@qwen-code/qwen-code 0.22.2 → 0.22.3

package/chunks/{chunk-F6FV3C5K.js → chunk-4NDLQAY2.js}

@@ -2,31 +2,25 @@
 "use strict";
 import {
   parseToolWriteOriginMeta
-} from "./chunk-T3WXYEZ4.js";
+} from "./chunk-U54AYGEC.js";
+import {
+  isLoopbackBind
+} from "./chunk-RXFQM6FQ.js";
 import {
   MAX_CHILD_HEAP_MB,
   MIN_CHILD_HEAP_MB,
   recommendedChildShareMb
 } from "./chunk-UXEO7E3V.js";
 import {
-  isLoopbackBind
-} from "./chunk-RXFQM6FQ.js";
-import {
-  normalizeSessionIdForLookup
-} from "./chunk-ZEZKIS2K.js";
+  CLIENT_ID_RE,
+  MAX_CLIENT_ID_LENGTH
+} from "./chunk-SEONHUS3.js";
 import {
   isInternalWorkspaceRuntime
 } from "./chunk-NYWWQ437.js";
 import {
   CLIENT_MCP_OVER_WS_CONFIG_FLAG
 } from "./chunk-OZ6KS6KW.js";
-import {
-  MAX_WORKSPACE_PATH_LENGTH,
-  translateAndCheckAbsoluteWorkspacePath
-} from "./chunk-6PLDPT2C.js";
-import {
-  writeStderrLine
-} from "./chunk-KGJGEEVR.js";
 import {
   ROOT_CONTEXT,
   context,
@@ -1516,6 +1510,7 @@ var SERVE_CAPABILITY_REGISTRY = {
   session_metadata: { since: "v1" },
   session_organization: { since: "v1" },
   session_export: { since: "v1" },
+  standalone_sessions_v1: { since: "v1" },
   session_transcript: { since: "v1" },
   session_transcript_pagination: { since: "v1" },
   // Daemon supports the MCP client guardrail surface: an in-process
@@ -1582,8 +1577,8 @@ var SERVE_CAPABILITY_REGISTRY = {
   // unregistered — the toggle takes effect on the next ACP child spawn
   // (`tools.disabled` is consulted at `Config` construction time).
   workspace_tool_toggle: { since: "v1" },
-  workspace_skill_toggle: { since: "v1" },
-  workspace_skill_batch_toggle: { since: "v1" },
+  workspace_skill_settings_toggle: { since: "v1" },
+  workspace_skill_settings_batch_toggle: { since: "v1" },
   extension_batch_activation_v2: { since: "v1" },
   workspace_skill_manage: { since: "v1" },
   workspace_settings: { since: "v1" },
@@ -1601,13 +1596,12 @@ var SERVE_CAPABILITY_REGISTRY = {
   // Workspace trust policy changes rebuild the affected runtime generation
   // without restarting the daemon. V2 trust status exposes convergence.
   workspace_trust_hot_reload: { since: "v1" },
-  // `POST /workspace/init` scaffolds an empty
-  // `QWEN.md` (or whatever `getCurrentGeminiMdFilename()` returns) at
-  // the bound workspace root. Body: `{force?: boolean}`. Default
+  // `POST /workspace/init` scaffolds an empty `QWEN.md` (or the
+  // workspace `context.fileName` value injected as `contextFilename`)
+  // at the bound workspace root. Body: `{force?: boolean}`. Default
   // refuses with 409 when the file already exists; `force: true`
-  // overwrites. Mechanical only — does NOT call the LLM. To AI-fill
-  // the file, the caller should follow up with
-  // `POST /session/:id/prompt`.
+  // overwrites. Mechanical only — does NOT call the LLM. To AI-fill the
+  // file, the caller should follow up with `POST /session/:id/prompt`.
   workspace_init: { since: "v1" },
   // `POST /workspace/setup-github` installs the fixed
   // qwen-code-action workflow set into the bound workspace after
@@ -1774,6 +1768,7 @@ var SERVE_CAPABILITY_REGISTRY = {
   // `workspace_extensions` contract.
   extension_management_v2: { since: "v1" },
   extension_git_credentials: { since: "v1" },
+  extension_local_path_install: { since: "v1" },
   // Workspace-qualified, daemon-local persisted transcript paging. The tag is
   // unconditional because the route also serves a trusted single-workspace
   // primary; authorization is evaluated for the selected runtime per request.
@@ -1839,10 +1834,15 @@ var SERVE_CAPABILITY_REGISTRY = {
   // WebShell daemon with native Host integration and the hot-applied enabled
   // gate. `/live/status` remains the dynamic readiness surface for the Host,
   // permissions, self-checks, and provider reachability.
-  realtime_voice: { since: "v1" }
+  realtime_voice: { since: "v1" },
+  web_terminal: { since: "v1" }
 };
 var CONDITIONAL_SERVE_FEATURES = /* @__PURE__ */ new Map([
   ["require_auth", (toggles) => toggles.requireAuth === true],
+  [
+    "standalone_sessions_v1",
+    (toggles) => toggles.standaloneSessionsAvailable === true
+  ],
   ["mcp_workspace_pool", (toggles) => toggles.mcpPoolActive === true],
   ["mcp_pool_restart", (toggles) => toggles.mcpPoolActive === true],
   [
@@ -1960,7 +1960,8 @@ var CONDITIONAL_SERVE_FEATURES = /* @__PURE__ */ new Map([
   [
     "realtime_voice",
     (toggles) => toggles.acpHttpEnabled === true && toggles.realtimeVoiceEnabled === true
-  ]
+  ],
+  ["web_terminal", (toggles) => toggles.acpHttpEnabled === true]
 ]);
 var SERVE_FEATURES = Object.freeze(
   Object.keys(SERVE_CAPABILITY_REGISTRY)
@@ -2393,235 +2394,6 @@ function installServeAppLifecycle(app, lifecycle = new ServeAppLifecycleControll
 }
 __name(installServeAppLifecycle, "installServeAppLifecycle");
 
