@qwen-code/qwen-code 0.23.2-preview.0 → 0.23.3-nightly.20260910.c46cb85cf2

package/chunks/{run-qwen-serve-OJYVH7N6.js → run-qwen-serve-PPTGWC5B.js}

@@ -7,12 +7,12 @@ import {
   hostAssignsIpv6Loopback,
   isOwnInterfaceAddress
 } from "./chunk-24FVUD5P.js";
-import {
-  resolveServeToken
-} from "./chunk-ZELCTN6Y.js";
 import {
   RUNTIME_STARTUP_CANCELLED_MESSAGE
 } from "./chunk-QUPXZXLV.js";
+import {
+  resolveRemoteServeToken
+} from "./chunk-F23YN37B.js";
 import {
   ACCESS_LOG_CONTROLLER_LOCAL,
   CAPABILITIES_SCHEMA_VERSION,
@@ -33,6 +33,7 @@ import {
   getRateLimiter,
   getServeProtocolVersions,
   hostAllowlist,
+  installRemoteSelfOriginMiddleware,
   installSelfOriginStripMiddleware,
   isBrowserAutomationMcpAvailable,
   isDeepHealthQuery,
@@ -40,7 +41,9 @@ import {
   isLocalTerminalAvailable,
   isManagedScratchChild,
   isNativeDirectoryPickerAvailable,
+  isSoftwareNetwork,
   isTrustedLoopbackMode,
+  listLanCandidates,
   listenerMaxConnections,
   parseAllowOriginPatterns,
   parseDaemonStatusDetail,
@@ -48,7 +51,7 @@ import {
   prepareManagedScratchRoot,
   resolveAcpHttpEnabled,
   toDaemonStatusMemoryLimits
-} from "./chunk-M73KHGNR.js";
+} from "./chunk-B2TGBZXY.js";
 import {
   ConversationDirectoryIdentityError,
   assertExactConversationRootIdentity,
@@ -69,23 +72,28 @@ import {
 import {
   setDeferredRuntimeRequestTiming
 } from "./chunk-LAUEEBDL.js";
+import {
+  normalizeSessionIdForLookup
+} from "./chunk-ZEZKIS2K.js";
 import {
   require_express
-} from "./chunk-IRKQ4YYX.js";
+} from "./chunk-SVWWF5TZ.js";
 import {
   resolveWebShellDir
 } from "./chunk-FBX2SDQ4.js";
 import {
+  formatHostForAuthority,
   isLoopbackAddress,
   isLoopbackBind
 } from "./chunk-DMEUXLSS.js";
-import {
-  normalizeSessionIdForLookup
-} from "./chunk-ZEZKIS2K.js";
 import "./chunk-NYWWQ437.js";
 import {
   resolveSessionRestoreTimeoutMs
 } from "./chunk-4JRM2BSM.js";
+import {
+  ConversationRuntimeOwnershipError,
+  LIVE_HOST_PROTOCOL_VERSION
+} from "./chunk-2Z3T52OC.js";
 import {
   DEFAULT_RING_SIZE
 } from "./chunk-7U5G6JXI.js";
@@ -98,39 +106,21 @@ import {
   normalizeMaxJournalBytes,
   normalizeMaxJournalEvents
 } from "./chunk-WCCLLK7X.js";
-import {
-  resolveChannelCwd
-} from "./chunk-3BTHHXXE.js";
-import {
-  ConversationRuntimeOwnershipError,
-  LIVE_HOST_PROTOCOL_VERSION
-} from "./chunk-2Z3T52OC.js";
 import "./chunk-ZL4HFSL6.js";
-import "./chunk-K6KS3LTN.js";
-import "./chunk-OSHQMOBS.js";
 import {
-  consumeServeFastPathRejectedLoaderKeys,
-  loadServeFastPathSettings,
-  preResolveServeFastPathHomeEnvOverrides
-} from "./chunk-FV4DM2M4.js";
+  resolveChannelCwd
+} from "./chunk-CSHX5ZC4.js";
 import {
-  MAX_REGISTERED_WORKSPACES,
-  resolveWorkspaceInputs,
-  workspaceRegistrationId
-} from "./chunk-WZS3X663.js";
-import "./chunk-EHTKOO6W.js";
+  assertChannelControlWorkspaceCapacity
+} from "./chunk-6UK77U7D.js";
 import {
   LOAD_REPLAY_META_KEY
-} from "./chunk-PSPAM24S.js";
+} from "./chunk-YKK2XXHF.js";
 import "./chunk-FAWTMDX7.js";
-import {
-  canonicalizeWorkspace,
-  translateAndCheckAbsoluteWorkspacePath
-} from "./chunk-6PLDPT2C.js";
 import {
   ExtraCaInspectionError,
   loadableCertificates
-} from "./chunk-CABDNUJ4.js";
+} from "./chunk-XDQUDARC.js";
 import "./chunk-FYJ7W2PI.js";
 import "./chunk-Z7B6SRPM.js";
 import {
@@ -139,19 +129,25 @@ import {
 import {
   normalizeWorkerDiagnostic,
   sanitizeWorkerDiagnostic
-} from "./chunk-GM44O6F7.js";
+} from "./chunk-LEGNDA46.js";
+import {
+  channelSelectionNames,
+  normalizeServeChannelSelection
+} from "./chunk-GDWE23OR.js";
 import {
   QWEN_SERVER_TOKEN_ENV
 } from "./chunk-GYTKQYDB.js";
-import {
-  channelSelectionNames
-} from "./chunk-ALMR3E6Q.js";
 import {
   ChannelDeliveryError,
   isChannelDeliveryError
 } from "./chunk-RKFGE7JH.js";
+import {
+  MAX_CHANNEL_CONTROL_WORKSPACES
+} from "./chunk-CJ3DHN5I.js";
 import "./chunk-UDG5EZJI.js";
-import "./chunk-M5GB774H.js";
+import {
+  redactLogCredentials
+} from "./chunk-M5GB774H.js";
 import {
   EXTERNAL_TOOL_GUARD_PROVIDER_ATTACHED_VALUE,
   EXTERNAL_TOOL_GUARD_REQUIRED_VALUE,
@@ -159,27 +155,40 @@ import {
   PRIVATE_EXTERNAL_TOOL_GUARD_ENV,
   PRIVATE_EXTERNAL_TOOL_GUARD_PROVIDER_ENV
 } from "./chunk-3VUENPWF.js";
+import "./chunk-K6KS3LTN.js";
+import "./chunk-OSHQMOBS.js";
 import {
   sanitizeLogText
-} from "./chunk-XVTCSVBK.js";
-import "./chunk-IW6RQPQB.js";
+} from "./chunk-C4NLHK7X.js";
+import "./chunk-IJOS26LH.js";
 import {
-  MAX_DAEMON_WORKSPACES
-} from "./chunk-5HBA2Z7V.js";
+  consumeServeFastPathRejectedLoaderKeys,
+  loadServeFastPathSettings,
+  preResolveServeFastPathHomeEnvOverrides
+} from "./chunk-WXFK4MH7.js";
 import "./chunk-BW4333PP.js";
-import {
-  getGlobalQwenDirLite,
-  resolveConfigPathLite
-} from "./chunk-IDS7MSUP.js";
 import {
   acquireInheritedLoaderEnvScrub,
   clearLoaderKeyRejectionReporterIfCurrent,
   scrubInheritedLoaderEnv,
   setLoaderKeyRejectionReporter
-} from "./chunk-QTNCGZHQ.js";
+} from "./chunk-VX63RJXE.js";
+import {
+  resolveMaxRegisteredWorkspaces,
+  resolveWorkspaceInputs,
+  workspaceRegistrationId
+} from "./chunk-SNZWDV67.js";
+import {
+  canonicalizeWorkspace,
+  translateAndCheckAbsoluteWorkspacePath
+} from "./chunk-6PLDPT2C.js";
+import {
+  getGlobalQwenDirLite,
