@qwen-code/qwen-code 0.23.1-preview.2 → 0.23.2-nightly.20260909.2e212144d3

package/chunks/{chunk-537SQ2AI.js → chunk-KECCLCXM.js}

@@ -2,7 +2,7 @@
 "use strict";
 import {
   CHANNEL_CONTROL_DEFAULT_TIMEOUT_MS
-} from "./chunk-5HBA2Z7V.js";
+} from "./chunk-TGNNLRC3.js";
 import {
   init_esbuild_shims
 } from "./chunk-5O2XNYP6.js";
@@ -3012,6 +3012,62 @@ var DaemonClient = class {
   async resumeSession(sessionId, req = {}, clientId) {
     return this.restoreSession("resume", sessionId, req, clientId);
   }
+  /**
+   * Transfer a worktree session's checkout ownership to a fresh replacement
+   * session (`POST /session/:id/worktree-reset`, capability
+   * `session_worktree_reset_v1`). Resolves 200 with the replacement
+   * session's create-shape response. The route never reads a caller-supplied
+   * client id, so this method takes none — but the response is not
+   * registration-free: a fresh transfer mints an owner-style `clientId` for
+   * the spawn it performs, registers it on the replacement, and returns it in
+   * the body, while an idempotent resume of a committed transfer returns
+   * none. That registration is not an attachment (the replacement's attach
+   * count is unaffected), and nothing detaches it for you — pass a minted id
+   * you do not keep using to `detachSession`, or the replacement never
+   * reaches the daemon's idle cleanup. Typed 409 bodies carry the reset
+   * taxonomy: `worktree_reset_unsupported` (not a worktree session),
+   * `worktree_reset_active` (a session involved is busy), and
+   * `worktree_reset_invalid_state` (corrupt or ambiguous ownership state; a
+   * partial transfer this request started is rolled back, while a
+   * pre-existing interrupted state is left untouched for operator repair).
+   * A crashed transfer whose sidecar links agree is self-healed here: a
+   * pre-commit one (the marker still names this session, or is absent while
+   * the replacement is dormant) is rolled back and re-run in the same
+   * request, and a committed one (the marker names the replacement) is
+   * finished idempotently. Every other interrupted shape — disagreeing links,
+   * an invalid marker, a marker naming a third session, a replacement still
+   * live with no marker — is reported as `worktree_reset_invalid_state` (or
+   * `worktree_reset_active` when the committed replacement is busy) and left
+   * untouched: a retry re-reads the same state and returns the same 409, so
+   * it does not converge and needs operator repair rather than a retry loop.
+   * `worktree_reset_interrupted`, `worktree_session_superseded`, and
+   * `worktree_marker_missing` belong to the restore surface (`loadSession` /
+   * `resumeSession`) instead; for `worktree_reset_interrupted` — the
+   * agreeing-links shape — retrying this reset against the superseded session
+   * is the repair.
+   */
+  async resetWorktreeSession(sessionId, req = {}) {
+    return await this.fetchWithTimeout(
+      `${this.baseUrl}/session/${urlEncode(sessionId)}/worktree-reset`,
+      {
+        method: "POST",
+        headers: this.headers({ "Content-Type": "application/json" }),
+        body: JSON.stringify({
+          ...req.workspaceCwd !== void 0 ? { cwd: req.workspaceCwd } : {},
+          ...req.modelServiceId !== void 0 ? { modelServiceId: req.modelServiceId } : {},
+          ...req.approvalMode !== void 0 ? { approvalMode: req.approvalMode } : {},
+          ...req.sourceType !== void 0 ? { sourceType: req.sourceType } : {},
+          ...req.sourceId !== void 0 ? { sourceId: req.sourceId } : {}
+        })
+      },