-// packages/cli/src/serve/server/request-helpers.ts
-init_esbuild_shims();
-function sendJsonBodyParserError(res, err) {
-  if (err instanceof SyntaxError && "status" in err && err.status === 400) {
-    res.status(400).json({ error: "Invalid JSON in request body" });
-    return true;
-  }
-  if (err && typeof err === "object" && "status" in err && err.status === 413) {
-    res.status(413).json({ error: "Request body too large (max 10 MB)" });
-    return true;
-  }
-  return false;
-}
-__name(sendJsonBodyParserError, "sendJsonBodyParserError");
-var PROTOTYPE_POLLUTION_KEYS = /* @__PURE__ */ new Set([
-  "__proto__",
-  "constructor",
-  "prototype"
-]);
-var CLIENT_ID_HEADER = "x-qwen-client-id";
-var MAX_CLIENT_ID_LENGTH = 128;
-var MAX_TOOL_NAME_LENGTH = 256;
-var MAX_SERVER_NAME_LENGTH = 256;
-var CLIENT_ID_RE = /^[A-Za-z0-9._:-]+$/;
-var INVALID_PERMISSION_OUTCOME_ERROR = '`outcome` must be `{ outcome: "cancelled" }` or `{ outcome: "selected", optionId: string }`';
-var deferredRuntimeTimingKey = Symbol(
-  "deferredRuntimeRequestTiming"
-);
-function setDeferredRuntimeRequestTiming(req, timing) {
-  req[deferredRuntimeTimingKey] = timing;
-}
-__name(setDeferredRuntimeRequestTiming, "setDeferredRuntimeRequestTiming");
-function getDeferredRuntimeRequestTiming(req) {
-  return req[deferredRuntimeTimingKey];
-}
-__name(getDeferredRuntimeRequestTiming, "getDeferredRuntimeRequestTiming");
-function safeBody(req) {
-  const raw = req.body;
-  if (typeof raw !== "object" || raw === null || Array.isArray(raw)) {
-    return /* @__PURE__ */ Object.create(null);
-  }
-  const out = /* @__PURE__ */ Object.create(null);
-  for (const [key, value] of Object.entries(raw)) {
-    if (PROTOTYPE_POLLUTION_KEYS.has(key)) continue;
-    out[key] = value;
-  }
-  return out;
-}
-__name(safeBody, "safeBody");
-function parseOptionalWorkspaceCwd(body, boundWorkspace, res) {
-  const hasCwd = "cwd" in body;
-  if (hasCwd && typeof body["cwd"] !== "string") {
-    res.status(400).json({ error: "`cwd` must be a string absolute path when provided" });
-    return void 0;
-  }
-  if (hasCwd && body["cwd"].length > MAX_WORKSPACE_PATH_LENGTH) {
-    res.status(400).json({
-      error: `\`cwd\` exceeds the ${MAX_WORKSPACE_PATH_LENGTH}-character limit`
-    });
-    return void 0;
-  }
-  const cwd = translateAndCheckAbsoluteWorkspacePath(
-    hasCwd ? body["cwd"] : boundWorkspace
-  );
-  if (cwd === null) {
-    res.status(400).json({ error: "`cwd` must be an absolute path when provided" });
-    return void 0;
-  }
-  return cwd;
-}
-__name(parseOptionalWorkspaceCwd, "parseOptionalWorkspaceCwd");
-function requireSessionId(req, res) {
-  const sessionId = req.params["id"];
-  if (!sessionId) {
-    res.status(400).json({ error: "`sessionId` route parameter is required" });
-    return null;
-  }
-  return normalizeSessionIdForLookup(sessionId);
-}
-__name(requireSessionId, "requireSessionId");
