@qwen-code/qwen-code 0.19.4 → 0.19.5-nightly.20260703.b16baf1ff

package/chunks/{run-qwen-serve-AGLZ642J.js → run-qwen-serve-AAA53KS4.js}

@@ -3,9 +3,6 @@
 import {
   findCliEntryPath
 } from "./chunk-AHNXYU4O.js";
-import {
-  RUNTIME_STARTUP_CANCELLED_MESSAGE
-} from "./chunk-GHOTR7HL.js";
 import {
   CAPABILITIES_SCHEMA_VERSION,
   ClientMcpSenderRegistry,
@@ -26,33 +23,36 @@ import {
   positiveFiniteOrNull,
   require_express,
   resolveWebShellDir
-} from "./chunk-B7KGXIPZ.js";
+} from "./chunk-YCU7QV7Q.js";
 import {
   isLoopbackBind
 } from "./chunk-RNBYOUGV.js";
 import "./chunk-3HX5LZ6R.js";
 import "./chunk-7RYW5LQV.js";
 import {
-  getCliVersion
-} from "./chunk-W6X4FGWX.js";
-import "./chunk-EWALXUAD.js";
+  RUNTIME_STARTUP_CANCELLED_MESSAGE
+} from "./chunk-GHOTR7HL.js";
 import {
-  canonicalizeWorkspace
-} from "./chunk-SEZC2725.js";
+  loadServeFastPathSettings,
+  preResolveServeFastPathHomeEnvOverrides
+} from "./chunk-DNV4FSN5.js";
 import {
   QWEN_SERVER_TOKEN_ENV
-} from "./chunk-EDAGQADF.js";
+} from "./chunk-S6RLAIUR.js";
 import {
   channelSelectionNames
 } from "./chunk-MX2YXRER.js";
+import "./chunk-EWALXUAD.js";
 import {
-  loadServeFastPathSettings,
-  preResolveServeFastPathHomeEnvOverrides
-} from "./chunk-KKQWC6WS.js";
+  canonicalizeWorkspace
+} from "./chunk-SEZC2725.js";
 import {
   getGlobalQwenDirLite,
   resolveConfigPathLite
-} from "./chunk-PPFWEV7G.js";
+} from "./chunk-4RQIB5UZ.js";
+import {
+  getCliVersion
+} from "./chunk-7XS7CMSU.js";
 import {
   writeStderrLine,
   writeStdoutLine
@@ -80,7 +80,9 @@ import {
 // packages/cli/src/serve/run-qwen-serve.ts
 init_esbuild_shims();
 var import_express = __toESM(require_express(), 1);
+import { X509Certificate } from "node:crypto";
 import * as fs from "node:fs";
+import * as https from "node:https";
 import * as path from "node:path";
 import { performance } from "node:perf_hooks";
 
@@ -529,8 +531,8 @@ __name(withSettingsLock, "withSettingsLock");
 var channelWorkerRuntimePromise;
 async function loadChannelWorkerRuntime() {
   channelWorkerRuntimePromise ??= Promise.all([
-    import("./channel-worker-supervisor-A74FV522.js"),
-    import("./pidfile-AWTL4C63.js")
+    import("./channel-worker-supervisor-C2J3TIOV.js"),
+    import("./pidfile-NPZV5ZIA.js")
   ]).then(([supervisor, pidfile]) => ({
     createChannelWorkerSupervisor: supervisor.createChannelWorkerSupervisor,
     channelServicePidfile: pidfile
@@ -601,7 +603,7 @@ function shouldPreheatBridge(deps) {
 __name(shouldPreheatBridge, "shouldPreheatBridge");
 var coreRuntimePromise;
 function loadCoreRuntime() {
-  coreRuntimePromise ??= import("./src-OVZLTVVM.js");
+  coreRuntimePromise ??= import("./src-ZWPLTWTV.js");
   return coreRuntimePromise;
 }
 __name(loadCoreRuntime, "loadCoreRuntime");
@@ -631,9 +633,9 @@ __name(resolveDaemonLogBaseDirForRun, "resolveDaemonLogBaseDirForRun");
 var settingsRuntimePromise;
 function loadSettingsRuntimeModules() {
   settingsRuntimePromise ??= Promise.all([
-    import("./settings-DR4V6L5Y.js"),
