@qwen-code/qwen-code 0.21.7 → 0.21.8

package/chunks/{ru-VJRAMC4W.js → ru-CMX4UMYP.js}

@@ -1114,7 +1114,12 @@ var ru_default = {
   "Background agent needs approval": "\u0424\u043E\u043D\u043E\u0432\u044B\u0439 \u0430\u0433\u0435\u043D\u0442 \u0442\u0440\u0435\u0431\u0443\u0435\u0442 \u043F\u043E\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043D\u0438\u044F",
   "Approve or deny the request above": "\u041F\u043E\u0434\u0442\u0432\u0435\u0440\u0434\u0438\u0442\u0435 \u0438\u043B\u0438 \u043E\u0442\u043A\u043B\u043E\u043D\u0438\u0442\u0435 \u0437\u0430\u043F\u0440\u043E\u0441 \u0432\u044B\u0448\u0435",
   Running: "\u0412\u044B\u043F\u043E\u043B\u043D\u044F\u0435\u0442\u0441\u044F",
+  Pausing: "\u041F\u0440\u0438\u043E\u0441\u0442\u0430\u043D\u0430\u0432\u043B\u0438\u0432\u0430\u0435\u0442\u0441\u044F",
   Paused: "\u041F\u0440\u0438\u043E\u0441\u0442\u0430\u043D\u043E\u0432\u043B\u0435\u043D\u043E",
+  "Pause is cooperative; in-flight work may finish before the workflow is paused. An agent call waiting on a tool approval keeps the run in this state and still counts against the active-time limit until the approval is answered.": "\u041F\u0440\u0438\u043E\u0441\u0442\u0430\u043D\u043E\u0432\u043A\u0430 \u043A\u043E\u043E\u043F\u0435\u0440\u0430\u0442\u0438\u0432\u043D\u0430\u044F; \u0432\u044B\u043F\u043E\u043B\u043D\u044F\u0435\u043C\u0430\u044F \u0440\u0430\u0431\u043E\u0442\u0430 \u043C\u043E\u0436\u0435\u0442 \u0437\u0430\u0432\u0435\u0440\u0448\u0438\u0442\u044C\u0441\u044F \u0434\u043E \u0442\u043E\u0433\u043E, \u043A\u0430\u043A \u0440\u0430\u0431\u043E\u0447\u0438\u0439 \u043F\u0440\u043E\u0446\u0435\u0441\u0441 \u0431\u0443\u0434\u0435\u0442 \u043F\u0440\u0438\u043E\u0441\u0442\u0430\u043D\u043E\u0432\u043B\u0435\u043D. \u0412\u044B\u0437\u043E\u0432 \u0430\u0433\u0435\u043D\u0442\u0430, \u043E\u0436\u0438\u0434\u0430\u044E\u0449\u0438\u0439 \u043E\u0434\u043E\u0431\u0440\u0435\u043D\u0438\u044F \u0438\u043D\u0441\u0442\u0440\u0443\u043C\u0435\u043D\u0442\u0430, \u0443\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u0442 \u0437\u0430\u043F\u0443\u0441\u043A \u0432 \u044D\u0442\u043E\u043C \u0441\u043E\u0441\u0442\u043E\u044F\u043D\u0438\u0438 \u0438 \u043F\u0440\u043E\u0434\u043E\u043B\u0436\u0430\u0435\u0442 \u0443\u0447\u0438\u0442\u044B\u0432\u0430\u0442\u044C\u0441\u044F \u0432 \u043B\u0438\u043C\u0438\u0442\u0435 \u0430\u043A\u0442\u0438\u0432\u043D\u043E\u0433\u043E \u0432\u0440\u0435\u043C\u0435\u043D\u0438, \u043F\u043E\u043A\u0430 \u043E\u0434\u043E\u0431\u0440\u0435\u043D\u0438\u0435 \u043D\u0435 \u0431\u0443\u0434\u0435\u0442 \u043E\u0431\u0440\u0430\u0431\u043E\u0442\u0430\u043D\u043E.",
+  "Paused: no new agents will start; script code between agent calls keeps running. Press p to resume. /clear, /branch, and switching sessions cancel paused runs.": "\u041F\u0440\u0438\u043E\u0441\u0442\u0430\u043D\u043E\u0432\u043B\u0435\u043D\u043E: \u043D\u043E\u0432\u044B\u0435 \u0430\u0433\u0435\u043D\u0442\u044B \u043D\u0435 \u0431\u0443\u0434\u0443\u0442 \u0437\u0430\u043F\u0443\u0441\u043A\u0430\u0442\u044C\u0441\u044F; \u043A\u043E\u0434 \u0441\u043A\u0440\u0438\u043F\u0442\u0430 \u043C\u0435\u0436\u0434\u0443 \u0432\u044B\u0437\u043E\u0432\u0430\u043C\u0438 \u0430\u0433\u0435\u043D\u0442\u043E\u0432 \u043F\u0440\u043E\u0434\u043E\u043B\u0436\u0430\u0435\u0442 \u0432\u044B\u043F\u043E\u043B\u043D\u044F\u0442\u044C\u0441\u044F. \u041D\u0430\u0436\u043C\u0438\u0442\u0435 p, \u0447\u0442\u043E\u0431\u044B \u0432\u043E\u0437\u043E\u0431\u043D\u043E\u0432\u0438\u0442\u044C. /clear, /branch \u0438 \u043F\u0435\u0440\u0435\u043A\u043B\u044E\u0447\u0435\u043D\u0438\u0435 \u0441\u0435\u0441\u0441\u0438\u0439 \u043E\u0442\u043C\u0435\u043D\u044F\u044E\u0442 \u043F\u0440\u0438\u043E\u0441\u0442\u0430\u043D\u043E\u0432\u043B\u0435\u043D\u043D\u044B\u0435 \u0437\u0430\u043F\u0443\u0441\u043A\u0438.",