-function parseClientIdHeader(req, res) {
-  const raw = req.get(CLIENT_ID_HEADER);
-  if (raw === void 0 || raw === "") return void 0;
-  if (raw.length > MAX_CLIENT_ID_LENGTH || !CLIENT_ID_RE.test(raw)) {
-    res.status(400).json({
-      error: "`X-Qwen-Client-Id` must be a non-empty token of 128 characters or fewer",
-      code: "invalid_client_id"
-    });
-    return null;
-  }
-  return raw;
-}
-__name(parseClientIdHeader, "parseClientIdHeader");
-function detectFromLoopback(req) {
-  const addr = req.socket?.remoteAddress;
-  if (typeof addr !== "string") return false;
-  if (addr === "::1") return true;
-  if (addr.startsWith("127.")) return true;
-  if (addr.startsWith("::ffff:127.")) return true;
-  return false;
-}
-__name(detectFromLoopback, "detectFromLoopback");
-function validateMcpRuntimeServerName(name, res) {
-  if (typeof name !== "string" || name.length === 0) {
-    res.status(400).json({
-      error: "Server name is required and must be a non-empty string",
-      code: "invalid_server_name"
-    });
-    return false;
-  }
-  if (name.length > MAX_SERVER_NAME_LENGTH) {
-    res.status(400).json({
-      error: `Server name exceeds ${MAX_SERVER_NAME_LENGTH}-character limit`,
-      code: "invalid_server_name"
-    });
-    return false;
-  }
-  if (!/^[A-Za-z0-9_-]+$/.test(name)) {
-    res.status(400).json({
-      error: "Server name must contain only alphanumeric characters, underscores, and hyphens",
-      code: "invalid_server_name"
-    });
-    return false;
-  }
-  if (name === "__proto__" || name === "constructor" || name === "prototype") {
-    res.status(400).json({
-      error: "Server name must not be a reserved JS property name",
-      code: "invalid_server_name"
-    });
-    return false;
-  }
-  return true;
-}
-__name(validateMcpRuntimeServerName, "validateMcpRuntimeServerName");
-function parseAndValidateWorkspaceClientId(req, res, bridge) {
-  const raw = parseClientIdHeader(req, res);
-  if (raw === null || raw === void 0) return raw;
-  const bridges = Array.isArray(bridge) ? bridge : [bridge];
-  if (!bridges.some((candidate) => candidate.knownClientIds().has(raw))) {
-    res.status(400).json({
-      error: `Client id "${raw}" is not registered for this workspace`,
-      code: "invalid_client_id",
-      clientId: raw
-    });
-    return null;
-  }
-  return raw;
-}
-__name(parseAndValidateWorkspaceClientId, "parseAndValidateWorkspaceClientId");
-function createBuildWorkspaceCtx(boundWorkspace) {
-  return (route, clientId) => ({
-    originatorClientId: clientId,
-    route,
-    workspaceCwd: boundWorkspace
-  });
-}
-__name(createBuildWorkspaceCtx, "createBuildWorkspaceCtx");
-function parsePermissionVoteBody(req, res) {
-  const body = safeBody(req);
-  const outcome = body["outcome"];
-  if (!isValidOutcome(outcome)) {
-    res.status(400).json({ error: INVALID_PERMISSION_OUTCOME_ERROR });
-    return void 0;
-  }
-  return {
-    ...body,
