@qwen-code/qwen-code 0.22.0 → 0.22.2-nightly.20260828.7357136dd1

package/chunks/{chunk-RPJQ3O4M.js → chunk-DFDWJE6Z.js}

@@ -1,18 +1,19 @@
 // Force strict mode and setup for ESM
 "use strict";
-import {
-  JsonOutputAdapter
-} from "./chunk-BB5IMQCV.js";
 import {
   settleChatRecording,
   subscribeToHeadlessChatRecordingFailures
-} from "./chunk-5XHAOUWD.js";
+} from "./chunk-B5OUL5EL.js";
 import {
-  StreamJsonOutputAdapter
-} from "./chunk-KIVGVFMM.js";
+  handleAtCommand,
+  normalizePartList
+} from "./chunk-M4ORUPYI.js";
 import {
-  handleAtCommand
-} from "./chunk-25NESM4G.js";
+  JsonOutputAdapter
+} from "./chunk-BPAKYXQ3.js";
+import {
+  StreamJsonOutputAdapter
+} from "./chunk-WBHKK3CU.js";
 import {
   buildInitialSystemReminders,
   buildSystemMessage,
@@ -22,13 +23,12 @@ import {
   extractPartsFromUserMessage,
   handleSlashCommand,
   insertAfterFunctionResponses,
-  isSlashCommand,
-  normalizePartList
-} from "./chunk-PXOJLJ5W.js";
+  isSlashCommand
+} from "./chunk-FMFBLTLY.js";
 import {
   RunBudgetEnforcer,
   cleanupReviewWorktreeLeases
-} from "./chunk-6QSA4JHL.js";
+} from "./chunk-TQHGJYR3.js";
 import {
   AlreadyReportedError,
   handleBudgetExceededError,
@@ -36,19 +36,20 @@ import {
   handleError,
   handleMaxTurnsExceededError,
   handleToolError
-} from "./chunk-OARZJFZX.js";
+} from "./chunk-JN4IWWMN.js";
 import {
   isInlineModelOverrideAllowed
-} from "./chunk-FVBVJEBG.js";
+} from "./chunk-EKNBU2X7.js";
 import {
+  buildGoalContinuationParts,
   buildSessionRecoveryPlanFromApiHistory,
   detectAutonomousSentinel,
   detectLoopSentinel,
   executeToolCall
-} from "./chunk-62JOGZL5.js";
+} from "./chunk-W6DUQ5GA.js";
 import {
   restoreWorktreeContext
-} from "./chunk-7NBVNAJJ.js";
+} from "./chunk-62GQFYID.js";
 import {
   PLAN_MODE_ENTRY_SIBLING_SKIP_MESSAGE,
   clampInlineMediaPart,
@@ -57,25 +58,26 @@ import {
   findPlanModeEntryBatchBoundaryIndex,
   findRepeatedDuplicateProviderToolCall,
   getCachedToolCallFingerprint,
+  goalToolResultProvenance,
   isReplayOfHandledToolCall,
   isToolCallConcurrencySafe,
   markDuplicateProviderToolCallResponseSent,
   parseAndFormatApiError,
   partitionByConcurrencySafety,
   recordHandledToolCall
-} from "./chunk-T6XLJRQY.js";
+} from "./chunk-EWIQ3NAE.js";
 import {
   parsePositiveIntegerEnv
 } from "./chunk-6PVPNMXU.js";
 import {
   promptIdContext
 } from "./chunk-O6GEWCJA.js";
-import {
-  GoalPersistenceUnavailableError
-} from "./chunk-LDGWX737.js";
 import {
   addAgentOutputMessageAttributes
-} from "./chunk-SJ4HB27T.js";
+} from "./chunk-6W2IK5KC.js";
+import {
+  GoalPersistenceUnavailableError
+} from "./chunk-XLLQJRAH.js";
 import {
   formatFullTurnVisionNotice,
   formatVisionBridgeNotice,
@@ -85,28 +87,28 @@ import {
   shouldRunVisionBridge,
   splitImageParts,
   uiTelemetryService
-} from "./chunk-FDD2IUEL.js";
+} from "./chunk-SZLBBZH4.js";
 import {
   endInteractionSpan,
   getActiveInteractionSpan,
   isTelemetrySdkInitialized,
   shutdownTelemetry
-} from "./chunk-GAHYKJPV.js";
+} from "./chunk-B5PHIJGI.js";
 import {
   isSystemReminderContent
-} from "./chunk-WZDM44SB.js";
+} from "./chunk-CAJTKR6W.js";
 import {
   ToolNames,
   canonicalToolName
-} from "./chunk-6NFAEG54.js";
+} from "./chunk-UTLCH2FK.js";
 import {
   FatalInputError,
   createDebugLogger,
   getErrorType
-} from "./chunk-A5F2YNO6.js";
+} from "./chunk-UHQFIS7N.js";
 import {
   registerCleanup
-} from "./chunk-4CWDWDL6.js";
+} from "./chunk-SJ5ERAW3.js";
 import {
   init_esbuild_shims
