@qwen-code/qwen-code 0.18.0 → 0.18.1-nightly.20260616.a68b2e1e7

package/chunks/{serve-N2IBLA3G.js → serve-Y5E4LKUI.js}

@@ -27,6 +27,7 @@ import {
   MissingCliEntryError,
   PermissionForbiddenError,
   PermissionPolicyNotImplementedError,
+  PromptQueueFullError,
   RestoreInProgressError,
   SERVE_CONTROL_EXT_METHODS,
   SERVE_ERROR_KINDS,
@@ -35,6 +36,8 @@ import {
   SessionBusyError,
   SessionLimitExceededError,
   SessionNotFoundError,
+  SessionShellClientRequiredError,
+  SessionShellDisabledError,
   SubscriberLimitExceededError,
   WorkspaceInitConflictError,
   WorkspaceInitPathEscapeError,
@@ -62,7 +65,7 @@ import {
   loadSettings,
   mapDomainErrorToErrorKind,
   reloadEnvironment
-} from "./chunk-LBP46COL.js";
+} from "./chunk-ABRZC6FA.js";
 import {
   ClientSideConnection,
   PROTOCOL_VERSION,
@@ -73,15 +76,18 @@ import {
   SUPPORTED_LANGUAGES,
   writeStderrLine,
   writeStdoutLine
-} from "./chunk-PL3MVCWD.js";
+} from "./chunk-UOB6KPGG.js";
 import {
   ALL_PROVIDERS,
   APPROVAL_MODES,
   BTW_MAX_INPUT_LENGTH,
   BuiltinAgentRegistry,
+  Client,
   SessionService,
   ShellExecutionService,
   StandardFileSystemService,
+  StdioClientTransport,
+  StreamableHTTPClientTransport,
   SubagentError,
   SubagentErrorCode,
   SubagentManager,
@@ -101,26 +107,28 @@ import {
   resolveBaseUrl,
   shouldShowStep,
   writeWorkspaceContextFile
-} from "./chunk-IWAYOW5Q.js";
+} from "./chunk-H4ZDM3N6.js";
 import "./chunk-K5PGHDBN.js";
-import "./chunk-SKBPNJEW.js";
-import "./chunk-HLPLOD42.js";
+import "./chunk-VXHYMZXW.js";
 import "./chunk-O4PICXES.js";
 import "./chunk-TW522KN6.js";
-import "./chunk-3DHXZ6EV.js";
-import "./chunk-XBY7E2FX.js";
-import "./chunk-J5MDQKJL.js";
+import "./chunk-BJ5HQ23U.js";
+import "./chunk-SFRV6BGY.js";
+import "./chunk-ZOFNJQNJ.js";
+import "./chunk-WPTCDQN6.js";
+import "./chunk-OMX7CUOE.js";
 import "./chunk-MLZQVCF3.js";
 import "./chunk-LD2XBG6Z.js";
-import "./chunk-OHEGWO4L.js";
-import "./chunk-SNGELLWX.js";
+import "./chunk-CPVI5J2L.js";
+import "./chunk-ZMIBJS45.js";
 import "./chunk-77WXWU44.js";
-import "./chunk-A7B4ISQP.js";
+import "./chunk-B4ZF2KSI.js";
 import {
   DAEMON_TRACEPARENT_META_KEY,
   DAEMON_TRACESTATE_META_KEY,
   DEFAULT_OTLP_ENDPOINT,
   DEFAULT_TELEMETRY_TARGET,
+  addDaemonRequestAttribute,
   createDaemonBridgeTelemetry,
   decodeBufferWithEncodingInfo,
   emitDaemonLog,
@@ -145,14 +153,14 @@ import {
   resolveTelemetrySettings,
   shutdownTelemetry,
   withDaemonRequestSpan
-} from "./chunk-6YIUGZTC.js";
+} from "./chunk-A3OEZT2F.js";
 import "./chunk-3PJXIDKI.js";
 import "./chunk-UWCTAVOD.js";
 import "./chunk-OFEVLU4C.js";
-import "./chunk-3HTIVKZE.js";
-import "./chunk-IDX6COTE.js";
-import "./chunk-BIVG75CP.js";
-import "./chunk-XV4HCEVI.js";
+import "./chunk-IQHSD7K5.js";
+import "./chunk-LYRSMKLS.js";
+import "./chunk-26QELEL2.js";
+import "./chunk-6WPY6ES3.js";
 import {
   QwenOAuth2Client,
   QwenOAuthPollError,
@@ -161,15 +169,15 @@ import {
   isDeviceAuthorizationSuccess,
   isDeviceTokenPending,
   isDeviceTokenSuccess
-} from "./chunk-2Y5SYSD3.js";
-import "./chunk-SEGYWKIH.js";
+} from "./chunk-IDYDPBBN.js";
+import "./chunk-FIQECJTQ.js";
 import "./chunk-64WXLC72.js";
-import "./chunk-B7HXHOHU.js";
+import "./chunk-LXYWINWF.js";
 import {
   detectRuntime,
   redactProxyCredentials
-} from "./chunk-EYENRK4D.js";
-import "./chunk-M6VTDSVR.js";
+} from "./chunk-NNIYWQIS.js";
+import "./chunk-LYSND7KR.js";
 import "./chunk-55ZMG67I.js";
 import {
   import_websocket_server
@@ -178,7 +186,7 @@ import "./chunk-5IFG2VC4.js";
 import {
   Storage,
   updateSymlink
-} from "./chunk-HR7SV7AY.js";
+} from "./chunk-HA2UEYZP.js";
 import "./chunk-ZERZSAZL.js";
 import {
   require_src
@@ -9230,11 +9238,11 @@ var require_mime_types = __commonJS({
       return exts[0];
     }
     __name(extension, "extension");
-    function lookup(path13) {
-      if (!path13 || typeof path13 !== "string") {
+    function lookup(path14) {
+      if (!path14 || typeof path14 !== "string") {
         return false;
       }
-      var extension2 = extname("x." + path13).toLowerCase().slice(1);
+      var extension2 = extname("x." + path14).toLowerCase().slice(1);
       if (!extension2) {
         return false;
       }
@@ -10365,13 +10373,13 @@ var require_view = __commonJS({
     "use strict";
     init_esbuild_shims();
     var debug = require_src()("express:view");
-    var path13 = __require("node:path");
+    var path14 = __require("node:path");
     var fs7 = __require("node:fs");
-    var dirname5 = path13.dirname;
-    var basename3 = path13.basename;
-    var extname = path13.extname;
-    var join5 = path13.join;
-    var resolve6 = path13.resolve;
+    var dirname5 = path14.dirname;
+    var basename3 = path14.basename;
+    var extname = path14.extname;
+    var join6 = path14.join;
+    var resolve6 = path14.resolve;
     module.exports = View;
     function View(name, options) {
       var opts = options || {};
@@ -10401,17 +10409,17 @@ var require_view = __commonJS({
     }
     __name(View, "View");
     View.prototype.lookup = /* @__PURE__ */ __name(function lookup(name) {
-      var path14;
+      var path15;
       var roots = [].concat(this.root);
       debug('lookup "%s"', name);
-      for (var i = 0; i < roots.length && !path14; i++) {
+      for (var i = 0; i < roots.length && !path15; i++) {
         var root = roots[i];
         var loc = resolve6(root, name);
         var dir = dirname5(loc);
         var file = basename3(loc);
-        path14 = this.resolve(dir, file);
+        path15 = this.resolve(dir, file);
       }
-      return path14;
+      return path15;
     }, "lookup");
     View.prototype.render = /* @__PURE__ */ __name(function render(options, callback) {
       var sync = true;
@@ -10433,21 +10441,21 @@ var require_view = __commonJS({
     }, "render");
     View.prototype.resolve = /* @__PURE__ */ __name(function resolve7(dir, file) {
       var ext = this.ext;
-      var path14 = join5(dir, file);
-      var stat = tryStat(path14);
+      var path15 = join6(dir, file);
+      var stat = tryStat(path15);
       if (stat && stat.isFile()) {
-        return path14;
+        return path15;
       }
-      path14 = join5(dir, basename3(file, ext), "index" + ext);
-      stat = tryStat(path14);
+      path15 = join6(dir, basename3(file, ext), "index" + ext);
+      stat = tryStat(path15);
       if (stat && stat.isFile()) {
-        return path14;
+        return path15;
       }
     }, "resolve");
-    function tryStat(path14) {
-      debug('stat "%s"', path14);
+    function tryStat(path15) {
+      debug('stat "%s"', path15);
       try {
-        return fs7.statSync(path14);
+        return fs7.statSync(path15);
       } catch (e) {
         return void 0;
       }
@@ -11637,9 +11645,9 @@ var require_dist2 = __commonJS({
       function consume(endType) {
         const tokens2 = [];
         while (true) {
-          const path13 = it.text();
-          if (path13)
-            tokens2.push({ type: "text", value: encodePath(path13) });
+          const path14 = it.text();
+          if (path14)
+            tokens2.push({ type: "text", value: encodePath(path14) });
           const param = it.tryConsume("PARAM");
           if (param) {
             tokens2.push({
@@ -11673,16 +11681,16 @@ var require_dist2 = __commonJS({
       return new TokenData(tokens);
     }
     __name(parse, "parse");
-    function compile(path13, options = {}) {
+    function compile(path14, options = {}) {
       const { encode = encodeURIComponent, delimiter = DEFAULT_DELIMITER } = options;
-      const data = path13 instanceof TokenData ? path13 : parse(path13, options);
+      const data = path14 instanceof TokenData ? path14 : parse(path14, options);
       const fn = tokensToFunction(data.tokens, delimiter, encode);
-      return /* @__PURE__ */ __name(function path14(data2 = {}) {
-        const [path15, ...missing] = fn(data2);
+      return /* @__PURE__ */ __name(function path15(data2 = {}) {
+        const [path16, ...missing] = fn(data2);
         if (missing.length) {
           throw new TypeError(`Missing parameters: ${missing.join(", ")}`);
         }
-        return path15;
+        return path16;
       }, "path");
     }
     __name(compile, "compile");
@@ -11741,9 +11749,9 @@ var require_dist2 = __commonJS({
       };
     }
     __name(tokenToFunction, "tokenToFunction");
-    function match(path13, options = {}) {
+    function match(path14, options = {}) {
       const { decode = decodeURIComponent, delimiter = DEFAULT_DELIMITER } = options;
-      const { regexp, keys } = pathToRegexp(path13, options);
+      const { regexp, keys } = pathToRegexp(path14, options);
       const decoders = keys.map((key) => {
         if (decode === false)
           return NOOP_VALUE;
@@ -11755,7 +11763,7 @@ var require_dist2 = __commonJS({
         const m = regexp.exec(input);
         if (!m)
           return false;
-        const path14 = m[0];
+        const path15 = m[0];
         const params = /* @__PURE__ */ Object.create(null);
         for (let i = 1; i < m.length; i++) {
           if (m[i] === void 0)
@@ -11764,17 +11772,17 @@ var require_dist2 = __commonJS({
           const decoder = decoders[i - 1];
           params[key.name] = decoder(m[i]);
         }
-        return { path: path14, params };
+        return { path: path15, params };
       }, "match");
     }
     __name(match, "match");
-    function pathToRegexp(path13, options = {}) {
+    function pathToRegexp(path14, options = {}) {
       const { delimiter = DEFAULT_DELIMITER, end = true, sensitive = false, trailing = true } = options;
       const keys = [];
       const sources = [];
       const flags = sensitive ? "" : "i";
-      const paths = Array.isArray(path13) ? path13 : [path13];
-      const items = paths.map((path14) => path14 instanceof TokenData ? path14 : parse(path14, options));
+      const paths = Array.isArray(path14) ? path14 : [path14];
+      const items = paths.map((path15) => path15 instanceof TokenData ? path15 : parse(path15, options));
       for (const { tokens } of items) {
         for (const seq of flatten(tokens, 0, [])) {
           const regexp2 = sequenceToRegExp(seq, delimiter, keys);
@@ -11892,18 +11900,18 @@ var require_layer = __commonJS({
     var TRAILING_SLASH_REGEXP = /\/+$/;
     var MATCHING_GROUP_REGEXP = /\((?:\?<(.*?)>)?(?!\?)/g;
     module.exports = Layer;
-    function Layer(path13, options, fn) {
+    function Layer(path14, options, fn) {
       if (!(this instanceof Layer)) {
-        return new Layer(path13, options, fn);
+        return new Layer(path14, options, fn);
       }
-      debug("new %o", path13);
+      debug("new %o", path14);
       const opts = options || {};
       this.handle = fn;
       this.keys = [];
       this.name = fn.name || "<anonymous>";
       this.params = void 0;
       this.path = void 0;
-      this.slash = path13 === "/" && opts.end === false;
+      this.slash = path14 === "/" && opts.end === false;
       function matcher(_path) {
         if (_path instanceof RegExp) {
           const keys = [];
@@ -11943,7 +11951,7 @@ var require_layer = __commonJS({
         });
       }
