/** * @license * Copyright 2025 Google LLC * SPDX-License-Identifier: Apache-2.0 */ import type { MCPServerConfig, BugCommandSettings, TelemetrySettings, OutboundCorrelationSettings, AuthType, ChatCompressionSettings, ModelProvidersConfig, ProviderProtocolConfig, } from '@qwen-code/qwen-code-core'; import { ApprovalMode, DEFAULT_MAX_SUBAGENT_DEPTH, GOAL_MAX_ACTIVE_MINUTES_CAP, GOAL_MAX_TURNS_CAP, DEFAULT_WEB_SEARCH_MAX_PER_SESSION, DEFAULT_WEB_SEARCH_TIMEOUT_MS, MAX_WEB_SEARCH_MAX_PER_SESSION, MAX_WEB_SEARCH_TIMEOUT_MS, DEFAULT_MAX_TOOL_CALLS_PER_TURN, DEFAULT_SENSITIVE_SPAN_ATTRIBUTE_MAX_LENGTH, DEFAULT_QWEN_CUSTOM_IGNORE_FILE_NAMES, DEFAULT_STOP_HOOK_BLOCK_CAP, DEFAULT_TOOL_OUTPUT_BATCH_BUDGET, DEFAULT_TOOL_RESULTS_TOTAL_CHARS_THRESHOLD, DEFAULT_TRUNCATE_TOOL_OUTPUT_LINES, DEFAULT_TRUNCATE_TOOL_OUTPUT_THRESHOLD, OutputFormat, REASONING_EFFORT_TIERS, SENSITIVE_SPAN_ATTRIBUTE_MAX_LENGTH_LIMIT, } from '@qwen-code/qwen-code-core'; import type { CustomTheme } from '../ui/themes/theme.js'; import { getLanguageSettingsOptions } from '../i18n/languages.js'; import { MergeStrategy } from '../utils/deepMerge.js'; import type { Mem0Settings } from './mem0-settings.js'; export const DEFAULT_OPENAI_LOG_RETENTION_DAYS = 7; export type SettingsType = | 'boolean' | 'string' | 'number' | 'integer' | 'array' | 'object' | 'enum'; export type SettingsValue = | boolean | string | number | string[] | object | undefined; /** * Setting datatypes that "toggle" through a fixed list of options * (e.g. an enum or true/false) rather than allowing for free form input * (like a number or string). */ export const TOGGLE_TYPES: ReadonlySet = new Set([ 'boolean', 'enum', ]); /** * Setting types edited as a number in the settings dialogs. `integer` is a * number the write-time validator also requires to be whole; handling it as * anything else leaves the setting uneditable. */ export function isNumericSettingType(type: SettingsType | undefined): boolean { return type === 'number' || type === 'integer'; } export interface SettingEnumOption { value: string | number; label: string; } export interface SettingDefinition { type: SettingsType; label: string; category: string; requiresRestart: boolean; // Required even when there is no fixed default (use // `default: undefined as | undefined`): it is load-bearing for the // `satisfies SettingsSchema` constraint and `InferSettings` below, and at // runtime it feeds only display and reset paths, never the load path. default: SettingsValue; description?: string; parentKey?: string; key?: string; properties?: SettingsSchema; showInDialog?: boolean; mergeStrategy?: MergeStrategy; /** Enum type options */ options?: readonly SettingEnumOption[]; /** Schema for array items when type is 'array' */ items?: SettingItemDefinition; /** Minimum value for number/integer-type settings. */ minimum?: number; /** Maximum value for number/integer-type settings. */ maximum?: number; /** Values rejected even when they fall within the declared range. */ excludedValues?: ReadonlyArray; /** * Primitive shapes a field accepted before it was expanded to its current * type. The exported JSON Schema wraps the field in `anyOf` so values from * those older shapes don't trip the IDE validator while the runtime * migration is still pending. Has no runtime effect — it's purely a * compatibility hint for editors. * * Narrowed to the subset our generator can faithfully emit as a * one-liner `{ type: }` schema fragment. `'enum'` is * not a valid JSON Schema `type` value at all (enum constraints * use the `enum` keyword, not `type: 'enum'`), so allowing it here * would silently produce an invalid `settings.schema.json`. * `'object'` IS a valid JSON Schema type, but a bare * `{ type: 'object' }` legacy entry would accept ANY object value * — most likely not what the field's pre-expansion shape actually * permitted. Future legacy shapes that need `enum` / structured- * object compatibility should land their own branch in * `convertSettingToJsonSchema` (with proper `enum:` / `properties:` * companions) instead of widening this set. */ legacyTypes?: ReadonlyArray<'boolean' | 'string' | 'number' | 'array'>; /** * Escape hatch for the JSON Schema generator: when set, this object is * emitted verbatim under the setting's properties entry instead of the * shape derived from `type`/`properties`/etc. The `description` is still * carried forward from the SettingDefinition. * * Use sparingly — for most settings the generator's normal mapping is * preferable so the source schema stays the single source of truth. The * one valid case