@qwen-code/web-shell 0.25.3 → 0.25.4-preview.0

package/dist/types/App.d.ts

@@ -20,7 +20,7 @@ import { type ComposerPlaceholderState } from './utils/composerInputState';
 import type { CommandInfo, Message } from './adapters/types';
 import { type WebShellBrand, type WebShellResolvedBrand } from './brandContext';
 import { type WebShellTheme } from './themeContext';
-import { type WebShellAssistantFeedbackOptions, type WebShellComposerApi, type WebShellComposerInput, type WebShellMarkdownCustomization, type WebShellSourceIconResolver, type WebShellSourceReference, type ToolHeaderExtraRenderer, type UserMessageContentRenderer, type UserMessageContentParser, type AssistantTurnFooterRenderer, type WebShellArtifactCustomization, type WelcomeHeaderRenderer, type WelcomeFooterRenderer, type ComposerToolbarStartRenderer, type ComposerToolbarEndRenderer, type ComposerToolbarRightRenderer, type ComposerHeaderRenderer, type ComposerFooterRenderer, type ChatHeaderRenderer, type WebShellChatHeaderOptions, type WebShellRightPanelOptions, type WebShellEnvironmentPanelOptions, type FooterRenderer, type LoadingPhrasesResolver, type MarkdownTableMode, type WebShellAtProvider, type WebShellBuiltinAtProvidersConfig, type ComposerTagClickHandler, type ComposerTagRenderer, type WebShellComposerTagIconMap, type WebShellBottomStatusItem, type WebShellPreparedSubmit, type WebShellSubmitSnapshot, type WebShellAssistantTurnSettledEvent, type WebShellSessionArtifactsChange } from './customization';
+import { type WebShellCustomization, type WebShellAssistantFeedbackOptions, type WebShellComposerApi, type WebShellComposerInput, type WebShellMarkdownCustomization, type WebShellSourceIconResolver, type WebShellSourceReference, type ToolHeaderExtraRenderer, type UserMessageContentRenderer, type UserMessageContentParser, type AssistantTurnFooterRenderer, type WebShellArtifactCustomization, type WelcomeHeaderRenderer, type WelcomeFooterRenderer, type ComposerToolbarStartRenderer, type ComposerToolbarEndRenderer, type ComposerToolbarRightRenderer, type ComposerHeaderRenderer, type ComposerFooterRenderer, type ChatHeaderRenderer, type WebShellChatHeaderOptions, type WebShellRightPanelOptions, type WebShellEnvironmentPanelOptions, type FooterRenderer, type LoadingPhrasesResolver, type MarkdownTableMode, type WebShellAtProvider, type WebShellBuiltinAtProvidersConfig, type ComposerTagClickHandler, type ComposerTagRenderer, type WebShellComposerTagIconMap, type WebShellBottomStatusItem, type WebShellPreparedSubmit, type WebShellSubmitSnapshot, type WebShellAssistantTurnSettledEvent, type WebShellSessionArtifactsChange } from './customization';
 import type { CommandDisplayCategoryOrder } from './utils/commandDisplay';
 export interface BugReportInfo {
     title: string;
@@ -98,6 +98,8 @@ export interface WebShellSlashCommand {
 }
 export type WebShellSlashCommandHandler = (command: WebShellSlashCommand) => boolean | void;
 export interface WebShellProps {
+    /** Refresh and persist the host catalog before Qwen reloads models. No return data is required. */
+    onRefreshModels?: WebShellCustomization['onRefreshModels'];
     /** Native settings-page presentation. Does not restrict commands or daemon access. */
     settings?: WebShellSettingsOptions;
     /** Model add/delete interactions across WebShell. Not a backend permission policy. */
@@ -448,4 +450,4 @@ export declare function canArchiveSideTaskSummary(session: Pick<DaemonSessionSum
 export declare function mergeSideTaskCatalog(catalog: SideTaskCatalogState, parentSessionId: string, listedItems: SideTaskListItem[], optimisticIds: ReadonlySet<string>): SideTaskCatalogState;
 export declare function getEnvironmentAgentTasks(messages: readonly Message[], sessionTasks: readonly DaemonSessionTaskWithWorkflowStatus[]): EnvironmentAgentTask[];
 export declare function mergeAgentTrace(liveAgents: readonly EnvironmentAgentTask[], trace: DaemonAgentTrace | undefined, now?: number): EnvironmentAgentTask[];
-export declare function App({ askUserFreeTextLabel, onSessionIdChange, onSessionInfoChange, onSessionCreated, managedAgentProvider, theme: providedTheme, onThemeChange, onThemeResolved, language: providedLanguage, onLanguageChange, onLanguageResolved, brand: providedBrand, onBrandResolved, className: externalClassName, style: externalStyle, shadowDom, onConnectionChange, onStreamingStateChange, onError, onBugReport, hiddenSlashCommands, slashCommandCategoryOrder, onSlashCommand, builtinAtProviders, atProviders, composerTagIcons, fileUploadEnabled, fileUploadDirectory, artifact, fileDropAction, renderToolHeaderExtra, renderWelcomeHeader, renderWelcomeFooter, mobileWelcomeFooterMiddle, parseUserMessageContent, renderUserMessageContent, renderComposerTag, renderComposerTagTooltip, onComposerTagClick, renderAssistantTurnFooter, assistantFeedback, getAssistantSourcesIcon, sourceReferences, renderComposerToolbarStart, renderComposerToolbarEnd, renderComposerToolbarRight, renderComposerHeader, renderComposerFooter, renderChatHeader, renderFooter, bottomStatusItems, chatMaxWidth, sidebar, settings: settingsPresentation, modelManagement, header, rightPanel, showToolCalls, environmentPanel, splitSessionIds: externalSplitSessionIds, onSplitSessionIdsChange, renderPaneHeaderActions, onRightPanelOpen, onFileReviewOpen, onWorkspaceFileOpen, onInsightReportOpen, onContextUsageOpen, messageTurnOutputs, filterArtifact, shellRef, composerToolbarActions, allowedApprovalModes: allowedApprovalModesProp, mainModelFilter, compactComposerOverlays, autoSubmitSlashCommands, additionalSlashCommands, contextUsageAlwaysVisible, userMessageEditing, onUserMessageEditRequest, cycleModeOnTab, sessionSourceType, composerToolbarAdditionalActions, composerPlaceholders, compactThinking, hostOwnsEditDiffPreview, collapseCompletedTurns, markdownTableMode, virtualScrollThreshold, conversationSearchThreshold, markdown, loadingPhrases, onAgentTasksChange, onTranscriptChange, onSessionArtifactsChange, onToast, composerRef, onComposerReady, composerInput, composerInputVersion, onSessionChange, onAssistantTurnSettled, prepareSubmit, onSubmitBefore, restartSseOnPrompt, historyPageSize, initialSelectedWorkspaceCwd, lockedWorkspaceCwd, lockedWorkspaceCapability, }?: AppProps): import("react/jsx-runtime").JSX.Element;
+export declare function App({ onRefreshModels, askUserFreeTextLabel, onSessionIdChange, onSessionInfoChange, onSessionCreated, managedAgentProvider, theme: providedTheme, onThemeChange, onThemeResolved, language: providedLanguage, onLanguageChange, onLanguageResolved, brand: providedBrand, onBrandResolved, className: externalClassName, style: externalStyle, shadowDom, onConnectionChange, onStreamingStateChange, onError, onBugReport, hiddenSlashCommands, slashCommandCategoryOrder, onSlashCommand, builtinAtProviders, atProviders, composerTagIcons, fileUploadEnabled, fileUploadDirectory, artifact, fileDropAction, renderToolHeaderExtra, renderWelcomeHeader, renderWelcomeFooter, mobileWelcomeFooterMiddle, parseUserMessageContent, renderUserMessageContent, renderComposerTag, renderComposerTagTooltip, onComposerTagClick, renderAssistantTurnFooter, assistantFeedback, getAssistantSourcesIcon, sourceReferences, renderComposerToolbarStart, renderComposerToolbarEnd, renderComposerToolbarRight, renderComposerHeader, renderComposerFooter, renderChatHeader, renderFooter, bottomStatusItems, chatMaxWidth, sidebar, settings: settingsPresentation, modelManagement, header, rightPanel, showToolCalls, environmentPanel, splitSessionIds: externalSplitSessionIds, onSplitSessionIdsChange, renderPaneHeaderActions, onRightPanelOpen, onFileReviewOpen, onWorkspaceFileOpen, onInsightReportOpen, onContextUsageOpen, messageTurnOutputs, filterArtifact, shellRef, composerToolbarActions, allowedApprovalModes: allowedApprovalModesProp, mainModelFilter, compactComposerOverlays, autoSubmitSlashCommands, additionalSlashCommands, contextUsageAlwaysVisible, userMessageEditing, onUserMessageEditRequest, cycleModeOnTab, sessionSourceType, composerToolbarAdditionalActions, composerPlaceholders, compactThinking, hostOwnsEditDiffPreview, collapseCompletedTurns, markdownTableMode, virtualScrollThreshold, conversationSearchThreshold, markdown, loadingPhrases, onAgentTasksChange, onTranscriptChange, onSessionArtifactsChange, onToast, composerRef, onComposerReady, composerInput, composerInputVersion, onSessionChange, onAssistantTurnSettled, prepareSubmit, onSubmitBefore, restartSseOnPrompt, historyPageSize, initialSelectedWorkspaceCwd, lockedWorkspaceCwd, lockedWorkspaceCapability, }?: AppProps): import("react/jsx-runtime").JSX.Element;

