@qwen-code/qwen-code 0.21.8 → 0.21.9

package/chunks/{chunk-UFALT4LK.js → chunk-PBRVUF5B.js}

@@ -5,7 +5,7 @@ import {
 } from "./chunk-M5GB774H.js";
 import {
   sanitizeLogText
-} from "./chunk-DIWZNWZT.js";
+} from "./chunk-DX3RGJMS.js";
 import {
   stripAnsi
 } from "./chunk-TWPJO254.js";

package/chunks/{chunk-LKRMNRSN.js → chunk-PDPFQ2FO.js}

@@ -13,6 +13,7 @@ var SERVICE_NAME = "qwen-code";
 var EVENT_USER_PROMPT = "qwen-code.user_prompt";
 var EVENT_USER_RETRY = "qwen-code.user_retry";
 var EVENT_TOOL_CALL = "qwen-code.tool_call";
+var EVENT_REPEATED_TOOL_FAILURE_GUARD = "qwen-code.repeated_tool_failure_guard";
 var EVENT_API_REQUEST = "qwen-code.api_request";
 var EVENT_API_ERROR = "qwen-code.api_error";
 var EVENT_API_CANCEL = "qwen-code.api_cancel";
@@ -84,6 +85,7 @@ export {
   EVENT_USER_PROMPT,
   EVENT_USER_RETRY,
   EVENT_TOOL_CALL,
+  EVENT_REPEATED_TOOL_FAILURE_GUARD,
   EVENT_API_REQUEST,
   EVENT_API_ERROR,
   EVENT_API_CANCEL,

package/chunks/{chunk-6TR7CFXH.js → chunk-PNBBJOCP.js}

@@ -64,7 +64,7 @@ async function runExitCleanup(options = {}) {
 }
 __name(runExitCleanup, "runExitCleanup");
 async function cleanupCheckpoints() {
-  const { Storage } = await import("./deferred-core-runtime-CBMSHPAU.js");
+  const { Storage } = await import("./deferred-core-runtime-SH57E3J3.js");
   const storage = new Storage(process.cwd());
   const tempDir = storage.getProjectTempDir();
   const checkpointsDir = join(tempDir, "checkpoints");

package/chunks/{chunk-M3STHEMM.js → chunk-PVOGHGSF.js}

@@ -405,18 +405,18 @@ async function createContentGenerator(generatorConfig, config, isInitialAuth) {
   try {
     if (authType === "openai" /* USE_OPENAI */) {
       loadBaseGenerator = /* @__PURE__ */ __name(async () => {
-        const { createOpenAIContentGenerator } = await import("./openaiContentGenerator-2NFY2MWO.js");
+        const { createOpenAIContentGenerator } = await import("./openaiContentGenerator-443BNRPJ.js");
         return createOpenAIContentGenerator(generatorConfig, config);
       }, "loadBaseGenerator");
     } else if (authType === "qwen-oauth" /* QWEN_OAUTH */) {
-      const { getQwenOAuthClient: getQwenOauthClient } = await import("./qwenOAuth2-RRQTCP4W.js");
+      const { getQwenOAuthClient: getQwenOauthClient } = await import("./qwenOAuth2-Z4YQBMYN.js");
       try {
         const qwenClient = await getQwenOauthClient(
           config,
           isInitialAuth ? { requireCachedCredentials: true } : void 0
         );
         loadBaseGenerator = /* @__PURE__ */ __name(async () => {
-          const { QwenContentGenerator } = await import("./qwenContentGenerator-KAHU6IZY.js");
+          const { QwenContentGenerator } = await import("./qwenContentGenerator-D5C2LCSZ.js");
           return new QwenContentGenerator(qwenClient, generatorConfig, config);
         }, "loadBaseGenerator");
       } catch (error) {
@@ -432,7 +432,7 @@ async function createContentGenerator(generatorConfig, config, isInitialAuth) {
       }, "loadBaseGenerator");
     } else if (authType === "gemini" /* USE_GEMINI */ || authType === "vertex-ai" /* USE_VERTEX_AI */) {
       loadBaseGenerator = /* @__PURE__ */ __name(async () => {
-        const { createGeminiContentGenerator } = await import("./geminiContentGenerator-YGEXOEKD.js");
+        const { createGeminiContentGenerator } = await import("./geminiContentGenerator-YYFE2HIE.js");
         return createGeminiContentGenerator(generatorConfig, config);
       }, "loadBaseGenerator");
     } else {
@@ -448,7 +448,7 @@ async function createContentGenerator(generatorConfig, config, isInitialAuth) {
       try {
         const [baseGenerator, { LoggingContentGenerator }] = await Promise.all([
           loadBaseGenerator(),
-          import("./loggingContentGenerator-MZAN52UV.js")
+          import("./loggingContentGenerator-RBLNDREC.js")
         ]);
         return new LoggingContentGenerator(
           baseGenerator,

