@qwen-code/qwen-code 0.19.3-nightly.20260701.a974594d7 → 0.19.4

package/chunks/chunk-MX2YXRER.js

@@ -0,0 +1,44 @@
+// Force strict mode and setup for ESM
+"use strict";
+import {
+  init_esbuild_shims
+} from "./chunk-A4BMJM77.js";
+import {
+  __name
+} from "./chunk-J2S4EL5Y.js";
+
+// packages/cli/src/serve/channel-selection.ts
+init_esbuild_shims();
+function normalizeServeChannelSelection(rawChannels) {
+  if (rawChannels === void 0 || rawChannels.length === 0) {
+    return void 0;
+  }
+  const names = [];
+  const seen = /* @__PURE__ */ new Set();
+  for (const raw of rawChannels) {
+    const name = raw.trim();
+    if (!name) {
+      throw new Error("--channel requires a non-empty channel name.");
+    }
+    if (seen.has(name)) continue;
+    seen.add(name);
+    names.push(name);
+  }
+  if (seen.has("all")) {
+    if (names.length > 1) {
+      throw new Error("--channel all cannot be combined with channel names.");
+    }
+    return { mode: "all" };
+  }
+  return { mode: "names", names };
+}
+__name(normalizeServeChannelSelection, "normalizeServeChannelSelection");
+function channelSelectionNames(selection) {
+  return selection.mode === "all" ? ["all"] : [...selection.names];
+}
+__name(channelSelectionNames, "channelSelectionNames");
+
+export {
+  normalizeServeChannelSelection,
+  channelSelectionNames
+};

package/chunks/{chunk-TMILTLP3.js → chunk-ND25GXEU.js}

@@ -8,14 +8,17 @@ import {
 } from "./chunk-ALX6BUYW.js";
 import {
   loadSettings
-} from "./chunk-6FIWYVN4.js";
+} from "./chunk-MKHC4BYZ.js";
+import {
+  normalizeServeChannelSelection
+} from "./chunk-MX2YXRER.js";
 import {
   writeStderrLine
 } from "./chunk-Y6Z2O3WR.js";
 import {
   MCP_BUDGET_WARN_FRACTION,
   parsePositiveIntegerEnv
-} from "./chunk-35FH347N.js";
+} from "./chunk-BFG6OZN7.js";
 import {
   openBrowserSecurely,
   shouldLaunchBrowser
@@ -104,6 +107,10 @@ var serveCommand = {
     type: "boolean",
     default: false,
     description: "Forward the experimental LSP opt-in to spawned agent sessions."
+  }).option("channel", {
+    type: "string",
+    array: true,
+    description: "Experimental: start a daemon-managed channel worker for the named channel. Repeat to select multiple channels, or use --channel all."
   }).option("web", {
     type: "boolean",
     default: true,
@@ -183,6 +190,15 @@ var serveCommand = {
         "qwen serve: --token is visible in the process command line; prefer the QWEN_SERVER_TOKEN env var for any non-trivial deployment."
       );
     }
+    let channelSelection;
+    try {
+      channelSelection = normalizeServeChannelSelection(argv.channel);
+    } catch (err) {
+      writeStderrLine(
+        `qwen serve: ${err instanceof Error ? err.message : String(err)}`
+      );
+      process.exit(1);
+    }
     const mcpClientBudget = argv["mcp-client-budget"];
     const mcpBudgetMode = argv["mcp-budget-mode"];
     if (mcpClientBudget !== void 0) {
@@ -257,7 +273,7 @@ var serveCommand = {
         process.exit(1);
       }
     }
-    const { runQwenServe } = await import("./run-qwen-serve-PQV7QOHZ.js");
+    const { runQwenServe } = await import("./run-qwen-serve-AGLZ642J.js");
     try {
       const handle = await runQwenServe({
         port: argv.port,
@@ -289,7 +305,8 @@ var serveCommand = {
         ...rateLimitMutation !== void 0 ? { rateLimitMutation } : {},
         ...rateLimitRead !== void 0 ? { rateLimitRead } : {},
         ...rateLimitWindowMs !== void 0 ? { rateLimitWindowMs } : {},
-        ...argv.experimentalLsp === true ? { experimentalLsp: true } : {}
+        ...argv.experimentalLsp === true ? { experimentalLsp: true } : {},
+        ...channelSelection !== void 0 ? { channelSelection } : {}
       });
       await maybeOpenWebShellBrowser(handle, argv.open);
     } catch (err) {