+      async (res) => {
+        if (!res.ok) {
+          throw await this.failOnError(res, "POST /session/:id/worktree-reset");
+        }
+        return await res.json();
+      }
+    );
+  }
   async branchSession(sessionId, req = {}, clientId) {
     return await this.fetchWithTimeout(
       `${this.baseUrl}/session/${urlEncode(sessionId)}/branch`,
@@ -3353,6 +3409,7 @@ var DaemonClient = class {
         ),
         body: JSON.stringify({
           mode,
+          ...opts?.planMode !== void 0 ? { planMode: opts.planMode } : {},
           ...opts?.persist === true ? { persist: true } : {}
         })
       },
@@ -6437,6 +6494,36 @@ var DaemonSessionClient = class _DaemonSessionClient {
       eventEpoch
     });
   }
+  /**
+   * Transfer a worktree session's checkout ownership to a fresh replacement
+   * session and return a client bound to the replacement's identity. That
+   * client carries whatever `clientId` the response had: a fresh transfer
+   * mints and registers an owner-style one for the spawn it performs, while
+   * an idempotent resume of a committed transfer returns none. The
+   * registration is not an attachment (the replacement's attach count is
+   * unaffected), but it is a client registration, and a non-empty one is what
+   * holds the daemon's idle cleanup off — so detach a minted id you do not
+   * keep using, or the replacement stays live indefinitely. A registered
+   * attachment still requires the normal restore surface: load or resume the
+   * replacement, passing the minted id to reuse that registration instead of
+   * adding a second one. The replacement is a brand-new conversation; the
+   * superseded session keeps its transcript on the daemon and is never
+   * restored again (its restore surfaces `worktree_session_superseded`). The
+   * existing reattach identity guard applies to the replacement client
+   * unchanged.
+   */
+  static async resetWorktree(client, sessionId, req = {}) {
+    const session = await client.resetWorktreeSession(sessionId, req);
+    return new _DaemonSessionClient({
+      client,
+      session,
+      hasActivePrompt: session.hasActivePrompt,
+      // The replacement is freshly created: seed from the start of its bus
+      // so events fired during the transfer window are not skipped.
+      lastEventId: 0,
+      eventEpoch: session.eventEpoch
+    });
+  }
   static async createStandalone(client, options = {}) {
     const session = await client.createStandaloneSession(options);
     return new _DaemonSessionClient({
@@ -6672,16 +6759,21 @@ var DaemonSessionClient = class _DaemonSessionClient {
     });
     this.reattaching = resume.then(async (session) => {
       if (this.session.worktreeState === "persisted-v1") {
-        const sameWorktree = session.worktreeState === "persisted-v1" && session.worktree?.path === this.session.worktree?.path;
-        if (!sameWorktree) {
-          await this.client.detachSession(session.sessionId, session.clientId).catch(() => {
-          });
-          throw new Error(
-            `Daemon lost durable worktree identity for session ${this.sessionId}`
-          );
+        if (!session.worktree) {
+          this.session.worktree = void 0;
+          this.session.worktreeState = void 0;
+        } else {
+          const sameWorktree = session.worktreeState === "persisted-v1" && session.worktree.path === this.session.worktree?.path;
+          if (!sameWorktree) {
+            await this.client.detachSession(session.sessionId, session.clientId).catch(() => {
+            });
+            throw new Error(
