@qwen-code/qwen-code 0.7.0-nightly.20260111.bde31d12 → 0.7.0-nightly.20260113.09196c6e

package/cli.js

@@ -33912,7 +33912,7 @@ var require_src5 = __commonJS({
       };
     }
     __name(_asyncToGenerator, "_asyncToGenerator");
-    var readFile12 = fs100.readFile ? (0, _util.promisify)(fs100.readFile) : /* @__PURE__ */ _asyncToGenerator(/* @__PURE__ */ _regenerator().m(/* @__PURE__ */ __name(function _callee() {
+    var readFile11 = fs100.readFile ? (0, _util.promisify)(fs100.readFile) : /* @__PURE__ */ _asyncToGenerator(/* @__PURE__ */ _regenerator().m(/* @__PURE__ */ __name(function _callee() {
       return _regenerator().w(function(_context) {
         while (1) switch (_context.n) {
           case 0:
@@ -34054,7 +34054,7 @@ var require_src5 = __commonJS({
                   break;
                 case 1:
                   _context2.n = 2;
-                  return readFile12(keyFile, "utf8");
+                  return readFile11(keyFile, "utf8");
                 case 2:
                   key = _context2.v;
                   body = JSON.parse(key);
@@ -34072,7 +34072,7 @@ var require_src5 = __commonJS({
                   });
                 case 4:
                   _context2.n = 5;
-                  return readFile12(keyFile, "utf8");
+                  return readFile11(keyFile, "utf8");
                 case 5:
                   _privateKey = _context2.v;
                   return _context2.a(2, {
@@ -35710,7 +35710,7 @@ var require_filesubjecttokensupplier = __commonJS({
     exports2.FileSubjectTokenSupplier = void 0;
     var util_1 = __require("util");
     var fs100 = __require("fs");
-    var readFile12 = (0, util_1.promisify)(fs100.readFile ?? (() => {
+    var readFile11 = (0, util_1.promisify)(fs100.readFile ?? (() => {
     }));
     var realpath2 = (0, util_1.promisify)(fs100.realpath ?? (() => {
     }));
@@ -35753,7 +35753,7 @@ var require_filesubjecttokensupplier = __commonJS({
           throw err;
         }
         let subjectToken;
-        const rawText = await readFile12(parsedFilePath, { encoding: "utf8" });
+        const rawText = await readFile11(parsedFilePath, { encoding: "utf8" });
         if (this.formatType === "text") {
           subjectToken = rawText;
         } else if (this.formatType === "json" && this.subjectTokenFieldName) {
@@ -81203,7 +81203,7 @@ var require_error = __commonJS({
     init_esbuild_shims();
     Object.defineProperty(exports2, "__esModule", { value: true });
     exports2.getErrorMessage = getErrorMessage4;
-    exports2.getErrorCode = getErrorCode;
+    exports2.getErrorCode = getErrorCode2;
     function getErrorMessage4(error2) {
       if (error2 instanceof Error) {
         return error2.message;
@@ -81212,14 +81212,14 @@ var require_error = __commonJS({
       }
     }
     __name(getErrorMessage4, "getErrorMessage");
-    function getErrorCode(error2) {
+    function getErrorCode2(error2) {
       if (typeof error2 === "object" && error2 !== null && "code" in error2 && typeof error2.code === "number") {
         return error2.code;
       } else {
         return null;
       }
     }
-    __name(getErrorCode, "getErrorCode");
+    __name(getErrorCode2, "getErrorCode");
   }
 });
 
@@ -123464,8 +123464,8 @@ var require_async = __commonJS({
         cb(null, x3);
       }
     }, "maybeRealpath");
-    var defaultReadPackage = /* @__PURE__ */ __name(function defaultReadPackage2(readFile12, pkgfile, cb) {
-      readFile12(pkgfile, function(readFileErr, body) {
+    var defaultReadPackage = /* @__PURE__ */ __name(function defaultReadPackage2(readFile11, pkgfile, cb) {
+      readFile11(pkgfile, function(readFileErr, body) {
         if (readFileErr) cb(readFileErr);
         else {
           try {
@@ -123500,7 +123500,7 @@ var require_async = __commonJS({
       opts = normalizeOptions(x3, opts);
       var isFile3 = opts.isFile || defaultIsFile;
       var isDirectory = opts.isDirectory || defaultIsDir;
-      var readFile12 = opts.readFile || fs100.readFile;
+      var readFile11 = opts.readFile || fs100.readFile;
       var realpath2 = opts.realpath || defaultRealpath;
       var readPackage2 = opts.readPackage || defaultReadPackage;
