@qwen-code/qwen-code 0.21.7 → 0.21.8

package/chunks/chunk-UA5H3DS2.js

@@ -0,0 +1,203 @@
+// Force strict mode and setup for ESM
+"use strict";
+import {
+  writeStderrLineSafe
+} from "./chunk-KGJGEEVR.js";
+import {
+  init_esbuild_shims
+} from "./chunk-5O2XNYP6.js";
+import {
+  __name
+} from "./chunk-J2S4EL5Y.js";
+
+// packages/cli/src/config/acp-channel-fallback.ts
+init_esbuild_shims();
+var QWEN_CODE_SERVE_ENV = "QWEN_CODE_SERVE";
+var QWEN_CODE_DESKTOP_ENV = "QWEN_CODE_DESKTOP";
+function resolveAcpChannelFallback(env = process.env) {
+  if (env[QWEN_CODE_DESKTOP_ENV]) {
+    return "desktop";
+  }
+  if (env[QWEN_CODE_SERVE_ENV]) {
+    return "daemon";
+  }
+  return "ACP";
+}
+__name(resolveAcpChannelFallback, "resolveAcpChannelFallback");
+
+// packages/cli/src/config/shared-env-keys.ts
+init_esbuild_shims();
+var DEFAULT_EXCLUDED_ENV_VARS = ["DEBUG", "DEBUG_MODE"];
+var ENV_CORRUPTED_PATH = "QWEN_CODE_SETTINGS_CORRUPTED_PATH";
+var ENV_WAS_RECOVERED = "QWEN_CODE_SETTINGS_WAS_RECOVERED";
+var PROJECT_ENV_HARDCODED_EXCLUSIONS = [
+  "QWEN_HOME",
+  "QWEN_RUNTIME_DIR",
+  "QWEN_CODE_MCP_APPROVALS_PATH",
+  "QWEN_CODE_TRUSTED_FOLDERS_PATH",
+  // Runtime attribution markers are stamped by trusted launchers. A project
+  // `.env` must not spoof client channel telemetry.
+  QWEN_CODE_SERVE_ENV,
+  QWEN_CODE_DESKTOP_ENV,
+  ENV_CORRUPTED_PATH,
+  ENV_WAS_RECOVERED,
+  // QWEN_TLS_INSECURE (and NODE_TLS_REJECT_UNAUTHORIZED, which it mirrors)
+  // disable TLS certificate verification for all outbound API connections. A
+  // project `.env` must never enable either — that would let an untrusted repo
+  // silently turn off MITM protection. Opt-in stays with the user via the
+  // `--insecure` flag, the shell environment, or a home `.env`. The initial
+  // `.env` load only consults this list, so both keys must be here (not just
+  // RELOAD_EXCLUDED_KEYS, which only applies on reload).
+  "QWEN_TLS_INSECURE",
+  "NODE_TLS_REJECT_UNAUTHORIZED",
+  // NODE_EXTRA_CA_CERTS reaches the same outcome by adding a TLS trust
+  // anchor instead of disabling verification.
+  "NODE_EXTRA_CA_CERTS",
+  // QWEN_CLI_ENTRY is the script path daemon-spawned session processes run.
+  // A project `.env` or settings.env fixing it turns
+  // `cd <untrusted repo> && qwen serve` into code execution as the daemon
+  // via an attacker-chosen ACP entrypoint, for every workspace's sessions.
+  "QWEN_CLI_ENTRY",
+  // DEV gates the daemon's inherited-loader-env scrub (run-qwen-serve.ts);
+  // only the dev harness (scripts/dev.js) stamps it into the launch env. A
+  // project file setting it would silently keep loader vars in the base env
