@qwen-code/qwen-code 0.23.2-preview.0 → 0.23.3-nightly.20260910.c46cb85cf2

package/chunks/{chunk-6GRDHIVI.js → chunk-Q6HXLBZF.js}

@@ -2,12 +2,12 @@
 "use strict";
 import {
   buildPermissionSettings
-} from "./chunk-ZIPYCXQP.js";
+} from "./chunk-7ZVIGDZF.js";
 import {
   resolveVoiceStreamConfig,
   resolveVoiceTranscriptionConfig,
   transcribeVoiceAudio
-} from "./chunk-GNY7B3CA.js";
+} from "./chunk-NVIBH7WS.js";
 import {
   getVoiceSettingsScope,
   isSelectableVoiceModel,
@@ -16,7 +16,12 @@ import {
   readVoiceMode,
   readVoiceModel,
   resolveVoiceTransport
-} from "./chunk-NB3NDQQK.js";
+} from "./chunk-Q2XLNLAV.js";
+import {
+  WorkspacePermissionRulesSessionRequiredError,
+  WorkspaceSettingsPartialPersistError,
+  WorkspaceSkillNotFoundError
+} from "./chunk-FTJMWDND.js";
 import {
   MCP_RESTART_SERVER_DEADLINE_MS
 } from "./chunk-OCPBI7J5.js";
@@ -33,12 +38,7 @@ import {
   createIdleWorkspaceProvidersStatus,
   createIdleWorkspaceSkillsStatus,
   mapDomainErrorToErrorKind
-} from "./chunk-FETY36NQ.js";
-import {
-  WorkspacePermissionRulesSessionRequiredError,
-  WorkspaceSettingsPartialPersistError,
-  WorkspaceSkillNotFoundError
-} from "./chunk-FTJMWDND.js";
+} from "./chunk-HGEUHUEV.js";
 import {
   McpServerNotFoundError,
   McpServerRestartFailedError,
@@ -51,15 +51,15 @@ import {
 import {
   getPersistScopeForModelSelection,
   loadSettings
-} from "./chunk-Q2F43WTJ.js";
+} from "./chunk-OOLSYRZ7.js";
 import {
   getWorkspaceTrustStatus
-} from "./chunk-7RXOEUFF.js";
+} from "./chunk-KHIBLKNK.js";
 import {
   ModelsConfig,
   SkillManager,
   require_yauzl
-} from "./chunk-43CI6YWJ.js";
+} from "./chunk-JV5YASQA.js";
 import {
   Storage,
   createDebugLogger