-    import("./loadedSettingsAdapter-OKMQFGGG.js"),
-    import("./trustedFolders-TEPGM5YL.js")
+    import("./settings-X5GXXGKH.js"),
+    import("./loadedSettingsAdapter-QP3XBMQI.js"),
+    import("./trustedFolders-DYAOFXN2.js")
   ]).then(([settings, loadedSettingsAdapter, trustedFolders]) => ({
     settings,
     loadedSettingsAdapter,
@@ -650,15 +652,17 @@ async function loadServeRuntimeModules() {
     workspaceModule,
     workspaceTypesModule,
     daemonStatusProviderModule,
-    workspaceProvidersStatusModule
+    workspaceProvidersStatusModule,
+    workspaceSkillsStatusModule
   ] = await Promise.all([
-    import("./server-4AGEK2HC.js"),
-    import("./bridge-AUHNFOUS.js"),
-    import("./spawnChannel-VN5LJV7Z.js"),
-    import("./workspace-service-VKBI2KZD.js"),
+    import("./server-MFMOYMEB.js"),
+    import("./bridge-AZZAYKI2.js"),
+    import("./spawnChannel-XLTVHAT6.js"),
+    import("./workspace-service-FATHYK5C.js"),
     import("./types-QX5C3CHJ.js"),
-    import("./daemon-status-provider-V5UY7O7J.js"),
-    import("./workspace-providers-status-DM2XANVB.js")
+    import("./daemon-status-provider-YXWNGOAF.js"),
+    import("./workspace-providers-status-UUIBOTKI.js"),
+    import("./workspace-skills-status-KIC3KYPR.js")
   ]);
   return {
     createServeApp: serverModule.createServeApp,
@@ -669,7 +673,8 @@ async function loadServeRuntimeModules() {
     createDaemonWorkspaceService: workspaceModule.createDaemonWorkspaceService,
     WorkspaceSettingsPartialPersistError: workspaceTypesModule.WorkspaceSettingsPartialPersistError,
     createDaemonStatusProvider: daemonStatusProviderModule.createDaemonStatusProvider,
-    createWorkspaceProvidersStatusProvider: workspaceProvidersStatusModule.createWorkspaceProvidersStatusProvider
+    createWorkspaceProvidersStatusProvider: workspaceProvidersStatusModule.createWorkspaceProvidersStatusProvider,
+    createWorkspaceSkillsStatusProvider: workspaceSkillsStatusModule.createWorkspaceSkillsStatusProvider
   };
 }
 __name(loadServeRuntimeModules, "loadServeRuntimeModules");
@@ -766,8 +771,23 @@ function installSameOriginOriginStrip(app, getPort) {
           `http://127.0.0.1:${port}`,
           `http://localhost:${port}`,
           `http://[::1]:${port}`,
-          `http://host.docker.internal:${port}`
+          `http://host.docker.internal:${port}`,
+          `https://127.0.0.1:${port}`,
+          `https://localhost:${port}`,
+          `https://[::1]:${port}`,
+          `https://host.docker.internal:${port}`
         ]);
+        if (port === 80 || port === 443) {
+          for (const host of [
+            "127.0.0.1",
+            "localhost",
+            "[::1]",
+            "host.docker.internal"
+          ]) {
+            cachedSelfOrigins.add(`http://${host}`);
+            cachedSelfOrigins.add(`https://${host}`);
+          }
+        }
       }
       if (cachedSelfOrigins.has(origin)) {
         delete req.headers.origin;
@@ -1179,6 +1199,50 @@ async function runQwenServe(optsIn, deps = {}) {
