@qwen-code/qwen-code 0.22.3 → 0.23.0

package/chunks/{daemon-3GNHB3M2.js → daemon-RKDGBFLK.js}

@@ -23,6 +23,47 @@ var MCP_RESTART_CLIENT_HEADROOM_MS = 3e4;
 
 // packages/sdk-typescript/src/daemon/DaemonAuthFlow.ts
 init_esbuild_shims();
+
+// packages/sdk-typescript/src/daemon/DaemonHttpError.ts
+init_esbuild_shims();
+var DaemonHttpError = class extends Error {
+  static {
+    __name(this, "DaemonHttpError");
+  }
+  status;
+  body;
+  constructor(status, body, message) {
+    super(message);
+    this.name = "DaemonHttpError";
+    this.status = status;
+    this.body = body;
+  }
+};
+function getErrorBodyRecord(body) {
+  return typeof body === "object" && body !== null && !Array.isArray(body) ? body : void 0;
+}
+__name(getErrorBodyRecord, "getErrorBodyRecord");
+function isSubagentSessionNotFound(error, toolCallId) {
+  if (!(error instanceof DaemonHttpError) || error.status !== 404) {
+    return false;
+  }
+  const body = getErrorBodyRecord(error.body);
+  if (body?.["code"] !== "session_not_found") return false;
+  return toolCallId === void 0 || body["toolCallId"] === toolCallId;
+}
+__name(isSubagentSessionNotFound, "isSubagentSessionNotFound");
+function isSessionLevelNotFound(error) {
+  if (!(error instanceof DaemonHttpError) || error.status !== 404) {
+    return false;
+  }
+  const body = getErrorBodyRecord(error.body);
+  if (body?.["code"] !== "session_not_found") return false;
+  const toolCallId = body["toolCallId"];
+  return toolCallId === void 0 || toolCallId === null;
+}
+__name(isSessionLevelNotFound, "isSessionLevelNotFound");
+
+// packages/sdk-typescript/src/daemon/DaemonAuthFlow.ts
 var DEVICE_FLOW_EXPIRY_GRACE_MS = 3e4;
 var TERMINAL_STATUSES = /* @__PURE__ */ new Set(
   ["authorized", "expired", "error", "cancelled"]
@@ -169,6 +210,7 @@ __name(signalAbortError, "signalAbortError");
 // packages/sdk-typescript/src/daemon/session-pr.ts
 init_esbuild_shims();
 var MAX_SESSION_PR_URL_LENGTH = 2048;
+var MAX_SESSION_PR_ISSUES = 10;
 function hasControlCharacter(value) {
   return Array.from(value).some((character) => {
     const code = character.charCodeAt(0);
@@ -176,54 +218,23 @@ function hasControlCharacter(value) {
   });
 }
 __name(hasControlCharacter, "hasControlCharacter");
+function isBindingUrl(value) {
+  return typeof value === "string" && value.length <= MAX_SESSION_PR_URL_LENGTH && /^https?:\/\//i.test(value) && !hasControlCharacter(value);
+}
+__name(isBindingUrl, "isBindingUrl");
+function isDaemonSessionIssueInfo(value) {
+  if (typeof value !== "object" || value === null) return false;
+  const v = value;
+  return typeof v["number"] === "number" && Number.isInteger(v["number"]) && v["number"] > 0 && isBindingUrl(v["url"]) && (v["state"] === void 0 || v["state"] === "open" || v["state"] === "completed" || v["state"] === "not_planned");
+}
+__name(isDaemonSessionIssueInfo, "isDaemonSessionIssueInfo");
 function isDaemonSessionPrInfo(value) {
   if (typeof value !== "object" || value === null) return false;
   const v = value;
-  return typeof v["number"] === "number" && Number.isInteger(v["number"]) && v["number"] > 0 && typeof v["url"] === "string" && v["url"].length <= MAX_SESSION_PR_URL_LENGTH && /^https?:\/\//i.test(v["url"]) && // The daemon interpolates the url into a stderr audit line — control
-  // characters would forge log lines downstream of this gate.
-  !hasControlCharacter(v["url"]) && (v["state"] === void 0 || v["state"] === "open" || v["state"] === "merged" || v["state"] === "closed");
+  return typeof v["number"] === "number" && Number.isInteger(v["number"]) && v["number"] > 0 && isBindingUrl(v["url"]) && (v["state"] === void 0 || v["state"] === "open" || v["state"] === "merged" || v["state"] === "closed") && (v["issues"] === void 0 || Array.isArray(v["issues"]) && v["issues"].length <= MAX_SESSION_PR_ISSUES && v["issues"].every(isDaemonSessionIssueInfo));
 }
 __name(isDaemonSessionPrInfo, "isDaemonSessionPrInfo");
 
-// packages/sdk-typescript/src/daemon/DaemonHttpError.ts
-init_esbuild_shims();
-var DaemonHttpError = class extends Error {
-  static {
-    __name(this, "DaemonHttpError");
-  }
-  status;
-  body;
-  constructor(status, body, message) {
-    super(message);
-    this.name = "DaemonHttpError";
-    this.status = status;
-    this.body = body;
-  }
-};
-function getErrorBodyRecord(body) {
-  return typeof body === "object" && body !== null && !Array.isArray(body) ? body : void 0;
-}
-__name(getErrorBodyRecord, "getErrorBodyRecord");
-function isSubagentSessionNotFound(error, toolCallId) {
-  if (!(error instanceof DaemonHttpError) || error.status !== 404) {
-    return false;
-  }
-  const body = getErrorBodyRecord(error.body);
-  if (body?.["code"] !== "session_not_found") return false;
-  return toolCallId === void 0 || body["toolCallId"] === toolCallId;
-}
-__name(isSubagentSessionNotFound, "isSubagentSessionNotFound");
-function isSessionLevelNotFound(error) {
-  if (!(error instanceof DaemonHttpError) || error.status !== 404) {
-    return false;
-  }
-  const body = getErrorBodyRecord(error.body);
-  if (body?.["code"] !== "session_not_found") return false;
-  const toolCallId = body["toolCallId"];