+              `Daemon lost durable worktree identity for session ${this.sessionId}`
+            );
+          }
+          this.session.worktree = session.worktree;
+          this.session.worktreeState = session.worktreeState;
         }
-        this.session.worktree = session.worktree;
-        this.session.worktreeState = session.worktreeState;
       }
       this.session.clientId = session.clientId;
     });
@@ -7412,6 +7504,7 @@ function createDaemonSessionViewState(seed = {}) {
     lastWorkspaceMutation: seed.lastWorkspaceMutation,
     lastWorkspaceMutationType: seed.lastWorkspaceMutationType,
     approvalMode: seed.approvalMode,
+    planExecutionMode: seed.planExecutionMode,
     approvalModeChangedCount: seed.approvalModeChangedCount ?? 0,
     lastApprovalModeChange: seed.lastApprovalModeChange,
     toolToggleCount: seed.toolToggleCount ?? 0,
@@ -7796,6 +7889,7 @@ function reduceDaemonSessionEvent(state, rawEvent) {
       return {
         ...base,
         approvalMode: event.data.next,
+        planExecutionMode: event.data.next === "plan" ? event.data.planExecutionMode : void 0,
         approvalModeChangedCount: base.approvalModeChangedCount + 1,
         lastApprovalModeChange: mergeOriginator(event.data, event)
       };
@@ -7870,7 +7964,10 @@ function reduceDaemonSessionEvent(state, rawEvent) {
         ...base,
         sessionId: event.data.sessionId,
         ...event.data.currentModelId != null ? { currentModelId: event.data.currentModelId } : {},
-        ...event.data.currentApprovalMode != null ? { approvalMode: event.data.currentApprovalMode } : {},
+        ...event.data.currentApprovalMode != null ? {
+          approvalMode: event.data.currentApprovalMode,
+          planExecutionMode: event.data.currentApprovalMode === "plan" ? event.data.planExecutionMode : void 0
+        } : {},
         ...event.data.recordingDegraded !== void 0 ? { recordingDegraded: event.data.recordingDegraded } : {}
       };
     case "session_recording_degraded":
@@ -8224,7 +8321,7 @@ function mergeOriginator(data, event) {
 }
 __name(mergeOriginator, "mergeOriginator");
 function isApprovalModeChangedData(value) {
-  return isRecord(value) && isNonEmptyString(value["sessionId"]) && isNonEmptyString(value["previous"]) && isNonEmptyString(value["next"]) && typeof value["persisted"] === "boolean";
+  return isRecord(value) && isNonEmptyString(value["sessionId"]) && isNonEmptyString(value["previous"]) && isNonEmptyString(value["next"]) && (value["planExecutionMode"] === void 0 || isNonEmptyString(value["planExecutionMode"])) && typeof value["persisted"] === "boolean";
 }
 __name(isApprovalModeChangedData, "isApprovalModeChangedData");
 function isToolToggledData(value) {
@@ -8408,7 +8505,7 @@ function isSessionSnapshotData(value) {
   const model = value["currentModelId"];
   const mode = value["currentApprovalMode"];
   const recordingDegraded = value["recordingDegraded"];
-  return (model === null || typeof model === "string") && (mode === null || typeof mode === "string") && (recordingDegraded === void 0 || typeof recordingDegraded === "boolean");
+  return (model === null || typeof model === "string") && (mode === null || typeof mode === "string") && (value["planExecutionMode"] === void 0 || isNonEmptyString(value["planExecutionMode"])) && (recordingDegraded === void 0 || typeof recordingDegraded === "boolean");
 }
 __name(isSessionSnapshotData, "isSessionSnapshotData");
 function isSessionRecordingDegradedData(value) {
@@ -8701,7 +8798,7 @@ var bidiControlPattern = /[\u200e\u200f\u202a-\u202e\u2066-\u2069]/g;
 
