@qwen-code/qwen-code 0.22.3-nightly.20260831.3a0c4c6108 → 0.23.0

package/chunks/{run-qwen-serve-3LKV7KDC.js → run-qwen-serve-OGTEEUR2.js}

@@ -37,6 +37,8 @@ import {
   installSelfOriginStripMiddleware,
   isBrowserAutomationMcpAvailable,
   isDeepHealthQuery,
+  isLocalPathOpenAvailable,
+  isLocalTerminalAvailable,
   isManagedScratchChild,
   isNativeDirectoryPickerAvailable,
   isTrustedLoopbackMode,
@@ -47,7 +49,7 @@ import {
   prepareManagedScratchRoot,
   resolveAcpHttpEnabled,
   toDaemonStatusMemoryLimits
-} from "./chunk-MBZ5ORJB.js";
+} from "./chunk-SI7WDR3U.js";
 import "./chunk-VGHZT6JR.js";
 import {
   ConversationDirectoryIdentityError,
@@ -90,7 +92,7 @@ import {
 } from "./chunk-WCCLLK7X.js";
 import {
   require_express
-} from "./chunk-AYHQZBJ4.js";
+} from "./chunk-IRKQ4YYX.js";
 import {
   resolveWebShellDir
 } from "./chunk-FBX2SDQ4.js";
@@ -100,28 +102,28 @@ import {
 } from "./chunk-DMEUXLSS.js";
 import {
   resolveChannelCwd
-} from "./chunk-GN422P4J.js";
+} from "./chunk-TSZSGQ3N.js";
 import {
   LIVE_HOST_PROTOCOL_VERSION
-} from "./chunk-NKLP3DCK.js";
+} from "./chunk-IQAFKVXS.js";
+import "./chunk-ZL4HFSL6.js";
 import "./chunk-K6KS3LTN.js";
-import "./chunk-HMJ2P3SV.js";
-import "./chunk-7E7UCJHS.js";
+import "./chunk-OSHQMOBS.js";
 import {
   consumeServeFastPathRejectedLoaderKeys,
   loadServeFastPathSettings,
   preResolveServeFastPathHomeEnvOverrides
-} from "./chunk-6VHIWUJP.js";
+} from "./chunk-ADYN7P2Y.js";
 import {
   MAX_REGISTERED_WORKSPACES,
   resolveWorkspaceInputs,
   workspaceRegistrationId
-} from "./chunk-RY7DL5IF.js";
-import "./chunk-T3TL6S3B.js";
+} from "./chunk-BJXCYUGM.js";
+import "./chunk-G5PBOQWI.js";
 import {
   LOAD_REPLAY_META_KEY
 } from "./chunk-ZGCKTAL5.js";
-import "./chunk-YPISTYEI.js";
+import "./chunk-F47DITLZ.js";
 import {
   canonicalizeWorkspace,
   translateAndCheckAbsoluteWorkspacePath
@@ -129,7 +131,7 @@ import {
 import {
   ExtraCaInspectionError,
   loadableCertificates
-} from "./chunk-FPMQT2YY.js";
+} from "./chunk-TQHPVKO6.js";
 import "./chunk-FYJ7W2PI.js";
 import "./chunk-Z7B6SRPM.js";
 import {
@@ -141,7 +143,7 @@ import {
 import {
   normalizeWorkerDiagnostic,
   sanitizeWorkerDiagnostic
-} from "./chunk-3EGEBDTW.js";
+} from "./chunk-M4KFODIP.js";
 import {
   channelSelectionNames
 } from "./chunk-ALMR3E6Q.js";
@@ -158,14 +160,14 @@ import {
   PRIVATE_EXTERNAL_TOOL_GUARD_PROVIDER_ENV
 } from "./chunk-3VUENPWF.js";
 import "./chunk-M5GB774H.js";
-import {
-  MAX_DAEMON_WORKSPACES
-} from "./chunk-5HBA2Z7V.js";
 import {
   sanitizeLogText
-} from "./chunk-IXEZHTDR.js";
+} from "./chunk-U4DJ5XB3.js";
 import "./chunk-IW6RQPQB.js";
-import "./chunk-GOXKNSDZ.js";
+import {
+  MAX_DAEMON_WORKSPACES
+} from "./chunk-5HBA2Z7V.js";
+import "./chunk-O5CD7T4T.js";
 import {
   getGlobalQwenDirLite,
   resolveConfigPathLite
@@ -175,10 +177,10 @@ import {
