vrr/qwen-code
2
0
Fork 0
mirror of https://github.com/QwenLM/qwen-code.git synced 2026-10-21 22:39:45 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 31
qwen-code/scripts
History
jinye 1afbcffe21
feat(cli): Move bwrap sandboxing to tool execution (#12267) 
* feat(cli): Move bwrap sandboxing to tool execution

Expose the operator-owned tools.executionSandbox policy across the CLI,
route supported interactive entrypoints through the runtime boundary, and
remove the legacy whole-CLI bwrap launch path.

Co-authored-by: Qwen-Coder <qwen-coder@alibabacloud.com>

* fix(cli): close sandbox cutover review gaps

Co-authored-by: Qwen-Coder <qwen-coder@alibabacloud.com>

* test(cli): align settings cache policy fixture

Co-authored-by: Qwen-Coder <qwen-coder@alibabacloud.com>

* fix(cli): fail closed on malformed operator settings

Co-authored-by: Qwen-Coder <qwen-coder@alibabacloud.com>

* test(cli): align serve fast-path fail-closed coverage

Co-authored-by: Qwen-Coder <qwen-coder@alibabacloud.com>

* fix(cli): preserve sandbox policy during settings races

Co-authored-by: Qwen-Coder <qwen-coder@alibabacloud.com>

* fix(cli): preserve sandbox command I/O

Use admitted tool sandbox state in the session prompt. Preserve redirected stdin and byte-exact output with drain-aware completion. Ignore unrelated and empty legacy environment values.

Co-authored-by: Qwen-Coder <qwen-coder@alibabacloud.com>

* fix(cli): stream sandbox command stdio safely

Inherit redirected stdin through the relay instead of buffering it in
JavaScript, and abort confined producers when downstream output closes.

Co-authored-by: Qwen-Coder <qwen-coder@alibabacloud.com>

* fix(core): isolate redirected sandbox stdin

Copy host-backed stdin descriptors through the bwrap relay so confined commands receive only relay-owned pipe endpoints. Keep anonymous pipes, sockets, and character devices streaming without buffering.

