@qwen-code/qwen-code 0.22.0 → 0.22.2-nightly.20260828.7357136dd1

package/chunks/chunk-HOCJDUFY.js

@@ -0,0 +1,20 @@
+// Force strict mode and setup for ESM
+"use strict";
+import {
+  init_esbuild_shims
+} from "./chunk-5O2XNYP6.js";
+
+// packages/cli/src/generated/git-commit.ts
+init_esbuild_shims();
+var GIT_COMMIT_INFO = "27e3250147";
+var CLI_VERSION = "0.22.2-nightly.20260828.7357136dd1";
+
+export {
+  GIT_COMMIT_INFO,
+  CLI_VERSION
+};
+/**
+ * @license
+ * Copyright 2026 Google LLC
+ * SPDX-License-Identifier: Apache-2.0
+ */

package/chunks/{chunk-6UQSU7CQ.js → chunk-HPXV655A.js}

@@ -1,24 +1,13 @@
 // Force strict mode and setup for ESM
 "use strict";
-import {
-  getSettingsSchema
-} from "./chunk-7DMTAQJ6.js";
 import {
   DEFAULT_DARK_THEME_NAME,
   DEFAULT_LIGHT_THEME_NAME
 } from "./chunk-RKUWKYED.js";
 import {
-  t
-} from "./chunk-OE52YHCZ.js";
-import {
-  SUPPORTED_LANGUAGES,
-  getLanguageNameFromLocale
-} from "./chunk-5EJZE3FP.js";
-import {
-  getHomeEnvFallbackVars,
-  loadEnvironment,
-  preResolveHomeEnvOverrides
-} from "./chunk-OVH5Y7KS.js";
+  customDeepMerge,
+  getSettingsSchema
+} from "./chunk-IB7FQJRY.js";
 import {
   CONSOLIDATED_DISABLE_KEYS,
   V1_INDICATOR_KEYS,
@@ -31,26 +20,38 @@ import {
   getSystemDefaultsPath,
   getSystemSettingsPath
 } from "./chunk-IDS7MSUP.js";
+import {
+  t
+} from "./chunk-RWZB422L.js";
+import {
+  SUPPORTED_LANGUAGES,
+  getLanguageNameFromLocale
+} from "./chunk-5EJZE3FP.js";
+import {
+  getHomeEnvFallbackVars,
+  loadEnvironment,
+  preResolveHomeEnvOverrides
+} from "./chunk-DP4MWIM3.js";
 import {
   ENV_CORRUPTED_PATH,
   ENV_WAS_RECOVERED
-} from "./chunk-CXJHQVEK.js";
+} from "./chunk-5PA6UEYA.js";
 import {
   isWorkspaceTrusted,
   updateSettingsFilePreservingFormat
-} from "./chunk-L4HVF7LM.js";
+} from "./chunk-CYAUBK46.js";
 import {
   require_strip_json_comments
 } from "./chunk-NPQ5ZKRP.js";
 import {
   stripRuntimeSnapshotPrefix
-} from "./chunk-7DYNJFES.js";
+} from "./chunk-JB4JIVTJ.js";
 import {
   FatalConfigError,
   Storage,
   createDebugLogger,
   getErrorMessage
-} from "./chunk-A5F2YNO6.js";
+} from "./chunk-UHQFIS7N.js";
 import {
   init_esbuild_shims
 } from "./chunk-5O2XNYP6.js";
@@ -104,11 +105,11 @@ function getOwnKeyScope(settings, key) {
 }
 __name(getOwnKeyScope, "getOwnKeyScope");
 
-// packages/cli/src/utils/settingsUtils.ts
+// packages/cli/src/config/settingsUtils.ts
 init_esbuild_shims();
 import * as fs2 from "node:fs";
 
-// packages/cli/src/utils/languageUtils.ts
+// packages/cli/src/i18n/languageUtils.ts
 init_esbuild_shims();
 import * as fs from "node:fs";
 import * as path from "node:path";
@@ -287,7 +288,7 @@ function initializeLlmOutputLanguage(outputLanguage) {
 }
 __name(initializeLlmOutputLanguage, "initializeLlmOutputLanguage");
 
