@qwen-code/qwen-code 0.23.3 → 0.23.4-nightly.20260914.f024b37689

package/chunks/{chunk-F53KKZUD.js → chunk-3LMDSCLU.js}

@@ -21,6 +21,14 @@ import {
 init_esbuild_shims();
 import * as fs from "node:fs/promises";
 import * as path from "node:path";
+var MAX_CRON_TASK_ROUTING_ID_LENGTH = 256;
+function isValidCronTaskRoutingId(value) {
+  return typeof value === "string" && value.length > 0 && value.length <= MAX_CRON_TASK_ROUTING_ID_LENGTH && !Array.from(value).some((character) => {
+    const code = character.charCodeAt(0);
+    return code <= 31 || code === 127;
+  });
+}
+__name(isValidCronTaskRoutingId, "isValidCronTaskRoutingId");
 var MAX_TASK_RUNS = 20;
 var MAX_CHANNEL_DELIVERY_NAME_LENGTH = 2048;
 var MAX_CHANNEL_DELIVERY_TARGET_ID_LENGTH = 2048;
@@ -68,6 +76,7 @@ var UPDATE_LOCK_STALE_MS = 2e3;
 var UPDATE_LOCK_TIMEOUT_MS = 3e3;
 var updateStaleSeq = 0;
 var updateMutexes = /* @__PURE__ */ new Map();
+var MAX_TASK_DELETION_GENERATIONS = 1e4;
 function getUpdateMutex(filePath) {
   let mutex = updateMutexes.get(filePath);
   if (!mutex) {
@@ -77,6 +86,60 @@ function getUpdateMutex(filePath) {
   return mutex;
 }
 __name(getUpdateMutex, "getUpdateMutex");
+async function readTaskDeletionGenerations(filePath) {
+  const statePath = `${filePath}.deletions`;
+  let raw;
+  try {
+    raw = await fs.readFile(statePath, "utf-8");
+  } catch (error) {
+    if (error.code === "ENOENT") {
+      return { generations: /* @__PURE__ */ new Map(), watermark: 0 };
+    }
+    throw error;
+  }
+  const parsed = JSON.parse(raw);
+  if (parsed.version !== 2 || !Number.isSafeInteger(parsed.watermark) || parsed.watermark < 0 || !Array.isArray(parsed.entries)) {
+    throw new Error(`Invalid scheduled-task deletion state: ${statePath}`);
+  }
+  const generations = /* @__PURE__ */ new Map();
+  let maximumGeneration = 0;
+  for (const entry of parsed.entries) {
+    if (!Array.isArray(entry) || entry.length !== 2 || typeof entry[0] !== "string" || !Number.isSafeInteger(entry[1]) || entry[1] < 1 || generations.has(entry[0])) {
+      throw new Error(`Invalid scheduled-task deletion state: ${statePath}`);
+    }
+    generations.set(entry[0], entry[1]);
+    maximumGeneration = Math.max(maximumGeneration, entry[1]);
+  }
+  const watermark = parsed.watermark;
+  if (watermark < maximumGeneration) {
+    throw new Error(`Invalid scheduled-task deletion state: ${statePath}`);
+  }
+  return { generations, watermark };
+}
+__name(readTaskDeletionGenerations, "readTaskDeletionGenerations");
+async function readTaskDeletionGenerationsOrUnknown(filePath) {
+  try {
+    return await readTaskDeletionGenerations(filePath);
+  } catch (error) {
+    console.warn(
+      `Ignoring unreadable scheduled-task deletion state at ${filePath}.deletions (${error instanceof Error ? error.message : String(error)}) \u2014 task updates proceed without it; delete the file to rebuild it.`
+    );
+    return void 0;
+  }
+}
+__name(readTaskDeletionGenerationsOrUnknown, "readTaskDeletionGenerationsOrUnknown");
+async function writeTaskDeletionGenerations(filePath, deletionState, assertCanCommit) {
+  const state = {
+    version: 2,
+    watermark: deletionState.watermark,
+    entries: [...deletionState.generations]
+  };
+  await atomicWriteJSON(`${filePath}.deletions`, state, {
+    noFollow: true,
+    assertCanCommit
+  });
+}
+__name(writeTaskDeletionGenerations, "writeTaskDeletionGenerations");
 function getCronFilePath(projectRoot) {
   return path.join(
     Storage.getGlobalTempDir(),
@@ -107,14 +170,25 @@ async function readCronTasks(projectRoot) {
       `Expected a JSON array in ${filePath} \u2014 fix or delete the file; refusing to treat it as an empty schedule.`
     );
   }
-  for (const [index, task] of parsed.entries()) {
+  const normalized = parsed.map((entry) => {
+    if (typeof entry !== "object" || entry === null) return entry;
+    const record = entry;
+    if ((record["modelServiceId"] !== void 0 || record["groupId"] !== void 0) && record["sessionMode"] !== "per_run") {
+      const copy = { ...record };
+      delete copy["modelServiceId"];
+      delete copy["groupId"];
+      return copy;
+    }
+    return entry;
+  });
+  for (const [index, task] of normalized.entries()) {
     if (!isValidTask(task)) {
       throw new Error(
         `Invalid task entry at index ${index} in ${filePath} \u2014 fix or delete the entry; refusing to drop it from the schedule.`
       );
     }
   }
-  return parsed;
+  return normalized;
 }
 __name(readCronTasks, "readCronTasks");
 async function writeCronTasks(projectRoot, tasks, options = {}) {
@@ -171,13 +245,76 @@ async function acquireUpdateLock(filePath) {
   }
 }
 __name(acquireUpdateLock, "acquireUpdateLock");
+function cronTaskSessionDeletionId(sessionId) {
+  const canonicalId = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-5][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i.test(
+    sessionId
+  ) ? sessionId.toLowerCase() : sessionId;
+  return `session:${canonicalId}`;
+}
+__name(cronTaskSessionDeletionId, "cronTaskSessionDeletionId");
 async function updateCronTasks(projectRoot, mutate, options = {}) {