   clearLoaderKeyRejectionReporterIfCurrent,
   scrubInheritedLoaderEnv,
   setLoaderKeyRejectionReporter
-} from "./chunk-3452WXOK.js";
+} from "./chunk-2M3EWQNG.js";
 import {
   getCliVersion
-} from "./chunk-ZYPJ7HVZ.js";
+} from "./chunk-VBWD6C27.js";
 import "./chunk-W3N5XAZ6.js";
 import "./chunk-NPQ5ZKRP.js";
 import {
@@ -3798,12 +3800,12 @@ __name(hasRetryableChannelWorkerShutdownError, "hasRetryableChannelWorkerShutdow
 var channelWorkerRuntimePromise;
 async function loadChannelWorkerRuntime() {
   channelWorkerRuntimePromise ??= Promise.all([
-    import("./channel-worker-supervisor-HDVE4ADS.js"),
-    import("./pidfile-5ACKG2LI.js"),
-    import("./runtime-66F4W3IA.js"),
+    import("./channel-worker-supervisor-6VCLUXFE.js"),
+    import("./pidfile-ETHAZNMY.js"),
+    import("./runtime-LNBLEMZS.js"),
     import("./cli-entry-path-4VJ3Y6T2.js"),
-    import("./channel-worker-group-ZLP5SJHT.js"),
-    import("./channel-worker-manager-FG5377T2.js")
+    import("./channel-worker-group-47F4ISUZ.js"),
+    import("./channel-worker-manager-I5Y44GYR.js")
   ]).then(
     ([
       supervisor,
@@ -3909,13 +3911,13 @@ function shouldPreheatBridge(deps) {
 __name(shouldPreheatBridge, "shouldPreheatBridge");
 var coreRuntimePromise;
 function loadCoreRuntime() {
-  coreRuntimePromise ??= import("./core-runtime-NASPCSQX.js");
+  coreRuntimePromise ??= import("./core-runtime-B4UKKIAQ.js");
   return coreRuntimePromise;
 }
 __name(loadCoreRuntime, "loadCoreRuntime");
 var liveDiscoveryRuntimePromise;
 function loadLiveDiscoveryRuntime() {
-  liveDiscoveryRuntimePromise ??= import("./discovery-X2NV535U.js");
+  liveDiscoveryRuntimePromise ??= import("./discovery-TUM3ZQ6U.js");
   return liveDiscoveryRuntimePromise;
 }
 __name(loadLiveDiscoveryRuntime, "loadLiveDiscoveryRuntime");
@@ -3945,10 +3947,10 @@ __name(resolveDaemonLogBaseDirForRun, "resolveDaemonLogBaseDirForRun");
 var settingsRuntimePromise;
 function loadSettingsRuntimeModules() {
   settingsRuntimePromise ??= Promise.all([
-    import("./settings-ZOHIQWYK.js"),
-    import("./environment-25ADH4Y6.js"),
-    import("./loadedSettingsAdapter-2P7DFWUR.js"),
-    import("./trustedFolders-QJYEFMTU.js")
+    import("./settings-BHRGDASJ.js"),
+    import("./environment-VN6RXDVN.js"),
+    import("./loadedSettingsAdapter-KLLFZF3M.js"),
+    import("./trustedFolders-D2I3FDPB.js")
   ]).then(([settings, environment, loadedSettingsAdapter, trustedFolders]) => ({
     settings,
     environment,
@@ -3961,8 +3963,8 @@ __name(loadSettingsRuntimeModules, "loadSettingsRuntimeModules");
 var channelWebhookConfigRuntimePromise;
 function loadChannelWebhookConfigRuntime() {
   channelWebhookConfigRuntimePromise ??= Promise.all([
-    import("./runtime-66F4W3IA.js"),
-    import("./config-utils-NNUPVGEC.js")
+    import("./runtime-LNBLEMZS.js"),
+    import("./config-utils-LVSYDLHZ.js")
   ]).then(([channelRuntime, configUtils]) => ({