-// packages/cli/src/utils/settingsUtils.ts
+// packages/cli/src/config/settingsUtils.ts
 function flattenSchema(schema, prefix = "") {
   let result = {};
   for (const key in schema) {
@@ -432,8 +433,18 @@ function validateSettingValue(def, value) {
   return void 0;
 }
 __name(validateSettingValue, "validateSettingValue");
-function getDialogSettingKeys() {
-  const dialogSettings = Object.values(getFlattenedSchema()).filter((definition) => definition.showInDialog === true).map((definition) => definition.key);
+var WORKSPACE_RESTRICTED_SETTINGS = [
+  { section: "tools", key: "workflowsEnabled" },
+  { section: "security", key: "allowPrivateNetworkHooks" },
+  { section: "security", key: "allowedInsecureVoiceBaseUrls" },
+  { section: "agents", key: "crossSessionMessaging" },
+  { section: "agents", key: "crossSessionInbound" }
+];
+var WORKSPACE_RESTRICTED_SETTING_KEYS = WORKSPACE_RESTRICTED_SETTINGS.map(({ section, key }) => `${section}.${key}`);
+function getDialogSettingKeys(options) {
+  const dialogSettings = Object.values(getFlattenedSchema()).filter((definition) => definition.showInDialog === true).map((definition) => definition.key).filter(
+    (key) => !options?.excludeWorkspaceRestricted || !WORKSPACE_RESTRICTED_SETTING_KEYS.includes(key)
+  );
   return dialogSettings.sort((a, b) => {
     const indexA = SETTINGS_DIALOG_ORDER.indexOf(a);
     const indexB = SETTINGS_DIALOG_ORDER.indexOf(b);
@@ -628,66 +639,6 @@ function cleanupSettingsBackup(filePath) {
 }
 __name(cleanupSettingsBackup, "cleanupSettingsBackup");
 
-// packages/cli/src/utils/deepMerge.ts
-init_esbuild_shims();
-function isPlainObject(item) {
-  return !!item && typeof item === "object" && !Array.isArray(item);
-}
-__name(isPlainObject, "isPlainObject");
-function mergeRecursively(target, source, getMergeStrategyForPath2, path3 = []) {
-  for (const key of Object.keys(source)) {
-    if (key === "__proto__" || key === "constructor" || key === "prototype") {
-      continue;
-    }
-    const newPath = [...path3, key];
-    const srcValue = source[key];
-    const objValue = target[key];
-    const mergeStrategy = getMergeStrategyForPath2(newPath);
-    if (mergeStrategy === "shallow_merge" /* SHALLOW_MERGE */ && objValue && srcValue) {
-      const obj1 = typeof objValue === "object" && objValue !== null ? objValue : {};
-      const obj2 = typeof srcValue === "object" && srcValue !== null ? srcValue : {};
-      target[key] = { ...obj1, ...obj2 };
-      continue;
-    }
-    if (Array.isArray(objValue)) {
-      const srcArray = Array.isArray(srcValue) ? srcValue : [srcValue];
-      if (mergeStrategy === "concat" /* CONCAT */) {
-        target[key] = objValue.concat(srcArray);
-        continue;
-      }
-      if (mergeStrategy === "union" /* UNION */) {
-        target[key] = [...new Set(objValue.concat(srcArray))];
-        continue;
-      }
-    }
-    if (isPlainObject(objValue) && isPlainObject(srcValue)) {
-      mergeRecursively(objValue, srcValue, getMergeStrategyForPath2, newPath);
-    } else if (isPlainObject(srcValue)) {
-      target[key] = {};
-      mergeRecursively(
-        target[key],
-        srcValue,
-        getMergeStrategyForPath2,
-        newPath
-      );
-    } else {
-      target[key] = srcValue;
-    }
-  }
-  return target;
-}
-__name(mergeRecursively, "mergeRecursively");
-function customDeepMerge(getMergeStrategyForPath2, ...sources) {
-  const result = {};
-  for (const source of sources) {
-    if (source) {
-      mergeRecursively(result, source, getMergeStrategyForPath2);
-    }
-  }
-  return result;
-}
-__name(customDeepMerge, "customDeepMerge");
-
 // packages/cli/src/config/migration/index.ts
 init_esbuild_shims();
 
