@qwen-code/qwen-code 0.18.3 → 0.18.4

package/chunks/{serve-TH2BJ5XR.js → serve-J6VG37OX.js}

@@ -63,10 +63,11 @@ import {
   getNpmVersion,
   getSettingDefinition,
   isNotCurrentlyGeneratingCancelError,
+  isWorkspaceTrusted,
   loadSettings,
   mapDomainErrorToErrorKind,
   reloadEnvironment
-} from "./chunk-O2HKIE5I.js";
+} from "./chunk-GBTJHKQ6.js";
 import {
   ClientSideConnection,
   PROTOCOL_VERSION,
@@ -77,13 +78,14 @@ import {
   SUPPORTED_LANGUAGES,
   writeStderrLine,
   writeStdoutLine
-} from "./chunk-MRULXYE3.js";
+} from "./chunk-SZWDOOGV.js";
 import {
   ALL_PROVIDERS,
   APPROVAL_MODES,
   BTW_MAX_INPUT_LENGTH,
   BuiltinAgentRegistry,
   Client,
+  ExtensionManager,
   SessionService,
   ShellExecutionService,
   StandardFileSystemService,
@@ -98,32 +100,36 @@ import {
   applyProviderInstallPlan,
   buildInstallPlan,
   canUseRipgrep,
+  checkForExtensionUpdate,
   detectLineEnding,
   encodeTextFileContent,
   findProviderById,
   getDefaultModelIds,
   glob,
   loadIgnoreRules,
+  parseInstallSource,
+  redactUrlCredentials,
   require_once,
   resolveBaseUrl,
+  resolveBundleDir,
   shouldShowStep,
   writeWorkspaceContextFile
-} from "./chunk-OY2G3EH4.js";
+} from "./chunk-32SSXBMG.js";
 import "./chunk-K5PGHDBN.js";
-import "./chunk-VIEIRAK3.js";
-import "./chunk-O4PICXES.js";
-import "./chunk-TW522KN6.js";
-import "./chunk-BJ5HQ23U.js";
-import "./chunk-SFRV6BGY.js";
-import "./chunk-ZOFNJQNJ.js";
-import "./chunk-WPTCDQN6.js";
-import "./chunk-OMX7CUOE.js";
+import "./chunk-7GX7XYZU.js";
+import "./chunk-7OCZ77KA.js";
+import "./chunk-2ES3D3TW.js";
+import "./chunk-2MPVVENX.js";
+import "./chunk-ZTQ26VBE.js";
+import "./chunk-4HMWGHPP.js";
+import "./chunk-4TW2JM5Q.js";
+import "./chunk-M5VYHAHT.js";
 import "./chunk-MLZQVCF3.js";
 import "./chunk-LD2XBG6Z.js";
-import "./chunk-CPVI5J2L.js";
-import "./chunk-ZMIBJS45.js";
+import "./chunk-JIJBNW4A.js";
+import "./chunk-E5SRTXRG.js";
 import "./chunk-77WXWU44.js";
-import "./chunk-B4ZF2KSI.js";
+import "./chunk-WWU2KUSR.js";
 import {
   DAEMON_TRACEPARENT_META_KEY,
   DAEMON_TRACESTATE_META_KEY,
@@ -154,14 +160,15 @@ import {
   resolveTelemetrySettings,
   shutdownTelemetry,
   withDaemonRequestSpan
-} from "./chunk-K3CCX4PX.js";
+} from "./chunk-6Z2MVJIJ.js";
 import "./chunk-3PJXIDKI.js";
 import "./chunk-UWCTAVOD.js";
 import "./chunk-OFEVLU4C.js";
-import "./chunk-IQHSD7K5.js";
-import "./chunk-LYRSMKLS.js";
-import "./chunk-RTTAC5VW.js";
-import "./chunk-ZNUMXPNK.js";
+import "./chunk-OMX7CUOE.js";
+import "./chunk-FPZF3BNV.js";
+import "./chunk-VWPDSQZY.js";
+import "./chunk-AQDPHFDZ.js";
+import "./chunk-JJHY7NAD.js";
 import {
   QwenOAuth2Client,
   QwenOAuthPollError,
@@ -170,15 +177,15 @@ import {
   isDeviceAuthorizationSuccess,
   isDeviceTokenPending,
   isDeviceTokenSuccess
-} from "./chunk-IDYDPBBN.js";
-import "./chunk-FIQECJTQ.js";
+} from "./chunk-DZCZZPCY.js";
+import "./chunk-F6FP3URI.js";
 import "./chunk-64WXLC72.js";
-import "./chunk-LXYWINWF.js";
+import "./chunk-N5QHMPZU.js";
 import {
   detectRuntime,
   redactProxyCredentials
-} from "./chunk-NNIYWQIS.js";
-import "./chunk-LYSND7KR.js";
+} from "./chunk-HU3RKEK2.js";
+import "./chunk-PTGKSUUJ.js";
 import "./chunk-55ZMG67I.js";
 import {
   import_websocket_server
@@ -187,7 +194,7 @@ import "./chunk-5IFG2VC4.js";
 import {
   Storage,
   updateSymlink
-} from "./chunk-HA2UEYZP.js";
+} from "./chunk-IKOWINH4.js";
 import "./chunk-ZERZSAZL.js";
 import {
   require_src
@@ -9239,11 +9246,11 @@ var require_mime_types = __commonJS({
       return exts[0];
     }
     __name(extension, "extension");
-    function lookup(path14) {
-      if (!path14 || typeof path14 !== "string") {
+    function lookup(path15) {
+      if (!path15 || typeof path15 !== "string") {
         return false;
       }
-      var extension2 = extname("x." + path14).toLowerCase().slice(1);
+      var extension2 = extname("x." + path15).toLowerCase().slice(1);
       if (!extension2) {
         return false;
       }
@@ -10374,13 +10381,13 @@ var require_view = __commonJS({
     "use strict";
     init_esbuild_shims();
     var debug = require_src()("express:view");
-    var path14 = __require("node:path");
+    var path15 = __require("node:path");
     var fs7 = __require("node:fs");
-    var dirname5 = path14.dirname;
-    var basename3 = path14.basename;
-    var extname = path14.extname;
-    var join6 = path14.join;
-    var resolve6 = path14.resolve;
+    var dirname6 = path15.dirname;
+    var basename3 = path15.basename;
+    var extname = path15.extname;
+    var join7 = path15.join;
+    var resolve6 = path15.resolve;
     module.exports = View;
     function View(name, options) {
       var opts = options || {};
@@ -10410,17 +10417,17 @@ var require_view = __commonJS({
     }
     __name(View, "View");
     View.prototype.lookup = /* @__PURE__ */ __name(function lookup(name) {
-      var path15;
+      var path16;
       var roots = [].concat(this.root);
       debug('lookup "%s"', name);
-      for (var i = 0; i < roots.length && !path15; i++) {
+      for (var i = 0; i < roots.length && !path16; i++) {
         var root = roots[i];
         var loc = resolve6(root, name);
-        var dir = dirname5(loc);
+        var dir = dirname6(loc);
         var file = basename3(loc);
-        path15 = this.resolve(dir, file);
+        path16 = this.resolve(dir, file);
       }
-      return path15;
+      return path16;
     }, "lookup");
     View.prototype.render = /* @__PURE__ */ __name(function render(options, callback) {
       var sync = true;
@@ -10442,21 +10449,21 @@ var require_view = __commonJS({
     }, "render");
     View.prototype.resolve = /* @__PURE__ */ __name(function resolve7(dir, file) {
       var ext = this.ext;
-      var path15 = join6(dir, file);
-      var stat = tryStat(path15);
+      var path16 = join7(dir, file);
+      var stat = tryStat(path16);
       if (stat && stat.isFile()) {
-        return path15;
+        return path16;
       }
-      path15 = join6(dir, basename3(file, ext), "index" + ext);
-      stat = tryStat(path15);
+      path16 = join7(dir, basename3(file, ext), "index" + ext);
+      stat = tryStat(path16);
       if (stat && stat.isFile()) {
-        return path15;
+        return path16;
       }
     }, "resolve");
-    function tryStat(path15) {
-      debug('stat "%s"', path15);
+    function tryStat(path16) {
+      debug('stat "%s"', path16);
       try {
-        return fs7.statSync(path15);
+        return fs7.statSync(path16);
       } catch (e) {
         return void 0;
       }
@@ -11646,9 +11653,9 @@ var require_dist2 = __commonJS({
       function consume(endType) {
         const tokens2 = [];
         while (true) {
-          const path14 = it.text();
-          if (path14)
-            tokens2.push({ type: "text", value: encodePath(path14) });
+          const path15 = it.text();
+          if (path15)
+            tokens2.push({ type: "text", value: encodePath(path15) });
           const param = it.tryConsume("PARAM");
           if (param) {
             tokens2.push({
@@ -11682,16 +11689,16 @@ var require_dist2 = __commonJS({
       return new TokenData(tokens);
     }
     __name(parse, "parse");
-    function compile(path14, options = {}) {
+    function compile(path15, options = {}) {
       const { encode = encodeURIComponent, delimiter = DEFAULT_DELIMITER } = options;
-      const data = path14 instanceof TokenData ? path14 : parse(path14, options);
+      const data = path15 instanceof TokenData ? path15 : parse(path15, options);
       const fn = tokensToFunction(data.tokens, delimiter, encode);
-      return /* @__PURE__ */ __name(function path15(data2 = {}) {
-        const [path16, ...missing] = fn(data2);
+      return /* @__PURE__ */ __name(function path16(data2 = {}) {
+        const [path17, ...missing] = fn(data2);
         if (missing.length) {
           throw new TypeError(`Missing parameters: ${missing.join(", ")}`);
         }
-        return path16;
+        return path17;
       }, "path");
     }
     __name(compile, "compile");
@@ -11750,9 +11757,9 @@ var require_dist2 = __commonJS({
       };
     }
     __name(tokenToFunction, "tokenToFunction");
-    function match(path14, options = {}) {
+    function match(path15, options = {}) {
       const { decode = decodeURIComponent, delimiter = DEFAULT_DELIMITER } = options;
-      const { regexp, keys } = pathToRegexp(path14, options);
+      const { regexp, keys } = pathToRegexp(path15, options);
       const decoders = keys.map((key) => {
         if (decode === false)
           return NOOP_VALUE;
@@ -11764,7 +11771,7 @@ var require_dist2 = __commonJS({
         const m = regexp.exec(input);
         if (!m)
           return false;
-        const path15 = m[0];
+        const path16 = m[0];
         const params = /* @__PURE__ */ Object.create(null);
         for (let i = 1; i < m.length; i++) {
           if (m[i] === void 0)
@@ -11773,17 +11780,17 @@ var require_dist2 = __commonJS({
           const decoder = decoders[i - 1];
           params[key.name] = decoder(m[i]);
         }
-        return { path: path15, params };
+        return { path: path16, params };
       }, "match");
     }
     __name(match, "match");
-    function pathToRegexp(path14, options = {}) {
+    function pathToRegexp(path15, options = {}) {
       const { delimiter = DEFAULT_DELIMITER, end = true, sensitive = false, trailing = true } = options;
       const keys = [];
       const sources = [];
       const flags = sensitive ? "" : "i";
-      const paths = Array.isArray(path14) ? path14 : [path14];
-      const items = paths.map((path15) => path15 instanceof TokenData ? path15 : parse(path15, options));
+      const paths = Array.isArray(path15) ? path15 : [path15];
+      const items = paths.map((path16) => path16 instanceof TokenData ? path16 : parse(path16, options));
       for (const { tokens } of items) {
         for (const seq of flatten(tokens, 0, [])) {
           const regexp2 = sequenceToRegExp(seq, delimiter, keys);
@@ -11901,18 +11908,18 @@ var require_layer = __commonJS({
     var TRAILING_SLASH_REGEXP = /\/+$/;
     var MATCHING_GROUP_REGEXP = /\((?:\?<(.*?)>)?(?!\?)/g;
     module.exports = Layer;
-    function Layer(path14, options, fn) {
+    function Layer(path15, options, fn) {
       if (!(this instanceof Layer)) {
-        return new Layer(path14, options, fn);
+        return new Layer(path15, options, fn);
       }
-      debug("new %o", path14);
+      debug("new %o", path15);
       const opts = options || {};
       this.handle = fn;
       this.keys = [];
       this.name = fn.name || "<anonymous>";
       this.params = void 0;
       this.path = void 0;
-      this.slash = path14 === "/" && opts.end === false;
+      this.slash = path15 === "/" && opts.end === false;
       function matcher(_path) {
         if (_path instanceof RegExp) {
           const keys = [];
@@ -11952,7 +11959,7 @@ var require_layer = __commonJS({
         });
       }
       __name(matcher, "matcher");
-      this.matchers = Array.isArray(path14) ? path14.map(matcher) : [matcher(path14)];
+      this.matchers = Array.isArray(path15) ? path15.map(matcher) : [matcher(path15)];
     }
     __name(Layer, "Layer");
     Layer.prototype.handleError = /* @__PURE__ */ __name(function handleError(error2, req, res, next) {
@@ -11993,9 +12000,9 @@ var require_layer = __commonJS({
         next(err);
       }
     }, "handleRequest");
-    Layer.prototype.match = /* @__PURE__ */ __name(function match(path14) {
+    Layer.prototype.match = /* @__PURE__ */ __name(function match(path15) {
       let match2;
-      if (path14 != null) {
+      if (path15 != null) {
         if (this.slash) {
           this.params = {};
           this.path = "";
@@ -12003,7 +12010,7 @@ var require_layer = __commonJS({
         }
         let i = 0;
         while (!match2 && i < this.matchers.length) {
-          match2 = this.matchers[i](path14);
+          match2 = this.matchers[i](path15);
           i++;
         }
       }
@@ -12032,13 +12039,13 @@ var require_layer = __commonJS({
       }
     }
     __name(decodeParam, "decodeParam");
-    function loosen(path14) {
-      if (path14 instanceof RegExp || path14 === "/") {
-        return path14;
+    function loosen(path15) {
+      if (path15 instanceof RegExp || path15 === "/") {
+        return path15;
       }
-      return Array.isArray(path14) ? path14.map(function(p) {
