@qwen-code/qwen-code 0.21.6-preview.0 → 0.21.7

package/chunks/{chunk-WXS647W5.js → chunk-23RZCH76.js}

@@ -2,16 +2,16 @@
 "use strict";
 import {
   useKeypress
-} from "./chunk-Z5S6KH2B.js";
+} from "./chunk-MAJS7AT4.js";
 import {
   require_react
 } from "./chunk-5QWWOFGG.js";
 import {
   t
-} from "./chunk-546CDN6D.js";
+} from "./chunk-DBOFL3LQ.js";
 import {
   APPROVAL_MODES
-} from "./chunk-6WBWIPBF.js";
+} from "./chunk-BVWVWGLE.js";
 import {
   init_esbuild_shims
 } from "./chunk-5O2XNYP6.js";

package/chunks/{chunk-O656RSMC.js → chunk-2U3WZGZG.js}

@@ -8,10 +8,10 @@ import {
 } from "./chunk-VGC4I5JJ.js";
 import {
   isAnyAutoMemPath
-} from "./chunk-E4WHKETF.js";
+} from "./chunk-FVKHVJZQ.js";
 import {
   STRUCTURED_OUTPUT_REDACTED_ARGS
-} from "./chunk-ZPPP6VCL.js";
+} from "./chunk-NG2R4N5O.js";
 import {
   BaseDeclarativeTool,
   BaseToolInvocation,
@@ -19,10 +19,10 @@ import {
   StructuredToolError,
   ToolDisplayNames,
   ToolNames
-} from "./chunk-D7D7RXIJ.js";
+} from "./chunk-IC4Z6LX6.js";
 import {
   DEFAULT_QWEN_MODEL
-} from "./chunk-P7LKADIT.js";
+} from "./chunk-6EOI4HOK.js";
 import {
   estimateTextTokens,
   generateLegacyMcpToolName,
@@ -30,10 +30,10 @@ import {
 } from "./chunk-46UV252V.js";
 import {
   InstallationManager
-} from "./chunk-TYERNYH4.js";
+} from "./chunk-EUNWC2VS.js";
 import {
   atomicWriteFile
-} from "./chunk-UH7Z7Y45.js";
+} from "./chunk-FOGU3LJX.js";
 import {
   isTelemetrySdkInitialized,
   recordApiErrorMetrics,
@@ -55,7 +55,7 @@ import {
   recordTokenUsageMetrics,
   recordToolCallMetrics,
   recordToolExecutionMetrics
-} from "./chunk-5L6CQ4ZU.js";
+} from "./chunk-6M26GBKX.js";
 import {
   require_src,
   safeJsonStringify
@@ -113,9 +113,10 @@ import {
   isNodeError,
   isSubpaths,
   makeRelative,
+  realpathNearestExisting,
   shortenPath,
   unescapePath
-} from "./chunk-3RXUYQJI.js";
+} from "./chunk-OIVKILPI.js";
 import {
   SemanticAttributes,
   init_esm
@@ -16069,7 +16070,7 @@ __name(memoryFreshnessNote, "memoryFreshnessNote");
 init_esbuild_shims();
 import path8 from "node:path";
 function getFileReadDefaultPermission(config, requestedPath) {
-  const filePath = path8.resolve(requestedPath);
+  const filePath = realpathNearestExisting(path8.resolve(requestedPath));
   const workspaceContext = config.getWorkspaceContext();
   const allowedRoots = [
     config.storage.getProjectTempDir(),
@@ -16085,11 +16086,18 @@ function getFileReadDefaultPermission(config, requestedPath) {
     // back must not stall on a confirmation prompt. The dir holds only
     // session plan files, never credentials or settings.
     config.getPlansDir()
-  ];
+  ].map(realpathNearestExisting);
   if (workspaceContext.isPathWithinWorkspace(filePath) || isSubpaths(allowedRoots, filePath) || // isAnyAutoMemPath narrows to the managed auto-memory roots
   // (per-project + user-level under ~/.qwen/memories/) — never the
   // broad getMemoryBaseDir() — to avoid exposing sensitive ~/.qwen
   // files such as settings.json or OAuth credentials.
+  //
+  // Asymmetric with allowedRoots on purpose: the candidate is canonicalized
+  // but the memory roots stay lexical. In local-memory mode that root sits
+  // under a repo-tracked `.qwen/`, so canonicalizing it would let a checked-in
+  // `.qwen -> /outside` relocate the allowed root — see
+  // getAutoMemoryTrustedAnchor. Candidate-only is fail-closed and still
+  // refuses a link planted inside the root.
   isAnyAutoMemPath(filePath, config.getTargetDir())) {
     return "allow";
   }