so far is settings whose accepted runtime shape is a * union (e.g. string | { path } | { small, large }) that the * SettingDefinition `type` field cannot express. */ jsonSchemaOverride?: Record; } /** * Schema definition for array item types. * Supports simple types (string, number, boolean) and complex object types. */ export interface SettingItemDefinition { type: 'string' | 'number' | 'boolean' | 'object' | 'array'; properties?: Record< string, SettingItemDefinition & { required?: boolean; enum?: string[]; additionalProperties?: SettingItemDefinition; } >; items?: SettingItemDefinition; required?: boolean; enum?: string[]; description?: string; additionalProperties?: boolean | SettingItemDefinition; } export interface SettingsSchema { [key: string]: SettingDefinition; } /** * Source for a single tier of custom ASCII art. Either an inline string * or a reference to a file on disk that contains the art. */ export type AsciiArtSource = string | { path: string }; /** * Setting value for `ui.customAsciiArt`. Accepts a bare source (treated as * both width tiers), or a width-aware `{small, large}` object. */ export type CustomAsciiArtSetting = | AsciiArtSource | { small?: AsciiArtSource; large?: AsciiArtSource }; /** * Common items schema for hook definitions. * Used by all hook event types in the hooks configuration. */ const HOOK_DEFINITION_ITEMS: SettingItemDefinition = { type: 'object', description: 'A hook definition with an optional matcher and a list of hook configurations.', properties: { matcher: { type: 'string', description: 'An optional matcher pattern to filter when this hook definition applies.', }, sequential: { type: 'boolean', description: 'Whether the hooks should be executed sequentially instead of in parallel.', }, hooks: { type: 'array', description: 'The list of hook configurations to execute.', required: true, items: { type: 'object', description: 'A hook configuration entry that defines a hook to execute.', properties: { type: { type: 'string', description: 'The type of hook. Note: "function" type is only available via SDK registration, not settings.json.', enum: ['command', 'http', 'prompt'], required: true, }, command: { type: 'string', description: 'The command to execute when the hook is triggered. Required for "command" type.', }, url: { type: 'string', description: 'The URL to send the POST request to. Required for "http" type.', }, prompt: { type: 'string', description: 'The prompt to send to the model. Required for "prompt" type.', }, model: { type: 'string', description: 'The optional model to use for a "prompt" hook.', }, headers: { type: 'object', description: 'HTTP headers to include in the request. Supports env var interpolation ($VAR, ${VAR}).', additionalProperties: { type: 'string' }, }, allowedEnvVars: { type: 'array', description: 'List of environment variables allowed for interpolation in headers and URL.', items: { type: 'string' }, }, name: { type: 'string', description: 'An optional name for the hook.', }, description: { type: 'string', description: 'An optional description of what the hook does.', }, timeout: { type: 'number', description: 'Timeout in seconds for the hook execution. Defaults to 60 for command hooks, 600 for http hooks and 30 for prompt hooks. For command hooks, a value of 1000 or more is read as legacy milliseconds.', }, env: { type: 'object', description: 'Environment variables to set when executing the hook command.', additionalProperties: { type: 'string' }, }, async: { type: 'boolean', description: 'Whether to execute the hook asynchronously (non-blocking, for "command" type only).', }, once: { type: 'boolean', description: 'Whether to execute the hook only once per session (for "http" type).', }, statusMessage: { type: 'string', description: 'A message to display while the hook is executing.', }, shell: { type: 'string', description: 'The shell to use for command execution.', enum: ['bash', 'powershell'], }, }, }, }, }, }; export type MemoryImportFormat = 'tree' | 'flat'; export type DnsResolutionOrder = 'ipv4first' | 'verbatim'; /** * The canonical schema for all settings. * The structure of this object defines the structure of the `Settings` type. * `as const` is crucial for TypeScript to infer the most specific types possible. */ const SETTINGS_SCHEMA = { // Maintained for compatibility/criticality mcpServers: { type: 'object', label: 'MCP Servers', category: 'Advanced', // Hot-reloadable (sub-task 3): a runtime edit is reconciled live by the // SettingsWatcher → reinitializeMcpServers path. Marking it // restart-required would