       __name(matcher, "matcher");
-      this.matchers = Array.isArray(path13) ? path13.map(matcher) : [matcher(path13)];
+      this.matchers = Array.isArray(path14) ? path14.map(matcher) : [matcher(path14)];
     }
     __name(Layer, "Layer");
     Layer.prototype.handleError = /* @__PURE__ */ __name(function handleError(error2, req, res, next) {
@@ -11984,9 +11992,9 @@ var require_layer = __commonJS({
         next(err);
       }
     }, "handleRequest");
-    Layer.prototype.match = /* @__PURE__ */ __name(function match(path13) {
+    Layer.prototype.match = /* @__PURE__ */ __name(function match(path14) {
       let match2;
-      if (path13 != null) {
+      if (path14 != null) {
         if (this.slash) {
           this.params = {};
           this.path = "";
@@ -11994,7 +12002,7 @@ var require_layer = __commonJS({
         }
         let i = 0;
         while (!match2 && i < this.matchers.length) {
-          match2 = this.matchers[i](path13);
+          match2 = this.matchers[i](path14);
           i++;
         }
       }
@@ -12023,13 +12031,13 @@ var require_layer = __commonJS({
       }
     }
     __name(decodeParam, "decodeParam");
-    function loosen(path13) {
-      if (path13 instanceof RegExp || path13 === "/") {
-        return path13;
+    function loosen(path14) {
+      if (path14 instanceof RegExp || path14 === "/") {
+        return path14;
       }
-      return Array.isArray(path13) ? path13.map(function(p) {
+      return Array.isArray(path14) ? path14.map(function(p) {
         return loosen(p);
-      }) : String(path13).replace(TRAILING_SLASH_REGEXP, "");
+      }) : String(path14).replace(TRAILING_SLASH_REGEXP, "");
     }
     __name(loosen, "loosen");
   }
@@ -12047,9 +12055,9 @@ var require_route = __commonJS({
     var flatten = Array.prototype.flat;
     var methods = METHODS.map((method) => method.toLowerCase());
     module.exports = Route;
-    function Route(path13) {
-      debug("new %o", path13);
-      this.path = path13;
+    function Route(path14) {
+      debug("new %o", path14);
+      this.path = path14;
       this.stack = [];
       this.methods = /* @__PURE__ */ Object.create(null);
     }
@@ -12262,8 +12270,8 @@ var require_router = __commonJS({
         if (++sync > 100) {
           return setImmediate(next, err);
         }
-        const path13 = getPathname(req);
-        if (path13 == null) {
+        const path14 = getPathname(req);
+        if (path14 == null) {
           return done(layerError);
         }
         let layer;
@@ -12271,7 +12279,7 @@ var require_router = __commonJS({
         let route;
         while (match !== true && idx < stack.length) {
           layer = stack[idx++];
-          match = matchLayer(layer, path13);
+          match = matchLayer(layer, path14);
           route = layer.route;
           if (typeof match !== "boolean") {
             layerError = layerError || match;
@@ -12309,19 +12317,19 @@ var require_router = __commonJS({
           } else if (route) {
             layer.handleRequest(req, res, next);
           } else {
-            trimPrefix(layer, layerError, layerPath, path13);
+            trimPrefix(layer, layerError, layerPath, path14);
           }
           sync = 0;
         });
       }
       __name(next, "next");
-      function trimPrefix(layer, layerError, layerPath, path13) {
+      function trimPrefix(layer, layerError, layerPath, path14) {
         if (layerPath.length !== 0) {
-          if (layerPath !== path13.substring(0, layerPath.length)) {
+          if (layerPath !== path14.substring(0, layerPath.length)) {
             next(layerError);
             return;
           }
-          const c = path13[layerPath.length];
+          const c = path14[layerPath.length];
           if (c && c !== "/") {
             next(layerError);
             return;
@@ -12346,7 +12354,7 @@ var require_router = __commonJS({
     }, "handle");
     Router.prototype.use = /* @__PURE__ */ __name(function use(handler) {
       let offset = 0;
-      let path13 = "/";
+      let path14 = "/";
       if (typeof handler !== "function") {
         let arg = handler;
         while (Array.isArray(arg) && arg.length !== 0) {
@@ -12354,7 +12362,7 @@ var require_router = __commonJS({
         }
         if (typeof arg !== "function") {
           offset = 1;
-          path13 = handler;
+          path14 = handler;
         }
       }
       const callbacks = flatten.call(slice.call(arguments, offset), Infinity);
@@ -12366,8 +12374,8 @@ var require_router = __commonJS({
         if (typeof fn !== "function") {
           throw new TypeError("argument handler must be a function");
         }
-        debug("use %o %s", path13, fn.name || "<anonymous>");
-        const layer = new Layer(path13, {
+        debug("use %o %s", path14, fn.name || "<anonymous>");
+        const layer = new Layer(path14, {
           sensitive: this.caseSensitive,
           strict: false,
           end: false
@@ -12377,9 +12385,9 @@ var require_router = __commonJS({
       }
       return this;
     }, "use");
-    Router.prototype.route = /* @__PURE__ */ __name(function route(path13) {
-      const route2 = new Route(path13);
-      const layer = new Layer(path13, {
+    Router.prototype.route = /* @__PURE__ */ __name(function route(path14) {
+      const route2 = new Route(path14);
+      const layer = new Layer(path14, {
         sensitive: this.caseSensitive,
         strict: this.strict,
         end: true
@@ -12393,8 +12401,8 @@ var require_router = __commonJS({
       return route2;
     }, "route");
     methods.concat("all").forEach(function(method) {
-      Router.prototype[method] = function(path13) {
-        const route = this.route(path13);
+      Router.prototype[method] = function(path14) {
+        const route = this.route(path14);
         route[method].apply(route, slice.call(arguments, 1));
         return this;
       };
@@ -12426,9 +12434,9 @@ var require_router = __commonJS({
       return fqdnIndex !== -1 ? url.substring(0, url.indexOf("/", 3 + fqdnIndex)) : void 0;
     }
     __name(getProtohost, "getProtohost");
-    function matchLayer(layer, path13) {
+    function matchLayer(layer, path14) {
       try {
-        return layer.match(path13);
+        return layer.match(path14);
       } catch (err) {
         return err;
       }
@@ -12666,7 +12674,7 @@ var require_application = __commonJS({
     }, "handle");
     app.use = /* @__PURE__ */ __name(function use(fn) {
       var offset = 0;
-      var path13 = "/";
+      var path14 = "/";
       if (typeof fn !== "function") {
         var arg = fn;
         while (Array.isArray(arg) && arg.length !== 0) {
@@ -12674,7 +12682,7 @@ var require_application = __commonJS({
         }
         if (typeof arg !== "function") {
           offset = 1;
-          path13 = fn;
+          path14 = fn;
         }
       }
       var fns = flatten.call(slice.call(arguments, offset), Infinity);
@@ -12684,12 +12692,12 @@ var require_application = __commonJS({
       var router = this.router;
       fns.forEach(function(fn2) {
         if (!fn2 || !fn2.handle || !fn2.set) {
-          return router.use(path13, fn2);
+          return router.use(path14, fn2);
         }
-        debug(".use app under %s", path13);
-        fn2.mountpath = path13;
+        debug(".use app under %s", path14);
+        fn2.mountpath = path14;
         fn2.parent = this;
-        router.use(path13, /* @__PURE__ */ __name(function mounted_app(req, res, next) {
+        router.use(path14, /* @__PURE__ */ __name(function mounted_app(req, res, next) {
           var orig = req.app;
           fn2.handle(req, res, function(err) {
             Object.setPrototypeOf(req, orig.request);
@@ -12701,8 +12709,8 @@ var require_application = __commonJS({
       }, this);
       return this;
     }, "use");
-    app.route = /* @__PURE__ */ __name(function route(path13) {
-      return this.router.route(path13);
+    app.route = /* @__PURE__ */ __name(function route(path14) {
+      return this.router.route(path14);
     }, "route");
     app.engine = /* @__PURE__ */ __name(function engine(ext, fn) {
       if (typeof fn !== "function") {
@@ -12745,7 +12753,7 @@ var require_application = __commonJS({
       }
       return this;
     }, "set");
-    app.path = /* @__PURE__ */ __name(function path13() {
+    app.path = /* @__PURE__ */ __name(function path14() {
       return this.parent ? this.parent.path() + this.mountpath : "";
     }, "path");
     app.enabled = /* @__PURE__ */ __name(function enabled(setting) {
@@ -12761,17 +12769,17 @@ var require_application = __commonJS({
       return this.set(setting, false);
     }, "disable");
     methods.forEach(function(method) {
-      app[method] = function(path13) {
+      app[method] = function(path14) {
         if (method === "get" && arguments.length === 1) {
-          return this.set(path13);
+          return this.set(path14);
         }
-        var route = this.route(path13);
+        var route = this.route(path14);
         route[method].apply(route, slice.call(arguments, 1));
         return this;
       };
     });
-    app.all = /* @__PURE__ */ __name(function all(path13) {
-      var route = this.route(path13);
+    app.all = /* @__PURE__ */ __name(function all(path14) {
+      var route = this.route(path14);
       var args = slice.call(arguments, 1);
       for (var i = 0; i < methods.length; i++) {
         route[methods[i]].apply(route, args);
@@ -13741,7 +13749,7 @@ var require_request = __commonJS({
       var subdomains2 = !isIP2(hostname) ? hostname.split(".").reverse() : [hostname];
       return subdomains2.slice(offset);
     }, "subdomains"));
-    defineGetter(req, "path", /* @__PURE__ */ __name(function path13() {
+    defineGetter(req, "path", /* @__PURE__ */ __name(function path14() {
       return parse(this).pathname;
     }, "path"));
     defineGetter(req, "host", /* @__PURE__ */ __name(function host() {
@@ -13964,8 +13972,8 @@ var require_content_disposition = __commonJS({
       this.parameters = parameters;
     }
     __name(ContentDisposition, "ContentDisposition");
-    function basename3(path13) {
-      const normalized = path13.replaceAll("\\", "/");
+    function basename3(path14) {
+      const normalized = path14.replaceAll("\\", "/");
       let end = normalized.length;
       while (end > 0 && normalized[end - 1] === "/") {
         end--;
@@ -14225,28 +14233,28 @@ var require_send = __commonJS({
     var ms = require_ms();
     var onFinished = require_on_finished();
     var parseRange = require_range_parser();
-    var path13 = __require("path");
+    var path14 = __require("path");
     var statuses = require_statuses();
     var Stream = __require("stream");
     var util = __require("util");
-    var extname = path13.extname;
-    var join5 = path13.join;
-    var normalize = path13.normalize;
-    var resolve6 = path13.resolve;
-    var sep4 = path13.sep;
+    var extname = path14.extname;
+    var join6 = path14.join;
+    var normalize = path14.normalize;
+    var resolve6 = path14.resolve;
+    var sep4 = path14.sep;
     var BYTES_RANGE_REGEXP = /^ *bytes=/;
     var MAX_MAXAGE = 60 * 60 * 24 * 365 * 1e3;