+      return Array.isArray(path15) ? path15.map(function(p) {
         return loosen(p);
-      }) : String(path14).replace(TRAILING_SLASH_REGEXP, "");
+      }) : String(path15).replace(TRAILING_SLASH_REGEXP, "");
     }
     __name(loosen, "loosen");
   }
@@ -12056,9 +12063,9 @@ var require_route = __commonJS({
     var flatten = Array.prototype.flat;
     var methods = METHODS.map((method) => method.toLowerCase());
     module.exports = Route;
-    function Route(path14) {
-      debug("new %o", path14);
-      this.path = path14;
+    function Route(path15) {
+      debug("new %o", path15);
+      this.path = path15;
       this.stack = [];
       this.methods = /* @__PURE__ */ Object.create(null);
     }
@@ -12271,8 +12278,8 @@ var require_router = __commonJS({
         if (++sync > 100) {
           return setImmediate(next, err);
         }
-        const path14 = getPathname(req);
-        if (path14 == null) {
+        const path15 = getPathname(req);
+        if (path15 == null) {
           return done(layerError);
         }
         let layer;
@@ -12280,7 +12287,7 @@ var require_router = __commonJS({
         let route;
         while (match !== true && idx < stack.length) {
           layer = stack[idx++];
-          match = matchLayer(layer, path14);
+          match = matchLayer(layer, path15);
           route = layer.route;
           if (typeof match !== "boolean") {
             layerError = layerError || match;
@@ -12318,19 +12325,19 @@ var require_router = __commonJS({
           } else if (route) {
             layer.handleRequest(req, res, next);
           } else {
-            trimPrefix(layer, layerError, layerPath, path14);
+            trimPrefix(layer, layerError, layerPath, path15);
           }
           sync = 0;
         });
       }
       __name(next, "next");
-      function trimPrefix(layer, layerError, layerPath, path14) {
+      function trimPrefix(layer, layerError, layerPath, path15) {
         if (layerPath.length !== 0) {
-          if (layerPath !== path14.substring(0, layerPath.length)) {
+          if (layerPath !== path15.substring(0, layerPath.length)) {
             next(layerError);
             return;
           }
-          const c = path14[layerPath.length];
+          const c = path15[layerPath.length];
           if (c && c !== "/") {
             next(layerError);
             return;
@@ -12355,7 +12362,7 @@ var require_router = __commonJS({
     }, "handle");
     Router.prototype.use = /* @__PURE__ */ __name(function use(handler) {
       let offset = 0;
-      let path14 = "/";
+      let path15 = "/";
       if (typeof handler !== "function") {
         let arg = handler;
         while (Array.isArray(arg) && arg.length !== 0) {
@@ -12363,7 +12370,7 @@ var require_router = __commonJS({
         }
         if (typeof arg !== "function") {
           offset = 1;
-          path14 = handler;
+          path15 = handler;
         }
       }
       const callbacks = flatten.call(slice.call(arguments, offset), Infinity);
@@ -12375,8 +12382,8 @@ var require_router = __commonJS({
         if (typeof fn !== "function") {
           throw new TypeError("argument handler must be a function");
         }
-        debug("use %o %s", path14, fn.name || "<anonymous>");
-        const layer = new Layer(path14, {
+        debug("use %o %s", path15, fn.name || "<anonymous>");
+        const layer = new Layer(path15, {
           sensitive: this.caseSensitive,
           strict: false,
           end: false
@@ -12386,9 +12393,9 @@ var require_router = __commonJS({
       }
       return this;
     }, "use");
-    Router.prototype.route = /* @__PURE__ */ __name(function route(path14) {
-      const route2 = new Route(path14);
-      const layer = new Layer(path14, {
+    Router.prototype.route = /* @__PURE__ */ __name(function route(path15) {
+      const route2 = new Route(path15);
+      const layer = new Layer(path15, {
         sensitive: this.caseSensitive,
         strict: this.strict,
         end: true
@@ -12402,8 +12409,8 @@ var require_router = __commonJS({
       return route2;
     }, "route");
     methods.concat("all").forEach(function(method) {
-      Router.prototype[method] = function(path14) {
-        const route = this.route(path14);
+      Router.prototype[method] = function(path15) {
+        const route = this.route(path15);
         route[method].apply(route, slice.call(arguments, 1));
         return this;
       };
@@ -12435,9 +12442,9 @@ var require_router = __commonJS({
       return fqdnIndex !== -1 ? url.substring(0, url.indexOf("/", 3 + fqdnIndex)) : void 0;
     }
     __name(getProtohost, "getProtohost");
-    function matchLayer(layer, path14) {
+    function matchLayer(layer, path15) {
       try {
-        return layer.match(path14);
+        return layer.match(path15);
       } catch (err) {
         return err;
       }
@@ -12675,7 +12682,7 @@ var require_application = __commonJS({
     }, "handle");
     app.use = /* @__PURE__ */ __name(function use(fn) {
       var offset = 0;
-      var path14 = "/";
+      var path15 = "/";
       if (typeof fn !== "function") {
         var arg = fn;
         while (Array.isArray(arg) && arg.length !== 0) {
@@ -12683,7 +12690,7 @@ var require_application = __commonJS({
         }
         if (typeof arg !== "function") {
           offset = 1;
-          path14 = fn;
+          path15 = fn;
         }
       }
       var fns = flatten.call(slice.call(arguments, offset), Infinity);
@@ -12693,12 +12700,12 @@ var require_application = __commonJS({
       var router = this.router;
       fns.forEach(function(fn2) {
         if (!fn2 || !fn2.handle || !fn2.set) {
-          return router.use(path14, fn2);
+          return router.use(path15, fn2);
         }
-        debug(".use app under %s", path14);
-        fn2.mountpath = path14;
+        debug(".use app under %s", path15);
+        fn2.mountpath = path15;
         fn2.parent = this;
-        router.use(path14, /* @__PURE__ */ __name(function mounted_app(req, res, next) {
+        router.use(path15, /* @__PURE__ */ __name(function mounted_app(req, res, next) {
           var orig = req.app;
           fn2.handle(req, res, function(err) {
             Object.setPrototypeOf(req, orig.request);
@@ -12710,8 +12717,8 @@ var require_application = __commonJS({
       }, this);
       return this;
     }, "use");
-    app.route = /* @__PURE__ */ __name(function route(path14) {
-      return this.router.route(path14);
+    app.route = /* @__PURE__ */ __name(function route(path15) {
+      return this.router.route(path15);
     }, "route");
     app.engine = /* @__PURE__ */ __name(function engine(ext, fn) {
       if (typeof fn !== "function") {
@@ -12754,7 +12761,7 @@ var require_application = __commonJS({
       }
       return this;
     }, "set");
-    app.path = /* @__PURE__ */ __name(function path14() {
+    app.path = /* @__PURE__ */ __name(function path15() {
       return this.parent ? this.parent.path() + this.mountpath : "";
     }, "path");
     app.enabled = /* @__PURE__ */ __name(function enabled(setting) {
@@ -12770,17 +12777,17 @@ var require_application = __commonJS({
       return this.set(setting, false);
     }, "disable");
     methods.forEach(function(method) {
-      app[method] = function(path14) {
+      app[method] = function(path15) {
         if (method === "get" && arguments.length === 1) {
-          return this.set(path14);
+          return this.set(path15);
         }
-        var route = this.route(path14);
+        var route = this.route(path15);
         route[method].apply(route, slice.call(arguments, 1));
         return this;
       };
     });
-    app.all = /* @__PURE__ */ __name(function all(path14) {
-      var route = this.route(path14);
+    app.all = /* @__PURE__ */ __name(function all(path15) {
+      var route = this.route(path15);
       var args = slice.call(arguments, 1);
       for (var i = 0; i < methods.length; i++) {
         route[methods[i]].apply(route, args);
@@ -13750,7 +13757,7 @@ var require_request = __commonJS({
       var subdomains2 = !isIP2(hostname) ? hostname.split(".").reverse() : [hostname];
       return subdomains2.slice(offset);
     }, "subdomains"));
-    defineGetter(req, "path", /* @__PURE__ */ __name(function path14() {
+    defineGetter(req, "path", /* @__PURE__ */ __name(function path15() {
       return parse(this).pathname;
     }, "path"));
     defineGetter(req, "host", /* @__PURE__ */ __name(function host() {
@@ -13973,8 +13980,8 @@ var require_content_disposition = __commonJS({
       this.parameters = parameters;
     }
     __name(ContentDisposition, "ContentDisposition");
-    function basename3(path14) {
-      const normalized = path14.replaceAll("\\", "/");
+    function basename3(path15) {
+      const normalized = path15.replaceAll("\\", "/");
       let end = normalized.length;
       while (end > 0 && normalized[end - 1] === "/") {
         end--;
@@ -14234,28 +14241,28 @@ var require_send = __commonJS({
     var ms = require_ms();
     var onFinished = require_on_finished();
     var parseRange = require_range_parser();
-    var path14 = __require("path");
+    var path15 = __require("path");
     var statuses = require_statuses();
     var Stream = __require("stream");
     var util = __require("util");
-    var extname = path14.extname;
-    var join6 = path14.join;
-    var normalize = path14.normalize;
-    var resolve6 = path14.resolve;
-    var sep4 = path14.sep;
+    var extname = path15.extname;
+    var join7 = path15.join;
+    var normalize = path15.normalize;
+    var resolve6 = path15.resolve;
+    var sep4 = path15.sep;
     var BYTES_RANGE_REGEXP = /^ *bytes=/;
     var MAX_MAXAGE = 60 * 60 * 24 * 365 * 1e3;
     var UP_PATH_REGEXP = /(?:^|[\\/])\.\.(?:[\\/]|$)/;
     module.exports = send;
-    function send(req, path15, options) {
-      return new SendStream(req, path15, options);
+    function send(req, path16, options) {
+      return new SendStream(req, path16, options);
     }
     __name(send, "send");
-    function SendStream(req, path15, options) {
+    function SendStream(req, path16, options) {
       Stream.call(this);
       var opts = options || {};
       this.options = opts;
-      this.path = path15;
+      this.path = path16;
       this.req = req;
       this._acceptRanges = opts.acceptRanges !== void 0 ? Boolean(opts.acceptRanges) : true;
       this._cacheControl = opts.cacheControl !== void 0 ? Boolean(opts.cacheControl) : true;
@@ -14370,10 +14377,10 @@ var require_send = __commonJS({
       var lastModified = this.res.getHeader("Last-Modified");
       return parseHttpDate(lastModified) <= parseHttpDate(ifRange);
     }, "isRangeFresh");
-    SendStream.prototype.redirect = /* @__PURE__ */ __name(function redirect(path15) {
+    SendStream.prototype.redirect = /* @__PURE__ */ __name(function redirect(path16) {
       var res = this.res;
       if (hasListeners(this, "directory")) {
-        this.emit("directory", res, path15);
+        this.emit("directory", res, path16);
         return;
       }
       if (this.hasTrailingSlash()) {
@@ -14393,38 +14400,38 @@ var require_send = __commonJS({
     SendStream.prototype.pipe = /* @__PURE__ */ __name(function pipe(res) {
       var root = this._root;
       this.res = res;
-      var path15 = decode(this.path);
-      if (path15 === -1) {
+      var path16 = decode(this.path);
+      if (path16 === -1) {
         this.error(400);
         return res;
       }
-      if (~path15.indexOf("\0")) {
+      if (~path16.indexOf("\0")) {
         this.error(400);
         return res;
       }
       var parts;
       if (root !== null) {
-        if (path15) {
-          path15 = normalize("." + sep4 + path15);
+        if (path16) {
+          path16 = normalize("." + sep4 + path16);
         }
-        if (UP_PATH_REGEXP.test(path15)) {
-          debug('malicious path "%s"', path15);
+        if (UP_PATH_REGEXP.test(path16)) {
+          debug('malicious path "%s"', path16);
           this.error(403);
           return res;
         }
-        parts = path15.split(sep4);
-        path15 = normalize(join6(root, path15));
+        parts = path16.split(sep4);
+        path16 = normalize(join7(root, path16));
       } else {
-        if (UP_PATH_REGEXP.test(path15)) {
-          debug('malicious path "%s"', path15);
+        if (UP_PATH_REGEXP.test(path16)) {
+          debug('malicious path "%s"', path16);