+  "Pause/resume was rejected; the workflow state changed. Try again.": "\u041F\u0440\u0438\u043E\u0441\u0442\u0430\u043D\u043E\u0432\u043A\u0430/\u0432\u043E\u0437\u043E\u0431\u043D\u043E\u0432\u043B\u0435\u043D\u0438\u0435 \u043E\u0442\u043A\u043B\u043E\u043D\u0435\u043D\u044B; \u0441\u043E\u0441\u0442\u043E\u044F\u043D\u0438\u0435 \u0440\u0430\u0431\u043E\u0447\u0435\u0433\u043E \u043F\u0440\u043E\u0446\u0435\u0441\u0441\u0430 \u0438\u0437\u043C\u0435\u043D\u0438\u043B\u043E\u0441\u044C. \u041F\u043E\u0432\u0442\u043E\u0440\u0438\u0442\u0435 \u043F\u043E\u043F\u044B\u0442\u043A\u0443.",
+  "Tip: use `/workflows p <runId>` or Background tasks + p to cooperatively pause/resume; use `/workflows <runId>` for details.": "\u041F\u043E\u0434\u0441\u043A\u0430\u0437\u043A\u0430: \u0438\u0441\u043F\u043E\u043B\u044C\u0437\u0443\u0439\u0442\u0435 `/workflows p <runId>` \u0438\u043B\u0438 \xAB\u0424\u043E\u043D\u043E\u0432\u044B\u0435 \u0437\u0430\u0434\u0430\u0447\u0438\xBB + p \u0434\u043B\u044F \u043A\u043E\u043E\u043F\u0435\u0440\u0430\u0442\u0438\u0432\u043D\u043E\u0439 \u043F\u0440\u0438\u043E\u0441\u0442\u0430\u043D\u043E\u0432\u043A\u0438/\u0432\u043E\u0437\u043E\u0431\u043D\u043E\u0432\u043B\u0435\u043D\u0438\u044F; \u0438\u0441\u043F\u043E\u043B\u044C\u0437\u0443\u0439\u0442\u0435 `/workflows <runId>` \u0434\u043B\u044F \u043F\u043E\u0434\u0440\u043E\u0431\u043D\u043E\u0441\u0442\u0435\u0439.",
   Completed: "\u0417\u0430\u0432\u0435\u0440\u0448\u0435\u043D\u043E",
   Failed: "\u041E\u0448\u0438\u0431\u043A\u0430",
   Stopped: "\u041E\u0441\u0442\u0430\u043D\u043E\u0432\u043B\u0435\u043D\u043E",

package/chunks/{run-qwen-serve-ZPKPKECF.js → run-qwen-serve-ZAFIJKJC.js}

@@ -34,7 +34,7 @@ import {
   resolveAcpHttpEnabled,
   setDeferredRuntimeRequestTiming,
   toDaemonStatusMemoryLimits
-} from "./chunk-RGSBTHSU.js";
+} from "./chunk-KAQCJO6Y.js";
 import {
   isLoopbackBind
 } from "./chunk-RXFQM6FQ.js";
@@ -62,26 +62,27 @@ import "./chunk-FC4KQFCS.js";
 import "./chunk-T3CHYWJZ.js";
 import {
   resolveChannelCwd
-} from "./chunk-VWOVHOTT.js";
+} from "./chunk-KJZ26VBX.js";
 import {
+  consumeServeFastPathRejectedLoaderKeys,
   loadServeFastPathSettings,
   preResolveServeFastPathHomeEnvOverrides
-} from "./chunk-D3UEZIQH.js";
+} from "./chunk-4DU3NCHG.js";
 import {
   MAX_REGISTERED_WORKSPACES,
   resolveWorkspaceInputs,
   workspaceRegistrationId
-} from "./chunk-P2AJ7FTI.js";
-import "./chunk-S7CV4KO6.js";
+} from "./chunk-757GB46F.js";
+import "./chunk-TKSZJ5BV.js";
 import {
   LOAD_REPLAY_META_KEY
-} from "./chunk-R574ATRM.js";
+} from "./chunk-M2PNLYGY.js";
 import "./chunk-J26HHFI5.js";
 import {
   canonicalizeWorkspace,
   translateAndCheckAbsoluteWorkspacePath
 } from "./chunk-6PLDPT2C.js";
-import "./chunk-MKVZE4ZJ.js";
+import "./chunk-KTJFU7RT.js";
 import "./chunk-FYJ7W2PI.js";
 import {
   ChannelDeliveryError,
@@ -92,7 +93,7 @@ import {
 import {
   normalizeWorkerDiagnostic,