+  resolveConfigPathLite
+} from "./chunk-IDS7MSUP.js";
 import {
   getCliVersion
-} from "./chunk-ISPBBKJN.js";
+} from "./chunk-ONGZNOIP.js";
 import "./chunk-W3N5XAZ6.js";
 import "./chunk-NPQ5ZKRP.js";
 import {
@@ -192,10 +201,10 @@ import {
 } from "./chunk-32CM56LO.js";
 import "./chunk-LJZSMWOH.js";
 import "./chunk-GOFAQQZA.js";
-import "./chunk-65I7S4Z3.js";
-import "./chunk-6HUXPLB5.js";
 import "./chunk-TWPJO254.js";
 import "./chunk-CQ35AJ4Z.js";
+import "./chunk-65I7S4Z3.js";
+import "./chunk-6HUXPLB5.js";
 import {
   require_proper_lockfile
 } from "./chunk-MLXTMF7H.js";
@@ -204,6 +213,12 @@ import "./chunk-5ETULJLP.js";
 import {
   MEMORY_PROJECT_SCOPES
 } from "./chunk-HD7O6WLV.js";
+import {
+  TraceFlags,
+  init_esm,
+  isSpanContextValid,
+  trace
+} from "./chunk-TBWQLLFO.js";
 import {
   finalizeStartupProfile,
   profileCheckpoint
@@ -211,16 +226,11 @@ import {
 import "./chunk-JVEGA3MM.js";
 import {
   writeStderrLine,
-  writeStdoutLine
+  writeStdoutLine,
+  writeStdoutLineSafe
 } from "./chunk-7FA2II6K.js";
 import "./chunk-DMTGGOSA.js";
 import "./chunk-YQ3U5MUC.js";
-import {
-  TraceFlags,
-  init_esm,
-  isSpanContextValid,
-  trace
-} from "./chunk-TBWQLLFO.js";
 import {
   init_esbuild_shims
 } from "./chunk-5O2XNYP6.js";
@@ -251,10 +261,11 @@ init_esbuild_shims();
 var MIN_CHILD_HEAP_MB = 512;
 
 // packages/acp-bridge/dist/child-heap-policy.js
+var MAX_MODELED_ACP_CHILDREN = 25;
 function createChildHeapPolicy(options) {
   const { budget, mode } = options;
   let refusals = 0;
-  const admissible = Math.min(Math.floor(budget.childPoolMb / MIN_CHILD_HEAP_MB), MAX_DAEMON_WORKSPACES);
+  const admissible = Math.min(Math.floor(budget.childPoolMb / MIN_CHILD_HEAP_MB), MAX_MODELED_ACP_CHILDREN);
   const rawCeilingMb = admissible > 0 ? Math.min(Math.floor(budget.childPoolMb / admissible), budget.legacyChildCeilingMb) : null;
   const modelable = rawCeilingMb !== null && rawCeilingMb >= MIN_CHILD_HEAP_MB;
   const maxConcurrentChildren = modelable ? admissible : 0;
@@ -283,6 +294,125 @@ function createChildHeapPolicy(options) {
 }
 __name(createChildHeapPolicy, "createChildHeapPolicy");
 
+// packages/cli/src/serve/remote-quickstart.ts
+init_esbuild_shims();
+import { networkInterfaces } from "node:os";
+function isUlaIpv6(address) {
+  return /^(?:fc|fd)/iu.test(address);
+}
+__name(isUlaIpv6, "isUlaIpv6");
+function isLinkLocalIpv4(address) {
+  return address.startsWith("169.254.");
+}
+__name(isLinkLocalIpv4, "isLinkLocalIpv4");
+function quickstartPrintMode(boundAddress, generated) {
+  if (!isLoopbackAddress(boundAddress)) return "full";
+  return generated ? "token-only" : "silent";
+}
+__name(quickstartPrintMode, "quickstartPrintMode");
+function remoteQuickstartEntries(bind, boundAddress, port, tls, interfaces) {
+  const scheme = tls ? "https" : "http";
+  const url = /* @__PURE__ */ __name((host) => `${scheme}://${formatHostForAuthority(host)}:${port}`, "url");
+  const bound = boundAddress.trim().toLowerCase();
+  const ipv4Wildcard = bound === "0.0.0.0" || bound === "::ffff:0.0.0.0";
+  if (!ipv4Wildcard && bound !== "::") {
+    if (bind.trim().includes("%")) return [];
+    return [{ label: "Address", url: url(bind), address: bind }];
+  }
+  const localAddress = !ipv4Wildcard && hostAssignsIpv6Loopback(interfaces) ? "::1" : "127.0.0.1";
+  const addresses = [
+    { label: "Local", url: url(localAddress), address: localAddress }
+  ];
+  for (const candidate of listLanCandidates(interfaces)) {
+    addresses.push({
+      label: `Network (${candidate.interfaceName})`,
+      url: url(candidate.address),
+      address: candidate.address
+    });
+  }
+  if (!ipv4Wildcard) {
+    for (const [name, entries] of Object.entries(interfaces).sort()) {
+      if (isSoftwareNetwork(name)) continue;
+      for (const entry of entries ?? []) {
+        if (entry.internal || entry.family !== "IPv6") continue;
+        if (entry.address.includes("%") || !isUlaIpv6(entry.address)) continue;
+        addresses.push({
+          label: `Network (${name})`,
+          url: url(entry.address),
+          address: entry.address
+        });
+      }
+    }
+  }
+  return addresses;
+}
+__name(remoteQuickstartEntries, "remoteQuickstartEntries");
+async function printRemoteQuickstart(input) {
+  try {
+    const mode = quickstartPrintMode(input.boundAddress, input.generated);
+    if (mode === "silent") return;
+    if (mode === "token-only") {
+      writeStdoutLineSafe(
+        `Generated bearer token (secret; changes on restart): ${input.token}`
+      );
+      writeStdoutLineSafe(
+        "The listener bound loopback, so no network address or QR is printed; local clients must present this bearer."
+      );
+      return;
+    }
+    const addresses = remoteQuickstartEntries(
+      input.bind,
+      input.boundAddress,
+      input.port,
+      input.tls,
+      input.interfaces ?? networkInterfaces()
+    );
+    for (const address of addresses)
+      writeStdoutLineSafe(`${address.label}: ${address.url}`);
+    if (input.generated) {
+      writeStdoutLineSafe(
+        `Generated bearer token (secret; changes on restart): ${input.token}`
+      );
+    }
+    if (!input.tls)
+      writeStdoutLineSafe(
+        "HTTP is unencrypted. Use the existing TLS options for encrypted remote access."
