@qwen-code/qwen-code 0.23.3 → 0.23.4-dev.codemode-responses.20260914.87437db784

package/chunks/{chunk-3UXUOFO6.js → chunk-6TMXX4Z4.js}

@@ -135,9 +135,6 @@ init_esbuild_shims();
 var DEFAULT_QWEN_EMBEDDING_MODEL = "text-embedding-v4";
 var MAINLINE_CODER_MODEL = "qwen3.7-max";
 
-// packages/core/src/core/contentGenerator.ts
-init_esbuild_shims();
-
 // packages/core/src/models/constants.ts
 init_esbuild_shims();
 var MODEL_GENERATION_CONFIG_FIELDS = [
@@ -149,6 +146,7 @@ var MODEL_GENERATION_CONFIG_FIELDS = [
   "retryMaxDelayMs",
   "retryErrorCodes",
   "enableCacheControl",
+  "enableRequestMetadata",
   "forceGlobalCacheScope",
   "cacheRetention",
   "cacheRetentionByBlock",
@@ -221,6 +219,7 @@ var QWEN_OAUTH_ALLOWED_MODELS = QWEN_OAUTH_MODELS.map(
 );
 
 // packages/core/src/core/contentGenerator.ts
+init_esbuild_shims();
 function setSource(sources, path, source) {
   sources[path] = source;
 }
@@ -418,23 +417,23 @@ async function createContentGenerator(generatorConfig, config, isInitialAuth) {
   try {
     if (authType === "openai" /* USE_OPENAI */) {
       loadBaseGenerator = /* @__PURE__ */ __name(async () => {
-        const { createOpenAIContentGenerator } = await import("./openaiContentGenerator-BE4S5TRD.js");
+        const { createOpenAIContentGenerator } = await import("./openaiContentGenerator-WD5DWYOA.js");
         return createOpenAIContentGenerator(generatorConfig, config);
       }, "loadBaseGenerator");
     } else if (authType === "openai-responses" /* USE_OPENAI_RESPONSES */) {
       loadBaseGenerator = /* @__PURE__ */ __name(async () => {
-        const { createOpenAIResponsesContentGenerator } = await import("./openaiResponsesContentGenerator-RTCAJ5V5.js");
+        const { createOpenAIResponsesContentGenerator } = await import("./openaiResponsesContentGenerator-AWRYZLJU.js");
         return createOpenAIResponsesContentGenerator(generatorConfig, config);
       }, "loadBaseGenerator");
     } else if (authType === "qwen-oauth" /* QWEN_OAUTH */) {
-      const { getQwenOAuthClient: getQwenOauthClient } = await import("./qwenOAuth2-3ZRQHHTC.js");
+      const { getQwenOAuthClient: getQwenOauthClient } = await import("./qwenOAuth2-WIEUEFEY.js");
       try {
         const qwenClient = await getQwenOauthClient(
           config,
           isInitialAuth ? { requireCachedCredentials: true } : void 0
         );
         loadBaseGenerator = /* @__PURE__ */ __name(async () => {
-          const { QwenContentGenerator } = await import("./qwenContentGenerator-TMQC623Z.js");
+          const { QwenContentGenerator } = await import("./qwenContentGenerator-3OIZQZLC.js");
           return new QwenContentGenerator(qwenClient, generatorConfig, config);
         }, "loadBaseGenerator");
       } catch (error) {
@@ -445,12 +444,12 @@ async function createContentGenerator(generatorConfig, config, isInitialAuth) {
       }
     } else if (authType === "anthropic" /* USE_ANTHROPIC */) {
       loadBaseGenerator = /* @__PURE__ */ __name(async () => {
-        const { createAnthropicContentGenerator } = await import("./anthropicContentGenerator-JSKMKS6V.js");
+        const { createAnthropicContentGenerator } = await import("./anthropicContentGenerator-H5YPXIDE.js");
         return createAnthropicContentGenerator(generatorConfig, config);
       }, "loadBaseGenerator");
     } else if (authType === "gemini" /* USE_GEMINI */ || authType === "vertex-ai" /* USE_VERTEX_AI */) {
       loadBaseGenerator = /* @__PURE__ */ __name(async () => {
-        const { createLlmContentGenerator } = await import("./llm-content-generator-ZHQQT5W7.js");
+        const { createLlmContentGenerator } = await import("./llm-content-generator-3VLLPQS4.js");
         return createLlmContentGenerator(generatorConfig, config);
       }, "loadBaseGenerator");
     } else {
@@ -465,7 +464,7 @@ async function createContentGenerator(generatorConfig, config, isInitialAuth) {
     try {
       const [baseGenerator, { LoggingContentGenerator }] = await Promise.all([
         loadBaseGenerator(),
-        import("./loggingContentGenerator-V72OCCJO.js")
+        import("./loggingContentGenerator-IMLIJULY.js")
       ]);
       return new LoggingContentGenerator(
         baseGenerator,