package/chunks/{chunk-AIBPG5MB.js → chunk-OAFUMTWW.js}

@@ -6,7 +6,7 @@ import {
 import {
   JsonFormatter,
   parseAndFormatApiError
-} from "./chunk-35FH347N.js";
+} from "./chunk-BFG6OZN7.js";
 import {
   FatalBudgetExceededError,
   FatalCancellationError,
@@ -15,7 +15,7 @@ import {
 } from "./chunk-AVQDCKNF.js";
 import {
   runExitCleanup
-} from "./chunk-WJAY4WXR.js";
+} from "./chunk-FYKX6XOT.js";
 import {
   init_esbuild_shims
 } from "./chunk-A4BMJM77.js";

package/chunks/chunk-OJCECIJA.js

@@ -0,0 +1,238 @@
+// Force strict mode and setup for ESM
+"use strict";
+import {
+  Storage
+} from "./chunk-AVQDCKNF.js";
+import {
+  init_esbuild_shims
+} from "./chunk-A4BMJM77.js";
+import {
+  __name
+} from "./chunk-J2S4EL5Y.js";
+
+// packages/cli/src/commands/channel/pidfile.ts
+init_esbuild_shims();
+import {
+  existsSync,
+  readFileSync,
+  writeFileSync,
+  mkdirSync,
+  unlinkSync,
+  openSync,
+  closeSync,
+  constants,
+  ftruncateSync,
+  writeSync
+} from "node:fs";
+import * as path from "node:path";
+function pidFilePath() {
+  return path.join(Storage.getGlobalQwenDir(), "channels", "service.pid");
+}
+__name(pidFilePath, "pidFilePath");
+function isValidPid(pid) {
+  return typeof pid === "number" && Number.isSafeInteger(pid) && pid > 0;
+}
+__name(isValidPid, "isValidPid");
+function parseServiceInfo(value) {
+  if (typeof value !== "object" || value === null || Array.isArray(value)) {
+    return null;
+  }
+  const info = value;
+  const owner = info.owner ?? "channel";
+  if (owner !== "channel" && owner !== "serve") return null;
+  if (!isValidPid(info.pid) || typeof info.startedAt !== "string" || Number.isNaN(Date.parse(info.startedAt)) || !Array.isArray(info.channels) || !info.channels.every((channel) => typeof channel === "string")) {
+    return null;
+  }
+  if (info.servePid !== void 0 && !isValidPid(info.servePid)) return null;
+  if (info.workerPid !== void 0 && !isValidPid(info.workerPid)) return null;
+  return {
+    owner,
+    pid: info.pid,
+    startedAt: info.startedAt,
+    channels: info.channels,
+    ...info.servePid !== void 0 ? { servePid: info.servePid } : {},
+    ...info.workerPid !== void 0 ? { workerPid: info.workerPid } : {}
+  };
+}
+__name(parseServiceInfo, "parseServiceInfo");
+function unlinkPidFile(filePath) {
+  try {
+    unlinkSync(filePath);
+  } catch {
+  }
+}
+__name(unlinkPidFile, "unlinkPidFile");
+function isProcessAlive(pid) {
+  if (!isValidPid(pid)) {
+    return false;
+  }
+  try {
+    process.kill(pid, 0);
+    return true;
+  } catch {
+    return false;
+  }
+}
+__name(isProcessAlive, "isProcessAlive");
+function readServiceInfo() {
+  const filePath = pidFilePath();
+  if (!existsSync(filePath)) return null;
+  let parsed;
+  try {
+    parsed = JSON.parse(readFileSync(filePath, "utf-8"));
+  } catch {
+    unlinkPidFile(filePath);
+    return null;
+  }
+  const info = parseServiceInfo(parsed);
+  if (!info) {
+    unlinkPidFile(filePath);
+    return null;
+  }
+  if (!isProcessAlive(info.pid)) {
+    unlinkPidFile(filePath);
+    return null;
+  }
+  return info;
+}
+__name(readServiceInfo, "readServiceInfo");
+function writeInfo(info, flag = "w") {
+  const filePath = pidFilePath();
+  const dir = path.dirname(filePath);
+  if (!existsSync(dir)) {
+    mkdirSync(dir, { recursive: true });
+  }
+  writeFileSync(filePath, JSON.stringify(info, null, 2), {