make the watcher suppress MCP-only edits, so the // listener that drives the reconcile would never fire. requiresRestart: false, default: {} as Record, description: 'Configuration for MCP servers.', showInDialog: false, mergeStrategy: MergeStrategy.SHALLOW_MERGE, }, // Channels configuration (Telegram, Discord, etc.) channels: { type: 'object', label: 'Channels', category: 'Advanced', requiresRestart: true, default: {} as Record>, description: 'Configuration for messaging channels.', showInDialog: false, mergeStrategy: MergeStrategy.SHALLOW_MERGE, }, serve: { type: 'object', label: 'Serve', category: 'Advanced', requiresRestart: true, default: {}, description: 'Persistent qwen serve settings.', showInDialog: false, mergeStrategy: MergeStrategy.SHALLOW_MERGE, properties: { channels: { type: 'array', label: 'Startup Channels', category: 'Advanced', requiresRestart: true, default: [] as string[], description: 'Messaging channels to start automatically when the daemon boots.', showInDialog: false, items: { type: 'string' }, }, tokenQr: { type: 'boolean', label: 'Token QR', category: 'Advanced', requiresRestart: true, default: false, description: "Print the token-bearing QR even when stdout is captured and the bearer is an operator-supplied (stable) token. Honored from user, system, and system-defaults settings only — a workspace settings file must not be able to push the operator's credential into logs; qwen serve --no-token-qr suppresses the QR for that run. Same effect as qwen serve --token-qr.", showInDialog: false, }, maxConcurrentSubSessionsPerCaller: { type: 'integer', label: 'Max Concurrent Sub-Sessions Per Caller', category: 'Advanced', requiresRestart: true, default: 16, minimum: 1, description: 'Per-session ceiling on concurrent in-flight sub-sessions spawned via the create_sub_session tool.', showInDialog: false, }, maxConcurrentSubSessionsTotal: { type: 'integer', label: 'Max Concurrent Sub-Sessions Total', category: 'Advanced', requiresRestart: true, default: 24, minimum: 1, maximum: 1024, description: 'Workspace-wide ceiling on concurrent in-flight sub-sessions across all callers.', showInDialog: false, }, }, }, // Model providers configuration grouped by provider id modelProviders: { type: 'object', label: 'Model Providers', category: 'Model', requiresRestart: false, default: {} as ModelProvidersConfig, description: 'Model providers configuration keyed by provider id (a built-in provider protocol such as "openai" or "gemini", or a custom id mapped via providerProtocol). Each entry is an array of model configurations. OpenAI-compatible models can select wireApi: "chat-completions" or "responses"; omitting wireApi keeps the declared protocol (Chat Completions under openai). Released openai-responses declarations remain readable; new setup writes openai plus wireApi.', showInDialog: false, mergeStrategy: MergeStrategy.REPLACE, }, // Maps a custom modelProviders provider id to its SDK protocol (AuthType). providerProtocol: { type: 'object', label: 'Provider Protocols', category: 'Model', requiresRestart: true, default: {} as ProviderProtocolConfig, description: 'Maps a custom modelProviders provider id to the SDK protocol that routes its requests (e.g. {"idealab": "openai"}). Lets a custom provider id reuse a built-in protocol. Built-in provider ids (openai, gemini, anthropic, vertex-ai, qwen-oauth) are routed automatically and need no entry. New OpenAI configurations map to openai and select wireApi per model; released openai-responses mappings remain readable.', showInDialog: false, mergeStrategy: MergeStrategy.REPLACE, }, plansDirectory: { type: 'string', label: 'Plans Directory', category: 'Advanced', requiresRestart: true, default: undefined as string | undefined, description: 'Custom directory for approved Plan Mode files. Relative paths are resolved from the project root, and the resolved path must stay within the project root. Defaults to ~/.qwen/plans.', showInDialog: false, }, // Environment variables fallback env: { type: 'object', label: 'Environment Variables', category: 'Advanced', requiresRestart: true, default: {} as Record, description: 'Environment variables to set as fallback defaults. These are loaded with the lowest priority: system environment variables > .env files > settings.json env field.', showInDialog: false, mergeStrategy: MergeStrategy.SHALLOW_MERGE, }, proxy: { type: 'string', label: 'Proxy', category: 'Advanced', requiresRestart: true, default: undefined as string | undefined, description: 'Proxy URL for CLI HTTP requests. Takes precedence over proxy