       if (opts.readFile && opts.readPackage) {
@@ -123626,7 +123626,7 @@ var require_async = __commonJS({
           var pkgfile = path111.join(pkgdir, "package.json");
           isFile3(pkgfile, function(err2, ex) {
             if (!ex) return loadpkg(path111.dirname(dir), cb2);
-            readPackage2(readFile12, pkgfile, function(err3, pkgParam) {
+            readPackage2(readFile11, pkgfile, function(err3, pkgParam) {
               if (err3) cb2(err3);
               var pkg2 = pkgParam;
               if (pkg2 && opts.packageFilter) {
@@ -123651,7 +123651,7 @@ var require_async = __commonJS({
           isFile3(pkgfile, function(err2, ex) {
             if (err2) return cb2(err2);
             if (!ex) return loadAsFile(path111.join(x4, "index"), fpkg, cb2);
-            readPackage2(readFile12, pkgfile, function(err3, pkgParam) {
+            readPackage2(readFile11, pkgfile, function(err3, pkgParam) {
               if (err3) return cb2(err3);
               var pkg2 = pkgParam;
               if (pkg2 && opts.packageFilter) {
@@ -142694,6 +142694,154 @@ var init_open = __esm({
   }
 });
 
+// packages/core/dist/src/utils/fetch.js
+import { URL as URL2 } from "node:url";
+function isPrivateIp(url2) {
+  try {
+    const hostname4 = new URL2(url2).hostname;
+    return PRIVATE_IP_RANGES.some((range) => range.test(hostname4));
+  } catch (_e2) {
+    return false;
+  }
+}
+async function fetchWithTimeout(url2, timeout2) {
+  const controller = new AbortController();
+  const timeoutId = setTimeout(() => controller.abort(), timeout2);
+  try {
+    const response = await fetch(url2, { signal: controller.signal });
+    return response;
+  } catch (error2) {
+    if (isNodeError(error2) && error2.code === "ABORT_ERR") {
+      throw new FetchError2(`Request timed out after ${timeout2}ms`, "ETIMEDOUT");
+    }
+    throw new FetchError2(getErrorMessage(error2));
+  } finally {
+    clearTimeout(timeoutId);
+  }
+}
+function getErrorCode(error2) {
+  if (!error2 || typeof error2 !== "object") {
+    return void 0;
+  }
+  if ("code" in error2 && typeof error2["code"] === "string") {
+    return error2["code"];
+  }
+  return void 0;
+}
+function formatUnknownErrorMessage(error2) {
+  if (typeof error2 === "string") {
+    return error2;
+  }
+  if (typeof error2 === "number" || typeof error2 === "boolean" || typeof error2 === "bigint") {
+    return String(error2);
+  }
+  if (error2 instanceof Error) {
+    return error2.message;
+  }
+  if (!error2 || typeof error2 !== "object") {
+    return void 0;
+  }
+  const message = error2["message"];
+  if (typeof message === "string") {
+    return message;
+  }
+  return void 0;
+}
+function formatErrorCause(error2) {
+  if (!(error2 instanceof Error)) {
+    return void 0;
+  }
+  const cause = error2.cause;
+  if (!cause) {
+    return void 0;
+  }
+  const causeCode = getErrorCode(cause);
+  const causeMessage = formatUnknownErrorMessage(cause);
+  if (!causeCode && !causeMessage) {
+    return void 0;
+  }
+  if (causeCode && causeMessage && !causeMessage.includes(causeCode)) {
+    return `${causeCode}: ${causeMessage}`;
+  }
+  return causeMessage ?? causeCode;
+}
+function formatFetchErrorForUser(error2, options2 = {}) {
+  const errorMessage = getErrorMessage(error2);
+  const code2 = error2 instanceof Error ? getErrorCode(error2.cause) ?? getErrorCode(error2) : getErrorCode(error2);
+  const cause = formatErrorCause(error2);
+  const fullErrorMessage = [
+    errorMessage,
+    cause ? `(cause: ${cause})` : void 0
+  ].filter(Boolean).join(" ");
+  const shouldShowFetchHints = errorMessage.toLowerCase().includes("fetch failed") || code2 != null && FETCH_TROUBLESHOOTING_ERROR_CODES.has(code2);
+  const shouldShowTlsHint = code2 != null && TLS_ERROR_CODES.has(code2);
+  if (!shouldShowFetchHints) {
+    return fullErrorMessage;
+  }
+  const hintLines = [
+    "",
+    "Troubleshooting:",
+    ...options2.url ? [`- Confirm you can reach ${options2.url} from this machine.`] : [],
+    "- If you are behind a proxy, pass `--proxy <url>` (or set `proxy` in settings).",
+    ...shouldShowTlsHint ? [
+      "- If your network uses a corporate TLS inspection CA, set `NODE_EXTRA_CA_CERTS` to your CA bundle."