+    encoding: "utf-8",
+    flag
+  });
+}
+__name(writeInfo, "writeInfo");
+function fileExistsError(message) {
+  const err = new Error(message);
+  err.code = "EEXIST";
+  return err;
+}
+__name(fileExistsError, "fileExistsError");
+function writeServiceInfo(channels) {
+  const info = {
+    owner: "channel",
+    pid: process.pid,
+    startedAt: (/* @__PURE__ */ new Date()).toISOString(),
+    channels
+  };
+  writeInfo(info, "wx");
+}
+__name(writeServiceInfo, "writeServiceInfo");
+function writeServeServiceInfo({
+  channels,
+  servePid = process.pid,
+  workerPid
+}) {
+  const info = {
+    owner: "serve",
+    pid: servePid,
+    startedAt: (/* @__PURE__ */ new Date()).toISOString(),
+    channels,
+    servePid,
+    ...workerPid !== void 0 ? { workerPid } : {}
+  };
+  const filePath = pidFilePath();
+  let fd;
+  try {
+    fd = openSync(filePath, constants.O_RDWR | constants.O_NOFOLLOW);
+  } catch (err) {
+    if (err.code === "ENOENT") {
+      writeInfo(info, "wx");
+      return;
+    }
+    throw err;
+  }
+  try {
+    let existing = null;
+    try {
+      existing = parseServiceInfo(JSON.parse(readFileSync(fd, "utf-8")));
+    } catch {
+    }
+    if (!existing || existing.owner !== "serve" || existing.pid !== servePid || existing.servePid !== servePid) {
+      throw fileExistsError(
+        "Channel service pidfile is owned by another process."
+      );
+    }
+    ftruncateSync(fd, 0);
+    writeSync(fd, JSON.stringify(info, null, 2), 0, "utf-8");
+  } finally {
+    closeSync(fd);
+  }
+}
+__name(writeServeServiceInfo, "writeServeServiceInfo");
+function reserveServeServiceInfo({
+  channels,
+  servePid = process.pid
+}) {
+  const info = {
+    owner: "serve",
+    pid: servePid,
+    startedAt: (/* @__PURE__ */ new Date()).toISOString(),
+    channels,
+    servePid
+  };
+  writeInfo(info, "wx");
+}
+__name(reserveServeServiceInfo, "reserveServeServiceInfo");
+function removeServiceInfo() {
+  const filePath = pidFilePath();
+  if (existsSync(filePath)) {
+    unlinkPidFile(filePath);
+  }
+}
+__name(removeServiceInfo, "removeServiceInfo");
+function removeServeServiceInfo(servePid = process.pid) {
+  const filePath = pidFilePath();
+  if (!existsSync(filePath)) return false;
+  let parsed;
+  try {
+    parsed = JSON.parse(readFileSync(filePath, "utf-8"));
+  } catch {
+    return false;
+  }
+  const info = parseServiceInfo(parsed);
+  if (!info || info.owner !== "serve" || info.servePid !== servePid || info.pid !== servePid) {
+    return false;
+  }
+  unlinkPidFile(filePath);
+  return true;
+}
+__name(removeServeServiceInfo, "removeServeServiceInfo");
+function signalService(pid, signal = "SIGTERM") {
+  if (!isValidPid(pid)) {
+    return false;
+  }
+  try {
+    process.kill(pid, signal);
+    return true;
+  } catch {
+    return false;
+  }
+}
+__name(signalService, "signalService");
+async function waitForExit(pid, timeoutMs = 5e3, pollMs = 200) {
+  const start = Date.now();
+  while (Date.now() - start < timeoutMs) {
+    if (!isProcessAlive(pid)) return true;
+    await new Promise((r) => setTimeout(r, pollMs));
+  }
+  return !isProcessAlive(pid);
+}
+__name(waitForExit, "waitForExit");
+
+export {
+  readServiceInfo,
+  writeServiceInfo,
+  writeServeServiceInfo,
+  reserveServeServiceInfo,
+  removeServiceInfo,
+  removeServeServiceInfo,
+  signalService,
+  waitForExit
+};