-  return toolCallId === void 0 || toolCallId === null;
-}
-__name(isSessionLevelNotFound, "isSessionLevelNotFound");
-
 // packages/sdk-typescript/src/daemon/RestSseTransport.ts
 init_esbuild_shims();
 
@@ -627,6 +638,7 @@ var DAEMON_APPROVAL_MODES = PERMISSION_MODES;
 // packages/sdk-typescript/src/daemon/standalone-sessions.ts
 init_esbuild_shims();
 var STANDALONE_SESSIONS_CAPABILITY = "standalone_sessions_v1";
+var STANDALONE_SESSION_OPTIONS_CAPABILITY = "standalone_session_options_v1";
 var DaemonStandaloneProtocolError = class extends Error {
   constructor(route, detail) {
     super(`${route}: malformed standalone-session response (${detail})`);
@@ -718,6 +730,138 @@ function validateStandaloneFields(value, route) {
   validateWorkingDirectory(value["workingDirectory"], route);
 }
 __name(validateStandaloneFields, "validateStandaloneFields");
+function validateOptionalString(value, field, route) {
+  if (value[field] !== void 0 && typeof value[field] !== "string") {
+    throw new DaemonStandaloneProtocolError(route, `expected ${field} string`);
+  }
+}
+__name(validateOptionalString, "validateOptionalString");
+function validateStatusCell(value, route) {
+  requireString(value, "kind", route);
+  if (!["ok", "warning", "error", "disabled", "not_started", "unknown"].includes(
+    String(value["status"])
+  )) {
+    throw new DaemonStandaloneProtocolError(route, "invalid status");
+  }
+  for (const field of ["error", "hint"]) {
+    validateOptionalString(value, field, route);
+  }
+  if (value["errorKind"] !== void 0 && !DAEMON_ERROR_KINDS.includes(
+    value["errorKind"]
+  )) {
+    throw new DaemonStandaloneProtocolError(route, "invalid errorKind");
+  }
+}
+__name(validateStatusCell, "validateStatusCell");
+function validateProviderModel(value, route) {
+  const model = asRecord(value, route, "provider model");
+  requireString(model, "modelId", route);
+  requireString(model, "baseModelId", route);
+  requireString(model, "name", route, true);
+  if (model["description"] !== void 0 && model["description"] !== null && typeof model["description"] !== "string") {
+    throw new DaemonStandaloneProtocolError(route, "invalid description");
+  }
+  if (model["contextLimit"] !== void 0 && (typeof model["contextLimit"] !== "number" || !Number.isFinite(model["contextLimit"]) || model["contextLimit"] <= 0)) {
+    throw new DaemonStandaloneProtocolError(route, "invalid contextLimit");
+  }
+  for (const field of ["baseUrl", "envKey"]) {
+    validateOptionalString(model, field, route);
+  }
+  for (const field of ["isCurrent", "isRuntime"]) {
+    if (typeof model[field] !== "boolean") {
+      throw new DaemonStandaloneProtocolError(
+        route,
+        `expected ${field} boolean`
+      );
+    }
+  }
+  if (model["modalities"] !== void 0) {
+    const modalities = asRecord(model["modalities"], route, "modalities");
+    for (const field of ["image", "pdf", "audio", "video"]) {
+      if (modalities[field] !== void 0 && typeof modalities[field] !== "boolean") {
+        throw new DaemonStandaloneProtocolError(
+          route,
+          `expected modalities.${field} boolean`
+        );
+      }
+    }
+  }
+  if (model["configOptions"] !== void 0 && !Array.isArray(model["configOptions"])) {
+    throw new DaemonStandaloneProtocolError(route, "expected configOptions[]");
+  }
+}
+__name(validateProviderModel, "validateProviderModel");
+function parseStandaloneSessionOptions(value, route) {
+  const options = asRecord(value, route);
+  if (options["workspaceCwd"] !== void 0 || options["acpChannelLive"] !== void 0) {
+    throw new DaemonStandaloneProtocolError(
+      route,
+      "standalone options exposed workspace internals"
+    );
+  }
+  if (options["v"] !== 1) {
+    throw new DaemonStandaloneProtocolError(route, "expected v=1");
+  }
+  if (typeof options["initialized"] !== "boolean") {
+    throw new DaemonStandaloneProtocolError(
+      route,
+      "expected initialized boolean"
+    );
+  }
+  if (options["current"] !== void 0) {
+    const current = asRecord(options["current"], route, "current");
+    for (const field of [
+      "authType",
+      "modelId",
+      "baseUrl",
+      "fastModelId",
+      "visionModelId"
+    ]) {
+      validateOptionalString(current, field, route);
+    }
+  }
+  if (options["approvalMode"] !== void 0 && !DAEMON_APPROVAL_MODES.includes(
+    options["approvalMode"]
+  )) {
+    throw new DaemonStandaloneProtocolError(route, "invalid approvalMode");
+  }
+  if (!Array.isArray(options["providers"])) {
+    throw new DaemonStandaloneProtocolError(route, "expected providers[]");
+  }
+  for (const value2 of options["providers"]) {
+    const provider = asRecord(value2, route, "provider");
+    validateStatusCell(provider, route);
+    if (provider["kind"] !== "model_provider") {
+      throw new DaemonStandaloneProtocolError(
+        route,
+        "expected model_provider kind"
+      );
+    }
+    requireString(provider, "authType", route);
+    if (typeof provider["current"] !== "boolean") {
+      throw new DaemonStandaloneProtocolError(
+        route,
+        "expected provider current boolean"