       `Invalid --hostname "${opts.hostname}": looks like a "host:port" combination. Use --port for the port, e.g. "--hostname ${host} --port ${port}".`
     );
   }
+  let tlsOptions;
+  if (opts.tlsCert && !opts.tlsKey || !opts.tlsCert && opts.tlsKey) {
+    throw new Error(
+      `--tls-cert and --tls-key must be provided together (got only --tls-${opts.tlsCert ? "cert" : "key"}).`
+    );
+  }
+  if (opts.tlsCert && opts.tlsKey) {
+    let cert;
+    let key;
+    try {
+      cert = fs.readFileSync(opts.tlsCert);
+    } catch (err) {
+      throw new Error(
+        `Failed to read --tls-cert "${opts.tlsCert}": ${err instanceof Error ? err.message : String(err)}`
+      );
+    }
+    try {
+      key = fs.readFileSync(opts.tlsKey);
+    } catch (err) {
+      throw new Error(
+        `Failed to read --tls-key "${opts.tlsKey}": ${err instanceof Error ? err.message : String(err)}`
+      );
+    }
+    let x509;
+    try {
+      x509 = new X509Certificate(cert);
+    } catch (err) {
+      throw new Error(
+        `--tls-cert "${opts.tlsCert}" is not a valid certificate: ${err instanceof Error ? err.message : String(err)}`
+      );
+    }
+    const now = Date.now();
+    if (new Date(x509.validTo).getTime() < now) {
+      throw new Error(
+        `--tls-cert "${opts.tlsCert}" expired on ${x509.validTo}. Renew the certificate and restart.`
+      );
+    }
+    if (new Date(x509.validFrom).getTime() > now) {
+      throw new Error(
+        `--tls-cert "${opts.tlsCert}" is not yet valid (validFrom: ${x509.validFrom}). Check the certificate's notBefore date or the system clock.`
+      );
+    }
+    tlsOptions = { cert, key };
+  }
   if (!isLoopbackBind(opts.hostname) && !token) {
     throw new Error(
       `Refusing to bind ${opts.hostname}:${opts.port} without a bearer token. Set ${QWEN_SERVER_TOKEN_ENV} or pass --token, or rebind to loopback (127.0.0.1, localhost, ::1, or [::1]).`
@@ -1397,14 +1461,13 @@ async function runQwenServe(optsIn, deps = {}) {
   });
   let channelWorker = createDisabledChannelWorkerSupervisor();
   const getChannelWorkerSnapshot = /* @__PURE__ */ __name(() => channelWorker.snapshot(), "getChannelWorkerSnapshot");
-  const writeChannelWorkerPidfile = /* @__PURE__ */ __name(() => {
+  const writeChannelWorkerPidfile = /* @__PURE__ */ __name((snapshot = channelWorker.snapshot(), options = {}) => {
     if (!opts.channelSelection || !channelServicePidfile) return;
-    const snapshot = channelWorker.snapshot();
     try {
       channelServicePidfile.writeServeServiceInfo({
         channels: snapshot.channels,
         servePid: process.pid,
-        workerPid: snapshot.pid
+        ...!options.clearWorkerPid && snapshot.pid !== void 0 ? { workerPid: snapshot.pid } : {}
       });
     } catch (err) {
       daemonLog.warn(
@@ -1518,6 +1581,7 @@ async function runQwenServe(optsIn, deps = {}) {
     });
     const statusProvider = runtime.createDaemonStatusProvider();
     const workspaceProvidersStatusProvider = runtime.createWorkspaceProvidersStatusProvider();
+    const workspaceSkillsStatusProvider = runtime.createWorkspaceSkillsStatusProvider();
