@qwen-code/qwen-code 0.24.5-preview.0 → 0.24.5

package/chunks/{chunk-KY4HZXLV.js → chunk-GLPNIOEV.js}

@@ -43,6 +43,12 @@ function parseExecutionSandboxSettings(value) {
   return { ...value };
 }
 __name(parseExecutionSandboxSettings, "parseExecutionSandboxSettings");
+var FIRST_NON_V1_SETTINGS_VERSION = 2;
+function legacyUsageStatisticsEnabled(scope) {
+  const version = scope.$version;
+  return typeof version === "number" && version >= FIRST_NON_V1_SETTINGS_VERSION ? void 0 : scope.usageStatisticsEnabled;
+}
+__name(legacyUsageStatisticsEnabled, "legacyUsageStatisticsEnabled");
 function selectOperatorExecutionSandbox(...scopes) {
   let selected;
   for (const scope of scopes) {
@@ -53,8 +59,29 @@ function selectOperatorExecutionSandbox(...scopes) {
 }
 __name(selectOperatorExecutionSandbox, "selectOperatorExecutionSandbox");
 function readOperatorSandboxSettings() {
+  return sandboxSettingsFromScopes(readOperatorSettingsScopes());
+}
+__name(readOperatorSandboxSettings, "readOperatorSandboxSettings");
+function readBareModeOperatorSettings() {
+  const scopes = readOperatorSettingsScopes();
+  const usageStatisticsEnabled = scopes.reduce(
+    (current, scope) => {
+      const value = scope.privacy?.usageStatisticsEnabled ?? legacyUsageStatisticsEnabled(scope);
+      if (value === void 0 || value === null) return current;
+      if (typeof value === "boolean") return value;
+      return value ? current : false;
+    },
+    void 0
+  );
+  return {
+    ...sandboxSettingsFromScopes(scopes),
+    ...usageStatisticsEnabled === void 0 ? {} : { privacy: { usageStatisticsEnabled } }
+  };
+}
+__name(readBareModeOperatorSettings, "readBareModeOperatorSettings");
+function readOperatorSettingsScopes() {
   const userSettingsPath = path.join(getGlobalQwenDirLite(), "settings.json");
-  const scopes = [
+  return [
     getSystemDefaultsPath(),
     userSettingsPath,
     getSystemSettingsPath()
@@ -92,6 +119,9 @@ function readOperatorSandboxSettings() {
       );
     }
   });
+}
+__name(readOperatorSettingsScopes, "readOperatorSettingsScopes");
+function sandboxSettingsFromScopes(scopes) {
   const executionSandbox = selectOperatorExecutionSandbox(...scopes);
   const sandbox = scopes.reduce(
     (current, scope) => scope.tools?.sandbox ?? current,
@@ -99,7 +129,7 @@ function readOperatorSandboxSettings() {
   );
   return { tools: { executionSandbox, sandbox } };
 }
-__name(readOperatorSandboxSettings, "readOperatorSandboxSettings");
+__name(sandboxSettingsFromScopes, "sandboxSettingsFromScopes");
 function validateExecutionSandboxSelection(settings, args = {}) {
   const policy = parseExecutionSandboxSettings(
     settings.tools?.executionSandbox
@@ -133,6 +163,7 @@ export {
   parseExecutionSandboxSettings,
   selectOperatorExecutionSandbox,
   readOperatorSandboxSettings,
+  readBareModeOperatorSettings,
   validateExecutionSandboxSelection,
   assertExecutionSandboxSupported
 };

package/chunks/{chunk-6PRSQUPJ.js → chunk-GQZZGEMS.js}

@@ -2,7 +2,7 @@
 "use strict";
 import {
   getGlobalQwenDir
-} from "./chunk-YWZOEHBT.js";
+} from "./chunk-DE2WI7RU.js";
 import {
   init_esbuild_shims
 } from "./chunk-5O2XNYP6.js";