package/chunks/{chunk-4WU6NY7F.js → chunk-QSNSL4R4.js}

@@ -3,11 +3,11 @@
 import {
   UNSAFE_OBJECT_KEYS,
   getPlugin
-} from "./chunk-NGYI5EF5.js";
+} from "./chunk-E2FPSSKP.js";
 import {
   loadSettings,
   saveSettings
-} from "./chunk-OHKJVAKG.js";
+} from "./chunk-JUWS2Z5K.js";
 import {
   init_esbuild_shims
 } from "./chunk-5O2XNYP6.js";

package/chunks/{chunk-DQSDACD2.js → chunk-RBHQXGDK.js}

@@ -5,7 +5,7 @@ import {
   isTranscribableVoiceModel,
   readVoiceLanguage,
   resolveVoiceTransport
-} from "./chunk-C5VWPTGT.js";
+} from "./chunk-GAKGOXTC.js";
 import {
   resolvePath
 } from "./chunk-AOHJKPKL.js";

package/chunks/{chunk-ZHA242R4.js → chunk-RVSTTOJ4.js}

@@ -8,10 +8,10 @@ import {
 } from "./chunk-3Z43GZUQ.js";
 import {
   t
-} from "./chunk-PG62DFWD.js";
+} from "./chunk-WP5VOXF7.js";
 import {
   So
-} from "./chunk-GXSNGY5M.js";
+} from "./chunk-XX7QFP34.js";
 import {
   createDebugLogger
 } from "./chunk-OIVKILPI.js";

package/chunks/{chunk-EIVICVHM.js → chunk-SCAZZ3Q4.js}

@@ -2,19 +2,19 @@
 "use strict";
 import {
   getErrorMessage
-} from "./chunk-IYES5WOT.js";
+} from "./chunk-P2FK2HBV.js";
 import {
   extensionToOutputString,
   getExtensionManager
-} from "./chunk-QQWD7LZV.js";
+} from "./chunk-HADWBW5R.js";
 import {
   loadSettings
-} from "./chunk-OHKJVAKG.js";
+} from "./chunk-JUWS2Z5K.js";
 import {
   initializeI18n,
   resolveLanguageSetting,
   t
-} from "./chunk-PG62DFWD.js";
+} from "./chunk-WP5VOXF7.js";
 import {
   writeStderrLine,
   writeStdoutLine

package/chunks/{chunk-BF224XHL.js → chunk-T5RLUXWJ.js}

@@ -5,10 +5,10 @@ import {
 } from "./chunk-DP3IHZGG.js";
 import {
   t
-} from "./chunk-PG62DFWD.js";
+} from "./chunk-WP5VOXF7.js";
 import {
   getNpmCliPath
-} from "./chunk-IUQ52YJK.js";
+} from "./chunk-BIRWP6LU.js";
 import {
   getPackageJson
 } from "./chunk-VJNBRRZG.js";