+      );
+    if (!input.web) return;
+    const candidate = addresses.find(
+      (address) => address.label !== "Local" && !isLinkLocalIpv4(address.address)
+    ) ?? addresses.find((address) => address.label !== "Local");
+    if (!candidate) {
+      writeStdoutLineSafe(
+        "QR unavailable; enter the bearer token at the daemon address."
+      );
+      return;
+    }
+    if (!input.generated && !process.stdout.isTTY) return;
+    try {
+      const { default: qrcode } = await import("./main-PXAUXNF2.js");
+      qrcode.setErrorLevel("Q");
+      qrcode.generate(
+        `${candidate.url}/#token=${encodeURIComponent(input.token)}`,
+        { small: true },
+        (code) => {
+          writeStdoutLineSafe(
+            `Scan to open Web Shell: ${candidate.url} (${candidate.label})`
+          );
+          writeStdoutLineSafe("SECRET QR: grants daemon access. Do not share.");
+          writeStdoutLineSafe(code.trimEnd());
+        }
+      );
+    } catch {
+      writeStdoutLineSafe(
+        "QR unavailable; enter the bearer token at the daemon address."
+      );
+    }
+  } catch {
+  }
+}
+__name(printRemoteQuickstart, "printRemoteQuickstart");
+
 // packages/cli/src/serve/permission-audit.ts
 init_esbuild_shims();
 var DEFAULT_PERMISSION_AUDIT_RING_SIZE = 512;
@@ -2975,6 +3105,16 @@ var QWEN_SERVE_WRITER_IDLE_TIMEOUT_MS_ENV = "QWEN_SERVE_WRITER_IDLE_TIMEOUT_MS";
 var SHUTDOWN_FORCE_CLOSE_MS = 5e3;
 var DAEMON_LOG_FORCED_FLUSH_BUDGET_MS = 250;
 var DEFAULT_LIVE_DISCOVERY_RETRY_MS = 5e3;
+var ENSURE_KEEP_ALIVE_MS = 10 * 6e4;
+function deepestErrorMessage(err) {
+  if (!(err instanceof Error)) return String(err);
+  let deepest = err;
+  while (deepest.cause instanceof Error) {
+    deepest = deepest.cause;
+  }
+  return deepest.message;
+}
+__name(deepestErrorMessage, "deepestErrorMessage");
 function channelDeliveryPublicError(code) {
   switch (code) {
     case "channel_worker_unavailable":
@@ -3123,7 +3263,8 @@ function isNonNegativeIntegerOrInfinity(value) {
   return value === Number.POSITIVE_INFINITY || Number.isFinite(value) && Number.isInteger(value) && value >= 0;
 }
 __name(isNonNegativeIntegerOrInfinity, "isNonNegativeIntegerOrInfinity");
-function deriveDefaultMaxTotalSessions(maxSessionsPerWorkspace, workspaceCount) {
+function deriveDefaultMaxTotalSessions(maxSessionsPerWorkspace, workspaceCount, maxRegisteredWorkspaces) {
+  if (maxRegisteredWorkspaces > 25) return 800;
   if (workspaceCount <= 1) return void 0;
   const perWorkspace = maxSessionsPerWorkspace ?? DEFAULT_MAX_SESSIONS;
   if (perWorkspace === 0 || perWorkspace === Number.POSITIVE_INFINITY) {
@@ -3260,14 +3401,11 @@ function canonicalIpLiteral(host) {
   }
 }
 __name(canonicalIpLiteral, "canonicalIpLiteral");
-function formatChannelWorkerDaemonUrl(host, port, tls = false, boundFamily, ipv6LoopbackAssigned = hostAssignsIpv6Loopback()) {
+function formatChannelWorkerDaemonUrl(host, port, tls = false, ipv6LoopbackAssigned = hostAssignsIpv6Loopback()) {
   const scheme = tls ? "https" : "http";
   const normalized = host.trim().toLowerCase();
   const canonicalIp = canonicalIpLiteral(normalized);
   const v6Loopback = ipv6LoopbackAssigned ? `${scheme}://[::1]:${port}` : `${scheme}://127.0.0.1:${port}`;
-  if (normalized === "") {
-    return boundFamily === "IPv4" ? `${scheme}://127.0.0.1:${port}` : v6Loopback;
-  }
   if (canonicalIp === "::") {
     return v6Loopback;
   }
@@ -3804,12 +3942,12 @@ __name(hasRetryableChannelWorkerShutdownError, "hasRetryableChannelWorkerShutdow
 var channelWorkerRuntimePromise;
 async function loadChannelWorkerRuntime() {
   channelWorkerRuntimePromise ??= Promise.all([
-    import("./channel-worker-supervisor-XJPZZ3VK.js"),
-    import("./pidfile-KPIS6RIT.js"),
-    import("./runtime-KGMQQFJD.js"),
+    import("./channel-worker-supervisor-HSFAKML6.js"),
+    import("./pidfile-JAIOWPI3.js"),
+    import("./runtime-5RO22P2N.js"),
     import("./cli-entry-path-4VJ3Y6T2.js"),
-    import("./channel-worker-group-PIYPVCTF.js"),
-    import("./channel-worker-manager-FQHEDTD2.js")
+    import("./channel-worker-group-X6WH4XWF.js"),
+    import("./channel-worker-manager-SICFJDPJ.js")
   ]).then(
     ([
       supervisor,
@@ -3915,7 +4053,7 @@ function shouldPreheatBridge(deps) {
 __name(shouldPreheatBridge, "shouldPreheatBridge");
 var coreRuntimePromise;
 function loadCoreRuntime() {
-  coreRuntimePromise ??= import("./core-runtime-6U4OXU5C.js");
+  coreRuntimePromise ??= import("./core-runtime-YGUA42AZ.js");
   return coreRuntimePromise;
 }
 __name(loadCoreRuntime, "loadCoreRuntime");
@@ -3951,10 +4089,10 @@ __name(resolveDaemonLogBaseDirForRun, "resolveDaemonLogBaseDirForRun");
 var settingsRuntimePromise;
 function loadSettingsRuntimeModules() {
   settingsRuntimePromise ??= Promise.all([
-    import("./settings-RKEQQDFC.js"),
-    import("./environment-BI6IBAZJ.js"),
-    import("./loadedSettingsAdapter-I3YQKMC4.js"),
-    import("./trustedFolders-C76KYROP.js")
+    import("./settings-SWQH36PO.js"),
+    import("./environment-URPO5ORZ.js"),
+    import("./loadedSettingsAdapter-NZORJLSD.js"),
+    import("./trustedFolders-GKQZXZSV.js")
   ]).then(([settings, environment, loadedSettingsAdapter, trustedFolders]) => ({
     settings,