+  // distributed to every workspace's session children — reopening the #8653
+  // vector for any repo whose .env happens to carry DEV=true.
+  "DEV"
+];
+var HARDCODED_PROJECT_ENV_EXCLUSIONS = new Set(
+  PROJECT_ENV_HARDCODED_EXCLUSIONS.map((key) => key.toLowerCase())
+);
+function isHardcodedProjectEnvExclusion(key) {
+  return HARDCODED_PROJECT_ENV_EXCLUSIONS.has(key.toLowerCase());
+}
+__name(isHardcodedProjectEnvExclusion, "isHardcodedProjectEnvExclusion");
+var HOME_ENV_BOOTSTRAP_KEYS = [
+  "QWEN_HOME",
+  "QWEN_RUNTIME_DIR",
+  "QWEN_CODE_MCP_APPROVALS_PATH",
+  "QWEN_CODE_TRUSTED_FOLDERS_PATH"
+];
+var INHERITED_LOADER_ENV_KEYS = [
+  "NODE_OPTIONS",
+  // npm maps its `node-options` config onto npm_config_node_options in the
+  // environment, and `npm run` lifecycle scripts apply it like NODE_OPTIONS —
+  // the same hijack through an adjacent key. The config-file keys are the
+  // same hijack one level up: they point npm at an attacker-chosen .npmrc
+  // that can itself set node-options/script-shell/ignore-scripts, and `npm
+  // run` itself exports them into the script environment.
+  "npm_config_node_options",
+  "npm_config_userconfig",
+  "npm_config_globalconfig",
+  "npm_config_script_shell",
+  "npm_config_prefix",
+  "NODE_PATH",
+  "LD_PRELOAD",
+  "LD_AUDIT",
+  "DYLD_INSERT_LIBRARIES",
+  "BASH_ENV",
+  // zsh sources $ZDOTDIR/.zshenv on every invocation, including
+  // non-interactive `zsh -c` — the zsh analogue of BASH_ENV.
+  "ZDOTDIR"
+  // BASH_FUNC_* exported-function definitions are bash's other env-driven
+  // code-import channel (non-interactive `bash -c` still imports them);
+  // matched by prefix in isLoaderEnvKey, not listed here.
+];
+var canonicalLoaderKey = /* @__PURE__ */ __name((key) => key.toLowerCase().replace(/_/gu, "-"), "canonicalLoaderKey");
+var LOADER_ENV_KEYS = new Set(
+  INHERITED_LOADER_ENV_KEYS.map(canonicalLoaderKey)
+);
+function isLoaderEnvKey(key) {
+  const canonical = canonicalLoaderKey(key);
+  return canonical.startsWith("bash-func-") || LOADER_ENV_KEYS.has(canonical);
+}
+__name(isLoaderEnvKey, "isLoaderEnvKey");
+function scrubInheritedLoaderEnv(env) {
+  const removedKeys = [];
+  for (const key of Object.keys(env)) {
+    if (isLoaderEnvKey(key)) {
+      delete env[key];
+      removedKeys.push(key);
+    }
+  }
+  return removedKeys;
+}
+__name(scrubInheritedLoaderEnv, "scrubInheritedLoaderEnv");
+function scrubAndReportInheritedLoaderEnv(env, commandLabel, processLabel) {
+  const removedKeys = scrubInheritedLoaderEnv(env);
+  if (removedKeys.length > 0) {
+    writeStderrLineSafe(