package/chunks/{chunk-G2AE7GYZ.js → chunk-GRUASRWC.js}

@@ -3,7 +3,7 @@
 import {
   SERVE_CONTROL_EXT_METHODS,
   STATUS_SCHEMA_VERSION
-} from "./chunk-RXB6Y33E.js";
+} from "./chunk-4VULJ3LV.js";
 import {
   AcpChildCapacityExceededError,
   WorkspaceDrainingError

package/chunks/{chunk-HH7R6RLK.js → chunk-GTQ35GRO.js}

@@ -6,7 +6,7 @@ import {
 import {
   getPlanRequiredTeammatePreApprovalMessage,
   isPlanRequiredTeammateAwaitingApproval
-} from "./chunk-47C3HPMW.js";
+} from "./chunk-O5YL6KSX.js";
 import {
   resolveActiveTeamName
 } from "./chunk-S6LOFUVP.js";

package/chunks/{chunk-LWRJLRZS.js → chunk-GYLDOFLU.js}

@@ -3,7 +3,7 @@
 import {
   getUserSettingsPath,
   v1ToV2Migration
-} from "./chunk-OQE7AA2W.js";
+} from "./chunk-36ZMEEBW.js";
 import {
   getSystemDefaultsPath,
   getSystemSettingsPath
@@ -13,7 +13,7 @@ import {
   TrustLevel,
   getExplicitTrustLevel,
   getTrustedFoldersPath
-} from "./chunk-JOFZBTVL.js";
+} from "./chunk-245NB3M4.js";
 import {
   arePathsEquivalent
 } from "./chunk-MR3PXB6E.js";
@@ -22,7 +22,7 @@ import {
 } from "./chunk-ALGGS7UH.js";
 import {
   ideContextStore
-} from "./chunk-RL2HSTEB.js";
+} from "./chunk-SYZPPX3O.js";
 import {
   init_esbuild_shims
 } from "./chunk-5O2XNYP6.js";