 // packages/sdk-typescript/src/daemon/ui/toolPreview.ts
 var MAX_TOOL_PREVIEW_DEPTH = 8;
-var MAX_TODO_PREVIEW_ENTRIES = 1e3;
+var MAX_TOOL_PREVIEW_ENTRIES = 1e3;
 var MAX_TOOL_RESULT_PREVIEW_LENGTH = 1e5;
 var MAX_TODO_ID_LENGTH = 512;
 function createDaemonToolPreview(input, opts = {}, depth = 0) {
@@ -8769,6 +8866,27 @@ function createDaemonToolPreview(input, opts = {}, depth = 0) {
 }
 __name(createDaemonToolPreview, "createDaemonToolPreview");
 function createDaemonToolResultPreview(output, content, opts = {}) {
+  if (isRecord2(output) && output["type"] === "ask_user_question_answers" && typeof output["text"] === "string") {
+    const text = output["text"];
+    const fallback = createDaemonToolResultTextPreview(text);
+    const entries = output["answers"];
+    if (!Array.isArray(entries) || entries.length > MAX_TOOL_PREVIEW_ENTRIES) {
+      return fallback;
+    }
+    let remaining = MAX_TOOL_RESULT_PREVIEW_LENGTH - text.length;
+    const answers = [];
+    for (const entry of entries) {
+      if (!isRecord2(entry) || typeof entry["question"] !== "string" || typeof entry["answer"] !== "string") {
+        return fallback;
+      }
+      const question = entry["question"];
+      const answer = entry["answer"];
+      remaining -= question.length + answer.length;
+      if (remaining < 0) return fallback;
+      answers.push({ question, answer });
+    }
+    return remaining >= 0 ? { kind: "question_answers", text, answers } : fallback;
+  }
   const todoList = detectTodoList(output, opts, false);
   if (todoList) return todoList;
   return createDaemonToolResultTextPreview(
@@ -8787,7 +8905,7 @@ function detectTodoList(input, opts, includeLegacySummary) {
   if (!entries || toolName !== "todo_write" && toolName !== "todowrite") {
     return void 0;
   }
-  const retainedEntries = entries.slice(0, MAX_TODO_PREVIEW_ENTRIES);
+  const retainedEntries = entries.slice(0, MAX_TOOL_PREVIEW_ENTRIES);
   const authoredIds = /* @__PURE__ */ new Set();
   for (const entry of retainedEntries) {
     if (!isRecord2(entry)) continue;
@@ -8800,9 +8918,9 @@ function detectTodoList(input, opts, includeLegacySummary) {
   }
   const normalized = [];
   const usedIds = /* @__PURE__ */ new Set();
-  let truncated = entries.length > MAX_TODO_PREVIEW_ENTRIES;
+  let truncated = entries.length > MAX_TOOL_PREVIEW_ENTRIES;
   let remainingText = MAX_TOOL_RESULT_PREVIEW_LENGTH;
-  let remainingDependencyInputs = MAX_TODO_PREVIEW_ENTRIES;
+  let remainingDependencyInputs = MAX_TOOL_PREVIEW_ENTRIES;
   retainedEntries.forEach((entry, index) => {
     if (!isRecord2(entry)) {
       truncated = true;
@@ -9369,13 +9487,10 @@ function normalizeDaemonEvent(event, opts = {}) {
         }
       ];
     case "slow_client_warning":
-      return [
-        {
-          ...base,
-          type: "status",
-          text: "SSE stream is lagging"
-        }
-      ];
+      if (typeof console !== "undefined") {
+        console.warn?.("[daemon-ui] SSE stream is lagging", event.data);
+      }
+      return [];
     case "stream_error": {
       const errorKind = asDaemonErrorKind(getString2(event.data, "errorKind"));
       return [
@@ -10023,6 +10138,7 @@ function normalizeToolUpdate(update, base) {
       text: `Tool update missing toolCallId${title ? ` (${title})` : ""}`
     };
   }
+  const subagentSessionReady = isRecord2(rawOutput) && typeof rawOutput["subagentSessionReady"] === "boolean" ? rawOutput["subagentSessionReady"] : metadata?.["subagentSessionReady"];
   const { provenance, serverId } = extractToolProvenance(update, toolName);
   const rawParentToolCallId = getString2(update, "parentToolCallId") ?? (metadata ? getString2(metadata, "parentToolCallId") : void 0);
   const parentToolCallId = rawParentToolCallId && rawParentToolCallId !== toolCallId ? rawParentToolCallId : void 0;
@@ -10041,6 +10157,7 @@ function normalizeToolUpdate(update, base) {
     ...serverId ? { serverId } : {},
     ...parentToolCallId ? { parentToolCallId } : {},
     ...subagentType ? { subagentType } : {},
+    ...typeof subagentSessionReady === "boolean" ? { subagentSessionReady } : {},
     ...rawInput !== void 0 ? { rawInput } : {},
     ...rawOutput !== void 0 ? { rawOutput } : {},
     ...resultPreview ? { resultPreview } : {},
@@ -11390,6 +11507,9 @@ function upsertToolBlock(state, event) {
   const bytesBefore = retainedBefore ? estimateBlockBytes(retainedBefore) : 0;
   const existing = getWritableBlockById(state, existingId);
   if (existing?.kind === "tool") {
+    if (event.subagentSessionReady !== void 0) {
+      existing.subagentSessionReady = existing.subagentSessionReady === true || event.subagentSessionReady;
+    }
     if (event.title !== void 0) existing.title = event.title;
     if (event.status !== void 0) existing.status = event.status;
     if (event.rawInput !== void 0) {
@@ -11498,6 +11618,7 @@ function upsertToolBlock(state, event) {
     }),
     ...resultPreview ? { resultPreview } : {},
     ...isBackgroundToolOutput(rawOutput) ? { background: true } : {},
+    ...event.subagentSessionReady !== void 0 ? { subagentSessionReady: event.subagentSessionReady } : {},
     clientReceivedAt: state.now,
     createdAt: state.now,
     updatedAt: state.now,
@@ -11572,6 +11693,7 @@ function compactTaskExecutionOutput(rawOutput, retainSubagentBlocks) {
     "taskDescription",
     "status",
     "executionMode",
+    "subagentSessionReady",
     "terminateReason",
     "tokenCount",
     "executionSummary",