package/chunks/{chunk-Y2MYW47X.js → chunk-6WXVEDT2.js}

@@ -3,12 +3,16 @@
 import {
   MAX_SUB_SESSION_PROMPT_CHARS
 } from "./chunk-LJZSMWOH.js";
+import {
+  MAX_CRON_TASK_ROUTING_ID_LENGTH,
+  isValidCronTaskRoutingId
+} from "./chunk-3LMDSCLU.js";
 import {
   BaseDeclarativeTool,
   BaseToolInvocation,
   ToolDisplayNames,
   ToolNames
-} from "./chunk-TP6FYVQT.js";
+} from "./chunk-RSWBT7AZ.js";
 import {
   init_esbuild_shims
 } from "./chunk-5O2XNYP6.js";
@@ -141,7 +145,7 @@ var CreateSubSessionTool = class _CreateSubSessionTool extends BaseDeclarativeTo
           },
           model: {
             type: "string",
-            description: "Optional model service id for the sub-session. Omit to use the default model."
+            description: `Optional model service id for the sub-session. Omit to use the default model. Must be a non-empty string of at most ${MAX_CRON_TASK_ROUTING_ID_LENGTH} characters without control characters; the daemon rejects the call otherwise.`
           },
           name: {
             type: "string",
@@ -180,6 +184,9 @@ var CreateSubSessionTool = class _CreateSubSessionTool extends BaseDeclarativeTo
     if (params.completion !== void 0 && params.completion !== "sent" && params.completion !== "first-turn") {
       return 'Parameter "completion" must be "sent" or "first-turn".';
     }
+    if (params.model !== void 0 && !isValidCronTaskRoutingId(params.model)) {
+      return `Parameter "model" must be a non-empty string of at most ${MAX_CRON_TASK_ROUTING_ID_LENGTH} characters without control characters.`;
+    }
     return null;
   }
   /**

package/chunks/{chunk-ZHKTKHMO.js → chunk-7MIBD3LG.js}

@@ -2,7 +2,7 @@
 "use strict";
 import {
   parseModelReasoningCapabilities
-} from "./chunk-3FPYT6QC.js";
+} from "./chunk-ARDHE6MM.js";
 import {
   normalize
 } from "./chunk-FPGTNKCP.js";

package/chunks/{chunk-EVTNACMT.js → chunk-A6QMKS5S.js}

@@ -3,13 +3,6 @@
 import {
   HEADLESS_YOLO_NO_SANDBOX_WARNING
 } from "./chunk-6H67XLET.js";
-import {
-  JOURNAL_GROWTH_POOL_FRACTION,
-  MAX_JOURNAL_GROWTH_POOL_MB,
-  MIN_MEMORY_BUDGET_MB,
-  isValidMemoryBudgetMb,
-  memoryBudgetRangeError
-} from "./chunk-UXEO7E3V.js";
 import {
   DEFAULT_RING_SIZE
 } from "./chunk-7U5G6JXI.js";
@@ -19,18 +12,25 @@ import {
   DEFAULT_MAX_JOURNAL_EVENTS,
   JOURNAL_GROWTH_HARD_CAP_BYTES
 } from "./chunk-WCCLLK7X.js";
+import {
+  JOURNAL_GROWTH_POOL_FRACTION,
+  MAX_JOURNAL_GROWTH_POOL_MB,
+  MIN_MEMORY_BUDGET_MB,
+  isValidMemoryBudgetMb,
+  memoryBudgetRangeError
+} from "./chunk-LYD3T3H7.js";
 import {
   normalizeServeChannelSelection
-} from "./chunk-ALMR3E6Q.js";
+} from "./chunk-GDWE23OR.js";
 import {
   EXTERNAL_TOOL_GUARD_TOKEN_ENV
 } from "./chunk-3VUENPWF.js";
 import {
   loadSettings
-} from "./chunk-7BXXIQG4.js";
+} from "./chunk-J73WJIMT.js";
 import {
   MCP_BUDGET_WARN_FRACTION
-} from "./chunk-N7VWZDWW.js";
+} from "./chunk-CFSBWJBB.js";
 import {
   parsePositiveIntegerEnv
 } from "./chunk-6PVPNMXU.js";
@@ -447,7 +447,7 @@ var serveCommand = {
     delete process.env[EXTERNAL_TOOL_GUARD_TOKEN_ENV];
     const openWithAuth = argv["open-with-auth"];
     const open = argv.open || openWithAuth;
-    const { runQwenServe } = await import("./run-qwen-serve-26KZDECC.js");
+    const { runQwenServe } = await import("./run-qwen-serve-6MGYRK4V.js");
     try {
       const serveOptions = {
         port: argv.port,
@@ -513,7 +513,7 @@ var serveCommand = {
         ...channelSelection !== void 0 ? { channelSelection } : {}
       };
       if (openWithAuth) {
-        const { applyOpenWithAuth } = await import("./open-with-auth-6MVIHMXB.js");
+        const { applyOpenWithAuth } = await import("./open-with-auth-XFCCJOO6.js");
         applyOpenWithAuth(serveOptions);
       }
       const handle = await runQwenServe(serveOptions);

