@qwen-code/qwen-code 0.24.2 → 0.24.3-nightly.20260922.c5920f479b

package/chunks/{chunk-REXIMUUM.js → chunk-N6APTOMX.js}

@@ -16,7 +16,7 @@ import {
 import {
   BaseDeclarativeTool,
   BaseToolInvocation
-} from "./chunk-TPDNW6O5.js";
+} from "./chunk-5XEZQQG3.js";
 import {
   ToolDisplayNames,
   ToolNames

package/chunks/{chunk-JPRL7GPK.js → chunk-NBUQ3YNG.js}

@@ -8,7 +8,7 @@ import {
   DEFAULT_WEB_SEARCH_TIMEOUT_MS,
   MAX_WEB_SEARCH_MAX_PER_SESSION,
   MAX_WEB_SEARCH_TIMEOUT_MS
-} from "./chunk-7WIDY7UD.js";
+} from "./chunk-NOX67UUP.js";
 import {
   DEFAULT_MAX_SUBAGENT_DEPTH,
   DEFAULT_MAX_TOOL_CALLS_PER_TURN,
@@ -19,17 +19,17 @@ import {
   DEFAULT_TRUNCATE_TOOL_OUTPUT_THRESHOLD,
   GOAL_MAX_ACTIVE_MINUTES_CAP,
   GOAL_MAX_TURNS_CAP
-} from "./chunk-VQUX7GWP.js";
+} from "./chunk-76RJOIUO.js";
 import {
   REASONING_EFFORT_TIERS
-} from "./chunk-GT3O7YG4.js";
+} from "./chunk-WX7PKX74.js";
 import {
   DEFAULT_QWEN_CUSTOM_IGNORE_FILE_NAMES
 } from "./chunk-HDDAI7GZ.js";
 import {
   DEFAULT_SENSITIVE_SPAN_ATTRIBUTE_MAX_LENGTH,
   SENSITIVE_SPAN_ATTRIBUTE_MAX_LENGTH_LIMIT
-} from "./chunk-42QJ7NLB.js";
+} from "./chunk-BVNEEYJM.js";
 import {
   init_esbuild_shims
 } from "./chunk-5O2XNYP6.js";
@@ -462,7 +462,7 @@ var SETTINGS_SCHEMA = {
         requiresRestart: true,
         default: 30,
         minimum: 0,
-        description: "Number of days to retain ~/.qwen/file-history/ session backups used by /rewind and background subagent transcripts under <projectDir>/subagents/. Data older than this is removed by a background housekeeping pass that runs at most once per day. Set to 0 for minimum retention (~1 hour) \u2014 protects sessions touched in the last hour, plus the currently active session.",
+        description: "Number of days to retain ~/.qwen/file-history/ session backups used by /rewind, background subagent transcripts under <projectDir>/subagents/, and session debug logs under the runtime debug/ directory. Data older than this is removed by a background housekeeping pass that runs at most once per day. Set to 0 for minimum retention (~1 hour) \u2014 protects sessions touched in the last hour, plus the currently active session.",
         showInDialog: true
       },
       gitCoAuthor: {
@@ -2520,8 +2520,8 @@ var SETTINGS_SCHEMA = {
             label: "Interactive Shell (PTY)",
             category: "Tools",
             requiresRestart: true,
-            default: true,
-            description: "Use node-pty for an interactive shell experience. Falls back to child_process if PTY is unavailable.",
+            default: void 0,
+            description: "Use node-pty for an interactive shell experience. Explicit one-shot prompts default to child_process when this setting is unset; interactive and input-driven modes default to PTY.",
             showInDialog: true
           },
           pager: {