package/chunks/{chunk-MZRJ2JJS.js → chunk-HDSI3RDN.js}

@@ -11,7 +11,7 @@ import {
   isCacheableReadResult,
   parsePDFPageRange,
   processSingleFileContent
-} from "./chunk-NNN2PKPV.js";
+} from "./chunk-PYYPSK6Q.js";
 import {
   getCurrentToolCallSource
 } from "./chunk-CFMZLE3L.js";
@@ -21,6 +21,16 @@ import {
 import {
   runSideQuery
 } from "./chunk-GHKVBSBY.js";
+import {
+  TOOL_RESULT_MEDIA_REMEDY,
+  clampInlineMediaPart,
+  getMaxInlineMediaBytes
+} from "./chunk-Q4FJVWI4.js";
+import {
+  ImageViewError,
+  boundImageBuffer,
+  sniffBoundableImageMime
+} from "./chunk-CLNDQINM.js";
 import {
   INVOCATION_CONTEXT_META_KEY,
   getInvocationContext
@@ -34,7 +44,7 @@ import {
 } from "./chunk-XASQGHGO.js";
 import {
   defaultModalities
-} from "./chunk-4FCWKBOC.js";
+} from "./chunk-ALTMZEBU.js";
 import {
   safeJsonStringify
 } from "./chunk-HHJLM3WQ.js";
@@ -6087,9 +6097,9 @@ var DiscoveredMCPToolInvocation = class _DiscoveredMCPToolInvocation extends Bas
         clearTimeout(idleTimeoutId);
         idleTimeoutId = void 0;
       }
-      const rawResponseParts = wrapMcpCallToolResultAsParts(
-        this.serverToolName,
-        callToolResult
+      const rawResponseParts = await this.boundImages(
+        wrapMcpCallToolResultAsParts(this.serverToolName, callToolResult),
+        signal
       );
       if (this.isMCPToolError(rawResponseParts)) {
         return await this.buildMcpToolError(rawResponseParts, {
@@ -6097,7 +6107,9 @@ var DiscoveredMCPToolInvocation = class _DiscoveredMCPToolInvocation extends Bas
           args: this.params
         });
       }
-      const transformedParts = transformMcpContentToParts(rawResponseParts);
+      const transformedParts = await this.clampInlineMedia(
+        transformMcpContentToParts(rawResponseParts)
+      );
       const truncated = await this.truncateTextParts(transformedParts);
       const fallbackText = getDisplayFromPartsWithPersistedOutput(
         transformedParts,
@@ -6221,11 +6233,13 @@ var DiscoveredMCPToolInvocation = class _DiscoveredMCPToolInvocation extends Bas
       if (isParentAbortOutcome(outcome)) {
         throw outcome.reason;
       }
-      const rawResponseParts = outcome;
+      const rawResponseParts = await this.boundImages(outcome, signal);
       if (this.isMCPToolError(rawResponseParts)) {
         return await this.buildMcpToolError(rawResponseParts, functionCalls[0]);
       }
-      const transformedParts = transformMcpContentToParts(rawResponseParts);
+      const transformedParts = await this.clampInlineMedia(
+        transformMcpContentToParts(rawResponseParts)
+      );
       const truncated = await this.truncateTextParts(transformedParts);
       return {
         llmContent: truncated.parts,
@@ -6253,7 +6267,9 @@ var DiscoveredMCPToolInvocation = class _DiscoveredMCPToolInvocation extends Bas
     let errorMessage;
     let persistedOutputFiles;
     if (imageContent) {
-      const truncatedContent = await this.truncateTextParts(imageContent);
+      const truncatedContent = await this.truncateTextParts(
+        await this.clampInlineMedia(imageContent)
+      );
       llmContent = truncatedContent.parts;
       persistedOutputFiles = truncatedContent.persistedOutputFiles;
       errorMessage = `MCP tool '${this.serverToolName}' reported tool error for function call: ${safeJsonStringify(
@@ -6275,6 +6291,28 @@ var DiscoveredMCPToolInvocation = class _DiscoveredMCPToolInvocation extends Bas
       ...persistedOutputFiles !== void 0 ? { persistedOutputFiles } : {}
     };
   }
+  boundImages(rawResponseParts, signal) {
+    return boundMcpImageBlocks(
+      rawResponseParts,
+      signal,
+      `${this.serverName}/${this.serverToolName}`
+    );
+  }
+  async clampInlineMedia(parts) {
+    return clampMcpInlineMedia(parts, await this.isOmniMediaDeliveryActive());
+  }
+  /**
+   * Whether the omni funnel (`processToolResultOmniMedia`) takes over this
+   * result's image, audio and video parts. It uploads by reference under its
+   * own ceilings and bounds any part it keeps inline, so the inline clamp must
+   * not pre-empt it. `isOmniEnabled()` runs first so non-omni sessions skip
+   * the dynamic import, as in `fileUtils`.
+   */
+  async isOmniMediaDeliveryActive() {
+    if (!this.cliConfig?.isOmniEnabled?.()) return false;
+    const omni = await this.cliConfig.loadOmniMediaReader();