package/chunks/{chunk-NOAG7N22.js → chunk-A6YU6R5N.js}

@@ -10,10 +10,10 @@ import {
   publishPendingCompileCache,
   reportRejectedLoaderKeys,
   resetLoaderKeyRejectionReportingForTesting
-} from "./chunk-VX63RJXE.js";
+} from "./chunk-XX5HQLCZ.js";
 import {
   isWorkspaceTrusted
-} from "./chunk-53GWJOLP.js";
+} from "./chunk-NTCFKGQF.js";
 import {
   require_main
 } from "./chunk-65I7S4Z3.js";

package/chunks/{chunk-76RGWKLS.js → chunk-ABNX6E6K.js}

@@ -2,7 +2,7 @@
 "use strict";
 import {
   resolvePath
-} from "./chunk-7QYWGTHB.js";
+} from "./chunk-EPVEPTI3.js";
 import {
   init_esbuild_shims
 } from "./chunk-5O2XNYP6.js";

package/chunks/chunk-ACHCT36C.js

@@ -0,0 +1,28 @@
+// Force strict mode and setup for ESM
+"use strict";
+import {
+  init_esbuild_shims
+} from "./chunk-5O2XNYP6.js";
+import {
+  __name
+} from "./chunk-J2S4EL5Y.js";
+
+// packages/core/src/utils/bundlePaths.ts
+init_esbuild_shims();
+import * as path from "node:path";
+import { fileURLToPath } from "node:url";
+var BUNDLE_CHUNK_DIR = "chunks";
+function resolveBundleDir(importMetaUrl) {
+  const moduleDir = path.dirname(fileURLToPath(importMetaUrl));
+  return path.basename(moduleDir) === BUNDLE_CHUNK_DIR ? path.dirname(moduleDir) : moduleDir;
+}
+__name(resolveBundleDir, "resolveBundleDir");
+
+export {
+  resolveBundleDir
+};
+/**
+ * @license
+ * Copyright 2025 Qwen team
+ * SPDX-License-Identifier: Apache-2.0
+ */

package/chunks/{chunk-NE624IVP.js → chunk-ADQUK6WA.js}

@@ -2,7 +2,7 @@
 "use strict";
 import {
   t
-} from "./chunk-VZUCTJ2P.js";
+} from "./chunk-I6YJZGHS.js";
 import {
   init_esbuild_shims
 } from "./chunk-5O2XNYP6.js";

package/chunks/{chunk-PLLIWEM3.js → chunk-AEWCOE64.js}

@@ -2,14 +2,14 @@
 "use strict";
 import {
   getCurrentAgentId
-} from "./chunk-U7O65WKL.js";
+} from "./chunk-BW2SMO6L.js";
 import {
   getTeammateContext,
   isTeammate
 } from "./chunk-S6LOFUVP.js";
 import {
   ToolNames
-} from "./chunk-TP6FYVQT.js";
+} from "./chunk-RSWBT7AZ.js";
 import {
   init_esbuild_shims
 } from "./chunk-5O2XNYP6.js";

package/chunks/{chunk-3FPYT6QC.js → chunk-ARDHE6MM.js}

@@ -168,6 +168,27 @@ function applyReasoningEffort(config, effort) {
   return config.getReasoningEffort() === effort;
 }
 __name(applyReasoningEffort, "applyReasoningEffort");
+function setGeneratorReasoningEffort(cfg, effort) {
+  if (!cfg || cfg.reasoning === false) {
+    return false;
+  }
+  const next = {
+    ...cfg.reasoning ?? {}
+  };
+  if (effort) {
+    next.effort = effort;
+  } else {
+    delete next.effort;
+  }
+  cfg.reasoning = Object.keys(next).length > 0 ? next : void 0;
+  return true;
+}
+__name(setGeneratorReasoningEffort, "setGeneratorReasoningEffort");
+function reasoningEffortsForCapability(reasoning) {
+  if (!reasoning) return REASONING_EFFORT_TIERS;
+  return reasoning.toggleOnly ? [] : reasoning.efforts;
+}
+__name(reasoningEffortsForCapability, "reasoningEffortsForCapability");
 function parseModelReasoningCapabilities(value) {
   if (!value || typeof value !== "object") return void 0;
   const candidate = value;
@@ -203,6 +224,8 @@ export {
   normalizeReasoningEffort,
   clampReasoningEffort,
   applyReasoningEffort,
+  setGeneratorReasoningEffort,
+  reasoningEffortsForCapability,
   parseModelReasoningCapabilities
 };
 /**