+      );
+    }
+    if (!Array.isArray(provider["models"])) {
+      throw new DaemonStandaloneProtocolError(route, "expected models[]");
+    }
+    for (const model of provider["models"]) {
+      validateProviderModel(model, route);
+    }
+  }
+  if (options["errors"] !== void 0) {
+    if (!Array.isArray(options["errors"])) {
+      throw new DaemonStandaloneProtocolError(route, "expected errors[]");
+    }
+    for (const value2 of options["errors"]) {
+      validateStatusCell(asRecord(value2, route, "error"), route);
+    }
+  }
+  return options;
+}
+__name(parseStandaloneSessionOptions, "parseStandaloneSessionOptions");
 function parseStandaloneSession(value, route, expectedSessionId) {
   const session = asRecord(value, route);
   requireSessionId(session, route, expectedSessionId);
@@ -725,6 +869,12 @@ function parseStandaloneSession(value, route, expectedSessionId) {
   if (typeof session["attached"] !== "boolean") {
     throw new DaemonStandaloneProtocolError(route, "expected attached boolean");
   }
+  if (session["modelApplied"] !== void 0 && typeof session["modelApplied"] !== "boolean") {
+    throw new DaemonStandaloneProtocolError(
+      route,
+      "expected modelApplied boolean"
+    );
+  }
   validateStandaloneFields(session, route);
   return session;
 }
@@ -891,11 +1041,15 @@ function parseSessionGenerationEvent(value) {
 __name(parseSessionGenerationEvent, "parseSessionGenerationEvent");
 var DEFAULT_SESSION_LIST_PAGE_SIZE = 20;
 var DEFAULT_FETCH_TIMEOUT_MS = 3e4;
+var DEFAULT_PROVIDER_MUTATION_TIMEOUT_MS = 0;
 var DEFAULT_SESSION_RESTORE_TIMEOUT_MS = 7e4;
 var SESSION_RESTORE_TIMEOUT_HEADROOM_MS = 1e4;
 var VOICE_TRANSCRIPTION_DEFAULT_TIMEOUT_MS = 65e3;
 var GITHUB_SETUP_DEFAULT_TIMEOUT_MS = 9e4;
 var CHANNEL_NOTIFY_DEFAULT_TIMEOUT_MS = 35e3;
+var WORKSPACE_RUNTIME_ENSURE_SERVER_DEADLINE_MS = 6e4;
+var WORKSPACE_RUNTIME_ENSURE_CLIENT_HEADROOM_MS = 2e3;
+var WORKSPACE_RUNTIME_ENSURE_TIMEOUT_MS = WORKSPACE_RUNTIME_ENSURE_SERVER_DEADLINE_MS + WORKSPACE_RUNTIME_ENSURE_CLIENT_HEADROOM_MS;
 var MAX_TIMER_DELAY_MS = 2147483647;
 var DEFAULT_MAX_PENDING_PROMPTS_PER_SESSION = 5;
 var MCP_RESTART_DEFAULT_TIMEOUT_MS = MCP_RESTART_SERVER_DEADLINE_MS + MCP_RESTART_CLIENT_HEADROOM_MS;
@@ -1106,7 +1260,23 @@ var DaemonClient = class {
       }
     } catch {
     }
-    const detail = body && typeof body === "object" && "error" in body ? String(body.error) : `HTTP ${res.status}`;
+    const errorBody = body && typeof body === "object" && !Array.isArray(body) ? body : void 0;
+    let detail = errorBody && "error" in errorBody ? String(errorBody["error"]) : `HTTP ${res.status}`;
+    if (res.status >= 500 && errorBody?.["error"] === "Internal error" && typeof errorBody["code"] === "number") {
+      const data = errorBody["data"];
+      if (typeof data === "string" && data.length > 0) {
+        detail = data;
+      } else if (data && typeof data === "object" && !Array.isArray(data)) {
+        const record = data;
+        const details = record["details"];
+        const message = record["message"];
+        if (typeof details === "string" && details.length > 0) {
+          detail = details;
+        } else if (typeof message === "string" && message.length > 0) {
+          detail = message;
+        }
+      }
+    }
     if (sessionId && res.status === 503 && body && typeof body === "object") {
       const data = body;
       if (data.code === "prompt_queue_full") {
@@ -1301,6 +1471,31 @@ var DaemonClient = class {
       }
     );
   }
+  async setUserMcpServer(name, config) {
+    return await this.jsonRequest(
+      `/workspace/config/mcp/servers/${urlEncode(name)}`,
+      "PUT /workspace/config/mcp/servers/:name",
+      {
+        method: "PUT",
+        body: { scope: "user", config },
+        mode: "rest"
+      }
+    );
+  }
+  async removeUserMcpServer(name) {
+    return await this.jsonRequest(
+      `/workspace/config/mcp/servers/${urlEncode(name)}?scope=user`,
+      "DELETE /workspace/config/mcp/servers/:name",
+      { method: "DELETE", mode: "rest" }
+    );
+  }
+  async setUserMcpServerEnabled(name, enabled) {
+    return await this.jsonRequest(
+      `/workspace/config/mcp/${urlEncode(name)}/${enabled ? "enable" : "disable"}`,
+      "POST /workspace/config/mcp/:server/:action",
+      { method: "POST", body: {}, mode: "rest" }
+    );
+  }
   async initializeWorkspaceMcp() {
     return await this.fetchWithTimeout(
       `${this.baseUrl}/workspace/mcp/initialize`,
@@ -1402,11 +1597,11 @@ var DaemonClient = class {
       { method: "POST", body: opts ?? {}, mode: "rest" }
     );
   }
-  async workspaceGitPull(opts) {
+  async workspaceGitPull(opts, timeoutMs) {
     return await this.jsonRequest(
       "/workspace/git/pull",
       "POST /workspace/git/pull",
-      { method: "POST", body: opts ?? {}, mode: "rest" }
+      { method: "POST", body: opts ?? {}, mode: "rest", timeoutMs }
     );
   }
   async workspaceGitCommit(message, opts) {
@@ -1475,6 +1670,24 @@ var DaemonClient = class {
       { mode: "rest" }
     );
   }
+  async ensureWorkspaceRuntime() {
+    return await this.jsonRequest(
