@qwen-code/qwen-code 0.19.3 → 0.19.4-nightly.20260702.46814e4f1

package/chunks/{chunk-U3KSMM7G.js → chunk-D5KISTLW.js}

@@ -2,7 +2,7 @@
 "use strict";
 import {
   createDebugLogger
-} from "./chunk-UX4SGCGN.js";
+} from "./chunk-AVQDCKNF.js";
 import {
   init_esbuild_shims
 } from "./chunk-A4BMJM77.js";
@@ -471,6 +471,24 @@ var require_errors = __commonJS({
       }
       [kSecureProxyConnectionError] = true;
     };
+    var kMessageSizeExceededError = Symbol.for("undici.error.UND_ERR_WS_MESSAGE_SIZE_EXCEEDED");
+    var MessageSizeExceededError = class extends UndiciError {
+      static {
+        __name(this, "MessageSizeExceededError");
+      }
+      constructor(message) {
+        super(message);
+        this.name = "MessageSizeExceededError";
+        this.message = message || "Max decompressed message size exceeded";
+        this.code = "UND_ERR_WS_MESSAGE_SIZE_EXCEEDED";
+      }
+      static [Symbol.hasInstance](instance) {
+        return instance && instance[kMessageSizeExceededError] === true;
+      }
+      get [kMessageSizeExceededError]() {
+        return true;
+      }
+    };
     module.exports = {
       AbortError,
       HTTPParserError,
@@ -494,7 +512,8 @@ var require_errors = __commonJS({
       ResponseExceededMaxSizeError,
       RequestRetryError,
       ResponseError,
-      SecureProxyConnectionError
+      SecureProxyConnectionError,
+      MessageSizeExceededError
     };
   }
 });
@@ -1561,6 +1580,9 @@ var require_request = __commonJS({
         if (upgrade && typeof upgrade !== "string") {
           throw new InvalidArgumentError("upgrade must be a string");
         }
+        if (upgrade && !isValidHeaderValue(upgrade)) {
+          throw new InvalidArgumentError("invalid upgrade header");
+        }
         if (headersTimeout != null && (!Number.isFinite(headersTimeout) || headersTimeout < 0)) {
           throw new InvalidArgumentError("invalid headersTimeout");
         }
@@ -1793,12 +1815,18 @@ var require_request = __commonJS({
       } else {
         val = `${val}`;
       }
-      if (request.host === null && headerName === "host") {
+      if (headerName === "host") {
+        if (request.host !== null) {
+          throw new InvalidArgumentError("duplicate host header");
+        }
         if (typeof val !== "string") {
           throw new InvalidArgumentError("invalid host header");
         }
         request.host = val;
-      } else if (request.contentLength === null && headerName === "content-length") {
+      } else if (headerName === "content-length") {
+        if (request.contentLength !== null) {
+          throw new InvalidArgumentError("duplicate content-length header");
+        }
         request.contentLength = parseInt(val, 10);
         if (!Number.isFinite(request.contentLength)) {
           throw new InvalidArgumentError("invalid content-length header");
@@ -1904,16 +1932,24 @@ var require_dispatcher_base = __commonJS({
     var kOnDestroyed = Symbol("onDestroyed");
     var kOnClosed = Symbol("onClosed");
     var kInterceptedDispatch = Symbol("Intercepted Dispatch");
+    var kWebSocketOptions = Symbol("webSocketOptions");
     var DispatcherBase = class extends Dispatcher {
       static {
         __name(this, "DispatcherBase");
       }
-      constructor() {
+      constructor(opts) {
         super();
         this[kDestroyed] = false;
         this[kOnDestroyed] = null;
         this[kClosed] = false;
         this[kOnClosed] = [];
+        this[kWebSocketOptions] = opts?.webSocket ?? {};
+      }
+      get webSocketOptions() {
+        return {
+          maxFragments: this[kWebSocketOptions].maxFragments ?? 131072,
+          maxPayloadSize: this[kWebSocketOptions].maxPayloadSize ?? 128 * 1024 * 1024
+        };
       }
       get destroyed() {
         return this[kDestroyed];
@@ -5712,6 +5748,9 @@ var require_client_h1 = __commonJS({
     var FastBuffer = Buffer[Symbol.species];
     var addListener = util.addListener;
     var removeAllListeners = util.removeAllListeners;
+    var kIdleSocketValidation = Symbol("kIdleSocketValidation");
+    var kIdleSocketValidationTimeout = Symbol("kIdleSocketValidationTimeout");
+    var kSocketUsed = Symbol("kSocketUsed");
     var extractBody;
     async function lazyllhttp() {
       const llhttpWasmData = process.env.JEST_WORKER_ID ? require_llhttp_wasm() : void 0;
@@ -5878,24 +5917,55 @@ var require_client_h1 = __commonJS({
             currentBufferRef = null;
           }
           const offset = llhttp.llhttp_get_error_pos(this.ptr) - currentBufferPtr;
-          if (ret === constants.ERROR.PAUSED_UPGRADE) {
-            this.onUpgrade(data.slice(offset));
-          } else if (ret === constants.ERROR.PAUSED) {
-            this.paused = true;
-            socket.unshift(data.slice(offset));
-          } else if (ret !== constants.ERROR.OK) {
-            const ptr = llhttp.llhttp_get_error_reason(this.ptr);
-            let message = "";
-            if (ptr) {
-              const len = new Uint8Array(llhttp.memory.buffer, ptr).indexOf(0);
-              message = "Response does not match the HTTP/1.1 protocol (" + Buffer.from(llhttp.memory.buffer, ptr, len).toString() + ")";
+          if (ret !== constants.ERROR.OK) {
+            const body = data.subarray(offset);
+            if (ret === constants.ERROR.PAUSED_UPGRADE) {
+              this.onUpgrade(body);
+            } else if (ret === constants.ERROR.PAUSED) {
+              this.paused = true;
+              socket.unshift(body);
+            } else {
+              throw this.createError(ret, body);
             }
-            throw new HTTPParserError(message, constants.ERROR[ret], data.slice(offset));
           }
         } catch (err) {
           util.destroy(socket, err);
         }
       }
+      finish() {
+        assert(currentParser === null);
+        assert(this.ptr != null);
+        assert(!this.paused);
+        const { llhttp } = this;
+        let ret;
+        try {
+          currentParser = this;
+          ret = llhttp.llhttp_finish(this.ptr);