package/chunks/{chunk-EUURTJY7.js → chunk-PIYV6COW.js}

@@ -2,7 +2,7 @@
 "use strict";
 import {
   BaseJsonOutputAdapter
-} from "./chunk-NVTRORSK.js";
+} from "./chunk-7VPC7D7O.js";
 import {
   init_esbuild_shims
 } from "./chunk-A4BMJM77.js";

package/chunks/{chunk-LXEW6BHF.js → chunk-Q7VHIRDD.js}

@@ -2,7 +2,7 @@
 "use strict";
 import {
   t
-} from "./chunk-3O2BJMFW.js";
+} from "./chunk-UQYOMM6J.js";
 import {
   init_esbuild_shims
 } from "./chunk-A4BMJM77.js";

package/chunks/{chunk-DBR7PF4B.js → chunk-QAFQLTXG.js}

@@ -2,7 +2,7 @@
 "use strict";
 import {
   parseRule
-} from "./chunk-35FH347N.js";
+} from "./chunk-BFG6OZN7.js";
 import {
   init_esbuild_shims
 } from "./chunk-A4BMJM77.js";

package/chunks/{chunk-3TK7FSCP.js → chunk-QMIND2AS.js}

@@ -2,16 +2,16 @@
 "use strict";
 import {
   createTask
-} from "./chunk-CA4ML3VH.js";
+} from "./chunk-G7OQ3RFJ.js";
 import {
   resolveActiveTeamName
-} from "./chunk-LD2XBG6Z.js";
+} from "./chunk-GO6LNQXT.js";
 import {
   BaseDeclarativeTool,
   BaseToolInvocation,
   ToolDisplayNames,
   ToolNames
-} from "./chunk-JV7A66DR.js";
+} from "./chunk-4VZH35PN.js";
 import {
   init_esbuild_shims
 } from "./chunk-A4BMJM77.js";

package/chunks/{chunk-ESVSWG6Z.js → chunk-QOMAHFYI.js}

@@ -3,7 +3,7 @@
 import {
   getInboxesDir,
   require_proper_lockfile
-} from "./chunk-HWG4XLD7.js";
+} from "./chunk-LKWAVAB5.js";
 import {
   Mutex
 } from "./chunk-OMX7CUOE.js";

package/chunks/{chunk-J37FGIOA.js → chunk-QXPI7FEC.js}

@@ -7,6 +7,7 @@ import {
   require_type
 } from "./chunk-7RYW5LQV.js";
 import {
+  require_function_bind,
   require_hasown
 } from "./chunk-UWCTAVOD.js";
 import {
@@ -658,6 +659,18 @@ var require_es_set_tostringtag = __commonJS({
   }
 });
 