package/chunks/{chunk-KAZWXVI3.js → chunk-KEPC5BOL.js}

@@ -28,7 +28,7 @@ import {
   createWorkerDiagnosticRedactor,
   normalizeWorkerDiagnostic,
   sanitizeWorkerDiagnostic
-} from "./chunk-5V4B3EWA.js";
+} from "./chunk-DARWOZY6.js";
 import {
   CHANNEL_DAEMON_WORKER_SENTINEL,
   CHANNEL_WORKER_HEARTBEAT_INTERVAL_MS,
@@ -50,14 +50,14 @@ import {
 import {
   EXTERNAL_TOOL_GUARD_TOKEN_ENV
 } from "./chunk-3VUENPWF.js";
-import {
-  sanitizeLogText
-} from "./chunk-65GHQ4FX.js";
 import {
   CHANNEL_WORKER_KILL_GRACE_MS,
   CHANNEL_WORKER_STARTUP_TIMEOUT_MS,
   CHANNEL_WORKER_STOP_GRACE_MS
-} from "./chunk-5HBA2Z7V.js";
+} from "./chunk-TGNNLRC3.js";
+import {
+  sanitizeLogText
+} from "./chunk-WDVV3LRM.js";
 import {
   init_esbuild_shims
 } from "./chunk-5O2XNYP6.js";