package/chunks/{chunk-LILGKQ4B.js → chunk-AXZMWAJV.js}

@@ -2,13 +2,13 @@
 "use strict";
 import {
   isGitRepository
-} from "./chunk-3CZ2BQV6.js";
+} from "./chunk-NXUZFW3G.js";
 import {
   BaseDeclarativeTool,
   BaseToolInvocation,
   ToolDisplayNames,
   ToolNames
-} from "./chunk-TP6FYVQT.js";
+} from "./chunk-RSWBT7AZ.js";
 import {
   QWEN_DIR,
   createDebugLogger
@@ -291,7 +291,54 @@ When requested to perform tasks like fixing bugs, adding features, refactoring,
 `;
 }
 __name(getSoftwareEngineeringTasksSection, "getSoftwareEngineeringTasksSection");
-function buildDefaultBasePrompt(interaction, model, outputStyle, todoWriteEnabled = false) {
+function getToolGuidanceSection(questions, codeModeOnly, todoWriteEnabled) {
+  const taskManagementToolGuidance = todoWriteEnabled ? `- **Task Management:** Use '${ToolNames.TODO_WRITE}' only when explicit tracking adds value. Keep plans concise, outcome-oriented, and current; do not create a todo list for simple or single-step work unless the user explicitly requests one.
+` : "";
+  const directControls = todoWriteEnabled ? `'${ToolNames.TODO_WRITE}', '${ToolNames.AGENT}' and the other direct controls` : `'${ToolNames.AGENT}' and the other direct controls`;
+  if (codeModeOnly) {
+    return `
+## Using Your Tools
+- **Calling Convention:** Ordinary tools exist only inside '${ToolNames.EXEC}', as \`tools.<name>(args)\`. Every other tool declared to you \u2014 ${directControls} \u2014 is called directly and is not reachable through \`tools\`.
+- **Prefer Dedicated Tools:** Do NOT use \`tools.${ToolNames.SHELL}\` to run commands when a relevant dedicated tool is provided. Using dedicated tools allows the user to better understand and review your work. This is CRITICAL to assisting the user:
+  - To read files use \`tools.${ToolNames.READ_FILE}\` instead of cat, head, tail, or sed
+  - To edit files use \`tools.${ToolNames.EDIT}\` instead of sed or awk
+  - To create files use \`tools.${ToolNames.WRITE_FILE}\` instead of cat with heredoc or echo redirection
+  - To search for files use \`tools.${ToolNames.GLOB}\` instead of find or ls
+  - To search the content of files, use \`tools.${ToolNames.GREP}\` instead of grep or rg
+  - Reserve \`tools.${ToolNames.SHELL}\` exclusively for system commands and terminal operations that require shell execution. If you are unsure and there is a relevant dedicated tool, default to using the dedicated tool and only fallback on \`tools.${ToolNames.SHELL}\` for these if it is absolutely necessary.
+- **Batch Into One Program:** Put independent calls in a single '${ToolNames.EXEC}' program and await them together with \`Promise.all\`. Sequence calls only when a later one needs a value an earlier one produced. Whatever you need to see must be passed to \`text()\` \u2014 a result you only assign is never reported back to you. A denied or failed call aborts the whole program, so keep a call that may be refused out of a batch you would then have to repeat.
+- **Tool Fallback:** If a tool returns empty, unhelpful, or unexpected results, try an alternative tool that can accomplish the same goal before telling the user it cannot be done. Never give up after a single tool failure.
+${taskManagementToolGuidance}- **File Paths:** Always use absolute paths when referring to files with tools like \`tools.${ToolNames.READ_FILE}\` or \`tools.${ToolNames.WRITE_FILE}\`. Relative paths are not supported. You must provide an absolute path.
+- **Background Processes:** Use background execution with \`is_background: true\` for commands that are unlikely to stop on their own, e.g. \`node server.js\`. Do not append a trailing \`&\` when using the shell tool's managed background mode. If unsure, follow the active interaction mode's question guidance.
+- **Interactive Commands:** Try to avoid shell commands that are likely to require user interaction (e.g. \`git rebase -i\`). Use non-interactive versions of commands (e.g. \`npm init -y\` instead of \`npm init\`) when available, and otherwise remind the user that interactive shell commands are not supported and may cause hangs until canceled by the user.
+- **Questions:** ${questions}
+- **Subagent Delegation:** Use the '${ToolNames.AGENT}' tool with specialized agents when the task at hand matches the agent's description. Subagents are valuable for parallelizing independent queries or for protecting the main context window from excessive results, but they should not be used excessively when not needed. Importantly, avoid duplicating work that subagents are already doing - if you delegate research to a subagent, do not also perform the same searches yourself. A background subagent's result arrives as a task notification in a later turn; while waiting, do not read its transcript, predict its findings, or launch a replacement for the same task.
+- **Codebase Search:** For simple, directed codebase searches (e.g. for a specific file/class/function) call \`tools.${ToolNames.GREP}\` or \`tools.${ToolNames.GLOB}\` yourself. For broader codebase exploration and deep research, use the '${ToolNames.AGENT}' tool with subagent_type=Explore. This is slower than calling them yourself, so use this only when a simple, directed search proves to be insufficient or when your task will clearly require more than 3 queries.
+- **Respect Tool Decisions:** Tool permissions are enforced by the runtime. If a call is denied or canceled, respect that decision and do _not_ try the same action through another path. Retry only if the user subsequently requests that action.