           this.error(403);
           return res;
         }
-        parts = normalize(path15).split(sep4);
-        path15 = resolve6(path15);
+        parts = normalize(path16).split(sep4);
+        path16 = resolve6(path16);
       }
       if (containsDotFile(parts)) {
-        debug('%s dotfile "%s"', this._dotfiles, path15);
+        debug('%s dotfile "%s"', this._dotfiles, path16);
         switch (this._dotfiles) {
           case "allow":
             break;
@@ -14438,13 +14445,13 @@ var require_send = __commonJS({
         }
       }
       if (this._index.length && this.hasTrailingSlash()) {
-        this.sendIndex(path15);
+        this.sendIndex(path16);
         return res;
       }
-      this.sendFile(path15);
+      this.sendFile(path16);
       return res;
     }, "pipe");
-    SendStream.prototype.send = /* @__PURE__ */ __name(function send2(path15, stat) {
+    SendStream.prototype.send = /* @__PURE__ */ __name(function send2(path16, stat) {
       var len = stat.size;
       var options = this.options;
       var opts = {};
@@ -14456,9 +14463,9 @@ var require_send = __commonJS({
         this.headersAlreadySent();
         return;
       }
-      debug('pipe "%s"', path15);
-      this.setHeader(path15, stat);
-      this.type(path15);
+      debug('pipe "%s"', path16);
+      this.setHeader(path16, stat);
+      this.type(path16);
       if (this.isConditionalGET()) {
         if (this.isPreconditionFailure()) {
           this.error(412);
@@ -14507,28 +14514,28 @@ var require_send = __commonJS({
         res.end();
         return;
       }
-      this.stream(path15, opts);
+      this.stream(path16, opts);
     }, "send");
-    SendStream.prototype.sendFile = /* @__PURE__ */ __name(function sendFile(path15) {
+    SendStream.prototype.sendFile = /* @__PURE__ */ __name(function sendFile(path16) {
       var i = 0;
       var self = this;
-      debug('stat "%s"', path15);
-      fs7.stat(path15, /* @__PURE__ */ __name(function onstat(err, stat) {
-        var pathEndsWithSep = path15[path15.length - 1] === sep4;
-        if (err && err.code === "ENOENT" && !extname(path15) && !pathEndsWithSep) {
+      debug('stat "%s"', path16);
+      fs7.stat(path16, /* @__PURE__ */ __name(function onstat(err, stat) {
+        var pathEndsWithSep = path16[path16.length - 1] === sep4;
+        if (err && err.code === "ENOENT" && !extname(path16) && !pathEndsWithSep) {
           return next(err);
         }
         if (err) return self.onStatError(err);
-        if (stat.isDirectory()) return self.redirect(path15);
+        if (stat.isDirectory()) return self.redirect(path16);
         if (pathEndsWithSep) return self.error(404);
-        self.emit("file", path15, stat);
-        self.send(path15, stat);
+        self.emit("file", path16, stat);
+        self.send(path16, stat);
       }, "onstat"));
       function next(err) {
         if (self._extensions.length <= i) {
           return err ? self.onStatError(err) : self.error(404);
         }
-        var p = path15 + "." + self._extensions[i++];
+        var p = path16 + "." + self._extensions[i++];
         debug('stat "%s"', p);
         fs7.stat(p, function(err2, stat) {
           if (err2) return next(err2);
@@ -14539,7 +14546,7 @@ var require_send = __commonJS({
       }
       __name(next, "next");
     }, "sendFile");
-    SendStream.prototype.sendIndex = /* @__PURE__ */ __name(function sendIndex(path15) {
+    SendStream.prototype.sendIndex = /* @__PURE__ */ __name(function sendIndex(path16) {
       var i = -1;
       var self = this;
       function next(err) {
@@ -14547,7 +14554,7 @@ var require_send = __commonJS({
           if (err) return self.onStatError(err);
           return self.error(404);
         }
-        var p = join6(path15, self._index[i]);
+        var p = join7(path16, self._index[i]);
         debug('stat "%s"', p);
         fs7.stat(p, function(err2, stat) {
           if (err2) return next(err2);
@@ -14559,10 +14566,10 @@ var require_send = __commonJS({
       __name(next, "next");
       next();
     }, "sendIndex");
-    SendStream.prototype.stream = /* @__PURE__ */ __name(function stream(path15, options) {
+    SendStream.prototype.stream = /* @__PURE__ */ __name(function stream(path16, options) {
       var self = this;
       var res = this.res;
-      var stream2 = fs7.createReadStream(path15, options);
+      var stream2 = fs7.createReadStream(path16, options);
       this.emit("stream", stream2);
       stream2.pipe(res);
       function cleanup() {
@@ -14578,17 +14585,17 @@ var require_send = __commonJS({
         self.emit("end");
       }, "onend"));
     }, "stream");
-    SendStream.prototype.type = /* @__PURE__ */ __name(function type(path15) {
+    SendStream.prototype.type = /* @__PURE__ */ __name(function type(path16) {
       var res = this.res;
       if (res.getHeader("Content-Type")) return;
-      var ext = extname(path15);
+      var ext = extname(path16);
       var type2 = mime.contentType(ext) || "application/octet-stream";
       debug("content-type %s", type2);
       res.setHeader("Content-Type", type2);
     }, "type");
-    SendStream.prototype.setHeader = /* @__PURE__ */ __name(function setHeader(path15, stat) {
+    SendStream.prototype.setHeader = /* @__PURE__ */ __name(function setHeader(path16, stat) {
       var res = this.res;
-      this.emit("headers", res, path15, stat);
+      this.emit("headers", res, path16, stat);
       if (this._acceptRanges && !res.getHeader("Accept-Ranges")) {
         debug("accept ranges");
         res.setHeader("Accept-Ranges", "bytes");
@@ -14652,9 +14659,9 @@ var require_send = __commonJS({
       return err instanceof Error ? createError(status, err, { expose: false }) : createError(status, err);
     }
     __name(createHttpError, "createHttpError");
-    function decode(path15) {
+    function decode(path16) {
       try {
-        return decodeURIComponent(path15);
+        return decodeURIComponent(path16);
       } catch (err) {
         return -1;
       }
@@ -14809,7 +14816,7 @@ var require_response = __commonJS({
     var http = __require("node:http");
     var onFinished = require_on_finished();
     var mime = require_mime_types();
-    var path14 = __require("node:path");
+    var path15 = __require("node:path");
     var pathIsAbsolute = __require("node:path").isAbsolute;
     var statuses = require_statuses();
     var sign = require_cookie_signature().sign;
@@ -14818,8 +14825,8 @@ var require_response = __commonJS({
     var setCharset = require_utils2().setCharset;
     var cookie = require_cookie();
     var send = require_send();
-    var extname = path14.extname;
-    var resolve6 = path14.resolve;
+    var extname = path15.extname;
+    var resolve6 = path15.resolve;
     var vary = require_vary();
     var { Buffer: Buffer2 } = __require("node:buffer");
     var res = Object.create(http.ServerResponse.prototype);
@@ -14965,26 +14972,26 @@ var require_response = __commonJS({
       this.type("txt");
       return this.send(body);
     }, "sendStatus");
-    res.sendFile = /* @__PURE__ */ __name(function sendFile(path15, options, callback) {
+    res.sendFile = /* @__PURE__ */ __name(function sendFile(path16, options, callback) {
       var done = callback;
       var req = this.req;
       var res2 = this;
       var next = req.next;
       var opts = options || {};
-      if (!path15) {
+      if (!path16) {
         throw new TypeError("path argument is required to res.sendFile");
       }
-      if (typeof path15 !== "string") {
+      if (typeof path16 !== "string") {
         throw new TypeError("path must be a string to res.sendFile");
       }
       if (typeof options === "function") {
         done = options;
         opts = {};
       }
-      if (!opts.root && !pathIsAbsolute(path15)) {
+      if (!opts.root && !pathIsAbsolute(path16)) {
         throw new TypeError("path must be absolute or specify root to res.sendFile");
       }
-      var pathname = encodeURI(path15);
+      var pathname = encodeURI(path16);
       opts.etag = this.app.enabled("etag");
       var file = send(req, pathname, opts);
       sendfile(res2, file, opts, function(err) {
@@ -14995,7 +15002,7 @@ var require_response = __commonJS({
         }
       });
     }, "sendFile");
-    res.download = /* @__PURE__ */ __name(function download(path15, filename, options, callback) {
+    res.download = /* @__PURE__ */ __name(function download(path16, filename, options, callback) {
       var done = callback;
       var name = filename;
       var opts = options || null;
@@ -15012,7 +15019,7 @@ var require_response = __commonJS({
         opts = filename;
       }
       var headers = {
-        "Content-Disposition": contentDisposition(name || path15)
+        "Content-Disposition": contentDisposition(name || path16)
       };
       if (opts && opts.headers) {
         var keys = Object.keys(opts.headers);
@@ -15025,7 +15032,7 @@ var require_response = __commonJS({
       }
       opts = Object.create(opts);
       opts.headers = headers;
-      var fullPath = !opts.root ? resolve6(path15) : path15;
+      var fullPath = !opts.root ? resolve6(path16) : path16;
       return this.sendFile(fullPath, opts, done);
     }, "download");
     res.contentType = res.type = /* @__PURE__ */ __name(function contentType(type) {
@@ -15318,11 +15325,11 @@ var require_serve_static = __commonJS({
         }
         var forwardError = !fallthrough;
         var originalUrl = parseUrl.original(req);
-        var path14 = parseUrl(req).pathname;
-        if (path14 === "/" && originalUrl.pathname.substr(-1) !== "/") {
-          path14 = "";
+        var path15 = parseUrl(req).pathname;
+        if (path15 === "/" && originalUrl.pathname.substr(-1) !== "/") {
+          path15 = "";
         }
-        var stream = send(req, path14, opts);
+        var stream = send(req, path15, opts);
         stream.on("directory", onDirectory);
         if (setHeaders) {
           stream.on("headers", setHeaders);
@@ -15442,10 +15449,10 @@ init_esbuild_shims();
 
 // packages/cli/src/serve/server.ts
 init_esbuild_shims();
-var import_express = __toESM(require_express2(), 1);
+var import_express2 = __toESM(require_express2(), 1);
 import * as crypto from "node:crypto";
 import * as net from "node:net";
-import * as path12 from "node:path";
+import * as path13 from "node:path";
 
 // packages/cli/src/serve/auth.ts
 init_esbuild_shims();
@@ -17267,7 +17274,8 @@ __name(createSpawnChannelFactory, "createSpawnChannelFactory");
 var defaultSpawnChannelFactory = createSpawnChannelFactory();
 var KILL_HARD_DEADLINE_MS = 1e4;
 var SCRUBBED_CHILD_ENV_KEYS = /* @__PURE__ */ new Set([
-  "QWEN_SERVER_TOKEN"
+  "QWEN_SERVER_TOKEN",
+  "QWEN_CODE_SIMPLE"
 ]);
 function scrubChildEnv(source, scrubbed, overrides) {
   const childEnv = { ...source };
@@ -17334,6 +17342,10 @@ import { randomUUID as randomUUID2 } from "node:crypto";
 import { promises as fs } from "node:fs";
 import * as path from "node:path";
 
+// packages/acp-bridge/src/daemonEventTypes.ts
+init_esbuild_shims();
+var MID_TURN_MESSAGE_INJECTED_EVENT = "mid_turn_message_injected";
+
 // packages/acp-bridge/src/internal/stderrLine.ts
 init_esbuild_shims();
 function writeStderrLine2(message) {
@@ -17407,7 +17419,6 @@ function sliceLineRange(content, startLine, endLine) {
   return content.slice(offset, end > offset ? end - 1 : end);
 }
 __name(sliceLineRange, "sliceLineRange");
-var MID_TURN_MESSAGE_INJECTED_EVENT = "mid_turn_message_injected";
 var BridgeClient = class {
   constructor(resolveEntry, resolvePendingRestoreEvents, mediator, permissionTimeoutMs, maxPendingPerSession, fileSystem, onModelPromoted, onModePromoted) {
     this.resolveEntry = resolveEntry;
@@ -18628,7 +18639,14 @@ function createAcpSessionBridge(opts) {
     );
   }
   const permissionTimeoutRaw = opts.permissionResponseTimeoutMs ?? DEFAULT_PERMISSION_TIMEOUT_MS;
-  const permissionTimeoutMs = permissionTimeoutRaw > 0 && Number.isFinite(permissionTimeoutRaw) ? permissionTimeoutRaw : 0;
+  const permissionTimeoutMs = permissionTimeoutRaw > 0 && Number.isFinite(permissionTimeoutRaw) ? (
+    // Clamp to 2^31-1: Node treats setTimeout delays larger than
+    // this as 1ms (TimeoutOverflowWarning), which would make a
+    // huge "effectively never" timeout cancel prompts almost
+    // immediately — the opposite of intent. Mirrors the sibling
+    // `resolvePositiveFiniteMs` / `resolvedChannelIdleTimeoutMs`.