@@ -1337,12 +1288,12 @@ function getSettingsFileKeyWarnings(settings, settingsFilePath) {
   return warnings;
 }
 __name(getSettingsFileKeyWarnings, "getSettingsFileKeyWarnings");
-function isPlainObject2(value) {
+function isPlainObject(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
-__name(isPlainObject2, "isPlainObject");
+__name(isPlainObject, "isPlainObject");
 function hasAnyProviderEntries(modelProviders) {
-  if (!isPlainObject2(modelProviders)) {
+  if (!isPlainObject(modelProviders)) {
     return false;
   }
   return Object.values(modelProviders).some(
@@ -1361,7 +1312,7 @@ function getModelProvidersOverrideWarnings(loadedSettings) {
   }
   const userModelProviders = userOriginal["modelProviders"];
   const workspaceModelProviders = workspaceOriginal["modelProviders"];
-  const workspaceIsEmptyModelProviders = isPlainObject2(workspaceModelProviders) && Object.keys(workspaceModelProviders).length === 0;
+  const workspaceIsEmptyModelProviders = isPlainObject(workspaceModelProviders) && Object.keys(workspaceModelProviders).length === 0;
   if (!workspaceIsEmptyModelProviders || !hasAnyProviderEntries(userModelProviders)) {
     return [];
   }
@@ -1392,15 +1343,14 @@ function getSettingsWarnings(loadedSettings) {
     warningSet.add(warning);
   }
   const workspaceFile = loadedSettings.forScope("Workspace" /* Workspace */);
-  if (workspaceFile.rawJson !== void 0 && workspaceFile.originalSettings.security?.allowPrivateNetworkHooks !== void 0) {
-    warningSet.add(
-      `Warning: security.allowPrivateNetworkHooks in workspace settings (${workspaceFile.path}) is ignored. This setting is only honored from User, System, or SystemDefaults scope settings.`
-    );
-  }
-  if (workspaceFile.rawJson !== void 0 && workspaceFile.originalSettings.security?.allowedInsecureVoiceBaseUrls !== void 0) {
-    warningSet.add(
-      `Warning: security.allowedInsecureVoiceBaseUrls in workspace settings (${workspaceFile.path}) is ignored. This setting is only honored from User, System, or SystemDefaults scope settings.`
-    );
+  if (workspaceFile.rawJson !== void 0) {
+    for (const { section, key } of WORKSPACE_RESTRICTED_SETTINGS) {
+      const sectionValue = workspaceFile.originalSettings[section];
+      if (sectionValue?.[key] === void 0) continue;
+      warningSet.add(
+        `Warning: ${section}.${key} in workspace settings (${workspaceFile.path}) is ignored. This setting is only honored from User, System, or SystemDefaults scope settings.`
+      );
+    }
   }
   return [...warningSet];
 }
@@ -1417,20 +1367,22 @@ function tagMcpServerScope(settings, scope) {
   return { ...settings, mcpServers: tagged };
 }
 __name(tagMcpServerScope, "tagMcpServerScope");
-function stripWorkspaceSecurityBypasses(settings) {
-  if (settings.security?.allowPrivateNetworkHooks === void 0 && settings.security?.allowedInsecureVoiceBaseUrls === void 0) {
-    return settings;
+function stripWorkspaceRestrictedSettings(settings) {
+  let stripped;
+  for (const { section, key } of WORKSPACE_RESTRICTED_SETTINGS) {
+    const source = (stripped ?? settings)[section];
+    if (source?.[key] === void 0) continue;
+    const { [key]: _restricted, ...rest } = source;
+    stripped = { ...stripped ?? settings, [section]: rest };
   }
-  const {
-    allowPrivateNetworkHooks: _privateHooks,
-    allowedInsecureVoiceBaseUrls: _insecureVoice,
-    ...restSecurity
-  } = settings.security;
-  return { ...settings, security: restSecurity };
+  return stripped ?? settings;
 }
-__name(stripWorkspaceSecurityBypasses, "stripWorkspaceSecurityBypasses");
+__name(stripWorkspaceRestrictedSettings, "stripWorkspaceRestrictedSettings");
 function mergeSettings(system, systemDefaults, user, workspace, isTrusted) {
-  const safeWorkspace = isTrusted ? tagMcpServerScope(stripWorkspaceSecurityBypasses(workspace), "workspace") : {};
+  const safeWorkspace = isTrusted ? tagMcpServerScope(
+    stripWorkspaceRestrictedSettings(workspace),
+    "workspace"
+  ) : {};
   return customDeepMerge(
     getMergeStrategyForPath,
     {},
@@ -1953,6 +1905,7 @@ export {
   getEffectiveValue,
   getAllSettingKeys,
   validateSettingValue,
+  WORKSPACE_RESTRICTED_SETTING_KEYS,
   getDialogSettingKeys,
   settingExistsInScope,
   setPendingSettingValue,

package/chunks/{chunk-45NQKMYB.js → chunk-HVC3PNVC.js}

@@ -2,7 +2,7 @@
 "use strict";
 import {
   resolvePath
-} from "./chunk-AW27A43Y.js";
+} from "./chunk-ICURCKIU.js";
 import {
   init_esbuild_shims
 } from "./chunk-5O2XNYP6.js";

package/chunks/{chunk-QJHPWLZC.js → chunk-HYDJDQGJ.js}

@@ -2,7 +2,7 @@
 "use strict";
 import {
   t
-} from "./chunk-OE52YHCZ.js";
+} from "./chunk-RWZB422L.js";
 import {
   init_esbuild_shims
 } from "./chunk-5O2XNYP6.js";

