@qwen-code/qwen-code 0.20.0-nightly.20260721.cda0e0348 → 0.20.0-preview.0

package/chunks/{chunk-LC5CAVMS.js → chunk-BKZEHVPV.js}

@@ -9,12 +9,13 @@ import {
 import {
   require_lib
 } from "./chunk-WBL3FJEU.js";
-import {
-  MAX_WORKSPACE_PATH_LENGTH
-} from "./chunk-W7FJ3N32.js";
 import {
   require_mime_db
 } from "./chunk-T2NCM2ET.js";
+import {
+  MAX_WORKSPACE_PATH_LENGTH,
+  translateAndCheckAbsoluteWorkspacePath
+} from "./chunk-2RFKHEXL.js";
 import {
   writeStderrLine
 } from "./chunk-OWAK7LMW.js";
@@ -9069,11 +9070,11 @@ var require_mime_types = __commonJS({
       return exts[0];
     }
     __name(extension, "extension");
-    function lookup(path3) {
-      if (!path3 || typeof path3 !== "string") {
+    function lookup(path2) {
+      if (!path2 || typeof path2 !== "string") {
         return false;
       }
-      var extension2 = extname("x." + path3).toLowerCase().slice(1);
+      var extension2 = extname("x." + path2).toLowerCase().slice(1);
       if (!extension2) {
         return false;
       }
@@ -10204,13 +10205,13 @@ var require_view = __commonJS({
     "use strict";
     init_esbuild_shims();
     var debug = require_src()("express:view");
-    var path3 = __require("node:path");
+    var path2 = __require("node:path");
     var fs = __require("node:fs");
-    var dirname2 = path3.dirname;
-    var basename2 = path3.basename;
-    var extname = path3.extname;
-    var join2 = path3.join;
-    var resolve = path3.resolve;
+    var dirname2 = path2.dirname;
+    var basename2 = path2.basename;
+    var extname = path2.extname;
+    var join2 = path2.join;
+    var resolve = path2.resolve;
     module.exports = View;
     function View(name, options) {
       var opts = options || {};
@@ -10240,17 +10241,17 @@ var require_view = __commonJS({
     }
     __name(View, "View");
     View.prototype.lookup = /* @__PURE__ */ __name(function lookup(name) {
-      var path4;
+      var path3;
       var roots = [].concat(this.root);
       debug('lookup "%s"', name);
-      for (var i = 0; i < roots.length && !path4; i++) {
+      for (var i = 0; i < roots.length && !path3; i++) {
         var root = roots[i];
         var loc = resolve(root, name);
         var dir = dirname2(loc);
         var file = basename2(loc);
-        path4 = this.resolve(dir, file);
+        path3 = this.resolve(dir, file);
       }
-      return path4;
+      return path3;
     }, "lookup");
     View.prototype.render = /* @__PURE__ */ __name(function render(options, callback) {
       var sync = true;
@@ -10272,21 +10273,21 @@ var require_view = __commonJS({
     }, "render");
     View.prototype.resolve = /* @__PURE__ */ __name(function resolve2(dir, file) {
       var ext = this.ext;
-      var path4 = join2(dir, file);
-      var stat = tryStat(path4);
+      var path3 = join2(dir, file);
+      var stat = tryStat(path3);
       if (stat && stat.isFile()) {
-        return path4;
+        return path3;
       }
-      path4 = join2(dir, basename2(file, ext), "index" + ext);
-      stat = tryStat(path4);
+      path3 = join2(dir, basename2(file, ext), "index" + ext);
+      stat = tryStat(path3);
       if (stat && stat.isFile()) {
-        return path4;
+        return path3;
       }
     }, "resolve");
-    function tryStat(path4) {
-      debug('stat "%s"', path4);
+    function tryStat(path3) {
+      debug('stat "%s"', path3);
       try {
-        return fs.statSync(path4);
+        return fs.statSync(path3);
       } catch (e) {
         return void 0;
       }
@@ -11467,15 +11468,15 @@ var require_dist2 = __commonJS({
       let index = 0;
       function consumeUntil(end) {
         const output = [];
-        let path3 = "";
+        let path2 = "";
         function writePath() {
-          if (!path3)
+          if (!path2)
             return;
           output.push({
             type: "text",
-            value: encodePath(path3)
+            value: encodePath(path2)
           });
-          path3 = "";
+          path2 = "";
         }
         __name(writePath, "writePath");
         while (index < chars.length) {
@@ -11488,7 +11489,7 @@ var require_dist2 = __commonJS({
             if (index === chars.length) {
               throw new PathError(`Unexpected end after \\ at index ${index}`, str);
             }