     environment,
@@ -3967,8 +4105,8 @@ __name(loadSettingsRuntimeModules, "loadSettingsRuntimeModules");
 var channelWebhookConfigRuntimePromise;
 function loadChannelWebhookConfigRuntime() {
   channelWebhookConfigRuntimePromise ??= Promise.all([
-    import("./runtime-KGMQQFJD.js"),
-    import("./config-utils-37FHWPTP.js")
+    import("./runtime-5RO22P2N.js"),
+    import("./config-utils-S5LFS4RN.js")
   ]).then(([channelRuntime, configUtils]) => ({
     loadChannelsConfig: channelRuntime.loadChannelsConfig,
     parseChannelWebhookConfig: configUtils.parseChannelWebhookConfig
@@ -3995,19 +4133,19 @@ async function loadServeRuntimeModules() {
     workspaceRuntimeCoordinatorModule,
     promptLedgerModule
   ] = await Promise.all([
-    import("./server-PJRALPJQ.js"),
-    import("./bridge-Q66BD62H.js"),
-    import("./spawnChannel-WM3DT2BF.js"),
-    import("./process-registry-OAEG6WGC.js"),
-    import("./workspace-service-4MYO72MM.js"),
+    import("./server-SWXVPRCS.js"),
+    import("./bridge-YF6NYRPZ.js"),
+    import("./spawnChannel-7ZVM3GBU.js"),
+    import("./process-registry-X6ZCASEN.js"),
+    import("./workspace-service-HWXZSA4J.js"),
     import("./types-HKLPXZB3.js"),
-    import("./daemon-status-provider-7GMAKSTX.js"),
-    import("./workspace-providers-status-2FRLBZ5I.js"),
-    import("./workspace-skills-status-SU66TJLZ.js"),
-    import("./total-session-admission-FUUJH3QH.js"),
-    import("./workspace-registry-BNRP2ELW.js"),
-    import("./workspace-runtime-coordinator-WKGF7VHS.js"),
-    import("./prompt-terminal-ledger-D6HM6TV7.js")
+    import("./daemon-status-provider-RTKHKUFJ.js"),
+    import("./workspace-providers-status-QBRBEFTO.js"),
+    import("./workspace-skills-status-D6QXUWCC.js"),
+    import("./total-session-admission-BOARHBZU.js"),
+    import("./workspace-registry-CJV7KVGF.js"),
+    import("./workspace-runtime-coordinator-7LYMFMFF.js"),
+    import("./prompt-terminal-ledger-BYXHEUHX.js")
   ]);
   return {
     createServeApp: serverModule.createServeApp,
@@ -4120,6 +4258,14 @@ function createBootstrapCapabilities(input) {
     transports: ["rest"],
     policy: { permission: input.permissionPolicy ?? "first-responder" },
     limits: {
+      maxRegisteredWorkspaces: input.opts.maxRegisteredWorkspaces,
+      maxChannelControlWorkspaces: MAX_CHANNEL_CONTROL_WORKSPACES,
+      ...input.opts.maxTotalSessions !== void 0 ? {
+        maxSessionsPerWorkspace: advertisedMaxSessions(
+          input.opts.maxSessions
+        ),
+        maxTotalSessions: positiveFiniteOrNull(input.opts.maxTotalSessions)
+      } : {},
       maxPendingPromptsPerSession: advertisedMaxPendingPromptsPerSession(
         input.opts.maxPendingPromptsPerSession
       ),
@@ -4247,12 +4393,13 @@ function createBootstrapServeApp(input) {
   const localPathOpenAvailable = isLocalPathOpenAvailable();
   const localTerminalOpenAvailable = isLocalTerminalAvailable();
   installSelfOriginStripMiddleware(app, getPort, opts.hostname);
+  app.use(hostAllowlist(opts.hostname, getPort));
+  installRemoteSelfOriginMiddleware(app, opts.hostname, opts.token);
   if (opts.allowOrigins && opts.allowOrigins.length > 0) {
     app.use(allowOriginCors(parseAllowOriginPatterns(opts.allowOrigins)));
   } else {
     app.use(denyBrowserOriginCors);
   }
-  app.use(hostAllowlist(opts.hostname, getPort));
   const healthHandler = /* @__PURE__ */ __name((req, res) => {
     const runtimeError = getRuntimeError();
     if (runtimeError !== void 0) {
@@ -4379,6 +4526,8 @@ function createBootstrapServeApp(input) {
         sessionShellCommandEnabled
       },
       limits: {
+        maxRegisteredWorkspaces: opts.maxRegisteredWorkspaces,
+        maxChannelControlWorkspaces: MAX_CHANNEL_CONTROL_WORKSPACES,
         maxSessions: advertisedMaxSessions(opts.maxSessions),
         maxTotalSessions: positiveFiniteOrNull(opts.maxTotalSessions),
         maxPendingPromptsPerSession: advertisedMaxPendingPromptsPerSession(
@@ -4723,7 +4872,19 @@ async function runQwenServe(optsIn, deps = {}) {
   }
 }
 __name(runQwenServe, "runQwenServe");
+var brokenPipeGuardInstalled = false;
+function installServeBrokenPipeGuard() {
+  if (brokenPipeGuardInstalled) return;
+  brokenPipeGuardInstalled = true;
+  const ignoreEpipe = /* @__PURE__ */ __name((err) => {
+    if (err.code !== "EPIPE") throw err;
+  }, "ignoreEpipe");
+  process.stdout.on("error", ignoreEpipe);
+  process.stderr.on("error", ignoreEpipe);
+}
+__name(installServeBrokenPipeGuard, "installServeBrokenPipeGuard");
 async function runQwenServeImpl(optsIn, deps, loggerLifecycle) {
+  installServeBrokenPipeGuard();
   const runStartedAt = performance2.now();
   delete process.env[EXTERNAL_TOOL_GUARD_TOKEN_ENV];
   const channelDeliveryAuthorizations = new ChannelDeliveryAuthorizationStore();
@@ -4765,8 +4926,16 @@ async function runQwenServeImpl(optsIn, deps, loggerLifecycle) {
     loaderEnvScrub.release();
   }, "restoreScrubbedLoaderEnv");
   loggerLifecycle.scrubApplied(restoreScrubbedLoaderEnv);
-  const token = resolveServeToken(optsIn.token);
+  if (!optsIn.hostname.trim()) {
+    throw new Error(
+      "Invalid --hostname: empty value binds every interface. Pass an explicit address (e.g. --hostname 0.0.0.0) or omit the flag."
