "./chunk-MR3PXB6E.js";
 import {
   ideContextStore
-} from "./chunk-DOA7MCDY.js";
+} from "./chunk-Y7E5LNLO.js";
 import {
   init_esbuild_shims
 } from "./chunk-5O2XNYP6.js";

package/chunks/{chunk-LBWNSLJK.js → chunk-ONSZH6VM.js}

@@ -2,7 +2,7 @@
 "use strict";
 import {
   theme
-} from "./chunk-U25CMJYY.js";
+} from "./chunk-EKPKKXY2.js";
 import {
   require_jsx_runtime
 } from "./chunk-SV5PQVQE.js";
@@ -21,7 +21,7 @@ import {
 } from "./chunk-2MIN6GRR.js";
 import {
   createDebugLogger
-} from "./chunk-3RXUYQJI.js";
+} from "./chunk-OIVKILPI.js";
 import {
   init_esbuild_shims
 } from "./chunk-5O2XNYP6.js";

package/chunks/{chunk-DYA25Y7U.js → chunk-OWMAZHIX.js}

@@ -2,7 +2,7 @@
 "use strict";
 import {
   atomicWriteFileSync
-} from "./chunk-UH7Z7Y45.js";
+} from "./chunk-FOGU3LJX.js";
 import {
   init_esbuild_shims
 } from "./chunk-5O2XNYP6.js";

package/chunks/{chunk-WAOLM6SQ.js → chunk-P2AJ7FTI.js}

@@ -563,7 +563,7 @@ var WorkspaceRegistrationStore = class {
     return removed;
   }
   async update(mutate) {
-    const { atomicWriteFile } = await import("./deferred-core-runtime-KXN7HLN7.js");
+    const { atomicWriteFile } = await import("./deferred-core-runtime-BWRCCFTE.js");
     return withInProcessLock(this.filePath, async () => {
       const lock = await acquireFileLock(this.filePath);
       let committed = false;

package/chunks/{chunk-MFBUJMQ3.js → chunk-P3LEG54R.js}

@@ -8,17 +8,17 @@ import {
 } from "./chunk-Z4X5MTRT.js";
 import {
   STATUS_SCHEMA_VERSION
-} from "./chunk-WIRAPZ62.js";
+} from "./chunk-NLREQJFK.js";
 import {
   loadSettings
-} from "./chunk-YUVTZ4UH.js";
+} from "./chunk-PQBHU2IA.js";
 import {
   SkillManager,
   isSafeModeEnv
-} from "./chunk-DOA7MCDY.js";
+} from "./chunk-Y7E5LNLO.js";
 import {
   writeStderrLine
-} from "./chunk-OWAK7LMW.js";
+} from "./chunk-KGJGEEVR.js";
 import {
   init_esbuild_shims
 } from "./chunk-5O2XNYP6.js";

package/chunks/{chunk-WVRJKSIG.js → chunk-PJOBIWUG.js}

@@ -2,7 +2,7 @@
 "use strict";
 import {
   registerCleanup
-} from "./chunk-QG2ACINA.js";
+} from "./chunk-EORNAQDT.js";
 import {
   init_esbuild_shims
 } from "./chunk-5O2XNYP6.js";