   sanitizeWorkerDiagnostic
-} from "./chunk-24ER7UV4.js";
+} from "./chunk-UFALT4LK.js";
 import {
   channelSelectionNames
 } from "./chunk-ALMR3E6Q.js";
@@ -103,22 +104,28 @@ import {
   PRIVATE_EXTERNAL_TOOL_GUARD_ENV
 } from "./chunk-BKHCW2BI.js";
 import "./chunk-M5GB774H.js";
-import "./chunk-5HBA2Z7V.js";
+import {
+  MAX_DAEMON_WORKSPACES
+} from "./chunk-5HBA2Z7V.js";
 import {
   sanitizeLogText
-} from "./chunk-DIEFUBV6.js";
+} from "./chunk-DIWZNWZT.js";
 import "./chunk-UDXSXLER.js";
 import "./chunk-GOXKNSDZ.js";
 import {
   getGlobalQwenDirLite,
   resolveConfigPathLite
 } from "./chunk-IDS7MSUP.js";
-import "./chunk-6PEXNQTX.js";
+import {
+  scrubAndReportInheritedLoaderEnv,
+  scrubInheritedLoaderEnv,
+  setLoaderKeyRejectionReporter
+} from "./chunk-UA5H3DS2.js";
 import {
   getCliVersion
-} from "./chunk-FZBZSYKU.js";
+} from "./chunk-FN6YXJOP.js";
 import "./chunk-VJNBRRZG.js";
-import "./chunk-ALGGS7UH.js";
+import "./chunk-NPQ5ZKRP.js";
 import {
   isWithinRoot
 } from "./chunk-MR3PXB6E.js";
@@ -160,6 +167,46 @@ import * as path from "node:path";
 import * as os from "node:os";
 import { monitorEventLoopDelay, performance as performance2 } from "node:perf_hooks";
 
+// packages/acp-bridge/dist/child-heap-policy.js
+init_esbuild_shims();
+
+// packages/acp-bridge/dist/daemon-memory-budget.js
+init_esbuild_shims();
+var MIN_CHILD_HEAP_MB = 512;
+
+// packages/acp-bridge/dist/child-heap-policy.js
+function createChildHeapPolicy(options) {
+  const { budget, mode } = options;
+  let refusals = 0;
+  const admissible = Math.min(Math.floor(budget.childPoolMb / MIN_CHILD_HEAP_MB), MAX_DAEMON_WORKSPACES);
+  const rawCeilingMb = admissible > 0 ? Math.min(Math.floor(budget.childPoolMb / admissible), budget.legacyChildCeilingMb) : null;
+  const modelable = rawCeilingMb !== null && rawCeilingMb >= MIN_CHILD_HEAP_MB;
+  const maxConcurrentChildren = modelable ? admissible : 0;
+  const perChildCeilingMb = modelable ? rawCeilingMb : null;
+  return {
+    decide(concurrentChildren) {
+      if (mode === "off")
+        return { refuse: false };
+      const refuse = concurrentChildren > maxConcurrentChildren;
+      if (refuse)
+        refusals += 1;
+      return { refuse };
+    },
+    snapshot() {
+      const modeled = mode !== "off";
+      return {
+        mode,
+        childPoolMb: budget.childPoolMb,
+        minChildHeapMb: MIN_CHILD_HEAP_MB,
+        maxConcurrentChildren: modeled ? maxConcurrentChildren : null,
+        perChildCeilingMb: modeled ? perChildCeilingMb : null,
+        refusals
+      };
+    }
+  };
+}
+__name(createChildHeapPolicy, "createChildHeapPolicy");
+
 // packages/core/dist/src/memory/scopes.js
 init_esbuild_shims();
 var MEMORY_PROJECT_SCOPES = ["git-root", "workspace"];
@@ -2932,12 +2979,12 @@ var retryableChannelWorkerShutdownErrors = /* @__PURE__ */ new WeakSet();
 var channelWorkerRuntimePromise;
 async function loadChannelWorkerRuntime() {
   channelWorkerRuntimePromise ??= Promise.all([
-    import("./channel-worker-supervisor-62YWUGP2.js"),
-    import("./pidfile-JOIIRN2C.js"),
-    import("./runtime-2FLNNM36.js"),
+    import("./channel-worker-supervisor-5SRD24FG.js"),
+    import("./pidfile-KBFVDNQP.js"),
+    import("./runtime-ZED7CYOZ.js"),
     import("./cli-entry-path-4VJ3Y6T2.js"),
-    import("./channel-worker-group-JWQK224X.js"),
-    import("./channel-worker-manager-77E3OXRQ.js")