     var UP_PATH_REGEXP = /(?:^|[\\/])\.\.(?:[\\/]|$)/;
     module.exports = send;
-    function send(req, path14, options) {
-      return new SendStream(req, path14, options);
+    function send(req, path15, options) {
+      return new SendStream(req, path15, options);
     }
     __name(send, "send");
-    function SendStream(req, path14, options) {
+    function SendStream(req, path15, options) {
       Stream.call(this);
       var opts = options || {};
       this.options = opts;
-      this.path = path14;
+      this.path = path15;
       this.req = req;
       this._acceptRanges = opts.acceptRanges !== void 0 ? Boolean(opts.acceptRanges) : true;
       this._cacheControl = opts.cacheControl !== void 0 ? Boolean(opts.cacheControl) : true;
@@ -14361,10 +14369,10 @@ var require_send = __commonJS({
       var lastModified = this.res.getHeader("Last-Modified");
       return parseHttpDate(lastModified) <= parseHttpDate(ifRange);
     }, "isRangeFresh");
-    SendStream.prototype.redirect = /* @__PURE__ */ __name(function redirect(path14) {
+    SendStream.prototype.redirect = /* @__PURE__ */ __name(function redirect(path15) {
       var res = this.res;
       if (hasListeners(this, "directory")) {
-        this.emit("directory", res, path14);
+        this.emit("directory", res, path15);
         return;
       }
       if (this.hasTrailingSlash()) {
@@ -14384,38 +14392,38 @@ var require_send = __commonJS({
     SendStream.prototype.pipe = /* @__PURE__ */ __name(function pipe(res) {
       var root = this._root;
       this.res = res;
-      var path14 = decode(this.path);
-      if (path14 === -1) {
+      var path15 = decode(this.path);
+      if (path15 === -1) {
         this.error(400);
         return res;
       }
-      if (~path14.indexOf("\0")) {
+      if (~path15.indexOf("\0")) {
         this.error(400);
         return res;
       }
       var parts;
       if (root !== null) {
-        if (path14) {
-          path14 = normalize("." + sep4 + path14);
+        if (path15) {
+          path15 = normalize("." + sep4 + path15);
         }
-        if (UP_PATH_REGEXP.test(path14)) {
-          debug('malicious path "%s"', path14);
+        if (UP_PATH_REGEXP.test(path15)) {
+          debug('malicious path "%s"', path15);
           this.error(403);
           return res;
         }
-        parts = path14.split(sep4);
-        path14 = normalize(join5(root, path14));
+        parts = path15.split(sep4);
+        path15 = normalize(join6(root, path15));
       } else {
-        if (UP_PATH_REGEXP.test(path14)) {
-          debug('malicious path "%s"', path14);
+        if (UP_PATH_REGEXP.test(path15)) {
+          debug('malicious path "%s"', path15);
           this.error(403);
           return res;
         }
-        parts = normalize(path14).split(sep4);
-        path14 = resolve6(path14);
+        parts = normalize(path15).split(sep4);
+        path15 = resolve6(path15);
       }
       if (containsDotFile(parts)) {
-        debug('%s dotfile "%s"', this._dotfiles, path14);
+        debug('%s dotfile "%s"', this._dotfiles, path15);
         switch (this._dotfiles) {
           case "allow":
             break;
@@ -14429,13 +14437,13 @@ var require_send = __commonJS({
         }
       }
       if (this._index.length && this.hasTrailingSlash()) {
-        this.sendIndex(path14);
+        this.sendIndex(path15);
         return res;
       }
-      this.sendFile(path14);
+      this.sendFile(path15);
       return res;
     }, "pipe");
-    SendStream.prototype.send = /* @__PURE__ */ __name(function send2(path14, stat) {
+    SendStream.prototype.send = /* @__PURE__ */ __name(function send2(path15, stat) {
       var len = stat.size;
       var options = this.options;
       var opts = {};
@@ -14447,9 +14455,9 @@ var require_send = __commonJS({
         this.headersAlreadySent();
         return;
       }
-      debug('pipe "%s"', path14);
-      this.setHeader(path14, stat);
-      this.type(path14);
+      debug('pipe "%s"', path15);
+      this.setHeader(path15, stat);
+      this.type(path15);
       if (this.isConditionalGET()) {
         if (this.isPreconditionFailure()) {
           this.error(412);
@@ -14498,28 +14506,28 @@ var require_send = __commonJS({
         res.end();
         return;
       }
-      this.stream(path14, opts);
+      this.stream(path15, opts);
     }, "send");
-    SendStream.prototype.sendFile = /* @__PURE__ */ __name(function sendFile(path14) {
+    SendStream.prototype.sendFile = /* @__PURE__ */ __name(function sendFile(path15) {
       var i = 0;
       var self = this;
-      debug('stat "%s"', path14);
-      fs7.stat(path14, /* @__PURE__ */ __name(function onstat(err, stat) {
-        var pathEndsWithSep = path14[path14.length - 1] === sep4;
-        if (err && err.code === "ENOENT" && !extname(path14) && !pathEndsWithSep) {
+      debug('stat "%s"', path15);
+      fs7.stat(path15, /* @__PURE__ */ __name(function onstat(err, stat) {
+        var pathEndsWithSep = path15[path15.length - 1] === sep4;
+        if (err && err.code === "ENOENT" && !extname(path15) && !pathEndsWithSep) {
           return next(err);
         }
         if (err) return self.onStatError(err);
-        if (stat.isDirectory()) return self.redirect(path14);
+        if (stat.isDirectory()) return self.redirect(path15);
         if (pathEndsWithSep) return self.error(404);
-        self.emit("file", path14, stat);
-        self.send(path14, stat);
+        self.emit("file", path15, stat);
+        self.send(path15, stat);
       }, "onstat"));
       function next(err) {
         if (self._extensions.length <= i) {
           return err ? self.onStatError(err) : self.error(404);
         }
-        var p = path14 + "." + self._extensions[i++];
+        var p = path15 + "." + self._extensions[i++];
         debug('stat "%s"', p);
         fs7.stat(p, function(err2, stat) {
           if (err2) return next(err2);
@@ -14530,7 +14538,7 @@ var require_send = __commonJS({
       }
       __name(next, "next");
     }, "sendFile");
-    SendStream.prototype.sendIndex = /* @__PURE__ */ __name(function sendIndex(path14) {
+    SendStream.prototype.sendIndex = /* @__PURE__ */ __name(function sendIndex(path15) {
       var i = -1;
       var self = this;
       function next(err) {
@@ -14538,7 +14546,7 @@ var require_send = __commonJS({
           if (err) return self.onStatError(err);
           return self.error(404);
         }
-        var p = join5(path14, self._index[i]);
+        var p = join6(path15, self._index[i]);
         debug('stat "%s"', p);
         fs7.stat(p, function(err2, stat) {
           if (err2) return next(err2);
@@ -14550,10 +14558,10 @@ var require_send = __commonJS({
       __name(next, "next");
       next();
     }, "sendIndex");
-    SendStream.prototype.stream = /* @__PURE__ */ __name(function stream(path14, options) {
+    SendStream.prototype.stream = /* @__PURE__ */ __name(function stream(path15, options) {
       var self = this;
       var res = this.res;
-      var stream2 = fs7.createReadStream(path14, options);
+      var stream2 = fs7.createReadStream(path15, options);
       this.emit("stream", stream2);
       stream2.pipe(res);
       function cleanup() {
@@ -14569,17 +14577,17 @@ var require_send = __commonJS({
         self.emit("end");
       }, "onend"));
     }, "stream");
-    SendStream.prototype.type = /* @__PURE__ */ __name(function type(path14) {
+    SendStream.prototype.type = /* @__PURE__ */ __name(function type(path15) {
       var res = this.res;
       if (res.getHeader("Content-Type")) return;
-      var ext = extname(path14);
+      var ext = extname(path15);
       var type2 = mime.contentType(ext) || "application/octet-stream";
       debug("content-type %s", type2);
       res.setHeader("Content-Type", type2);
     }, "type");
-    SendStream.prototype.setHeader = /* @__PURE__ */ __name(function setHeader(path14, stat) {
+    SendStream.prototype.setHeader = /* @__PURE__ */ __name(function setHeader(path15, stat) {
       var res = this.res;
-      this.emit("headers", res, path14, stat);
+      this.emit("headers", res, path15, stat);
       if (this._acceptRanges && !res.getHeader("Accept-Ranges")) {
         debug("accept ranges");
         res.setHeader("Accept-Ranges", "bytes");
@@ -14643,9 +14651,9 @@ var require_send = __commonJS({
       return err instanceof Error ? createError(status, err, { expose: false }) : createError(status, err);
     }
     __name(createHttpError, "createHttpError");
-    function decode(path14) {
+    function decode(path15) {
       try {
-        return decodeURIComponent(path14);
+        return decodeURIComponent(path15);
       } catch (err) {
         return -1;
       }
@@ -14800,7 +14808,7 @@ var require_response = __commonJS({
     var http = __require("node:http");
     var onFinished = require_on_finished();
     var mime = require_mime_types();
-    var path13 = __require("node:path");
+    var path14 = __require("node:path");
     var pathIsAbsolute = __require("node:path").isAbsolute;
     var statuses = require_statuses();
     var sign = require_cookie_signature().sign;
@@ -14809,8 +14817,8 @@ var require_response = __commonJS({
     var setCharset = require_utils2().setCharset;
     var cookie = require_cookie();
     var send = require_send();
-    var extname = path13.extname;
-    var resolve6 = path13.resolve;
+    var extname = path14.extname;
+    var resolve6 = path14.resolve;
     var vary = require_vary();
     var { Buffer: Buffer2 } = __require("node:buffer");
     var res = Object.create(http.ServerResponse.prototype);
@@ -14956,26 +14964,26 @@ var require_response = __commonJS({
       this.type("txt");
       return this.send(body);
     }, "sendStatus");
-    res.sendFile = /* @__PURE__ */ __name(function sendFile(path14, options, callback) {
+    res.sendFile = /* @__PURE__ */ __name(function sendFile(path15, options, callback) {
       var done = callback;
       var req = this.req;
       var res2 = this;
       var next = req.next;
       var opts = options || {};
-      if (!path14) {
+      if (!path15) {
         throw new TypeError("path argument is required to res.sendFile");
       }
-      if (typeof path14 !== "string") {
+      if (typeof path15 !== "string") {
         throw new TypeError("path must be a string to res.sendFile");
       }
       if (typeof options === "function") {
         done = options;
         opts = {};
       }
-      if (!opts.root && !pathIsAbsolute(path14)) {
+      if (!opts.root && !pathIsAbsolute(path15)) {
         throw new TypeError("path must be absolute or specify root to res.sendFile");
       }
-      var pathname = encodeURI(path14);
+      var pathname = encodeURI(path15);
       opts.etag = this.app.enabled("etag");
       var file = send(req, pathname, opts);
       sendfile(res2, file, opts, function(err) {
@@ -14986,7 +14994,7 @@ var require_response = __commonJS({
         }
       });
     }, "sendFile");
-    res.download = /* @__PURE__ */ __name(function download(path14, filename, options, callback) {
+    res.download = /* @__PURE__ */ __name(function download(path15, filename, options, callback) {
       var done = callback;
       var name = filename;