package/chunks/chunk-2VSTGY6M.js

@@ -0,0 +1,107 @@
+// Force strict mode and setup for ESM
+"use strict";
+import {
+  MAX_TERMINAL_IMAGE_BYTES
+} from "./chunk-IC4Z6LX6.js";
+import {
+  init_esbuild_shims
+} from "./chunk-5O2XNYP6.js";
+import {
+  __name
+} from "./chunk-J2S4EL5Y.js";
+
+// packages/cli/src/ui/utils/inline-image-parts.ts
+init_esbuild_shims();
+var MAX_INLINE_IMAGES_PER_ITEM = 4;
+var MAX_INLINE_IMAGE_ENCODED_LENGTH = Math.ceil(MAX_TERMINAL_IMAGE_BYTES * 4 / 3) + 4;
+function formatInlineImageOverflow(count) {
+  return `[+${count} more ${count === 1 ? "image" : "images"}]`;
+}
+__name(formatInlineImageOverflow, "formatInlineImageOverflow");
+function getInlineImageData(part) {
+  const inlineData = part.inlineData;
+  if (!inlineData?.mimeType?.trim().toLowerCase().startsWith("image/") || typeof inlineData.data !== "string" || inlineData.data.length === 0 || inlineData.data.length > MAX_INLINE_IMAGE_ENCODED_LENGTH) {
+    return null;
+  }
+  return {
+    data: inlineData.data,
+    mimeType: inlineData.mimeType
+  };
+}
+__name(getInlineImageData, "getInlineImageData");
+function collectInlineImages(parts) {
+  if (!parts) {
+    return { images: [], omittedImageCount: 0 };
+  }
+  const images = [];
+  let omittedImageCount = 0;
+  const collectImage = /* @__PURE__ */ __name((part) => {
+    const image = getInlineImageData(part);
+    if (!image) {
+      return;
+    }
+    if (images.length < MAX_INLINE_IMAGES_PER_ITEM) {
+      images.push(image);
+    } else {
+      omittedImageCount++;
+    }
+  }, "collectImage");
+  for (const part of parts) {
+    collectImage(part);
+    for (const nested of part.functionResponse?.parts ?? []) {
+      collectImage(nested);
+    }
+  }
+  return { images, omittedImageCount };
+}
+__name(collectInlineImages, "collectInlineImages");
+function extractInlineContentRuns(parts, textSeparator = "") {
+  if (!parts) {
+    return [];
+  }
+  const runs = [];
+  let textParts = [];
+  let displayedImageCount = 0;
+  let overflowRun = null;
+  const flushText = /* @__PURE__ */ __name(() => {
+    if (textParts.length === 0) return;
+    runs.push({ kind: "text", text: textParts.join(textSeparator) });
+    textParts = [];
+  }, "flushText");
+  for (const part of parts) {
+    if (part.thought) continue;
+    if (part.text) {
+      textParts.push(part.text);
+    }
+    const image = getInlineImageData(part);
+    if (image) {
+      flushText();
+      if (displayedImageCount < MAX_INLINE_IMAGES_PER_ITEM) {
+        runs.push({ kind: "image", image });
+        displayedImageCount++;
+      } else if (overflowRun) {
+        overflowRun.count++;
+      } else {
+        overflowRun = { kind: "omitted_images", count: 1 };
+        runs.push(overflowRun);
+      }
+    }
+  }
+  flushText();
+  return runs;
+}
+__name(extractInlineContentRuns, "extractInlineContentRuns");
+
+export {
+  MAX_INLINE_IMAGES_PER_ITEM,
+  MAX_INLINE_IMAGE_ENCODED_LENGTH,
+  formatInlineImageOverflow,
+  getInlineImageData,
+  collectInlineImages,
+  extractInlineContentRuns
+};
+/**
+ * @license
+ * Copyright 2026 Qwen Team
+ * SPDX-License-Identifier: Apache-2.0
+ */

