@qwen-code/qwen-code 0.21.7 → 0.21.8-nightly.20260810.55e20db328

package/chunks/{chunk-CB2464BK.js → chunk-ZIKTCMQF.js}

@@ -23,10 +23,11 @@ import {
 } from "./chunk-BKHCW2BI.js";
 import {
   loadSettings
-} from "./chunk-PQBHU2IA.js";
+} from "./chunk-HKI3KHAO.js";
 import {
-  MCP_BUDGET_WARN_FRACTION
-} from "./chunk-Y7E5LNLO.js";
+  MCP_BUDGET_WARN_FRACTION,
+  sleepInhibitor
+} from "./chunk-47ZUMGGY.js";
 import {
   parsePositiveIntegerEnv
 } from "./chunk-6PVPNMXU.js";
@@ -38,7 +39,8 @@ import {
   MEMORY_PROJECT_SCOPES
 } from "./chunk-FVKHVJZQ.js";
 import {
-  writeStderrLine
+  writeStderrLine,
+  writeStdoutLine
 } from "./chunk-KGJGEEVR.js";
 import {
   init_esbuild_shims
@@ -49,11 +51,52 @@ import {
 
 // packages/cli/src/commands/serve.ts
 init_esbuild_shims();
+import { randomBytes } from "node:crypto";
+import { networkInterfaces } from "node:os";
 function blockForever() {
   return new Promise(() => {
   });
 }
 __name(blockForever, "blockForever");
+var DEFAULT_SERVE_HOSTNAME = "127.0.0.1";
+function localControlUrls(baseUrl, token, interfaces = networkInterfaces()) {
+  const urls = [];
+  for (const [interfaceName, addresses] of Object.entries(interfaces).sort()) {
+    for (const address of addresses ?? []) {
+      if (address.family !== "IPv4" || address.internal) {
+        continue;
+      }
+      const target = new URL(baseUrl);
+      target.hostname = address.address;
+      target.hash = `token=${encodeURIComponent(token)}`;
+      urls.push({ interfaceName, url: target.toString() });
+    }
+  }
+  return urls;
+}
+__name(localControlUrls, "localControlUrls");
+async function showLocalControlPairing(handle, urls) {
+  await handle.runtimeReady;
+  if (!handle.webShellMounted || !handle.resolvedToken) {
+    throw new Error("Local Control requires the authenticated Web Shell.");
+  }
+  const { default: qrcode } = await import("./main-PXAUXNF2.js");
+  qrcode.setErrorLevel("Q");
+  writeStdoutLine(
+    "\nLocal Control is on. Scan a QR code from the same network:"
+  );
+  for (const entry of urls) {
+    writeStdoutLine(`
+${entry.interfaceName}: ${entry.url}`);
+    qrcode.generate(entry.url, { small: true }, (code) => {
+      writeStdoutLine(code.trimEnd());
+    });
+  }
+  writeStdoutLine(
+    "\nKeep this terminal open. Restart after changing networks. Sleep inhibition is best effort. Traffic is encrypted only when --tls-cert and --tls-key are set. Press Ctrl+C to turn Local Control off."
+  );
+}
+__name(showLocalControlPairing, "showLocalControlPairing");
 async function maybeOpenWebShellBrowser(handle, open) {
   if (!open || !handle.webShellMounted || !shouldLaunchBrowser()) return;
   try {
@@ -96,7 +139,7 @@ var serveCommand = {
     description: "TCP port to bind (use 0 for an OS-assigned ephemeral port)"
   }).option("hostname", {
     type: "string",
-    default: "127.0.0.1",
+    default: DEFAULT_SERVE_HOSTNAME,
     description: "Interface to bind. Loopback (127.0.0.1, localhost, ::1, [::1]) is auth-free; anything else requires a token."
   }).option("token", {
     type: "string",
@@ -155,6 +198,27 @@ var serveCommand = {
     type: "boolean",
     default: false,
     description: "Open the Web Shell in a browser once the daemon is listening. With a token configured, the launch URL (token included) is handed to the browser launcher and is visible in the process list, so prefer opening the URL manually on multi-user hosts. No-op with --no-web, when the UI assets are absent, or in headless/CI/SSH environments."