-            path3 += chars[index++];
+            path2 += chars[index++];
             continue;
           }
           if (value === ":" || value === "*") {
@@ -11532,7 +11533,7 @@ var require_dist2 = __commonJS({
           if (value === "}" || value === "(" || value === ")" || value === "[" || value === "]" || value === "+" || value === "?" || value === "!") {
             throw new PathError(`Unexpected ${value} at index ${index - 1}`, str);
           }
-          path3 += value;
+          path2 += value;
         }
         if (end) {
           throw new PathError(`Unexpected end at index ${index}, expected ${end}`, str);
@@ -11544,17 +11545,17 @@ var require_dist2 = __commonJS({
       return new TokenData(consumeUntil(""), str);
     }
     __name(parse, "parse");
-    function compile(path3, options = {}) {
+    function compile(path2, options = {}) {
       const { encode = encodeURIComponent, delimiter = DEFAULT_DELIMITER } = options;
-      const data = typeof path3 === "object" ? path3 : parse(path3, options);
+      const data = typeof path2 === "object" ? path2 : parse(path2, options);
       const fn = tokensToFunction(data.tokens, delimiter, encode);
-      return /* @__PURE__ */ __name(function path4(params = {}) {
+      return /* @__PURE__ */ __name(function path3(params = {}) {
         const missing = [];
-        const path5 = fn(params, missing);
+        const path4 = fn(params, missing);
         if (missing.length) {
           throw new TypeError(`Missing parameters: ${missing.join(", ")}`);
         }
-        return path5;
+        return path4;
       }, "path");
     }
     __name(compile, "compile");
@@ -11619,9 +11620,9 @@ var require_dist2 = __commonJS({
       };
     }
     __name(tokenToFunction, "tokenToFunction");
-    function match(path3, options = {}) {
+    function match(path2, options = {}) {
       const { decode = decodeURIComponent, delimiter = DEFAULT_DELIMITER } = options;
-      const { regexp, keys } = pathToRegexp(path3, options);
+      const { regexp, keys } = pathToRegexp(path2, options);
       const decoders = keys.map((key) => {
         if (decode === false)
           return NOOP_VALUE;
@@ -11633,7 +11634,7 @@ var require_dist2 = __commonJS({
         const m = regexp.exec(input);
         if (!m)
           return false;
-        const path4 = m[0];
+        const path3 = m[0];
         const params = /* @__PURE__ */ Object.create(null);
         for (let i = 1; i < m.length; i++) {
           if (m[i] === void 0)
@@ -11642,22 +11643,22 @@ var require_dist2 = __commonJS({
           const decoder = decoders[i - 1];
           params[key.name] = decoder(m[i]);
         }
-        return { path: path4, params };
+        return { path: path3, params };
       }, "match");
     }
     __name(match, "match");
-    function pathToRegexp(path3, options = {}) {
+    function pathToRegexp(path2, options = {}) {
       const { delimiter = DEFAULT_DELIMITER, end = true, sensitive = false, trailing = true } = options;
       const keys = [];
       let source = "";
       let combinations = 0;
-      function process2(path4) {
-        if (Array.isArray(path4)) {
-          for (const p of path4)
+      function process2(path3) {
+        if (Array.isArray(path3)) {
+          for (const p of path3)
             process2(p);
           return;
         }
-        const data = typeof path4 === "object" ? path4 : parse(path4, options);
+        const data = typeof path3 === "object" ? path3 : parse(path3, options);
         flatten(data.tokens, 0, [], (tokens) => {
           if (combinations >= 256) {
             throw new PathError("Too many path combinations", data.originalPath);
@@ -11669,7 +11670,7 @@ var require_dist2 = __commonJS({
         });
       }
       __name(process2, "process");
-      process2(path3);
+      process2(path2);
       let pattern = `^(?:${source})`;
       if (trailing)
         pattern += "(?:" + escape(delimiter) + "$)?";
@@ -11819,18 +11820,18 @@ var require_layer = __commonJS({
     var TRAILING_SLASH_REGEXP = /\/+$/;
     var MATCHING_GROUP_REGEXP = /\((?:\?<(.*?)>)?(?!\?)/g;
     module.exports = Layer;
-    function Layer(path3, options, fn) {
+    function Layer(path2, options, fn) {
       if (!(this instanceof Layer)) {
