@qwen-code/qwen-code 0.21.6 → 0.21.7

package/chunks/{chunk-YZQTA3ID.js → chunk-GDXET5XU.js}

@@ -1,35 +1,17 @@
 // Force strict mode and setup for ESM
 "use strict";
-import {
-  isLoopbackBind
-} from "./chunk-RXFQM6FQ.js";
-import {
-  MAX_CHILD_HEAP_MB,
-  MIN_CHILD_HEAP_MB,
-  recommendedChildShareMb
-} from "./chunk-HGCQ5SE7.js";
 import {
   require_mime_db
 } from "./chunk-K6KS3LTN.js";
 import {
   require_lib
 } from "./chunk-FC4KQFCS.js";
-import {
-  CLIENT_MCP_OVER_WS_CONFIG_FLAG
-} from "./chunk-R574ATRM.js";
-import {
-  MAX_WORKSPACE_PATH_LENGTH,
-  translateAndCheckAbsoluteWorkspacePath
-} from "./chunk-6PLDPT2C.js";
 import {
   require_content_type
 } from "./chunk-GOFAQQZA.js";
 import {
   require_safer
 } from "./chunk-XWRJCPHC.js";
-import {
-  writeStderrLine
-} from "./chunk-KGJGEEVR.js";
 import {
   require_src
 } from "./chunk-DMTGGOSA.js";
@@ -49,7 +31,7 @@ import {
 var require_depd = __commonJS({
   "node_modules/depd/index.js"(exports, module) {
     init_esbuild_shims();
-    var relative2 = __require("path").relative;
+    var relative = __require("path").relative;
     module.exports = depd;
     var basePath = process.cwd();
     function containsNamespace(str, namespace) {
@@ -255,7 +237,7 @@ var require_depd = __commonJS({
     }
     __name(formatColor, "formatColor");
     function formatLocation(callSite) {
-      return relative2(basePath, callSite[0]) + ":" + callSite[1] + ":" + callSite[2];
+      return relative(basePath, callSite[0]) + ":" + callSite[1] + ":" + callSite[2];
     }
     __name(formatLocation, "formatLocation");
     function getStack() {
@@ -4739,10 +4721,10 @@ var require_raw_body = __commonJS({
       if (done) {
         return readStream(stream, encoding, length, limit, wrap(done));
       }
-      return new Promise(/* @__PURE__ */ __name(function executor(resolve2, reject) {
+      return new Promise(/* @__PURE__ */ __name(function executor(resolve, reject) {
         readStream(stream, encoding, length, limit, /* @__PURE__ */ __name(function onRead(err, buf) {
           if (err) return reject(err);
-          resolve2(buf);
+          resolve(buf);
         }, "onRead"));
       }, "executor"));
     }
@@ -10243,11 +10225,11 @@ var require_view = __commonJS({
     var debug = require_src()("express:view");
     var path2 = __require("node:path");
     var fs = __require("node:fs");
-    var dirname3 = path2.dirname;
-    var basename3 = path2.basename;
+    var dirname2 = path2.dirname;
+    var basename2 = path2.basename;
     var extname = path2.extname;
-    var join3 = path2.join;
-    var resolve2 = path2.resolve;
+    var join2 = path2.join;
+    var resolve = path2.resolve;
     module.exports = View;
     function View(name, options) {
       var opts = options || {};
@@ -10282,9 +10264,9 @@ var require_view = __commonJS({
       debug('lookup "%s"', name);
       for (var i = 0; i < roots.length && !path3; i++) {
         var root = roots[i];
-        var loc = resolve2(root, name);
-        var dir = dirname3(loc);
-        var file = basename3(loc);
+        var loc = resolve(root, name);
+        var dir = dirname2(loc);
+        var file = basename2(loc);
         path3 = this.resolve(dir, file);
       }
       return path3;
@@ -10307,14 +10289,14 @@ var require_view = __commonJS({
       }, "onRender"));
       sync = false;
     }, "render");
-    View.prototype.resolve = /* @__PURE__ */ __name(function resolve3(dir, file) {
+    View.prototype.resolve = /* @__PURE__ */ __name(function resolve2(dir, file) {
       var ext = this.ext;
-      var path3 = join3(dir, file);
+      var path3 = join2(dir, file);
       var stat = tryStat(path3);
       if (stat && stat.isFile()) {
         return path3;
       }
-      path3 = join3(dir, basename3(file, ext), "index" + ext);
+      path3 = join2(dir, basename2(file, ext), "index" + ext);
       stat = tryStat(path3);
       if (stat && stat.isFile()) {
         return path3;
@@ -12551,7 +12533,7 @@ var require_application = __commonJS({
     var compileETag = require_utils2().compileETag;
     var compileQueryParser = require_utils2().compileQueryParser;
     var compileTrust = require_utils2().compileTrust;
-    var resolve2 = __require("node:path").resolve;
+    var resolve = __require("node:path").resolve;
     var once = require_once();
     var Router = require_router();
     var slice = Array.prototype.slice;
@@ -12605,7 +12587,7 @@ var require_application = __commonJS({
       this.mountpath = "/";
       this.locals.settings = this.settings;
       this.set("view", View);
-      this.set("views", resolve2("views"));
+      this.set("views", resolve("views"));
       this.set("jsonp callback name", "callback");
       if (env === "production") {
         this.enable("view cache");
@@ -13797,9 +13779,9 @@ var require_content_disposition = __commonJS({
       if (typeof fallback === "string" && NON_LATIN1_REGEXP.test(fallback)) {
         throw new TypeError("fallback must be ISO-8859-1 string");
       }
-      var name = basename3(filename);
+      var name = basename2(filename);
       var isQuotedString = TEXT_REGEXP.test(name);
-      var fallbackName = typeof fallback !== "string" ? fallback && getlatin1(name) : basename3(fallback);
+      var fallbackName = typeof fallback !== "string" ? fallback && getlatin1(name) : basename2(fallback);
       var hasFallback = typeof fallbackName === "string" && fallbackName !== name;
       if (hasFallback || !isQuotedString || hasHexEscape(name)) {
         params["filename*"] = name;
@@ -13928,7 +13910,7 @@ var require_content_disposition = __commonJS({
       this.parameters = parameters;
     }
     __name(ContentDisposition, "ContentDisposition");
-    function basename3(path2) {
+    function basename2(path2) {
       const normalized = path2.replaceAll("\\", "/");
       let end = normalized.length;
       while (end > 0 && normalized[end - 1] === "/") {
@@ -13943,7 +13925,7 @@ var require_content_disposition = __commonJS({
       }
       return normalized.slice(start + 1, end);
     }
-    __name(basename3, "basename");
+    __name(basename2, "basename");
     function isHexDigit(char) {
       const code = char.charCodeAt(0);
       return code >= 48 && code <= 57 || // 0-9
@@ -14194,9 +14176,9 @@ var require_send = __commonJS({
     var Stream = __require("stream");
     var util = __require("util");
     var extname = path2.extname;
-    var join3 = path2.join;
+    var join2 = path2.join;
     var normalize = path2.normalize;
-    var resolve2 = path2.resolve;
+    var resolve = path2.resolve;
     var sep = path2.sep;
     var BYTES_RANGE_REGEXP = /^ *bytes=/;
     var MAX_MAXAGE = 60 * 60 * 24 * 365 * 1e3;
@@ -14226,7 +14208,7 @@ var require_send = __commonJS({
       this._maxage = opts.maxAge || opts.maxage;
       this._maxage = typeof this._maxage === "string" ? ms(this._maxage) : Number(this._maxage);
       this._maxage = !isNaN(this._maxage) ? Math.min(Math.max(0, this._maxage), MAX_MAXAGE) : 0;
-      this._root = opts.root ? resolve2(opts.root) : null;
+      this._root = opts.root ? resolve(opts.root) : null;
     }
     __name(SendStream, "SendStream");
     util.inherits(SendStream, Stream);
@@ -14368,7 +14350,7 @@ var require_send = __commonJS({
           return res;
         }
         parts = path3.split(sep);
-        path3 = normalize(join3(root, path3));
+        path3 = normalize(join2(root, path3));
       } else {
         if (UP_PATH_REGEXP.test(path3)) {
           debug('malicious path "%s"', path3);
@@ -14376,7 +14358,7 @@ var require_send = __commonJS({
           return res;
         }
         parts = normalize(path3).split(sep);
-        path3 = resolve2(path3);
+        path3 = resolve(path3);
       }
       if (containsDotFile(parts)) {
         debug('%s dotfile "%s"', this._dotfiles, path3);
@@ -14502,7 +14484,7 @@ var require_send = __commonJS({
           if (err) return self.onStatError(err);
           return self.error(404);
         }
-        var p = join3(path3, self._index[i]);
+        var p = join2(path3, self._index[i]);
         debug('stat "%s"', p);
         fs.stat(p, function(err2, stat) {
           if (err2) return next(err2);
@@ -14774,7 +14756,7 @@ var require_response = __commonJS({
     var cookie = require_cookie();
     var send = require_send();
     var extname = path2.extname;
-    var resolve2 = path2.resolve;
+    var resolve = path2.resolve;
     var vary = require_vary();
     var { Buffer: Buffer2 } = __require("node:buffer");
     var res = Object.create(http.ServerResponse.prototype);
@@ -14980,7 +14962,7 @@ var require_response = __commonJS({
       }
       opts = Object.create(opts);
       opts.headers = headers;
-      var fullPath = !opts.root ? resolve2(path3) : path3;
+      var fullPath = !opts.root ? resolve(path3) : path3;
       return this.sendFile(fullPath, opts, done);
     }, "download");
     res.contentType = res.type = /* @__PURE__ */ __name(function contentType(type) {
@@ -15239,7 +15221,7 @@ var require_serve_static = __commonJS({
     var encodeUrl = require_encodeurl();
     var escapeHtml = require_escape_html();
     var parseUrl = require_parseurl();
-    var resolve2 = __require("path").resolve;
+    var resolve = __require("path").resolve;
     var send = require_send();
     var url = __require("url");
     module.exports = serveStatic;
@@ -15258,7 +15240,7 @@ var require_serve_static = __commonJS({
         throw new TypeError("option setHeaders must be function");
       }
       opts.maxage = opts.maxage || opts.maxAge || 0;
-      opts.root = resolve2(root);
+      opts.root = resolve(root);
       var onDirectory = redirect ? createRedirectDirectoryListener() : createNotFoundDirectoryListener();
       return /* @__PURE__ */ __name(function serveStatic2(req, res, next) {
         if (req.method !== "GET" && req.method !== "HEAD") {
@@ -15392,871 +15374,6 @@ var require_express2 = __commonJS({
   }
 });
 
-// packages/cli/src/serve/auth/device-flow.ts
-init_esbuild_shims();
-import { randomUUID } from "node:crypto";
-var SANITIZE_FOR_STDERR_RE = new RegExp(
-  // ASCII C0 (0x00–0x1f), DEL (0x7f), C1 (0x80–0x9f), plus Unicode
-  // lookalike controls:
-  //   \u200b–\u200f: zero-width chars + LRM/RLM
-  //   \u2028–\u2029: LINE / PARAGRAPH SEPARATOR (terminal newline equivalents)
-  //   \u202a–\u202e: bidirectional EMBEDDING / OVERRIDE controls
-  //   \u2066–\u2069: bidirectional ISOLATE controls (CVE-2021-42574)
-  //   \ufeff:         BOM / ZWNBSP
-  String.raw`[\x00-\x1f\x7f-\x9f\u200b-\u200f\u2028-\u202e\u2066-\u2069\ufeff]`,
-  "g"
-);
-function sanitizeForStderr(value) {
-  return value.replace(SANITIZE_FOR_STDERR_RE, "?");
-}
-__name(sanitizeForStderr, "sanitizeForStderr");
-var DEVICE_FLOW_DEFAULT_INTERVAL_MS = 5e3;
-var DEVICE_FLOW_TERMINAL_GRACE_MS = 5 * 6e4;
-var DEVICE_FLOW_SWEEP_INTERVAL_MS = 3e4;
-var DEVICE_FLOW_MAX_CONCURRENT = 4;
-var DEVICE_FLOW_SLOW_DOWN_BUMP_MS = 5e3;
-var DEVICE_FLOW_PERSIST_TIMEOUT_MS = 3e4;
-var DEVICE_FLOW_START_TIMEOUT_MS = 3e4;
-var DEVICE_FLOW_POLL_TIMEOUT_MS = 3e4;
-var DEVICE_FLOW_MAX_EXPIRES_IN_SEC = 60 * 60;
-var DEVICE_FLOW_MIN_EXPIRES_IN_SEC = 30;
-var DEVICE_FLOW_MAX_INTERVAL_MS = 6e4;
-var SECRET_BRAND = Symbol("DeviceFlowSecret");
-var SECRETS = /* @__PURE__ */ new WeakMap();
-function brandSecret(value) {
-  const wrapper = Object.freeze({
-    [SECRET_BRAND]: true,
-    toString: /* @__PURE__ */ __name(() => "[redacted]", "toString"),
-    toJSON: /* @__PURE__ */ __name(() => "[redacted]", "toJSON"),
-    [Symbol.toPrimitive]: () => "[redacted]"
-  });
-  SECRETS.set(wrapper, value);
-  return wrapper;
-}
-__name(brandSecret, "brandSecret");
-function unsafeRevealSecret(secret) {
-  const value = SECRETS.get(secret);
-  if (value === void 0) {
-    throw new Error(
-      "unsafeRevealSecret: argument is not a BrandedSecret (was never registered, or its WeakMap binding was lost via serialization)"
-    );
-  }
-  return value;
-}
-__name(unsafeRevealSecret, "unsafeRevealSecret");
-var UnsupportedDeviceFlowProviderError = class extends Error {
-  static {
-    __name(this, "UnsupportedDeviceFlowProviderError");
-  }
-  code = "unsupported_provider";
-  constructor(providerId) {
-    super(
-      `Unsupported device-flow provider (internal: declared but not registered): ${providerId}`
-    );
-    this.name = "UnsupportedDeviceFlowProviderError";
-  }
-};
-var TooManyActiveDeviceFlowsError = class extends Error {
-  static {
-    __name(this, "TooManyActiveDeviceFlowsError");
-  }
-  code = "too_many_active_flows";
-  constructor() {
-    super(
-      `Too many active device-flow attempts. Cancel one of the existing flows or wait for them to expire.`
-    );
-    this.name = "TooManyActiveDeviceFlowsError";
-  }
-};
-var UpstreamDeviceFlowError = class extends Error {
-  static {
-    __name(this, "UpstreamDeviceFlowError");
-  }
-  code = "upstream_error";
-  constructor(message) {
-    super(message);
-    this.name = "UpstreamDeviceFlowError";
-  }
-};
-var DeviceFlowPollTimeoutError = class extends Error {
-  static {
-    __name(this, "DeviceFlowPollTimeoutError");
-  }
-  code = "poll_timeout";
-  timeoutMs;
-  /**
-   * Runtime brand the registry sets ONLY on instances it constructed
-   * inside its own timer callback. Default `false` for any
-   * `new DeviceFlowPollTimeoutError(...)` call from outside the registry
-   * — prevents a provider from spoofing the timeout signal.
-   */
-  _isRegistryTimeout = false;
-  constructor(timeoutMs) {
-    super(`device-flow poll timeout after ${timeoutMs}ms`);
-    this.name = "DeviceFlowPollTimeoutError";
-    this.timeoutMs = timeoutMs;
-  }
-};
-function makeRegistryPollTimeoutError(timeoutMs) {
-  const err = new DeviceFlowPollTimeoutError(timeoutMs);
-  err._isRegistryTimeout = true;
-  return err;
-}
-__name(makeRegistryPollTimeoutError, "makeRegistryPollTimeoutError");
-var DEVICE_FLOW_REGISTRY_LOCAL = "deviceFlowRegistry";
-function setDeviceFlowRegistry(app, registry) {
-  app.locals[DEVICE_FLOW_REGISTRY_LOCAL] = registry;
-}
-__name(setDeviceFlowRegistry, "setDeviceFlowRegistry");
-function getDeviceFlowRegistry(app) {
-  return app.locals[DEVICE_FLOW_REGISTRY_LOCAL];
-}
-__name(getDeviceFlowRegistry, "getDeviceFlowRegistry");
-var DeviceFlowRegistry = class {
-  constructor(deps) {
-    this.deps = deps;
-    this.now = deps.now ?? (() => Date.now());
-    this.schedule = deps.schedule ?? ((ms, cb) => setTimeout(cb, ms));
-    this.scheduleInterval = deps.scheduleInterval ?? ((ms, cb) => setInterval(cb, ms));
-    this.clearScheduled = deps.clearScheduled ?? ((h) => clearTimeout(h));
-    this.clearScheduledInterval = deps.clearScheduledInterval ?? ((h) => clearInterval(h));
-    this.sweeperHandle = this.scheduleInterval(
-      DEVICE_FLOW_SWEEP_INTERVAL_MS,
-      () => this.sweep()
-    );
-    if (this.sweeperHandle && typeof this.sweeperHandle.unref === "function") {
-      this.sweeperHandle.unref();
-    }
-  }
-  static {
-    __name(this, "DeviceFlowRegistry");
-  }
-  byId = /* @__PURE__ */ new Map();
-  byProvider = /* @__PURE__ */ new Map();
-  /**
-   * Coalesces concurrent `start()` calls for the same `providerId`. Two
-   * SDK clients posting `POST /workspace/auth/device-flow` in parallel
-   * would otherwise both pass the "no existing pending entry" check,
-   * each call `provider.start()` (a real IdP round-trip), and one's
-   * write to `byProvider` would clobber the other — leaving an orphan
-   * `byId` entry with a still-running poll timer that consumes IdP
-   * quota for nothing. Mirrors `SharedTokenManager`'s in-flight refresh
-   * coalescing pattern.
-   */
-  inFlightStarts = /* @__PURE__ */ new Map();
-  sweeperHandle;
-  disposed = false;
-  now;
-  schedule;
-  scheduleInterval;
-  clearScheduled;
-  clearScheduledInterval;
-  /**
-   * Start a new device flow OR — under per-provider singleton semantics —
-   * return the existing pending entry (`attached: true`). The take-over
-   * branch deliberately does NOT re-call `provider.start()`; making the
-   * second POST a no-op (rather than a fresh IdP request) is the property
-   * that lets a reconnecting SDK pick up an in-flight login without
-   * burning IdP quota.