-    outcome
-  };
-}
-__name(parsePermissionVoteBody, "parsePermissionVoteBody");
-function isValidOutcome(raw) {
-  if (typeof raw !== "object" || raw === null) return false;
-  const obj = raw;
-  if (obj["outcome"] === "cancelled") return true;
-  return obj["outcome"] === "selected" && typeof obj["optionId"] === "string" && obj["optionId"].length > 0;
-}
-__name(isValidOutcome, "isValidOutcome");
-var MIN_QUERY_MAX_QUEUED = 16;
-var MAX_QUERY_MAX_QUEUED = 2048;
-function parseMaxQueuedQuery(raw, res) {
-  if (raw === void 0) return void 0;
-  if (typeof raw !== "string" || !/^\d+$/.test(raw)) {
-    writeStderrLine(
-      `qwen serve: rejected ?maxQueued ${safeLogValue(raw)} (not a decimal integer)`
-    );
-    res.status(400).json({
-      error: "`maxQueued` must be a decimal integer",
-      code: "invalid_max_queued"
-    });
-    return null;
-  }
-  const n = Number.parseInt(raw, 10);
-  if (!Number.isFinite(n) || n < MIN_QUERY_MAX_QUEUED || n > MAX_QUERY_MAX_QUEUED) {
-    writeStderrLine(
-      `qwen serve: rejected ?maxQueued ${safeLogValue(raw)} (outside [${MIN_QUERY_MAX_QUEUED}, ${MAX_QUERY_MAX_QUEUED}])`
-    );
-    res.status(400).json({
-      error: `\`maxQueued\` must be in [${MIN_QUERY_MAX_QUEUED}, ${MAX_QUERY_MAX_QUEUED}]`,
-      code: "invalid_max_queued"
-    });
-    return null;
-  }
-  return n;
-}
-__name(parseMaxQueuedQuery, "parseMaxQueuedQuery");
-function safeLogValue(raw) {
-  return JSON.stringify(String(raw)).slice(0, 82);
-}
-__name(safeLogValue, "safeLogValue");
-function parseLastEventId(raw) {
-  if (typeof raw !== "string" || !/^\d+$/.test(raw)) {
-    if (typeof raw === "string" && raw.length > 0) {
-      writeStderrLine(
-        `qwen serve: rejected Last-Event-ID ${safeLogValue(raw)} (not a decimal integer)`
-      );
-    }
-    return void 0;
-  }
-  const n = Number.parseInt(raw, 10);
-  if (!Number.isFinite(n) || n > Number.MAX_SAFE_INTEGER) {
-    writeStderrLine(
-      `qwen serve: rejected Last-Event-ID ${safeLogValue(raw)} (exceeds Number.MAX_SAFE_INTEGER)`
-    );
-    return void 0;
-  }
-  return n;
-}
-__name(parseLastEventId, "parseLastEventId");
-
 // packages/cli/src/serve/rate-limit.ts
 init_esbuild_shims();
 var MAX_BUCKETS = 1e4;
@@ -4176,26 +3948,6 @@ export {
   conversationRootCompromisedError,
   ServeAppLifecycleController,
   installServeAppLifecycle,
-  sendJsonBodyParserError,
-  CLIENT_ID_HEADER,
-  MAX_CLIENT_ID_LENGTH,
-  MAX_TOOL_NAME_LENGTH,
-  MAX_SERVER_NAME_LENGTH,
-  CLIENT_ID_RE,
-  setDeferredRuntimeRequestTiming,
-  getDeferredRuntimeRequestTiming,
-  safeBody,
-  parseOptionalWorkspaceCwd,
-  requireSessionId,
-  parseClientIdHeader,
-  detectFromLoopback,
-  validateMcpRuntimeServerName,
-  parseAndValidateWorkspaceClientId,
-  createBuildWorkspaceCtx,
-  parsePermissionVoteBody,
-  parseMaxQueuedQuery,
-  safeLogValue,
-  parseLastEventId,
   createRateLimiter,
   setRateLimiter,
   getRateLimiter,