+    ] : []
+  ];
+  return `${fullErrorMessage}${hintLines.join("\n")}`;
+}
+var PRIVATE_IP_RANGES, TLS_ERROR_CODES, FETCH_TROUBLESHOOTING_ERROR_CODES, FetchError2;
+var init_fetch = __esm({
+  "packages/core/dist/src/utils/fetch.js"() {
+    "use strict";
+    init_esbuild_shims();
+    init_errors();
+    PRIVATE_IP_RANGES = [
+      /^10\./,
+      /^127\./,
+      /^172\.(1[6-9]|2[0-9]|3[0-1])\./,
+      /^192\.168\./,
+      /^::1$/,
+      /^fc00:/,
+      /^fe80:/
+    ];
+    TLS_ERROR_CODES = /* @__PURE__ */ new Set([
+      "UNABLE_TO_GET_ISSUER_CERT_LOCALLY",
+      "UNABLE_TO_VERIFY_LEAF_SIGNATURE",
+      "SELF_SIGNED_CERT_IN_CHAIN",
+      "DEPTH_ZERO_SELF_SIGNED_CERT",
+      "CERT_HAS_EXPIRED",
+      "ERR_TLS_CERT_ALTNAME_INVALID"
+    ]);
+    FETCH_TROUBLESHOOTING_ERROR_CODES = /* @__PURE__ */ new Set([
+      ...TLS_ERROR_CODES,
+      "ECONNRESET",
+      "ETIMEDOUT",
+      "ECONNREFUSED",
+      "ENOTFOUND",
+      "EAI_AGAIN",
+      "EHOSTUNREACH",
+      "ENETUNREACH"
+    ]);
+    FetchError2 = class extends Error {
+      static {
+        __name(this, "FetchError");
+      }
+      code;
+      constructor(message, code2) {
+        super(message);
+        this.code = code2;
+        this.name = "FetchError";
+      }
+    };
+    __name(isPrivateIp, "isPrivateIp");
+    __name(fetchWithTimeout, "fetchWithTimeout");
+    __name(getErrorCode, "getErrorCode");
+    __name(formatUnknownErrorMessage, "formatUnknownErrorMessage");
+    __name(formatErrorCause, "formatErrorCause");
+    __name(formatFetchErrorForUser, "formatFetchErrorForUser");
+  }
+});
+
 // packages/core/dist/src/qwen/sharedTokenManager.js
 import path8 from "node:path";
 import { promises as fs12, unlinkSync } from "node:fs";
@@ -143480,8 +143628,11 @@ Server requested to slow down, increasing poll interval to ${pollInterval}ms'`);
     console.error("\n" + timeoutMessage);
     return { success: false, reason: "timeout", message: timeoutMessage };
   } catch (error2) {
-    const errorMessage = error2 instanceof Error ? error2.message : String(error2);
-    const message = `Device authorization flow failed: ${errorMessage}`;
+    const fullErrorMessage = formatFetchErrorForUser(error2, {
+      url: QWEN_OAUTH_BASE_URL
+    });
+    const message = `Device authorization flow failed: ${fullErrorMessage}`;
+    qwenOAuth2Events.emit(QwenOAuth2Event.AuthProgress, "error", message);
     console.error(message);
     return { success: false, reason: "error", message };
   } finally {
@@ -143529,6 +143680,7 @@ var init_qwenOAuth2 = __esm({
     "use strict";
     init_esbuild_shims();
     init_open();
+    init_fetch();
     init_sharedTokenManager();
     QWEN_OAUTH_BASE_URL = "https://chat.qwen.ai";
     QWEN_OAUTH_DEVICE_CODE_ENDPOINT = `${QWEN_OAUTH_BASE_URL}/api/v1/oauth2/device/code`;
@@ -155198,7 +155350,7 @@ __export(geminiContentGenerator_exports, {
   createGeminiContentGenerator: () => createGeminiContentGenerator
 });
 function createGeminiContentGenerator(config2, gcConfig) {
-  const version2 = "0.7.0-nightly.20260111.bde31d12";
+  const version2 = "0.7.0-nightly.20260113.09196c6e";
   const userAgent2 = config2.userAgent || `QwenCode/${version2} (${process.platform}; ${process.arch})`;
   const baseHeaders = {
     "User-Agent": userAgent2
@@ -170155,7 +170307,8 @@ var init_shellExecutionService = __esm({
             stdio: ["ignore", "pipe", "pipe"],
             windowsVerbatimArguments: true,
             shell: isWindows8 ? true : "bash",
-            detached: true,
+            detached: !isWindows8,
+            windowsHide: isWindows8,
             env: {
               ...process.env,
               QWEN_CODE: "1",
@@ -188646,7 +188799,7 @@ function gitInstanceFactory(baseDir, options2) {
   customBinaryPlugin(plugins, config2.binary, config2.unsafe?.allowUnsafeCustomBinary);
   return new Git(config2, plugins);
 }