+      "/workspace/runtime/ensure",
+      "POST /workspace/runtime/ensure",
+      {
+        method: "POST",
+        timeoutMs: WORKSPACE_RUNTIME_ENSURE_TIMEOUT_MS,
+        mode: "rest"
+      }
+    );
+  }
+  async workspaceRuntimeStatus() {
+    return await this.jsonRequest(
+      "/workspace/runtime/status",
+      "GET /workspace/runtime/status",
+      { mode: "rest" }
+    );
+  }
   async workspaceProviders() {
     return await this.fetchWithTimeout(
       `${this.baseUrl}/workspace/providers`,
@@ -1777,22 +1990,21 @@ var DaemonClient = class {
   }
   // -- Workspace files (workspace files) -------------------------------
   async readWorkspaceFile(filePath, opts = {}, clientId) {
-    const url = new URL(`${this.baseUrl}/file`);
-    url.searchParams.set("path", filePath);
+    const query = new URLSearchParams({ path: filePath });
     if (opts.maxBytes !== void 0) {
-      url.searchParams.set("maxBytes", String(opts.maxBytes));
+      query.set("maxBytes", String(opts.maxBytes));
     }
     if (opts.line !== void 0) {
-      url.searchParams.set("line", String(opts.line));
+      query.set("line", String(opts.line));
     }
     if (opts.limit !== void 0) {
-      url.searchParams.set("limit", String(opts.limit));
+      query.set("limit", String(opts.limit));
     }
     if (opts.cursor !== void 0) {
-      url.searchParams.set("cursor", opts.cursor);
+      query.set("cursor", opts.cursor);
     }
     return await this.fetchWithTimeout(
-      url.toString(),
+      `${this.baseUrl}/file?${query.toString()}`,
       { headers: this.headers({}, clientId) },
       async (res) => {
         if (!res.ok) throw await this.failOnError(res, "GET /file");
@@ -1818,10 +2030,9 @@ var DaemonClient = class {
     );
   }
   async fileStat(filePath) {
-    const url = new URL(`${this.baseUrl}/stat`);
-    url.searchParams.set("path", filePath);
+    const query = new URLSearchParams({ path: filePath });
     return await this.fetchWithTimeout(
-      url.toString(),
+      `${this.baseUrl}/stat?${query.toString()}`,
       { headers: this.headers() },
       async (res) => {
         if (!res.ok) throw await this.failOnError(res, "GET /stat");
@@ -1830,10 +2041,9 @@ var DaemonClient = class {
     );
   }
   async dirList(dirPath) {
-    const url = new URL(`${this.baseUrl}/list`);
-    url.searchParams.set("path", dirPath);
+    const query = new URLSearchParams({ path: dirPath });
     return await this.fetchWithTimeout(
-      url.toString(),
+      `${this.baseUrl}/list?${query.toString()}`,
       { headers: this.headers() },
       async (res) => {
         if (!res.ok) throw await this.failOnError(res, "GET /list");
@@ -1846,10 +2056,9 @@ var DaemonClient = class {
    * pick a path outside any registered workspace (e.g. "Add workspace").
    */
   async workspacePathSuggestions(prefix) {
-    const url = new URL(`${this.baseUrl}/workspace-path-suggestions`);
-    url.searchParams.set("prefix", prefix);
+    const query = new URLSearchParams({ prefix });
     return await this.fetchWithTimeout(
-      url.toString(),
+      `${this.baseUrl}/workspace-path-suggestions?${query.toString()}`,
       { headers: this.headers() },
       async (res) => {
         if (!res.ok) {
@@ -1872,10 +2081,9 @@ var DaemonClient = class {
     );
   }
   async glob(pattern) {
-    const url = new URL(`${this.baseUrl}/glob`);
-    url.searchParams.set("pattern", pattern);
+    const query = new URLSearchParams({ pattern });
     return await this.fetchWithTimeout(
-      url.toString(),
+      `${this.baseUrl}/glob?${query.toString()}`,
       { headers: this.headers() },
       async (res) => {
         if (!res.ok) throw await this.failOnError(res, "GET /glob");
@@ -1925,9 +2133,8 @@ var DaemonClient = class {
    * @internal
    */
   async uploadFileToPath(uploadPath, label, req, clientId) {
-    const target = new URL(`${this.baseUrl}${uploadPath}`);
-    target.searchParams.set("path", req.path);
-    const url = target.toString();
+    const query = new URLSearchParams({ path: req.path });
+    const url = `${this.baseUrl}${uploadPath}?${query.toString()}`;
     const headers = this.headers(
       { "Content-Type": "application/octet-stream" },
       clientId
@@ -2080,10 +2287,11 @@ var DaemonClient = class {
   }
   /**
    * Append to or replace `QWEN.md` at workspace or global scope.
-   * Strict mutation gate (`token_required` on no-token loopback
-   * defaults). When the daemon advertises `workspace_memory`, expect
-   * 200 with `{ ok, filePath, bytesWritten, mode }`; older daemons
-   * without the capability return 404.
+   * The strict mutation gate accepts trusted-loopback callers without a token;
+   * older daemons and non-trusted embeds can still return `token_required`.
+   * When the daemon advertises `workspace_memory`, expect 200 with
+   * `{ ok, filePath, bytesWritten, mode }`; older daemons without the
+   * capability return 404.
    */
   async writeWorkspaceMemory(req, clientId) {
     return await this.fetchWithTimeout(
@@ -2107,6 +2315,11 @@ var DaemonClient = class {
    * poll `getWorkspaceMemoryRememberTask()` until the task is terminal.