+    return omni.isOmniDeliveryActive(this.cliConfig);
+  }
   /**
    * Truncates text parts in the transformed result if they exceed the
    * configured threshold. Non-text parts (images, audio, etc.) are preserved.
@@ -6565,6 +6603,86 @@ function transformImageAudioBlock(block, toolName) {
   ];
 }
 __name(transformImageAudioBlock, "transformImageAudioBlock");
+async function boundMcpImageBlocks(rawResponseParts, signal, subject) {
+  const funcResponse = rawResponseParts?.[0]?.functionResponse;
+  const content = funcResponse?.response?.["content"];
+  if (!funcResponse || !Array.isArray(content)) return rawResponseParts;
+  const inlineByteCeiling = getMaxInlineMediaBytes();
+  let changed = false;
+  const boundedContent = [];
+  for (const block of content) {
+    const media = block.type === "image" ? { data: block.data, mimeType: block.mimeType } : block.type === "resource" && block.resource?.blob ? { data: block.resource.blob, mimeType: block.resource.mimeType } : void 0;
+    const sniffedMime = typeof media?.data === "string" ? sniffBoundableImageMime(
+      Buffer.from(media.data.slice(0, 16), "base64")
+    ) : null;
+    if (!media || !sniffedMime) {
+      boundedContent.push(block);
+      continue;
+    }
+    let bounded;
+    try {
+      const view = await boundImageBuffer(
+        Buffer.from(media.data, "base64"),
+        `${subject} ${sniffedMime}`,
+        signal,
+        inlineByteCeiling
+      );
+      bounded = view ? { data: view.bytes.toString("base64"), mimeType: view.mimeType } : { data: media.data, mimeType: sniffedMime };
+    } catch (error) {
+      if (!(error instanceof ImageViewError)) {
+        throw error;
+      }
+      const message = `Unable to bound MCP image from ${subject} (${media.mimeType}): ${getErrorMessage(error)}`;
+      if (error.code === "renderer_unavailable") {
+        debugLogger5.warn(message);
+      } else {
+        debugLogger5.debug(message);
+      }
+    }
+    if (!bounded || bounded.data === media.data && bounded.mimeType === media.mimeType) {
+      boundedContent.push(block);
+      continue;
+    }
+    changed = true;
+    boundedContent.push(
+      block.type === "resource" ? {
+        ...block,
+        resource: {
+          ...block.resource,
+          blob: bounded.data,
+          mimeType: bounded.mimeType
+        }
+      } : { ...block, ...bounded }
+    );
+  }
+  if (!changed) return rawResponseParts;
+  return [
+    {
+      ...rawResponseParts[0],
+      functionResponse: {
+        ...funcResponse,
+        response: { ...funcResponse.response, content: boundedContent }
+      }
+    },
+    ...rawResponseParts.slice(1)
+  ];
+}
+__name(boundMcpImageBlocks, "boundMcpImageBlocks");
+function clampMcpInlineMedia(parts, omniDeliveryActive) {
+  const inlineByteCeiling = getMaxInlineMediaBytes();
+  return parts.map((part) => {
+    const mimeType = part.inlineData?.mimeType;
+    if (!part.inlineData || omniDeliveryActive && /^(image|audio|video)\//.test(mimeType ?? "")) {
+      return part;
+    }
+    return clampInlineMediaPart(
+      part,
+      inlineByteCeiling,
+      TOOL_RESULT_MEDIA_REMEDY
+    );
+  });
+}
+__name(clampMcpInlineMedia, "clampMcpInlineMedia");
 function transformResourceBlock(block, toolName) {
   const resource = block.resource;
   if (resource?.text) {
@@ -6777,6 +6895,14 @@ var ToolCallEvent = class {
   function_name;
   function_args;
   duration_ms;
+  /**
+   * Epoch ms at which `duration_ms` started counting: when the call was
+   * scheduled, before any approval wait. Set only when the producer measured
+   * it. Readers must not derive it from `event.timestamp` instead — that is
+   * when the event was logged, which for a scheduled batch is after every
+   * call in the batch has settled.
+   */
+  started_at_ms;
   status;
   execution_status;
   success;
@@ -6801,6 +6927,7 @@ var ToolCallEvent = class {
     this.function_name = call.request.name;
     this.function_args = call.request.name === ToolNames.STRUCTURED_OUTPUT ? { ...STRUCTURED_OUTPUT_REDACTED_ARGS } : call.request.args;
     this.duration_ms = call.durationMs ?? 0;
+    if (call.startTime !== void 0) this.started_at_ms = call.startTime;
     this.status = call.status;
     this.execution_status = call.response.executionStatus;
     this.success = call.status === "success";