-var import_file_exists, import_debug, import_promise_deferred, import_promise_deferred2, __defProp2, __getOwnPropDesc2, __getOwnPropNames2, __hasOwnProp2, __esm2, __commonJS2, __export2, __copyProps2, __toCommonJS2, cache, init_pathspec, GitError, init_git_error, GitResponseError, init_git_response_error, TaskConfigurationError, init_task_configuration_error, NULL2, NOOP, objectToString, init_util3, filterArray, filterString, filterStringArray, filterStringOrStringArray, filterHasLength, init_argument_filters, ExitCodes, init_exit_codes, GitOutputStreams, init_git_output_streams, LineParser, RemoteLineParser, init_line_parser, defaultOptions2, init_simple_git_options, init_task_options, init_task_parser, utils_exports, init_utils6, check_is_repo_exports, CheckRepoActions, onError, parser, init_check_is_repo, CleanResponse, removalRegexp, dryRunRemovalRegexp, isFolderRegexp, init_CleanSummary, task_exports, EMPTY_COMMANDS, init_task2, clean_exports, CONFIG_ERROR_INTERACTIVE_MODE, CONFIG_ERROR_MODE_REQUIRED, CONFIG_ERROR_UNKNOWN_OPTION, CleanOptions, CleanOptionValues, init_clean, ConfigList, init_ConfigList, GitConfigScope, init_config2, DiffNameStatus, diffNameStatus, init_diff_name_status, disallowedOptions, Query, _a4, GrepQuery, init_grep, reset_exports, ResetMode, ResetModes, init_reset, init_git_logger, TasksPendingQueue, init_tasks_pending_queue, GitExecutorChain, init_git_executor_chain, git_executor_exports, GitExecutor, init_git_executor, init_task_callback, init_change_working_directory, init_checkout, parser2, init_count_objects, parsers, init_parse_commit, init_commit, init_first_commit, init_hash_object, InitSummary, initResponseRegex, reInitResponseRegex, init_InitSummary, bareCommand, init_init, logFormatRegex, init_log_format, DiffSummary, init_DiffSummary, statParser, numStatParser, nameOnlyParser, nameStatusParser, diffSummaryParsers, init_parse_diff_summary, START_BOUNDARY, COMMIT_BOUNDARY, SPLITTER, defaultFieldNames, init_parse_list_log_summary, diff_exports, init_diff, excludeOptions, init_log2, MergeSummaryConflict, MergeSummaryDetail, init_MergeSummary, PullSummary, PullFailedSummary, init_PullSummary, remoteMessagesObjectParsers, init_parse_remote_objects, parsers2, RemoteMessageSummary, init_parse_remote_messages, FILE_UPDATE_REGEX, SUMMARY_REGEX, ACTION_REGEX, parsers3, errorParsers, parsePullDetail, parsePullResult, init_parse_pull, parsers4, parseMergeResult, parseMergeDetail, init_parse_merge, init_merge, parsers5, parsePushResult, parsePushDetail, init_parse_push, push_exports, init_push, init_show, fromPathRegex, FileStatusSummary, init_FileStatusSummary, StatusSummary, parsers6, parseStatusSummary, init_StatusSummary, ignoredOptions, init_status2, NOT_INSTALLED, parsers7, init_version4, simple_git_api_exports, SimpleGitApi, init_simple_git_api, scheduler_exports, createScheduledTask, Scheduler, init_scheduler, apply_patch_exports, init_apply_patch, BranchDeletionBatch, init_BranchDeleteSummary, deleteSuccessRegex, deleteErrorRegex, parsers8, parseBranchDeletions, init_parse_branch_delete, BranchSummaryResult, init_BranchSummary, parsers9, init_parse_branch, branch_exports, init_branch, parseCheckIgnore, init_CheckIgnore, check_ignore_exports, init_check_ignore, clone_exports, init_clone, parsers10, init_parse_fetch, fetch_exports, init_fetch, parsers11, init_parse_move, move_exports, init_move, pull_exports, init_pull, init_GetRemoteSummary, remote_exports, init_remote, stash_list_exports, init_stash_list, sub_module_exports, init_sub_module, TagList, parseTagList, init_TagList, tag_exports, init_tag, require_git, GitConstructError, GitPluginError, never, WRONG_NUMBER_ERR, WRONG_CHARS_ERR, PluginStore, Git, simpleGit;
+var import_file_exists, import_debug, import_promise_deferred, import_promise_deferred2, __defProp2, __getOwnPropDesc2, __getOwnPropNames2, __hasOwnProp2, __esm2, __commonJS2, __export2, __copyProps2, __toCommonJS2, cache, init_pathspec, GitError, init_git_error, GitResponseError, init_git_response_error, TaskConfigurationError, init_task_configuration_error, NULL2, NOOP, objectToString, init_util3, filterArray, filterString, filterStringArray, filterStringOrStringArray, filterHasLength, init_argument_filters, ExitCodes, init_exit_codes, GitOutputStreams, init_git_output_streams, LineParser, RemoteLineParser, init_line_parser, defaultOptions2, init_simple_git_options, init_task_options, init_task_parser, utils_exports, init_utils6, check_is_repo_exports, CheckRepoActions, onError, parser, init_check_is_repo, CleanResponse, removalRegexp, dryRunRemovalRegexp, isFolderRegexp, init_CleanSummary, task_exports, EMPTY_COMMANDS, init_task2, clean_exports, CONFIG_ERROR_INTERACTIVE_MODE, CONFIG_ERROR_MODE_REQUIRED, CONFIG_ERROR_UNKNOWN_OPTION, CleanOptions, CleanOptionValues, init_clean, ConfigList, init_ConfigList, GitConfigScope, init_config2, DiffNameStatus, diffNameStatus, init_diff_name_status, disallowedOptions, Query, _a4, GrepQuery, init_grep, reset_exports, ResetMode, ResetModes, init_reset, init_git_logger, TasksPendingQueue, init_tasks_pending_queue, GitExecutorChain, init_git_executor_chain, git_executor_exports, GitExecutor, init_git_executor