package/chunks/{chunk-AU3XNTMV.js → chunk-33ACCIIY.js}

@@ -2,13 +2,13 @@
 "use strict";
 import {
   getRateLimitErrorDetails
-} from "./chunk-6O5DVH27.js";
+} from "./chunk-M6HMMKVG.js";
 import {
   isInternalPromptId
-} from "./chunk-O656RSMC.js";
+} from "./chunk-2U3WZGZG.js";
 import {
   createDebugLogger
-} from "./chunk-3RXUYQJI.js";
+} from "./chunk-OIVKILPI.js";
 import {
   init_esbuild_shims
 } from "./chunk-5O2XNYP6.js";

package/chunks/{chunk-MBEMTXQT.js → chunk-3K7FH2KQ.js}

@@ -593,8 +593,7 @@ function reduceGoalControl(current, transition) {
     return assertNever(request, snapshotOf(current));
   }
   return transitionGoal(current, transition.now, {
-    status: "active",
-    turnCount: 0
+    status: "active"
   });
 }
 __name(reduceGoalControl, "reduceGoalControl");
@@ -864,7 +863,6 @@ __name(createMigratedGoalState, "createMigratedGoalState");
 // packages/core/src/goals/goal-runtime.ts
 var GOAL_RUNTIME_DISPOSED_MESSAGE = "Goal runtime has been disposed";
 var STALE_GOAL_TURN_MESSAGE = "Goal turn permit is no longer valid";
-var MAX_GOAL_CONTINUATION_TURNS = 50;
 var GoalPersistenceUnavailableError = class extends Error {
   static {
     __name(this, "GoalPersistenceUnavailableError");
@@ -1002,35 +1000,6 @@ function createGoalRuntime(options) {
     if (snapshot.goal?.status !== "active" || currentPermit || pendingProposal || verificationAttempt) {
       return;
     }
-    if (snapshot.goal.turnCount >= MAX_GOAL_CONTINUATION_TURNS) {
-      const budgetGoalId = snapshot.goal.goalId;
-      const budgetRevision = snapshot.goal.revision;
-      void enqueue(async () => {
-        if (snapshot.goal?.status !== "active" || snapshot.goal.goalId !== budgetGoalId || snapshot.goal.revision !== budgetRevision)
-          return;
-        const now = Date.now();
-        const reason = `Goal exceeded the ${MAX_GOAL_CONTINUATION_TURNS}-turn continuation budget`;
-        const limitedSnapshot = {
-          v: GOAL_STATE_VERSION,
-          goal: {
-            ...snapshot.goal,
-            status: "usage_limited",
-            activeTimeMs: elapsedActiveTime(snapshot.goal, now),
-            updatedAt: now,
-            lastReason: reason
-          },
-          activity: "idle"
-        };
-        await options.journal.recordGoalState(randomUUID(), {
-          v: GOAL_STATE_VERSION,
-          cause: "usage_limited",
-          snapshot: limitedSnapshot
-        });
-        snapshot = structuredClone(limitedSnapshot);
-        broadcast("usage_limited");
-      });
-      return;
-    }
     continuationQueued = true;
     flushContinuation(cause);
   }, "queueContinuation");