-        return new Layer(path3, options, fn);
+        return new Layer(path2, options, fn);
       }
-      debug("new %o", path3);
+      debug("new %o", path2);
       const opts = options || {};
       this.handle = fn;
       this.keys = [];
       this.name = fn.name || "<anonymous>";
       this.params = void 0;
       this.path = void 0;
-      this.slash = path3 === "/" && opts.end === false;
+      this.slash = path2 === "/" && opts.end === false;
       function matcher(_path) {
         if (_path instanceof RegExp) {
           const keys = [];
@@ -11870,7 +11871,7 @@ var require_layer = __commonJS({
         });
       }
       __name(matcher, "matcher");
-      this.matchers = Array.isArray(path3) ? path3.map(matcher) : [matcher(path3)];
+      this.matchers = Array.isArray(path2) ? path2.map(matcher) : [matcher(path2)];
     }
     __name(Layer, "Layer");
     Layer.prototype.handleError = /* @__PURE__ */ __name(function handleError(error, req, res, next) {
@@ -11911,9 +11912,9 @@ var require_layer = __commonJS({
         next(err);
       }
     }, "handleRequest");
-    Layer.prototype.match = /* @__PURE__ */ __name(function match(path3) {
+    Layer.prototype.match = /* @__PURE__ */ __name(function match(path2) {
       let match2;
-      if (path3 != null) {
+      if (path2 != null) {
         if (this.slash) {
           this.params = {};
           this.path = "";
@@ -11921,7 +11922,7 @@ var require_layer = __commonJS({
         }
         let i = 0;
         while (!match2 && i < this.matchers.length) {
-          match2 = this.matchers[i](path3);
+          match2 = this.matchers[i](path2);
           i++;
         }
       }
@@ -11950,13 +11951,13 @@ var require_layer = __commonJS({
       }
     }
     __name(decodeParam, "decodeParam");
-    function loosen(path3) {
-      if (path3 instanceof RegExp || path3 === "/") {
-        return path3;
+    function loosen(path2) {
+      if (path2 instanceof RegExp || path2 === "/") {
+        return path2;
       }
-      return Array.isArray(path3) ? path3.map(function(p) {
+      return Array.isArray(path2) ? path2.map(function(p) {
         return loosen(p);
-      }) : String(path3).replace(TRAILING_SLASH_REGEXP, "");
+      }) : String(path2).replace(TRAILING_SLASH_REGEXP, "");
     }
     __name(loosen, "loosen");
   }
@@ -11974,9 +11975,9 @@ var require_route = __commonJS({
     var flatten = Array.prototype.flat;
     var methods = METHODS.map((method) => method.toLowerCase());
     module.exports = Route;
-    function Route(path3) {
-      debug("new %o", path3);
-      this.path = path3;
+    function Route(path2) {
+      debug("new %o", path2);
+      this.path = path2;
       this.stack = [];
       this.methods = /* @__PURE__ */ Object.create(null);
     }
@@ -12189,8 +12190,8 @@ var require_router = __commonJS({
         if (++sync > 100) {
           return setImmediate(next, err);
         }
-        const path3 = getPathname(req);
-        if (path3 == null) {
+        const path2 = getPathname(req);
+        if (path2 == null) {
           return done(layerError);
         }
         let layer;
@@ -12198,7 +12199,7 @@ var require_router = __commonJS({
         let route;
         while (match !== true && idx < stack.length) {
           layer = stack[idx++];
-          match = matchLayer(layer, path3);
+          match = matchLayer(layer, path2);
           route = layer.route;
           if (typeof match !== "boolean") {
             layerError = layerError || match;
@@ -12236,19 +12237,19 @@ var require_router = __commonJS({
           } else if (route) {
             layer.handleRequest(req, res, next);
           } else {
-            trimPrefix(layer, layerError, layerPath, path3);
+            trimPrefix(layer, layerError, layerPath, path2);
           }
           sync = 0;
         });
       }
       __name(next, "next");
-      function trimPrefix(layer, layerError, layerPath, path3) {
+      function trimPrefix(layer, layerError, layerPath, path2) {
         if (layerPath.length !== 0) {
-          if (layerPath !== path3.substring(0, layerPath.length)) {
+          if (layerPath !== path2.substring(0, layerPath.length)) {
             next(layerError);
             return;
           }
-          const c = path3[layerPath.length];