     const clientMcpSenderRegistry = new ClientMcpSenderRegistry();
     const persistDisabledToolsFn = /* @__PURE__ */ __name((workspace, toolName, enabled) => withSettingsLock(workspace, async () => {
       const fresh = settingsRuntime.settings.loadSettings(workspace);
@@ -1600,6 +1664,7 @@ async function runQwenServe(optsIn, deps = {}) {
       contextFilename: contextFilenameForInit ?? "QWEN.md",
       statusProvider,
       workspaceProvidersStatusProvider,
+      workspaceSkillsStatusProvider,
       isChannelLive: /* @__PURE__ */ __name(() => bridge.isChannelLive(), "isChannelLive"),
       persistDisabledTools: persistDisabledToolsFn,
       persistSetting: persistSettingFn,
@@ -1726,7 +1791,7 @@ async function runQwenServe(optsIn, deps = {}) {
   }
   reserveChannelServicePidfile();
   return await new Promise((resolve, reject) => {
-    const server = app.listen(opts.port, listenHostname, () => {
+    const onListening = /* @__PURE__ */ __name(() => {
       startup.listenerReadyAt = (/* @__PURE__ */ new Date()).toISOString();
       startup.processToListenMs = Math.round(process.uptime() * 1e3);
       startup.runQwenServeToListenMs = Math.round(
@@ -1740,7 +1805,8 @@ async function runQwenServe(optsIn, deps = {}) {
       }
       const addr = server.address();
       actualPort = typeof addr === "object" && addr ? addr.port : opts.port;
-      const url = `http://${formatHostForUrl(opts.hostname)}:${actualPort}`;
+      const scheme = tlsOptions ? "https" : "http";
+      const url = `${scheme}://${formatHostForUrl(opts.hostname)}:${actualPort}`;
       try {
         if (opts.channelSelection) {
           const createSupervisor = deps.channelWorkerSupervisorFactory ?? channelRuntime?.createChannelWorkerSupervisor;
@@ -1755,11 +1821,22 @@ async function runQwenServe(optsIn, deps = {}) {
             ...token ? { daemonToken: token } : {},
             workspace: boundWorkspace,
             selection: opts.channelSelection,
+            onReady: /* @__PURE__ */ __name((snapshot) => {
+              writeChannelWorkerPidfile(snapshot);
+            }, "onReady"),
+            onLog: /* @__PURE__ */ __name(({ stream, line }) => {
+              const message = `channel worker ${stream}: ${line}`;
+              if (stream === "stderr") {
+                daemonLog.warn(message);
+              } else {
+                daemonLog.info(message);
+              }
+            }, "onLog"),
             onExit: /* @__PURE__ */ __name((snapshot) => {
               daemonLog.warn(
-                `channel worker exited (state=${snapshot.state}, pid=${snapshot.pid ?? "unknown"}, code=${snapshot.exitCode ?? "null"}, signal=${snapshot.signal ?? "null"}, error=${snapshot.error ?? "none"})`
+                `channel worker exited (state=${snapshot.state}, pid=${snapshot.pid ?? "unknown"}, code=${snapshot.exitCode ?? "null"}, signal=${snapshot.signal ?? "null"}, error=${snapshot.error ?? "none"}, restartCount=${snapshot.restartCount ?? 0}, nextRestartAt=${snapshot.nextRestartAt ?? "none"}, staleHeartbeatAt=${snapshot.staleHeartbeatAt ?? "none"})`