    */
   async rememberWorkspaceMemory(content, opts = {}) {
+    if (opts.scope) {
+      await this.requireCapability(
+        opts.scope === "project" ? "workspace_memory_remember_project_scope" : "workspace_memory_remember_user_scope"
+      );
+    }
     return await this.jsonRequest(
       WORKSPACE_MEMORY_REMEMBER_PATH,
       `POST ${WORKSPACE_MEMORY_REMEMBER_PATH}`,
@@ -2114,7 +2327,8 @@ var DaemonClient = class {
         method: "POST",
         body: {
           content,
-          contextMode: opts.contextMode ?? "workspace"
+          contextMode: opts.contextMode ?? "workspace",
+          ...opts.scope ? { scope: opts.scope } : {}
         },
         clientId: opts.clientId
       }
@@ -2128,12 +2342,18 @@ var DaemonClient = class {
     );
   }
   async forgetWorkspaceMemory(query, opts = {}) {
+    if (opts.scope) {
+      await this.requireCapability("workspace_memory_forget_scope");
+    }
     return await this.jsonRequest(
       WORKSPACE_MEMORY_FORGET_PATH,
       `POST ${WORKSPACE_MEMORY_FORGET_PATH}`,
       {
         method: "POST",
-        body: { query },
+        body: {
+          query,
+          ...opts.scope ? { scope: opts.scope } : {}
+        },
         clientId: opts.clientId
       }
     );
@@ -2368,6 +2588,16 @@ var DaemonClient = class {
     );
   }
   // -- Sessions ----------------------------------------------------------
+  async getStandaloneSessionOptions() {
+    await this.requireCapability(STANDALONE_SESSION_OPTIONS_CAPABILITY);
+    const route = "GET /standalone/session-options";
+    const response = await this.jsonRequest(
+      "/standalone/session-options",
+      route,
+      { mode: "rest" }
+    );
+    return parseStandaloneSessionOptions(response, route);
+  }
   async createStandaloneSession(options = {}) {
     await this.requireCapability(STANDALONE_SESSIONS_CAPABILITY);
     const { sessionId: requestedSessionId, ...request } = options;
@@ -2639,6 +2869,23 @@ var DaemonClient = class {
       "GET /workspace/sessions"
     );
   }
+  /**
+   * Search user/assistant message content across a workspace's persisted
+   * sessions via `GET /workspace/:id/sessions/search`. Returns one summary +
+   * snippet per matching session, most recently modified first. Requires a
+   * daemon new enough to serve the route — older daemons answer 404.
+   */
+  async searchWorkspaceSessions(workspaceCwd, queryText, options = {}) {
+    const query = new URLSearchParams({ q: queryText });
+    if (options.maxResults !== void 0) {
+      query.set("maxResults", String(options.maxResults));
+    }
+    return await this.jsonRequest(
+      `/workspace/${urlEncode(workspaceCwd)}/sessions/search?${query.toString()}`,
+      "GET /workspace/sessions/search",
+      { ...options.signal ? { signal: options.signal } : {} }
+    );
+  }
   /**
    * Read the memory-only live-state snapshot for a workspace via
    * `GET /workspaces/:workspace/sessions/live-state`: the complete set of
@@ -2851,6 +3098,18 @@ var DaemonClient = class {
       }
     );
   }
+  async sessionWorkflowTasks(sessionId, clientId) {
+    return await this.fetchWithTimeout(
+      `${this.baseUrl}/session/${urlEncode(sessionId)}/tasks?includeWorkflows=true`,
+      { headers: this.headers({}, clientId) },
+      async (res) => {
+        if (!res.ok) {
+          throw await this.failOnError(res, "GET /session/:id/tasks");
+        }
+        return await res.json();
+      }
+    );
+  }
   async sessionLspStatus(sessionId, clientId) {
     return await this.fetchWithTimeout(
       `${this.baseUrl}/session/${urlEncode(sessionId)}/lsp`,
@@ -2864,18 +3123,30 @@ var DaemonClient = class {
     );
   }
   async sessionTaskCancel(sessionId, taskId, kind, clientId) {
+    return await this.sessionTaskMutation(
+      sessionId,
+      taskId,
+      "cancel",
+      { kind },
+      clientId
+    );
+  }
+  async sessionWorkflowTaskAction(sessionId, taskId, action, clientId) {
+    return await this.sessionTaskMutation(sessionId, taskId, "workflow-action", { action }, clientId);
+  }
+  async sessionTaskMutation(sessionId, taskId, route, body, clientId) {
     return await this.fetchWithTimeout(
-      `${this.baseUrl}/session/${urlEncode(sessionId)}/tasks/${urlEncode(taskId)}/cancel`,
+      `${this.baseUrl}/session/${urlEncode(sessionId)}/tasks/${urlEncode(taskId)}/${route}`,
       {
         method: "POST",
         headers: this.headers({ "Content-Type": "application/json" }, clientId),
-        body: JSON.stringify({ kind })
+        body: JSON.stringify(body)
       },
       async (res) => {
         if (!res.ok) {
           throw await this.failOnError(
             res,
-            "POST /session/:id/tasks/:taskId/cancel"
+            `POST /session/:id/tasks/:taskId/${route}`
           );
         }
         return await res.json();
@@ -2923,6 +3194,19 @@ var DaemonClient = class {
    * differs in the URL suffix and the route name reported on errors.
    */
   async restoreSession(action, sessionId, req, clientId) {
+    let sourceType = req.sourceType;
+    let sourceId = req.sourceId;
+    if (req.sourceType !== void 0 || req.sourceId !== void 0) {
+      try {
+        await this.requireCapability("session_source_metadata");
+      } catch (error) {
+        if (!(error instanceof DaemonCapabilityMissingError)) {
+          throw error;
+        }
+        sourceType = void 0;
+        sourceId = void 0;
+      }
+    }
     const timeoutMs = this.resolveRestoreTimeoutMs(req.timeoutMs);
     return await this.fetchWithTimeout(
       `${this.baseUrl}/session/${urlEncode(sessionId)}/${action}`,
@@ -2933,7 +3217,9 @@ var DaemonClient = class {
           cwd: req.workspaceCwd,
           ...req.approvalMode !== void 0 ? { approvalMode: req.approvalMode } : {},
           ...action === "load" && req.historyPageSize !== void 0 ? { historyPageSize: req.historyPageSize } : {},
-          ...action === "load" && req.liveReplayMode !== void 0 ? { liveReplayMode: req.liveReplayMode } : {}
+          ...action === "load" && req.liveReplayMode !== void 0 ? { liveReplayMode: req.liveReplayMode } : {},
+          ...sourceType !== void 0 ? { sourceType } : {},
+          ...sourceId !== void 0 ? { sourceId } : {}
         })
       },
       async (res) => {
@@ -3299,8 +3585,9 @@ var DaemonClient = class {
   }
   /**
    * Execute a direct daemon-side shell command for a session. The daemon must
-   * be started with direct session shell enabled and bearer auth configured;
-   * callers must also provide a client id already bound to this session.