+          const c = path2[layerPath.length];
           if (c && c !== "/") {
             next(layerError);
             return;
@@ -12273,7 +12274,7 @@ var require_router = __commonJS({
     }, "handle");
     Router.prototype.use = /* @__PURE__ */ __name(function use(handler) {
       let offset = 0;
-      let path3 = "/";
+      let path2 = "/";
       if (typeof handler !== "function") {
         let arg = handler;
         while (Array.isArray(arg) && arg.length !== 0) {
@@ -12281,7 +12282,7 @@ var require_router = __commonJS({
         }
         if (typeof arg !== "function") {
           offset = 1;
-          path3 = handler;
+          path2 = handler;
         }
       }
       const callbacks = flatten.call(slice.call(arguments, offset), Infinity);
@@ -12293,8 +12294,8 @@ var require_router = __commonJS({
         if (typeof fn !== "function") {
           throw new TypeError("argument handler must be a function");
         }
-        debug("use %o %s", path3, fn.name || "<anonymous>");
-        const layer = new Layer(path3, {
+        debug("use %o %s", path2, fn.name || "<anonymous>");
+        const layer = new Layer(path2, {
           sensitive: this.caseSensitive,
           strict: false,
           end: false
@@ -12304,9 +12305,9 @@ var require_router = __commonJS({
       }
       return this;
     }, "use");
-    Router.prototype.route = /* @__PURE__ */ __name(function route(path3) {
-      const route2 = new Route(path3);
-      const layer = new Layer(path3, {
+    Router.prototype.route = /* @__PURE__ */ __name(function route(path2) {
+      const route2 = new Route(path2);
+      const layer = new Layer(path2, {
         sensitive: this.caseSensitive,
         strict: this.strict,
         end: true
@@ -12320,8 +12321,8 @@ var require_router = __commonJS({
       return route2;
     }, "route");
     methods.concat("all").forEach(function(method) {
-      Router.prototype[method] = function(path3) {
-        const route = this.route(path3);
+      Router.prototype[method] = function(path2) {
+        const route = this.route(path2);
         route[method].apply(route, slice.call(arguments, 1));
         return this;
       };
@@ -12353,9 +12354,9 @@ var require_router = __commonJS({
       return fqdnIndex !== -1 ? url.substring(0, url.indexOf("/", 3 + fqdnIndex)) : void 0;
     }
     __name(getProtohost, "getProtohost");
-    function matchLayer(layer, path3) {
+    function matchLayer(layer, path2) {
       try {
-        return layer.match(path3);
+        return layer.match(path2);
       } catch (err) {
         return err;
       }
@@ -12593,7 +12594,7 @@ var require_application = __commonJS({
     }, "handle");
     app.use = /* @__PURE__ */ __name(function use(fn) {
       var offset = 0;
-      var path3 = "/";
+      var path2 = "/";
       if (typeof fn !== "function") {
         var arg = fn;
         while (Array.isArray(arg) && arg.length !== 0) {
@@ -12601,7 +12602,7 @@ var require_application = __commonJS({
         }
         if (typeof arg !== "function") {
           offset = 1;
-          path3 = fn;
+          path2 = fn;
         }
       }
       var fns = flatten.call(slice.call(arguments, offset), Infinity);
@@ -12611,12 +12612,12 @@ var require_application = __commonJS({
       var router = this.router;
       fns.forEach(function(fn2) {
         if (!fn2 || !fn2.handle || !fn2.set) {
-          return router.use(path3, fn2);
+          return router.use(path2, fn2);
         }
-        debug(".use app under %s", path3);
-        fn2.mountpath = path3;
+        debug(".use app under %s", path2);
+        fn2.mountpath = path2;
         fn2.parent = this;
-        router.use(path3, /* @__PURE__ */ __name(function mounted_app(req, res, next) {
+        router.use(path2, /* @__PURE__ */ __name(function mounted_app(req, res, next) {
           var orig = req.app;
           fn2.handle(req, res, function(err) {
             Object.setPrototypeOf(req, orig.request);
@@ -12628,8 +12629,8 @@ var require_application = __commonJS({
       }, this);
       return this;
     }, "use");
-    app.route = /* @__PURE__ */ __name(function route(path3) {
-      return this.router.route(path3);
+    app.route = /* @__PURE__ */ __name(function route(path2) {
