qwen-code/packages
yiliang114 214b895b1b Merge origin/main, and deny the new exec tool to workspace Agents
Four jobs failed on the previous run and three of them shared one cause, in our
file: `AGENT_TOOL_CLASSIFICATION` must cover every `CoreToolName`, and main
added `exec`, so `tsc --build` failed on `capability.ts` and took the core build
— and with it Test, Integration Tests and web-shell E2E — down with it.

`exec` is classified `deny`, and that is the security-relevant answer rather
than a formality. It is the code-mode entry point: ordinary tools are reached
from inside an exec program as `tools.<name>(args)`. Allowing it would let an
Agent call `tools.run_shell_command(...)` and every other denied tool through
the wrapper, undoing the whole read-only ceiling in one line. Coverage is now
exact — no unclassified core tool, nothing classified that is not one.

The fourth failure was `check-lint-gate-freshness`: main changed
`eslint.legacy-filenames.mjs` after the merge I had just pushed. main moved
again during the run, so this merges it again (6 more commits, no conflicts).

Local runs are trustworthy again: my `npm ci` predated main's code-mode and
jieba dependencies, so `tsc` reported implicit-`any` errors in
`code-mode/host.ts` that CI never saw, and eslint reported an unused
`import/no-internal-modules` disable in `qwen-live`. Both were missing-package
artefacts. Reinstalling clears them, which also confirms the earlier decision
not to "fix" that disable directive — it is load-bearing wherever the package
is actually present.

Core builds clean; 840 agent/config/tool tests pass; audits 383 / 34 / 21 / 15;
`npm run lint:ci` and `check-i18n` both green with nothing filtered.

Refs #11206
2026-09-11 18:19:24 +09:00
..
acp-bridge Merge origin/main into codex/multi-agent-mesh-foundation 2026-09-11 17:17:45 +09:00
audio-capture chore(release): v0.23.3 (#11583) 2026-09-10 15:03:19 +00:00
channels chore(release): v0.23.3 (#11583) 2026-09-10 15:03:19 +00:00
chrome-extension chore(release): v0.23.3 (#11583) 2026-09-10 15:03:19 +00:00
cli Merge origin/main, and deny the new exec tool to workspace Agents 2026-09-11 18:19:24 +09:00
core Merge origin/main, and deny the new exec tool to workspace Agents 2026-09-11 18:19:24 +09:00
cua-driver fix(cua): preserve degraded UIAccess responses (#11479) 2026-09-09 13:25:35 +00:00
desktop-shell fix(desktop): realign the release test with the new signing step (#11522) 2026-09-10 05:25:34 +00:00
live-host feat(live): add visual input, proactive assistance and memory (#11369) 2026-09-11 03:13:13 +00:00
mobile-mcp chore(deps): Clear high-severity CVE baseline and harden the security gate (#9584) 2026-08-21 07:43:32 +00:00
node-repl feat(core): add CodeModeOnly tool execution (#10607) 2026-09-11 07:40:35 +00:00
qwen-live feat(live): add visual input, proactive assistance and memory (#11369) 2026-09-11 03:13:13 +00:00
sdk-java fix(java): make SDK worker threads daemon (#9925) 2026-09-01 18:06:25 +00:00
sdk-python feat(core): add OpenAI Responses API content generator (#8169) 2026-09-09 22:36:23 +00:00
sdk-typescript fix(web-shell): persist cancelled responses and elapsed time (#11608) 2026-09-11 04:30:09 +00:00
vscode-ide-companion Merge origin/main into codex/multi-agent-mesh-foundation 2026-09-11 17:17:45 +09:00
web-shell Merge origin/main, and deny the new exec tool to workspace Agents 2026-09-11 18:19:24 +09:00
web-templates chore(release): v0.23.3 (#11583) 2026-09-10 15:03:19 +00:00
zed-extension docs: consolidate assorted documentation corrections (#9855) 2026-08-26 08:52:13 +00:00