package/chunks/{chunk-7DMTAQJ6.js → chunk-IB7FQJRY.js}

@@ -11,14 +11,14 @@ import {
   DEFAULT_TOOL_RESULTS_TOTAL_CHARS_THRESHOLD,
   DEFAULT_TRUNCATE_TOOL_OUTPUT_LINES,
   DEFAULT_TRUNCATE_TOOL_OUTPUT_THRESHOLD
-} from "./chunk-T6XLJRQY.js";
+} from "./chunk-EWIQ3NAE.js";
 import {
   DEFAULT_SENSITIVE_SPAN_ATTRIBUTE_MAX_LENGTH,
   SENSITIVE_SPAN_ATTRIBUTE_MAX_LENGTH_LIMIT
-} from "./chunk-GAHYKJPV.js";
+} from "./chunk-B5PHIJGI.js";
 import {
   DEFAULT_QWEN_CUSTOM_IGNORE_FILE_NAMES
-} from "./chunk-K52PZNU4.js";
+} from "./chunk-PDQGMSZK.js";
 import {
   init_esbuild_shims
 } from "./chunk-5O2XNYP6.js";
@@ -26,6 +26,66 @@ import {
   __name
 } from "./chunk-J2S4EL5Y.js";
 
+// packages/cli/src/utils/deepMerge.ts
+init_esbuild_shims();
+function isPlainObject(item) {
+  return !!item && typeof item === "object" && !Array.isArray(item);
+}
+__name(isPlainObject, "isPlainObject");
+function mergeRecursively(target, source, getMergeStrategyForPath, path = []) {
+  for (const key of Object.keys(source)) {
+    if (key === "__proto__" || key === "constructor" || key === "prototype") {
+      continue;
+    }
+    const newPath = [...path, key];
+    const srcValue = source[key];
+    const objValue = target[key];
+    const mergeStrategy = getMergeStrategyForPath(newPath);
+    if (mergeStrategy === "shallow_merge" /* SHALLOW_MERGE */ && objValue && srcValue) {
+      const obj1 = typeof objValue === "object" && objValue !== null ? objValue : {};
+      const obj2 = typeof srcValue === "object" && srcValue !== null ? srcValue : {};
+      target[key] = { ...obj1, ...obj2 };
+      continue;
+    }
+    if (Array.isArray(objValue)) {
+      const srcArray = Array.isArray(srcValue) ? srcValue : [srcValue];
+      if (mergeStrategy === "concat" /* CONCAT */) {
+        target[key] = objValue.concat(srcArray);
+        continue;
+      }
+      if (mergeStrategy === "union" /* UNION */) {
+        target[key] = [...new Set(objValue.concat(srcArray))];
+        continue;
+      }
+    }
+    if (isPlainObject(objValue) && isPlainObject(srcValue)) {
+      mergeRecursively(objValue, srcValue, getMergeStrategyForPath, newPath);
+    } else if (isPlainObject(srcValue)) {
+      target[key] = {};
+      mergeRecursively(
+        target[key],
+        srcValue,
+        getMergeStrategyForPath,
+        newPath
+      );
+    } else {
+      target[key] = srcValue;
+    }
+  }
+  return target;
+}
+__name(mergeRecursively, "mergeRecursively");
+function customDeepMerge(getMergeStrategyForPath, ...sources) {
+  const result = {};
+  for (const source of sources) {
+    if (source) {
+      mergeRecursively(result, source, getMergeStrategyForPath);
+    }
+  }
+  return result;
+}
+__name(customDeepMerge, "customDeepMerge");
+
 // packages/cli/src/config/settingsSchema.ts
 init_esbuild_shims();
 var DEFAULT_OPENAI_LOG_RETENTION_DAYS = 7;
@@ -56,7 +116,7 @@ var HOOK_DEFINITION_ITEMS = {
           type: {
             type: "string",
             description: 'The type of hook. Note: "function" type is only available via SDK registration, not settings.json.',
-            enum: ["command", "http"],
+            enum: ["command", "http", "prompt"],
             required: true
           },
           command: {
@@ -67,6 +127,14 @@ var HOOK_DEFINITION_ITEMS = {
             type: "string",
             description: 'The URL to send the POST request to. Required for "http" type.'
           },
+          prompt: {
+            type: "string",
+            description: 'The prompt to send to the model. Required for "prompt" type.'
+          },
+          model: {
+            type: "string",
+            description: 'The optional model to use for a "prompt" hook.'
+          },
           headers: {
             type: "object",
             description: "HTTP headers to include in the request. Supports env var interpolation ($VAR, ${VAR}).",
@@ -522,13 +590,27 @@ var SETTINGS_SCHEMA = {
         description: `Append the attribution footer naming the model and CLI version (e.g. "_\u2014 qwen3-coder via Qwen Code /review (v0.21.2)_") to review bodies and inline comments posted to GitHub. Disable to post reviews without VISIBLE AI attribution: no footer, and no "**[Critical]**"/"**[Suggestion]**" severity markers on posted comments and body lists. Unattributed posts stay identifiable in the raw source: each posted comment carries an invisible severity marker ("<!-- qwen-review critical -->") and the review body carries a ledger marker ("<!-- qwen-review-ledger ... -->") \u2014 anything reading comment bodies (GitHub API automation, the workflows this setting couples to) still recognizes a /review artifact, and presubmit duplicate detection recognizes the reviewing account's earlier posts by the severity marker, though unattributed posts from other accounts escape it. Another consequence: qwen-autofix's Critical-only mode (engaged after round 5, or earlier when a counting window's diff-growth budget trips) no longer recognizes the posted findings as Critical and defers them. Only honored from User, System, and SystemDefaults settings scopes; values set in Workspace settings are ignored, so a repository cannot set review policy for its reviewers.`,
