@qwen-code/qwen-code 0.22.2 → 0.22.3

package/chunks/{run-qwen-serve-TPHZMSXJ.js → run-qwen-serve-5X6IDZER.js}

@@ -3,12 +3,12 @@
 import {
   computeCpuPercent
 } from "./chunk-LBOVL47Y.js";
-import {
-  RUNTIME_STARTUP_CANCELLED_MESSAGE
-} from "./chunk-QUPXZXLV.js";
 import {
   resolveServeToken
 } from "./chunk-ZELCTN6Y.js";
+import {
+  RUNTIME_STARTUP_CANCELLED_MESSAGE
+} from "./chunk-QUPXZXLV.js";
 import {
   ACCESS_LOG_CONTROLLER_LOCAL,
   CAPABILITIES_SCHEMA_VERSION,
@@ -38,25 +38,31 @@ import {
   positiveFiniteOrNull,
   prepareManagedScratchRoot,
   resolveAcpHttpEnabled,
-  setDeferredRuntimeRequestTiming,
   toDaemonStatusMemoryLimits
-} from "./chunk-F6FV3C5K.js";
+} from "./chunk-4NDLQAY2.js";
 import {
   ConversationDirectoryIdentityError,
   assertExactConversationRootIdentity,
   createConversationRootIdentity,
+  getConversationDirectoryName,
+  getConversationStagedDirectoryName,
   inspectConversationDirectoryIdentity,
+  inspectConversationStagedDirectoryIdentity,
+  isSameConversationDirectoryObject,
   materializeConversationDirectoryIdentity,
   revalidateConversationRootIdentity
-} from "./chunk-T3WXYEZ4.js";
+} from "./chunk-U54AYGEC.js";
+import {
+  isLoopbackBind
+} from "./chunk-RXFQM6FQ.js";
 import {
   formatMemoryBudgetStderr,
   resolveDaemonMemoryBudget,
   serveJournalGrowthPoolMb
 } from "./chunk-UXEO7E3V.js";
 import {
-  isLoopbackBind
-} from "./chunk-RXFQM6FQ.js";
+  setDeferredRuntimeRequestTiming
+} from "./chunk-SEONHUS3.js";
 import {
   normalizeSessionIdForLookup
 } from "./chunk-ZEZKIS2K.js";
@@ -81,7 +87,7 @@ import {
 } from "./chunk-FBX2SDQ4.js";
 import {
   resolveChannelCwd
-} from "./chunk-7JPW6IYH.js";
+} from "./chunk-HVC3PNVC.js";
 import {
   LIVE_HOST_PROTOCOL_VERSION
 } from "./chunk-NKLP3DCK.js";
@@ -92,13 +98,13 @@ import {
   consumeServeFastPathRejectedLoaderKeys,
   loadServeFastPathSettings,
   preResolveServeFastPathHomeEnvOverrides
-} from "./chunk-TWSKM647.js";
+} from "./chunk-T7KMERIX.js";
 import {
   MAX_REGISTERED_WORKSPACES,
   resolveWorkspaceInputs,
   workspaceRegistrationId
-} from "./chunk-77RG5SFQ.js";
-import "./chunk-43UYNAWX.js";
+} from "./chunk-TEBDFQBZ.js";
+import "./chunk-G6FECKTJ.js";
 import {
   LOAD_REPLAY_META_KEY
 } from "./chunk-OZ6KS6KW.js";
@@ -110,22 +116,22 @@ import {
 import {
   ExtraCaInspectionError,
   loadableCertificates
-} from "./chunk-4HV6HH33.js";
+} from "./chunk-ISKH4QX3.js";
 import "./chunk-FYJ7W2PI.js";
 import "./chunk-Z7B6SRPM.js";
 import {
   ChannelWebhookEnqueueError
 } from "./chunk-STUJ7IMZ.js";
+import {
+  QWEN_SERVER_TOKEN_ENV
+} from "./chunk-GYTKQYDB.js";
 import {
   normalizeWorkerDiagnostic,
   sanitizeWorkerDiagnostic
-} from "./chunk-JVPFTDBK.js";
+} from "./chunk-RFIDDFAL.js";
 import {
   channelSelectionNames
 } from "./chunk-ALMR3E6Q.js";
-import {
-  QWEN_SERVER_TOKEN_ENV
-} from "./chunk-GYTKQYDB.js";
 import {
   ChannelDeliveryError,
   isChannelDeliveryError
@@ -144,7 +150,7 @@ import {
 } from "./chunk-5HBA2Z7V.js";
 import {
   sanitizeLogText
-} from "./chunk-E55H6BZ7.js";
+} from "./chunk-ICURCKIU.js";
 import "./chunk-IW6RQPQB.js";
 import "./chunk-GOXKNSDZ.js";
 import {
@@ -156,10 +162,10 @@ import {
   clearLoaderKeyRejectionReporterIfCurrent,
   scrubInheritedLoaderEnv,
   setLoaderKeyRejectionReporter
-} from "./chunk-5PA6UEYA.js";
+} from "./chunk-MZCJWS5Y.js";
 import {
   getCliVersion
-} from "./chunk-7UYV53BC.js";
