@qwen-code/qwen-code 0.23.3 → 0.23.4-dev.codemode-responses.20260914.87437db784

package/chunks/{chunk-Q5BD56BW.js → chunk-JPCYCFYG.js}

@@ -2,20 +2,20 @@
 "use strict";
 import {
   mapSkillConfigToStatus
-} from "./chunk-BHTYRHJF.js";
-import {
-  STATUS_SCHEMA_VERSION
-} from "./chunk-HGEUHUEV.js";
+} from "./chunk-ZJ7JQUGY.js";
 import {
   resolveSkillSettings
-} from "./chunk-HWVUSYSN.js";
+} from "./chunk-LMJSPC55.js";
+import {
+  STATUS_SCHEMA_VERSION
+} from "./chunk-54B2LTKP.js";
 import {
   loadSettings
-} from "./chunk-7BXXIQG4.js";
+} from "./chunk-J73WJIMT.js";
 import {
   SkillManager,
   isSafeModeEnv
-} from "./chunk-N7VWZDWW.js";
+} from "./chunk-CFSBWJBB.js";
 import {
   writeStderrLine
 } from "./chunk-7FA2II6K.js";

package/chunks/{chunk-LG5Y4OWO.js → chunk-JRHKM3YQ.js}

@@ -2,10 +2,10 @@
 "use strict";
 import {
   MAX_INLINE_IMAGE_ENCODED_LENGTH
-} from "./chunk-WBCPROWX.js";
+} from "./chunk-C4HBZQNH.js";
 import {
   MAX_TERMINAL_IMAGE_BYTES
-} from "./chunk-TP6FYVQT.js";
+} from "./chunk-RSWBT7AZ.js";
 import {
   init_esbuild_shims
 } from "./chunk-5O2XNYP6.js";

package/chunks/{chunk-NHCZJQE4.js → chunk-JZKBMADP.js}

@@ -2,23 +2,23 @@
 "use strict";
 import {
   getExtensionManager
-} from "./chunk-SODMFNAR.js";
+} from "./chunk-H23UWPF7.js";
 import {
   parseChannelConfig
-} from "./chunk-RZHU3K6M.js";
+} from "./chunk-IAS753HG.js";
 import {
   getPlugin,
   registerPlugin
-} from "./chunk-CUEXOHQH.js";
+} from "./chunk-5ODRE7E5.js";
 import {
   sanitizeLogText
-} from "./chunk-7QYWGTHB.js";
+} from "./chunk-EPVEPTI3.js";
 import {
   loadSettings
-} from "./chunk-7BXXIQG4.js";
+} from "./chunk-J73WJIMT.js";
 import {
   hashDaemonWorkspace
-} from "./chunk-ZW2EUO2A.js";
+} from "./chunk-L6DIANLD.js";
 import {
   Storage
 } from "./chunk-ZAFYHRVY.js";

package/chunks/{chunk-MF6E7FSA.js → chunk-K7CQWBLT.js}

@@ -1,22 +1,22 @@
 // Force strict mode and setup for ESM
 "use strict";
 import {
-  resolveModelConfig,
-  resolveProviderProtocol
-} from "./chunk-N7VWZDWW.js";
+  sanitizeProviderBaseUrl
+} from "./chunk-INGBUYL6.js";
 import {
-  external_exports
-} from "./chunk-CQ35AJ4Z.js";
+  resolveModelConfig
+} from "./chunk-CFSBWJBB.js";
 import {
+  resolveProviderProtocol,
   stripRuntimeSnapshotPrefix
-} from "./chunk-ZTTC7T4X.js";
+} from "./chunk-QQL5BFOL.js";
 import {
   REASONING_EFFORT_TIERS,
   normalizeReasoningEffort
-} from "./chunk-3FPYT6QC.js";
+} from "./chunk-ARDHE6MM.js";
 import {
   MODEL_GENERATION_CONFIG_FIELDS
-} from "./chunk-3UXUOFO6.js";
+} from "./chunk-6TMXX4Z4.js";
 import {
   AuthType
 } from "./chunk-ERU3SDXT.js";
@@ -27,191 +27,6 @@ import {
   __name
 } from "./chunk-J2S4EL5Y.js";
 