     loadChannelsConfig: channelRuntime.loadChannelsConfig,
     parseChannelWebhookConfig: configUtils.parseChannelWebhookConfig
@@ -3989,19 +3991,19 @@ async function loadServeRuntimeModules() {
     workspaceRuntimeCoordinatorModule,
     promptLedgerModule
   ] = await Promise.all([
-    import("./server-7W6C3SOW.js"),
-    import("./bridge-EVURP4NO.js"),
-    import("./spawnChannel-ZP23JL6O.js"),
+    import("./server-AOYZVVOM.js"),
+    import("./bridge-IHSBI2YJ.js"),
+    import("./spawnChannel-N25MBB6F.js"),
     import("./process-registry-OAEG6WGC.js"),
-    import("./workspace-service-SETHN4WE.js"),
+    import("./workspace-service-G4ZNBOFH.js"),
     import("./types-HKLPXZB3.js"),
-    import("./daemon-status-provider-UI3GBTMO.js"),
-    import("./workspace-providers-status-5JM4CB6R.js"),
-    import("./workspace-skills-status-4D4EUEQU.js"),
-    import("./total-session-admission-MGV56XDK.js"),
-    import("./workspace-registry-6EULAPZC.js"),
-    import("./workspace-runtime-coordinator-IRI2DRCJ.js"),
-    import("./prompt-terminal-ledger-3RKW73A2.js")
+    import("./daemon-status-provider-GRRVCJFW.js"),
+    import("./workspace-providers-status-PCJK3RC7.js"),
+    import("./workspace-skills-status-FMTPPMWC.js"),
+    import("./total-session-admission-G4CGCSTG.js"),
+    import("./workspace-registry-YNIOB6HJ.js"),
+    import("./workspace-runtime-coordinator-WG2RNEN7.js"),
+    import("./prompt-terminal-ledger-GZ747VYE.js")
   ]);
   return {
     createServeApp: serverModule.createServeApp,
@@ -4050,7 +4052,7 @@ function sessionPromptSettledCloseGraceMs(value) {
   return value !== void 0 ? channelIdleTimeoutMs(value) : DEFAULT_SESSION_PROMPT_SETTLED_CLOSE_GRACE_MS;
 }
 __name(sessionPromptSettledCloseGraceMs, "sessionPromptSettledCloseGraceMs");
-function currentServeFeaturesForRunQwenServe(opts, sessionShellCommandEnabled, sessionArtifactsPersistenceAvailable, workspaceRuntimeAvailable, currentSessionSchedulingAvailable, env, nativeDirectoryPickerAvailable) {
+function currentServeFeaturesForRunQwenServe(opts, sessionShellCommandEnabled, sessionArtifactsPersistenceAvailable, workspaceRuntimeAvailable, currentSessionSchedulingAvailable, env, nativeDirectoryPickerAvailable, localPathOpenAvailable, localTerminalOpenAvailable) {
   return getAdvertisedServeFeatures(void 0, {
     requireAuth: opts.requireAuth === true,
     mcpPoolActive: opts.mcpPoolActive !== false,
@@ -4076,6 +4078,16 @@ function currentServeFeaturesForRunQwenServe(opts, sessionShellCommandEnabled, s
     // briefly under-report them.
     nativeDirectoryPickerAvailable,
     workspaceRuntimeAvailable,
+    localPathOpenAvailable,
+    localTerminalOpenAvailable,
+    // The production wiring below always registers these, so the bootstrap
+    // envelope must not under-report them either — the runtime envelope
+    // serves all five once the app is up.