package/chunks/chunk-NEF3HSR4.js

@@ -0,0 +1,168 @@
+// Force strict mode and setup for ESM
+"use strict";
+import {
+  assertShellSandboxCwd,
+  encodeTextFileContentAsync
+} from "./chunk-76RJOIUO.js";
+import {
+  executeBwrap,
+  sandboxAsset
+} from "./chunk-2SENA3WV.js";
+import {
+  init_esbuild_shims
+} from "./chunk-5O2XNYP6.js";
+import {
+  __name
+} from "./chunk-J2S4EL5Y.js";
+
+// packages/core/src/sandbox/runtime-file.ts
+init_esbuild_shims();
+
+// packages/core/src/sandbox/file-version.ts
+init_esbuild_shims();
+import { statSync } from "node:fs";
+function getSandboxFileVersion(filePath) {
+  try {
+    const stats = statSync(filePath, { bigint: true });
+    if (!stats.isFile()) {
+      throw Object.assign(new Error("File tools require a regular file."), {
+        code: stats.isDirectory() ? "EISDIR" : "EINVAL"
+      });
+    }
+    return Object.freeze({
+      dev: stats.dev.toString(),
+      ino: stats.ino.toString(),
+      size: stats.size.toString(),
+      mtimeNs: stats.mtimeNs.toString(),
+      ctimeNs: stats.ctimeNs.toString()
+    });
+  } catch (error) {
+    if (error.code === "ENOENT") return null;
+    throw error;
+  }
+}
+__name(getSandboxFileVersion, "getSandboxFileVersion");
+
+// packages/core/src/sandbox/file-worker-client.ts
+init_esbuild_shims();
+
+// packages/core/src/sandbox/file-worker-protocol.ts
+init_esbuild_shims();
+var MAX_FILE_HEADER_BYTES = 16 * 1024;
+function encodeSandboxWriteRequest(request) {
+  const header = Buffer.from(
+    JSON.stringify({
+      operation: request.operation,
+      destination: request.destination,
+      expected: request.expected,
+      contentLength: request.content.length
+    }) + "\n"
+  );
+  if (header.length > MAX_FILE_HEADER_BYTES)
+    throw new Error("File worker header exceeds 16 KiB.");
+  return Buffer.concat([header, request.content]);
+}
+__name(encodeSandboxWriteRequest, "encodeSandboxWriteRequest");
+
+// packages/core/src/sandbox/file-worker-client.ts
+async function writeSandboxFile(policy, request, signal) {
+  signal.throwIfAborted();
+  if (policy.filesystem === "read-only") {
+    throw Object.assign(
+      new Error("File writes are disabled by the read-only sandbox policy."),
+      { code: "EROFS" }
+    );
+  }
+  const stdin = encodeSandboxWriteRequest(request);
+  let reply = "";
+  let diagnostics = "";
+  const appendBounded = /* @__PURE__ */ __name((current, chunk) => (current + chunk).slice(-MAX_FILE_HEADER_BYTES), "appendBounded");
+  const handle = await executeBwrap(
+    policy,
+    {
+      executable: process.execPath,
+      args: [sandboxAsset("file-worker")],
+      cwd: policy.workspace,
+      env: { PATH: "/usr/bin:/bin", LANG: "C.UTF-8" },
+      stdin
+    },
+    (event) => {
+      if (event.type !== "data" || typeof event.chunk !== "string") return;
+      if (event.stream === "stdout") reply = appendBounded(reply, event.chunk);
+      else if (event.stream === "stderr")
+        diagnostics = appendBounded(diagnostics, event.chunk);
+    },
+    signal,
+    false,
+    {},
+    { streamStdout: true }
+  );
+  const result = await handle.result;
+  if (result.sandboxStatus.state !== "confirmed" || result.error || result.aborted) {
+    const detail = [result.error?.message, diagnostics || result.output].filter(Boolean).join("\n");
+    throw new Error(
+      `Sandbox file write failed (${result.sandboxStatus.state}): ${detail}`
+    );
+  }
+  let parsedReply;
+  try {
+    parsedReply = JSON.parse(reply.trim());
+  } catch {
+    if (result.sandboxStatus.exitCode === 0)
+      throw new Error("Invalid sandbox file worker reply.");
+    throw new Error(
+      `Sandbox file worker exited ${result.sandboxStatus.exitCode}: ${diagnostics || result.output || reply || "invalid reply"}`
+    );
+  }
+  if (result.sandboxStatus.exitCode === 0 && parsedReply["ok"] === true) return;
+  if (parsedReply["ok"] === false && typeof parsedReply["error"] === "string") {
+    throw Object.assign(new Error(parsedReply["error"]), {
+      ...typeof parsedReply["code"] === "string" ? { code: parsedReply["code"] } : {}
+    });
+  }
+  throw new Error("Invalid sandbox file worker reply.");
+}
+__name(writeSandboxFile, "writeSandboxFile");
+
+// packages/core/src/sandbox/runtime-file.ts
+function captureRuntimeFileVersion(config, filePath) {
+  if (!config.getShellExecutionSandbox?.()) return void 0;
+  return getSandboxFileVersion(filePath);
+}
+__name(captureRuntimeFileVersion, "captureRuntimeFileVersion");
+async function writeRuntimeFile(config, params, expected, signal) {
+  const policy = config.getShellExecutionSandbox?.();
+  if (!policy) {
+    await config.getFileSystemService().writeTextFile(params);
+    return;
+  }
+  signal.throwIfAborted();
+  if (expected === void 0) throw new Error("Missing sandbox file version.");
+  assertShellSandboxCwd(policy, config.getTargetDir());
+  const content = await encodeTextFileContentAsync(
+    params.path,
+    params.content,
+    params._meta
+  );
+  await writeSandboxFile(
+    policy,
+    {
+      operation: "write",
+      destination: params.path,
+      content,
+      expected
+    },
+    signal
+  );
+}
+__name(writeRuntimeFile, "writeRuntimeFile");
+
+export {
+  captureRuntimeFileVersion,
+  writeRuntimeFile
+};
+/**
+ * @license
+ * Copyright 2026 Qwen Team
+ * SPDX-License-Identifier: Apache-2.0
+ */