-   */
-  async start(params) {
-    if (this.disposed) {
-      throw new Error("DeviceFlowRegistry disposed");
-    }
-    const provider = this.deps.resolveProvider(params.providerId);
-    if (!provider) {
-      throw new UnsupportedDeviceFlowProviderError(params.providerId);
-    }
-    const existing = this.byProvider.get(params.providerId);
-    if (existing && existing.status === "pending") {
-      this.recordTakeover(existing, params.initiatorClientId);
-      return { view: toPublicView(existing), attached: true };
-    }
-    const inFlight = this.inFlightStarts.get(params.providerId);
-    if (inFlight) {
-      const result = await inFlight;
-      const justCreated = this.byProvider.get(params.providerId);
-      if (justCreated) {
-        this.recordTakeover(justCreated, params.initiatorClientId);
-      }
-      return { view: result.view, attached: true };
-    }
-    if (this.countActive() >= DEVICE_FLOW_MAX_CONCURRENT) {
-      throw new TooManyActiveDeviceFlowsError();
-    }
-    const promise = this.doStart(params, provider);
-    this.inFlightStarts.set(params.providerId, promise);
-    try {
-      return await promise;
-    } finally {
-      if (this.inFlightStarts.get(params.providerId) === promise) {
-        this.inFlightStarts.delete(params.providerId);
-      }
-    }
-  }
-  async doStart(params, provider) {
-    const cancelController = new AbortController();
-    let startResult;
-    let startTimer;
-    try {
-      startResult = await new Promise(
-        (resolve2, reject) => {
-          startTimer = this.schedule(DEVICE_FLOW_START_TIMEOUT_MS, () => {
-            try {
-              cancelController.abort(new Error("device-flow start timeout"));
-            } catch {
-            }
-            reject(
-              new UpstreamDeviceFlowError(
-                "device-flow start timeout (upstream IdP unresponsive)"
-              )
-            );
-          });
-          provider.start({ signal: cancelController.signal }).then(resolve2, reject);
-        }
-      );
-    } finally {
-      if (startTimer !== void 0) this.clearScheduled(startTimer);
-    }
-    if (this.disposed) {
-      throw new Error("DeviceFlowRegistry disposed during start");
-    }
-    const expiresInSec = Number.isFinite(startResult.expiresIn) && startResult.expiresIn > 0 ? Math.min(
-      DEVICE_FLOW_MAX_EXPIRES_IN_SEC,
-      Math.max(DEVICE_FLOW_MIN_EXPIRES_IN_SEC, startResult.expiresIn)
-    ) : 600;
-    const expiresAt = this.now() + expiresInSec * 1e3;
-    const intervalSec = Number.isFinite(startResult.interval) && startResult.interval > 0 ? startResult.interval : DEVICE_FLOW_DEFAULT_INTERVAL_MS / 1e3;
-    const intervalMs = Math.min(
-      DEVICE_FLOW_MAX_INTERVAL_MS,
-      Math.max(1e3, intervalSec * 1e3)
-    );
-    const entry = {
-      deviceFlowId: randomUUID(),
-      providerId: params.providerId,
-      deviceCode: startResult.deviceCode,
-      pkceVerifier: startResult.pkceVerifier,
-      userCode: startResult.userCode,
-      verificationUri: startResult.verificationUri,
-      verificationUriComplete: startResult.verificationUriComplete,
-      intervalMs,
-      expiresAt,
-      status: "pending",
-      initiatorClientId: params.initiatorClientId,
-      createdAt: this.now(),
-      cancelController
-    };
-    this.byId.set(entry.deviceFlowId, entry);
-    this.byProvider.set(entry.providerId, entry);
-    this.deps.events.publish(
-      {
-        type: "started",
-        data: {
-          deviceFlowId: entry.deviceFlowId,
-          providerId: entry.providerId,
-          expiresAt: entry.expiresAt
-        }
-      },
-      entry.initiatorClientId
-    );
-    this.deps.audit?.record({
-      deviceFlowId: entry.deviceFlowId,
-      providerId: entry.providerId,
-      clientId: entry.initiatorClientId,
-      status: "started",
-      expiresInMs: entry.expiresAt - this.now()
-    });
-    this.schedulePoll(entry, provider);
-    return { view: toPublicView(entry), attached: false };
-  }
-  get(deviceFlowId) {
-    const entry = this.byId.get(deviceFlowId);
-    if (!entry) return void 0;
-    return toPublicView(entry);
-  }
-  /**
-   * Cancel a pending flow. Idempotent on terminal entries (returns
-   * `{ alreadyTerminal: true }` and does NOT re-emit `cancelled` —
-   * RFC 7231 §4.3.5: DELETE may still be a 204 even when nothing was
-   * removed). Returns `undefined` for unknown ids so the route layer
-   * can map it to 404.
-   */
-  cancel(deviceFlowId, cancellerClientId) {
-    const entry = this.byId.get(deviceFlowId);
-    if (!entry) return void 0;
-    if (entry.persistInFlight) {
-      entry.cancelRequestedDuringPersist = true;
-      if (!entry.cancellerRecorded) {
-        entry.cancellerRecorded = true;
-        if (cancellerClientId) {
-          entry.cancellerClientId = cancellerClientId;
-        }
-      }
-      try {
-        entry.cancelController.abort(new Error("cancel during persist"));
-      } catch {
-      }
-      this.deps.audit?.record({
-        deviceFlowId: entry.deviceFlowId,
-        providerId: entry.providerId,
-        clientId: cancellerClientId,
-        status: "cancelled",
-        hint: "deferred (persist in flight; final state decided by persist resolution)"
-      });
-      return { alreadyTerminal: false };
-    }
-    if (!this.transitionTerminal(entry, "cancelled")) {
-      return { alreadyTerminal: true };
-    }
-    this.deps.events.publish(
-      {
-        type: "cancelled",
-        data: { deviceFlowId: entry.deviceFlowId }
-      },
-      cancellerClientId
-    );
-    this.deps.audit?.record({
-      deviceFlowId: entry.deviceFlowId,
-      providerId: entry.providerId,
-      clientId: cancellerClientId,
-      status: "cancelled"
-    });
-    return { alreadyTerminal: false };
-  }
-  /**
-   * Active = pending entries already installed in `byProvider` PLUS
-   * in-flight starts that haven't yet completed `provider.start()`.
-   * Terminal entries in grace don't count toward the cap. Including
-   * `inFlightStarts.size` prevents concurrent starts for distinct
-   * providers from bypassing the workspace-wide cap.
-   */
-  countActive() {
-    let n = 0;
-    for (const entry of this.byProvider.values()) {
-      if (entry.status === "pending") n += 1;
-    }
-    return n + this.inFlightStarts.size;
-  }
-  schedulePoll(entry, provider) {
-    if (entry.status !== "pending") return;
-    if (entry.deviceCode === void 0) return;
-    if (this.disposed) return;
-    entry.pollHandle = this.schedule(entry.intervalMs, () => {
-      void this.runPollTick(entry, provider);
-    });
-    if (entry.pollHandle && typeof entry.pollHandle.unref === "function") {
-      entry.pollHandle.unref();
-    }
-  }
-  async runPollTick(entry, provider) {
-    if (entry.status !== "pending") return;
-    if (this.disposed) return;
-    if (entry.deviceCode === void 0) return;
-    const now = this.now();
-    if (now >= entry.expiresAt) {
-      this.expireEntry(entry);
-      return;
-    }
-    entry.lastPolledAt = now;
-    let result;
-    let rawProviderError;
-    let pollTimedOut = false;
-    let pollTimer;
-    let providerPollPromise;
-    try {
-      result = await new Promise((resolve2, reject) => {
-        pollTimer = this.schedule(DEVICE_FLOW_POLL_TIMEOUT_MS, () => {
-          const timeoutError = makeRegistryPollTimeoutError(
-            DEVICE_FLOW_POLL_TIMEOUT_MS
-          );
-          try {
-            entry.cancelController.abort(timeoutError);
-          } catch {
-          }
-          reject(timeoutError);
-        });
-        providerPollPromise = provider.poll(
-          {
-            deviceCode: entry.deviceCode,
-            pkceVerifier: entry.pkceVerifier
-          },
-          { signal: entry.cancelController.signal }
-        );
-        providerPollPromise.then(resolve2, reject);
-      });
-    } catch (err) {
-      if (err instanceof DeviceFlowPollTimeoutError && err._isRegistryTimeout === true) {
-        pollTimedOut = true;
-        result = {
-          kind: "error",
-          errorKind: "upstream_error",
-          hint: `provider.poll() timed out after ${err.timeoutMs}ms; check IdP connectivity`
-        };
-      } else {
-        rawProviderError = err instanceof Error ? err.message : String(err);
-        result = {
-          kind: "error",
-          errorKind: "upstream_error",
-          hint: "provider.poll() failed; see daemon audit log for details"
-        };
-      }
-    } finally {
-      if (pollTimer !== void 0) this.clearScheduled(pollTimer);
-    }
-    if (pollTimedOut && providerPollPromise !== void 0) {
-      const tracked = providerPollPromise;
-      const auditDeviceFlowId = entry.deviceFlowId;
-      const auditProviderId = entry.providerId;
-      const auditClientId = entry.initiatorClientId;
-      const audit = this.deps.audit;
-      void tracked.then(
-        (latePollResult) => {
-          audit?.record({
-            deviceFlowId: auditDeviceFlowId,
-            providerId: auditProviderId,
-            clientId: auditClientId,
-            status: "failed",
-            errorKind: "upstream_error",
-            // Distinguish "real late response" (pending/slow_down/
-            // success) from "provider's abort cooperation" (error).
-            // `latePollResult.kind` is provider-controlled — sanitize
-            // before interpolation to prevent log injection.
-            hint: latePollResult.kind === "error" ? `lost_late_poll_after_timeout: provider.poll() resolved kind=error after ${DEVICE_FLOW_POLL_TIMEOUT_MS}ms ceiling \u2014 likely abort-driven cooperation; IdP responsiveness unknown` : `lost_late_poll_after_timeout: provider.poll() resolved kind=${sanitizeForStderr(latePollResult.kind)} after ${DEVICE_FLOW_POLL_TIMEOUT_MS}ms ceiling \u2014 IdP is responsive but slow; consider raising the operator-side IdP latency alert threshold`
-          });
-        },
-        (lateErr) => {
-          if (lateErr instanceof DeviceFlowPollTimeoutError && lateErr._isRegistryTimeout === true)
-            return;
-          const safeDetail = lateErr instanceof Error ? `${sanitizeForStderr(lateErr.name)} (message ${lateErr.message.length} bytes; raw suppressed)` : `<non-Error throw: ${typeof lateErr}>`;
-          audit?.record({
-            deviceFlowId: auditDeviceFlowId,
-            providerId: auditProviderId,
-            clientId: auditClientId,
-            status: "failed",
-            errorKind: "upstream_error",
-            hint: `lost_late_poll_after_timeout: provider.poll() rejected after ${DEVICE_FLOW_POLL_TIMEOUT_MS}ms ceiling: ${safeDetail}`
-          });
-        }
-        // Terminal `.catch` so a throw inside either handler doesn't
-        // surface as an unhandled rejection (audit is best-effort).
-      ).catch(() => {
-      });
-    }
-    if (this.disposed) return;
-    if (entry.status !== "pending") return;
-    switch (result.kind) {
-      case "pending":
-        this.schedulePoll(entry, provider);
-        return;
-      case "slow_down":
-        entry.intervalMs = Math.min(
-          DEVICE_FLOW_MAX_INTERVAL_MS,
-          entry.intervalMs + DEVICE_FLOW_SLOW_DOWN_BUMP_MS
-        );
-        this.deps.events.publish(
-          {
-            type: "throttled",
-            data: {
-              deviceFlowId: entry.deviceFlowId,
-              intervalMs: entry.intervalMs
-            }
-          },
-          entry.initiatorClientId
-        );
-        this.schedulePoll(entry, provider);
-        return;
-      case "success": {
-        let metadata = {};
-        let persistError;
-        let persistTimer;
-        let persistTimedOut = false;
-        entry.persistInFlight = true;
-        let persistTracker;
-        try {
-          persistTracker = result.persist({
-            signal: entry.cancelController.signal
-          });
-        } catch (syncErr) {
-          persistError = syncErr;
-          persistTracker = Promise.reject(syncErr);
-          persistTracker.catch(() => {
-          });
-        }
-        persistTracker.then(
-          (lateMeta) => {
-            if (!persistTimedOut) return;
-            this.deps.audit?.record({
-              deviceFlowId: entry.deviceFlowId,
-              providerId: entry.providerId,
-              clientId: entry.initiatorClientId,
-              status: "authorized",
-              hint: `lost_success_after_timeout (provider.persist ignored timeout signal; credentials on disk but registry already published persist_failed; expiresAt=${lateMeta.expiresAt ?? "unknown"})`
-            });
-          },
-          () => {
-          }
-        );
-        if (persistError === void 0) {
-          try {
-            metadata = await new Promise((resolve2, reject) => {
-              persistTimer = this.schedule(
-                DEVICE_FLOW_PERSIST_TIMEOUT_MS,
-                () => {
-                  persistTimedOut = true;
-                  try {
-                    entry.cancelController.abort(new Error("persist timeout"));
-                  } catch {
-                  }
-                  reject(new Error("persist timeout"));
-                }
-              );
-              persistTracker.then(resolve2, reject);
-            });
-          } catch (err) {
-            persistError = err;
-          } finally {
-            if (persistTimer !== void 0) this.clearScheduled(persistTimer);
-            entry.persistInFlight = false;
-          }
-        } else {
-          entry.persistInFlight = false;
-        }
-        if (this.disposed) return;
-        const cancelDuringPersist = entry.cancelRequestedDuringPersist === true;
-        if (persistError) {
-          if (cancelDuringPersist) {
-            if (this.transitionTerminal(entry, "cancelled")) {
-              this.deps.events.publish(
-                {
-                  type: "cancelled",
-                  data: { deviceFlowId: entry.deviceFlowId }
-                },
-                entry.cancellerClientId ?? entry.initiatorClientId
-              );
-            }
-          } else if (this.transitionTerminal(entry, "error", "persist_failed")) {
-            const pastExpiry = this.now() >= entry.expiresAt;
-            this.deps.events.publish(
-              {
-                type: "failed",
-                data: {
-                  deviceFlowId: entry.deviceFlowId,
-                  errorKind: "persist_failed",
-                  hint: "credentials could not be written to the daemon filesystem \u2014 check disk space and permissions"
-                }
-              },
-              entry.initiatorClientId
-            );
-            this.deps.audit?.record({
-              deviceFlowId: entry.deviceFlowId,
-              providerId: entry.providerId,
-              clientId: entry.initiatorClientId,
-              status: "failed",
-              errorKind: "persist_failed",
-              ...pastExpiry ? {
-                hint: "persist_also_failed_past_expiry (root cause is disk I/O; entry was past expiresAt by the time persist resolved)"
-              } : {}
-            });
-          }
-          return;
-        }
-        if (this.transitionTerminal(entry, "authorized")) {
-          this.deps.events.publish(
-            {
-              type: "authorized",
-              data: {
-                deviceFlowId: entry.deviceFlowId,
-                providerId: entry.providerId,
-                expiresAt: metadata.expiresAt,
-                accountAlias: metadata.accountAlias
-              }
-            },
-            entry.initiatorClientId
-          );
-          this.deps.audit?.record({
-            deviceFlowId: entry.deviceFlowId,
-            providerId: entry.providerId,
-            clientId: entry.initiatorClientId,
-            status: "authorized",
-            ...cancelDuringPersist ? {
-              hint: "lost_success_kept (cancel during persist; credentials kept per IdP approval)"
-            } : {}
-          });
-        }
-        return;
-      }
-      case "error":
-        entry.hint = result.hint;
-        if (this.transitionTerminal(entry, "error", result.errorKind)) {
-          this.deps.events.publish(
-            {
-              type: "failed",
-              data: {
-                deviceFlowId: entry.deviceFlowId,
-                errorKind: result.errorKind,
-                hint: result.hint
-              }
-            },
-            entry.initiatorClientId
-          );
-          this.deps.audit?.record({
-            deviceFlowId: entry.deviceFlowId,
-            providerId: entry.providerId,
-            clientId: entry.initiatorClientId,
-            status: "failed",
-            errorKind: result.errorKind,
-            // When a provider threw, include the full raw message in
-            // the audit hint. When `rawProviderError` is undefined,
-            // use the structured `result.hint` so the audit trail
-            // matches the SSE event.
-            ...rawProviderError !== void 0 ? {
-              hint: `provider.poll() threw (raw): ${sanitizeForStderr(rawProviderError)}`
-            } : result.hint !== void 0 ? { hint: result.hint } : {}
-          });
-        }
-        return;
-      default: {
-        const _exhaustive = result;
-        void _exhaustive;
-      }
-    }
-  }
-  /**
-   * Record a take-over: a second SDK client posted for a provider that
-   * already has a pending entry. When the caller differs from the
-   * entry's initiator, stamp it on `lastOriginatorClientId` and emit
-   * an audit breadcrumb. No event publish — the `attached: true` HTTP
-   * response is the second caller's signal.
-   */
-  recordTakeover(entry, takeoverClientId) {
-    if (!takeoverClientId) return;
-    if (takeoverClientId === entry.initiatorClientId) return;
-    if (takeoverClientId === entry.lastOriginatorClientId) return;
-    entry.lastOriginatorClientId = takeoverClientId;
-    this.deps.audit?.record({
-      deviceFlowId: entry.deviceFlowId,
-      providerId: entry.providerId,
-      clientId: takeoverClientId,
-      status: "started",
-      hint: `take-over (per-provider singleton; original initiator=${entry.initiatorClientId ?? "(none)"})`
-    });
-  }
-  /**
-   * Drive a pending entry to the time-based `expired` terminal.
-   * Extracted so the poll-tick and sweeper share a single event shape.
-   * No-op if the entry has already transitioned.
-   */
-  expireEntry(entry) {
-    if (!this.transitionTerminal(entry, "expired", "expired_token")) return;
-    this.deps.events.publish(
-      {
-        type: "failed",
-        data: {
-          deviceFlowId: entry.deviceFlowId,
-          errorKind: "expired_token",
-          hint: "device-flow expired without authorization"
-        }
-      },
-      entry.initiatorClientId
-    );
-    this.deps.audit?.record({
-      deviceFlowId: entry.deviceFlowId,
-      providerId: entry.providerId,
-      clientId: entry.initiatorClientId,
-      status: "expired",
-      errorKind: "expired_token"
-    });
-  }
-  /**
-   * Move a pending entry to terminal state. Returns **`true` exactly once**
-   * — the call site that successfully drove the transition. Subsequent
-   * calls (sweeper × poll-tick race, double cancel, etc.) return `false`
-   * so the caller can suppress duplicate event publish + audit log.
-   *
-   * On a successful transition:
-   *   1. clears any pending poll timer
-   *   2. wipes the secret material from `entry.deviceCode` /
-   *      `entry.pkceVerifier`. The PRIMARY guard against secret leaks
-   *      is the `entry.status !== 'pending'` check at the top of
-   *      `runPollTick` — a stale timer that managed to fire post-clear
-   *      bails out before touching the entry. Secret-clearing here is
-   *      DEFENSE IN DEPTH: even if a future refactor weakens the
-   *      status guard, the registry's in-memory state can no longer
-   *      hand out the upstream `device_code` to a late-arriving
-   *      logger / serializer.
