@qwen-code/qwen-code 0.19.9-nightly.20260714.9dd8389eb → 0.19.10

package/chunks/{chunk-J2TDDOSM.js → chunk-L37RC7MQ.js}

@@ -434,7 +434,7 @@ var WorkspaceRegistrationStore = class {
     return removed;
   }
   async update(mutate) {
-    const { atomicWriteFile } = await import("./src-55DZWDAK.js");
+    const { atomicWriteFile } = await import("./src-USZKPUOC.js");
     return withInProcessLock(this.filePath, async () => {
       const lock = await acquireFileLock(this.filePath);
       let committed = false;

package/chunks/{chunk-V75IOTWF.js → chunk-L62SEJWY.js}

@@ -2,19 +2,19 @@
 "use strict";
 import {
   getErrorMessage
-} from "./chunk-SUWGUGAD.js";
+} from "./chunk-65N2J6V2.js";
 import {
   extensionToOutputString,
   getExtensionManager
-} from "./chunk-6HHAADP2.js";
+} from "./chunk-AAR5SGMD.js";
 import {
   loadSettings
-} from "./chunk-T2L6SGQY.js";
+} from "./chunk-6GETGQWP.js";
 import {
   initializeI18n,
   resolveLanguageSetting,
   t
-} from "./chunk-SE74CIZD.js";
+} from "./chunk-RDRVMDWV.js";
 import {
   writeStderrLine,
   writeStdoutLine

package/chunks/{chunk-HE54PGVI.js → chunk-LNUXFLLJ.js}

@@ -8,7 +8,7 @@ import {
 } from "./chunk-QHTIBUWB.js";
 import {
   t
-} from "./chunk-SE74CIZD.js";
+} from "./chunk-RDRVMDWV.js";
 import {
   require_clean,
   require_constants,
@@ -27,7 +27,7 @@ import {
   ansi_regex_exports,
   init_ansi_regex,
   stripAnsi
-} from "./chunk-SSFDPGFN.js";
+} from "./chunk-K7CRWKOE.js";
 import {
   require_graceful_fs
 } from "./chunk-E2UVIFI2.js";

package/chunks/{chunk-PHYCWSDG.js → chunk-LQU7EVFA.js}

@@ -2,7 +2,7 @@
 "use strict";
 import {
   runExitCleanup
-} from "./chunk-AGBFWLA5.js";
+} from "./chunk-TISZXPAX.js";
 import {
   init_esbuild_shims
 } from "./chunk-5O2XNYP6.js";

package/chunks/{chunk-AUGSSJX3.js → chunk-LTNI523B.js}

@@ -2,10 +2,10 @@
 "use strict";
 import {
   functionResponsePartsToString
-} from "./chunk-RJL5T4WJ.js";
+} from "./chunk-YX4LLZ3D.js";
 import {
   parseAndFormatApiError
-} from "./chunk-SSFDPGFN.js";
+} from "./chunk-K7CRWKOE.js";
 import {
   init_esbuild_shims
 } from "./chunk-5O2XNYP6.js";

package/chunks/{chunk-4LJNI7MU.js → chunk-MO7O5722.js}

@@ -18,9 +18,6 @@ import {
 import {
   writeStderrLine
 } from "./chunk-YUZI3WAC.js";
-import {
-  require_once
-} from "./chunk-CU3L64TP.js";
 import {
   require_safer
 } from "./chunk-XWRJCPHC.js";
@@ -11322,6 +11319,86 @@ var require_utils2 = __commonJS({
   }
 });
 