+`.trim();
+  }
+  return `
+## Using Your Tools
+- **Prefer Dedicated Tools:** Do NOT use the '${ToolNames.SHELL}' to run commands when a relevant dedicated tool is provided. Using dedicated tools allows the user to better understand and review your work. This is CRITICAL to assisting the user:
+  - To read files use '${ToolNames.READ_FILE}' instead of cat, head, tail, or sed
+  - To edit files use '${ToolNames.EDIT}' instead of sed or awk
+  - To create files use '${ToolNames.WRITE_FILE}' instead of cat with heredoc or echo redirection
+  - To search for files use '${ToolNames.GLOB}' instead of find or ls
+  - To search the content of files, use '${ToolNames.GREP}' instead of grep or rg
+  - Reserve using the '${ToolNames.SHELL}' exclusively for system commands and terminal operations that require shell execution. If you are unsure and there is a relevant dedicated tool, default to using the dedicated tool and only fallback on using the '${ToolNames.SHELL}' tool for these if it is absolutely necessary.
+- **Tool Fallback:** If a tool returns empty, unhelpful, or unexpected results, try an alternative tool that can accomplish the same goal before telling the user it cannot be done. Never give up after a single tool failure.
+${taskManagementToolGuidance}- **Parallel Tool Calls:** You can call multiple tools in a single response. If you intend to call multiple tools and there are no dependencies between them, make all independent tool calls in parallel. Maximize use of parallel tool calls where possible to increase efficiency. However, if some tool calls depend on previous calls to inform dependent values, do NOT call these tools in parallel and instead call them sequentially. For instance, if one operation must complete before another starts, run these operations sequentially instead.
+- **File Paths:** Always use absolute paths when referring to files with tools like '${ToolNames.READ_FILE}' or '${ToolNames.WRITE_FILE}'. Relative paths are not supported. You must provide an absolute path.
+- **Background Processes:** Use background execution with \`is_background: true\` for commands that are unlikely to stop on their own, e.g. \`node server.js\`. Do not append a trailing \`&\` when using the shell tool's managed background mode. If unsure, follow the active interaction mode's question guidance.
+- **Interactive Commands:** Try to avoid shell commands that are likely to require user interaction (e.g. \`git rebase -i\`). Use non-interactive versions of commands (e.g. \`npm init -y\` instead of \`npm init\`) when available, and otherwise remind the user that interactive shell commands are not supported and may cause hangs until canceled by the user.
+- **Questions:** ${questions}
+- **Subagent Delegation:** Use the '${ToolNames.AGENT}' tool with specialized agents when the task at hand matches the agent's description. Subagents are valuable for parallelizing independent queries or for protecting the main context window from excessive results, but they should not be used excessively when not needed. Importantly, avoid duplicating work that subagents are already doing - if you delegate research to a subagent, do not also perform the same searches yourself. A background subagent's result arrives as a task notification in a later turn; while waiting, do not read its transcript, predict its findings, or launch a replacement for the same task.
+- **Codebase Search:** For simple, directed codebase searches (e.g. for a specific file/class/function) use the '${ToolNames.GREP}' or '${ToolNames.GLOB}' tools directly. For broader codebase exploration and deep research, use the '${ToolNames.AGENT}' tool with subagent_type=Explore. This is slower than using '${ToolNames.GREP}' or '${ToolNames.GLOB}' directly, so use this only when a simple, directed search proves to be insufficient or when your task will clearly require more than 3 queries.
+- **Respect Tool Decisions:** Tool permissions are enforced by the runtime. If a call is denied or canceled, respect that decision and do _not_ try the same action through another path. Retry only if the user subsequently requests that action.
+`.trim();
+}
+__name(getToolGuidanceSection, "getToolGuidanceSection");
+function buildDefaultBasePrompt(interaction, model, outputStyle, todoWriteEnabled = false, codeModeOnly = false) {
   const softwareEngineeringTasks = outputStyle?.keepCodingInstructions === false ? "" : getSoftwareEngineeringTasksSection(todoWriteEnabled);
   const taskManagementSection = todoWriteEnabled ? `# Task Management
 You have access to the ${ToolNames.TODO_WRITE} tool to keep user-visible progress for work that benefits from explicit tracking. Use it for complex, ambiguous, or multi-phase tasks or requests with multiple independent outcomes. Do not use it for simple or single-step queries that you can answer or complete immediately unless the user explicitly asks for a plan.
@@ -302,10 +349,13 @@ When you create a todo list:
 - Keep at most one item in_progress. Keep the list current, mark finished work completed, and revise it when the scope or approach changes. When work completes together, update multiple statuses in one tool call rather than making bookkeeping-only calls.
 - Do not repeat the full todo list in prose after calling the tool; briefly communicate only important context or the next step.
 