package/chunks/{chunk-EUXF6URV.js → chunk-QPWZX4ZV.js}

@@ -1,21 +1,21 @@
 // Force strict mode and setup for ESM
 "use strict";
-import {
-  settleChatRecording,
-  subscribeToHeadlessChatRecordingFailures
-} from "./chunk-CALNF3Z3.js";
 import {
   JsonOutputAdapter
-} from "./chunk-5VZFJTL2.js";
-import {
-  StreamJsonOutputAdapter
-} from "./chunk-4BLTSTF6.js";
+} from "./chunk-SXEE6PND.js";
 import {
   normalizePartList
 } from "./chunk-5IENVM7Z.js";
+import {
+  settleChatRecording,
+  subscribeToHeadlessChatRecordingFailures
+} from "./chunk-7XVQNDFB.js";
+import {
+  StreamJsonOutputAdapter
+} from "./chunk-AWMJRE5N.js";
 import {
   handleAtCommand
-} from "./chunk-QXXBW2G4.js";
+} from "./chunk-72BGC7RT.js";
 import {
   buildInitialSystemReminders,
   buildSystemMessage,
@@ -26,11 +26,11 @@ import {
   handleSlashCommand,
   insertAfterFunctionResponses,
   isSlashCommand
-} from "./chunk-ODBNTMZW.js";
+} from "./chunk-VID4BW52.js";
 import {
   RunBudgetEnforcer,
   cleanupReviewWorktreeLeases
-} from "./chunk-WZ4YULVF.js";
+} from "./chunk-BHR6IN2X.js";
 import {
   AlreadyReportedError,
   handleBudgetExceededError,
@@ -38,20 +38,20 @@ import {
   handleError,
   handleMaxTurnsExceededError,
   handleToolError
-} from "./chunk-VEQBVJYH.js";
+} from "./chunk-UGS62IR2.js";
 import {
   isInlineModelOverrideAllowed
-} from "./chunk-7GZCCHJL.js";
+} from "./chunk-VHKOULAI.js";
 import {
   buildGoalContinuationParts,
   buildSessionRecoveryPlanFromApiHistory,
   detectAutonomousSentinel,
   detectLoopSentinel,
   executeToolCall
-} from "./chunk-BL6B2QS2.js";
+} from "./chunk-F2RKL5I2.js";
 import {
   restoreWorktreeContext
-} from "./chunk-YZTGGCEE.js";
+} from "./chunk-ZKZHSB5W.js";
 import {
   GOAL_PAUSE_REASON_HEADLESS_RUN_ENDED,
   GOAL_PAUSE_REASON_USER_INTERRUPT,
@@ -72,16 +72,19 @@ import {
   parseAndFormatApiError,
   partitionByConcurrencySafety,
   recordHandledToolCall
-} from "./chunk-43CI6YWJ.js";
-import {
-  parsePositiveIntegerEnv
-} from "./chunk-6PVPNMXU.js";
+} from "./chunk-JV5YASQA.js";
 import {
   promptIdContext
 } from "./chunk-O6GEWCJA.js";
+import {
+  parsePositiveIntegerEnv
+} from "./chunk-6PVPNMXU.js";
 import {
   addAgentOutputMessageAttributes
-} from "./chunk-CLKE4IY3.js";
+} from "./chunk-2SZH22YO.js";
+import {
+  isSystemReminderContent
+} from "./chunk-FN3JNDRU.js";
 import {
   formatFullTurnVisionNotice,
   formatVisionBridgeNotice,
@@ -91,20 +94,17 @@ import {
   shouldRunVisionBridge,
   splitImageParts,
   uiTelemetryService
-} from "./chunk-OIPUQE3S.js";
+} from "./chunk-34ZYDM3F.js";
 import {
   endInteractionSpan,
   getActiveInteractionSpan,
   isTelemetrySdkInitialized,
   shutdownTelemetry
-} from "./chunk-7VEYUF3N.js";
-import {
-  isSystemReminderContent
-} from "./chunk-4VY3ITHR.js";
+} from "./chunk-W5ZQMAEM.js";
 import {
   ToolNames,
   canonicalToolName
-} from "./chunk-MWIO7MF6.js";
+} from "./chunk-TP6FYVQT.js";
 import {
   FatalInputError,
   createDebugLogger,
@@ -112,7 +112,7 @@ import {
 } from "./chunk-ZAFYHRVY.js";
 import {
   registerCleanup
-} from "./chunk-JDPBJIKI.js";
+} from "./chunk-JDEW3V5B.js";
 import {
   init_esbuild_shims
 } from "./chunk-5O2XNYP6.js";
@@ -407,19 +407,17 @@ async function runNonInteractive(config, settings, input, prompt_id, options = {
     const goalHost = {
       startGoalTurn: /* @__PURE__ */ __name(async (input2) => {
         if (queuedGoalTurns.some(
-          ({ permit }) => permit.turnId === input2.permit.turnId
+          ({ permit: permit2 }) => permit2.turnId === input2.permit.turnId
         )) {
           return;
         }
+        const { permit, ...continuation } = input2;
         queuedGoalTurns.push({
-          permit: { ...input2.permit },
-          turnKey: `goal-runtime:${input2.permit.turnId}`,
+          permit: { ...permit },
+          turnKey: `goal-runtime:${permit.turnId}`,
           controller: new AbortController(),
           origin: "runtime",
-          continuationContext: input2.continuationContext,
-          ...input2.objectiveUpdated ? { objectiveUpdated: input2.objectiveUpdated } : {},
-          ...input2.windDown ? { windDown: true } : {},
-          ...input2.verifierFeedback ? { verifierFeedback: input2.verifierFeedback } : {}
+          ...continuation
         });
       }, "startGoalTurn"),
       preemptGoalTurn: /* @__PURE__ */ __name((reason) => {

package/chunks/{chunk-DTB5BXRG.js → chunk-RJZTX2OF.js}

@@ -2,7 +2,7 @@
 "use strict";
 import {
   preloadRuntimeFetchModule
-} from "./chunk-4HOEU2OR.js";
+} from "./chunk-EWJTAP3Y.js";
 import {
   init_esbuild_shims
 } from "./chunk-5O2XNYP6.js";
@@ -14,19 +14,12 @@ import {
 init_esbuild_shims();
 var DEFAULT_QWEN_MODEL = "coder-model";
 