-   *   3. records `terminalAt` for the sweeper to evict after grace
-   *   4. removes the per-provider singleton index so a new POST creates
-   *      a fresh flow instead of taking over the terminal one
-   */
-  transitionTerminal(entry, status, errorKind) {
-    if (entry.status !== "pending") return false;
-    entry.status = status;
-    if (errorKind) entry.errorKind = errorKind;
-    entry.terminalAt = this.now();
-    if (entry.pollHandle) {
-      this.clearScheduled(entry.pollHandle);
-      entry.pollHandle = void 0;
-    }
-    entry.deviceCode = void 0;
-    entry.pkceVerifier = void 0;
-    try {
-      entry.cancelController.abort();
-    } catch {
-    }
-    if (this.byProvider.get(entry.providerId) === entry) {
-      this.byProvider.delete(entry.providerId);
-    }
-    return true;
-  }
-  /**
-   * Periodic sweeper:
-   *   (a) pending entries past `expiresAt` get a synthetic timeout event
-   *       (the polling loop also handles this on its next tick, but a
-   *       wedged poll path should not block expiry)
-   *   (b) terminal entries past their grace window get evicted entirely
-   */
-  sweep() {
-    if (this.disposed) return;
-    const now = this.now();
-    for (const entry of [...this.byId.values()]) {
-      if (entry.persistInFlight) continue;
-      if (entry.status === "pending" && now >= entry.expiresAt) {
-        this.expireEntry(entry);
-        continue;
-      }
-      if (entry.status !== "pending" && entry.terminalAt !== void 0 && now - entry.terminalAt >= DEVICE_FLOW_TERMINAL_GRACE_MS) {
-        this.byId.delete(entry.deviceFlowId);
-      }
-    }
-  }
-  /**
-   * For diagnostics / GET /workspace/auth/status: report only pending
-   * flows. Terminal entries are an implementation detail of the SDK
-   * reconnect path and shouldn't be enumerated to all bearer-token
-   * holders.
-   */
-  listPending() {
-    const out = [];
-    for (const entry of this.byId.values()) {
-      if (entry.status === "pending") out.push(toPublicView(entry));
-    }
-    return out;
-  }
-  dispose() {
-    if (this.disposed) return;
-    this.disposed = true;
-    if (this.sweeperHandle) {
-      this.clearScheduledInterval(this.sweeperHandle);
-      this.sweeperHandle = void 0;
-    }
-    for (const entry of this.byId.values()) {
-      if (entry.pollHandle) {
-        this.clearScheduled(entry.pollHandle);
-        entry.pollHandle = void 0;
-      }
-      try {
-        entry.cancelController.abort();
-      } catch {
-      }
-      entry.deviceCode = void 0;
-      entry.pkceVerifier = void 0;
-    }
-    this.byId.clear();
-    this.byProvider.clear();
-  }
-};
-function toPublicView(entry) {
-  const base = {
-    deviceFlowId: entry.deviceFlowId,
-    providerId: entry.providerId,
-    status: entry.status,
-    createdAt: entry.createdAt,
-    initiatorClientId: entry.initiatorClientId
-  };
-  if (entry.errorKind) base.errorKind = entry.errorKind;
-  if (entry.hint) base.hint = entry.hint;
-  if (entry.lastPolledAt !== void 0) base.lastPolledAt = entry.lastPolledAt;
-  if (entry.status === "pending") {
-    base.userCode = entry.userCode;
-    base.verificationUri = entry.verificationUri;
-    base.verificationUriComplete = entry.verificationUriComplete;
-    base.expiresAt = entry.expiresAt;
-    base.intervalMs = entry.intervalMs;
-  }
-  return base;
-}
-__name(toPublicView, "toPublicView");
-
-// packages/cli/src/serve/bridge-file-system-adapter.ts
-init_esbuild_shims();
-var ACP_WRITE_ROUTE = "ACP writeTextFile";
-var ACP_READ_ROUTE = "ACP readTextFile";
-function buildAuditContext(params, route) {
-  return {
-    route,
-    ...params.sessionId ? { sessionId: params.sessionId } : {}
-  };
-}
-__name(buildAuditContext, "buildAuditContext");
-function createBridgeFileSystemAdapter(factory) {
-  return {
-    async writeText(params) {
-      const wfs = factory.forRequest(
-        buildAuditContext(params, ACP_WRITE_ROUTE)
-      );
-      const resolved = await wfs.resolve(params.path, "write");
-      await wfs.writeTextOverwrite(resolved, params.content);
-      return {};
-    },
-    async readText(params) {
-      const wfs = factory.forRequest(buildAuditContext(params, ACP_READ_ROUTE));
-      const resolved = await wfs.resolve(params.path, "read");
-      const opts = {};
-      if (typeof params.line === "number" && params.line > 0) {
-        opts.line = params.line;
-      }
-      if (typeof params.limit === "number" && params.limit > 0) {
-        opts.limit = params.limit;
-      }
-      const { content } = await wfs.readText(resolved, opts);
-      return { content };
-    }
-  };
-}
-__name(createBridgeFileSystemAdapter, "createBridgeFileSystemAdapter");
-
-// packages/cli/src/serve/fs/path-mutex-registry.ts
-init_esbuild_shims();
-var PathMutexRegistry = class {
-  static {
-    __name(this, "PathMutexRegistry");
-  }
-  tails = /* @__PURE__ */ new Map();
-  async runExclusive(key, fn) {
-    const previous = this.tails.get(key) ?? Promise.resolve();
-    let release;
-    const current = new Promise((resolve2) => {
-      release = resolve2;
-    });
-    const tail = previous.catch(() => void 0).then(() => current);
-    this.tails.set(key, tail);
-    await previous.catch(() => void 0);
-    try {
-      return await fn();
-    } finally {
-      release();
-      if (this.tails.get(key) === tail) this.tails.delete(key);
-    }
-  }
-};
-
-// packages/cli/src/serve/health-query.ts
-init_esbuild_shims();
-function isDeepHealthQuery(raw) {
-  return raw === "1" || raw === "true" || raw === "";
-}
-__name(isDeepHealthQuery, "isDeepHealthQuery");
-
 // packages/cli/src/serve/web-shell-resolver.ts
 init_esbuild_shims();
 import { existsSync } from "node:fs";
@@ -16288,2497 +15405,15 @@ function resolveWebShellDir() {
 }
 __name(resolveWebShellDir, "resolveWebShellDir");
 
-// packages/cli/src/serve/auth.ts
-init_esbuild_shims();
-import { createHash, timingSafeEqual } from "node:crypto";
-var denyBrowserOriginCors = /* @__PURE__ */ __name((req, res, next) => {
-  if (req.headers.origin) {
-    res.setHeader("Vary", "Origin");
-    res.status(403).json({ error: "Request denied by CORS policy" });
-    return;
-  }
-  next();
-}, "denyBrowserOriginCors");
-var InvalidAllowOriginPatternError = class extends Error {
-  static {
-    __name(this, "InvalidAllowOriginPatternError");
-  }
-  pattern;
-  constructor(pattern, reason) {
-    super(
-      `Invalid --allow-origin pattern ${JSON.stringify(pattern)}: ${reason}. Expected \`*\` or a URL origin of the form \`<scheme>://<host>[:<port>]\` (no trailing slash, no path, no userinfo, no query).`
-    );
-    this.name = "InvalidAllowOriginPatternError";
-    this.pattern = pattern;
-  }
-};
-function parseAllowOriginPatterns(raw) {
-  const origins = /* @__PURE__ */ new Set();
-  let allowAny = false;
-  for (const entry of raw) {
-    if (entry === "*") {
-      allowAny = true;
-      continue;
-    }
-    let parsed;
-    try {
-      parsed = new URL(entry);
-    } catch {
-      throw new InvalidAllowOriginPatternError(entry, "not a parseable URL");
-    }
-    const canonical = parsed.origin === "null" ? `${parsed.protocol}//${parsed.host}` : parsed.origin;
-    if (canonical !== entry) {
-      throw new InvalidAllowOriginPatternError(
-        entry,
-        `expected the canonical origin ${JSON.stringify(canonical)} without trailing slash, path, userinfo, or query`
-      );
-    }
-    origins.add(canonical.toLowerCase());
-  }
-  return { allowAny, origins };
-}
-__name(parseAllowOriginPatterns, "parseAllowOriginPatterns");
-function allowOriginCors(patterns) {
-  const allowedMethods = "GET, POST, PATCH, DELETE, OPTIONS";
-  const allowedHeaders = "Authorization, Content-Type, X-Qwen-Client-Id, Last-Event-ID, X-Qwen-Event-Epoch";
-  const maxAgeSeconds = "86400";
-  const exposedHeaders = "Retry-After, X-Qwen-Event-Epoch";
-  return (req, res, next) => {
-    const origin = req.headers.origin;
-    if (!origin) {
-      next();
-      return;
-    }
-    if (origin === "null") {
-      res.setHeader("Vary", "Origin");
-      res.status(403).json({ error: "Request denied by CORS policy" });
-      return;
-    }
-    const matched = patterns.allowAny || patterns.origins.has(origin.toLowerCase());
-    if (matched) {
-      res.setHeader("Access-Control-Allow-Origin", origin);
-      res.setHeader("Vary", "Origin");
-      res.setHeader("Access-Control-Allow-Methods", allowedMethods);
-      res.setHeader("Access-Control-Allow-Headers", allowedHeaders);
-      res.setHeader("Access-Control-Max-Age", maxAgeSeconds);
-      res.setHeader("Access-Control-Expose-Headers", exposedHeaders);
-      if (req.method === "OPTIONS" && (req.headers["access-control-request-method"] || req.headers["access-control-request-headers"])) {
-        res.status(204).end();
-        return;
-      }
-      next();
-      return;
-    }
-    res.setHeader("Vary", "Origin");
-    res.status(403).json({ error: "Request denied by CORS policy" });
-  };
-}
-__name(allowOriginCors, "allowOriginCors");
-function hostAllowlist(bind, getPort) {
-  if (!isLoopbackBind(bind)) {
-    return (_req, _res, next) => next();
-  }
-  let cachedPort = -1;
-  let cachedAllowed = /* @__PURE__ */ new Set();
-  const allowedFor = /* @__PURE__ */ __name((port) => {
-    if (port === cachedPort) return cachedAllowed;
-    cachedPort = port;
-    cachedAllowed = /* @__PURE__ */ new Set([
-      `localhost:${port}`,
-      `127.0.0.1:${port}`,
-      `[::1]:${port}`,
-      `host.docker.internal:${port}`
-    ]);
-    if (port === 80 || port === 443) {
-      cachedAllowed.add("localhost");
-      cachedAllowed.add("127.0.0.1");
-      cachedAllowed.add("[::1]");
-      cachedAllowed.add("host.docker.internal");
-    }
-    return cachedAllowed;
-  }, "allowedFor");
-  return (req, res, next) => {
-    const port = getPort();
-    const host = (req.headers.host || "").toLowerCase();
-    if (!allowedFor(port).has(host)) {
-      res.status(403).json({ error: "Invalid Host header" });
-      return;
-    }
-    next();
-  };
-}
-__name(hostAllowlist, "hostAllowlist");
-function bearerAuth(token) {
-  if (!token) {
-    return (_req, _res, next) => next();
-  }
-  const expected = createHash("sha256").update(token, "utf8").digest();
-  return (req, res, next) => {
-    const header = req.headers.authorization;
-    if (!header) {
-      res.status(401).json({ error: "Unauthorized" });
-      return;
-    }
-    const schemeEnd = header.indexOf(" ");
-    if (schemeEnd <= 0) {
-      res.status(401).json({ error: "Unauthorized" });
-      return;
-    }
-    const scheme = header.slice(0, schemeEnd).toLowerCase();
-    if (scheme !== "bearer") {
-      res.status(401).json({ error: "Unauthorized" });
-      return;
-    }
-    let credStart = schemeEnd + 1;
-    while (credStart < header.length && (header.charCodeAt(credStart) === 32 || header.charCodeAt(credStart) === 9)) {
-      credStart++;
-    }
-    const credentials = header.slice(credStart);
-    if (credentials.length === 0) {
-      res.status(401).json({ error: "Unauthorized" });
-      return;
-    }
-    const candidate = createHash("sha256").update(credentials, "utf8").digest();
-    if (!timingSafeEqual(candidate, expected)) {
-      res.status(401).json({ error: "Unauthorized" });
-      return;
-    }
-    next();
-  };
-}
-__name(bearerAuth, "bearerAuth");
-function createMutationGate(deps) {
-  const passthrough = /* @__PURE__ */ __name((_req, _res, next) => next(), "passthrough");
-  if (deps.requireAuth || deps.tokenConfigured) {
-    return () => passthrough;
-  }
-  const strictDenier = /* @__PURE__ */ __name((_req, res) => {
-    res.status(401).json({
-      error: "This route requires the daemon to be configured with a bearer token. Set QWEN_SERVER_TOKEN or pass --token to enable bearer auth.",
-      code: "token_required"
-    });
-  }, "strictDenier");
-  return (opts = {}) => opts.strict ? strictDenier : passthrough;
-}
-__name(createMutationGate, "createMutationGate");
-
-// packages/cli/src/serve/acp-http/client-mcp-sender-registry.ts
-init_esbuild_shims();
-var ClientMcpSenderRegistry = class {
-  static {
-    __name(this, "ClientMcpSenderRegistry");
-  }
-  senders = /* @__PURE__ */ new Map();
-  sessionSenders = /* @__PURE__ */ new Map();
-  sessionScopedServerNames = /* @__PURE__ */ new Set();
-  /**
-   * Record a server's WS sender, owned by `owner` (the registering
-   * connection's stable client id). Idempotent; last writer wins and takes
-   * ownership, so the new owner's `delete` is the one that takes effect.
-   */
-  set(serverName, sender, owner) {
-    this.senders.set(serverName, { sender, owner });
-  }
-  /**
-   * Forget a server's WS sender — but only when `owner` still owns the entry.
-   * Idempotent. The ownership guard stops a disconnecting connection from
-   * clobbering an entry a later connection re-registered under the same name.
-   */
-  delete(serverName, owner) {
-    if (this.senders.get(serverName)?.owner === owner) {
-      this.senders.delete(serverName);
-    }
-  }
-  /** Whether `owner` currently owns the entry for `serverName`. */
-  owns(serverName, owner) {
-    return this.senders.get(serverName)?.owner === owner;
-  }
-  setSession(serverName, sessionId, sender, owner) {
-    let bySession = this.sessionSenders.get(serverName);
-    if (!bySession) {
-      bySession = /* @__PURE__ */ new Map();
-      this.sessionSenders.set(serverName, bySession);
-    }
-    bySession.set(sessionId, { sender, owner });
-    this.sessionScopedServerNames.add(serverName);
-  }
-  ownsSession(serverName, sessionId, owner) {
-    return this.sessionSenders.get(serverName)?.get(sessionId)?.owner === owner;
-  }
-  deleteSession(serverName, sessionId, owner) {
-    const bySession = this.sessionSenders.get(serverName);
-    if (bySession?.get(sessionId)?.owner !== owner) return false;
-    bySession.delete(sessionId);
-    if (bySession.size === 0) {
-      this.sessionSenders.delete(serverName);
-    }
-    return true;
-  }
-  /** Currently-registered server names (tests / accounting). */
-  serverNames() {
-    return [...this.senders.keys()];
-  }
-  /**
-   * The {@link ClientMcpMessageSender} the bridge consumes. Returns a
-   * `(payload) => Promise<payload>` bound to the named server, or `undefined`
-   * when no client currently hosts it. The bridge passes a `JSONRPCMessage` as
-   * `payload`; we keep the public type `unknown` to match the bridge's
-   * SDK-free contract.
-   */
-  lookup = /* @__PURE__ */ __name((serverName) => {
-    const entry = this.senders.get(serverName);
-    const sessionEntries = this.sessionSenders.get(serverName);
-    if (!entry && !sessionEntries) return void 0;
-    return (payload, context) => {
-      if (context?.sessionId) {
-        const sessionEntry = sessionEntries?.get(context.sessionId);
-        if (sessionEntry) return sessionEntry.sender(payload);
-        if (this.sessionScopedServerNames.has(serverName)) {
-          return Promise.reject(
-            new Error(
-              `No session-scoped MCP sender for '${serverName}' in session '${context.sessionId}'.`
-            )
-          );
-        }
-      }
-      if (this.sessionScopedServerNames.has(serverName)) {
-        return Promise.reject(
-          new Error(
-            `Session-scoped MCP server '${serverName}' requires a session context.`
-          )
-        );
-      }
-      if (!entry) {
-        return Promise.reject(
-          new Error(`No client MCP sender for '${serverName}'.`)
-        );
-      }
-      return entry.sender(
-        serverName,
-        payload
-      );
-    };
-  }, "lookup");
-};
-function createClientMcpServerProvider(registry, bridge, originatorClientId) {
-  return {
-    async registerClientMcpServer(serverName, sendSdkMcpMessage) {
-      registry.set(serverName, sendSdkMcpMessage, originatorClientId);
-      try {
-        const runtimeConfig = {
-          // SDK-type so the child binds `SdkControlClientTransport`
-          // (`isSdkMcpServerConfig`); the flag tells the child to KEEP the
-          // type and bind `sendSdkMcpMessage` to the reverse ext-method.
-          type: "sdk",
-          [CLIENT_MCP_OVER_WS_CONFIG_FLAG]: true
-        };
-        const result = await bridge.addRuntimeMcpServer(
-          serverName,
-          runtimeConfig,
-          originatorClientId
-        );
-        if (result.skipped) {
-          registry.delete(serverName, originatorClientId);
-          throw new Error(
-            `runtime MCP add skipped: ${result.reason ?? "unknown"}`
-          );
-        }
-        if (result.shadowedSettings) {
-          await bridge.removeRuntimeMcpServer(serverName, originatorClientId).catch(() => {
-          });
-          throw new Error(
-            `client MCP server '${serverName}' conflicts with a configured MCP server`
-          );
-        }
-        return { toolCount: result.toolCount };
-      } catch (err) {
-        registry.delete(serverName, originatorClientId);
-        throw err;
-      }
-    },
-    async unregisterClientMcpServer(serverName) {
-      if (!registry.owns(serverName, originatorClientId)) return;
-      registry.delete(serverName, originatorClientId);
-      await bridge.removeRuntimeMcpServer(serverName, originatorClientId).catch(() => {
-      });
-    }
-  };
-}
-__name(createClientMcpServerProvider, "createClientMcpServerProvider");
-
-// packages/cli/src/serve/capabilities.ts
-init_esbuild_shims();
-var SERVE_PROTOCOL_VERSION = "v1";
-var SUPPORTED_SERVE_PROTOCOL_VERSIONS = [
-  SERVE_PROTOCOL_VERSION
-];
-var SERVE_CAPABILITY_REGISTRY = {
-  health: { since: "v1" },
-  daemon_status: { since: "v1" },
-  capabilities: { since: "v1" },
-  session_create: { since: "v1" },
-  session_scope_override: { since: "v1" },
-  session_load: { since: "v1" },
-  session_resume: { since: "v1" },
-  // Deprecated alias — kept until @agentclientprotocol/sdk graduates
-  // the underlying ACP method from unstable_resumeSession to resumeSession.