+        } finally {
+          currentParser = null;
+        }
+        if (ret === constants.ERROR.OK) {
+          return null;
+        }
+        if (ret === constants.ERROR.PAUSED || ret === constants.ERROR.PAUSED_UPGRADE) {
+          this.paused = true;
+          return null;
+        }
+        return this.createError(ret, EMPTY_BUF);
+      }
+      createError(ret, data) {
+        const { llhttp, contentLength, bytesRead } = this;
+        if (contentLength && bytesRead !== parseInt(contentLength, 10)) {
+          return new ResponseContentLengthMismatchError();
+        }
+        const ptr = llhttp.llhttp_get_error_reason(this.ptr);
+        let message = "";
+        if (ptr) {
+          const len = new Uint8Array(llhttp.memory.buffer, ptr).indexOf(0);
+          message = "Response does not match the HTTP/1.1 protocol (" + Buffer.from(llhttp.memory.buffer, ptr, len).toString() + ")";
+        }
+        return new HTTPParserError(message, constants.ERROR[ret], data);
+      }
       destroy() {
         assert(this.ptr != null);
         assert(currentParser == null);
@@ -5915,6 +5985,10 @@ var require_client_h1 = __commonJS({
         if (socket.destroyed) {
           return -1;
         }
+        if (client[kRunning] === 0) {
+          util.destroy(socket, new SocketError("bad response", util.getSocketInfo(socket)));
+          return -1;
+        }
         const request = client[kQueue][client[kRunningIdx]];
         if (!request) {
           return -1;
@@ -5994,6 +6068,10 @@ var require_client_h1 = __commonJS({
         if (socket.destroyed) {
           return -1;
         }
+        if (client[kRunning] === 0) {
+          util.destroy(socket, new SocketError("bad response", util.getSocketInfo(socket)));
+          return -1;
+        }
         const request = client[kQueue][client[kRunningIdx]];
         if (!request) {
           return -1;
@@ -6119,6 +6197,7 @@ var require_client_h1 = __commonJS({
         }
         request.onComplete(headers);
         client[kQueue][client[kRunningIdx]++] = null;
+        socket[kSocketUsed] = true;
         if (socket[kWriting]) {
           assert(client[kRunning] === 0);
           util.destroy(socket, new InformationalError("reset"));
@@ -6163,12 +6242,19 @@ var require_client_h1 = __commonJS({
       socket[kWriting] = false;
       socket[kReset] = false;
       socket[kBlocking] = false;
+      socket[kIdleSocketValidation] = 0;
+      socket[kIdleSocketValidationTimeout] = null;
+      socket[kSocketUsed] = false;
       socket[kParser] = new Parser(client, socket, llhttpInstance);
       addListener(socket, "error", function(err) {
         assert(err.code !== "ERR_TLS_CERT_ALTNAME_INVALID");
         const parser = this[kParser];
         if (err.code === "ECONNRESET" && parser.statusCode && !parser.shouldKeepAlive) {
-          parser.onMessageComplete();
+          const parserErr = parser.finish();
+          if (parserErr) {
+            this[kError] = parserErr;
+            this[kClient][kOnError](parserErr);
+          }
           return;
         }
         this[kError] = err;
@@ -6183,7 +6269,10 @@ var require_client_h1 = __commonJS({
       addListener(socket, "end", function() {
         const parser = this[kParser];
         if (parser.statusCode && !parser.shouldKeepAlive) {
-          parser.onMessageComplete();
+          const parserErr = parser.finish();
+          if (parserErr) {
+            util.destroy(this, parserErr);
+          }
           return;
         }
         util.destroy(this, new SocketError("other side closed", util.getSocketInfo(this)));
@@ -6191,9 +6280,10 @@ var require_client_h1 = __commonJS({
       addListener(socket, "close", function() {
         const client2 = this[kClient];
         const parser = this[kParser];
+        clearIdleSocketValidation(this);
         if (parser) {
           if (!this[kError] && parser.statusCode && !parser.shouldKeepAlive) {
-            parser.onMessageComplete();
+            this[kError] = parser.finish() || this[kError];
           }
           this[kParser].destroy();
           this[kParser] = null;
@@ -6242,7 +6332,7 @@ var require_client_h1 = __commonJS({
           return socket.destroyed;
         },
         busy(request) {
-          if (socket[kWriting] || socket[kReset] || socket[kBlocking]) {
+          if (socket[kWriting] || socket[kReset] || socket[kBlocking] || socket[kIdleSocketValidation] === 1) {
             return true;
           }
           if (request) {
@@ -6261,6 +6351,26 @@ var require_client_h1 = __commonJS({
       };
     }
     __name(connectH1, "connectH1");
+    function clearIdleSocketValidation(socket) {
+      if (socket[kIdleSocketValidationTimeout]) {
+        clearTimeout(socket[kIdleSocketValidationTimeout]);
+        socket[kIdleSocketValidationTimeout] = null;
+      }
+      socket[kIdleSocketValidation] = 0;
+    }
+    __name(clearIdleSocketValidation, "clearIdleSocketValidation");
+    function scheduleIdleSocketValidation(client, socket) {
+      socket[kIdleSocketValidation] = 1;
+      socket[kIdleSocketValidationTimeout] = setTimeout(() => {
+        socket[kIdleSocketValidationTimeout] = null;
+        socket[kIdleSocketValidation] = 2;
+        if (client[kSocket] === socket && !socket.destroyed) {
+          client[kResume]();
+        }
+      }, 0);
+      socket[kIdleSocketValidationTimeout].unref?.();
+    }
+    __name(scheduleIdleSocketValidation, "scheduleIdleSocketValidation");
     function resumeH1(client) {
       const socket = client[kSocket];
       if (socket && !socket.destroyed) {
@@ -6273,6 +6383,29 @@ var require_client_h1 = __commonJS({
           socket.ref();
           socket[kNoRef] = false;
         }
+        if (client[kRunning] === 0 && client[kPending] > 0 && socket[kSocketUsed]) {
+          if (socket[kIdleSocketValidation] === 0) {
+            scheduleIdleSocketValidation(client, socket);
+            socket[kParser].readMore();
+            if (socket.destroyed) {
+              return;
+            }