+      return this.router.route(path2);
     }, "route");
     app.engine = /* @__PURE__ */ __name(function engine(ext, fn) {
       if (typeof fn !== "function") {
@@ -12672,7 +12673,7 @@ var require_application = __commonJS({
       }
       return this;
     }, "set");
-    app.path = /* @__PURE__ */ __name(function path3() {
+    app.path = /* @__PURE__ */ __name(function path2() {
       return this.parent ? this.parent.path() + this.mountpath : "";
     }, "path");
     app.enabled = /* @__PURE__ */ __name(function enabled(setting) {
@@ -12688,17 +12689,17 @@ var require_application = __commonJS({
       return this.set(setting, false);
     }, "disable");
     methods.forEach(function(method) {
-      app[method] = function(path3) {
+      app[method] = function(path2) {
         if (method === "get" && arguments.length === 1) {
-          return this.set(path3);
+          return this.set(path2);
         }
-        var route = this.route(path3);
+        var route = this.route(path2);
         route[method].apply(route, slice.call(arguments, 1));
         return this;
       };
     });
-    app.all = /* @__PURE__ */ __name(function all(path3) {
-      var route = this.route(path3);
+    app.all = /* @__PURE__ */ __name(function all(path2) {
+      var route = this.route(path2);
       var args = slice.call(arguments, 1);
       for (var i = 0; i < methods.length; i++) {
         route[methods[i]].apply(route, args);
@@ -13668,7 +13669,7 @@ var require_request = __commonJS({
       var subdomains2 = !isIP(hostname) ? hostname.split(".").reverse() : [hostname];
       return subdomains2.slice(offset);
     }, "subdomains"));
-    defineGetter(req, "path", /* @__PURE__ */ __name(function path3() {
+    defineGetter(req, "path", /* @__PURE__ */ __name(function path2() {
       return parse(this).pathname;
     }, "path"));
     defineGetter(req, "host", /* @__PURE__ */ __name(function host() {
@@ -13891,8 +13892,8 @@ var require_content_disposition = __commonJS({
       this.parameters = parameters;
     }
     __name(ContentDisposition, "ContentDisposition");
-    function basename2(path3) {
-      const normalized = path3.replaceAll("\\", "/");
+    function basename2(path2) {
+      const normalized = path2.replaceAll("\\", "/");
       let end = normalized.length;
       while (end > 0 && normalized[end - 1] === "/") {
         end--;
@@ -14152,28 +14153,28 @@ var require_send = __commonJS({
     var ms = require_ms();
     var onFinished = require_on_finished();
     var parseRange = require_range_parser();
-    var path3 = __require("path");
+    var path2 = __require("path");
     var statuses = require_statuses();
     var Stream = __require("stream");
     var util = __require("util");
-    var extname = path3.extname;
-    var join2 = path3.join;
-    var normalize = path3.normalize;
-    var resolve = path3.resolve;
-    var sep = path3.sep;
+    var extname = path2.extname;
+    var join2 = path2.join;
+    var normalize = path2.normalize;
+    var resolve = path2.resolve;
+    var sep = path2.sep;
     var BYTES_RANGE_REGEXP = /^ *bytes=/;
     var MAX_MAXAGE = 60 * 60 * 24 * 365 * 1e3;
     var UP_PATH_REGEXP = /(?:^|[\\/])\.\.(?:[\\/]|$)/;
     module.exports = send;
-    function send(req, path4, options) {
-      return new SendStream(req, path4, options);
+    function send(req, path3, options) {
+      return new SendStream(req, path3, options);
     }
     __name(send, "send");
-    function SendStream(req, path4, options) {
+    function SendStream(req, path3, options) {
       Stream.call(this);
       var opts = options || {};
       this.options = opts;
-      this.path = path4;
+      this.path = path3;
       this.req = req;
       this._acceptRanges = opts.acceptRanges !== void 0 ? Boolean(opts.acceptRanges) : true;
       this._cacheControl = opts.cacheControl !== void 0 ? Boolean(opts.cacheControl) : true;
@@ -14288,10 +14289,10 @@ var require_send = __commonJS({
       var lastModified = this.res.getHeader("Last-Modified");
       return parseHttpDate(lastModified) <= parseHttpDate(ifRange);
     }, "isRangeFresh");
-    SendStream.prototype.redirect = /* @__PURE__ */ __name(function redirect(path4) {
+    SendStream.prototype.redirect = /* @__PURE__ */ __name(function redirect(path3) {
       var res = this.res;