package/chunks/{chunk-HZS3JRQW.js → chunk-L5VHJYHH.js}

@@ -2,10 +2,10 @@
 "use strict";
 import {
   BaseJsonOutputAdapter
-} from "./chunk-RRCNEW2A.js";
+} from "./chunk-PWR6BQ3U.js";
 import {
   observeHeadlessJsonToolResultWire
-} from "./chunk-PMGWY6ZP.js";
+} from "./chunk-HWLLUDIA.js";
 import {
   init_esbuild_shims
 } from "./chunk-5O2XNYP6.js";
@@ -20,6 +20,8 @@ var JsonOutputAdapter = class extends BaseJsonOutputAdapter {
     __name(this, "JsonOutputAdapter");
   }
   messages = [];
+  attemptMessageCheckpoint = 0;
+  lastAssistantMessageAtAttemptStart = null;
   constructor(config) {
     super(config);
   }
@@ -39,6 +41,42 @@ var JsonOutputAdapter = class extends BaseJsonOutputAdapter {
   shouldEmitStreamEvents() {
     return false;
   }
+  startAssistantMessage() {
+    this.attemptMessageCheckpoint = this.messages.length;
+    this.lastAssistantMessageAtAttemptStart = this.lastAssistantMessage;
+    super.startAssistantMessage();
+  }
+  restartAttempt(preserveText, discardedToolCalls) {
+    if (preserveText) {
+      const discardedIds = new Set(
+        discardedToolCalls.map((request) => request.callId)
+      );
+      if (discardedIds.size > 0) {
+        const retained = this.messages.slice(this.attemptMessageCheckpoint).filter(
+          (message) => message.type !== "assistant" || !message.message.content.some(
+            (block) => block.type === "tool_use" && discardedIds.has(block.id)
+          )
+        );
+        this.messages.splice(
+          this.attemptMessageCheckpoint,
+          this.messages.length - this.attemptMessageCheckpoint,
+          ...retained
+        );
+        this.lastAssistantMessage = this.messages.findLast(
+          (message) => message.type === "assistant"
+        ) ?? this.lastAssistantMessageAtAttemptStart;
+      }
+    } else {
+      const retained = this.messages.slice(this.attemptMessageCheckpoint).filter((message) => message.type !== "assistant");
+      this.messages.splice(
+        this.attemptMessageCheckpoint,
+        this.messages.length - this.attemptMessageCheckpoint,
+        ...retained
+      );
+      this.lastAssistantMessage = this.lastAssistantMessageAtAttemptStart;
+    }
+    super.restartAttempt(preserveText, discardedToolCalls);
+  }
   finalizeAssistantMessage() {
     return this.finalizeAssistantMessageInternal(
       this.mainAgentMessageState,

package/chunks/{chunk-KTLT7VCX.js → chunk-LKBOBUA2.js}

@@ -20,12 +20,12 @@ import {
   detectLineEnding,
   getDiffStat,
   needsUtf8Bom
-} from "./chunk-TSLRORQR.js";
+} from "./chunk-BDAVT6K2.js";
 import {
   FileOperationEvent,
   getLanguageFromFilePath,
   logFileOperation
-} from "./chunk-WQBR7LN5.js";
+} from "./chunk-FRS3P7MQ.js";
 import {
   fileExists,
   getSpecificMimeType

package/chunks/{chunk-TDHVOZ65.js → chunk-LOBKNYPR.js}

@@ -6,8 +6,8 @@ import {
 
 // packages/cli/src/generated/git-commit.ts
 init_esbuild_shims();
-var GIT_COMMIT_INFO = "4bfa3f93d3";
-var CLI_VERSION = "0.23.1-preview.2";
+var GIT_COMMIT_INFO = "44e2b2ed25";
+var CLI_VERSION = "0.23.2-nightly.20260909.2e212144d3";
 