+      `${commandLabel}: scrubbed inherited loader env vars from the ${processLabel} process; session subprocesses will not inherit them: ${removedKeys.join(", ")}`
+    );
+  }
+  return removedKeys;
+}
+__name(scrubAndReportInheritedLoaderEnv, "scrubAndReportInheritedLoaderEnv");
+var reportedLoaderKeyRejections = /* @__PURE__ */ new Map();
+var loaderKeyRejectionReporter;
+function setLoaderKeyRejectionReporter(reporter) {
+  loaderKeyRejectionReporter = reporter;
+}
+__name(setLoaderKeyRejectionReporter, "setLoaderKeyRejectionReporter");
+function reportRejectedLoaderKeys(source, candidateKeys) {
+  const rejectedKeys = candidateKeys.filter(isLoaderEnvKey);
+  const warnedKeys = reportedLoaderKeyRejections.get(source) ?? /* @__PURE__ */ new Set();
+  const freshKeys = rejectedKeys.filter((key) => !warnedKeys.has(key));
+  if (freshKeys.length === 0) return rejectedKeys;
+  for (const key of freshKeys) warnedKeys.add(key);
+  reportedLoaderKeyRejections.set(source, warnedKeys);
+  if (loaderKeyRejectionReporter) {
+    loaderKeyRejectionReporter(source, freshKeys);
+  } else {
+    writeStderrLineSafe(
+      `qwen: ${source} cannot set loader-affecting env vars; ignored: ` + freshKeys.join(", ")
+    );
+  }
+  return rejectedKeys;
+}
+__name(reportRejectedLoaderKeys, "reportRejectedLoaderKeys");
+function resetLoaderKeyRejectionReportingForTesting() {
+  reportedLoaderKeyRejections.clear();
+}
+__name(resetLoaderKeyRejectionReportingForTesting, "resetLoaderKeyRejectionReportingForTesting");
+
+// packages/cli/src/config/compile-cache.ts
+init_esbuild_shims();
+var PENDING_COMPILE_CACHE_ENV = "QWEN_CODE_PENDING_COMPILE_CACHE";
+function publishPendingCompileCache(env = process.env) {
+  const pendingDirectory = env[PENDING_COMPILE_CACHE_ENV];
+  delete env[PENDING_COMPILE_CACHE_ENV];
+  if (pendingDirectory && !env["NODE_COMPILE_CACHE"] && env["NODE_DISABLE_COMPILE_CACHE"] !== "1") {
+    env["NODE_COMPILE_CACHE"] = pendingDirectory;
+  }
+}
+__name(publishPendingCompileCache, "publishPendingCompileCache");
+
+export {
+  QWEN_CODE_SERVE_ENV,
+  QWEN_CODE_DESKTOP_ENV,
+  resolveAcpChannelFallback,
+  DEFAULT_EXCLUDED_ENV_VARS,
+  ENV_CORRUPTED_PATH,
+  ENV_WAS_RECOVERED,
+  PROJECT_ENV_HARDCODED_EXCLUSIONS,
+  isHardcodedProjectEnvExclusion,
+  HOME_ENV_BOOTSTRAP_KEYS,
+  isLoaderEnvKey,
+  scrubInheritedLoaderEnv,
+  scrubAndReportInheritedLoaderEnv,
+  setLoaderKeyRejectionReporter,
+  reportRejectedLoaderKeys,
+  resetLoaderKeyRejectionReportingForTesting,
+  publishPendingCompileCache
+};
+/**
+ * @license
+ * Copyright 2026 Qwen Team
+ * SPDX-License-Identifier: Apache-2.0
+ */
+/**
+ * @license
+ * Copyright 2025 Qwen Team
+ * SPDX-License-Identifier: Apache-2.0
+ */