-// packages/cli/src/utils/acpModelUtils.ts
-init_esbuild_shims();
-import { createHash } from "node:crypto";
-var ACP_ROUTE_ID_PREFIX = "qwen-route:v1:";
-function getRouteEndpointIdentity(baseUrl) {
-  if (!baseUrl) return null;
-  try {
-    const url = new URL(baseUrl);
-    url.username = "";
-    url.password = "";
-    url.search = "";
-    url.hash = "";
-    return url.href;
-  } catch {
-    return sanitizeProviderBaseUrl(baseUrl).split(/[?#]/, 1)[0] ?? null;
-  }
-}
-__name(getRouteEndpointIdentity, "getRouteEndpointIdentity");
-function formatAcpModelId(modelId, authType) {
-  return `${modelId}(${authType})`;
-}
-__name(formatAcpModelId, "formatAcpModelId");
-function buildAcpModelOptions(models) {
-  const candidates = models.filter(
-    (model) => model.fastOnly !== true && model.voiceOnly !== true && model.imageOnly !== true
-  ).map((model) => {
-    const effectiveModelId = model.isRuntimeModel && model.runtimeSnapshotId ? model.runtimeSnapshotId : model.id;
-    return {
-      model,
-      effectiveModelId,
-      legacyModelId: formatAcpModelId(effectiveModelId, model.authType)
-    };
-  });
-  const counts = /* @__PURE__ */ new Map();
-  for (const candidate of candidates) {
-    counts.set(
-      candidate.legacyModelId,
-      (counts.get(candidate.legacyModelId) ?? 0) + 1
-    );
-  }
-  const discriminators = /* @__PURE__ */ new Set();
-  return candidates.map(({ model, effectiveModelId, legacyModelId }) => {
-    const discriminator = [
-      legacyModelId,
-      model.label,
-      model.envKey ?? null,
-      model.registryBaseUrl === void 0,
-      getRouteEndpointIdentity(model.registryBaseUrl ?? model.baseUrl)
-    ];
-    const discriminatorKey = JSON.stringify(discriminator);
-    if (counts.get(legacyModelId) !== 1 && discriminators.has(discriminatorKey)) {
-      throw new Error(
-        `ACP model routes for "${legacyModelId}" need distinct names, envKey values, or public endpoints.`
-      );
-    }
-    discriminators.add(discriminatorKey);
-    return {
-      model,
-      effectiveModelId,
-      modelId: counts.get(legacyModelId) === 1 ? legacyModelId : `${ACP_ROUTE_ID_PREFIX}${createHash("sha256").update(discriminatorKey).digest("base64url").slice(0, 16)}`
-    };
-  });
-}
-__name(buildAcpModelOptions, "buildAcpModelOptions");
-function resolveAcpModelOption(input, models) {
-  const matched = buildAcpModelOptions(models).find(
-    (option) => option.modelId === input.trim()
-  );
-  if (!matched) return null;
-  return {
-    modelId: matched.effectiveModelId,
-    authType: matched.model.authType,
-    ...matched.model.registryBaseUrl !== void 0 ? { baseUrl: matched.model.registryBaseUrl } : {},
-    ...!matched.model.isRuntimeModel ? { registryBaseUrl: matched.model.registryBaseUrl ?? null } : {},
-    isRuntime: matched.model.isRuntimeModel === true
-  };
-}
-__name(resolveAcpModelOption, "resolveAcpModelOption");
-function getCurrentAcpModelId(options, modelId, authType, registryBaseUrl) {
-  if (!modelId || !authType) return modelId;
-  const matching = options.filter(
-    (option) => option.effectiveModelId === modelId && option.model.authType === authType
-  );
-  if (matching[0]?.model.isRuntimeModel) return matching[0].modelId;
-  if (registryBaseUrl !== void 0) {
-    const exact = matching.find(
-      (option) => (option.model.registryBaseUrl ?? null) === registryBaseUrl
-    );
-    return exact?.modelId ?? modelId;
-  }
-  return matching.length === 1 ? matching[0].modelId : formatAcpModelId(modelId, authType);
-}
-__name(getCurrentAcpModelId, "getCurrentAcpModelId");
-function sanitizeProviderBaseUrl(baseUrl) {
-  const scheme = baseUrl.match(/^[A-Za-z][A-Za-z\d+.-]*:\/\//);
-  if (!scheme) {
-    return baseUrl;
-  }
-  const authorityStart = scheme[0].length;