+            return;
+          }
+          if (socket[kIdleSocketValidation] === 1) {
+            socket[kParser].readMore();
+            if (socket.destroyed) {
+              return;
+            }
+            return;
+          }
+        }
+        if (client[kRunning] === 0) {
+          socket[kParser].readMore();
+          if (socket.destroyed) {
+            return;
+          }
+        }
         if (client[kSize] === 0) {
           if (socket[kParser].timeoutType !== TIMEOUT_KEEP_ALIVE) {
             socket[kParser].setTimeout(client[kKeepAliveTimeoutValue], TIMEOUT_KEEP_ALIVE);
@@ -6327,6 +6460,7 @@ var require_client_h1 = __commonJS({
         process.emitWarning(new RequestContentLengthMismatchError());
       }
       const socket = client[kSocket];
+      clearIdleSocketValidation(socket);
       const abort = /* @__PURE__ */ __name((err) => {
         if (request.aborted || request.completed) {
           return;
@@ -7549,9 +7683,10 @@ var require_client = __commonJS({
         autoSelectFamilyAttemptTimeout,
         // h2
         maxConcurrentStreams,
-        allowH2
+        allowH2,
+        webSocket
       } = {}) {
-        super();
+        super({ webSocket });
         if (keepAlive !== void 0) {
           throw new InvalidArgumentError("unsupported keepAlive, use pipelining=0 instead");
         }
@@ -8077,8 +8212,8 @@ var require_pool_base = __commonJS({
       static {
         __name(this, "PoolBase");
       }
-      constructor() {
-        super();
+      constructor(opts) {
+        super(opts);
         this[kQueue] = new FixedQueue();
         this[kClients] = [];
         this[kQueued] = 0;
@@ -8254,7 +8389,6 @@ var require_pool = __commonJS({
         allowH2,
         ...options
       } = {}) {
-        super();
         if (connections != null && (!Number.isFinite(connections) || connections < 0)) {
           throw new InvalidArgumentError("invalid connections");
         }
@@ -8275,6 +8409,7 @@ var require_pool = __commonJS({
             ...connect
           });
         }
+        super(options);
         this[kInterceptors] = options.interceptors?.Pool && Array.isArray(options.interceptors.Pool) ? options.interceptors.Pool : [];
         this[kConnections] = connections || null;
         this[kUrl] = util.parseOrigin(origin);
@@ -8485,7 +8620,6 @@ var require_agent = __commonJS({
         __name(this, "Agent");
       }
       constructor({ factory = defaultFactory, maxRedirections = 0, connect, ...options } = {}) {
-        super();
         if (typeof factory !== "function") {
           throw new InvalidArgumentError("factory must be a function.");
         }
@@ -8495,6 +8629,7 @@ var require_agent = __commonJS({
         if (!Number.isInteger(maxRedirections) || maxRedirections < 0) {
           throw new InvalidArgumentError("maxRedirections must be a positive number");
         }
+        super(options);
         if (connect && typeof connect !== "function") {
           connect = { ...connect };
         }
@@ -14481,23 +14616,25 @@ var require_fetch = __commonJS({
               if (status < 200) {
                 return;
               }
-              let codings = [];
               let location = "";
               const headersList = new HeadersList();
               for (let i = 0; i < rawHeaders.length; i += 2) {
                 headersList.append(bufferToLowerCasedHeaderName(rawHeaders[i]), rawHeaders[i + 1].toString("latin1"), true);
               }
-              const contentEncoding = headersList.get("content-encoding", true);
-              if (contentEncoding) {
-                codings = contentEncoding.toLowerCase().split(",").map((x) => x.trim());
-              }
               location = headersList.get("location", true);
               this.body = new Readable({ read: resume });
               const decoders = [];
               const willFollow = location && request.redirect === "follow" && redirectStatusSet.has(status);
-              if (codings.length !== 0 && request.method !== "HEAD" && request.method !== "CONNECT" && !nullBodyStatus.includes(status) && !willFollow) {
+              if (request.method !== "HEAD" && request.method !== "CONNECT" && !nullBodyStatus.includes(status) && !willFollow) {
+                const contentEncoding = headersList.get("content-encoding", true);
+                const codings = contentEncoding ? contentEncoding.toLowerCase().split(",") : [];
+                const maxContentEncodings = 5;
+                if (codings.length > maxContentEncodings) {
+                  reject(new Error(`too many content-encodings in response: ${codings.length}, maximum allowed is ${maxContentEncodings}`));
+                  return true;
+                }
                 for (let i = codings.length - 1; i >= 0; --i) {
-                  const coding = codings[i];
+                  const coding = codings[i].trim();
                   if (coding === "x-gzip" || coding === "gzip") {
                     decoders.push(zlib.createGunzip({
                       // Be less strict when decoding compressed responses, since sometimes
@@ -16441,18 +16578,14 @@ var require_parse = __commonJS({
       } else if (attributeNameLowercase === "httponly") {
         cookieAttributeList.httpOnly = true;
       } else if (attributeNameLowercase === "samesite") {
-        let enforcement = "Default";
         const attributeValueLowercase = attributeValue.toLowerCase();
-        if (attributeValueLowercase.includes("none")) {
-          enforcement = "None";
-        }
-        if (attributeValueLowercase.includes("strict")) {
-          enforcement = "Strict";
-        }
-        if (attributeValueLowercase.includes("lax")) {
-          enforcement = "Lax";
+        if (attributeValueLowercase === "none") {
+          cookieAttributeList.sameSite = "None";
+        } else if (attributeValueLowercase === "strict") {
+          cookieAttributeList.sameSite = "Strict";
+        } else if (attributeValueLowercase === "lax") {
+          cookieAttributeList.sameSite = "Lax";
         }