+    dynamicWorkspaceRegistrationAvailable: true,
+    scratchWorkspaceRegistrationAvailable: true,
+    standaloneSessionsAvailable: true,
+    workspaceTrustHotReloadAvailable: true,
+    acpHttpEnabled: resolveAcpHttpEnabled(env),
     clientMcpOverWsEnabled: opts.clientMcpOverWs === true,
     cdpTunnelOverWsEnabled: opts.cdpTunnelOverWs === true,
     browserAutomationMcpAvailable: isBrowserAutomationMcpAvailable(opts, env)
@@ -4095,7 +4107,9 @@ function createBootstrapCapabilities(input) {
       input.workspaceRuntimeAvailable,
       input.currentSessionSchedulingAvailable,
       input.env,
-      input.nativeDirectoryPickerAvailable
+      input.nativeDirectoryPickerAvailable,
+      input.localPathOpenAvailable,
+      input.localTerminalOpenAvailable
     ),
     modelServices: [],
     workspaceCwd: input.boundWorkspace,
@@ -4226,6 +4240,8 @@ function createBootstrapServeApp(input) {
   } = input;
   const app = (0, import_express.default)();
   const nativeDirectoryPickerAvailable = isNativeDirectoryPickerAvailable();
+  const localPathOpenAvailable = isLocalPathOpenAvailable();
+  const localTerminalOpenAvailable = isLocalTerminalAvailable();
   installSelfOriginStripMiddleware(app, getPort, opts.hostname);
   if (opts.allowOrigins && opts.allowOrigins.length > 0) {
     app.use(allowOriginCors(parseAllowOriginPatterns(opts.allowOrigins)));
@@ -4281,7 +4297,9 @@ function createBootstrapServeApp(input) {
         currentSessionSchedulingAvailable,
         permissionPolicy,
         env: process.env,
-        nativeDirectoryPickerAvailable
+        nativeDirectoryPickerAvailable,
+        localPathOpenAvailable,
+        localTerminalOpenAvailable
       })
     );
   });
@@ -4403,7 +4421,9 @@ function createBootstrapServeApp(input) {
           workspaceRuntimeAvailable,
           currentSessionSchedulingAvailable,
           process.env,
-          nativeDirectoryPickerAvailable
+          nativeDirectoryPickerAvailable,
+          localPathOpenAvailable,
+          localTerminalOpenAvailable
         )
       },
       runtime: {
@@ -5041,7 +5061,7 @@ async function runQwenServeImpl(optsIn, deps, loggerLifecycle) {
   }
   let workspaceRegistrationStore = deps.workspaceRegistrationStore;
   if (workspaceRegistrationStore === void 0 && process.env["QWEN_SERVE_NO_PERSISTENT_REGISTRATION"] !== "1") {
-    const { WorkspaceRegistrationStore } = await import("./workspace-registration-store-RNMFVCH7.js");
+    const { WorkspaceRegistrationStore } = await import("./workspace-registration-store-KQWVVW4Y.js");
     workspaceRegistrationStore = new WorkspaceRegistrationStore(boundWorkspace);
   }
   if (workspaceRegistrationStore) {
@@ -5332,7 +5352,7 @@ async function runQwenServeImpl(optsIn, deps, loggerLifecycle) {
       "qwen serve: required external tool guard handshake succeeded."
