@qwen-code/qwen-code 0.20.1 → 0.20.2-gdpval-vl-bridge.0

package/chunks/{server-5TJJEMVQ.js → server-YMIGPXOS.js}

@@ -14,7 +14,7 @@ import {
   shouldSuppressRememberErrorDetails,
   workspaceMemoryFailureCode,
   workspaceMemoryFailureDiagnostics
-} from "./chunk-4DSBFQMI.js";
+} from "./chunk-6KWPAL2Y.js";
 import {
   openQwenAsrRealtimeStream,
   openVoiceStream,
@@ -23,6 +23,7 @@ import {
 import {
   SetupGithubError,
   collectSessionData,
+  createTranscriptMessageUpdate,
   generateExportFilename,
   normalizeSessionData,
   setupGithub,
@@ -30,17 +31,21 @@ import {
   toJson,
   toJsonl,
   toMarkdown
-} from "./chunk-6PRNSLMB.js";
+} from "./chunk-CNXESX7W.js";
 import {
   OBSERVED_CONTACT_MAX_FRESH_WITHIN_SECONDS,
   ObservedChannelContactStore
 } from "./chunk-4K7VDKAD.js";
+import "./chunk-RXXCWIIT.js";
 import "./chunk-RS7MT2QG.js";
-import "./chunk-NNFK277W.js";
 import "./chunk-H2XVO6NE.js";
 import "./chunk-QHTIBUWB.js";
 import "./chunk-QTERJVPZ.js";
-import "./chunk-L573Z2QZ.js";
+import "./chunk-3Z43GZUQ.js";
+import {
+  createSingleWorkspaceRegistry,
+  createWorkspaceSessionOwnerIndex
+} from "./chunk-UGYMA4EI.js";
 import {
   CAPABILITIES_SCHEMA_VERSION,
   CLIENT_ID_HEADER,
@@ -65,6 +70,7 @@ import {
   createBridgeFileSystemAdapter,
   createBuildWorkspaceCtx,
   createClientMcpServerProvider,
+  createManagedScratchDirectory,
   createMutationGate,
   createRateLimiter,
   denyBrowserOriginCors,
@@ -76,6 +82,7 @@ import {
   installAccessLogMiddleware,
   isBrowserAutomationMcpAvailable,
   isDeepHealthQuery,
+  isScratchRootCompatible,
   parseAllowOriginPatterns,
   parseAndValidateWorkspaceClientId,
   parseClientIdHeader,
@@ -96,29 +103,29 @@ import {
   setRateLimiter,
   unsafeRevealSecret,
   validateMcpRuntimeServerName
-} from "./chunk-BKZEHVPV.js";
+} from "./chunk-5G3ZVADU.js";
 import {
   isLoopbackBind
 } from "./chunk-RXFQM6FQ.js";
 import {
   createDaemonStatusProvider
-} from "./chunk-RYSMKY43.js";
+} from "./chunk-Z4CVMZDO.js";
 import "./chunk-LXXMOYPL.js";
-import "./chunk-QSJ6JIF5.js";
+import "./chunk-OBGWF32G.js";
 import "./chunk-E5Z2AVNV.js";
 import {
   createWorkspaceProvidersStatusProvider
-} from "./chunk-N5ARKAVE.js";
+} from "./chunk-4I7Z3D2K.js";
 import {
   getAuthTypeFromEnv,
   resolveCliGenerationConfig
-} from "./chunk-TPR35HHZ.js";
+} from "./chunk-AIAHTIQX.js";
 import {
   snapshotProcessEnv
-} from "./chunk-DRIXALGM.js";
+} from "./chunk-7Z3BQV36.js";
 import {
   createWorkspaceSkillsStatusProvider
-} from "./chunk-AZD6KAV7.js";
+} from "./chunk-ISOHMBTV.js";
 import "./chunk-2W3OOD4W.js";
 import {
   EMPTY_WORKSPACE_VOICE_UPDATE_ERROR,
@@ -133,14 +140,14 @@ import {
   validateWorkspaceSkillName,
   validateWorkspaceVoiceState,
   voiceSettingsScopeToWire
-} from "./chunk-7NDXG4MB.js";
+} from "./chunk-VMK4GQ7U.js";
 import {
   PermissionRulesValidationError,
   buildPermissionSettings,
   isPermissionRuleType,
   normalizePermissionRules,
   readPermissionRuleSet
-} from "./chunk-5EA5NVXS.js";
+} from "./chunk-RXIGY3Z7.js";
 import {
   assertVoiceBaseUrlNetworkAllowed,
   isStreamingVoiceModel,
@@ -148,12 +155,12 @@ import {
   resolveVoiceTranscriptionConfig,
   sanitizeVoiceErrorMessage,
   transcribeVoiceAudio
-} from "./chunk-EFIOE2EH.js";
+} from "./chunk-4WI3O5SO.js";
 import {
   isVoiceEnabled,
   isVoiceMode,
   readVoiceModel
-} from "./chunk-3SXF4GMQ.js";
+} from "./chunk-TSHDJIHT.js";
 import "./chunk-QLJUC7TG.js";
 import {
   WorkspacePermissionRulesSessionRequiredError,
@@ -164,30 +171,16 @@ import {
 import {
   createTotalSessionAdmissionController
 } from "./chunk-VYPFXUCB.js";
-import {
-  createSingleWorkspaceRegistry,
-  createWorkspaceSessionOwnerIndex
-} from "./chunk-UGYMA4EI.js";
 import "./chunk-GRC5HGPI.js";
-import {
-  daemonObservedContactsPath,
-  loadChannelsConfig
-} from "./chunk-4BRH6FP5.js";
-import "./chunk-G6LRTI62.js";
-import "./chunk-57OAHC2Y.js";
-import {
-  parseChannelWebhookConfigLenient
-} from "./chunk-QD6BRERJ.js";
-import "./chunk-6ZBPS62S.js";
-import "./chunk-V6WHFGST.js";
 import {
   SessionArtifactAuthorizationError,
   SessionArtifactValidationError,
   createAcpSessionBridge,
   parseSessionSource
-} from "./chunk-R7MPKABX.js";
+} from "./chunk-6KTYB3BL.js";
 import {
   EVENT_SCHEMA_VERSION,
+  EventBus,
   SubscriberLimitExceededError
 } from "./chunk-6RLROE6G.js";
 import "./chunk-COH43MRJ.js";
@@ -225,12 +218,38 @@ import {
   WorkspaceInitSymlinkError,
   WorkspaceMismatchError
 } from "./chunk-UH3WSE5L.js";
-import "./chunk-JHFVJQRO.js";
+import "./chunk-WBL3FJEU.js";
+import {
+  daemonObservedContactsPath,
+  loadChannelsConfig
+} from "./chunk-TQOHIH3J.js";
+import "./chunk-KXFNYTHD.js";
+import "./chunk-57OAHC2Y.js";
+import {
+  parseChannelWebhookConfigLenient
+} from "./chunk-GHRSKGHF.js";
+import "./chunk-6ZBPS62S.js";
+import "./chunk-V6WHFGST.js";
+import "./chunk-XP4OZD4C.js";
 import {
   STATUS_SCHEMA_VERSION,
   createIdleWorkspaceMemoryStatus,
   mapDomainErrorToErrorKind
-} from "./chunk-BWQRDISK.js";
+} from "./chunk-2M6SP3YW.js";
+import {
+  MAX_REGISTERED_WORKSPACES,
+  WorkspaceDisplayNameValidationError,
+  WorkspaceRegistrationStoreCommittedError,
+  WorkspaceRegistrationStoreLimitError,
+  normalizeWorkspaceDisplayName,
+  workspaceRegistrationId
+} from "./chunk-2DGTZXPP.js";
+import {
+  MAX_WORKSPACE_PATH_LENGTH,
+  canonicalizeWorkspace,
+  canonicalizeWorkspaces,
+  translateAndCheckAbsoluteWorkspacePath
+} from "./chunk-2RFKHEXL.js";
 import {
   MAX_CHANNEL_STARTUP_FAILURES,
   MAX_CHANNEL_STARTUP_FAILURE_CHANNEL_LENGTH,
@@ -246,7 +265,7 @@ import {
 import {
   redactLogCredentials
 } from "./chunk-M5GB774H.js";
-import "./chunk-WBL3FJEU.js";
+import "./chunk-5HBA2Z7V.js";
 import "./chunk-T2NCM2ET.js";
 import {
   sanitizeLogText
@@ -261,38 +280,23 @@ import {
   getWritableScopes,
   loadSettings,
   validateSettingValue
-} from "./chunk-7SWFAKVH.js";
+} from "./chunk-ERCSSQY3.js";
 import "./chunk-RKUWKYED.js";
 import {
   SUPPORTED_LANGUAGES,
   detectSystemLanguage,
   resolveLanguageSetting,
   resolveSupportedLanguage
-} from "./chunk-WCFTQD7H.js";
-import "./chunk-52T5UHAZ.js";
+} from "./chunk-LX4HOTPK.js";
+import "./chunk-VO6WUB5V.js";
 import "./chunk-GOXKNSDZ.js";
-import "./chunk-QRUIS3DN.js";
-import {
-  MAX_REGISTERED_WORKSPACES,
-  WorkspaceDisplayNameValidationError,
-  WorkspaceRegistrationStoreCommittedError,
-  WorkspaceRegistrationStoreLimitError,
-  normalizeWorkspaceDisplayName,
-  workspaceRegistrationId
-} from "./chunk-76OFFG6L.js";
-import {
-  MAX_WORKSPACE_PATH_LENGTH,
-  canonicalizeWorkspace,
-  canonicalizeWorkspaces,
-  translateAndCheckAbsoluteWorkspacePath
-} from "./chunk-2RFKHEXL.js";
-import "./chunk-5HBA2Z7V.js";
 import "./chunk-IDS7MSUP.js";
-import "./chunk-27CLX4FV.js";
+import "./chunk-QRUIS3DN.js";
+import "./chunk-54ABO2GD.js";
 import "./chunk-VJNBRRZG.js";
 import {
   getWorkspaceTrustStatus
-} from "./chunk-S3YQCNJE.js";
+} from "./chunk-DZDM2LCO.js";
 import "./chunk-ALGGS7UH.js";
 import {
   isWithinRoot as isWithinRoot2
@@ -343,10 +347,12 @@ import {
   fetchGitDiffHunksForFile,
   fetchGitLog,
   getGitWorkingTreeStatus,
+  getSubagentSessionDir,
   glob,
   loadIgnoreRules,
   loadUsageHistoryWithLive,
   parseInstallSource,
+  readAgentMeta,
   readWorktreeSession,
   redactUrlCredentials,
   resolveBranchName,
@@ -358,7 +364,7 @@ import {
   writeWorkspaceContextFile,
   writeWorktreeSession,
   writeWorktreeSessionMarker
-} from "./chunk-GEB2CGUV.js";
+} from "./chunk-QPYT2PMU.js";
 import "./chunk-T4TZQJ7W.js";
 import "./chunk-H6XPXXMH.js";
 import "./chunk-5M6IDOMF.js";
@@ -366,6 +372,7 @@ import "./chunk-T2L47JJK.js";
 import "./chunk-GPSKDNEE.js";
 import "./chunk-X6N25LXS.js";
 import "./chunk-E2UVIFI2.js";
+import "./chunk-5IDR6XE4.js";
 import {
   MAX_JOBS,
   nextDurableFireMs
@@ -385,7 +392,6 @@ import {
 } from "./chunk-KHOVYUHX.js";
 import "./chunk-SZRN75WQ.js";
 import "./chunk-6PVPNMXU.js";
-import "./chunk-PIHKWN7M.js";
 import "./chunk-CPBF7KYF.js";
 import "./chunk-NABLFI57.js";
 import "./chunk-QBUDF33N.js";
@@ -399,10 +405,6 @@ import "./chunk-6AM5D4ME.js";
 import "./chunk-JCW2R7WC.js";
 import "./chunk-57FIIFJN.js";
 import "./chunk-HTO4JFDZ.js";
-import "./chunk-XVNQMZ2I.js";
-import "./chunk-CR3C7WXL.js";
-import "./chunk-FODK6UMO.js";
-import "./chunk-GLNBDYUX.js";
 import {
   QwenOAuth2Client,
   QwenOAuthPollError,
@@ -411,12 +413,15 @@ import {
   isDeviceAuthorizationSuccess,
   isDeviceTokenPending,
   isDeviceTokenSuccess
-} from "./chunk-TXRKCFWS.js";
+} from "./chunk-7UOLRSUW.js";
 import "./chunk-JESCGQM3.js";
-import "./chunk-EWXXMRMP.js";
-import "./chunk-PPIHLGNE.js";
+import "./chunk-JJEBXTZW.js";
+import "./chunk-B3QY5TAE.js";
+import "./chunk-XVNQMZ2I.js";
+import "./chunk-CR3C7WXL.js";
+import "./chunk-FODK6UMO.js";
+import "./chunk-GLNBDYUX.js";
 import "./chunk-DJ2GSRLV.js";
-import "./chunk-5I5BM454.js";
 import {
   addDaemonRequestAttribute,
   decodeBufferWithEncodingInfo,
@@ -425,15 +430,17 @@ import {
   hashDaemonWorkspace,
   isBinaryFile,
   isWithinRoot,
+  parseLineTolerant,
+  read,
   recordDaemonBridgeError,
   recordDaemonError,
   recordDaemonHttpRequest,
   recordDaemonHttpResponse,
   withDaemonRequestSpan
-} from "./chunk-5G2SK2OO.js";
+} from "./chunk-IGAR75ZK.js";
 import "./chunk-VGC4I5JJ.js";
 import "./chunk-4K56OJFJ.js";
-import "./chunk-JYS55H6Z.js";
+import "./chunk-CBOQ3HY7.js";
 import "./chunk-A4UCTEB5.js";
 import "./chunk-XWRJCPHC.js";
 import "./chunk-QNLNLENL.js";
@@ -443,9 +450,9 @@ import {
   import_websocket_server
 } from "./chunk-TYAMGABM.js";
 import "./chunk-FCMNKVXT.js";
-import "./chunk-IS2SBY6T.js";
+import "./chunk-RCUEYZDE.js";
 import "./chunk-HTR4WV6U.js";
-import "./chunk-M7WBGLYP.js";
+import "./chunk-BULDBTYC.js";
 import "./chunk-U7ZFW55U.js";
 import "./chunk-NPQDJGKU.js";
 import "./chunk-YM3SZTH4.js";
@@ -650,9 +657,9 @@ async function findExistingAncestor(absolute) {
   let current = absolute;
   const tailParts = [];
   for (let i = 0; i < MAX_ANCESTOR_HOPS; i++) {
-    let stat2 = null;
+    let stat3 = null;
     try {
-      stat2 = await fsp.stat(current);