environment variables when --proxy is not provided.', showInDialog: false, }, general: { type: 'object', label: 'General', category: 'General', requiresRestart: false, default: {}, description: 'General application settings.', showInDialog: false, properties: { preferredEditor: { type: 'string', label: 'Preferred Editor', category: 'General', requiresRestart: false, default: undefined as string | undefined, description: 'The preferred editor to open files in.', showInDialog: true, }, outputStyle: { type: 'string', label: 'Output Style', category: 'General', // Generic settings edits do not rebuild the running system instruction; // `/output-style` owns the separate live-update path. requiresRestart: true, default: undefined as string | undefined, description: 'Name of the output style that shapes how responses are written: a built-in such as "Concise" or "Explanatory", or a custom style\'s name — its frontmatter `name`, defaulting to the file name without ".md" — from ~/.qwen/output-styles or .qwen/output-styles. Leave unset for the default style. Change it with /output-style. Only the built-ins are available in --bare and --safe-mode.', // The style list includes user/project-defined entries; the dedicated // /output-style picker owns selection rather than a static enum here. showInDialog: false, }, vimMode: { type: 'boolean', label: 'Vim Mode', category: 'General', requiresRestart: false, default: false, description: 'Enable Vim keybindings', showInDialog: true, }, voice: { type: 'object', label: 'Voice Dictation', category: 'General', requiresRestart: false, default: {}, description: 'Voice dictation settings.', showInDialog: false, properties: { enabled: { type: 'boolean', label: 'Voice Dictation', category: 'General', requiresRestart: false, default: false, description: 'Enable voice dictation in the prompt input.', showInDialog: false, }, mode: { type: 'enum', label: 'Voice Dictation Mode', category: 'General', requiresRestart: false, default: 'hold', description: 'How push-to-talk behaves: "hold" to talk while held, or "tap" to start and tap (or pause) to stop and submit.', showInDialog: false, options: [ { value: 'hold', label: 'Hold to talk' }, { value: 'tap', label: 'Tap to toggle' }, ], }, language: { type: 'string', label: 'Voice Dictation Language', category: 'General', requiresRestart: false, default: '', description: 'Preferred spoken language for voice transcription (e.g. "english", "chinese"). Leave empty to auto-detect.', showInDialog: false, }, keytermsFile: { type: 'string', label: 'Voice Dictation Keyterms File', category: 'General', requiresRestart: false, default: '', description: 'Path to a custom keyterms file (one term per line, "#" for comments) that biases voice transcription toward domain-specific terms. Relative paths resolve from the workspace root; defaults to ".qwen/voice-keyterms.txt" when present. The file contents are sent to the ASR provider and it is read only in trusted workspaces. Only applies to Qwen ASR models (qwen3-asr-*).', showInDialog: false, }, refineTranscript: { type: 'boolean', label: 'Refine Voice Transcript', category: 'General', requiresRestart: false, default: true, description: 'Clean up voice transcripts with the fast model before inserting them — removes filler words and fixes recognition errors while preserving meaning. Falls back to the raw transcript on failure, and is skipped when no fast model is configured.', showInDialog: false, }, }, }, enableAutoUpdate: { type: 'boolean', label: 'Enable Auto Update', category: 'General', requiresRestart: false, default: true, description: 'Enable automatic update checks and installations on startup.', showInDialog: true, }, batchAutoCollect: { type: 'boolean', label: 'Batch Auto Collect', category: 'General', requiresRestart: true, default: true, description: "Collect this project's /batch-api tasks in interactive sessions when their batch finishes (also at startup) and write the results. Polls the provider over HTTP; never calls the model and never retries failed items.", showInDialog: false, }, showSessionRecap: { type: 'boolean', label: 'Show Session Recap', category: 'General', requiresRestart: false, // Off by default — an ambient background LLM call isn't something // users should be opted into silently, especially when `fastModel` // is unset and the call would land on the main coding model. // Manual `/recap` works regardless. default: false, description: 'Auto-show a one-line "where you left off" recap when returning to the terminal after being away. Off by default. Use /recap to trigger