   const filePath = getCronFilePath(projectRoot);
   return getUpdateMutex(filePath).runExclusive(async () => {
     const release = await acquireUpdateLock(filePath);
     try {
       const tasks = await readCronTasks(projectRoot);
+      const observedIds = new Set(
+        typeof options.observeDeletionIds === "function" ? options.observeDeletionIds(tasks) : options.observeDeletionIds ?? []
+      );
+      let deletionState;
+      let deletionStateUnknown = false;
+      const loadDeletionState = /* @__PURE__ */ __name(async () => {
+        if (deletionState === void 0 && !deletionStateUnknown) {
+          const state = await readTaskDeletionGenerationsOrUnknown(filePath);
+          if (state === void 0) {
+            deletionStateUnknown = true;
+          } else {
+            deletionState = state;
+          }
+        }
+        return deletionState;
+      }, "loadDeletionState");
+      if (observedIds.size > 0) {
+        const observedDeletionState = await loadDeletionState();
+        if (observedDeletionState !== void 0) {
+          options.onDeletionGenerations?.(
+            new Map(
+              [...observedIds].map((id) => [
+                id,
+                observedDeletionState.generations.get(id) ?? 0
+              ])
+            )
+          );
+        }
+      }
       const next = mutate(tasks);
+      const deletionIds = typeof options.deletionIds === "function" ? options.deletionIds() : options.deletionIds;
+      if (deletionIds?.length) {
+        deletionState = await loadDeletionState() ?? {
+          generations: /* @__PURE__ */ new Map(),
+          watermark: 0
+        };
+        for (const id of new Set(deletionIds)) {
+          if (deletionState.watermark === Number.MAX_SAFE_INTEGER) {
+            throw new Error(
+              `Scheduled-task deletion generation overflow for ${id}`
+            );
+          }
+          deletionState.watermark += 1;
+          deletionState.generations.delete(id);
+          deletionState.generations.set(id, deletionState.watermark);
+        }
+        while (deletionState.generations.size > MAX_TASK_DELETION_GENERATIONS) {
+          const oldest = deletionState.generations.keys().next().value;
+          if (oldest === void 0) break;
+          deletionState.generations.delete(oldest);
+        }
+        await writeTaskDeletionGenerations(
+          filePath,
+          deletionState,
+          options.assertCanCommit
+        );
+      }
       if (next !== tasks) {
         await writeCronTasks(projectRoot, next, options);
       }
@@ -193,14 +330,22 @@ async function addCronTask(projectRoot, task) {
 __name(addCronTask, "addCronTask");
 async function removeCronTasks(projectRoot, ids) {
   const idSet = new Set(ids);
-  const current = await readCronTasks(projectRoot);
-  if (!current.some((t) => idSet.has(t.id))) return 0;
+  try {
+    await fs.access(getCronFilePath(projectRoot));
+  } catch (error) {
+    if (error.code === "ENOENT") return 0;
+    throw error;
+  }
   let removed = 0;
-  await updateCronTasks(projectRoot, (tasks) => {
-    const remaining = tasks.filter((t) => !idSet.has(t.id));
-    removed = tasks.length - remaining.length;
-    return removed === 0 ? tasks : remaining;
-  });
+  await updateCronTasks(
+    projectRoot,
+    (tasks) => {
+      const remaining = tasks.filter((t) => !idSet.has(t.id));
+      removed = tasks.length - remaining.length;
+      return removed === 0 ? tasks : remaining;
+    },
+    { deletionIds: ids }
+  );
   return removed;
 }
 __name(removeCronTasks, "removeCronTasks");
@@ -242,11 +387,13 @@ function isValidTask(value) {
   (obj["name"] === void 0 || typeof obj["name"] === "string") && (obj["enabled"] === void 0 || typeof obj["enabled"] === "boolean") && (obj["disabledByArchive"] === void 0 || typeof obj["disabledByArchive"] === "boolean") && // A bound sessionId must be a NON-EMPTY string: an empty string would pass
   // a bare `typeof` check but the scheduler's truthy `task.sessionId` guard
   // would treat it as unbound, so a "bound" task would silently run unbound.
-  (obj["sessionId"] === void 0 || typeof obj["sessionId"] === "string" && obj["sessionId"].length > 0) && (obj["sessionOwnedByTask"] === void 0 || typeof obj["sessionOwnedByTask"] === "boolean") && (obj["sessionMode"] === void 0 || obj["sessionMode"] === "persistent" || obj["sessionMode"] === "per_run") && (obj["delivery"] === void 0 || isValidDelivery(obj["delivery"])) && (obj["runs"] === void 0 || isValidRuns(obj["runs"]));
+  (obj["sessionId"] === void 0 || typeof obj["sessionId"] === "string" && obj["sessionId"].length > 0) && (obj["sessionOwnedByTask"] === void 0 || typeof obj["sessionOwnedByTask"] === "boolean") && (obj["sessionMode"] === void 0 || obj["sessionMode"] === "persistent" || obj["sessionMode"] === "per_run") && (obj["modelServiceId"] === void 0 || isValidCronTaskRoutingId(obj["modelServiceId"])) && (obj["groupId"] === void 0 || isValidCronTaskRoutingId(obj["groupId"])) && (obj["delivery"] === void 0 || isValidDelivery(obj["delivery"])) && (obj["runs"] === void 0 || isValidRuns(obj["runs"]));
 }
 __name(isValidTask, "isValidTask");
 