-` : "";
-  const taskManagementToolGuidance = todoWriteEnabled ? `- **Task Management:** Use '${ToolNames.TODO_WRITE}' only when explicit tracking adds value. Keep plans concise, outcome-oriented, and current; do not create a todo list for simple or single-step work unless the user explicitly requests one.
 ` : "";
   const coreIdentity = resolveCoreIdentityOverride() ?? getDefaultCoreIdentitySentence(interaction.role, Boolean(outputStyle));
+  const toolGuidance = getToolGuidanceSection(
+    interaction.questions,
+    codeModeOnly,
+    todoWriteEnabled
+  );
   return `
 ${coreIdentity}
 
@@ -355,23 +405,7 @@ Final responses should be concise by default, but their shape and depth must mat
 - **Explain Critical Commands:** Before executing commands with '${ToolNames.SHELL}' that modify the file system, codebase, or system state, you *must* provide a brief explanation of the command's purpose and potential impact. Prioritize user understanding and safety. Follow the active permission policy and do not assume an interactive confirmation dialog is available.
 - **Security First:** Always apply security best practices. Never introduce code that exposes, logs, or commits secrets, API keys, or other sensitive information.
 
-## Using Your Tools
-- **Prefer Dedicated Tools:** Do NOT use the '${ToolNames.SHELL}' to run commands when a relevant dedicated tool is provided. Using dedicated tools allows the user to better understand and review your work. This is CRITICAL to assisting the user:
-  - To read files use '${ToolNames.READ_FILE}' instead of cat, head, tail, or sed
-  - To edit files use '${ToolNames.EDIT}' instead of sed or awk
-  - To create files use '${ToolNames.WRITE_FILE}' instead of cat with heredoc or echo redirection
-  - To search for files use '${ToolNames.GLOB}' instead of find or ls
-  - To search the content of files, use '${ToolNames.GREP}' instead of grep or rg
-  - Reserve using the '${ToolNames.SHELL}' exclusively for system commands and terminal operations that require shell execution. If you are unsure and there is a relevant dedicated tool, default to using the dedicated tool and only fallback on using the '${ToolNames.SHELL}' tool for these if it is absolutely necessary.
-- **Tool Fallback:** If a tool returns empty, unhelpful, or unexpected results, try an alternative tool that can accomplish the same goal before telling the user it cannot be done. Never give up after a single tool failure.
-${taskManagementToolGuidance}- **Parallel Tool Calls:** You can call multiple tools in a single response. If you intend to call multiple tools and there are no dependencies between them, make all independent tool calls in parallel. Maximize use of parallel tool calls where possible to increase efficiency. However, if some tool calls depend on previous calls to inform dependent values, do NOT call these tools in parallel and instead call them sequentially. For instance, if one operation must complete before another starts, run these operations sequentially instead.
-- **File Paths:** Always use absolute paths when referring to files with tools like '${ToolNames.READ_FILE}' or '${ToolNames.WRITE_FILE}'. Relative paths are not supported. You must provide an absolute path.
-- **Background Processes:** Use background execution with \`is_background: true\` for commands that are unlikely to stop on their own, e.g. \`node server.js\`. Do not append a trailing \`&\` when using the shell tool's managed background mode. If unsure, follow the active interaction mode's question guidance.
-- **Interactive Commands:** Try to avoid shell commands that are likely to require user interaction (e.g. \`git rebase -i\`). Use non-interactive versions of commands (e.g. \`npm init -y\` instead of \`npm init\`) when available, and otherwise remind the user that interactive shell commands are not supported and may cause hangs until canceled by the user.
-- **Questions:** ${interaction.questions}
-- **Subagent Delegation:** Use the '${ToolNames.AGENT}' tool with specialized agents when the task at hand matches the agent's description. Subagents are valuable for parallelizing independent queries or for protecting the main context window from excessive results, but they should not be used excessively when not needed. Importantly, avoid duplicating work that subagents are already doing - if you delegate research to a subagent, do not also perform the same searches yourself. A background subagent's result arrives as a task notification in a later turn; while waiting, do not read its transcript, predict its findings, or launch a replacement for the same task.
-- **Codebase Search:** For simple, directed codebase searches (e.g. for a specific file/class/function) use the '${ToolNames.GREP}' or '${ToolNames.GLOB}' tools directly. For broader codebase exploration and deep research, use the '${ToolNames.AGENT}' tool with subagent_type=Explore. This is slower than using '${ToolNames.GREP}' or '${ToolNames.GLOB}' directly, so use this only when a simple, directed search proves to be insufficient or when your task will clearly require more than 3 queries.
-- **Respect Tool Decisions:** Tool permissions are enforced by the runtime. If a call is denied or canceled, respect that decision and do _not_ try the same action through another path. Retry only if the user subsequently requests that action.
+${toolGuidance}
 