-  const stripAt = /* @__PURE__ */ __name((at) => `${baseUrl.slice(0, authorityStart)}${baseUrl.slice(at + 1)}`, "stripAt");
-  const authorityEnd = findAuthorityEnd(baseUrl, authorityStart);
-  const authorityAt = baseUrl.slice(authorityStart, authorityEnd).lastIndexOf("@");
-  const authorityAtIndex = authorityAt === -1 ? -1 : authorityStart + authorityAt;
-  try {
-    const parsed = new URL(baseUrl);
-    if (parsed.username || parsed.password) {
-      return authorityAtIndex >= authorityStart ? stripAt(authorityAtIndex) : baseUrl;
-    }
-    return baseUrl;
-  } catch {
-    if (authorityAtIndex >= authorityStart) {
-      return stripAt(authorityAtIndex);
-    }
-    const fallbackAt = findUnescapedUserInfoFallbackAt(
-      baseUrl,
-      authorityStart,
-      authorityEnd
-    );
-    return fallbackAt === -1 ? baseUrl : stripAt(fallbackAt);
-  }
-}
-__name(sanitizeProviderBaseUrl, "sanitizeProviderBaseUrl");
-function findUnescapedUserInfoFallbackAt(baseUrl, authorityStart, authorityEnd) {
-  const at = baseUrl.lastIndexOf("@");
-  if (at < authorityStart || authorityEnd >= at) {
-    return -1;
-  }
-  const colon = baseUrl.indexOf(":", authorityStart);
-  if (colon === -1 || colon > authorityEnd) {
-    return -1;
-  }
-  const portCandidate = baseUrl.slice(colon + 1, authorityEnd);
-  return /^\d+$/.test(portCandidate) ? -1 : at;
-}
-__name(findUnescapedUserInfoFallbackAt, "findUnescapedUserInfoFallbackAt");
-function findAuthorityEnd(baseUrl, authorityStart) {
-  const slash = baseUrl.indexOf("/", authorityStart);
-  const query = baseUrl.indexOf("?", authorityStart);
-  const hash = baseUrl.indexOf("#", authorityStart);
-  let end = baseUrl.length;
-  if (slash !== -1) end = Math.min(end, slash);
-  if (query !== -1) end = Math.min(end, query);
-  if (hash !== -1) end = Math.min(end, hash);
-  return end;
-}
-__name(findAuthorityEnd, "findAuthorityEnd");
-function parseAcpBaseModelId(value) {
-  const trimmed = value.trim();
-  const closeIdx = trimmed.lastIndexOf(")");
-  const openIdx = trimmed.lastIndexOf("(");
-  if (openIdx >= 0 && closeIdx === trimmed.length - 1 && openIdx < closeIdx) {
-    return trimmed.slice(0, openIdx);
-  }
-  return trimmed;
-}
-__name(parseAcpBaseModelId, "parseAcpBaseModelId");
-function parseAcpModelOption(input) {
-  const trimmed = input.trim();
-  const closeIdx = trimmed.lastIndexOf(")");
-  const openIdx = trimmed.lastIndexOf("(");
-  if (openIdx >= 0 && closeIdx === trimmed.length - 1 && openIdx < closeIdx) {
-    const maybeModelId = trimmed.slice(0, openIdx);
-    const maybeAuthType = trimmed.slice(openIdx + 1, closeIdx);
-    const parsedAuthType = external_exports.nativeEnum(AuthType).safeParse(maybeAuthType);
-    if (parsedAuthType.success) {
-      return { modelId: maybeModelId, authType: parsedAuthType.data };
-    }
-  }
-  return { modelId: trimmed };
-}
-__name(parseAcpModelOption, "parseAcpModelOption");
-function isInlineModelOverrideAllowed(config, modelId) {
-  const contentGeneratorConfig = config.getContentGeneratorConfig();
-  const authType = contentGeneratorConfig?.authType;
-  if (!authType) {
-    return false;
-  }
-  const activeBaseUrl = contentGeneratorConfig.baseUrl;
-  const activeEnvKey = contentGeneratorConfig.apiKeyEnvKey;
-  return config.getAvailableModelsForAuthType(authType).filter((m) => !m.fastOnly && !m.voiceOnly && !m.imageOnly).some(
-    (m) => m.id === modelId && (m.baseUrl ?? void 0) === (activeBaseUrl ?? void 0) && (m.envKey ?? void 0) === (activeEnvKey ?? void 0)
-  );
-}
-__name(isInlineModelOverrideAllowed, "isInlineModelOverrideAllowed");
-
 // packages/cli/src/utils/modelConfigUtils.ts
 init_esbuild_shims();
 var AUTH_ENV_MODEL_VARS = {
@@ -457,14 +272,6 @@ function resolveCliGenerationConfig(inputs) {
 __name(resolveCliGenerationConfig, "resolveCliGenerationConfig");
 