       if (hasListeners(this, "directory")) {
-        this.emit("directory", res, path4);
+        this.emit("directory", res, path3);
         return;
       }
       if (this.hasTrailingSlash()) {
@@ -14311,38 +14312,38 @@ var require_send = __commonJS({
     SendStream.prototype.pipe = /* @__PURE__ */ __name(function pipe(res) {
       var root = this._root;
       this.res = res;
-      var path4 = decode(this.path);
-      if (path4 === -1) {
+      var path3 = decode(this.path);
+      if (path3 === -1) {
         this.error(400);
         return res;
       }
-      if (~path4.indexOf("\0")) {
+      if (~path3.indexOf("\0")) {
         this.error(400);
         return res;
       }
       var parts;
       if (root !== null) {
-        if (path4) {
-          path4 = normalize("." + sep + path4);
+        if (path3) {
+          path3 = normalize("." + sep + path3);
         }
-        if (UP_PATH_REGEXP.test(path4)) {
-          debug('malicious path "%s"', path4);
+        if (UP_PATH_REGEXP.test(path3)) {
+          debug('malicious path "%s"', path3);
           this.error(403);
           return res;
         }
-        parts = path4.split(sep);
-        path4 = normalize(join2(root, path4));
+        parts = path3.split(sep);
+        path3 = normalize(join2(root, path3));
       } else {
-        if (UP_PATH_REGEXP.test(path4)) {
-          debug('malicious path "%s"', path4);
+        if (UP_PATH_REGEXP.test(path3)) {
+          debug('malicious path "%s"', path3);
           this.error(403);
           return res;
         }
-        parts = normalize(path4).split(sep);
-        path4 = resolve(path4);
+        parts = normalize(path3).split(sep);
+        path3 = resolve(path3);
       }
       if (containsDotFile(parts)) {
-        debug('%s dotfile "%s"', this._dotfiles, path4);
+        debug('%s dotfile "%s"', this._dotfiles, path3);
         switch (this._dotfiles) {
           case "allow":
             break;
@@ -14356,13 +14357,13 @@ var require_send = __commonJS({
         }
       }
       if (this._index.length && this.hasTrailingSlash()) {
-        this.sendIndex(path4);
+        this.sendIndex(path3);
         return res;
       }
-      this.sendFile(path4);
+      this.sendFile(path3);
       return res;
     }, "pipe");
-    SendStream.prototype.send = /* @__PURE__ */ __name(function send2(path4, stat) {
+    SendStream.prototype.send = /* @__PURE__ */ __name(function send2(path3, stat) {
       var len = stat.size;
       var options = this.options;
       var opts = {};
@@ -14374,9 +14375,9 @@ var require_send = __commonJS({
         this.headersAlreadySent();
         return;
       }
-      debug('pipe "%s"', path4);
-      this.setHeader(path4, stat);
-      this.type(path4);
+      debug('pipe "%s"', path3);
+      this.setHeader(path3, stat);
+      this.type(path3);
       if (this.isConditionalGET()) {
         if (this.isPreconditionFailure()) {
           this.error(412);
@@ -14425,28 +14426,28 @@ var require_send = __commonJS({
         res.end();
         return;
       }
-      this.stream(path4, opts);
+      this.stream(path3, opts);
     }, "send");
-    SendStream.prototype.sendFile = /* @__PURE__ */ __name(function sendFile(path4) {
+    SendStream.prototype.sendFile = /* @__PURE__ */ __name(function sendFile(path3) {
       var i = 0;
       var self = this;
-      debug('stat "%s"', path4);
-      fs.stat(path4, /* @__PURE__ */ __name(function onstat(err, stat) {
-        var pathEndsWithSep = path4[path4.length - 1] === sep;
-        if (err && err.code === "ENOENT" && !extname(path4) && !pathEndsWithSep) {
+      debug('stat "%s"', path3);
+      fs.stat(path3, /* @__PURE__ */ __name(function onstat(err, stat) {
+        var pathEndsWithSep = path3[path3.length - 1] === sep;
+        if (err && err.code === "ENOENT" && !extname(path3) && !pathEndsWithSep) {
           return next(err);
         }
         if (err) return self.onStatError(err);
-        if (stat.isDirectory()) return self.redirect(path4);
+        if (stat.isDirectory()) return self.redirect(path3);
         if (pathEndsWithSep) return self.error(404);
-        self.emit("file", path4, stat);
-        self.send(path4, stat);
+        self.emit("file", path3, stat);
+        self.send(path3, stat);