manually regardless of this setting.', showInDialog: true, }, sessionRecapAwayThresholdMinutes: { type: 'number', label: 'Session Recap Away Threshold (minutes)', category: 'General', requiresRestart: false, default: 5, minimum: 1, description: "How many minutes the terminal must be blurred before an auto-recap fires on the next focus-in. Matches Claude Code's default of 5 minutes; raise if you briefly alt-tab and do not want recaps to pile up.", showInDialog: true, }, cleanupPeriodDays: { type: 'number', label: 'Cleanup Period (days)', category: 'General', // LoadedSettings._merged is cached without verified setValue→recompute // paths in all UI flows. Mark restart-required so users aren't // surprised when a mid-session edit doesn't take effect immediately. requiresRestart: true, default: 30, minimum: 0, description: 'Number of days to retain ~/.qwen/file-history/ session backups used by /rewind, background subagent transcripts under /subagents/, and session debug logs under the runtime debug/ directory. Data older than this is removed by a background housekeeping pass that runs at most once per day. Set to 0 for minimum retention (~1 hour) — protects sessions touched in the last hour, plus the currently active session.', showInDialog: true, }, gitCoAuthor: { type: 'object', label: 'Attribution', category: 'General', requiresRestart: false, // Match `normalizeGitCoAuthor`'s runtime defaults so the IDE // schema publishes the same "enabled by default" hint users see // at runtime. The empty-object form here would silently lose // editor-surfaced defaults. default: { commit: true, pr: true }, description: 'Attribution added to git commits and pull requests created through Qwen Code.', showInDialog: false, // Pre-V4 settings stored this as a single boolean. The V3→V4 // migration rewrites those on first launch, but the IDE schema // validator runs before that — accept the boolean shape so users // editing settings.json in VS Code don't see a spurious warning // until they run qwen once. Config.normalizeGitCoAuthor handles // the boolean at runtime. legacyTypes: ['boolean'], properties: { commit: { type: 'boolean', label: 'Attribution: commit', category: 'General', requiresRestart: false, default: true, description: 'Add a Co-authored-by trailer to git commit messages AND attach a per-file AI-attribution git note (`refs/notes/ai-attribution`) for commits made through Qwen Code. Disabling skips both.', showInDialog: true, }, pr: { type: 'boolean', label: 'Attribution: PR', category: 'General', requiresRestart: false, default: true, description: 'Append a Qwen Code attribution line to PR descriptions when running `gh pr create`.', showInDialog: true, }, }, }, debugKeystrokeLogging: { type: 'boolean', label: 'Debug Keystroke Logging', category: 'General', requiresRestart: false, default: false, description: 'Enable debug logging of keystrokes to the console.', showInDialog: false, }, language: { type: 'enum', label: 'Language: UI', category: 'General', requiresRestart: true, default: 'auto', description: 'The language for the user interface. Use "auto" to detect from system settings. ' + 'You can also use custom language codes (e.g., "es", "fr") by placing JS language files ' + 'in ~/.qwen/locales/ (e.g., ~/.qwen/locales/es.js).', showInDialog: true, options: [] as readonly SettingEnumOption[], }, outputLanguage: { type: 'string', label: 'Language: Model', category: 'General', requiresRestart: true, default: 'auto', description: 'The language for LLM output. Use "auto" to follow the user input language, ' + 'or set a specific language.', showInDialog: true, }, terminalBell: { type: 'boolean', label: 'Terminal Bell Notification', category: 'General', requiresRestart: false, default: true, description: 'Play terminal bell sound when response completes or needs approval.', showInDialog: true, }, notificationMode: { type: 'enum', label: 'Notification Mode', category: 'General', requiresRestart: false, default: 'all', description: 'Which unfocused-terminal events fire a bell/OS notification. ' + '"all" fires on every tool approval prompt AND on task completion (current behavior). ' + '"task-complete" suppresses the per-approval notification and only fires when a long task returns to idle. ' + 'Requires `terminalBell` to be enabled; otherwise no notifications fire regardless of mode.', showInDialog: true, options: [ { value: 'all', label: 'All (approvals + task completion)' }, { value: 'task-complete', label: 'Task completion only' }, ], }, preventSystemSleep: { type: 'boolean', label: 'Prevent System Sleep