package/chunks/{chunk-LCIR5C23.js → chunk-NJMEC7A2.js}

@@ -3,7 +3,7 @@
 import {
   getUserSettingsPath,
   v1ToV2Migration
-} from "./chunk-4LDMRC23.js";
+} from "./chunk-MRFNXTCO.js";
 import {
   getSystemDefaultsPath,
   getSystemSettingsPath
@@ -13,7 +13,7 @@ import {
   TrustLevel,
   getExplicitTrustLevel,
   getTrustedFoldersPath
-} from "./chunk-UE4ZRIXK.js";
+} from "./chunk-6UZ6ROAB.js";
 import {
   require_strip_json_comments
 } from "./chunk-NPQ5ZKRP.js";
@@ -22,7 +22,7 @@ import {
 } from "./chunk-MR3PXB6E.js";
 import {
   ideContextStore
-} from "./chunk-VQUX7GWP.js";
+} from "./chunk-76RJOIUO.js";
 import {
   init_esbuild_shims
 } from "./chunk-5O2XNYP6.js";

package/chunks/{chunk-7WIDY7UD.js → chunk-NOX67UUP.js}

@@ -6,7 +6,7 @@ import {
 } from "./chunk-L3KJT4ZZ.js";
 import {
   DASHSCOPE_REGIONAL_HOSTS
-} from "./chunk-GPKTOXFJ.js";
+} from "./chunk-43H36F3M.js";
 import {
   delay
 } from "./chunk-HQDIJMQT.js";
@@ -16,10 +16,10 @@ import {
   buildSessionAwareFetch,
   findProviderByCredentials,
   resolveRequestTimeout
-} from "./chunk-UZTJ5WJA.js";
+} from "./chunk-NZXYQF5P.js";
 import {
   getDefaultApiKeyEnvVar
-} from "./chunk-GT3O7YG4.js";
+} from "./chunk-WX7PKX74.js";
 import {
   buildRuntimeFetchOptions,
   preloadRuntimeFetchModule
@@ -27,7 +27,7 @@ import {
 import {
   BaseDeclarativeTool,
   BaseToolInvocation
-} from "./chunk-TPDNW6O5.js";
+} from "./chunk-5XEZQQG3.js";
 import {
   ToolDisplayNames,
   ToolNames