package/chunks/{chunk-B52AWKBB.js → chunk-T6HEQR2Q.js}

@@ -9,10 +9,10 @@ import {
   publishPendingCompileCache,
   reportRejectedLoaderKeys,
   resetLoaderKeyRejectionReportingForTesting
-} from "./chunk-UA5H3DS2.js";
+} from "./chunk-VFMASYQA.js";
 import {
   isWorkspaceTrusted
-} from "./chunk-HA3SAB64.js";
+} from "./chunk-ZOSTTOUJ.js";
 import {
   require_main
 } from "./chunk-5M6IDOMF.js";
@@ -61,7 +61,12 @@ var RELOAD_EXCLUDED_KEYS_CASEFOLDED = new Set(
   [...RELOAD_EXCLUDED_KEYS].map((key) => key.toLowerCase())
 );
 function isReloadExcludedKey(key) {
-  return RELOAD_EXCLUDED_KEYS_CASEFOLDED.has(key.toLowerCase());
+  return RELOAD_EXCLUDED_KEYS_CASEFOLDED.has(key.toLowerCase()) || // The hardcoded tier's pattern-matched keys (numbered
+  // GIT_CONFIG_KEY_<n>/GIT_CONFIG_VALUE_<n> pairs) must freeze on reload
+  // together with their literal sibling GIT_CONFIG_COUNT — one mechanism,
+  // one gate. The literal hardcoded exclusions are already spread into
+  // RELOAD_EXCLUDED_KEYS, so this adds exactly the pattern coverage.
+  isHardcodedProjectEnvExclusion(key);
 }
 __name(isReloadExcludedKey, "isReloadExcludedKey");
 var dotEnvSourcedKeys = /* @__PURE__ */ new Set();
@@ -168,13 +173,19 @@ function findEnvFiles(settings, startDir, userLevelPaths = getUserLevelEnvPaths(
     realStartDir = fs.realpathSync(realStartDir);
   } catch {
   }
-  const isTrusted = workspaceTrusted ?? isWorkspaceTrusted(settings, void 0, realStartDir).isTrusted;
   const globalQwenDir = Storage.getGlobalQwenDir();
   const legacyQwenDir = path.normalize(path.join(homeDir, QWEN_DIR));
   const hasCustomConfigDir = path.normalize(globalQwenDir) !== legacyQwenDir;
   const found = [];
   const seen = /* @__PURE__ */ new Set();
-  const canUseEnvFile = /* @__PURE__ */ __name((filePath) => isTrusted !== false || userLevelPaths.has(path.normalize(filePath)), "canUseEnvFile");
+  const canUseEnvFile = /* @__PURE__ */ __name((filePath) => {
+    const normalized = path.normalize(filePath);
+    if (userLevelPaths.has(normalized)) return true;
+    const dirPath = path.dirname(normalized);
+    const workspaceDir = path.basename(dirPath) === SETTINGS_DIRECTORY_NAME ? path.dirname(dirPath) : dirPath;
+    const trusted = workspaceTrusted !== void 0 && workspaceDir === realStartDir ? workspaceTrusted : isWorkspaceTrusted(settings, void 0, workspaceDir).isTrusted;
+    return trusted !== false;
+  }, "canUseEnvFile");
   const pushCandidate = /* @__PURE__ */ __name((filePath) => {
     const normalized = path.normalize(filePath);
     if (!seen.has(normalized) && fs.existsSync(filePath) && canUseEnvFile(filePath)) {

package/chunks/{chunk-FWBXMANW.js → chunk-THIKWITR.js}

@@ -2,13 +2,13 @@
 "use strict";
 import {
   t
-} from "./chunk-PG62DFWD.js";
+} from "./chunk-WP5VOXF7.js";
 import {
   SessionReferenceService,
   SessionService,
   readManyFiles,
   stripTerminalControlSequences
-} from "./chunk-GXSNGY5M.js";
+} from "./chunk-XX7QFP34.js";
 import {
   emptyMcpResourceText,
   formatMcpResourceContents,
@@ -16,7 +16,7 @@ import {
 } from "./chunk-ZPJWUGCS.js";
 import {
   shouldRunVisionBridge
-} from "./chunk-3PY4LPJF.js";
+} from "./chunk-YGT2AUJ7.js";
 import {
   Storage,
   getErrorMessage,

