@qwen-code/qwen-code 0.21.13 → 0.21.14-nightly.20260822.7a4566cb3b

package/chunks/{chunk-XHRY7BXD.js → chunk-J6SIP2IT.js}

@@ -2,14 +2,14 @@
 "use strict";
 import {
   getCliVersion
-} from "./chunk-CU6GJD55.js";
+} from "./chunk-7WLFSDLG.js";
 import {
   IdeClient,
   formatMemoryUsage
-} from "./chunk-4S5337WV.js";
+} from "./chunk-SVU5KGR7.js";
 import {
   createDebugLogger
-} from "./chunk-BUQDLC2G.js";
+} from "./chunk-A5F2YNO6.js";
 import {
   init_esbuild_shims
 } from "./chunk-5O2XNYP6.js";
@@ -25,7 +25,7 @@ import { execFile } from "node:child_process";
 
 // packages/cli/src/generated/git-commit.ts
 init_esbuild_shims();
-var GIT_COMMIT_INFO = "d959015974";
+var GIT_COMMIT_INFO = "507ae895c3";
 
 // packages/cli/src/utils/systemInfo.ts
 var debugLogger = createDebugLogger("STATUS");

package/chunks/{chunk-OD2WU5QY.js → chunk-J7JQXYVL.js}

@@ -6,7 +6,7 @@ import {
 import {
   getPlugin,
   supportedTypes
-} from "./chunk-A4QRWUDE.js";
+} from "./chunk-2NWPB6T4.js";
 import {
   init_esbuild_shims
 } from "./chunk-5O2XNYP6.js";

package/chunks/{chunk-NEFOOD54.js → chunk-J7VPB2HF.js}

@@ -5,16 +5,16 @@ import {
 } from "./chunk-YAF2MQZ6.js";
 import {
   loadUndici
-} from "./chunk-3Z43GZUQ.js";
+} from "./chunk-TXASDT2M.js";
 import {
   t
-} from "./chunk-HUTNYWBG.js";
+} from "./chunk-45UD2TU4.js";
 import {
   So
-} from "./chunk-4S5337WV.js";
+} from "./chunk-SVU5KGR7.js";
 import {
   createDebugLogger
-} from "./chunk-BUQDLC2G.js";
+} from "./chunk-A5F2YNO6.js";
 import {
   init_esbuild_shims
 } from "./chunk-5O2XNYP6.js";

package/chunks/{chunk-P7MPQI75.js → chunk-JGUBDRBC.js}

@@ -2,11 +2,11 @@
 "use strict";
 import {
   atomicWriteFileSync
-} from "./chunk-FDGGZIYW.js";
+} from "./chunk-HDKCKCYO.js";
 import {
   Storage,
   createDebugLogger
-} from "./chunk-BUQDLC2G.js";
+} from "./chunk-A5F2YNO6.js";
 import {
   init_esbuild_shims
 } from "./chunk-5O2XNYP6.js";

package/chunks/{chunk-SXCOEJO4.js → chunk-JOLJTKIG.js}

@@ -2,7 +2,7 @@
 "use strict";
 import {
   MAX_TERMINAL_IMAGE_BYTES
-} from "./chunk-6HY6IF3Z.js";
+} from "./chunk-6NFAEG54.js";
 import {
   init_esbuild_shims
 } from "./chunk-5O2XNYP6.js";

package/chunks/{chunk-NTTBXH7U.js → chunk-JS73NNWF.js}

@@ -13,6 +13,9 @@ init_esbuild_shims();
 // packages/acp-bridge/src/channel.ts
 init_esbuild_shims();
 
+// packages/acp-bridge/src/prompt-ledger.ts
+init_esbuild_shims();
+
 // packages/acp-bridge/src/bridgeFileSystem.ts
 init_esbuild_shims();
 /**
@@ -20,3 +23,8 @@ init_esbuild_shims();
  * Copyright 2025 Qwen Team
  * SPDX-License-Identifier: Apache-2.0
  */
+/**
+ * @license
+ * Copyright 2026 Qwen Team
+ * SPDX-License-Identifier: Apache-2.0
+ */

package/chunks/{chunk-QRCNA3SR.js → chunk-JXLPQTMW.js}

@@ -27,11 +27,10 @@ import {
 } from "./chunk-3VUENPWF.js";
 import {
   loadSettings
-} from "./chunk-A267JX7H.js";
+} from "./chunk-3HWN4E7N.js";
 import {
-  MCP_BUDGET_WARN_FRACTION,
-  sleepInhibitor
-} from "./chunk-4S5337WV.js";
+  MCP_BUDGET_WARN_FRACTION
+} from "./chunk-SVU5KGR7.js";
 import {
   parsePositiveIntegerEnv
 } from "./chunk-6PVPNMXU.js";
@@ -41,7 +40,7 @@ import {
 } from "./chunk-NAVJD2PQ.js";
 import {
   MEMORY_PROJECT_SCOPES
-} from "./chunk-CHHABXPE.js";
+} from "./chunk-HIK2OF33.js";
 import {
   writeStderrLine,
   writeStdoutLine
@@ -55,52 +54,48 @@ import {
 