While Running', category: 'General', // Read once at startup via Config.preventSystemSleep (a readonly field // captured in loadCliConfig), so a runtime toggle only takes effect // after restart. requiresRestart: true, default: true, description: 'Prevent the system from sleeping while Qwen Code is streaming a model response or executing tools. Idle prompt time and permission prompts do not inhibit sleep.', showInDialog: true, }, chatRecording: { type: 'boolean', label: 'Chat Recording', category: 'General', requiresRestart: true, default: true, description: 'Enable saving chat history to disk. Disabling this will also prevent --continue and --resume from working.', showInDialog: false, }, defaultFileEncoding: { type: 'enum', label: 'Default File Encoding', category: 'General', requiresRestart: false, default: 'utf-8', description: 'Default encoding for new files. Use "utf-8" (default) for UTF-8 without BOM, or "utf-8-bom" for UTF-8 with BOM. Only change this if your project specifically requires BOM.', showInDialog: false, options: [ { value: 'utf-8', label: 'UTF-8 (without BOM)' }, { value: 'utf-8-bom', label: 'UTF-8 with BOM' }, ], }, }, }, review: { type: 'object', label: 'Review', category: 'General', requiresRestart: false, default: {}, description: 'Settings for the /review skill.', showInDialog: false, properties: { attribution: { type: 'boolean', label: 'Attribution: review', category: 'General', requiresRestart: false, default: true, description: 'Append the attribution footer naming the model and CLI version (e.g. "_— qwen3-coder via Qwen Code /review (v0.21.2)_") to review bodies and inline comments posted to GitHub. Disable to post reviews without VISIBLE AI attribution: no footer, and no "**[Critical]**"/"**[Suggestion]**" severity markers on posted comments and body lists. Unattributed posts stay identifiable in the raw source: each posted comment carries an invisible severity marker ("") and the review body carries a ledger marker ("") — anything reading comment bodies (GitHub API automation, the workflows this setting couples to) still recognizes a /review artifact, and presubmit duplicate detection recognizes the reviewing account\'s earlier posts by the severity marker, though unattributed posts from other accounts escape it. Another consequence: qwen-autofix\'s Critical-only mode (engaged after round 5, or earlier when a counting window\'s diff-growth budget trips) no longer recognizes the posted findings as Critical and defers them. Only honored from User, System, and SystemDefaults settings scopes; values set in Workspace settings are ignored, so a repository cannot set review policy for its reviewers.', showInDialog: true, }, sandbox: { type: 'enum', label: 'Sandbox the reviewed code: review', category: 'General', requiresRestart: false, default: 'off', description: 'Run the REVIEWED repository\'s own commands — `npm ci` with its install scripts, the build, the test suite, and every mutation probe — inside a container instead of directly as you. A review executes the code it is reviewing, and today those commands inherit the review process\'s whole environment (on CI that includes the model and GitHub credentials). "auto" uses a container when docker or podman answers and runs directly when neither does; "required" refuses to run them unsandboxed, which makes the evidence that depends on execution (build/test findings, mutation verdicts, `Source: [probe]`) unavailable for that run rather than ending the review; "off" is today\'s behaviour and stays the default, because containerising a build by surprise changes what native modules compile against. Only honored from User, System, and SystemDefaults settings scopes; values set in Workspace settings are ignored, so a repository cannot switch off the containment that exists to contain it.', showInDialog: true, options: [ { value: 'off', label: 'Off (run the reviewed code directly)' }, { value: 'auto', label: 'Auto (container when one is available)' }, { value: 'required', label: 'Required (never run it unsandboxed)' }, ], }, effort: { type: 'enum', label: 'Default effort: review', category: 'General', requiresRestart: false, default: 'auto', description: 'Default effort for /review when neither --effort nor a project-remembered explicitly typed level applies. "auto" keeps the built-in rule (high for PRs, medium for local changes). An explicit or remembered level wins; an effective --comment still forces high and --fix still floors at medium. Only honored from User, System, and SystemDefaults settings scopes; values set in