+    );
+  }
   const bindHostname = optsIn.hostname.toLowerCase() === "localhost" ? (await (deps.bindHostnameLookup ?? lookup)(optsIn.hostname)).address : optsIn.hostname;
+  const { token, generated: generatedToken } = resolveRemoteServeToken(
+    optsIn.token,
+    isLoopbackBind(optsIn.hostname)
+  );
   const trustedLoopbackMode = isTrustedLoopbackMode({
     loopbackBind: isLoopbackAddress(bindHostname),
     tokenConfigured: token !== void 0,
@@ -4800,6 +4969,10 @@ async function runQwenServeImpl(optsIn, deps, loggerLifecycle) {
   const opts = {
     ...optsIn,
     hostname: bindHostname,
+    maxRegisteredWorkspaces: resolveMaxRegisteredWorkspaces(
+      optsIn.maxRegisteredWorkspaces,
+      daemonRuntimeBaseEnv
+    ),
     token,
     promptDeadlineMs,
     writerIdleTimeoutMs,
@@ -4931,7 +5104,7 @@ async function runQwenServeImpl(optsIn, deps, loggerLifecycle) {
   }
   if (!isLoopbackBind(opts.hostname) && !token) {
     throw new Error(
-      `Refusing to bind ${opts.hostname}:${opts.port} without a bearer token. Set ${QWEN_SERVER_TOKEN_ENV} or pass --token, or rebind to loopback (127.0.0.0/8, localhost, ::1, or [::1]).`
+      `Refusing to bind ${opts.hostname}:${opts.port} without a bearer token (an explicitly empty --token or ${QWEN_SERVER_TOKEN_ENV} counts as none, since a blank source never generates one). Set ${QWEN_SERVER_TOKEN_ENV} or pass --token, or rebind to loopback (127.0.0.0/8, localhost, ::1, or [::1]).`
     );
   }
   if (opts.requireAuth && !token) {
@@ -5022,9 +5195,9 @@ async function runQwenServeImpl(optsIn, deps, loggerLifecycle) {
       }
     }
   }
-  if (workspaceInputs.length > MAX_REGISTERED_WORKSPACES) {
+  if (workspaceInputs.length > opts.maxRegisteredWorkspaces) {
     throw new Error(
-      `At most ${MAX_REGISTERED_WORKSPACES} --workspace values may be registered.`
+      `At most ${opts.maxRegisteredWorkspaces} --workspace values may be registered.`
     );
   }
   opts.daemonMemoryBudget = resolveDaemonMemoryBudget({
@@ -5064,8 +5237,9 @@ async function runQwenServeImpl(optsIn, deps, loggerLifecycle) {
     );
   }
   let workspaceRegistrationStore = deps.workspaceRegistrationStore;
+  const explicitWorkspaceCount = workspaceInputs.length;
   if (workspaceRegistrationStore === void 0 && process.env["QWEN_SERVE_NO_PERSISTENT_REGISTRATION"] !== "1") {
-    const { WorkspaceRegistrationStore } = await import("./workspace-registration-store-YL7HLYYI.js");
+    const { WorkspaceRegistrationStore } = await import("./workspace-registration-store-WUKTMJPW.js");
     workspaceRegistrationStore = new WorkspaceRegistrationStore(boundWorkspace);
   }
   if (workspaceRegistrationStore) {
@@ -5120,14 +5294,6 @@ async function runQwenServeImpl(optsIn, deps, loggerLifecycle) {
           );
           continue;
         }
-        if (workspaceInputs.length >= MAX_REGISTERED_WORKSPACES) {
-          writeStderrLine(
-            `qwen serve: skipping persisted workspace registration ${JSON.stringify(
-              storedWorkspace
-            )}: workspace limit reached`
-          );
-          continue;
-        }
         workspaceInputs.push({
           raw: storedWorkspace,
           cwd,
@@ -5142,6 +5308,11 @@ async function runQwenServeImpl(optsIn, deps, loggerLifecycle) {
       );
     }
   }
+  if (workspaceInputs.length > opts.maxRegisteredWorkspaces) {
+    throw new Error(
+      `${explicitWorkspaceCount} explicit + ${workspaceInputs.length - explicitWorkspaceCount} restored workspaces exceed the configured limit of ${opts.maxRegisteredWorkspaces}. Restart with the previous capacity, forget registrations and reduce explicit --workspace values before lowering the limit. The registration store was not changed.`
+    );
+  }
   if (workspaceInputs.length > 1 && deps.bridge) {
     throw new Error(
       "Injected bridge dependencies are only supported with a single workspace; multiple --workspace values require runQwenServe to construct one bridge per workspace."
@@ -5167,7 +5338,7 @@ async function runQwenServeImpl(optsIn, deps, loggerLifecycle) {
       throw err;
     }
     writeStderrLine(
-      `qwen serve: could not read settings for context.fileName / policy.* (${err instanceof Error ? err.message : String(err)}); falling back to defaults. Restart with a valid settings.json to apply context.fileName / policy.* overrides.`
+      `qwen serve: could not read settings for context.fileName / policy.* / serve.channels (${err instanceof Error ? err.message : String(err)}); falling back to defaults. Restart with a valid settings.json to apply context.fileName / policy.* / serve.channels overrides.`
     );
   }
   const daemonLogBaseDir = await resolveDaemonLogBaseDirForRun({
@@ -5180,6 +5351,54 @@ async function runQwenServeImpl(optsIn, deps, loggerLifecycle) {
     baseDir: daemonLogBaseDir
   });
   loggerLifecycle.initialized(daemonLog);
+  let channelSelectionFromSettings = false;
+  const reportConfiguredChannelStartupFailure = /* @__PURE__ */ __name((error) => {
+    const message = sanitizeLogText(
+      redactLogCredentials(
+        error instanceof Error ? error.message : String(error)
+      ),
+      512
+    );
+    const detail = /[.!?]$/.test(message) ? message : `${message}.`;
+    writeStderrLine(
+      `qwen serve: workspace serve.channels was not restored: ${detail} Continuing without channels.`
+    );
+    daemonLog.warn(
+      `workspace serve.channels was not restored: ${detail} Continuing without channels`
+    );
+  }, "reportConfiguredChannelStartupFailure");
+  if (!opts.channelSelection && bootSettings?.serve?.channels !== void 0) {
+    try {
+      const rawChannels = bootSettings.serve.channels;
+      if (!Array.isArray(rawChannels) || !rawChannels.every((name) => typeof name === "string")) {
+        throw new Error("serve.channels must be a string array.");
+      }
+      const configuredChannels = rawChannels.filter((name, index) => {
+        if (!name || name !== name.trim() || sanitizeLogText(name, name.length) !== name) {
+          daemonLog.warn(
+            `ignored invalid workspace serve.channels entry at index ${index}`
+          );
+          return false;
+        }
+        return true;
+      });
+      opts.channelSelection = normalizeServeChannelSelection(
+        configuredChannels,
+        "serve.channels"
+      );
+      if (opts.channelSelection) {
+        channelSelectionFromSettings = true;
+        channelRuntime = await ensureChannelRuntime();
+        daemonLog.info("restoring channels from workspace serve.channels", {
+          channels: channelSelectionNames(opts.channelSelection),
+          workspaceCwd: boundWorkspace
+        });
+      }
+    } catch (error) {
+      opts.channelSelection = void 0;
+      reportConfiguredChannelStartupFailure(error);
+    }
+  }
   daemonLog.info("project memory scope resolved", {
     projectMemoryScope: resolvedMemoryProjectScope,
     projectMemoryScopeSource: memoryProjectScopeSource,
@@ -5331,7 +5550,8 @@ async function runQwenServeImpl(optsIn, deps, loggerLifecycle) {
   }
   opts.maxTotalSessions ??= deriveDefaultMaxTotalSessions(
     opts.maxSessions,
-    workspaceInputs.length
+    workspaceInputs.length,
+    opts.maxRegisteredWorkspaces
   );
   const inheritedNoPool = process.env["QWEN_SERVE_NO_MCP_POOL"] === "1";
   if (opts.mcpPoolActive === void 0 && inheritedNoPool) {
@@ -5356,7 +5576,7 @@ async function runQwenServeImpl(optsIn, deps, loggerLifecycle) {
       "qwen serve: required external tool guard handshake succeeded."