+  }).option("local-control", {
+    type: "boolean",
+    default: false,
+    description: "Share the Web Shell on the local IPv4 network with a fresh token, terminal QR code, and best-effort sleep inhibition. Press Ctrl+C to turn it off."
+  }).check((argv) => {
+    if (argv["local-control"] === true && argv.token !== void 0) {
+      throw new Error("Local Control generates its own token.");
+    }
+    if (argv["local-control"] === true && argv["allow-origin"] !== void 0) {
+      throw new Error("Local Control manages its browser origins.");
+    }
+    if (argv["local-control"] === true && argv["web"] === false) {
+      throw new Error("Local Control requires the Web Shell.");
+    }
+    if (argv["local-control"] === true && (!Number.isInteger(argv["port"]) || argv["port"] < 1 || argv["port"] > 65535)) {
+      throw new Error("Local Control requires a fixed port.");
+    }
+    if (argv["local-control"] === true && argv.hostname !== DEFAULT_SERVE_HOSTNAME) {
+      throw new Error("Local Control manages its hostname.");
+    }
+    return true;
   }).option("event-ring-size", {
     type: "number",
     // Single source of truth — `DEFAULT_RING_SIZE` is also what
@@ -181,7 +245,15 @@ var serveCommand = {
     description: "HTTP bridge mode: attempt to preheat one primary `qwen --acp` child; trusted secondaries start one on demand. Stage 2 native in-process mode is not yet implemented; this flag will become opt-in then."
   }).option("memory-budget-mb", {
     type: "number",
-    description: "Total memory budget in MB for the daemon process tree. When unset, derived as 50% of cgroup-constrained or host memory, and capped at the resolved available memory either way. Currently observed and reported under `limits.memory` in daemon status; it does not yet size any child process. Must be an integer in [1024, 1048576]."
+    description: "Total memory budget in MB for the daemon process tree. When unset, derived as 50% of cgroup-constrained or host memory, and capped at the resolved available memory either way. Currently observed and reported under `limits.memory` in daemon status, and modeled into a per-child partition reported under `limits.memory.childHeap`. Nothing applies it: no child is sized from this budget. Must be an integer in [1024, 1048576]."
+  }).option("memory-pressure-mode", {
+    choices: ["off", "observe"],
+    default: "observe",
+    description: "Whether the daemon derives a memory-pressure level from its own RSS and V8 heap. `observe` (default) reports the level in daemon status and raises a status issue when it leaves normal. `off` still reports the underlying figures but raises no issue, so the overall status rollup is unchanged \u2014 use it while calibrating, or if you alert on the top-level status. Nothing remediates in either mode."
+  }).option("child-heap-mode", {
+    choices: ["off", "observe"],
+    default: "observe",
+    description: "Whether the daemon models a per-child heap partition of the memory budget. `observe` (default) reports the partition it would apply \u2014 `limits.memory.childHeap.perChildCeilingMb` and `maxConcurrentChildren` \u2014 and counts spawns that would have exceeded it. Nothing is applied: no child is sized from the budget and no spawn is refused. `off` models nothing. Note a refusal count of 0 does NOT mean the partition would be safe to apply; children still run on the much larger host-derived ceiling, so a workload needing more old space than the modeled ceiling looks healthy here."
   }).option("mcp-client-budget", {
     type: "number",
     description: "Cap on live MCP clients spawned inside the ACP child for the bound workspace. Positive integer. Combine with --mcp-budget-mode to control behavior at the cap. When unset, mode defaults to off (no accounting-driven enforcement, but GET /workspace/mcp still reports `clientCount`). Distinct from claude-code MCP_SERVER_CONNECTION_BATCH_SIZE which gates startup concurrency, not the total client count."
@@ -208,6 +280,9 @@ var serveCommand = {
   }).option("initialize-timeout-ms", {
     type: "number",
     description: "ACP child request timeout, including the initialize handshake (ms). Default: 10000 (10 s)."
+  }).option("session-restore-timeout-ms", {
+    type: "number",
+    description: "ACP session load/resume timeout (ms). Default: 60000. An explicit --initialize-timeout-ms can raise (but never lower) this default."
   }).option("session-reap-interval-ms", {
     type: "number",
     description: "Session reaper scan interval (ms). 0 = disabled. Default: 60000."