 export {
+  MAX_CRON_TASK_ROUTING_ID_LENGTH,
+  isValidCronTaskRoutingId,
   MAX_CHANNEL_DELIVERY_NAME_LENGTH,
   MAX_CHANNEL_DELIVERY_TARGET_ID_LENGTH,
   annotateCronRunSession,
@@ -257,6 +404,7 @@ export {
   CRON_TASKS_DISPLAY_PATH,
   getCronFilePath,
   readCronTasks,
+  cronTaskSessionDeletionId,
   updateCronTasks,
   addCronTask,
   removeCronTasks

package/chunks/{chunk-WG7BL3FY.js → chunk-473RJLIH.js}

@@ -6,7 +6,7 @@ import {
   conversationRuntimeInUseError,
   conversationRuntimeOwnershipCompromisedError,
   conversationRuntimeUnavailableError
-} from "./chunk-2Z3T52OC.js";
+} from "./chunk-Y5TM7SBV.js";
 import {
   init_esbuild_shims
 } from "./chunk-5O2XNYP6.js";

package/chunks/{chunk-W5ZQMAEM.js → chunk-4Y2I3CI3.js}

@@ -1226,7 +1226,7 @@ function initializeTelemetry(config) {
   telemetryInitPromise ??= (async () => {
     const debugLogger3 = createDebugLogger("OTEL");
     try {
-      const { startTelemetrySdk } = await import("./sdk-impl-G6FVTBQZ.js");
+      const { startTelemetrySdk } = await import("./sdk-impl-4WF3VZ2F.js");
       if (telemetryInitialized) return;
       const started = await startTelemetrySdk(config);
       if (!started) return;

package/chunks/{chunk-HGEUHUEV.js → chunk-54B2LTKP.js}

@@ -2,7 +2,7 @@
 "use strict";
 import {
   SkillError
-} from "./chunk-2SZH22YO.js";
+} from "./chunk-NJ2OFVUX.js";
 import {
   init_esbuild_shims
 } from "./chunk-5O2XNYP6.js";

package/chunks/{chunk-IRH27ZC2.js → chunk-5EZRLTLQ.js}

@@ -117,9 +117,9 @@ function matches(cronExpr, date) {
 __name(matches, "matches");
 function nextFireTime(cronExpr, after) {
   const fields = parseCron(cronExpr);
-  const candidate = new Date(after.getTime());
-  candidate.setSeconds(0, 0);
-  candidate.setMinutes(candidate.getMinutes() + 1);
+  const candidate = new Date(
+    Math.floor(after.getTime() / 6e4) * 6e4 + 6e4
+  );
   const maxIterations = 4 * 366 * 24 * 60;
   for (let i = 0; i < maxIterations; i++) {
     const minuteOk = fields.minute.has(candidate.getMinutes());
@@ -131,7 +131,7 @@ function nextFireTime(cronExpr, after) {
     if (minuteOk && hourOk && monthOk && dayOk) {
       return candidate;
     }
-    candidate.setMinutes(candidate.getMinutes() + 1);
+    candidate.setTime(candidate.getTime() + 6e4);
   }
   throw new Error(
     `No matching fire time found within 4 years for: "${cronExpr}"`