       var opts = options || null;
@@ -15003,7 +15011,7 @@ var require_response = __commonJS({
         opts = filename;
       }
       var headers = {
-        "Content-Disposition": contentDisposition(name || path14)
+        "Content-Disposition": contentDisposition(name || path15)
       };
       if (opts && opts.headers) {
         var keys = Object.keys(opts.headers);
@@ -15016,7 +15024,7 @@ var require_response = __commonJS({
       }
       opts = Object.create(opts);
       opts.headers = headers;
-      var fullPath = !opts.root ? resolve6(path14) : path14;
+      var fullPath = !opts.root ? resolve6(path15) : path15;
       return this.sendFile(fullPath, opts, done);
     }, "download");
     res.contentType = res.type = /* @__PURE__ */ __name(function contentType(type) {
@@ -15309,11 +15317,11 @@ var require_serve_static = __commonJS({
         }
         var forwardError = !fallthrough;
         var originalUrl = parseUrl.original(req);
-        var path13 = parseUrl(req).pathname;
-        if (path13 === "/" && originalUrl.pathname.substr(-1) !== "/") {
-          path13 = "";
+        var path14 = parseUrl(req).pathname;
+        if (path14 === "/" && originalUrl.pathname.substr(-1) !== "/") {
+          path14 = "";
         }
-        var stream = send(req, path13, opts);
+        var stream = send(req, path14, opts);
         stream.on("directory", onDirectory);
         if (setHeaders) {
           stream.on("headers", setHeaders);
@@ -15436,7 +15444,7 @@ init_esbuild_shims();
 var import_express = __toESM(require_express2(), 1);
 import * as crypto from "node:crypto";
 import * as net from "node:net";
-import * as path11 from "node:path";
+import * as path12 from "node:path";
 
 // packages/cli/src/serve/auth.ts
 init_esbuild_shims();
@@ -17144,7 +17152,10 @@ function getAcpMemoryArgs() {
   const currentLimitMB = Math.floor(
     getHeapStatistics().heap_size_limit / (1024 * 1024)
   );
-  cachedMemoryArgs = targetMB > currentLimitMB ? [`--max-old-space-size=${targetMB}`] : [];
+  cachedMemoryArgs = [
+    ...targetMB > currentLimitMB ? [`--max-old-space-size=${targetMB}`] : [],
+    "--expose-gc"
+  ];
   return cachedMemoryArgs;
 }
 __name(getAcpMemoryArgs, "getAcpMemoryArgs");
@@ -17193,11 +17204,18 @@ function createSpawnChannelFactory(options = {}) {
     );
     childEnv["QWEN_CODE_NO_RELAUNCH"] = "true";
     const memoryArgs = getAcpMemoryArgs();
-    const child = spawn(process.execPath, [...memoryArgs, cliEntry, "--acp"], {
-      cwd: workspaceCwd,
-      stdio: ["pipe", "pipe", "pipe"],
-      env: childEnv
-    });
+    const execArgs = process.execArgv.filter(
+      (a) => !/^--inspect(-brk)?($|=)/.test(a)
+    );
+    const child = spawn(
+      process.execPath,
+      [...execArgs, ...memoryArgs, cliEntry, "--acp"],
+      {
+        cwd: workspaceCwd,
+        stdio: ["pipe", "pipe", "pipe"],
+        env: childEnv
+      }
+    );
     if (child.stderr) {
       const prefix = `[serve pid=${child.pid} cwd=${workspaceCwd}] `;
       const forwarder = createStderrForwarder({
@@ -17457,10 +17475,37 @@ var BridgeClient = class {
     const entry = this.resolveEntry(params.sessionId);
     const events = entry?.events ?? this.resolvePendingRestoreEvents(params.sessionId);
     if (!events) return;
+    const originator = entry?.activePromptOriginatorClientId ? { originatorClientId: entry.activePromptOriginatorClientId } : {};
+    const a2ui = extractA2uiToolUpdate(params);
+    if (a2ui) {
+      for (const surface of a2ui.surfaces) {
+        events.publish({
+          type: "session_update",
+          data: {
+            sessionId: params.sessionId,
+            update: {
+              sessionUpdate: "a2ui",
+              a2ui: {
+                surfaceId: surface.surfaceId,
+                callId: a2ui.callId,
+                commands: surface.commands
+              },
+              _meta: { serverTimestamp: Date.now(), source: "a2ui-bridge" }
+            }
+          },
+          ...originator
+        });
+      }
+      params = a2ui.sanitizedParams;
+    }
+    const updateMeta = params.update._meta;
+    const originalTs = updateMeta?.["serverTimestamp"] ?? updateMeta?.["timestamp"];
+    const serverTimestamp = typeof originalTs === "number" && Number.isFinite(originalTs) ? originalTs : void 0;
     events.publish({
       type: "session_update",
       data: params,
-      ...entry?.activePromptOriginatorClientId ? { originatorClientId: entry.activePromptOriginatorClientId } : {}
+      ...originator,
+      ...serverTimestamp !== void 0 ? { _meta: { serverTimestamp } } : {}
     });
   }
   /**
@@ -17912,6 +17957,123 @@ var BridgeClient = class {
     return { content };
   }
 };
+var A2UI_TOOL_RE = /(^|__)(present_ui|present_choices|a2ui_action)$/;
+function isA2uiToolMeta(meta) {
+  if (!meta) return false;
+  if (typeof meta.serverId === "string" && meta.serverId.toLowerCase().includes("a2ui"))
+    return true;
+  return typeof meta.toolName === "string" && A2UI_TOOL_RE.test(meta.toolName);
+}
+__name(isA2uiToolMeta, "isA2uiToolMeta");
+function splitA2uiText(raw) {
+  const s = raw.replace(/^\s+/, "");
+  if (s[0] !== "[") return null;
+  let depth = 0;
+  let inStr = false;
+  let esc = false;
+  let end = -1;
+  for (let i = 0; i < s.length; i++) {
+    const c = s[i];
+    if (inStr) {
+      if (esc) esc = false;
+      else if (c === "\\") esc = true;
+      else if (c === '"') inStr = false;
+      continue;
+    }
+    if (c === '"') inStr = true;
+    else if (c === "[") depth++;
+    else if (c === "]") {
+      depth--;
+      if (depth === 0) {
+        end = i + 1;
+        break;
+      }
+    }
+  }
+  if (end < 0) return null;
+  try {
+    const arr = JSON.parse(s.slice(0, end));
+    if (!Array.isArray(arr) || arr.length === 0) return null;
+    return [arr, s.slice(end).trim()];
+  } catch {
+    return null;
+  }
+}
+__name(splitA2uiText, "splitA2uiText");
+function surfaceIdOf(c) {
+  const cmd = c;
+  return cmd?.createSurface?.surfaceId ?? cmd?.updateComponents?.surfaceId ?? cmd?.updateDataModel?.surfaceId ?? cmd?.deleteSurface?.surfaceId;
+}
+__name(surfaceIdOf, "surfaceIdOf");
+function extractA2uiToolUpdate(params) {
+  const update = params.update;
+  if (!update || update["sessionUpdate"] !== "tool_call_update") return null;
+  const meta = update["_meta"];
+  if (!isA2uiToolMeta(meta)) return null;
+  const content = update["content"];
+  if (!Array.isArray(content)) return null;
+  let split = null;
+  let hitIndex = -1;
+  for (let i = 0; i < content.length; i++) {
+    const inner = content[i]?.content;
+    if (typeof inner?.text === "string") {
+      split = splitA2uiText(inner.text);
+      if (split) {
+        hitIndex = i;
+        break;
+      }
+    }
+  }
+  if (!split) return null;
+  const [commands, fallback] = split;
+  const order = [];
+  const grouped = /* @__PURE__ */ new Map();
+  for (const c of commands) {
+    const sid = surfaceIdOf(c);
+    if (!sid) {
+      const shape = c && typeof c === "object" ? Object.keys(c).join(",") || "empty object" : typeof c;
+      writeStderrLine2(
+        `a2ui: dropping command with unrecognized shape (${shape})`
+      );
+      continue;
+    }
+    if (!grouped.has(sid)) {
+      grouped.set(sid, []);
+      order.push(sid);
+    }
+    grouped.get(sid).push(c);
+  }
+  const surfaces = order.map((sid) => ({
+    surfaceId: sid,
+    commands: grouped.get(sid)
+  }));
+  const sanitizedText = fallback || "[A2UI surface rendered]";
+  const sanitizedContent = content.map(
+    (block, i) => i === hitIndex ? {
+      ...block,
+      content: {
+        ...block.content ?? {},
+        text: sanitizedText
+      }
+    } : block
+  );
+  const sanitizedUpdate = {
+    ...update,
+    content: sanitizedContent
+  };
+  if (typeof update["rawOutput"] === "string") {
+    sanitizedUpdate["rawOutput"] = sanitizedText;
+  }
+  return {
+    surfaces,
+    callId: typeof update["toolCallId"] === "string" ? update["toolCallId"] : void 0,
+    sanitizedParams: {
+      ...params,
+      update: sanitizedUpdate
+    }
+  };
+}
+__name(extractA2uiToolUpdate, "extractA2uiToolUpdate");
 
 // packages/acp-bridge/src/bridge.ts
 init_esbuild_shims();
@@ -18346,6 +18508,7 @@ __name(extractErrorCode, "extractErrorCode");
 function broadcastTurnError(entry, sessionId, err, promptId, originatorClientId) {
   const message = extractErrorMessage(err);
   const code = extractErrorCode(err);
+  entry.retryAllowed = true;
   entry.events.publish({
     type: "turn_error",
     data: {
@@ -18372,11 +18535,13 @@ var DEFAULT_INIT_TIMEOUT_MS = 1e4;
 var PERSIST_TIMEOUT_MS = 5e3;
 var MCP_RESTART_TIMEOUT_MS = 3e5;
 var MCP_OAUTH_TIMEOUT_MS = 6e5;
+var DAEMON_RETRY_META_KEY = "qwen.daemon.retry";
 var SESSION_RECAP_TIMEOUT_MS = 6e4;
 var SESSION_BTW_TIMEOUT_MS = 6e4;
 var SHELL_COMMAND_TIMEOUT_MS = 12e4;
 var MAX_SHELL_OUTPUT_FOR_HISTORY = 1e4;
 var DEFAULT_MAX_SESSIONS = 20;
+var DEFAULT_MAX_PENDING_PROMPTS_PER_SESSION = 5;
 var MAX_EVENT_RING_SIZE = 1e6;
 var DEFAULT_PERMISSION_TIMEOUT_MS = 5 * 60 * 1e3;
 var DEFAULT_MAX_PENDING_PER_SESSION = 64;
@@ -18423,6 +18588,17 @@ function createAcpSessionBridge(opts) {
   const permissionTimeoutMs = permissionTimeoutRaw > 0 && Number.isFinite(permissionTimeoutRaw) ? permissionTimeoutRaw : 0;
   const maxPendingRaw = opts.maxPendingPermissionsPerSession ?? DEFAULT_MAX_PENDING_PER_SESSION;
   const maxPendingPerSession = maxPendingRaw > 0 && Number.isFinite(maxPendingRaw) ? maxPendingRaw : Infinity;
+  const maxPendingPromptsRaw = opts.maxPendingPromptsPerSession ?? DEFAULT_MAX_PENDING_PROMPTS_PER_SESSION;
+  let maxPendingPromptsPerSession;
+  if (maxPendingPromptsRaw === 0 || maxPendingPromptsRaw === Number.POSITIVE_INFINITY) {
+    maxPendingPromptsPerSession = Infinity;
+  } else if (!Number.isInteger(maxPendingPromptsRaw) || maxPendingPromptsRaw < 0) {
+    throw new TypeError(
+      `Invalid maxPendingPromptsPerSession: ${maxPendingPromptsRaw}. Must be a non-negative integer (0 / Infinity = unlimited).`
+    );
+  } else {
+    maxPendingPromptsPerSession = maxPendingPromptsRaw;
+  }
   if (!path2.isAbsolute(opts.boundWorkspace)) {
     throw new TypeError(
       `Invalid boundWorkspace: "${opts.boundWorkspace}". Must be an absolute path.`
@@ -19086,6 +19262,7 @@ function createAcpSessionBridge(opts) {
       connection: ci.connection,
       events,
       promptQueue: Promise.resolve(),
+      pendingPromptCount: 0,
       modelChangeQueue: Promise.resolve(),
       approvalModeQueue: Promise.resolve(),
       modelPublishGeneration: 0,
@@ -19095,7 +19272,8 @@ function createAcpSessionBridge(opts) {
       clientLastSeenAt: /* @__PURE__ */ new Map(),
       attachCount: 0,
       spawnOwnerWantedKill: false,
-      promptActive: false
+      promptActive: false,
+      retryAllowed: false
     };
     ci.sessionIds.add(entry.sessionId);
     byId.set(entry.sessionId, entry);
@@ -19473,7 +19651,9 @@ function createAcpSessionBridge(opts) {
         inFlightSpawns.delete(tracker);
       }
     },
-    async sendPrompt(sessionId, req, signal, context) {
+    // Keep this method non-async: admission failures must throw before
+    // HTTP routes return 202.
