qwen-code PR adds private CSI file worker with local-process isolation
doudouOUC · ghdev · 2026-10-11
QwenLM/qwen-code PR #13899 adds a private container file worker with descriptor-backed Read/Write/Edit, retained file history, and a matching Java local-process isolation boundary.
- Container entry accepts boot 4 for construction and boot 5 for authenticated remote authority readback, context installation, history binding and tool execution.
- Exact retries retain original history/results; legacy Node workers and Java lifecycle entries refuse the private capability before storage resolution or child creation.
- Scale: 43 files, 22 production files (+4,049/−187 lines), plus tests, protocol fixtures and bilingual design docs; preserves special-file reads, mount lifetime checks, sibling ownership fencing and read-cache invalidation.
- Closes three worker-side contract gaps: no ambient pathname admission, request-digest authentication against original input bytes, and authentication of both Session owners plus payload digest on execution.
More from coding & agent
- Decisions API hits GA as agents automate cloud video editing via feedback loops — dkundel · 2026-10-23
- Swarms API changelog: 8 months of streaming, multi-agent orchestration, and dynamic model pricing — KyeGomezB · 2026-10-23
- A curated library of 50+ free AI agent resources: videos, repos, one Google Doc — ifioknkem · 2026-10-23
- Vercel adds no-account deploys: drag and drop a file to get a live URL — steren · 2026-10-23
- Dev runs 5 Claude Code sessions that coordinate via MCP Agent Mail to root his network cameras — doodlestein · 2026-10-23
- Vercel ships 'vercel deploy --temporary' for ephemeral agent-built deployments — cramforce · 2026-10-23