+} from "./chunk-Q2MSPKIJ.js";
 import "./chunk-W3N5XAZ6.js";
 import "./chunk-NPQ5ZKRP.js";
 import {
@@ -182,7 +188,7 @@ import "./chunk-JVEGA3MM.js";
 import {
   writeStderrLine,
   writeStdoutLine
-} from "./chunk-KGJGEEVR.js";
+} from "./chunk-7FA2II6K.js";
 import "./chunk-DMTGGOSA.js";
 import "./chunk-YQ3U5MUC.js";
 import {
@@ -620,11 +626,11 @@ async function ensureRealDirectory(fs2, dirPath, mutationAllowed = () => true) {
 __name(ensureRealDirectory, "ensureRealDirectory");
 async function activeFileSize(fs2, activePath) {
   try {
-    const stat = await fs2.lstat(activePath);
-    if (!stat.isFile() || stat.isSymbolicLink()) {
+    const stat2 = await fs2.lstat(activePath);
+    if (!stat2.isFile() || stat2.isSymbolicLink()) {
       throw new Error(`${activePath} is not a regular file`);
     }
-    return stat.size;
+    return stat2.size;
   } catch (error) {
     if (isErrno(error, "ENOENT")) return 0;
     throw error;
@@ -1045,8 +1051,8 @@ __name(closeFallbackFamily, "closeFallbackFamily");
 async function cleanupFallbacksBestEffort(input) {
   const runsDir = nodePath.join(input.daemonDir, "runs");
   try {
-    const stat = await input.fs.lstat(runsDir);
-    if (!stat.isDirectory() || stat.isSymbolicLink()) {
+    const stat2 = await input.fs.lstat(runsDir);
+    if (!stat2.isDirectory() || stat2.isSymbolicLink()) {
       throw new Error(`${runsDir} is not a real directory`);
     }
   } catch (error) {
@@ -1768,9 +1774,10 @@ __name(initDaemonLogger, "initDaemonLogger");
 
 // packages/cli/src/serve/conversations/conversation-workspace.ts
 init_esbuild_shims();
-import { readdir, rmdir } from "node:fs/promises";
+import { constants as fsConstants } from "node:fs";
+import { open, readdir, rename, rm, rmdir, stat } from "node:fs/promises";
 import { homedir } from "node:os";
-import { resolve } from "node:path";
+import { join as join2, resolve } from "node:path";
 function liveIdentityError(error, exactRoot = false, creatingRoot = false) {
   if (!(error instanceof ConversationDirectoryIdentityError)) throw error;
   if (error.reason === "io_error" && error.cause !== void 0) {
@@ -2012,6 +2019,171 @@ var ConversationWorkspace = class {
       throw error;
     }
   }
+  async inspectStandaloneDeletionPaths(storageSessionId, expected) {
+    const root = await this.revalidateStandaloneRoot();
+    try {
+      const normal = await inspectConversationDirectoryIdentity(
+        root,
+        storageSessionId
+      );
+      const staged = await inspectConversationStagedDirectoryIdentity(
+        root,
+        storageSessionId
+      );
+      if (normal && staged) {
+        throw new ConversationDirectoryIdentityError(
+          "child",
+          "unexpected_identity"
+        );
+      }
+      const identity = normal ?? staged;
+      if (identity && expected && !isSameConversationDirectoryObject(identity, expected)) {
+        throw new ConversationDirectoryIdentityError(
+          "child",
+          "unexpected_identity"
+        );
+      }
+      if (normal) return { status: "normal", identity: normal };
+      if (staged) return { status: "staged", identity: staged };
+      return { status: "absent" };
+    } catch (error) {
+      if (error instanceof ConversationDirectoryIdentityError && error.scope === "child") {
+        return { status: "compromised", error };
+      }
+      throw error;
+    }
+  }