+   * be started with direct session shell enabled and either bearer auth or
+   * trusted-loopback operator authority; callers must also provide a client id
+   * already bound to this session.
    * Prefer `DaemonSessionClient.shellCommand()` when available because it
    * forwards the session-bound client id automatically.
    */
@@ -3322,9 +3609,9 @@ var DaemonClient = class {
   }
   /**
    * Toggle a tool name in the workspace's
-   * `tools.disabled` settings list. Strict-gated mutation route — the
-   * daemon must be configured with a bearer token. The daemon writes
-   * the settings file directly and fan-outs a `tool_toggled` event to
+   * `tools.disabled` settings list. The strict mutation gate accepts
+   * trusted-loopback operator authority or listener credentials. The daemon
+   * writes the settings file directly and fan-outs a `tool_toggled` event to
    * every live session SSE bus.
    *
    * Already-registered tools in active sessions are NOT retroactively
@@ -3481,7 +3768,8 @@ var DaemonClient = class {
           throw await this.failOnError(res, "DELETE /workspace/models");
         }
         return await res.json();
-      }
+      },
+      this.hasExplicitFetchTimeout ? void 0 : DEFAULT_PROVIDER_MUTATION_TIMEOUT_MS
     );
   }
   async workspaceVoice(clientId) {
@@ -4090,11 +4378,20 @@ var DaemonClient = class {
       }
     );
   }
-  async setSessionConfigOption(sessionId, configId, value, clientId) {
+  async setSessionConfigOption(sessionId, configId, value, clientOrOptions) {
+    const options = typeof clientOrOptions === "string" ? { clientId: clientOrOptions } : clientOrOptions;
     return await this.jsonRequest(
       `/session/${urlEncode(sessionId)}/config-option`,
       "POST /session/:id/config-option",
-      { method: "POST", body: { configId, value }, clientId }
+      {
+        method: "POST",
+        body: {
+          configId,
+          value,
+          ...options?.persist !== void 0 ? { persist: options.persist } : {}
+        },
+        clientId: options?.clientId
+      }
     );
   }
   async setSessionLanguage(sessionId, language, opts) {
@@ -4119,6 +4416,26 @@ var DaemonClient = class {
       }
     );
   }
+  /**
+   * Sessionless user-level language sync (`POST /language`). Succeeds with
+   * zero sessions, so hosts can switch language before creating one.
+   * Pre-flight `caps.features.includes('user_language_sync')` — daemons that
+   * predate the route or were built without settings persistence 404.
+   */
+  async setUserLanguage(language, opts) {
+    return await this.jsonRequest(
+      "/language",
+      "POST /language",
+      {
+        method: "POST",
+        body: {
+          language,
+          syncOutputLanguage: opts?.syncOutputLanguage ?? false
+        },
+        clientId: opts?.clientId
+      }
+    );
+  }
   /**
    * Send a prompt to the agent. Supports both blocking (legacy 200)
    * and non-blocking (202 + SSE `turn_complete`) daemon responses.
@@ -4582,7 +4899,8 @@ var DaemonClient = class {
           throw await this.failOnError(res, "POST /workspace/auth/provider");
         }
         return await res.json();
-      }
+      },
+      this.hasExplicitFetchTimeout ? void 0 : DEFAULT_PROVIDER_MUTATION_TIMEOUT_MS
     );
   }
   async addWorkspace(cwd, options = {}) {
@@ -4710,6 +5028,153 @@ var WorkspaceDaemonClient = class {
   workspaceMcp() {
     return this.get("/mcp", "GET /workspaces/:workspace/mcp");
   }
+  mcpConfig() {
+    return this.client.workspaceJsonRequest(
+      this.workspaceSelector,
+      "/config/mcp/servers",
+      "GET /workspaces/:workspace/config/mcp/servers",
+      { mode: "rest" }
+    );
+  }
+  setMcpServer(name, config) {
+    return this.client.workspaceJsonRequest(
+      this.workspaceSelector,
+      `/config/mcp/servers/${urlEncode(name)}`,
+      "PUT /workspaces/:workspace/config/mcp/servers/:name",
+      {
+        method: "PUT",
+        body: { scope: "workspace", config },
+        mode: "rest"
+      }
+    );
+  }
+  removeMcpServer(name) {
+    return this.client.workspaceJsonRequest(
+      this.workspaceSelector,
+      `/config/mcp/servers/${urlEncode(name)}?scope=workspace`,
+      "DELETE /workspaces/:workspace/config/mcp/servers/:name",
+      { method: "DELETE", mode: "rest" }
+    );
+  }
+  setMcpServerEnabled(name, enabled) {
+    return this.client.workspaceJsonRequest(
+      this.workspaceSelector,
+      `/config/mcp/${urlEncode(name)}/${enabled ? "enable" : "disable"}`,
+      "POST /workspaces/:workspace/config/mcp/:server/:action",
+      { method: "POST", body: {}, mode: "rest" }
+    );
+  }
+  runtimeMcp() {
+    return this.client.workspaceJsonRequest(
+      this.workspaceSelector,
+      "/runtime/mcp",
+      "GET /workspaces/:workspace/runtime/mcp",
+      { mode: "rest" }
+    );
+  }
+  runtimeMcpTools(serverName) {
+    return this.client.workspaceJsonRequest(
+      this.workspaceSelector,
+      `/runtime/mcp/${urlEncode(serverName)}/tools`,
+      "GET /workspaces/:workspace/runtime/mcp/:server/tools",
+      { mode: "rest" }
+    );
+  }
+  runtimeMcpResources(serverName) {
+    return this.client.workspaceJsonRequest(
+      this.workspaceSelector,
+      `/runtime/mcp/${urlEncode(serverName)}/resources`,
+      "GET /workspaces/:workspace/runtime/mcp/:server/resources",
+      { mode: "rest" }
+    );
+  }
+  reloadRuntimeMcp(options = {}) {
+    return this.client.workspaceJsonRequest(
+      this.workspaceSelector,
+      "/runtime/mcp/reload",
+      "POST /workspaces/:workspace/runtime/mcp/reload",