-  unstable_session_resume: { since: "v1" },
-  session_list: { since: "v1" },
-  // Aggregate persisted session counts via
-  // `GET /workspace/:id/session-info` (and the plural
-  // `/workspaces/:workspace/session-info` twin). Performs a disk scan of
-  // local JSONL files — advertised so clients can discover it, but the
-  // response itself marks `expensive: true` / `cost: "disk_scan"` and
-  // must not be polled in a tight loop.
-  session_info: { since: "v1" },
-  session_source_metadata: { since: "v1" },
-  session_side_task: { since: "v1" },
-  session_prompt: { since: "v1" },
-  session_mid_turn_message_mutation: { since: "v1" },
-  session_cancel: { since: "v1" },
-  session_events: { since: "v1" },
-  session_artifacts: { since: "v1" },
-  session_artifacts_persistence: { since: "v1" },
-  // Daemon emits `slow_client_warning` synthetic frames at 75% queue
-  // fill and honors `?maxQueued=N` (range [16, 2048]) on
-  // `GET /session/:id/events`. Old daemons silently lack both — SDK
-  // clients pre-flight this tag before opting in.
-  slow_client_warning: { since: "v1" },
-  // SDK consumers can detect `KnownDaemonEvent` schema support without
-  // pinning against this SDK release — `narrowDaemonEvent` falls back
-  // to `kind: 'unknown'` for daemons that don't advertise the tag,
-  // so the tag is purely informational.
-  typed_event_schema: { since: "v1" },
-  session_set_model: { since: "v1" },
-  client_identity: { since: "v1" },
-  client_heartbeat: { since: "v1" },
-  session_permission_vote: { since: "v1" },
-  permission_vote: { since: "v1" },
-  workspace_mcp: { since: "v1" },
-  workspace_skills: { since: "v1" },
-  workspace_providers: { since: "v1" },
-  workspace_acp_preheat: { since: "v1" },
-  workspace_acp_status: { since: "v1" },
-  auth_provider_install: { since: "v1" },
-  // Workspace memory CRUD (`GET/POST /workspace/memory`). Daemon exposes
-  // hierarchical QWEN.md state and accepts append/replace writes scoped
-  // to either the bound workspace or the global ~/.qwen directory.
-  workspace_memory: { since: "v1" },
-  workspace_memory_remember: {
-    since: "v1",
-    modes: ["workspace", "clean"]
-  },
-  workspace_memory_forget: { since: "v1" },
-  workspace_memory_dream: { since: "v1" },
-  // Workspace agents CRUD (`GET/POST /workspace/agents` +
-  // `GET/POST/DELETE /workspace/agents/:agentType`). Wraps
-  // `SubagentManager` over HTTP so remote clients can list / read /
-  // create / update / delete project- and user-level subagent
-  // definitions. Built-in / extension agents stay read-only.
-  workspace_agents: { since: "v1" },
-  workspace_agent_generate: { since: "v1" },
-  workspace_env: { since: "v1" },
-  workspace_preflight: { since: "v1" },
-  session_context: { since: "v1" },
-  session_context_usage: { since: "v1" },
-  session_supported_commands: { since: "v1" },
-  session_tasks: { since: "v1" },
-  session_monitor_tool_correlation: { since: "v1" },
-  session_stats: { since: "v1" },
-  session_lsp: { since: "v1" },
-  session_status: { since: "v1" },
-  session_close: { since: "v1" },
-  session_archive: { since: "v1" },
-  session_metadata: { since: "v1" },
-  session_organization: { since: "v1" },
-  session_export: { since: "v1" },
-  session_transcript: { since: "v1" },
-  session_transcript_pagination: { since: "v1" },
-  // Daemon supports the MCP client guardrail surface: an in-process
-  // counter exposed on `GET /workspace/mcp`, a `--mcp-client-budget=N`
-  // flag with `--mcp-budget-mode={enforce, warn, off}`, and a
-  // `disabledReason: 'budget'` tag on per-server cells when refused at
-  // discovery. `modes` enumerates the implemented behaviors.
-  mcp_guardrails: { since: "v1", modes: ["warn", "enforce"] },
-  workspace_mcp_manage: { since: "v1" },
-  // Daemon emits typed push events for MCP budget state crossings:
-  // `mcp_budget_warning` and `mcp_child_refused_batch`. Always-on;
-  // orthogonal to `mcp_guardrails` (the snapshot surface).
-  mcp_guardrail_events: { since: "v1" },
-  // Managed ACP invokes an authenticated external policy provider exactly once
-  // at the final tool-execution boundary. Advertised only after the required
-  // provider completed its startup handshake.
-  external_tool_guard: { since: "v1", modes: ["required"] },
-  // Always-on. Daemon supports runtime MCP server mutation via
-  // `POST /workspace/mcp/servers` (add) and
-  // `DELETE /workspace/mcp/servers/:name` (remove). SDK clients
-  // pre-flight this tag before calling those routes.
-  mcp_server_runtime_mutation: { since: "v1" },
-  // Daemon supports the read-only workspace file surface:
-  // `GET /file`, `GET /list`, `GET /glob`, `GET /stat`. The four
-  // routes are gated as a single feature because they share the same
-  // backing `WorkspaceFileSystem` boundary and failure shape.
-  workspace_file_read: { since: "v1" },
-  // Daemon supports bounded raw byte reads via `GET /file/bytes`.
-  // Separate from `workspace_file_read` because older daemons may
-  // advertise the text/list/stat/glob surface without byte-window
-  // support.
-  workspace_file_bytes: { since: "v1" },
-  // Daemon supports byte-cursor paging on `GET /file`: responses carry
-  // `nextCursor`/`hasMore` and requests accept `cursor`. A separate tag from
-  // `workspace_file_read` because the convention here is that new behavior
-  // gets a new tag — a client that preflighted the old one must not silently
-  // receive a surface it cannot recognise. Same split as
-  // `workspace_file_bytes` from `workspace_file_read`, and
-  // `session_transcript_pagination` from `session_transcript`.
-  workspace_file_read_cursor: { since: "v1" },
-  // Daemon supports hash-aware text mutation routes
-  // (`POST /file/write`, `POST /file/edit`) behind the strict mutation
-  // gate. Clients should still pre-flight `require_auth` separately for
-  // deployment posture; this tag only means the route contract exists.
-  workspace_file_write: { since: "v1" },
-  // Daemon hosts the session-level approval-mode
-  // control route `POST /session/:id/approval-mode` (gated by the
-  // mutation gate, strict). The route accepts `{mode, persist?}` —
-  // `persist:true` also writes `tools.approvalMode` to workspace
-  // settings via the daemon's `loadedSettings` handle. SDK helper:
-  // `DaemonClient.setSessionApprovalMode`.
-  session_approval_mode_control: { since: "v1" },
-  // `POST /workspace/tools/:name/enable` toggles a
-  // tool name in the workspace's `tools.disabled` settings list. The
-  // bridge writes the settings file directly (no ACP roundtrip) and
-  // fan-outs a `tool_toggled` event to all live session SSE buses.
-  // Already-registered tools in active sessions are NOT retroactively
-  // unregistered — the toggle takes effect on the next ACP child spawn
-  // (`tools.disabled` is consulted at `Config` construction time).
-  workspace_tool_toggle: { since: "v1" },
-  workspace_skill_toggle: { since: "v1" },
-  workspace_skill_manage: { since: "v1" },
-  workspace_settings: { since: "v1" },
-  // `GET /workspace/permissions` is always available when this tag is
-  // advertised. `POST /workspace/permissions` updates the active ACP
-  // child and returns `permission_session_required` when no live ACP
-  // session exists; the tag means the route contract exists, not that
-  // the current daemon state can accept a write.
-  workspace_permissions: { since: "v1" },
-  workspace_voice: { since: "v1" },
-  workspace_voice_transcription: { since: "v1", modes: ["batch"] },
-  // Inspect bound workspace trust and request local operator action.
-  // Remote clients cannot directly write trustedFolders.json.
-  workspace_trust: { since: "v1" },
-  // Workspace trust policy changes rebuild the affected runtime generation
-  // without restarting the daemon. V2 trust status exposes convergence.
-  workspace_trust_hot_reload: { since: "v1" },
-  // `POST /workspace/init` scaffolds an empty
-  // `QWEN.md` (or whatever `getCurrentGeminiMdFilename()` returns) at
-  // the bound workspace root. Body: `{force?: boolean}`. Default
-  // refuses with 409 when the file already exists; `force: true`
-  // overwrites. Mechanical only — does NOT call the LLM. To AI-fill
-  // the file, the caller should follow up with
-  // `POST /session/:id/prompt`.
-  workspace_init: { since: "v1" },
-  // `POST /workspace/setup-github` installs the fixed
-  // qwen-code-action workflow set into the bound workspace after
-  // explicit consent. The route reuses the interactive `/setup-github`
-  // release lookup, workflow download, and `.gitignore` update logic.
-  workspace_github_setup: { since: "v1" },
-  // `GET /workspaces/:workspace/github/prs` lists the open pull requests
-  // of the workspace's GitHub remote via the `gh` CLI (read-only). The
-  // tag means the route contract exists; runtime availability of `gh`
-  // and its auth is reported per-request through the
-  // `github_cli_unavailable` / `github_prs_failed` error codes.
-  workspace_github_prs: { since: "v1" },
-  // `POST /workspace/mcp/:server/restart` performs
-  // a single-server MCP restart (disconnect + reconnect + rediscover)
-  // through the ACP child's `McpClientManager`. Pre-checks the live
-  // budget snapshot: when the target server is not
-  // already in `reservedSlots` AND the live count would exceed the
-  // configured budget under `enforce` mode, returns 200 with
-  // `{restarted:false, skipped:true, reason:'budget_would_exceed'}`
-  // rather than triggering a refusal cascade. Other skip reasons:
-  // `'in_flight'` (concurrent discovery in progress), `'disabled'`
-  // (server is configured but explicitly disabled).
-  workspace_mcp_restart: { since: "v1" },
-  // Daemon hosts `POST /session/:id/recap`, which
-  // generates a one-sentence "where did I leave off" summary by
-  // running `generateSessionRecap` (`core/services/sessionRecap.ts`) as
-  // a side-query against the fast model. Non-strict mutation gate —
-  // posture mirrors `/session/:id/prompt` (token cost, not state
-  // mutation). The route returns `{sessionId, recap}` where `recap`
-  // may be `null` for too-short histories or transient model failures
-  // (best-effort, never throws). SDK helper: `DaemonClient.recapSession`.
-  session_recap: { since: "v1" },
-  // `POST /session/:id/generate` streams a stateless, tool-free model call.
-  // The ACP child prefers fastModel and falls back to the main session model.
-  session_generation: { since: "v1" },
-  // `POST /workspace/generate` runs the same stateless, tool-free generation
-  // protocol against the resolved workspace runtime without a live session.
-  workspace_generation: { since: "v1" },
-  // Side question (/btw) against the session's conversation context.
-  // Single-turn, tool-free LLM call via runForkedAgent (cache path).
-  session_btw: { since: "v1" },
-  // Direct daemon-side shell execution for an existing session.
-  // Advertised CONDITIONALLY: operators must explicitly enable it and
-  // configure bearer auth. Clients must still send a session-bound
-  // X-Qwen-Client-Id when calling the route.
-  session_shell_command: { since: "v1" },
-  // Daemon hosts a workspace-shared MCP transport
-  // pool (`QwenAgent.mcpPool`); `GET /workspace/mcp` reflects pool-level
-  // accounting (`entryCount`, `entrySummary` on each per-server cell).
-  // Advertised CONDITIONALLY — the kill switch
-  // `QWEN_SERVE_NO_MCP_POOL=1` env var falls back to per-session MCP
-  // clients and the tag is omitted so SDK consumers
-  // pre-flighting on the tag get accurate "pool is on" semantics.
-  mcp_workspace_pool: { since: "v1" },
-  // `POST /workspace/mcp/:server/restart`
-  // accepts an optional `?entryIndex=N` (or `*`) query parameter
-  // and may return the new `{entries: RestartResult[]}` shape when
-  // the pool holds multiple entries for the same server name (e.g.
-  // sessions injected divergent OAuth headers). Single-entry
-  // restarts continue to return the legacy `{restarted, durationMs}`
-  // shape for compatibility with pre-F2 SDK clients. Advertised
-  // CONDITIONALLY in lockstep with `mcp_workspace_pool`: pool
-  // off → both tags absent, pool on → both tags present. Operators
-  // pre-flighting on this tag can branch on whether the response
-  // shape may include `entries[]`.
-  mcp_pool_restart: { since: "v1" },
-  // Daemon was booted with `--require-auth` (or
-  // `requireAuth: true`), so even loopback callers must carry a bearer
-  // token. Advertised CONDITIONALLY — only when the flag is on — so
-  // SDK clients can branch on its presence to surface a clear "this
-  // deployment requires auth" hint instead of speculatively trying
-  // requests and parsing the resulting 401 body. Loopback developer
-  // defaults (no flag) omit the tag, preserving the bit-for-bit shape
-  // older clients expect.
-  require_auth: { since: "v1" },
-  // Daemon was booted with `--allow-origin <pattern>`
-  // (at least one entry, including the `*` literal). Advertised
-  // CONDITIONALLY — only when the flag is set — so browser SDK clients
-  // can pre-flight whether the daemon will honor their cross-origin
-  // request before issuing it (and parsing a 403). The configured
-  // pattern list is intentionally NOT echoed in the capabilities
-  // envelope — browser webui knows its own origin, and surfacing the
-  // list would let an unauthenticated `/capabilities` reader
-  // enumerate every trusted origin, which is useful recon for a
-  // misconfigured deployment.
-  allow_origin: { since: "v1" },
-  // Daemon exposes the device-flow auth surface
-  // (`POST /workspace/auth/device-flow`, GET/DELETE on `/:id`, and
-  // `GET /workspace/auth/status`). Advertised UNCONDITIONALLY: the
-  // routes themselves return `400 unsupported_provider` if the daemon
-  // can't satisfy a specific provider, so clients always probe via the
-  // route. The list of supported providers is surfaced through the
-  // status route (extension data on `/capabilities` would inflate the
-  // descriptor shape; we keep the registry uniform).
-  auth_device_flow: { since: "v1" },
-  permission_mediation: {
-    since: "v1",
-    modes: ["first-responder", "designated", "consensus", "local-only"]
-  },
-  prompt_absolute_deadline: { since: "v1" },
-  writer_idle_timeout: { since: "v1" },
-  non_blocking_prompt: { since: "v1" },
-  session_language: { since: "v1" },
-  session_rewind: { since: "v1" },
-  workspace_hooks: { since: "v1" },
-  session_hooks: { since: "v1" },
-  workspace_extensions: { since: "v1" },
-  session_branch: { since: "v1" },
-  rate_limit: { since: "v1" },
-  workspace_reload: { since: "v1" },
-  // Immediate best-effort channel delivery for prompt/scheduled finals and
-  // direct workspace notifications. Presence describes the route/event
-  // contract; current worker availability is reported per delivery.
-  channel_delivery: { since: "v1" },
-  // Daemon supports reloading its daemon-managed channel worker via
-  // `POST /workspace/channel/reload`. The worker is stopped and relaunched;
-  // on relaunch it re-reads settings.json (channels / proxy / per-channel
-  // model), so channel settings changes apply without a full daemon restart.
-  // Advertised CONDITIONALLY while the runtime manager has a committed or
-  // recoverable channel worker selection.
-  channel_reload: { since: "v1" },
-  // Runtime GET/PUT/DELETE control for daemon-managed channel selection.
-  // The route exists even when no selection was supplied at daemon boot.
-  channel_control: { since: "v1" },
-  // Sanitized workspace Channel configuration, lifecycle, and pairing.
-  channel_management: { since: "v1" },
-  // Read-only workspace graph of recently observed channel contacts.
-  workspace_channel_observed_contacts: { since: "v1" },
-  // Multi-workspace session routing. Advertised only when one daemon hosts
-  // more than one registered workspace runtime.
-  multi_workspace_sessions: { since: "v1" },
-  // Singular session rewind routes resolve the owning live workspace runtime.
-  multi_workspace_session_rewind: { since: "v1" },
-  // Singular session shell routes resolve the owning live workspace runtime.
-  multi_workspace_session_shell: { since: "v1" },
-  dynamic_workspace_registration: { since: "v1" },
-  persistent_workspace_registration: { since: "v1" },
-  // Optional presentation-only names and updates to those names for workspace
-  // runtimes. Workspace ids and canonical paths remain the routing identities.
-  workspace_display_name: { since: "v1" },
-  scratch_workspace_registration: { since: "v1" },
-  workspace_runtime_removal: { since: "v1" },
-  // Workspace-qualified core REST routes under `/workspaces/:workspace/...`.
-  // Covers core file/status/permissions/trust/lifecycle/MCP/tool, memory,
-  // workspace agent CRUD, and persisted session organization surfaces.
-  // Workspace-qualified settings also require the existing
-  // `workspace_settings` tag because that surface depends on settings
-  // persistence. ACP/WebSocket and auth stay outside this core tag;
-  // workspace-qualified Voice REST/WebSocket routes use their separate
-  // `workspace_qualified_voice` capability below. V2 extension management
-  // is advertised separately via `extension_management_v2`.
-  workspace_qualified_rest_core: { since: "v1" },
-  // Workspace-qualified Voice REST and WebSocket routes. This tag is enough
-  // to discover plural modalities because legacy Voice tags describe only
-  // the primary runtime and may be absent for a secondary-only setup.
-  workspace_qualified_voice: { since: "v1" },
-  // Workspace-qualified managed-memory routes
-  // (`/workspaces/:workspace/memory/{remember,forget,dream}`). Each
-  // registered workspace gets its own task lane; the primary lane is the
-  // same instance as the singular `/workspace/memory` surface.
-  workspace_qualified_memory: { since: "v1" },
-  // Global extension catalog/mutations plus workspace-qualified activation
-  // projections. This is additive to the legacy primary-workspace
-  // `workspace_extensions` contract.
-  extension_management_v2: { since: "v1" },
-  // Workspace-qualified, daemon-local persisted transcript paging. The tag is
-  // unconditional because the route also serves a trusted single-workspace
-  // primary; authorization is evaluated for the selected runtime per request.
-  workspace_persisted_transcript: { since: "v1" },
-  // Workspace-qualified full session export from active persisted storage.
-  // This is separate from `session_export` so clients do not infer the plural
-  // route from the legacy primary-workspace export capability.
-  workspace_session_export: { since: "v1" },
-  // Workspace-qualified full session export from archived persisted storage.
-  // This remains independent from active export so older daemons cannot ignore
-  // archive intent and return an active transcript with the same session id.
-  workspace_archived_session_export: { since: "v1" },
-  // Workspace-qualified ACP transport (issue #6378 Phase 4):
-  // `/workspaces/:workspace/acp` mounts a per-runtime ACP dispatcher (HTTP +
-  // WebSocket) for each registered workspace, with per-runtime device-flow and
-  // reverse client-MCP. Legacy `/acp` stays bound to the primary runtime.
-  // Advertised only when the daemon hosts more than one workspace runtime.
-  workspace_qualified_acp: { since: "v1" },
-  // Phase 2 "reverse tool channel" (issue #5626). A connected WS client (e.g.