package/chunks/{chunk-DLH7YIX6.js → chunk-5FK4MSHB.js}

@@ -2,11 +2,11 @@
 "use strict";
 import {
   createTask
-} from "./chunk-XKBFYTCD.js";
+} from "./chunk-WK6DEH3Q.js";
 import {
   getPlanRequiredTeammatePreApprovalMessage,
   isPlanRequiredTeammateAwaitingApproval
-} from "./chunk-PLLIWEM3.js";
+} from "./chunk-AEWCOE64.js";
 import {
   resolveActiveTeamName
 } from "./chunk-S6LOFUVP.js";
@@ -15,7 +15,7 @@ import {
   BaseToolInvocation,
   ToolDisplayNames,
   ToolNames
-} from "./chunk-TP6FYVQT.js";
+} from "./chunk-RSWBT7AZ.js";
 import {
   init_esbuild_shims
 } from "./chunk-5O2XNYP6.js";

package/chunks/{chunk-CUEXOHQH.js → chunk-5ODRE7E5.js}

@@ -27,12 +27,6 @@ var FIELD_KINDS = /* @__PURE__ */ new Set([
   "object"
 ]);
 var SHARED_ACCESS_FIELDS = [
-  {
-    key: "messagePrefix",
-    label: "Message Prefix",
-    kind: "string",
-    description: "Only dispatch user messages that start with this exact prefix after any leading @mentions. The prefix is removed before the task runs"
-  },
   {
     key: "senderPolicy",
     label: "Sender Policy",
@@ -255,15 +249,15 @@ function ensureBuiltins() {
   if (!builtinsPromise) {
     builtinsPromise = (async () => {
       const labelled = [
-        { name: "telegram", promise: import("./dist-H6G3K26N.js") },
-        { name: "weixin", promise: import("./dist-AHJYPSJL.js") },
-        { name: "dingtalk", promise: import("./dist-AIKC5E5P.js") },
-        { name: "dws", promise: import("./dist-F2DVGTL3.js") },
-        { name: "wecom", promise: import("./dist-KLZ7XGEQ.js") },
-        { name: "feishu", promise: import("./dist-KJGRVIGJ.js") },
-        { name: "qqbot", promise: import("./dist-GWNQVPZT.js") },
-        { name: "github", promise: import("./dist-ZXTZTE54.js") },
-        { name: "gitlab", promise: import("./dist-ZA52JXAS.js") }
+        { name: "telegram", promise: import("./dist-T6DDPDLQ.js") },
+        { name: "weixin", promise: import("./dist-GUB7QRYA.js") },
+        { name: "dingtalk", promise: import("./dist-SE4J6Z4O.js") },
+        { name: "dws", promise: import("./dist-NIOJXMGY.js") },
+        { name: "wecom", promise: import("./dist-2QYIVNS6.js") },
+        { name: "feishu", promise: import("./dist-PA7WPFVE.js") },
+        { name: "qqbot", promise: import("./dist-TFGETXFN.js") },
+        { name: "github", promise: import("./dist-MPUZZOG5.js") },
+        { name: "gitlab", promise: import("./dist-VDLSBCLM.js") }
       ];
       const results = await Promise.allSettled(labelled.map((l) => l.promise));
       for (let i = 0; i < results.length; i++) {