+    sendPrompt(sessionId, req, signal, context) {
       opts.onDiagnosticLine?.(
         `qwen serve: bridge sendPrompt for session=${sessionId}`,
         "info"
@@ -19481,14 +19661,30 @@ function createAcpSessionBridge(opts) {
       const capturedContext = telemetry.captureContext();
       const queuedAt = Date.now();
       const entry = byId.get(sessionId);
-      if (!entry) throw new SessionNotFoundError(sessionId);
-      const originatorClientId = resolveTrustedClientId(
-        entry,
-        context?.clientId
-      );
+      if (!entry) return Promise.reject(new SessionNotFoundError(sessionId));
+      let originatorClientId;
+      try {
+        originatorClientId = resolveTrustedClientId(entry, context?.clientId);
+      } catch (err) {
+        return Promise.reject(err);
+      }
       if (signal?.aborted) {
         throw new DOMException("Prompt aborted", "AbortError");
       }
+      if (entry.pendingPromptCount >= maxPendingPromptsPerSession) {
+        throw new PromptQueueFullError(
+          maxPendingPromptsPerSession,
+          entry.pendingPromptCount,
+          sessionId
+        );
+      }
+      entry.pendingPromptCount += 1;
+      let promptSlotReleased = false;
+      const releasePromptSlot = /* @__PURE__ */ __name(() => {
+        if (promptSlotReleased) return;
+        promptSlotReleased = true;
+        entry.pendingPromptCount = Math.max(0, entry.pendingPromptCount - 1);
+      }, "releasePromptSlot");
       const result = entry.promptQueue.then(
         () => telemetry.runWithContext(capturedContext, async () => {
           const queueWaitMs = Date.now() - queuedAt;
@@ -19513,6 +19709,26 @@ function createAcpSessionBridge(opts) {
                 if (signal?.aborted) {
                   throw new DOMException("Prompt aborted", "AbortError");
                 }
+                const requestedRetry = req.retry === true;
+                const isRetry = requestedRetry && entry.retryAllowed;
+                entry.retryAllowed = false;
+                const promptRequest = (() => {
+                  const copy = {
+                    ...normalized
+                  };
+                  delete copy.retry;
+                  const meta = copy._meta && typeof copy._meta === "object" ? { ...copy._meta } : {};
+                  delete meta[DAEMON_RETRY_META_KEY];
+                  if (isRetry) {
+                    meta[DAEMON_RETRY_META_KEY] = true;
+                  }
+                  if (Object.keys(meta).length > 0) {
+                    copy._meta = meta;
+                  } else {
+                    delete copy._meta;
+                  }
+                  return copy;
+                })();
                 entry.promptActive = true;
                 entry.sessionLastSeenAt = Date.now();
                 if (originatorClientId === void 0) {
@@ -19522,13 +19738,19 @@ function createAcpSessionBridge(opts) {
                 }
                 try {
                   entry.cancelBroadcast = false;
-                  echoPromptToSessionBus(entry, normalized, originatorClientId);
+                  if (!isRetry) {
+                    echoPromptToSessionBus(
+                      entry,
+                      promptRequest,
+                      originatorClientId
+                    );
+                  }
                 } catch (echoErr) {
                   entry.promptActive = false;
                   delete entry.activePromptOriginatorClientId;
                   throw echoErr;
                 }
-                const promptPromise = entry.connection.prompt(normalized).finally(() => {
+                const promptPromise = entry.connection.prompt(promptRequest).finally(() => {
                   entry.promptActive = false;
                   entry.sessionLastSeenAt = Date.now();
                   delete entry.activePromptOriginatorClientId;
@@ -19618,6 +19840,8 @@ function createAcpSessionBridge(opts) {
         () => void 0,
         () => void 0
       );
+      result.finally(releasePromptSlot).catch(() => {
+      });
       return result;
     },
     async cancelSession(sessionId, req, context) {
@@ -20364,11 +20588,17 @@ function createAcpSessionBridge(opts) {
         `qwen serve: bridge executeShellCommand for session=${sessionId}`,
         "info"
       );
+      if (opts.sessionShellCommandEnabled !== true) {
+        throw new SessionShellDisabledError();
+      }
+      if (context?.clientId === void 0) {
+        throw new SessionShellClientRequiredError();
+      }
       const entry = byId.get(sessionId);
       if (!entry) throw new SessionNotFoundError(sessionId);
       const originatorClientId = resolveTrustedClientId(
         entry,
-        context?.clientId
+        context.clientId
       );
       if (signal?.aborted) {
         return { exitCode: null, output: "", aborted: true };
@@ -22790,8 +23020,12 @@ function isResponse(m) {
   "result" in m !== "error" in m;
 }
 __name(isResponse, "isResponse");
+var LOG_SAFE_RE = new RegExp(
+  String.raw`[\x00-\x1f\x7f-\x9f\u200b-\u200f\u2028-\u202e\u2066-\u2069\ufeff]`,
+  "g"
+);
 function logSafe(s) {
-  return s.replace(/[\u0000-\u001f\u007f\u0080-\u009f]/g, " ");
+  return s.replace(LOG_SAFE_RE, " ");
 }
 __name(logSafe, "logSafe");
 function success(id, result) {
@@ -22836,7 +23070,8 @@ function errMsg(err) {
   return err instanceof Error ? err.message : String(err);
 }
 __name(errMsg, "errMsg");
-var QWEN_VENDOR_METHODS = [
+var SESSION_SHELL_METHOD = `${QWEN_METHOD_NS}session/shell`;
+var ALL_QWEN_VENDOR_METHODS = [
   `${QWEN_METHOD_NS}session/heartbeat`,
   `${QWEN_METHOD_NS}session/context`,
   `${QWEN_METHOD_NS}session/supported_commands`,
@@ -22852,7 +23087,7 @@ var QWEN_VENDOR_METHODS = [
   // Wave 1: session extensions
   `${QWEN_METHOD_NS}session/recap`,
   `${QWEN_METHOD_NS}session/btw`,
-  `${QWEN_METHOD_NS}session/shell`,
+  SESSION_SHELL_METHOD,
   `${QWEN_METHOD_NS}session/detach`,
   `${QWEN_METHOD_NS}session/context_usage`,
   `${QWEN_METHOD_NS}session/tasks`,
@@ -22885,6 +23120,12 @@ var QWEN_VENDOR_METHODS = [
   `${QWEN_METHOD_NS}workspace/agents/update`,
   `${QWEN_METHOD_NS}workspace/agents/delete`
 ];
+function advertisedQwenVendorMethods(sessionShellCommandEnabled) {
+  return ALL_QWEN_VENDOR_METHODS.filter(
+    (method) => sessionShellCommandEnabled || method !== SESSION_SHELL_METHOD
+  );
+}
+__name(advertisedQwenVendorMethods, "advertisedQwenVendorMethods");
 var CONN_ROUTED_METHODS = /* @__PURE__ */ new Set([
   "authenticate",
   "session/new",
@@ -22892,7 +23133,8 @@ var CONN_ROUTED_METHODS = /* @__PURE__ */ new Set([
   "session/resume",
   "session/list",
   "session/close",
-  ...QWEN_VENDOR_METHODS
+  "session/fork",
+  ...ALL_QWEN_VENDOR_METHODS
 ]);
 var MAX_NAME_LENGTH = 256;
 var AcpParamError = class extends Error {
@@ -22982,6 +23224,20 @@ function toRpcError(err) {
       data: { errorKind: "upstream_error" }
     };
   }
+  if (err instanceof SessionShellDisabledError) {
+    return {
+      code: RPC.INVALID_PARAMS,
+      message: errMsg(err),
+      data: { errorKind: "session_shell_disabled" }
+    };
+  }
+  if (err instanceof SessionShellClientRequiredError) {
+    return {
+      code: RPC.INVALID_PARAMS,
+      message: errMsg(err),
+      data: { errorKind: "client_id_required" }
+    };
+  }
   const name = err instanceof Error ? err.name : "";
   switch (name) {
     case "SessionNotFoundError":
@@ -22991,6 +23247,19 @@ function toRpcError(err) {
       return { code: RPC.INVALID_PARAMS, message: errMsg(err) };
     case "SessionLimitExceededError":
       return { code: RPC.INTERNAL_ERROR, message: errMsg(err) };
+    case "PromptQueueFullError": {
+      const promptErr = err;
+      return {
+        code: RPC.INTERNAL_ERROR,
+        message: errMsg(err),
+        data: {
+          errorKind: "prompt_queue_full",
+          sessionId: promptErr.sessionId,
+          limit: promptErr.limit,
+          pendingCount: promptErr.pendingCount
+        }
+      };
+    }
     default:
       return {
         code: RPC.INTERNAL_ERROR,
@@ -23000,14 +23269,20 @@ function toRpcError(err) {
   }
 }
 __name(toRpcError, "toRpcError");
+function rpcErrorFrame(id, err) {
+  const { code, message, data } = toRpcError(err);
+  return error(id, code, message, data);
+}
+__name(rpcErrorFrame, "rpcErrorFrame");
 var ACP_PROTOCOL_VERSION = 1;
 var AcpDispatcher = class {
-  constructor(bridge, boundWorkspace, workspace, fsFactory, deviceFlowRegistry) {
+  constructor(bridge, boundWorkspace, workspace, fsFactory, deviceFlowRegistry, sessionShellCommandEnabled = false) {
     this.bridge = bridge;
     this.boundWorkspace = boundWorkspace;
     this.workspace = workspace;
     this.fsFactory = fsFactory;
     this.deviceFlowRegistry = deviceFlowRegistry;
+    this.sessionShellCommandEnabled = sessionShellCommandEnabled;
     this.agentManager = createDaemonSubagentManager(boundWorkspace);
   }
   static {
@@ -23072,6 +23347,48 @@ var AcpDispatcher = class {
       return void 0;
     }
   }
+  /**
+   * Extract ACP-standard `SessionModelState` from configOptions.
+   * ConfigOptions carry model info as `{ category: 'model', type: 'select',
+   * currentValue, options }`. Maps to `{ currentModelId, availableModels }`.
+   */
+  extractModelState(configOptions) {
+    if (!configOptions) return void 0;
+    const modelOpt = configOptions.find(
+      (o) => typeof o === "object" && o !== null && o["category"] === "model"
+    );
+    if (!modelOpt) return void 0;
+    const currentModelId = String(modelOpt["currentValue"] ?? "");
+    const options = Array.isArray(modelOpt["options"]) ? modelOpt["options"] : [];
+    return {
+      currentModelId,
+      availableModels: options.map((opt) => {
+        const o = opt;
+        return { id: String(o["value"] ?? o["id"] ?? "") };
+      })
+    };
+  }
+  /**
+   * Extract ACP-standard `SessionModeState` from configOptions.
+   * ConfigOptions carry mode info as `{ category: 'mode', type: 'select',
+   * currentValue, options }`. Maps to `{ currentModeId, availableModes }`.
+   */
+  extractModeState(configOptions) {
+    if (!configOptions) return void 0;
+    const modeOpt = configOptions.find(
+      (o) => typeof o === "object" && o !== null && o["category"] === "mode"
+    );
+    if (!modeOpt) return void 0;
+    const currentModeId = String(modeOpt["currentValue"] ?? "");
+    const options = Array.isArray(modeOpt["options"]) ? modeOpt["options"] : [];
+    return {
+      currentModeId,
+      availableModes: options.map((opt) => {
+        const o = opt;
+        return { id: String(o["value"] ?? o["id"] ?? "") };
+      })
+    };
+  }
   /**
    * Cancel a permission request the client abandoned (closed its stream /
    * connection before voting), so the bridge isn't left blocked. Invoked
@@ -23126,7 +23443,9 @@ var AcpDispatcher = class {
           [QWEN_META_KEY]: {
             connectionId,
             workspaceCwd: this.boundWorkspace,
-            methods: [...QWEN_VENDOR_METHODS]
+            methods: advertisedQwenVendorMethods(
+              this.sessionShellCommandEnabled
+            )
           }
         }
       }
@@ -23197,23 +23516,10 @@ var AcpDispatcher = class {
           return;
         case "session/new": {
           const cwd = parseOptionalWorkspaceCwd(params, this.boundWorkspace);
-          const rawScope = params["sessionScope"];
-          if (rawScope !== void 0 && rawScope !== "single" && rawScope !== "thread") {
-            if (id !== void 0) {
-              conn.sendConn(
-                error(
-                  id,
-                  RPC.INVALID_PARAMS,
-                  '`sessionScope` must be "single" or "thread"'
-                )
-              );
-            }
-            return;
-          }
           const session = await this.bridge.spawnOrAttach({
             workspaceCwd: cwd,
             clientId: conn.clientId,
-            ...rawScope !== void 0 ? { sessionScope: rawScope } : {}
+            sessionScope: "thread"
           });
           if (conn.destroyed) {
             this.killOrphanSession(session.sessionId);
@@ -23226,9 +23532,13 @@ var AcpDispatcher = class {
             this.killOrphanSession(session.sessionId);
             return;
           }
+          const models = this.extractModelState(configOptions);
+          const modes = this.extractModeState(configOptions);
           this.replyConn(conn, id, {
             sessionId: session.sessionId,
-            ...configOptions ? { configOptions } : {}
+            ...configOptions ? { configOptions } : {},
+            ...models ? { models } : {},
+            ...modes ? { modes } : {}
           });
           return;
         }
@@ -23288,7 +23598,15 @@ var AcpDispatcher = class {
           }
           conn.getOrCreateSession(sessionId).clientId = restored.clientId;
           conn.ownSession(sessionId);
-          this.replyConn(conn, id, restored.state ?? {});
+          const loadConfigOptions = await this.configOptionsFor(sessionId);
+          const loadModels = this.extractModelState(loadConfigOptions);
+          const loadModes = this.extractModeState(loadConfigOptions);
+          this.replyConn(conn, id, {
+            ...restored.state ?? {},
+            ...loadConfigOptions ? { configOptions: loadConfigOptions } : {},
+            ...loadModels ? { models: loadModels } : {},
+            ...loadModes ? { modes: loadModes } : {}
+          });
           return;
         }
         case "session/list": {
@@ -23334,6 +23652,44 @@ var AcpDispatcher = class {
           this.replyConn(conn, id, {});
           return;
         }
+        // ACP standard: session/fork — create a branched copy of an existing
+        // session. Maps to bridge.branchSession().
+        case "session/fork": {
+          const sessionId = String(params["sessionId"] ?? "");
+          if (!sessionId) {
+            if (id !== void 0) {
+              conn.sendConn(
+                error(id, RPC.INVALID_PARAMS, "`sessionId` is required")
+              );
+            }
+            return;
+          }
+          if (!this.requireOwned(conn, sessionId, id)) return;
+          const ctx = this.sessionCtx(conn, sessionId, loopback);
+          const result = await this.bridge.branchSession(
+            sessionId,
+            {
+              name: typeof params["name"] === "string" ? params["name"] : void 0
+            },
+            ctx
+          );
+          if (conn.destroyed) {
+            this.killOrphanSession(result.sessionId);
+            return;
+          }
+          conn.getOrCreateSession(result.sessionId).clientId = result.clientId;
+          conn.ownSession(result.sessionId);
+          const configOptions = await this.configOptionsFor(result.sessionId);
+          const models = this.extractModelState(configOptions);
+          const modes = this.extractModeState(configOptions);
+          this.replyConn(conn, id, {
+            sessionId: result.sessionId,
+            ...configOptions ? { configOptions } : {},
+            ...models ? { models } : {},
+            ...modes ? { modes } : {}
+          });
+          return;
+        }
         case "session/cancel": {
           const sessionId = String(params["sessionId"] ?? "");
           if (!this.requireOwned(conn, sessionId, id)) return;
@@ -23425,6 +23781,80 @@ var AcpDispatcher = class {
           this.replySession(conn, sessionId, id, { configOptions });
           return;
         }
+        // ACP standard: session/set_mode — dedicated method for mode changes.
+        // Maps to the same bridge call as set_config_option with configId='mode'.