-  // the Chrome extension) can host an MCP server that the daemon's agent
-  // calls by carrying `mcp_message` JSON-RPC frames over the daemon WS,
-  // reusing the SDK-MCP-server control-plane pattern. Inbound WS frame types:
-  // `mcp_register` { server }, `mcp_message` { id, server, payload }
-  // (bidirectional, request/response correlated by `id`), `mcp_unregister`
-  // { server }. Advertised CONDITIONALLY so clients pre-flight this tag before
-  // attempting to register a client-hosted server. `runQwenServe` enables it
-  // only when explicitly requested by option or env.
-  client_mcp_over_ws: { since: "v1" },
-  // Plan C "CDP tunnel" (issue #5626): the daemon exposes a `/cdp` WebSocket
-  // where a loopback CDP client drives ONE real tab
-  // via the extension's `chrome.debugger`, tunneled over `/acp` as `cdp_*`
-  // frames. Advertised when explicitly enabled or when the daemon is serving a
-  // Chrome extension origin.
-  cdp_tunnel_over_ws: { since: "v1" },
-  // Browser automation MCP tools are available only when the CDP tunnel is on
-  // and the operator has configured an external stdio adapter via
-  // QWEN_CDP_MCP_COMMAND. This is separate from `cdp_tunnel_over_ws`: a daemon
-  // may expose the tunnel while intentionally not bundling/registering a
-  // chrome-devtools MCP adapter.
-  browser_automation_mcp: { since: "v1" },
-  // Daemon hosts the `/voice/stream` WebSocket: the browser captures audio and
-  // streams raw PCM, the daemon transcribes server-side via the configured
-  // `voiceModel` (credentials never reach the client). Advertised
-  // UNCONDITIONALLY (like `auth_device_flow`): presence means the endpoint
-  // exists, not that a voice model is configured. The WS returns an `error`
-  // frame when no transcribable `voiceModel` is set, so clients probe by
-  // connecting rather than reading ambient settings into `/capabilities` (which
-  // would make the envelope depend on the user's home config). `modes`
-  // enumerates the two transcription paths (realtime vs. on-stop batch).
-  voice_transcribe: { since: "v1", modes: ["streaming", "batch"] },
-  // Process-global Live Voice control plane. Advertisement requires a macOS
-  // WebShell daemon with native Host integration and the hot-applied enabled
-  // gate. `/live/status` remains the dynamic readiness surface for the Host,
-  // permissions, self-checks, and provider reachability.
-  realtime_voice: { since: "v1" }
-};
-var CONDITIONAL_SERVE_FEATURES = /* @__PURE__ */ new Map([
-  ["require_auth", (toggles) => toggles.requireAuth === true],
-  ["mcp_workspace_pool", (toggles) => toggles.mcpPoolActive === true],
-  ["mcp_pool_restart", (toggles) => toggles.mcpPoolActive === true],
-  [
-    "external_tool_guard",
-    (toggles) => toggles.externalToolGuardActive === true
-  ],
-  ["allow_origin", (toggles) => toggles.allowOriginActive === true],
-  [
-    "prompt_absolute_deadline",
-    (toggles) => typeof toggles.promptDeadlineMs === "number" && toggles.promptDeadlineMs > 0
-  ],
-  [
-    "writer_idle_timeout",
-    (toggles) => typeof toggles.writerIdleTimeoutMs === "number" && toggles.writerIdleTimeoutMs > 0
-  ],
-  ["workspace_settings", (toggles) => toggles.persistSettingAvailable === true],
-  ["workspace_voice", (toggles) => toggles.persistSettingAvailable === true],
-  [
-    "workspace_voice_transcription",
-    (toggles) => toggles.voiceTranscriptionAvailable === true
-  ],
-  [
-    "session_shell_command",
-    (toggles) => toggles.sessionShellCommandEnabled === true
-  ],
-  [
-    "session_artifacts_persistence",
-    (toggles) => toggles.sessionArtifactsPersistenceAvailable === true
-  ],
-  [
-    "session_generation",
-    (toggles) => toggles.sessionGenerationAvailable === true
-  ],
-  [
-    "workspace_generation",
-    (toggles) => toggles.workspaceGenerationAvailable === true
-  ],
-  ["rate_limit", (toggles) => toggles.rateLimit === true],
-  ["workspace_reload", (toggles) => toggles.reloadAvailable === true],
-  [
-    "workspace_trust_hot_reload",
-    (toggles) => toggles.workspaceTrustHotReloadAvailable === true
-  ],
-  ["channel_reload", (toggles) => toggles.channelReloadAvailable === true],
-  ["channel_control", (toggles) => toggles.channelControlAvailable === true],
-  [
-    "channel_management",
-    (toggles) => toggles.channelManagementAvailable === true
-  ],
-  [
-    "multi_workspace_sessions",
-    (toggles) => toggles.multiWorkspaceSessionsEnabled === true
-  ],
-  [
-    "multi_workspace_session_rewind",
-    (toggles) => toggles.multiWorkspaceSessionsEnabled === true
-  ],
-  [
-    "multi_workspace_session_shell",
-    (toggles) => toggles.multiWorkspaceSessionsEnabled === true && toggles.sessionShellCommandEnabled === true
-  ],
-  [
-    "dynamic_workspace_registration",
-    (toggles) => toggles.dynamicWorkspaceRegistrationAvailable === true
-  ],
-  [
-    "persistent_workspace_registration",
-    (toggles) => toggles.persistentWorkspaceRegistrationAvailable === true
-  ],
-  [
-    "scratch_workspace_registration",
-    (toggles) => toggles.scratchWorkspaceRegistrationAvailable === true
-  ],
-  [
-    "workspace_runtime_removal",
-    (toggles) => toggles.workspaceRuntimeRemovalAvailable === true
-  ],
-  [
-    "workspace_qualified_acp",
-    // The plural routes are pre-mounted for workspaces registered after app
-    // creation, but the capability becomes meaningful only once a secondary
-    // runtime exists. Until then the qualified primary route is only an alias
-    // for the always-available legacy `/acp` surface.
-    (toggles) => toggles.acpHttpEnabled === true && toggles.multiWorkspaceSessionsEnabled === true
-  ],
-  [
-    "workspace_qualified_voice",
-    // Like qualified ACP, the plural Voice surface is mounted ahead of time
-    // but only becomes useful once the daemon has a secondary runtime.
-    (toggles) => toggles.acpHttpEnabled === true && toggles.multiWorkspaceSessionsEnabled === true
-  ],
-  [
-    "workspace_qualified_memory",
-    (toggles) => toggles.acpHttpEnabled === true && toggles.multiWorkspaceSessionsEnabled === true
-  ],
-  ["client_mcp_over_ws", (toggles) => toggles.clientMcpOverWsEnabled === true],
-  ["cdp_tunnel_over_ws", (toggles) => toggles.cdpTunnelOverWsEnabled === true],
-  [
-    "browser_automation_mcp",
-    (toggles) => toggles.browserAutomationMcpAvailable === true
-  ],
-  [
-    // Advertised whenever the `/voice/stream` WS endpoint exists. A configured
-    // token (or `--require-auth`) no longer suppresses it: browsers can't set
-    // an `Authorization` header on a WebSocket, so the Web Shell carries the
-    // bearer token in the `Sec-WebSocket-Protocol` subprotocol, which the ACP
-    // upgrade listener verifies (see acp-http/index.ts).
-    "voice_transcribe",
-    (toggles) => toggles.voiceWsAvailable !== false
-  ],
-  [
-    "realtime_voice",
-    (toggles) => toggles.acpHttpEnabled === true && toggles.realtimeVoiceEnabled === true
-  ]
-]);
-var SERVE_FEATURES = Object.freeze(
-  Object.keys(SERVE_CAPABILITY_REGISTRY)
-);
-function serveProtocolVersionIndex(version) {
-  return SUPPORTED_SERVE_PROTOCOL_VERSIONS.indexOf(version);
-}
-__name(serveProtocolVersionIndex, "serveProtocolVersionIndex");
-function isFeatureAvailableInProtocol(feature, protocolVersion) {
-  return serveProtocolVersionIndex(SERVE_CAPABILITY_REGISTRY[feature].since) <= serveProtocolVersionIndex(protocolVersion);
-}
-__name(isFeatureAvailableInProtocol, "isFeatureAvailableInProtocol");
-function getAdvertisedServeFeatures(protocolVersion = SERVE_PROTOCOL_VERSION, toggles = {}) {
-  return SERVE_FEATURES.filter((feature) => {
-    if (!isFeatureAvailableInProtocol(feature, protocolVersion)) return false;
-    const predicate = CONDITIONAL_SERVE_FEATURES.get(feature);
-    if (predicate !== void 0) return predicate(toggles);
-    return true;
-  });
-}
-__name(getAdvertisedServeFeatures, "getAdvertisedServeFeatures");
-function getServeProtocolVersions() {
-  return {
-    current: SERVE_PROTOCOL_VERSION,
-    supported: [...SUPPORTED_SERVE_PROTOCOL_VERSIONS]
-  };
-}
-__name(getServeProtocolVersions, "getServeProtocolVersions");
-
-// packages/cli/src/serve/types.ts
-init_esbuild_shims();
-var CAPABILITIES_SCHEMA_VERSION = 1;
-
-// packages/cli/src/serve/managed-scratch-workspace.ts
-init_esbuild_shims();
-import { lstatSync, mkdirSync, realpathSync } from "node:fs";
-import { lstat, mkdtemp } from "node:fs/promises";
-import {
-  basename as basename2,
-  dirname as dirname2,
-  isAbsolute,
-  join as join2,
-  relative,
-  resolve
-} from "node:path";
-var isSamePath = /* @__PURE__ */ __name((left, right) => process.platform === "win32" ? left.toLowerCase() === right.toLowerCase() : left === right, "isSamePath");
-var isWithinRoot = /* @__PURE__ */ __name((candidate, root) => {
-  const rel = relative(root, candidate);
-  return rel.length > 0 && !rel.startsWith("..") && !isAbsolute(rel);
-}, "isWithinRoot");
-function isManagedScratchChild(canonicalCwd, canonicalRoot) {
-  return isSamePath(dirname2(canonicalCwd), canonicalRoot) && /^scratch-.+/.test(basename2(canonicalCwd));
-}
-__name(isManagedScratchChild, "isManagedScratchChild");
-function isScratchRootCompatible(canonicalCwd, canonicalRoot) {
-  if (isSamePath(canonicalCwd, canonicalRoot)) return false;
-  if (isManagedScratchChild(canonicalCwd, canonicalRoot)) return true;
-  return !isWithinRoot(canonicalCwd, canonicalRoot) && !isWithinRoot(canonicalRoot, canonicalCwd);
-}
-__name(isScratchRootCompatible, "isScratchRootCompatible");
-function validateRootStats(stats) {
-  if (stats.isSymbolicLink() || !stats.isDirectory()) {
-    throw new Error("Managed scratch root must be a non-symlink directory");
-  }
-  if (process.platform !== "win32" && typeof process.getuid === "function" && stats.uid !== process.getuid()) {
-    throw new Error("Managed scratch root must be owned by the daemon user");
-  }
-  if (process.platform !== "win32" && (stats.mode & 63) !== 0) {
-    throw new Error(
-      "Managed scratch root must be accessible only to its owner"
-    );
-  }
-}
-__name(validateRootStats, "validateRootStats");
-function prepareManagedScratchRoot(root, startupWorkspaceCwds) {
-  mkdirSync(root, { recursive: true, mode: 448 });
-  const before = lstatSync(root);
-  validateRootStats(before);
-  const canonicalRoot = realpathSync.native(resolve(root));
-  const after = lstatSync(canonicalRoot);
-  validateRootStats(after);
-  if (before.dev !== after.dev || before.ino !== after.ino) {
-    throw new Error("Managed scratch root identity changed during validation");
-  }
-  if (startupWorkspaceCwds.some(
-    (cwd) => !isScratchRootCompatible(cwd, canonicalRoot)
-  )) {
-    throw new Error("Managed scratch root conflicts with a startup workspace");
-  }
-  return {
-    canonicalRoot,
-    device: after.dev,
-    inode: after.ino
-  };
-}
-__name(prepareManagedScratchRoot, "prepareManagedScratchRoot");
-async function revalidateManagedScratchRoot(root) {
-  const stats = await lstat(root.canonicalRoot);
-  validateRootStats(stats);
-  if (stats.dev !== root.device || stats.ino !== root.inode) {
-    throw new Error("Managed scratch root identity changed");
-  }
-  const canonical = realpathSync.native(root.canonicalRoot);
-  if (!isSamePath(canonical, root.canonicalRoot)) {
-    throw new Error("Managed scratch root canonical path changed");
-  }
-}
-__name(revalidateManagedScratchRoot, "revalidateManagedScratchRoot");
-async function createManagedScratchDirectory(root) {
-  await revalidateManagedScratchRoot(root);
-  const created = await mkdtemp(join2(root.canonicalRoot, "scratch-"));
-  const canonical = realpathSync.native(created);
-  if (!isManagedScratchChild(canonical, root.canonicalRoot)) {
-    throw new Error("Managed scratch directory escaped its accepted root");
-  }
-  await revalidateManagedScratchRoot(root);
-  return canonical;
-}
-__name(createManagedScratchDirectory, "createManagedScratchDirectory");
-
-// packages/cli/src/serve/server/request-helpers.ts
-init_esbuild_shims();
-function sendJsonBodyParserError(res, err) {
-  if (err instanceof SyntaxError && "status" in err && err.status === 400) {
-    res.status(400).json({ error: "Invalid JSON in request body" });
-    return true;
-  }
-  if (err && typeof err === "object" && "status" in err && err.status === 413) {
-    res.status(413).json({ error: "Request body too large (max 10 MB)" });
-    return true;
-  }
-  return false;
-}
-__name(sendJsonBodyParserError, "sendJsonBodyParserError");
-var PROTOTYPE_POLLUTION_KEYS = /* @__PURE__ */ new Set([
-  "__proto__",
-  "constructor",
-  "prototype"
-]);
-var CLIENT_ID_HEADER = "x-qwen-client-id";
-var MAX_CLIENT_ID_LENGTH = 128;
-var MAX_TOOL_NAME_LENGTH = 256;
-var MAX_SERVER_NAME_LENGTH = 256;
-var CLIENT_ID_RE = /^[A-Za-z0-9._:-]+$/;
-var INVALID_PERMISSION_OUTCOME_ERROR = '`outcome` must be `{ outcome: "cancelled" }` or `{ outcome: "selected", optionId: string }`';
-var deferredRuntimeTimingKey = Symbol(
-  "deferredRuntimeRequestTiming"
-);
-function setDeferredRuntimeRequestTiming(req, timing) {
-  req[deferredRuntimeTimingKey] = timing;
-}
-__name(setDeferredRuntimeRequestTiming, "setDeferredRuntimeRequestTiming");
-function getDeferredRuntimeRequestTiming(req) {
-  return req[deferredRuntimeTimingKey];
-}
-__name(getDeferredRuntimeRequestTiming, "getDeferredRuntimeRequestTiming");
-function safeBody(req) {
-  const raw = req.body;
-  if (typeof raw !== "object" || raw === null || Array.isArray(raw)) {
-    return /* @__PURE__ */ Object.create(null);
-  }
-  const out = /* @__PURE__ */ Object.create(null);
-  for (const [key, value] of Object.entries(raw)) {
-    if (PROTOTYPE_POLLUTION_KEYS.has(key)) continue;
-    out[key] = value;
-  }
-  return out;
-}
-__name(safeBody, "safeBody");
-function parseOptionalWorkspaceCwd(body, boundWorkspace, res) {
-  const hasCwd = "cwd" in body;
-  if (hasCwd && typeof body["cwd"] !== "string") {
-    res.status(400).json({ error: "`cwd` must be a string absolute path when provided" });
-    return void 0;
-  }
-  if (hasCwd && body["cwd"].length > MAX_WORKSPACE_PATH_LENGTH) {
-    res.status(400).json({
-      error: `\`cwd\` exceeds the ${MAX_WORKSPACE_PATH_LENGTH}-character limit`
-    });
-    return void 0;
-  }
-  const cwd = translateAndCheckAbsoluteWorkspacePath(
-    hasCwd ? body["cwd"] : boundWorkspace
-  );
-  if (cwd === null) {
-    res.status(400).json({ error: "`cwd` must be an absolute path when provided" });
-    return void 0;
-  }
-  return cwd;
-}
-__name(parseOptionalWorkspaceCwd, "parseOptionalWorkspaceCwd");
-function requireSessionId(req, res) {
-  const sessionId = req.params["id"];
-  if (!sessionId) {
-    res.status(400).json({ error: "`sessionId` route parameter is required" });
-    return null;
-  }
-  return sessionId;
-}
-__name(requireSessionId, "requireSessionId");
-function parseClientIdHeader(req, res) {
-  const raw = req.get(CLIENT_ID_HEADER);
-  if (raw === void 0 || raw === "") return void 0;
-  if (raw.length > MAX_CLIENT_ID_LENGTH || !CLIENT_ID_RE.test(raw)) {
-    res.status(400).json({
-      error: "`X-Qwen-Client-Id` must be a non-empty token of 128 characters or fewer",
-      code: "invalid_client_id"
-    });
-    return null;
-  }
-  return raw;
-}
-__name(parseClientIdHeader, "parseClientIdHeader");
-function detectFromLoopback(req) {
-  const addr = req.socket?.remoteAddress;
-  if (typeof addr !== "string") return false;
-  if (addr === "::1") return true;
-  if (addr.startsWith("127.")) return true;
-  if (addr.startsWith("::ffff:127.")) return true;
-  return false;
-}
-__name(detectFromLoopback, "detectFromLoopback");
-function validateMcpRuntimeServerName(name, res) {
-  if (typeof name !== "string" || name.length === 0) {
-    res.status(400).json({
-      error: "Server name is required and must be a non-empty string",
-      code: "invalid_server_name"
-    });
-    return false;
-  }
-  if (name.length > MAX_SERVER_NAME_LENGTH) {
-    res.status(400).json({
-      error: `Server name exceeds ${MAX_SERVER_NAME_LENGTH}-character limit`,
-      code: "invalid_server_name"
-    });
-    return false;
-  }
-  if (!/^[A-Za-z0-9_-]+$/.test(name)) {
-    res.status(400).json({
-      error: "Server name must contain only alphanumeric characters, underscores, and hyphens",
-      code: "invalid_server_name"
-    });
-    return false;
-  }
-  if (name === "__proto__" || name === "constructor" || name === "prototype") {
-    res.status(400).json({
-      error: "Server name must not be a reserved JS property name",
-      code: "invalid_server_name"