+    Math.min(permissionTimeoutRaw, 2147483647)
+  ) : 0;
   const maxPendingRaw = opts.maxPendingPermissionsPerSession ?? DEFAULT_MAX_PENDING_PER_SESSION;
   const maxPendingPerSession = maxPendingRaw > 0 && Number.isFinite(maxPendingRaw) ? maxPendingRaw : Infinity;
   const maxPendingPromptsRaw = opts.maxPendingPromptsPerSession ?? DEFAULT_MAX_PENDING_PROMPTS_PER_SESSION;
@@ -18662,6 +18680,12 @@ function createAcpSessionBridge(opts) {
     DEFAULT_SESSION_IDLE_TIMEOUT_MS
   );
   let sessionReaper;
+  let lastActivityTimestamp = null;
+  let activePromptCounter = 0;
+  function touchActivity() {
+    lastActivityTimestamp = Date.now();
+  }
+  __name(touchActivity, "touchActivity");
   function resolvePositiveFiniteMs(raw, fallback) {
     if (raw === void 0) return fallback;
     return raw > 0 && Number.isFinite(raw) ? Math.min(raw, 2147483647) : 0;
@@ -18924,6 +18948,11 @@ function createAcpSessionBridge(opts) {
             });
           } catch {
           }
+          if (sessEntry.promptActive) {
+            sessEntry.promptActive = false;
+            activePromptCounter--;
+            touchActivity();
+          }
           byId.delete(sid);
           telemetry.metrics?.sessionLifecycle("die");
           info.client.markSessionClosed(sid);
@@ -19121,6 +19150,12 @@ function createAcpSessionBridge(opts) {
     }
     return void 0;
   }, "channelInfoForEntry");
+  const assertLivePromptEntry = /* @__PURE__ */ __name((sessionId, entry) => {
+    const info = channelInfoForEntry(entry);
+    if (byId.get(sessionId) !== entry || !info || info.isDying) {
+      throw new SessionNotFoundError(sessionId);
+    }
+  }, "assertLivePromptEntry");
   const getChannelClosedReject = /* @__PURE__ */ __name((info) => {
     if (!info.statusClosedReject) {
       info.statusClosedReject = info.channel.exited.then(() => {
@@ -19321,6 +19356,7 @@ function createAcpSessionBridge(opts) {
     };
     ci.sessionIds.add(entry.sessionId);
     byId.set(entry.sessionId, entry);
+    touchActivity();
     telemetry.metrics?.sessionLifecycle("spawn");
     ci.client.drainEarlyEvents(entry.sessionId, entry);
     return entry;
@@ -19571,6 +19607,11 @@ function createAcpSessionBridge(opts) {
     }
     permissionMediator.forgetSession(sessionId);
     entry.pendingPermissionIds.clear();
+    if (entry.promptActive) {
+      entry.promptActive = false;
+      activePromptCounter--;
+      touchActivity();
+    }
     byId.delete(sessionId);
     telemetry.metrics?.sessionLifecycle("close");
     ci?.client.markSessionClosed(sessionId);
@@ -19644,6 +19685,15 @@ function createAcpSessionBridge(opts) {
     get sessionCount() {
       return byId.size;
     },
+    get activePromptCount() {
+      return activePromptCounter;
+    },
+    get lastActivityAt() {
+      return lastActivityTimestamp;
+    },
+    get idleSinceMs() {
+      return lastActivityTimestamp !== null ? Date.now() - lastActivityTimestamp : null;
+    },
     isChannelLive() {
       return !!liveChannelInfo();
     },
@@ -19784,6 +19834,7 @@ function createAcpSessionBridge(opts) {
                 if (signal?.aborted) {
                   throw new DOMException("Prompt aborted", "AbortError");
                 }
+                assertLivePromptEntry(sessionId, entry);
                 const requestedRetry = req.retry === true;
                 const isRetry = requestedRetry && entry.retryAllowed;
                 entry.retryAllowed = false;
@@ -19805,7 +19856,9 @@ function createAcpSessionBridge(opts) {
                   return copy;
                 })();
                 entry.promptActive = true;
+                activePromptCounter++;
                 entry.sessionLastSeenAt = Date.now();
+                touchActivity();
                 if (originatorClientId === void 0) {
                   delete entry.activePromptOriginatorClientId;
                 } else {
@@ -19821,13 +19874,21 @@ function createAcpSessionBridge(opts) {
                     );
                   }
                 } catch (echoErr) {
-                  entry.promptActive = false;
                   delete entry.activePromptOriginatorClientId;
+                  if (entry.promptActive) {
+                    entry.promptActive = false;
+                    activePromptCounter--;
+                    touchActivity();
+                  }
                   throw echoErr;
                 }
                 const promptPromise = entry.connection.prompt(promptRequest).finally(() => {
-                  entry.promptActive = false;
-                  entry.sessionLastSeenAt = Date.now();
+                  if (entry.promptActive) {
+                    entry.promptActive = false;
+                    activePromptCounter--;
+                    entry.sessionLastSeenAt = Date.now();
+                    touchActivity();
+                  }
                   delete entry.activePromptOriginatorClientId;
                   if (entry.clientIds.size === 0 && entry.events.subscriberCount === 0 && byId.has(sessionId)) {
                     void closeSessionImpl(sessionId, void 0, {
@@ -20090,11 +20151,13 @@ function createAcpSessionBridge(opts) {
           initTimeoutMs,
           "branchSession"
         );
-        if (!result || typeof result.newSessionId !== "string" || typeof result.title !== "string") {
+        if (!result || typeof result.newSessionId !== "string") {
           throw new Error(
             `branchSession: agent returned invalid response: ${JSON.stringify(result)}`
           );
         }
+        const rawBranchName = result.displayName ?? result.title;
+        const branchDisplayName = typeof rawBranchName === "string" ? rawBranchName : result.newSessionId.slice(0, 8);
         let restored;
         try {
           restored = await restoreSession("resume", {
@@ -20119,11 +20182,11 @@ function createAcpSessionBridge(opts) {
           throw restoreErr;
         }
         const newEntry = byId.get(result.newSessionId);
-        if (newEntry) newEntry.displayName = result.title;
+        if (newEntry) newEntry.displayName = branchDisplayName;
         const eventData = {
           sourceSessionId: sessionId,
           newSessionId: result.newSessionId,
-          displayName: result.title
+          displayName: branchDisplayName
         };
         const branchEnvelope = {
           type: "session_branched",
@@ -20134,10 +20197,10 @@ function createAcpSessionBridge(opts) {
         broadcastWorkspaceEvent(branchEnvelope, sessionId);
         return {
           ...restored,
-          title: result.title,
+          displayName: branchDisplayName,
           forkedFrom: {
             sessionId,
-            title: entry.displayName ?? sessionId.slice(0, 8)
+            displayName: entry.displayName ?? sessionId.slice(0, 8)
           }
         };
       });
@@ -20173,6 +20236,24 @@ function createAcpSessionBridge(opts) {
           writeStderrLine2(
             `qwen serve: updated session metadata ${JSON.stringify(sessionId)} displayName=${entry.displayName === void 0 ? "cleared" : "set"}` + (context?.clientId ? ` by client ${JSON.stringify(context.clientId)}` : "")
           );
+          if (nextDisplayName) {
+            entry.connection.extMethod(SERVE_CONTROL_EXT_METHODS.sessionTitle, {
+              sessionId,
+              displayName: nextDisplayName,
+              titleSource: "manual"
+            }).then((res) => {
+              const r = res;
+              if (r && r.persisted === false) {
+                writeStderrLine2(
+                  `qwen serve: displayName for ${sessionId} was not persisted (recording service unavailable)`
+                );
+              }
+            }).catch((err) => {
+              writeStderrLine2(
+                `qwen serve: failed to persist displayName for ${sessionId}: ${err instanceof Error ? err.message : String(err)}`
+              );
+            });
+          }
           try {
             entry.events.publish({
               type: "session_metadata_updated",
@@ -20384,6 +20465,54 @@ function createAcpSessionBridge(opts) {
         () => createIdleWorkspaceExtensionsStatus(boundWorkspace)
       );
     },
+    async refreshExtensionsForAllSessions(data) {
+      const sessions = Array.from(byId.values());
+      const results = await Promise.all(
+        sessions.map(async (entry) => {
+          const info = channelInfoForEntry(entry);
+          if (!info || info.isDying) {
+            return { refreshed: 0, failed: 0 };
+          }
+          try {
+            await Promise.race([
+              withTimeout(
+                entry.connection.extMethod(
+                  SERVE_CONTROL_EXT_METHODS.workspaceExtensionsRefresh,
+                  { sessionId: entry.sessionId }
+                ),
+                3e4,
+                SERVE_CONTROL_EXT_METHODS.workspaceExtensionsRefresh
+              ),
+              getTransportClosedReject(entry)
+            ]);
+            return { refreshed: 1, failed: 0 };
+          } catch (err) {
+            writeServeDebugLine(
+              `refreshExtensions: session ${entry.sessionId} failed: ${err instanceof Error ? err.message : String(err)}`
+            );
+            return { refreshed: 0, failed: 1 };
+          }
+        })
+      );
+      const refreshed = results.reduce(
+        (sum, result) => sum + result.refreshed,
+        0
+      );
+      const failed = results.reduce((sum, result) => sum + result.failed, 0);
+      if (refreshed > 0 || failed > 0 || data?.status !== void 0) {
+        broadcastWorkspaceEvent({
+          type: "extensions_changed",
+          data: { ...data, refreshed, failed }
+        });
+      }
+      return { refreshed, failed };
+    },
+    broadcastExtensionsChanged(data) {
+      broadcastWorkspaceEvent({
+        type: "extensions_changed",
+        data
+      });
+    },
     async setSessionModel(sessionId, req, context) {
       const entry = byId.get(sessionId);
       if (!entry) throw new SessionNotFoundError(sessionId);
@@ -20993,6 +21122,11 @@ function createAcpSessionBridge(opts) {
       }
       permissionMediator.forgetSession(sessionId);
       entry.pendingPermissionIds.clear();
+      if (entry.promptActive) {
+        entry.promptActive = false;
+        activePromptCounter--;
+        touchActivity();
+      }
       if (defaultEntry === entry) defaultEntry = void 0;
       byId.delete(sessionId);
       telemetry.metrics?.sessionLifecycle("die");
@@ -23728,7 +23862,7 @@ var AcpDispatcher = class {
             sessions: result.sessions.map((s) => ({
               sessionId: s.sessionId,
               cwd: s.workspaceCwd,
-              title: s.title,
+              title: s.displayName,
               updatedAt: s.updatedAt
             })),
             ...result.nextCursor != null ? { nextCursor: result.nextCursor } : {}
@@ -25828,7 +25962,7 @@ var WS_READ_METHODS = /* @__PURE__ */ new Set([
 function mountAcpHttp(app, bridge, opts) {
   const enabled = opts.enabled ?? process.env["QWEN_SERVE_ACP_HTTP"] !== "0";
   if (!enabled) return void 0;
-  const path14 = opts.path ?? "/acp";
+  const path15 = opts.path ?? "/acp";
   const dispatcher = new AcpDispatcher(
     bridge,
     opts.boundWorkspace,
@@ -25850,7 +25984,7 @@ function mountAcpHttp(app, bridge, opts) {
     },
     opts.maxConnections
   );
-  app.post(path14, async (req, res) => {
+  app.post(path15, async (req, res) => {
     const ct = req.headers["content-type"];
     if (!ct || !ct.startsWith("application/json")) {
       res.status(415).json({ error: "Content-Type must be application/json" });
@@ -25954,7 +26088,7 @@ function mountAcpHttp(app, bridge, opts) {
       );
     });
   });
-  app.get(path14, (req, res) => {
+  app.get(path15, (req, res) => {
     const accept = req.headers["accept"] ?? "";
     if (!accept.includes("text/event-stream")) {
       res.status(406).json({ error: "Accept header must include text/event-stream" });
@@ -26030,7 +26164,7 @@ function mountAcpHttp(app, bridge, opts) {
       }
     );
   });
-  app.delete(path14, (req, res) => {
+  app.delete(path15, (req, res) => {
     const connectionId = headerOf(req, ACP_CONNECTION_HEADER);
     if (!connectionId) {
       res.status(400).json({ error: "Missing Acp-Connection-Id" });
@@ -26063,7 +26197,7 @@ function mountAcpHttp(app, bridge, opts) {
         socket.destroy();
         return;
       }
-      if (url.pathname !== path14) {
+      if (url.pathname !== path15) {
         socket.destroy();
         return;
       }
@@ -26298,7 +26432,7 @@ function mountAcpHttp(app, bridge, opts) {
       });
     }, "upgradeListener");
     httpServer.on("upgrade", upgradeListener);
-    writeStderrLine(`qwen serve: /acp WebSocket transport enabled on ${path14}`);
+    writeStderrLine(`qwen serve: /acp WebSocket transport enabled on ${path15}`);
   }
   __name(setupWebSocket, "setupWebSocket");
   return {
@@ -27678,16 +27812,116 @@ function getDemoHtml(_port) {
 }
 __name(getDemoHtml, "getDemoHtml");
 
+// packages/cli/src/serve/webShellStatic.ts
+init_esbuild_shims();
+var import_express = __toESM(require_express2(), 1);
+import { existsSync } from "node:fs";
+import * as path6 from "node:path";
+import { fileURLToPath } from "node:url";
+var WEB_SHELL_CSP = [
+  "default-src 'self'",
+  "script-src 'self' 'unsafe-inline' 'unsafe-eval' 'wasm-unsafe-eval'",
+  "style-src 'self' 'unsafe-inline'",
+  "font-src 'self' data:",
+  "img-src 'self' data: blob:",
+  "connect-src 'self'",
+  "worker-src 'self' blob:",
+  // base-uri does NOT fall back to default-src; lock it so an injected <base>
+  // (the SPA renders AI-generated markdown) cannot repoint relative URLs to an
+  // attacker origin.