         showInDialog: true
       },
+      sandbox: {
+        type: "enum",
+        label: "Sandbox the reviewed code: review",
+        category: "General",
+        requiresRestart: false,
+        default: "off",
+        description: 'Run the REVIEWED repository\'s own commands \u2014 `npm ci` with its install scripts, the build, the test suite, and every mutation probe \u2014 inside a container instead of directly as you. A review executes the code it is reviewing, and today those commands inherit the review process\'s whole environment (on CI that includes the model and GitHub credentials). "auto" uses a container when docker or podman answers and runs directly when neither does; "required" refuses to run them unsandboxed, which makes the evidence that depends on execution (build/test findings, mutation verdicts, `Source: [probe]`) unavailable for that run rather than ending the review; "off" is today\'s behaviour and stays the default, because containerising a build by surprise changes what native modules compile against. Only honored from User, System, and SystemDefaults settings scopes; values set in Workspace settings are ignored, so a repository cannot switch off the containment that exists to contain it.',
+        showInDialog: true,
+        options: [
+          { value: "off", label: "Off (run the reviewed code directly)" },
+          { value: "auto", label: "Auto (container when one is available)" },
+          { value: "required", label: "Required (never run it unsandboxed)" }
+        ]
+      },
       effort: {
         type: "enum",
         label: "Default effort: review",
         category: "General",
         requiresRestart: false,
         default: "auto",
-        description: 'Default effort for /review when --effort is not given. "auto" keeps the built-in rule (high for PRs, medium for local changes). An explicit --effort still wins; an effective --comment still forces high and --fix still floors at medium. Only honored from User, System, and SystemDefaults settings scopes; values set in Workspace settings are ignored, so a repository cannot set review policy for its reviewers.',
+        description: 'Default effort for /review when neither --effort nor a project-remembered explicitly typed level applies. "auto" keeps the built-in rule (high for PRs, medium for local changes). An explicit or remembered level wins; an effective --comment still forces high and --fix still floors at medium. Only honored from User, System, and SystemDefaults settings scopes; values set in Workspace settings are ignored, so a repository cannot set review policy for its reviewers.',
         showInDialog: true,
         options: [
           { value: "auto", label: "Auto (high for PRs, medium for local)" },
@@ -568,6 +650,15 @@ var SETTINGS_SCHEMA = {
         default: 0,
         description: `Lower the reverse-audit loop's round cap for every high-effort review. The cap is normally chosen from the diff topology (10 small / 5 chunked; a huge diff is 3 when the run has a review deadline and 5 when it does not, because that reduction answers a CI ceiling and applies only where one exists) because a round costs one agent on a small diff and ~90 minutes on a huge one; this setting can only LOWER whichever tier applies, never raise it \u2014 a value that is not a whole number above zero, or that is out of range (below 3, or above the plan's own tier), is ignored and leaves the tier alone \u2014 JSON Schema has no integer type here, so a fraction validates in an editor and is then discarded at runtime. Understand what it buys before enabling: the loop ends on two consecutive dry rounds, so cutting the cap does not make reviews converge sooner, it makes them stop before converging more often \u2014 and every such stop is disclosed as unreviewed scope and caps the verdict at Comment, so a cheaper review is also one that can no longer Approve. To spend LESS on reviews generally, prefer "effort". Nothing here makes a loop run LONGER: a review deadline bounds a run rather than extending it, and on a huge diff setting one lowers the cap from 5 to 3 rather than raising it. Only honored from User, System, and SystemDefaults settings scopes; values set in Workspace settings are ignored, so a repository cannot set review policy for its reviewers.`,
         showInDialog: true
+      },
+      approachRounds: {
+        type: "number",
+        label: "Approach-signal round threshold: review",
+        category: "General",
+        requiresRestart: false,
+        default: 0,