+  async createStandaloneDeletionExpectation(storageSessionId, recorded) {
+    if (recorded.inodeVerifiable !== (recorded.inode !== 0)) {
+      throw new ConversationDirectoryIdentityError(
+        "child",
+        "unexpected_identity"
+      );
+    }
+    const root = await this.revalidateStandaloneRoot();
+    const name = getConversationDirectoryName(storageSessionId);
+    return {
+      root,
+      storageSessionId,
+      name,
+      canonicalPath: join2(root.canonicalRoot, name),
+      device: recorded.device,
+      inode: recorded.inode
+    };
+  }
+  async stageStandaloneDirectory(storageSessionId, expected) {
+    const inspected = await this.inspectStandaloneDeletionPaths(
+      storageSessionId,
+      expected
+    );
+    if (inspected.status === "compromised") throw inspected.error;
+    if (inspected.status !== "normal") {
+      throw new ConversationDirectoryIdentityError("child", "identity_changed");
+    }
+    const root = await this.revalidateStandaloneRoot();
+    await rename(
+      inspected.identity.canonicalPath,
+      join2(
+        root.canonicalRoot,
+        getConversationStagedDirectoryName(storageSessionId)
+      )
+    );
+    await revalidateConversationRootIdentity(root);
+    const staged = await inspectConversationStagedDirectoryIdentity(
+      root,
+      storageSessionId
+    );
+    if (!staged || !isSameConversationDirectoryObject(staged, inspected.identity)) {
+      throw new ConversationDirectoryIdentityError("child", "identity_changed");
+    }
+    await this.syncStandaloneRoot(root);
+    return staged;
+  }
+  async restoreStagedStandaloneDirectory(storageSessionId, expected) {
+    const inspected = await this.inspectStandaloneDeletionPaths(
+      storageSessionId,
+      expected
+    );
+    if (inspected.status === "compromised") throw inspected.error;
+    if (inspected.status !== "staged") {
+      throw new ConversationDirectoryIdentityError("child", "identity_changed");
+    }
+    const root = await this.revalidateStandaloneRoot();
+    await rename(
+      inspected.identity.canonicalPath,
+      join2(root.canonicalRoot, getConversationDirectoryName(storageSessionId))
+    );
+    await revalidateConversationRootIdentity(root);
+    const restored = await inspectConversationDirectoryIdentity(
+      root,
+      storageSessionId
+    );
+    if (!restored || !isSameConversationDirectoryObject(restored, inspected.identity)) {
+      throw new ConversationDirectoryIdentityError("child", "identity_changed");
+    }
+    await this.syncStandaloneRoot(root);
+    return restored;
+  }
+  async removeStagedStandaloneDirectory(storageSessionId, expected) {
+    const inspected = await this.inspectStandaloneDeletionPaths(
+      storageSessionId,
+      expected
+    );
+    if (inspected.status === "compromised") throw inspected.error;
+    if (inspected.status !== "staged") {
+      throw new ConversationDirectoryIdentityError("child", "identity_changed");
+    }
+    const confirmed = await inspectConversationStagedDirectoryIdentity(
+      inspected.identity.root,
+      storageSessionId
+    );
+    if (!confirmed || !isSameConversationDirectoryObject(confirmed, inspected.identity)) {
+      throw new ConversationDirectoryIdentityError("child", "identity_changed");
+    }
+    await rm(confirmed.canonicalPath, { recursive: true });
+    await this.syncStandaloneRoot(confirmed.root);
+  }
+  async confirmStandaloneRootDurability(root) {