-        cookieAttributeList.sameSite = enforcement;
       } else {
         cookieAttributeList.unparsed ??= [];
         cookieAttributeList.unparsed.push(`${attributeName}=${attributeValue}`);
@@ -17101,13 +17234,17 @@ var require_util7 = __commonJS({
     }
     __name(parseExtensions, "parseExtensions");
     function isValidClientWindowBits(value) {
+      if (value.length === 0) {
+        return false;
+      }
       for (let i = 0; i < value.length; i++) {
         const byte = value.charCodeAt(i);
         if (byte < 48 || byte > 57) {
           return false;
         }
       }
-      return true;
+      const num = Number.parseInt(value, 10);
+      return num >= 8 && num <= 15;
     }
     __name(isValidClientWindowBits, "isValidClientWindowBits");
     var hasIntl = typeof process.versions.icu === "string";
@@ -17419,6 +17556,7 @@ var require_permessage_deflate = __commonJS({
     init_esbuild_shims();
     var { createInflateRaw, Z_DEFAULT_WINDOWBITS } = __require("node:zlib");
     var { isValidClientWindowBits } = require_util7();
+    var { MessageSizeExceededError } = require_errors();
     var tail = Buffer.from([0, 0, 255, 255]);
     var kBuffer = Symbol("kBuffer");
     var kLength = Symbol("kLength");
@@ -17429,10 +17567,21 @@ var require_permessage_deflate = __commonJS({
       /** @type {import('node:zlib').InflateRaw} */
       #inflate;
       #options = {};
-      constructor(extensions) {
+      #maxPayloadSize = 0;
+      /**
+       * @param {Map<string, string>} extensions
+       */
+      constructor(extensions, options) {
         this.#options.serverNoContextTakeover = extensions.has("server_no_context_takeover");
         this.#options.serverMaxWindowBits = extensions.get("server_max_window_bits");
+        this.#maxPayloadSize = options.maxPayloadSize;
       }
+      /**
+       * Decompress a compressed payload.
+       * @param {Buffer} chunk Compressed data
+       * @param {boolean} fin Final fragment flag
+       * @param {Function} callback Callback function
+       */
       decompress(chunk, fin, callback) {
         if (!this.#inflate) {
           let windowBits = Z_DEFAULT_WINDOWBITS;
@@ -17443,12 +17592,23 @@ var require_permessage_deflate = __commonJS({
             }
             windowBits = Number.parseInt(this.#options.serverMaxWindowBits);
           }
-          this.#inflate = createInflateRaw({ windowBits });
+          try {
+            this.#inflate = createInflateRaw({ windowBits });
+          } catch (err) {
+            callback(err);
+            return;
+          }
           this.#inflate[kBuffer] = [];
           this.#inflate[kLength] = 0;
           this.#inflate.on("data", (data) => {
-            this.#inflate[kBuffer].push(data);
             this.#inflate[kLength] += data.length;
+            if (this.#maxPayloadSize > 0 && this.#inflate[kLength] > this.#maxPayloadSize) {
+              callback(new MessageSizeExceededError());
+              this.#inflate.removeAllListeners();
+              this.#inflate = null;
+              return;
+            }
+            this.#inflate[kBuffer].push(data);
           });
           this.#inflate.on("error", (err) => {
             this.#inflate = null;
@@ -17460,6 +17620,9 @@ var require_permessage_deflate = __commonJS({
           this.#inflate.write(tail);
         }
         this.#inflate.flush(() => {
+          if (!this.#inflate) {
+            return;
+          }
           const full = Buffer.concat(this.#inflate[kBuffer], this.#inflate[kLength]);
           this.#inflate[kBuffer].length = 0;
           this.#inflate[kLength] = 0;
@@ -17494,11 +17657,18 @@ var require_receiver = __commonJS({
     var { WebsocketFrameSend } = require_frame();
     var { closeWebSocketConnection } = require_connection();
     var { PerMessageDeflate } = require_permessage_deflate();
+    var { MessageSizeExceededError } = require_errors();
+    function failWebsocketConnectionWithCode(ws, code, reason) {
+      closeWebSocketConnection(ws, code, reason, Buffer.byteLength(reason));
+      failWebsocketConnection(ws, reason);
+    }
+    __name(failWebsocketConnectionWithCode, "failWebsocketConnectionWithCode");
     var ByteParser = class extends Writable {
       static {
         __name(this, "ByteParser");
       }
       #buffers = [];
+      #fragmentsBytes = 0;
       #byteOffset = 0;
       #loop = false;
       #state = parserStates.INFO;
@@ -17506,12 +17676,23 @@ var require_receiver = __commonJS({
       #fragments = [];
       /** @type {Map<string, PerMessageDeflate>} */
       #extensions;
-      constructor(ws, extensions) {
+      /** @type {number} */
+      #maxFragments;
+      /** @type {number} */
+      #maxPayloadSize;
+      /**
+       * @param {import('./websocket').WebSocket} ws
+       * @param {Map<string, string>|null} extensions
+       * @param {{ maxFragments?: number, maxPayloadSize?: number }} [options]
+       */
+      constructor(ws, extensions, options = {}) {
         super();
         this.ws = ws;
         this.#extensions = extensions == null ? /* @__PURE__ */ new Map() : extensions;
+        this.#maxFragments = options.maxFragments ?? 0;
+        this.#maxPayloadSize = options.maxPayloadSize ?? 0;
         if (this.#extensions.has("permessage-deflate")) {
-          this.#extensions.set("permessage-deflate", new PerMessageDeflate(extensions));
+          this.#extensions.set("permessage-deflate", new PerMessageDeflate(extensions, options));
         }
       }
       /**
@@ -17524,6 +17705,13 @@ var require_receiver = __commonJS({
         this.#loop = true;
         this.run(callback);
       }
+      #validatePayloadLength() {
+        if (this.#maxPayloadSize > 0 && !isControlFrame(this.#info.opcode) && this.#info.payloadLength + this.#fragmentsBytes > this.#maxPayloadSize) {
+          failWebsocketConnectionWithCode(this.ws, 1009, "Payload size exceeds maximum allowed size");
+          return false;
+        }
+        return true;
+      }
       /**
        * Runs whenever a new chunk is received.