package/dist/types/adapters/messageTypes.d.ts

@@ -46,6 +46,7 @@ export interface DaemonMessageToolCall {
     content?: readonly DaemonMessageToolCallContent[];
     rawOutput?: unknown;
     toolResult?: components['schemas']['PublicToolResult'];
+    toolDetailsRevision?: number;
     locations?: DaemonMessageToolCallLocation[];
     kind?: DaemonMessageToolKind;
     startTime?: number;
@@ -78,6 +79,8 @@ export interface DaemonMessageAuthor {
  * cross-cutting field is declared once rather than on each role.
  */
 export interface DaemonMessageMeta {
+    sourceRecordIds?: string[];
+    localCommandId?: string;
     backgroundTurn?: DaemonBackgroundTurn;
     /**
      * Admitted prompt this message belongs to, copied from the daemon-stamped

package/dist/types/adapters/transcriptToMessages.d.ts

@@ -3,13 +3,15 @@
  * Copyright 2025 Qwen Team
  * SPDX-License-Identifier: Apache-2.0
  */
-import type { DaemonTranscriptBlock, DaemonToolTranscriptBlock } from '@qwen-code/sdk/daemon';
+import type { DaemonLoopStop, DaemonTranscriptBlock, DaemonToolTranscriptBlock } from '@qwen-code/sdk/daemon';
 import type { DaemonMessage, DaemonMessageToolCall } from './messageTypes.js';
 interface TranscriptMessageLabels {
     promptCancelled?: string;
     branchSuccess?: (name: string) => string;
     modelStreamInterrupted?: string;
     loopDetected?: string;
+    /** Text for a loop stop whose cause is known; undefined falls back. */
+    loopDetectedFor?: (loop: DaemonLoopStop) => string | undefined;
 }
 interface TranscriptMessageOptions {
     labels?: TranscriptMessageLabels;

package/dist/types/components/ChatEditor.d.ts

@@ -1,4 +1,6 @@
+import { type ModelRefreshState } from './ModelRefreshControl';
 import type { CommandInfo } from '../adapters/types';
+import type { AtMentionWorkspaceActions } from '../hooks/useAtMentionSources';
 import type { AttachmentPreviewRequest } from '../adapters/messageTypes';
 import type { UseDaemonFollowupSuggestionReturn } from '@qwen-code/web-shell/daemon-react-sdk';
 import type { DaemonSessionGroupPresetColor, DaemonWorkspaceGitStatus, ReasoningSelection } from '@qwen-code/sdk/daemon';
@@ -98,6 +100,7 @@ interface ChatEditorProps {
     onShowContextUsage?: () => void;
     onOpenContextUsage?: () => void;
     contextUsageControls?: ContextUsageControls;
+    modelRefresh?: ModelRefreshState;
     availableModels?: Array<{
         id: string;
         label?: string;
@@ -126,6 +129,8 @@ interface ChatEditorProps {
     disableLegacyHistoryFallback?: boolean;
     shellModeEnabled?: boolean;
     workspaceFeaturesEnabled?: boolean;
+    fileReferenceActions?: AtMentionWorkspaceActions;
+    persistFileReferences?: boolean;
     attachmentsEnabled?: boolean;
     onChatWidthModeChange?: (mode: '1000' | 'wide') => void;
     onFocusFooter?: () => boolean;

package/dist/types/components/MessageDeletionToolbar.d.ts

@@ -0,0 +1,4 @@
+import type { MessageDeletionControls } from '../hooks/useMessageDeletion';
+export declare function MessageDeletionToolbar({ controls, }: {
+    controls: MessageDeletionControls;
+}): import("react/jsx-runtime").JSX.Element | null;

package/dist/types/components/MessageItem.d.ts

@@ -25,6 +25,8 @@ interface MessageItemProps {
      * owns the edit lifecycle — then the inline editor stays closed.
      */
     onEditUserMessage?: () => boolean | void;
+    onDeleteMessage?: () => void;
+    deleteMessageDisabled?: boolean;
     /**
      * Send the text the user confirmed in the inline editor. Resolves `false`
      * when the resend was refused or failed; the editor stays open then.

package/dist/types/components/MessageList.d.ts

@@ -4,10 +4,12 @@ import type { Message, TurnCollapseHead } from '../adapters/types';
 import type { PermissionRequest } from '../adapters/types';
 import { type ParallelAgentDisplayItem } from '../adapters/parallelAgentGrouping';
 import { type WebShellSource } from '../customization';
+import type { MessageDeletionControls } from '../hooks/useMessageDeletion';
 import type { SessionContentGenerator } from './messages/AssistantMessage';
 import { type TurnOutputFileChange, type TurnOutputOpenRequest, type TurnOutputScheduledTask } from './artifacts/TurnOutputs';
 import type { AttachmentPreviewRequest } from '../adapters/messageTypes';
 export interface MessageListProps {
+    deletion?: MessageDeletionControls;
     messages: Message[];
     frozenViewport?: boolean;
     terminalBackgroundShellTaskIds?: ReadonlySet<string>;

package/dist/types/components/MessageTimestamp.d.ts

@@ -10,9 +10,12 @@ interface MessageTimestampProps {
     toolGroupSpacing?: boolean;
     copyText?: string;
     copyTitle?: string;
-    /** When set, render an edit action after the copy button. */
+    /** When set, include an edit action in the overflow menu. */
     onEdit?: () => void;
     editTitle?: string;
+    onDelete?: () => void;
+    deleteDisabled?: boolean;
+    deleteTitle?: string;
     /** When set, render an action that opens this turn's tool-call list. */
     onOpenTurnCalls?: () => void;
     turnCallsTitle?: string;
@@ -21,7 +24,7 @@ interface MessageTimestampProps {
  * Wraps a rendered history message and reveals its wall-clock time as a
  * CSS-only tooltip on hover.
  */
-export declare function MessageTimestamp({ timestamp, hideTimestamp, children, chatMode, toolGroupSpacing, copyText, copyTitle, onEdit, editTitle, onOpenTurnCalls, turnCallsTitle, }: MessageTimestampProps): import("react/jsx-runtime").JSX.Element;
+export declare function MessageTimestamp({ timestamp, hideTimestamp, children, chatMode, toolGroupSpacing, copyText, copyTitle, onEdit, editTitle, onDelete, deleteDisabled, deleteTitle, onOpenTurnCalls, turnCallsTitle, }: MessageTimestampProps): import("react/jsx-runtime").JSX.Element;
 /**
  * Local-time clock, dropping the date only for same-day timestamps:
  * - same day → `HH:mm:ss`