+      stat3 = await fsp.stat(current);
     } catch (err) {
       const code = err?.code;
       if (code === "ENOENT" || code === "ENOTDIR") {
@@ -660,8 +667,8 @@ async function findExistingAncestor(absolute) {
         throw err;
       }
     }
-    if (stat2) {
-      if (tailParts.length > 0 && !stat2.isDirectory()) {
+    if (stat3) {
+      if (tailParts.length > 0 && !stat3.isDirectory()) {
         throw new FsError(
           "parse_error",
           `path component is not a directory: ${absolute}`,
@@ -734,7 +741,7 @@ async function resolveWithinWorkspace(input, boundWorkspaces, intent) {
             boundCanonicals
           );
           if (boundCanonical !== void 0) {
-            const finalPathIsSymlink = await fsp.lstat(absolute).then((stat2) => stat2.isSymbolicLink()).catch((lstatErr) => {
+            const finalPathIsSymlink = await fsp.lstat(absolute).then((stat3) => stat3.isSymbolicLink()).catch((lstatErr) => {
               if (lstatErr.code === "ENOENT" || lstatErr.code === "ENOTDIR") {
                 return false;
               }
@@ -1225,8 +1232,8 @@ var WorkspaceFileSystemImpl = class {
         const toRead = Math.min(maxBytes, available);
         buf = Buffer.allocUnsafe(toRead);
         if (toRead > 0) {
-          const read = await fh.read(buf, 0, toRead, offset);
-          buf = read.bytesRead === toRead ? buf : buf.subarray(0, read.bytesRead);
+          const read2 = await fh.read(buf, 0, toRead, offset);
+          buf = read2.bytesRead === toRead ? buf : buf.subarray(0, read2.bytesRead);
         }
         const afterRead = await fh.stat();
         assertSameFile(st, afterRead, p, "read");
@@ -1767,17 +1774,17 @@ var WorkspaceFileSystemImpl = class {
    *     for their `sendFsError` serializer.
    */
   recordAndWrap(err, intent, input) {
-    const fs5 = wrapAsFsError(err);
+    const fs6 = wrapAsFsError(err);
     this.deps.audit.recordDenied(this.deps.ctx, {
       intent,
       input,
-      errorKind: fs5.kind,
-      hint: fs5.hint,
+      errorKind: fs6.kind,
+      hint: fs6.hint,
       // Quote the underlying OS / FsError message so audit
       // consumers debugging a production incident can see the
       // actual cause (errno text, byte counts, glob pattern,
       // etc.) rather than just `errorKind` + `hint`.
-      message: fs5.message,
+      message: fs6.message,
       // For glob denials (parse_error pattern rejection,
       // catastrophic walk failures) the input IS the pattern
       // already; surfacing it on the dedicated `pattern` field
@@ -1786,7 +1793,7 @@ var WorkspaceFileSystemImpl = class {
       // branching on intent.
       pattern: intent === "glob" ? input : void 0
     });
-    return fs5;
+    return fs6;
   }
 };
 var CONTENT_HASH_RE = /^sha256:[0-9a-f]{64}$/;
@@ -1894,9 +1901,9 @@ async function readStableRegularFileBuffer(p, pre) {
     const out = Buffer.alloc(opened.size);
     let offset = 0;
     while (offset < opened.size) {
-      const read = await fh.read(out, offset, opened.size - offset, offset);
-      if (read.bytesRead === 0) break;
-      offset += read.bytesRead;
+      const read2 = await fh.read(out, offset, opened.size - offset, offset);
+      if (read2.bytesRead === 0) break;
+      offset += read2.bytesRead;
     }
     const afterRead = await fh.stat();
     assertSameFile(opened, afterRead, p, "read");
@@ -2151,15 +2158,15 @@ async function hashRegularFileAtPath(p, pre) {
     const buf = Buffer.allocUnsafe(64 * 1024);
     let offset = 0;
     while (offset < opened.size) {
-      const read = await fh.read(
+      const read2 = await fh.read(
         buf,
         0,
         Math.min(buf.length, opened.size - offset),
         offset
       );
-      if (read.bytesRead === 0) break;
-      hash.update(buf.subarray(0, read.bytesRead));
-      offset += read.bytesRead;
+      if (read2.bytesRead === 0) break;
+      hash.update(buf.subarray(0, read2.bytesRead));
+      offset += read2.bytesRead;
     }
   } finally {
     await fh.close();
@@ -2523,12 +2530,12 @@ __name(applyReadHeaders, "applyReadHeaders");
 function sendFsError(res, err, route) {
   applyReadHeaders(res);
   if (isFsError(err)) {
-    const fs5 = err;
-    res.status(fs5.status).json({
-      errorKind: fs5.kind,
-      error: fs5.message,
-      hint: fs5.hint,
-      status: fs5.status
+    const fs6 = err;
+    res.status(fs6.status).json({
+      errorKind: fs6.kind,
+      error: fs6.message,
+      hint: fs6.hint,
+      status: fs6.status
     });
     return;
   }
@@ -2630,13 +2637,13 @@ async function handleGetFile(req, res, deps) {
     });
     return;
   }
-  const fs5 = factory.forRequest({
+  const fs6 = factory.forRequest({
     originatorClientId: clientId ?? void 0,
     route: ROUTE2
   });
   try {
-    const resolved = await fs5.resolve(queryPath, "read");
-    const out = await fs5.readText(resolved, { maxBytes, line, limit });
+    const resolved = await fs6.resolve(queryPath, "read");
+    const out = await fs6.readText(resolved, { maxBytes, line, limit });
     const returnedBytes = Buffer.byteLength(out.content, "utf-8");
     applyReadHeaders(res);
     res.status(200).json({
@@ -2690,13 +2697,13 @@ async function handleGetFileBytes(req, res, deps) {
     });
     return;
   }
-  const fs5 = factory.forRequest({
+  const fs6 = factory.forRequest({
     originatorClientId: clientId ?? void 0,
     route: ROUTE2
   });
   try {
-    const resolved = await fs5.resolve(queryPath, "read");
-    const out = await fs5.readBytesWindow(resolved, {
+    const resolved = await fs6.resolve(queryPath, "read");
+    const out = await fs6.readBytesWindow(resolved, {
       offset: offset ?? 0,
       maxBytes: maxBytes ?? DEFAULT_FILE_BYTES_MAX_BYTES
     });
@@ -2724,13 +2731,13 @@ async function handleGetStat(req, res, deps) {
   if (clientId === null) return;
   const queryPath = requireStringQuery(res, req.query["path"], "path", ROUTE2);
   if (queryPath === null) return;
-  const fs5 = factory.forRequest({
+  const fs6 = factory.forRequest({
     originatorClientId: clientId ?? void 0,
     route: ROUTE2
   });
   try {
-    const resolved = await fs5.resolve(queryPath, "stat");
-    const st = await fs5.stat(resolved);
+    const resolved = await fs6.resolve(queryPath, "stat");
+    const st = await fs6.stat(resolved);
     applyReadHeaders(res);
     res.status(200).json({
       kind: "stat",
@@ -2753,13 +2760,13 @@ async function handleGetList(req, res, deps) {
   const queryPath = requireStringQuery(res, req.query["path"], "path", ROUTE2);
   if (queryPath === null) return;
   const includeIgnored = parseBoolFlag(req.query["includeIgnored"]);
-  const fs5 = factory.forRequest({
+  const fs6 = factory.forRequest({
     originatorClientId: clientId ?? void 0,
     route: ROUTE2
   });
   try {
-    const resolved = await fs5.resolve(queryPath, "list");
-    const entries = await fs5.list(resolved, {
+    const resolved = await fs6.resolve(queryPath, "list");
+    const entries = await fs6.list(resolved, {
       includeIgnored,
       maxEntries: MAX_LIST_ENTRIES + 1
     });
@@ -2812,15 +2819,15 @@ async function handleGetGlob(req, res, deps) {
   }
   const cwdRaw = req.query["cwd"];
   const cwdString = typeof cwdRaw === "string" && cwdRaw.length > 0 ? cwdRaw : void 0;
-  const fs5 = factory.forRequest({
+  const fs6 = factory.forRequest({
     originatorClientId: clientId ?? void 0,
     route: ROUTE2
   });
   const start = performance.now();
   try {
-    const cwdResolved = cwdString ? await fs5.resolve(cwdString, "list") : void 0;
+    const cwdResolved = cwdString ? await fs6.resolve(cwdString, "list") : void 0;
     const cap = maxResults ?? DEFAULT_GLOB_MAX_RESULTS;
-    const probe = await fs5.glob(pattern, {
+    const probe = await fs6.glob(pattern, {
       cwd: cwdResolved,
       includeIgnored,
       maxResults: cap + 1
@@ -2994,7 +3001,7 @@ function validateClientId(clientId, deps, res) {
 }
 __name(validateClientId, "validateClientId");
 function createSetupGithubFileOps(factory, route, originatorClientId) {
-  const fs5 = factory.forRequest({
+  const fs6 = factory.forRequest({
     route,
     ...originatorClientId ? { originatorClientId } : {}
   });
@@ -3017,14 +3024,14 @@ function createSetupGithubFileOps(factory, route, originatorClientId) {
       ]);
     },
     async writeTextFile(_gitRepoRoot, relativePath, content) {
-      const resolved = await fs5.resolve(relativePath, "write");
-      const out = await fs5.writeTextOverwrite(resolved, content);
+      const resolved = await fs6.resolve(relativePath, "write");
+      const out = await fs6.writeTextOverwrite(resolved, content);
       return { sizeBytes: out.sizeBytes };
     },
     async readTextFile(_gitRepoRoot, relativePath) {
       try {
-        const resolved = await fs5.resolve(relativePath, "read");
-        const out = await fs5.readText(resolved);
+        const resolved = await fs6.resolve(relativePath, "read");
+        const out = await fs6.readText(resolved);
         return out.content;
       } catch (error2) {
         if (isFsError(error2) && error2.kind === "path_not_found") {
@@ -3045,15 +3052,15 @@ async function ensureDirectoryWithoutSymlink(root, segments) {
     checkedSegments.push(segment);
     const label = `Workspace path "${checkedSegments.join("/")}"`;
     try {
-      const stat2 = await fsp3.lstat(current);
-      if (stat2.isSymbolicLink()) {
+      const stat3 = await fsp3.lstat(current);
+      if (stat3.isSymbolicLink()) {
         throw new SetupGithubError(
           "github_setup_invalid_workspace",
           `${label} must not be a symlink.`,
           400
         );
       }
-      if (!stat2.isDirectory()) {
+      if (!stat3.isDirectory()) {
         throw new SetupGithubError(
           "github_setup_invalid_workspace",
           `${label} must be a directory.`,
@@ -3090,15 +3097,15 @@ async function ensureDirectoryWithoutSymlink(root, segments) {
 }
 __name(ensureDirectoryWithoutSymlink, "ensureDirectoryWithoutSymlink");
 async function assertDirectoryWithoutSymlink(target, label) {
-  const stat2 = await fsp3.lstat(target);
-  if (stat2.isSymbolicLink()) {
+  const stat3 = await fsp3.lstat(target);