package/chunks/{chunk-24ER7UV4.js → chunk-UFALT4LK.js}

@@ -5,7 +5,7 @@ import {
 } from "./chunk-M5GB774H.js";
 import {
   sanitizeLogText
-} from "./chunk-DIEFUBV6.js";
+} from "./chunk-DIWZNWZT.js";
 import {
   stripAnsi
 } from "./chunk-TWPJO254.js";

package/chunks/{chunk-YJQCUTT2.js → chunk-VWMUDKLC.js}

@@ -3,17 +3,17 @@
 import {
   getGitVersion,
   getNpmVersion
-} from "./chunk-SPMY6CX6.js";
+} from "./chunk-3SE7J4DR.js";
 import {
   buildEnvStatusFromEnv,
   snapshotProcessEnv
-} from "./chunk-TYKC75AX.js";
+} from "./chunk-S3Y3GBFD.js";
 import {
   mapDomainErrorToErrorKind
 } from "./chunk-NLREQJFK.js";
 import {
   canUseRipgrep
-} from "./chunk-Y7E5LNLO.js";
+} from "./chunk-GXSNGY5M.js";
 import {
   init_esbuild_shims
 } from "./chunk-5O2XNYP6.js";

package/chunks/{chunk-RMH5OWLD.js → chunk-VXZ5HAOV.js}

@@ -2,7 +2,7 @@
 "use strict";
 import {
   AuthType
-} from "./chunk-6EOI4HOK.js";
+} from "./chunk-M3STHEMM.js";
 import {
   init_esbuild_shims
 } from "./chunk-5O2XNYP6.js";

package/chunks/{chunk-BVWVWGLE.js → chunk-WAUGQKUU.js}

@@ -1,15 +1,15 @@
 // Force strict mode and setup for ESM
 "use strict";
+import {
+  getCurrentAgentId
+} from "./chunk-CPG6P4GG.js";
 import {
   getTeammateContext,
   isTeammate
 } from "./chunk-S6LOFUVP.js";
-import {
-  isInForkExecution
-} from "./chunk-LZC3B5N2.js";
 import {
   ToolNames
-} from "./chunk-IC4Z6LX6.js";
+} from "./chunk-PYQADEFD.js";
 import {
   init_esbuild_shims
 } from "./chunk-5O2XNYP6.js";
@@ -29,57 +29,6 @@ var ApprovalMode = /* @__PURE__ */ ((ApprovalMode2) => {
 })(ApprovalMode || {});
 var APPROVAL_MODES = Object.values(ApprovalMode);
 
-// packages/core/src/agents/runtime/agent-context.ts
-init_esbuild_shims();
-import { AsyncLocalStorage } from "node:async_hooks";
-var storage = new AsyncLocalStorage();
-function runWithAgentContext(agentId, fn, depthOverride) {
-  const current = storage.getStore() ?? {};
-  const depth = depthOverride ?? (current.depth ?? -1) + 1;
-  return storage.run({ ...current, agentId, depth }, fn);
-}
-__name(runWithAgentContext, "runWithAgentContext");
-function runWithRuntimeContentGenerator(view, fn) {
-  const current = storage.getStore() ?? {};
-  return storage.run({ ...current, runtimeView: view }, fn);
-}
-__name(runWithRuntimeContentGenerator, "runWithRuntimeContentGenerator");
-function getCurrentAgentId() {
-  return storage.getStore()?.agentId ?? null;
-}
-__name(getCurrentAgentId, "getCurrentAgentId");
-function getCurrentAgentDepth() {
-  return storage.getStore()?.depth ?? 0;
-}
-__name(getCurrentAgentDepth, "getCurrentAgentDepth");
-function getRuntimeContentGenerator() {
-  return storage.getStore()?.runtimeView;
-}
-__name(getRuntimeContentGenerator, "getRuntimeContentGenerator");
-function runOutsideAgentContext(fn) {
-  return storage.exit(fn);
-}
-__name(runOutsideAgentContext, "runOutsideAgentContext");
-function isTopLevelSession() {
-  return getCurrentAgentId() === null;
-}
-__name(isTopLevelSession, "isTopLevelSession");
-function childLaunchDepth() {
-  return getCurrentAgentId() !== null ? getCurrentAgentDepth() + 1 : 0;
-}
-__name(childLaunchDepth, "childLaunchDepth");
-function canSpawnNestedAgent(maxDepth) {
-  return childLaunchDepth() + 1 <= maxDepth;
-}
-__name(canSpawnNestedAgent, "canSpawnNestedAgent");
-function spawnBlockReason(maxDepth) {
-  if (!canSpawnNestedAgent(maxDepth)) return "depth";
-  if (isTeammate()) return "teammate";
-  if (isInForkExecution()) return "fork";
-  return null;
-}
-__name(spawnBlockReason, "spawnBlockReason");
-
 // packages/core/src/agents/runtime/subagent-plan-tool-policy.ts
 init_esbuild_shims();
 var SUBAGENT_PLAN_LIFECYCLE_TOOLS = /* @__PURE__ */ new Set([
@@ -188,15 +137,6 @@ __name(buildSubagentPlanToolBlockedResult, "buildSubagentPlanToolBlockedResult")
 