-// packages/core/src/config/models.ts
-init_esbuild_shims();
-var DEFAULT_QWEN_EMBEDDING_MODEL = "text-embedding-v4";
-var MAINLINE_CODER_MODEL = "qwen3.7-max";
-
-// packages/core/src/core/contentGenerator.ts
-init_esbuild_shims();
-
 // packages/core/src/models/modelConfigErrors.ts
 init_esbuild_shims();
 function getDefaultApiKeyEnvVar(authType) {
   switch (authType) {
     case "openai":
+    case "openai-responses":
       return "OPENAI_API_KEY";
     case "anthropic":
       return "ANTHROPIC_API_KEY";
@@ -42,6 +35,7 @@ __name(getDefaultApiKeyEnvVar, "getDefaultApiKeyEnvVar");
 function getDefaultModelEnvVar(authType) {
   switch (authType) {
     case "openai":
+    case "openai-responses":
       return "OPENAI_MODEL";
     case "anthropic":
       return "ANTHROPIC_MODEL";
@@ -136,6 +130,14 @@ var MissingAnthropicBaseUrlEnvError = class extends ModelConfigError {
   }
 };
 
+// packages/core/src/config/models.ts
+init_esbuild_shims();
+var DEFAULT_QWEN_EMBEDDING_MODEL = "text-embedding-v4";
+var MAINLINE_CODER_MODEL = "qwen3.7-max";
+
+// packages/core/src/core/contentGenerator.ts
+init_esbuild_shims();
+
 // packages/core/src/models/constants.ts
 init_esbuild_shims();
 var MODEL_GENERATION_CONFIG_FIELDS = [
@@ -176,6 +178,11 @@ var AUTH_ENV_MAPPINGS = {
     baseUrl: ["OPENAI_BASE_URL"],
     model: ["OPENAI_MODEL", "QWEN_MODEL"]
   },
+  "openai-responses": {
+    apiKey: ["OPENAI_API_KEY"],
+    baseUrl: ["OPENAI_BASE_URL"],
+    model: ["OPENAI_MODEL"]
+  },
   anthropic: {
     apiKey: ["ANTHROPIC_API_KEY"],
     baseUrl: ["ANTHROPIC_BASE_URL"],
@@ -411,18 +418,23 @@ async function createContentGenerator(generatorConfig, config, isInitialAuth) {
   try {
     if (authType === "openai" /* USE_OPENAI */) {
       loadBaseGenerator = /* @__PURE__ */ __name(async () => {
-        const { createOpenAIContentGenerator } = await import("./openaiContentGenerator-TTSKXNVH.js");
+        const { createOpenAIContentGenerator } = await import("./openaiContentGenerator-BKTO5QJK.js");
         return createOpenAIContentGenerator(generatorConfig, config);
       }, "loadBaseGenerator");
+    } else if (authType === "openai-responses" /* USE_OPENAI_RESPONSES */) {
+      loadBaseGenerator = /* @__PURE__ */ __name(async () => {
+        const { createOpenAIResponsesContentGenerator } = await import("./openaiResponsesContentGenerator-RTCAJ5V5.js");
+        return createOpenAIResponsesContentGenerator(generatorConfig, config);
+      }, "loadBaseGenerator");
     } else if (authType === "qwen-oauth" /* QWEN_OAUTH */) {
-      const { getQwenOAuthClient: getQwenOauthClient } = await import("./qwenOAuth2-KX6LVYQ3.js");
+      const { getQwenOAuthClient: getQwenOauthClient } = await import("./qwenOAuth2-NOXRK323.js");
       try {
         const qwenClient = await getQwenOauthClient(
           config,
           isInitialAuth ? { requireCachedCredentials: true } : void 0
         );
         loadBaseGenerator = /* @__PURE__ */ __name(async () => {
-          const { QwenContentGenerator } = await import("./qwenContentGenerator-GGZEFLBD.js");
+          const { QwenContentGenerator } = await import("./qwenContentGenerator-K5TJK75P.js");
           return new QwenContentGenerator(qwenClient, generatorConfig, config);
         }, "loadBaseGenerator");
       } catch (error) {
@@ -433,12 +445,12 @@ async function createContentGenerator(generatorConfig, config, isInitialAuth) {
       }
     } else if (authType === "anthropic" /* USE_ANTHROPIC */) {
       loadBaseGenerator = /* @__PURE__ */ __name(async () => {
-        const { createAnthropicContentGenerator } = await import("./anthropicContentGenerator-I7LQZH26.js");
+        const { createAnthropicContentGenerator } = await import("./anthropicContentGenerator-SGIR5IKF.js");
         return createAnthropicContentGenerator(generatorConfig, config);
       }, "loadBaseGenerator");
     } else if (authType === "gemini" /* USE_GEMINI */ || authType === "vertex-ai" /* USE_VERTEX_AI */) {
       loadBaseGenerator = /* @__PURE__ */ __name(async () => {
-        const { createLlmContentGenerator } = await import("./llm-content-generator-EO6MZCEO.js");
+        const { createLlmContentGenerator } = await import("./llm-content-generator-KWXFHBR3.js");
         return createLlmContentGenerator(generatorConfig, config);
       }, "loadBaseGenerator");
     } else {
@@ -453,7 +465,7 @@ async function createContentGenerator(generatorConfig, config, isInitialAuth) {
     try {
       const [baseGenerator, { LoggingContentGenerator }] = await Promise.all([
         loadBaseGenerator(),
-        import("./loggingContentGenerator-MNXYUGDG.js")
+        import("./loggingContentGenerator-NGHVU6AK.js")
       ]);
       return new LoggingContentGenerator(
         baseGenerator,
@@ -469,6 +481,7 @@ __name(createContentGenerator, "createContentGenerator");
 
 export {
   DEFAULT_QWEN_MODEL,
+  getDefaultApiKeyEnvVar,
   VERTEX_ADC_HINT,
   DEFAULT_QWEN_EMBEDDING_MODEL,
   MAINLINE_CODER_MODEL,
@@ -492,11 +505,11 @@ export {
  */
 /**
  * @license
- * Copyright 2025 Google LLC
+ * Copyright 2025 Qwen Team
  * SPDX-License-Identifier: Apache-2.0
  */
 /**
  * @license
- * Copyright 2025 Qwen Team
+ * Copyright 2025 Google LLC
  * SPDX-License-Identifier: Apache-2.0
  */

package/chunks/{chunk-PQEISIKS.js → chunk-SAH4BD2J.js}

@@ -7,66 +7,6 @@ import {
   __name
 } from "./chunk-J2S4EL5Y.js";
 
-// packages/core/src/utils/thoughtUtils.ts
-init_esbuild_shims();
-var START_DELIMITER = "**";
-var END_DELIMITER = "**";
-var OPENAI_REASONING_THOUGHT_MARKER = Symbol("openaiReasoningThought");
-function createOpenAIReasoningThoughtPart(text) {
-  const part = { text, thought: true };
-  Object.defineProperty(part, OPENAI_REASONING_THOUGHT_MARKER, {
-    value: true
-  });
-  return part;
-}
-__name(createOpenAIReasoningThoughtPart, "createOpenAIReasoningThoughtPart");
-function isOpenAIReasoningThoughtPart(part) {
-  return Boolean(
-    part[OPENAI_REASONING_THOUGHT_MARKER]
-  );
-}
-__name(isOpenAIReasoningThoughtPart, "isOpenAIReasoningThoughtPart");
-function parseThought(rawText) {
-  const startIndex = rawText.indexOf(START_DELIMITER);
-  if (startIndex === -1) {
-    return { subject: "", description: rawText };
-  }
-  const endIndex = rawText.indexOf(
-    END_DELIMITER,
-    startIndex + START_DELIMITER.length
-  );
-  if (endIndex === -1) {
-    return { subject: "", description: rawText };
-  }
-  const subject = rawText.substring(startIndex + START_DELIMITER.length, endIndex).trim();
-  const description = (rawText.substring(0, startIndex) + rawText.substring(endIndex + END_DELIMITER.length)).trim();
-  return { subject, description };
-}
-__name(parseThought, "parseThought");
-function getThoughtSummary(response) {
-  if (response.candidates && response.candidates.length > 0) {
-    const candidate = response.candidates[0];
-    if (candidate.content && candidate.content.parts && candidate.content.parts.length > 0) {
-      const thoughtParts = candidate.content.parts.filter(
-        (part) => part.thought
-      );
-      if (thoughtParts.length === 0) {
-        return null;
-      }
-      const thoughtText = thoughtParts.map((part) => part.text ?? "").join("");
-      if (!thoughtText) {
-        return null;
-      }
-      if (thoughtParts.some(isOpenAIReasoningThoughtPart)) {
-        return { subject: "", description: thoughtText };
-      }
-      return parseThought(thoughtText);
-    }
-  }
-  return null;
-}
-__name(getThoughtSummary, "getThoughtSummary");
-
 // packages/core/src/core/openaiContentGenerator/prefix-caching.ts
 init_esbuild_shims();
 var CACHE_KEY_PREFIX = "qwen-code:";
@@ -141,17 +81,10 @@ function applyOfficialOpenAIPromptCaching(request, sessionId, cacheSharing, cach
 __name(applyOfficialOpenAIPromptCaching, "applyOfficialOpenAIPromptCaching");
 
 export {
-  createOpenAIReasoningThoughtPart,
-  getThoughtSummary,
   supportsOpenAIPrefixCaching,
   isOfficialOpenAIEndpoint,
   applyOfficialOpenAIPromptCaching
 };
-/**
- * @license
- * Copyright 2025 Google LLC
- * SPDX-License-Identifier: Apache-2.0
- */
 /**
  * @license
  * Copyright 2025 Qwen

package/chunks/{chunk-LUVXLLMS.js → chunk-SAWPURIU.js}

@@ -8,10 +8,10 @@ import {
 } from "./chunk-TXASDT2M.js";
 import {
   t
-} from "./chunk-CRZBDVP2.js";
+} from "./chunk-74JEYK2C.js";
 import {
   So
-} from "./chunk-43CI6YWJ.js";
+} from "./chunk-JV5YASQA.js";
 import {
   createDebugLogger
 } from "./chunk-ZAFYHRVY.js";

package/chunks/{chunk-WZS3X663.js → chunk-SNZWDV67.js}

@@ -4,9 +4,6 @@ import {
   MAX_WORKSPACE_PATH_LENGTH,
   canonicalizeWorkspace
 } from "./chunk-6PLDPT2C.js";
-import {
-  MAX_DAEMON_WORKSPACES
-} from "./chunk-5HBA2Z7V.js";
 import {
   getGlobalQwenDirLite
 } from "./chunk-IDS7MSUP.js";
@@ -38,7 +35,21 @@ import * as path from "node:path";
 
 // packages/cli/src/serve/workspace-inputs.ts
 init_esbuild_shims();
-var MAX_REGISTERED_WORKSPACES = MAX_DAEMON_WORKSPACES;
+var MAX_REGISTERED_WORKSPACES = 256;
+var MAX_CONFIGURED_REGISTERED_WORKSPACES = 256;
+var QWEN_SERVE_MAX_WORKSPACES_ENV = "QWEN_SERVE_MAX_WORKSPACES";
+function resolveMaxRegisteredWorkspaces(configured, env) {
+  const raw = env[QWEN_SERVE_MAX_WORKSPACES_ENV];
+  const value = configured ?? (raw === void 0 ? MAX_REGISTERED_WORKSPACES : /^\d+$/.test(raw.trim()) ? Number(raw.trim()) : Number.NaN);
+  if (!Number.isSafeInteger(value) || value < 1 || value > MAX_CONFIGURED_REGISTERED_WORKSPACES) {
+    const source = configured === void 0 ? `${QWEN_SERVE_MAX_WORKSPACES_ENV}=${JSON.stringify(raw)}` : `maxRegisteredWorkspaces option ${String(configured)}`;
+    throw new TypeError(
+      `Invalid ${source}: must be an integer from 1 to ${MAX_CONFIGURED_REGISTERED_WORKSPACES}.`
+    );
+  }
+  return value;
+}
+__name(resolveMaxRegisteredWorkspaces, "resolveMaxRegisteredWorkspaces");
 var DuplicateWorkspaceInputError = class extends Error {
   static {
     __name(this, "DuplicateWorkspaceInputError");
@@ -125,8 +136,8 @@ __name(resolveWorkspaceInputs, "resolveWorkspaceInputs");
 
 // packages/cli/src/serve/workspace-registration-store.ts
 var SCHEMA_VERSION = 1;
-var MAX_SECONDARY_WORKSPACES = MAX_REGISTERED_WORKSPACES - 1;
-var MAX_STORE_BYTES = 256 * 1024;
+var MAX_SECONDARY_WORKSPACES = MAX_CONFIGURED_REGISTERED_WORKSPACES - 1;
+var MAX_STORE_BYTES = 8 * 1024 * 1024;
 var MAX_WORKSPACE_DISPLAY_NAME_LENGTH = 256;
 var LOCK_OPTIONS = {
   realpath: false,
@@ -191,6 +202,11 @@ var WorkspaceRegistrationStoreLimitError = class extends WorkspaceRegistrationSt
     __name(this, "WorkspaceRegistrationStoreLimitError");
   }
 };
+var WorkspaceRegistrationStoreTooLargeError = class extends WorkspaceRegistrationStoreError {
+  static {
+    __name(this, "WorkspaceRegistrationStoreTooLargeError");
+  }
+};
 var WorkspaceRegistrationStoreCommittedError = class extends WorkspaceRegistrationStoreError {
   static {
     __name(this, "WorkspaceRegistrationStoreCommittedError");
@@ -451,7 +467,7 @@ var WorkspaceRegistrationStore = class {
         );
       }
       if (stat.size > MAX_STORE_BYTES) {
-        throw new WorkspaceRegistrationStoreError(
+        throw new WorkspaceRegistrationStoreTooLargeError(
           `Workspace registration store exceeds ${MAX_STORE_BYTES} bytes`
         );
       }
@@ -481,7 +497,7 @@ var WorkspaceRegistrationStore = class {
         totalBytesRead += bytesRead;
       }
       if (totalBytesRead > MAX_STORE_BYTES) {
-        throw new WorkspaceRegistrationStoreError(
+        throw new WorkspaceRegistrationStoreTooLargeError(
           `Workspace registration store exceeds ${MAX_STORE_BYTES} bytes`
         );
       }
@@ -493,7 +509,8 @@ var WorkspaceRegistrationStore = class {
       await file.close();
     }
   }
-  async add(workspace, displayName) {
+  async add(workspace, displayName, maxRegisteredWorkspaces = MAX_REGISTERED_WORKSPACES) {
+    const maxSecondaries = resolveMaxRegisteredWorkspaces(maxRegisteredWorkspaces, {}) - 1;
     validateWorkspacePath(workspace, "workspace");
     const normalizedDisplayName = displayName === void 0 ? void 0 : normalizeWorkspaceDisplayName(displayName);
     if (normalizedScopePath(workspace) === normalizedScopePath(this.primaryWorkspace)) {
@@ -508,9 +525,9 @@ var WorkspaceRegistrationStore = class {
       )) {
         return false;
       }
-      if (snapshot.workspaces.length >= MAX_SECONDARY_WORKSPACES) {
+      if (snapshot.workspaces.length >= maxSecondaries) {
         throw new WorkspaceRegistrationStoreLimitError(
-          `Workspace registration store limit of ${MAX_SECONDARY_WORKSPACES} reached`
+          `Workspace registration store limit of ${maxSecondaries} reached`
         );
       }
       snapshot.workspaces.push(workspace);
@@ -568,7 +585,7 @@ var WorkspaceRegistrationStore = class {
     return removed;
   }
   async update(mutate) {
-    const { atomicWriteFile } = await import("./deferred-core-runtime-NJM63YJS.js");
+    const { atomicWriteFile } = await import("./deferred-core-runtime-JPLQRVZO.js");
     return withInProcessLock(this.filePath, async () => {
       const lock = await acquireFileLock(this.filePath);
       let committed = false;
@@ -579,13 +596,19 @@ var WorkspaceRegistrationStore = class {
         lock.assertOwned();
         changed = mutate(snapshot);
         if (changed) {
+          const serialized = `${JSON.stringify(snapshot, null, 2)}
+`;
+          if (Buffer.byteLength(serialized, "utf8") > MAX_STORE_BYTES) {
+            throw new WorkspaceRegistrationStoreTooLargeError(
+              `Workspace registration store exceeds ${MAX_STORE_BYTES} bytes`
+            );
+          }
           lock.assertOwned();
-          await atomicWriteFile(
-            this.filePath,
-            `${JSON.stringify(snapshot, null, 2)}
-`,
-            { mode: 384, forceMode: true, noFollow: true }
-          );
+          await atomicWriteFile(this.filePath, serialized, {
+            mode: 384,
+            forceMode: true,
+            noFollow: true
+          });
           committed = true;
         }
       } catch (err) {
@@ -611,12 +634,14 @@ var WorkspaceRegistrationStore = class {
 