package/dist/types/components/ModelRefreshControl.d.ts

@@ -0,0 +1,5 @@
+import type { useModelRefresh } from '../hooks/useModelRefresh';
+export type ModelRefreshState = ReturnType<typeof useModelRefresh>;
+export declare function ModelRefreshControl({ state }: {
+    state?: ModelRefreshState;
+}): import("react/jsx-runtime").JSX.Element | null;

package/dist/types/components/artifacts/CodeReviewArtifactDetail.d.ts

@@ -23,6 +23,11 @@ interface ReviewFinding {
     /** The executed evidence that settled the verdict, or its `not run` line. */
     witness?: string;
     suggestedFix?: string;
+    /**
+     * The acceptance criterion the suggested fix owes: the test that must go
+     * red if the fix is removed.
+     */
+    fixWitness?: string;
     category?: string;
     locations: FindingLocation[];
     /** Local evidence paths; rendered as workspace images where possible. */

package/dist/types/components/artifacts/DocxPreview.d.ts

@@ -0,0 +1,8 @@
+import type { ArtifactWorkspaceActions } from './useArtifactWorkspaceTarget';
+export default function DocxPreview({ workspacePath, workspaceActions, data, artifactVersion, downloadName, }: {
+    workspacePath: string;
+    workspaceActions?: Pick<ArtifactWorkspaceActions, 'readFileBytes' | 'stat'>;
+    data?: Blob;
+    artifactVersion?: string;
+    downloadName?: string;
+}): import("react/jsx-runtime").JSX.Element;

package/dist/types/components/artifacts/TrajectoryExecutions.d.ts

@@ -1,9 +1,17 @@
 import type { TrajectoryExecutionRow } from '../../trajectory/project-trajectory-executions';
-export declare function TrajectoryExecutions({ rows, omitted, incomplete, outsideWindow, selectedKey, onSelect, }: {
+import type { TrajectoryLifecycleProjection } from '../../trajectory/project-trajectory-lifecycle';
+export declare function TrajectoryExecutions({ rows, omitted, incomplete, outsideWindow, selectedKey, onSelect, following, liveStatus, historySnapshot, onPause, onReturnToLatest, canReturn, returning, }: {
     rows: readonly TrajectoryExecutionRow[];
     omitted: number;
     incomplete: boolean;
     outsideWindow: number;
     selectedKey?: string;
     onSelect: (key: string) => void;
+    following: boolean;
+    liveStatus: TrajectoryLifecycleProjection['status'];
+    historySnapshot: object | undefined;
+    onPause: () => void;
+    onReturnToLatest: () => void;
+    canReturn: boolean;
+    returning: boolean;
 }): import("react/jsx-runtime").JSX.Element;

package/dist/types/components/artifacts/TrajectoryInspector.d.ts

@@ -6,7 +6,7 @@
 import type { TrajectoryLifecycleEntry } from '../../trajectory/project-trajectory-lifecycle';
 import type { TrajectoryExecutionRow } from '../../trajectory/project-trajectory-executions';
 import type { TrajectoryRow } from '../../trajectory/types';
-export declare function TrajectoryInspector({ row, lifecycle, execution, onLocateExecution, title, stale, turnSelected, hiddenByRange, hiddenByCollapse, hiddenByFilter, onClearFilter, onReveal, onClearRange, onClose, }: {
+export declare function TrajectoryInspector({ row, lifecycle, execution, onLocateExecution, title, stale, turnSelected, hiddenByRange, hiddenByCollapse, hiddenByFilter, onClearFilter, onReveal, onClearRange, onClose, onFocusedUnmount, }: {
     row?: TrajectoryRow;
     lifecycle?: TrajectoryLifecycleEntry;
     execution?: TrajectoryExecutionRow;
@@ -21,4 +21,5 @@ export declare function TrajectoryInspector({ row, lifecycle, execution, onLocat
     onReveal: () => void;
     onClearRange: () => void;
     onClose: () => void;
+    onFocusedUnmount?: () => void;
 }): import("react/jsx-runtime").JSX.Element;

package/dist/types/components/artifacts/artifactUtils.d.ts

@@ -3,6 +3,13 @@ import type { DaemonWorkspaceActions } from '@qwen-code/web-shell/daemon-react-s
 export declare function artifactKindLabel(kind: string, workspacePath?: string): string;
 export declare function isOfficeDocumentPath(workspacePath?: string): boolean;
 export declare function isExcelFile(workspacePath?: string, mimeType?: string): boolean;
+export declare const DOCX_MIME_TYPE = "application/vnd.openxmlformats-officedocument.wordprocessingml.document";
+export declare function isDocxFile(workspacePath?: string, mimeType?: string): boolean;
+export declare function isPdfArtifact(artifact: {
+    kind?: string;
+    workspacePath?: string;
+    mimeType?: string;
+}): boolean;
 export declare function isDownloadOnlyWorkspaceArtifact(artifact: {
     kind?: string;
     workspacePath?: string;

package/dist/types/components/artifacts/token-usage-messages.d.ts

@@ -0,0 +1,9 @@
+/**
+ * @license
+ * Copyright 2026 Qwen Team
+ * SPDX-License-Identifier: Apache-2.0
+ */
+type TokenUsageMessage = string | ((vars?: Record<string, string | number>) => string);
+export declare const TOKEN_USAGE_MESSAGES_EN: Record<string, TokenUsageMessage>;
+export declare const TOKEN_USAGE_MESSAGES_ZH: Record<string, TokenUsageMessage>;
+export {};

package/dist/types/components/artifacts/token-usage-messages.transcript-stub.d.ts