package/chunks/{chunk-ZU47FBOC.js → chunk-5VPMGZ2V.js}

@@ -3,6 +3,12 @@
 import {
   getLanguageSettingsOptions
 } from "./chunk-5EJZE3FP.js";
+import {
+  DEFAULT_WEB_SEARCH_MAX_PER_SESSION,
+  DEFAULT_WEB_SEARCH_TIMEOUT_MS,
+  MAX_WEB_SEARCH_MAX_PER_SESSION,
+  MAX_WEB_SEARCH_TIMEOUT_MS
+} from "./chunk-WDH4TVD3.js";
 import {
   DEFAULT_MAX_SUBAGENT_DEPTH,
   DEFAULT_MAX_TOOL_CALLS_PER_TURN,
@@ -11,18 +17,20 @@ import {
   DEFAULT_TOOL_RESULTS_TOTAL_CHARS_THRESHOLD,
   DEFAULT_TRUNCATE_TOOL_OUTPUT_LINES,
   DEFAULT_TRUNCATE_TOOL_OUTPUT_THRESHOLD,
-  GOAL_CHECKPOINT_TIMEOUT_SECONDS_CAP
-} from "./chunk-N7VWZDWW.js";
+  GOAL_CHECKPOINT_TIMEOUT_SECONDS_CAP,
+  GOAL_MAX_ACTIVE_MINUTES_CAP,
+  GOAL_MAX_TURNS_CAP
+} from "./chunk-KJFGH23C.js";
 import {
   DEFAULT_QWEN_CUSTOM_IGNORE_FILE_NAMES
 } from "./chunk-IZ2U57NY.js";
 import {
   REASONING_EFFORT_TIERS
-} from "./chunk-3FPYT6QC.js";
+} from "./chunk-ARDHE6MM.js";
 import {
   DEFAULT_SENSITIVE_SPAN_ATTRIBUTE_MAX_LENGTH,
   SENSITIVE_SPAN_ATTRIBUTE_MAX_LENGTH_LIMIT
-} from "./chunk-W5ZQMAEM.js";
+} from "./chunk-4Y2I3CI3.js";
 import {
   init_esbuild_shims
 } from "./chunk-5O2XNYP6.js";
@@ -97,6 +105,10 @@ var TOGGLE_TYPES = /* @__PURE__ */ new Set([
   "boolean",
   "enum"
 ]);
+function isNumericSettingType(type) {
+  return type === "number" || type === "integer";
+}
+__name(isNumericSettingType, "isNumericSettingType");
 var HOOK_DEFINITION_ITEMS = {
   type: "object",
   description: "A hook definition with an optional matcher and a list of hook configurations.",
@@ -159,7 +171,7 @@ var HOOK_DEFINITION_ITEMS = {
           },
           timeout: {
             type: "number",
-            description: "Timeout in seconds for the hook execution."
+            description: "Timeout in seconds for the hook execution. Defaults to 60 for command hooks, 600 for http hooks and 30 for prompt hooks. For command hooks, a value of 1000 or more is read as legacy milliseconds."
           },
           env: {
             type: "object",
@@ -1058,6 +1070,15 @@ var SETTINGS_SCHEMA = {
         description: "Enable in-app SGR mouse tracking. While enabled, Qwen Code captures mouse events for text selection, click-to-position in text inputs, row hover, history-item toggling, and viewport scrolling. Because the terminal forwards all mouse events to the app, Qwen Code supplies its own equivalents for what the terminal can no longer do natively: a single click opens an http(s) hyperlink under the pointer (other link schemes are copied to the clipboard), and right-click over a link or a text selection opens an in-app context menu with Open Link / Copy Link Address / Copy Selection. Disable to hand the mouse fully back to the terminal (native right-click menu and link clicks); this turns off all in-app mouse interaction, and in Virtualized History the wheel no longer scrolls the transcript \u2014 use Shift+\u2191/\u2193, PgUp/PgDn, or Ctrl+Home/End instead (pair with ui.useTerminalBuffer: false to restore native terminal scrollback).",
         showInDialog: true
       },
+      showToolCallDetails: {
+        type: "boolean",
+        label: "Show Tool Call Details",
+        category: "UI",
+        requiresRestart: false,
+        default: true,
+        description: "Show tool arguments and results inline. Disable to render ordinary tool calls as a one-line summary; click a summary in Virtualized History or press Ctrl+O to expand its details. Approval prompts, user-initiated shell commands, and focused interactive shells remain expanded.",
+        showInDialog: true
+      },
       showToolCallArgs: {
         type: "boolean",
         label: "Show Tool Call Arguments",
@@ -1440,6 +1461,30 @@ var SETTINGS_SCHEMA = {
         description: "Autonomous spend window armed on each new Goal, in tokens as counted by the Goal meter (totalTokenCount summed over every model call the Goal makes in its own turns; side queries and checkpoint verification are not metered). When a Goal spends its window it gets one wind-down turn to hand off, then stops until you resume it, which arms another window. Unset uses the built-in default of 30,000,000; -1 means unlimited. Zero, values above 300,000,000 (10x the default, a typo guard), other negative, fractional, or non-number values are rejected at startup.",
         showInDialog: false
       },
+      goalMaxTurns: {
+        type: "integer",
+        label: "Goal Max Turns",
+        category: "Model",
+        requiresRestart: true,
+        default: void 0,
+        description: "Goal-turn window armed on each new Goal. Every finished Goal turn counts, including user-driven turns; user turns are still admitted at the ceiling, but they can make the next autonomous continuation a wind-down. A Goal that reaches the ceiling gets one wind-down turn to hand off, then stops until you resume it, which authorizes another window on top of the turns already finished. Unset runs Goals with no turn ceiling, and -1 says so explicitly -- but the opt-out only takes a ceiling off a Goal that has already spent it, on the resume or edit that follows; a Goal still under its ceiling keeps it. A ceiling is armed only on a Goal created after the change, so bounding a Goal already on the record means replacing it with /goal set, which starts a new Goal at revision 1 with its meters reset and its earlier evidence no longer citable, or clearing it and starting again. Zero, values above 10,000, other negative, fractional, or non-number values are rejected at startup. Changes take effect after restart.",