+// node_modules/wrappy/wrappy.js
+var require_wrappy = __commonJS({
+  "node_modules/wrappy/wrappy.js"(exports, module) {
+    init_esbuild_shims();
+    module.exports = wrappy;
+    function wrappy(fn, cb) {
+      if (fn && cb) return wrappy(fn)(cb);
+      if (typeof fn !== "function")
+        throw new TypeError("need wrapper function");
+      Object.keys(fn).forEach(function(k) {
+        wrapper[k] = fn[k];
+      });
+      return wrapper;
+      function wrapper() {
+        var args = new Array(arguments.length);
+        for (var i = 0; i < args.length; i++) {
+          args[i] = arguments[i];
+        }
+        var ret = fn.apply(this, args);
+        var cb2 = args[args.length - 1];
+        if (typeof ret === "function" && ret !== cb2) {
+          Object.keys(cb2).forEach(function(k) {
+            ret[k] = cb2[k];
+          });
+        }
+        return ret;
+      }
+      __name(wrapper, "wrapper");
+    }
+    __name(wrappy, "wrappy");
+  }
+});
+
+// node_modules/once/once.js
+var require_once = __commonJS({
+  "node_modules/once/once.js"(exports, module) {
+    init_esbuild_shims();
+    var wrappy = require_wrappy();
+    module.exports = wrappy(once);
+    module.exports.strict = wrappy(onceStrict);
+    once.proto = once(function() {
+      Object.defineProperty(Function.prototype, "once", {
+        value: /* @__PURE__ */ __name(function() {
+          return once(this);
+        }, "value"),
+        configurable: true
+      });
+      Object.defineProperty(Function.prototype, "onceStrict", {
+        value: /* @__PURE__ */ __name(function() {
+          return onceStrict(this);
+        }, "value"),
+        configurable: true
+      });
+    });
+    function once(fn) {
+      var f = /* @__PURE__ */ __name(function() {
+        if (f.called) return f.value;
+        f.called = true;
+        return f.value = fn.apply(this, arguments);
+      }, "f");
+      f.called = false;
+      return f;
+    }
+    __name(once, "once");
+    function onceStrict(fn) {
+      var f = /* @__PURE__ */ __name(function() {
+        if (f.called)
+          throw new Error(f.onceError);
+        f.called = true;
+        return f.value = fn.apply(this, arguments);
+      }, "f");
+      var name = fn.name || "Function wrapped with `once`";
+      f.onceError = name + " shouldn't be called more than once";
+      f.called = false;
+      return f;
+    }
+    __name(onceStrict, "onceStrict");
+  }
+});
+
 // node_modules/is-promise/index.js
 var require_is_promise = __commonJS({
   "node_modules/is-promise/index.js"(exports, module) {
@@ -16553,6 +16630,7 @@ var SERVE_CAPABILITY_REGISTRY = {
   // unregistered — the toggle takes effect on the next ACP child spawn
   // (`tools.disabled` is consulted at `Config` construction time).
   workspace_tool_toggle: { since: "v1" },
+  workspace_skill_toggle: { since: "v1" },
   workspace_settings: { since: "v1" },
   // `GET /workspace/permissions` is always available when this tag is
   // advertised. `POST /workspace/permissions` updates the active ACP
@@ -16694,13 +16772,27 @@ var SERVE_CAPABILITY_REGISTRY = {
   // workspace agent CRUD, and persisted session organization surfaces.
   // Workspace-qualified settings also require the existing
   // `workspace_settings` tag because that surface depends on settings
-  // persistence. ACP/WebSocket, auth, voice, and extensions stay on their
-  // existing primary-workspace routes in this phase.
+  // persistence. ACP/WebSocket and auth stay outside this core tag;
+  // workspace-qualified Voice REST/WebSocket routes use their separate
+  // `workspace_qualified_voice` capability below. V2 extension management
+  // is advertised separately via `extension_management_v2`.
   workspace_qualified_rest_core: { since: "v1" },
+  // Workspace-qualified Voice REST and WebSocket routes. This tag is enough
+  // to discover plural modalities because legacy Voice tags describe only
+  // the primary runtime and may be absent for a secondary-only setup.
+  workspace_qualified_voice: { since: "v1" },
+  // Global extension catalog/mutations plus workspace-qualified activation
+  // projections. This is additive to the legacy primary-workspace
+  // `workspace_extensions` contract.
+  extension_management_v2: { since: "v1" },
   // Workspace-qualified, daemon-local persisted transcript paging. The tag is
   // unconditional because the route also serves a trusted single-workspace
   // primary; authorization is evaluated for the selected runtime per request.
   workspace_persisted_transcript: { since: "v1" },
+  // Workspace-qualified full session export from active persisted storage.
+  // This is separate from `session_export` so clients do not infer the plural
+  // route from the legacy primary-workspace export capability.
+  workspace_session_export: { since: "v1" },
   // Workspace-qualified ACP transport (issue #6378 Phase 4):
   // `/workspaces/:workspace/acp` mounts a per-runtime ACP dispatcher (HTTP +
   // WebSocket) for each registered workspace, with per-runtime device-flow and
@@ -16799,6 +16891,12 @@ var CONDITIONAL_SERVE_FEATURES = /* @__PURE__ */ new Map([
     // for the always-available legacy `/acp` surface.
     (toggles) => toggles.acpHttpEnabled === true && toggles.multiWorkspaceSessionsEnabled === true
   ],
+  [
+    "workspace_qualified_voice",
+    // Like qualified ACP, the plural Voice surface is mounted ahead of time
+    // but only becomes useful once the daemon has a secondary runtime.
+    (toggles) => toggles.acpHttpEnabled === true && toggles.multiWorkspaceSessionsEnabled === true
+  ],
   ["client_mcp_over_ws", (toggles) => toggles.clientMcpOverWsEnabled === true],
   ["cdp_tunnel_over_ws", (toggles) => toggles.cdpTunnelOverWsEnabled === true],
   [
@@ -16870,6 +16968,7 @@ var PROTOTYPE_POLLUTION_KEYS = /* @__PURE__ */ new Set([
 var CLIENT_ID_HEADER = "x-qwen-client-id";
 var MAX_CLIENT_ID_LENGTH = 128;
 var MAX_TOOL_NAME_LENGTH = 256;
+var MAX_SKILL_NAME_LENGTH = 256;
 var MAX_SERVER_NAME_LENGTH = 256;
 var CLIENT_ID_RE = /^[A-Za-z0-9._:-]+$/;
 var INVALID_PERMISSION_OUTCOME_ERROR = '`outcome` must be `{ outcome: "cancelled" }` or `{ outcome: "selected", optionId: string }`';
@@ -16972,7 +17071,8 @@ __name(validateMcpRuntimeServerName, "validateMcpRuntimeServerName");
 function parseAndValidateWorkspaceClientId(req, res, bridge) {
   const raw = parseClientIdHeader(req, res);
   if (raw === null || raw === void 0) return raw;
-  if (!bridge.knownClientIds().has(raw)) {
+  const bridges = Array.isArray(bridge) ? bridge : [bridge];
+  if (!bridges.some((candidate) => candidate.knownClientIds().has(raw))) {
     res.status(400).json({
       error: `Client id "${raw}" is not registered for this workspace`,
       code: "invalid_client_id",
@@ -17958,6 +18058,157 @@ function isBrowserAutomationMcpAvailable(opts, env) {
 }
 __name(isBrowserAutomationMcpAvailable, "isBrowserAutomationMcpAvailable");
 