+      {
+        method: "POST",
+        body: options,
+        mode: "rest",
+        timeoutMs: MCP_RESTART_DEFAULT_TIMEOUT_MS
+      }
+    );
+  }
+  restartRuntimeMcpServer(serverName) {
+    return this.client.workspaceJsonRequest(
+      this.workspaceSelector,
+      `/runtime/mcp/${urlEncode(serverName)}/restart`,
+      "POST /workspaces/:workspace/runtime/mcp/:server/restart",
+      {
+        method: "POST",
+        body: {},
+        mode: "rest",
+        timeoutMs: MCP_RESTART_DEFAULT_TIMEOUT_MS
+      }
+    );
+  }
+  manageRuntimeMcpServer(serverName, action) {
+    return this.client.workspaceJsonRequest(
+      this.workspaceSelector,
+      `/runtime/mcp/${urlEncode(serverName)}/${action}`,
+      "POST /workspaces/:workspace/runtime/mcp/:server/:action",
+      {
+        method: "POST",
+        body: {},
+        mode: "rest",
+        timeoutMs: MCP_RESTART_DEFAULT_TIMEOUT_MS
+      }
+    );
+  }
+  ensureRuntime() {
+    return this.client.workspaceJsonRequest(
+      this.workspaceSelector,
+      "/runtime/ensure",
+      "POST /workspaces/:workspace/runtime/ensure",
+      {
+        method: "POST",
+        timeoutMs: WORKSPACE_RUNTIME_ENSURE_TIMEOUT_MS,
+        mode: "rest"
+      }
+    );
+  }
+  runtimeStatus() {
+    return this.client.workspaceJsonRequest(
+      this.workspaceSelector,
+      "/runtime/status",
+      "GET /workspaces/:workspace/runtime/status",
+      { mode: "rest" }
+    );
+  }
+  /**
+   * Ask the daemon host to open this workspace's directory in the host's OS
+   * file manager (Finder/Explorer/xdg-open). Only advertised via the
+   * `workspace_local_open` capability; on a headless host the daemon answers
+   * 501 `local_path_open_unavailable`.
+   */
+  async openLocally() {
+    await this.client.workspaceJsonRequest(
+      this.workspaceSelector,
+      "/open",
+      "POST /workspaces/:workspace/open",
+      { method: "POST", body: {}, mode: "rest" }
+    );
+  }
+  /**
+   * Ask the daemon host to open a terminal window in this workspace's
+   * directory (Terminal.app/wt.exe/a Linux terminal emulator). Only
+   * advertised via the `workspace_local_terminal` capability; on a headless
+   * host the daemon answers 501 `local_path_open_unavailable`.
+   */
+  async openTerminalLocally() {
+    await this.client.workspaceJsonRequest(
+      this.workspaceSelector,
+      "/open",
+      "POST /workspaces/:workspace/open",
+      { method: "POST", body: { target: "terminal" }, mode: "rest" }
+    );
+  }
   /**
    * Send text directly through this exact workspace's channel worker.
    * A successful capability pre-flight does not guarantee worker liveness;
@@ -4984,13 +5449,13 @@ var WorkspaceDaemonClient = class {
       { method: "POST", body: opts ?? {}, mode: "rest" }
     );
   }
-  workspaceGitPull(opts, cwd) {
+  workspaceGitPull(opts, cwd, timeoutMs) {
     const suffix = cwd != null ? `/git/pull?cwd=${urlEncode(cwd)}` : "/git/pull";
     return this.client.workspaceJsonRequest(
       this.workspaceSelector,
       suffix,
       "POST /workspaces/:workspace/git/pull",
-      { method: "POST", body: opts ?? {}, mode: "rest" }
+      { method: "POST", body: opts ?? {}, mode: "rest", timeoutMs }
     );
   }
   workspaceGitCommit(message, opts, cwd) {
@@ -5465,6 +5930,22 @@ var WorkspaceDaemonClient = class {
       { mode: "rest" }
     );
   }
+  extensionState(extensionId) {
+    return this.client.workspaceJsonRequest(
+      this.workspaceSelector,
+      `/extensions/${urlEncode(extensionId)}/state`,
+      "GET /workspaces/:workspace/extensions/:extensionId/state",
+      { mode: "rest" }
+    );
+  }
+  setExtensionState(extensionId, update, clientId) {
+    return this.client.workspaceJsonRequest(
+      this.workspaceSelector,
+      `/extensions/${urlEncode(extensionId)}/state`,
+      "PUT /workspaces/:workspace/extensions/:extensionId/state",
+      { method: "PUT", body: update, clientId, mode: "rest" }
+    );
+  }
   setExtensionActivation(extensionId, state, clientId) {
     return this.client.workspaceJsonRequest(
       this.workspaceSelector,
@@ -5836,6 +6317,14 @@ var DaemonSessionClient = class _DaemonSessionClient {
   get branch() {
     return this.session.branch;
   }
+  /**
+   * Present when this client was created with a `modelServiceId`: `false`
+   * means the spawn-time model switch failed and the session is running on
+   * the agent default model.
+   */
+  get modelApplied() {
+    return this.session.modelApplied;
+  }
   get lastEventId() {
     return this.lastSeenEventId;
   }
@@ -6054,13 +6543,11 @@ var DaemonSessionClient = class _DaemonSessionClient {
   setModel(modelId) {
     return this.client.setSessionModel(this.sessionId, modelId, this.clientId);
   }
-  setConfigOption(configId, value) {
-    return this.client.setSessionConfigOption(
-      this.sessionId,
-      configId,
-      value,
-      this.clientId
-    );
+  setConfigOption(configId, value, opts) {
+    return this.client.setSessionConfigOption(this.sessionId, configId, value, {
+      clientId: this.clientId,
+      persist: opts?.persist
+    });
   }
   getRewindSnapshots() {
     return this.client.getRewindSnapshots(this.sessionId);
@@ -6177,9 +6664,9 @@ var DaemonSessionClient = class _DaemonSessionClient {
   }
   /**
    * Execute a direct daemon-side shell command for this session. Requires the
-   * daemon to opt in to direct session shell and bearer auth; this wrapper
-   * automatically forwards the client id bound when the session was created
-   * or attached.