Workspace settings are ignored, so a repository cannot set review policy for its reviewers.', showInDialog: true, options: [ { value: 'auto', label: 'Auto (high for PRs, medium for local)' }, { value: 'low', label: 'Low' }, { value: 'medium', label: 'Medium' }, { value: 'high', label: 'High' }, ], }, comment: { type: 'boolean', label: 'Comment by default: review', category: 'General', requiresRestart: false, default: false, description: 'Treat every PR /review as if --comment was passed: findings are posted to the pull request without the flag. The post still binds to the PR named in the invocation. Enable only if you always want reviews published. Only honored from User, System, and SystemDefaults settings scopes; values set in Workspace settings are ignored, so a repository cannot set review policy for its reviewers.', showInDialog: true, }, severityFloor: { type: 'enum', label: 'Posting floor: review', category: 'General', requiresRestart: false, default: 'auto', description: 'The lowest severity a PR /review posts when --severity-floor is not given. "auto" keeps the round-adaptive default: Suggestions post through round 5, and from round 6 only Criticals post while otherwise-postable high-confidence Suggestions are recorded and deferred (low-confidence and Nice-to-have findings stay terminal-only as ever); under "auto", rounds 2-5 additionally defer new Suggestions on code unchanged since the previous round — the same discipline that stops review rounds from ballooning a PR. "critical" applies that posture from round 1; "suggestion" keeps Suggestions posting at every round. Non-PR targets have no rounds and ignore this. Only honored from User, System, and SystemDefaults settings scopes; values set in Workspace settings are ignored, so a repository cannot set review policy for its reviewers.', showInDialog: true, options: [ { value: 'auto', label: 'Auto (Critical-only from round 6)' }, { value: 'critical', label: 'Critical-only (every round)' }, { value: 'suggestion', label: 'Suggestions and Criticals' }, ], }, reverseAuditRounds: { type: 'number', label: 'Reverse-audit round ceiling: review', category: 'General', requiresRestart: false, default: 0, description: 'Lower the reverse-audit loop\'s round cap for every high-effort review. The cap is normally chosen from the diff topology (10 small / 5 chunked; a huge diff is 3 when the run has a review deadline and 5 when it does not, because that reduction answers a CI ceiling and applies only where one exists) because a round costs one agent on a small diff and ~90 minutes on a huge one; this setting can only LOWER whichever tier applies, never raise it — a value that is not a whole number above zero, or that is out of range (below 3, or above the plan\'s own tier), is ignored and leaves the tier alone — JSON Schema has no integer type here, so a fraction validates in an editor and is then discarded at runtime. Understand what it buys before enabling: the loop ends on two consecutive dry rounds, so cutting the cap does not make reviews converge sooner, it makes them stop before converging more often — and every such stop is disclosed as unreviewed scope and caps the verdict at Comment, so a cheaper review is also one that can no longer Approve. To spend LESS on reviews generally, prefer "effort". Nothing here makes a loop run LONGER: a review deadline bounds a run rather than extending it, and on a huge diff setting one lowers the cap from 5 to 3 rather than raising it. Only honored from User, System, and SystemDefaults settings scopes; values set in Workspace settings are ignored, so a repository cannot set review policy for its reviewers.', showInDialog: true, }, approachRounds: { type: 'number', label: 'Approach-signal round threshold: review', category: 'General', requiresRestart: false, default: 0, description: 'How many rounds a pull request must reach before the review may add one advisory paragraph saying the shape of the change, rather than the current patch, looks like the open question. It appears only when the diff has also grown several times over since the review first measured it, and never on an Approve. It is disclosure only: it adds no finding, changes no verdict, and blocks nothing — it exists because every finding is anchored to a line in the current diff, so the review can report where an approach leaks but never that a different approach would retire all of the leaks at once. Leave at 0 to keep the built-in threshold of 5 rounds; raise it to make the paragraph appear later, and set it very high to silence it. A value that is