package/chunks/{chunk-CJBRIJ7W.js → chunk-3NB7TSE2.js}

@@ -2,13 +2,13 @@
 "use strict";
 import {
   t
-} from "./chunk-546CDN6D.js";
+} from "./chunk-DBOFL3LQ.js";
 import {
   createDebugLogger
-} from "./chunk-3RXUYQJI.js";
+} from "./chunk-OIVKILPI.js";
 import {
   writeStderrLine
-} from "./chunk-OWAK7LMW.js";
+} from "./chunk-KGJGEEVR.js";
 import {
   init_esbuild_shims
 } from "./chunk-5O2XNYP6.js";

package/chunks/{chunk-QYPT3QUD.js → chunk-3ULCB3NE.js}

@@ -2,13 +2,13 @@
 "use strict";
 import {
   delay
-} from "./chunk-QMBEW7EW.js";
+} from "./chunk-BGG4MBYD.js";
 import {
   isTlsVerificationDisabled
-} from "./chunk-BFHXDAR7.js";
+} from "./chunk-KKBPOU75.js";
 import {
   getErrorMessage
-} from "./chunk-3RXUYQJI.js";
+} from "./chunk-OIVKILPI.js";
 import {
   init_esbuild_shims
 } from "./chunk-5O2XNYP6.js";

package/chunks/{chunk-7FUVSN4D.js → chunk-55LYDVPU.js}

@@ -2,7 +2,7 @@
 "use strict";
 import {
   t
-} from "./chunk-546CDN6D.js";
+} from "./chunk-DBOFL3LQ.js";
 import {
   init_esbuild_shims
 } from "./chunk-5O2XNYP6.js";

package/chunks/{chunk-3ZRS2XNY.js → chunk-5KH532V7.js}

@@ -6,7 +6,7 @@ import {
   getNestedProperty,
   getPersistScopeForModelSelection,
   restoreSettingsFromBackup
-} from "./chunk-YUVTZ4UH.js";
+} from "./chunk-PQBHU2IA.js";
 import {
   init_esbuild_shims
 } from "./chunk-5O2XNYP6.js";

package/chunks/{chunk-P7LKADIT.js → chunk-6EOI4HOK.js}

@@ -2,7 +2,7 @@
 "use strict";
 import {
   preloadRuntimeFetchModule
-} from "./chunk-BFHXDAR7.js";
+} from "./chunk-KKBPOU75.js";
 import {
   init_esbuild_shims
 } from "./chunk-5O2XNYP6.js";
@@ -407,18 +407,18 @@ async function createContentGenerator(generatorConfig, config, isInitialAuth) {
   try {
     if (authType === "openai" /* USE_OPENAI */) {
       loadBaseGenerator = /* @__PURE__ */ __name(async () => {
-        const { createOpenAIContentGenerator } = await import("./openaiContentGenerator-63CVR33K.js");
+        const { createOpenAIContentGenerator } = await import("./openaiContentGenerator-EDQT6GTV.js");
         return createOpenAIContentGenerator(generatorConfig, config);
       }, "loadBaseGenerator");
     } else if (authType === "qwen-oauth" /* QWEN_OAUTH */) {
-      const { getQwenOAuthClient: getQwenOauthClient } = await import("./qwenOAuth2-SY2O3NRR.js");
+      const { getQwenOAuthClient: getQwenOauthClient } = await import("./qwenOAuth2-NESCMZ47.js");
       try {
         const qwenClient = await getQwenOauthClient(
           config,
           isInitialAuth ? { requireCachedCredentials: true } : void 0
         );
         loadBaseGenerator = /* @__PURE__ */ __name(async () => {
-          const { QwenContentGenerator } = await import("./qwenContentGenerator-JINBVCH6.js");
+          const { QwenContentGenerator } = await import("./qwenContentGenerator-ODRJSUGR.js");
           return new QwenContentGenerator(qwenClient, generatorConfig, config);
         }, "loadBaseGenerator");
       } catch (error) {
@@ -429,12 +429,12 @@ async function createContentGenerator(generatorConfig, config, isInitialAuth) {
       }
     } else if (authType === "anthropic" /* USE_ANTHROPIC */) {
       loadBaseGenerator = /* @__PURE__ */ __name(async () => {
-        const { createAnthropicContentGenerator } = await import("./anthropicContentGenerator-3CAHEZBM.js");
+        const { createAnthropicContentGenerator } = await import("./anthropicContentGenerator-DTMVEL5M.js");
         return createAnthropicContentGenerator(generatorConfig, config);
       }, "loadBaseGenerator");
     } else if (authType === "gemini" /* USE_GEMINI */ || authType === "vertex-ai" /* USE_VERTEX_AI */) {
       loadBaseGenerator = /* @__PURE__ */ __name(async () => {
-        const { createGeminiContentGenerator } = await import("./geminiContentGenerator-TTM4TZJM.js");
+        const { createGeminiContentGenerator } = await import("./geminiContentGenerator-V2WVLIXU.js");
         return createGeminiContentGenerator(generatorConfig, config);
       }, "loadBaseGenerator");
     } else {
@@ -450,7 +450,7 @@ async function createContentGenerator(generatorConfig, config, isInitialAuth) {
       try {
         const [baseGenerator, { LoggingContentGenerator }] = await Promise.all([
           loadBaseGenerator(),
-          import("./loggingContentGenerator-I7QDXS43.js")
+          import("./loggingContentGenerator-OJCO75HM.js")
         ]);
         return new LoggingContentGenerator(
           baseGenerator,