+    import("./channel-worker-group-E67EN3RV.js"),
+    import("./channel-worker-manager-SW4C45CF.js")
   ]).then(
     ([
       supervisor,
@@ -3042,7 +3089,7 @@ function shouldPreheatBridge(deps) {
 __name(shouldPreheatBridge, "shouldPreheatBridge");
 var coreRuntimePromise;
 function loadCoreRuntime() {
-  coreRuntimePromise ??= import("./core-runtime-QMJPWHCI.js");
+  coreRuntimePromise ??= import("./core-runtime-DIAU7JMG.js");
   return coreRuntimePromise;
 }
 __name(loadCoreRuntime, "loadCoreRuntime");
@@ -3078,10 +3125,10 @@ __name(resolveDaemonLogBaseDirForRun, "resolveDaemonLogBaseDirForRun");
 var settingsRuntimePromise;
 function loadSettingsRuntimeModules() {
   settingsRuntimePromise ??= Promise.all([
-    import("./settings-KULVPCQC.js"),
-    import("./environment-GJ2HWJOS.js"),
-    import("./loadedSettingsAdapter-QRYRJSWL.js"),
-    import("./trustedFolders-TJ5S26N7.js")
+    import("./settings-V7BR3RKP.js"),
+    import("./environment-NGOWPRZV.js"),
+    import("./loadedSettingsAdapter-FTMRCTOF.js"),
+    import("./trustedFolders-KZCOB53W.js")
   ]).then(([settings, environment, loadedSettingsAdapter, trustedFolders]) => ({
     settings,
     environment,
@@ -3094,8 +3141,8 @@ __name(loadSettingsRuntimeModules, "loadSettingsRuntimeModules");
 var channelWebhookConfigRuntimePromise;
 function loadChannelWebhookConfigRuntime() {
   channelWebhookConfigRuntimePromise ??= Promise.all([
-    import("./runtime-2FLNNM36.js"),
-    import("./config-utils-K7SCOWHD.js")
+    import("./runtime-ZED7CYOZ.js"),
+    import("./config-utils-XQHBJP7G.js")
   ]).then(([channelRuntime, configUtils]) => ({
     loadChannelsConfig: channelRuntime.loadChannelsConfig,
     parseChannelWebhookConfig: configUtils.parseChannelWebhookConfig
@@ -3120,17 +3167,17 @@ async function loadServeRuntimeModules() {
     totalSessionAdmissionModule,
     workspaceRegistryModule
   ] = await Promise.all([
-    import("./server-XLJVLTYM.js"),
-    import("./bridge-NU6YEEHK.js"),
-    import("./spawnChannel-ZKS4Q5OU.js"),
-    import("./process-registry-2CHQBXH5.js"),
-    import("./workspace-service-HFIFDMU7.js"),
+    import("./server-OWMEMAKR.js"),
+    import("./bridge-JENKGFFP.js"),
+    import("./spawnChannel-N6KKUW5B.js"),
+    import("./process-registry-PMJOA5CO.js"),
+    import("./workspace-service-PAMUKMAV.js"),
     import("./types-ML3TRJQ5.js"),
-    import("./daemon-status-provider-FSWDPE2G.js"),
-    import("./workspace-providers-status-HZ474RA4.js"),
-    import("./workspace-skills-status-HAHEIHGK.js"),
-    import("./total-session-admission-MK4SINFK.js"),
-    import("./workspace-registry-R4APRRNC.js")
+    import("./daemon-status-provider-H6O4UQ4F.js"),
+    import("./workspace-providers-status-NYHC7HSR.js"),
+    import("./workspace-skills-status-YQSHCCMS.js"),
+    import("./total-session-admission-D63QYXGO.js"),
+    import("./workspace-registry-CDAS5TVZ.js")
   ]);
   return {
     createServeApp: serverModule.createServeApp,
@@ -3515,6 +3562,9 @@ function createBootstrapServeApp(input) {
         channelIdleTimeoutMs: channelIdleTimeoutMs(opts.channelIdleTimeoutMs),
         sessionIdleTimeoutMs: sessionIdleTimeoutMs(opts.sessionIdleTimeoutMs),
         acpConnectionCap: null,
+        // No child-heap policy during bootstrap: it is built with the
+        // runtime, so `enforced` is correctly false and `childHeap` null in
+        // this window even when the flag says `enforce`.