     );
   }
-  const { createDaemonToolGuard } = await import("./daemon-git-worktree-guard-ATXVQPS3.js");
+  const { createDaemonToolGuard } = await import("./daemon-git-worktree-guard-O2HPOBAB.js");
   const daemonToolGuardHandler = createDaemonToolGuard(
     externalToolGuardHandler
   );
@@ -5679,7 +5699,7 @@ async function runQwenServeImpl(optsIn, deps, loggerLifecycle) {
       loadCoreRuntime(),
       loadSettingsRuntimeModules(),
       cliVersionPromise,
-      import("./daemon-trust-policy-SUCBJ2CA.js")
+      import("./daemon-trust-policy-YJL442BK.js")
     ]);
     getWorkspaceRuntimeCoordinatorIfSupported = runtime.getWorkspaceRuntimeCoordinatorIfSupported;
     cliVersion = resolvedCliVersion;
@@ -5777,10 +5797,6 @@ async function runQwenServeImpl(optsIn, deps, loggerLifecycle) {
       runtimeBootSettings,
       runtimeEnvSnapshot.effectiveEnv
     );
-    const sessionAttachmentsRoot = /* @__PURE__ */ __name((workspace, runtimeBaseDir) => path.join(
-      new core.Storage(workspace, runtimeBaseDir).getProjectTempDir(),
-      "attachments"
-    ), "sessionAttachmentsRoot");
     const runtimeEffectiveEnv = {
       ...runtimeEnvSnapshot.effectiveEnv,
       QWEN_RUNTIME_DIR: primarySessionRuntimeBaseDir
@@ -5863,6 +5879,15 @@ async function runQwenServeImpl(optsIn, deps, loggerLifecycle) {
       daemonLog,
       emitTelemetryLog: core.emitDaemonLog
     });
+    const warnAcpQueueSaturated = /* @__PURE__ */ __name((info) => {
+      daemonLog.warn("ACP NDJSON decoded queue saturated", {
+        requiredBytes: info.requiredBytes,
+        availableBytes: info.availableBytes,
+        maxQueuedMessages: info.maxQueuedMessages,
+        maxQueuedBytes: info.maxQueuedBytes,
+        queueSaturationGraceMs: info.graceMs
+      });
+    }, "warnAcpQueueSaturated");
     const recordPromptQueueWait = /* @__PURE__ */ __name((durationMs) => {
       promptQueueWaitStats.count += 1;
       promptQueueWaitStats.totalMs += durationMs;
@@ -6005,7 +6030,8 @@ async function runQwenServeImpl(optsIn, deps, loggerLifecycle) {
           direction: daemonPipeDirection(direction),
           bytes,
           message
-        }), "onMessageObserved")
+        }), "onMessageObserved"),
+        onQueueSaturated: warnAcpQueueSaturated
       },
       ...acpChildExtraArgs(opts) ? { extraArgs: acpChildExtraArgs(opts) } : {}
     });
@@ -6034,6 +6060,17 @@ async function runQwenServeImpl(optsIn, deps, loggerLifecycle) {
       }
       return source;
     }, "runtimeEpochSourceFor");
+    let mcpAuthenticationActive = false;
+    const acquireMcpAuthentication = /* @__PURE__ */ __name(() => {
+      if (mcpAuthenticationActive) return void 0;
+      mcpAuthenticationActive = true;
+      let released = false;
+      return () => {
+        if (released) return;
+        released = true;
+        mcpAuthenticationActive = false;
+      };
+    }, "acquireMcpAuthentication");
     const totalSessionAdmission = runtime.createTotalSessionAdmissionController(
       {
         maxTotalSessions: opts.maxTotalSessions,
@@ -6070,7 +6107,7 @@ async function runQwenServeImpl(optsIn, deps, loggerLifecycle) {
     }), "persistDisabledToolsFn");