+    await this.syncStandaloneRoot(root);
+  }
+  async syncStandaloneRoot(root) {
+    await revalidateConversationRootIdentity(root);
+    let handle;
+    try {
+      handle = await open(
+        root.canonicalRoot,
+        fsConstants.O_RDONLY | (process.platform === "win32" ? 0 : fsConstants.O_NOFOLLOW ?? 0)
+      );
+      const stats = await handle.stat();
+      const inodeVerifiable = Number.isSafeInteger(stats.ino) && stats.ino > 0;
+      if (!stats.isDirectory() || stats.dev !== root.device || inodeVerifiable !== root.inodeVerifiable || root.inodeVerifiable && stats.ino !== root.inode) {
+        throw new ConversationDirectoryIdentityError(
+          "root",
+          "identity_changed"
+        );
+      }
+      try {
+        await handle.sync();
+      } catch (error) {
+        if (process.platform !== "win32" || !["EACCES", "EINVAL", "EPERM"].includes(
+          error.code ?? ""
+        )) {
+          throw error;
+        }
+      }
+      const current = await stat(root.canonicalRoot);
+      const currentInodeVerifiable = Number.isSafeInteger(current.ino) && current.ino > 0;
+      if (!current.isDirectory() || current.dev !== root.device || currentInodeVerifiable !== root.inodeVerifiable || root.inodeVerifiable && current.ino !== root.inode) {
+        throw new ConversationDirectoryIdentityError(
+          "root",
+          "identity_changed"
+        );
+      }
+    } finally {
+      await handle?.close().catch(() => void 0);
+    }
+    await revalidateConversationRootIdentity(root);
+  }
 };
 
 // packages/cli/src/serve/daemon-metrics-ring.ts
@@ -3566,12 +3738,12 @@ __name(hasRetryableChannelWorkerShutdownError, "hasRetryableChannelWorkerShutdow
 var channelWorkerRuntimePromise;
 async function loadChannelWorkerRuntime() {
   channelWorkerRuntimePromise ??= Promise.all([
-    import("./channel-worker-supervisor-UEW2WWCC.js"),
-    import("./pidfile-JMF2CLMY.js"),
-    import("./runtime-TTIGSBM4.js"),
+    import("./channel-worker-supervisor-FKU7DIHJ.js"),
+    import("./pidfile-QOIQZFT2.js"),
+    import("./runtime-HK27GMPF.js"),
     import("./cli-entry-path-4VJ3Y6T2.js"),
-    import("./channel-worker-group-27HMGD5S.js"),
-    import("./channel-worker-manager-QEGX646Z.js")
+    import("./channel-worker-group-6NA6BBZV.js"),
+    import("./channel-worker-manager-NEZ2J6RK.js")
   ]).then(
     ([
       supervisor,
@@ -3677,7 +3849,7 @@ function shouldPreheatBridge(deps) {
 __name(shouldPreheatBridge, "shouldPreheatBridge");
 var coreRuntimePromise;
 function loadCoreRuntime() {
-  coreRuntimePromise ??= import("./core-runtime-677KFX6Q.js");
+  coreRuntimePromise ??= import("./core-runtime-AXB6SK5D.js");
   return coreRuntimePromise;
 }
 __name(loadCoreRuntime, "loadCoreRuntime");
@@ -3713,10 +3885,10 @@ __name(resolveDaemonLogBaseDirForRun, "resolveDaemonLogBaseDirForRun");
 var settingsRuntimePromise;
 function loadSettingsRuntimeModules() {
   settingsRuntimePromise ??= Promise.all([
-    import("./settings-VOZYKLTT.js"),
-    import("./environment-MOZMPUHR.js"),
-    import("./loadedSettingsAdapter-7Y7IEI6T.js"),
-    import("./trustedFolders-7OCNMUQE.js")
+    import("./settings-L6N54CU6.js"),
+    import("./environment-UANTR7A4.js"),
+    import("./loadedSettingsAdapter-KJCLZ3C4.js"),
+    import("./trustedFolders-FATSC4YI.js")
   ]).then(([settings, environment, loadedSettingsAdapter, trustedFolders]) => ({