        * Callback is called whenever there are no more chunks buffering,
@@ -17583,6 +17771,9 @@ var require_receiver = __commonJS({
             if (payloadLength <= 125) {
               this.#info.payloadLength = payloadLength;
               this.#state = parserStates.READ_DATA;
+              if (!this.#validatePayloadLength()) {
+                return;
+              }
             } else if (payloadLength === 126) {
               this.#state = parserStates.PAYLOADLENGTH_16;
             } else if (payloadLength === 127) {
@@ -17603,19 +17794,25 @@ var require_receiver = __commonJS({
             const buffer = this.consume(2);
             this.#info.payloadLength = buffer.readUInt16BE(0);
             this.#state = parserStates.READ_DATA;
+            if (!this.#validatePayloadLength()) {
+              return;
+            }
           } else if (this.#state === parserStates.PAYLOADLENGTH_64) {
             if (this.#byteOffset < 8) {
               return callback();
             }
             const buffer = this.consume(8);
             const upper = buffer.readUInt32BE(0);
-            if (upper > 2 ** 31 - 1) {
+            const lower = buffer.readUInt32BE(4);
+            if (upper !== 0 || lower > 2 ** 31 - 1) {
               failWebsocketConnection(this.ws, "Received payload length > 2^31 bytes.");
               return;
             }
-            const lower = buffer.readUInt32BE(4);
-            this.#info.payloadLength = (upper << 8) + lower;
+            this.#info.payloadLength = lower;
             this.#state = parserStates.READ_DATA;
+            if (!this.#validatePayloadLength()) {
+              return;
+            }
           } else if (this.#state === parserStates.READ_DATA) {
             if (this.#byteOffset < this.#info.payloadLength) {
               return callback();
@@ -17626,32 +17823,46 @@ var require_receiver = __commonJS({
               this.#state = parserStates.INFO;
             } else {
               if (!this.#info.compressed) {
-                this.#fragments.push(body);
+                if (!this.writeFragments(body)) {
+                  return;
+                }
+                if (this.#maxPayloadSize > 0 && this.#fragmentsBytes > this.#maxPayloadSize) {
+                  failWebsocketConnectionWithCode(this.ws, 1009, new MessageSizeExceededError().message);
+                  return;
+                }
                 if (!this.#info.fragmented && this.#info.fin) {
-                  const fullMessage = Buffer.concat(this.#fragments);
-                  websocketMessageReceived(this.ws, this.#info.binaryType, fullMessage);
-                  this.#fragments.length = 0;
+                  websocketMessageReceived(this.ws, this.#info.binaryType, this.consumeFragments());
                 }
                 this.#state = parserStates.INFO;
               } else {
-                this.#extensions.get("permessage-deflate").decompress(body, this.#info.fin, (error, data) => {
-                  if (error) {
-                    closeWebSocketConnection(this.ws, 1007, error.message, error.message.length);
-                    return;
-                  }
-                  this.#fragments.push(data);
-                  if (!this.#info.fin) {
-                    this.#state = parserStates.INFO;
+                this.#extensions.get("permessage-deflate").decompress(
+                  body,
+                  this.#info.fin,
+                  (error, data) => {
+                    if (error) {
+                      const code = error instanceof MessageSizeExceededError ? 1009 : 1007;
+                      failWebsocketConnectionWithCode(this.ws, code, error.message);
+                      return;
+                    }
+                    if (!this.writeFragments(data)) {
+                      return;
+                    }
+                    if (this.#maxPayloadSize > 0 && this.#fragmentsBytes > this.#maxPayloadSize) {
+                      failWebsocketConnectionWithCode(this.ws, 1009, new MessageSizeExceededError().message);
+                      return;
+                    }
+                    if (!this.#info.fin) {
+                      this.#state = parserStates.INFO;
+                      this.#loop = true;
+                      this.run(callback);
+                      return;
+                    }
+                    websocketMessageReceived(this.ws, this.#info.binaryType, this.consumeFragments());
                     this.#loop = true;
+                    this.#state = parserStates.INFO;
                     this.run(callback);
-                    return;
                   }
-                  websocketMessageReceived(this.ws, this.#info.binaryType, Buffer.concat(this.#fragments));
-                  this.#loop = true;
-                  this.#state = parserStates.INFO;
-                  this.#fragments.length = 0;
-                  this.run(callback);
-                });
+                );
                 this.#loop = false;
                 break;
               }
@@ -17694,6 +17905,26 @@ var require_receiver = __commonJS({
         this.#byteOffset -= n;
         return buffer;
       }
+      writeFragments(fragment) {
+        if (this.#maxFragments > 0 && this.#fragments.length === this.#maxFragments) {
+          failWebsocketConnectionWithCode(this.ws, 1008, "Too many message fragments");
+          return false;
+        }
+        this.#fragmentsBytes += fragment.length;
+        this.#fragments.push(fragment);
+        return true;
+      }
+      consumeFragments() {
+        const fragments = this.#fragments;
+        if (fragments.length === 1) {
+          this.#fragmentsBytes = 0;
+          return fragments.shift();
+        }
+        const output = Buffer.concat(fragments, this.#fragmentsBytes);
+        this.#fragments = [];
+        this.#fragmentsBytes = 0;
+        return output;
+      }
       parseCloseBody(data) {
         assert(data.length !== 1);
         let code;
@@ -18141,7 +18372,13 @@ var require_websocket = __commonJS({
        */
       #onConnectionEstablished(response, parsedExtensions) {
         this[kResponse] = response;
-        const parser = new ByteParser(this, parsedExtensions);
+        const webSocketOptions = this[kController]?.dispatcher?.webSocketOptions;
+        const maxFragments = webSocketOptions?.maxFragments;
+        const maxPayloadSize = webSocketOptions?.maxPayloadSize;
+        const parser = new ByteParser(this, parsedExtensions, {
+          maxFragments,
+          maxPayloadSize
+        });
         parser.on("drain", onParserDrain);
         parser.on("error", onParserError.bind(this));
         response.socket.ws = this;
@@ -18968,213 +19205,18 @@ var require_undici = __commonJS({
   }
 });
 
-// packages/core/src/core/tokenLimits.ts
-init_esbuild_shims();
-var DEFAULT_TOKEN_LIMIT = 131072;
-var DEFAULT_OUTPUT_TOKEN_LIMIT = 32e3;
-var ESCALATED_MAX_TOKENS = 64e3;
-function parsePositiveIntegerEnvValue(raw) {
-  if (raw === void 0) return void 0;
-  const trimmed = raw.trim();
-  if (!/^\d+$/.test(trimmed)) return void 0;
-  const parsed = Number(trimmed);
-  if (!Number.isSafeInteger(parsed) || parsed <= 0) return void 0;
-  return parsed;
-}
-__name(parsePositiveIntegerEnvValue, "parsePositiveIntegerEnvValue");
-var LIMITS = {
-  "32k": 32768,
-  "64k": 65536,
-  "128k": 131072,
-  "192k": 196608,
-  // MiniMax-M2.5 context window
-  "200k": 2e5,
-  // vendor-declared decimal, used by OpenAI, Anthropic, etc.