     );
   }
-  const { createDaemonToolGuard } = await import("./daemon-git-worktree-guard-O2UTNFJC.js");
+  const { createDaemonToolGuard } = await import("./daemon-git-worktree-guard-3AWINPPX.js");
   const daemonToolGuardHandler = createDaemonToolGuard(
     externalToolGuardHandler
   );
@@ -5392,7 +5612,7 @@ async function runQwenServeImpl(optsIn, deps, loggerLifecycle) {
         );
         if (!opts.allowOrigins || opts.allowOrigins.length === 0) {
           writeStderrLine(
-            "qwen serve: without --allow-origin the Web Shell is read-only on a non-loopback bind \u2014 same-origin POSTs are blocked by CORS (403). Pass --allow-origin <origin> or front it with a same-origin proxy."
+            "qwen serve: same-origin Web Shell HTTP requests work without --allow-origin, but WebSocket-backed features (terminal, voice) and browsers reaching the daemon through a TLS-terminating proxy still need --allow-origin <origin>. A plain-HTTP intermediary that rewrites the Host header (nginx default proxy_set_header, k8s Ingress) needs --allow-origin <origin> for the origin the browser sees, unless it forwards Host verbatim; port translation alone (ssh -L, docker -p) is fine."
           );
         }
       }
@@ -5707,7 +5927,7 @@ async function runQwenServeImpl(optsIn, deps, loggerLifecycle) {
       loadCoreRuntime(),
       loadSettingsRuntimeModules(),
       cliVersionPromise,
-      import("./daemon-trust-policy-VNP76VMO.js")
+      import("./daemon-trust-policy-6YQOC7B6.js")
     ]);
     getWorkspaceRuntimeCoordinatorIfSupported = runtime.getWorkspaceRuntimeCoordinatorIfSupported;
     cliVersion = resolvedCliVersion;
@@ -6115,7 +6335,7 @@ async function runQwenServeImpl(optsIn, deps, loggerLifecycle) {
     }), "persistDisabledToolsFn");
     const persistDisabledSkillsFn = /* @__PURE__ */ __name((workspace, skillName, enabled, assertGenerationOpen) => withSettingsLock(workspace, async () => {
       assertGenerationOpen?.();
-      const { skillSettingStrings, updateWorkspaceSkillSettingLists } = await import("./skill-settings-LZR5YRRW.js");
+      const { skillSettingStrings, updateWorkspaceSkillSettingLists } = await import("./skill-settings-JU72PCII.js");
       const fresh = loadSettingsForPersistence(workspace);
       const workspaceDisabled = skillSettingStrings(
         fresh,
@@ -6165,7 +6385,7 @@ async function runQwenServeImpl(optsIn, deps, loggerLifecycle) {
     }), "persistDisabledSkillsFn");
     const persistDisabledSkillsBatchFn = /* @__PURE__ */ __name((workspace, skillNames, enabled, assertGenerationOpen) => withSettingsLock(workspace, async () => {
       assertGenerationOpen?.();
-      const { skillSettingStrings, updateWorkspaceSkillSettingLists } = await import("./skill-settings-LZR5YRRW.js");
+      const { skillSettingStrings, updateWorkspaceSkillSettingLists } = await import("./skill-settings-JU72PCII.js");
       const fresh = loadSettingsForPersistence(workspace);
       const initialDisabled = skillSettingStrings(
         fresh,
@@ -6256,10 +6476,10 @@ async function runQwenServeImpl(optsIn, deps, loggerLifecycle) {
       }
     }), "persistSettingsFn");
     const [{ createSubSessionLauncher }, scheduledTaskRoutes] = await Promise.all([
-      import("./create-sub-session-LLUYAGZN.js"),
-      import("./scheduled-tasks-7H5HWHYD.js")
+      import("./create-sub-session-SEK6KCYR.js"),
+      import("./scheduled-tasks-YGERFWLZ.js")
     ]);
-    const { sessionAttachmentsRoots } = await import("./session-attachments-root-GQ2TUI3Y.js");
+    const { sessionAttachmentsRoots } = await import("./session-attachments-root-SOZCTQWW.js");
     const createCurrentSessionScheduledTaskHandler = /* @__PURE__ */ __name((workspaceCwd, runtimeBaseDir, getBridge, assertGenerationOpen) => async ({
       callerSessionId,
       cron,
@@ -7100,7 +7320,7 @@ async function runQwenServeImpl(optsIn, deps, loggerLifecycle) {
     };
     sessionPrRefreshTimer?.dispose();
     const refreshGeneration = ++sessionPrRefreshGeneration;
-    void import("./session-pr-refresh-H43LULTE.js").then((mod) => {
+    void import("./session-pr-refresh-F7XUBQBH.js").then((mod) => {
       if (refreshGeneration !== sessionPrRefreshGeneration) return;
       sessionPrRefreshTimer = mod.startSessionPrRefreshTimer({
         workspaceRegistry,
@@ -7770,8 +7990,8 @@ async function runQwenServeImpl(optsIn, deps, loggerLifecycle) {
           { createChannelManagementService },
           { WorkspaceChannelSettingsStore }
         ] = await Promise.all([
-          import("./channel-management-service-TRTLQTSV.js"),
-          import("./channel-settings-store-R5STFWUW.js")
+          import("./channel-management-service-E4HTMU7T.js"),
+          import("./channel-settings-store-FZ5VKHQD.js")
         ]);
         return createChannelManagementService({
           workspaceCwd: targetRuntime.workspaceCwd,
@@ -7825,6 +8045,7 @@ async function runQwenServeImpl(optsIn, deps, loggerLifecycle) {
       throw new Error("Workspace runtime publication validation failed.");
     }, "validateWorkspaceRuntimeForPublication");
     const app2 = runtime.createServeApp(opts, () => actualPort, {
+      maxChannelControlWorkspaces: MAX_CHANNEL_CONTROL_WORKSPACES,
       serveAppLifecycle,
       liveDiscoveryStableBaseDir,
       workspaceRegistry,
@@ -7976,8 +8197,8 @@ async function runQwenServeImpl(optsIn, deps, loggerLifecycle) {
         { createWorkspaceTrustReconciler },
         { createDaemonTrustPolicyMonitor }
       ] = await Promise.all([
-        import("./workspace-trust-reconciler-D5QT7WQB.js"),
-        import("./daemon-trust-policy-monitor-TD5O3BZA.js")
+        import("./workspace-trust-reconciler-VZX7G7CZ.js"),
+        import("./daemon-trust-policy-monitor-EN5L23GS.js")
       ]);
       const materializationFor = /* @__PURE__ */ __name((entry, snapshot, decision) => {
         const boundWorkspaces2 = entry.primary && decision.targetTrusted ? runtime.resolveBoundWorkspacesFromIdeEnv(
@@ -8174,7 +8395,7 @@ async function runQwenServeImpl(optsIn, deps, loggerLifecycle) {
     // through (and start the runtime) exactly like the warm app would.
     // Dynamic import keeps web-shell-static out of the serve fast-path
     // static closure (see the import-boundary guards in fast-path.test.ts).