, init_task_callback, init_change_working_directory, init_checkout, parser2, init_count_objects, parsers, init_parse_commit, init_commit, init_first_commit, init_hash_object, InitSummary, initResponseRegex, reInitResponseRegex, init_InitSummary, bareCommand, init_init, logFormatRegex, init_log_format, DiffSummary, init_DiffSummary, statParser, numStatParser, nameOnlyParser, nameStatusParser, diffSummaryParsers, init_parse_diff_summary, START_BOUNDARY, COMMIT_BOUNDARY, SPLITTER, defaultFieldNames, init_parse_list_log_summary, diff_exports, init_diff, excludeOptions, init_log2, MergeSummaryConflict, MergeSummaryDetail, init_MergeSummary, PullSummary, PullFailedSummary, init_PullSummary, remoteMessagesObjectParsers, init_parse_remote_objects, parsers2, RemoteMessageSummary, init_parse_remote_messages, FILE_UPDATE_REGEX, SUMMARY_REGEX, ACTION_REGEX, parsers3, errorParsers, parsePullDetail, parsePullResult, init_parse_pull, parsers4, parseMergeResult, parseMergeDetail, init_parse_merge, init_merge, parsers5, parsePushResult, parsePushDetail, init_parse_push, push_exports, init_push, init_show, fromPathRegex, FileStatusSummary, init_FileStatusSummary, StatusSummary, parsers6, parseStatusSummary, init_StatusSummary, ignoredOptions, init_status2, NOT_INSTALLED, parsers7, init_version4, simple_git_api_exports, SimpleGitApi, init_simple_git_api, scheduler_exports, createScheduledTask, Scheduler, init_scheduler, apply_patch_exports, init_apply_patch, BranchDeletionBatch, init_BranchDeleteSummary, deleteSuccessRegex, deleteErrorRegex, parsers8, parseBranchDeletions, init_parse_branch_delete, BranchSummaryResult, init_BranchSummary, parsers9, init_parse_branch, branch_exports, init_branch, parseCheckIgnore, init_CheckIgnore, check_ignore_exports, init_check_ignore, clone_exports, init_clone, parsers10, init_parse_fetch, fetch_exports, init_fetch2, parsers11, init_parse_move, move_exports, init_move, pull_exports, init_pull, init_GetRemoteSummary, remote_exports, init_remote, stash_list_exports, init_stash_list, sub_module_exports, init_sub_module, TagList, parseTagList, init_TagList, tag_exports, init_tag, require_git, GitConstructError, GitPluginError, never, WRONG_NUMBER_ERR, WRONG_CHARS_ERR, PluginStore, Git, simpleGit;
 var init_esm12 = __esm({
   "node_modules/simple-git/dist/esm/index.js"() {
     init_esbuild_shims();
@@ -190860,7 +191013,7 @@ var init_esm12 = __esm({
     });
     __name(disallowedCommand2, "disallowedCommand2");
     __name(fetchTask, "fetchTask");
-    init_fetch = __esm2({
+    init_fetch2 = __esm2({
       "src/lib/tasks/fetch.ts"() {
         "use strict";
         init_parse_fetch();
@@ -191048,7 +191201,7 @@ var init_esm12 = __esm({
         var { cloneTask: cloneTask2, cloneMirrorTask: cloneMirrorTask2 } = (init_clone(), __toCommonJS2(clone_exports));
         var { cleanWithOptionsTask: cleanWithOptionsTask2, isCleanOptionsArray: isCleanOptionsArray2 } = (init_clean(), __toCommonJS2(clean_exports));
         var { diffSummaryTask: diffSummaryTask2 } = (init_diff(), __toCommonJS2(diff_exports));
-        var { fetchTask: fetchTask2 } = (init_fetch(), __toCommonJS2(fetch_exports));
+        var { fetchTask: fetchTask2 } = (init_fetch2(), __toCommonJS2(fetch_exports));
         var { moveTask: moveTask2 } = (init_move(), __toCommonJS2(move_exports));
         var { pullTask: pullTask2 } = (init_pull(), __toCommonJS2(pull_exports));
         var { pushTagsTask: pushTagsTask2 } = (init_push(), __toCommonJS2(push_exports));
@@ -208642,11 +208795,11 @@ var init_sdk_control_client_transport = __esm({
 import { execFile as execFile9 } from "node:child_process";
 import { promisify as promisify7 } from "node:util";
 import { platform as platform4 } from "node:os";
-import { URL as URL2 } from "node:url";
+import { URL as URL3 } from "node:url";
 function validateUrl(url2) {
   let parsedUrl;
   try {
-    parsedUrl = new URL2(url2);
+    parsedUrl = new URL3(url2);
   } catch (_error) {
     throw new Error(`Invalid URL: ${url2}`);
   }
@@ -209608,7 +209761,7 @@ var init_oauth_utils = __esm({
 // packages/core/dist/src/mcp/oauth-provider.js
 import * as http4 from "node:http";
 import * as crypto11 from "node:crypto";
-import { URL as URL3 } from "node:url";
+import { URL as URL4 } from "node:url";
 var OAUTH_DISPLAY_MESSAGE_EVENT, HTTP_OK, MCPOAuthProvider;
 var init_oauth_provider = __esm({
   "packages/core/dist/src/mcp/oauth-provider.js"() {
@@ -209691,7 +209844,7 @@ var init_oauth_provider = __esm({
         return new Promise((resolve25, reject) => {