     const persistDisabledSkillsFn = /* @__PURE__ */ __name((workspace, skillName, enabled, assertGenerationOpen) => withSettingsLock(workspace, async () => {
       assertGenerationOpen?.();
-      const { skillSettingStrings, updateWorkspaceSkillSettingLists } = await import("./skill-settings-AKMIXFSJ.js");
+      const { skillSettingStrings, updateWorkspaceSkillSettingLists } = await import("./skill-settings-AKSP665O.js");
       const fresh = loadSettingsForPersistence(workspace);
       const workspaceDisabled = skillSettingStrings(
         fresh,
@@ -6120,7 +6157,7 @@ async function runQwenServeImpl(optsIn, deps, loggerLifecycle) {
     }), "persistDisabledSkillsFn");
     const persistDisabledSkillsBatchFn = /* @__PURE__ */ __name((workspace, skillNames, enabled, assertGenerationOpen) => withSettingsLock(workspace, async () => {
       assertGenerationOpen?.();
-      const { skillSettingStrings, updateWorkspaceSkillSettingLists } = await import("./skill-settings-AKMIXFSJ.js");
+      const { skillSettingStrings, updateWorkspaceSkillSettingLists } = await import("./skill-settings-AKSP665O.js");
       const fresh = loadSettingsForPersistence(workspace);
       const initialDisabled = skillSettingStrings(
         fresh,
@@ -6211,9 +6248,10 @@ async function runQwenServeImpl(optsIn, deps, loggerLifecycle) {
       }
     }), "persistSettingsFn");
     const [{ createSubSessionLauncher }, scheduledTaskRoutes] = await Promise.all([
-      import("./create-sub-session-DS4BJLYZ.js"),
-      import("./scheduled-tasks-2NVKS5Q2.js")
+      import("./create-sub-session-NJ24B4US.js"),
+      import("./scheduled-tasks-FLDYZQOF.js")
     ]);
+    const { sessionAttachmentsRoots } = await import("./session-attachments-root-ZCGXQQTR.js");
     const createCurrentSessionScheduledTaskHandler = /* @__PURE__ */ __name((workspaceCwd, runtimeBaseDir, getBridge, assertGenerationOpen) => async ({
       callerSessionId,
       cron,
@@ -6254,11 +6292,13 @@ async function runQwenServeImpl(optsIn, deps, loggerLifecycle) {
         runtimeBootSettings?.merged.serve ?? {}
       )
     });
+    const attachmentsRoots = sessionAttachmentsRoots(
+      boundWorkspace,
+      primarySessionRuntimeBaseDir
+    );
     const bridge = deps.bridge ?? runtime.createAcpSessionBridge({
-      sessionAttachmentsRoot: sessionAttachmentsRoot(
-        boundWorkspace,
-        primarySessionRuntimeBaseDir
-      ),
+      sessionAttachmentsRoot: attachmentsRoots.root,
+      sessionAttachmentsFallbackRoot: attachmentsRoots.fallback,
       // Reverse tool channel: let `BridgeClient.extMethod` reach the WS
       // connection that hosts a named client MCP server (#5626).
       clientMcpSender: clientMcpSenderRegistry.lookup,
@@ -6306,6 +6346,7 @@ async function runQwenServeImpl(optsIn, deps, loggerLifecycle) {
       ...opts.permissionResponseTimeoutMs !== void 0 ? { permissionResponseTimeoutMs: opts.permissionResponseTimeoutMs } : {},
       boundWorkspace,
       runtimeEpochSource: runtimeEpochSourceFor(boundWorkspace),
+      acquireMcpAuthentication,
       // Prompt terminal ledger: persisted beside the transcript so a
       // restarted daemon can reconcile dangling prompts on cold load.