 } from "./chunk-5O2XNYP6.js";
@@ -140,7 +142,11 @@ function suppressedOutputBody(structuredCaptured) {
 __name(suppressedOutputBody, "suppressedOutputBody");
 var LOOP_TYPE_LABELS = {
   ["consecutive_identical_tool_calls" /* CONSECUTIVE_IDENTICAL_TOOL_CALLS */]: "the model repeated the same tool call with identical arguments",
-  ["chanting_identical_sentences" /* CHANTING_IDENTICAL_SENTENCES */]: "the model repeated the same sentence in its output",
+  // Reasoning-stream chants fire this type too (checkReasoningContentLoop),
+  // and getResponseText filters reasoning out of visible output — the label
+  // must name both channels so a headless halt on an empty stdout is not
+  // mistaken for a detector misfire.
+  ["chanting_identical_sentences" /* CHANTING_IDENTICAL_SENTENCES */]: "the model repeated the same sentence in its output or reasoning",
   ["repetitive_thoughts" /* REPETITIVE_THOUGHTS */]: "the model repeated the same reasoning thought",
   ["read_file_loop" /* READ_FILE_LOOP */]: "the model spent too many consecutive calls reading files without making progress",
   ["action_stagnation" /* ACTION_STAGNATION */]: "the model kept calling the same tool without making progress",
@@ -163,21 +169,6 @@ function sameGoalPermit(left, right) {
   return left?.goalId === right.goalId && left.revision === right.revision && left.turnId === right.turnId;
 }
 __name(sameGoalPermit, "sameGoalPermit");
-function buildGoalContinuationParts(turn) {
-  return [
-    {
-      text: [
-        "Continue working on the active Goal.",
-        "Use get_goal for the authoritative objective and evidence state.",
-        "Follow the objective's requested output format exactly. Do not add progress, status, or completion commentary unless the objective asks for it.",
-        "If completion depends on content delivered in this turn, deliver only that content and call get_goal in the same response before update_goal.",
-        `Runtime continuation context: ${turn.continuationContext}`,
-        ...turn.verifierFeedback ? [`Verifier feedback: ${turn.verifierFeedback}`] : []
-      ].join("\n")
-    }
-  ];
-}
-__name(buildGoalContinuationParts, "buildGoalContinuationParts");
 function projectLegacyActiveGoal(snapshot) {
   const goal = snapshot.goal;
   if (goal?.status !== "active") return null;
@@ -410,6 +401,8 @@ async function runNonInteractive(config, settings, input, prompt_id, options = {
           controller: new AbortController(),
           origin: "runtime",
           continuationContext: input2.continuationContext,
+          ...input2.objectiveUpdated ? { objectiveUpdated: input2.objectiveUpdated } : {},
+          ...input2.windDown ? { windDown: true } : {},
           ...input2.verifierFeedback ? { verifierFeedback: input2.verifierFeedback } : {}
         });
       }, "startGoalTurn"),
@@ -423,6 +416,12 @@ async function runNonInteractive(config, settings, input, prompt_id, options = {
     const bindGoalHost = /* @__PURE__ */ __name(() => {
       goalHostUnbind ??= config.bindGoalTurnHost(goalHost);
     }, "bindGoalHost");
+    const markGoalTurnDelivered = /* @__PURE__ */ __name((turn) => {
+      try {
+        config.getGoalRuntime().markTurnDelivered(turn.turnKey);
+      } catch {
+      }
+    }, "markGoalTurnDelivered");
     let settlingGoalTurn;
     let goalTurnSettlement;
     const failClosedActiveGoalTurn = /* @__PURE__ */ __name((reason) => {
@@ -793,6 +792,7 @@ ${reason}
                   "The Goal runtime did not schedule a continuation."