+  if (stat3.isSymbolicLink()) {
     throw new SetupGithubError(
       "github_setup_invalid_workspace",
       `${label} must not be a symlink.`,
       400
     );
   }
-  if (!stat2.isDirectory()) {
+  if (!stat3.isDirectory()) {
     throw new SetupGithubError(
       "github_setup_invalid_workspace",
       `${label} must be a directory.`,
@@ -4739,12 +4746,12 @@ async function collectWorkspaceMemoryStatus(boundWorkspace) {
   for (const filename of filenames) {
     const candidate = path8.join(globalDir, filename);
     try {
-      const stat2 = await fs.stat(candidate);
-      if (stat2.isFile()) {
+      const stat3 = await fs.stat(candidate);
+      if (stat3.isFile()) {
         files.push({
           absolutePath: candidate,
           scope: "global",
-          bytes: stat2.size
+          bytes: stat3.size
         });
       }
     } catch (err) {
@@ -4788,12 +4795,12 @@ async function walkWorkspaceForMemory(start, filenames, errors) {
   for (const filename of filenames) {
     const candidate = path8.join(start, filename);
     try {
-      const stat2 = await fs.stat(candidate);
-      if (stat2.isFile()) {
+      const stat3 = await fs.stat(candidate);
+      if (stat3.isFile()) {
         out.push({
           absolutePath: candidate,
           scope: "workspace",
-          bytes: stat2.size
+          bytes: stat3.size
         });
       }
     } catch (err) {
@@ -9045,7 +9052,7 @@ var AcpDispatcher = class {
               );
             return;
           }
-          const fs5 = this.fsFactory.forRequest({
+          const fs6 = this.fsFactory.forRequest({
             originatorClientId: conn.clientId,
             route: `ACP ${method}`
           });
@@ -9097,8 +9104,8 @@ var AcpDispatcher = class {
               );
             return;
           }
-          const resolved = await fs5.resolve(p, "read");
-          const out = await fs5.readText(resolved, { maxBytes, line, limit });
+          const resolved = await fs6.resolve(p, "read");
+          const out = await fs6.readText(resolved, { maxBytes, line, limit });
           this.replyConn(conn, id, {
             path: p,
             content: out.content,
@@ -9120,7 +9127,7 @@ var AcpDispatcher = class {
               conn.sendConn(error(id, RPC.INVALID_PARAMS, "`path` required"));
             return;
           }
-          const fs5 = this.fsFactory.forRequest({
+          const fs6 = this.fsFactory.forRequest({
             originatorClientId: conn.clientId,
             route: `ACP ${method}`
           });
@@ -9156,8 +9163,8 @@ var AcpDispatcher = class {
               );
             return;
           }
-          const resolved = await fs5.resolve(p, "read");
-          const buf = await fs5.readBytesWindow(resolved, { offset, maxBytes });
+          const resolved = await fs6.resolve(p, "read");
+          const buf = await fs6.readBytesWindow(resolved, { offset, maxBytes });
           this.replyConn(conn, id, { path: p, ...buf });
           return;
         }
@@ -9175,12 +9182,12 @@ var AcpDispatcher = class {
               conn.sendConn(error(id, RPC.INVALID_PARAMS, "`path` required"));
             return;
           }
-          const fs5 = this.fsFactory.forRequest({
+          const fs6 = this.fsFactory.forRequest({
             originatorClientId: conn.clientId,
             route: `ACP ${method}`
           });
-          const resolved = await fs5.resolve(p, "read");
-          const result = await fs5.stat(resolved);
+          const resolved = await fs6.resolve(p, "read");
+          const result = await fs6.stat(resolved);
           this.replyConn(conn, id, { path: p, ...result });
           return;
         }
@@ -9198,13 +9205,13 @@ var AcpDispatcher = class {
               conn.sendConn(error(id, RPC.INVALID_PARAMS, "`path` required"));
             return;
           }
-          const fs5 = this.fsFactory.forRequest({
+          const fs6 = this.fsFactory.forRequest({
             originatorClientId: conn.clientId,
             route: `ACP ${method}`
           });
-          const resolved = await fs5.resolve(p, "read");
+          const resolved = await fs6.resolve(p, "read");
           const MAX_LIST = 2e3;
-          const entries = await fs5.list(resolved, { maxEntries: MAX_LIST + 1 });
+          const entries = await fs6.list(resolved, { maxEntries: MAX_LIST + 1 });
           const truncated = entries.length > MAX_LIST;
           this.replyConn(conn, id, {
             path: p,
@@ -9229,7 +9236,7 @@ var AcpDispatcher = class {
               );
             return;
           }
-          const fs5 = this.fsFactory.forRequest({
+          const fs6 = this.fsFactory.forRequest({
             originatorClientId: conn.clientId,
             route: `ACP ${method}`
           });
@@ -9249,7 +9256,7 @@ var AcpDispatcher = class {
               );
             return;
           }
-          const matches = await fs5.glob(pattern, {
+          const matches = await fs6.glob(pattern, {
             maxResults: maxResults + 1
           });
           const truncated = matches.length > maxResults;
@@ -9281,11 +9288,11 @@ var AcpDispatcher = class {
               );
             return;
           }
-          const fs5 = this.fsFactory.forRequest({
+          const fs6 = this.fsFactory.forRequest({
             originatorClientId: conn.clientId,
             route: `ACP ${method}`
           });
-          const resolved = await fs5.resolve(p, "write");
+          const resolved = await fs6.resolve(p, "write");
           if (Buffer.byteLength(params["content"], "utf8") > 10 * 1024 * 1024) {
             if (id !== void 0)
               conn.sendConn(
@@ -9293,7 +9300,7 @@ var AcpDispatcher = class {
               );
             return;
           }
-          await fs5.writeTextOverwrite(resolved, params["content"]);
+          await fs6.writeTextOverwrite(resolved, params["content"]);
           this.replyConn(conn, id, { ok: true, path: p });
           return;
         }
@@ -9322,12 +9329,12 @@ var AcpDispatcher = class {
               );
             return;
           }
-          const fs5 = this.fsFactory.forRequest({
+          const fs6 = this.fsFactory.forRequest({
             originatorClientId: conn.clientId,
             route: `ACP ${method}`
           });
-          const resolved = await fs5.resolve(p, "write");
-          const result = await fs5.edit(
+          const resolved = await fs6.resolve(p, "write");
+          const result = await fs6.edit(
             resolved,
             params["oldText"],
             params["newText"]
@@ -17518,13 +17525,13 @@ async function handlePostFileWrite(req, res, deps) {
     req
   );
   if (originatorClientId === null) return;
-  const fs5 = factory.forRequest({
+  const fs6 = factory.forRequest({
     originatorClientId,
     route: ROUTE2
   });
   try {
-    const resolved = await fs5.resolve(queryPath, "write");
-    const out = await fs5.writeTextAtomic(resolved, content, {
+    const resolved = await fs6.resolve(queryPath, "write");
+    const out = await fs6.writeTextAtomic(resolved, content, {
       mode,
       ...expectedHash ? { expectedHash } : {},
       ...bom !== void 0 ? { bom } : {},
@@ -17577,13 +17584,13 @@ async function handlePostFileEdit(req, res, deps) {
     req
   );
   if (originatorClientId === null) return;
-  const fs5 = factory.forRequest({
+  const fs6 = factory.forRequest({
     originatorClientId,
     route: ROUTE2
   });
   try {
-    const resolved = await fs5.resolve(queryPath, "edit");
-    const out = await fs5.editAtomic(resolved, oldText, newText, {
+    const resolved = await fs6.resolve(queryPath, "edit");
+    const out = await fs6.editAtomic(resolved, oldText, newText, {
       expectedHash
     });
     applyReadHeaders(res);
@@ -17911,6 +17918,18 @@ var legacySessionTelemetryRoutes = [
     attribution: "handler_resolved",
     route: "GET /session/:id/tasks"
   },
+  {
+    method: "GET",
+    path: "/session/:id/subagents/:toolCallId",
+    attribution: "handler_resolved",
+    route: "GET /session/:id/subagents/:toolCallId"
+  },
+  {
+    method: "POST",
+    path: "/session/:id/subagents/:toolCallId/cancel",
+    attribution: "handler_resolved",
+    route: "POST /session/:id/subagents/:toolCallId/cancel"
+  },
   {
     method: "GET",
     path: "/session/:id/lsp",
@@ -18593,7 +18612,7 @@ __name(registerPermissionRoutes, "registerPermissionRoutes");
 // packages/cli/src/serve/routes/session.ts
 init_esbuild_shims();
 import * as crypto3 from "node:crypto";
-import * as fs3 from "node:fs";
+import * as fs4 from "node:fs";
 import * as path10 from "node:path";
 
 // packages/cli/src/serve/server/prompt-deadline.ts
@@ -19199,6 +19218,714 @@ async function exportSessionTranscript(params) {
 }
 __name(exportSessionTranscript, "exportSessionTranscript");
 
+// packages/cli/src/serve/virtual-subagent-sessions.ts
+init_esbuild_shims();
+import * as fs3 from "node:fs/promises";
+import { createReadStream } from "node:fs";
+import readline from "node:readline";
+var PREFIX = "subagent.";
+var POLL_INTERVAL_MS = 250;
+var TARGET_RETENTION_MS = 6e4;
+async function readFirstUserText(filePath) {
+  const stream = createReadStream(filePath);
+  const lines = readline.createInterface({
+    input: stream,
+    crlfDelay: Infinity
+  });
+  try {
+    for await (const line of lines) {
+      const trimmed = line.trim();
+      if (!trimmed) continue;
+      for (const record of parseLineTolerant(trimmed, filePath)) {
+        if (record.type !== "user") continue;
+        return record.message?.parts?.find(
+          (part) => typeof part.text === "string"
+        )?.text;
+      }
+    }
+    return void 0;
+  } catch (error2) {
+    if (error2.code === "ENOENT") return void 0;
+    throw error2;
+  } finally {
+    lines.close();
+    stream.destroy();
+  }
+}
+__name(readFirstUserText, "readFirstUserText");
+function asRecord(value) {
+  return typeof value === "object" && value !== null ? value : void 0;
+}
+__name(asRecord, "asRecord");
+function finiteNonNegative(value) {
+  return typeof value === "number" && Number.isFinite(value) && value >= 0 ? value : void 0;