       promptLedger: runtime.createPromptLedgerSink(
@@ -6685,7 +6726,8 @@ async function runQwenServeImpl(optsIn, deps, loggerLifecycle) {
             direction: daemonPipeDirection(direction),
             bytes,
             message
-          }), "onMessageObserved")
+          }), "onMessageObserved"),
+          onQueueSaturated: warnAcpQueueSaturated
         },
         ...acpChildExtraArgs(opts) ? { extraArgs: acpChildExtraArgs(opts) } : {}
       });
@@ -6698,11 +6740,13 @@ async function runQwenServeImpl(optsIn, deps, loggerLifecycle) {
           secondarySettings?.merged.serve ?? {}
         )
       });
+      const secondaryAttachmentsRoots = sessionAttachmentsRoots(
+        workspaceInput.cwd,
+        secondaryEnv.sessionRuntimeBaseDir
+      );
       const secondaryBridge = runtime.createAcpSessionBridge({
-        sessionAttachmentsRoot: sessionAttachmentsRoot(
-          workspaceInput.cwd,
-          secondaryEnv.sessionRuntimeBaseDir
-        ),
+        sessionAttachmentsRoot: secondaryAttachmentsRoots.root,
+        sessionAttachmentsFallbackRoot: secondaryAttachmentsRoots.fallback,
         clientMcpSender: secondaryClientMcpSenderRegistry.lookup,
         onCreateSubSession: secondarySubSessionLauncher.launch,
         onCreateCurrentSessionScheduledTask: createCurrentSessionScheduledTaskHandler(
@@ -6748,6 +6792,7 @@ async function runQwenServeImpl(optsIn, deps, loggerLifecycle) {
         ...opts.permissionResponseTimeoutMs !== void 0 ? { permissionResponseTimeoutMs: opts.permissionResponseTimeoutMs } : {},
         boundWorkspace: workspaceInput.cwd,
         runtimeEpochSource: runtimeEpochSourceFor(workspaceInput.cwd),
+        acquireMcpAuthentication,
         promptLedger: runtime.createPromptLedgerSink(
           workspaceInput.cwd,
           secondaryEnv.sessionRuntimeBaseDir
@@ -7047,7 +7092,7 @@ async function runQwenServeImpl(optsIn, deps, loggerLifecycle) {
     };
     sessionPrRefreshTimer?.dispose();
     const refreshGeneration = ++sessionPrRefreshGeneration;
-    void import("./session-pr-refresh-OIVL3U3Z.js").then((mod) => {
+    void import("./session-pr-refresh-CT2INROL.js").then((mod) => {
       if (refreshGeneration !== sessionPrRefreshGeneration) return;
       sessionPrRefreshTimer = mod.startSessionPrRefreshTimer({
         workspaceRegistry,
@@ -7121,7 +7166,8 @@ async function runQwenServeImpl(optsIn, deps, loggerLifecycle) {
             direction: daemonPipeDirection(direction),
             bytes,
             message
-          }), "onMessageObserved")
+          }), "onMessageObserved"),
+          onQueueSaturated: warnAcpQueueSaturated
         },
         ...acpChildExtraArgs(opts) ? { extraArgs: acpChildExtraArgs(opts) } : {}
       });
@@ -7148,11 +7194,13 @@ async function runQwenServeImpl(optsIn, deps, loggerLifecycle) {
       });
       let wsBridge;
       try {
+        const wsAttachmentsRoots = sessionAttachmentsRoots(
+          cwd,
+          wsEnv.sessionRuntimeBaseDir
+        );
         wsBridge = runtime.createAcpSessionBridge({
-          sessionAttachmentsRoot: sessionAttachmentsRoot(
-            cwd,
-            wsEnv.sessionRuntimeBaseDir
-          ),
+          sessionAttachmentsRoot: wsAttachmentsRoots.root,
+          sessionAttachmentsFallbackRoot: wsAttachmentsRoots.fallback,
           clientMcpSender: wsClientMcpRegistry.lookup,
           onCreateSubSession: wsSubSessionLauncher.launch,
           onCreateCurrentSessionScheduledTask: createCurrentSessionScheduledTaskHandler(
@@ -7196,6 +7244,7 @@ async function runQwenServeImpl(optsIn, deps, loggerLifecycle) {
           ...opts.permissionResponseTimeoutMs !== void 0 ? { permissionResponseTimeoutMs: opts.permissionResponseTimeoutMs } : {},
           boundWorkspace: cwd,
           runtimeEpochSource: runtimeEpochSourceFor(cwd),
+          acquireMcpAuthentication,
           // Live-conversation workspaces keep transcripts outside the
           // runtime storage layout, so no ledger sink is wired there.