 export {
   APPROVAL_MODES,
-  runWithAgentContext,
-  runWithRuntimeContentGenerator,
-  getCurrentAgentId,
-  getCurrentAgentDepth,
-  getRuntimeContentGenerator,
-  runOutsideAgentContext,
-  isTopLevelSession,
-  childLaunchDepth,
-  spawnBlockReason,
   SUBAGENT_PLAN_LIFECYCLE_TOOLS,
   isSubagentLikeExecutionContext,
   isPlanRequiredTeammateContext,

package/chunks/{chunk-SHZYHGQH.js → chunk-WG6542MA.js}

@@ -2,7 +2,7 @@
 "use strict";
 import {
   BaseJsonOutputAdapter
-} from "./chunk-72LNFGUY.js";
+} from "./chunk-77QVBFCU.js";
 import {
   init_esbuild_shims
 } from "./chunk-5O2XNYP6.js";

package/chunks/{chunk-5KH532V7.js → chunk-WV5J6Q6N.js}

@@ -6,7 +6,7 @@ import {
   getNestedProperty,
   getPersistScopeForModelSelection,
   restoreSettingsFromBackup
-} from "./chunk-PQBHU2IA.js";
+} from "./chunk-OHKJVAKG.js";
 import {
   init_esbuild_shims
 } from "./chunk-5O2XNYP6.js";

package/chunks/{chunk-RNVQB725.js → chunk-XHD7CRP2.js}

@@ -5,12 +5,12 @@ import {
 } from "./chunk-4NFY2S7N.js";
 import {
   t
-} from "./chunk-DBOFL3LQ.js";
+} from "./chunk-PG62DFWD.js";
 import {
   fetchGitDiff,
   findProviderByCredentials,
   resolveMetadataKey
-} from "./chunk-Y7E5LNLO.js";
+} from "./chunk-GXSNGY5M.js";
 import {
   init_esbuild_shims
 } from "./chunk-5O2XNYP6.js";

package/chunks/{chunk-W4B7UBUS.js → chunk-XZKQT2B2.js}

@@ -7,22 +7,22 @@ import {
   parseAcpBaseModelId,
   resolveCliGenerationConfig,
   sanitizeProviderBaseUrl
-} from "./chunk-CSZEXZBE.js";
+} from "./chunk-GBDINRIL.js";
 import {
   snapshotProcessEnv
-} from "./chunk-TYKC75AX.js";
+} from "./chunk-S3Y3GBFD.js";
 import {
   STATUS_SCHEMA_VERSION
 } from "./chunk-NLREQJFK.js";
 import {
   loadSettings
-} from "./chunk-PQBHU2IA.js";
+} from "./chunk-OHKJVAKG.js";
 import {
   ModelsConfig
-} from "./chunk-Y7E5LNLO.js";
+} from "./chunk-GXSNGY5M.js";
 import {
   APPROVAL_MODES
-} from "./chunk-BVWVWGLE.js";
+} from "./chunk-WAUGQKUU.js";
 import {
   tokenLimit
 } from "./chunk-ZBVS26BY.js";