+        showInDialog: false,
+        minimum: -1,
+        maximum: GOAL_MAX_TURNS_CAP,
+        excludedValues: [0]
+      },
+      goalMaxActiveMinutes: {
+        type: "integer",
+        label: "Goal Max Active Minutes",
+        category: "Model",
+        requiresRestart: true,
+        default: void 0,
+        description: "Active-time window armed on each new Goal, in minutes of wall time while the Goal remains active, including waits and idle time between turns. Paused, blocked or stopped time does not count, nor does downtime across a restart; a suspended process is still charged. A Goal that reaches the ceiling gets one wind-down turn to hand off, then stops until you resume it, which authorizes another window. The ceiling is read between turns, not by a timer, so a Goal can run well past it before it stops. Active time is measured between recorded transitions, so time in a turn that a restart interrupted is not charged. Unset runs Goals with no time ceiling, and -1 says so explicitly -- but the opt-out only takes a ceiling off a Goal that has already spent it, on the resume or edit that follows. A ceiling is armed only on a Goal created after the change, so bounding a Goal already on the record means replacing it with /goal set, which starts a new Goal at revision 1 with its meters reset and its earlier evidence no longer citable, or clearing it and starting again. Zero, values above 10,080 (one week), other negative, fractional, or non-number values are rejected at startup. Changes take effect after restart.",
+        showInDialog: false,
+        minimum: -1,
+        maximum: GOAL_MAX_ACTIVE_MINUTES_CAP,
+        excludedValues: [0]
+      },
       goalCheckpointTimeoutSeconds: {
         type: "integer",
         label: "Goal Checkpoint Timeout (seconds)",
@@ -1448,7 +1493,7 @@ var SETTINGS_SCHEMA = {
         default: void 0,
         minimum: 1,
         maximum: GOAL_CHECKPOINT_TIMEOUT_SECONDS_CAP,
-        description: "Ceiling on one Goal evidence-checkpoint check, in seconds. A long Goal periodically compresses its evidence into checkpoint claims with a side model call. A check whose claims overrun the aggregate byte budget, or include a claim over the per-claim character limit, makes one corrective retry, and both calls share this ceiling. A check that does not finish in time is abandoned as inconclusive; it counts toward the checkpoint stall limit only when the evidence window has overflowed, while a non-overflowing check preserves the streak and retries on a later turn. Unset uses the built-in default of 180. Must be an integer between 1 and 900; other values are rejected at startup. The calls are streamed, so the per-request transport timeout (model.generationConfig.timeout, default 120 s) bounds only connect and first response, and values above 900 are rejected because past the default stream lifetime guard that guard, not this setting, ends the check. The 900 ceiling is fixed: raising QWEN_STREAM_MAX_LIFETIME_MS does not lift it.",
+        description: "Ceiling on one Goal evidence-checkpoint model call, in seconds. A long Goal periodically compresses its evidence into checkpoint claims with a side model call; when a call makes its one corrective retry, both requests share this ceiling (docs/users/features/goals.md lists which failures earn one). A check on an overflowing window after a stalled checkpoint sends its evidence in batches, one call per batch, each under its own ceiling. A check that does not finish in time is abandoned as inconclusive; it counts toward the checkpoint stall limit only when the evidence window has overflowed, while a non-overflowing check preserves the streak and retries on a later turn. Unset uses the built-in default of 180. Must be an integer between 1 and 900; other values are rejected at startup. The calls are streamed, so the per-request transport timeout (model.generationConfig.timeout, default 120 s) bounds only connect and first response, and values above 900 are rejected because past the default stream lifetime guard that guard, not this setting, ends the check. The 900 ceiling is fixed: raising QWEN_STREAM_MAX_LIFETIME_MS does not lift it.",
         showInDialog: false
       },
       maxToolCalls: {
@@ -2011,7 +2056,7 @@ var SETTINGS_SCHEMA = {
         category: "Advanced",
         requiresRestart: true,
         default: void 0,
-        description: 'Slash command names to hide and refuse to execute. Matched case-insensitively against the final command name (for extension commands this is the disambiguated form, e.g. "myext.deploy"). Merged as a union across settings scopes, so workspace settings can add to but not remove entries defined in system/user settings.',
+        description: 'Slash command names to hide and refuse to execute. Matched case-insensitively against the final command name (for extension commands this is the disambiguated form, e.g. "myext.deploy"), except that a skill command is gated under either spelling \u2014 its registered name (rust:pdf) or the name its SKILL.md authors (pdf) \u2014 so an entry written before that prefix existed still gates it. Merged as a union across settings scopes, so workspace settings can add to but not remove entries defined in system/user settings.',
         showInDialog: false,
         mergeStrategy: "union" /* UNION */
       }
@@ -2046,7 +2091,7 @@ var SETTINGS_SCHEMA = {
         category: "Advanced",
         requiresRestart: false,
         default: void 0,