+// node_modules/form-data/node_modules/hasown/index.js
+var require_hasown2 = __commonJS({
+  "node_modules/form-data/node_modules/hasown/index.js"(exports, module) {
+    "use strict";
+    init_esbuild_shims();
+    var call = Function.prototype.call;
+    var $hasOwn = Object.prototype.hasOwnProperty;
+    var bind = require_function_bind();
+    module.exports = bind.call(call, $hasOwn);
+  }
+});
+
 // node_modules/form-data/lib/populate.js
 var require_populate = __commonJS({
   "node_modules/form-data/lib/populate.js"(exports, module) {
@@ -689,8 +702,12 @@ var require_form_data = __commonJS({
     var mime = require_mime_types();
     var asynckit = require_asynckit();
     var setToStringTag = require_es_set_tostringtag();
-    var hasOwn = require_hasown();
+    var hasOwn = require_hasown2();
     var populate = require_populate();
+    function escapeHeaderParam(str) {
+      return String(str).replace(/\r/g, "%0D").replace(/\n/g, "%0A").replace(/"/g, "%22");
+    }
+    __name(escapeHeaderParam, "escapeHeaderParam");
     function FormData(options) {
       if (!(this instanceof FormData)) {
         return new FormData(options);
@@ -781,7 +798,7 @@ var require_form_data = __commonJS({
       var contents = "";
       var headers = {
         // add custom disposition as third element or keep it two elements if not
-        "Content-Disposition": ["form-data", 'name="' + field + '"'].concat(contentDisposition || []),
+        "Content-Disposition": ["form-data", 'name="' + escapeHeaderParam(field) + '"'].concat(contentDisposition || []),
         // if no content type. allow it to be empty array
         "Content-Type": [].concat(contentType || [])
       };
@@ -815,7 +832,7 @@ var require_form_data = __commonJS({
         filename = path.basename(value.client._httpMessage.path || "");
       }
       if (filename) {
-        return 'filename="' + filename + '"';
+        return 'filename="' + escapeHeaderParam(filename) + '"';
       }
     };
     FormData.prototype._getContentType = function(value, options) {
@@ -1113,6 +1130,11 @@ var require_follow_redirects = __commonJS({
     } catch (error) {
       useNativeURL = error.code === "ERR_INVALID_URL";
     }
+    var sensitiveHeaders = [
+      "Authorization",
+      "Proxy-Authorization",
+      "Cookie"
+    ];
     var preservedUrlFields = [
       "auth",
       "host",
@@ -1177,6 +1199,7 @@ var require_follow_redirects = __commonJS({
           self.emit("error", cause instanceof RedirectionError ? cause : new RedirectionError({ cause }));
         }
       };
+      this._headerFilter = new RegExp("^(?:" + sensitiveHeaders.concat(options.sensitiveHeaders).map(escapeRegex).join("|") + ")$", "i");
       this._performRequest();
     }
     __name(RedirectableRequest, "RedirectableRequest");
@@ -1318,6 +1341,9 @@ var require_follow_redirects = __commonJS({
       if (!options.headers) {
         options.headers = {};
       }
+      if (!isArray(options.sensitiveHeaders)) {
+        options.sensitiveHeaders = [];
+      }
       if (options.host) {
         if (!options.hostname) {
           options.hostname = options.host;
@@ -1423,7 +1449,7 @@ var require_follow_redirects = __commonJS({
       this._isRedirect = true;
       spreadUrlObject(redirectUrl, this._options);
       if (redirectUrl.protocol !== currentUrlParts.protocol && redirectUrl.protocol !== "https:" || redirectUrl.host !== currentHost && !isSubdomain(redirectUrl.host, currentHost)) {
-        removeMatchingHeaders(/^(?:(?:proxy-)?authorization|cookie)$/i, this._options.headers);
+        removeMatchingHeaders(this._headerFilter, this._options.headers);
       }
       if (isFunction(beforeRedirect)) {
         var responseDetails = {
@@ -1585,6 +1611,10 @@ var require_follow_redirects = __commonJS({
       return dot > 0 && subdomain[dot] === "." && subdomain.endsWith(domain);
     }
     __name(isSubdomain, "isSubdomain");
+    function isArray(value) {
+      return value instanceof Array;
+    }
+    __name(isArray, "isArray");
     function isString(value) {
       return typeof value === "string" || value instanceof String;
     }
@@ -1601,6 +1631,10 @@ var require_follow_redirects = __commonJS({
       return URL && value instanceof URL;
     }
     __name(isURL, "isURL");
+    function escapeRegex(regex) {
+      return regex.replace(/[\]\\/()*+?.$]/g, "\\$&");
+    }
+    __name(escapeRegex, "escapeRegex");
     module.exports = wrap({ http, https });
     module.exports.wrap = wrap;
   }