package/chunks/{chunk-WG6542MA.js → chunk-TQCYNLNJ.js}

@@ -2,7 +2,7 @@
 "use strict";
 import {
   BaseJsonOutputAdapter
-} from "./chunk-77QVBFCU.js";
+} from "./chunk-HZGBKOX3.js";
 import {
   init_esbuild_shims
 } from "./chunk-5O2XNYP6.js";

package/chunks/chunk-TQOF5KBL.js

@@ -0,0 +1,71 @@
+// Force strict mode and setup for ESM
+"use strict";
+import {
+  init_esbuild_shims
+} from "./chunk-5O2XNYP6.js";
+import {
+  __name
+} from "./chunk-J2S4EL5Y.js";
+
+// packages/cli/src/serve/loopback-binds.ts
+init_esbuild_shims();
+var LOOPBACK_BINDS = /* @__PURE__ */ new Set([
+  "127.0.0.1",
+  "localhost",
+  "::1",
+  "[::1]"
+]);
+function isIpv4Loopback(hostname) {
+  const octets = hostname.split(".");
+  if (octets.length !== 4) return false;
+  const [first, ...rest] = octets;
+  return first === "127" && rest.every((octet) => {
+    if (!/^\d+$/.test(octet)) return false;
+    const value = Number(octet);
+    return value >= 0 && value <= 255;
+  });
+}
+__name(isIpv4Loopback, "isIpv4Loopback");
+function isLoopbackBind(hostname) {
+  const normalized = hostname.toLowerCase();
+  return LOOPBACK_BINDS.has(normalized) || isIpv4Loopback(normalized);
+}
+__name(isLoopbackBind, "isLoopbackBind");
+
+// packages/cli/src/config/session-id.ts
+init_esbuild_shims();
+var INTERNAL_SESSION_ID_REGEX = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-5][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}(-agent-[a-zA-Z0-9_.-]+)?$/i;
+var CALLER_SUPPLIED_SESSION_ID_REGEX = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-5][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i;
+function isValidSessionId(value) {
+  return INTERNAL_SESSION_ID_REGEX.test(value);
+}
+__name(isValidSessionId, "isValidSessionId");
+function normalizeSessionIdForLookup(value) {
+  return CALLER_SUPPLIED_SESSION_ID_REGEX.test(value) ? value.toLowerCase() : value;
+}
+__name(normalizeSessionIdForLookup, "normalizeSessionIdForLookup");
+function parseCallerSuppliedSessionId(value) {
+  if (value === void 0 || value === null) return { kind: "absent" };
+  if (typeof value !== "string" || !CALLER_SUPPLIED_SESSION_ID_REGEX.test(value)) {
+    return { kind: "invalid" };
+  }
+  return { kind: "valid", sessionId: normalizeSessionIdForLookup(value) };
+}
+__name(parseCallerSuppliedSessionId, "parseCallerSuppliedSessionId");
+
+export {
+  isLoopbackBind,
+  isValidSessionId,
+  normalizeSessionIdForLookup,
+  parseCallerSuppliedSessionId
+};
+/**
+ * @license
+ * Copyright 2025 Qwen Team
+ * SPDX-License-Identifier: Apache-2.0
+ */
+/**
+ * @license
+ * Copyright 2026 Qwen Team
+ * SPDX-License-Identifier: Apache-2.0
+ */

package/chunks/{chunk-NPUXXRJI.js → chunk-TZ6KJ44L.js}

@@ -2,7 +2,7 @@
 "use strict";
 import {
   runExitCleanup
-} from "./chunk-6TR7CFXH.js";
+} from "./chunk-PNBBJOCP.js";
 import {
   init_esbuild_shims
 } from "./chunk-5O2XNYP6.js";