package/chunks/{chunk-6HVUFDS2.js → chunk-Y4TETC74.js}

@@ -2,16 +2,16 @@
 "use strict";
 import {
   loadSettings
-} from "./chunk-PQBHU2IA.js";
+} from "./chunk-OHKJVAKG.js";
 import {
   getCurrentLanguage
-} from "./chunk-DBOFL3LQ.js";
+} from "./chunk-PG62DFWD.js";
 import {
   isWorkspaceTrusted
-} from "./chunk-6XU3PH66.js";
+} from "./chunk-HA3SAB64.js";
 import {
   require_strip_json_comments
-} from "./chunk-ALGGS7UH.js";
+} from "./chunk-NPQ5ZKRP.js";
 import {
   Client,
   Config,
@@ -21,8 +21,9 @@ import {
   createTransport,
   hashMcpServerConfig,
   isGatedMcpScope,
-  normalizeClaudeMcpServer
-} from "./chunk-Y7E5LNLO.js";
+  normalizeClaudeMcpServer,
+  runWithTimeout
+} from "./chunk-GXSNGY5M.js";
 import {
   atomicWriteFile
 } from "./chunk-FOGU3LJX.js";
@@ -556,6 +557,7 @@ var COLOR_GREEN = "\x1B[32m";
 var COLOR_YELLOW = "\x1B[33m";
 var COLOR_RED = "\x1B[31m";
 var RESET_COLOR = "\x1B[0m";
+var MCP_CONNECT_TIMEOUT_MS = 5e3;
 async function getMcpServersFromConfig() {
   const settings = loadSettings();
   const extensionManager = new ExtensionManager({
@@ -597,16 +599,23 @@ async function testMCPConnection(serverName, config) {
     transport = await createTransport(serverName, config, false);
   } catch (_error) {
     await client.close();
-    return "disconnected" /* DISCONNECTED */;
+    return { status: "disconnected" /* DISCONNECTED */, timedOut: false };
   }
   try {
-    await client.connect(transport, { timeout: 5e3 });
+    await runWithTimeout(
+      client.connect(transport, { timeout: MCP_CONNECT_TIMEOUT_MS }),
+      MCP_CONNECT_TIMEOUT_MS,
+      `MCP connection for ${serverName}`
+    );
     await client.ping();
     await client.close();
-    return "connected" /* CONNECTED */;
-  } catch (_error) {
+    return { status: "connected" /* CONNECTED */, timedOut: false };
+  } catch (error) {
     await transport.close();
-    return "disconnected" /* DISCONNECTED */;
+    return {
+      status: "disconnected" /* DISCONNECTED */,
+      timedOut: error instanceof Error && error.message.startsWith("Timed out after ")
+    };
   }
 }
 __name(testMCPConnection, "testMCPConnection");
@@ -645,7 +654,7 @@ async function listMcpServers() {
         continue;
       }
     }
-    const status = await getServerStatus(serverName, server);
+    const { status, timedOut } = await getServerStatus(serverName, server);
     let statusIndicator = "";
     let statusText = "";
     switch (status) {
@@ -660,7 +669,7 @@ async function listMcpServers() {
       case "disconnected" /* DISCONNECTED */:
       default:
         statusIndicator = COLOR_RED + "\u2717" + RESET_COLOR;
-        statusText = "Disconnected";
+        statusText = timedOut ? `Disconnected (timed out after ${MCP_CONNECT_TIMEOUT_MS}ms)` : "Disconnected";
         break;
     }
     writeStdoutLine(`${statusIndicator} ${serverInfo} - ${statusText}`);

package/chunks/{chunk-RZHU3ILK.js → chunk-YEF7XEO2.js}

@@ -2,18 +2,18 @@
 "use strict";
 import {
   appEvents
-} from "./chunk-KKJJB5X6.js";
+} from "./chunk-7VUERJHS.js";
 import {
   assembleMcpServers,
   getPendingGatedMcpServers,
   getPromptableMcpServers
-} from "./chunk-6HVUFDS2.js";
+} from "./chunk-Y4TETC74.js";
 import {
   getMCPServerStatus
-} from "./chunk-2U3WZGZG.js";
+} from "./chunk-3PY4LPJF.js";
 import {
   require_fast_deep_equal
-} from "./chunk-IC4Z6LX6.js";
+} from "./chunk-PYQADEFD.js";
 import {
   createDebugLogger
 } from "./chunk-OIVKILPI.js";