package/chunks/chunk-RM3PGSGL.js

@@ -0,0 +1,66 @@
+// Force strict mode and setup for ESM
+"use strict";
+import {
+  init_esbuild_shims
+} from "./chunk-A4BMJM77.js";
+import {
+  __name
+} from "./chunk-J2S4EL5Y.js";
+
+// packages/cli/src/serve/workspace-remember-errors.ts
+init_esbuild_shims();
+function errorCodeFromRecord(record) {
+  if (typeof record["code"] === "string") return record["code"];
+  const data = record["data"];
+  if (data && typeof data === "object") {
+    const dataRecord = data;
+    if (typeof dataRecord["errorKind"] === "string") {
+      return dataRecord["errorKind"];
+    }
+    if (typeof dataRecord["code"] === "string") return dataRecord["code"];
+  }
+  return void 0;
+}
+__name(errorCodeFromRecord, "errorCodeFromRecord");
+function extractRememberErrorCode(err) {
+  if (err && typeof err === "object") {
+    const record = err;
+    const direct = errorCodeFromRecord(record);
+    if (direct) return direct;
+    const cause = record["cause"];
+    if (cause && typeof cause === "object") {
+      const causedBy = errorCodeFromRecord(cause);
+      if (causedBy) return causedBy;
+    }
+  }
+  return "remember_failed";
+}
+__name(extractRememberErrorCode, "extractRememberErrorCode");
+
+// packages/cli/src/serve/workspace-memory-remember-constants.ts
+init_esbuild_shims();
+var MAX_REMEMBER_CONTENT_BYTES = 64 * 1024;
+
+// packages/cli/src/serve/validate-server-name.ts
+init_esbuild_shims();
+var VALID_SERVER_NAME = /^[A-Za-z0-9_-]+$/;
+var RESERVED_SERVER_NAMES = /* @__PURE__ */ new Set([
+  "__proto__",
+  "constructor",
+  "prototype"
+]);
+function isValidServerName(name) {
+  return typeof name === "string" && name.length > 0 && name.length <= 256 && VALID_SERVER_NAME.test(name) && !RESERVED_SERVER_NAMES.has(name);
+}
+__name(isValidServerName, "isValidServerName");
+
+export {
+  extractRememberErrorCode,
+  MAX_REMEMBER_CONTENT_BYTES,
+  isValidServerName
+};
+/**
+ * @license
+ * Copyright 2026 Qwen Team
+ * SPDX-License-Identifier: Apache-2.0
+ */

package/chunks/chunk-RNBYOUGV.js

@@ -0,0 +1,42 @@
+// Force strict mode and setup for ESM
+"use strict";
+import {
+  init_esbuild_shims
+} from "./chunk-A4BMJM77.js";
+import {
+  __name
+} from "./chunk-J2S4EL5Y.js";
+
+// packages/cli/src/serve/loopback-binds.ts
+init_esbuild_shims();
+var LOOPBACK_BINDS = /* @__PURE__ */ new Set([
+  "127.0.0.1",
+  "localhost",
+  "::1",
+  "[::1]"
+]);
+function isIpv4Loopback(hostname) {
+  const octets = hostname.split(".");
+  if (octets.length !== 4) return false;
+  const [first, ...rest] = octets;
+  return first === "127" && rest.every((octet) => {
+    if (!/^\d+$/.test(octet)) return false;
+    const value = Number(octet);
+    return value >= 0 && value <= 255;
+  });
+}
+__name(isIpv4Loopback, "isIpv4Loopback");
+function isLoopbackBind(hostname) {
+  const normalized = hostname.toLowerCase();
+  return LOOPBACK_BINDS.has(normalized) || isIpv4Loopback(normalized);
+}
+__name(isLoopbackBind, "isLoopbackBind");
+
+export {
+  isLoopbackBind
+};
+/**
+ * @license
+ * Copyright 2025 Qwen Team
+ * SPDX-License-Identifier: Apache-2.0
+ */