+}
+__name(finiteNonNegative, "finiteNonNegative");
+function normalizeTaskStatus(status) {
+  if (typeof status !== "string") return void 0;
+  if (status === "success") return "completed";
+  if (status === "error") return "failed";
+  if (status === "background") return "running";
+  return status;
+}
+__name(normalizeTaskStatus, "normalizeTaskStatus");
+function durationBetween(start, end) {
+  if (!end) return void 0;
+  const startTime = Date.parse(start);
+  const endTime = Date.parse(end);
+  return Number.isFinite(startTime) && Number.isFinite(endTime) ? Math.max(0, endTime - startTime) : void 0;
+}
+__name(durationBetween, "durationBetween");
+function findToolCallMetrics(records, toolCallId) {
+  const toolResult = records.find(
+    (record) => record.toolCallResult?.callId === toolCallId
+  )?.toolCallResult;
+  const display = asRecord(toolResult?.resultDisplay);
+  const summary = asRecord(display?.["executionSummary"]);
+  return {
+    status: normalizeTaskStatus(display?.["status"]) ?? normalizeTaskStatus(toolResult?.status),
+    durationMs: finiteNonNegative(summary?.["totalDurationMs"]),
+    totalTokens: finiteNonNegative(summary?.["totalTokens"]) ?? finiteNonNegative(display?.["tokenCount"]),
+    inputTokens: finiteNonNegative(summary?.["inputTokens"]),
+    outputTokens: finiteNonNegative(summary?.["outputTokens"]),
+    cachedTokens: finiteNonNegative(summary?.["cachedTokens"])
+  };
+}
+__name(findToolCallMetrics, "findToolCallMetrics");
+function encodePart(value) {
+  return Buffer.from(value, "utf8").toString("base64url");
+}
+__name(encodePart, "encodePart");
+function decodePart(value) {
+  try {
+    return Buffer.from(value, "base64url").toString("utf8");
+  } catch {
+    return void 0;
+  }
+}
+__name(decodePart, "decodePart");
+function isValidVirtualSessionPart(value) {
+  return /^[a-zA-Z0-9_-]{1,500}$/.test(value);
+}
+__name(isValidVirtualSessionPart, "isValidVirtualSessionPart");
+function createVirtualSubagentSessionId(parentSessionId, agentId) {
+  if (!isValidVirtualSessionPart(parentSessionId) || !isValidVirtualSessionPart(agentId)) {
+    throw new Error("Virtual subagent session ids require valid id parts");
+  }
+  return `${PREFIX}${encodePart(parentSessionId)}.${encodePart(agentId)}`;
+}
+__name(createVirtualSubagentSessionId, "createVirtualSubagentSessionId");
+function parseVirtualSubagentSessionId(sessionId) {
+  if (!sessionId.startsWith(PREFIX) || sessionId.length > 2e3) {
+    return void 0;
+  }
+  const parts = sessionId.slice(PREFIX.length).split(".");
+  if (parts.length !== 2) return void 0;
+  const parentSessionId = decodePart(parts[0]);
+  const agentId = decodePart(parts[1]);
+  if (!parentSessionId || !agentId || !isValidVirtualSessionPart(parentSessionId) || !isValidVirtualSessionPart(agentId)) {
+    return void 0;
+  }
+  return { parentSessionId, agentId };
+}
+__name(parseVirtualSubagentSessionId, "parseVirtualSubagentSessionId");
+function replayCursorState(sessionId, position, leafUuid, startTime, lastUpdated) {
+  return {
+    v: 1,
+    sessionId,
+    fileIdentity: { dev: 0, ino: 0 },
+    snapshotSize: position,
+    position,
+    leafUuid,
+    startTime,
+    lastUpdated
+  };
+}
+__name(replayCursorState, "replayCursorState");
+var VirtualSubagentTarget = class _VirtualSubagentTarget {
+  constructor(sessionId, parentSessionId, task, workspaceCwd, onExpired) {
+    this.sessionId = sessionId;
+    this.parentSessionId = parentSessionId;
+    this.task = task;
+    this.workspaceCwd = workspaceCwd;
+    this.onExpired = onExpired;
+  }
+  static {
+    __name(this, "VirtualSubagentTarget");
+  }
+  bus = new EventBus(1024, 8);
+  events = [];
+  snapshotDelivered = false;
+  offset = 0;
+  transcriptIdentity;
+  streamOffset = 0;
+  streamIdentity;
+  streamReady = false;
+  canonicalThroughTimestamp = 0;
+  completedStreamRounds = /* @__PURE__ */ new Set();
+  streamedRounds = /* @__PURE__ */ new Set();
+  streamRunIds = /* @__PURE__ */ new Set();
+  legacyStreamedSinceCanonical = false;
+  replayState;
+  initialized = false;
+  refreshPromise = Promise.resolve();
+  snapshotPromise = Promise.resolve();
+  pollTimer;
+  subscribers = 0;
+  retentionTimer;
+  updateStatus(status) {
+    const wasRunning = this.task.status === "running";
+    this.task.status = status;
+    if (status !== "running" && this.pollTimer) {
+      clearInterval(this.pollTimer);
+      this.pollTimer = void 0;
+    }
+    if (wasRunning && status !== "running") {
+      void this.refreshLive().catch(() => void 0);
+    }
+  }
+  rememberEvent(event) {
+    if (event && !this.snapshotDelivered) this.events.push(event);
+  }
+  resetCanonicalState() {
+    this.offset = 0;
+    this.replayState = void 0;
+    this.canonicalThroughTimestamp = 0;
+    this.completedStreamRounds.clear();
+    this.streamRunIds.clear();
+    this.streamedRounds.clear();
+    this.legacyStreamedSinceCanonical = false;
+  }
+  resetStreamState() {
+    this.streamOffset = 0;
+    this.completedStreamRounds.clear();
+    this.streamRunIds.clear();
+    this.streamedRounds.clear();
+    this.legacyStreamedSinceCanonical = false;
+  }
+  async readNewRecords(endOffset) {
+    let handle;
+    try {
+      handle = await fs3.open(this.task.outputFile, "r");
+      const stat3 = await handle.stat();
+      const identity = `${stat3.dev}:${stat3.ino}`;
+      if (this.transcriptIdentity !== void 0 && this.transcriptIdentity !== identity || stat3.size < this.offset) {
+        this.resetCanonicalState();
+      }
+      this.transcriptIdentity = identity;
+      const size = Math.min(stat3.size, endOffset ?? stat3.size);
+      if (size <= this.offset) return [];
+      const bytes = Buffer.alloc(size - this.offset);
+      const { bytesRead } = await handle.read(
+        bytes,
+        0,
+        bytes.length,
+        this.offset
+      );
+      const chunk = bytes.subarray(0, bytesRead);
+      const lastNewline = chunk.lastIndexOf(10);
+      if (lastNewline < 0) return [];
+      const complete = chunk.subarray(0, lastNewline + 1);
+      this.offset += complete.length;
+      return complete.toString("utf8").split("\n").flatMap((line) => {
+        const trimmed = line.trim();
+        return trimmed ? parseLineTolerant(trimmed, this.task.outputFile) : [];
+      });
+    } catch (error2) {
+      if (error2.code === "ENOENT") {
+        if (this.transcriptIdentity !== void 0) {
+          this.transcriptIdentity = void 0;
+          this.resetCanonicalState();
+        }
+        return [];
+      }
+      throw error2;
+    } finally {
+      await handle?.close();
+    }
+  }
+  async readStreamUpdates(endOffset) {
+    const replayingExisting = !this.streamReady;
+    this.streamReady = true;
+    const filePath = `${this.task.outputFile}.stream`;
+    let handle;
+    try {
+      handle = await fs3.open(filePath, "r");
+      const stat3 = await handle.stat();
+      const identity = `${stat3.dev}:${stat3.ino}`;
+      if (this.streamIdentity !== void 0 && this.streamIdentity !== identity) {
+        this.resetStreamState();
+      }
+      this.streamIdentity = identity;
+      if (stat3.size < this.streamOffset) this.resetStreamState();
+      const size = Math.min(stat3.size, endOffset ?? stat3.size);
+      if (size <= this.streamOffset) return;
+      const bytes = Buffer.alloc(size - this.streamOffset);
+      const { bytesRead } = await handle.read(
+        bytes,
+        0,
+        bytes.length,
+        this.streamOffset
+      );
+      const chunk = bytes.subarray(0, bytesRead);
+      const lastNewline = chunk.lastIndexOf(10);
+      if (lastNewline < 0) return;
+      const complete = chunk.subarray(0, lastNewline + 1);
+      this.streamOffset += complete.length;
+      const records = complete.toString("utf8").split("\n").flatMap((line) => {
+        const trimmed = line.trim();
+        return trimmed ? parseLineTolerant(trimmed, filePath) : [];
+      });
+      for (const record of records) {
+        if (record.v !== 1 || typeof record.text !== "string" || typeof record.timestamp !== "number") {
+          continue;
+        }
+        const roundKey = typeof record.runId === "string" && typeof record.round === "number" ? `${record.runId}:${record.round}` : void 0;
+        if (typeof record.runId === "string") {
+          this.streamRunIds.add(record.runId);
+        }
+        if ((roundKey ? this.completedStreamRounds.has(roundKey) : record.timestamp <= this.canonicalThroughTimestamp) || replayingExisting && typeof record.round !== "number") {
+          continue;
+        }
+        const event = this.bus.publish({
+          type: "session_update",
+          data: createTranscriptMessageUpdate({
+            role: "assistant",
+            text: record.text,
+            timestamp: record.timestamp,
+            ...record.thought ? { thought: true } : {}
+          })
+        });
+        this.rememberEvent(event);
+        if (roundKey) this.streamedRounds.add(roundKey);
+        else this.legacyStreamedSinceCanonical = true;
+      }
+      for (const completed of this.completedStreamRounds) {
+        const runId = completed.slice(0, completed.lastIndexOf(":"));
+        if (!this.streamRunIds.has(runId)) {
+          this.completedStreamRounds.delete(completed);
+        }
+      }
+    } catch (error2) {
+      if (error2.code !== "ENOENT") throw error2;
+      this.streamIdentity = void 0;
+      this.streamOffset = 0;
+      this.streamRunIds.clear();
+      this.streamedRounds.clear();
+      this.legacyStreamedSinceCanonical = false;
+    } finally {
+      await handle?.close();
+    }
+  }
+  refreshOnce = /* @__PURE__ */ __name(async (endOffset) => {
+    let records = await this.readNewRecords(endOffset);
+    if (records.length === 0) {
+      this.initialized = true;
+      return;
+    }
+    for (const record of records) {
+      if (record.type === "assistant" && (record.usageMetadata !== void 0 || record.message?.parts?.some((part) => typeof part.text === "string"))) {
+        if (typeof record.agentRunId === "string" && typeof record.agentRound === "number") {
+          this.completedStreamRounds.add(