-    });
-    return false;
-  }
-  return true;
-}
-__name(validateMcpRuntimeServerName, "validateMcpRuntimeServerName");
-function parseAndValidateWorkspaceClientId(req, res, bridge) {
-  const raw = parseClientIdHeader(req, res);
-  if (raw === null || raw === void 0) return raw;
-  const bridges = Array.isArray(bridge) ? bridge : [bridge];
-  if (!bridges.some((candidate) => candidate.knownClientIds().has(raw))) {
-    res.status(400).json({
-      error: `Client id "${raw}" is not registered for this workspace`,
-      code: "invalid_client_id",
-      clientId: raw
-    });
-    return null;
-  }
-  return raw;
-}
-__name(parseAndValidateWorkspaceClientId, "parseAndValidateWorkspaceClientId");
-function createBuildWorkspaceCtx(boundWorkspace) {
-  return (route, clientId) => ({
-    originatorClientId: clientId,
-    route,
-    workspaceCwd: boundWorkspace
-  });
-}
-__name(createBuildWorkspaceCtx, "createBuildWorkspaceCtx");
-function parsePermissionVoteBody(req, res) {
-  const body = safeBody(req);
-  const outcome = body["outcome"];
-  if (!isValidOutcome(outcome)) {
-    res.status(400).json({ error: INVALID_PERMISSION_OUTCOME_ERROR });
-    return void 0;
-  }
-  return {
-    ...body,
-    outcome
-  };
-}
-__name(parsePermissionVoteBody, "parsePermissionVoteBody");
-function isValidOutcome(raw) {
-  if (typeof raw !== "object" || raw === null) return false;
-  const obj = raw;
-  if (obj["outcome"] === "cancelled") return true;
-  return obj["outcome"] === "selected" && typeof obj["optionId"] === "string" && obj["optionId"].length > 0;
-}
-__name(isValidOutcome, "isValidOutcome");
-var MIN_QUERY_MAX_QUEUED = 16;
-var MAX_QUERY_MAX_QUEUED = 2048;
-function parseMaxQueuedQuery(raw, res) {
-  if (raw === void 0) return void 0;
-  if (typeof raw !== "string" || !/^\d+$/.test(raw)) {
-    writeStderrLine(
-      `qwen serve: rejected ?maxQueued ${safeLogValue(raw)} (not a decimal integer)`
-    );
-    res.status(400).json({
-      error: "`maxQueued` must be a decimal integer",
-      code: "invalid_max_queued"
-    });
-    return null;
-  }
-  const n = Number.parseInt(raw, 10);
-  if (!Number.isFinite(n) || n < MIN_QUERY_MAX_QUEUED || n > MAX_QUERY_MAX_QUEUED) {
-    writeStderrLine(
-      `qwen serve: rejected ?maxQueued ${safeLogValue(raw)} (outside [${MIN_QUERY_MAX_QUEUED}, ${MAX_QUERY_MAX_QUEUED}])`
-    );
-    res.status(400).json({
-      error: `\`maxQueued\` must be in [${MIN_QUERY_MAX_QUEUED}, ${MAX_QUERY_MAX_QUEUED}]`,
-      code: "invalid_max_queued"
-    });
-    return null;
-  }
-  return n;
-}
-__name(parseMaxQueuedQuery, "parseMaxQueuedQuery");
-function safeLogValue(raw) {
-  return JSON.stringify(String(raw)).slice(0, 82);
-}
-__name(safeLogValue, "safeLogValue");
-function parseLastEventId(raw) {
-  if (typeof raw !== "string" || !/^\d+$/.test(raw)) {
-    if (typeof raw === "string" && raw.length > 0) {
-      writeStderrLine(
-        `qwen serve: rejected Last-Event-ID ${safeLogValue(raw)} (not a decimal integer)`
-      );
-    }
-    return void 0;
-  }
-  const n = Number.parseInt(raw, 10);
-  if (!Number.isFinite(n) || n > Number.MAX_SAFE_INTEGER) {
-    writeStderrLine(
-      `qwen serve: rejected Last-Event-ID ${safeLogValue(raw)} (exceeds Number.MAX_SAFE_INTEGER)`
-    );
-    return void 0;
-  }
-  return n;
-}
-__name(parseLastEventId, "parseLastEventId");
-
-// packages/cli/src/serve/rate-limit.ts
-init_esbuild_shims();
-var MAX_BUCKETS = 1e4;
-var GC_REQUEST_INTERVAL = 1e3;
-var GC_TIMER_INTERVAL_MS = 5 * 60 * 1e3;
-var WORKSPACE_QUALIFIED_ACP_PATH = /^\/workspaces\/[^/]+\/acp$/i;
-function resolveTier(method, path2, workspaceQualifiedAcpEnabled) {
-  const p = path2.endsWith("/") && path2.length > 1 ? path2.slice(0, -1) : path2;
-  if (method === "OPTIONS") return null;
-  if ((method === "GET" || method === "HEAD") && (p === "/health" || p === "/demo"))
-    return null;
-  if (method === "POST" && p.startsWith("/session/") && p.endsWith("/heartbeat"))
-    return null;
-  if (method === "GET" && p.startsWith("/session/") && p.endsWith("/events"))
-    return null;
-  if (p === "/acp" || p.startsWith("/acp/")) return null;
-  if (workspaceQualifiedAcpEnabled && WORKSPACE_QUALIFIED_ACP_PATH.test(p))
-    return null;
-  if (method === "POST" && p.startsWith("/session/") && p.endsWith("/prompt"))
-    return "prompt";
-  if (method !== "GET" && method !== "HEAD") return "mutation";
-  return "read";
-}
-__name(resolveTier, "resolveTier");
-function normalizeIp(raw) {
-  if (raw.startsWith("::ffff:")) {
-    return raw.slice(7);
-  }
-  return raw;
-}
-__name(normalizeIp, "normalizeIp");
-function createKeyExtractor(hostname) {
-  const loopback = isLoopbackBind(hostname);
-  return (req) => {
-    const raw = req.get("x-qwen-client-id");
-    const clientId = raw && raw.length <= MAX_CLIENT_ID_LENGTH && CLIENT_ID_RE.test(raw) ? raw : void 0;
-    if (loopback) {
-      return clientId ? `cid:${clientId}` : "anonymous";
-    }
-    const ip = normalizeIp(req.socket?.remoteAddress ?? "unknown");
-    return clientId ? `${ip}:${clientId}` : ip;
-  };
-}
-__name(createKeyExtractor, "createKeyExtractor");
-var LOG_SAMPLE_INTERVAL = 100;
-function createSampledLogger(onLog) {
-  const state = /* @__PURE__ */ new Map();
-  return {
-    log(tier, key) {
-      const logKey = `${tier}:${key}`;
-      let entry = state.get(logKey);
-      if (!entry) {
-        entry = { count: 0, suppressed: 0 };
-        state.set(logKey, entry);
-      }
-      entry.count++;
-      if (entry.count === 1 || entry.count % LOG_SAMPLE_INTERVAL === 0) {
-        onLog(tier, key, entry.suppressed);
-        entry.suppressed = 0;
-      } else {
-        entry.suppressed++;
-      }
-    },
-    clear() {
-      state.clear();
-    }
-  };
-}
-__name(createSampledLogger, "createSampledLogger");
-function createRateLimiter(config) {
-  for (const [tier, cfg] of Object.entries(config.tiers)) {
-    if (!Number.isFinite(cfg.max) || cfg.max <= 0) {
-      throw new Error(
-        `rate limit: ${tier}.max must be a positive number, got ${cfg.max}`
-      );
-    }
-    if (!Number.isFinite(cfg.windowMs) || cfg.windowMs <= 0) {
-      throw new Error(
-        `rate limit: ${tier}.windowMs must be a positive number, got ${cfg.windowMs}`
-      );
-    }
-  }
-  const buckets = /* @__PURE__ */ new Map();
-  const keyExtractor = createKeyExtractor(config.hostname);
-  const hitCounts = {
-    prompt: 0,
-    mutation: 0,
-    read: 0
-  };
-  const rates = {
-    prompt: config.tiers.prompt.max / config.tiers.prompt.windowMs,
-    mutation: config.tiers.mutation.max / config.tiers.mutation.windowMs,
-    read: config.tiers.read.max / config.tiers.read.windowMs
-  };
-  let draining = false;
-  let requestCount = 0;
-  const sampledLog = config.onLimitReached ? createSampledLogger(config.onLimitReached) : void 0;
-  function sweep() {
-    const now = Date.now();
-    for (const [key, tierMap] of buckets) {
-      let allStale = true;
-      for (const [tier, bucket] of tierMap) {
-        if (now - bucket.lastRefill < config.tiers[tier].windowMs * 2) {
-          allStale = false;
-          break;
-        }
-      }
-      if (allStale) {
-        buckets.delete(key);
-      }
-    }
-  }
-  __name(sweep, "sweep");
-  const gcTimer = setInterval(sweep, GC_TIMER_INTERVAL_MS);
-  gcTimer.unref();
-  const middleware = /* @__PURE__ */ __name((req, res, next) => {
-    try {
-      if (draining) {
-        next();
-        return;
-      }
-      const tier = resolveTier(
-        req.method,
-        req.path,
-        config.workspaceQualifiedAcpEnabled === true
-      );
-      if (tier === null) {
-        next();
-        return;
-      }
-      requestCount++;
-      if (requestCount % GC_REQUEST_INTERVAL === 0) {
-        sweep();
-      }
-      const key = keyExtractor(req);
-      if (tryConsume(key, tier)) {
-        next();
-      } else {
-        const tierConfig = config.tiers[tier];
-        const rate = rates[tier];
-        const bucket = buckets.get(key)?.get(tier);
-        const retryAfterMs = Math.ceil((1 - (bucket?.tokens ?? 0)) / rate);
-        const retryAfterSec = Math.ceil(retryAfterMs / 1e3);
-        res.setHeader("Retry-After", String(retryAfterSec));
-        res.setHeader("X-RateLimit-Limit", String(tierConfig.max));
-        res.setHeader("X-RateLimit-Remaining", "0");
-        res.setHeader(
-          "X-RateLimit-Reset",
-          String(Math.ceil((Date.now() + retryAfterMs) / 1e3))
-        );
-        res.status(429).json({
-          error: "Rate limit exceeded",
-          code: "rate_limit_exceeded",
-          tier,
-          retryAfterMs
-        });
-      }
-    } catch (err) {
-      config.onError?.(err, req.path);
-      next();
-    }
-  }, "middleware");
-  function tryConsume(key, tier) {
-    if (draining) return true;
-    const tierConfig = config.tiers[tier];
-    const rate = rates[tier];
-    const now = Date.now();
-    let tierMap = buckets.get(key);
-    if (!tierMap) {
-      if (buckets.size >= MAX_BUCKETS) {
-        config.onError?.(
-          new Error(`rate limit bucket overflow: ${buckets.size} keys`),
-          `tryConsume:${tier}`
-        );
-        return true;
-      }
-      tierMap = /* @__PURE__ */ new Map();
-      buckets.set(key, tierMap);
-    }
-    let bucket = tierMap.get(tier);
-    if (!bucket) {
-      bucket = { tokens: tierConfig.max, lastRefill: now };
-      tierMap.set(tier, bucket);
-    }
-    const elapsed = Math.max(0, now - bucket.lastRefill);
-    bucket.tokens = Math.min(tierConfig.max, bucket.tokens + elapsed * rate);
-    bucket.lastRefill = now;
-    if (bucket.tokens >= 1) {
-      bucket.tokens -= 1;
-      return true;
-    }
-    hitCounts[tier]++;
-    if (sampledLog) sampledLog.log(tier, key);
-    return false;
-  }
-  __name(tryConsume, "tryConsume");
-  return {
-    middleware,
-    checkRate: tryConsume,
-    reset() {
-      buckets.clear();
-      hitCounts.prompt = 0;
-      hitCounts.mutation = 0;
-      hitCounts.read = 0;
-      requestCount = 0;
-      sampledLog?.clear();
-    },
-    setDraining(v) {
-      draining = v;
-    },
-    dispose() {
-      clearInterval(gcTimer);
-      buckets.clear();
-      sampledLog?.clear();
-    },
-    getHitCounts() {
-      return { ...hitCounts };
-    }
-  };
-}
-__name(createRateLimiter, "createRateLimiter");
-var RATE_LIMITER_KEY = "_rateLimiter";
-function setRateLimiter(app, limiter) {
-  app.locals[RATE_LIMITER_KEY] = limiter;
-}
-__name(setRateLimiter, "setRateLimiter");
-function getRateLimiter(app) {
-  return app.locals[RATE_LIMITER_KEY];
-}
-__name(getRateLimiter, "getRateLimiter");
-
-// packages/cli/src/serve/acp-http-enabled.ts
-init_esbuild_shims();
-function resolveAcpHttpEnabled(env = process.env) {
-  return env["QWEN_SERVE_ACP_HTTP"] !== "0";
-}
-__name(resolveAcpHttpEnabled, "resolveAcpHttpEnabled");
-
-// packages/cli/src/serve/daemon-status.ts
-init_esbuild_shims();
-var DEFAULT_LISTENER_MAX_CONNECTIONS = 256;
-var SECTION_TIMEOUT_MS = 1e3;
-var CAPACITY_WARNING_RATIO = 0.8;
-function toDaemonStatusMemoryLimits(budget) {
-  if (!budget) return null;
-  return {
-    enforced: false,
-    configuredBudgetMb: budget.configuredBudgetMb,
-    effectiveBudgetMb: budget.effectiveBudgetMb,
-    budgetSource: budget.budgetSource,
-    availableMemoryMb: budget.availableMemoryMb,
-    availableMemorySource: budget.availableMemorySource,
-    insufficientMemory: budget.insufficientMemory,
-    modeled: {
-      rootReserveMb: budget.rootReserveMb,
-      childPoolMb: budget.childPoolMb,
-      minChildHeapMb: MIN_CHILD_HEAP_MB,
-      maxChildHeapMb: MAX_CHILD_HEAP_MB,
-      legacyChildCeilingMb: budget.legacyChildCeilingMb
-    }
-  };
-}
-__name(toDaemonStatusMemoryLimits, "toDaemonStatusMemoryLimits");
-var SectionTimeoutError = class extends Error {
-  constructor(section, timeoutMs) {
-    super(`${section} status timed out after ${timeoutMs}ms`);
-    this.section = section;
-    this.timeoutMs = timeoutMs;
-    this.name = "SectionTimeoutError";
-  }
-  static {
-    __name(this, "SectionTimeoutError");
-  }
-};
-function parseDaemonStatusDetail(raw) {
-  if (raw === void 0) return { ok: true, detail: "summary" };
-  if (raw === "summary" || raw === "full") {
-    return { ok: true, detail: raw };
-  }
-  return { ok: false };
-}
-__name(parseDaemonStatusDetail, "parseDaemonStatusDetail");
-async function buildDaemonStatusResponse(detail, input) {
-  const daemonLogStatus = input.daemonLog?.getStatus();
-  const bridgeSnapshot = input.bridge.getDaemonStatusSnapshot();
-  const lastActivity = input.bridge.lastActivityAt ?? null;
-  const workspaceRuntimes = input.workspaceRegistry?.list();
-  const workspaceSnapshots = workspaceRuntimes?.map((runtime) => ({
-    workspaceCwd: runtime.workspaceCwd,
-    snapshot: runtime.bridge === input.bridge ? bridgeSnapshot : runtime.bridge.getDaemonStatusSnapshot(),
-    lastActivity: runtime.bridge === input.bridge ? lastActivity : runtime.bridge.lastActivityAt ?? null
-  })) ?? [
-    {
-      workspaceCwd: input.boundWorkspace,
-      snapshot: bridgeSnapshot,
-      lastActivity
-    }
-  ];
-  const aggregatedSessionCount = workspaceSnapshots.reduce(
-    (sum, item) => sum + item.snapshot.sessionCount,
-    0
-  );
-  const aggregatedPendingPermissionCount = workspaceSnapshots.reduce(
-    (sum, item) => sum + item.snapshot.pendingPermissionCount,
-    0
-  );
-  const aggregatedChannelLive = workspaceSnapshots.some(
-    (item) => item.snapshot.channelLive
-  );
-  const memoryBudget = input.opts.daemonMemoryBudget;
-  let runtimeMemory;
-  if (memoryBudget) {
-    const managedRuntimes = input.workspaceRegistry?.listManaged();
-    const activeAcpChildCount = managedRuntimes ? managedRuntimes.filter((runtime) => runtime.bridge.isChannelLive()).length : workspaceSnapshots.filter((item) => item.snapshot.channelLive).length;
-    const registeredWorkspaceCount = input.workspaceRegistry ? input.workspaceRegistry.listEntries().length : workspaceSnapshots.length;
-    runtimeMemory = {
-      registeredWorkspaces: registeredWorkspaceCount,
-      activeAcpChildren: activeAcpChildCount,
-      childRssCoverage: "primary_only",
-      modeled: {
-        recommendedShareAtRegisteredMb: registeredWorkspaceCount > 0 ? recommendedChildShareMb(memoryBudget, registeredWorkspaceCount) : null,
-        recommendedShareAtActiveMb: activeAcpChildCount > 0 ? recommendedChildShareMb(memoryBudget, activeAcpChildCount) : null
-      }
-    };
-  }
-  const aggregatedLastActivity = workspaceSnapshots.reduce(
-    (latest, item) => item.lastActivity !== null && (latest === null || item.lastActivity > latest) ? item.lastActivity : latest,
-    null
-  );
-  const acpSnapshot = input.acpHandle?.registry.getSnapshot();
-  const acpAggregate = input.acpHandle?.getSnapshot();
-  const rateLimitHits = input.rateLimiter?.getHitCounts() ?? zeroRateHits();
-  let pendingPrompts = 0;
-  let derivedQueuedPrompts = 0;
-  const derivedQueuedPromptsByWorkspace = [];
-  for (const [index, { snapshot }] of workspaceSnapshots.entries()) {
-    let derivedQueuedPromptsForWorkspace = 0;
-    for (const session of snapshot.sessions) {
-      pendingPrompts += session.pendingPromptCount;
-      const sessionQueuedPrompts = Math.max(
-        0,
-        session.pendingPromptCount - (session.hasActivePrompt ? 1 : 0)
-      );
-      derivedQueuedPrompts += sessionQueuedPrompts;
-      derivedQueuedPromptsForWorkspace += sessionQueuedPrompts;
-    }
-    derivedQueuedPromptsByWorkspace[index] = derivedQueuedPromptsForWorkspace;
-  }
-  const queuedPrompts = workspaceRuntimes?.reduce(
-    (sum, runtime, index) => sum + (runtime.bridge.pendingPromptTotal ?? derivedQueuedPromptsByWorkspace[index] ?? 0),
-    0
-  ) ?? input.bridge.pendingPromptTotal ?? derivedQueuedPrompts;
-  const channelWorker = input.getChannelWorkerSnapshot?.() ?? {
-    enabled: false,
-    state: "disabled",
-    channels: []
-  };
-  const channelWorkers = (workspaceRuntimes?.length ?? 1) > 1 ? input.getChannelWorkerSnapshots?.() : void 0;
-  const totalAdmissionSnapshot = input.getTotalSessionAdmissionSnapshot?.();
-  const issues = [];
-  let full;
-  pushRuntimeIssues(
-    issues,
-    acpSnapshot,
-    acpAggregate,
-    rateLimitHits,
-    input,
-    channelWorker,
-    channelWorkers,
-    totalAdmissionSnapshot,
-    workspaceSnapshots
-  );
-  if (daemonLogStatus?.health === "degraded") {
-    issues.push({
-      code: "daemon_log_degraded",
-      severity: "warning",
-      message: "Daemon file logging is degraded; inspect full status for details."