-        description: "Skill names to hide. Matched case-insensitively against the skill name. Hidden skills do not appear in <available_skills> or as /<name> slash commands. UNION-merged across systemDefaults/user/workspace/system scopes \u2014 workspace cannot remove entries defined in higher scopes.",
+        description: "Skill names to hide. Matched case-insensitively against the skill name. Hidden skills do not appear in <available_skills> or as /<name> slash commands. An extension skill matches under either its registered name (rust:pdf) or the name its SKILL.md authors (pdf), so an entry written before that prefix existed still blocks it. UNION-merged across systemDefaults/user/workspace/system scopes \u2014 workspace cannot remove entries defined in higher scopes.",
         showInDialog: false,
         mergeStrategy: "union" /* UNION */
       },
@@ -2056,7 +2101,7 @@ var SETTINGS_SCHEMA = {
         category: "Advanced",
         requiresRestart: false,
         default: void 0,
-        description: "Skill names disabled by default unless explicitly enabled through skills.enabled. Matched case-insensitively and UNION-merged across settings scopes. skills.disabled always wins.",
+        description: "Skill names disabled by default unless explicitly enabled through skills.enabled. Matched case-insensitively and UNION-merged across settings scopes. An extension skill is disabled under either its registered name (rust:pdf) or the name its SKILL.md authors (pdf). skills.disabled always wins; skills.enabled cancels an entry here only when the two lists spell the name the same way.",
         showInDialog: false,
         mergeStrategy: "union" /* UNION */
       },
@@ -2066,7 +2111,7 @@ var SETTINGS_SCHEMA = {
         category: "Advanced",
         requiresRestart: false,
         default: void 0,
-        description: "Explicit opt-ins that override matching skills.defaultDisabled entries. Matched case-insensitively and UNION-merged across settings scopes. Cannot override skills.disabled.",
+        description: "Explicit opt-ins, matched against the skill name as registered \u2014 an extension skill is rust:pdf there. An entry spelled as the registered name overrides a matching skills.defaultDisabled entry and, for an extension skill, both the default the owning extension declares and the enablement stored for this workspace. A bare pdf entry never matches as a grant; it only cancels an identically-spelled skills.defaultDisabled entry, and once cancelled the enablement stored for this workspace decides, else the default the owning extension declares. Matched case-insensitively and UNION-merged across settings scopes. Cannot override skills.disabled or re-enable skills from a skills.disabledLevels-excluded level.",
         showInDialog: false,
         mergeStrategy: "union" /* UNION */
       },
@@ -2293,6 +2338,15 @@ var SETTINGS_SCHEMA = {
     description: "Settings for built-in and custom tools.",
     showInDialog: false,
     properties: {
+      codeModeOnly: {
+        type: "boolean",
+        label: "Code Mode Only (Experimental)",
+        category: "Tools",
+        requiresRestart: true,
+        default: false,
+        description: "Expose ordinary tools to the model only through the isolated exec JavaScript tool. Direct control tools remain available. Ignored in safe and bare modes.",
+        showInDialog: true
+      },
       sandbox: {
         type: "object",
         label: "Sandbox",
@@ -2320,7 +2374,7 @@ var SETTINGS_SCHEMA = {
         category: "Tools",
         requiresRestart: true,
         default: {},
-        description: "Settings for the built-in WebSearch tool (DashScope Responses API backend). On by default at startup for Alibaba ModelStudio Standard API Key / Token Plan and OpenAI-compatible entries on recognized DashScope Responses hosts with a direct key; set enabled=false to turn it off. Which providers can activate the tool is decided at startup; once active, the search backend follows the currently selected model on the next search. Fully env-configurable for environments without settings.json: ENABLE_WEB_SEARCH, WEB_SEARCH_MODEL, WEB_SEARCH_BASE_URL, WEB_SEARCH_API_KEY (falls back to DASHSCOPE_API_KEY), WEB_SEARCH_EXTRACTOR. Note: baseUrl and API key are env-only (WEB_SEARCH_BASE_URL / WEB_SEARCH_API_KEY) and cannot be set in settings.json.",
+        description: "Settings for the built-in WebSearch tool (DashScope Responses API backend). On by default at startup for Alibaba ModelStudio Standard API Key / Token Plan and OpenAI-compatible entries on recognized DashScope Responses hosts with a direct key; set enabled=false to turn it off. Which providers can activate the tool is decided at startup; once active, the search backend follows the currently selected model on the next search. Fully env-configurable for environments without settings.json: ENABLE_WEB_SEARCH, WEB_SEARCH_MODEL, WEB_SEARCH_BASE_URL, WEB_SEARCH_API_KEY (falls back to DASHSCOPE_API_KEY), WEB_SEARCH_EXTRACTOR, WEB_SEARCH_TIMEOUT_MS, WEB_SEARCH_MAX_PER_SESSION. Note: baseUrl and API key are env-only (WEB_SEARCH_BASE_URL / WEB_SEARCH_API_KEY) and cannot be set in settings.json.",
         showInDialog: false,
         properties: {
           enabled: {
@@ -2338,7 +2392,7 @@ var SETTINGS_SCHEMA = {
             category: "Tools",
             requiresRestart: true,
             default: void 0,
-            description: 'Model selector for the explicit search path ("modelId" or "authType:modelId"). With WEB_SEARCH_BASE_URL it is the plain model id for that endpoint; otherwise it must match a DashScope-compatible modelProviders entry with an envKey. The automatic path uses qwen3.6-plus. Env override: WEB_SEARCH_MODEL.',