 export {
   MAX_REGISTERED_WORKSPACES,
+  resolveMaxRegisteredWorkspaces,
   resolveWorkspaceInputs,
   MAX_WORKSPACE_DISPLAY_NAME_LENGTH,
   WorkspaceDisplayNameValidationError,
   normalizeWorkspaceDisplayName,
   WorkspaceRegistrationStoreError,
   WorkspaceRegistrationStoreLimitError,
+  WorkspaceRegistrationStoreTooLargeError,
   WorkspaceRegistrationStoreCommittedError,
   workspaceRegistrationScopeHash,
   workspaceRegistrationId,

package/chunks/{chunk-IRKQ4YYX.js → chunk-SVWWF5TZ.js}

@@ -15374,9 +15374,37 @@ var require_express2 = __commonJS({
   }
 });
 
+// packages/cli/src/serve/web-shell-preauth.ts
+init_esbuild_shims();
+function isDocumentNavigation(req) {
+  const fetchMode = req.headers["sec-fetch-mode"];
+  const fetchDest = req.headers["sec-fetch-dest"];
+  const accept = req.headers.accept ?? "";
+  return fetchMode === "navigate" || fetchDest === "document" || accept.trim().toLowerCase().startsWith("text/html");
+}
+__name(isDocumentNavigation, "isDocumentNavigation");
+var SESSION_DEEP_LINK_PATH = /^\/session\/[^/]+\/?$/u;
+function isPreAuthWebShellRequest(req) {
+  if (req.method !== "GET" && req.method !== "HEAD") return false;
+  const reqPath = req.path.toLowerCase();
+  if (reqPath === "/" || // Express non-strict routing compiles `/` to `/^(?:\/)(?:\/$)?$/i`, so
+  // a raw `//` also matches `app.get('/')` pre-auth (but `///` does not).
+  reqPath === "//" || reqPath === "/assets" || reqPath.startsWith("/assets/") || reqPath === "/mcp-app-sandbox")
+    return true;
+  return SESSION_DEEP_LINK_PATH.test(reqPath) && isDocumentNavigation(req);
+}
+__name(isPreAuthWebShellRequest, "isPreAuthWebShellRequest");
+
 export {
-  require_express2 as require_express
+  require_express2 as require_express,
+  isDocumentNavigation,
+  isPreAuthWebShellRequest
 };
+/**
+ * @license
+ * Copyright 2025 Qwen Team
+ * SPDX-License-Identifier: Apache-2.0
+ */
 /*! Bundled license information:
 
 depd/index.js:

package/chunks/{chunk-5VZFJTL2.js → chunk-SXEE6PND.js}

@@ -2,10 +2,10 @@
 "use strict";
 import {
   BaseJsonOutputAdapter
-} from "./chunk-4BLTSTF6.js";
+} from "./chunk-AWMJRE5N.js";
 import {
   observeHeadlessJsonToolResultWire
-} from "./chunk-UULHYZ4W.js";
+} from "./chunk-HL2DQG3Y.js";
 import {
   init_esbuild_shims
 } from "./chunk-5O2XNYP6.js";

package/chunks/{chunk-743XE7N7.js → chunk-T4JVQR7Z.js}

@@ -2,13 +2,13 @@
 "use strict";
 import {
   useKeypress
-} from "./chunk-5GD7LYOH.js";
+} from "./chunk-KVBNJ4K2.js";
 import {
   require_react
 } from "./chunk-5QWWOFGG.js";
 import {
   t
-} from "./chunk-CRZBDVP2.js";
+} from "./chunk-74JEYK2C.js";
 import {
   APPROVAL_MODES
 } from "./chunk-JX6XHPTX.js";

package/chunks/{chunk-6RZX2HIH.js → chunk-TBEXLLAO.js}

@@ -2,14 +2,14 @@
 "use strict";
 import {
   STATUS_SCHEMA_VERSION
-} from "./chunk-FETY36NQ.js";
+} from "./chunk-HGEUHUEV.js";
 import {
   formatMemoryUsage
 } from "./chunk-CHEIIBT3.js";
 import {
   detectRuntime,
   redactProxyCredentials
-} from "./chunk-4HOEU2OR.js";
+} from "./chunk-EWJTAP3Y.js";
 import {
   init_esbuild_shims
 } from "./chunk-5O2XNYP6.js";