package/chunks/{chunk-RO5K7QUL.js → chunk-HHMJ5ONX.js}

@@ -9,30 +9,27 @@ import {
   formatContextFileDisplayPath,
   getMainSessionBaseSystemPrompt,
   stripTerminalControlSequences
-} from "./chunk-RL2HSTEB.js";
+} from "./chunk-SYZPPX3O.js";
 import {
   qualifySkillName
-} from "./chunk-TFBQ5CKI.js";
+} from "./chunk-QNEBHC2E.js";
 import {
   isMediaPolicyToolHiddenFromModel
 } from "./chunk-MNU36NGH.js";
-import {
-  resolveSlimmingConfig
-} from "./chunk-GC3J5W2O.js";
 import {
   DiscoveredMCPTool,
   uiTelemetryService
-} from "./chunk-MZRJ2JJS.js";
+} from "./chunk-HDSI3RDN.js";
+import {
+  resolveSlimmingConfig
+} from "./chunk-GC3J5W2O.js";
 import {
   DEFAULT_TOKEN_LIMIT
-} from "./chunk-4FCWKBOC.js";
+} from "./chunk-ALTMZEBU.js";
 import {
   buildAvailableSkillsReminder,
   getStartupContextLength
 } from "./chunk-MNK4GIGD.js";
-import {
-  buildSkillLlmContent
-} from "./chunk-A3E7JYX7.js";
 import {
   ToolNames
 } from "./chunk-RSWOFJBY.js";
@@ -320,20 +317,24 @@ function estimateFunctionResponseTokens(part, imageTokenEstimate) {
   return tokens;
 }
 __name(estimateFunctionResponseTokens, "estimateFunctionResponseTokens");
-function isBilledSkillBody(part, billedSkillBodies) {
+function consumeBilledSkillBody(part, billedSkillBodies) {
   if (billedSkillBodies.size === 0) return false;
   const output = part.functionResponse?.response?.output;
   if (typeof output !== "string") return false;
-  if (billedSkillBodies.has(output)) return true;
+  if (billedSkillBodies.delete(output)) return true;
   for (const body of billedSkillBodies) {
     if (output.startsWith(`${body}
-`)) return true;
+`)) {
+      billedSkillBodies.delete(body);
+      return true;
+    }
   }
   return false;
 }
-__name(isBilledSkillBody, "isBilledSkillBody");
+__name(consumeBilledSkillBody, "consumeBilledSkillBody");
 function estimateConversationTokens(conversation, billing) {
   let tokens = 0;
+  const remainingSkillBodies = new Set(billing.billedSkillBodies);
   for (const content of conversation) {
     for (const part of content.parts ?? []) {
       if (typeof part.text === "string") {
@@ -344,7 +345,7 @@ function estimateConversationTokens(conversation, billing) {
       } else if (part.functionCall) {
         tokens += estimateContextTextTokens(JSON.stringify(part.functionCall));
       } else if (part.functionResponse) {
-        if (part.functionResponse.name === ToolNames.SKILL && isBilledSkillBody(part, billing.billedSkillBodies)) {
+        if (part.functionResponse.name === ToolNames.SKILL && consumeBilledSkillBody(part, remainingSkillBodies)) {
           continue;
         }
         tokens += estimateFunctionResponseTokens(
@@ -417,7 +418,18 @@ async function collectContextData(config, showDetails) {
   const memoryFilesTokens = memoryFiles.reduce((sum, f) => sum + f.tokens, 0);
   const skillTool = allTools.find((tool) => tool.name === ToolNames.SKILL);
   const skillToolDefinitionTokens = skillTool ? estimateContextTextTokens(JSON.stringify(skillTool.schema)) : 0;
-  const loadedSkillNames = skillTool && "getLoadedSkillNames" in skillTool ? skillTool.getLoadedSkillNames() : /* @__PURE__ */ new Set();
+  const loadedContentNames = skillTool && "getLoadedSkillContentNames" in skillTool ? skillTool.getLoadedSkillContentNames() : /* @__PURE__ */ new Map();