 export {
   GIT_COMMIT_INFO,

package/chunks/{chunk-QW7BUOSI.js → chunk-LOVGQ3HZ.js}

@@ -10,11 +10,12 @@ import {
   DEFAULT_TOOL_OUTPUT_BATCH_BUDGET,
   DEFAULT_TOOL_RESULTS_TOTAL_CHARS_THRESHOLD,
   DEFAULT_TRUNCATE_TOOL_OUTPUT_LINES,
-  DEFAULT_TRUNCATE_TOOL_OUTPUT_THRESHOLD
-} from "./chunk-TSLRORQR.js";
+  DEFAULT_TRUNCATE_TOOL_OUTPUT_THRESHOLD,
+  GOAL_CHECKPOINT_TIMEOUT_SECONDS_CAP
+} from "./chunk-BDAVT6K2.js";
 import {
   REASONING_EFFORT_TIERS
-} from "./chunk-2LD5U7Q3.js";
+} from "./chunk-F3M6P6IQ.js";
 import {
   DEFAULT_SENSITIVE_SPAN_ATTRIBUTE_MAX_LENGTH,
   SENSITIVE_SPAN_ATTRIBUTE_MAX_LENGTH_LIMIT
@@ -972,7 +973,7 @@ var SETTINGS_SCHEMA = {
             label: "Screen Reader Mode",
             category: "UI",
             requiresRestart: true,
-            default: void 0,
+            default: false,
             description: "Render output in plain-text to be more screen reader accessible",
             showInDialog: false
           }
@@ -1249,6 +1250,11 @@ var SETTINGS_SCHEMA = {
           description: "Requires `telemetry.enabled: true`. Inject W3C `traceparent` on outbound `fetch` requests (LLM SDK calls, MCP StreamableHTTP, WebFetch, ...) AND as a `TRACEPARENT` environment variable in shell child processes (Bash tool, hooks, monitor). When enabled, any existing `TRACEPARENT` in the parent environment is overwritten with qwen-code's own trace context. Default: false \u2014 trace context stays internal to the operator's OTLP collector. Set true when you want cross-process trace stitching with an OTel-aware LLM provider (e.g. ARMS+DashScope) or need shell scripts / CLI tools to participate in distributed tracing.",
           type: "boolean",
           default: false
+        },
+        allowDynamicHeaderValues: {
+          description: "SECURITY-RELEVANT. Allow `modelProviders[].generationConfig.customHeaders` values to contain runtime placeholders \u2014 currently `${session_id}` \u2014 expanded per request instead of frozen at client construction. Default false: a value containing a placeholder is dropped rather than sent. Enable when a gateway requires a stable per-conversation identifier (e.g. OpenCode Go requires `x-opencode-session`). Which hosts receive the value and what the header is called are decided by the provider entry you attach the header to; this switch only decides whether `${session_id}` may be expanded from live session state and does not identify which settings source supplied the header.",
+          type: "boolean",
+          default: false
         }
       },
       additionalProperties: false
@@ -1405,6 +1411,17 @@ var SETTINGS_SCHEMA = {
         description: "Autonomous spend window armed on each new Goal, in tokens as counted by the Goal meter (totalTokenCount summed over every model call the Goal makes in its own turns; side queries and checkpoint verification are not metered). When a Goal spends its window it gets one wind-down turn to hand off, then stops until you resume it, which arms another window. Unset uses the built-in default of 30,000,000; -1 means unlimited. Zero, values above 300,000,000 (10x the default, a typo guard), other negative, fractional, or non-number values are rejected at startup.",
         showInDialog: false
       },
+      goalCheckpointTimeoutSeconds: {
+        type: "integer",
+        label: "Goal Checkpoint Timeout (seconds)",
+        category: "Model",
+        requiresRestart: false,
+        default: void 0,
+        minimum: 1,
+        maximum: GOAL_CHECKPOINT_TIMEOUT_SECONDS_CAP,
+        description: "Ceiling on one Goal evidence-checkpoint check, in seconds. A long Goal periodically compresses its evidence into checkpoint claims with a side model call. A check whose claims overrun the aggregate byte budget, or include a claim over the per-claim character limit, makes one corrective retry, and both calls share this ceiling. A check that does not finish in time is abandoned as inconclusive; it counts toward the checkpoint stall limit only when the evidence window has overflowed, while a non-overflowing check preserves the streak and retries on a later turn. Unset uses the built-in default of 180. Must be an integer between 1 and 900; other values are rejected at startup. The calls are streamed, so the per-request transport timeout (model.generationConfig.timeout, default 120 s) bounds only connect and first response, and values above 900 are rejected because past the default stream lifetime guard that guard, not this setting, ends the check. The 900 ceiling is fixed: raising QWEN_STREAM_MAX_LIFETIME_MS does not lift it.",