+        description: "How many rounds a pull request must reach before the review may add one advisory paragraph saying the shape of the change, rather than the current patch, looks like the open question. It appears only when the diff has also grown several times over since the review first measured it, and never on an Approve. It is disclosure only: it adds no finding, changes no verdict, and blocks nothing \u2014 it exists because every finding is anchored to a line in the current diff, so the review can report where an approach leaks but never that a different approach would retire all of the leaks at once. Leave at 0 to keep the built-in threshold of 5 rounds; raise it to make the paragraph appear later, and set it very high to silence it. A value that is not a whole number above zero is ignored. Only honored from User, System, and SystemDefaults settings scopes; values set in Workspace settings are ignored, so a repository cannot set review policy for its reviewers.",
+        showInDialog: true
       }
     }
   },
@@ -586,11 +677,16 @@ var SETTINGS_SCHEMA = {
         category: "General",
         requiresRestart: false,
         default: "text",
-        description: "The format of the CLI output.",
+        description: "The format of the CLI output. With `stream-json`, runs started with a prompt behave as non-interactive (headless), matching `--output-format stream-json`. Flags validated at argv parse time (`--include-partial-messages`, `--input-format stream-json`) still require the explicit `--output-format stream-json` flag.",
         showInDialog: false,
+        // The values are the runtime's `OutputFormat` enum members, and the
+        // settingsSchema test pins these options against
+        // `Object.values(OutputFormat)`, so a format added in core fails
+        // that test until this list and the regenerated JSON follow.
         options: [
-          { value: "text", label: "Text" },
-          { value: "json", label: "JSON" }
+          { value: "text" /* TEXT */, label: "Text" },
+          { value: "json" /* JSON */, label: "JSON" },
+          { value: "stream-json" /* STREAM_JSON */, label: "Stream JSON" }
         ]
       },
       showTimestamps: {
@@ -666,7 +762,7 @@ var SETTINGS_SCHEMA = {
         category: "UI",
         requiresRestart: false,
         default: void 0,
-        description: 'Status line display configuration. Use `type: "preset"` with built-in item ids, or `type: "command"` with a shell command. Optional command `refreshInterval` (seconds, >= 1) re-runs the command on a timer so external data stays fresh. Set `respectUserColors: true` to preserve ANSI color codes in command output instead of applying dim/theme styling. Set `hideContextIndicator: true` to hide the built-in context usage indicator in the footer right section, or `false` to always show it. When `hideContextIndicator` is unset, the footer indicator is hidden automatically for preset status lines that already include `context-used` or `context-remaining`, and shown otherwise (including for `command` status lines). When unset (default), the built-in default preset (model, git branch, context usage, current dir) is shown automatically; set to `null` to explicitly disable the status line.',
+        description: 'Status line display configuration. Use `type: "preset"` with built-in item ids, or `type: "command"` with a shell command. Optional command `refreshInterval` (seconds, >= 1) re-runs the command on a timer so external data stays fresh. Set `respectUserColors: true` to preserve ANSI color codes in command output instead of applying dim/theme styling. Set `hideContextIndicator: true` to hide the built-in context usage indicator in the footer right section, or `false` to always show it. When `hideContextIndicator` is unset, the footer indicator is hidden automatically for preset status lines that already include `context-used` or `context-remaining`, and shown otherwise (including for `command` status lines). When unset (default), the built-in default preset (project name, git branch, model, context usage) is shown automatically; set to `null` to explicitly disable the status line.',
         showInDialog: false
       },
       customThemes: {
@@ -890,12 +986,12 @@ var SETTINGS_SCHEMA = {
         category: "UI",
         requiresRestart: false,
         default: false,
-        // Retired from the TUI (compact tool output is now always-on there, and
-        // Ctrl+O opens the transcript instead of toggling this). Kept as a
-        // hidden, schema-only setting so the web shell's independent compact
-        // toggle can still persist via the daemon settings routes (mirrors
-        // `voiceModel`). Not shown in the TUI settings dialog.
-        description: "Compact view (web shell only; not used by the TUI).",
+        // Retired everywhere: compact tool output is always on in the TUI
+        // (Ctrl+O opens the transcript there), and the web shell now fixes
+        // its compact view on too. Kept schema-registered (mirrors
+        // `voiceModel`) so settings files that still carry the key load