               );
-              removeCurrentServePidfile();
+              writeChannelWorkerPidfile(snapshot, { clearWorkerPid: true });
             }, "onExit")
           });
         }
@@ -1894,7 +1971,6 @@ async function runQwenServe(optsIn, deps = {}) {
         if (opts.channelSelection) {
           await channelWorker.start();
           if (runtimeStartupSettled) return;
-          writeChannelWorkerPidfile();
         }
         if (runtimeStartupSettled) return;
         runtimeStartupSettled = true;
@@ -2172,7 +2248,24 @@ async function runQwenServe(optsIn, deps = {}) {
           }
         );
       }
-    });
+    }, "onListening");
+    let server;
+    if (tlsOptions) {
+      let httpsServer;
+      try {
+        httpsServer = https.createServer(tlsOptions, app);
+      } catch (err) {
+        reject(
+          new Error(
+            `--tls-cert "${opts.tlsCert}" and --tls-key "${opts.tlsKey}" could not be loaded (do they match?): ${err instanceof Error ? err.message : String(err)}`
+          )
+        );
+        return;
+      }
+      server = httpsServer.listen(opts.port, listenHostname, onListening);
+    } else {
+      server = app.listen(opts.port, listenHostname, onListening);
+    }
     server.once("error", (err) => {
       removeCurrentServePidfile();
       reject(err);

package/chunks/{scheduler-TURO7NGY.js → scheduler-SPGJ7ILO.js}

@@ -6,40 +6,41 @@ import {
 import {
   FILE_HISTORY_DIR,
   getSubagentsRootDir
-} from "./chunk-BFG6OZN7.js";
+} from "./chunk-WWOVV2PW.js";
 import "./chunk-5P5XGNYH.js";
-import "./chunk-K5PGHDBN.js";
 import "./chunk-SKAZWEV5.js";
+import "./chunk-K5PGHDBN.js";
 import "./chunk-QOMAHFYI.js";
 import "./chunk-G7OQ3RFJ.js";
 import "./chunk-LKWAVAB5.js";
-import "./chunk-MEQWZGK5.js";
-import "./chunk-UANCYOOQ.js";
+import "./chunk-L7OJ3ZO3.js";
+import "./chunk-R6RI2HIC.js";
 import "./chunk-2MPVVENX.js";
 import "./chunk-ZTQ26VBE.js";
 import "./chunk-SJBIFVD2.js";
 import "./chunk-MLZQVCF3.js";
-import "./chunk-S5EQPDTM.js";
 import "./chunk-LQ7TMOCE.js";
 import "./chunk-E5A7LHNN.js";
+import "./chunk-BPFJQGY7.js";
 import "./chunk-GO6LNQXT.js";
 import "./chunk-B236XPGF.js";
 import "./chunk-YXK4GPYO.js";
 import "./chunk-TOAUDIS7.js";
 import "./chunk-NPQWQYU6.js";
-import "./chunk-HJDF3ZVU.js";
+import "./chunk-UEGNXWAX.js";
 import "./chunk-E6US47KI.js";
 import "./chunk-UWCTAVOD.js";
 import "./chunk-OFEVLU4C.js";
 import "./chunk-OMX7CUOE.js";
 import "./chunk-MOUXUCXQ.js";
 import "./chunk-BZHLWC6T.js";
-import "./chunk-UQFP2FEF.js";
-import "./chunk-4VZH35PN.js";
+import "./chunk-DG573EOO.js";
+import "./chunk-MTNTVOJR.js";
 import "./chunk-TENOUWY2.js";
 import "./chunk-GLPV75ES.js";
 import "./chunk-22IFUCVR.js";
 import "./chunk-T42ACHFI.js";
+import "./chunk-SIUQ3YYX.js";
 import "./chunk-YTFBURQD.js";
 import "./chunk-YPCPZSZB.js";
 import "./chunk-IRJWHZWU.js";

package/chunks/{send-message-3S2NYS3O.js → send-message-33PYFMCT.js}

@@ -3,6 +3,10 @@
 import {
   LEADER_NAME