 export {
-  ACP_ROUTE_ID_PREFIX,
-  buildAcpModelOptions,
-  resolveAcpModelOption,
-  getCurrentAcpModelId,
-  sanitizeProviderBaseUrl,
-  parseAcpBaseModelId,
-  parseAcpModelOption,
-  isInlineModelOverrideAllowed,
   collectProviderModelsForProtocol,
   getAuthTypeFromEnv,
   resolveCliGenerationConfig

package/chunks/{chunk-K2OJUPOE.js → chunk-KP2FHIFR.js}

@@ -26,6 +26,17 @@ function isOpenAIReasoningThoughtPart(part) {
   );
 }
 __name(isOpenAIReasoningThoughtPart, "isOpenAIReasoningThoughtPart");
+function isResponsesReasoningSignature(signature) {
+  if (typeof signature !== "string") return false;
+  if (!signature.trimStart().startsWith("{")) return false;
+  try {
+    const payload = JSON.parse(signature);
+    return payload !== null && typeof payload === "object" && "id" in payload && typeof payload.id === "string" && "encrypted_content" in payload && typeof payload.encrypted_content === "string";
+  } catch {
+    return false;
+  }
+}
+__name(isResponsesReasoningSignature, "isResponsesReasoningSignature");
 function parseThought(rawText) {
   const startIndex = rawText.indexOf(START_DELIMITER);
   if (startIndex === -1) {
@@ -69,6 +80,7 @@ __name(getThoughtSummary, "getThoughtSummary");
 
 export {
   createOpenAIReasoningThoughtPart,
+  isResponsesReasoningSignature,
   getThoughtSummary
 };
 /**