+            description: 'Model selector for the explicit search path ("modelId" or "authType:modelId"). With WEB_SEARCH_BASE_URL it is the plain model id for that endpoint; otherwise it must match a DashScope-compatible modelProviders entry with an envKey. The automatic path uses qwen3.8-flash. Env override: WEB_SEARCH_MODEL.',
             showInDialog: true
           },
           webExtractor: {
@@ -2349,6 +2403,28 @@ var SETTINGS_SCHEMA = {
             default: true,
             description: "Let the search agent open and read result pages (DashScope web_extractor) for better-grounded answers. Billed separately by DashScope. Env override: WEB_SEARCH_EXTRACTOR.",
             showInDialog: true
+          },
+          timeoutMs: {
+            type: "integer",
+            label: "Search Timeout (ms)",
+            category: "Tools",
+            requiresRestart: true,
+            default: void 0,
+            minimum: 1,
+            maximum: MAX_WEB_SEARCH_TIMEOUT_MS,
+            description: `Total time budget for one web_search call, in milliseconds (default ${DEFAULT_WEB_SEARCH_TIMEOUT_MS}, max ${MAX_WEB_SEARCH_TIMEOUT_MS}; other values fall back to the default). The search agent runs several queries and may open result pages; a search that exceeds the budget returns whatever arrived as a partial result once at least one search call has completed \u2014 if the budget expires before the first search call finishes, the tool reports a timeout error instead, because narration with no executed search is not auditable evidence. A per-tool execution cap (QWEN_CODE_TOOL_EXECUTION_TIMEOUT_MS) below this budget fires first and discards the partial result; keep it above timeoutMs. Env override: WEB_SEARCH_TIMEOUT_MS.`,
+            showInDialog: true
+          },
+          maxPerSession: {
+            type: "integer",
+            label: "Max Searches per Session",
+            category: "Tools",
+            requiresRestart: true,
+            default: void 0,
+            minimum: 1,
+            maximum: MAX_WEB_SEARCH_MAX_PER_SESSION,
+            description: `Maximum web_search calls in one session (default ${DEFAULT_WEB_SEARCH_MAX_PER_SESSION}, max ${MAX_WEB_SEARCH_MAX_PER_SESSION}; other values fall back to the default). The count is shared with subagents and resets when the session changes (/clear, /resume, branching). Once it is reached, further searches are skipped and the model is told to continue with what it has gathered. Env override: WEB_SEARCH_MAX_PER_SESSION.`,
+            showInDialog: true
           }
         }
       },
@@ -3386,6 +3462,61 @@ var SETTINGS_SCHEMA = {
         showInDialog: false,
         mergeStrategy: "concat" /* CONCAT */,
         items: HOOK_DEFINITION_ITEMS
+      },
+      PostCompact: {
+        type: "array",
+        label: "Post Compact Hooks",
+        category: "Advanced",
+        requiresRestart: false,
+        default: [],
+        description: "Hooks that execute after conversation compaction completes.",
+        showInDialog: false,
+        mergeStrategy: "concat" /* CONCAT */,
+        items: HOOK_DEFINITION_ITEMS
+      },
+      PermissionDenied: {
+        type: "array",
+        label: "Permission Denied Hooks",
+        category: "Advanced",
+        requiresRestart: false,
+        default: [],
+        description: "Hooks that execute when AUTO-mode classification denies a tool call.",
+        showInDialog: false,
+        mergeStrategy: "concat" /* CONCAT */,
+        items: HOOK_DEFINITION_ITEMS
+      },
+      TodoCreated: {
+        type: "array",
+        label: "Todo Created Hooks",
+        category: "Advanced",
+        requiresRestart: false,
+        default: [],
+        description: "Hooks that execute when a new todo item is created. They can block creation during validation.",
+        showInDialog: false,
+        mergeStrategy: "concat" /* CONCAT */,
+        items: HOOK_DEFINITION_ITEMS
+      },
+      TodoCompleted: {
+        type: "array",
+        label: "Todo Completed Hooks",
+        category: "Advanced",
+        requiresRestart: false,
+        default: [],
+        description: "Hooks that execute when a todo item is marked as completed. They can block completion during validation.",
+        showInDialog: false,
+        mergeStrategy: "concat" /* CONCAT */,
+        items: HOOK_DEFINITION_ITEMS
+      },
+      InstructionsLoaded: {
+        type: "array",
+        label: "Instructions Loaded Hooks",
+        category: "Advanced",
+        requiresRestart: false,
+        default: [],
+        description: "Hooks that execute when an instruction file such as QWEN.md is loaded into context.",
+        showInDialog: false,
+        mergeStrategy: "concat" /* CONCAT */,
+        items: HOOK_DEFINITION_ITEMS
       }
     }
   },
@@ -3706,6 +3837,7 @@ export {
   customDeepMerge,
   DEFAULT_OPENAI_LOG_RETENTION_DAYS,
   TOGGLE_TYPES,
+  isNumericSettingType,
   getSettingsSchema
 };
 /**

package/chunks/{chunk-532WHF4F.js → chunk-5VQR2DD7.js}

@@ -5,13 +5,13 @@ import {
 } from "./chunk-ELRMZTPF.js";
 import {
   isSubagentLikeExecutionContext
-} from "./chunk-PLLIWEM3.js";
+} from "./chunk-AEWCOE64.js";
 import {
   BaseDeclarativeTool,
   BaseToolInvocation,
   ToolDisplayNames,
   ToolNames
-} from "./chunk-TP6FYVQT.js";
+} from "./chunk-RSWBT7AZ.js";
 import {
   init_esbuild_shims
 } from "./chunk-5O2XNYP6.js";