           const server = http4.createServer(async (req, res) => {
             try {
-              const url2 = new URL3(req.url, `http://localhost:${OAUTH_REDIRECT_PORT}`);
+              const url2 = new URL4(req.url, `http://localhost:${OAUTH_REDIRECT_PORT}`);
               if (url2.pathname !== OAUTH_REDIRECT_PATH) {
                 res.writeHead(404);
                 res.end("Not found");
@@ -209786,7 +209939,7 @@ var init_oauth_provider = __esm({
             console.warn(`Could not add resource parameter: ${getErrorMessage(error2)}`);
           }
         }
-        const url2 = new URL3(config2.authorizationUrl);
+        const url2 = new URL4(config2.authorizationUrl);
         params.forEach((value, key) => {
           url2.searchParams.append(key, value);
         });
@@ -210023,7 +210176,7 @@ var init_oauth_provider = __esm({
             if (!config2.authorizationUrl) {
               throw new Error("Cannot perform dynamic registration without authorization URL");
             }
-            const authUrl2 = new URL3(config2.authorizationUrl);
+            const authUrl2 = new URL4(config2.authorizationUrl);
             const serverUrl = `${authUrl2.protocol}//${authUrl2.host}`;
             console.debug("\u2192 Attempting dynamic client registration...");
             const authServerMetadata = await OAuthUtils.discoverAuthorizationServerMetadata(serverUrl);
@@ -216854,62 +217007,6 @@ var init_html_to_text = __esm({
   }
 });
 
-// packages/core/dist/src/utils/fetch.js
-import { URL as URL4 } from "node:url";
-function isPrivateIp(url2) {
-  try {
-    const hostname4 = new URL4(url2).hostname;
-    return PRIVATE_IP_RANGES.some((range) => range.test(hostname4));
-  } catch (_e2) {
-    return false;
-  }
-}
-async function fetchWithTimeout(url2, timeout2) {
-  const controller = new AbortController();
-  const timeoutId = setTimeout(() => controller.abort(), timeout2);
-  try {
-    const response = await fetch(url2, { signal: controller.signal });
-    return response;
-  } catch (error2) {
-    if (isNodeError(error2) && error2.code === "ABORT_ERR") {
-      throw new FetchError2(`Request timed out after ${timeout2}ms`, "ETIMEDOUT");
-    }
-    throw new FetchError2(getErrorMessage(error2));
-  } finally {
-    clearTimeout(timeoutId);
-  }
-}
-var PRIVATE_IP_RANGES, FetchError2;
-var init_fetch2 = __esm({
-  "packages/core/dist/src/utils/fetch.js"() {
-    "use strict";
-    init_esbuild_shims();
-    init_errors();
-    PRIVATE_IP_RANGES = [
-      /^10\./,
-      /^127\./,
-      /^172\.(1[6-9]|2[0-9]|3[0-1])\./,
-      /^192\.168\./,
-      /^::1$/,
-      /^fc00:/,
-      /^fe80:/
-    ];
-    FetchError2 = class extends Error {
-      static {
-        __name(this, "FetchError");
-      }
-      code;
-      constructor(message, code2) {
-        super(message);
-        this.code = code2;
-        this.name = "FetchError";
-      }
-    };
-    __name(isPrivateIp, "isPrivateIp");
-    __name(fetchWithTimeout, "fetchWithTimeout");
-  }
-});
-
 // packages/core/dist/src/tools/web-fetch.js
 var import_undici2, URL_FETCH_TIMEOUT_MS, MAX_CONTENT_LENGTH, WebFetchToolInvocation, WebFetchTool;
 var init_web_fetch = __esm({
@@ -216919,7 +217016,7 @@ var init_web_fetch = __esm({
     init_html_to_text();
     import_undici2 = __toESM(require_undici(), 1);
     init_config3();
-    init_fetch2();
+    init_fetch();
     init_partUtils();
     init_tool_error();
     init_tools();
@@ -325371,7 +325468,7 @@ var require_src42 = __commonJS({
       };
     }
     __name(_asyncToGenerator, "_asyncToGenerator");
-    var readFile12 = fs100.readFile ? (0, _util.promisify)(fs100.readFile) : /* @__PURE__ */ _asyncToGenerator(/* @__PURE__ */ _regenerator().m(/* @__PURE__ */ __name(function _callee() {
+    var readFile11 = fs100.readFile ? (0, _util.promisify)(fs100.readFile) : /* @__PURE__ */ _asyncToGenerator(/* @__PURE__ */ _regenerator().m(/* @__PURE__ */ __name(function _callee() {
       return _regenerator().w(function(_context) {
         while (1) switch (_context.n) {
           case 0:
@@ -325513,7 +325610,7 @@ var require_src42 = __commonJS({
                   break;
                 case 1:
                   _context2.n = 2;
-                  return readFile12(keyFile, "utf8");
+                  return readFile11(keyFile, "utf8");
                 case 2:
                   key = _context2.v;
                   body = JSON.parse(key);
@@ -325531,7 +325628,7 @@ var require_src42 = __commonJS({
                   });