-  "256k": 262144,
-  "272k": 272e3,
-  // vendor-declared decimal, GPT-5.x input (400K total - 128K output)
-  "384k": 384e3,
-  // vendor-declared decimal, DeepSeek V4 max output
-  "400k": 4e5,
-  // vendor-declared decimal, used by OpenAI GPT-5.x
-  "512k": 524288,
-  "1m": 1e6,
-  // Output token limits (typically much smaller than input limits)
-  "4k": 4096,
-  "8k": 8192,
-  "16k": 16384
-};
-function normalize(model) {
-  let s = (model ?? "").toLowerCase().trim();
-  s = s.replace(/^.*\//, "");
-  s = s.split("|").pop() ?? s;
-  s = s.split(":").pop() ?? s;
-  s = s.replace(/\s+/g, "-");
-  s = s.replace(/-preview/g, "");
-  if (!s.match(/^qwen-(?:plus|flash|vl-max)-latest$/) && !s.match(/^kimi-k2-\d{4}$/)) {
-    s = s.replace(
-      /-(?:\d{4,}|\d+x\d+b|v\d+(?:\.\d+)*|(?<=-[^-]+-)\d+(?:\.\d+)+|latest|exp)$/g,
-      ""
-    );
-  }
-  s = s.replace(/-(?:\d?bit|int[48]|bf16|fp16|q[45]|quantized)$/g, "");
-  return s;
-}
-__name(normalize, "normalize");
-var PATTERNS = [
-  // -------------------
-  // Google Gemini
-  // -------------------
-  [/^gemini-3/, LIMITS["1m"]],
-  // Gemini 3.x (Pro, Flash, 3.1, etc.): 1M
-  [/^gemini-/, LIMITS["1m"]],
-  // Gemini fallback (1.5, 2.x): 1M
-  // -------------------
-  // OpenAI
-  // -------------------
-  [/^gpt-5/, LIMITS["272k"]],
-  // GPT-5.x: 272K input (400K total - 128K output)
-  [/^gpt-/, LIMITS["128k"]],
-  // GPT fallback (4o, 4.1, etc.): 128K
-  [/^o\d/, LIMITS["200k"]],
-  // o-series (o3, o4-mini, etc.): 200K
-  // -------------------
-  // Anthropic Claude
-  // -------------------
-  [/^claude-/, LIMITS["200k"]],
-  // All Claude models: 200K
-  // -------------------
-  // Alibaba / Qwen
-  // -------------------
-  // Commercial API models (1,000,000 context)
-  [/^qwen3-coder-plus/, LIMITS["1m"]],
-  [/^qwen3-coder-flash/, LIMITS["1m"]],
-  [/^qwen3\.\d/, LIMITS["1m"]],
-  [/^qwen-plus-latest$/, LIMITS["1m"]],
-  [/^qwen-flash-latest$/, LIMITS["1m"]],
-  [/^coder-model$/, LIMITS["1m"]],
-  // Commercial API models (256K context)
-  [/^qwen3-max/, LIMITS["256k"]],
-  // Open-source Qwen3 variants: 256K native
-  [/^qwen3-coder-/, LIMITS["256k"]],
-  // Qwen fallback (VL, turbo, plus, 2.5, etc.): 128K
-  [/^qwen/, LIMITS["256k"]],
-  // -------------------
-  // DeepSeek
-  // -------------------
-  [/^deepseek-v4/, LIMITS["1m"]],
-  // DeepSeek V4 (flash, pro): 1M
-  [/^deepseek/, LIMITS["128k"]],
-  // -------------------
-  // Zhipu GLM
-  // -------------------
-  // 1M context is the forward default for new GLM releases (GLM-5.2+, GLM-6.x,
-  // and beyond) so they need no future code change. Confirmed 200K families
-  // (GLM-5 / 5.0 / 5.1, GLM-4.x and older) are pinned explicitly first.