 // packages/cli/src/commands/serve.ts
 init_esbuild_shims();
-import { randomBytes } from "node:crypto";
-import { networkInterfaces } from "node:os";
 function blockForever() {
   return new Promise(() => {
   });
 }
 __name(blockForever, "blockForever");
 var DEFAULT_SERVE_HOSTNAME = "127.0.0.1";
-function localControlUrls(baseUrl, token, interfaces = networkInterfaces()) {
-  const urls = [];
-  for (const [interfaceName, addresses] of Object.entries(interfaces).sort()) {
-    for (const address of addresses ?? []) {
-      if (address.family !== "IPv4" || address.internal) {
-        continue;
-      }
-      const target = new URL(baseUrl);
-      target.hostname = address.address;
-      target.hash = `token=${encodeURIComponent(token)}`;
-      urls.push({ interfaceName, url: target.toString() });
+async function startLocalControl(handle, address) {
+  await handle.runtimeReady;
+  if (!handle.webShellMounted) {
+    throw new Error("Local Control requires the Web Shell.");
+  }
+  const service = handle.getLocalControl();
+  if (!service) {
+    throw new Error("Local Control is unavailable on this daemon.");
+  }
+  let status;
+  try {
+    status = await service.enable(address ? { address } : {});
+  } catch (err) {
+    if (err instanceof Error && err.code === "ambiguous_lan_interface") {
+      throw new Error(`${err.message}. Pass --local-control-address <ip>.`);
     }
+    throw err;
   }
-  return urls;
-}
-__name(localControlUrls, "localControlUrls");
-async function showLocalControlPairing(handle, urls) {
-  await handle.runtimeReady;
-  if (!handle.webShellMounted || !handle.resolvedToken) {
-    throw new Error("Local Control requires the authenticated Web Shell.");
+  if (!status.url) {
+    throw new Error("Local Control did not return a pairing URL.");
   }
   const { default: qrcode } = await import("./main-PXAUXNF2.js");
   qrcode.setErrorLevel("Q");
   writeStdoutLine(
-    "\nLocal Control is on. Scan a QR code from the same network:"
+    "\nLocal Control is on. Scan this QR code from the same network:"
   );
-  for (const entry of urls) {
-    writeStdoutLine(`
-${entry.interfaceName}: ${entry.url}`);
-    qrcode.generate(entry.url, { small: true }, (code) => {
-      writeStdoutLine(code.trimEnd());
-    });
-  }
+  writeStdoutLine(`
+${status.interfaceName}: ${status.url}`);
+  qrcode.generate(status.url, { small: true }, (code) => {
+    writeStdoutLine(code.trimEnd());
+  });
   writeStdoutLine(
-    "\nKeep this terminal open. Restart after changing networks. Sleep inhibition is best effort. Traffic is encrypted only when --tls-cert and --tls-key are set. Press Ctrl+C to turn Local Control off."
+    "\nKeep this terminal open. " + (status.sleepInhibited ? "Sleep is inhibited while this session is active. " : "Sleep inhibition is unavailable here, so the host may sleep. ") + (status.encrypted ? "Traffic is encrypted." : "Traffic is unencrypted \u2014 use it only on a network you trust.") + " Turn Local Control off from the Web Shell Settings card, or press Ctrl+C to exit the daemon."
   );
 }
-__name(showLocalControlPairing, "showLocalControlPairing");
+__name(startLocalControl, "startLocalControl");
 async function maybeOpenWebShellBrowser(handle, open) {
   if (!open || !handle.webShellMounted || !shouldLaunchBrowser()) return;
   try {
@@ -205,22 +200,24 @@ var serveCommand = {
   }).option("local-control", {
     type: "boolean",
     default: false,
-    description: "Share the Web Shell on the local IPv4 network with a fresh token, terminal QR code, and best-effort sleep inhibition. Press Ctrl+C to turn it off."
+    description: "Share the Web Shell on the local IPv4 network with its own revocable pairing token, terminal QR code, and best-effort sleep inhibition. Ctrl+C turns it off by ending the whole daemon; the Web Shell Settings card turns it off while the daemon keeps running."
+  }).option("local-control-address", {
+    type: "string",
+    description: "Which local IPv4 address to share when the host is on more than one network. Only needed if --local-control reports an ambiguous choice."
   }).check((argv) => {
-    if (argv["local-control"] === true && argv.token !== void 0) {