package/chunks/{chunk-ZU47FBOC.js → chunk-KSIOXYVX.js}

@@ -3,6 +3,10 @@
 import {
   getLanguageSettingsOptions
 } from "./chunk-5EJZE3FP.js";
+import {
+  DEFAULT_WEB_SEARCH_TIMEOUT_MS,
+  MAX_WEB_SEARCH_TIMEOUT_MS
+} from "./chunk-ZRZZLM37.js";
 import {
   DEFAULT_MAX_SUBAGENT_DEPTH,
   DEFAULT_MAX_TOOL_CALLS_PER_TURN,
@@ -11,18 +15,20 @@ import {
   DEFAULT_TOOL_RESULTS_TOTAL_CHARS_THRESHOLD,
   DEFAULT_TRUNCATE_TOOL_OUTPUT_LINES,
   DEFAULT_TRUNCATE_TOOL_OUTPUT_THRESHOLD,
-  GOAL_CHECKPOINT_TIMEOUT_SECONDS_CAP
-} from "./chunk-N7VWZDWW.js";
+  GOAL_CHECKPOINT_TIMEOUT_SECONDS_CAP,
+  GOAL_MAX_ACTIVE_MINUTES_CAP,
+  GOAL_MAX_TURNS_CAP
+} from "./chunk-CFSBWJBB.js";
 import {
   DEFAULT_QWEN_CUSTOM_IGNORE_FILE_NAMES
 } from "./chunk-IZ2U57NY.js";
 import {
   REASONING_EFFORT_TIERS
-} from "./chunk-3FPYT6QC.js";
+} from "./chunk-ARDHE6MM.js";
 import {
   DEFAULT_SENSITIVE_SPAN_ATTRIBUTE_MAX_LENGTH,
   SENSITIVE_SPAN_ATTRIBUTE_MAX_LENGTH_LIMIT
-} from "./chunk-W5ZQMAEM.js";
+} from "./chunk-4Y2I3CI3.js";
 import {
   init_esbuild_shims
 } from "./chunk-5O2XNYP6.js";
@@ -159,7 +165,7 @@ var HOOK_DEFINITION_ITEMS = {
           },
           timeout: {
             type: "number",
-            description: "Timeout in seconds for the hook execution."
+            description: "Timeout in seconds for the hook execution. Defaults to 60 for command hooks, 600 for http hooks and 30 for prompt hooks. For command hooks, a value of 1000 or more is read as legacy milliseconds."
           },
           env: {
             type: "object",
@@ -1058,6 +1064,15 @@ var SETTINGS_SCHEMA = {
         description: "Enable in-app SGR mouse tracking. While enabled, Qwen Code captures mouse events for text selection, click-to-position in text inputs, row hover, history-item toggling, and viewport scrolling. Because the terminal forwards all mouse events to the app, Qwen Code supplies its own equivalents for what the terminal can no longer do natively: a single click opens an http(s) hyperlink under the pointer (other link schemes are copied to the clipboard), and right-click over a link or a text selection opens an in-app context menu with Open Link / Copy Link Address / Copy Selection. Disable to hand the mouse fully back to the terminal (native right-click menu and link clicks); this turns off all in-app mouse interaction, and in Virtualized History the wheel no longer scrolls the transcript \u2014 use Shift+\u2191/\u2193, PgUp/PgDn, or Ctrl+Home/End instead (pair with ui.useTerminalBuffer: false to restore native terminal scrollback).",
         showInDialog: true
       },
+      showToolCallDetails: {
+        type: "boolean",
+        label: "Show Tool Call Details",
+        category: "UI",
+        requiresRestart: false,
+        default: true,
+        description: "Show tool arguments and results inline. Disable to render ordinary tool calls as a one-line summary; click a summary in Virtualized History or press Ctrl+O to expand its details. Approval prompts, user-initiated shell commands, and focused interactive shells remain expanded.",
+        showInDialog: true
+      },
       showToolCallArgs: {
         type: "boolean",
         label: "Show Tool Call Arguments",
@@ -1440,6 +1455,30 @@ var SETTINGS_SCHEMA = {
         description: "Autonomous spend window armed on each new Goal, in tokens as counted by the Goal meter (totalTokenCount summed over every model call the Goal makes in its own turns; side queries and checkpoint verification are not metered). When a Goal spends its window it gets one wind-down turn to hand off, then stops until you resume it, which arms another window. Unset uses the built-in default of 30,000,000; -1 means unlimited. Zero, values above 300,000,000 (10x the default, a typo guard), other negative, fractional, or non-number values are rejected at startup.",
         showInDialog: false
       },
+      goalMaxTurns: {
+        type: "integer",
+        label: "Goal Max Turns",
+        category: "Model",
+        requiresRestart: true,
+        default: void 0,
+        description: "Goal-turn window armed on each new Goal. Every finished Goal turn counts, including user-driven turns; user turns are still admitted at the ceiling, but they can make the next autonomous continuation a wind-down. A Goal that reaches the ceiling gets one wind-down turn to hand off, then stops until you resume it, which authorizes another window on top of the turns already finished. Unset runs Goals with no turn ceiling, and -1 says so explicitly -- but the opt-out only takes a ceiling off a Goal that has already spent it, on the resume or edit that follows; a Goal still under its ceiling keeps it. A ceiling is armed only on a Goal created after the change, so bounding a Goal already on the record means replacing it with /goal set, which starts a new Goal at revision 1 with its meters reset and its earlier evidence no longer citable, or clearing it and starting again. Zero, values above 10,000, other negative, fractional, or non-number values are rejected at startup. Changes take effect after restart.",
+        showInDialog: false,
+        minimum: -1,
+        maximum: GOAL_MAX_TURNS_CAP,