Co-authored-by: Qwen-Coder <qwen-coder@alibabacloud.com>

---------

Co-authored-by: Qwen-Coder <qwen-coder@alibabacloud.com>
2026-09-22 10:55:51 +00:00
..
codemod feat(opentui): bundle assets, CI matrix and parity tooling (Batch 7) (#10770) 2026-09-02 08:36:20 +00:00
installation fix(core): carry the PTY load reason on the call, not in module state (#11923) 2026-09-15 12:46:37 +00:00
lib refactor(ci): extract release workflow scripts (#11165) 2026-09-08 07:09:09 +00:00
sandbox-prototype feat(core): Add the bwrap execution foundation (#12067) 2026-09-19 13:54:30 +00:00
sandbox-runtime feat(core): Route runtime tools through bwrap (#12269) 2026-09-20 23:41:24 +00:00
tests test(scripts): warm the pinned corepack pnpm cache before workers fork (#12436) (#12446) 2026-09-22 05:28:28 +00:00
tui-parity chore(cli): bump the OpenTUI renderer to 0.5.10 (#12321) 2026-09-22 08:11:25 +00:00
acp-http-smoke.mjs feat(daemon): merge daemon-mode feature batch into main (#4490) 2026-06-12 00:34:49 +08:00
assert-release-version.mjs refactor(build,release): Use pnpm workspace builds and publishing (#12400) 2026-09-21 15:38:36 +00:00
audit-runtime-critical.js ci: keep the critical-audit gate honest when npm cannot answer (#7743) 2026-07-26 06:59:13 +00:00
benchmark-api-latency.mjs ci: make the Prettier lane a real gate (#11117) 2026-09-07 00:44:01 +00:00
build-hosted-installation-assets.js fix(installer): auto-detect SYSTEM account and default PATH scope to machine (#4903) 2026-06-10 21:02:10 +08:00
build-standalone-release.js fix(release): retry transient standalone runtime downloads (#11870) (#11879) 2026-09-21 08:23:58 +00:00
build.js refactor(build,release): Use pnpm workspace builds and publishing (#12400) 2026-09-21 15:38:36 +00:00
build_package.js fix(build): clean stale outputs before tsc --build to prevent TS5055 (#4453) 2026-05-23 23:06:31 +08:00
build_sandbox.js ci(pnpm): install with pnpm everywhere and retire package-lock.json (#11859) 2026-09-20 02:11:25 +00:00
build_vscode_companion.js Sync upstream Gemini-CLI v0.8.2 (#838) 2025-10-23 09:27:04 +08:00
check-build-status.js fix(cli): scope startup warnings to dev sessions (#8456) 2026-08-29 13:22:34 +00:00
check-core-subpath-exports.mjs perf(cli): import core modules directly instead of the package root (#10957) 2026-09-06 11:21:50 +00:00
check-desktop-isolation.js ci(pnpm): install with pnpm everywhere and retire package-lock.json (#11859) 2026-09-20 02:11:25 +00:00
check-i18n.ts fix(cli): localize approval mode UI labels (#6592) 2026-07-11 00:07:03 +00:00
check-lockfile.js ci(pnpm): install with pnpm everywhere and retire package-lock.json (#11859) 2026-09-20 02:11:25 +00:00
check-serve-fast-path-bundle.js refactor(serve): separate ACP control plane and channel harness (#11916) 2026-09-16 07:24:11 +00:00
check-tui-dep-direction.mjs feat(cli): OpenTUI migration infra batch — locked deps, dependency-direction arch check, framework-neutral streaming model (#10134) 2026-08-28 02:44:46 +00:00
clean-package-build-artifacts.js feat(channels): add DingTalk Workspace channel (#9394) 2026-08-25 06:40:47 +00:00
clean.js feat(desktop): Add desktop app package with Qwen ACP SDK integration (#3778) 2026-06-11 21:57:20 +08:00
cli-entry.js fix(cli): preserve Qwen Review startup version in footers (#8431) 2026-08-04 14:58:56 +00:00
copy-browser-use-assets.js feat(browser-use): add Chrome Native Messaging relay (#11242) 2026-09-18 05:50:24 +00:00
copy_bundle_assets.js feat(browser-use): add Chrome Native Messaging relay (#11242) 2026-09-18 05:50:24 +00:00
copy_files.js feat(browser-use): add Chrome Native Messaging relay (#11242) 2026-09-18 05:50:24 +00:00
create-standalone-package.js feat(core): Add the bwrap execution foundation (#12067) 2026-09-19 13:54:30 +00:00
create_alias.sh fix: ambiguous literals (#461) 2025-08-27 15:23:21 +08:00
daemon-dev.js feat(serve): add workspace-scoped Skills runtime (#10697) 2026-09-05 08:03:24 +00:00
dev.js feat(browser-use): add Chrome Native Messaging relay (#11242) 2026-09-18 05:50:24 +00:00
esbuild-shims.js perf(cli): code-split lowlight to cut startup V8 parse cost (#4070) 2026-05-15 17:26:18 +08:00