                 case 4:
                   _context2.n = 5;
-                  return readFile12(keyFile, "utf8");
+                  return readFile11(keyFile, "utf8");
                 case 5:
                   _privateKey = _context2.v;
                   return _context2.a(2, {
@@ -327169,7 +327266,7 @@ var require_filesubjecttokensupplier2 = __commonJS({
     exports2.FileSubjectTokenSupplier = void 0;
     var util_1 = __require("util");
     var fs100 = __require("fs");
-    var readFile12 = (0, util_1.promisify)(fs100.readFile ?? (() => {
+    var readFile11 = (0, util_1.promisify)(fs100.readFile ?? (() => {
     }));
     var realpath2 = (0, util_1.promisify)(fs100.realpath ?? (() => {
     }));
@@ -327212,7 +327309,7 @@ var require_filesubjecttokensupplier2 = __commonJS({
           throw err;
         }
         let subjectToken;
-        const rawText = await readFile12(parsedFilePath, { encoding: "utf8" });
+        const rawText = await readFile11(parsedFilePath, { encoding: "utf8" });
         if (this.formatType === "text") {
           subjectToken = rawText;
         } else if (this.formatType === "json" && this.subjectTokenFieldName) {
@@ -330416,8 +330513,8 @@ var require_graceful_fs = __commonJS({
       fs101.createReadStream = createReadStream3;
       fs101.createWriteStream = createWriteStream5;
       var fs$readFile = fs101.readFile;
-      fs101.readFile = readFile12;
-      function readFile12(path111, options2, cb) {
+      fs101.readFile = readFile11;
+      function readFile11(path111, options2, cb) {
         if (typeof options2 === "function")
           cb = options2, options2 = null;
         return go$readFile(path111, options2, cb);
@@ -330433,7 +330530,7 @@ var require_graceful_fs = __commonJS({
         }
         __name(go$readFile, "go$readFile");
       }
-      __name(readFile12, "readFile");
+      __name(readFile11, "readFile");
       var fs$writeFile = fs101.writeFile;
       fs101.writeFile = writeFile11;
       function writeFile11(path111, data, options2, cb) {
@@ -331992,8 +332089,8 @@ var require_graceful_fs2 = __commonJS({
       fs101.createReadStream = createReadStream3;
       fs101.createWriteStream = createWriteStream5;
       var fs$readFile = fs101.readFile;
-      fs101.readFile = readFile12;
-      function readFile12(path111, options2, cb) {
+      fs101.readFile = readFile11;
+      function readFile11(path111, options2, cb) {
         if (typeof options2 === "function")
           cb = options2, options2 = null;
         return go$readFile(path111, options2, cb);
@@ -332009,7 +332106,7 @@ var require_graceful_fs2 = __commonJS({
         }
         __name(go$readFile, "go$readFile");
       }
-      __name(readFile12, "readFile");
+      __name(readFile11, "readFile");
       var fs$writeFile = fs101.writeFile;
       fs101.writeFile = writeFile11;
       function writeFile11(path111, data, options2, cb) {
@@ -351138,6 +351235,65 @@ var REVERSE_MIGRATION_MAP = Object.fromEntries(
 var KNOWN_V2_CONTAINERS = new Set(
   Object.values(MIGRATION_MAP).map((path111) => path111.split(".")[0])
 );
+function getSettingsFileKeyWarnings(settings, settingsFilePath) {
+  const version2 = settings[SETTINGS_VERSION_KEY];
+  if (typeof version2 !== "number" || version2 < SETTINGS_VERSION) {
+    return [];
+  }
+  const warnings = [];
+  const ignoredLegacyKeys = /* @__PURE__ */ new Set();
+  for (const [oldKey, newPath] of Object.entries(MIGRATION_MAP)) {
+    if (oldKey === newPath) {
+      continue;
+    }
+    if (!(oldKey in settings)) {
+      continue;
+    }
+    const oldValue = settings[oldKey];
+    if (KNOWN_V2_CONTAINERS.has(oldKey) && typeof oldValue === "object" && oldValue !== null && !Array.isArray(oldValue)) {
+      continue;
+    }
+    ignoredLegacyKeys.add(oldKey);
+    warnings.push(
+      `\u26A0\uFE0F  Legacy setting '${oldKey}' will be ignored in ${settingsFilePath}. Please use '${newPath}' instead.`
+    );
+  }
+  const schemaKeys = new Set(Object.keys(getSettingsSchema()));
+  for (const key of Object.keys(settings)) {
+    if (key === SETTINGS_VERSION_KEY) {
+      continue;
+    }
+    if (ignoredLegacyKeys.has(key)) {
+      continue;
+    }
+    if (schemaKeys.has(key)) {
+      continue;
+    }
+    warnings.push(
+      `\u26A0\uFE0F  Unknown setting '${key}' will be ignored in ${settingsFilePath}.`
+    );
+  }
+  return warnings;
+}
+__name(getSettingsFileKeyWarnings, "getSettingsFileKeyWarnings");
+function getSettingsWarnings(loadedSettings) {
+  const warningSet = /* @__PURE__ */ new Set();