         memory: toDaemonStatusMemoryLimits(opts.daemonMemoryBudget)
       },
       capabilities: {
@@ -3767,6 +3817,7 @@ __name(validateAndCanonicalizeWorkspaceInput, "validateAndCanonicalizeWorkspaceI
 async function runQwenServe(optsIn, deps = {}) {
   let daemonLog;
   let owner = "startup";
+  let restoreScrubbedLoaderEnv;
   try {
     return await runQwenServeImpl(optsIn, deps, {
       initialized: /* @__PURE__ */ __name((logger) => {
@@ -3777,9 +3828,15 @@ async function runQwenServe(optsIn, deps = {}) {
       }, "published"),
       signalOwned: /* @__PURE__ */ __name(() => {
         if (owner === "startup") owner = "signal";
-      }, "signalOwned")
+      }, "signalOwned"),
+      scrubApplied: /* @__PURE__ */ __name((restore) => {
+        restoreScrubbedLoaderEnv = restore;
+      }, "scrubApplied")
     });
   } catch (error) {
+    if (daemonLog) {
+      setLoaderKeyRejectionReporter(void 0);
+    }
     if (daemonLog && owner === "startup") {
       const startupLog = daemonLog;
       writeDaemonLifecycleBestEffort(
@@ -3790,6 +3847,7 @@ async function runQwenServe(optsIn, deps = {}) {
       );
       await startupLog.close();
     }
+    restoreScrubbedLoaderEnv?.();
     throw error;
   }
 }
@@ -3815,12 +3873,31 @@ async function runQwenServeImpl(optsIn, deps, loggerLifecycle) {
     );
   }
   preResolveServeFastPathHomeEnvOverrides();
-  const daemonRuntimeBaseEnv = Object.freeze({
+  const launchEnv = { ...process.env };
+  const baseEnv = {
     ...process.env,
     ...optsIn.memoryProjectScope !== void 0 ? {
       QWEN_CODE_MEMORY_PROJECT_SCOPE: optsIn.memoryProjectScope
     } : {}
-  });
+  };
+  if (process.env["DEV"] !== "true") {
+    scrubInheritedLoaderEnv(baseEnv);
+  }
+  const daemonRuntimeBaseEnv = Object.freeze(baseEnv);
+  const scrubbedLoaderEnvKeys = scrubAndReportInheritedLoaderEnv(
+    process.env,
+    "qwen serve",
+    "daemon"
+  );
+  const restoreScrubbedLoaderEnv = /* @__PURE__ */ __name(() => {
+    for (const key of scrubbedLoaderEnvKeys) {
+      if (Object.hasOwn(process.env, key)) continue;
+      const value = launchEnv[key];
+      if (value === void 0) continue;
+      process.env[key] = value;
+    }
+  }, "restoreScrubbedLoaderEnv");
+  loggerLifecycle.scrubApplied(restoreScrubbedLoaderEnv);
   const rawToken = optsIn.token ?? process.env[QWEN_SERVER_TOKEN_ENV];
   const token = typeof rawToken === "string" && rawToken.trim().length > 0 ? rawToken.trim() : void 0;
   const channelDeliveryDiagnosticRedaction = {
@@ -4054,7 +4131,7 @@ async function runQwenServeImpl(optsIn, deps, loggerLifecycle) {
   }
   let workspaceRegistrationStore = deps.workspaceRegistrationStore;
   if (workspaceRegistrationStore === void 0 && process.env["QWEN_SERVE_NO_PERSISTENT_REGISTRATION"] !== "1") {
-    const { WorkspaceRegistrationStore } = await import("./workspace-registration-store-6EUP4JXG.js");
+    const { WorkspaceRegistrationStore } = await import("./workspace-registration-store-AKEB7OMW.js");
     workspaceRegistrationStore = new WorkspaceRegistrationStore(boundWorkspace);
   }
   if (workspaceRegistrationStore) {
@@ -4153,6 +4230,25 @@ async function runQwenServeImpl(optsIn, deps, loggerLifecycle) {
     baseDir: daemonLogBaseDir
   });
   loggerLifecycle.initialized(daemonLog);
+  setLoaderKeyRejectionReporter((source, freshKeys) => {
+    daemonLog.warn(
+      "rejected loader-affecting env keys; they were not applied",
+      { source, rejectedKeys: freshKeys }
+    );
+  });
+  if (scrubbedLoaderEnvKeys.length > 0) {
+    daemonLog.info(
+      "scrubbed inherited loader env vars from the daemon process; session subprocesses will not inherit them",
+      { removedKeys: scrubbedLoaderEnvKeys }
+    );
+  }
+  const fastPathRejectedLoaderKeys = consumeServeFastPathRejectedLoaderKeys();
+  if (fastPathRejectedLoaderKeys.length > 0) {
+    daemonLog.info(
+      "rejected loader-affecting env keys during serve fast-path boot; they were not applied to the daemon process",
+      { rejectedKeys: fastPathRejectedLoaderKeys }
+    );
+  }
   let loggerPublished = false;
   let loggerSignalOwned = false;
   writeStderrLine(
@@ -4326,6 +4422,7 @@ async function runQwenServeImpl(optsIn, deps, loggerLifecycle) {
   let runtimeAppForCleanup;
   let bridgeRef = deps.bridge;
   let managedProcessRegistry;
+  let managedChildHeapPolicy;
   const internalRuntimeBridgesForCleanup = [];
   let daemonEventLoopMonitor;
   let daemonMetricsSampler;
@@ -4592,7 +4689,7 @@ async function runQwenServeImpl(optsIn, deps, loggerLifecycle) {
       loadCoreRuntime(),
       loadSettingsRuntimeModules(),
       cliVersionPromise,
-      import("./daemon-trust-policy-P5L5VFAY.js")
+      import("./daemon-trust-policy-BNUXG6MT.js")
     ]);
     cliVersion = resolvedCliVersion;
     settingsRuntime.environment.preResolveHomeEnvOverrides();
@@ -4870,6 +4967,11 @@ async function runQwenServeImpl(optsIn, deps, loggerLifecycle) {
     const runWorkspaceTrustOperation = /* @__PURE__ */ __name((operation) => workspaceTrustOperationGate.runExclusive("runtime-topology", operation), "runWorkspaceTrustOperation");
     const processRegistry = new runtime.ProcessRegistry();
     managedProcessRegistry = processRegistry;
+    const childHeapPolicy = opts.daemonMemoryBudget && !deps.bridge ? createChildHeapPolicy({
+      budget: opts.daemonMemoryBudget,
+      mode: opts.childHeapMode ?? "observe"
+    }) : void 0;
+    managedChildHeapPolicy = childHeapPolicy;
     const fsFactory = runtime.resolveBridgeFsFactory({
       // Secondary roots share a write-capable factory only after their own
       // folder trust check passes; untrusted secondary roots stay outside.