not a whole number above zero is ignored. Only honored from User, System, and SystemDefaults settings scopes; values set in Workspace settings are ignored, so a repository cannot set review policy for its reviewers.', showInDialog: true, }, }, }, output: { type: 'object', label: 'Output', category: 'General', requiresRestart: false, default: {}, description: 'Settings for the CLI output.', showInDialog: false, properties: { format: { type: 'enum', label: 'Output Format', category: 'General', requiresRestart: false, default: 'text', description: 'The format of the CLI output. With `stream-json`, runs started ' + 'with a prompt behave as non-interactive (headless), matching ' + '`--output-format stream-json`. Flags validated at argv parse ' + 'time (`--include-partial-messages`, `--input-format ' + 'stream-json`) still require the explicit `--output-format ' + 'stream-json` flag.', showInDialog: false, // The values are the runtime's `OutputFormat` enum members, and the // settingsSchema test pins these options against // `Object.values(OutputFormat)`, so a format added in core fails // that test until this list and the regenerated JSON follow. options: [ { value: OutputFormat.TEXT, label: 'Text' }, { value: OutputFormat.JSON, label: 'JSON' }, { value: OutputFormat.STREAM_JSON, label: 'Stream JSON' }, ], }, showTimestamps: { type: 'boolean', label: 'Show Timestamps', category: 'General', requiresRestart: false, default: false, description: 'Show [HH:MM:SS] timestamp before each assistant response.', showInDialog: true, }, }, }, dualOutput: { type: 'object', label: 'Dual Output', category: 'Advanced', requiresRestart: true, default: {}, description: 'Dual-output sidecar mode: emit structured JSON events to a ' + 'second channel while the TUI renders normally on stdout. See ' + 'docs/users/features/dual-output.md. CLI flags take precedence ' + 'over these settings.', showInDialog: false, properties: { jsonFile: { type: 'string', label: 'JSON Event File', category: 'Advanced', requiresRestart: true, default: undefined as string | undefined, description: 'File path for structured JSON event output. Equivalent to ' + '--json-file. Ignored if --json-fd or --json-file is also set.', showInDialog: false, }, inputFile: { type: 'string', label: 'Remote Input File', category: 'Advanced', requiresRestart: true, default: undefined as string | undefined, description: 'File path for remote input commands (JSONL). Equivalent to ' + '--input-file. Ignored if --input-file is also set.', showInDialog: false, }, }, }, ui: { type: 'object', label: 'UI', category: 'UI', requiresRestart: false, default: {}, description: 'User interface settings.', showInDialog: false, properties: { theme: { type: 'string', label: 'Theme', category: 'UI', requiresRestart: false, default: 'Qwen Dark' as string, description: 'The color theme for the UI.', showInDialog: true, }, brand: { type: 'object', label: 'Web Shell Brand', category: 'UI', requiresRestart: false, default: {}, description: 'Product name and logo the Web Shell presents. Read from operator scopes only (System Defaults, User, System) — a workspace settings file cannot rebrand the shell, because it commonly comes from a repository the person opening the shell did not write. Not editable from the in-browser Settings page; edit settings.json directly.', showInDialog: false, properties: { name: { type: 'string', label: 'Web Shell Brand Name', category: 'UI', requiresRestart: false, default: '' as string, description: "Product name shown in the Web Shell sidebar, welcome header, About panel and browser tab title. Sanitized to a single line; capped at 80 characters. A placeholder value that substitution would change ($VAR/${VAR} with the variable set) is refused with a warning on the daemon's stderr, because the substitution source is process-wide and a workspace could supply it; an unresolvable placeholder is kept verbatim. Leave empty to use the built-in name. The terminal banner has its own separate setting, `ui.customBannerTitle`.", showInDialog: false, }, logoPath: { type: 'string', label: 'Web Shell Brand Logo Path', category: 'UI', requiresRestart: false, default: '' as string, description: 'Path to an SVG file used as the Web Shell sidebar logo and browser favicon. A leading "~" is expanded, and a relative path resolves against the directory of the settings file that declares it. The file must be a regular file — not a symlink, and not reachable through more than one hard link — at most 32 KiB both on disk and once UTF-8-decoded, and its root element must be a namespaced