+   * daemon to opt in to direct session shell with bearer auth or
+   * trusted-loopback authority; this wrapper automatically forwards the client
+   * id bound when the session was created or attached.
    */
   shellCommand(command, signal) {
     return this.client.shellCommand(this.sessionId, command, {
@@ -6202,6 +6689,9 @@ var DaemonSessionClient = class _DaemonSessionClient {
   tasks() {
     return this.client.sessionTasks(this.sessionId, this.clientId);
   }
+  workflowTasks() {
+    return this.client.sessionWorkflowTasks(this.sessionId, this.clientId);
+  }
   lspStatus() {
     return this.client.sessionLspStatus(this.sessionId, this.clientId);
   }
@@ -6213,6 +6703,14 @@ var DaemonSessionClient = class _DaemonSessionClient {
       this.clientId
     );
   }
+  controlWorkflowTask(taskId, action) {
+    return this.client.sessionWorkflowTaskAction(
+      this.sessionId,
+      taskId,
+      action,
+      this.clientId
+    );
+  }
   clearGoal() {
     return this.client.sessionGoalClear(this.sessionId, this.clientId);
   }
@@ -7366,7 +7864,7 @@ function isSessionClosedData(value) {
 }
 __name(isSessionClosedData, "isSessionClosedData");
 function isSessionMetadataUpdatedData(value) {
-  if (!isRecord(value) || !isNonEmptyString(value["sessionId"]) || !isOptionalStringOrNull(value["displayName"])) {
+  if (!isRecord(value) || !isNonEmptyString(value["sessionId"]) || !isOptionalStringOrNull(value["displayName"]) || value["titleSource"] !== void 0 && value["titleSource"] !== "manual" && value["titleSource"] !== "auto") {
     return false;
   }
   const prs = value["prs"];
@@ -8766,6 +9264,7 @@ function normalizePlanUpdate(update, base) {
   const stats = meta && isRecord2(meta["stats"]) ? meta["stats"] : void 0;
   const todoPlan = meta && isRecord2(meta["qwenTodoPlan"]) ? meta["qwenTodoPlan"] : void 0;
   const planId = getString2(todoPlan, "id");
+  const sessionWorkflow = meta?.["qwenSessionWorkflow"] === true;
   return {
     ...base,
     type: "tool.update",
@@ -8783,7 +9282,8 @@ function normalizePlanUpdate(update, base) {
     rawOutput: {
       entries,
       ...stats ? { stats } : {},
-      ...planId ? { plan: { id: planId, sourceCallId: planCallId } } : {}
+      ...planId ? { plan: { id: planId, sourceCallId: planCallId } } : {},
+      ...sessionWorkflow ? { sessionWorkflow: true } : {}
     }
   };
 }
@@ -9465,11 +9965,12 @@ function createDaemonToolPreview(input, opts = {}, depth = 0) {
   if (isRecord2(input)) {
     const nestedInput = input["rawInput"] ?? input["input"] ?? input["args"];
     if (nestedInput !== void 0 && nestedInput !== input) {
+      const meta = isRecord2(input["_meta"]) ? input["_meta"] : void 0;
       const nested = createDaemonToolPreview(
         nestedInput,
         {
           title: opts.title ?? getFirstString(input, ["title"]),
-          toolName: opts.toolName ?? getFirstString(input, ["toolName", "name"]),
+          toolName: opts.toolName ?? getFirstString(input, ["toolName", "name"]) ?? (meta ? getFirstString(meta, ["toolName"]) : void 0),
           toolKind: opts.toolKind ?? getFirstString(input, ["kind"])
         },
         depth + 1
@@ -9530,12 +10031,14 @@ function detectFileDiff(input, opts = {}) {
   const oldText = getFirstString(input, [
     "oldText",
     "old_text",
+    "old_string",
     "old_str",
     "oldString"
   ]);
   const explicitNewText = getFirstString(input, [
     "newText",
     "new_text",
+    "new_string",
     "new_str",
     "newString"
   ]);
@@ -10591,6 +11094,10 @@ function discardToolBlock(state, toolCallId) {
   }
 }
 __name(discardToolBlock, "discardToolBlock");
+function isTaskExecutionMode(value) {
+  return value === "foreground" || value === "background";
+}
+__name(isTaskExecutionMode, "isTaskExecutionMode");
 function compactTaskExecutionOutput(rawOutput, retainSubagentBlocks) {
   if (retainSubagentBlocks || !isRecord2(rawOutput) || rawOutput["type"] !== "task_execution") {
     return rawOutput;
@@ -10601,9 +11108,11 @@ function compactTaskExecutionOutput(rawOutput, retainSubagentBlocks) {
     "subagentColor",
     "taskDescription",
     "status",
+    "executionMode",
     "terminateReason",
     "tokenCount",
-    "executionSummary"
+    "executionSummary",
+    "skills"
   ]) {
     if (rawOutput[key] !== void 0) compact[key] = rawOutput[key];
   }
@@ -12820,6 +13329,7 @@ export {
   PENDING_PROMPT_COMPLETED_EVENT,
   PENDING_PROMPT_STARTED_EVENT,
   STANDALONE_SESSIONS_CAPABILITY,
+  STANDALONE_SESSION_OPTIONS_CAPABILITY,
   SseFramingError,
   UNRECOGNIZED_DIAGNOSTICS_LIMIT,
   WorkspaceDaemonClient,
@@ -12853,6 +13363,7 @@ export {
   isStandaloneSessionNotFoundError,
   isSubagentChildBlock,
   isSubagentSessionNotFound,
+  isTaskExecutionMode,
   isTrimmedPermissionBlockId,
   isTrimmedToolBlockId,
   isUnrecognizedDiagnosticReason,