@@ -4893,6 +4995,7 @@ async function runQwenServeImpl(optsIn, deps, loggerLifecycle) {
     });
     const channelFactory = runtime.createSpawnChannelFactory({
       processRegistry,
+      childHeapPolicy,
       sourceEnv: runtimeEffectiveEnv,
       onDiagnosticLine: diagnosticSink,
       pipeHooks: {
@@ -4958,7 +5061,7 @@ async function runQwenServeImpl(optsIn, deps, loggerLifecycle) {
         resolveSkillSettings,
         skillSettingStrings,
         updateWorkspaceSkillSettingLists
-      } = await import("./skill-settings-NMY4JEJC.js");
+      } = await import("./skill-settings-HWJLTU7M.js");
       const fresh = loadSettingsForPersistence(workspace);
       const normalizedName = skillName.trim().toLowerCase();
       const resolved = resolveSkillSettings(fresh);
@@ -5057,7 +5160,7 @@ async function runQwenServeImpl(optsIn, deps, loggerLifecycle) {
         );
       }
     }), "persistSettingsFn");
-    const { createSubSessionLauncher } = await import("./create-sub-session-DJE6XICH.js");
+    const { createSubSessionLauncher } = await import("./create-sub-session-HDPD6HOA.js");
     const subSessionLauncher = createSubSessionLauncher({
       getBridge: /* @__PURE__ */ __name(() => bridgeRef, "getBridge"),
       boundWorkspace,
@@ -5106,6 +5209,7 @@ async function runQwenServeImpl(optsIn, deps, loggerLifecycle) {
       ...permissionConsensusQuorum !== void 0 ? { permissionConsensusQuorum } : {},
       permissionAudit: permissionAuditPublisher,
       statusProvider,
+      delegateReadTextFileToClient: false,
       fileSystem: createBridgeFileSystemAdapter(fsFactory),
       persistApprovalMode: /* @__PURE__ */ __name((workspace, mode) => withSettingsLock(workspace, async () => {
         primaryGenerationGuard.assertOpen();
@@ -5346,6 +5450,7 @@ async function runQwenServeImpl(optsIn, deps, loggerLifecycle) {
       });
       const secondaryChannelFactory = runtime.createSpawnChannelFactory({
         processRegistry,
+        childHeapPolicy,
         sourceEnv: secondaryEnv.effectiveEnv,
         onDiagnosticLine: diagnosticSink,
         pipeHooks: {
@@ -5409,6 +5514,7 @@ async function runQwenServeImpl(optsIn, deps, loggerLifecycle) {
         } : {},
         permissionAudit: permissionAuditPublisher,
         statusProvider: secondaryStatusProvider,
+        delegateReadTextFileToClient: false,
         fileSystem: createBridgeFileSystemAdapter(secondaryBridgeFsFactory),
         persistApprovalMode: /* @__PURE__ */ __name((workspace, mode) => withSettingsLock(workspace, async () => {
           secondaryGenerationGuard.assertOpen();
@@ -5581,11 +5687,14 @@ async function runQwenServeImpl(optsIn, deps, loggerLifecycle) {
         const primaryRuntimeBridge = primaryEntry.state === "active" ? primaryEntry.current?.runtime.bridge : void 0;
         const child = primaryRuntimeBridge?.getChildResourceSnapshot?.();
         if (runtime.getActiveSseCount() > 0 || (acp?.wsStreams ?? 0) > 0) {
-          void primaryRuntimeBridge?.refreshChildResource?.().catch((err) => {
-            daemonLog.warn(
-              `ACP child resource refresh failed: ${err instanceof Error ? err.message : String(err)}`
-            );
-          });
+          for (const managed of workspaceRegistry.listManaged()) {
+            void managed.bridge.refreshChildResource?.().catch((err) => {
+              daemonLog.warn("ACP child resource refresh failed", {
+                workspaceId: managed.workspaceId,
+                error: err instanceof Error ? err.message : String(err)
+              });
+            });
+          }
         }
         metricsRing.sample(nowMs, {
           cpuPercent,
@@ -5690,6 +5799,7 @@ async function runQwenServeImpl(optsIn, deps, loggerLifecycle) {
       }) : wsFsFactory;
       const wsChannelFactory = runtime.createSpawnChannelFactory({
         processRegistry,