package/chunks/{chunk-VVW4ZNFY.js → chunk-4QHPPXK2.js}

@@ -1,19 +1,14 @@
 // Force strict mode and setup for ESM
 "use strict";
 import {
-  retryContext
-} from "./chunk-P3QQPMQA.js";
-import {
-  classifyRetryError
-} from "./chunk-J2OSJFP3.js";
-import {
+  classifyRetryError,
   formatQuotaExhaustedMessage,
   getRetryAfterDelayMs,
   getRetryDelayMs,
   isQuotaExhaustedError,
   isQwenQuotaExceededError,
   isRateLimitError
-} from "./chunk-4FTKQNWJ.js";
+} from "./chunk-DYXFD5RO.js";
 import {
   createDebugLogger,
   getErrorStatus
@@ -27,6 +22,13 @@ import {
 
 // packages/core/src/utils/retry.ts
 init_esbuild_shims();
+
+// packages/core/src/utils/retryContext.ts
+init_esbuild_shims();
+import { AsyncLocalStorage } from "node:async_hooks";
+var retryContext = new AsyncLocalStorage();
+
+// packages/core/src/utils/retry.ts
 var debugLogger = createDebugLogger("RETRY");
 var PERSISTENT_MAX_BACKOFF_MS = 5 * 60 * 1e3;
 var PERSISTENT_CAP_MS = 6 * 60 * 60 * 1e3;
@@ -331,10 +333,16 @@ function logRetryAtStatusLevel(message, retryDiagnostics, error, errorStatus) {
 __name(logRetryAtStatusLevel, "logRetryAtStatusLevel");
 
 export {
+  retryContext,
   isUnattendedMode,
   delay,
   retryWithBackoff
 };
+/**
+ * @license
+ * Copyright 2026 Qwen Team
+ * SPDX-License-Identifier: Apache-2.0
+ */
 /**
  * @license
  * Copyright 2025 Google LLC

package/chunks/{chunk-IJKTMLBE.js → chunk-4TT3IVGA.js}

@@ -2,7 +2,7 @@
 "use strict";
 import {
   getEffectiveSupportedModes
-} from "./chunk-K2NQPH5D.js";
+} from "./chunk-WGY3AVGM.js";
 import {
   init_esbuild_shims
 } from "./chunk-5O2XNYP6.js";

package/chunks/{chunk-C6K43ZDE.js → chunk-4VPCTGH6.js}

@@ -27,10 +27,10 @@ import {
 } from "./chunk-3VUENPWF.js";
 import {
   loadSettings
-} from "./chunk-F7TNAPZ4.js";
+} from "./chunk-AIAOIFY4.js";
 import {
   MCP_BUDGET_WARN_FRACTION
-} from "./chunk-TGWAQ5RB.js";
+} from "./chunk-PZ66FRIC.js";
 import {
   parsePositiveIntegerEnv
 } from "./chunk-6PVPNMXU.js";
@@ -44,7 +44,7 @@ import {
 import {
   writeStderrLine,
   writeStdoutLine
-} from "./chunk-KGJGEEVR.js";
+} from "./chunk-7FA2II6K.js";
 import {
   init_esbuild_shims
 } from "./chunk-5O2XNYP6.js";
@@ -444,7 +444,7 @@ var serveCommand = {
     delete process.env[EXTERNAL_TOOL_GUARD_TOKEN_ENV];
     const openWithAuth = argv["open-with-auth"];
     const open = argv.open || openWithAuth;
-    const { runQwenServe } = await import("./run-qwen-serve-TPHZMSXJ.js");
+    const { runQwenServe } = await import("./run-qwen-serve-5X6IDZER.js");
     try {
       const serveOptions = {
         port: argv.port,
@@ -507,7 +507,7 @@ var serveCommand = {
         ...channelSelection !== void 0 ? { channelSelection } : {}
       };
       if (openWithAuth) {
-        const { applyOpenWithAuth } = await import("./open-with-auth-4UI3KHUR.js");
+        const { applyOpenWithAuth } = await import("./open-with-auth-YN3QZHVM.js");
         applyOpenWithAuth(serveOptions);
       }
       const handle = await runQwenServe(serveOptions);