export-omni-trajectory.js feat(omni): integrate multimodal media pipeline into main (#12019) 2026-09-16 12:15:45 +00:00
generate-changelog.js feat(release): user-facing bilingual digest for release notes (#9216) 2026-08-17 00:12:04 +00:00
generate-git-commit-info.js # 🚀 Sync Gemini CLI v0.2.1 - Major Feature Update (#483) 2025-09-01 14:48:55 +08:00
generate-release-notes.js feat(release): user-facing bilingual digest for release notes (#9216) 2026-08-17 00:12:04 +00:00
generate-settings-schema.ts feat(goal): stop a Goal at a turn or an active-time budget (#11457) 2026-09-11 01:01:02 +00:00
get-release-version.js refactor(ci): extract release workflow scripts (#11165) 2026-09-08 07:09:09 +00:00
lint.js ci: make the Prettier lane a real gate (#11117) 2026-09-07 00:44:01 +00:00
local_telemetry.js Merge tag 'v0.3.0' into chore/sync-gemini-cli-v0.3.0 2025-09-11 16:26:56 +08:00
measure-flicker.mjs ci: make the Prettier lane a real gate (#11117) 2026-09-07 00:44:01 +00:00
pnpm-package.js perf(dev): add pnpm worktree bootstrap foundation (#10449) 2026-09-08 03:07:40 +00:00
pre-commit.js Sync upstream Gemini-CLI v0.8.2 (#838) 2025-10-23 09:27:04 +08:00
prepare-package.js ci(pnpm): install with pnpm everywhere and retire package-lock.json (#11859) 2026-09-20 02:11:25 +00:00
prepare.js feat(web-shell): git status chip, visual working-tree diff, and sidebar git status (#7054) 2026-07-18 10:06:07 +00:00
pty-e2e.sh feat(opentui): bundle assets, CI matrix and parity tooling (Batch 7) (#10770) 2026-09-02 08:36:20 +00:00
release-packages.mjs refactor(build,release): Use pnpm workspace builds and publishing (#12400) 2026-09-21 15:38:36 +00:00
release-script-utils.js feat(installer): add standalone hosted install and uninstall flow (#3828) 2026-05-21 11:57:10 +08:00
review-audit-layers.mts feat(review): cover modeled-system defect layers in the reverse audit (#8956) 2026-08-12 18:15:11 +00:00
run-java-daemon-sdk-e2e.ts ci: reduce SDK Java runner queueing (#8441) 2026-08-03 16:21:05 +00:00
sandbox_command.js feat(cli): Move bwrap sandboxing to tool execution (#12267) 2026-09-22 10:55:51 +00:00
sdk-node-exporter-stub.js chore(deps): Clear high-severity CVE baseline and harden the security gate (#9584) 2026-08-21 07:43:32 +00:00
setup-worktree.js chore(pnpm): scope build approvals, pin the ACP zod peer, add a freshness lane (#11797) 2026-09-14 04:45:19 +00:00
sign-release.sh feat(cli): add standalone auto-update support (#4629) 2026-06-04 22:53:12 +08:00
start.js fix(cli): scope startup warnings to dev sessions (#8456) 2026-08-29 13:22:34 +00:00
telemetry.js feat(core): support QWEN_HOME env var to customize config directory (#2953) 2026-05-09 15:51:52 +08:00
telemetry_gcp.js fix(mcp): update OAuth client names and improve MCP commands 2026-02-08 10:46:48 +08:00
telemetry_utils.js feat(core): support QWEN_HOME env var to customize config directory (#2953) 2026-05-09 15:51:52 +08:00
test-rewind-e2e.sh fix(test): update rewind E2E Test 1 assertion after isRealUserTurn fix (#3622) 2026-04-26 06:49:42 +08:00
test-windows-paths.js chore: consistently import node modules with prefix (#3013) 2025-08-25 20:11:27 +00:00
tmux-compare.sh feat(opentui): bundle assets, CI matrix and parity tooling (Batch 7) (#10770) 2026-09-02 08:36:20 +00:00
unused-keys-only-in-locales.json feat: add /diff command and git diff statistics utility (#3491) 2026-05-10 11:15:59 +08:00
upload-aliyun-oss-assets.js ci: host PR evidence outside Git (#9985) 2026-08-29 04:36:57 +00:00
verify-capture.mjs refactor!: retire @qwen-code/webui (#9812) 2026-09-05 09:13:54 +00:00
verify-installation-release.js feat(release): add gated bun/OpenTUI preview flavor to standalone releases (#10814) 2026-09-02 12:01:56 +00:00
version.js refactor(build,release): Use pnpm workspace builds and publishing (#12400) 2026-09-21 15:38:36 +00:00
vitest-global-setup.js feat(channels): add DingTalk Workspace channel (#9394) 2026-08-25 06:40:47 +00:00
workspaces.js refactor(build,release): Use pnpm workspace builds and publishing (#12400) 2026-09-21 15:38:36 +00:00