     settings,
     environment,
@@ -3729,8 +3901,8 @@ __name(loadSettingsRuntimeModules, "loadSettingsRuntimeModules");
 var channelWebhookConfigRuntimePromise;
 function loadChannelWebhookConfigRuntime() {
   channelWebhookConfigRuntimePromise ??= Promise.all([
-    import("./runtime-TTIGSBM4.js"),
-    import("./config-utils-BBOCOGZW.js")
+    import("./runtime-HK27GMPF.js"),
+    import("./config-utils-R6M3TA34.js")
   ]).then(([channelRuntime, configUtils]) => ({
     loadChannelsConfig: channelRuntime.loadChannelsConfig,
     parseChannelWebhookConfig: configUtils.parseChannelWebhookConfig
@@ -3756,18 +3928,18 @@ async function loadServeRuntimeModules() {
     workspaceRegistryModule,
     promptLedgerModule
   ] = await Promise.all([
-    import("./server-DFUSSSHI.js"),
-    import("./bridge-FKZTVIS3.js"),
-    import("./spawnChannel-F6WVP723.js"),
-    import("./process-registry-PMJOA5CO.js"),
-    import("./workspace-service-MUYO2QIC.js"),
-    import("./types-WYCFCEHR.js"),
-    import("./daemon-status-provider-RFKZOK3S.js"),
-    import("./workspace-providers-status-PDFZWL5Q.js"),
-    import("./workspace-skills-status-IKECTOOQ.js"),
-    import("./total-session-admission-HTVTP4BS.js"),
-    import("./workspace-registry-23R7XRB5.js"),
-    import("./prompt-terminal-ledger-DCZO6S7C.js")
+    import("./server-GO2N5DH7.js"),
+    import("./bridge-ME6QXZNA.js"),
+    import("./spawnChannel-ZST6XJVJ.js"),
+    import("./process-registry-OAEG6WGC.js"),
+    import("./workspace-service-SIN67ITC.js"),
+    import("./types-HKLPXZB3.js"),
+    import("./daemon-status-provider-K3SJ5C2U.js"),
+    import("./workspace-providers-status-IJ4VHFMB.js"),
+    import("./workspace-skills-status-F3RKCUIX.js"),
+    import("./total-session-admission-PVN64JVV.js"),
+    import("./workspace-registry-BTGZIMPK.js"),
+    import("./prompt-terminal-ledger-FOMFTYOM.js")
   ]);
   return {
     createServeApp: serverModule.createServeApp,
@@ -3780,7 +3952,6 @@ async function loadServeRuntimeModules() {
     ProcessRegistry: processRegistryModule.ProcessRegistry,
     createDaemonWorkspaceService: workspaceModule.createDaemonWorkspaceService,
     WorkspaceSettingsPartialPersistError: workspaceTypesModule.WorkspaceSettingsPartialPersistError,
-    WorkspaceSkillNotToggleableError: workspaceTypesModule.WorkspaceSkillNotToggleableError,
     createDaemonStatusProvider: daemonStatusProviderModule.createDaemonStatusProvider,
     createWorkspaceProvidersStatusProvider: workspaceProvidersStatusModule.createWorkspaceProvidersStatusProvider,
     createWorkspaceSkillsStatusProvider: workspaceSkillsStatusModule.createWorkspaceSkillsStatusProvider,
@@ -4813,7 +4984,7 @@ async function runQwenServeImpl(optsIn, deps, loggerLifecycle) {
   }
   let workspaceRegistrationStore = deps.workspaceRegistrationStore;
   if (workspaceRegistrationStore === void 0 && process.env["QWEN_SERVE_NO_PERSISTENT_REGISTRATION"] !== "1") {
-    const { WorkspaceRegistrationStore } = await import("./workspace-registration-store-XKVW2YVH.js");
+    const { WorkspaceRegistrationStore } = await import("./workspace-registration-store-SMJWI2AI.js");
     workspaceRegistrationStore = new WorkspaceRegistrationStore(boundWorkspace);
   }
   if (workspaceRegistrationStore) {
@@ -5097,7 +5268,7 @@ async function runQwenServeImpl(optsIn, deps, loggerLifecycle) {
       "qwen serve: required external tool guard handshake succeeded."