+        case "session/set_mode": {
+          const sessionId = String(params["sessionId"] ?? "");
+          if (!sessionId) {
+            if (id !== void 0)
+              conn.sendConn(
+                error(id, RPC.INVALID_PARAMS, "`sessionId` is required")
+              );
+            return;
+          }
+          if (!this.requireOwned(conn, sessionId, id)) return;
+          const modeId = String(params["modeId"] ?? "");
+          if (!modeId || !APPROVAL_MODES.includes(modeId)) {
+            if (id !== void 0) {
+              this.replySession(
+                conn,
+                sessionId,
+                id,
+                void 0,
+                error(
+                  id,
+                  RPC.INVALID_PARAMS,
+                  `invalid modeId "${modeId}" (expected one of: ${APPROVAL_MODES.join(", ")})`
+                )
+              );
+            }
+            return;
+          }
+          const ctx = this.sessionCtx(conn, sessionId, loopback);
+          await this.bridge.setSessionApprovalMode(
+            sessionId,
+            modeId,
+            { persist: false },
+            ctx
+          );
+          this.replySession(conn, sessionId, id, {});
+          return;
+        }
+        // ACP standard (unstable): session/set_model — dedicated method for
+        // model changes. Maps to the same bridge call as set_config_option
+        // with configId='model'.
+        case "session/set_model": {
+          const sessionId = String(params["sessionId"] ?? "");
+          if (!sessionId) {
+            if (id !== void 0)
+              conn.sendConn(
+                error(id, RPC.INVALID_PARAMS, "`sessionId` is required")
+              );
+            return;
+          }
+          if (!this.requireOwned(conn, sessionId, id)) return;
+          const modelId = String(params["modelId"] ?? "");
+          if (!modelId) {
+            if (id !== void 0) {
+              this.replySession(
+                conn,
+                sessionId,
+                id,
+                void 0,
+                error(id, RPC.INVALID_PARAMS, "`modelId` is required")
+              );
+            }
+            return;
+          }
+          const ctx = this.sessionCtx(conn, sessionId, loopback);
+          await this.bridge.setSessionModel(
+            sessionId,
+            { modelId, sessionId },
+            ctx
+          );
+          this.replySession(conn, sessionId, id, {});
+          return;
+        }
         case `${QWEN_METHOD_NS}session/heartbeat`: {
           const sessionId = String(params["sessionId"] ?? "");
           if (!this.requireOwned(conn, sessionId, id)) return;
@@ -23628,7 +24058,23 @@ var AcpDispatcher = class {
         }
         case `${QWEN_METHOD_NS}session/shell`: {
           const sessionId = String(params["sessionId"] ?? "");
+          if (!this.sessionShellCommandEnabled) {
+            if (id !== void 0) {
+              conn.sendConn(rpcErrorFrame(id, new SessionShellDisabledError()));
+            }
+            return;
+          }
           if (!this.requireOwned(conn, sessionId, id)) return;
+          const binding = conn.sessions.get(sessionId);
+          const clientId = binding?.clientId;
+          if (!clientId) {
+            if (id !== void 0) {
+              conn.sendConn(
+                rpcErrorFrame(id, new SessionShellClientRequiredError())
+              );
+            }
+            return;
+          }
           const rawCmd = params["command"];
           if (typeof rawCmd !== "string" || rawCmd.trim().length === 0) {
             if (id !== void 0)
@@ -23650,7 +24096,7 @@ var AcpDispatcher = class {
           const result = await this.bridge.executeShellCommand(
             sessionId,
             rawCmd,
-            void 0,
+            binding.abort.signal,
             this.sessionCtx(conn, sessionId, loopback)
           );
           this.replyConn(conn, id, result);
@@ -24209,8 +24655,10 @@ var AcpDispatcher = class {
                 if (err instanceof Error && err.name === "SessionNotFoundError") {
                   closedIds.push(sid);
                 } else {
+                  const safeSessionId = logSafe(sid.slice(0, 8));
+                  const safeMessage = logSafe(msg2);
                   writeStderrLine(
-                    `qwen serve: /acp sessions/delete closeSession(${sid.slice(0, 8)}) failed: ${msg2}`
+                    `qwen serve: /acp sessions/delete closeSession(${safeSessionId}) failed: ${safeMessage}`
                   );
                   closeErrors.push({ sessionId: sid, error: msg2 });
                 }
@@ -24220,8 +24668,10 @@ var AcpDispatcher = class {
           const svc = new SessionService(this.boundWorkspace);
           const removeResult = await svc.removeSessions(closedIds);
           for (const e of removeResult.errors) {
+            const safeSessionId = logSafe(e.sessionId.slice(0, 8));
+            const safeMessage = logSafe(errMsg(e.error));
             writeStderrLine(
-              `qwen serve: /acp sessions/delete removeSessions(${e.sessionId.slice(0, 8)}) failed: ${e.error.message}`
+              `qwen serve: /acp sessions/delete removeSessions(${safeSessionId}) failed: ${safeMessage}`
             );
           }
           this.replyConn(conn, id, {
@@ -24231,7 +24681,7 @@ var AcpDispatcher = class {
               ...closeErrors,
               ...removeResult.errors.map((e) => ({
                 sessionId: e.sessionId,
-                error: e.error.message
+                error: errMsg(e.error)
               }))
             ]
           });
@@ -25209,13 +25659,14 @@ var WS_READ_METHODS = /* @__PURE__ */ new Set([
 function mountAcpHttp(app, bridge, opts) {
   const enabled = opts.enabled ?? process.env["QWEN_SERVE_ACP_HTTP"] !== "0";
   if (!enabled) return void 0;
-  const path13 = opts.path ?? "/acp";
+  const path14 = opts.path ?? "/acp";
   const dispatcher = new AcpDispatcher(
     bridge,
     opts.boundWorkspace,
     opts.workspace,
     opts.fsFactory,
-    opts.deviceFlowRegistry
+    opts.deviceFlowRegistry,
+    opts.sessionShellCommandEnabled === true
   );
   const registry = new ConnectionRegistry(
     (req, clientId) => dispatcher.cancelAbandonedPermission(req, clientId),
@@ -25230,7 +25681,7 @@ function mountAcpHttp(app, bridge, opts) {
     },
     opts.maxConnections
   );
-  app.post(path13, async (req, res) => {
+  app.post(path14, async (req, res) => {
     const ct = req.headers["content-type"];
     if (!ct || !ct.startsWith("application/json")) {
       res.status(415).json({ error: "Content-Type must be application/json" });
@@ -25334,7 +25785,7 @@ function mountAcpHttp(app, bridge, opts) {
       );
     });
   });
-  app.get(path13, (req, res) => {
+  app.get(path14, (req, res) => {
     const accept = req.headers["accept"] ?? "";
     if (!accept.includes("text/event-stream")) {
       res.status(406).json({ error: "Accept header must include text/event-stream" });
@@ -25410,7 +25861,7 @@ function mountAcpHttp(app, bridge, opts) {
       }
     );
   });
-  app.delete(path13, (req, res) => {
+  app.delete(path14, (req, res) => {
     const connectionId = headerOf(req, ACP_CONNECTION_HEADER);
     if (!connectionId) {
       res.status(400).json({ error: "Missing Acp-Connection-Id" });
@@ -25443,7 +25894,7 @@ function mountAcpHttp(app, bridge, opts) {
         socket.destroy();
         return;
       }
-      if (url.pathname !== path13) {
+      if (url.pathname !== path14) {
         socket.destroy();
         return;
       }
@@ -25678,7 +26129,7 @@ function mountAcpHttp(app, bridge, opts) {
       });
     }, "upgradeListener");
     httpServer.on("upgrade", upgradeListener);
-    writeStderrLine(`qwen serve: /acp WebSocket transport enabled on ${path13}`);
+    writeStderrLine(`qwen serve: /acp WebSocket transport enabled on ${path14}`);
   }
   __name(setupWebSocket, "setupWebSocket");
   return {
@@ -25856,6 +26307,11 @@ var SERVE_CAPABILITY_REGISTRY = {
   // Side question (/btw) against the session's conversation context.
   // Single-turn, tool-free LLM call via runForkedAgent (cache path).
   session_btw: { since: "v1" },
+  // Direct daemon-side shell execution for an existing session.
+  // Advertised CONDITIONALLY: operators must explicitly enable it and
+  // configure bearer auth. Clients must still send a session-bound
+  // X-Qwen-Client-Id when calling the route.
+  session_shell_command: { since: "v1" },
   // Daemon hosts a workspace-shared MCP transport
   // pool (`QwenAgent.mcpPool`); `GET /workspace/mcp` reflects pool-level
   // accounting (`entryCount`, `entrySummary` on each per-server cell).
@@ -25935,6 +26391,10 @@ var CONDITIONAL_SERVE_FEATURES = /* @__PURE__ */ new Map([
     (toggles) => typeof toggles.writerIdleTimeoutMs === "number" && toggles.writerIdleTimeoutMs > 0
   ],
   ["workspace_settings", (toggles) => toggles.persistSettingAvailable === true],
+  [
+    "session_shell_command",
+    (toggles) => toggles.sessionShellCommandEnabled === true
+  ],
   ["rate_limit", (toggles) => toggles.rateLimit === true],
   ["workspace_reload", (toggles) => toggles.reloadAvailable === true]
 ]);
@@ -29046,20 +29506,25 @@ var TUI_ONLY_SETTINGS = /* @__PURE__ */ new Set([
   "ide.enabled",
   "ui.showLineNumbers",
   "ui.renderMode",
-  "ui.compactMode",
   "ui.useTerminalBuffer",
   "ui.hideBanner",
-  "ui.accessibility.enableLoadingPhrases"
+  "ui.accessibility.enableLoadingPhrases",
+  "ui.enableWelcomeBack"
 ]);
+var WEB_SHELL_SETTINGS = /* @__PURE__ */ new Set(["ui.compactMode"]);
 var VALID_WRITE_SCOPES = /* @__PURE__ */ new Set(["workspace"]);
 var MAX_STRING_VALUE_LENGTH = 1024;
 var SECURITY_SENSITIVE_SETTINGS = /* @__PURE__ */ new Set(["tools.approvalMode"]);
 function getAllowedKeys() {
-  return new Set(
+  const keys = new Set(
     getDialogSettingKeys().filter(
       (k) => !TUI_ONLY_SETTINGS.has(k) && !SECURITY_SENSITIVE_SETTINGS.has(k)
     )
   );
+  for (const key of WEB_SHELL_SETTINGS) {
+    keys.add(key);
+  }
+  return keys;
 }
 __name(getAllowedKeys, "getAllowedKeys");
 function buildSettingsResponse(boundWorkspace, keys) {
@@ -29256,13 +29721,150 @@ function registerWorkspaceSettingsRoutes(app, deps) {
 }
 __name(registerWorkspaceSettingsRoutes, "registerWorkspaceSettingsRoutes");
 
+// packages/cli/src/serve/routes/a2uiAction.ts
+init_esbuild_shims();
+import * as fsp3 from "node:fs/promises";
+import * as path11 from "node:path";
+var A2UI_MIME = "application/a2ui+json";
+var ACTION_TOOL = "action";
+var CALL_TIMEOUT_MS = 15e3;
+function usableServerConfig(cfg) {
+  return !!cfg && (typeof cfg.command === "string" || typeof cfg.httpUrl === "string");
+}
+__name(usableServerConfig, "usableServerConfig");
+async function findFromSettingsFile(workspaceCwd) {
+  try {
+    const raw = await fsp3.readFile(
+      path11.join(workspaceCwd, ".qwen", "settings.json"),
+      "utf8"
+    );
+    const settings = JSON.parse(raw);
+    for (const [name, cfg] of Object.entries(settings.mcpServers ?? {})) {
+      if (name.toLowerCase().includes("a2ui") && usableServerConfig(cfg)) {
+        return cfg;
+      }
+    }
+  } catch {
+  }
+  return null;
+}
+__name(findFromSettingsFile, "findFromSettingsFile");
+function buildTransport(cfg) {
+  if (typeof cfg.httpUrl === "string") {
+    return new StreamableHTTPClientTransport(new URL(cfg.httpUrl));
+  }
+  return new StdioClientTransport({
+    command: cfg.command,
+    args: cfg.args ?? [],
+    // spawn() treats `env` as a complete replacement, not a merge — a partial
+    // env (e.g. {API_KEY}) would strip PATH/HOME and break the child. Merge
+    // over process.env like packages/core/src/tools/mcp-client.ts does; when
+    // unset, let the SDK apply its safe default environment.