           ...provenance === "live-conversation" ? {} : {
@@ -7575,7 +7624,9 @@ async function runQwenServeImpl(optsIn, deps, loggerLifecycle) {
           } catch {
           }
           if (reason !== "daemon_shutdown" && channelWorkerManager && runtimeToDrain.provenance !== "live-conversation") {
-            await channelWorkerManager.removeWorkspace(runtimeToDrain.workspaceCwd).catch((err) => {
+            await channelWorkerManager.removeWorkspace(runtimeToDrain.workspaceCwd, {
+              permanent: reason === "workspace_removed"
+            }).catch((err) => {
               daemonLog.error(
                 "workspace channel worker cleanup error",
                 err instanceof Error ? err : null
@@ -7705,8 +7756,8 @@ async function runQwenServeImpl(optsIn, deps, loggerLifecycle) {
           { createChannelManagementService },
           { WorkspaceChannelSettingsStore }
         ] = await Promise.all([
-          import("./channel-management-service-IDBNYSFW.js"),
-          import("./channel-settings-store-MZNXRKVI.js")
+          import("./channel-management-service-4MTCEGJB.js"),
+          import("./channel-settings-store-BVKWAI2T.js")
         ]);
         return createChannelManagementService({
           workspaceCwd: targetRuntime.workspaceCwd,
@@ -7911,8 +7962,8 @@ async function runQwenServeImpl(optsIn, deps, loggerLifecycle) {
         { createWorkspaceTrustReconciler },
         { createDaemonTrustPolicyMonitor }
       ] = await Promise.all([
-        import("./workspace-trust-reconciler-4LR3CDL4.js"),
-        import("./daemon-trust-policy-monitor-3LM5RQNS.js")
+        import("./workspace-trust-reconciler-IBDFQBQS.js"),
+        import("./daemon-trust-policy-monitor-JL7F4Y4Q.js")
       ]);
       const materializationFor = /* @__PURE__ */ __name((entry, snapshot, decision) => {
         const boundWorkspaces2 = entry.primary && decision.targetTrusted ? runtime.resolveBoundWorkspacesFromIdeEnv(
@@ -8109,7 +8160,7 @@ async function runQwenServeImpl(optsIn, deps, loggerLifecycle) {
     // through (and start the runtime) exactly like the warm app would.
     // Dynamic import keeps web-shell-static out of the serve fast-path
     // static closure (see the import-boundary guards in fast-path.test.ts).
-    isPreAuthRequest: webShellMounted ? (req) => import("./web-shell-static-PW7OEDQO.js").then(
+    isPreAuthRequest: webShellMounted ? (req) => import("./web-shell-static-POZHGGXE.js").then(
       (webShellStatic) => webShellStatic.isPreAuthWebShellRequest(req)
     ) : void 0
   });
@@ -8129,7 +8180,7 @@ async function runQwenServeImpl(optsIn, deps, loggerLifecycle) {
     );
   }
   const channelValidationSettingsRuntime = opts.channelSelection ? await loadSettingsRuntimeModules() : void 0;
-  const channelValidationTrustPolicy = opts.channelSelection ? await import("./daemon-trust-policy-SUCBJ2CA.js") : void 0;
+  const channelValidationTrustPolicy = opts.channelSelection ? await import("./daemon-trust-policy-YJL442BK.js") : void 0;
   const channelValidationTrustSnapshot = channelValidationTrustPolicy ? await channelValidationTrustPolicy.readDaemonTrustPolicySnapshot() : void 0;
   const resolveChannelWorkspaceGroupsAtListen = /* @__PURE__ */ __name(() => {
     if (!opts.channelSelection || !channelValidationSettingsRuntime || !channelRuntime) {