     );
   }
-  const { createDaemonToolGuard } = await import("./daemon-git-worktree-guard-6MVAAZZZ.js");
+  const { createDaemonToolGuard } = await import("./daemon-git-worktree-guard-IVAJJWYK.js");
   const daemonToolGuardHandler = createDaemonToolGuard(
     externalToolGuardHandler
   );
@@ -5166,6 +5337,8 @@ async function runQwenServeImpl(optsIn, deps, loggerLifecycle) {
   const internalRuntimeBridgesForCleanup = [];
   let daemonEventLoopMonitor;
   let daemonMetricsSampler;
+  let sessionPrRefreshTimer;
+  let sessionPrRefreshGeneration = 0;
   let runtimeStartupError;
   let runtimeStarting;
   let markRuntimeReady;
@@ -5185,6 +5358,10 @@ async function runQwenServeImpl(optsIn, deps, loggerLifecycle) {
     daemonEventLoopMonitor = void 0;
     const metricsSampler = daemonMetricsSampler;
     daemonMetricsSampler = void 0;
+    const prRefreshTimer = sessionPrRefreshTimer;
+    sessionPrRefreshTimer = void 0;
+    sessionPrRefreshGeneration += 1;
+    prRefreshTimer?.dispose();
     try {
       eventLoopMonitor?.dispose();
     } catch (err) {
@@ -5369,6 +5546,7 @@ async function runQwenServeImpl(optsIn, deps, loggerLifecycle) {
     stopSafely("scheduled-task keepalive", locals.stopScheduledTaskKeepalive);
     stopSafely("workspace git state", locals.stopWorkspaceGitState);
     stopSafely("Live Host coordinator", locals.stopLiveCoordinator);
+    stopSafely("web terminal registry", locals.stopWebTerminalRegistry);
     stopTrustPolicyMonitor(app2);
     for (const stop of locals.subSessionStoppers ?? []) {
       stopSafely("sub-session launcher", stop);
@@ -5436,7 +5614,7 @@ async function runQwenServeImpl(optsIn, deps, loggerLifecycle) {
       loadCoreRuntime(),
       loadSettingsRuntimeModules(),
       cliVersionPromise,
-      import("./daemon-trust-policy-DRZPFB4Q.js")
+      import("./daemon-trust-policy-DOR3YG62.js")
     ]);
     cliVersion = resolvedCliVersion;
     settingsRuntime.environment.preResolveHomeEnvOverrides();
@@ -5812,18 +5990,10 @@ async function runQwenServeImpl(optsIn, deps, loggerLifecycle) {
         resolveSkillSettings,
         skillSettingStrings,
         updateWorkspaceSkillSettingLists
-      } = await import("./skill-settings-VA4XVYVL.js");
+      } = await import("./skill-settings-ZL4JY5UE.js");
       const fresh = loadSettingsForPersistence(workspace);
       const normalizedName = skillName.trim().toLowerCase();
       const resolved = resolveSkillSettings(fresh);
-      const disablement = resolved.disablements.get(normalizedName);
-      if (disablement?.reason === "hard" && disablement.lockedScope) {
-        throw new runtime.WorkspaceSkillNotToggleableError(
-          skillName,
-          "locked",
-          disablement.lockedScope
-        );
-      }
       const workspaceDisabled = skillSettingStrings(
         fresh,
         WORKSPACE_SETTING_SCOPE,
@@ -5877,7 +6047,7 @@ async function runQwenServeImpl(optsIn, deps, loggerLifecycle) {
         resolveSkillSettings,
         skillSettingStrings,
         updateWorkspaceSkillSettingLists
-      } = await import("./skill-settings-VA4XVYVL.js");
+      } = await import("./skill-settings-ZL4JY5UE.js");
       const fresh = loadSettingsForPersistence(workspace);
       const resolved = resolveSkillSettings(fresh);
       const initialDisabled = skillSettingStrings(
@@ -5894,18 +6064,6 @@ async function runQwenServeImpl(optsIn, deps, loggerLifecycle) {
       const outcomes = [];
       for (const skillName of skillNames) {