+        excludedValues: [0]
+      },
+      goalMaxActiveMinutes: {
+        type: "integer",
+        label: "Goal Max Active Minutes",
+        category: "Model",
+        requiresRestart: true,
+        default: void 0,
+        description: "Active-time window armed on each new Goal, in minutes of wall time while the Goal remains active, including waits and idle time between turns. Paused, blocked or stopped time does not count, nor does downtime across a restart; a suspended process is still charged. A Goal that reaches the ceiling gets one wind-down turn to hand off, then stops until you resume it, which authorizes another window. The ceiling is read between turns, not by a timer, so a Goal can run well past it before it stops. Active time is measured between recorded transitions, so time in a turn that a restart interrupted is not charged. Unset runs Goals with no time ceiling, and -1 says so explicitly -- but the opt-out only takes a ceiling off a Goal that has already spent it, on the resume or edit that follows. A ceiling is armed only on a Goal created after the change, so bounding a Goal already on the record means replacing it with /goal set, which starts a new Goal at revision 1 with its meters reset and its earlier evidence no longer citable, or clearing it and starting again. Zero, values above 10,080 (one week), other negative, fractional, or non-number values are rejected at startup. Changes take effect after restart.",
+        showInDialog: false,
+        minimum: -1,
+        maximum: GOAL_MAX_ACTIVE_MINUTES_CAP,
+        excludedValues: [0]
+      },
       goalCheckpointTimeoutSeconds: {
         type: "integer",
         label: "Goal Checkpoint Timeout (seconds)",
@@ -1448,7 +1487,7 @@ var SETTINGS_SCHEMA = {
         default: void 0,
         minimum: 1,
         maximum: GOAL_CHECKPOINT_TIMEOUT_SECONDS_CAP,
-        description: "Ceiling on one Goal evidence-checkpoint check, in seconds. A long Goal periodically compresses its evidence into checkpoint claims with a side model call. A check whose claims overrun the aggregate byte budget, or include a claim over the per-claim character limit, makes one corrective retry, and both calls share this ceiling. A check that does not finish in time is abandoned as inconclusive; it counts toward the checkpoint stall limit only when the evidence window has overflowed, while a non-overflowing check preserves the streak and retries on a later turn. Unset uses the built-in default of 180. Must be an integer between 1 and 900; other values are rejected at startup. The calls are streamed, so the per-request transport timeout (model.generationConfig.timeout, default 120 s) bounds only connect and first response, and values above 900 are rejected because past the default stream lifetime guard that guard, not this setting, ends the check. The 900 ceiling is fixed: raising QWEN_STREAM_MAX_LIFETIME_MS does not lift it.",
+        description: "Ceiling on one Goal evidence-checkpoint model call, in seconds. A long Goal periodically compresses its evidence into checkpoint claims with a side model call; when a call makes its one corrective retry, both requests share this ceiling (docs/users/features/goals.md lists which failures earn one). A check on an overflowing window after a stalled checkpoint sends its evidence in batches, one call per batch, each under its own ceiling. A check that does not finish in time is abandoned as inconclusive; it counts toward the checkpoint stall limit only when the evidence window has overflowed, while a non-overflowing check preserves the streak and retries on a later turn. Unset uses the built-in default of 180. Must be an integer between 1 and 900; other values are rejected at startup. The calls are streamed, so the per-request transport timeout (model.generationConfig.timeout, default 120 s) bounds only connect and first response, and values above 900 are rejected because past the default stream lifetime guard that guard, not this setting, ends the check. The 900 ceiling is fixed: raising QWEN_STREAM_MAX_LIFETIME_MS does not lift it.",
         showInDialog: false
       },
       maxToolCalls: {
@@ -2011,7 +2050,7 @@ var SETTINGS_SCHEMA = {
         category: "Advanced",
         requiresRestart: true,
         default: void 0,
-        description: 'Slash command names to hide and refuse to execute. Matched case-insensitively against the final command name (for extension commands this is the disambiguated form, e.g. "myext.deploy"). Merged as a union across settings scopes, so workspace settings can add to but not remove entries defined in system/user settings.',
+        description: 'Slash command names to hide and refuse to execute. Matched case-insensitively against the final command name (for extension commands this is the disambiguated form, e.g. "myext.deploy"), except that a skill command is gated under either spelling \u2014 its registered name (rust:pdf) or the name its SKILL.md authors (pdf) \u2014 so an entry written before that prefix existed still gates it. Merged as a union across settings scopes, so workspace settings can add to but not remove entries defined in system/user settings.',