package/chunks/{chunk-X6DV3WKN.js → chunk-6GONZVLS.js}

@@ -2,7 +2,7 @@
 "use strict";
 import {
   parseRule
-} from "./chunk-DOA7MCDY.js";
+} from "./chunk-Y7E5LNLO.js";
 import {
   init_esbuild_shims
 } from "./chunk-5O2XNYP6.js";

package/chunks/{chunk-T4XY5CT4.js → chunk-6HVUFDS2.js}

@@ -2,13 +2,13 @@
 "use strict";
 import {
   loadSettings
-} from "./chunk-YUVTZ4UH.js";
+} from "./chunk-PQBHU2IA.js";
 import {
   getCurrentLanguage
-} from "./chunk-546CDN6D.js";
+} from "./chunk-DBOFL3LQ.js";
 import {
   isWorkspaceTrusted
-} from "./chunk-72DZPDH4.js";
+} from "./chunk-6XU3PH66.js";
 import {
   require_strip_json_comments
 } from "./chunk-ALGGS7UH.js";
@@ -22,18 +22,18 @@ import {
   hashMcpServerConfig,
   isGatedMcpScope,
   normalizeClaudeMcpServer
-} from "./chunk-DOA7MCDY.js";
+} from "./chunk-Y7E5LNLO.js";
 import {
   atomicWriteFile
-} from "./chunk-UH7Z7Y45.js";
+} from "./chunk-FOGU3LJX.js";
 import {
   Storage,
   getErrorMessage
-} from "./chunk-3RXUYQJI.js";
+} from "./chunk-OIVKILPI.js";
 import {
   writeStderrLine,
   writeStdoutLine
-} from "./chunk-OWAK7LMW.js";
+} from "./chunk-KGJGEEVR.js";
 import {
   init_esbuild_shims
 } from "./chunk-5O2XNYP6.js";

package/chunks/{chunk-5L6CQ4ZU.js → chunk-6M26GBKX.js}

@@ -18,7 +18,7 @@ import {
   getCurrentSessionId,
   setSessionContext,
   setShellTracePropagation
-} from "./chunk-3RXUYQJI.js";
+} from "./chunk-OIVKILPI.js";
 import {
   DiagLogLevel,
   ROOT_CONTEXT,
@@ -863,7 +863,7 @@ function initializeTelemetry(config) {
   telemetryInitPromise ??= (async () => {
     const debugLogger3 = createDebugLogger("OTEL");
     try {
-      const { startTelemetrySdk } = await import("./sdk-impl-SYKGVWOZ.js");
+      const { startTelemetrySdk } = await import("./sdk-impl-KD7FSTC3.js");
       if (telemetryInitialized) return;
       const started = await startTelemetrySdk(config);
       if (!started) return;