         const normalizedName = skillName.trim().toLowerCase();
-        const disablement = resolved.disablements.get(normalizedName);
-        if (disablement?.reason === "hard" && disablement.lockedScope) {
-          outcomes.push({
-            skillName,
-            error: new runtime.WorkspaceSkillNotToggleableError(
-              skillName,
-              "locked",
-              disablement.lockedScope
-            )
-          });
-          continue;
-        }
         const updated = updateWorkspaceSkillSettingLists(
           next,
           skillName,
@@ -5983,8 +6141,8 @@ async function runQwenServeImpl(optsIn, deps, loggerLifecycle) {
       }
     }), "persistSettingsFn");
     const [{ createSubSessionLauncher }, scheduledTaskRoutes] = await Promise.all([
-      import("./create-sub-session-JKZAYZX7.js"),
-      import("./scheduled-tasks-QB4ZVUQS.js")
+      import("./create-sub-session-4QNE64MR.js"),
+      import("./scheduled-tasks-MN2ZZ5P6.js")
     ]);
     const createCurrentSessionScheduledTaskHandler = /* @__PURE__ */ __name((workspaceCwd, runtimeBaseDir, getBridge, assertGenerationOpen) => async ({
       callerSessionId,
@@ -6680,6 +6838,22 @@ async function runQwenServeImpl(optsIn, deps, loggerLifecycle) {
         metricsLoopDelay.disable();
       }
     };
+    sessionPrRefreshTimer?.dispose();
+    const refreshGeneration = ++sessionPrRefreshGeneration;
+    void import("./session-pr-refresh-I3UBWMVP.js").then((mod) => {
+      if (refreshGeneration !== sessionPrRefreshGeneration) return;
+      sessionPrRefreshTimer = mod.startSessionPrRefreshTimer({
+        workspaceRegistry,
+        // The coordinator lives on the serve app (createServeApp below),
+        // which is built after this timer starts; read it per tick like
+        // the metrics sampler reads `acpHandle`.
+        getArchiveCoordinator: /* @__PURE__ */ __name(() => app2.locals.sessionArchiveCoordinator, "getArchiveCoordinator")
+      });
+    }).catch((error) => {
+      daemonLog.warn(
+        `session-pr-refresh load failed: ${error instanceof Error ? error.message : String(error)}`
+      );
+    });
     const createDynamicWorkspaceRuntime = /* @__PURE__ */ __name(async (cwd, buildOptions) => {
       const provenance = buildOptions?.provenance ?? "existing";
       if (provenance === "managed-scratch" && (!managedScratchRoot || !isManagedScratchChild(cwd, managedScratchRoot.canonicalRoot))) {
@@ -7177,6 +7351,7 @@ async function runQwenServeImpl(optsIn, deps, loggerLifecycle) {
             const app3 = serveAppForRuntimeLifecycle.current ?? runtimeApp ?? runtimeAppForCleanup;
             const stopWorkspaceGitStateForWorkspace = app3?.locals?.["stopWorkspaceGitStateForWorkspace"];
             const stopScheduledTaskKeepaliveForWorkspace = app3?.locals?.["stopScheduledTaskKeepaliveForWorkspace"];
+            const releaseWebTerminalsForWorkspace = app3?.locals?.["releaseWebTerminalsForWorkspace"];
             try {
               stopWorkspaceGitStateForWorkspace?.(runtimeToDrain.workspaceCwd);
             } catch (err) {
@@ -7195,6 +7370,14 @@ async function runQwenServeImpl(optsIn, deps, loggerLifecycle) {
                 err instanceof Error ? err : null
               );
             }
+            try {
+              releaseWebTerminalsForWorkspace?.(runtimeToDrain.workspaceCwd);
+            } catch (err) {
+              daemonLog.error(
+                "workspace web-terminal cleanup error",
+                err instanceof Error ? err : null
+              );