 ## Interaction Details
 - **Help Command:** The user can use '/help' to display help information.
@@ -428,7 +462,7 @@ ${function() {
     return "";
   }()}
 
-${getToolCallExamples(model || "")}
+${codeModeOnly ? codeModeToolCallExamples : getToolCallExamples(model || "")}
 
 # Final Reminder
 Your core function is efficient and safe assistance. Balance conciseness with the crucial need for clarity, especially regarding safety and potential system modifications. Always prioritize user control and project conventions. Never make assumptions about the contents of files; instead use '${ToolNames.READ_FILE}' to ensure you aren't making broad assumptions. Finally, you are an agent - please keep going until the user's query is completely resolved.
@@ -448,7 +482,7 @@ function resolveMainSessionOutputStyle(config) {
   return resolveEffectiveOutputStyle(style, resolveInteractionMode(config));
 }
 __name(resolveMainSessionOutputStyle, "resolveMainSessionOutputStyle");
-function getCoreSystemPrompt(userMemory, model, appendInstruction, interactionMode = "interactive", outputStyle, todoWriteEnabled = false) {
+function getCoreSystemPrompt(userMemory, model, appendInstruction, interactionMode = "interactive", outputStyle, todoWriteEnabled = false, codeModeOnly = false) {
   const effectiveOutputStyle = resolveEffectiveOutputStyle(
     outputStyle,
     interactionMode
@@ -471,7 +505,8 @@ function getCoreSystemPrompt(userMemory, model, appendInstruction, interactionMo
     interaction,
     model,
     effectiveOutputStyle,
-    todoWriteEnabled
+    todoWriteEnabled,
+    codeModeOnly
   );
   const writeSystemMdResolution = resolvePathFromEnv(
     process.env["QWEN_WRITE_SYSTEM_MD"]
@@ -485,7 +520,8 @@ function getCoreSystemPrompt(userMemory, model, appendInstruction, interactionMo
         interaction,
         model,
         void 0,
-        todoWriteEnabled
+        todoWriteEnabled,
+        codeModeOnly
       )
     );
   }
@@ -677,6 +713,100 @@ I found the following 'app.config' files:
 To help you check their settings, I can read their contents. Which one would you like to start with, or should I read all of them?
 </example>
 `.trim();
+var codeModeToolCallExamples = `
+# Examples (Illustrating Tone and Workflow)
+<example>
+user: 1 + 2
+model: 3
+</example>
+
+<example>
+user: is 13 a prime number?
+model: true
+</example>
+
+<example>
+user: start the server implemented in server.js
+model: [tool_call: ${ToolNames.EXEC} with source: await tools.${ToolNames.SHELL}({ command: 'node server.js', is_background: true });]
+</example>
+
+<example>
+user: Refactor the auth logic in src/auth.py to use the requests library instead of urllib.
+model: Okay, I can refactor 'src/auth.py'.
+First I'll check for a test safety net and confirm 'requests' is a dependency. Those two lookups are independent, so they go in one program.
+[tool_call: ${ToolNames.EXEC} with source:
+const [tests, requirements] = await Promise.all([
+  tools.${ToolNames.GLOB}({ pattern: 'tests/test_auth.py' }),
+  tools.${ToolNames.READ_FILE}({ file_path: '/path/to/requirements.txt' }),
+]);
+text(tests.output);
+text(requirements.output);
+]
+(After analysis)
+Great, 'tests/test_auth.py' covers the core authentication logic and 'requests' is available. With this safety net in place, I can safely plan the refactoring.
+
+Here's the plan:
+1.  Replace the 'urllib' calls with 'requests'.
+2.  Add proper 'try...except' error handling for the new network calls.
+3.  Remove the old 'urllib' import.
+4.  Run the project's linter and tests to verify the changes.