+            `${record.agentRunId}:${record.agentRound}`
+          );
+        }
+        const timestamp = Date.parse(record.timestamp);
+        if (Number.isFinite(timestamp)) {
+          this.canonicalThroughTimestamp = Math.max(
+            this.canonicalThroughTimestamp,
+            timestamp
+          );
+        }
+      }
+    }
+    if (this.streamedRounds.size > 0 || this.legacyStreamedSinceCanonical) {
+      records = records.filter((record) => {
+        const roundKey = typeof record.agentRunId === "string" && typeof record.agentRound === "number" ? `${record.agentRunId}:${record.agentRound}` : void 0;
+        if (roundKey && this.streamedRounds.delete(roundKey)) return false;
+        if (!this.legacyStreamedSinceCanonical || record.type !== "assistant" || record.message?.parts?.some((part) => part.functionCall)) {
+          return true;
+        }
+        this.legacyStreamedSinceCanonical = false;
+        return false;
+      });
+      if (records.length === 0) {
+        this.initialized = true;
+        return;
+      }
+    }
+    const startTime = records[0]?.timestamp ?? (/* @__PURE__ */ new Date()).toISOString();
+    const lastUpdated = records[records.length - 1]?.timestamp ?? (/* @__PURE__ */ new Date()).toISOString();
+    const page = {
+      sessionId: this.sessionId,
+      filePath: this.task.outputFile,
+      records,
+      gaps: [],
+      hasMore: true,
+      replay: this.replayState,
+      startTime,
+      lastUpdated,
+      nextCursorState: replayCursorState(
+        this.sessionId,
+        this.offset,
+        records[records.length - 1]?.uuid ?? "",
+        startTime,
+        lastUpdated
+      )
+    };
+    let nextReplayState;
+    const replay = await replayTranscriptRecordPage({
+      sessionId: this.sessionId,
+      page,
+      encodeCursor: /* @__PURE__ */ __name((state) => {
+        nextReplayState = state.replay;
+        return "virtual-subagent-replay";
+      }, "encodeCursor")
+    });
+    this.replayState = nextReplayState;
+    const inputs = replay.updates.map((update) => ({
+      type: "session_update",
+      data: update
+    }));
+    const published = this.initialized ? inputs.flatMap((input) => {
+      const event = this.bus.publish(input);
+      return event ? [event] : [];
+    }) : this.bus.seedReplayEvents(inputs);
+    if (!this.snapshotDelivered) this.events.push(...published);
+    this.initialized = true;
+  }, "refreshOnce");
+  refreshAt(bounds) {
+    return this.refreshOnce(bounds?.transcript).then(async () => {
+      if (this.task.status === "running") {
+        await this.readStreamUpdates(bounds?.stream);
+      }
+    });
+  }
+  enqueueRefresh(work) {
+    const result = this.refreshPromise.catch(() => void 0).then(work);
+    this.refreshPromise = result.then(
+      () => void 0,
+      () => void 0
+    );
+    return result;
+  }
+  refreshLive() {
+    return this.enqueueRefresh(() => this.refreshAt());
+  }
+  async captureReadBounds() {
+    const size = /* @__PURE__ */ __name(async (filePath) => {
+      try {
+        return (await fs3.stat(filePath)).size;
+      } catch (error2) {
+        if (error2.code === "ENOENT") return 0;
+        throw error2;
+      }
+    }, "size");
+    const [transcript, stream] = await Promise.all([
+      size(this.task.outputFile),
+      size(`${this.task.outputFile}.stream`)
+    ]);
+    return { transcript, stream };
+  }
+  async createSnapshotOnce() {
+    if (!this.snapshotDelivered) {
+      await this.refreshLive();
+      const snapshot = [...this.events];
+      this.events.length = 0;
+      this.snapshotDelivered = true;
+      return { events: snapshot, lastEventId: this.bus.lastEventId };
+    }
+    return this.enqueueRefresh(async () => {
+      const bounds = await this.captureReadBounds();
+      const target = new _VirtualSubagentTarget(
+        this.sessionId,
+        this.parentSessionId,
+        this.task,
+        this.workspaceCwd,
+        () => void 0
+      );
+      await target.refreshAt(bounds);
+      await this.refreshAt(bounds);
+      return {
+        events: [...target.events],
+        lastEventId: this.bus.lastEventId
+      };
+    });
+  }
+  createSnapshot() {
+    const snapshot = this.snapshotPromise.then(() => this.createSnapshotOnce());
+    this.snapshotPromise = snapshot.then(
+      () => void 0,
+      () => void 0
+    );
+    return snapshot;
+  }
+  async load(clientId) {
+    const snapshot = await this.createSnapshot();
+    if (this.subscribers === 0) this.scheduleRetention();
+    return {
+      sessionId: this.sessionId,
+      workspaceCwd: this.workspaceCwd,
+      attached: true,
+      ...clientId ? { clientId } : {},
+      createdAt: new Date(this.task.startTime).toISOString(),
+      hasActivePrompt: this.task.status === "running",
+      state: {},
+      compactedReplay: snapshot.events,
+      liveJournal: [],
+      historyHasMore: false,
+      lastEventId: snapshot.lastEventId
+    };
+  }
+  async *iterate(opts) {
+    if (this.retentionTimer) {
+      clearTimeout(this.retentionTimer);
+      this.retentionTimer = void 0;
+    }
+    this.subscribers++;
+    try {
+      await this.refreshLive();
+      if (!this.snapshotDelivered) {
+        this.events.length = 0;
+        this.snapshotDelivered = true;
+      }
+      if (this.task.status === "running" && !this.pollTimer) {
+        this.pollTimer = setInterval(() => {
+          void this.refreshLive().catch(() => void 0);
+        }, POLL_INTERVAL_MS);
+        this.pollTimer.unref();
+      }
+      yield* this.bus.subscribe(opts);
+    } finally {
+      this.subscribers--;
+      if (this.subscribers === 0) {
+        if (this.pollTimer) clearInterval(this.pollTimer);
+        this.pollTimer = void 0;
+        this.scheduleRetention();
+      }
+    }
+  }
+  subscribe(opts) {
+    return {
+      [Symbol.asyncIterator]: () => this.iterate(opts)
+    };
+  }
+  scheduleRetention() {
+    if (this.retentionTimer) clearTimeout(this.retentionTimer);
+    this.retentionTimer = setTimeout(this.onExpired, TARGET_RETENTION_MS);
+    this.retentionTimer.unref();
+  }
+};
+var VirtualSubagentSessions = class {
+  static {
+    __name(this, "VirtualSubagentSessions");
+  }
+  targets = /* @__PURE__ */ new Map();
+  async findTask(runtime, parentSessionId, predicate) {
+    const status = await runtime.bridge.getSessionTasksStatus(parentSessionId);
+    const task = status.tasks.find(
+      (candidate) => candidate.kind === "agent" && typeof candidate.outputFile === "string" && predicate(candidate)
+    );
+    if (task?.kind === "agent" && task.outputFile) {
+      return {
+        id: task.id,
+        title: task.label,
+        outputFile: task.outputFile,
+        status: task.status,
+        startTime: task.startTime,
+        durationMs: task.stats?.durationMs ?? (task.endTime === void 0 ? void 0 : Math.max(0, task.endTime - task.startTime)),
+        totalTokens: task.stats?.totalTokens
+      };
+    }
+    const runtimeDir = runtime.env.effectiveEnv?.["QWEN_RUNTIME_DIR"];
+    const projectDir = Storage.runWithRuntimeBaseDir(
+      runtimeDir,
+      runtime.workspaceCwd,
+      () => new Storage(runtime.workspaceCwd).getProjectDir()
+    );
+    const sessionDir = getSubagentSessionDir(projectDir, parentSessionId);
+    let names;
+    try {
+      names = await fs3.readdir(sessionDir);
+    } catch (error2) {
+      if (error2.code === "ENOENT") return void 0;
+      throw error2;
+    }
+    for (const name of names) {
+      if (!name.endsWith(".meta.json")) continue;
+      const metaPath = `${sessionDir}/${name}`;
+      const meta = readAgentMeta(metaPath);
+      if (!meta || !predicate({
+        kind: "agent",
+        id: meta.agentId,
+        toolUseId: meta.toolUseId,
+        outputFile: metaPath.slice(0, -".meta.json".length) + ".jsonl"
+      })) {
+        continue;
+      }
+      return {
+        id: meta.agentId,
+        title: meta.description || meta.agentType,
+        outputFile: metaPath.slice(0, -".meta.json".length) + ".jsonl",
+        status: meta.status ?? "completed",
+        startTime: Number.isFinite(Date.parse(meta.createdAt)) ? Date.parse(meta.createdAt) : Date.now(),
+        durationMs: durationBetween(meta.createdAt, meta.lastUpdatedAt)
+      };
+    }
+    return void 0;
+  }
+  async findLegacyTaskByToolCall(runtime, parentSessionId, toolCallId) {
+    const runtimeDir = runtime.env.effectiveEnv?.["QWEN_RUNTIME_DIR"];
+    const projectDir = Storage.runWithRuntimeBaseDir(
+      runtimeDir,
+      runtime.workspaceCwd,
+      () => new Storage(runtime.workspaceCwd).getProjectDir()
+    );
+    const parentRecords = await read(
+      `${projectDir}/chats/${parentSessionId}.jsonl`
+    );
+    let root;
+    for (const record of parentRecords) {
+      for (const part of record.message?.parts ?? []) {
+        const call = part.functionCall;
+        if (call?.id !== toolCallId || call.name !== "agent") continue;
+        const args = call.args;
+        root = {
+          timestamp: Date.parse(record.timestamp),
+          ...typeof args?.["description"] === "string" ? { description: args["description"] } : {},
+          ...typeof args?.["prompt"] === "string" ? { prompt: args["prompt"] } : {},
+          ...typeof args?.["subagent_type"] === "string" ? { agentType: args["subagent_type"] } : {}
+        };
+        break;
+      }
+      if (root) break;
+    }
+    if (!root) return void 0;
+    const sessionDir = getSubagentSessionDir(projectDir, parentSessionId);
+    let names;
+    try {
+      names = await fs3.readdir(sessionDir);
+    } catch (error2) {
+      if (error2.code === "ENOENT") return void 0;
+      throw error2;
+    }
+    const candidates = [];
+    for (const name of names) {
+      if (!name.endsWith(".meta.json")) continue;
+      const metaPath = `${sessionDir}/${name}`;
+      const meta = readAgentMeta(metaPath);
+      if (!meta) continue;
+      const outputFile = metaPath.slice(0, -".meta.json".length) + ".jsonl";
+      const launchPrompt = await readFirstUserText(outputFile);
+      let score = 0;
+      if (root.prompt && launchPrompt === root.prompt) score += 8;