@@ -0,0 +1,7 @@
+/**
+ * @license
+ * Copyright 2026 Qwen Team
+ * SPDX-License-Identifier: Apache-2.0
+ */
+export declare const TOKEN_USAGE_MESSAGES_EN: {};
+export declare const TOKEN_USAGE_MESSAGES_ZH: {};

package/dist/types/components/channels/channel-platform.d.ts

@@ -5,5 +5,5 @@
  */
 import type { DaemonChannelTypeDescriptor } from '@qwen-code/sdk/daemon';
 export declare const PLATFORM_MARKS: Record<string, string>;
-export declare function isSupportedChannelType(type: unknown): type is 'dingtalk' | 'dws' | 'wecom' | 'feishu' | 'github' | 'gitlab';
+export declare function isSupportedChannelType(type: unknown): type is 'dingtalk' | 'dws' | 'wecom' | 'wecom-callback' | 'feishu' | 'github' | 'gitlab';
 export declare function isChannelPlatformAvailable(descriptor: DaemonChannelTypeDescriptor): boolean;

package/dist/types/components/dialogs/ModelDialog.d.ts

@@ -1,5 +1,7 @@
+import { type ModelRefreshState } from '../ModelRefreshControl';
 export type ModelDialogMode = 'main' | 'fast' | 'voice' | 'vision' | 'advisor' | 'image';
 interface ModelDialogProps {
+    modelRefresh?: ModelRefreshState;
     mode?: ModelDialogMode;
     loading?: boolean;
     error?: Error;
@@ -24,5 +26,5 @@ export interface ModelDialogModel {
     envKey?: string;
     isRuntime?: boolean;
 }
-export declare function ModelDialog({ mode, loading, error, onSelect, models, currentModelId, filterModel, }: ModelDialogProps): import("react/jsx-runtime").JSX.Element;
+export declare function ModelDialog({ modelRefresh, mode, loading, error, onSelect, models, currentModelId, filterModel, }: ModelDialogProps): import("react/jsx-runtime").JSX.Element;
 export {};