+
+[tool_call: ${ToolNames.EXEC} with source: await tools.${ToolNames.EDIT}({ file_path: '/path/to/src/auth.py', old_string: '(exact old code)', new_string: '(new code)' });]
+Refactoring complete. Running verification...
+[tool_call: ${ToolNames.EXEC} with source:
+const checks = await tools.${ToolNames.SHELL}({ command: 'ruff check src/auth.py && pytest' });
+text(checks.output);
+]
+(After verification passes)
+All checks passed. This is a stable checkpoint.
+Would you like me to write a commit message and commit these changes?
+</example>
+
+<example>
+user: Delete the temp directory.
+model: I can run \`rm -rf /path/to/project/temp\`. This will permanently delete the directory and all its contents.
+</example>
+
+<example>
+user: Write tests for someFile.ts
+model:
+Okay, I can write those tests. First I'll read the source together with an existing test to pick up the local conventions.
+[tool_call: ${ToolNames.EXEC} with source:
+const [source, existing] = await Promise.all([
+  tools.${ToolNames.READ_FILE}({ file_path: '/path/to/someFile.ts' }),
+  tools.${ToolNames.READ_FILE}({ file_path: '/path/to/existingTest.test.ts' }),
+]);
+text(source.output);
+text(existing.output);
+]
+(After reviewing both)
+Now I'll check whether the intended test file already exists. A failed call aborts the whole program, so this probe stays on its own.
+[tool_call: ${ToolNames.EXEC} with source: text((await tools.${ToolNames.READ_FILE}({ file_path: '/path/to/someFile.test.ts' })).output);]
+(After ${ToolNames.READ_FILE} reports that /path/to/someFile.test.ts does not exist)
+[tool_call: ${ToolNames.EXEC} with source: await tools.${ToolNames.WRITE_FILE}({ file_path: '/path/to/someFile.test.ts', content: '(test code content)' });]
+I've written the tests. Now I'll run the project's test command to verify them.
+[tool_call: ${ToolNames.EXEC} with source:
+const result = await tools.${ToolNames.SHELL}({ command: 'npm run test' });
+text(result.output);
+]
+(After verification passes)
+All checks passed. This is a stable checkpoint.
+</example>
+
+<example>
+user: Where are all the 'app.config' files in this project? I need to check their settings.
+model:
+[tool_call: ${ToolNames.EXEC} with source:
+const found = await tools.${ToolNames.GLOB}({ pattern: './**/app.config' });
+text(found.output);
+]
+(Assuming the glob call returns paths like ['/path/to/moduleA/app.config', '/path/to/moduleB/app.config'])
+I found the following 'app.config' files:
+- /path/to/moduleA/app.config
+- /path/to/moduleB/app.config
+To help you check their settings, I can read their contents. Which one would you like to start with, or should I read all of them?
+</example>
+`.trim();
 var qwenCoderToolCallExamples = `
 # Examples (Illustrating Tone and Workflow)
 <example>

package/chunks/{chunk-SYLECP23.js → chunk-B776VKDA.js}

@@ -2,19 +2,19 @@
 "use strict";
 import {
   getErrorMessage
-} from "./chunk-GCDXVPFK.js";
+} from "./chunk-EZSSJSKR.js";
 import {
   extensionToOutputString,
   getExtensionManager
-} from "./chunk-SODMFNAR.js";
+} from "./chunk-H23UWPF7.js";
 import {
   loadSettings
-} from "./chunk-7BXXIQG4.js";
+} from "./chunk-J73WJIMT.js";
 import {
   initializeI18n,
   resolveLanguageSetting,
   t
-} from "./chunk-VZUCTJ2P.js";
+} from "./chunk-I6YJZGHS.js";
 import {
   writeStderrLine,
   writeStdoutLine

package/chunks/{chunk-AC6KDLH3.js → chunk-BNYQHLPR.js}

@@ -2,7 +2,7 @@
 "use strict";
 import {
   runExitCleanup
-} from "./chunk-JYKWOREU.js";
+} from "./chunk-DBUOMHLZ.js";
 import {
   init_esbuild_shims
 } from "./chunk-5O2XNYP6.js";