-    isPreAuthRequest: webShellMounted ? (req) => import("./web-shell-static-POZHGGXE.js").then(
+    isPreAuthRequest: webShellMounted ? (req) => import("./web-shell-static-CCN4JZEE.js").then(
       (webShellStatic) => webShellStatic.isPreAuthWebShellRequest(req)
     ) : void 0
   });
@@ -8193,11 +8414,12 @@ async function runQwenServeImpl(optsIn, deps, loggerLifecycle) {
       `Invalid maxConnections: ${opts.maxConnections}. Must be >= 0 (0 / Infinity = unlimited).`
     );
   }
-  const channelValidationSettingsRuntime = opts.channelSelection ? await loadSettingsRuntimeModules() : void 0;
-  const channelValidationTrustPolicy = opts.channelSelection ? await import("./daemon-trust-policy-VNP76VMO.js") : void 0;
-  const channelValidationTrustSnapshot = channelValidationTrustPolicy ? await channelValidationTrustPolicy.readDaemonTrustPolicySnapshot() : void 0;
+  let channelValidationSettingsRuntime;
+  let channelValidationTrustPolicy;
+  let channelValidationTrustSnapshot;
   const resolveChannelWorkspaceGroupsAtListen = /* @__PURE__ */ __name(() => {
-    if (!opts.channelSelection || !channelValidationSettingsRuntime || !channelRuntime) {
+    const validationSettingsRuntime = channelValidationSettingsRuntime;
+    if (!opts.channelSelection || !validationSettingsRuntime || !channelRuntime) {
       return void 0;
     }
     const registry = (runtimeApp ?? runtimeAppForCleanup)?.locals?.["workspaceRegistry"];
@@ -8237,15 +8459,12 @@ async function runQwenServeImpl(optsIn, deps, loggerLifecycle) {
           { code: "untrusted_workspace" }
         );
       }
-      const effectiveEnv = runtime ? workspaceRuntimeEffectiveEnv(runtime, daemonRuntimeBaseEnv) : channelValidationSettingsRuntime.environment.buildRuntimeEnvironment(
-        channelValidationSettingsRuntime.settings.loadSettings(
-          workspace.cwd,
-          {
-            skipLoadEnvironment: true,
-            skipWorkspaceSettings: false,
-            workspaceTrusted: true
-          }
-        ).merged,
+      const effectiveEnv = runtime ? workspaceRuntimeEffectiveEnv(runtime, daemonRuntimeBaseEnv) : validationSettingsRuntime.environment.buildRuntimeEnvironment(
+        validationSettingsRuntime.settings.loadSettings(workspace.cwd, {
+          skipLoadEnvironment: true,
+          skipWorkspaceSettings: false,
+          workspaceTrusted: true
+        }).merged,
         workspace.cwd,
         daemonRuntimeBaseEnv,
         trusted
@@ -8256,7 +8475,7 @@ async function runQwenServeImpl(optsIn, deps, loggerLifecycle) {
     const workspaces = workspaceInputs.map((workspace, index) => {
       const runtime = resolveRuntime(workspace.cwd);
       const trusted = resolveTrusted(workspace.cwd, index === 0, runtime);
-      const settings = channelValidationSettingsRuntime.settings.loadSettings(
+      const settings = validationSettingsRuntime.settings.loadSettings(
         workspace.cwd,
         {
           skipLoadEnvironment: true,
@@ -8267,7 +8486,7 @@ async function runQwenServeImpl(optsIn, deps, loggerLifecycle) {
       settingsByWorkspace.set(workspace.cwd, settings);
       channelWebhookEnvByWorkspace.set(
         workspace.cwd,
-        runtime ? workspaceRuntimeEffectiveEnv(runtime, daemonRuntimeBaseEnv) : channelValidationSettingsRuntime.environment.buildRuntimeEnvironment(
+        runtime ? workspaceRuntimeEffectiveEnv(runtime, daemonRuntimeBaseEnv) : validationSettingsRuntime.environment.buildRuntimeEnvironment(
           settings.merged,
           workspace.cwd,
           daemonRuntimeBaseEnv,
@@ -8298,7 +8517,23 @@ async function runQwenServeImpl(optsIn, deps, loggerLifecycle) {
     return grouping.groups;
   }, "resolveChannelWorkspaceGroupsAtListen");
   if (opts.channelSelection) {
-    reserveChannelServicePidfile(opts.channelSelection);
+    try {
+      channelValidationSettingsRuntime = await loadSettingsRuntimeModules();
+      channelValidationTrustPolicy = await import("./daemon-trust-policy-6YQOC7B6.js");
+      channelValidationTrustSnapshot = await channelValidationTrustPolicy.readDaemonTrustPolicySnapshot();
+      if (opts.channelSelection.mode === "names" && workspaceInputs.length > MAX_CHANNEL_CONTROL_WORKSPACES) {
+        const groups = resolveChannelWorkspaceGroupsAtListen();
+        assertChannelControlWorkspaceCapacity(
+          groups?.map((group) => group.workspaceCwd) ?? []
+        );
+      }
+      reserveChannelServicePidfile(opts.channelSelection);
+    } catch (error) {
+      if (!channelSelectionFromSettings) throw error;
+      removeCurrentServePidfile();
+      opts.channelSelection = void 0;
+      reportConfiguredChannelStartupFailure(error);
+    }
   }
   return await new Promise((resolve3, reject) => {
     let closeHost;
@@ -8665,11 +8900,10 @@ async function runQwenServeImpl(optsIn, deps, loggerLifecycle) {
       const armRuntimeStartupTimer = /* @__PURE__ */ __name(() => {
         if (runtimeStartupTimeoutMs <= 0 || runtimeStartupTimer) return;
         runtimeStartupTimer = setTimeout(() => {
-          void failRuntimeStartup(
-            new Error(
-              `Daemon runtime startup timed out after ${runtimeStartupTimeoutMs}ms.`
-            )
+          const timeoutError = new Error(
+            `Daemon runtime startup timed out after ${runtimeStartupTimeoutMs}ms.`
           );
+          void failRuntimeStartup(timeoutError);
         }, runtimeStartupTimeoutMs);
         runtimeStartupTimer.unref();
       }, "armRuntimeStartupTimer");
@@ -8749,8 +8983,7 @@ async function runQwenServeImpl(optsIn, deps, loggerLifecycle) {
           const workerDaemonUrl = formatChannelWorkerDaemonUrl(
             workerHostname,
             actualPort,
-            tlsOptions !== void 0,
-            typeof addr === "object" && addr && (addr.family === "IPv4" || addr.family === "IPv6") ? addr.family : void 0
+            tlsOptions !== void 0
           );
           (deps.channelWorkerUrlCertifier ?? assertChannelWorkerDaemonUrlIsLocal)(workerDaemonUrl, workerHostname);
           if (tlsOptions && tlsCertPath && process.env["NODE_TLS_REJECT_UNAUTHORIZED"] === "0") {
@@ -8897,8 +9130,32 @@ async function runQwenServeImpl(optsIn, deps, loggerLifecycle) {
         acpHandle?.attachServer?.(server);
         if (opts.channelSelection) {
           closeServerAfterChannelWorkerStartupFailure = true;
-          const manager = await ensureChannelWorkerManager();
-          await manager.startInitial(opts.channelSelection);
+          let manager;
+          try {
+            manager = await ensureChannelWorkerManager();
+            await manager.startInitial(opts.channelSelection);
+          } catch (error2) {
+            if (!channelSelectionFromSettings || runtimeStartupSettled) {
+              throw error2;
+            }
+            closeServerAfterChannelWorkerStartupFailure = false;
+            opts.channelSelection = void 0;
+            reportConfiguredChannelStartupFailure(error2);
+            try {
+              if (manager) {
+                await manager.stopSelection();
+              } else {
+                removeCurrentServePidfile();
+                if (channelPidfileReserved) {
+                  throw new Error(
+                    "Failed to release the channel service lease."