 } from "./chunk-E5A7LHNN.js";
+import {
+  getPlanRequiredTeammatePreApprovalMessage,
+  isPlanRequiredTeammateAwaitingApproval
+} from "./chunk-BPFJQGY7.js";
 import {
   getAgentName,
   isTeammate
@@ -12,7 +16,7 @@ import {
   BaseToolInvocation,
   ToolDisplayNames,
   ToolNames
-} from "./chunk-4VZH35PN.js";
+} from "./chunk-MTNTVOJR.js";
 import "./chunk-AVQDCKNF.js";
 import "./chunk-Z2Z3GUXZ.js";
 import {
@@ -52,6 +56,16 @@ var SendMessageInvocation = class extends BaseToolInvocation {
     return "ask";
   }
   async execute(_signal) {
+    if (isPlanRequiredTeammateAwaitingApproval(this.config)) {
+      const msg = getPlanRequiredTeammatePreApprovalMessage(
+        ToolNames.SEND_MESSAGE
+      );
+      return {
+        llmContent: msg,
+        returnDisplay: msg,
+        error: { message: msg }
+      };
+    }
     if (this.params.task_id) {
       const registry = this.config.getBackgroundTaskRegistry();
       const entry = registry.get(this.params.task_id);

package/chunks/{serve-5DAMOIDW.js → serve-37UIHUYP.js}

@@ -3,51 +3,52 @@
 import {
   maybeOpenWebShellBrowser,
   serveCommand
-} from "./chunk-ND25GXEU.js";
+} from "./chunk-DLJKEPXB.js";
 import "./chunk-BJBWRCSK.js";
+import "./chunk-MX2YXRER.js";
 import "./chunk-ALX6BUYW.js";
-import "./chunk-MKHC4BYZ.js";
-import "./chunk-UQYOMM6J.js";
+import "./chunk-XAVV2JAM.js";
+import "./chunk-L4CYPEA7.js";
 import "./chunk-TLRYABYP.js";
-import "./chunk-MX2YXRER.js";
-import "./chunk-PPFWEV7G.js";
-import "./chunk-ZJP5T7IA.js";
+import "./chunk-4RQIB5UZ.js";
+import "./chunk-ODPWORQZ.js";
 import "./chunk-Y6Z2O3WR.js";
 import "./chunk-QYUE6W3T.js";
-import "./chunk-BFG6OZN7.js";
+import "./chunk-WWOVV2PW.js";
 import "./chunk-5P5XGNYH.js";
-import "./chunk-K5PGHDBN.js";
 import "./chunk-SKAZWEV5.js";
+import "./chunk-K5PGHDBN.js";
 import "./chunk-QOMAHFYI.js";
 import "./chunk-G7OQ3RFJ.js";
 import "./chunk-LKWAVAB5.js";
-import "./chunk-MEQWZGK5.js";
-import "./chunk-UANCYOOQ.js";
+import "./chunk-L7OJ3ZO3.js";
+import "./chunk-R6RI2HIC.js";
 import "./chunk-2MPVVENX.js";
 import "./chunk-ZTQ26VBE.js";
 import "./chunk-SJBIFVD2.js";
 import "./chunk-MLZQVCF3.js";
-import "./chunk-S5EQPDTM.js";
 import "./chunk-LQ7TMOCE.js";
 import "./chunk-E5A7LHNN.js";
+import "./chunk-BPFJQGY7.js";
 import "./chunk-GO6LNQXT.js";
 import "./chunk-B236XPGF.js";
 import "./chunk-YXK4GPYO.js";
 import "./chunk-TOAUDIS7.js";
 import "./chunk-NPQWQYU6.js";
-import "./chunk-HJDF3ZVU.js";
+import "./chunk-UEGNXWAX.js";
 import "./chunk-E6US47KI.js";
 import "./chunk-UWCTAVOD.js";
 import "./chunk-OFEVLU4C.js";
 import "./chunk-OMX7CUOE.js";
 import "./chunk-MOUXUCXQ.js";
 import "./chunk-BZHLWC6T.js";
-import "./chunk-UQFP2FEF.js";
-import "./chunk-4VZH35PN.js";
+import "./chunk-DG573EOO.js";
+import "./chunk-MTNTVOJR.js";
 import "./chunk-TENOUWY2.js";
 import "./chunk-GLPV75ES.js";
 import "./chunk-22IFUCVR.js";
 import "./chunk-T42ACHFI.js";
+import "./chunk-SIUQ3YYX.js";
 import "./chunk-YTFBURQD.js";
 import "./chunk-YPCPZSZB.js";
 import "./chunk-IRJWHZWU.js";