+  const bodyTokensByName = /* @__PURE__ */ new Map();
+  for (const [content, name] of loadedContentNames) {
+    bodyTokensByName.set(
+      name,
+      (bodyTokensByName.get(name) ?? 0) + estimateContextTextTokens(content)
+    );
+  }
+  const loadedBodiesTokens = [...bodyTokensByName.values()].reduce(
+    (sum, tokens) => sum + tokens,
+    0
+  );
   const skillManager = config.getSkillManager();
   const skillConfigs = skillManager ? await skillManager.listSkills() : [];
   const enabledSkillNames = new Set(
@@ -431,19 +443,11 @@ async function collectContextData(config, showDetails) {
     }
   }
   mergeSkillListing(skillListing, tailSkillListings.listing);
-  let loadedBodiesTokens = 0;
-  const billedSkillBodies = /* @__PURE__ */ new Set();
+  const billedSkillBodies = new Set(loadedContentNames.keys());
   const skills = skillConfigs.map((skill) => {
     const listingTokens = skillListing.byName.get(skill.name.toLowerCase())?.tokens ?? 0;
-    const isLoaded = loadedSkillNames.has(skill.name);
-    let bodyTokens;
-    if (isLoaded && skill.body) {
-      const baseDir = skill.filePath ? path.dirname(skill.filePath) : "";
-      const body = buildSkillLlmContent(baseDir, skill.body);
-      bodyTokens = estimateContextTextTokens(body);
-      loadedBodiesTokens += bodyTokens;
-      billedSkillBodies.add(body);
-    }
+    const bodyTokens = bodyTokensByName.get(skill.name);
+    const isLoaded = bodyTokens !== void 0;
     return {
       name: skill.name,
       tokens: listingTokens,
@@ -451,7 +455,18 @@ async function collectContextData(config, showDetails) {
       bodyTokens
     };
   });
-  const rowedNames = new Set(skillConfigs.map((s) => s.name.toLowerCase()));
+  const discoveredNames = new Set(skillConfigs.map((skill) => skill.name));
+  for (const [name, bodyTokens] of bodyTokensByName) {
+    if (!discoveredNames.has(name)) {
+      skills.push({
+        name,
+        tokens: skillListing.byName.get(name.toLowerCase())?.tokens ?? 0,
+        loaded: true,
+        bodyTokens
+      });
+    }
+  }
+  const rowedNames = new Set(skills.map((s) => s.name.toLowerCase()));
   for (const [key, entry] of skillListing.byName) {
     if (rowedNames.has(key)) continue;
     rowedNames.add(key);
@@ -587,7 +602,7 @@ async function collectContextData(config, showDetails) {
     mcpTools: showDetails ? detailMcpTools : [],
     memoryFiles: showDetails ? detailMemoryFiles : [],
     skills: showDetails ? detailSkills.filter(
-      (skill) => enabledSkillNames.has(skill.name.toLowerCase())
+      (skill) => skill.loaded || enabledSkillNames.has(skill.name.toLowerCase())
     ) : [],
     isEstimated,
     showDetails
@@ -751,9 +766,8 @@ function formatContextUsageText(data) {
       lines.push("");
       lines.push("**Skills**");
       for (const skill of sortedSkills) {
-        const label = skill.loaded ? `${skill.name} (active)` : skill.name;
         lines.push(
-          fmtCategoryRow(label, skill.tokens, contextWindowSize, "  \u2514 ")
+          fmtCategoryRow(skill.name, skill.tokens, contextWindowSize, "  \u2514 ")
         );
         if (skill.loaded && skill.bodyTokens && skill.bodyTokens > 0) {
           lines.push(