+  for (const scope of ["User" /* User */, "Workspace" /* Workspace */]) {
+    const settingsFile = loadedSettings.forScope(scope);
+    if (settingsFile.rawJson === void 0) {
+      continue;
+    }
+    const settingsObject = settingsFile.originalSettings;
+    for (const warning of getSettingsFileKeyWarnings(
+      settingsObject,
+      settingsFile.path
+    )) {
+      warningSet.add(warning);
+    }
+  }
+  return [...warningSet];
+}
+__name(getSettingsWarnings, "getSettingsWarnings");
 function migrateSettingsToV1(v2Settings) {
   const v1Settings = {};
   const v2Keys = new Set(Object.keys(v2Settings));
@@ -357823,7 +357979,7 @@ __name(getPackageJson, "getPackageJson");
 // packages/cli/src/utils/version.ts
 async function getCliVersion() {
   const pkgJson = await getPackageJson();
-  return "0.7.0-nightly.20260111.bde31d12";
+  return "0.7.0-nightly.20260113.09196c6e";
 }
 __name(getCliVersion, "getCliVersion");
 
@@ -365720,7 +365876,7 @@ var formatDuration = /* @__PURE__ */ __name((milliseconds) => {
 
 // packages/cli/src/generated/git-commit.ts
 init_esbuild_shims();
-var GIT_COMMIT_INFO2 = "5a2ac91b";
+var GIT_COMMIT_INFO2 = "11601933";
 
 // packages/cli/src/utils/systemInfo.ts
 async function getNpmVersion() {
@@ -413755,7 +413911,6 @@ import { exec as exec4, execSync as execSync8, spawn as spawn10 } from "node:chi
 import os39 from "node:os";
 import path108 from "node:path";
 import fs96 from "node:fs";
-import { readFile as readFile11 } from "node:fs/promises";
 import { fileURLToPath as fileURLToPath14 } from "node:url";
 import { promisify as promisify11 } from "node:util";
 import { randomBytes as randomBytes5 } from "node:crypto";
@@ -413792,20 +413947,15 @@ async function shouldUseCurrentUserInSandbox() {
     return false;
   }
   if (os39.platform() === "linux") {
-    try {
-      const osReleaseContent = await readFile11("/etc/os-release", "utf8");
-      if (osReleaseContent.includes("ID=debian") || osReleaseContent.includes("ID=ubuntu") || osReleaseContent.match(/^ID_LIKE=.*debian.*/m) || // Covers derivatives
-      osReleaseContent.match(/^ID_LIKE=.*ubuntu.*/m)) {
-        console.error(
-          "INFO: Defaulting to use current user UID/GID for Debian/Ubuntu-based Linux."
-        );
-        return true;
-      }
-    } catch (_err) {
-      console.warn(
-        "Warning: Could not read /etc/os-release to auto-detect Debian/Ubuntu for UID/GID default."
+    const debugEnv = [process.env["DEBUG"], process.env["DEBUG_MODE"]].some(
+      (v2) => v2 === "true" || v2 === "1"
+    );
+    if (debugEnv) {
+      console.error(
+        "INFO: Using current user UID/GID in Linux sandbox. Set SANDBOX_SET_UID_GID=false to disable."
       );
     }
+    return true;
   }
   return false;
 }
@@ -417027,7 +417177,7 @@ var GeminiAgent = class {
       name: APPROVAL_MODE_INFO[mode].name,
       description: APPROVAL_MODE_INFO[mode].description
     }));
-    const version2 = "0.7.0-nightly.20260111.bde31d12";
+    const version2 = "0.7.0-nightly.20260113.09196c6e";
     return {
       protocolVersion: PROTOCOL_VERSION,
       agentInfo: {
@@ -417487,12 +417637,15 @@ ${finalArgs[promptIndex + 1]}`;
     }
     let input = config2.getQuestion();
     const startupWarnings = [
-      ...await getStartupWarnings(),
-      ...await getUserStartupWarnings({
-        workspaceRoot: process.cwd(),
-        useRipgrep: settings.merged.tools?.useRipgrep ?? true,
-        useBuiltinRipgrep: settings.merged.tools?.useBuiltinRipgrep ?? true
-      })
+      .../* @__PURE__ */ new Set([
+        ...await getStartupWarnings(),
+        ...await getUserStartupWarnings({
+          workspaceRoot: process.cwd(),
+          useRipgrep: settings.merged.tools?.useRipgrep ?? true,
+          useBuiltinRipgrep: settings.merged.tools?.useBuiltinRipgrep ?? true
+        }),
+        ...getSettingsWarnings(settings)
+      ])
     ];
     if (config2.isInteractive()) {
       await kittyProtocolDetectionComplete;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@qwen-code/qwen-code",
-  "version": "0.7.0-nightly.20260111.bde31d12",
+  "version": "0.7.0-nightly.20260113.09196c6e",
   "description": "Qwen Code - AI-powered coding assistant",
   "repository": {
     "type": "git",
@@ -20,7 +20,7 @@
     "locales"
   ],
   "config": {
-    "sandboxImageUri": "ghcr.io/qwenlm/qwen-code:0.7.0-nightly.20260111.bde31d12"
+    "sandboxImageUri": "ghcr.io/qwenlm/qwen-code:0.7.0-nightly.20260113.09196c6e"
   },
   "dependencies": {
     "tiktoken": "^1.0.21"