+// packages/cli/src/serve/voice/workspace-voice-coordinator.ts
+init_esbuild_shims();
+var MAX_CONCURRENT_VOICE_SESSIONS = 8;
+var DISPOSE_WAIT_MS = 5e3;
+var VoiceLeaseAbortError = class extends Error {
+  constructor(kind, message) {
+    super(message);
+    this.kind = kind;
+    this.name = "VoiceLeaseAbortError";
+  }
+  static {
+    __name(this, "VoiceLeaseAbortError");
+  }
+};
+var Lease = class {
+  constructor(onRelease) {
+    this.onRelease = onRelease;
+  }
+  static {
+    __name(this, "Lease");
+  }
+  controller = new AbortController();
+  signal = this.controller.signal;
+  released = false;
+  release() {
+    if (this.released) return;
+    this.released = true;
+    this.onRelease(this);
+  }
+  abort(reason) {
+    if (!this.signal.aborted) this.controller.abort(reason);
+  }
+};
+var WorkspaceVoiceCoordinator = class {
+  static {
+    __name(this, "WorkspaceVoiceCoordinator");
+  }
+  states = /* @__PURE__ */ new Map();
+  disposed = /* @__PURE__ */ new WeakSet();
+  active = 0;
+  acquire(runtime) {
+    if (this.disposed.has(runtime)) {
+      return { kind: "rejected", reason: "draining" };
+    }
+    const state = this.stateFor(runtime);
+    if (state.draining) return { kind: "rejected", reason: "draining" };
+    if (this.active >= MAX_CONCURRENT_VOICE_SESSIONS) {
+      return { kind: "rejected", reason: "capacity" };
+    }
+    const lease = new Lease((current) => this.release(runtime, current));
+    state.leases.add(lease);
+    this.active++;
+    return { kind: "admitted", lease };
+  }
+  beginWorkspaceDrain(runtime) {
+    this.stateFor(runtime).draining = true;
+  }
+  cancelWorkspaceDrain(runtime) {
+    const state = this.states.get(runtime);
+    if (!state || state.completed) return;
+    state.draining = false;
+    if (state.leases.size === 0) this.states.delete(runtime);
+  }
+  completeWorkspaceDrain(runtime) {
+    this.disposed.add(runtime);
+    const state = this.states.get(runtime);
+    if (!state) return;
+    state.draining = true;
+    state.completed = true;
+    const abortReason = new VoiceLeaseAbortError(
+      "workspace_removed",
+      "Workspace drain completed"
+    );
+    for (const lease of state.leases) lease.abort(abortReason);
+    this.deleteIfIdle(runtime, state);
+  }
+  getWorkspaceActivity(runtime) {
+    return this.states.get(runtime)?.leases.size ?? 0;
+  }
+  async disposeRuntime(runtime, reason) {
+    this.disposed.add(runtime);
+    const state = this.states.get(runtime);
+    if (!state) return;
+    state.draining = true;
+    state.completed = true;
+    const abortReason = new VoiceLeaseAbortError(
+      reason,
+      reason === "workspace_removed" ? "Workspace runtime was removed" : "Daemon is shutting down"
+    );
+    for (const lease of state.leases) lease.abort(abortReason);
+    if (state.leases.size === 0) {
+      this.deleteIfIdle(runtime, state);
+      return;
+    }
+    let resolveIdle;
+    const idle = new Promise((resolve) => {
+      resolveIdle = resolve;
+      state.idleWaiters.add(resolve);
+    });
+    let timeout;
+    let timedOut = false;
+    try {
+      await Promise.race([
+        idle,
+        new Promise((resolve) => {
+          timeout = setTimeout(() => {
+            timedOut = true;
+            resolve();
+          }, DISPOSE_WAIT_MS);
+          timeout.unref?.();
+        })
+      ]);
+    } finally {
+      if (timeout) clearTimeout(timeout);
+      if (resolveIdle) state.idleWaiters.delete(resolveIdle);
+    }
+    if (timedOut && state.leases.size > 0) {
+      process.stderr.write(
+        `qwen serve: Voice runtime disposal timed out with ${state.leases.size} active lease(s).
+`
+      );
+    }
+  }
+  stateFor(runtime) {
+    let state = this.states.get(runtime);
+    if (!state) {
+      state = {
+        draining: false,
+        completed: false,
+        leases: /* @__PURE__ */ new Set(),
+        idleWaiters: /* @__PURE__ */ new Set()
+      };
+      this.states.set(runtime, state);
+    }
+    return state;
+  }
+  release(runtime, lease) {
+    const state = this.states.get(runtime);
+    if (!state || !state.leases.delete(lease)) return;
+    this.active--;
+    if (state.leases.size === 0) {
+      for (const resolve of state.idleWaiters) resolve();
+      state.idleWaiters.clear();
+    }
+    this.deleteIfIdle(runtime, state);
+  }
+  deleteIfIdle(runtime, state) {
+    if (state.completed && state.leases.size === 0) this.states.delete(runtime);
+  }
+};
+
 export {
   require_express2 as require_express,
   sanitizeForStderr,
@@ -17988,6 +18239,7 @@ export {
   CLIENT_ID_HEADER,
   MAX_CLIENT_ID_LENGTH,
   MAX_TOOL_NAME_LENGTH,
+  MAX_SKILL_NAME_LENGTH,
   MAX_SERVER_NAME_LENGTH,
   CLIENT_ID_RE,
   safeBody,
@@ -18013,7 +18265,10 @@ export {
   resolveAcpHttpEnabled,
   QWEN_CDP_MCP_COMMAND_ENV,
   resolveCdpMcpCommand,
-  isBrowserAutomationMcpAvailable
+  isBrowserAutomationMcpAvailable,
+  MAX_CONCURRENT_VOICE_SESSIONS,
+  VoiceLeaseAbortError,
+  WorkspaceVoiceCoordinator
 };
 /**
  * @license