+  "base-uri 'none'",
+  "frame-ancestors 'none'"
+].join("; ");
+function resolveWebShellDir() {
+  const selfDir = path6.dirname(fileURLToPath(import.meta.url));
+  const hasShell = /* @__PURE__ */ __name((dir2) => existsSync(path6.join(dir2, "index.html")) && existsSync(path6.join(dir2, "assets")), "hasShell");
+  const bundled = path6.join(resolveBundleDir(import.meta.url), "web-shell");
+  if (hasShell(bundled)) return bundled;
+  let dir = selfDir;
+  for (let i = 0; i < 10; i++) {
+    const candidate = path6.join(dir, "packages", "web-shell", "dist");
+    if (hasShell(candidate)) return candidate;
+    const parent = path6.dirname(dir);
+    if (parent === dir) break;
+    dir = parent;
+  }
+  return void 0;
+}
+__name(resolveWebShellDir, "resolveWebShellDir");
+function isDocumentNavigation(req) {
+  const fetchMode = req.headers["sec-fetch-mode"];
+  const fetchDest = req.headers["sec-fetch-dest"];
+  const accept = req.headers.accept ?? "";
+  return fetchMode === "navigate" || fetchDest === "document" || accept.trim().toLowerCase().startsWith("text/html");
+}
+__name(isDocumentNavigation, "isDocumentNavigation");
+function createSendIndex(webShellDir) {
+  const indexPath = path6.join(webShellDir, "index.html");
+  return (res) => {
+    res.status(200).set("Content-Security-Policy", WEB_SHELL_CSP).set("X-Frame-Options", "DENY").set("X-Content-Type-Options", "nosniff").set("Referrer-Policy", "no-referrer").set(
+      "Permissions-Policy",
+      "camera=(), microphone=(), geolocation=(), payment=()"
+    ).set("Cache-Control", "no-cache");
+    res.sendFile(indexPath, { cacheControl: false }, (err) => {
+      if (!err) return;
+      writeStderrLine(
+        `qwen serve: Web Shell index send failed: ${err instanceof Error ? err.message : String(err)}`
+      );
+      if (!res.headersSent) {
+        res.status(500).type("text/plain").send("Failed to load Web Shell");
+      } else {
+        res.end();
+      }
+    });
+  };
+}
+__name(createSendIndex, "createSendIndex");
+function mountWebShellAssets(app, webShellDir) {
+  const sendIndex = createSendIndex(webShellDir);
+  app.use(
+    "/assets",
+    import_express.default.static(path6.join(webShellDir, "assets"), {
+      index: false,
+      immutable: true,
+      maxAge: "1y"
+    })
+  );
+  app.use("/assets", (req, res) => {
+    if (isServeDebugMode()) {
+      writeStderrLine(
+        `qwen serve: Web Shell asset not found: ${req.originalUrl}`
+      );
+    }
+    res.status(404).type("text/plain").send("Not found");
+  });
+  app.get("/", (_req, res) => sendIndex(res));
+}
+__name(mountWebShellAssets, "mountWebShellAssets");
+function mountWebShellSpaFallback(app, webShellDir) {
+  const sendIndex = createSendIndex(webShellDir);
+  app.use((req, res, next) => {
+    if (req.method !== "GET" && req.method !== "HEAD") return next();
+    if (!isDocumentNavigation(req)) return next();
+    if (isServeDebugMode()) {
+      writeStderrLine(
+        `qwen serve: Web Shell SPA fallback served for ${req.method} ${req.originalUrl}`
+      );
+    }
+    sendIndex(res);
+  });
+}
+__name(mountWebShellSpaFallback, "mountWebShellSpaFallback");
+
 // packages/cli/src/serve/fs/index.ts
 init_esbuild_shims();
 
 // packages/cli/src/serve/fs/policy.ts
 init_esbuild_shims();
-import * as path6 from "node:path";
+import * as path7 from "node:path";
 var MAX_READ_BYTES = 256 * 1024;
 var MAX_WRITE_BYTES = 5 * 1024 * 1024;
 function shouldIgnore(absolute, boundWorkspace, ignore, kind = "file") {
-  const rel = path6.relative(boundWorkspace, absolute);
+  const rel = path7.relative(boundWorkspace, absolute);
   if (rel === "" || rel.startsWith("..")) return { ignored: false };
   const fileFilter = ignore.getFileFilter();
   const dirFilter = ignore.getDirectoryFilter();
@@ -27759,7 +27993,7 @@ __name(detectBinary, "detectBinary");
 // packages/cli/src/serve/fs/audit.ts
 init_esbuild_shims();
 import { createHash as createHash3 } from "node:crypto";
-import * as path7 from "node:path";
+import * as path8 from "node:path";
 var FS_ACCESS_EVENT_TYPE = "fs.access";
 var FS_DENIED_EVENT_TYPE = "fs.denied";
 function hashPath(absolute) {
@@ -27768,8 +28002,8 @@ function hashPath(absolute) {
 __name(hashPath, "hashPath");
 var CROSS_DRIVE_RELPATH = "<cross-drive>";
 function relForAudit(raw, boundWorkspace) {
-  const rel = path7.isAbsolute(raw) ? path7.relative(boundWorkspace, raw) : raw;
-  return path7.isAbsolute(rel) ? CROSS_DRIVE_RELPATH : rel;
+  const rel = path8.isAbsolute(raw) ? path8.relative(boundWorkspace, raw) : raw;
+  return path8.isAbsolute(rel) ? CROSS_DRIVE_RELPATH : rel;
 }
 __name(relForAudit, "relForAudit");
 function rawPathsEnabled() {
@@ -27807,7 +28041,7 @@ function createAuditPublisher(deps) {
       });
     },
     recordDenied(ctx, record) {
-      const probe = path7.isAbsolute(record.input) ? record.input : path7.resolve(boundWorkspace, record.input);
+      const probe = path8.isAbsolute(record.input) ? record.input : path8.resolve(boundWorkspace, record.input);
       const payload = {
         kind: FS_DENIED_EVENT_TYPE,
         intent: record.intent,
@@ -27841,7 +28075,7 @@ __name(createAuditPublisher, "createAuditPublisher");
 init_esbuild_shims();
 import { createHash as createHash4, randomBytes } from "node:crypto";
 import { promises as fsp2 } from "node:fs";
-import * as path8 from "node:path";
+import * as path9 from "node:path";
 function createWorkspaceFileSystemFactory(deps) {
   const boundWorkspace = canonicalizeWorkspace(deps.boundWorkspace);
   const ignore = deps.ignore ?? loadIgnoreRules({
@@ -28022,7 +28256,7 @@ var WorkspaceFileSystemImpl = class {
       const entries = [];
       const dir = await fsp2.opendir(p);
       for await (const d of dir) {
-        const childAbs = path8.join(p, d.name);
+        const childAbs = path9.join(p, d.name);
         const kind = kindFromStatLike(d);
         const verdict = shouldIgnore(
           childAbs,
@@ -28058,7 +28292,7 @@ var WorkspaceFileSystemImpl = class {
           `glob pattern may not contain '..' segments: ${pattern}`
         );
       }
-      if (path8.isAbsolute(pattern) || /^[A-Za-z]:[\\/]/.test(pattern) || pattern.startsWith("\\\\") || pattern.startsWith("//")) {
+      if (path9.isAbsolute(pattern) || /^[A-Za-z]:[\\/]/.test(pattern) || pattern.startsWith("\\\\") || pattern.startsWith("//")) {
         throw new FsError(
           "parse_error",
           `glob pattern must be workspace-relative: ${pattern}`,
@@ -28071,7 +28305,7 @@ var WorkspaceFileSystemImpl = class {
         cwdReal = cwd;
       } else {
         try {
-          cwdReal = await fsp2.realpath(path8.resolve(cwd));
+          cwdReal = await fsp2.realpath(path9.resolve(cwd));
         } catch (err) {
           const code = err?.code;
           if (code === "ENOENT") {
@@ -28105,7 +28339,7 @@ var WorkspaceFileSystemImpl = class {
       let transientErrorCount = 0;
       for (const hit of matches) {
         if (out.length >= max) break;
-        const absolute = path8.resolve(hit);
+        const absolute = path9.resolve(hit);
         let canonical;
         try {
           canonical = await fsp2.realpath(absolute);
@@ -28120,8 +28354,8 @@ var WorkspaceFileSystemImpl = class {
           }
           continue;
         }
-        const rel = path8.relative(this.deps.boundWorkspace, canonical);
-        if (rel.startsWith("..") || path8.isAbsolute(rel)) {
+        const rel = path9.relative(this.deps.boundWorkspace, canonical);
+        if (rel.startsWith("..") || path9.isAbsolute(rel)) {
           escapedCount += 1;
           continue;
         }
@@ -28727,7 +28961,7 @@ function mergeWriteMeta(existing, opts) {
 __name(mergeWriteMeta, "mergeWriteMeta");
 async function atomicWriteTextResolvedFile(input) {
   const target = input.target;
-  const parent = path8.dirname(target);
+  const parent = path9.dirname(target);
   const parentStat = await fsp2.lstat(parent);
   if (parentStat.isSymbolicLink()) {
     throw new FsError("symlink_escape", `parent path is a symlink: ${parent}`, {
@@ -28740,9 +28974,9 @@ async function atomicWriteTextResolvedFile(input) {
       `parent path is not a directory: ${parent}`
     );
   }
-  const tmpPath = path8.join(
+  const tmpPath = path9.join(
     parent,
-    `.${path8.basename(target)}.${process.pid}.${randomBytes(6).toString("hex")}.tmp`
+    `.${path9.basename(target)}.${process.pid}.${randomBytes(6).toString("hex")}.tmp`
   );
   let tempLive = false;
   let tempHandle;
@@ -29110,7 +29344,7 @@ __name(buildWriteMeta, "buildWriteMeta");
 
 // packages/cli/src/serve/routes/workspaceFileRead.ts
 init_esbuild_shims();
-import * as path9 from "node:path";
+import * as path10 from "node:path";
 var MAX_LIST_ENTRIES = 2e3;
 var MAX_FILE_LINE_LIMIT = 2e3;
 var DEFAULT_FILE_BYTES_MAX_BYTES = 64 * 1024;
@@ -29441,9 +29675,9 @@ function workspaceRelative(req, resolved) {
   if (!boundWorkspace) {
     throw new Error("bound workspace is not configured");
   }
-  const rel = path9.relative(boundWorkspace, resolved);
+  const rel = path10.relative(boundWorkspace, resolved);
   if (rel === "") return ".";
-  return path9.sep === "/" ? rel : rel.split(path9.sep).join("/");
+  return path10.sep === "/" ? rel : rel.split(path10.sep).join("/");
 }
 __name(workspaceRelative, "workspaceRelative");
 function registerWorkspaceFileReadRoutes(app, deps) {
@@ -29682,7 +29916,7 @@ __name(registerWorkspaceFileWriteRoutes, "registerWorkspaceFileWriteRoutes");
 // packages/cli/src/serve/workspace-service/index.ts
 init_esbuild_shims();
 import { promises as fs5, constants as fsConstants } from "node:fs";
-import * as path10 from "node:path";
+import * as path11 from "node:path";
 async function canonicalizeExistingAncestor(inputPath) {
   let current = inputPath;
   while (true) {
@@ -29693,7 +29927,7 @@ async function canonicalizeExistingAncestor(inputPath) {
       if (code !== "ENOENT" && code !== "ENOTDIR" && code !== "ELOOP") {
         throw err;
       }
-      const parent = path10.dirname(current);
+      const parent = path11.dirname(current);
       if (parent === current) throw err;
       current = parent;
     }
@@ -29702,9 +29936,9 @@ async function canonicalizeExistingAncestor(inputPath) {
 __name(canonicalizeExistingAncestor, "canonicalizeExistingAncestor");
 async function verifyParentPostOpen(target, wsCanonical, _fh) {
   const parentCanonical = await canonicalizeExistingAncestor(
-    path10.dirname(target)
+    path11.dirname(target)
   );
-  const within = parentCanonical === wsCanonical || parentCanonical.startsWith(wsCanonical + path10.sep);
+  const within = parentCanonical === wsCanonical || parentCanonical.startsWith(wsCanonical + path11.sep);
   if (within) return;
   throw new WorkspaceInitSymlinkError(
     target,
@@ -29722,6 +29956,7 @@ function createDaemonWorkspaceService(deps) {
     persistDisabledTools,
     queryWorkspaceStatus,
     invokeWorkspaceCommand,
+    refreshExtensionsForAllSessions: refreshExtensionsForAllSessionsOnBridge,
     publishWorkspaceEvent
   } = deps;
   return {
@@ -29833,16 +30068,16 @@ function createDaemonWorkspaceService(deps) {
     },
     async initWorkspace(ctx, opts) {
       const filename = contextFilename;
-      const target = path10.resolve(boundWorkspace, filename);
-      const withinWorkspace = target === boundWorkspace || target.startsWith(boundWorkspace + path10.sep);
+      const target = path11.resolve(boundWorkspace, filename);
+      const withinWorkspace = target === boundWorkspace || target.startsWith(boundWorkspace + path11.sep);
       if (!withinWorkspace) {
         throw new WorkspaceInitPathEscapeError(filename, boundWorkspace);
       }
       const wsCanonical = await fs5.realpath(boundWorkspace);
       const parentCanonical = await canonicalizeExistingAncestor(
-        path10.dirname(target)
+        path11.dirname(target)
       );
-      const parentWithinWorkspace = parentCanonical === wsCanonical || parentCanonical.startsWith(wsCanonical + path10.sep);
+      const parentWithinWorkspace = parentCanonical === wsCanonical || parentCanonical.startsWith(wsCanonical + path11.sep);
       if (!parentWithinWorkspace) {
         throw new WorkspaceInitSymlinkError(
           target,
@@ -30094,6 +30329,19 @@ function createDaemonWorkspaceService(deps) {
         sessionsSkipped,
         childError
       };
+    },
+    async refreshExtensionsForAllSessions() {
+      try {
+        if (!refreshExtensionsForAllSessionsOnBridge) {
+          throw new Error("refreshExtensionsForAllSessions is not wired");
+        }
+        return await refreshExtensionsForAllSessionsOnBridge();
+      } catch (err) {
+        writeStderrLine(
+          `qwen serve: refreshExtensionsForAllSessions failed: ${err instanceof Error ? err.message : String(err)}`
+        );
+        return { refreshed: 0, failed: 1 };
+      }
     }
   };
 }
@@ -30327,7 +30575,7 @@ __name(registerWorkspaceSettingsRoutes, "registerWorkspaceSettingsRoutes");
 // packages/cli/src/serve/routes/a2uiAction.ts
 init_esbuild_shims();
 import * as fsp3 from "node:fs/promises";
-import * as path11 from "node:path";
+import * as path12 from "node:path";
 var A2UI_MIME = "application/a2ui+json";
 var ACTION_TOOL = "action";
 var CALL_TIMEOUT_MS = 15e3;
@@ -30338,7 +30586,7 @@ __name(usableServerConfig, "usableServerConfig");
 async function findFromSettingsFile(workspaceCwd) {
   try {
     const raw = await fsp3.readFile(
-      path11.join(workspaceCwd, ".qwen", "settings.json"),
+      path12.join(workspaceCwd, ".qwen", "settings.json"),
       "utf8"
     );
     const settings = JSON.parse(raw);
@@ -30466,8 +30714,8 @@ init_esbuild_shims();