+        childHeapPolicy,
         sourceEnv: wsEnv.effectiveEnv,
         onDiagnosticLine: diagnosticSink,
         pipeHooks: {
@@ -5766,6 +5876,7 @@ async function runQwenServeImpl(optsIn, deps, loggerLifecycle) {
           statusProvider: runtime.createDaemonStatusProvider({
             env: wsEnv.effectiveEnv
           }),
+          delegateReadTextFileToClient: false,
           fileSystem: createBridgeFileSystemAdapter(wsFsFactory),
           persistApprovalMode: /* @__PURE__ */ __name((workspace, mode) => withSettingsLock(workspace, async () => {
             generationGuard.assertOpen();
@@ -6195,8 +6306,8 @@ async function runQwenServeImpl(optsIn, deps, loggerLifecycle) {
           { createChannelManagementService },
           { WorkspaceChannelSettingsStore }
         ] = await Promise.all([
-          import("./channel-management-service-FSQ7SHYI.js"),
-          import("./channel-settings-store-35VQVUVV.js")
+          import("./channel-management-service-DDWUPHMU.js"),
+          import("./channel-settings-store-SA6JZSPH.js")
         ]);
         return createChannelManagementService({
           workspaceCwd: targetRuntime.workspaceCwd,
@@ -6329,6 +6440,7 @@ async function runQwenServeImpl(optsIn, deps, loggerLifecycle) {
       }), "getPerfSnapshot"),
       getMetricsSeries: /* @__PURE__ */ __name(() => metricsRing.snapshot(), "getMetricsSeries"),
       getTotalSessionAdmissionSnapshot: totalSessionAdmission.snapshot,
+      getChildHeapPolicySnapshot: /* @__PURE__ */ __name(() => managedChildHeapPolicy?.snapshot(), "getChildHeapPolicySnapshot"),
       recordDaemonRequest: /* @__PURE__ */ __name((durationMs, statusCode) => metricsRing.recordRequest(durationMs, statusCode), "recordDaemonRequest"),
       workspace: workspaceService,
       // Reverse tool channel (#5626): the SAME registry wired into `bridge` above,
@@ -6394,8 +6506,8 @@ async function runQwenServeImpl(optsIn, deps, loggerLifecycle) {
         { createWorkspaceTrustReconciler },
         { createDaemonTrustPolicyMonitor }
       ] = await Promise.all([
-        import("./workspace-trust-reconciler-65GTAGDK.js"),
-        import("./daemon-trust-policy-monitor-73JYN6ET.js")
+        import("./workspace-trust-reconciler-RPTXOIY2.js"),
+        import("./daemon-trust-policy-monitor-E4EQ7GF4.js")
       ]);
       const materializationFor = /* @__PURE__ */ __name((entry, snapshot, decision) => {
         const boundWorkspaces2 = entry.primary && decision.targetTrusted ? runtime.resolveBoundWorkspacesFromIdeEnv(
@@ -6610,7 +6722,7 @@ async function runQwenServeImpl(optsIn, deps, loggerLifecycle) {
     );
   }
   const channelValidationSettingsRuntime = opts.channelSelection ? await loadSettingsRuntimeModules() : void 0;
-  const channelValidationTrustPolicy = opts.channelSelection ? await import("./daemon-trust-policy-P5L5VFAY.js") : void 0;
+  const channelValidationTrustPolicy = opts.channelSelection ? await import("./daemon-trust-policy-BNUXG6MT.js") : void 0;
   const channelValidationTrustSnapshot = channelValidationTrustPolicy ? await channelValidationTrustPolicy.readDaemonTrustPolicySnapshot() : void 0;
   const resolveChannelWorkspaceGroupsAtListen = /* @__PURE__ */ __name(() => {
     if (!opts.channelSelection || !channelValidationSettingsRuntime || !channelRuntime) {
@@ -7441,8 +7553,10 @@ async function runQwenServeImpl(optsIn, deps, loggerLifecycle) {
                       daemonLog.info("daemon stopped");
                     }
                   });
+                  setLoaderKeyRejectionReporter(void 0);
                   await daemonLog.close();
                 }
+                restoreScrubbedLoaderEnv();
                 if (finalErr) rej(finalErr);
                 else res();
               });
@@ -7708,11 +7822,11 @@ export {
 };
 /**
  * @license
- * Copyright 2025 Qwen Team