                 );
               }
+              markGoalTurnDelivered(activeGoalTurn);
               initialPartList = buildGoalContinuationParts(activeGoalTurn);
               slashHandled = true;
               break;
@@ -1478,16 +1478,21 @@ ${text}
           const { request, response } = orderedResponses[index];
           const finalizedParts = finalized[index].responseParts;
           toolResponseParts.push(...finalizedParts);
-          chatRecordingService?.recordToolResult?.(finalizedParts, {
-            callId: request.callId,
-            status: statusByResponse.get(response) ?? (response.error ? "error" : "success"),
-            resultDisplay: response.resultDisplay,
-            persistedOutputFiles: finalized[index].persistedOutputFiles,
-            artifacts: finalized[index].artifacts,
-            error: response.error,
-            errorType: response.errorType,
-            executionStatus: response.executionStatus
-          });
+          const goalProvenance = goalToolResultProvenance(request);
+          chatRecordingService?.recordToolResult?.(
+            finalizedParts,
+            {
+              callId: request.callId,
+              status: statusByResponse.get(response) ?? (response.error ? "error" : "success"),
+              resultDisplay: response.resultDisplay,
+              persistedOutputFiles: finalized[index].persistedOutputFiles,
+              artifacts: finalized[index].artifacts,
+              error: response.error,
+              errorType: response.errorType,
+              executionStatus: response.executionStatus
+            },
+            ...goalProvenance ? [goalProvenance] : []
+          );
         }
         return {
           responseParts: toolResponseParts,
@@ -1646,6 +1651,7 @@ ${text}
             const nextGoalTurn = queuedGoalTurns.shift();
             if (nextGoalTurn) {
               activeGoalTurn = nextGoalTurn;
+              markGoalTurnDelivered(nextGoalTurn);
               isFirstGoalSegment = true;
               currentMessages = [
                 {
@@ -1676,6 +1682,7 @@ ${text}
             const nextGoalTurn = queuedGoalTurns.shift();
             if (nextGoalTurn) {
               activeGoalTurn = nextGoalTurn;
+              markGoalTurnDelivered(nextGoalTurn);
               isFirstGoalSegment = true;
               currentMessages = [
                 {

package/chunks/{chunk-KSPRQSB4.js → chunk-DIMEPKCW.js}

@@ -2,7 +2,7 @@
 "use strict";
 import {
   require_express
-} from "./chunk-O5Z7EB6Y.js";
+} from "./chunk-AYHQZBJ4.js";
 import {
   writeStderrLine
 } from "./chunk-KGJGEEVR.js";
@@ -42,9 +42,43 @@ var WEB_SHELL_CSP_DIRECTIVES = [
   // attacker origin.
   "base-uri 'none'"
 ];
-function buildWebShellCsp(frameAncestors = []) {
+function loopbackSandboxOrigins(hostHeader) {
+  const port = portFromHostHeader(hostHeader);
+  const suffix = port ? `:${port}` : "";
+  const hosts = ["localhost", "127.0.0.1"];
+  return ["http", "https"].flatMap(
+    (scheme) => hosts.map((host) => `${scheme}://${host}${suffix}`)
+  );
+}
+__name(loopbackSandboxOrigins, "loopbackSandboxOrigins");
+function portFromHostHeader(hostHeader) {
+  if (!hostHeader) return void 0;
+  if (hostHeader.startsWith("[")) {
+    const end = hostHeader.indexOf("]");
+    if (end === -1) return void 0;
+    const rest = hostHeader.slice(end + 1);
+    return rest.startsWith(":") && /^\d+$/u.test(rest.slice(1)) ? rest.slice(1) : void 0;
+  }
+  const colon = hostHeader.lastIndexOf(":");
+  if (colon === -1) return void 0;
+  const port = hostHeader.slice(colon + 1);
+  return /^\d+$/u.test(port) ? port : void 0;
+}
+__name(portFromHostHeader, "portFromHostHeader");
+function buildWebShellPermissionsPolicy() {
+  return [
+    "camera=()",
+    "microphone=(self)",
+    "geolocation=()",
+    "payment=()",
+    "clipboard-write=(self)"
+  ].join(", ");
+}
+__name(buildWebShellPermissionsPolicy, "buildWebShellPermissionsPolicy");
+function buildWebShellCsp(frameAncestors = [], frameSrcOrigins = loopbackSandboxOrigins(void 0)) {
   const fa = frameAncestors.length ? `frame-ancestors ${frameAncestors.join(" ")}` : "frame-ancestors 'none'";
-  return [...WEB_SHELL_CSP_DIRECTIVES, fa].join("; ");
+  const frameSrc = `frame-src ${frameSrcOrigins.join(" ")}`;
+  return [...WEB_SHELL_CSP_DIRECTIVES, frameSrc, fa].join("; ");
 }
 __name(buildWebShellCsp, "buildWebShellCsp");
 var WEB_SHELL_CSP = buildWebShellCsp();
@@ -61,22 +95,25 @@ function isPreAuthWebShellRequest(req) {
   const reqPath = req.path.toLowerCase();
   if (reqPath === "/" || // Express non-strict routing compiles `/` to `/^(?:\/)(?:\/$)?$/i`, so
   // a raw `//` also matches `app.get('/')` pre-auth (but `///` does not).