       }, "onstat"));
       function next(err) {
         if (self._extensions.length <= i) {
           return err ? self.onStatError(err) : self.error(404);
         }
-        var p = path4 + "." + self._extensions[i++];
+        var p = path3 + "." + self._extensions[i++];
         debug('stat "%s"', p);
         fs.stat(p, function(err2, stat) {
           if (err2) return next(err2);
@@ -14457,7 +14458,7 @@ var require_send = __commonJS({
       }
       __name(next, "next");
     }, "sendFile");
-    SendStream.prototype.sendIndex = /* @__PURE__ */ __name(function sendIndex(path4) {
+    SendStream.prototype.sendIndex = /* @__PURE__ */ __name(function sendIndex(path3) {
       var i = -1;
       var self = this;
       function next(err) {
@@ -14465,7 +14466,7 @@ var require_send = __commonJS({
           if (err) return self.onStatError(err);
           return self.error(404);
         }
-        var p = join2(path4, self._index[i]);
+        var p = join2(path3, self._index[i]);
         debug('stat "%s"', p);
         fs.stat(p, function(err2, stat) {
           if (err2) return next(err2);
@@ -14477,10 +14478,10 @@ var require_send = __commonJS({
       __name(next, "next");
       next();
     }, "sendIndex");
-    SendStream.prototype.stream = /* @__PURE__ */ __name(function stream(path4, options) {
+    SendStream.prototype.stream = /* @__PURE__ */ __name(function stream(path3, options) {
       var self = this;
       var res = this.res;
-      var stream2 = fs.createReadStream(path4, options);
+      var stream2 = fs.createReadStream(path3, options);
       this.emit("stream", stream2);
       stream2.pipe(res);
       function cleanup() {
@@ -14496,17 +14497,17 @@ var require_send = __commonJS({
         self.emit("end");
       }, "onend"));
     }, "stream");
-    SendStream.prototype.type = /* @__PURE__ */ __name(function type(path4) {
+    SendStream.prototype.type = /* @__PURE__ */ __name(function type(path3) {
       var res = this.res;
       if (res.getHeader("Content-Type")) return;
-      var ext = extname(path4);
+      var ext = extname(path3);
       var type2 = mime.contentType(ext) || "application/octet-stream";
       debug("content-type %s", type2);
       res.setHeader("Content-Type", type2);
     }, "type");
-    SendStream.prototype.setHeader = /* @__PURE__ */ __name(function setHeader(path4, stat) {
+    SendStream.prototype.setHeader = /* @__PURE__ */ __name(function setHeader(path3, stat) {
       var res = this.res;
-      this.emit("headers", res, path4, stat);
+      this.emit("headers", res, path3, stat);
       if (this._acceptRanges && !res.getHeader("Accept-Ranges")) {
         debug("accept ranges");
         res.setHeader("Accept-Ranges", "bytes");
@@ -14570,9 +14571,9 @@ var require_send = __commonJS({
       return err instanceof Error ? createError(status, err, { expose: false }) : createError(status, err);
     }
     __name(createHttpError, "createHttpError");
-    function decode(path4) {
+    function decode(path3) {
       try {
-        return decodeURIComponent(path4);
+        return decodeURIComponent(path3);
       } catch (err) {
         return -1;
       }
@@ -14727,7 +14728,7 @@ var require_response = __commonJS({
     var http = __require("node:http");
     var onFinished = require_on_finished();
     var mime = require_mime_types();
-    var path3 = __require("node:path");
+    var path2 = __require("node:path");
     var pathIsAbsolute = __require("node:path").isAbsolute;
     var statuses = require_statuses();
     var sign = require_cookie_signature().sign;
@@ -14736,8 +14737,8 @@ var require_response = __commonJS({
     var setCharset = require_utils2().setCharset;
     var cookie = require_cookie();
     var send = require_send();
-    var extname = path3.extname;
-    var resolve = path3.resolve;
+    var extname = path2.extname;
+    var resolve = path2.resolve;
     var vary = require_vary();
     var { Buffer: Buffer2 } = __require("node:buffer");
     var res = Object.create(http.ServerResponse.prototype);
@@ -14883,26 +14884,26 @@ var require_response = __commonJS({
       this.type("txt");
       return this.send(body);
     }, "sendStatus");
-    res.sendFile = /* @__PURE__ */ __name(function sendFile(path4, options, callback) {