+        // without warnings; nothing reads the value anymore.
+        description: "Retired: compact view is always on in both the TUI and the web shell. The key is kept so existing settings files do not warn.",
         showInDialog: false
       },
       useTerminalBuffer: {
@@ -1184,7 +1280,7 @@ var SETTINGS_SCHEMA = {
     category: "Model",
     requiresRestart: false,
     default: "",
-    description: "Model used by the built-in image_gen tool. Set with /model --image. The selected model must be marked imageOnly in modelProviders.",
+    description: "Model used by the built-in image_gen tool. Set with /model --image. The selected route must set supportsImageGeneration: true (or legacy imageOnly: true) in modelProviders.",
     showInDialog: false
   },
   visionBridgeTimeoutMs: {
@@ -1409,6 +1505,18 @@ var SETTINGS_SCHEMA = {
             parentKey: "generationConfig",
             showInDialog: false
           },
+          streamIdleTimeoutMs: {
+            type: "integer",
+            label: "Stream Idle Timeout",
+            category: "Generation Configuration",
+            requiresRestart: false,
+            default: void 0,
+            description: "Maximum inactivity between streamed chunks for OpenAI-compatible models, in milliseconds. Set to 0 to disable the idle guard. For provider-backed models, configure this field in the selected modelProviders entry.",
+            minimum: 0,
+            maximum: 2147483647,
+            parentKey: "generationConfig",
+            showInDialog: false
+          },
           maxRetries: {
             type: "number",
             label: "Max Retries",
@@ -2378,6 +2486,20 @@ var SETTINGS_SCHEMA = {
         description: 'Use the bundled ripgrep binary. When set to false, the system-level "rg" command will be used instead. This setting is only effective when useRipgrep is true.',
         showInDialog: false
       },
+      workflowsEnabled: {
+        type: "boolean",
+        label: "Dynamic Workflows",
+        category: "Tools",
+        // The Workflow tool is registered once while building the tool
+        // registry and /workflows is gated when commands load. Keyword
+        // steering reads the same startup-built Config on each submission,
+        // so changing the settings file mid-session cannot update any of the
+        // three surfaces until the next launch.
+        requiresRestart: true,
+        default: false,
+        description: 'Enable the Workflow tool, which lets the model author and run a script that orchestrates subagents in parallel. Off by default; a run can dispatch many subagents and spend tokens accordingly. The QWEN_CODE_ENABLE_WORKFLOWS=1 and QWEN_CODE_DISABLE_WORKFLOWS=1 environment variables override this setting (disable wins). Unrelated to the Session Workflow plan-and-review view; to stop the "workflow" keyword from steering a turn, see Disable Workflow Keyword Trigger.',
+        showInDialog: true
+      },
       truncateToolOutputThreshold: {
         type: "number",
         label: "Tool Output Truncation Threshold",
@@ -2404,46 +2526,6 @@ var SETTINGS_SCHEMA = {
         default: DEFAULT_TOOL_OUTPUT_BATCH_BUDGET,
         description: "Per-message character budget for the combined text output of one batch of tool calls. Oversized batches are reduced deterministically and recoverable output is persisted when possible. Set to -1 to disable.",
         showInDialog: false
-      },
-      computerUse: {
-        type: "object",
-        label: "Computer Use",
-        category: "Tools",
-        requiresRestart: true,
-        default: {},
-        description: "Cross-platform desktop automation via the cua-driver native driver (trycua/cua). On first invocation a pinned, signed + notarized binary (~20MB) is downloaded into ~/.qwen/computer-use/ and the user is walked through macOS Accessibility / Screen Recording permissions if needed. Exposes cua-driver's full tool surface (click, type_text, scroll, drag, press_key, get_window_state, page, launch_app, and more).",
-        showInDialog: false,
-        properties: {
-          enabled: {
-            type: "boolean",
-            label: "Enable Computer Use",
-            category: "Tools",
-            requiresRestart: true,
-            default: true,
-            description: "When enabled (default), the cua-driver computer_use__* tools are registered as deferred built-ins. Set to false to prevent the driver from being downloaded or spawned.",
-            showInDialog: true
-          },
-          idleTimeoutMs: {
-            type: "number",
-            label: "Idle Timeout",
-            category: "Tools",
-            requiresRestart: true,
-            default: 3e5,
-            minimum: 0,
-            maximum: 2147483647,
-            description: "Milliseconds to keep the cua-driver process alive after the last computer_use__* call. The default is 300000 (5 minutes). Set to 0 to keep it running until qwen-code exits.",
