- Add PairingStore for managing pending requests and approved users - Update SenderGate to support pairing policy with code generation - Add CLI commands: `qwen channel pairing list/approve` - Document pairing flow with rules and usage examples This allows unknown senders to request access via a pairing code that the bot operator approves through the CLI. Co-authored-by: Qwen-Coder <qwen-coder@alibabacloud.com>
5 KiB
Channels
Channels let you interact with a Qwen Code agent from messaging platforms like Telegram, instead of the terminal. You send messages from your phone or desktop chat app, and the agent responds just like it would in the CLI.
How It Works
When you run qwen channel start <name>, Qwen Code:
- Reads the channel configuration from your
settings.json - Spawns an agent process using the Agent Client Protocol (ACP)
- Connects to the messaging platform (e.g., Telegram) and starts listening for messages
- Routes incoming messages to the agent and sends responses back to the chat
Each channel runs as a long-lived process that bridges a messaging platform to a Qwen Code agent.
Quick Start
- Set up a bot on your messaging platform (see the channel-specific guide, e.g., Telegram)
- Add the channel configuration to
~/.qwen/settings.json - Run
qwen channel start <name>
Configuration
Channels are configured under the channels key in settings.json. Each channel has a name and a set of options:
{
"channels": {
"my-channel": {
"type": "telegram",
"token": "$MY_BOT_TOKEN",
"senderPolicy": "allowlist",
"allowedUsers": ["123456789"],
"sessionScope": "user",
"cwd": "/path/to/working/directory",
"instructions": "Optional system instructions for the agent."
}
}
}
Options
| Option | Required | Description |
|---|---|---|
type |
Yes | Channel type: telegram (more coming soon) |
token |
Yes | Bot token. Supports $ENV_VAR syntax to read from environment variables |
senderPolicy |
No | Who can talk to the bot: allowlist (default), open, or pairing |
allowedUsers |
No | List of user IDs allowed to use the bot (used by allowlist and pairing policies) |
sessionScope |
No | How sessions are scoped: user (default), thread, or single |
cwd |
No | Working directory for the agent. Defaults to the current directory |
instructions |
No | Custom instructions prepended to the first message of each session |
Sender Policy
Controls who can interact with the bot:
allowlist(default) — Only users listed inallowedUserscan send messages. Others are silently ignored.pairing— Unknown senders receive a pairing code. The bot operator approves them via CLI, and they're added to a persistent allowlist. Users inallowedUsersskip pairing entirely. See DM Pairing below.open— Anyone can send messages. Use with caution.
Session Scope
Controls how conversation sessions are managed:
user(default) — One session per user. All messages from the same user share a conversation.thread— One session per thread/topic. Useful for group chats with threads.single— One shared session for all users. Everyone shares the same conversation.
Token Security
Bot tokens should not be stored directly in settings.json. Instead, use environment variable references:
{
"token": "$TELEGRAM_BOT_TOKEN"
}
Set the actual token in your shell environment or in a .env file that gets loaded before running the channel.
DM Pairing
When senderPolicy is set to "pairing", unknown senders go through an approval flow:
- An unknown user sends a message to the bot
- The bot replies with an 8-character pairing code (e.g.,
VEQDDWXJ) - The user shares the code with you (the bot operator)
- You approve them via CLI:
qwen channel pairing approve my-channel VEQDDWXJ
Once approved, the user's ID is saved to ~/.qwen/channels/<name>-allowlist.json and all future messages go through normally.
Pairing CLI Commands
# List pending pairing requests
qwen channel pairing list my-channel
# Approve a request by code
qwen channel pairing approve my-channel <CODE>
Pairing Rules
- Codes are 8 characters, uppercase, using an unambiguous alphabet (no
0/O/1/I) - Codes expire after 1 hour
- Maximum 3 pending requests per channel at a time — additional requests are ignored until one expires or is approved
- Users listed in
allowedUsersinsettings.jsonalways skip pairing - Approved users are stored in
~/.qwen/channels/<name>-allowlist.json— treat this file as sensitive
Slash Commands
Channels support slash commands. Some are handled locally by the adapter:
/start— Welcome message/help— List available commands/reset— Reset your session and start fresh
All other slash commands (e.g., /compress, /summary) are forwarded to the agent.
Running
qwen channel start my-channel
The bot runs in the foreground. Press Ctrl+C to stop.