+    ...cfg.env ? { env: { ...process.env, ...cfg.env } } : {},
+    cwd: cfg.cwd
+  });
+}
+__name(buildTransport, "buildTransport");
+function extractA2uiActionResult(result) {
+  if (result.isError) {
+    const errMsg2 = (result.content ?? []).filter(
+      (b) => b.type === "text" && typeof b.text === "string"
+    ).map((b) => b.text).join("");
+    throw new Error(
+      `a2ui action tool returned error: ${errMsg2 || "unknown error"}`
+    );
+  }
+  let commands = null;
+  let fallback = "";
+  for (const block of result.content ?? []) {
+    if (commands === null && block.type === "resource" && block.resource?.mimeType === A2UI_MIME && typeof block.resource.text === "string") {
+      try {
+        const parsed = JSON.parse(block.resource.text);
+        if (Array.isArray(parsed)) commands = parsed;
+      } catch {
+      }
+    } else if (block.type === "text" && typeof block.text === "string") {
+      fallback += block.text;
+    }
+  }
+  return { commands, fallback };
+}
+__name(extractA2uiActionResult, "extractA2uiActionResult");
+async function callA2uiAction(cfg, args) {
+  const transport = buildTransport(cfg);
+  const client = new Client({ name: "qwen-serve-a2ui", version: "0.0.1" });
+  try {
+    await client.connect(transport, { timeout: CALL_TIMEOUT_MS });
+    const result = await client.callTool(
+      { name: ACTION_TOOL, arguments: { ...args } },
+      void 0,
+      { timeout: CALL_TIMEOUT_MS }
+    );
+    return extractA2uiActionResult(result);
+  } finally {
+    await transport.close().catch(() => {
+    });
+    await client.close().catch(() => {
+    });
+  }
+}
+__name(callA2uiAction, "callA2uiAction");
+function registerA2uiActionRoutes(app, opts) {
+  const { boundWorkspace, mutate, safeBody: safeBody2, getMcpServers } = opts;
+  const callAction = opts.callAction ?? callA2uiAction;
+  app.post(
+    "/session/:id/a2ui-action",
+    mutate(),
+    async (req, res) => {
+      const body = safeBody2(req);
+      const name = body["name"];
+      if (typeof name !== "string" || name.trim().length === 0) {
+        res.status(400).json({ error: "`name` is required" });
+        return;
+      }
+      const surfaceId = typeof body["surfaceId"] === "string" ? body["surfaceId"] : void 0;
+      const context = body["context"] && typeof body["context"] === "object" && !Array.isArray(body["context"]) ? body["context"] : void 0;
+      let cfg = null;
+      try {
+        const servers = (await getMcpServers(req)).filter(
+          (s) => s.name.toLowerCase().includes("a2ui") && usableServerConfig(s.config)
+        );
+        const live = servers.find((s) => s.mcpStatus === "connected");
+        cfg = (live ?? servers[0])?.config ?? null;
+      } catch {
+      }
+      if (!cfg) cfg = await findFromSettingsFile(boundWorkspace);
+      if (!cfg) {
+        res.status(503).json({
+          error: "no a2ui MCP server found (neither runtime-registered nor in workspace settings mcpServers)"
+        });
+        return;
+      }
+      try {
+        const { commands, fallback } = await callAction(cfg, {
+          name: name.trim(),
+          surfaceId,
+          context
+        });
+        res.status(200).json({ commands, fallback });
+      } catch (err) {
+        writeStderrLine(
+          `a2ui-action proxy failed: ${err instanceof Error ? err.message : String(err)}`
+        );
+        res.status(502).json({ error: "a2ui action call failed" });
+      }
+    }
+  );
+}
+__name(registerA2uiActionRoutes, "registerA2uiActionRoutes");
+
 // packages/cli/src/serve/rateLimit.ts
 init_esbuild_shims();
 var MAX_BUCKETS = 1e4;
 var GC_REQUEST_INTERVAL = 1e3;
 var GC_TIMER_INTERVAL_MS = 5 * 60 * 1e3;
-function resolveTier(method, path13) {
-  const p = path13.endsWith("/") && path13.length > 1 ? path13.slice(0, -1) : path13;
+function resolveTier(method, path14) {
+  const p = path14.endsWith("/") && path14.length > 1 ? path14.slice(0, -1) : path14;
   if (method === "OPTIONS") return null;
   if ((method === "GET" || method === "HEAD") && (p === "/health" || p === "/demo"))
     return null;
@@ -29799,15 +30401,15 @@ function parseAuthProviderInstallRequest(body, options) {
 }
 __name(parseAuthProviderInstallRequest, "parseAuthProviderInstallRequest");
 function resolveDaemonTelemetryRoute(req) {
-  const path13 = req.path.replace(/\/$/, "") || "/";
-  if (req.method === "POST" && path13 === "/session") {
+  const path14 = req.path.replace(/\/$/, "") || "/";
+  if (req.method === "POST" && path14 === "/session") {
     return { route: "POST /session" };
   }
-  if (req.method === "POST" && path13 === "/sessions/delete") {
+  if (req.method === "POST" && path14 === "/sessions/delete") {
     return { route: "POST /sessions/delete" };
   }
-  const sessionAction = path13.match(
-    /^\/session\/([^/]+)\/(load|resume|prompt|cancel|recap|btw|model|shell|detach|rewind|approval-mode|language)$/
+  const sessionAction = path14.match(
+    /^\/session\/([^/]+)\/(load|resume|prompt|cancel|recap|btw|model|shell|detach|rewind|approval-mode|language|a2ui-action)$/
   );
   const sessionActionId = sessionAction?.[1];
   const sessionActionName = sessionAction?.[2];
@@ -29817,14 +30419,14 @@ function resolveDaemonTelemetryRoute(req) {
       sessionId: sessionActionId
     };
   }
-  const sessionMetadata = path13.match(/^\/session\/([^/]+)\/metadata$/);
+  const sessionMetadata = path14.match(/^\/session\/([^/]+)\/metadata$/);
   if (sessionMetadata?.[1] && req.method === "PATCH") {
     return {
       route: "PATCH /session/:id/metadata",
       sessionId: sessionMetadata[1]
     };
   }
-  const sessionPermission = path13.match(
+  const sessionPermission = path14.match(
     /^\/session\/([^/]+)\/permission\/([^/]+)$/
   );
   if (sessionPermission?.[1] && sessionPermission?.[2] && req.method === "POST") {
@@ -29835,7 +30437,7 @@ function resolveDaemonTelemetryRoute(req) {
       ...rawRequestId.length <= MAX_CLIENT_ID_LENGTH2 && CLIENT_ID_RE2.test(rawRequestId) ? { permissionRequestId: rawRequestId } : {}
     };
   }
-  const globalPermission = path13.match(/^\/permission\/([^/]+)$/);
+  const globalPermission = path14.match(/^\/permission\/([^/]+)$/);
   if (globalPermission?.[1] && req.method === "POST") {
     const rawRequestId = globalPermission[1];
     return {
@@ -29843,45 +30445,45 @@ function resolveDaemonTelemetryRoute(req) {
       ...rawRequestId.length <= MAX_CLIENT_ID_LENGTH2 && CLIENT_ID_RE2.test(rawRequestId) ? { permissionRequestId: rawRequestId } : {}
     };
   }
-  const deleteSession = path13.match(/^\/session\/([^/]+)$/);
+  const deleteSession = path14.match(/^\/session\/([^/]+)$/);
   const deleteSessionId = deleteSession?.[1];
   if (deleteSessionId && req.method === "DELETE") {
     return { route: "DELETE /session/:id", sessionId: deleteSessionId };
   }
-  if (req.method === "GET" && /^\/workspace\/[^/]+\/sessions$/.test(path13)) {
+  if (req.method === "GET" && /^\/workspace\/[^/]+\/sessions$/.test(path14)) {
     return { route: "GET /workspace/:id/sessions" };
   }
-  if (req.method === "POST" && path13 === "/workspace/init") {
+  if (req.method === "POST" && path14 === "/workspace/init") {
     return { route: "POST /workspace/init" };
   }
-  if (req.method === "POST" && path13 === "/workspace/reload") {
+  if (req.method === "POST" && path14 === "/workspace/reload") {
     return { route: "POST /workspace/reload" };
   }
-  const mcpRestart = path13.match(/^\/workspace\/mcp\/([^/]+)\/restart$/);
+  const mcpRestart = path14.match(/^\/workspace\/mcp\/([^/]+)\/restart$/);
   if (mcpRestart?.[1] && req.method === "POST") {
     return { route: "POST /workspace/mcp/:server/restart" };
   }
-  if (req.method === "POST" && path13 === "/workspace/mcp/servers") {
+  if (req.method === "POST" && path14 === "/workspace/mcp/servers") {
     return { route: "POST /workspace/mcp/servers" };
   }
-  const mcpDelete = path13.match(/^\/workspace\/mcp\/servers\/([^/]+)$/);
+  const mcpDelete = path14.match(/^\/workspace\/mcp\/servers\/([^/]+)$/);
   if (mcpDelete?.[1] && req.method === "DELETE") {
     return { route: "DELETE /workspace/mcp/servers/:name" };
   }
-  if (req.method === "POST" && path13 === "/workspace/auth/device-flow") {
+  if (req.method === "POST" && path14 === "/workspace/auth/device-flow") {
     return { route: "POST /workspace/auth/device-flow" };
   }
-  const deviceFlowDelete = path13.match(
+  const deviceFlowDelete = path14.match(
     /^\/workspace\/auth\/device-flow\/([^/]+)$/
   );
   if (deviceFlowDelete?.[1] && req.method === "DELETE") {
     return { route: "DELETE /workspace/auth/device-flow/:id" };
   }
-  const toolEnable = path13.match(/^\/workspace\/tools\/([^/]+)\/enable$/);
+  const toolEnable = path14.match(/^\/workspace\/tools\/([^/]+)\/enable$/);
   if (toolEnable?.[1] && req.method === "POST") {
     return { route: "POST /workspace/tools/:name/enable" };
   }
-  if (path13 === "/workspace/settings") {
+  if (path14 === "/workspace/settings") {
     if (req.method === "GET") return { route: "GET /workspace/settings" };
     if (req.method === "POST") return { route: "POST /workspace/settings" };
   }
@@ -29955,6 +30557,13 @@ function resolvePromptDeadlineMs(serverMs, requestMs) {
   return Math.min(serverMs, requestMs);
 }
 __name(resolvePromptDeadlineMs, "resolvePromptDeadlineMs");
+var DEFAULT_MAX_PENDING_PROMPTS_PER_SESSION2 = 5;
+function advertisedMaxPendingPromptsPerSession(value) {
+  if (value === void 0) return DEFAULT_MAX_PENDING_PROMPTS_PER_SESSION2;
+  if (value === 0 || value === Number.POSITIVE_INFINITY) return null;
+  return value;
+}
+__name(advertisedMaxPendingPromptsPerSession, "advertisedMaxPendingPromptsPerSession");
 function createServeApp(opts, getPort = () => opts.port, deps = {}) {
   const app = (0, import_express.default)();
   const boundWorkspace = deps.boundWorkspace ?? canonicalizeWorkspace(opts.workspace ?? process.cwd());
@@ -29969,10 +30578,14 @@ function createServeApp(opts, getPort = () => opts.port, deps = {}) {
     injected: deps.fsFactory,
     trusted: false
   });
+  const tokenConfigured = typeof opts.token === "string" && opts.token.length > 0;
+  const sessionShellCommandEnabled = opts.enableSessionShell === true && tokenConfigured;
   const bridge = deps.bridge ?? createAcpSessionBridge({
     maxSessions: opts.maxSessions,
+    maxPendingPromptsPerSession: opts.maxPendingPromptsPerSession,
     eventRingSize: opts.eventRingSize,
     boundWorkspace,
+    sessionShellCommandEnabled,
     // Wire the production status provider so direct embeds / tests
     // that don't inject `deps.bridge` get daemon env + preflight cells.
     statusProvider: createDaemonStatusProvider(),
@@ -30168,10 +30781,10 @@ function createServeApp(opts, getPort = () => opts.port, deps = {}) {
           { tier, key: key.slice(0, 64) }
         );
       } : void 0,
-      onError: daemonLog ? (err, path13) => {
+      onError: daemonLog ? (err, path14) => {
         daemonLog.warn(
           `rate limiter error (fail-open): ${err instanceof Error ? err.message : String(err)}`,
-          { path: path13 }
+          { path: path14 }
         );
       } : void 0
     });
@@ -30189,7 +30802,7 @@ function createServeApp(opts, getPort = () => opts.port, deps = {}) {
     app.get("/demo", demoHandler);
   }
   const mutate = createMutationGate({
-    tokenConfigured: opts.token !== void 0,
+    tokenConfigured,
     requireAuth: opts.requireAuth === true
   });
   app.use(daemonTelemetryMiddleware(boundWorkspace));
@@ -30215,6 +30828,7 @@ function createServeApp(opts, getPort = () => opts.port, deps = {}) {
         ...opts.promptDeadlineMs !== void 0 ? { promptDeadlineMs: opts.promptDeadlineMs } : {},
         ...opts.writerIdleTimeoutMs !== void 0 ? { writerIdleTimeoutMs: opts.writerIdleTimeoutMs } : {},
         persistSettingAvailable: deps.persistSetting !== void 0,
+        sessionShellCommandEnabled,
         rateLimit: opts.rateLimit === true,
         reloadAvailable: deps.workspace !== void 0
       }),
@@ -30222,8 +30836,19 @@ function createServeApp(opts, getPort = () => opts.port, deps = {}) {
       // Surface the bound workspace so clients can detect mismatch
       // pre-flight and omit `cwd` on `POST /session`.
       workspaceCwd: boundWorkspace,
+      // Advertise supported transport families so SDK clients can
+      // auto-negotiate the best available transport via
+      // `negotiateTransport()`. REST is always available; future PRs
+      // will add 'acp-http' / 'acp-ws' entries when the corresponding
+      // routes are wired.