         showInDialog: false,
         mergeStrategy: "union" /* UNION */
       }
@@ -2046,7 +2085,7 @@ var SETTINGS_SCHEMA = {
         category: "Advanced",
         requiresRestart: false,
         default: void 0,
-        description: "Skill names to hide. Matched case-insensitively against the skill name. Hidden skills do not appear in <available_skills> or as /<name> slash commands. UNION-merged across systemDefaults/user/workspace/system scopes \u2014 workspace cannot remove entries defined in higher scopes.",
+        description: "Skill names to hide. Matched case-insensitively against the skill name. Hidden skills do not appear in <available_skills> or as /<name> slash commands. An extension skill matches under either its registered name (rust:pdf) or the name its SKILL.md authors (pdf), so an entry written before that prefix existed still blocks it. UNION-merged across systemDefaults/user/workspace/system scopes \u2014 workspace cannot remove entries defined in higher scopes.",
         showInDialog: false,
         mergeStrategy: "union" /* UNION */
       },
@@ -2056,7 +2095,7 @@ var SETTINGS_SCHEMA = {
         category: "Advanced",
         requiresRestart: false,
         default: void 0,
-        description: "Skill names disabled by default unless explicitly enabled through skills.enabled. Matched case-insensitively and UNION-merged across settings scopes. skills.disabled always wins.",
+        description: "Skill names disabled by default unless explicitly enabled through skills.enabled. Matched case-insensitively and UNION-merged across settings scopes. An extension skill is disabled under either its registered name (rust:pdf) or the name its SKILL.md authors (pdf). skills.disabled always wins; skills.enabled cancels an entry here only when the two lists spell the name the same way.",
         showInDialog: false,
         mergeStrategy: "union" /* UNION */
       },
@@ -2066,7 +2105,7 @@ var SETTINGS_SCHEMA = {
         category: "Advanced",
         requiresRestart: false,
         default: void 0,
-        description: "Explicit opt-ins that override matching skills.defaultDisabled entries. Matched case-insensitively and UNION-merged across settings scopes. Cannot override skills.disabled.",
+        description: "Explicit opt-ins, matched against the skill name as registered \u2014 an extension skill is rust:pdf there. An entry spelled as the registered name overrides a matching skills.defaultDisabled entry and, for an extension skill, both the default the owning extension declares and the enablement stored for this workspace. A bare pdf entry never matches as a grant; it only cancels an identically-spelled skills.defaultDisabled entry, and once cancelled the enablement stored for this workspace decides, else the default the owning extension declares. Matched case-insensitively and UNION-merged across settings scopes. Cannot override skills.disabled or re-enable skills from a skills.disabledLevels-excluded level.",
         showInDialog: false,
         mergeStrategy: "union" /* UNION */
       },
@@ -2293,6 +2332,15 @@ var SETTINGS_SCHEMA = {
     description: "Settings for built-in and custom tools.",
     showInDialog: false,
     properties: {
+      codeModeOnly: {
+        type: "boolean",
+        label: "Code Mode Only (Experimental)",
+        category: "Tools",
+        requiresRestart: true,
+        default: false,
+        description: "Expose ordinary tools to the model only through the isolated exec JavaScript tool. Direct control tools remain available. Ignored in safe and bare modes.",
+        showInDialog: true
+      },
       sandbox: {
         type: "object",
         label: "Sandbox",
@@ -2320,7 +2368,7 @@ var SETTINGS_SCHEMA = {
         category: "Tools",
         requiresRestart: true,
         default: {},
-        description: "Settings for the built-in WebSearch tool (DashScope Responses API backend). On by default at startup for Alibaba ModelStudio Standard API Key / Token Plan and OpenAI-compatible entries on recognized DashScope Responses hosts with a direct key; set enabled=false to turn it off. Which providers can activate the tool is decided at startup; once active, the search backend follows the currently selected model on the next search. Fully env-configurable for environments without settings.json: ENABLE_WEB_SEARCH, WEB_SEARCH_MODEL, WEB_SEARCH_BASE_URL, WEB_SEARCH_API_KEY (falls back to DASHSCOPE_API_KEY), WEB_SEARCH_EXTRACTOR. Note: baseUrl and API key are env-only (WEB_SEARCH_BASE_URL / WEB_SEARCH_API_KEY) and cannot be set in settings.json.",
+        description: "Settings for the built-in WebSearch tool (DashScope Responses API backend). On by default at startup for Alibaba ModelStudio Standard API Key / Token Plan and OpenAI-compatible entries on recognized DashScope Responses hosts with a direct key; set enabled=false to turn it off. Which providers can activate the tool is decided at startup; once active, the search backend follows the currently selected model on the next search. Fully env-configurable for environments without settings.json: ENABLE_WEB_SEARCH, WEB_SEARCH_MODEL, WEB_SEARCH_BASE_URL, WEB_SEARCH_API_KEY (falls back to DASHSCOPE_API_KEY), WEB_SEARCH_EXTRACTOR, WEB_SEARCH_TIMEOUT_MS. Note: baseUrl and API key are env-only (WEB_SEARCH_BASE_URL / WEB_SEARCH_API_KEY) and cannot be set in settings.json.",