-  [/^glm-5(\.[01])?(-|$)/, 202752],
-  // GLM-5 / 5.0 / 5.1: 200K
-  [/^glm-(?:[5-9]|\d{2,})/, LIMITS["1m"]],
-  // GLM-5.2+, 6.x..9.x, 10.x+: 1M
-  [/^glm-/, 202752],
-  // GLM <=4.x / non-numeric fallback: 200K
-  // -------------------
-  // MiniMax
-  // -------------------
-  [/^minimax-m3/i, LIMITS["1m"]],
-  // MiniMax-M3: 1,000,000
-  [/^minimax-m2\.5/i, LIMITS["192k"]],
-  // MiniMax-M2.5: 196,608
-  [/^minimax-/i, LIMITS["200k"]],
-  // MiniMax fallback: 200K
-  // -------------------
-  // Moonshot / Kimi
-  // -------------------
-  [/^kimi-/, LIMITS["256k"]],
-  // Kimi fallback: 256K
-  // -------------------
-  // ByteDance Seed-OSS (512K)
-  // -------------------
-  [/^seed-oss/, LIMITS["512k"]]
-];
-var OUTPUT_PATTERNS = [
-  // Google Gemini
-  [/^gemini-3/, LIMITS["64k"]],
-  // Gemini 3.x: 64K
-  [/^gemini-/, LIMITS["8k"]],
-  // Gemini fallback: 8K
-  // OpenAI
-  [/^gpt-5/, LIMITS["128k"]],
-  // GPT-5.x: 128K
-  [/^gpt-/, LIMITS["16k"]],
-  // GPT fallback: 16K
-  [/^o\d/, LIMITS["128k"]],
-  // o-series: 128K
-  // Anthropic Claude
-  [/^claude-opus-4-6/, LIMITS["128k"]],
-  // Opus 4.6: 128K
-  [/^claude-sonnet-4-6/, LIMITS["64k"]],
-  // Sonnet 4.6: 64K
-  [/^claude-/, LIMITS["64k"]],
-  // Claude fallback: 64K
-  // Alibaba / Qwen
-  [/^qwen3\.\d/, LIMITS["64k"]],
-  [/^coder-model$/, LIMITS["64k"]],
-  [/^qwen/, LIMITS["32k"]],
-  // Qwen fallback (VL, turbo, plus, etc.): 32K
-  // DeepSeek
-  [/^deepseek-v4/, LIMITS["384k"]],
-  // DeepSeek V4 (flash, pro): 384K
-  [/^deepseek-reasoner/, LIMITS["64k"]],
-  [/^deepseek-r1/, LIMITS["64k"]],
-  [/^deepseek-chat/, LIMITS["8k"]],
-  // Zhipu GLM
-  [/^glm-5(?:\.\d+)?(?:-|$)/, LIMITS["128k"]],
-  [/^glm-4\.7/, LIMITS["16k"]],
-  // MiniMax
-  [/^minimax-m2\.5/i, LIMITS["64k"]],
-  // Kimi
-  [/^kimi-k2\.5/, LIMITS["32k"]]
-];
-function findTokenLimit(model, type = "input") {
-  const norm = normalize(model);
-  const patterns = type === "output" ? OUTPUT_PATTERNS : PATTERNS;
-  for (const [regex, limit] of patterns) {
-    if (regex.test(norm)) {
-      return limit;
-    }
-  }
-  return void 0;
-}
-__name(findTokenLimit, "findTokenLimit");
-function hasExplicitOutputLimit(model) {
-  const norm = normalize(model);
-  return OUTPUT_PATTERNS.some(([regex]) => regex.test(norm));
-}
-__name(hasExplicitOutputLimit, "hasExplicitOutputLimit");
-function knownTokenLimit(model, type = "input") {
-  return findTokenLimit(model, type);
-}
-__name(knownTokenLimit, "knownTokenLimit");
-function tokenLimit(model, type = "input") {
-  return knownTokenLimit(model, type) ?? (type === "output" ? DEFAULT_OUTPUT_TOKEN_LIMIT : DEFAULT_TOKEN_LIMIT);
-}
-__name(tokenLimit, "tokenLimit");
-
-// packages/core/src/core/openaiContentGenerator/constants.ts
-init_esbuild_shims();
-var DEFAULT_TIMEOUT = 12e4;
-var DEFAULT_STREAM_IDLE_TIMEOUT_MS = 12e4;
-var QWEN_STREAM_IDLE_TIMEOUT_MS_ENV = "QWEN_STREAM_IDLE_TIMEOUT_MS";
-var MAX_STREAM_IDLE_TIMEOUT_MS = 2147483647;
-var DEFAULT_MAX_RETRIES = 3;
-var DEFAULT_OPENAI_BASE_URL = "https://api.openai.com/v1";
-var DEFAULT_DASHSCOPE_BASE_URL = "https://dashscope.aliyuncs.com/compatible-mode/v1";
-var DASHSCOPE_PROXY_BASE_URL = process.env["DASHSCOPE_PROXY_BASE_URL"];
-
 // packages/core/src/utils/runtimeFetchOptions.ts
 init_esbuild_shims();
 var import_undici = __toESM(require_undici(), 1);
 var debugLogger = createDebugLogger("RUNTIME_FETCH");
+function isTlsVerificationDisabled() {
+  const flag = process.env["QWEN_TLS_INSECURE"];
+  if (flag !== void 0 && /^(1|true|yes|on)$/i.test(flag.trim())) {
+    return true;
+  }
+  return process.env["NODE_TLS_REJECT_UNAUTHORIZED"] === "0";
+}
+__name(isTlsVerificationDisabled, "isTlsVerificationDisabled");
 function detectRuntime() {
   if (typeof process !== "undefined" && process.versions?.["bun"]) {
     return "bun";
@@ -19224,8 +19266,9 @@ var NO_DISPATCHER_FALLBACK = {
   openai: void 0,
   anthropic: {}
 };
-function getOrCreateSharedDispatcher(proxyUrl) {
-  const cached = dispatcherCache.get(proxyUrl);
+function getOrCreateSharedDispatcher(proxyUrl, insecure = isTlsVerificationDisabled()) {
+  const cacheKey = insecure ? `${proxyUrl}#insecure` : proxyUrl;
+  const cached = dispatcherCache.get(cacheKey);
   if (cached) {
     return cached;
   }
@@ -19233,9 +19276,16 @@ function getOrCreateSharedDispatcher(proxyUrl) {
     uri: proxyUrl,
     headersTimeout: 0,
     bodyTimeout: 0,
-    keepAliveTimeout: 6e4
+    keepAliveTimeout: 6e4,
+    // For a ProxyAgent the upstream (origin) TLS handshake is governed by
+    // `requestTls`, not `connect`; `proxyTls` covers an HTTPS proxy whose own
+    // certificate is self-signed. Disable verification on both when opted in.