package/chunks/{chunk-YUVTZ4UH.js → chunk-PQBHU2IA.js}

@@ -21,12 +21,12 @@ import {
   getLanguageNameFromLocale,
   getLanguageSettingsOptions,
   t
-} from "./chunk-546CDN6D.js";
+} from "./chunk-DBOFL3LQ.js";
 import {
   getHomeEnvFallbackVars,
   loadEnvironment,
   preResolveHomeEnvOverrides
-} from "./chunk-IKXE3AAC.js";
+} from "./chunk-VOARQPTA.js";
 import {
   ENV_CORRUPTED_PATH,
   ENV_WAS_RECOVERED
@@ -34,7 +34,7 @@ import {
 import {
   isWorkspaceTrusted,
   updateSettingsFilePreservingFormat
-} from "./chunk-72DZPDH4.js";
+} from "./chunk-6XU3PH66.js";
 import {
   require_strip_json_comments
 } from "./chunk-ALGGS7UH.js";
@@ -46,13 +46,13 @@ import {
   DEFAULT_TOOL_RESULTS_TOTAL_CHARS_THRESHOLD,
   DEFAULT_TRUNCATE_TOOL_OUTPUT_LINES,
   DEFAULT_TRUNCATE_TOOL_OUTPUT_THRESHOLD
-} from "./chunk-DOA7MCDY.js";
+} from "./chunk-Y7E5LNLO.js";
 import {
   stripRuntimeSnapshotPrefix
-} from "./chunk-6D6V55ZQ.js";
+} from "./chunk-RMH5OWLD.js";
 import {
   DEFAULT_QWEN_CUSTOM_IGNORE_FILE_NAMES
-} from "./chunk-432XCUHF.js";
+} from "./chunk-EQL65XGA.js";
 import {
   DEFAULT_SENSITIVE_SPAN_ATTRIBUTE_MAX_LENGTH,
   SENSITIVE_SPAN_ATTRIBUTE_MAX_LENGTH_LIMIT
@@ -62,7 +62,7 @@ import {
   Storage,
   createDebugLogger,
   getErrorMessage
-} from "./chunk-3RXUYQJI.js";
+} from "./chunk-OIVKILPI.js";
 import {
   init_esbuild_shims
 } from "./chunk-5O2XNYP6.js";
@@ -2636,6 +2636,19 @@ var SETTINGS_SCHEMA = {
         default: false,
         description: "When true, HTTP hooks may target private/link-local IP ranges (the SSRF IP-range checks are skipped). Cloud metadata hostnames (e.g. 169.254.169.254, metadata.google.internal) remain blocked. Only honored from User, System, and SystemDefaults settings scopes; values set in Workspace settings are ignored so a cloned repository cannot self-grant this bypass. Enable only in trusted, managed environments, and pair with security.allowedHttpHookUrls.",
         showInDialog: false
+      },
+      allowedInsecureVoiceBaseUrls: {
+        type: "array",
+        label: "Allowed Insecure Voice Base URLs",
+        category: "Security",
+        requiresRestart: false,
+        default: [],
+        description: "Complete voice base URLs that may use HTTP or private-network addresses. Entries must include an explicit http:// or https:// scheme and the full provider path; only URL serialization and trailing slashes are normalized. Wildcards are not supported; metadata, link-local, local-use NAT64, 6to4, and Teredo addresses remain blocked even when listed, as do hostnames that resolve to loopback; IPv4-mapped, IPv4-compatible, and well-known NAT64 (64:ff9b::/96) literals are classified by their embedded IPv4 address. Only honored from User, System, and SystemDefaults settings scopes; values set in Workspace settings are ignored. Enable only for trusted endpoints in managed private networks. Cleartext HTTP also exposes the provider API key transmitted in the Authorization header. An allowlisted hostname is only as trustworthy as its DNS; prefer IP-literal entries when the gateway address is stable.",
+        showInDialog: false,
+        items: {
+          type: "string",
+          description: "Complete voice provider base URL with explicit scheme and full path (no wildcards)"
+        }
       }
     }
   },
@@ -3098,6 +3111,71 @@ var SETTINGS_SCHEMA = {
     description: "Settings to enable experimental features.",
     showInDialog: false,
     properties: {
+      liveVoice: {
+        type: "object",
+        label: "Live Voice",
+        category: "Experimental",
+        requiresRestart: false,
+        default: {},
+        description: "Experimental realtime voice conversations through Qwen Live Host on macOS WebShell.",
+        showInDialog: false,
+        properties: {
+          enabled: {
+            type: "boolean",
+            label: "Live Voice",
+            category: "Experimental",
+            requiresRestart: false,
+            default: false,
+            description: "Enable experimental realtime voice conversations on macOS WebShell.",
+            showInDialog: false
+          },
+          apiKey: {
+            type: "string",
+            label: "DashScope Realtime API Key",
+            category: "Experimental",
+            requiresRestart: false,
+            default: "",
+            description: "Dedicated DashScope API key for qwen3.5-omni-plus-realtime.",
+            showInDialog: false
+          },
+          model: {
+            type: "string",
+            label: "Live Voice Model",
+            category: "Experimental",
+            requiresRestart: false,
+            default: "qwen3.5-omni-plus-realtime",
+            description: "Upstream Realtime model used for Live Voice.",
+            showInDialog: false
+          },
+          endpoint: {
+            type: "string",
+            label: "Live Voice Endpoint",
+            category: "Experimental",