package/chunks/{chunk-E4HNTYHK.js → chunk-HVVQYSBA.js}

@@ -1,20 +1,21 @@
 // Force strict mode and setup for ESM
 "use strict";
 import {
-  multiSessionCompatibilityError
-} from "./chunk-MVC4XLNM.js";
+  multiSessionCompatibilityError,
+  parseMessageRoutingConfig
+} from "./chunk-53IRNMPU.js";
 import {
   UNSAFE_OBJECT_KEYS,
   getPlugin
-} from "./chunk-VPALWDQL.js";
+} from "./chunk-VUIH3BQL.js";
 import {
   CHANNEL_OUTPUT_MODE_FIELD,
   parseChannelOutputMode
-} from "./chunk-YWZOEHBT.js";
+} from "./chunk-DE2WI7RU.js";
 import {
   loadSettings,
   saveSettings
-} from "./chunk-OQE7AA2W.js";
+} from "./chunk-36ZMEEBW.js";
 import {
   init_esbuild_shims
 } from "./chunk-5O2XNYP6.js";
@@ -101,13 +102,22 @@ function assertStringRecord(key, value, allowedKeys) {
 }
 __name(assertStringRecord, "assertStringRecord");
 function assertSharedField(key, value, previous) {
+  if (key === "messageRoutes" || key === "defaultMessageRoute") {
+    return true;
+  }
   if (key === "multiSession") {
     if (typeof value !== "boolean") {
       throw invalidConfig(`Channel field "${key}" must be a boolean.`);
     }
     return true;
   }
+  if (key === "groupSenderPolicy" || key === "allowedGroupUsers") {
+    throw invalidConfig(
+      `Channel field "${key}" moved to groups["*"].${key === "groupSenderPolicy" ? "senders" : "allowedUsers"}.`
+    );
+  }
   const enumValues = {
+    privatePolicy: /* @__PURE__ */ new Set(["disabled", "allowlist", "pairing", "open"]),
     senderPolicy: /* @__PURE__ */ new Set(["allowlist", "pairing", "open"]),
     dmPolicy: /* @__PURE__ */ new Set(["open", "disabled"]),
     groupPolicy: /* @__PURE__ */ new Set(["disabled", "allowlist", "pairing", "open"]),
@@ -126,7 +136,7 @@ function assertSharedField(key, value, previous) {
     }
     return true;
   }
-  if (key === "allowedUsers") {
+  if (key === "allowedUsers" || key === "operators") {
     if (!Array.isArray(value) || value.some((item) => typeof item !== "string")) {
       throw invalidConfig(`Channel field "${key}" must be a string array.`);
     }
@@ -149,10 +159,12 @@ function assertSharedField(key, value, previous) {
         const known = [
           "requireMention",
           "dispatchMode",
-          "groupHistoryLimit"
+          "groupHistoryLimit",
+          "senders",
+          "allowedUsers"
         ].includes(nestedKey);
-        const valid = nestedKey === "requireMention" && typeof nestedValue === "boolean" || nestedKey === "dispatchMode" && typeof nestedValue === "string" && ["collect", "steer", "followup"].includes(nestedValue) || nestedKey === "groupHistoryLimit" && typeof nestedValue === "number" && Number.isFinite(nestedValue);
-        if (known && !valid && !(Object.hasOwn(previousGroup, nestedKey) && isDeepStrictEqual(previousGroup[nestedKey], nestedValue) && !containsUnsafeObjectKey(nestedValue))) {
+        const valid = nestedKey === "requireMention" && typeof nestedValue === "boolean" || nestedKey === "dispatchMode" && typeof nestedValue === "string" && ["collect", "steer", "followup"].includes(nestedValue) || nestedKey === "groupHistoryLimit" && typeof nestedValue === "number" && Number.isFinite(nestedValue) || nestedKey === "senders" && typeof nestedValue === "string" && ["open", "allowlist"].includes(nestedValue) || nestedKey === "allowedUsers" && Array.isArray(nestedValue) && nestedValue.every((item) => typeof item === "string");
+        if (known && !valid && !(nestedKey !== "senders" && Object.hasOwn(previousGroup, nestedKey) && isDeepStrictEqual(previousGroup[nestedKey], nestedValue) && !containsUnsafeObjectKey(nestedValue))) {
           throw invalidConfig(
             `Channel field "${key}.${groupId}.${nestedKey}" is invalid.`
           );
@@ -458,6 +470,17 @@ var WorkspaceChannelSettingsStore = class {
       webhooks: nextConfig["webhooks"]
     });
     if (multiSessionError) throw invalidConfig(multiSessionError);
+    try {
+      const routing = parseMessageRoutingConfig(name, nextConfig);
+      if (routing.messageRoutes !== void 0)
+        nextConfig["messageRoutes"] = routing.messageRoutes;
+      if (routing.defaultMessageRoute !== void 0)
+        nextConfig["defaultMessageRoute"] = routing.defaultMessageRoute;
+    } catch (error) {
+      throw invalidConfig(
+        error instanceof Error ? error.message : String(error)
+      );
+    }
     let crossFieldError;
     try {
       crossFieldError = plugin.management.validateConfig?.(nextConfig);