+      if (root.description && meta.description === root.description) score += 4;
+      if (root.agentType && meta.agentType === root.agentType) score += 2;
+      const startTime = Date.parse(meta.createdAt);
+      const delta = Math.abs(startTime - root.timestamp);
+      if (Number.isFinite(delta) && delta <= 6e4) score += 1;
+      if (score === 0) continue;
+      candidates.push({
+        id: meta.agentId,
+        title: meta.description || meta.agentType,
+        outputFile,
+        status: meta.status ?? "completed",
+        startTime: Number.isFinite(startTime) ? startTime : Date.now(),
+        durationMs: durationBetween(meta.createdAt, meta.lastUpdatedAt),
+        score,
+        delta
+      });
+    }
+    candidates.sort((a, b) => b.score - a.score || a.delta - b.delta);
+    const selected = candidates[0];
+    if (!selected) return void 0;
+    const metrics = findToolCallMetrics(parentRecords, toolCallId);
+    return {
+      ...selected,
+      status: metrics.status ?? selected.status,
+      durationMs: metrics.durationMs ?? selected.durationMs,
+      totalTokens: metrics.totalTokens ?? selected.totalTokens,
+      inputTokens: metrics.inputTokens ?? selected.inputTokens,
+      outputTokens: metrics.outputTokens ?? selected.outputTokens,
+      cachedTokens: metrics.cachedTokens ?? selected.cachedTokens
+    };
+  }
+  async readParentToolCallMetrics(runtime, parentSessionId, toolCallId) {
+    const runtimeDir = runtime.env.effectiveEnv?.["QWEN_RUNTIME_DIR"];
+    const projectDir = Storage.runWithRuntimeBaseDir(
+      runtimeDir,
+      runtime.workspaceCwd,
+      () => new Storage(runtime.workspaceCwd).getProjectDir()
+    );
+    const records = await read(
+      `${projectDir}/chats/${parentSessionId}.jsonl`
+    );
+    return findToolCallMetrics(records, toolCallId);
+  }
+  async resolve(runtime, parentSessionId, toolCallId) {
+    let task = await this.findTask(
+      runtime,
+      parentSessionId,
+      (candidate) => candidate.toolUseId === toolCallId || candidate.id.endsWith(`-${toolCallId}`)
+    );
+    const metrics = task && task.status !== "running" ? await this.readParentToolCallMetrics(
+      runtime,
+      parentSessionId,
+      toolCallId
+    ) : void 0;
+    task ??= await this.findLegacyTaskByToolCall(
+      runtime,
+      parentSessionId,
+      toolCallId
+    );
+    if (!task) return void 0;
+    const sessionId = createVirtualSubagentSessionId(parentSessionId, task.id);
+    const status = task.status;
+    this.targets.get(`${runtime.workspaceId}:${sessionId}`)?.updateStatus(status);
+    return {
+      sessionId,
+      taskId: task.id,
+      title: task.title,
+      status,
+      durationMs: metrics?.durationMs ?? task.durationMs,
+      totalTokens: metrics?.totalTokens ?? task.totalTokens,
+      inputTokens: metrics?.inputTokens ?? task.inputTokens,
+      outputTokens: metrics?.outputTokens ?? task.outputTokens,
+      cachedTokens: metrics?.cachedTokens ?? task.cachedTokens
+    };
+  }
+  async getTarget(runtime, sessionId) {
+    const targetKey = `${runtime.workspaceId}:${sessionId}`;
+    const cached = this.targets.get(targetKey);
+    if (cached) return cached;
+    const key = parseVirtualSubagentSessionId(sessionId);
+    if (!key) return void 0;
+    const task = await this.findTask(
+      runtime,
+      key.parentSessionId,
+      (candidate) => candidate.id === key.agentId
+    );
+    if (!task) return void 0;
+    const existing = this.targets.get(targetKey);
+    if (existing) return existing;
+    const target = new VirtualSubagentTarget(
+      sessionId,
+      key.parentSessionId,
+      task,
+      runtime.workspaceCwd,
+      () => this.targets.delete(targetKey)
+    );
+    this.targets.set(targetKey, target);
+    return target;
+  }
+  async load(runtime, sessionId, clientId) {
+    return (await this.getTarget(runtime, sessionId))?.load(clientId);
+  }
+  async subscribe(runtime, sessionId, opts) {
+    return (await this.getTarget(runtime, sessionId))?.subscribe(opts);
+  }
+};
+
 // packages/cli/src/serve/routes/session.ts
 var WORKSPACE_TRANSCRIPT_RESPONSE_MAX_BYTES = 32 * 1024 * 1024;
 var WORKSPACE_TRANSCRIPT_CURSOR_MAX_BYTES = 64 * 1024;
@@ -19261,8 +19988,8 @@ function isReadOnlyWorkspaceInspection(runtime) {
   return !runtime.primary && !runtime.trusted;
 }
 __name(isReadOnlyWorkspaceInspection, "isReadOnlyWorkspaceInspection");
-function runWorkspaceInspectionWithLogPolicy(runtime, read) {
-  return isReadOnlyWorkspaceInspection(runtime) ? runWithoutDebugLogSession(read) : read();
+function runWorkspaceInspectionWithLogPolicy(runtime, read2) {
+  return isReadOnlyWorkspaceInspection(runtime) ? runWithoutDebugLogSession(read2) : read2();
 }
 __name(runWorkspaceInspectionWithLogPolicy, "runWorkspaceInspectionWithLogPolicy");
 function requireSessionArtifactClientId(clientId, res) {
@@ -19425,7 +20152,8 @@ function registerSessionRoutes(app, deps) {
     sendBridgeError: sendBridgeError2,
     daemonLog,
     promptDeadlineMs,
-    sessionShellCommandEnabled
+    sessionShellCommandEnabled,
+    virtualSubagentSessions
   } = deps;
   const LANGUAGE_CODES = deps.languageCodes;
   const transcriptCursorMasterKey = crypto3.randomBytes(32);
@@ -20194,6 +20922,55 @@ function registerSessionRoutes(app, deps) {
   const restoreSessionHandler = /* @__PURE__ */ __name((action) => async (req, res) => {
     const sessionId = requireSessionId(req, res);
     if (!sessionId) return;
+    const virtualKey = parseVirtualSubagentSessionId(sessionId);
+    if (virtualKey) {
+      const route2 = `POST /session/:id/${action}`;
+      if (action !== "load") {
+        res.status(400).json({
+          error: `Virtual subagent sessions do not support ${action}`,
+          code: "unsupported_action",
+          sessionId
+        });
+        return;
+      }
+      if (!virtualSubagentSessions) {
+        res.status(404).json({
+          error: `No session with id "${sessionId}"`,
+          code: "session_not_found",
+          sessionId
+        });
+        return;
+      }
+      const runtime2 = requireSessionRuntime({
+        sessionId: virtualKey.parentSessionId,
+        route: route2,
+        res,
+        workspaceRegistry,
+        daemonLog
+      });
+      if (!runtime2) return;
+      const clientId2 = parseClientIdHeader(req, res);
+      if (clientId2 === null) return;
+      try {
+        const session = await virtualSubagentSessions.load(
+          runtime2,
+          sessionId,
+          clientId2
+        );
+        if (!session) {
+          res.status(404).json({
+            error: "Subagent session not found",
+            code: "session_not_found",
+            sessionId
+          });
+          return;
+        }
+        res.status(200).json(session);
+      } catch (err) {
+        sendBridgeError2(res, err, { route: route2, sessionId });
+      }
+      return;
+    }
     const body = safeBody(req);
     const route = `POST /session/:id/${action}`;
     let resolvedRuntime;
@@ -20283,7 +21060,7 @@ function registerSessionRoutes(app, deps) {
             path10.join(workspaceCwd, ".qwen", "worktrees")
           ];
           try {
-            realTarget = fs3.realpathSync(sidecar.worktreePath);
+            realTarget = fs4.realpathSync(sidecar.worktreePath);
             let repoTop = null;
             try {
               repoTop = await new GitWorktreeService(
@@ -20296,7 +21073,7 @@ function registerSessionRoutes(app, deps) {
             }
             const contained = candidateRoots.some((root) => {
               try {
-                const realRoot = fs3.realpathSync(root);
+                const realRoot = fs4.realpathSync(root);
                 const rel = path10.relative(realRoot, realTarget);
                 return !rel.startsWith("..") && !path10.isAbsolute(rel);
               } catch {
@@ -20351,6 +21128,112 @@ function registerSessionRoutes(app, deps) {
   }, "restoreSessionHandler");
   app.post("/session/:id/load", mutate(), restoreSessionHandler("load"));
   app.post("/session/:id/resume", mutate(), restoreSessionHandler("resume"));
+  app.get("/session/:id/subagents/:toolCallId", async (req, res) => {
+    const route = "GET /session/:id/subagents/:toolCallId";
+    const sessionId = requireSessionId(req, res);
+    if (!sessionId) return;
+    if (!virtualSubagentSessions) {
+      res.status(404).json({
+        error: `No session with id "${sessionId}"`,
+        code: "session_not_found",
+        sessionId
+      });
+      return;
+    }
+    const toolCallId = req.params["toolCallId"];
+    if (!toolCallId || toolCallId.length > 500) {
+      res.status(400).json({
+        error: "`toolCallId` must be a non-empty tool call id",
+        code: "invalid_tool_call_id"
+      });
+      return;
+    }
+    const runtime = requireSessionRuntime({
+      sessionId,
+      route,
+      res,
+      workspaceRegistry,
+      daemonLog
+    });
+    if (!runtime) return;
+    try {
+      const resolved = await virtualSubagentSessions.resolve(
+        runtime,
+        sessionId,
+        toolCallId
+      );
+      if (!resolved) {
+        res.status(404).json({
+          error: "Subagent session not found",
+          code: "session_not_found",
+          sessionId,
+          toolCallId
+        });
+        return;
+      }
+      res.status(200).set("Cache-Control", "no-store").json(resolved);
+    } catch (err) {
+      sendBridgeError2(res, err, { route, sessionId });
+    }
+  });
+  app.post(
+    "/session/:id/subagents/:toolCallId/cancel",
+    mutate(),
+    async (req, res) => {
+      const route = "POST /session/:id/subagents/:toolCallId/cancel";
+      const sessionId = requireSessionId(req, res);
+      if (!sessionId) return;
+      if (!virtualSubagentSessions) {
+        res.status(404).json({
+          error: `No session with id "${sessionId}"`,
+          code: "session_not_found",
+          sessionId
+        });
+        return;
+      }
+      const toolCallId = req.params["toolCallId"];
+      if (!toolCallId || toolCallId.length > 500) {
+        res.status(400).json({
+          error: "`toolCallId` must be a non-empty tool call id",