+                  );
+                }
+              }
+            } catch (cleanupError) {
+              reportConfiguredChannelStartupFailure(cleanupError);
+            }
+          }
           if (runtimeStartupSettled) return;
         }
         if (runtimeStartupSettled) return;
@@ -8908,7 +9165,45 @@ async function runQwenServeImpl(optsIn, deps, loggerLifecycle) {
         clearRuntimeStartupTimer();
         markRuntimeReady();
       }, "completeRuntimeStartup");
-      const startBridgePreheat = /* @__PURE__ */ __name((bridge) => {
+      const scheduleWorkspaceMcpDiscoveryAfterPreheat = /* @__PURE__ */ __name((app2) => {
+        if (runtimeStartupError !== void 0) {
+          daemonLog.info(
+            "workspace runtime ensure after preheat skipped: runtime startup failed"
+          );
+          return;
+        }
+        if (shuttingDown) {
+          daemonLog.info(
+            "workspace runtime ensure after preheat skipped: shutting down"
+          );
+          return;
+        }
+        const registry = app2.locals?.["workspaceRegistry"];
+        const primaryEntry = registry?.primaryEntry;
+        const runtime = primaryEntry?.state === "active" ? primaryEntry.current?.runtime : void 0;
+        if (!runtime) {
+          daemonLog.info(
+            "workspace runtime ensure after preheat skipped: no primary runtime"
+          );
+          return;
+        }
+        const coordinator = getWorkspaceRuntimeCoordinatorIfSupported?.(runtime);
+        if (!coordinator) {
+          daemonLog.info(
+            "workspace runtime ensure after preheat skipped: workspace runtime lifecycle is not supported"
+          );
+          return;
+        }
+        void coordinator.ensure({ keepAliveMs: ENSURE_KEEP_ALIVE_MS }).catch((err) => {
+          if (shuttingDown || runtimeStartupError !== void 0) {
+            return;
+          }
+          daemonLog.warn(
+            `workspace runtime ensure after preheat failed: ${deepestErrorMessage(err)}`
+          );
+        });
+      }, "scheduleWorkspaceMcpDiscoveryAfterPreheat");
+      const startBridgePreheat = /* @__PURE__ */ __name((bridge, app2) => {
         startup.preheat.status = "running";
         const preheatStartedAt = performance2.now();
         bridge.preheat().then(() => {
@@ -8916,6 +9211,7 @@ async function runQwenServeImpl(optsIn, deps, loggerLifecycle) {
           startup.preheat.durationMs = Math.round(
             performance2.now() - preheatStartedAt
           );
+          scheduleWorkspaceMcpDiscoveryAfterPreheat(app2);
         }).catch((err) => {
           const message = err instanceof Error ? err.message : String(err);
           startup.preheat.status = "failed";
@@ -8949,7 +9245,7 @@ async function runQwenServeImpl(optsIn, deps, loggerLifecycle) {
             return;
           }
           if (shouldPreheat && runtime.bridge) {
-            startBridgePreheat(runtime.bridge);
+            startBridgePreheat(runtime.bridge, runtime.app);
           }
           await completeRuntimeStartup(runtime.app);
         }).catch((err) => failRuntimeStartup(err));
@@ -9266,14 +9562,19 @@ async function runQwenServeImpl(optsIn, deps, loggerLifecycle) {
       } catch (err) {
         removeCurrentServePidfile();
         const error2 = err instanceof Error ? err : new Error(String(err));
-        markServeAppStartupFailed(error2);
-        void serveAppLifecycle.close().then(
-          () => reject(error2),
-          (closeError) => reject(
-            closeError instanceof Error ? new AggregateError([error2, closeError], error2.message) : error2
-          )
-        );
-        return;
+        if (channelSelectionFromSettings) {
+          opts.channelSelection = void 0;
+          reportConfiguredChannelStartupFailure(error2);
+        } else {
+          markServeAppStartupFailed(error2);
+          void serveAppLifecycle.close().then(
+            () => reject(error2),
+            (closeError) => reject(
+              closeError instanceof Error ? new AggregateError([error2, closeError], error2.message) : error2
+            )
+          );
+          return;
+        }
       }
       if (channelWorkspaceGroups) {
         for (const group of channelWorkspaceGroups) {
@@ -9284,13 +9585,25 @@ async function runQwenServeImpl(optsIn, deps, loggerLifecycle) {
         }
         if (opts.channelSelection?.mode === "all") {
           writeStderrLine(
-            "qwen serve: --channel all is primary-workspace only; non-primary workspace channels are not hosted."
+            channelSelectionFromSettings ? 'qwen serve: workspace serve.channels selection "all" is primary-workspace only; non-primary workspace channels are not hosted.' : "qwen serve: --channel all is primary-workspace only; non-primary workspace channels are not hosted."
           );
         }
       }
       writeStdoutLine(
         `qwen serve listening on ${url} (mode=${opts.mode}, workspace=${boundWorkspace})`
       );
+      const boundAddress = typeof addr === "object" && addr ? addr.address : opts.hostname;
+      if (token) {
+        void printRemoteQuickstart({
+          bind: opts.hostname,
+          boundAddress,
+          port: actualPort,
+          tls: Boolean(tlsOptions),
+          token,
+          generated: generatedToken,
+          web: webShellMounted
+        });
+      }
       writeStderrLine(
         `qwen serve: bound to workspace ${JSON.stringify(boundWorkspace)}`
       );
@@ -9320,9 +9633,10 @@ async function runQwenServeImpl(optsIn, deps, loggerLifecycle) {
       });
       const preparedRuntimeApp = runtimeApp ?? runtimeAppForCleanup;
       if (preparedRuntimeApp && bridgeRef && deps.bridge) {
+        runtimeApp ??= preparedRuntimeApp;
         attachLiveDiscoveryControl(preparedRuntimeApp);
         if (shouldPreheat) {
-          startBridgePreheat(bridgeRef);
+          startBridgePreheat(bridgeRef, preparedRuntimeApp);
         }
         if (opts.channelSelection && !runtimeStartupSettled) {
           armRuntimeStartupTimer();
@@ -9334,6 +9648,11 @@ async function runQwenServeImpl(optsIn, deps, loggerLifecycle) {
           acpHandle?.attachServer?.(server);
           markServeAppStartupReady();
           void publishLiveDiscovery(preparedRuntimeApp);
+          if (!runtimeStartupSettled) {
+            runtimeStartupSettled = true;
+            clearRuntimeStartupTimer();
+            markRuntimeReady();
+          }
         }
       } else if (deferRuntimeUntilFirstHealth) {
         scheduleRuntimeStartFallback();