-            showInDialog: false
-          },
-          maxImageDimension: {
-            type: "number",
-            label: "Max Screenshot Dimension",
-            category: "Tools",
-            requiresRestart: true,
-            default: -1,
-            description: "Longest-edge pixel cap applied to cua-driver screenshots (via set_config's max_image_dimension). -1 (default) keeps cua-driver's built-in default (1568); 0 disables resizing (full resolution); a positive value caps the longest edge. Lower caps cut vision-token cost at the expense of fine detail. Overridable via the QWEN_COMPUTER_USE_MAX_IMAGE_DIMENSION env var.",
-            showInDialog: false
-          }
-        }
       }
     }
   },
@@ -2462,7 +2544,7 @@ var SETTINGS_SCHEMA = {
         category: "Daemon",
         requiresRestart: true,
         default: "first-responder",
-        description: 'How permission requests resolve when multiple clients are attached. `first-responder` (default) = any client decides, first wins. `designated` = only the prompt originator decides; falls back to first-responder if originator is anonymous. NOTE: client identity comes from self-declared X-Qwen-Client-Id with no proof-of-possession (pair-token identity is not implemented yet), so any client observing originatorClientId on SSE frames can register with the same id and impersonate the originator. `consensus` = N-of-M voters must agree. Default N=floor(M/2)+1, which means UNANIMITY for M=2 (quorum=2, both must agree) and supermajority for larger even M (M=4 \u2192 quorum=3; M=6 \u2192 quorum=4). For M=2 specifically, split votes resolve only via permissionTimeoutMs. `local-only` = only loopback clients can RESOLVE; remote clients can still ABORT a pending permission via the cancel sentinel ({outcome:"cancelled"}) \u2014 cancel stays cross-policy for consistency. Strict-cancel-too deployments need a dedicated loopback-bound daemon. Requires daemon restart \u2014 read once at boot.',
+        description: 'How permission requests resolve when multiple clients are attached. `first-responder` (default) = any client decides, first wins. `designated` = only the prompt originator decides; falls back to first-responder if originator is anonymous. NOTE: client identity comes from self-declared X-Qwen-Client-Id with no proof-of-possession (pair-token identity is not implemented yet), so any client observing originatorClientId on SSE frames can register with the same id and impersonate the originator. `consensus` = N-of-M voters must agree. Default N=floor(M/2)+1, which means UNANIMITY for M=2 (quorum=2, both must agree) and supermajority for larger even M (M=4 \u2192 quorum=3; M=6 \u2192 quorum=4). For M=2 specifically, split votes resolve only via the configured permission timeout, voter cancellation, or session cancellation. `local-only` = only loopback clients can RESOLVE; remote clients can still ABORT a pending permission via the cancel sentinel ({outcome:"cancelled"}) \u2014 cancel stays cross-policy for consistency. Strict-cancel-too deployments need a dedicated loopback-bound daemon. Requires daemon restart \u2014 read once at boot.',
         showInDialog: true,
         options: [
           { value: "first-responder", label: "First Responder" },
@@ -2761,6 +2843,29 @@ var SETTINGS_SCHEMA = {
           }
         }
       },
+      crossSessionMessaging: {
+        type: "boolean",
+        label: "Cross-Session Messaging",
+        category: "Advanced",
+        requiresRestart: true,
+        default: false,
+        description: "Experimental. Let Qwen Code sessions on this machine send each other messages over a per-session local socket. Off by default; turning it on both opens this session to peer messages and makes it discoverable to others.",
+        showInDialog: false
+      },
+      crossSessionInbound: {
+        type: "enum",
+        label: "Inbound Cross-Session Messages",
+        category: "Advanced",
+        requiresRestart: false,
+        default: void 0,
+        description: 'What happens to messages other sessions send this one. "accept" delivers them; "hold" parks them for your review without letting the model act; "refuse" opts this session out. Unset means approval-mode parity: a message auto-delivers only when this session reviews every action, or when both sessions declare a mode that can apply actions without per-action review. Other messages are held for you to review.',
+        showInDialog: false,
+        options: [
+          { value: "accept", label: "Accept" },
+          { value: "hold", label: "Hold for review" },
+          { value: "refuse", label: "Refuse" }
+        ]
+      },
       modelGrades: {
         type: "object",
         label: "Model Grades",
@@ -3435,6 +3540,7 @@ function getSettingsSchema() {
 __name(getSettingsSchema, "getSettingsSchema");
 
 export {
+  customDeepMerge,
   DEFAULT_OPENAI_LOG_RETENTION_DAYS,
   TOGGLE_TYPES,
   getSettingsSchema