+          code: "invalid_tool_call_id"
+        });
+        return;
+      }
+      const runtime = requireSessionRuntime({
+        sessionId,
+        route,
+        res,
+        workspaceRegistry,
+        daemonLog
+      });
+      if (!runtime) return;
+      try {
+        const resolved = await virtualSubagentSessions.resolve(
+          runtime,
+          sessionId,
+          toolCallId
+        );
+        if (!resolved) {
+          res.status(404).json({
+            error: "Subagent session not found",
+            code: "session_not_found",
+            sessionId,
+            toolCallId
+          });
+          return;
+        }
+        res.status(200).json(
+          await runtime.bridge.cancelSessionTask(
+            sessionId,
+            resolved.taskId,
+            "agent"
+          )
+        );
+      } catch (err) {
+        sendBridgeError2(res, err, { route, sessionId });
+      }
+    }
+  );
   app.post(
     "/session/:id/branch",
     mutate(),
@@ -20650,6 +21533,28 @@ function registerSessionRoutes(app, deps) {
   });
   app.get(
     "/session/:id/context",
+    (req, res, next) => {
+      const sessionId = req.params["id"];
+      const key = sessionId ? parseVirtualSubagentSessionId(sessionId) : void 0;
+      if (!sessionId || !key) {
+        next();
+        return;
+      }
+      const runtime = requireSessionRuntime({
+        sessionId: key.parentSessionId,
+        route: "GET /session/:id/context",
+        res,
+        workspaceRegistry,
+        daemonLog
+      });
+      if (!runtime) return;
+      res.status(200).json({
+        v: 1,
+        sessionId,
+        workspaceCwd: runtime.workspaceCwd,
+        state: {}
+      });
+    },
     withOwnerReadSession(
       "GET /session/:id/context",
       async (_req, res, sessionId, runtime) => {
@@ -20681,6 +21586,28 @@ function registerSessionRoutes(app, deps) {
   );
   app.get(
     "/session/:id/supported-commands",
+    (req, res, next) => {
+      const sessionId = req.params["id"];
+      const key = sessionId ? parseVirtualSubagentSessionId(sessionId) : void 0;
+      if (!sessionId || !key) {
+        next();
+        return;
+      }
+      const runtime = requireSessionRuntime({
+        sessionId: key.parentSessionId,
+        route: "GET /session/:id/supported-commands",
+        res,
+        workspaceRegistry,
+        daemonLog
+      });
+      if (!runtime) return;
+      res.status(200).json({
+        v: 1,
+        sessionId,
+        availableCommands: [],
+        availableSkills: []
+      });
+    },
     withOwnerReadSession(
       "GET /session/:id/supported-commands",
       async (_req, res, sessionId, runtime) => {
@@ -21077,6 +22004,29 @@ function registerSessionRoutes(app, deps) {
   app.post(
     "/session/:id/heartbeat",
     mutate(),
+    (req, res, next) => {
+      const sessionId = req.params["id"];
+      const key = sessionId ? parseVirtualSubagentSessionId(sessionId) : void 0;
+      if (!sessionId || !key) {
+        next();
+        return;
+      }
+      const runtime = requireSessionRuntime({
+        sessionId: key.parentSessionId,
+        route: "POST /session/:id/heartbeat",
+        res,
+        workspaceRegistry,
+        daemonLog
+      });
+      if (!runtime) return;
+      const clientId = parseClientIdHeader(req, res);
+      if (clientId === null) return;
+      res.status(200).json({
+        sessionId,
+        ...clientId ? { clientId } : {},
+        lastSeenAt: Date.now()
+      });
+    },
     withOwnerMutableSession(
       "POST /session/:id/heartbeat",
       (req, res, sessionId, runtime) => {
@@ -21093,6 +22043,25 @@ function registerSessionRoutes(app, deps) {
   app.post(
     "/session/:id/detach",
     mutate(),
+    (req, res, next) => {
+      const sessionId = req.params["id"];
+      const key = sessionId ? parseVirtualSubagentSessionId(sessionId) : void 0;
+      if (!sessionId || !key) {
+        next();
+        return;
+      }
+      const runtime = requireSessionRuntime({
+        sessionId: key.parentSessionId,
+        route: "POST /session/:id/detach",
+        res,
+        workspaceRegistry,
+        daemonLog
+      });
+      if (!runtime) return;
+      const clientId = parseClientIdHeader(req, res);
+      if (clientId === null) return;
+      res.status(204).end();
+    },
     withOwnerMutableSession(
       "POST /session/:id/detach",
       async (req, res, sessionId, runtime) => {
@@ -23481,7 +24450,9 @@ function createServeFeatures(deps) {
     channelControlAvailable,
     sessionShellCommandEnabled,
     multiWorkspaceSessionsEnabled,
+    dynamicWorkspaceRegistrationAvailable,
     persistentWorkspaceRegistrationAvailable,
+    scratchWorkspaceRegistrationAvailable,
     workspaceRuntimeRemovalAvailable
   } = deps;
   const env = deps.env ?? process.env;
@@ -23515,7 +24486,9 @@ function createServeFeatures(deps) {
       channelReloadAvailable: channelReloadAvailable(),
       channelControlAvailable,
       multiWorkspaceSessionsEnabled: multiWorkspaceSessionsEnabled(),
+      dynamicWorkspaceRegistrationAvailable,
       persistentWorkspaceRegistrationAvailable,
+      scratchWorkspaceRegistrationAvailable: scratchWorkspaceRegistrationAvailable(),
       workspaceRuntimeRemovalAvailable,
       acpHttpEnabled: resolveAcpHttpEnabled(),
       clientMcpOverWsEnabled: opts.clientMcpOverWs === true,
@@ -24853,7 +25826,7 @@ data: ${dataJson}
 __name(formatSseFrame, "formatSseFrame");
 function registerSseEventsRoutes(app, deps) {
   const { workspaceRegistry, daemonLog, sendBridgeError: sendBridgeError2, writerIdleTimeoutMs } = deps;
-  app.get("/session/:id/events", (req, res) => {
+  app.get("/session/:id/events", async (req, res) => {
     const sessionId = req.params["id"];
     const lastEventId = parseLastEventId(req.headers["last-event-id"]);
     const maxQueued = parseMaxQueuedQuery(req.query["maxQueued"], res);
@@ -24861,8 +25834,9 @@ function registerSseEventsRoutes(app, deps) {
     let iter;
     const abort = new AbortController();
     try {
+      const virtualKey = parseVirtualSubagentSessionId(sessionId);
       const runtime = requireSessionRuntime({
-        sessionId,
+        sessionId: virtualKey?.parentSessionId ?? sessionId,
         route: "GET /session/:id/events",
         res,
         workspaceRegistry,
@@ -24870,12 +25844,24 @@ function registerSseEventsRoutes(app, deps) {
       });
       if (!runtime) return;
       const snapshot = req.query["snapshot"] === "1";
-      const iterable = runtime.bridge.subscribeEvents(sessionId, {
+      const iterable = virtualKey ? await deps.virtualSubagentSessions?.subscribe(runtime, sessionId, {
+        signal: abort.signal,
+        lastEventId,
+        ...maxQueued !== void 0 ? { maxQueued } : {}
+      }) : runtime.bridge.subscribeEvents(sessionId, {
         signal: abort.signal,
         lastEventId,
         ...maxQueued !== void 0 ? { maxQueued } : {},
         ...snapshot ? { snapshot: true } : {}
       });
+      if (!iterable) {
+        res.status(404).json({
+          error: "Subagent session not found",
+          code: "session_not_found",
+          sessionId
+        });
+        return;
+      }
       iter = iterable[Symbol.asyncIterator]();
     } catch (err) {
       if (err instanceof SubscriberLimitExceededError) {
@@ -26029,7 +27015,7 @@ __name(registerWorkspaceQualifiedLifecycleRoutes, "registerWorkspaceQualifiedLif
 
 // packages/cli/src/serve/routes/workspace-management.ts
 init_esbuild_shims();
-import { readdir, stat } from "node:fs/promises";
+import { readdir as readdir2, stat as stat2 } from "node:fs/promises";
 import { realpathSync as realpathSync2 } from "node:fs";
 import { basename as basename4, dirname as dirname4, isAbsolute as isAbsolute7, join as join8, resolve as resolve4, sep as sep3 } from "node:path";
 var MAX_PATH_SUGGESTIONS = 50;
@@ -26039,6 +27025,7 @@ function registerWorkspaceManagementRoutes(app, deps) {
     mutate,
     safeBody: safeBody2,
     createWorkspaceRuntime,
+    managedScratchRoot,
     workspaceRegistrationStore,
     getAcpHandle,
     runtimeRemoval
@@ -26046,6 +27033,7 @@ function registerWorkspaceManagementRoutes(app, deps) {
   const inFlight = /* @__PURE__ */ new Map();
   let sealed = false;
   let activeOperations = 0;
+  let pendingScratchCreations = 0;
   const idleWaiters = /* @__PURE__ */ new Set();
   const operationStarted = /* @__PURE__ */ __name(() => {
     activeOperations++;
@@ -26087,6 +27075,135 @@ function registerWorkspaceManagementRoutes(app, deps) {
       runtime.displayName = storedDisplayName;
     }
   }, "restorePersistedDisplayName");
+  const projectedWorkspaceCount = /* @__PURE__ */ __name(() => {
+    const cwdSet = new Set(
+      workspaceRegistry.listManaged().map((runtime) => runtime.workspaceCwd)
+    );
+    for (const [cwd, operation] of inFlight) {
+      if (operation === "addition") cwdSet.add(cwd);
+    }
+    return cwdSet.size + pendingScratchCreations;
+  }, "projectedWorkspaceCount");
+  const createScratchWorkspace = /* @__PURE__ */ __name(async (res) => {
+    if (!createWorkspaceRuntime || !managedScratchRoot || !runtimeRemoval) {
+      res.status(501).json({
+        error: "Scratch workspace registration is not available",
+        code: "scratch_not_available"
+      });
+      return;
+    }
+    if (sealed) {
+      sendSealed(res);
+      return;
+    }
+    if (workspaceRegistry.listManaged().some(
+      (runtime2) => !isScratchRootCompatible(
+        runtime2.workspaceCwd,
+        managedScratchRoot.canonicalRoot
+      )
+    ) || [...inFlight].some(
+      ([cwd, operation]) => operation === "addition" && !isScratchRootCompatible(cwd, managedScratchRoot.canonicalRoot)
+    )) {
+      res.status(409).json({
+        error: "Managed scratch root conflicts with a registered workspace",
+        code: "scratch_root_conflict"
+      });
+      return;
+    }
+    if (projectedWorkspaceCount() >= MAX_REGISTERED_WORKSPACES) {
+      res.status(409).json({
+        error: "Workspace registration limit reached",
+        code: "workspace_limit_reached"
+      });
+      return;
+    }