-    });
-  }
-  if (detail === "full") {
-    full = await buildFullStatus(
-      input,
-      acpAggregate,
-      workspaceSnapshots.flatMap((item) => item.snapshot.sessions)
-    );
-    pushFullIssues(issues, full);
-  }
-  return {
-    v: 1,
-    detail,
-    generatedAt: (/* @__PURE__ */ new Date()).toISOString(),
-    status: rollupStatus(issues),
-    issues,
-    daemon: {
-      pid: process.pid,
-      uptimeMs: Math.round(process.uptime() * 1e3),
-      mode: input.opts.mode,
-      workspaceCwd: input.boundWorkspace,
-      ...input.startup ? { startup: cloneStartup(input.startup) } : {},
-      ...input.qwenCodeVersion ? { qwenCodeVersion: input.qwenCodeVersion } : {},
-      ...input.daemonLog?.getDaemonId() ? { daemonId: input.daemonLog.getDaemonId() } : {},
-      ...daemonLogStatus ? {
-        runId: daemonLogStatus.runId,
-        logMode: daemonLogStatus.mode,
-        logHealth: daemonLogStatus.health
-      } : {},
-      ...detail === "full" && input.daemonLog?.getLogPath() ? { logPath: input.daemonLog.getLogPath() } : {},
-      ...detail === "full" && daemonLogStatus ? {
-        logIssues: daemonLogStatus.issues,
-        logDroppedRecords: daemonLogStatus.droppedRecords,
-        logDroppedBytes: daemonLogStatus.droppedBytes
-      } : {}
-    },
-    security: {
-      tokenConfigured: Boolean(input.opts.token),
-      requireAuth: input.opts.requireAuth === true,
-      loopbackBind: isLoopbackBind(input.opts.hostname),
-      allowOriginConfigured: input.opts.allowOrigins !== void 0 && input.opts.allowOrigins.length > 0,
-      allowOriginMode: allowOriginMode(input.opts.allowOrigins),
-      sessionShellCommandEnabled: input.sessionShellCommandEnabled
-    },
-    limits: {
-      maxSessions: bridgeSnapshot.limits.maxSessions,
-      maxTotalSessions: positiveFiniteOrNull(input.opts.maxTotalSessions),
-      maxPendingPromptsPerSession: bridgeSnapshot.limits.maxPendingPromptsPerSession,
-      listenerMaxConnections: listenerMaxConnections(input.opts.maxConnections),
-      eventRingSize: bridgeSnapshot.limits.eventRingSize,
-      compactedReplayMaxBytes: bridgeSnapshot.limits.compactedReplayMaxBytes,
-      maxJournalEvents: bridgeSnapshot.limits.maxJournalEvents,
-      maxJournalBytes: bridgeSnapshot.limits.maxJournalBytes,
-      promptDeadlineMs: positiveFiniteOrNull(input.opts.promptDeadlineMs),
-      writerIdleTimeoutMs: positiveFiniteOrNull(input.opts.writerIdleTimeoutMs),
-      channelIdleTimeoutMs: bridgeSnapshot.limits.channelIdleTimeoutMs,
-      sessionIdleTimeoutMs: bridgeSnapshot.limits.sessionIdleTimeoutMs,
-      acpConnectionCap: acpSnapshot?.connectionCap ?? null,
-      memory: toDaemonStatusMemoryLimits(memoryBudget)
-    },
-    ...workspaceRuntimes && workspaceRuntimes.length > 1 ? {
-      workspaces: workspaceRuntimes.map((runtime) => ({
-        id: runtime.workspaceId,
-        cwd: runtime.workspaceCwd,
-        ...runtime.displayName !== void 0 ? { displayName: runtime.displayName } : {},
-        primary: runtime.primary,
-        trusted: runtime.trusted
-      }))
-    } : {},
-    capabilities: {
-      protocolVersions: input.protocolVersions,
-      features: [...input.features]
-    },
-    runtime: {
-      sessions: {
-        active: aggregatedSessionCount,
-        ...totalAdmissionSnapshot ? { admissionInFlight: totalAdmissionSnapshot.inFlight } : {}
-      },
-      permissions: {
-        pending: aggregatedPendingPermissionCount,
-        policy: bridgeSnapshot.permissionPolicy
-      },
-      channel: { live: aggregatedChannelLive },
-      channelWorker,
-      ...channelWorkers && channelWorkers.length > 0 ? { channelWorkers } : {},
-      transport: {
-        restSseActive: input.getRestSseActive(),
-        acp: {
-          enabled: acpSnapshot !== void 0,
-          connections: acpAggregate?.connectionCount ?? 0,
-          connectionStreams: acpAggregate?.connectionStreams ?? 0,
-          sessionStreams: acpAggregate?.sessionStreams ?? 0,
-          sseStreams: acpAggregate?.sseStreams ?? 0,
-          wsStreams: acpAggregate?.wsStreams ?? 0,
-          pendingClientRequests: acpAggregate?.pendingClientRequests ?? 0
-        }
-      },
-      rateLimit: {
-        enabled: input.opts.rateLimit === true,
-        rejectedSinceStart: rateLimitHits
-      },
-      ...input.getPerfSnapshot ? { perf: input.getPerfSnapshot() } : {},
-      ...input.getMetricsSeries ? { metrics: { series: input.getMetricsSeries() } } : {},
-      activity: {
-        activePrompts: workspaceRuntimes?.reduce(
-          (sum, runtime) => sum + (runtime.bridge.activePromptCount ?? 0),
-          0
-        ) ?? input.bridge.activePromptCount ?? 0,
-        pendingPrompts,
-        queuedPrompts,
-        lastActivityAt: aggregatedLastActivity !== null ? new Date(aggregatedLastActivity).toISOString() : null,
-        idleSinceMs: aggregatedLastActivity !== null ? Date.now() - aggregatedLastActivity : null
-      },
-      ...runtimeMemory ? { memory: runtimeMemory } : {},
-      process: process.memoryUsage()
-    },
-    ...full ? { full } : {}
-  };
-}
-__name(buildDaemonStatusResponse, "buildDaemonStatusResponse");
-function cloneStartup(startup) {
-  return {
-    processStartedAt: startup.processStartedAt,
-    ...startup.listenerReadyAt ? { listenerReadyAt: startup.listenerReadyAt } : {},
-    ...startup.processToListenMs !== void 0 ? { processToListenMs: startup.processToListenMs } : {},
-    ...startup.runQwenServeToListenMs !== void 0 ? { runQwenServeToListenMs: startup.runQwenServeToListenMs } : {},
-    preheat: {
-      status: startup.preheat.status,
-      ...startup.preheat.durationMs !== void 0 ? { durationMs: startup.preheat.durationMs } : {},
-      ...startup.preheat.error ? { error: startup.preheat.error } : {}
-    }
-  };
-}
-__name(cloneStartup, "cloneStartup");
-async function buildFullStatus(input, acpSnapshot, sessions) {
-  const ctx = {
-    route: "GET /daemon/status",
-    workspaceCwd: input.boundWorkspace
-  };
-  const [mcp, skills, tools, providers, env, preflight, hooks, extensions] = await Promise.all([
-    collectSection(
-      "workspace.mcp",
-      () => input.workspace.getWorkspaceMcpStatus(ctx)
-    ),
-    collectSection(
-      "workspace.skills",
-      () => input.workspace.getWorkspaceSkillsStatus(ctx)
-    ),
-    collectSection(
-      "workspace.tools",
-      () => input.bridge.getWorkspaceToolsStatus()
-    ),
-    collectSection(
-      "workspace.providers",
-      () => input.workspace.getWorkspaceProvidersStatus(ctx)
-    ),
-    collectSection(
-      "workspace.env",
-      () => input.workspace.getWorkspaceEnvStatus(ctx)
-    ),
-    collectSection(
-      "workspace.preflight",
-      () => input.workspace.getWorkspacePreflightStatus(ctx)
-    ),
-    collectSection(
-      "workspace.hooks",
-      () => input.workspace.getWorkspaceHooksStatus(ctx)
-    ),
-    collectSection(
-      "workspace.extensions",
-      () => input.workspace.getWorkspaceExtensionsStatus(ctx)
-    )
-  ]);
-  return {
-    sessions,
-    acpConnections: acpSnapshot?.connections ?? [],
-    workspace: {
-      mcp,
-      skills,
-      tools,
-      providers,
-      env,
-      preflight,
-      hooks,
-      extensions
-    },
-    auth: {
-      supportedDeviceFlowProviders: [...input.supportedDeviceFlowProviders],
-      pendingDeviceFlowCount: input.deviceFlowRegistry.listPending().length
-    }
-  };
-}
-__name(buildFullStatus, "buildFullStatus");
-async function collectSection(name, read) {
-  const startMs = Date.now();
-  try {
-    const data = await withTimeout(read(), name, SECTION_TIMEOUT_MS);
-    return {
-      status: inferSectionStatus(data),
-      durationMs: Date.now() - startMs,
-      summary: summarizeStatusData(data),
-      data
-    };
-  } catch (err) {
-    return {
-      status: "unavailable",
-      durationMs: Date.now() - startMs,
-      error: {
-        kind: err instanceof SectionTimeoutError ? "timeout" : "error",
-        message: err instanceof Error ? err.message : String(err)
-      }
-    };
-  }
-}
-__name(collectSection, "collectSection");
-async function withTimeout(promise, section, timeoutMs) {
-  let timer;
-  try {
-    return await Promise.race([
-      promise,
-      new Promise((_resolve, reject) => {
-        timer = setTimeout(
-          () => reject(new SectionTimeoutError(section, timeoutMs)),
-          timeoutMs
-        );
-      })
-    ]);
-  } finally {
-    if (timer) clearTimeout(timer);
-  }
-}
-__name(withTimeout, "withTimeout");
-function pushRuntimeIssues(issues, acpSnapshot, acpAggregate, rateLimitHits, input, channelWorker, channelWorkers, totalAdmissionSnapshot, workspaceSnapshots) {
-  for (const { workspaceCwd, snapshot } of workspaceSnapshots) {
-    if (snapshot.limits.maxSessions !== null && snapshot.limits.maxSessions > 0 && snapshot.sessionCount / snapshot.limits.maxSessions >= CAPACITY_WARNING_RATIO) {
-      issues.push({
-        code: "session_capacity_high",
-        severity: "warning",
-        message: workspaceSnapshots.length > 1 ? `Workspace ${workspaceCwd} active sessions are at ${snapshot.sessionCount}/${snapshot.limits.maxSessions}.` : `Active sessions are at ${snapshot.sessionCount}/${snapshot.limits.maxSessions}.`
-      });
-    }
-  }
-  const maxTotalSessions = positiveFiniteOrNull(input.opts.maxTotalSessions);
-  if (maxTotalSessions !== null) {
-    const fallbackLiveCount = workspaceSnapshots.reduce(
-      (sum, item) => sum + item.snapshot.sessionCount,
-      0
-    );
-    const totalActive = (totalAdmissionSnapshot?.liveCount ?? fallbackLiveCount) + (totalAdmissionSnapshot?.inFlight ?? 0);
-    if (totalActive / maxTotalSessions >= CAPACITY_WARNING_RATIO) {
-      issues.push({
-        code: "total_session_capacity_high",
-        severity: "warning",
-        message: `Total active and in-flight sessions are at ${totalActive}/${maxTotalSessions}.`
-      });
-    }
-  }
-  if (acpSnapshot !== void 0 && acpSnapshot.connectionCap !== null && acpSnapshot.connectionCap > 0) {
-    const cap = acpSnapshot.connectionCap;
-    const busiest = (acpAggregate?.mounts ?? []).reduce(
-      (max, m) => Math.max(max, m.connectionCount),
-      acpSnapshot.connectionCount
-    );
-    if (busiest / cap >= CAPACITY_WARNING_RATIO) {
-      issues.push({
-        code: "connection_capacity_high",
-        severity: "warning",
-        message: `ACP connections are at ${busiest}/${cap} on the busiest workspace mount.`
-      });
-    }
-  }
-  const pendingPermissionCount = workspaceSnapshots.reduce(
-    (sum, item) => sum + item.snapshot.pendingPermissionCount,
-    0
-  );
-  if (pendingPermissionCount > 0) {
-    issues.push({
-      code: "pending_permissions",
-      severity: "warning",
-      message: `${pendingPermissionCount} permission request(s) are pending.`
-    });
-  }
-  const downWorkspaces = workspaceSnapshots.filter(
-    (item) => item.snapshot.sessionCount > 0 && !item.snapshot.channelLive
-  );
-  if (downWorkspaces.length > 0) {
-    issues.push({
-      code: "acp_channel_down",
-      severity: "error",
-      message: downWorkspaces.length === 1 ? `Active sessions exist but the ACP channel is not live for ${downWorkspaces[0].workspaceCwd}.` : `Active sessions exist but the ACP channel is not live for ${downWorkspaces.length} workspace(s).`
-    });
-  }
-  if (input.opts.rateLimit === true && sumRateHits(rateLimitHits) > 0) {
-    issues.push({
-      code: "rate_limit_hits",
-      severity: "warning",
-      message: `${sumRateHits(rateLimitHits)} request(s) have been rejected by rate limiting since start.`
-    });
-  }
-  const groupedWorkers = channelWorkers && channelWorkers.length > 0 ? channelWorkers : void 0;
-  const workers = groupedWorkers ?? [channelWorker];
-  for (const worker of workers) {
-    pushChannelWorkerIssues(issues, worker, groupedWorkers !== void 0);
-  }
-}
-__name(pushRuntimeIssues, "pushRuntimeIssues");
-function pushChannelWorkerIssues(issues, channelWorker, grouped) {
-  const workspace = "workspaceCwd" in channelWorker ? ` for workspace ${channelWorker.workspaceCwd}` : "";
-  const section = grouped ? "runtime.channelWorkers" : "runtime.channelWorker";
-  if (channelWorker.enabled && (channelWorker.state === "exited" || channelWorker.state === "failed")) {
-    const detailParts = [
-      channelWorker.pid !== void 0 ? `pid=${channelWorker.pid}` : void 0,
-      channelWorker.exitCode !== void 0 ? `code=${channelWorker.exitCode ?? "null"}` : void 0,
-      channelWorker.signal ? `signal=${channelWorker.signal}` : void 0,
-      channelWorker.restartCount !== void 0 ? `restarts=${channelWorker.restartCount}` : void 0,
-      channelWorker.lastExitAt ? `lastExitAt=${channelWorker.lastExitAt}` : void 0,
-      channelWorker.lastRestartAt ? `lastRestartAt=${channelWorker.lastRestartAt}` : void 0,
-      channelWorker.nextRestartAt ? `nextRestartAt=${channelWorker.nextRestartAt}` : void 0,
-      channelWorker.lastHeartbeatAt ? `lastHeartbeatAt=${channelWorker.lastHeartbeatAt}` : void 0,
-      channelWorker.staleHeartbeatAt ? `staleHeartbeatAt=${channelWorker.staleHeartbeatAt}` : void 0
-    ].filter(Boolean);
-    const details = detailParts.length > 0 ? ` (${detailParts.join(", ")})` : "";
-    const error = channelWorker.error ? `: ${channelWorker.error}` : "";
-    const isPermanentFailure = channelWorker.state === "failed" && !channelWorker.nextRestartAt;
-    issues.push({
-      code: "channel_worker_exited",
-      severity: isPermanentFailure ? "error" : "warning",
-      message: `Channel worker${workspace} is ${channelWorker.state}${details}${error}.`,
-      section
-    });
-  }
-  if (channelWorker.enabled && channelWorker.state === "running" && channelWorker.requestedChannels !== void 0) {
-    const connected = new Set(channelWorker.channels);
-    const failed = channelWorker.requestedChannels.filter(
-      (channel) => !connected.has(channel)
-    );
-    if (failed.length > 0) {
-      issues.push({
-        code: "channel_worker_partial_connect",
-        severity: "warning",
-        message: `Channel worker${workspace} connected ${channelWorker.channels.length}/${channelWorker.requestedChannels.length} channel(s). Failed: ${failed.join(", ")}.`,
-        section
-      });
-    }
-  }
-}
-__name(pushChannelWorkerIssues, "pushChannelWorkerIssues");
-function pushFullIssues(issues, full) {
-  for (const [name, section] of Object.entries(full.workspace)) {
-    if (section.status === "unavailable") {
-      issues.push({
-        code: "workspace_status_unavailable",
-        severity: "warning",
-        section: name,
-        message: `${name} status is unavailable.`
-      });
-    }
-  }
-  const preflight = full.workspace["preflight"];
-  if (preflight && sectionHasStatus(preflight, "error")) {
-    issues.push({
-      code: "preflight_error",
-      severity: "error",
-      section: "preflight",
-      message: "Workspace preflight reports an error."
-    });
-  }
-  const mcp = full.workspace["mcp"];
-  const mcpBudget = mcp ? inspectMcpBudget(mcp) : void 0;
-  if (mcpBudget === "exhausted") {
-    issues.push({
-      code: "mcp_budget_exhausted",
-      severity: "error",
-      section: "mcp",
-      message: "MCP client budget is exhausted."
-    });
-  } else if (mcpBudget === "warning") {
-    issues.push({
-      code: "mcp_budget_warning",
-      severity: "warning",
-      section: "mcp",
-      message: "MCP client budget is near capacity."