 var MAX_BUCKETS = 1e4;
 var GC_REQUEST_INTERVAL = 1e3;
 var GC_TIMER_INTERVAL_MS = 5 * 60 * 1e3;
-function resolveTier(method, path14) {
-  const p = path14.endsWith("/") && path14.length > 1 ? path14.slice(0, -1) : path14;
+function resolveTier(method, path15) {
+  const p = path15.endsWith("/") && path15.length > 1 ? path15.slice(0, -1) : path15;
   if (method === "OPTIONS") return null;
   if ((method === "GET" || method === "HEAD") && (p === "/health" || p === "/demo"))
     return null;
@@ -30759,7 +31007,7 @@ async function listWorkspaceSessionsForResponse(bridge, workspaceCwd, options) {
       workspaceCwd: item.cwd,
       createdAt: item.startTime,
       updatedAt: new Date(item.mtime).toISOString(),
-      title: item.customTitle ?? item.prompt,
+      displayName: item.customTitle || item.prompt,
       clientCount: 0,
       hasActivePrompt: false
     });
@@ -30772,7 +31020,7 @@ async function listWorkspaceSessionsForResponse(bridge, workspaceCwd, options) {
         ...existing,
         ...live,
         createdAt: existing.createdAt,
-        title: live.title ?? existing.title,
+        displayName: live.displayName ?? existing.displayName,
         updatedAt: live.updatedAt ?? existing.updatedAt,
         clientCount: live.clientCount,
         hasActivePrompt: live.hasActivePrompt
@@ -30894,25 +31142,61 @@ function parseIPv6FirstHextet(host) {
   return Number.parseInt(first, 16);
 }
 __name(parseIPv6FirstHextet, "parseIPv6FirstHextet");
+function parseLegacyIPv4Part(value, max) {
+  let parsed;
+  if (/^0x[0-9a-f]+$/i.test(value)) {
+    parsed = Number.parseInt(value.slice(2), 16);
+  } else if (/^0[0-7]+$/.test(value)) {
+    parsed = Number.parseInt(value, 8);
+  } else if (/^[0-9]+$/.test(value)) {
+    parsed = Number.parseInt(value, 10);
+  } else {
+    return void 0;
+  }
+  return parsed <= max ? parsed : void 0;
+}
+__name(parseLegacyIPv4Part, "parseLegacyIPv4Part");
+function parseLegacyIPv4Host(host) {
+  const parts = host.split(".");
+  if (parts.length < 1 || parts.length > 4 || parts.some((part) => !part)) {
+    return void 0;
+  }
+  const maxLastPart = [4294967295, 16777215, 65535, 255][parts.length - 1];
+  if (maxLastPart === void 0) return void 0;
+  const parsed = parts.map(
+    (part, index) => parseLegacyIPv4Part(part, index === parts.length - 1 ? maxLastPart : 255)
+  );
+  if (parsed.some((part) => part === void 0)) return void 0;
+  const values = parsed;
+  const numeric = values.length === 1 ? values[0] : values.length === 2 ? values[0] * 16777216 + values[1] : values.length === 3 ? values[0] * 16777216 + values[1] * 65536 + values[2] : values[0] * 16777216 + values[1] * 65536 + values[2] * 256 + values[3];
+  return [
+    Math.floor(numeric / 16777216) & 255,
+    Math.floor(numeric / 65536) & 255,
+    Math.floor(numeric / 256) & 255,
+    numeric & 255
+  ].join(".");
+}
+__name(parseLegacyIPv4Host, "parseLegacyIPv4Host");
 function isBlockedAuthProviderHost(hostname) {
   const stripped = hostname.endsWith(".") ? hostname.slice(0, -1) : hostname;
   const host = stripped.toLowerCase();
   if (host === "localhost" || host.endsWith(".localhost")) return true;
   const bareHost = host.startsWith("[") && host.endsWith("]") ? host.slice(1, -1) : host;
-  const ipVersion = net.isIP(bareHost);
+  const blocklistHost = parseLegacyIPv4Host(bareHost) ?? bareHost;
+  const ipVersion = net.isIP(blocklistHost);
   if (ipVersion === 4) {
-    const parts = bareHost.split(".").map((part) => Number(part));
+    const parts = blocklistHost.split(".").map((part) => Number(part));
     const [a, b] = parts;
     return a === 0 || a === 10 || a === 127 || a === 100 && b !== void 0 && b >= 64 && b <= 127 || a === 169 && b === 254 || a === 172 && b !== void 0 && b >= 16 && b <= 31 || a === 192 && b === 168;
   }
   if (ipVersion === 6) {
-    if (bareHost === "::" || bareHost === "::1") return true;
-    const firstHextet = parseIPv6FirstHextet(bareHost);
+    if (blocklistHost === "::" || blocklistHost === "::1") return true;
+    const firstHextet = parseIPv6FirstHextet(blocklistHost);
     if (firstHextet !== void 0 && (firstHextet >= 65152 && firstHextet <= 65215 || (firstHextet & 65024) === 64512)) {
       return true;
     }
-    if (bareHost.startsWith("::ffff:")) {
-      const suffix = bareHost.slice("::ffff:".length);
+    if (blocklistHost.startsWith("::ffff:")) {
+      const suffix = blocklistHost.slice("::ffff:".length);
       if (net.isIP(suffix) === 4) {
         return isBlockedAuthProviderHost(suffix);
       }
@@ -31004,17 +31288,17 @@ function parseAuthProviderInstallRequest(body, options) {
 }
 __name(parseAuthProviderInstallRequest, "parseAuthProviderInstallRequest");
 function resolveDaemonTelemetryRoute(req) {
-  const path14 = req.path.replace(/\/$/, "") || "/";
-  if (req.method === "POST" && path14 === "/session") {
+  const path15 = req.path.replace(/\/$/, "") || "/";
+  if (req.method === "POST" && path15 === "/session") {
     return { route: "POST /session" };
   }
-  if (req.method === "POST" && path14 === "/sessions/delete") {
+  if (req.method === "POST" && path15 === "/sessions/delete") {
     return { route: "POST /sessions/delete" };
   }
-  if (req.method === "GET" && path14 === "/daemon/status") {
+  if (req.method === "GET" && path15 === "/daemon/status") {
     return { route: "GET /daemon/status" };
   }
-  const sessionAction = path14.match(
+  const sessionAction = path15.match(
     /^\/session\/([^/]+)\/(load|resume|prompt|cancel|recap|btw|mid-turn-message|model|shell|detach|rewind|approval-mode|language|a2ui-action)$/
   );
   const sessionActionId = sessionAction?.[1];
@@ -31025,14 +31309,14 @@ function resolveDaemonTelemetryRoute(req) {
       sessionId: sessionActionId
     };
   }
-  const sessionMetadata = path14.match(/^\/session\/([^/]+)\/metadata$/);
+  const sessionMetadata = path15.match(/^\/session\/([^/]+)\/metadata$/);
   if (sessionMetadata?.[1] && req.method === "PATCH") {
     return {
       route: "PATCH /session/:id/metadata",
       sessionId: sessionMetadata[1]
     };
   }
-  const sessionPermission = path14.match(
+  const sessionPermission = path15.match(
     /^\/session\/([^/]+)\/permission\/([^/]+)$/
   );
   if (sessionPermission?.[1] && sessionPermission?.[2] && req.method === "POST") {
@@ -31043,7 +31327,7 @@ function resolveDaemonTelemetryRoute(req) {
       ...rawRequestId.length <= MAX_CLIENT_ID_LENGTH2 && CLIENT_ID_RE2.test(rawRequestId) ? { permissionRequestId: rawRequestId } : {}
     };
   }
-  const globalPermission = path14.match(/^\/permission\/([^/]+)$/);
+  const globalPermission = path15.match(/^\/permission\/([^/]+)$/);
   if (globalPermission?.[1] && req.method === "POST") {
     const rawRequestId = globalPermission[1];
     return {
@@ -31051,45 +31335,45 @@ function resolveDaemonTelemetryRoute(req) {
       ...rawRequestId.length <= MAX_CLIENT_ID_LENGTH2 && CLIENT_ID_RE2.test(rawRequestId) ? { permissionRequestId: rawRequestId } : {}
     };
   }
-  const deleteSession = path14.match(/^\/session\/([^/]+)$/);
+  const deleteSession = path15.match(/^\/session\/([^/]+)$/);
   const deleteSessionId = deleteSession?.[1];
   if (deleteSessionId && req.method === "DELETE") {
     return { route: "DELETE /session/:id", sessionId: deleteSessionId };
   }
-  if (req.method === "GET" && /^\/workspace\/[^/]+\/sessions$/.test(path14)) {
+  if (req.method === "GET" && /^\/workspace\/[^/]+\/sessions$/.test(path15)) {
     return { route: "GET /workspace/:id/sessions" };
   }
-  if (req.method === "POST" && path14 === "/workspace/init") {
+  if (req.method === "POST" && path15 === "/workspace/init") {
     return { route: "POST /workspace/init" };
   }
-  if (req.method === "POST" && path14 === "/workspace/reload") {
+  if (req.method === "POST" && path15 === "/workspace/reload") {
     return { route: "POST /workspace/reload" };
   }
-  const mcpRestart = path14.match(/^\/workspace\/mcp\/([^/]+)\/restart$/);
+  const mcpRestart = path15.match(/^\/workspace\/mcp\/([^/]+)\/restart$/);
   if (mcpRestart?.[1] && req.method === "POST") {
     return { route: "POST /workspace/mcp/:server/restart" };
   }
-  if (req.method === "POST" && path14 === "/workspace/mcp/servers") {
+  if (req.method === "POST" && path15 === "/workspace/mcp/servers") {
     return { route: "POST /workspace/mcp/servers" };
   }
-  const mcpDelete = path14.match(/^\/workspace\/mcp\/servers\/([^/]+)$/);
+  const mcpDelete = path15.match(/^\/workspace\/mcp\/servers\/([^/]+)$/);
   if (mcpDelete?.[1] && req.method === "DELETE") {
     return { route: "DELETE /workspace/mcp/servers/:name" };
   }
-  if (req.method === "POST" && path14 === "/workspace/auth/device-flow") {
+  if (req.method === "POST" && path15 === "/workspace/auth/device-flow") {
     return { route: "POST /workspace/auth/device-flow" };
   }
-  const deviceFlowDelete = path14.match(
+  const deviceFlowDelete = path15.match(
     /^\/workspace\/auth\/device-flow\/([^/]+)$/
   );
   if (deviceFlowDelete?.[1] && req.method === "DELETE") {
     return { route: "DELETE /workspace/auth/device-flow/:id" };
   }
-  const toolEnable = path14.match(/^\/workspace\/tools\/([^/]+)\/enable$/);
+  const toolEnable = path15.match(/^\/workspace\/tools\/([^/]+)\/enable$/);
   if (toolEnable?.[1] && req.method === "POST") {
     return { route: "POST /workspace/tools/:name/enable" };
   }
-  if (path14 === "/workspace/settings") {
+  if (path15 === "/workspace/settings") {
     if (req.method === "GET") return { route: "GET /workspace/settings" };
     if (req.method === "POST") return { route: "POST /workspace/settings" };
   }
@@ -31171,7 +31455,7 @@ function advertisedMaxPendingPromptsPerSession(value) {
 }
 __name(advertisedMaxPendingPromptsPerSession, "advertisedMaxPendingPromptsPerSession");
 function createServeApp(opts, getPort = () => opts.port, deps = {}) {
-  const app = (0, import_express.default)();
+  const app = (0, import_express2.default)();
   const boundWorkspace = deps.boundWorkspace ?? canonicalizeWorkspace(opts.workspace ?? process.cwd());
   if (!deps.fsFactory && !deps.bridge && !warnedDefaultTrust) {
     warnedDefaultTrust = true;
@@ -31190,6 +31474,7 @@ function createServeApp(opts, getPort = () => opts.port, deps = {}) {
     maxSessions: opts.maxSessions,
     maxPendingPromptsPerSession: opts.maxPendingPromptsPerSession,
     eventRingSize: opts.eventRingSize,
+    permissionResponseTimeoutMs: opts.permissionResponseTimeoutMs,
     boundWorkspace,
     sessionShellCommandEnabled,
     // Wire the production status provider so direct embeds / tests
@@ -31280,8 +31565,291 @@ function createServeApp(opts, getPort = () => opts.port, deps = {}) {
     }),
     queryWorkspaceStatus: /* @__PURE__ */ __name((method, idle) => bridge.queryWorkspaceStatus(method, idle), "queryWorkspaceStatus"),
     invokeWorkspaceCommand: /* @__PURE__ */ __name((method, params, invokeOpts) => bridge.invokeWorkspaceCommand(method, params, invokeOpts), "invokeWorkspaceCommand"),
+    refreshExtensionsForAllSessions: /* @__PURE__ */ __name(() => bridge.refreshExtensionsForAllSessions(), "refreshExtensionsForAllSessions"),
     publishWorkspaceEvent: /* @__PURE__ */ __name((event) => bridge.publishWorkspaceEvent(event), "publishWorkspaceEvent")
   });
+  let extensionInstallQueue = Promise.resolve();
+  let extensionInstallQueueDepth = 0;
+  const MAX_EXTENSION_INSTALL_QUEUE_DEPTH = 10;
+  const enqueueExtensionInstall = /* @__PURE__ */ __name(async (run) => {
+    if (extensionInstallQueueDepth >= MAX_EXTENSION_INSTALL_QUEUE_DEPTH) {
+      throw new Error("Extension operation queue is full");
+    }
+    extensionInstallQueueDepth += 1;
+    const next = extensionInstallQueue.then(run, run).finally(() => {
+      extensionInstallQueueDepth -= 1;
+    });
+    extensionInstallQueue = next.catch(() => void 0);
+    return next;
+  }, "enqueueExtensionInstall");
+  const EXTENSION_MUTATION_TIMEOUT_MS = 12e4;
+  const EXTENSION_REFRESH_TIMEOUT_MS = 3e4;
+  const isExtensionQueueFullError = /* @__PURE__ */ __name((err) => err instanceof Error && err.message === "Extension operation queue is full", "isExtensionQueueFullError");
+  const sendExtensionQueueFull = /* @__PURE__ */ __name((res) => {
+    res.status(429).json({
+      error: "Extension operation queue is full",
+      code: "extension_queue_full"
+    });
+  }, "sendExtensionQueueFull");
+  const withExtensionTimeout = /* @__PURE__ */ __name(async (promise, timeoutMs, operation) => await new Promise((resolve6, reject) => {
+    const timeout = setTimeout(() => {
+      reject(new Error(`${operation} timed out after ${timeoutMs}ms`));
+    }, timeoutMs);
+    promise.then(
+      (value) => {
+        clearTimeout(timeout);
+        resolve6(value);
+      },
+      (err) => {
+        clearTimeout(timeout);
+        reject(err);
+      }
+    );
+  }), "withExtensionTimeout");
+  const createExtensionManager = /* @__PURE__ */ __name(() => new ExtensionManager({
+    workspaceDir: boundWorkspace,
+    isWorkspaceTrusted: !!isWorkspaceTrusted(
+      loadSettings(boundWorkspace).merged
+    ),
+    requestConsent: /* @__PURE__ */ __name(() => Promise.resolve(), "requestConsent"),
+    requestSetting: /* @__PURE__ */ __name(async (setting) => {
+      throw new Error(
+        `Extension setting "${setting.envVar}" requires interactive configuration and is not supported over the daemon install endpoint.`
+      );
+    }, "requestSetting"),
+    requestChoicePlugin: /* @__PURE__ */ __name(async () => {
+      throw new Error(
+        "Marketplace plugin selection is not supported over the daemon install endpoint. Specify a plugin name in the source."
+      );
+    }, "requestChoicePlugin")
+  }), "createExtensionManager");
+  const validateExtensionMutationClient = /* @__PURE__ */ __name((req, res, route) => {
+    const clientId = parseAndValidateWorkspaceClientId(req, res, bridge);
+    if (clientId === null) return false;
+    if (clientId === void 0) {
+      res.status(400).json({
+        error: "Missing X-Qwen-Client-Id header",
+        code: "missing_client_id"
+      });
+      return false;
+    }
+    buildWorkspaceCtx(req, route, clientId);
+    return true;
+  }, "validateExtensionMutationClient");
+  const parseExtensionScope = /* @__PURE__ */ __name((body, res) => {
+    const scope = body["scope"];
+    if (scope !== "user" && scope !== "workspace") {
+      res.status(400).json({ error: '`scope` must be either "user" or "workspace"' });
+      return null;
+    }
+    return scope === "user" ? "User" /* User */ : "Workspace" /* Workspace */;
+  }, "parseExtensionScope");
+  const parseExtensionRegistryUrl = /* @__PURE__ */ __name((value, res) => {
+    let parsed;
+    try {
+      parsed = new URL(value);
+    } catch {
+      res.status(400).json({ error: "`registry` must be a valid URL" });
+      return null;
+    }
+    if (parsed.protocol !== "https:") {
+      res.status(400).json({ error: "`registry` must use https" });
+      return null;
+    }
+    if (parsed.username || parsed.password) {
+      res.status(400).json({ error: "`registry` must not include credentials" });
+      return null;
+    }
+    if (isBlockedAuthProviderHost(parsed.hostname)) {
+      res.status(400).json({ error: "`registry` host is not allowed" });
+      return null;
+    }
+    return parsed.toString().replace(/\/$/, "");
+  }, "parseExtensionRegistryUrl");
+  const parsePotentialSourceUrl = /* @__PURE__ */ __name((source) => {
+    if (/^[a-zA-Z]:[\\/]/.test(source)) return null;
+    try {
+      return new URL(source);
+    } catch {
+      const sshMatch = /^(?:[^@]+@)?(\[[^\]]+\]|[^:]+):/.exec(source);
+      if (!sshMatch?.[1]) return null;
+      try {
+        return new URL(`ssh://${sshMatch[1]}`);
+      } catch {
+        return null;
+      }
+    }
+  }, "parsePotentialSourceUrl");
+  const validateExtensionSourceHost = /* @__PURE__ */ __name((source, res) => {
+    const parsed = parsePotentialSourceUrl(source);
+    if (!parsed) return true;
+    if (parsed.username || parsed.password) {
+      res.status(400).json({ error: "`source` must not include credentials" });
+      return false;
+    }
+    if (isBlockedAuthProviderHost(parsed.hostname)) {
+      res.status(400).json({ error: "`source` host is not allowed" });
+      return false;
+    }
+    if (parsed.protocol !== "https:" && parsed.protocol !== "ssh:") {
+      res.status(400).json({ error: "`source` must use https or ssh" });
+      return false;
+    }
+    return true;
+  }, "validateExtensionSourceHost");
+  const validateExtensionSourceMetadata = /* @__PURE__ */ __name((installMetadata) => {
+    if (installMetadata.type !== "git") return true;
+    const parsed = parsePotentialSourceUrl(installMetadata.source);
+    return !!parsed && (parsed.protocol === "https:" || parsed.protocol === "ssh:") && !isBlockedAuthProviderHost(parsed.hostname);
+  }, "validateExtensionSourceMetadata");
+  const findLoadedExtension = /* @__PURE__ */ __name((extensionManager, extensionName) => {
+    const requested = extensionName.toLowerCase();
+    const extensions = extensionManager.getLoadedExtensions();
+    const byName = extensions.find(
+      (extension) => extension.name.toLowerCase() === requested
+    );
+    if (byName) return byName;
+    if (!extensionName.includes("://") && !extensionName.includes("@")) {
+      return void 0;
+    }
+    return extensions.find(
+      (extension) => extension.installMetadata?.source?.toLowerCase() === requested
+    );
+  }, "findLoadedExtension");
+  const runQueuedExtensionMutation = /* @__PURE__ */ __name((operation, failureContext, res, run) => {
+    if (extensionInstallQueueDepth >= MAX_EXTENSION_INSTALL_QUEUE_DEPTH) {
+      sendExtensionQueueFull(res);
+      return;
+    }
+    res.status(202).json({ accepted: true });
+    void enqueueExtensionInstall(async () => {
+      try {
+        const extensionManager = createExtensionManager();
+        await extensionManager.refreshCache();
+        const event = await withExtensionTimeout(
+          run(extensionManager),
+          EXTENSION_MUTATION_TIMEOUT_MS,
+          `extension ${operation}`
+        );
+        extensionsStatusCache = void 0;
+        try {
+          const result = await bridge.refreshExtensionsForAllSessions(event);
+          writeStderrLine(
+            `qwen serve: extensions ${operation}: refreshed ${result.refreshed} session(s), ${result.failed} failed`
+          );
+        } catch (refreshErr) {
+          const message = redactUrlCredentials(
+            refreshErr instanceof Error ? refreshErr.message : String(refreshErr)
+          );
+          try {
+            bridge.broadcastExtensionsChanged({
+              ...event,
+              refreshed: 0,
+              failed: 1,
+              error: message.slice(0, 500)
+            });
+          } catch (broadcastErr) {
+            writeStderrLine(
+              `qwen serve: extensions ${operation}: failed to broadcast refresh failure: ${broadcastErr instanceof Error ? redactUrlCredentials(broadcastErr.message) : String(broadcastErr)}`
+            );
+          }
+          writeStderrLine(
+            `qwen serve: extensions ${operation}: mutation succeeded but refresh failed: ${message}`
+          );
+        }
+      } catch (err) {
+        const message = redactUrlCredentials(
+          err instanceof Error ? err.message : String(err)
+        );
+        try {
+          bridge.broadcastExtensionsChanged({
+            status: "failed",
+            ...failureContext.source ? { source: redactUrlCredentials(failureContext.source) } : {},
+            ...failureContext.name ? { name: failureContext.name } : {},
+            refreshed: 0,
+            failed: 0,
+            error: message.slice(0, 500)
+          });
+        } catch (broadcastErr) {
+          writeStderrLine(
+            `qwen serve: extensions ${operation}: failed to broadcast failure: ${broadcastErr instanceof Error ? redactUrlCredentials(broadcastErr.message) : String(broadcastErr)}`
+          );
+        }
+        try {
+          writeStderrLine(
+            `qwen serve: extensions ${operation}: background task failed: ${message}`
+          );
+        } catch {
+        }
+      }
+    }).catch((err) => {
+      try {
+        writeStderrLine(
+          `qwen serve: extensions ${operation}: queued task failed: ${err instanceof Error ? err.message : String(err)}`
+        );
+      } catch {
+      }
+    });
+  }, "runQueuedExtensionMutation");
+  let extensionsStatusCache;
+  const buildLocalExtensionsStatus = /* @__PURE__ */ __name(async () => {
+    const now = Date.now();
+    if (extensionsStatusCache && extensionsStatusCache.expiresAt > now) {
+      return extensionsStatusCache.value;
+    }
+    const extensionManager = createExtensionManager();
+    await extensionManager.refreshCache();
+    const entries = extensionManager.getLoadedExtensions().map((ext) => {
+      const capabilities = {
+        mcpServerCount: ext.mcpServers ? Object.keys(ext.mcpServers).length : 0,
+        skillCount: ext.skills?.length ?? 0,
+        agentCount: ext.agents?.length ?? 0,
+        hookCount: ext.hooks ? Object.values(ext.hooks).reduce(
+          (sum, defs) => sum + (defs?.length ?? 0),
+          0
+        ) : 0,
+        commandCount: ext.commands?.length ?? 0,
+        contextFileCount: ext.contextFiles.length,
+        channelCount: ext.channels ? Object.keys(ext.channels).length : 0,
+        hasSettings: (ext.settings?.length ?? 0) > 0
+      };
+      return {
+        kind: "extension",
+        id: ext.id,
+        name: ext.name,
+        ...ext.displayName ? { displayName: ext.displayName } : {},
+        version: ext.version,
+        isActive: ext.isActive,
+        path: ext.path,
+        ...ext.installMetadata?.source ? { source: redactUrlCredentials(ext.installMetadata.source) } : {},
+        ...ext.installMetadata?.type ? { installType: ext.installMetadata.type } : {},
+        ...ext.installMetadata?.originSource ? { originSource: ext.installMetadata.originSource } : {},
+        ...ext.installMetadata?.ref ? { ref: ext.installMetadata.ref } : {},
+        ...ext.installMetadata?.autoUpdate !== void 0 ? { autoUpdate: ext.installMetadata.autoUpdate } : {},
+        updateState: ext.installMetadata ? "unknown" : "not updatable",
+        capabilities,
+        details: {
+          mcpServers: ext.mcpServers ? Object.keys(ext.mcpServers) : [],
+          commands: ext.commands ?? [],
+          skills: ext.skills?.map((skill) => skill.name) ?? [],
+          agents: ext.agents?.map((agent) => agent.name) ?? [],
+          contextFiles: ext.contextFiles,
+          settings: ext.resolvedSettings?.map((setting) => setting.name) ?? []
+        }
+      };
+    });
+    const status = {
+      v: STATUS_SCHEMA_VERSION,
+      workspaceCwd: boundWorkspace,
+      initialized: true,
+      extensions: entries
+    };
+    extensionsStatusCache = {
+      expiresAt: now + 2e3,
+      value: status
+    };
+    return status;
+  }, "buildLocalExtensionsStatus");
   if (opts.allowOrigins && opts.allowOrigins.length > 0) {
     const parsedAllowOrigins = parseAllowOriginPatterns(opts.allowOrigins);
     if (parsedAllowOrigins.allowAny && !opts.token) {
@@ -31315,10 +31883,17 @@ function createServeApp(opts, getPort = () => opts.port, deps = {}) {
       return;
     }
     try {
+      const lastActivity = bridge.lastActivityAt;
+      const now = Date.now();
       res.status(200).json({
         status: "ok",
         sessions: bridge.sessionCount,
         pendingPermissions: bridge.pendingPermissionCount,
+        activePrompts: bridge.activePromptCount,
+        connectedClients: getActiveSseCount(),
+        channelAlive: bridge.isChannelLive(),
+        lastActivityAt: lastActivity !== null ? new Date(lastActivity).toISOString() : null,
+        idleSinceMs: lastActivity !== null ? now - lastActivity : null,
         ...rateLimiter ? { rateLimitHits: rateLimiter.getHitCounts() } : {}
       });
     } catch (err) {
@@ -31370,6 +31945,10 @@ function createServeApp(opts, getPort = () => opts.port, deps = {}) {
       next();
     });
   }
+  const webShellDir = opts.serveWebShell !== false ? deps.webShellDir : void 0;
+  if (webShellDir) {
+    mountWebShellAssets(app, webShellDir);
+  }
   app.use(bearerAuth(opts.token));
   let rateLimiter;
   if (opts.rateLimit) {
@@ -31387,16 +31966,16 @@ function createServeApp(opts, getPort = () => opts.port, deps = {}) {
           { tier, key: key.slice(0, 64) }
         );
       } : void 0,
-      onError: daemonLog ? (err, path14) => {
+      onError: daemonLog ? (err, path15) => {
         daemonLog.warn(
           `rate limiter error (fail-open): ${err instanceof Error ? err.message : String(err)}`,
-          { path: path14 }
+          { path: path15 }
         );
       } : void 0
     });
     app.use(rateLimiter.middleware);
   }
-  app.use(import_express.default.json({ limit: "10mb" }));
+  app.use(import_express2.default.json({ limit: "10mb" }));
   app.use(
     (err, _req, res, next) => {
       if (sendJsonBodyParserError(res, err)) return;
@@ -31594,12 +32173,376 @@ function createServeApp(opts, getPort = () => opts.port, deps = {}) {
   });
   app.get("/workspace/extensions", async (req, res) => {
     try {
-      const ctx = buildWorkspaceCtx(req, "GET /workspace/extensions");
-      res.status(200).json(await workspace.getWorkspaceExtensionsStatus(ctx));
+      buildWorkspaceCtx(req, "GET /workspace/extensions");
+      res.status(200).json(await buildLocalExtensionsStatus());
     } catch (err) {
       sendBridgeError(res, err, { route: "GET /workspace/extensions" });
     }
   });
+  app.post(
+    "/workspace/extensions/install",
+    mutate({ strict: true }),
+    async (req, res) => {
+      try {
+        if (!validateExtensionMutationClient(
+          req,
+          res,
+          "POST /workspace/extensions/install"
+        )) {
+          return;
+        }
+        const body = safeBody(req);
+        const source = body["source"];
+        const ref = body["ref"];
+        const autoUpdate = body["autoUpdate"];
+        const allowPreRelease = body["allowPreRelease"];
+        const registry = body["registry"];
+        const consent = body["consent"];
+        if (!source || typeof source !== "string") {
+          res.status(400).json({ error: "Missing or invalid source" });
+          return;
+        }
+        if (ref !== void 0 && (typeof ref !== "string" || ref === "")) {
+          res.status(400).json({ error: "`ref` must be a string" });
+          return;
+        }
+        if (typeof ref === "string" && ref.startsWith("-")) {
+          res.status(400).json({ error: '`ref` must not start with "-"' });
+          return;
+        }
+        if (autoUpdate !== void 0 && typeof autoUpdate !== "boolean") {
+          res.status(400).json({ error: "`autoUpdate` must be a boolean" });
+          return;
+        }
+        if (allowPreRelease !== void 0 && typeof allowPreRelease !== "boolean") {
+          res.status(400).json({ error: "`allowPreRelease` must be a boolean" });
+          return;
+        }
+        if (registry !== void 0 && typeof registry !== "string") {
+          res.status(400).json({ error: "`registry` must be a string" });
+          return;
+        }
+        const registryUrl = registry !== void 0 ? parseExtensionRegistryUrl(registry, res) : void 0;
+        if (registryUrl === null) return;
+        if (consent !== true) {
+          res.status(400).json({
+            error: "Extension installation requires explicit consent"
+          });
+          return;
+        }
+        if (!validateExtensionSourceHost(source, res)) {
+          return;
+        }
+        runQueuedExtensionMutation(
+          "install",
+          { source },
+          res,
+          async (extensionManager) => {
+            const installMetadata = await parseInstallSource(source);
+            if (installMetadata.type !== "git" && installMetadata.type !== "github-release" && installMetadata.type !== "npm") {
+              throw new Error(
+                "Only GitHub, Git, and npm extension installs are supported over the daemon endpoint."
+              );
+            }
+            if (installMetadata.type === "npm" && ref) {
+              throw new Error("--ref is not applicable for npm extensions.");
+            }
+            if (installMetadata.type !== "npm" && registry) {
+              throw new Error(
+                "--registry is only applicable for npm extensions."