+    pendingScratchCreations++;
+    operationStarted();
+    let reservationHeld = true;
+    let canonical;
+    let runtime;
+    let registered = false;
+    try {
+      canonical = await createManagedScratchDirectory(managedScratchRoot);
+      if (sealed) {
+        sendSealed(res);
+        return;
+      }
+      pendingScratchCreations--;
+      reservationHeld = false;
+      inFlight.set(canonical, "addition");
+      const boundCwds = workspaceRegistry.listManaged().map((entry) => entry.workspaceCwd);
+      for (const [cwd, operation] of inFlight) {
+        if (operation === "addition" && cwd !== canonical) boundCwds.push(cwd);
+      }
+      if (boundCwds.some(
+        (cwd) => !isScratchRootCompatible(cwd, managedScratchRoot.canonicalRoot) || isWithinRoot(canonical, cwd) || isWithinRoot(cwd, canonical)
+      )) {
+        res.status(409).json({
+          error: "Workspace path nests with an existing workspace",
+          code: "workspace_nested"
+        });
+        return;
+      }
+      if (sealed) {
+        sendSealed(res);
+        return;
+      }
+      runtime = await createWorkspaceRuntime(canonical, {
+        provenance: "managed-scratch"
+      });
+      if (runtime.workspaceCwd !== canonical || runtime.primary || !runtime.trusted) {
+        throw new Error(
+          "Scratch runtime violated the managed runtime contract"
+        );
+      }
+      if (sealed) {
+        sendSealed(res);
+        return;
+      }
+      workspaceRegistry.add(runtime);
+      registered = true;
+      try {
+        await runtimeRemoval.runtimeAdded?.(runtime);
+      } catch (err) {
+        try {
+          writeStderrLine(
+            `qwen serve: workspace runtime adapter notification failed after registry add: ${err instanceof Error ? err.message : String(err)}`
+          );
+        } catch {
+        }
+      }
+      res.status(201).json({
+        id: runtime.workspaceId,
+        cwd: runtime.workspaceCwd,
+        primary: false,
+        trusted: true,
+        persisted: false
+      });
+    } catch (err) {
+      writeStderrLine(
+        `qwen serve: scratch workspace registration failed: ${err instanceof Error ? err.message : String(err)}${canonical ? `; retained directory: ${canonical}` : ""}`
+      );
+      if (!res.headersSent) {
+        res.status(500).json({
+          error: "Failed to register scratch workspace",
+          code: "runtime_creation_failed"
+        });
+      }
+    } finally {
+      if (runtime && !registered) {
+        await runtimeRemoval.disposeRuntime(runtime, "workspace_removed").catch(() => {
+          try {
+            runtime?.bridge.killAllSync();
+          } catch {
+          }
+        });
+      }
+      if (reservationHeld) pendingScratchCreations--;
+      if (canonical) inFlight.delete(canonical);
+      operationFinished();
+    }
+  }, "createScratchWorkspace");
   app.get(
     "/workspace-path-suggestions",
     async (req, res) => {
@@ -26120,7 +27237,7 @@ function registerWorkspaceManagementRoutes(app, deps) {
       const suggestions = [];
       let truncated = false;
       try {
-        const entries = await readdir(dir, { withFileTypes: true });
+        const entries = await readdir2(dir, { withFileTypes: true });
         entries.sort((a, b) => a.name.localeCompare(b.name));
         for (const entry of entries) {
           if (entry.name.startsWith(".") && !filter.startsWith(".")) continue;
@@ -26130,7 +27247,7 @@ function registerWorkspaceManagementRoutes(app, deps) {
           let isDir = entry.isDirectory();
           if (!isDir && entry.isSymbolicLink()) {
             try {
-              isDir = (await stat(join8(dir, entry.name))).isDirectory();
+              isDir = (await stat2(join8(dir, entry.name))).isDirectory();
             } catch {
               continue;
             }
@@ -26158,6 +27275,17 @@ function registerWorkspaceManagementRoutes(app, deps) {
     mutate({ strict: true }),
     async (req, res) => {
       const body = safeBody2(req);
+      if ("kind" in body) {
+        if (body["kind"] !== "scratch" || "cwd" in body || "persist" in body || Object.keys(body).some((key) => key !== "kind")) {
+          res.status(400).json({
+            error: 'Scratch workspace requests must be exactly { kind: "scratch" }',
+            code: "invalid_workspace_request"
+          });
+          return;
+        }
+        await createScratchWorkspace(res);
+        return;
+      }
       const cwd = body["cwd"];
       const persist = body["persist"] ?? false;
       const hasDisplayName = Object.hasOwn(body, "displayName");
@@ -26227,12 +27355,19 @@ function registerWorkspaceManagementRoutes(app, deps) {
         });
         return;
       }
+      if (managedScratchRoot && !isScratchRootCompatible(canonical, managedScratchRoot.canonicalRoot)) {
+        res.status(409).json({
+          error: "Workspace path conflicts with the managed scratch root",
+          code: "scratch_root_conflict"
+        });
+        return;
+      }
       if (sealed) {
         sendSealed(res);
         return;
       }
       try {
-        const s = await stat(canonical);
+        const s = await stat2(canonical);
         if (!s.isDirectory()) {
           res.status(400).json({
             error: "Path is not a directory",
@@ -26411,13 +27546,7 @@ function registerWorkspaceManagementRoutes(app, deps) {
           return;
         }
       }
-      const projectedWorkspaceCwds = new Set(
-        workspaceRegistry.listManaged().map((runtime) => runtime.workspaceCwd)
-      );
-      for (const [cwd2, operation] of inFlight) {
-        if (operation === "addition") projectedWorkspaceCwds.add(cwd2);
-      }
-      if (projectedWorkspaceCwds.size >= MAX_REGISTERED_WORKSPACES) {
+      if (projectedWorkspaceCount() >= MAX_REGISTERED_WORKSPACES) {
         res.status(409).json({
           error: "Workspace registration limit reached",
           code: "workspace_limit_reached"
@@ -26428,7 +27557,9 @@ function registerWorkspaceManagementRoutes(app, deps) {
       operationStarted();
       let persistenceFailed = false;
       try {
-        const runtime = await createWorkspaceRuntime(canonical);
+        const runtime = await createWorkspaceRuntime(canonical, {
+          provenance: "existing"
+        });
         if (!persist && displayName !== void 0) {
           runtime.displayName = displayName;
         }
@@ -27039,7 +28170,7 @@ __name(registerWorkspaceManagementRoutes, "registerWorkspaceManagementRoutes");
 
 // packages/cli/src/serve/routes/workspace-git.ts
 init_esbuild_shims();
-import * as fs4 from "node:fs";
+import * as fs5 from "node:fs";
 import * as path14 from "node:path";
 function registerWorkspaceGitRoutes(app, deps) {
   app.get("/workspace/git", async (_req, res) => {
@@ -27066,8 +28197,8 @@ function registerWorkspaceQualifiedGitRoutes(app, deps) {
     let gitCwd = runtime.workspaceCwd;
     if (typeof rawCwd === "string" && rawCwd.length > 0) {
       try {
-        const resolved = fs4.realpathSync(path14.resolve(rawCwd));
-        const root = fs4.realpathSync(runtime.workspaceCwd);
+        const resolved = fs5.realpathSync(path14.resolve(rawCwd));
+        const root = fs5.realpathSync(runtime.workspaceCwd);
         const rel = path14.relative(root, resolved);
         if (!rel.startsWith("..") && !path14.isAbsolute(rel)) {
           gitCwd = resolved;
@@ -29115,7 +30246,16 @@ function createServeApp(opts, getPort = () => opts.port, deps = {}) {
     }, "channelReloadAvailable"),
     sessionShellCommandEnabled,
     multiWorkspaceSessionsEnabled: /* @__PURE__ */ __name(() => workspaceRegistry.list().length > 1, "multiWorkspaceSessionsEnabled"),
+    dynamicWorkspaceRegistrationAvailable: deps.createWorkspaceRuntime !== void 0,
     persistentWorkspaceRegistrationAvailable: deps.workspaceRegistrationStore !== void 0,
+    // Scratch creation is advertised only while every managed runtime still
+    // respects the root boundary and a complete disposal owner is present.
+    scratchWorkspaceRegistrationAvailable: /* @__PURE__ */ __name(() => deps.createWorkspaceRuntime !== void 0 && deps.managedScratchRoot !== void 0 && deps.workspaceRuntimeRemoval !== void 0 && workspaceRegistry.listManaged().every(
+      (runtime) => isScratchRootCompatible(
+        runtime.workspaceCwd,
+        deps.managedScratchRoot.canonicalRoot
+      )
+    ), "scratchWorkspaceRegistrationAvailable"),
     workspaceRuntimeRemovalAvailable: deps.workspaceRuntimeRemoval !== void 0,
     ...primaryEffectiveEnv ? { env: primaryEffectiveEnv } : {}
   });
@@ -29522,6 +30662,7 @@ function createServeApp(opts, getPort = () => opts.port, deps = {}) {
     mutate,
     safeBody,
     createWorkspaceRuntime: deps.createWorkspaceRuntime,
+    managedScratchRoot: deps.managedScratchRoot,
     workspaceRegistrationStore: deps.workspaceRegistrationStore,
     getAcpHandle: /* @__PURE__ */ __name(() => acpHandleRef.current, "getAcpHandle"),
     runtimeRemoval: deps.workspaceRuntimeRemoval
@@ -29625,6 +30766,7 @@ function createServeApp(opts, getPort = () => opts.port, deps = {}) {
     allowPrivateAuthBaseUrl: opts.allowPrivateAuthBaseUrl === true,
     installAuthProvider: deps.installAuthProvider
   });
+  const virtualSubagentSessions = new VirtualSubagentSessions();
   registerSessionRoutes(app, {
     boundWorkspace: primaryBoundWorkspace,
     bridge: primaryBridge,
@@ -29635,7 +30777,8 @@ function createServeApp(opts, getPort = () => opts.port, deps = {}) {
     daemonLog,
     promptDeadlineMs: opts.promptDeadlineMs,
     sessionShellCommandEnabled,
-    languageCodes
+    languageCodes,
+    virtualSubagentSessions
   });
   registerWorkspaceMcpControlRoutes(app, {
     boundWorkspace: primaryBoundWorkspace,
@@ -29801,7 +30944,8 @@ function createServeApp(opts, getPort = () => opts.port, deps = {}) {
     workspaceRegistry,
     daemonLog,
     writerIdleTimeoutMs: opts.writerIdleTimeoutMs,
-    sendBridgeError: sendBridgeError2
+    sendBridgeError: sendBridgeError2,
+    virtualSubagentSessions
   });
   acpHandleRef.current = mountAcpHttp(app, primaryBridge, {
     boundWorkspace: primaryBoundWorkspace,