         showInDialog: false,
         properties: {
           enabled: {
@@ -2338,7 +2386,7 @@ var SETTINGS_SCHEMA = {
             category: "Tools",
             requiresRestart: true,
             default: void 0,
-            description: 'Model selector for the explicit search path ("modelId" or "authType:modelId"). With WEB_SEARCH_BASE_URL it is the plain model id for that endpoint; otherwise it must match a DashScope-compatible modelProviders entry with an envKey. The automatic path uses qwen3.6-plus. Env override: WEB_SEARCH_MODEL.',
+            description: 'Model selector for the explicit search path ("modelId" or "authType:modelId"). With WEB_SEARCH_BASE_URL it is the plain model id for that endpoint; otherwise it must match a DashScope-compatible modelProviders entry with an envKey. The automatic path uses qwen3.8-flash. Env override: WEB_SEARCH_MODEL.',
             showInDialog: true
           },
           webExtractor: {
@@ -2349,6 +2397,17 @@ var SETTINGS_SCHEMA = {
             default: true,
             description: "Let the search agent open and read result pages (DashScope web_extractor) for better-grounded answers. Billed separately by DashScope. Env override: WEB_SEARCH_EXTRACTOR.",
             showInDialog: true
+          },
+          timeoutMs: {
+            type: "number",
+            label: "Search Timeout (ms)",
+            category: "Tools",
+            requiresRestart: true,
+            default: void 0,
+            minimum: 1,
+            maximum: MAX_WEB_SEARCH_TIMEOUT_MS,
+            description: `Total time budget for one web_search call, in milliseconds (default ${DEFAULT_WEB_SEARCH_TIMEOUT_MS}, max ${MAX_WEB_SEARCH_TIMEOUT_MS}; other values fall back to the default). The search agent runs several queries and may open result pages; a search that exceeds the budget returns whatever arrived as a partial result once at least one search call has completed \u2014 if the budget expires before the first search call finishes, the tool reports a timeout error instead, because narration with no executed search is not auditable evidence. A per-tool execution cap (QWEN_CODE_TOOL_EXECUTION_TIMEOUT_MS) below this budget fires first and discards the partial result; keep it above timeoutMs. Env override: WEB_SEARCH_TIMEOUT_MS.`,
+            showInDialog: true
           }
         }
       },
@@ -3386,6 +3445,61 @@ var SETTINGS_SCHEMA = {
         showInDialog: false,
         mergeStrategy: "concat" /* CONCAT */,
         items: HOOK_DEFINITION_ITEMS
+      },
+      PostCompact: {
+        type: "array",
+        label: "Post Compact Hooks",
+        category: "Advanced",
+        requiresRestart: false,
+        default: [],
+        description: "Hooks that execute after conversation compaction completes.",
+        showInDialog: false,
+        mergeStrategy: "concat" /* CONCAT */,
+        items: HOOK_DEFINITION_ITEMS
+      },
+      PermissionDenied: {
+        type: "array",
+        label: "Permission Denied Hooks",
+        category: "Advanced",
+        requiresRestart: false,
+        default: [],
+        description: "Hooks that execute when AUTO-mode classification denies a tool call.",
+        showInDialog: false,
+        mergeStrategy: "concat" /* CONCAT */,
+        items: HOOK_DEFINITION_ITEMS
+      },
+      TodoCreated: {
+        type: "array",
+        label: "Todo Created Hooks",
+        category: "Advanced",
+        requiresRestart: false,
+        default: [],
+        description: "Hooks that execute when a new todo item is created. They can block creation during validation.",
+        showInDialog: false,
+        mergeStrategy: "concat" /* CONCAT */,
+        items: HOOK_DEFINITION_ITEMS
+      },
+      TodoCompleted: {
+        type: "array",
+        label: "Todo Completed Hooks",
+        category: "Advanced",
+        requiresRestart: false,
+        default: [],
+        description: "Hooks that execute when a todo item is marked as completed. They can block completion during validation.",
+        showInDialog: false,
+        mergeStrategy: "concat" /* CONCAT */,
+        items: HOOK_DEFINITION_ITEMS
+      },
+      InstructionsLoaded: {
+        type: "array",
+        label: "Instructions Loaded Hooks",
+        category: "Advanced",
+        requiresRestart: false,
+        default: [],
+        description: "Hooks that execute when an instruction file such as QWEN.md is loaded into context.",
+        showInDialog: false,
+        mergeStrategy: "concat" /* CONCAT */,
+        items: HOOK_DEFINITION_ITEMS
       }
     }
   },

package/chunks/{chunk-IV7GDNKC.js → chunk-KZCK5JUN.js}

@@ -1,14 +1,14 @@
 // Force strict mode and setup for ESM
 "use strict";
+import {
+  t
+} from "./chunk-I6YJZGHS.js";
 import {
   require_semver
 } from "./chunk-2AUM35J5.js";
 import {
   getNpmCliPath
-} from "./chunk-N6VQ37ZZ.js";
-import {
-  t
-} from "./chunk-VZUCTJ2P.js";
+} from "./chunk-SFL6U7U7.js";
 import {
   getPackageJson
 } from "./chunk-W3N5XAZ6.js";