-      throw new Error("Local Control generates its own token.");
-    }
-    if (argv["local-control"] === true && argv["allow-origin"] !== void 0) {
-      throw new Error("Local Control manages its browser origins.");
-    }
     if (argv["local-control"] === true && argv["web"] === false) {
       throw new Error("Local Control requires the Web Shell.");
     }
-    if (argv["local-control"] === true && (!Number.isInteger(argv["port"]) || argv["port"] < 1 || argv["port"] > 65535)) {
-      throw new Error("Local Control requires a fixed port.");
-    }
     if (argv["local-control"] === true && argv.hostname !== DEFAULT_SERVE_HOSTNAME) {
-      throw new Error("Local Control manages its hostname.");
+      throw new Error(
+        `Local Control requires --hostname ${DEFAULT_SERVE_HOSTNAME}.`
+      );
+    }
+    if (argv["local-control"] !== true && argv["local-control-address"] !== void 0) {
+      throw new Error("--local-control-address requires --local-control.");
+    }
+    if (argv["local-control-address"] === "") {
+      throw new Error("--local-control-address must not be empty.");
     }
     return true;
   }).option("event-ring-size", {
@@ -425,23 +422,12 @@ var serveCommand = {
     }
     const externalToolGuardToken = process.env[EXTERNAL_TOOL_GUARD_TOKEN_ENV] ?? "";
     delete process.env[EXTERNAL_TOOL_GUARD_TOKEN_ENV];
-    const { runQwenServe } = await import("./run-qwen-serve-3QSGRXAN.js");
+    const { runQwenServe } = await import("./run-qwen-serve-DC5RXI6N.js");
     try {
-      const localControlToken = argv["local-control"] ? randomBytes(32).toString("base64url") : void 0;
-      const localControlPairing = localControlToken ? localControlUrls(
-        `${argv["tls-cert"] ? "https" : "http"}://0.0.0.0:${argv.port}/`,
-        localControlToken
-      ) : [];
-      if (argv["local-control"] && localControlPairing.length === 0) {
-        throw new Error(
-          "Local Control could not find a non-loopback IPv4 address."
-        );
-      }
       const handle = await runQwenServe({
         port: argv.port,
-        strictPort: argv["local-control"],
-        hostname: argv["local-control"] ? "0.0.0.0" : argv.hostname,
-        token: localControlToken ?? argv.token,
+        hostname: argv.hostname,
+        token: argv.token,
         mode: "http-bridge",
         maxSessions: argv["max-sessions"],
         ...argv["max-total-sessions"] !== void 0 ? { maxTotalSessions: argv["max-total-sessions"] } : {},
@@ -464,13 +450,9 @@ var serveCommand = {
         ...memoryBudgetMb !== void 0 ? { memoryBudgetMb } : {},
         memoryPressureMode: argv["memory-pressure-mode"],
         childHeapMode: argv["child-heap-mode"],
-        ...argv["local-control"] ? {
-          allowOrigins: localControlPairing.map(({ url }) => new URL(url).origin).concat(
-            new URL(
-              `${argv["tls-cert"] ? "https" : "http"}://127.0.0.1:${argv.port}`
-            ).origin
-          )
-        } : argv["allow-origin"] && argv["allow-origin"].length > 0 ? { allowOrigins: argv["allow-origin"] } : {},
+        // No Local Control special case: the service registers and removes the
+        // LAN origin itself while a session is live.
+        ...argv["allow-origin"] && argv["allow-origin"].length > 0 ? { allowOrigins: argv["allow-origin"] } : {},
         ...argv["prompt-deadline-ms"] !== void 0 ? { promptDeadlineMs: argv["prompt-deadline-ms"] } : {},
         ...argv["writer-idle-timeout-ms"] !== void 0 ? { writerIdleTimeoutMs: argv["writer-idle-timeout-ms"] } : {},
         ...argv["channel-idle-timeout-ms"] !== void 0 ? { channelIdleTimeoutMs: argv["channel-idle-timeout-ms"] } : {},
@@ -503,8 +485,7 @@ var serveCommand = {
       });
       if (argv["local-control"]) {
         try {
-          await showLocalControlPairing(handle, localControlPairing);
-          sleepInhibitor.acquire("Qwen Code Local Control is active");
+          await startLocalControl(handle, argv["local-control-address"]);
         } catch (err) {
           await handle.close().catch(() => void 0);
           throw err;
@@ -522,7 +503,6 @@ var serveCommand = {
 };
 
 export {
-  localControlUrls,
   maybeOpenWebShellBrowser,
   serveCommand
 };