+            requiresRestart: false,
+            default: "wss://dashscope.aliyuncs.com/api-ws/v1/realtime",
+            description: "Advanced override for the DashScope Realtime WebSocket endpoint.",
+            showInDialog: false
+          },
+          voice: {
+            type: "string",
+            label: "Live Voice Output Voice",
+            category: "Experimental",
+            requiresRestart: false,
+            default: "Tina",
+            description: "Voice used for Realtime model audio output.",
+            showInDialog: false
+          },
+          shortcut: {
+            type: "string",
+            label: "Live Voice Global Shortcut",
+            category: "Experimental",
+            requiresRestart: false,
+            default: "Command+E",
+            description: "Electron accelerator registered globally by Qwen Live Host.",
+            showInDialog: false
+          }
+        }
+      },
       sessionWorkflow: {
         type: "boolean",
         label: "Session Workflow Plan & Review",
@@ -4630,6 +4708,11 @@ function getSettingsWarnings(loadedSettings) {
       `Warning: security.allowPrivateNetworkHooks in workspace settings (${workspaceFile.path}) is ignored. This setting is only honored from User, System, or SystemDefaults scope settings.`
     );
   }
+  if (workspaceFile.rawJson !== void 0 && workspaceFile.originalSettings.security?.allowedInsecureVoiceBaseUrls !== void 0) {
+    warningSet.add(
+      `Warning: security.allowedInsecureVoiceBaseUrls in workspace settings (${workspaceFile.path}) is ignored. This setting is only honored from User, System, or SystemDefaults scope settings.`
+    );
+  }
   return [...warningSet];
 }
 __name(getSettingsWarnings, "getSettingsWarnings");
@@ -4645,19 +4728,20 @@ function tagMcpServerScope(settings, scope) {
   return { ...settings, mcpServers: tagged };
 }
 __name(tagMcpServerScope, "tagMcpServerScope");
-function stripWorkspacePrivateNetworkHooks(settings) {
-  if (settings.security?.allowPrivateNetworkHooks === void 0) {
+function stripWorkspaceSecurityBypasses(settings) {
+  if (settings.security?.allowPrivateNetworkHooks === void 0 && settings.security?.allowedInsecureVoiceBaseUrls === void 0) {
     return settings;
   }
-  const { allowPrivateNetworkHooks: _stripped, ...restSecurity } = settings.security;
+  const {
+    allowPrivateNetworkHooks: _privateHooks,
+    allowedInsecureVoiceBaseUrls: _insecureVoice,
+    ...restSecurity
+  } = settings.security;
   return { ...settings, security: restSecurity };
 }
-__name(stripWorkspacePrivateNetworkHooks, "stripWorkspacePrivateNetworkHooks");
+__name(stripWorkspaceSecurityBypasses, "stripWorkspaceSecurityBypasses");
 function mergeSettings(system, systemDefaults, user, workspace, isTrusted) {
-  const safeWorkspace = isTrusted ? tagMcpServerScope(
-    stripWorkspacePrivateNetworkHooks(workspace),
-    "workspace"
-  ) : {};
+  const safeWorkspace = isTrusted ? tagMcpServerScope(stripWorkspaceSecurityBypasses(workspace), "workspace") : {};
   return customDeepMerge(
     getMergeStrategyForPath,
     {},
@@ -4724,17 +4808,29 @@ var LoadedSettings = class {
         throw new Error(`Invalid scope: ${scope}`);
     }
   }
-  setValue(scope, key, value, assertCanCommit) {
+  setValue(scope, key, value, assertCanCommit, opts = {}) {
     if (key === "model.name" && typeof value === "string") {
       value = stripRuntimeSnapshotPrefix(value);
     }
     assertCanCommit?.();
     const settingsFile = this.forScope(scope);
+    const replacePath = key === "mcpServers" ? key.split(".") : [];
+    if (opts.throwOnWriteFailure) {
+      saveSettings(
+        settingsFile,
+        createSettingsUpdate(key, value),
+        replacePath,
+        {
+          throwOnWriteFailure: true
+        }
+      );
+    }
     setNestedPropertySafe(settingsFile.settings, key, value);
     setNestedPropertySafe(settingsFile.originalSettings, key, value);
     this._merged = this.computeMergedSettings();
-    const replacePath = key === "mcpServers" ? key.split(".") : [];
-    saveSettings(settingsFile, createSettingsUpdate(key, value), replacePath);
+    if (!opts.throwOnWriteFailure) {
+      saveSettings(settingsFile, createSettingsUpdate(key, value), replacePath);
+    }
   }
   setValues(writes, onScopeCommitted, assertCanCommit) {
     const scopes = /* @__PURE__ */ new Set();

package/chunks/{chunk-GTM6IHBB.js → chunk-Q3JQ7OSU.js}

@@ -5,7 +5,7 @@ import {
 } from "./chunk-4NFY2S7N.js";
 import {
   createDebugLogger
-} from "./chunk-3RXUYQJI.js";
+} from "./chunk-OIVKILPI.js";
 import {
   wrapper_default
 } from "./chunk-TYAMGABM.js";
@@ -614,6 +614,7 @@ async function openVoiceStreamWithRetry(open, opts = {}) {
 __name(openVoiceStreamWithRetry, "openVoiceStreamWithRetry");
 
 export {
+  deriveWebSocketBase,
   openVoiceStream,
   openQwenAsrRealtimeStream,
   openVoiceStreamWithRetry