+            }
           }
           let bridgeStopped = false;
           try {
@@ -7266,8 +7449,8 @@ async function runQwenServeImpl(optsIn, deps, loggerLifecycle) {
           { createChannelManagementService },
           { WorkspaceChannelSettingsStore }
         ] = await Promise.all([
-          import("./channel-management-service-X4AZ6IXX.js"),
-          import("./channel-settings-store-4UFCLBBG.js")
+          import("./channel-management-service-HQ6KDS7C.js"),
+          import("./channel-settings-store-PEOI7XCG.js")
         ]);
         return createChannelManagementService({
           workspaceCwd: targetRuntime.workspaceCwd,
@@ -7472,8 +7655,8 @@ async function runQwenServeImpl(optsIn, deps, loggerLifecycle) {
         { createWorkspaceTrustReconciler },
         { createDaemonTrustPolicyMonitor }
       ] = await Promise.all([
-        import("./workspace-trust-reconciler-KLGOB53D.js"),
-        import("./daemon-trust-policy-monitor-B5U6TQX5.js")
+        import("./workspace-trust-reconciler-PLIDLJZX.js"),
+        import("./daemon-trust-policy-monitor-KGGROSIV.js")
       ]);
       const materializationFor = /* @__PURE__ */ __name((entry, snapshot, decision) => {
         const boundWorkspaces2 = entry.primary && decision.targetTrusted ? runtime.resolveBoundWorkspacesFromIdeEnv(
@@ -7669,7 +7852,7 @@ async function runQwenServeImpl(optsIn, deps, loggerLifecycle) {
     // through (and start the runtime) exactly like the warm app would.
     // Dynamic import keeps web-shell-static out of the serve fast-path
     // static closure (see the import-boundary guards in fast-path.test.ts).
-    isPreAuthRequest: webShellMounted ? (req) => import("./web-shell-static-A6QMUNNV.js").then(
+    isPreAuthRequest: webShellMounted ? (req) => import("./web-shell-static-HNB4FDOE.js").then(
       (webShellStatic) => webShellStatic.isPreAuthWebShellRequest(req)
     ) : void 0
   });
@@ -7689,7 +7872,7 @@ async function runQwenServeImpl(optsIn, deps, loggerLifecycle) {
     );
   }
   const channelValidationSettingsRuntime = opts.channelSelection ? await loadSettingsRuntimeModules() : void 0;
-  const channelValidationTrustPolicy = opts.channelSelection ? await import("./daemon-trust-policy-DRZPFB4Q.js") : void 0;
+  const channelValidationTrustPolicy = opts.channelSelection ? await import("./daemon-trust-policy-DOR3YG62.js") : void 0;
   const channelValidationTrustSnapshot = channelValidationTrustPolicy ? await channelValidationTrustPolicy.readDaemonTrustPolicySnapshot() : void 0;
   const resolveChannelWorkspaceGroupsAtListen = /* @__PURE__ */ __name(() => {
     if (!opts.channelSelection || !channelValidationSettingsRuntime || !channelRuntime) {
@@ -8577,6 +8760,7 @@ async function runQwenServeImpl(optsIn, deps, loggerLifecycle) {
               if (!preserveSignalHandlers) {
                 process.removeListener("SIGINT", onSignal);
                 process.removeListener("SIGTERM", onSignal);
+                process.removeListener("SIGHUP", onSignal);
               }
               process.removeListener(
                 "uncaughtExceptionMonitor",
@@ -8796,6 +8980,7 @@ async function runQwenServeImpl(optsIn, deps, loggerLifecycle) {
       }
       process.on("SIGINT", onSignal);
       process.on("SIGTERM", onSignal);
+      process.on("SIGHUP", onSignal);
       process.on("uncaughtExceptionMonitor", onUncaughtExceptionMonitor);
       server.on("error", (err) => {
         daemonLog.error("server error", err instanceof Error ? err : null);