package/chunks/{chunk-VYCIVHT7.js → chunk-NQA6TO6A.js}

@@ -1,5 +1,9 @@
 // Force strict mode and setup for ESM
 "use strict";
+import {
+  captureRuntimeFileVersion,
+  writeRuntimeFile
+} from "./chunk-NEF3HSR4.js";
 import {
   checkTeamMemorySecrets
 } from "./chunk-UEILASYG.js";
@@ -11,32 +15,32 @@ import {
   detectLineEnding,
   getDiffStat,
   needsUtf8Bom
-} from "./chunk-VQUX7GWP.js";
+} from "./chunk-76RJOIUO.js";
 import {
   FileOperationEvent,
   ReadFileTool,
   getLanguageFromFilePath,
   logFileOperation
-} from "./chunk-IXWDQRM4.js";
-import {
-  fileExists,
-  getSpecificMimeType
-} from "./chunk-U5JK32FE.js";
+} from "./chunk-FLTE323L.js";
 import {
   isAnyAutoMemPath,
   isTeamAutoMemPath
 } from "./chunk-UEYDN2YO.js";
+import {
+  fileExists,
+  getSpecificMimeType
+} from "./chunk-7JDVJX7A.js";
 import {
   BaseDeclarativeTool,
   StructuredToolError
-} from "./chunk-TPDNW6O5.js";
+} from "./chunk-5XEZQQG3.js";
 import {
   ToolDisplayNames,
   ToolNames
 } from "./chunk-RSWOFJBY.js";
 import {
   safeLiteralReplace
-} from "./chunk-42QJ7NLB.js";
+} from "./chunk-5R36APDE.js";
 import {
   createDebugLogger,
   makeRelative,
@@ -389,6 +393,10 @@ var EditToolInvocation = class {
    * @throws File system errors if reading the file fails unexpectedly (e.g., permissions)
    */
   async calculateEdit(params) {
+    const sandboxFileVersion = captureRuntimeFileVersion(
+      this.config,
+      params.file_path
+    );
     const replaceAll = params.replace_all ?? false;
     let currentContent = null;
     let fileExists2 = await fileExists(params.file_path);
@@ -560,6 +568,7 @@ var EditToolInvocation = class {
     return {
       currentContent,
       newContent,
+      sandboxFileVersion,
       occurrences,
       error,
       isNewFile,
@@ -598,7 +607,7 @@ var EditToolInvocation = class {
       if (abortSignal.aborted) {
         throw error;
       }
-      const errorMsg = getErrorMessage(error);
+      const errorMsg = isNodeError(error) && error.code === "EISDIR" ? `Target is a directory, not a file: ${this.params.file_path} (${error.code})` : getErrorMessage(error);
       throw new Error(`Error preparing edit: ${errorMsg}`);
     }
     if (editData.error) {
@@ -708,7 +717,9 @@ var EditToolInvocation = class {
           };
         }
       }
-      this.ensureParentDirectoriesExist(this.params.file_path);
+      if (!this.config.getShellExecutionSandbox?.()) {
+        this.ensureParentDirectoriesExist(this.params.file_path);
+      }
       if (editData.isNewFile) {
         const userEncoding = this.config.getDefaultFileEncoding();
         let useBOM = false;
@@ -717,25 +728,35 @@ var EditToolInvocation = class {
         } else if (userEncoding === void 0) {
           useBOM = needsUtf8Bom(this.params.file_path);
         }
-        await this.config.getFileSystemService().writeTextFile({
-          path: this.params.file_path,
-          content: editData.newContent,
-          toolWriteOrigin: "edit",
-          _meta: {
-            bom: useBOM
-          }
-        });
+        await writeRuntimeFile(
+          this.config,
+          {
+            path: this.params.file_path,
+            content: editData.newContent,
+            toolWriteOrigin: "edit",
+            _meta: {
+              bom: useBOM
+            }
+          },
+          editData.sandboxFileVersion,
+          signal
+        );
       } else {
-        await this.config.getFileSystemService().writeTextFile({
-          path: this.params.file_path,
-          content: editData.newContent,
-          toolWriteOrigin: "edit",
-          _meta: {
-            bom: editData.bom,
-            encoding: editData.encoding,
-            lineEnding: editData.lineEnding
-          }
-        });
+        await writeRuntimeFile(
+          this.config,
+          {
+            path: this.params.file_path,
+            content: editData.newContent,
+            toolWriteOrigin: "edit",
+            _meta: {
+              bom: editData.bom,
+              encoding: editData.encoding,
+              lineEnding: editData.lineEnding
+            }
+          },
+          editData.sandboxFileVersion,
+          signal
+        );
       }
       if (!this.params.modified_by_user) {
         CommitAttributionService.getInstance().recordEdit(
@@ -815,7 +836,7 @@ ${snippetResult.content}`;
         returnDisplay: `Error writing file: ${errorMsg}`,
         error: {
           message: errorMsg,
-          type: "file_write_failure" /* FILE_WRITE_FAILURE */
+          type: isNodeError(error) && error.code === "ESTALE" && this.config.getShellExecutionSandbox?.() ? "file_changed_since_read" /* FILE_CHANGED_SINCE_READ */ : isNodeError(error) && error.code === "EISDIR" ? "target_is_directory" /* TARGET_IS_DIRECTORY */ : "file_write_failure" /* FILE_WRITE_FAILURE */
         }
       };
     }