+        showInDialog: false
+      },
       maxToolCalls: {
         type: "number",
         label: "Max Tool Calls",
@@ -2274,7 +2291,7 @@ var SETTINGS_SCHEMA = {
         category: "Tools",
         requiresRestart: true,
         default: {},
-        description: "Settings for the built-in WebSearch tool (DashScope Responses API backend). Opt-in: requires enabled=true and a search model. Fully env-configurable for environments without settings.json: ENABLE_WEB_SEARCH, WEB_SEARCH_MODEL, WEB_SEARCH_BASE_URL, WEB_SEARCH_API_KEY (falls back to DASHSCOPE_API_KEY), WEB_SEARCH_EXTRACTOR. Note: baseUrl and API key are env-only (WEB_SEARCH_BASE_URL / WEB_SEARCH_API_KEY) and cannot be set in settings.json.",
+        description: "Settings for the built-in WebSearch tool (DashScope Responses API backend). On by default at startup for Alibaba ModelStudio Standard API Key / Token Plan and OpenAI-compatible entries on recognized DashScope Responses hosts with a direct key; set enabled=false to turn it off. Which providers can activate the tool is decided at startup; once active, the search backend follows the currently selected model on the next search. Fully env-configurable for environments without settings.json: ENABLE_WEB_SEARCH, WEB_SEARCH_MODEL, WEB_SEARCH_BASE_URL, WEB_SEARCH_API_KEY (falls back to DASHSCOPE_API_KEY), WEB_SEARCH_EXTRACTOR. Note: baseUrl and API key are env-only (WEB_SEARCH_BASE_URL / WEB_SEARCH_API_KEY) and cannot be set in settings.json.",
         showInDialog: false,
         properties: {
           enabled: {
@@ -2282,8 +2299,8 @@ var SETTINGS_SCHEMA = {
             label: "Enable WebSearch",
             category: "Tools",
             requiresRestart: true,
-            default: false,
-            description: "Enable the built-in web_search tool. Also requires tools.webSearch.model. Env override: ENABLE_WEB_SEARCH.",
+            default: void 0,
+            description: "Set false to disable the built-in web_search tool. Automatic startup activation requires leaving enabled, model, and the env-only backend unset. Setting true permits automatic derivation only when the env-only backend is also unset; otherwise a model is required. Env override: ENABLE_WEB_SEARCH.",
             showInDialog: true
           },
           model: {
@@ -2292,7 +2309,7 @@ var SETTINGS_SCHEMA = {
             category: "Tools",
             requiresRestart: true,
             default: void 0,
-            description: 'Model selector for the search side request, resolved against modelProviders like fastModel ("modelId" or "authType:modelId"). Must resolve to a DashScope-compatible entry with an envKey. Recommended: qwen3.6-plus. Env override: WEB_SEARCH_MODEL.',
+            description: 'Model selector for the explicit search path ("modelId" or "authType:modelId"). With WEB_SEARCH_BASE_URL it is the plain model id for that endpoint; otherwise it must match a DashScope-compatible modelProviders entry with an envKey. The automatic path uses qwen3.6-plus. Env override: WEB_SEARCH_MODEL.',
             showInDialog: true
           },
           webExtractor: {
@@ -2770,7 +2787,7 @@ var SETTINGS_SCHEMA = {
             label: "Use External Auth",
             category: "Security",
             requiresRestart: true,
-            default: void 0,
+            default: false,
             description: "Whether to use an external authentication flow.",
             showInDialog: false
           },

package/chunks/{chunk-5FYGZ7E3.js → chunk-MUF4UGPB.js}

@@ -11,11 +11,11 @@ import {
 } from "./chunk-HWVUSYSN.js";
 import {
   loadSettings
-} from "./chunk-RUMSY4ES.js";
+} from "./chunk-Y7YHAY32.js";
 import {
   SkillManager,
   isSafeModeEnv
-} from "./chunk-TSLRORQR.js";
+} from "./chunk-BDAVT6K2.js";
 import {
   writeStderrLine
 } from "./chunk-7FA2II6K.js";