+              );
+            }
+            if (!validateExtensionSourceMetadata(installMetadata)) {
+              throw new Error("`source` host is not allowed");
+            }
+            if (installMetadata.type === "npm" && registryUrl) {
+              installMetadata.registryUrl = registryUrl;
+            }
+            const extension = await extensionManager.installExtension(
+              { ...installMetadata, ref, autoUpdate, allowPreRelease },
+              () => Promise.resolve()
+            );
+            return {
+              status: "installed",
+              source,
+              name: extension.name,
+              version: extension.config.version
+            };
+          }
+        );
+      } catch (err) {
+        sendBridgeError(res, err, {
+          route: "POST /workspace/extensions/install"
+        });
+      }
+    }
+  );
+  app.post(
+    "/workspace/extensions/check-updates",
+    mutate({ strict: true }),
+    async (req, res) => {
+      try {
+        if (!validateExtensionMutationClient(
+          req,
+          res,
+          "POST /workspace/extensions/check-updates"
+        )) {
+          return;
+        }
+        const states = await enqueueExtensionInstall(
+          async () => withExtensionTimeout(
+            (async () => {
+              const extensionManager = createExtensionManager();
+              await extensionManager.refreshCache();
+              const updateStates = {};
+              await extensionManager.checkForAllExtensionUpdates(
+                (name, state) => {
+                  updateStates[name] = state;
+                }
+              );
+              return updateStates;
+            })(),
+            EXTENSION_REFRESH_TIMEOUT_MS,
+            "extension update check"
+          )
+        );
+        res.status(200).json({ states });
+      } catch (err) {
+        if (isExtensionQueueFullError(err)) {
+          sendExtensionQueueFull(res);
+          return;
+        }
+        sendBridgeError(res, err, {
+          route: "POST /workspace/extensions/check-updates"
+        });
+      }
+    }
+  );
+  app.post(
+    "/workspace/extensions/refresh",
+    mutate({ strict: true }),
+    async (req, res) => {
+      try {
+        if (!validateExtensionMutationClient(
+          req,
+          res,
+          "POST /workspace/extensions/refresh"
+        )) {
+          return;
+        }
+        const result = await enqueueExtensionInstall(
+          async () => withExtensionTimeout(
+            workspace.refreshExtensionsForAllSessions(),
+            EXTENSION_REFRESH_TIMEOUT_MS,
+            "extension refresh"
+          )
+        );
+        res.status(200).json(result);
+      } catch (err) {
+        if (isExtensionQueueFullError(err)) {
+          sendExtensionQueueFull(res);
+          return;
+        }
+        sendBridgeError(res, err, {
+          route: "POST /workspace/extensions/refresh"
+        });
+      }
+    }
+  );
+  app.post(
+    "/workspace/extensions/:name/enable",
+    mutate({ strict: true }),
+    async (req, res) => {
+      try {
+        if (!validateExtensionMutationClient(
+          req,
+          res,
+          "POST /workspace/extensions/:name/enable"
+        )) {
+          return;
+        }
+        const name = req.params["name"];
+        if (!name) {
+          res.status(400).json({ error: "Missing extension name" });
+          return;
+        }
+        const scope = parseExtensionScope(safeBody(req), res);
+        if (scope === null) return;
+        runQueuedExtensionMutation(
+          "enable",
+          { name },
+          res,
+          async (extensionManager) => {
+            const extension = findLoadedExtension(extensionManager, name);
+            if (!extension) {
+              throw new Error(`Extension "${name}" not found`);
+            }
+            await extensionManager.enableExtension(
+              extension.name,
+              scope,
+              boundWorkspace
+            );
+            return { status: "enabled", name: extension.name };
+          }
+        );
+      } catch (err) {
+        sendBridgeError(res, err, {
+          route: "POST /workspace/extensions/:name/enable"
+        });
+      }
+    }
+  );
+  app.post(
+    "/workspace/extensions/:name/disable",
+    mutate({ strict: true }),
+    async (req, res) => {
+      try {
+        if (!validateExtensionMutationClient(
+          req,
+          res,
+          "POST /workspace/extensions/:name/disable"
+        )) {
+          return;
+        }
+        const name = req.params["name"];
+        if (!name) {
+          res.status(400).json({ error: "Missing extension name" });
+          return;
+        }
+        const scope = parseExtensionScope(safeBody(req), res);
+        if (scope === null) return;
+        runQueuedExtensionMutation(
+          "disable",
+          { name },
+          res,
+          async (extensionManager) => {
+            const extension = findLoadedExtension(extensionManager, name);
+            if (!extension) {
+              throw new Error(`Extension "${name}" not found`);
+            }
+            await extensionManager.disableExtension(
+              extension.name,
+              scope,
+              boundWorkspace
+            );
+            return { status: "disabled", name: extension.name };
+          }
+        );
+      } catch (err) {
+        sendBridgeError(res, err, {
+          route: "POST /workspace/extensions/:name/disable"
+        });
+      }
+    }
+  );
+  app.post(
+    "/workspace/extensions/:name/update",
+    mutate({ strict: true }),
+    async (req, res) => {
+      try {
+        if (!validateExtensionMutationClient(
+          req,
+          res,
+          "POST /workspace/extensions/:name/update"
+        )) {
+          return;
+        }
+        const name = req.params["name"];
+        if (!name) {
+          res.status(400).json({ error: "Missing extension name" });
+          return;
+        }
+        runQueuedExtensionMutation(
+          "update",
+          { name },
+          res,
+          async (extensionManager) => {
+            const extension = findLoadedExtension(extensionManager, name);
+            if (!extension) {
+              throw new Error(`Extension "${name}" not found`);
+            }
+            let updateError;
+            const updateState = await withExtensionTimeout(
+              checkForExtensionUpdate(extension, extensionManager).catch(
+                (err) => {
+                  updateError = err;
+                  return "error" /* ERROR */;
+                }
+              ),
+              EXTENSION_REFRESH_TIMEOUT_MS,
+              "extension update check"
+            );
+            if (updateState === "error" /* ERROR */) {
+              const message = updateError === void 0 ? void 0 : redactUrlCredentials(
+                updateError instanceof Error ? updateError.message : String(updateError)
+              );
+              throw new Error(
+                `Update check failed for extension "${extension.name}"${message ? `: ${message}` : ""}`
+              );
+            }
+            if (updateState !== "update available" /* UPDATE_AVAILABLE */) {
+              throw new Error(`Extension "${extension.name}" has no update`);
+            }
+            const info = await extensionManager.updateExtension(
+              extension,
+              updateState,
+              () => void 0
+            );
+            return {
+              status: "updated",
+              name: extension.name,
+              ...info?.updatedVersion ? { version: info.updatedVersion } : {}
+            };
+          }
+        );
+      } catch (err) {
+        sendBridgeError(res, err, {
+          route: "POST /workspace/extensions/:name/update"
+        });
+      }
+    }
+  );
+  app.delete(
+    "/workspace/extensions/:name",
+    mutate({ strict: true }),
+    async (req, res) => {
+      try {
+        if (!validateExtensionMutationClient(
+          req,
+          res,
+          "DELETE /workspace/extensions/:name"
+        )) {
+          return;
+        }
+        const name = req.params["name"];
+        if (!name) {
+          res.status(400).json({ error: "Missing extension name" });
+          return;
+        }
+        runQueuedExtensionMutation(
+          "uninstall",
+          { name },
+          res,
+          async (extensionManager) => {
+            const extension = findLoadedExtension(extensionManager, name);
+            if (!extension) {
+              throw new Error(`Extension "${name}" not found`);
+            }
+            await extensionManager.uninstallExtension(
+              extension.name,
+              false,
+              boundWorkspace
+            );
+            return { status: "uninstalled", name: extension.name };
+          }
+        );
+      } catch (err) {
+        sendBridgeError(res, err, {
+          route: "DELETE /workspace/extensions/:name"
+        });
+      }
+    }
+  );
   registerWorkspaceFileReadRoutes(app, {
     parseClientId: parseClientIdHeader
   });
@@ -31826,7 +32769,7 @@ function createServeApp(opts, getPort = () => opts.port, deps = {}) {
       return;
     }
     const cwd = hasCwd ? body["cwd"] : boundWorkspace;
-    if (!path12.isAbsolute(cwd)) {
+    if (!path13.isAbsolute(cwd)) {
       res.status(400).json({ error: "`cwd` must be an absolute path when provided" });
       return;
     }
@@ -32370,15 +33313,6 @@ function createServeApp(opts, getPort = () => opts.port, deps = {}) {
         { displayName },
         clientId !== void 0 ? { clientId } : void 0
       );
-      if (displayName !== void 0) {
-        try {
-          await new SessionService(boundWorkspace).renameSession(
-            sessionId,
-            displayName
-          );
-        } catch {
-        }
-      }
       res.status(200).json({ sessionId, ...effective });
     } catch (err) {
       sendBridgeError(res, err, {
@@ -32389,7 +33323,7 @@ function createServeApp(opts, getPort = () => opts.port, deps = {}) {
   });
   app.get("/workspace/:id/sessions", async (req, res) => {
     const workspaceCwd = req.params["id"] ?? "";
-    if (!path12.isAbsolute(workspaceCwd)) {
+    if (!path13.isAbsolute(workspaceCwd)) {
       res.status(400).json({ error: "`:id` must decode to an absolute workspace path" });
       return;
     }
@@ -33289,6 +34223,9 @@ function createServeApp(opts, getPort = () => opts.port, deps = {}) {
   if (acpHandleRef.current) {
     app.locals["acpHandle"] = acpHandleRef.current;
   }
+  if (webShellDir) {
+    mountWebShellSpaFallback(app, webShellDir);
+  }
   app.use(
     (err, _req, res, _next) => {
       if (sendJsonBodyParserError(res, err)) return;
@@ -33355,7 +34292,7 @@ function parseOptionalWorkspaceCwd2(body, boundWorkspace, res) {
     return void 0;
   }
   const cwd = hasCwd ? body["cwd"] : boundWorkspace;
-  if (!path12.isAbsolute(cwd)) {
+  if (!path13.isAbsolute(cwd)) {
     res.status(400).json({ error: "`cwd` must be an absolute path when provided" });
     return void 0;
   }
@@ -33917,7 +34854,7 @@ __name(errorPayload, "errorPayload");
 // packages/cli/src/serve/runQwenServe.ts
 init_esbuild_shims();
 import * as fs6 from "node:fs";
-import * as path13 from "node:path";
+import * as path14 from "node:path";
 
 // packages/cli/src/serve/permissionAudit.ts
 init_esbuild_shims();
@@ -34382,7 +35319,7 @@ async function runQwenServe(optsIn, deps = {}) {
     );
   }
   const rawWorkspace = opts.workspace ?? process.cwd();
-  if (!path13.isAbsolute(rawWorkspace)) {
+  if (!path14.isAbsolute(rawWorkspace)) {
     throw new Error(
       `Invalid --workspace "${rawWorkspace}": must be an absolute path.`
     );
@@ -34456,6 +35393,13 @@ async function runQwenServe(optsIn, deps = {}) {
       );
     }
   }
+  if (opts.permissionResponseTimeoutMs !== void 0) {
+    if (!Number.isFinite(opts.permissionResponseTimeoutMs) || !Number.isInteger(opts.permissionResponseTimeoutMs) || opts.permissionResponseTimeoutMs < 0) {
+      throw new TypeError(
+        `Invalid permissionResponseTimeoutMs: ${opts.permissionResponseTimeoutMs}. Must be a non-negative integer (milliseconds, 0 = disabled / wait forever).`
+      );
+    }
+  }
   const inheritedNoPool = process.env["QWEN_SERVE_NO_MCP_POOL"] === "1";
   if (opts.mcpPoolActive === void 0 && inheritedNoPool) {
     opts.mcpPoolActive = false;
@@ -34567,6 +35511,7 @@ async function runQwenServe(optsIn, deps = {}) {
     ...opts.channelIdleTimeoutMs !== void 0 ? { channelIdleTimeoutMs: opts.channelIdleTimeoutMs } : {},
     ...opts.sessionReapIntervalMs !== void 0 ? { sessionReapIntervalMs: opts.sessionReapIntervalMs } : {},
     ...opts.sessionIdleTimeoutMs !== void 0 ? { sessionIdleTimeoutMs: opts.sessionIdleTimeoutMs } : {},
+    ...opts.permissionResponseTimeoutMs !== void 0 ? { permissionResponseTimeoutMs: opts.permissionResponseTimeoutMs } : {},
     boundWorkspace,
     sessionShellCommandEnabled,
     childEnvOverrides,
@@ -34628,6 +35573,7 @@ async function runQwenServe(optsIn, deps = {}) {
     }), "reloadDaemonEnv"),
     queryWorkspaceStatus: /* @__PURE__ */ __name((method, idle) => bridge.queryWorkspaceStatus(method, idle), "queryWorkspaceStatus"),
     invokeWorkspaceCommand: /* @__PURE__ */ __name((method, params, invokeOpts) => bridge.invokeWorkspaceCommand(method, params, invokeOpts), "invokeWorkspaceCommand"),
+    refreshExtensionsForAllSessions: /* @__PURE__ */ __name(() => bridge.refreshExtensionsForAllSessions(), "refreshExtensionsForAllSessions"),
     publishWorkspaceEvent: /* @__PURE__ */ __name((event) => bridge.publishWorkspaceEvent(event), "publishWorkspaceEvent")
   });
   registerDaemonGaugeCallbacks({
@@ -34636,8 +35582,30 @@ async function runQwenServe(optsIn, deps = {}) {
     heapUsed: /* @__PURE__ */ __name(() => process.memoryUsage().heapUsed, "heapUsed")
   });
   let actualPort = opts.port;
+  const webShellDir = opts.serveWebShell === false ? void 0 : resolveWebShellDir();
+  if (opts.serveWebShell !== false) {
+    if (!webShellDir) {
+      writeStderrLine(
+        "qwen serve: Web Shell assets not found; serving API only. Build the web-shell workspace (npm run build) or pass --no-web to silence this."
+      );
+    } else {
+      writeStderrLine(`qwen serve: Web Shell UI served from ${webShellDir}`);
+      if (!isLoopbackBind(opts.hostname)) {
+        writeStderrLine(
+          "qwen serve: Web Shell UI is served WITHOUT auth on a non-loopback bind (the static shell has no secrets; the API stays token-gated). Pass --no-web to disable the UI."
+        );
+        if (!opts.allowOrigins || opts.allowOrigins.length === 0) {
+          writeStderrLine(
+            "qwen serve: without --allow-origin the Web Shell is read-only on a non-loopback bind \u2014 same-origin POSTs are blocked by CORS (403). Pass --allow-origin <origin> or front it with a same-origin proxy."
+          );
+        }
+      }
+    }
+  }
+  const webShellMounted = !!webShellDir;
   const app = createServeApp(opts, () => actualPort, {
     bridge,
+    webShellDir,
     boundWorkspace,
     qwenCodeVersion: cliVersion,
     fsFactory,
@@ -34752,6 +35720,8 @@ async function runQwenServe(optsIn, deps = {}) {
         server,
         url,
         bridge,
+        webShellMounted,
+        resolvedToken: token,
         close: /* @__PURE__ */ __name(() => {
           if (closePromise) return closePromise;
           closePromise = new Promise((res, rej) => {