package/chunks/{chunk-S2QXYLUB.js → chunk-N6FXRR6P.js}

@@ -2,7 +2,7 @@
 "use strict";
 import {
   parseRule
-} from "./chunk-SSFDPGFN.js";
+} from "./chunk-K7CRWKOE.js";
 import {
   init_esbuild_shims
 } from "./chunk-5O2XNYP6.js";

package/chunks/{chunk-WL4L7EZH.js → chunk-OA4JVLSA.js}

@@ -33,10 +33,36 @@ var WorkspacePermissionRulesSessionRequiredError = class extends Error {
     this.name = "WorkspacePermissionRulesSessionRequiredError";
   }
 };
+var WorkspaceSkillNotFoundError = class extends Error {
+  constructor(skillName) {
+    super(`Skill not found: ${skillName}`);
+    this.skillName = skillName;
+    this.name = "WorkspaceSkillNotFoundError";
+  }
+  static {
+    __name(this, "WorkspaceSkillNotFoundError");
+  }
+};
+var WorkspaceSkillNotToggleableError = class extends Error {
+  constructor(skillName, reason, lockedScope) {
+    super(
+      lockedScope ? `Skill ${skillName} is locked by ${lockedScope} settings` : `Skill ${skillName} is not toggleable: ${reason}`
+    );
+    this.skillName = skillName;
+    this.reason = reason;
+    this.lockedScope = lockedScope;
+    this.name = "WorkspaceSkillNotToggleableError";
+  }
+  static {
+    __name(this, "WorkspaceSkillNotToggleableError");
+  }
+};
 
 export {
   WorkspaceSettingsPartialPersistError,
-  WorkspacePermissionRulesSessionRequiredError
+  WorkspacePermissionRulesSessionRequiredError,
+  WorkspaceSkillNotFoundError,
+  WorkspaceSkillNotToggleableError
 };
 /**
  * @license