@@ -346,12 +421,23 @@ var serveCommand = {
     }
     const externalToolGuardToken = process.env[EXTERNAL_TOOL_GUARD_TOKEN_ENV] ?? "";
     delete process.env[EXTERNAL_TOOL_GUARD_TOKEN_ENV];
-    const { runQwenServe } = await import("./run-qwen-serve-ZPKPKECF.js");
+    const { runQwenServe } = await import("./run-qwen-serve-4NVSU75L.js");
     try {
+      const localControlToken = argv["local-control"] ? randomBytes(32).toString("base64url") : void 0;
+      const localControlPairing = localControlToken ? localControlUrls(
+        `${argv["tls-cert"] ? "https" : "http"}://0.0.0.0:${argv.port}/`,
+        localControlToken
+      ) : [];
+      if (argv["local-control"] && localControlPairing.length === 0) {
+        throw new Error(
+          "Local Control could not find a non-loopback IPv4 address."
+        );
+      }
       const handle = await runQwenServe({
         port: argv.port,
-        hostname: argv.hostname,
-        token: argv.token,
+        strictPort: argv["local-control"],
+        hostname: argv["local-control"] ? "0.0.0.0" : argv.hostname,
+        token: localControlToken ?? argv.token,
         mode: "http-bridge",
         maxSessions: argv["max-sessions"],
         ...argv["max-total-sessions"] !== void 0 ? { maxTotalSessions: argv["max-total-sessions"] } : {},
@@ -372,11 +458,22 @@ var serveCommand = {
         mcpClientBudget,
         mcpBudgetMode: resolvedMcpMode,
         ...memoryBudgetMb !== void 0 ? { memoryBudgetMb } : {},
-        ...argv["allow-origin"] && argv["allow-origin"].length > 0 ? { allowOrigins: argv["allow-origin"] } : {},
+        memoryPressureMode: argv["memory-pressure-mode"],
+        childHeapMode: argv["child-heap-mode"],
+        ...argv["local-control"] ? {
+          allowOrigins: localControlPairing.map(({ url }) => new URL(url).origin).concat(
+            new URL(
+              `${argv["tls-cert"] ? "https" : "http"}://127.0.0.1:${argv.port}`
+            ).origin
+          )
+        } : argv["allow-origin"] && argv["allow-origin"].length > 0 ? { allowOrigins: argv["allow-origin"] } : {},
         ...argv["prompt-deadline-ms"] !== void 0 ? { promptDeadlineMs: argv["prompt-deadline-ms"] } : {},
         ...argv["writer-idle-timeout-ms"] !== void 0 ? { writerIdleTimeoutMs: argv["writer-idle-timeout-ms"] } : {},
         ...argv["channel-idle-timeout-ms"] !== void 0 ? { channelIdleTimeoutMs: argv["channel-idle-timeout-ms"] } : {},
         ...argv["initialize-timeout-ms"] !== void 0 ? { initializeTimeoutMs: argv["initialize-timeout-ms"] } : {},
+        ...argv["session-restore-timeout-ms"] !== void 0 ? {
+          sessionRestoreTimeoutMs: argv["session-restore-timeout-ms"]
+        } : {},
         ...argv["session-reap-interval-ms"] !== void 0 ? { sessionReapIntervalMs: argv["session-reap-interval-ms"] } : {},
         ...argv["session-idle-timeout-ms"] !== void 0 ? { sessionIdleTimeoutMs: argv["session-idle-timeout-ms"] } : {},
         ...argv["permission-response-timeout-ms"] !== void 0 ? {
@@ -400,6 +497,15 @@ var serveCommand = {
         ...argv.experimentalLsp === true ? { experimentalLsp: true } : {},
         ...channelSelection !== void 0 ? { channelSelection } : {}
       });
+      if (argv["local-control"]) {
+        try {
+          await showLocalControlPairing(handle, localControlPairing);
+          sleepInhibitor.acquire("Qwen Code Local Control is active");
+        } catch (err) {
+          await handle.close().catch(() => void 0);
+          throw err;
+        }
+      }
       await maybeOpenWebShellBrowser(handle, argv.open);
     } catch (err) {
       writeStderrLine(
@@ -412,6 +518,7 @@ var serveCommand = {
 };
 
 export {
+  localControlUrls,
   maybeOpenWebShellBrowser,
   serveCommand
 };