package/dist/types/components/managed/generated/managed-agent-api.d.ts

@@ -616,6 +616,62 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
+    "/api/agent/web-shell/v1/workspaces/files/query": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        /**
+         * Read-only Workspace file query
+         * @description Browse directories or search file names within the persisted Workspace working directory. Requires a trusted actor with current OPERATOR or OWNER access to an ACTIVE Workspace, the deployment Workspace-files opt-in, and verified LOCAL or SSH_LOCAL storage. Authorization and binding are rechecked after I/O. Paths are relative to the working directory; host paths and Runtime credentials are never returned. Unsupported storage never falls back to the local daemon, and no Session, worker or model request is created.
+         */
+        post: operations["webShellWorkspaceFilesQuery"];
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/api/agent/web-shell/v1/workspaces/files/read": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        /**
+         * Read-only Workspace file read
+         * @description Read one selection-time snapshot of a nonempty, NUL-free UTF-8 file, at most 24 KiB, using the scope revision returned by query. Requires a trusted actor with current OPERATOR or OWNER access to an ACTIVE Workspace, the deployment Workspace-files opt-in, and verified LOCAL or SSH_LOCAL storage. Authorization and binding are rechecked after I/O. Paths are relative to the working directory; host paths and Runtime credentials are never returned. Unsupported storage never falls back to the local daemon, and no Session, worker or model request is created.
+         */
+        post: operations["webShellWorkspaceFilesRead"];
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/api/agent/web-shell/v1/tool-details/get": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        post: operations["getWebShellToolDetails"];
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
 }
 export type webhooks = Record<string, never>;
 export interface components {
@@ -676,7 +732,7 @@ export interface components {
             environmentId?: string | null;
             /** @description The server enforces the bound in UTF-16 code units (Java String.length()), so an astral character counts as two: a title this schema's code-point maxLength accepts can still exceed the server's 256-unit bound and answer 400 invalid_title. */
             title?: string | null;
-            /** @description Text has a 4,000,000-character aggregate budget and per-block 1,000,000-character cap, counted in code points. Hosted also enforces its 64 KiB durable-record limit and prepared-snapshot ceiling. A complete canonical input containing file/image attachments must fit within 48 KiB and requires input-attachments/1. */
+            /** @description Text has a 4,000,000-character aggregate budget and per-block 1,000,000-character cap, counted in code points. Hosted also enforces its 64 KiB durable-record limit for text-only inputs and a 32 MiB prepared-snapshot ceiling. A complete canonical input containing file/image attachments must fit within 8 MiB and requires input-attachments/1. */
             input?: components["schemas"]["InputBlock"][];
             metadata?: components["schemas"]["WebShellMetadata"];
             workspace?: components["schemas"]["WebShellWorkspaceSelection"];
@@ -694,7 +750,7 @@ export interface components {
             idempotencyKey: string;
             /** Format: uuid */
             sessionId: string;
-            /** @description Text has a 4,000,000-character aggregate budget and per-block 1,000,000-character cap, counted in code points. Hosted also enforces its 64 KiB durable-record limit and prepared-snapshot ceiling. A complete canonical input containing file/image attachments must fit within 48 KiB and requires input-attachments/1. */
+            /** @description Text has a 4,000,000-character aggregate budget and per-block 1,000,000-character cap, counted in code points. Hosted also enforces its 64 KiB durable-record limit for text-only inputs and a 32 MiB prepared-snapshot ceiling. A complete canonical input containing file/image attachments must fit within 8 MiB and requires input-attachments/1. */
             input?: components["schemas"]["InputBlock"][];
             metadata?: components["schemas"]["WebShellMetadata"];
             /**
@@ -1041,7 +1097,7 @@ export interface components {
             allowText: boolean;
             options: components["schemas"]["WebShellActionOption"][];
         };
-        /** @description Receipt IDs are opaque authorized product handles, not private journal or storage refs. Input completion means a Harness admitted its Turn, not that the Turn completed; an input whose Turn failed after a submission no Harness answered is recovery_blocked until the Session journal proves whether a Harness admitted it. For submit_input and task cancel, recovery_blocked means acceptance is unknown: the operation is never delivered again and settles only from its own durable evidence. For close and delete it is a published wait that delivery re-drives. Cancel completion means its Turn reached cancelled; a cancel fails with turn_already_settled when its Turn ended otherwise. Action completion may only record one vote. Lifecycle completion requires its cleanup facts; archive may remain java_durable because Java is its authority. Task cancel 202 is Java durable admission; completion means the authority durably recorded cancellation and returned a receipt, not that the task stopped. Task cancel failed proves non-acceptance and no further delivery, with a failure code; recovery_blocked means acceptance is unknown and needs reconciliation before re-execution. Its status is never cancelled. Physical settlement and an unknown physical outcome belong to the task, independently of operation acceptance. A completed task cancel carries admission stage harness_confirmed and delivery state confirmed with the authority's receipt; failed and recovery_blocked carry java_durable and blocked, so they are never delivered again without reconciliation. */
+        /** @description Receipt IDs are opaque authorized product handles, not private journal or storage refs. Input completion means a Harness admitted its Turn, not that the Turn completed; an input whose Turn failed after a submission no Harness answered is recovery_blocked until the Session journal proves whether a Harness admitted it. For submit_input and task cancel, recovery_blocked means acceptance is unknown: the operation is never delivered again and settles only from its own durable evidence. For close and delete it is a published wait that delivery re-drives. Cancel completion means its Turn reached cancelled; a cancel fails with turn_already_settled when its Turn ended otherwise, except one that already existed when its Turn failed with managed_runtime_recovery_blocked after a Harness admitted it or a submission was attempted, which parks recovery_blocked with cancel_unconfirmed. A cancel submitted after the Turn ended still fails turn_already_settled. Action completion may only record one vote. Lifecycle completion requires its cleanup facts; archive may remain java_durable because Java is its authority. Task cancel 202 is Java durable admission; completion means the authority durably recorded cancellation and returned a receipt, not that the task stopped. Task cancel failed proves non-acceptance and no further delivery, with a failure code; recovery_blocked means acceptance is unknown and needs reconciliation before re-execution. Its status is never cancelled. Physical settlement and an unknown physical outcome belong to the task, independently of operation acceptance. A completed task cancel carries admission stage harness_confirmed and delivery state confirmed with the authority's receipt; failed and recovery_blocked carry java_durable and blocked, so they are never delivered again without reconciliation. A cancel parked as recovery_blocked/cancel_unconfirmed by unobserved-Turn recovery reconciles only from the original prompt's retained durable terminal event: cancelled completes it, completed or error fails it with turn_already_settled, and missing or unreadable evidence stays parked. A recorded stop request alone does not prove cancellation completed. */
         WebShellCommandOperation: {
             operationId: string;
             /** Format: uuid */
@@ -1058,7 +1114,7 @@ export interface components {
             deliveryState: "pending" | "leased" | "confirmed" | "blocked";
             receiptId?: string;
             actionResolution?: components["schemas"]["WebShellActionResolution"];
-            /** @description Reason a durable response or task cancellation failed. Action response failures come from the original committed Action, or a definitive invalid response. Task cancel failures are task_already_settled (the run ended before the stop request was recorded), task_action_unavailable and task_not_found; a recovery_blocked task cancel reports task_cancel_unconfirmed. A lifecycle operation that exhausted its retry budget fails with the settle's failure: session_lifecycle_delivery_failed, managed_capability_mismatch or hosted_harness_protocol_error when the Hosted Harness refused to negotiate, a workspace close or lifecycle refusal (a workspace_close_* or workspace_lifecycle_* code, or runtime_admission_closed; a Runtime Broker runtime_broker_recovery_blocked refusal is reported as workspace_close_identity_unverified), or another Runtime Broker refusal code; one whose settle reached the Harness but stayed unsettled past the larger settled budget fails with session_close_completion_unsettled. A lifecycle recovery_blocked operation reports the refusal it waits on, original resource identity or unsettled execution for a Workspace close, session_close_writer_live while a Harness holds the journal writer or while that check itself fails, or hosted_harness_generation_mismatch while this replica's view of the Harness boot is stale; the Session remains closing. A submit_input failure carries its Turn's error code, and a recovery_blocked submit_input reports submit_input_unconfirmed; a cancel fails with turn_already_settled when its Turn completed or failed without being cancelled. */
+            /** @description Reason a durable response or task cancellation failed. Action response failures come from the original committed Action, or a definitive invalid response. Task cancel failures are task_already_settled (the run ended before the stop request was recorded), task_action_unavailable and task_not_found; a recovery_blocked task cancel reports task_cancel_unconfirmed. A lifecycle operation that exhausted its retry budget fails with the settle's failure: session_lifecycle_delivery_failed, managed_capability_mismatch or hosted_harness_protocol_error when the Hosted Harness refused to negotiate, a workspace close or lifecycle refusal (a workspace_close_* or workspace_lifecycle_* code, or runtime_admission_closed; a Runtime Broker runtime_broker_recovery_blocked refusal is reported as workspace_close_identity_unverified), or another Runtime Broker refusal code; one whose settle reached the Harness but stayed unsettled past the larger settled budget fails with session_close_completion_unsettled. A lifecycle recovery_blocked operation reports the refusal it waits on, original resource identity or unsettled execution for a Workspace close, session_close_writer_live while a Harness holds the journal writer or while that check itself fails, or hosted_harness_generation_mismatch while this replica's view of the Harness boot is stale, or hosted_lifecycle_recovery_required while the daemon settles a previous prompt, or hosted_turn_active while a turn, MCP call or hook is still draining; the Session remains closing. A submit_input failure carries its Turn's error code, and a recovery_blocked submit_input reports submit_input_unconfirmed; a cancel fails with turn_already_settled when its Turn completed or failed without being cancelled, except one that already existed when its Turn failed with managed_runtime_recovery_blocked after a Harness admitted it or a submission was attempted: it parks recovery_blocked with cancel_unconfirmed. A cancel submitted after the Turn ended still fails turn_already_settled. A cancel parked as recovery_blocked/cancel_unconfirmed by unobserved-Turn recovery reconciles only from the original prompt's retained durable terminal event: cancelled completes it, completed or error fails it with turn_already_settled, and missing or unreadable evidence stays parked. A recorded stop request alone does not prove cancellation completed. */
             failureCode?: string;
             replayed: boolean;
         } & (unknown & unknown & unknown & unknown & unknown);
@@ -1525,7 +1581,7 @@ export interface components {
             type: "input_text" | "text";
             text: string;
         };
-        /** @description Inline UTF-8 text file. No host paths, URLs, binary or NUL. Conservative text MIME/extension validation; the complete canonical input containing attachments is limited to 48 KiB. */
+        /** @description Inline UTF-8 text file. No host paths, URLs, binary or NUL. Conservative text MIME/extension validation; the complete canonical input containing attachments is limited to 8 MiB. */
         InputFileBlock: {
             /** @enum {string} */
             type: "input_file";
@@ -1533,12 +1589,12 @@ export interface components {
             mime_type: string;
             text: string;
         };
-        /** @description Canonical base64 image with a matching signature. The complete canonical input containing attachments is limited to 48 KiB. */
+        /** @description Canonical base64 PNG, JPEG, GIF or WebP image with a matching signature. The image/jpg alias is normalized to image/jpeg. The complete canonical input containing attachments is limited to 8 MiB. */
         InputImageBlock: {
             /** @enum {string} */
             type: "input_image";
             /** @enum {string} */
-            mime_type: "image/png" | "image/jpeg" | "image/webp";
+            mime_type: "image/png" | "image/jpeg" | "image/jpg" | "image/gif" | "image/webp";
             data: string;
         };
         WebShellSkill: {
@@ -1548,6 +1604,70 @@ export interface components {
         WebShellSessionSkills: {
             skills: components["schemas"]["WebShellSkill"][];
         };
+        WebShellWorkspaceFileQueryRequest: {
+            workspaceId: string;
+            cwdRelative: string;
+            directory: string;
+            query?: string;
+            expectedScopeRevision?: string;
+        };
+        WebShellWorkspaceFileReadRequest: {
+            workspaceId: string;
+            cwdRelative: string;
+            path: string;
+            expectedScopeRevision: string;
+        };
+        WebShellWorkspaceFileEntry: {
+            path: string;
+            name: string;
+            /** @enum {string} */
+            kind: "file" | "directory";
+        };
+        WebShellWorkspaceFilePage: {
+            scopeRevision: string;
+            directory: string;
+            entries: components["schemas"]["WebShellWorkspaceFileEntry"][];
+            truncated: boolean;
+        };
+        WebShellWorkspaceFileSnapshot: {
+            scopeRevision: string;
+            path: string;
+            name: string;
+            /** @enum {string} */
+            mimeType: "text/plain";
+            text: string;
+            byteLength: number;
+            sha256: string;
+        };
+        WebShellToolDetails: {
+            /** @description Allowlisted display arguments, or null when unavailable or larger than 4 KiB. */
+            input: {
+                [key: string]: unknown;
+            } | null;
+            /** @description Recorded text or error, bounded to 8 KiB and 200 lines; null means unavailable, an empty string means recorded empty output. */
+            output: string | null;
+            truncated: boolean;
+            /** @description Validated saved Shell display, when available. Text fields share an 8 KiB/200-line budget; directory and output-file paths share an 8 KiB UTF-8 budget. Legacy text remains in output. */
+            shellResult?: components["schemas"]["WebShellShellResult"];
+        };
+        WebShellShellResult: {
+            /** @constant */
+            type: "shell_result";
+            /** @constant */
+            version: 1;
+            text: string;
+            output: string;
+            directory: string;
+            exitCode: number | null;
+            signal: number | null;
+            pid: number | null;
+            error: string | null;
+            /** @enum {string} */
+            outcome: "completed" | "failed" | "cancelled" | "timed_out";
+            notices: string[];
+            truncated: boolean;
+            outputFiles: string[];
+        };
     };
     responses: {
         /** @description The authenticated actor belongs to another tenant than X-Qwen-Tenant-Id or has an invalid ID (actor_scope_mismatch, which the tenant filter answers on every /v1/agents/ and WebShell route), or the resource is readable but the actor lacks this operation or the original Action responder permission. Artifact content reads may also return artifact_content_forbidden when the actor cannot read the original bytes. */
@@ -2855,4 +2975,128 @@ export interface operations {
             413: components["responses"]["PayloadTooLarge"];
         };
     };
+    webShellWorkspaceFilesQuery: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        requestBody: {
+            content: {
+                "application/json": components["schemas"]["WebShellWorkspaceFileQueryRequest"];
+            };
+        };
+        responses: {
+            /** @description Authorized Workspace file result. */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["WebShellWorkspaceFilePage"];
+                };
+            };
+            400: components["responses"]["BadRequest"];
+            401: components["responses"]["Unauthorized"];
+            403: components["responses"]["Forbidden"];
+            404: components["responses"]["NotFound"];
+            409: components["responses"]["Conflict"];
+            503: components["responses"]["Unavailable"];
+        };
+    };
+    webShellWorkspaceFilesRead: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        requestBody: {
+            content: {
+                "application/json": components["schemas"]["WebShellWorkspaceFileReadRequest"];
+            };
+        };
+        responses: {
+            /** @description Authorized Workspace file result. */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["WebShellWorkspaceFileSnapshot"];
+                };
+            };
+            400: components["responses"]["BadRequest"];
+            401: components["responses"]["Unauthorized"];
+            403: components["responses"]["Forbidden"];
+            404: components["responses"]["NotFound"];
+            409: components["responses"]["Conflict"];
+            503: components["responses"]["Unavailable"];
+        };
+    };
+    getWebShellToolDetails: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        requestBody: {
+            content: {
+                "application/json": components["schemas"]["WebShellToolResultRequest"];
+            };
+        };
+        responses: {
+            /** @description Bounded saved ReadFile/Shell input and text output, read on demand; requires a trusted actor and current Session/Workspace read access. Available to authorized readers without a feature switch. */
+            200: {
+                headers: {
+                    "Cache-Control"?: "private, no-store";
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["WebShellToolDetails"];
+                };
+            };
+            /** @description Invalid request. */
+            400: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ErrorEnvelope"];
+                };
+            };
+            /** @description Trusted actor required. */
+            401: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ErrorEnvelope"];
+                };
+            };
+            403: components["responses"]["Forbidden"];
+            /** @description Unknown or unreadable resource. */
+            404: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ErrorEnvelope"];
+                };
+            };
+            409: components["responses"]["Conflict"];
+            413: components["responses"]["PayloadTooLarge"];
+            /** @description Resource temporarily unavailable. */
+            503: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ErrorEnvelope"];
+                };
+            };
+        };
+    };
 }

package/dist/types/components/managed/java-managed-agent-client.d.ts

@@ -80,6 +80,8 @@ export declare class JavaManagedAgentClient {
         replayed: boolean;
     }>;
     createWorkspace(request: Schemas['WebShellWorkspaceCreateRequest'], signal?: AbortSignal): Promise<JavaAgentWorkspace>;
+    queryWorkspaceFiles(request: Schemas['WebShellWorkspaceFileQueryRequest'], signal?: AbortSignal): Promise<Schemas['WebShellWorkspaceFilePage']>;
+    readWorkspaceFile(request: Schemas['WebShellWorkspaceFileReadRequest'], signal?: AbortSignal): Promise<Schemas['WebShellWorkspaceFileSnapshot']>;
     workspaceDirectories(request: Schemas['WebShellWorkspaceDirectoryQueryRequest'], signal?: AbortSignal): Promise<Schemas['WebShellWorkspaceDirectoryPage']>;
     getSessionApproval(sessionId: string, signal?: AbortSignal): Promise<Schemas['WebShellSessionApproval']>;
     changeApproval(request: Schemas['WebShellChangeApprovalRequest'], signal?: AbortSignal): Promise<Schemas['WebShellApprovalChangeResult']>;
@@ -144,6 +146,14 @@ export declare class JavaManagedAgentClient {
         modelSelection: components["schemas"]["WebShellModelSelection"];
         replayed: boolean;
     }>;
+    getToolDetails(sessionId: string, itemId: string, signal?: AbortSignal): Promise<{
+        input: {
+            [key: string]: unknown;
+        } | null;
+        output: string | null;
+        truncated: boolean;
+        shellResult?: components["schemas"]["WebShellShellResult"];
+    }>;
     getToolResult(sessionId: string, itemId: string, signal?: AbortSignal): Promise<{
         result: components["schemas"]["PublicToolResult"];
         access: components["schemas"]["ArtifactAccess"];