+    res.sendFile = /* @__PURE__ */ __name(function sendFile(path3, options, callback) {
       var done = callback;
       var req = this.req;
       var res2 = this;
       var next = req.next;
       var opts = options || {};
-      if (!path4) {
+      if (!path3) {
         throw new TypeError("path argument is required to res.sendFile");
       }
-      if (typeof path4 !== "string") {
+      if (typeof path3 !== "string") {
         throw new TypeError("path must be a string to res.sendFile");
       }
       if (typeof options === "function") {
         done = options;
         opts = {};
       }
-      if (!opts.root && !pathIsAbsolute(path4)) {
+      if (!opts.root && !pathIsAbsolute(path3)) {
         throw new TypeError("path must be absolute or specify root to res.sendFile");
       }
-      var pathname = encodeURI(path4);
+      var pathname = encodeURI(path3);
       opts.etag = this.app.enabled("etag");
       var file = send(req, pathname, opts);
       sendfile(res2, file, opts, function(err) {
@@ -14913,7 +14914,7 @@ var require_response = __commonJS({
         }
       });
     }, "sendFile");
-    res.download = /* @__PURE__ */ __name(function download(path4, filename, options, callback) {
+    res.download = /* @__PURE__ */ __name(function download(path3, filename, options, callback) {
       var done = callback;
       var name = filename;
       var opts = options || null;
@@ -14930,7 +14931,7 @@ var require_response = __commonJS({
         opts = filename;
       }
       var headers = {
-        "Content-Disposition": contentDisposition(name || path4)
+        "Content-Disposition": contentDisposition(name || path3)
       };
       if (opts && opts.headers) {
         var keys = Object.keys(opts.headers);
@@ -14943,7 +14944,7 @@ var require_response = __commonJS({
       }
       opts = Object.create(opts);
       opts.headers = headers;
-      var fullPath = !opts.root ? resolve(path4) : path4;
+      var fullPath = !opts.root ? resolve(path3) : path3;
       return this.sendFile(fullPath, opts, done);
     }, "download");
     res.contentType = res.type = /* @__PURE__ */ __name(function contentType(type) {
@@ -15236,11 +15237,11 @@ var require_serve_static = __commonJS({
         }
         var forwardError = !fallthrough;
         var originalUrl = parseUrl.original(req);
-        var path3 = parseUrl(req).pathname;
-        if (path3 === "/" && originalUrl.pathname.substr(-1) !== "/") {
-          path3 = "";
+        var path2 = parseUrl(req).pathname;
+        if (path2 === "/" && originalUrl.pathname.substr(-1) !== "/") {
+          path2 = "";
         }
-        var stream = send(req, path3, opts);
+        var stream = send(req, path2, opts);
         stream.on("directory", onDirectory);
         if (setHeaders) {
           stream.on("headers", setHeaders);
@@ -16982,7 +16983,6 @@ var CAPABILITIES_SCHEMA_VERSION = 1;
 
 // packages/cli/src/serve/server/request-helpers.ts
 init_esbuild_shims();
-import * as path2 from "node:path";
 function sendJsonBodyParserError(res, err) {
   if (err instanceof SyntaxError && "status" in err && err.status === 400) {
     res.status(400).json({ error: "Invalid JSON in request body" });
@@ -17042,8 +17042,10 @@ function parseOptionalWorkspaceCwd(body, boundWorkspace, res) {
     });
     return void 0;
   }
-  const cwd = hasCwd ? body["cwd"] : boundWorkspace;
-  if (!path2.isAbsolute(cwd)) {
+  const cwd = translateAndCheckAbsoluteWorkspacePath(
+    hasCwd ? body["cwd"] : boundWorkspace
+  );
+  if (cwd === null) {
     res.status(400).json({ error: "`cwd` must be an absolute path when provided" });
     return void 0;
   }
@@ -17214,8 +17216,8 @@ var MAX_BUCKETS = 1e4;
 var GC_REQUEST_INTERVAL = 1e3;
 var GC_TIMER_INTERVAL_MS = 5 * 60 * 1e3;
 var WORKSPACE_QUALIFIED_ACP_PATH = /^\/workspaces\/[^/]+\/acp$/i;
-function resolveTier(method, path3, workspaceQualifiedAcpEnabled) {
-  const p = path3.endsWith("/") && path3.length > 1 ? path3.slice(0, -1) : path3;
+function resolveTier(method, path2, workspaceQualifiedAcpEnabled) {
+  const p = path2.endsWith("/") && path2.length > 1 ? path2.slice(0, -1) : path2;
   if (method === "OPTIONS") return null;
   if ((method === "GET" || method === "HEAD") && (p === "/health" || p === "/demo"))
     return null;