-  reqPath === "//" || reqPath === "/assets" || reqPath.startsWith("/assets/"))
+  reqPath === "//" || reqPath === "/assets" || reqPath.startsWith("/assets/") || reqPath === "/mcp-app-sandbox")
     return true;
   return SESSION_DEEP_LINK_PATH.test(reqPath) && isDocumentNavigation(req);
 }
 __name(isPreAuthWebShellRequest, "isPreAuthWebShellRequest");
 function createSendIndex(webShellDir, frameAncestors = []) {
   const indexPath = path.join(webShellDir, "index.html");
-  const csp = buildWebShellCsp(frameAncestors);
-  return (res) => {
+  return (req, res) => {
+    const sandboxOrigins = loopbackSandboxOrigins(req.get("host"));
+    const csp = buildWebShellCsp(frameAncestors, sandboxOrigins);
     res.status(200).set("Content-Security-Policy", csp).set("X-Content-Type-Options", "nosniff").set("Referrer-Policy", "no-referrer").set(
       // `microphone=(self)` lets the same-origin Web Shell document request
       // the mic for voice dictation (the prompt won't even appear under an
-      // empty `microphone=()` allowlist). Still blocks cross-origin iframes;
-      // camera/geolocation/payment stay disabled (unused).
+      // empty `microphone=()` allowlist). Camera/geolocation stay disabled:
+      // the MCP App inner iframe is opaque-origin, so those grants cannot
+      // work there, and this header also blocks delegating them to the
+      // cross-origin sandbox.
       "Permissions-Policy",
-      "camera=(), microphone=(self), geolocation=(), payment=()"
+      buildWebShellPermissionsPolicy()
     ).set("Cache-Control", "no-cache");
     if (frameAncestors.length === 0) {
       res.set("X-Frame-Options", "DENY");
@@ -117,10 +154,10 @@ function mountWebShellAssets(app, webShellDir, frameAncestors = []) {
     }
     res.status(404).type("text/plain").send("Not found");
   });
-  app.get("/", (_req, res) => sendIndex(res));
+  app.get("/", (req, res) => sendIndex(req, res));
   app.get("/session/:id", (req, res, next) => {
     if (!isDocumentNavigation(req)) return next();
-    sendIndex(res);
+    sendIndex(req, res);
   });
 }
 __name(mountWebShellAssets, "mountWebShellAssets");
@@ -134,13 +171,16 @@ function mountWebShellSpaFallback(app, webShellDir, frameAncestors = []) {
         `qwen serve: Web Shell SPA fallback served for ${req.method} ${req.originalUrl}`
       );
     }
-    sendIndex(res);
+    sendIndex(req, res);
   });
 }
 __name(mountWebShellSpaFallback, "mountWebShellSpaFallback");
 
 export {
   isServeDebugMode,
+  loopbackSandboxOrigins,
+  portFromHostHeader,
+  buildWebShellPermissionsPolicy,
   buildWebShellCsp,
   WEB_SHELL_CSP,
   isDocumentNavigation,