+ * Copyright 2026 Qwen Team
  * SPDX-License-Identifier: Apache-2.0
  */
 /**
  * @license
- * Copyright 2026 Qwen Team
+ * Copyright 2025 Qwen Team
  * SPDX-License-Identifier: Apache-2.0
  */

package/chunks/{runtime-2FLNNM36.js → runtime-ZED7CYOZ.js}

@@ -17,40 +17,40 @@ import {
   resolveExtensionChannelEntrySpecifier,
   selectFirstModel,
   sessionsPath
-} from "./chunk-EUQTXRKZ.js";
-import "./chunk-OHJLEW5J.js";
+} from "./chunk-E4ZBKMSF.js";
+import "./chunk-QQWD7LZV.js";
 import "./chunk-57OAHC2Y.js";
-import "./chunk-ZXU5UHMI.js";
-import "./chunk-VWOVHOTT.js";
-import "./chunk-IUFV6FYU.js";
+import "./chunk-QXVSWG66.js";
+import "./chunk-KJZ26VBX.js";
+import "./chunk-NGYI5EF5.js";
 import "./chunk-V6WHFGST.js";
-import "./chunk-DIEFUBV6.js";
+import "./chunk-DIWZNWZT.js";
 import "./chunk-UDXSXLER.js";
-import "./chunk-PQBHU2IA.js";
+import "./chunk-OHKJVAKG.js";
 import "./chunk-RKUWKYED.js";
 import "./chunk-GOXKNSDZ.js";
 import "./chunk-IDS7MSUP.js";
-import "./chunk-DBOFL3LQ.js";
-import "./chunk-VOARQPTA.js";
-import "./chunk-6PEXNQTX.js";
-import "./chunk-6XU3PH66.js";
-import "./chunk-ALGGS7UH.js";
+import "./chunk-PG62DFWD.js";
+import "./chunk-B52AWKBB.js";
+import "./chunk-UA5H3DS2.js";
+import "./chunk-HA3SAB64.js";
+import "./chunk-NPQ5ZKRP.js";
 import "./chunk-MR3PXB6E.js";
-import "./chunk-Y7E5LNLO.js";
+import "./chunk-GXSNGY5M.js";
 import "./chunk-GOFAQQZA.js";
 import "./chunk-5M6IDOMF.js";
 import "./chunk-TWPJO254.js";
 import "./chunk-H6XPXXMH.js";
-import "./chunk-CNIID3TV.js";
+import "./chunk-2UUMVNYT.js";
 import "./chunk-MVUQRLOH.js";
 import "./chunk-XCWO3SMQ.js";
 import "./chunk-7MH4J33A.js";
 import "./chunk-6PVPNMXU.js";
-import "./chunk-RMH5OWLD.js";
+import "./chunk-VXZ5HAOV.js";
 import "./chunk-IRH27ZC2.js";
 import "./chunk-QHWCP53L.js";
 import "./chunk-GNPNYXJB.js";
-import "./chunk-Y4NGLFGJ.js";
+import "./chunk-HUWENAHO.js";
 import "./chunk-O6GEWCJA.js";
 import "./chunk-T26EAKDL.js";
 import "./chunk-ZPJWUGCS.js";
@@ -59,37 +59,41 @@ import "./chunk-J6SZID63.js";
 import "./chunk-KRXPRVGL.js";
 import "./chunk-GM463R2B.js";
 import "./chunk-SEZ556DZ.js";
-import "./chunk-CJXIIILK.js";
-import "./chunk-3K7FH2KQ.js";
-import "./chunk-BVWVWGLE.js";
+import "./chunk-2FRY5CRX.js";
+import "./chunk-67N6HB5H.js";
+import "./chunk-WAUGQKUU.js";
+import "./chunk-PLFATELK.js";
+import "./chunk-L4N6TIP7.js";
+import "./chunk-SAH4BD2J.js";
+import "./chunk-CPG6P4GG.js";
 import "./chunk-S6LOFUVP.js";
-import "./chunk-LZC3B5N2.js";
+import "./chunk-2J3OJGTL.js";
+import "./chunk-IA7TGCN2.js";
 import "./chunk-K623ENWT.js";
 import "./chunk-AQ37AY7B.js";
 import "./chunk-EQL65XGA.js";
-import "./chunk-IIJEYBNH.js";
-import "./chunk-22NBYCPD.js";
+import "./chunk-3P2LV43B.js";
 import "./chunk-NAVJD2PQ.js";
-import "./chunk-3ULCB3NE.js";
-import "./chunk-BGG4MBYD.js";
+import "./chunk-HV76SFIA.js";
+import "./chunk-4PYCZH2V.js";
+import "./chunk-P3QQPMQA.js";
+import "./chunk-SR7RZ4MS.js";
+import "./chunk-M6HMMKVG.js";
 import "./chunk-DGEIYUC3.js";
 import "./chunk-MPHPFVKK.js";
 import "./chunk-AXMWHKXA.js";
-import "./chunk-DJ2GSRLV.js";
-import "./chunk-33ACCIIY.js";
-import "./chunk-L4N6TIP7.js";
-import "./chunk-2J3OJGTL.js";
-import "./chunk-P3QQPMQA.js";
-import "./chunk-M6HMMKVG.js";
 import "./chunk-GLCZKT5V.js";
+import "./chunk-DJ2GSRLV.js";
 import "./chunk-EI3HZX6C.js";
-import "./chunk-2U3WZGZG.js";
+import "./chunk-3PY4LPJF.js";
 import "./chunk-WOJZWRAZ.js";
 import "./chunk-VGC4I5JJ.js";
 import "./chunk-FVKHVJZQ.js";
-import "./chunk-NG2R4N5O.js";
-import "./chunk-IC4Z6LX6.js";
-import "./chunk-6EOI4HOK.js";
+import "./chunk-COBO5EBO.js";
+import "./chunk-6ZRFAKXK.js";
+import "./chunk-PYQADEFD.js";
+import "./chunk-M3STHEMM.js";
+import "./chunk-F6WFNA7U.js";
 import "./chunk-46UV252V.js";
 import "./chunk-ZBVS26BY.js";
 import "./chunk-KKBPOU75.js";