+    ...insecure ? {
+      requestTls: { rejectUnauthorized: false },
+      proxyTls: { rejectUnauthorized: false }
+    } : {}
   });
-  dispatcherCache.set(proxyUrl, dispatcher);
+  dispatcherCache.set(cacheKey, dispatcher);
   return dispatcher;
 }
 __name(getOrCreateSharedDispatcher, "getOrCreateSharedDispatcher");
@@ -19475,21 +19525,25 @@ function recordProxyFailure(hostname) {
 }
 __name(recordProxyFailure, "recordProxyFailure");
 function buildFetchOptionsWithDispatcher(sdkType, proxyUrl) {
+  const insecure = isTlsVerificationDisabled();
   if (!proxyUrl) {
-    const NO_PROXY_KEY = "__no_proxy__";
+    const NO_PROXY_KEY = insecure ? "__no_proxy__#insecure" : "__no_proxy__";
     let dispatcher = dispatcherCache.get(NO_PROXY_KEY);
     if (!dispatcher) {
       dispatcher = new import_undici.Agent({
         headersTimeout: 0,
         bodyTimeout: 0,
-        keepAliveTimeout: 6e4
+        keepAliveTimeout: 6e4,
+        // For a direct (non-proxy) Agent, `connect` options flow straight to
+        // the TLS connector, so this disables upstream cert verification.
+        ...insecure ? { connect: { rejectUnauthorized: false } } : {}
       });
       dispatcherCache.set(NO_PROXY_KEY, dispatcher);
     }
     return { fetchOptions: { dispatcher }, fetch: import_undici.fetch };
   }
   try {
-    const dispatcher = getOrCreateSharedDispatcher(proxyUrl);
+    const dispatcher = getOrCreateSharedDispatcher(proxyUrl, insecure);
     return { fetchOptions: { dispatcher }, fetch: import_undici.fetch };
   } catch (error) {
     const hostname = extractHostnameFromProxyUrl(proxyUrl);
@@ -19505,118 +19559,20 @@ function buildFetchOptionsWithDispatcher(sdkType, proxyUrl) {
 }
 __name(buildFetchOptionsWithDispatcher, "buildFetchOptionsWithDispatcher");
 
-// packages/core/src/utils/request-tokenizer/textTokenizer.ts
-init_esbuild_shims();
-var TextTokenizer = class {
-  static {
-    __name(this, "TextTokenizer");
-  }
-  /**
-   * Calculate tokens for text content
-   *
-   * @param text - The text to estimate tokens for
-   * @returns The estimated token count
-   */
-  async calculateTokens(text) {
-    return this.calculateTokensSync(text);
-  }
-  /**
-   * Calculate tokens for multiple text strings
-   *
-   * @param texts - Array of text strings to estimate tokens for
-   * @returns Array of token counts corresponding to each input text
-   */
-  async calculateTokensBatch(texts) {
-    return texts.map((text) => this.calculateTokensSync(text));
-  }
-  calculateTokensSync(text) {
-    if (!text || text.length === 0) {
-      return 0;
-    }
-    let asciiChars = 0;
-    let nonAsciiChars = 0;
-    for (let i = 0; i < text.length; i++) {
-      const charCode = text.charCodeAt(i);
-      if (charCode < 128) {
-        asciiChars++;
-      } else {
-        nonAsciiChars++;
-      }
-    }
-    const tokens = asciiChars / 4 + nonAsciiChars * 1.1;
-    return Math.ceil(tokens);
-  }
-};
-
-// packages/core/src/utils/request-tokenizer/supportedImageFormats.ts
-init_esbuild_shims();
-var SUPPORTED_IMAGE_MIME_TYPES = [
-  "image/bmp",
-  "image/gif",
-  "image/jpeg",
-  "image/jpg",
-  // Alternative MIME type for JPEG
-  "image/png",
-  "image/tiff",
-  "image/webp",
-  "image/heic"
-];
-function isSupportedImageMimeType(mimeType) {
-  return SUPPORTED_IMAGE_MIME_TYPES.includes(
-    mimeType
-  );
-}
-__name(isSupportedImageMimeType, "isSupportedImageMimeType");
-function getSupportedImageFormatsString() {
-  return SUPPORTED_IMAGE_MIME_TYPES.map(
-    (type) => type.replace("image/", "").toUpperCase()
-  ).join(", ");
-}
-__name(getSupportedImageFormatsString, "getSupportedImageFormatsString");
-function getUnsupportedImageFormatWarning() {
-  return `Only the following image formats are supported: ${getSupportedImageFormatsString()}. Other formats may not work as expected.`;
-}
-__name(getUnsupportedImageFormatWarning, "getUnsupportedImageFormatWarning");
-
 export {
   require_undici,
-  DEFAULT_TOKEN_LIMIT,
-  DEFAULT_OUTPUT_TOKEN_LIMIT,
-  ESCALATED_MAX_TOKENS,
-  parsePositiveIntegerEnvValue,
-  normalize,
-  hasExplicitOutputLimit,
-  knownTokenLimit,
-  tokenLimit,
-  DEFAULT_TIMEOUT,
-  DEFAULT_STREAM_IDLE_TIMEOUT_MS,
-  QWEN_STREAM_IDLE_TIMEOUT_MS_ENV,
-  MAX_STREAM_IDLE_TIMEOUT_MS,
-  DEFAULT_MAX_RETRIES,
-  DEFAULT_OPENAI_BASE_URL,
-  DEFAULT_DASHSCOPE_BASE_URL,
-  DASHSCOPE_PROXY_BASE_URL,
+  isTlsVerificationDisabled,
   detectRuntime,
   buildRuntimeFetchOptions,
   getOrCreateSharedDispatcher,
   redactProxyCredentials,
-  redactProxyError,
-  TextTokenizer,
-  SUPPORTED_IMAGE_MIME_TYPES,
-  isSupportedImageMimeType,
-  getSupportedImageFormatsString,
-  getUnsupportedImageFormatWarning
+  redactProxyError
 };
 /**
  * @license
  * Copyright 2025 Qwen Team
  * SPDX-License-Identifier: Apache-2.0
  */
-/**
- * @license
- * Copyright 2025 Qwen
- * SPDX-License-Identifier: Apache-2.0
- */
 /*! Bundled license information:
 
 undici/lib/web/fetch/body.js: