@qwen-code/qwen-code 0.22.3-nightly.20260831.3a0c4c6108 → 0.23.0

package/chunks/{channel-worker-group-ZLP5SJHT.js → channel-worker-group-47F4ISUZ.js}

@@ -3,24 +3,24 @@
 import {
   ChannelWorkerReconcileError,
   createChannelWorkerGroup
-} from "./chunk-T3TL6S3B.js";
+} from "./chunk-G5PBOQWI.js";
 import "./chunk-ZGCKTAL5.js";
-import "./chunk-YPISTYEI.js";
+import "./chunk-F47DITLZ.js";
 import "./chunk-6PLDPT2C.js";
-import "./chunk-FPMQT2YY.js";
+import "./chunk-TQHPVKO6.js";
 import "./chunk-FYJ7W2PI.js";
 import "./chunk-Z7B6SRPM.js";
 import "./chunk-STUJ7IMZ.js";
 import "./chunk-GYTKQYDB.js";
-import "./chunk-3EGEBDTW.js";
+import "./chunk-M4KFODIP.js";
 import "./chunk-ALMR3E6Q.js";
 import "./chunk-RKFGE7JH.js";
 import "./chunk-UDG5EZJI.js";
 import "./chunk-3VUENPWF.js";
 import "./chunk-M5GB774H.js";
-import "./chunk-5HBA2Z7V.js";
-import "./chunk-IXEZHTDR.js";
+import "./chunk-U4DJ5XB3.js";
 import "./chunk-IW6RQPQB.js";
+import "./chunk-5HBA2Z7V.js";
 import "./chunk-LJZSMWOH.js";
 import "./chunk-TWPJO254.js";
 import "./chunk-CQ35AJ4Z.js";

package/chunks/{channel-worker-manager-FG5377T2.js → channel-worker-manager-I5Y44GYR.js}

@@ -2,21 +2,21 @@
 "use strict";
 import {
   ChannelWorkerReconcileError
-} from "./chunk-T3TL6S3B.js";
+} from "./chunk-G5PBOQWI.js";
 import "./chunk-ZGCKTAL5.js";
-import "./chunk-YPISTYEI.js";
+import "./chunk-F47DITLZ.js";
 import "./chunk-6PLDPT2C.js";
 import {
   ChannelWorkerStartupError,
   ChannelWorkerStopError
-} from "./chunk-FPMQT2YY.js";
+} from "./chunk-TQHPVKO6.js";
 import "./chunk-FYJ7W2PI.js";
 import "./chunk-Z7B6SRPM.js";
 import {
   ChannelWebhookEnqueueError
 } from "./chunk-STUJ7IMZ.js";
 import "./chunk-GYTKQYDB.js";
-import "./chunk-3EGEBDTW.js";
+import "./chunk-M4KFODIP.js";
 import "./chunk-ALMR3E6Q.js";
 import {
   ChannelDeliveryError
@@ -24,9 +24,9 @@ import {
 import "./chunk-UDG5EZJI.js";
 import "./chunk-3VUENPWF.js";
 import "./chunk-M5GB774H.js";
-import "./chunk-5HBA2Z7V.js";
-import "./chunk-IXEZHTDR.js";
+import "./chunk-U4DJ5XB3.js";
 import "./chunk-IW6RQPQB.js";
+import "./chunk-5HBA2Z7V.js";
 import "./chunk-LJZSMWOH.js";
 import "./chunk-TWPJO254.js";
 import "./chunk-CQ35AJ4Z.js";
@@ -535,11 +535,52 @@ function createChannelWorkerManager(opts) {
     workspaceActivity(workspaceCwd) {
       return group?.workspaceActivity(workspaceCwd) ?? 0;
     },
-    removeWorkspace(workspaceCwd) {
+    removeWorkspace(workspaceCwd, options) {
       return enqueue(async () => {
         try {
-          await group?.removeWorkspace(workspaceCwd);
-          notify();
+          let removalError;
+          try {
+            await group?.removeWorkspace(workspaceCwd, options);
+          } catch (error) {
+            removalError = error;
+          }
+          try {
+            if (!options?.permanent) {
+              notify();
+            } else {
+              const removedNames = /* @__PURE__ */ new Set();
+              const nextGroups = committedGroups.filter((committedGroup) => {
+                if (committedGroup.workspaceCwd !== workspaceCwd) return true;
+                if (committedGroup.selection.mode === "names") {
+                  for (const name of committedGroup.selection.names) {
+                    removedNames.add(name);
+                  }
+                }
+                return false;
+              });
+              if (!committedSelection || committedSelection.mode === "all") {
+                commit(committedSelection, nextGroups);
+              } else {
+                const names = committedSelection.names.filter(
+                  (name) => !removedNames.has(name)
+                );
+                if (names.length > 0) {
+                  commit({ mode: "names", names }, nextGroups);
+                } else {
+                  await stopSelectionNow();
+                }
+              }
+            }
+          } catch (error) {
+            if (removalError) {
+              throw new AggregateError(
+                [removalError, error],
+                "Failed to remove channel workspace and converge manager state."
+              );
+            }
+            throw error;
+          }
+          if (removalError) throw removalError;
         } finally {
           workspaceDrains.delete(workspaceCwd);
         }

package/chunks/{channel-worker-supervisor-HDVE4ADS.js → channel-worker-supervisor-6VCLUXFE.js}

@@ -6,20 +6,20 @@ import {
   cleanupMintedWorkerCaBundleDirs,
   createChannelWorkerSupervisor,
   resolveWorkerCaCertPath
-} from "./chunk-FPMQT2YY.js";
+} from "./chunk-TQHPVKO6.js";
 import "./chunk-FYJ7W2PI.js";
 import "./chunk-Z7B6SRPM.js";
 import "./chunk-STUJ7IMZ.js";
 import "./chunk-GYTKQYDB.js";
-import "./chunk-3EGEBDTW.js";
+import "./chunk-M4KFODIP.js";
 import "./chunk-ALMR3E6Q.js";
 import "./chunk-RKFGE7JH.js";
 import "./chunk-UDG5EZJI.js";
 import "./chunk-3VUENPWF.js";
 import "./chunk-M5GB774H.js";
-import "./chunk-5HBA2Z7V.js";
-import "./chunk-IXEZHTDR.js";
+import "./chunk-U4DJ5XB3.js";
 import "./chunk-IW6RQPQB.js";
+import "./chunk-5HBA2Z7V.js";
 import "./chunk-LJZSMWOH.js";
 import "./chunk-TWPJO254.js";
 import "./chunk-CQ35AJ4Z.js";

package/chunks/{chunk-3452WXOK.js → chunk-2M3EWQNG.js}

@@ -55,6 +55,15 @@ var PROJECT_ENV_HARDCODED_EXCLUSIONS = [
   // it or override a user opt-in through settings.env or a project .env.
   "QWEN_CODE_ENABLE_WORKFLOWS",
   "QWEN_CODE_DISABLE_WORKFLOWS",
+  // The review prebuild (commands/review/lib/prebuild.ts) is an operator
+  // decision: CI welds it as real step env, a local operator exports it. A
+  // project `.env` must not opt its own review into the blocking
+  // install+build prefix — and the read-time provenance check there cannot
+  // see file-sourcing across a process boundary (a child inherits the value
+  // with an empty registry), so the key must never enter the environment
+  // from repository content at all. prebuild.test.ts pins the membership
+  // with both real symbols.
+  "QWEN_REVIEW_PREBUILD",
   // QWEN_TLS_INSECURE (and NODE_TLS_REJECT_UNAUTHORIZED, which it mirrors)
   // disable TLS certificate verification for all outbound API connections. A
   // project `.env` must never enable either — that would let an untrusted repo
@@ -204,6 +213,14 @@ var PROJECT_ENV_HARDCODED_EXCLUSIONS = [
   // (documented as a per-daemon opt-in), so only the daemon's launch
   // environment or a home `.env` may set it.
   "QWEN_SERVE_NEW_FILE_MODE",
+  // QWEN_SERVE_SESSION_ATTACHMENTS_ROOT decides where the daemon stores
+  // every workspace's session attachments. A project `.env` redirecting it
+  // would capture uploads for ALL workspaces the daemon serves — and reads
+  // consult the configured root first, so attacker-modified bytes would be
+  // served back — with no recovery after unsetting the variable. The
+  // location is an operator decision (documented as a per-daemon opt-in), so
+  // only the daemon's launch environment or a home `.env` may set it.
+  "QWEN_SERVE_SESSION_ATTACHMENTS_ROOT",
   // DEV gates the daemon's inherited-loader-env scrub (run-qwen-serve.ts);
   // only the dev harness (scripts/dev.js) stamps it into the launch env. A
   // project file setting it would silently keep loader vars in the base env

package/chunks/{chunk-HDMKCJHI.js → chunk-32LU3APX.js}

@@ -6,7 +6,7 @@ import {
   getNestedProperty,
   getPersistScopeForModelSelection,
   restoreSettingsFromBackup
-} from "./chunk-AAX236AR.js";
+} from "./chunk-VWTSRH6C.js";
 import {
   init_esbuild_shims
 } from "./chunk-5O2XNYP6.js";

package/chunks/{chunk-BSJOBW4U.js → chunk-37JFWFCD.js}

@@ -2,7 +2,7 @@
 "use strict";
 import {
   runExitCleanup
-} from "./chunk-TV7BJ7TX.js";
+} from "./chunk-RJUVTJEZ.js";
 import {
   init_esbuild_shims
 } from "./chunk-5O2XNYP6.js";

package/chunks/{chunk-AN3KFCNH.js → chunk-3JQZVCBI.js}

@@ -6,8 +6,8 @@ import {
 
 // packages/cli/src/generated/git-commit.ts
 init_esbuild_shims();
-var GIT_COMMIT_INFO = "b194b61b13";
-var CLI_VERSION = "0.22.3-nightly.20260831.3a0c4c6108";
+var GIT_COMMIT_INFO = "98a9c96415";
+var CLI_VERSION = "0.23.0";
 
 export {
   GIT_COMMIT_INFO,

package/chunks/{chunk-RGEV5AUD.js → chunk-3L724BJ5.js}

@@ -5,7 +5,7 @@ import {
   parseChannelDelivery,
   scheduledTaskRunSessionName,
   scheduledTaskRunSourceId
-} from "./chunk-PNIGAVY6.js";
+} from "./chunk-DTVQSSNM.js";
 import {
   parseCallerSuppliedSessionId
 } from "./chunk-ZEZKIS2K.js";
@@ -14,10 +14,10 @@ import {
 } from "./chunk-NYWWQ437.js";
 import {
   SCHEDULED_TASK_RUN_SOURCE_TYPE
-} from "./chunk-RLSPPTWH.js";
+} from "./chunk-DSX7KQPM.js";
 import {
   SessionNotFoundError
-} from "./chunk-YPISTYEI.js";
+} from "./chunk-F47DITLZ.js";
 import {
   canonicalizeWorkspace
 } from "./chunk-6PLDPT2C.js";
@@ -30,11 +30,11 @@ import {
 import {
   SessionService,
   stripTerminalControlSequences
-} from "./chunk-ZBDYI7VM.js";
+} from "./chunk-4F7GQGXB.js";
 import {
   MAX_JOBS,
   nextDurableFireMs
-} from "./chunk-SMJYTKTB.js";
+} from "./chunk-DQCKVAF5.js";
 import {
   nextFireTime,
   parseCron
@@ -647,7 +647,8 @@ async function dispatchTaskToFreshSession(target, task) {
       displayName: scheduledTaskRunSessionName(
         task.name ?? task.prompt,
         triggeredAt
-      )
+      ),
+      titleSource: "auto"
     });
   } catch {
   }
@@ -1019,7 +1020,8 @@ function registerScheduledTaskCrudRoutes(app, deps) {
               async () => bridge.updateSessionMetadata(boundSessionId, {
                 displayName: scheduledTaskSessionName(
                   nameResult.value ?? prompt
-                )
+                ),
+                titleSource: "auto"
               })
             );
           } catch {
@@ -1372,7 +1374,8 @@ function registerScheduledTaskCrudRoutes(app, deps) {
           bridge.updateSessionMetadata(updated.sessionId, {
             displayName: scheduledTaskSessionName(
               updated.name ?? updated.prompt
-            )
+            ),
+            titleSource: "auto"
           });
         } catch {
         }

package/chunks/{chunk-GCUR24KK.js → chunk-47RYEQW5.js}

@@ -2,13 +2,13 @@
 "use strict";
 import {
   hasControlCharacter
-} from "./chunk-W4BDHLRT.js";
+} from "./chunk-IG4W5SJR.js";
 import {
   BaseDeclarativeTool,
   BaseToolInvocation,
   ToolDisplayNames,
   ToolNames
-} from "./chunk-LYSZVCCD.js";
+} from "./chunk-7JMGTOH7.js";
 import {
   init_esbuild_shims
 } from "./chunk-5O2XNYP6.js";

package/chunks/{chunk-CM4F4JBB.js → chunk-4BGDFKQE.js}

@@ -3,19 +3,19 @@
 import {
   mapSkillConfigToStatus
 } from "./chunk-BHTYRHJF.js";
+import {
+  STATUS_SCHEMA_VERSION
+} from "./chunk-64QH2UC6.js";
 import {
   resolveSkillSettings
 } from "./chunk-HWVUSYSN.js";
-import {
-  STATUS_SCHEMA_VERSION
-} from "./chunk-J4Y3QJHF.js";
 import {
   loadSettings
-} from "./chunk-AAX236AR.js";
+} from "./chunk-VWTSRH6C.js";
 import {
   SkillManager,
   isSafeModeEnv
-} from "./chunk-ZBDYI7VM.js";
+} from "./chunk-4F7GQGXB.js";
 import {
   writeStderrLine
 } from "./chunk-7FA2II6K.js";