+      transports: ["rest"],
       // Active mediation policy under the `policy` namespace.
       policy: { permission: bridge.permissionPolicy },
+      limits: {
+        maxPendingPromptsPerSession: advertisedMaxPendingPromptsPerSession(
+          opts.maxPendingPromptsPerSession
+        )
+      },
       supportedLanguages: LANGUAGE_CODES
     };
     res.status(200).json(envelope);
@@ -30353,6 +30978,18 @@ function createServeApp(opts, getPort = () => opts.port, deps = {}) {
       parseAndValidateClientId: /* @__PURE__ */ __name((req, res) => parseAndValidateWorkspaceClientId(req, res, bridge), "parseAndValidateClientId")
     });
   }
+  registerA2uiActionRoutes(app, {
+    boundWorkspace,
+    mutate,
+    safeBody,
+    // UI-server discovery uses the daemon's workspace MCP status, which
+    // includes servers registered at runtime.
+    getMcpServers: /* @__PURE__ */ __name(async (req) => {
+      const ctx = buildWorkspaceCtx(req, "POST /session/:id/a2ui-action");
+      const status = await workspace.getWorkspaceMcpStatus(ctx);
+      return status.servers ?? [];
+    }, "getMcpServers")
+  });
   app.post(
     "/workspace/auth/device-flow",
     mutate({ strict: true }),
@@ -30541,7 +31178,7 @@ function createServeApp(opts, getPort = () => opts.port, deps = {}) {
       return;
     }
     const cwd = hasCwd ? body["cwd"] : boundWorkspace;
-    if (!path11.isAbsolute(cwd)) {
+    if (!path12.isAbsolute(cwd)) {
       res.status(400).json({ error: "`cwd` must be an absolute path when provided" });
       return;
     }
@@ -30843,6 +31480,7 @@ function createServeApp(opts, getPort = () => opts.port, deps = {}) {
       });
       return;
     }
+    addDaemonRequestAttribute("qwen-code.prompt_id", promptId);
     const abort = new AbortController();
     const effectiveDeadlineMs = resolvePromptDeadlineMs(
       opts.promptDeadlineMs,
@@ -30857,19 +31495,39 @@ function createServeApp(opts, getPort = () => opts.port, deps = {}) {
       }, effectiveDeadlineMs);
       deadlineTimer.unref();
     }
-    bridge.sendPrompt(
-      sessionId,
-      {
-        ...forwardedBody,
+    let promptPromise;
+    try {
+      promptPromise = bridge.sendPrompt(
         sessionId,
-        prompt
-      },
-      abort.signal,
-      {
-        ...clientId !== void 0 ? { clientId } : {},
-        promptId
+        {
+          ...forwardedBody,
+          sessionId,
+          prompt
+        },
+        abort.signal,
+        {
+          ...clientId !== void 0 ? { clientId } : {},
+          promptId
+        }
+      );
+    } catch (err) {
+      if (deadlineTimer !== void 0) clearTimeout(deadlineTimer);
+      if (daemonLog && err instanceof PromptQueueFullError) {
+        daemonLog.warn("prompt admission rejected: queue full", {
+          sessionId,
+          promptId,
+          ...clientId !== void 0 ? { clientId } : {},
+          limit: err.limit,
+          pendingCount: err.pendingCount
+        });
       }
-    ).then(
+      sendBridgeError(res, err, {
+        route: "POST /session/:id/prompt",
+        sessionId
+      });
+      return;
+    }
+    promptPromise.then(
       () => {
         if (daemonLog) {
           daemonLog.info("prompt turn completed", {
@@ -31083,7 +31741,7 @@ function createServeApp(opts, getPort = () => opts.port, deps = {}) {
   });
   app.get("/workspace/:id/sessions", async (req, res) => {
     const workspaceCwd = req.params["id"] ?? "";
-    if (!path11.isAbsolute(workspaceCwd)) {
+    if (!path12.isAbsolute(workspaceCwd)) {
       res.status(400).json({ error: "`:id` must decode to an absolute workspace path" });
       return;
     }
@@ -31224,8 +31882,26 @@ function createServeApp(opts, getPort = () => opts.port, deps = {}) {
       res.off("close", onResClose);
     }
   });
-  app.post("/session/:id/shell", mutate(), async (req, res) => {
+  app.post("/session/:id/shell", mutate({ strict: true }), async (req, res) => {
     const sessionId = req.params["id"];
+    if (!sessionShellCommandEnabled) {
+      sendBridgeError(res, new SessionShellDisabledError(), {
+        route: "POST /session/:id/shell",
+        sessionId
+      });
+      return;
+    }
+    const clientId = parseClientIdHeader(req, res);
+    if (clientId === null) {
+      return;
+    }
+    if (clientId === void 0) {
+      sendBridgeError(res, new SessionShellClientRequiredError(), {
+        route: "POST /session/:id/shell",
+        sessionId
+      });
+      return;
+    }
     const body = safeBody(req);
     const command = body["command"];
     if (typeof command !== "string" || command.trim().length === 0) {
@@ -31239,17 +31915,12 @@ function createServeApp(opts, getPort = () => opts.port, deps = {}) {
       if (!res.writableEnded) abort.abort();
     }, "onResClose");
     res.once("close", onResClose);
-    const clientId = parseClientIdHeader(req, res);
-    if (clientId === null) {
-      res.off("close", onResClose);
-      return;
-    }
     try {
       const result = await bridge.executeShellCommand(
         sessionId,
         command.trim(),
         abort.signal,
-        clientId !== void 0 ? { clientId } : void 0
+        { clientId }
       );
       if (daemonLog) {
         daemonLog.info("shell command completed", {
@@ -31929,6 +32600,7 @@ function createServeApp(opts, getPort = () => opts.port, deps = {}) {
     fsFactory,
     deviceFlowRegistry,
     token: opts.token,
+    sessionShellCommandEnabled,
     checkRate: rateLimiter?.checkRate
   });
   if (acpHandle) {
@@ -32000,7 +32672,7 @@ function parseOptionalWorkspaceCwd2(body, boundWorkspace, res) {
     return void 0;
   }
   const cwd = hasCwd ? body["cwd"] : boundWorkspace;
-  if (!path11.isAbsolute(cwd)) {
+  if (!path12.isAbsolute(cwd)) {
     res.status(400).json({ error: "`cwd` must be an absolute path when provided" });
     return void 0;
   }
@@ -32358,6 +33030,22 @@ function sendBridgeErrorImpl(res, err, ctx, daemonLog) {
     });
     return;
   }
+  if (err instanceof SessionShellDisabledError) {
+    res.status(403).json({
+      error: err.message,
+      code: "session_shell_disabled",
+      errorKind: "session_shell_disabled"
+    });
+    return;
+  }
+  if (err instanceof SessionShellClientRequiredError) {
+    res.status(403).json({
+      error: err.message,
+      code: "client_id_required",
+      errorKind: "client_id_required"
+    });
+    return;
+  }
   if (err instanceof WorkspaceMismatchError) {
     writeStderrLine(
       `qwen serve: workspace_mismatch (POST /session): daemon bound to ${JSON.stringify(err.bound)}, rejected ${JSON.stringify(err.requested)}`
@@ -32394,6 +33082,17 @@ function sendBridgeErrorImpl(res, err, ctx, daemonLog) {
     });
     return;
   }
+  if (err instanceof PromptQueueFullError) {
+    res.set("Retry-After", "5");
+    res.status(503).json({
+      error: err.message,
+      code: "prompt_queue_full",
+      sessionId: err.sessionId,
+      limit: err.limit,
+      pendingCount: err.pendingCount
+    });
+    return;
+  }
   if (err instanceof RestoreInProgressError) {
     res.set("Retry-After", "5");
     res.status(409).json({
@@ -32535,7 +33234,7 @@ __name(errorPayload, "errorPayload");
 // packages/cli/src/serve/runQwenServe.ts
 init_esbuild_shims();
 import * as fs6 from "node:fs";
-import * as path12 from "node:path";
+import * as path13 from "node:path";
 
 // packages/cli/src/serve/permissionAudit.ts
 init_esbuild_shims();
@@ -32803,6 +33502,10 @@ function isPositiveIntegerMs(value) {
   return Number.isFinite(value) && Number.isInteger(value) && value > 0;
 }
 __name(isPositiveIntegerMs, "isPositiveIntegerMs");
+function isNonNegativeIntegerOrInfinity(value) {
+  return value === Number.POSITIVE_INFINITY || Number.isFinite(value) && Number.isInteger(value) && value >= 0;
+}
+__name(isNonNegativeIntegerOrInfinity, "isNonNegativeIntegerOrInfinity");
 var MAX_TIMEOUT_MS = 2147483647;
 function assertTimerDelayInRange(name, value) {
   if (value > MAX_TIMEOUT_MS) {
@@ -32943,6 +33646,12 @@ __name(shouldPreheatBridge, "shouldPreheatBridge");
 async function runQwenServe(optsIn, deps = {}) {
   const rawToken = optsIn.token ?? process.env[QWEN_SERVER_TOKEN_ENV];
   const token = typeof rawToken === "string" && rawToken.trim().length > 0 ? rawToken.trim() : void 0;
+  const sessionShellCommandEnabled = optsIn.enableSessionShell === true && token !== void 0;
+  if (optsIn.enableSessionShell === true && token === void 0) {
+    writeStderrLine(
+      `qwen serve: --enable-session-shell ignored because no bearer token is configured. Set ${QWEN_SERVER_TOKEN_ENV} or pass --token to enable direct session shell.`
+    );
+  }
   const promptDeadlineMs = optsIn.promptDeadlineMs ?? parseDeadlineEnv(
     QWEN_SERVE_PROMPT_DEADLINE_MS_ENV,
     process.env[QWEN_SERVE_PROMPT_DEADLINE_MS_ENV]
@@ -32990,7 +33699,7 @@ async function runQwenServe(optsIn, deps = {}) {
     );
   }
   const rawWorkspace = opts.workspace ?? process.cwd();
-  if (!path12.isAbsolute(rawWorkspace)) {
+  if (!path13.isAbsolute(rawWorkspace)) {
     throw new Error(
       `Invalid --workspace "${rawWorkspace}": must be an absolute path.`
     );
@@ -33043,6 +33752,13 @@ async function runQwenServe(optsIn, deps = {}) {
     }
     assertTimerDelayInRange("promptDeadlineMs", opts.promptDeadlineMs);
   }
+  if (opts.maxPendingPromptsPerSession !== void 0) {
+    if (!isNonNegativeIntegerOrInfinity(opts.maxPendingPromptsPerSession)) {
+      throw new TypeError(
+        `Invalid maxPendingPromptsPerSession: ${opts.maxPendingPromptsPerSession}. Must be a non-negative integer (0 / Infinity = unlimited).`
+      );
+    }
+  }
   if (opts.writerIdleTimeoutMs !== void 0) {
     if (!isPositiveIntegerMs(opts.writerIdleTimeoutMs)) {
       throw new TypeError(
@@ -33163,11 +33879,13 @@ async function runQwenServe(optsIn, deps = {}) {
   const statusProvider = createDaemonStatusProvider();
   const bridge = deps.bridge ?? createAcpSessionBridge({
     maxSessions: opts.maxSessions,
+    ...opts.maxPendingPromptsPerSession !== void 0 ? { maxPendingPromptsPerSession: opts.maxPendingPromptsPerSession } : {},
     ...opts.eventRingSize !== void 0 ? { eventRingSize: opts.eventRingSize } : {},
     ...opts.channelIdleTimeoutMs !== void 0 ? { channelIdleTimeoutMs: opts.channelIdleTimeoutMs } : {},
     ...opts.sessionReapIntervalMs !== void 0 ? { sessionReapIntervalMs: opts.sessionReapIntervalMs } : {},
     ...opts.sessionIdleTimeoutMs !== void 0 ? { sessionIdleTimeoutMs: opts.sessionIdleTimeoutMs } : {},
     boundWorkspace,
+    sessionShellCommandEnabled,
     childEnvOverrides,
     channelFactory,
     onDiagnosticLine: diagnosticSink,
@@ -33482,6 +34200,8 @@ export {
   STATUS_SCHEMA_VERSION,
   SUPPORTED_SERVE_PROTOCOL_VERSIONS,
   SessionNotFoundError,
+  SessionShellClientRequiredError,
+  SessionShellDisabledError,
   WorkspaceInitConflictError,
   WorkspaceInitPathEscapeError,
   WorkspaceInitRaceError,