-    });
-  }
-}
-__name(pushFullIssues, "pushFullIssues");
-function inferSectionStatus(data) {
-  const statuses = collectStatuses(data);
-  if (statuses.includes("error")) return "error";
-  if (statuses.includes("warning")) return "warning";
-  return "ok";
-}
-__name(inferSectionStatus, "inferSectionStatus");
-function summarizeStatusData(data) {
-  const summary = {};
-  if (!isRecord(data)) return summary;
-  copyBoolean(data, summary, "initialized");
-  copyBoolean(data, summary, "acpChannelLive");
-  copyString(data, summary, "discoveryState");
-  copyString(data, summary, "budgetMode");
-  copyNumber(data, summary, "clientCount");
-  copyNumber(data, summary, "clientBudget");
-  for (const key of [
-    "cells",
-    "errors",
-    "servers",
-    "budgets",
-    "skills",
-    "tools",
-    "providers",
-    "hooks",
-    "extensions"
-  ]) {
-    const value = data[key];
-    if (Array.isArray(value)) {
-      summary[`${key}Count`] = value.length;
-    }
-  }
-  summarizeMcpServers(data, summary);
-  return summary;
-}
-__name(summarizeStatusData, "summarizeStatusData");
-function summarizeMcpServers(data, summary) {
-  const servers = data["servers"];
-  if (!Array.isArray(servers)) return;
-  let connected = 0;
-  let errored = 0;
-  let disabled = 0;
-  for (const server of servers) {
-    if (!isRecord(server)) continue;
-    if (server["disabled"] === true) {
-      disabled++;
-    } else if (server["status"] === "error") {
-      errored++;
-    } else if (server["mcpStatus"] === "connected") {
-      connected++;
-    }
-  }
-  summary["serversConnected"] = connected;
-  summary["serversErrored"] = errored;
-  summary["serversDisabled"] = disabled;
-}
-__name(summarizeMcpServers, "summarizeMcpServers");
-function collectStatuses(data) {
-  const statuses = [];
-  visitStatusContainers(data, (record) => {
-    const status = record["status"];
-    if (typeof status === "string") statuses.push(status);
-  });
-  return statuses;
-}
-__name(collectStatuses, "collectStatuses");
-function sectionHasStatus(section, status) {
-  return collectStatuses(section.data).includes(status);
-}
-__name(sectionHasStatus, "sectionHasStatus");
-function inspectMcpBudget(section) {
-  const data = section.data;
-  if (!isRecord(data)) return void 0;
-  const budgetIssue = inspectBudgetContainers(data);
-  if (budgetIssue) return budgetIssue;
-  const clientCount = numberValue(data["clientCount"]);
-  const clientBudget = numberValue(data["clientBudget"]);
-  if (clientCount !== void 0 && clientBudget !== void 0 && clientBudget > 0) {
-    const ratio = clientCount / clientBudget;
-    if (ratio >= 1) return "exhausted";
-    if (ratio >= 0.75) return "warning";
-  }
-  return void 0;
-}
-__name(inspectMcpBudget, "inspectMcpBudget");
-function inspectBudgetContainers(data) {
-  let result;
-  visitStatusContainers(data, (record) => {
-    if (result === "exhausted") return;
-    const errorKind = record["errorKind"];
-    const disabledReason = record["disabledReason"];
-    const status = record["status"];
-    const kind = record["kind"];
-    const refusedCount = numberValue(record["refusedCount"]);
-    if (errorKind === "budget_exhausted" || disabledReason === "budget" || kind === "mcp_budget" && status === "error" || refusedCount !== void 0 && refusedCount > 0) {
-      result = "exhausted";
-      return;
-    }
-    if (kind === "mcp_budget" && status === "warning") {
-      result = "warning";
-    }
-  });
-  return result;
-}
-__name(inspectBudgetContainers, "inspectBudgetContainers");
-function visitStatusContainers(data, visit) {
-  if (!isRecord(data)) return;
-  visit(data);
-  for (const key of [
-    "cells",
-    "errors",
-    "servers",
-    "budgets",
-    "skills",
-    "tools",
-    "providers",
-    "hooks",
-    "extensions"
-  ]) {
-    const value = data[key];
-    if (!Array.isArray(value)) continue;
-    for (const item of value) visitStatusContainers(item, visit);
-  }
-}
-__name(visitStatusContainers, "visitStatusContainers");
-function rollupStatus(issues) {
-  if (issues.some((issue) => issue.severity === "error")) return "error";
-  if (issues.length > 0) return "warning";
-  return "ok";
-}
-__name(rollupStatus, "rollupStatus");
-function allowOriginMode(allowOrigins) {
-  if (!allowOrigins || allowOrigins.length === 0) return "none";
-  return allowOrigins.includes("*") ? "any" : "specific";
-}
-__name(allowOriginMode, "allowOriginMode");
-function listenerMaxConnections(value) {
-  if (value === void 0) return DEFAULT_LISTENER_MAX_CONNECTIONS;
-  if (value === 0 || value === Infinity) return null;
-  return Number.isFinite(value) && value > 0 ? value : null;
-}
-__name(listenerMaxConnections, "listenerMaxConnections");
-function positiveFiniteOrNull(value) {
-  return value !== void 0 && Number.isFinite(value) && value > 0 ? value : null;
-}
-__name(positiveFiniteOrNull, "positiveFiniteOrNull");
-function zeroRateHits() {
-  return { prompt: 0, mutation: 0, read: 0 };
-}
-__name(zeroRateHits, "zeroRateHits");
-function sumRateHits(hits) {
-  return hits.prompt + hits.mutation + hits.read;
-}
-__name(sumRateHits, "sumRateHits");
-function isRecord(value) {
-  return typeof value === "object" && value !== null && !Array.isArray(value);
-}
-__name(isRecord, "isRecord");
-function numberValue(value) {
-  return typeof value === "number" && Number.isFinite(value) ? value : void 0;
-}
-__name(numberValue, "numberValue");
-function copyBoolean(from, to, key) {
-  const value = from[key];
-  if (typeof value === "boolean") to[key] = value;
-}
-__name(copyBoolean, "copyBoolean");
-function copyString(from, to, key) {
-  const value = from[key];
-  if (typeof value === "string") to[key] = value;
-}
-__name(copyString, "copyString");
-function copyNumber(from, to, key) {
-  const value = numberValue(from[key]);
-  if (value !== void 0) to[key] = value;
-}
-__name(copyNumber, "copyNumber");
-
-// packages/cli/src/serve/cdp-mcp-command.ts
-init_esbuild_shims();
-var QWEN_CDP_MCP_COMMAND_ENV = "QWEN_CDP_MCP_COMMAND";
-function resolveCdpMcpCommand(env) {
-  const command = env[QWEN_CDP_MCP_COMMAND_ENV]?.trim();
-  return command ? command : void 0;
-}
-__name(resolveCdpMcpCommand, "resolveCdpMcpCommand");
-function isBrowserAutomationMcpAvailable(opts, env) {
-  return opts.cdpTunnelOverWs === true && !opts.token && resolveAcpHttpEnabled(env) && resolveCdpMcpCommand(env) !== void 0;
-}
-__name(isBrowserAutomationMcpAvailable, "isBrowserAutomationMcpAvailable");
-
-// packages/cli/src/serve/voice/workspace-voice-coordinator.ts
-init_esbuild_shims();
-var MAX_CONCURRENT_VOICE_SESSIONS = 8;
-var DISPOSE_WAIT_MS = 5e3;
-var VoiceLeaseAbortError = class extends Error {
-  constructor(kind, message) {
-    super(message);
-    this.kind = kind;
-    this.name = "VoiceLeaseAbortError";
-  }
-  static {
-    __name(this, "VoiceLeaseAbortError");
-  }
-};
-var Lease = class {
-  constructor(onRelease) {
-    this.onRelease = onRelease;
-  }
-  static {
-    __name(this, "Lease");
-  }
-  controller = new AbortController();
-  signal = this.controller.signal;
-  released = false;
-  release() {
-    if (this.released) return;
-    this.released = true;
-    this.onRelease(this);
-  }
-  abort(reason) {
-    if (!this.signal.aborted) this.controller.abort(reason);
-  }
-};
-var WorkspaceVoiceCoordinator = class {
-  static {
-    __name(this, "WorkspaceVoiceCoordinator");
-  }
-  states = /* @__PURE__ */ new Map();
-  disposed = /* @__PURE__ */ new WeakSet();
-  active = 0;
-  acquire(runtime) {
-    if (this.disposed.has(runtime)) {
-      return { kind: "rejected", reason: "draining" };
-    }
-    const state = this.stateFor(runtime);
-    if (state.draining) return { kind: "rejected", reason: "draining" };
-    if (this.active >= MAX_CONCURRENT_VOICE_SESSIONS) {
-      return { kind: "rejected", reason: "capacity" };
-    }
-    const lease = new Lease((current) => this.release(runtime, current));
-    state.leases.add(lease);
-    this.active++;
-    return { kind: "admitted", lease };
-  }
-  beginWorkspaceDrain(runtime) {
-    this.stateFor(runtime).draining = true;
-  }
-  cancelWorkspaceDrain(runtime) {
-    const state = this.states.get(runtime);
-    if (!state || state.completed) return;
-    state.draining = false;
-    if (state.leases.size === 0) this.states.delete(runtime);
-  }
-  completeWorkspaceDrain(runtime) {
-    this.disposed.add(runtime);
-    const state = this.states.get(runtime);
-    if (!state) return;
-    state.draining = true;
-    state.completed = true;
-    const abortReason = new VoiceLeaseAbortError(
-      "workspace_removed",
-      "Workspace drain completed"
-    );
-    for (const lease of state.leases) lease.abort(abortReason);
-    this.deleteIfIdle(runtime, state);
-  }
-  getWorkspaceActivity(runtime) {
-    return this.states.get(runtime)?.leases.size ?? 0;
-  }
-  async disposeRuntime(runtime, reason) {
-    this.disposed.add(runtime);
-    const state = this.states.get(runtime);
-    if (!state) return;
-    state.draining = true;
-    state.completed = true;
-    const abortReason = new VoiceLeaseAbortError(
-      reason,
-      reason === "daemon_shutdown" ? "Daemon is shutting down" : reason === "workspace_removed" ? "Workspace runtime was removed" : "Workspace trust was reconfigured"
-    );
-    for (const lease of state.leases) lease.abort(abortReason);
-    if (state.leases.size === 0) {
-      this.deleteIfIdle(runtime, state);
-      return;
-    }
-    let resolveIdle;
-    const idle = new Promise((resolve2) => {
-      resolveIdle = resolve2;
-      state.idleWaiters.add(resolve2);
-    });
-    let timeout;
-    let timedOut = false;
-    try {
-      await Promise.race([
-        idle,
-        new Promise((resolve2) => {
-          timeout = setTimeout(() => {
-            timedOut = true;
-            resolve2();
-          }, DISPOSE_WAIT_MS);
-          timeout.unref?.();
-        })
-      ]);
-    } finally {
-      if (timeout) clearTimeout(timeout);
-      if (resolveIdle) state.idleWaiters.delete(resolveIdle);
-    }
-    if (timedOut && state.leases.size > 0) {
-      process.stderr.write(
-        `qwen serve: Voice runtime disposal timed out with ${state.leases.size} active lease(s).
-`
-      );
-    }
-  }
-  stateFor(runtime) {
-    let state = this.states.get(runtime);
-    if (!state) {
-      state = {
-        draining: false,
-        completed: false,
-        leases: /* @__PURE__ */ new Set(),
-        idleWaiters: /* @__PURE__ */ new Set()
-      };
-      this.states.set(runtime, state);
-    }
-    return state;
-  }
-  release(runtime, lease) {
-    const state = this.states.get(runtime);
-    if (!state || !state.leases.delete(lease)) return;
-    this.active--;
-    if (state.leases.size === 0) {
-      for (const resolve2 of state.idleWaiters) resolve2();
-      state.idleWaiters.clear();
-    }
-    this.deleteIfIdle(runtime, state);
-  }
-  deleteIfIdle(runtime, state) {
-    if (state.completed && state.leases.size === 0) this.states.delete(runtime);
-  }
-};
-
-// packages/cli/src/serve/server/access-log.ts
-init_esbuild_shims();
-import { performance } from "node:perf_hooks";
-var SESSION_ID_RE = /\/session\/([^/]+)/;
-var ACCESS_LOG_BURST = 60;
-var ACCESS_LOG_REFILL_PER_SECOND = 2;
-var ROUTE_MAX_BYTES = 2 * 1024;
-var SESSION_ID_MAX_BYTES = 256;
-var CLIENT_ID_MAX_BYTES = 256;
-var ACCESS_LOG_CONTROLLER_LOCAL = "accessLogController";
-function emptySuppressedCounts() {
-  return {
-    suppressed: 0,
-    status2xx: 0,
-    status3xx: 0,
-    status4xx: 0,
-    status5xx: 0,
-    statusOther: 0
-  };
-}
-__name(emptySuppressedCounts, "emptySuppressedCounts");
-function countSuppressed(counts, status) {
-  counts.suppressed += 1;
-  if (status >= 200 && status < 300) counts.status2xx += 1;
-  else if (status >= 300 && status < 400) counts.status3xx += 1;
-  else if (status >= 400 && status < 500) counts.status4xx += 1;
-  else if (status >= 500 && status < 600) counts.status5xx += 1;
-  else counts.statusOther += 1;
-}
-__name(countSuppressed, "countSuppressed");
-function firstRawHeader(rawHeaders, targetName) {
-  for (let i = 0; i + 1 < rawHeaders.length; i += 2) {
-    if (rawHeaders[i]?.toLowerCase() === targetName) return rawHeaders[i + 1];
-  }
-  return void 0;
-}
-__name(firstRawHeader, "firstRawHeader");
-function truncateUtf8(value, maxBytes) {
-  const bytes = Buffer.from(value, "utf8");
-  if (bytes.length <= maxBytes) return { value };
-  let end = maxBytes;
-  while (end > 0 && (bytes[end] & 192) === 128) end -= 1;
-  return {
-    value: bytes.subarray(0, end).toString("utf8"),
-    originalBytes: bytes.length
-  };
-}
-__name(truncateUtf8, "truncateUtf8");
-function installAccessLogMiddleware(app, daemonLog, monotonicNow = () => performance.now()) {
-  let sealed = false;
-  let tokens = ACCESS_LOG_BURST;
-  let refillBaseline = monotonicNow();
-  let suppressed = emptySuppressedCounts();
-  const refill = /* @__PURE__ */ __name(() => {
-    const now = Math.max(monotonicNow(), refillBaseline);
-    tokens = Math.min(
-      ACCESS_LOG_BURST,
-      tokens + (now - refillBaseline) / 1e3 * ACCESS_LOG_REFILL_PER_SECOND
-    );
-    refillBaseline = now;
-  }, "refill");
-  const flushSuppressed = /* @__PURE__ */ __name(() => {
-    if (!daemonLog || suppressed.suppressed === 0) return false;
-    daemonLog.warn("access logs suppressed", suppressed);
-    suppressed = emptySuppressedCounts();
-    return true;
-  }, "flushSuppressed");
-  const controller = {
-    sealAndFlushSuppressed: /* @__PURE__ */ __name(() => {
-      if (sealed) return;
-      sealed = true;
-      try {
-        flushSuppressed();
-      } catch {
-      }
-    }, "sealAndFlushSuppressed")
-  };
-  app.locals[ACCESS_LOG_CONTROLLER_LOCAL] = controller;
-  if (!daemonLog) return controller;
-  app.use((req, res, next) => {
-    const { method, path: reqPath } = req;
-    if (method === "GET" && reqPath === "/health" || method === "POST" && reqPath.endsWith("/heartbeat")) {
-      return next();
-    }
-    const startMs = monotonicNow();
-    res.on("finish", () => {
-      try {
-        if (sealed) return;
-        const status = res.statusCode;
-        if (method === "GET" && reqPath.endsWith("/events") && status === 200) {
-          return;
-        }
-        refill();
-        if (suppressed.suppressed > 0 && tokens >= 1) {
-          tokens -= 1;
-          flushSuppressed();
-        }
-        if (tokens < 1) {
-          countSuppressed(suppressed, status);
-          return;
-        }
-        tokens -= 1;
-        const route = truncateUtf8(`${method} ${reqPath}`, ROUTE_MAX_BYTES);
-        const sessionMatch = reqPath.match(SESSION_ID_RE);
-        const sessionId = sessionMatch?.[1] ? truncateUtf8(sessionMatch[1], SESSION_ID_MAX_BYTES) : void 0;
-        const rawClientId = firstRawHeader(req.rawHeaders, "x-qwen-client-id");
-        const clientId = rawClientId ? truncateUtf8(rawClientId, CLIENT_ID_MAX_BYTES) : void 0;
-        const ctx = {
-          route: route.value,
-          ...route.originalBytes ? { routeOriginalBytes: route.originalBytes } : {},
-          ...sessionId ? {
-            sessionId: sessionId.value,
-            ...sessionId.originalBytes ? { sessionIdOriginalBytes: sessionId.originalBytes } : {}
-          } : {},
-          ...clientId ? {
-            clientId: clientId.value,
-            ...clientId.originalBytes ? { clientIdOriginalBytes: clientId.originalBytes } : {}
-          } : {},
-          status,
-          durationMs: Math.max(0, Math.round(monotonicNow() - startMs))
-        };
-        if (status >= 400) daemonLog.warn("request completed", ctx);
-        else daemonLog.info("request completed", ctx);
-      } catch {
-      }
-    });
-    next();
-  });
-  return controller;
-}
-__name(installAccessLogMiddleware, "installAccessLogMiddleware");
-
 export {
   require_express2 as require_express,
-  sanitizeForStderr,
-  brandSecret,
-  unsafeRevealSecret,
-  UnsupportedDeviceFlowProviderError,
-  TooManyActiveDeviceFlowsError,
-  UpstreamDeviceFlowError,
-  setDeviceFlowRegistry,
-  getDeviceFlowRegistry,
-  DeviceFlowRegistry,
-  createBridgeFileSystemAdapter,
-  PathMutexRegistry,
-  isDeepHealthQuery,
-  resolveWebShellDir,
-  denyBrowserOriginCors,
-  parseAllowOriginPatterns,
-  allowOriginCors,
-  hostAllowlist,
-  bearerAuth,
-  createMutationGate,
-  ClientMcpSenderRegistry,
-  createClientMcpServerProvider,
-  SERVE_CAPABILITY_REGISTRY,
-  getAdvertisedServeFeatures,
-  getServeProtocolVersions,
-  CAPABILITIES_SCHEMA_VERSION,
-  isManagedScratchChild,
-  isScratchRootCompatible,
-  prepareManagedScratchRoot,
-  createManagedScratchDirectory,
-  sendJsonBodyParserError,
-  CLIENT_ID_HEADER,
-  MAX_CLIENT_ID_LENGTH,
-  MAX_TOOL_NAME_LENGTH,
-  MAX_SERVER_NAME_LENGTH,
-  CLIENT_ID_RE,
-  setDeferredRuntimeRequestTiming,
-  getDeferredRuntimeRequestTiming,
-  safeBody,
-  parseOptionalWorkspaceCwd,
-  requireSessionId,
-  parseClientIdHeader,
-  detectFromLoopback,
-  validateMcpRuntimeServerName,
-  parseAndValidateWorkspaceClientId,
-  createBuildWorkspaceCtx,
-  parsePermissionVoteBody,
-  parseMaxQueuedQuery,
-  safeLogValue,
-  parseLastEventId,
-  createRateLimiter,
-  setRateLimiter,
-  getRateLimiter,
-  resolveAcpHttpEnabled,
-  toDaemonStatusMemoryLimits,
-  parseDaemonStatusDetail,
-  buildDaemonStatusResponse,
-  allowOriginMode,
-  listenerMaxConnections,
-  positiveFiniteOrNull,
-  QWEN_CDP_MCP_COMMAND_ENV,
-  resolveCdpMcpCommand,
-  isBrowserAutomationMcpAvailable,
-  MAX_CONCURRENT_VOICE_SESSIONS,
-  VoiceLeaseAbortError,
-  WorkspaceVoiceCoordinator,
-  ACCESS_LOG_CONTROLLER_LOCAL,
-  installAccessLogMiddleware
+  resolveWebShellDir
 };
 /**
  * @license
  * Copyright 2025 Qwen Team
  * SPDX-License-Identifier: Apache-2.0
  */
-/**
- * @license
- * Copyright 2026 Qwen Team
- * SPDX-License-Identifier: Apache-2.0
- */
 /*! Bundled license information:
 
 depd/index.js: