@qwen-code/qwen-code 0.23.3 → 0.23.4

package/chunks/{server-LBPYXZ5G.js → server-U7K7EJEP.js}

@@ -1,5 +1,11 @@
 // Force strict mode and setup for ESM
 "use strict";
+import {
+  deriveWebSocketBase,
+  openQwenAsrRealtimeStream,
+  openVoiceStream,
+  openVoiceStreamWithRetry
+} from "./chunk-Q2SAQTEJ.js";
 import {
   GENERATION_MAX_PROMPT_BYTES,
   MAX_REMEMBER_CONTENT_BYTES,
@@ -14,13 +20,7 @@ import {
   shouldSuppressRememberErrorDetails,
   workspaceMemoryFailureCode,
   workspaceMemoryFailureDiagnostics
-} from "./chunk-KOKPXIAN.js";
-import {
-  deriveWebSocketBase,
-  openQwenAsrRealtimeStream,
-  openVoiceStream,
-  openVoiceStreamWithRetry
-} from "./chunk-Q2SAQTEJ.js";
+} from "./chunk-UL4DXZMP.js";
 import {
   SetupGithubError,
   collectSessionData,
@@ -32,61 +32,19 @@ import {
   toJson,
   toJsonl,
   toMarkdown
-} from "./chunk-3XLK2QMY.js";
+} from "./chunk-H7L725Z6.js";
 import {
   OBSERVED_CONTACT_MAX_FRESH_WITHIN_SECONDS,
   ObservedChannelContactStore
 } from "./chunk-M3JGHRMQ.js";
 import "./chunk-VFFQAOPR.js";
+import "./chunk-2S2WIGCM.js";
 import {
   escapeAnsiCtrlCodes
 } from "./chunk-47ECGEJC.js";
-import "./chunk-6JACAGYH.js";
 import "./chunk-2MIN6GRR.js";
 import "./chunk-QHTIBUWB.js";
 import "./chunk-TXASDT2M.js";
-import {
-  AONE_MAX_MR_VIEW_CALLS_PER_RUN,
-  DaemonDrainingError,
-  InvalidCursorError,
-  SessionArchiveCoordinator,
-  acquireWorktreeOwnershipOp,
-  archiveDaemonSessions,
-  assertSessionArchived,
-  assertSessionLoadable,
-  assertSessionRestorable,
-  createSessionOrganizationService,
-  createWorkspaceRuntimeSessionService,
-  defaultAoneMrBackend,
-  deleteDaemonSessionIfOrphan,
-  deleteDaemonSessions,
-  getWorkspaceSessionInfoForResponse,
-  invalidateWorkspaceSessionListCache,
-  isAoneDetailUrlForRepo,
-  laterActivityTimestamp,
-  listLiveWorkspaceSessionsForResponse,
-  listWorkspaceSessionsForResponse,
-  logSessionArchiveWarning,
-  parseSessionPageSizeQuery,
-  resolveAoneWorkspaceRepo,
-  resolveSessionIdForRestore,
-  runWithWorkspaceRuntimeStorage,
-  searchWorkspaceSessionsForResponse,
-  unarchiveDaemonSessions
-} from "./chunk-YQHLFCPU.js";
-import {
-  LIVE_SESSION_SOURCE_PREFIX,
-  isCompatibleLiveSessionSource,
-  isReservedLiveSessionSource,
-  isReservedStandaloneSessionSource,
-  readLoadableConversationSession,
-  readLoadableLiveConversationMetadata
-} from "./chunk-OHU2H5CS.js";
-import "./chunk-4VQBQLIZ.js";
-import {
-  STANDALONE_SESSION_SOURCE_TYPE,
-  isReservedStandaloneSessionSourceType
-} from "./chunk-N4QWUPDM.js";
 import {
   ACP_PRE_ATTACH_MAX_FRAMES_GLOBAL,
   ACP_PRE_ATTACH_MAX_FRAMES_PER_CONNECTION,
@@ -157,7 +115,7 @@ import {
   singleTokenCredentials,
   tagListener,
   unsafeRevealSecret
-} from "./chunk-NRXWJXJ4.js";
+} from "./chunk-7GKPKIUB.js";
 import {
   ConversationDirectoryIdentityError,
   getConversationDirectoryName,
@@ -165,7 +123,47 @@ import {
   isSameConversationPath,
   normalizedInode
 } from "./chunk-PB7JBAHF.js";
-import "./chunk-UXEO7E3V.js";
+import {
+  formatHostForAuthority,
+  isLoopbackBind
+} from "./chunk-DMEUXLSS.js";
+import {
+  AONE_MAX_MR_VIEW_CALLS_PER_RUN,
+  DaemonDrainingError,
+  InvalidCursorError,
+  SessionArchiveCoordinator,
+  acquireWorktreeOwnershipOp,
+  archiveDaemonSessions,
+  assertSessionArchived,
+  assertSessionLoadable,
+  assertSessionRestorable,
+  createWorkspaceRuntimeSessionService,
+  defaultAoneMrBackend,
+  deleteDaemonSessionIfOrphan,
+  deleteDaemonSessions,
+  getWorkspaceSessionInfoForResponse,
+  invalidateWorkspaceSessionListCache,
+  isAoneDetailUrlForRepo,
+  laterActivityTimestamp,
+  listLiveWorkspaceSessionsForResponse,
+  listWorkspaceSessionsForResponse,
+  logSessionArchiveWarning,
+  parseSessionPageSizeQuery,
+  resolveAoneWorkspaceRepo,
+  resolveSessionIdForRestore,
+  runWithWorkspaceRuntimeStorage,
+  searchWorkspaceSessionsForResponse,
+  unarchiveDaemonSessions
+} from "./chunk-65ANUQSV.js";
+import {
+  LIVE_SESSION_SOURCE_PREFIX,
+  isCompatibleLiveSessionSource,
+  isReservedLiveSessionSource,
+  isReservedStandaloneSessionSource,
+  readLoadableConversationSession,
+  readLoadableLiveConversationMetadata
+} from "./chunk-OHU2H5CS.js";
+import "./chunk-4VQBQLIZ.js";
 import {
   CLIENT_ID_HEADER,
   CLIENT_ID_RE,
@@ -188,6 +186,24 @@ import {
   sendJsonBodyParserError,
   validateMcpRuntimeServerName
 } from "./chunk-LAUEEBDL.js";
+import {
+  STANDALONE_SESSION_SOURCE_TYPE,
+  isReservedStandaloneSessionSourceType,
+  isScheduledTaskRunSource
+} from "./chunk-N4QWUPDM.js";
+import {
+  readRecentPromptTerminals,
+  reconcileDanglingPromptTerminals,
+  withPromptTerminals
+} from "./chunk-RJFUPP3F.js";
+import {
+  WorkspaceGenerationClosedError,
+  createSingleWorkspaceRegistry,
+  createWorkspaceSessionOwnerIndex
+} from "./chunk-R7OO56VZ.js";
+import {
+  sessionAttachmentsRoots
+} from "./chunk-XWJFDJZK.js";
 import {
   getWorkspaceRouteContext,
   isGenerationClosedError,
@@ -210,23 +226,29 @@ import {
   sendUntrustedWorkspaceResponse,
   sendWorkspaceRuntimeUnavailable,
   setWorkspaceRouteContext
-} from "./chunk-2PJRI3EH.js";
+} from "./chunk-J4DRBDHX.js";
 import {
   normalizeChannelDelivery,
   parseChannelDelivery
-} from "./chunk-Z3GF56ME.js";
+} from "./chunk-FRISMWG3.js";
 import {
   isValidSessionId,
   normalizeSessionIdForLookup,
   parseCallerSuppliedSessionId
 } from "./chunk-ZEZKIS2K.js";
+import {
+  createSessionOrganizationService
+} from "./chunk-PRWRNC64.js";
+import {
+  isInternalWorkspaceRuntime
+} from "./chunk-NYWWQ437.js";
 import {
   WorkspaceRuntimeInitializationError,
   WorkspaceRuntimeStillStartingError,
   getWorkspaceRuntimeCoordinator,
   getWorkspaceRuntimeCoordinatorIfSupported,
   supportsWorkspaceRuntimeLifecycle
-} from "./chunk-Q2LVVIKF.js";
+} from "./chunk-ZZUXUBEB.js";
 import {
   EMPTY_WORKSPACE_VOICE_UPDATE_ERROR,
   MAX_WORKSPACE_SKILL_NAME_LENGTH,
@@ -242,14 +264,14 @@ import {
   validateWorkspaceSkillName,
   validateWorkspaceVoiceState,
   voiceSettingsScopeToWire
-} from "./chunk-LDVNJZGH.js";
+} from "./chunk-IUXWAKVS.js";
 import {
   PermissionRulesValidationError,
   buildPermissionSettings,
   isPermissionRuleType,
   normalizePermissionRules,
   readPermissionRuleSet
-} from "./chunk-XBZTAGB7.js";
+} from "./chunk-OXDQETZA.js";
 import {
   assertVoiceBaseUrlNetworkAllowed,
   isStreamingVoiceModel,
@@ -257,91 +279,95 @@ import {
   resolveVoiceTranscriptionConfig,
   sanitizeVoiceErrorMessage,
   transcribeVoiceAudio
-} from "./chunk-2ALXPGB4.js";
+} from "./chunk-E6IR653O.js";
 import {
   isVoiceEnabled,
   isVoiceMode,
-  readVoiceModel
-} from "./chunk-NE624IVP.js";
+  readVoiceModel,
+  resolveVoiceTransport
+} from "./chunk-ADQUK6WA.js";
 import {
   resolvePath
 } from "./chunk-Y53DG2HA.js";
 import {
   createTotalSessionAdmissionController
 } from "./chunk-YI2YCNSP.js";
+import "./chunk-OIBUG24X.js";
+import {
+  MAX_SESSION_RESTORE_TIMEOUT_MS,
+  resolveSessionRestoreTimeoutMs,
+  restoreRetryAfterSeconds
+} from "./chunk-4JRM2BSM.js";
 import {
   assertValidChannelSecretUpdates
-} from "./chunk-X7UJKOHZ.js";
+} from "./chunk-O75ZXPOX.js";
+import {
+  createWorkspaceProvidersStatusProvider
+} from "./chunk-VQ3SUPLA.js";
+import {
+  PERSIST_REASONING_SELECTION_META_KEY,
+  REASONING_SELECTION_PERSISTED_META_KEY
+} from "./chunk-MJHLKWGJ.js";
+import {
+  findModelConfiguration,
+  findModelConfigurationForDeletion,
+  isConversationModelConfiguration,
+  isImageModelConfiguration,
+  listModelConfigurations
+} from "./chunk-62MWBTS7.js";
 import {
   createWorkspaceSkillsStatusProvider
-} from "./chunk-Q5BD56BW.js";
-import "./chunk-BHTYRHJF.js";
+} from "./chunk-ELHAQ5H4.js";
+import "./chunk-ZJ7JQUGY.js";
+import {
+  lookupSkillDisablement,
+  resolveSkillSettings
+} from "./chunk-LMJSPC55.js";
 import {
   WorkspacePermissionRulesSessionRequiredError,
   WorkspaceSettingsPartialPersistError,
   WorkspaceSkillNotFoundError,
   mapWorkspaceSkillToggleError
 } from "./chunk-FTJMWDND.js";
-import "./chunk-FCQJLMA2.js";
+import "./chunk-Q3TFRP5G.js";
 import {
   isServeDebugMode,
   mountWebShellAssets,
   mountWebShellSpaFallback
-} from "./chunk-3I7W2POO.js";
+} from "./chunk-FGROOEKM.js";
 import {
   require_express
 } from "./chunk-SVWWF5TZ.js";
 import "./chunk-FBX2SDQ4.js";
-import {
-  formatHostForAuthority,
-  isLoopbackBind
-} from "./chunk-DMEUXLSS.js";
 import {
   evaluateDaemonWorkspaceTrust,
   readDaemonTrustPolicySnapshot
-} from "./chunk-KFZYGSJN.js";
-import {
-  readRecentPromptTerminals,
-  reconcileDanglingPromptTerminals,
-  withPromptTerminals
-} from "./chunk-OLTN767L.js";
-import {
-  WorkspaceGenerationClosedError,
-  createSingleWorkspaceRegistry,
-  createWorkspaceSessionOwnerIndex
-} from "./chunk-R7OO56VZ.js";
-import {
-  isInternalWorkspaceRuntime
-} from "./chunk-NYWWQ437.js";
-import "./chunk-OIBUG24X.js";
-import {
-  MAX_SESSION_RESTORE_TIMEOUT_MS,
-  resolveSessionRestoreTimeoutMs,
-  restoreRetryAfterSeconds
-} from "./chunk-4JRM2BSM.js";
-import {
-  sessionAttachmentsRoots
-} from "./chunk-XWJFDJZK.js";
+} from "./chunk-WDB57HEI.js";
 import {
   assertLiveDiscoveryPublisher,
   getStableLiveDiscoveryBaseDir
-} from "./chunk-WG7BL3FY.js";
+} from "./chunk-473RJLIH.js";
 import {
   ConversationRuntimeOwnershipError,
   LIVE_HOST_BUNDLE_ID,
   LIVE_HOST_PROTOCOL_VERSION,
   LIVE_INPUT_AUDIO_EPOCH_BYTES,
+  LIVE_OUTPUT_AUDIO_EPOCH_BYTES,
+  LIVE_OUTPUT_AUDIO_HEADER_BYTES,
   conversationRootCompromisedError,
   conversationRuntimeInUseError,
   conversationRuntimeOwnershipCompromisedError,
   conversationRuntimeUnavailableError
-} from "./chunk-2Z3T52OC.js";
+} from "./chunk-Y5TM7SBV.js";
 import {
   createDaemonStatusProvider
-} from "./chunk-POC3YMHG.js";
-import "./chunk-RWVD5RRY.js";
-import "./chunk-HBQ2NXOU.js";
+} from "./chunk-F2IRY2TD.js";
+import "./chunk-BDDE4YNP.js";
+import "./chunk-M6MID3FA.js";
 import "./chunk-JS73NNWF.js";
+import {
+  snapshotProcessEnv
+} from "./chunk-VRQZESKP.js";
 import {
   SessionArtifactAuthorizationError,
   SessionArtifactValidationError,
@@ -349,7 +375,7 @@ import {
   extractErrorCode,
   extractErrorMessage,
   parseSessionSource
-} from "./chunk-3KQBQ6FM.js";
+} from "./chunk-SYDMM6IX.js";
 import {
   EVENT_SCHEMA_VERSION,
   EventBus,
@@ -359,21 +385,8 @@ import "./chunk-WCCLLK7X.js";
 import "./chunk-OCPBI7J5.js";
 import {
   createSpawnChannelFactory
-} from "./chunk-IUVIBDKU.js";
-import {
-  createWorkspaceProvidersStatusProvider
-} from "./chunk-5KI7ZDTB.js";
-import {
-  PERSIST_REASONING_SELECTION_META_KEY,
-  REASONING_SELECTION_PERSISTED_META_KEY
-} from "./chunk-BV6Q5HMY.js";
-import {
-  getAuthTypeFromEnv,
-  resolveCliGenerationConfig
-} from "./chunk-MF6E7FSA.js";
-import {
-  snapshotProcessEnv
-} from "./chunk-TBEXLLAO.js";
+} from "./chunk-2YMRRI2C.js";
+import "./chunk-LYD3T3H7.js";
 import {
   BridgeTimeoutError,
   SERVE_CONTROL_EXT_METHODS,
@@ -381,31 +394,45 @@ import {
   SessionRestoreTimeoutError,
   createIdleWorkspaceMemoryStatus,
   mapDomainErrorToErrorKind
-} from "./chunk-HGEUHUEV.js";
+} from "./chunk-54B2LTKP.js";
 import {
-  resolveSkillSettings
-} from "./chunk-HWVUSYSN.js";
+  getAuthTypeFromEnv,
+  resolveCliGenerationConfig
+} from "./chunk-MFPAVOYJ.js";
+import "./chunk-INGBUYL6.js";
 import "./chunk-ZL4HFSL6.js";
 import {
   daemonObservedContactsPath,
   loadChannelsConfig
-} from "./chunk-NHCZJQE4.js";
-import "./chunk-SODMFNAR.js";
+} from "./chunk-WLFILD4T.js";
+import "./chunk-SQCZDHBQ.js";
 import "./chunk-57OAHC2Y.js";
 import {
   parseChannelWebhookConfigLenient
-} from "./chunk-RZHU3K6M.js";
+} from "./chunk-IAS753HG.js";
 import {
   supportedChannelCatalog
-} from "./chunk-CUEXOHQH.js";
-import "./chunk-76RGWKLS.js";
+} from "./chunk-5ODRE7E5.js";
+import "./chunk-ABNX6E6K.js";
 import "./chunk-V6WHFGST.js";
+import {
+  MAX_REGISTERED_WORKSPACES,
+  WorkspaceDisplayNameValidationError,
+  WorkspaceRegistrationStoreCommittedError,
+  WorkspaceRegistrationStoreLimitError,
+  WorkspaceRegistrationStoreTooLargeError,
+  normalizeWorkspaceDisplayName,
+  resolveMaxRegisteredWorkspaces,
+  workspaceRegistrationId
+} from "./chunk-P225AM5U.js";
 import {
   CHANNEL_PROMPT_META_KEY,
   DAEMON_PROMPT_DISPLAY_TEXT_META_KEY,
+  DAEMON_SUBMITTED_PROMPT_META_KEY,
   REQUESTED_SESSION_ID_META_KEY,
+  SUBMITTED_PROMPT_META_KEY,
   gradeActiveWorkCoverage
-} from "./chunk-PSPAM24S.js";
+} from "./chunk-TBSCTWKF.js";
 import {
   BranchWhilePromptActiveError,
   BridgeChannelQuarantinedError,
@@ -443,6 +470,12 @@ import {
   WorkspaceInitSymlinkError,
   WorkspaceMismatchError
 } from "./chunk-FAWTMDX7.js";
+import {
+  MAX_WORKSPACE_PATH_LENGTH,
+  canonicalizeWorkspace,
+  canonicalizeWorkspaces,
+  translateAndCheckAbsoluteWorkspacePath
+} from "./chunk-6PLDPT2C.js";
 import {
   CHANNEL_WORKER_PROMPT_AUTHORIZATION_META_KEY,
   isChannelWorkerPromptAuthorized
@@ -454,30 +487,30 @@ import {
   MAX_CHANNEL_STARTUP_FAILURE_MESSAGE_LENGTH,
   isChannelWebhookEnqueueError
 } from "./chunk-STUJ7IMZ.js";
+import {
+  QWEN_SERVER_TOKEN_ENV
+} from "./chunk-GYTKQYDB.js";
 import {
   normalizeWorkerDiagnostic
-} from "./chunk-NLNQNBZ2.js";
+} from "./chunk-WD6YQI5M.js";
 import {
   normalizeServeChannelSelection
-} from "./chunk-ALMR3E6Q.js";
-import {
-  QWEN_SERVER_TOKEN_ENV
-} from "./chunk-GYTKQYDB.js";
+} from "./chunk-GDWE23OR.js";
 import {
   ChannelDeliveryError,
   isChannelDeliveryError
 } from "./chunk-RKFGE7JH.js";
 import "./chunk-CJ3DHN5I.js";
 import "./chunk-UDG5EZJI.js";
+import "./chunk-3VUENPWF.js";
 import {
   redactLogCredentials
 } from "./chunk-M5GB774H.js";
-import "./chunk-3VUENPWF.js";
 import "./chunk-K6KS3LTN.js";
 import "./chunk-OSHQMOBS.js";
 import {
   sanitizeLogText
-} from "./chunk-7QYWGTHB.js";
+} from "./chunk-EPVEPTI3.js";
 import "./chunk-IJOS26LH.js";
 import {
   WORKSPACE_RESTRICTED_SETTING_KEYS,
@@ -491,44 +524,28 @@ import {
   resolveOutputLanguageOrPreserveAuto,
   updateOutputLanguageFile,
   validateSettingValue
-} from "./chunk-7BXXIQG4.js";
+} from "./chunk-PVKEYO5D.js";
+import "./chunk-P6XVYPWA.js";
 import "./chunk-RKUWKYED.js";
-import "./chunk-ZU47FBOC.js";
-import "./chunk-NOAG7N22.js";
-import "./chunk-BW4333PP.js";
-import "./chunk-VX63RJXE.js";
-import {
-  MAX_REGISTERED_WORKSPACES,
-  WorkspaceDisplayNameValidationError,
-  WorkspaceRegistrationStoreCommittedError,
-  WorkspaceRegistrationStoreLimitError,
-  WorkspaceRegistrationStoreTooLargeError,
-  normalizeWorkspaceDisplayName,
-  resolveMaxRegisteredWorkspaces,
-  workspaceRegistrationId
-} from "./chunk-SBRX4BDI.js";
-import {
-  MAX_WORKSPACE_PATH_LENGTH,
-  canonicalizeWorkspace,
-  canonicalizeWorkspaces,
-  translateAndCheckAbsoluteWorkspacePath
-} from "./chunk-6PLDPT2C.js";
-import "./chunk-IDS7MSUP.js";
 import {
   detectSystemLanguage,
   getCurrentLanguage,
   resolveLanguageSetting,
   setLanguageAsync
-} from "./chunk-VZUCTJ2P.js";
+} from "./chunk-I6YJZGHS.js";
 import {
   SUPPORTED_LANGUAGES,
   resolveSupportedLanguage
 } from "./chunk-5EJZE3FP.js";
-import "./chunk-R4Q2PEFV.js";
+import "./chunk-IGLX6UXJ.js";
+import "./chunk-BW4333PP.js";
+import "./chunk-IDS7MSUP.js";
+import "./chunk-XX5HQLCZ.js";
+import "./chunk-E7HXORS7.js";
 import "./chunk-W3N5XAZ6.js";
 import {
   getWorkspaceTrustStatus
-} from "./chunk-53GWJOLP.js";
+} from "./chunk-2P2IXKDR.js";
 import "./chunk-NPQ5ZKRP.js";
 import {
   isWithinRoot as isWithinRoot2
@@ -543,32 +560,33 @@ import {
   buildUsageDashboard,
   loadIgnoreRules,
   writeWorkspaceContextFile
-} from "./chunk-BZM5U74J.js";
+} from "./chunk-I6JRN375.js";
 import "./chunk-GELRJXE2.js";
 import "./chunk-32CM56LO.js";
+import "./chunk-6WXVEDT2.js";
+import "./chunk-LJZSMWOH.js";
 import {
   ALL_PROVIDERS,
+  ProviderInstallError,
   shouldShowStep
-} from "./chunk-AEY27Z35.js";
-import "./chunk-Y2MYW47X.js";
-import "./chunk-LJZSMWOH.js";
-import "./chunk-F42YYSCK.js";
-import "./chunk-NUQVB25K.js";
+} from "./chunk-7JGH6IMU.js";
+import "./chunk-KLGCF6G7.js";
+import "./chunk-EKMJR7M3.js";
+import "./chunk-EDB556X7.js";
 import {
   clearWorktreeSession,
   readWorktreeSession,
   readWorktreeSessionStrict,
   writeWorktreeSession
-} from "./chunk-ZKZHSB5W.js";
-import "./chunk-MSNHNAQZ.js";
+} from "./chunk-QR4Q425T.js";
+import "./chunk-UUT7EFX3.js";
 import "./chunk-DJXSOEFB.js";
-import "./chunk-ZKYR7QS4.js";
-import "./chunk-532WHF4F.js";
+import "./chunk-5VQR2DD7.js";
 import "./chunk-BUQN5LTI.js";
 import "./chunk-ZPJWUGCS.js";
-import "./chunk-LK2WUCDQ.js";
-import "./chunk-UKZ45TJL.js";
-import "./chunk-RLLRJJDR.js";
+import "./chunk-YM6KUQ2S.js";
+import "./chunk-LMDMYMSS.js";
+import "./chunk-TJDUJSVH.js";
 import {
   BuiltinAgentRegistry,
   Client,
@@ -581,7 +599,6 @@ import {
   InvalidSessionTranscriptCursorError,
   InvalidSessionTranscriptTurnAnchorError,
   MAX_LOG_LIMIT,
-  ModelsConfig,
   RUNTIME_MCP_IF_ABSENT_CONFIG_FLAG,
   SESSION_PR_LIST_LIMIT,
   SESSION_PR_URL_MAX_LENGTH,
@@ -644,32 +661,39 @@ import {
   replaceSessionPrs,
   repoKeyFromWebUrl,
   resolveBranchName,
-  resolveProviderProtocol,
   sessionPrSourceAuthority,
   sleepInhibitor,
   stripTerminalControlSequences,
   toSessionPrInfo,
   upsertSessionPr,
   watchRepoBranch
-} from "./chunk-N7VWZDWW.js";
+} from "./chunk-DCRVSIK6.js";
 import "./chunk-GOFAQQZA.js";
+import "./chunk-HEOH7JZY.js";
 import "./chunk-TWPJO254.js";
 import "./chunk-CQ35AJ4Z.js";
 import "./chunk-65I7S4Z3.js";
-import "./chunk-6HUXPLB5.js";
 import "./chunk-7CLLH5TI.js";
-import "./chunk-XKBFYTCD.js";
-import "./chunk-ZTTC7T4X.js";
-import "./chunk-E4UEO3XM.js";
-import "./chunk-IAEXTMED.js";
-import "./chunk-IRH27ZC2.js";
+import "./chunk-WK6DEH3Q.js";
+import "./chunk-6PVPNMXU.js";
+import {
+  ModelsConfig,
+  resolveModelId,
+  resolveProviderProtocol
+} from "./chunk-5JG3DAKS.js";
+import {
+  readArtifactSnapshot
+} from "./chunk-ME4JBHSB.js";
+import "./chunk-GNV2SFO7.js";
+import "./chunk-5EZRLTLQ.js";
 import "./chunk-QHWCP53L.js";
 import {
+  MAX_CRON_TASK_ROUTING_ID_LENGTH,
   getCronFilePath,
   readCronTasks,
   taskHasLegacyCondition,
   updateCronTasks
-} from "./chunk-F53KKZUD.js";
+} from "./chunk-3LMDSCLU.js";
 import "./chunk-O6GEWCJA.js";
 import {
   GitWorktreeService,
@@ -677,50 +701,53 @@ import {
   createWorktreeSessionMarkerExclusive,
   readWorktreeSessionMarkerStrict,
   transferWorktreeSessionMarkerOwner
-} from "./chunk-36HCNKDS.js";
-import "./chunk-6PVPNMXU.js";
+} from "./chunk-WKVZES7O.js";
 import {
+  qualifySkillName,
   recordDaemonBridgeError,
   recordDaemonHttpRequest,
   validateSkillName
-} from "./chunk-2SZH22YO.js";
-import "./chunk-DTNV6UZY.js";
+} from "./chunk-NJ2OFVUX.js";
+import "./chunk-HFJSQ4GL.js";
 import {
   glob
 } from "./chunk-QJNDUTOL.js";
-import "./chunk-JXNIF2O5.js";
-import "./chunk-NFYEQRLG.js";
+import "./chunk-V545KI73.js";
+import "./chunk-MQRLLBMQ.js";
 import {
   SessionSourceError
 } from "./chunk-ELRMZTPF.js";
+import "./chunk-U6H3XTFA.js";
+import "./chunk-ACHCT36C.js";
 import "./chunk-CHEIIBT3.js";
-import "./chunk-PLLIWEM3.js";
-import "./chunk-5GLDOLNQ.js";
+import "./chunk-AEWCOE64.js";
+import "./chunk-OWUAZXXN.js";
 import "./chunk-CH2YDT6X.js";
 import {
   APPROVAL_MODES
 } from "./chunk-JX6XHPTX.js";
 import "./chunk-ZSTCM3MX.js";
 import "./chunk-MLXTMF7H.js";
-import "./chunk-LILGKQ4B.js";
+import "./chunk-AXZMWAJV.js";
 import {
+  NO_EXEC_CONFIG,
   findGitRoot
-} from "./chunk-3CZ2BQV6.js";
-import "./chunk-SAH4BD2J.js";
-import "./chunk-CXTPVBFA.js";
-import "./chunk-U7O65WKL.js";
+} from "./chunk-NXUZFW3G.js";
+import "./chunk-WFNEY5G7.js";
+import "./chunk-GSS4SZNG.js";
+import "./chunk-BW2SMO6L.js";
 import "./chunk-S6LOFUVP.js";
 import {
   SubagentError,
   SubagentErrorCode
-} from "./chunk-FN3JNDRU.js";
-import "./chunk-EUURTIV6.js";
+} from "./chunk-VVI7MK3V.js";
+import "./chunk-WBSJ6VPZ.js";
 import {
   escapeXml
 } from "./chunk-G6UUOCUT.js";
 import "./chunk-IZ2U57NY.js";
+import "./chunk-Z72PLR74.js";
 import "./chunk-NUQ4GK5I.js";
-import "./chunk-K2OJUPOE.js";
 import {
   QwenOAuth2Client,
   QwenOAuthPollError,
@@ -729,18 +756,19 @@ import {
   isDeviceAuthorizationSuccess,
   isDeviceTokenPending,
   isDeviceTokenSuccess
-} from "./chunk-AXTFYDXT.js";
+} from "./chunk-CXXAZ2LZ.js";
 import "./chunk-NAVJD2PQ.js";
-import "./chunk-YBUMTY7B.js";
-import "./chunk-HNLMYDQE.js";
-import "./chunk-QHMLYMMS.js";
+import "./chunk-66N6C4EH.js";
+import "./chunk-FMLBBXHB.js";
 import "./chunk-VNOVK4I7.js";
-import "./chunk-CFKIH3D3.js";
+import "./chunk-S7UQ3V2H.js";
 import "./chunk-JL6APGBX.js";
 import "./chunk-DJ2GSRLV.js";
-import "./chunk-4ALNJDHL.js";
-import "./chunk-NOO4QFXM.js";
+import "./chunk-ZKIAGIGH.js";
+import "./chunk-VGY2RGXL.js";
+import "./chunk-C75BXMPM.js";
 import "./chunk-KFFCDLKV.js";
+import "./chunk-KP2FHIFR.js";
 import {
   addDaemonRequestAttribute,
   captureDaemonTelemetryContext,
@@ -752,17 +780,15 @@ import {
   recordDaemonHttpResponse,
   runWithDaemonTelemetryContext,
   withDaemonRequestSpan
-} from "./chunk-ZW2EUO2A.js";
+} from "./chunk-L6DIANLD.js";
 import "./chunk-XWRJCPHC.js";
 import {
   parseLineTolerant,
   read
-} from "./chunk-HBU7EKY4.js";
+} from "./chunk-TRKIKBUW.js";
 import "./chunk-5ETULJLP.js";
-import "./chunk-ZHKTKHMO.js";
+import "./chunk-7MIBD3LG.js";
 import "./chunk-VGC4I5JJ.js";
-import "./chunk-EDIDYZBT.js";
-import "./chunk-HD7O6WLV.js";
 import {
   CursorNotAtLineBoundaryError,
   LargeNonUtf8TextError,
@@ -771,12 +797,15 @@ import {
   getAllMemoryFilenames,
   isUtf8CompatibleEncoding,
   isWithinRoot
-} from "./chunk-J6MB5ZHZ.js";
+} from "./chunk-QZW6WRB7.js";
+import "./chunk-EDIDYZBT.js";
+import "./chunk-HD7O6WLV.js";
+import "./chunk-CFMZLE3L.js";
 import "./chunk-WZAD4ZNJ.js";
-import "./chunk-3FPYT6QC.js";
+import "./chunk-ARDHE6MM.js";
 import "./chunk-FPGTNKCP.js";
 import "./chunk-TIGXX4PA.js";
-import "./chunk-3UXUOFO6.js";
+import "./chunk-7W2Y3PZD.js";
 import "./chunk-XFFRI3WM.js";
 import "./chunk-ERU3SDXT.js";
 import "./chunk-EWJTAP3Y.js";
@@ -785,10 +814,10 @@ import {
   isTelemetrySdkInitialized,
   redactUrlCredentials,
   stripAnsiAndControl
-} from "./chunk-W5ZQMAEM.js";
+} from "./chunk-4Y2I3CI3.js";
 import "./chunk-74TONY4F.js";
-import "./chunk-HUXPEUFL.js";
-import "./chunk-TP6FYVQT.js";
+import "./chunk-SYROIHU7.js";
+import "./chunk-RSWBT7AZ.js";
 import {
   FatalConfigError,
   Storage,
@@ -3872,13 +3901,13 @@ async function resolveSameHostToolWriteTarget(input) {
   }
   let leaf;
   try {
-    leaf = await fsp2.lstat(input);
+    leaf = await fsp2.lstat(input, { bigint: true });
   } catch (err) {
     if (err?.code !== "ENOENT") {
       throw err;
     }
     const parent = await fsp2.realpath(path4.dirname(input));
-    const parentStat = await fsp2.lstat(parent);
+    const parentStat = await fsp2.lstat(parent, { bigint: true });
     if (!parentStat.isDirectory()) {
       throw new FsError(
         "parse_error",
@@ -3898,7 +3927,7 @@ async function resolveSameHostToolWriteTarget(input) {
     throw new FsError("parse_error", `path is not a regular file: ${input}`);
   }
   const canonical = await fsp2.realpath(input);
-  const canonicalStat = await fsp2.lstat(canonical);
+  const canonicalStat = await fsp2.lstat(canonical, { bigint: true });
   if (!canonicalStat.isFile()) {
     throw new FsError(
       "parse_error",
@@ -8731,6 +8760,7 @@ var StandaloneDeletionJournal = class {
 };
 
 // packages/cli/src/serve/conversations/standalone-session-service.ts
+var debugLogger2 = createDebugLogger("STANDALONE_SESSION_SERVICE");
 var StandaloneSessionServiceError = class extends Error {
   constructor(code, sessionId, message, retryable = false) {
     super(message);
@@ -8774,6 +8804,7 @@ function serviceError(code, sessionId, retryable = code === "working_directory_m
     standalone_session_operation_failed: "The standalone session operation failed.",
     session_archived: "The standalone session is archived.",
     session_busy: "The standalone session is busy.",
+    model_selection_failed: "The selected model could not be applied to the standalone session.",
     standalone_creation_rolled_back: "Standalone session creation failed before durable source persistence and was rolled back.",
     standalone_creation_outcome_unknown: "Standalone session creation could not be safely completed or rolled back.",
     working_directory_missing: "The standalone working directory is missing.",
@@ -10671,6 +10702,20 @@ var StandaloneSessionService = class {
       this.beginTerminalQuarantine(runtime);
     }
     this.assertRuntimeCurrentOrQuarantine(runtime);
+    if (isScheduledTaskRunSource(request2) && request2.modelServiceId !== void 0 && session.modelApplied === false) {
+      await this.cleanRollbackBeforePersistence(runtime, sessionId);
+      try {
+        await this.options.workspace.discardEmptyConversationDirectory(
+          sessionId
+        );
+      } catch (error2) {
+        debugLogger2.warn(
+          `Could not discard the rolled-back standalone directory for ${sessionId}: ${error2 instanceof Error ? error2.message : String(error2)}`
+        );
+      }
+      this.directoryStates.delete(sessionId);
+      throw serviceError("model_selection_failed", sessionId, true);
+    }
     let initialPrompt;
     try {
       await this.bindAndRelease(runtime, sessionId, prepared.identity);
@@ -13220,7 +13265,7 @@ function sessionWriterRpcError(err) {
   };
 }
 __name(sessionWriterRpcError, "sessionWriterRpcError");
-var debugLogger2 = createDebugLogger("ACP_HTTP_DISPATCH");
+var debugLogger3 = createDebugLogger("ACP_HTTP_DISPATCH");
 var SESSION_SHELL_METHOD = `${QWEN_METHOD_NS}session/shell`;
 var INVALID_PERMISSION_OUTCOME_ERROR = '`outcome` must be `{ outcome: "cancelled" }` or `{ outcome: "selected", optionId: string }`';
 var ALL_QWEN_VENDOR_METHODS = [
@@ -16407,7 +16452,7 @@ var AcpDispatcher = class {
                 })
               );
             } else {
-              debugLogger2.warn(
+              debugLogger3.warn(
                 "workspace memory remember notification failed:",
                 err
               );
@@ -16518,7 +16563,7 @@ var AcpDispatcher = class {
                 })
               );
             } else {
-              debugLogger2.warn(
+              debugLogger3.warn(
                 "workspace memory forget notification failed:",
                 err
               );
@@ -16588,7 +16633,7 @@ var AcpDispatcher = class {
                 })
               );
             } else {
-              debugLogger2.warn(
+              debugLogger3.warn(
                 "workspace memory dream notification failed:",
                 err
               );
@@ -17764,6 +17809,8 @@ var AcpDispatcher = class {
     binding.promptAbort?.abort();
     const abort = new AbortController();
     binding.promptAbort = abort;
+    const metadata = params["_meta"];
+    const submittedPrompt = metadata?.[SUBMITTED_PROMPT_META_KEY];
     try {
       const result = await this.bridge.sendPrompt(
         sessionId,
@@ -17775,7 +17822,10 @@ var AcpDispatcher = class {
         // sessionId, prompt }`) so it can't become client-controlled.
         params,
         abort.signal,
-        this.sessionCtx(conn, sessionId, fromLoopback)
+        {
+          ...this.sessionCtx(conn, sessionId, fromLoopback),
+          ...typeof submittedPrompt === "string" && metadata?.[CHANNEL_PROMPT_META_KEY] === void 0 && metadata?.[DAEMON_PROMPT_DISPLAY_TEXT_META_KEY] === void 0 && metadata?.[CHANNEL_WORKER_PROMPT_AUTHORIZATION_META_KEY] === void 0 ? { submittedPrompt } : {}
+        }
       );
       if (id !== void 0) this.replySession(conn, sessionId, id, result);
     } catch (err) {
@@ -21928,7 +21978,7 @@ function loadDaemonVoiceContext(workspaceCwd, options = {}) {
 __name(loadDaemonVoiceContext, "loadDaemonVoiceContext");
 
 // packages/cli/src/serve/voice/voice-ws.ts
-var debugLogger3 = createDebugLogger("VOICE_WS");
+var debugLogger4 = createDebugLogger("VOICE_WS");
 var MAX_BATCH_AUDIO_BYTES = 10 * 1024 * 1024;
 var MAX_QUEUED_AUDIO_BYTES = MAX_BATCH_AUDIO_BYTES * 2;
 var MAX_CONNECTION_MS = 6 * 6e4;
@@ -21968,7 +22018,7 @@ async function defaultOpenStream(ctx, callbacks, abortSignal) {
       { abortSignal }
     );
   } catch (error2) {
-    debugLogger3.debug(`[voice-ws] stream open error: ${errMessage(error2)}`);
+    debugLogger4.debug(`[voice-ws] stream open error: ${errMessage(error2)}`);
     throw new Error(GENERIC_TRANSCRIPTION_ERROR);
   }
 }
@@ -21984,7 +22034,7 @@ function defaultTranscribe(ctx, pcm, abortSignal) {
       abortSignal
     }
   ).catch((error2) => {
-    debugLogger3.debug(
+    debugLogger4.debug(
       `[voice-ws] batch transcription error: ${errMessage(error2)}`
     );
     throw new Error(GENERIC_TRANSCRIPTION_ERROR);
@@ -22166,7 +22216,7 @@ function createVoiceWsConnectionHandler(boundWorkspace, deps = {}) {
       try {
         ctx = loadContext(boundWorkspace);
       } catch (error2) {
-        debugLogger3.debug(
+        debugLogger4.debug(
           `[voice-ws] load context error: ${errMessage(error2)}`
         );
         fail(voiceConfigErrorMessage(error2));
@@ -22181,7 +22231,7 @@ function createVoiceWsConnectionHandler(boundWorkspace, deps = {}) {
         const callbacks = {
           onInterim: /* @__PURE__ */ __name((text) => sendJson({ type: "interim", text }), "onInterim"),
           onError: /* @__PURE__ */ __name((error2) => {
-            debugLogger3.debug(
+            debugLogger4.debug(
               `[voice-ws] upstream error: ${errMessage(error2)}`
             );
             fail(GENERIC_TRANSCRIPTION_ERROR);
@@ -22305,7 +22355,7 @@ function createVoiceWsConnectionHandler(boundWorkspace, deps = {}) {
           releaseSlotWhenIdle();
         }
       }).catch((error2) => {
-        debugLogger3.debug(`[voice-ws] ${errMessage(error2)}`);
+        debugLogger4.debug(`[voice-ws] ${errMessage(error2)}`);
         fail(GENERIC_TRANSCRIPTION_ERROR);
         releaseSlotWhenIdle();
       });
@@ -22315,7 +22365,7 @@ function createVoiceWsConnectionHandler(boundWorkspace, deps = {}) {
       releaseSlotWhenIdle();
     });
     ws.on("error", (error2) => {
-      debugLogger3.debug(`[voice-ws] socket error: ${error2.message}`);
+      debugLogger4.debug(`[voice-ws] socket error: ${error2.message}`);
       if (state !== "closed") cleanup();
       releaseSlotWhenIdle();
     });
@@ -22429,6 +22479,14 @@ function createTerminalWsHandler(registry, resolveWorkspace) {
         ws.close(4004, "Terminal released");
         return;
       }
+      if (url.searchParams.get("replay") !== "1") {
+        sendControl(ws, {
+          type: "error",
+          message: "Terminal protocol changed; reload this page."
+        });
+        ws.close(4002, "Terminal protocol mismatch");
+        return;
+      }
       const workspaceSelector = selector;
       let created = false;
       let inputRejected = false;
@@ -22589,6 +22647,11 @@ function createTerminalWsHandler(registry, resolveWorkspace) {
       ws.off("error", markClosed);
       ws.on("error", cleanup);
       if (!ensureWorkspaceAvailable()) return;
+      sendControl(ws, {
+        type: "snapshot",
+        replay: !created,
+        handlesPrimaryDa: snapshot.handlesPrimaryDa === true
+      });
       if (!sendOutput(ws, snapshot.output)) {
         cleanup();
         ws.close(1013, "Terminal output backpressure");
@@ -23247,6 +23310,35 @@ function parseAuthProviderInstallRequest(body, options) {
   }
   const modelIds = parseStringArray2(body["modelIds"]);
   const rawAdvanced = body["advancedConfig"] && typeof body["advancedConfig"] === "object" ? body["advancedConfig"] : void 0;
+  const purpose = rawAdvanced?.["purpose"];
+  if (purpose !== void 0 && purpose !== "image" && purpose !== "voice") {
+    return {
+      ok: false,
+      code: "invalid_model_purpose",
+      error: "Invalid model purpose"
+    };
+  }
+  if (purpose && providerId.trim() !== "custom-openai-compatible") {
+    return {
+      ok: false,
+      code: "invalid_model_purpose",
+      error: "Model purpose requires a custom provider"
+    };
+  }
+  if (purpose === "voice" && ((protocol ?? "openai") !== "openai" || !baseUrl || !modelIds?.length || modelIds.some((id) => resolveVoiceTransport(id) === "unsupported"))) {
+    return {
+      ok: false,
+      code: "invalid_voice_model",
+      error: "Voice transcription requires OpenAI protocol and a supported ASR model ID"
+    };
+  }
+  if (purpose === "image" && (!modelIds?.length || !baseUrl?.startsWith("https://") || new URL(baseUrl).search || new URL(baseUrl).hash)) {
+    return {
+      ok: false,
+      code: "invalid_image_model",
+      error: "Image generation requires an HTTPS endpoint without query or fragment"
+    };
+  }
   const rawMultimodal = rawAdvanced?.["multimodal"] && typeof rawAdvanced["multimodal"] === "object" ? rawAdvanced["multimodal"] : void 0;
   const contextWindowSize = parsePositiveBoundedInteger(
     rawAdvanced?.["contextWindowSize"],
@@ -23257,6 +23349,8 @@ function parseAuthProviderInstallRequest(body, options) {
     1e7
   );
   const advancedConfig = rawAdvanced ? {
+    ...rawAdvanced["replaceExisting"] === true ? { replaceExisting: true } : {},
+    ...purpose ? { purpose } : {},
     ...typeof rawAdvanced["enableThinking"] === "boolean" ? { enableThinking: rawAdvanced["enableThinking"] } : {},
     ...rawMultimodal ? {
       multimodal: {
@@ -23537,6 +23631,10 @@ function registerWorkspaceAuthRoutes(app, deps) {
           ...runtimeSync ? { runtimeSync } : {}
         });
       } catch (err) {
+        if (err instanceof ProviderInstallError && err.step === "modelPurpose") {
+          res.status(400).json({ error: err.message, code: "model_purpose_conflict" });
+          return;
+        }
         sendBridgeError2(res, err, {
           route: "POST /workspace/auth/provider",
           providerId: installRequest.providerId
@@ -24624,15 +24722,20 @@ var buildExtensionSkillStates = /* @__PURE__ */ __name((manager, extension, snap
     runtime.workspaceCwd
   ).effective === "enabled";
   return (extension.skills ?? []).map((skill) => {
-    const name = skill.name.trim().toLowerCase();
+    const registryName = qualifySkillName(extension.name, skill.name);
     const internal = manager.getExtensionSkillState(
       extension.id,
       skill.name,
       runtime.workspaceCwd,
       snapshot
     );
-    const disablement = settings.disablements.get(name);
-    const disabledReason = !parentEnabled ? "inactive_extension" : disablement?.reason ?? (!settings.enabledNames.has(name) && !(internal.workspaceEnabled ?? internal.defaultEnabled) ? "default" : void 0);
+    const disablement = lookupSkillDisablement(settings.disablements, {
+      name: registryName,
+      authoredName: skill.name
+    });
+    const disabledReason = !parentEnabled ? "inactive_extension" : disablement?.reason ?? // A grant matches the registry identity only, so a legacy bare
+    // `skills.enabled` entry no longer opts an extension skill in.
+    (!settings.enabledNames.has(registryName.trim().toLowerCase()) && !(internal.workspaceEnabled ?? internal.defaultEnabled) ? "default" : void 0);
     return {
       name: skill.name,
       ...internal,
@@ -27526,6 +27629,12 @@ var legacySessionTelemetryRoutes = [
     attribution: "handler_resolved",
     route: "GET /session/:id/artifacts"
   },
+  {
+    method: "GET",
+    path: "/session/:id/artifacts/:artifactId/content",
+    attribution: "handler_resolved",
+    route: "GET /session/:id/artifacts/:artifactId/content"
+  },
   {
     method: "POST",
     path: "/session/:id/artifacts",
@@ -28550,7 +28659,7 @@ async function branchExists(cwd, name) {
   try {
     await execFileAsync(
       "git",
-      ["rev-parse", "--verify", `refs/heads/${name}`],
+      [...NO_EXEC_CONFIG, "rev-parse", "--verify", `refs/heads/${name}`],
       { cwd, timeout: GIT_BRANCH_TIMEOUT_MS }
     );
     return true;
@@ -28562,7 +28671,13 @@ __name(branchExists, "branchExists");
 async function isDirtyTree(cwd) {
   const { stdout } = await execFileAsync(
     "git",
-    ["status", "--porcelain", "--untracked-files=no"],
+    [
+      ...NO_EXEC_CONFIG,
+      "--no-optional-locks",
+      "status",
+      "--porcelain",
+      "--untracked-files=no"
+    ],
     {
       cwd,
       maxBuffer: 10 * 1024 * 1024,
@@ -28573,28 +28688,28 @@ async function isDirtyTree(cwd) {
 }
 __name(isDirtyTree, "isDirtyTree");
 async function getHeadCommit(cwd) {
-  return execFileAsync("git", ["rev-parse", "HEAD"], {
+  return execFileAsync("git", [...NO_EXEC_CONFIG, "rev-parse", "HEAD"], {
     cwd,
     timeout: GIT_BRANCH_TIMEOUT_MS
   }).then(({ stdout }) => stdout.trim()).catch(() => void 0);
 }
 __name(getHeadCommit, "getHeadCommit");
 async function createBranch(cwd, name) {
-  await execFileAsync("git", ["checkout", "-b", name], {
+  await execFileAsync("git", [...NO_EXEC_CONFIG, "checkout", "-b", name], {
     cwd,
     timeout: GIT_BRANCH_TIMEOUT_MS
   });
 }
 __name(createBranch, "createBranch");
 async function checkoutRef(cwd, ref) {
-  await execFileAsync("git", ["checkout", ref], {
+  await execFileAsync("git", [...NO_EXEC_CONFIG, "checkout", ref], {
     cwd,
     timeout: GIT_BRANCH_TIMEOUT_MS
   });
 }
 __name(checkoutRef, "checkoutRef");
 async function deleteBranch(cwd, name) {
-  await execFileAsync("git", ["branch", "-D", name], {
+  await execFileAsync("git", [...NO_EXEC_CONFIG, "branch", "-D", name], {
     cwd,
     timeout: GIT_BRANCH_TIMEOUT_MS
   });
@@ -33843,6 +33958,44 @@ function registerSessionRoutes(app, deps) {
       { cwdBound: true }
     )
   );
+  app.get(
+    "/session/:id/artifacts/:artifactId/content",
+    withOwnerReadSession(
+      "GET /session/:id/artifacts/:artifactId/content",
+      async (req, res, sessionId, runtime) => {
+        const clientId = parseClientIdHeader(req, res);
+        if (clientId === null) return;
+        const { artifacts } = await runtime.bridge.getSessionArtifacts(
+          sessionId,
+          clientId !== void 0 ? { clientId } : void 0
+        );
+        const artifact = artifacts.find(
+          (item) => item.id === req.params["artifactId"]
+        );
+        let content;
+        try {
+          if (!artifact) throw new Error("Snapshot not registered");
+          content = await readArtifactSnapshot(
+            artifact,
+            runtime.sessionRuntimeBaseDir
+          );
+        } catch {
+          res.status(404).json({
+            error: "artifact_snapshot_unavailable",
+            message: "Saved webpage version is missing or has changed."
+          });
+          return;
+        }
+        res.status(200).set({
+          "Content-Type": "text/html; charset=utf-8",
+          "Content-Disposition": 'attachment; filename="saved-webpage.html"',
+          "X-Content-Type-Options": "nosniff",
+          "Cache-Control": "private, no-store"
+        }).send(content);
+      },
+      { cwdBound: true }
+    )
+  );
   app.post(
     "/session/:id/artifacts",
     mutate({ strict: true }),
@@ -34274,12 +34427,15 @@ function registerSessionRoutes(app, deps) {
         delete forwardedBody["deadlineMs"];
         delete forwardedBody["delivery"];
         const forwardedMeta = typeof forwardedBody["_meta"] === "object" && forwardedBody["_meta"] !== null && !Array.isArray(forwardedBody["_meta"]) ? { ...forwardedBody["_meta"] } : void 0;
+        const submittedPrompt = forwardedMeta?.[SUBMITTED_PROMPT_META_KEY];
         const promptAuthorization = forwardedMeta?.[CHANNEL_WORKER_PROMPT_AUTHORIZATION_META_KEY];
         const promptDisplayText = forwardedMeta?.[DAEMON_PROMPT_DISPLAY_TEXT_META_KEY];
         const channelPrompt = forwardedMeta?.[CHANNEL_PROMPT_META_KEY];
         if (forwardedMeta) {
           delete forwardedMeta[CHANNEL_WORKER_PROMPT_AUTHORIZATION_META_KEY];
           delete forwardedMeta[DAEMON_PROMPT_DISPLAY_TEXT_META_KEY];
+          delete forwardedMeta[SUBMITTED_PROMPT_META_KEY];
+          delete forwardedMeta[DAEMON_SUBMITTED_PROMPT_META_KEY];
           delete forwardedMeta[CHANNEL_PROMPT_META_KEY];
           if (Object.keys(forwardedMeta).length > 0) {
             forwardedBody["_meta"] = forwardedMeta;
@@ -34326,6 +34482,7 @@ function registerSessionRoutes(app, deps) {
               promptId,
               ...effectiveDeadlineMs !== void 0 ? { deadlineMs: effectiveDeadlineMs } : {},
               ...trustedPromptDisplayText !== void 0 ? { promptDisplayText: trustedPromptDisplayText } : {},
+              ...typeof submittedPrompt === "string" && channelPrompt === void 0 && promptAuthorization === void 0 && promptDisplayText === void 0 ? { submittedPrompt } : {},
               ...trustedChannelPrompt ? { channelPrompt: true } : {},
               ...delivery !== void 0 ? {
                 channelDelivery: {
@@ -36905,10 +37062,10 @@ function registerStandaloneSessionRoutes(app, deps) {
         sendInvalidRequest(res, "`sessionId` must be an RFC UUID v1-v5.");
         return;
       }
-      if (body["modelServiceId"] !== void 0 && (typeof body["modelServiceId"] !== "string" || body["modelServiceId"].length === 0 || body["modelServiceId"].length > 256)) {
+      if (body["modelServiceId"] !== void 0 && (typeof body["modelServiceId"] !== "string" || body["modelServiceId"].length === 0 || body["modelServiceId"].length > MAX_CRON_TASK_ROUTING_ID_LENGTH)) {
         sendInvalidRequest(
           res,
-          "`modelServiceId` must be a non-empty string of at most 256 characters."
+          `\`modelServiceId\` must be a non-empty string of at most ${MAX_CRON_TASK_ROUTING_ID_LENGTH} characters.`
         );
         return;
       }
@@ -38175,7 +38332,7 @@ init_esbuild_shims();
 import * as fs8 from "node:fs";
 import * as path14 from "node:path";
 var import_saxes = __toESM(require_saxes(), 1);
-var debugLogger4 = createDebugLogger("WEB_SHELL_BRAND");
+var debugLogger5 = createDebugLogger("WEB_SHELL_BRAND");
 var MAX_BRAND_LOGO_BYTES = 32 * 1024;
 var MAX_BRAND_NAME_LENGTH = 80;
 function resolveWebShellBrand(settings) {
@@ -38236,7 +38393,7 @@ function sanitizeBrandName(raw) {
   let name = stripTerminalControlSequences(raw).replace(/\s+/g, " ").trim();
   if (!name) return void 0;
   if (name.length > MAX_BRAND_NAME_LENGTH) {
-    debugLogger4.warn(
+    debugLogger5.warn(
       `Truncated ui.brand.name to ${MAX_BRAND_NAME_LENGTH} characters.`
     );
     name = name.slice(0, MAX_BRAND_NAME_LENGTH);
@@ -38259,7 +38416,7 @@ function readBrandLogo(configuredPath, declaringDir) {
   }
   let stat3;
   try {
-    stat3 = fs8.lstatSync(filePath, { throwIfNoEntry: false });
+    stat3 = fs8.lstatSync(filePath, { bigint: true, throwIfNoEntry: false });
   } catch {
     return { warnings: [`ui.brand.logoPath is not readable: ${filePath}`] };
   }
@@ -38279,14 +38436,14 @@ function readBrandLogo(configuredPath, declaringDir) {
       warnings: [`ui.brand.logoPath must be a regular file: ${filePath}`]
     };
   }
-  if (stat3.nlink > 1) {
+  if (stat3.nlink > 1n) {
     return {
       warnings: [
         `ui.brand.logoPath must not have multiple hard links (nlink=${stat3.nlink}): ${filePath}`
       ]
     };
   }
-  if (stat3.size > MAX_BRAND_LOGO_BYTES) {
+  if (stat3.size > BigInt(MAX_BRAND_LOGO_BYTES)) {
     return {
       warnings: [
         `ui.brand.logoPath exceeds ${MAX_BRAND_LOGO_BYTES} bytes: ${filePath}`
@@ -38342,7 +38499,7 @@ function readRegularFileNoFollow(filePath, expectedStat) {
       flags |= fs8.constants.O_NONBLOCK;
     }
     fd = fs8.openSync(filePath, flags);
-    const stat3 = fs8.fstatSync(fd);
+    const stat3 = fs8.fstatSync(fd, { bigint: true });
     if (stat3.dev !== expectedStat.dev || stat3.ino !== expectedStat.ino || stat3.mode !== expectedStat.mode || stat3.size !== expectedStat.size || stat3.mtimeMs !== expectedStat.mtimeMs || stat3.ctimeMs !== expectedStat.ctimeMs || !stat3.isFile() || stat3.nlink > 1) {
       return { reason: "changed while it was being read" };
     }
@@ -38929,6 +39086,7 @@ var TUI_ONLY_SETTINGS = /* @__PURE__ */ new Set([
 var WEB_SHELL_SETTINGS = /* @__PURE__ */ new Set([
   "ui.compactMode",
   "voiceModel",
+  "imageModel",
   "mcpServers"
 ]);
 var LIVE_WEB_SHELL_SETTINGS = [
@@ -39351,11 +39509,26 @@ function registerWorkspaceSettingsRoutes(app, deps) {
         );
       }
       if (writeOutcome !== "ok") return;
+      let imageSyncFailed = false;
+      if (key === "imageModel") {
+        try {
+          imageSyncFailed = !deps.syncImageModel || (await deps.syncImageModel(settingScope)).status === "failed";
+        } catch (error2) {
+          if (sendGenerationClosedError(res, error2)) return;
+          imageSyncFailed = true;
+        }
+        try {
+          assertGenerationOpen();
+        } catch (error2) {
+          if (sendGenerationClosedError(res, error2)) return;
+          throw error2;
+        }
+      }
       res.status(200).json({
         key,
         scope,
         value: publicValue,
-        requiresRestart: def.requiresRestart
+        requiresRestart: def.requiresRestart || imageSyncFailed
       });
     }
   );
@@ -39562,11 +39735,29 @@ function registerWorkspaceQualifiedSettingsRoutes(app, deps) {
         ...clientId ? { originatorClientId: clientId } : {}
       });
       if (writeOutcome !== "ok") return;
+      let imageSyncFailed = false;
+      if (key === "imageModel") {
+        try {
+          imageSyncFailed = (await runtime.workspaceService.reloadModelProviders({
+            route: "POST /workspaces/:workspace/settings imageModel",
+            workspaceCwd: runtime.workspaceCwd
+          })).status === "failed";
+        } catch (error2) {
+          if (sendGenerationClosedError(res, error2)) return;
+          imageSyncFailed = true;
+        }
+        try {
+          assertGenerationOpen();
+        } catch (error2) {
+          if (sendGenerationClosedError(res, error2)) return;
+          throw error2;
+        }
+      }
       res.status(200).json({
         key,
         scope,
         value: publicValue,
-        requiresRestart: def.requiresRestart
+        requiresRestart: def.requiresRestart || imageSyncFailed
       });
     }
   );
@@ -41235,37 +41426,6 @@ init_esbuild_shims();
 
 // packages/cli/src/serve/model-providers-edit.ts
 init_esbuild_shims();
-function removeModelFromProviders(modelProviders, providerProtocol, target) {
-  let idOnly;
-  for (const [key, models] of Object.entries(modelProviders)) {
-    if (!Array.isArray(models)) continue;
-    const protocol = resolveProviderProtocol(key, providerProtocol) ?? key;
-    if (protocol !== target.authType) continue;
-    for (let index = 0; index < models.length; index++) {
-      if (models[index].id !== target.modelId) continue;
-      if (target.baseUrl === void 0 || (models[index].baseUrl ?? void 0) === target.baseUrl) {
-        return buildRemoval(modelProviders, key, index);
-      }
-      if (!idOnly) idOnly = { key, index };
-    }
-  }
-  if (idOnly) return buildRemoval(modelProviders, idOnly.key, idOnly.index);
-  return { next: modelProviders, removed: false };
-}
-__name(removeModelFromProviders, "removeModelFromProviders");
-function buildRemoval(modelProviders, key, index) {
-  const models = modelProviders[key] ?? [];
-  const removedBaseUrl = models[index]?.baseUrl;
-  const nextModels = models.filter((_, i) => i !== index);
-  const next = { ...modelProviders };
-  next[key] = nextModels;
-  return {
-    next,
-    removed: true,
-    ...removedBaseUrl ? { removedBaseUrl } : {}
-  };
-}
-__name(buildRemoval, "buildRemoval");
 function isActiveModelSelection(activeModelName, activeBaseUrl, target) {
   if (!activeModelName || activeModelName !== target.modelId) return false;
   if (!activeBaseUrl) return true;
@@ -41283,6 +41443,13 @@ function scopeToWire(scope) {
 }
 __name(scopeToWire, "scopeToWire");
 function parseTarget(body) {
+  const key = body["key"];
+  if (key !== void 0 && (typeof key !== "string" || !/^[a-f0-9]{64}$/.test(key))) {
+    return {
+      error: "Invalid model configuration key",
+      code: "invalid_model_key"
+    };
+  }
   const authType = body["authType"];
   const modelId = body["modelId"];
   const baseUrl = body["baseUrl"];
@@ -41306,6 +41473,7 @@ function parseTarget(body) {
   }
   const trimmedBaseUrl = typeof baseUrl === "string" ? baseUrl.trim() : "";
   return {
+    ...key ? { key } : {},
     authType: authType.trim(),
     modelId: modelId.trim(),
     ...trimmedBaseUrl ? { baseUrl: trimmedBaseUrl } : {}
@@ -41321,6 +41489,80 @@ function registerWorkspaceModelsRoutes(app, deps) {
     broadcastSettingsChanged,
     parseAndValidateClientId
   } = deps;
+  app.get("/workspace/models", (_req, res) => {
+    try {
+      deps.captureGenerationAssertion?.()?.();
+      const trusted = deps.isWorkspaceTrusted?.();
+      const loaded = loadSettings(boundWorkspace, {
+        skipLoadEnvironment: true,
+        skipWorkspaceSettings: trusted === false,
+        workspaceTrusted: trusted
+      });
+      res.json({ models: listModelConfigurations(loaded) });
+    } catch (error2) {
+      if (sendGenerationClosedError(res, error2)) return;
+      writeStderrLine("qwen serve: GET /workspace/models failed");
+      res.status(500).json({ error: "Unable to load model configurations" });
+    }
+  });
+  app.patch("/workspace/models", mutate({ strict: true }), async (req, res) => {
+    const assertGenerationOpen = deps.captureGenerationAssertion?.() ?? (() => {
+    });
+    try {
+      assertGenerationOpen();
+      const body = safeBody2(req);
+      const key = body["key"];
+      const size = body["contextWindowSize"];
+      if (typeof key !== "string" || !/^[a-f0-9]{64}$/.test(key) || size !== null && (typeof size !== "number" || !Number.isInteger(size) || size < 1 || size > 1e7)) {
+        res.status(400).json({ error: "Invalid model key or context window size" });
+        return;
+      }
+      const clientId = parseAndValidateClientId(req, res);
+      if (clientId === null) return;
+      if (!deps.updateModelContextWindow) {
+        res.status(501).json({ error: "Model configuration editing is unavailable" });
+        return;
+      }
+      const scope = await deps.updateModelContextWindow(
+        boundWorkspace,
+        key,
+        size,
+        assertGenerationOpen
+      );
+      assertGenerationOpen();
+      if (!scope) {
+        res.status(409).json({
+          error: "Model configuration changed or is ambiguous. Reload and try again."
+        });
+        return;
+      }
+      try {
+        broadcastSettingsChanged("modelProviders", void 0, scope, clientId);
+      } catch {
+        writeStderrLine("qwen serve: model configuration broadcast failed");
+      }
+      let runtimeSync;
+      try {
+        runtimeSync = await deps.syncModelProvidersRuntime?.(
+          scope === "user" ? "User" /* User */ : "Workspace" /* Workspace */,
+          "PATCH"
+        );
+      } catch (error2) {
+        if (sendGenerationClosedError(res, error2)) return;
+        runtimeSync = { status: "failed" };
+      }
+      assertGenerationOpen();
+      res.json({
+        updated: true,
+        requiresRestart: true,
+        ...runtimeSync ? { runtimeSync } : {}
+      });
+    } catch (error2) {
+      if (sendGenerationClosedError(res, error2)) return;
+      writeStderrLine("qwen serve: PATCH /workspace/models failed");
+      res.status(500).json({ error: "Unable to update model configuration" });
+    }
+  });
   app.delete(
     "/workspace/models",
     mutate({ strict: true }),
@@ -41358,6 +41600,9 @@ function registerWorkspaceModelsRoutes(app, deps) {
           );
         }
       }, "broadcastWrite");
+      const conflict = new Error(
+        "Model settings changed. Reload and try again."
+      );
       let writes;
       try {
         const workspaceTrusted = deps.isWorkspaceTrusted?.();
@@ -41366,29 +41611,58 @@ function registerWorkspaceModelsRoutes(app, deps) {
           skipWorkspaceSettings: workspaceTrusted === false,
           workspaceTrusted
         });
-        const scope = getModelProvidersOwnerScope(loaded) ?? "User" /* User */;
-        const modelProviders = loaded.forScope(scope).settings.modelProviders ?? {};
-        const { next, removed, removedBaseUrl } = removeModelFromProviders(
-          modelProviders,
-          loaded.merged.providerProtocol,
-          parsed
-        );
-        if (!removed) {
+        const configuration = parsed.key ? findModelConfiguration(loaded, parsed.key) : findModelConfigurationForDeletion(loaded, parsed);
+        if (configuration === "ambiguous" || parsed.key && !configuration || configuration && configuration.authType !== parsed.authType) {
+          res.status(409).json({
+            error: "Model configuration changed or is ambiguous. Reload and try again."
+          });
+          return;
+        }
+        if (!configuration) {
           res.status(404).json({
             error: "Model not found in configured providers",
             code: "model_not_found"
           });
           return;
         }
+        const scope = configuration.scope;
+        const modelProviders = loaded.forScope(scope).originalSettings.modelProviders ?? {};
+        const resolvedProviders = loaded.forScope(scope).settings.modelProviders ?? {};
+        const removedBaseUrl = configuration.model.baseUrl;
+        const next = { ...modelProviders };
+        const remainingProviders = { ...loaded.merged.modelProviders };
+        next[configuration.provider] = modelProviders[configuration.provider].filter((_, index) => index !== configuration.index);
+        remainingProviders[configuration.provider] = resolvedProviders[configuration.provider].filter((_, index) => index !== configuration.index);
+        const removedModelId = configuration.model.id;
+        const seenRoutes = /* @__PURE__ */ new Set();
+        const remaining = Object.entries(remainingProviders).flatMap(
+          ([provider, models]) => {
+            const authType = resolveProviderProtocol(
+              provider,
+              loaded.merged.providerProtocol
+            );
+            if (!authType || authType === "qwen-oauth" || !Array.isArray(models))
+              return [];
+            return models.filter((model) => model?.id === removedModelId).filter((model) => {
+              const route = JSON.stringify([authType, model.baseUrl ?? ""]);
+              if (seenRoutes.has(route)) return false;
+              seenRoutes.add(route);
+              return true;
+            }).map((model) => ({ model, authType }));
+          }
+        );
         writes = [{ scope, key: "modelProviders", value: next }];
         const activeTarget = {
           authType: parsed.authType,
-          modelId: parsed.modelId,
+          modelId: removedModelId,
           ...removedBaseUrl ? { baseUrl: removedBaseUrl } : {}
         };
+        const remainingRoute = remaining.find(
+          ({ model, authType }) => authType === parsed.authType && (model.baseUrl ?? "") === (removedBaseUrl ?? "")
+        )?.model;
         for (const activeScope of getWritableScopes(loaded)) {
           const scopeModel = loaded.forScope(activeScope).settings.model;
-          if (isActiveModelSelection(
+          if ((!remainingRoute || !isConversationModelConfiguration(remainingRoute)) && isActiveModelSelection(
             scopeModel?.name,
             scopeModel?.baseUrl,
             activeTarget
@@ -41401,14 +41675,47 @@ function registerWorkspaceModelsRoutes(app, deps) {
             });
           }
         }
-        const stillConfigured = Object.values(next).some(
-          (models) => Array.isArray(models) && models.some((model) => model.id === parsed.modelId)
-        );
+        const stillConfigured = remaining.length > 0;
+        for (const selectionScope of getWritableScopes(loaded)) {
+          const settings = loaded.forScope(selectionScope).settings;
+          if (typeof settings.voiceModel === "string" && settings.voiceModel.trim() === removedModelId && !stillConfigured) {
+            writes.push({
+              scope: selectionScope,
+              key: "voiceModel",
+              value: ""
+            });
+          }
+          for (const key of [
+            "imageModel",
+            "advisorModel",
+            "visionModel",
+            "fastModel",
+            "compactionModel"
+          ]) {
+            const value = settings[key];
+            if (typeof value !== "string" || !value) continue;
+            const separator = value.indexOf("\0");
+            let selector;
+            try {
+              selector = resolveModelId(
+                separator < 0 ? value : value.slice(0, separator)
+              );
+            } catch {
+              continue;
+            }
+            const endpoint = separator < 0 ? void 0 : value.slice(separator + 1);
+            if (selector?.modelId === removedModelId && (!selector.authType || selector.authType === parsed.authType) && (endpoint === void 0 || endpoint === (removedBaseUrl ?? "")) && !remaining.some(
+              ({ model, authType }) => (!selector.authType || authType === selector.authType) && (endpoint === void 0 || endpoint === (model.baseUrl ?? "")) && (key === "imageModel" ? isImageModelConfiguration(model) : key === "fastModel" ? !model.imageOnly && !model.voiceOnly && !model.visionOnly : key === "visionModel" ? !model.imageOnly && !model.voiceOnly && !model.fastOnly : isConversationModelConfiguration(model))
+            )) {
+              writes.push({ scope: selectionScope, key, value: "" });
+            }
+          }
+        }
         const fallbacksScope = getOwnKeyScope(loaded, "modelFallbacks");
         const fallbacks = fallbacksScope ? loaded.forScope(fallbacksScope).settings.modelFallbacks : void 0;
         if (!stillConfigured && fallbacksScope && typeof fallbacks === "string" && fallbacks.length > 0) {
           const original = fallbacks.split(",").map((entry) => entry.trim()).filter(Boolean);
-          const kept = original.filter((id) => id !== parsed.modelId);
+          const kept = original.filter((id) => id !== removedModelId);
           if (kept.length !== original.length) {
             writes.push({
               scope: fallbacksScope,
@@ -41417,12 +41724,27 @@ function registerWorkspaceModelsRoutes(app, deps) {
             });
           }
         }
+        const snapshots = getWritableScopes(loaded).map((scope2) => ({
+          scope: scope2,
+          value: JSON.stringify(loaded.forScope(scope2).originalSettings)
+        }));
+        let checked = false;
+        const assertCanPersist = /* @__PURE__ */ __name(() => {
+          assertGenerationOpen();
+          if (checked) return;
+          const fresh = loadSettings(boundWorkspace, {
+            skipLoadEnvironment: true,
+            skipWorkspaceSettings: workspaceTrusted === false,
+            workspaceTrusted
+          });
+          if (snapshots.some(
+            ({ scope: scope2, value }) => JSON.stringify(fresh.forScope(scope2).originalSettings) !== value
+          ))
+            throw conflict;
+          checked = true;
+        }, "assertCanPersist");
         try {
-          if (deps.captureGenerationAssertion) {
-            await persistSettings(boundWorkspace, writes, assertGenerationOpen);
-          } else {
-            await persistSettings(boundWorkspace, writes);
-          }
+          await persistSettings(boundWorkspace, writes, assertCanPersist);
         } catch (err) {
           if (err instanceof WorkspaceSettingsPartialPersistError) {
             assertGenerationOpen();
@@ -41431,16 +41753,26 @@ function registerWorkspaceModelsRoutes(app, deps) {
           throw err;
         }
       } catch (err) {
+        if (err === conflict || err instanceof WorkspaceSettingsPartialPersistError && err.committedWrites.length === 0 && err.cause === conflict) {
+          res.status(409).json({ error: conflict.message });
+          return;
+        }
         if (sendGenerationClosedError(res, err)) return;
         writeStderrLine(
           `qwen serve: DELETE /workspace/models error (authType=${parsed.authType}, modelId=${parsed.modelId}): ${err instanceof Error ? err.message : String(err)}`
         );
         if (err instanceof WorkspaceSettingsPartialPersistError) {
-          if (err.committedWrites.some(
+          const providerWrite = err.committedWrites.find(
             (write) => write.key === "modelProviders"
-          ) && deps.syncModelProvidersRuntime) {
+          );
+          if (providerWrite && deps.syncModelProvidersRuntime) {
             try {
-              await deps.syncModelProvidersRuntime();
+              await deps.syncModelProvidersRuntime(
+                err.committedWrites.some(
+                  (write) => write.scope === "User" /* User */
+                ) ? "User" /* User */ : providerWrite.scope,
+                "DELETE"
+              );
             } catch (syncError) {
               if (sendGenerationClosedError(res, syncError)) return;
               writeStderrLine(
@@ -41477,7 +41809,10 @@ function registerWorkspaceModelsRoutes(app, deps) {
       let runtimeSync;
       if (deps.syncModelProvidersRuntime) {
         try {
-          runtimeSync = await deps.syncModelProvidersRuntime();
+          runtimeSync = await deps.syncModelProvidersRuntime(
+            writes.some((write) => write.scope === "User" /* User */) ? "User" /* User */ : writes[0].scope,
+            "DELETE"
+          );
         } catch (err) {
           if (sendGenerationClosedError(res, err)) return;
           writeStderrLine(
@@ -48201,8 +48536,10 @@ var DEFAULT_HELLO_TIMEOUT_MS = 5e3;
 var DEFAULT_HEARTBEAT_INTERVAL_MS = 5e3;
 var DEFAULT_HEARTBEAT_TIMEOUT_MS = 15e3;
 var DEFAULT_SHORTCUT_TIMEOUT_MS = 5e3;
-var MAX_HOST_TEXT_BYTES = 64 * 1024;
+var MAX_HOST_TEXT_BYTES = 512 * 1024;
 var MAX_HOST_AUDIO_BYTES = 64 * 1024;
+var MAX_HOST_VISUAL_IMAGE_BYTES = 190 * 1024;
+var MAX_HOST_VISUAL_BASE64_LENGTH = Math.ceil(MAX_HOST_VISUAL_IMAGE_BYTES / 3) * 4;
 var MAX_HOST_AUDIO_WIRE_BYTES = LIVE_INPUT_AUDIO_EPOCH_BYTES + MAX_HOST_AUDIO_BYTES;
 var MAX_DAEMON_AUDIO_BYTES = 256 * 1024;
 var MAX_SOCKET_BUFFERED_BYTES2 = 1024 * 1024;
@@ -48246,17 +48583,30 @@ function isBoundedString(value, maxLength = MAX_ID_LENGTH) {
   return typeof value === "string" && value.length > 0 && value.length <= maxLength;
 }
 __name(isBoundedString, "isBoundedString");
+function isNonNegativeSafeInteger(value) {
+  return typeof value === "number" && Number.isSafeInteger(value) && value >= 0;
+}
+__name(isNonNegativeSafeInteger, "isNonNegativeSafeInteger");
 function isPermissionState(value) {
   return value === "granted" || value === "denied" || value === "not_determined";
 }
 __name(isPermissionState, "isPermissionState");
 function parseHello(value) {
+  const protocolVersion = value["protocolVersion"];
   const permissions = value["permissions"];
   const selfChecks = value["selfChecks"];
-  if (value["type"] !== "host.hello" || typeof value["protocolVersion"] !== "number" || !Number.isInteger(value["protocolVersion"]) || !isBoundedString(value["hostVersion"], MAX_VERSION_LENGTH) || !isBoundedString(value["bundleId"]) || !isBoundedString(value["instanceNonce"]) || !isObject2(permissions) || !isPermissionState(permissions["microphone"]) || !isPermissionState(permissions["accessibility"]) || !isPermissionState(permissions["screenRecording"]) || !isObject2(selfChecks) || typeof selfChecks["audioInput"] !== "boolean" || typeof selfChecks["audioOutput"] !== "boolean" || typeof selfChecks["globalShortcut"] !== "boolean" || typeof selfChecks["appshot"] !== "boolean") {
+  const cameraPermission = isObject2(permissions) ? permissions["camera"] : void 0;
+  const legacyHelloWithoutCamera = protocolVersion !== LIVE_HOST_PROTOCOL_VERSION && cameraPermission === void 0;
+  if (value["type"] !== "host.hello" || typeof protocolVersion !== "number" || !Number.isInteger(protocolVersion) || !isBoundedString(value["hostVersion"], MAX_VERSION_LENGTH) || !isBoundedString(value["bundleId"]) || !isBoundedString(value["instanceNonce"]) || !isObject2(permissions) || !isPermissionState(permissions["microphone"]) || !isPermissionState(cameraPermission) && !legacyHelloWithoutCamera || !isPermissionState(permissions["accessibility"]) || !isPermissionState(permissions["screenRecording"]) || !isObject2(selfChecks) || typeof selfChecks["audioInput"] !== "boolean" || typeof selfChecks["audioOutput"] !== "boolean" || typeof selfChecks["globalShortcut"] !== "boolean" || typeof selfChecks["appshot"] !== "boolean") {
     return void 0;
   }
-  return value;
+  return {
+    ...value,
+    permissions: {
+      ...permissions,
+      camera: isPermissionState(cameraPermission) ? cameraPermission : "not_determined"
+    }
+  };
 }
 __name(parseHello, "parseHello");
 function parseAction(value) {
@@ -48290,6 +48640,47 @@ function parseAction(value) {
   return void 0;
 }
 __name(parseAction, "parseAction");
+function isBoundedVisualImage(image) {
+  if (typeof image !== "string" || image.length === 0 || image.length > MAX_HOST_VISUAL_BASE64_LENGTH || image.length % 4 !== 0 || !/^[A-Za-z0-9+/]*={0,2}$/.test(image)) {
+    return false;
+  }
+  const jpeg = Buffer.from(image, "base64");
+  return jpeg.byteLength >= 4 && jpeg.byteLength <= MAX_HOST_VISUAL_IMAGE_BYTES && jpeg[0] === 255 && jpeg[1] === 216 && jpeg[jpeg.byteLength - 2] === 255 && jpeg[jpeg.byteLength - 1] === 217 && jpeg.toString("base64") === image;
+}
+__name(isBoundedVisualImage, "isBoundedVisualImage");
+function parseVisualCaptureResult(value) {
+  const requestId = value["requestId"];
+  if (value["type"] !== "host.visual_capture_result" || !isBoundedString(requestId)) {
+    return void 0;
+  }
+  if (value["success"] === false && isBoundedString(value["error"], 1024)) {
+    return {
+      type: "host.visual_capture_result",
+      requestId,
+      success: false,
+      error: value["error"]
+    };
+  }
+  const width = value["width"];
+  const height = value["height"];
+  if (value["success"] !== true || value["source"] !== "screen" || !isBoundedVisualImage(value["image"]) || typeof width !== "number" || !Number.isSafeInteger(width) || width <= 0 || typeof height !== "number" || !Number.isSafeInteger(height) || height <= 0 || !isBoundedString(value["appName"], 512) || value["windowTitle"] !== void 0 && !isBoundedString(value["windowTitle"], 2048) || typeof value["accessibilityText"] !== "string" || value["accessibilityText"].length > MAX_APPSHOT_TEXT_LENGTH || !isBoundedString(value["screenshotPath"], 4096)) {
+    return void 0;
+  }
+  return {
+    type: "host.visual_capture_result",
+    requestId,
+    success: true,
+    source: "screen",
+    image: value["image"],
+    width,
+    height,
+    appName: value["appName"],
+    ...value["windowTitle"] ? { windowTitle: value["windowTitle"] } : {},
+    accessibilityText: value["accessibilityText"],
+    screenshotPath: value["screenshotPath"]
+  };
+}
+__name(parseVisualCaptureResult, "parseVisualCaptureResult");
 function parseHostMessage(text) {
   let value;
   try {
@@ -48300,6 +48691,9 @@ function parseHostMessage(text) {
   if (!isObject2(value)) return void 0;
   if (value["type"] === "host.hello") return parseHello(value);
   if (value["type"] === "host.action") return parseAction(value);
+  if (value["type"] === "host.visual_capture_result") {
+    return parseVisualCaptureResult(value);
+  }
   if (value["type"] === "host.pong" && isBoundedString(value["pingId"])) {
     return { type: "host.pong", pingId: value["pingId"] };
   }
@@ -48318,34 +48712,19 @@ function parseHostMessage(text) {
       };
     }
   }
-  if (value["type"] === "host.screen_context_result") {
-    const requestId = value["requestId"];
-    if (!isBoundedString(requestId)) return void 0;
-    if (value["success"] === false && isBoundedString(value["error"], 1024)) {
-      return {
-        type: "host.screen_context_result",
-        requestId,
-        success: false,
-        error: value["error"]
-      };
-    }
-    if (value["success"] === true && isBoundedString(value["appName"], 512) && (value["windowTitle"] === void 0 || isBoundedString(value["windowTitle"], 2048)) && typeof value["accessibilityText"] === "string" && value["accessibilityText"].length <= MAX_APPSHOT_TEXT_LENGTH && isBoundedString(value["screenshotPath"], 4096)) {
-      return {
-        type: "host.screen_context_result",
-        requestId,
-        success: true,
-        appName: value["appName"],
-        ...value["windowTitle"] ? { windowTitle: value["windowTitle"] } : {},
-        accessibilityText: value["accessibilityText"],
-        screenshotPath: value["screenshotPath"]
-      };
-    }
-  }
-  if (value["type"] === "host.playback_started" && typeof value["epoch"] === "number") {
-    return { type: "host.playback_started", epoch: value["epoch"] };
+  if (value["type"] === "host.playback_started" && isNonNegativeSafeInteger(value["epoch"]) && isNonNegativeSafeInteger(value["outputId"])) {
+    return {
+      type: "host.playback_started",
+      epoch: value["epoch"],
+      outputId: value["outputId"]
+    };
   }
-  if (value["type"] === "host.playback_completed" && typeof value["epoch"] === "number") {
-    return { type: "host.playback_completed", epoch: value["epoch"] };
+  if (value["type"] === "host.playback_completed" && isNonNegativeSafeInteger(value["epoch"]) && isNonNegativeSafeInteger(value["outputId"])) {
+    return {
+      type: "host.playback_completed",
+      epoch: value["epoch"],
+      outputId: value["outputId"]
+    };
   }
   return void 0;
 }
@@ -48412,6 +48791,8 @@ var LiveHostCoordinator = class {
   pendingStartMode;
   actionGeneration = 0;
   nextEpoch = 0;
+  nextOutputId = 0;
+  activeOutputId;
   inputMuted = false;
   outputMuted = false;
   lastCallError;
@@ -48725,7 +49106,7 @@ var LiveHostCoordinator = class {
     const call = this.call;
     return call !== void 0 && (call.coordinator?.sessionId === sessionId || call.workers.some((worker) => worker.sessionId === sessionId));
   }
-  captureScreenContext(callerSessionId) {
+  captureVisualContext(callerSessionId) {
     const call = this.call;
     const host = this.host;
     if (!call || call.coordinator?.sessionId !== callerSessionId || !host?.hello || !this.isLeaseHealthy(host) || host.hello.permissions.accessibility !== "granted" || host.hello.permissions.screenRecording !== "granted" || !host.hello.selfChecks.appshot) {
@@ -48749,9 +49130,10 @@ var LiveHostCoordinator = class {
         reject
       });
       if (!this.sendHost({
-        type: "host.capture_screen_context",
+        type: "host.capture_visual",
         requestId,
-        epoch: call.epoch
+        epoch: call.epoch,
+        source: "screen"
       })) {
         this.rejectPendingAppshot(
           requestId,
@@ -48786,9 +49168,18 @@ var LiveHostCoordinator = class {
     if (!socket || socket.readyState !== import_websocket.default.OPEN || socket.bufferedAmount > MAX_SOCKET_BUFFERED_BYTES2) {
       return false;
     }
-    socket.send(pcm16, { binary: true });
+    const outputId = this.activeOutputId ?? this.allocateOutputId();
+    const frame = Buffer.allocUnsafe(
+      LIVE_OUTPUT_AUDIO_HEADER_BYTES + pcm16.byteLength
+    );
+    frame.writeBigUInt64BE(BigInt(epoch), 0);
+    frame.writeBigUInt64BE(BigInt(outputId), LIVE_OUTPUT_AUDIO_EPOCH_BYTES);
+    frame.set(pcm16, LIVE_OUTPUT_AUDIO_HEADER_BYTES);
+    socket.send(frame, { binary: true });
+    this.activeOutputId = outputId;
     writeLiveHostDiagnostic("output_audio_sent", {
       epoch,
+      outputId,
       bytes: pcm16.byteLength,
       socketBufferedBytes: socket.bufferedAmount
     });
@@ -48796,6 +49187,7 @@ var LiveHostCoordinator = class {
   }
   clearOutput(epoch) {
     if (this.call && this.call.epoch !== epoch) return;
+    this.activeOutputId = void 0;
     writeLiveHostDiagnostic("clear_output_sent", { epoch });
     this.sendHost({ type: "host.clear_output", epoch });
   }
@@ -48863,6 +49255,7 @@ var LiveHostCoordinator = class {
       host_disconnected: "Qwen Live Host disconnected.",
       host_version: "Qwen Live Host is not protocol-compatible.",
       microphone_permission: "Microphone permission is required.",
+      camera_permission: "Camera permission is required.",
       accessibility_permission: "Accessibility permission is required.",
       screen_recording_permission: "Screen Recording permission is required.",
       audio_input: "Live Host audio input self-check failed.",
@@ -48904,15 +49297,15 @@ var LiveHostCoordinator = class {
       }
       return;
     }
-    if (message.type === "host.screen_context_result") {
-      this.handleScreenContextResult(message);
+    if (message.type === "host.visual_capture_result") {
+      this.handleVisualCaptureResult(message);
       return;
     }
     if (message.type === "host.shortcut_result") {
       this.handleShortcutResult(message);
       return;
     }
-    if (message.type === "host.playback_started" || message.type === "host.playback_completed") {
+    if (message.type === "host.playback_started" || message.type === "host.playback_completed" || message.type === "host.visual_frame" || message.type === "host.visual_settings" || message.type === "host.memory_action") {
       return;
     }
     this.handleAction(message);
@@ -48941,7 +49334,7 @@ var LiveHostCoordinator = class {
     this.sendState(status);
     pending.resolve(status);
   }
-  handleScreenContextResult(message) {
+  handleVisualCaptureResult(message) {
     const pending = this.pendingAppshots.get(message.requestId);
     if (!pending) return;
     const call = this.call;
@@ -48958,6 +49351,18 @@ var LiveHostCoordinator = class {
       pending.reject(new Error(message.error));
       return;
     }
+    if (message.source !== "screen") {
+      pending.reject(
+        new Error("Qwen Live Host returned a non-screen Appshot.")
+      );
+      return;
+    }
+    if (!message.screenshotPath) {
+      pending.reject(
+        new Error("Qwen Live Host did not persist the requested Appshot.")
+      );
+      return;
+    }
     pending.resolve({
       appName: message.appName,
       ...message.windowTitle ? { windowTitle: message.windowTitle } : {},
@@ -48968,8 +49373,8 @@ var LiveHostCoordinator = class {
   handleHello(lease, hello) {
     if (hello.protocolVersion !== LIVE_HOST_PROTOCOL_VERSION || hello.bundleId !== LIVE_HOST_BUNDLE_ID || lease.hello && lease.hello.instanceNonce !== hello.instanceNonce) {
       this.lastHostFailure = "host_version";
-      lease.socket.close(4006, "Incompatible Live Host.");
       this.detachHost(lease, "host_version");
+      lease.socket.close(4006, "Incompatible Live Host.");
       return;
     }
     lease.hello = hello;
@@ -49228,6 +49633,13 @@ var LiveHostCoordinator = class {
     socket.send(JSON.stringify(message));
     return true;
   }
+  allocateOutputId() {
+    if (this.nextOutputId >= Number.MAX_SAFE_INTEGER) {
+      this.nextOutputId = 0;
+    }
+    this.nextOutputId += 1;
+    return this.nextOutputId;
+  }
   notifyInactive() {
     if (this.call) return;
     for (const resolve8 of this.inactiveWaiters) resolve8();
@@ -51625,6 +52037,11 @@ async function inspectApp(appPath) {
   if (!VERSION_PATTERN.test(version)) {
     throw new Error("Qwen Live Host version is invalid.");
   }
+  const rawProtocolVersion = await readBundleValue(
+    appPath,
+    "QwenLiveProtocolVersion"
+  ).catch(() => "0");
+  const protocolVersion = Number(rawProtocolVersion);
   await run("/usr/bin/codesign", [
     "--verify",
     "--deep",
@@ -51646,9 +52063,16 @@ async function inspectApp(appPath) {
     throw new Error("Qwen Live Host signing identity is invalid.");
   }
   await run("/usr/sbin/spctl", ["-a", "-t", "exec", appPath]);
-  return { version };
+  return {
+    version,
+    protocolVersion: Number.isSafeInteger(protocolVersion) ? protocolVersion : 0
+  };
 }
 __name(inspectApp, "inspectApp");
+function isCompatibleInstalledHost(host) {
+  return host.protocolVersion === LIVE_HOST_PROTOCOL_VERSION;
+}
+__name(isCompatibleInstalledHost, "isCompatibleInstalledHost");
 async function inspectInstalledHost() {
   try {
     return await inspectApp(LIVE_HOST_APP_PATH);
@@ -51772,7 +52196,7 @@ async function installLatestHost(currentArchitecture, onStatus) {
     await fsp5.mkdir(extractedPath, { mode: 448 });
     await run("/usr/bin/ditto", ["-x", "-k", archivePath, extractedPath]);
     const candidate = await inspectApp(candidatePath);
-    if (candidate.version !== manifest.version) {
+    if (candidate.version !== manifest.version || !isCompatibleInstalledHost(candidate)) {
       throw new Error("Live Host package version does not match its manifest.");
     }
     onStatus({ state: "installing", version: manifest.version });
@@ -51787,7 +52211,7 @@ async function installLatestHost(currentArchitecture, onStatus) {
     await fsp5.rename(stagingPath, LIVE_HOST_APP_PATH);
     installedCandidate = true;
     const installed = await inspectApp(LIVE_HOST_APP_PATH);
-    if (installed.version !== manifest.version) {
+    if (installed.version !== manifest.version || !isCompatibleInstalledHost(installed)) {
       throw new Error("Installed Live Host version is invalid.");
     }
     if (movedExisting) {
@@ -51848,7 +52272,7 @@ var LiveHostInstaller = class {
     this.status = { state: "checking" };
     try {
       const installed = await this.inspectInstalled();
-      this.status = installed ? { state: "installed", version: installed.version } : { state: "missing" };
+      this.status = installed && isCompatibleInstalledHost(installed) ? { state: "installed", version: installed.version } : { state: "missing" };
     } catch (error2) {
       this.setError(errorMessage2(error2), true);
     }
@@ -51871,6 +52295,12 @@ var LiveHostInstaller = class {
       const installed = await this.inspectInstalled();
       if (!installed)
         return this.setError("Qwen Live Host is not installed.", true);
+      if (!isCompatibleInstalledHost(installed)) {
+        return this.setError(
+          `Qwen Live Host protocol v${installed.protocolVersion} is incompatible; v${LIVE_HOST_PROTOCOL_VERSION} is required.`,
+          true
+        );
+      }
       this.status = { state: "launching", version: installed.version };
       await this.launchHost();
       this.status = { state: "installed", version: installed.version };
@@ -51888,7 +52318,7 @@ var LiveHostInstaller = class {
       currentArchitecture = architecture(this.currentArchitecture);
       this.status = { state: "checking" };
       const installed = force ? void 0 : await this.inspectInstalled();
-      const ready = installed ?? await this.installLatest(currentArchitecture, (status) => {
+      const ready = (installed && isCompatibleInstalledHost(installed) ? installed : void 0) ?? await this.installLatest(currentArchitecture, (status) => {
         this.status = { ...status };
       });
       this.status = { state: "launching", version: ready.version };
@@ -51942,7 +52372,7 @@ var NOISY_DIR_NAMES = /* @__PURE__ */ new Set([
   "out",
   "target"
 ]);
-var debugLogger5 = createDebugLogger("LIVE_REALTIME_CONTEXT");
+var debugLogger6 = createDebugLogger("LIVE_REALTIME_CONTEXT");
 function approxTokenCount(text) {
   return Math.ceil(Buffer.byteLength(text, "utf8") / APPROX_BYTES_PER_TOKEN);
 }
@@ -52079,7 +52509,7 @@ async function loadRecentThreads(workspaceRegistry) {
     );
     return pages.flat().sort((left, right) => right.updatedAt - left.updatedAt).slice(0, MAX_RECENT_THREADS);
   } catch (error2) {
-    debugLogger5.warn(
+    debugLogger6.warn(
       "Failed to load Live startup tasks from the session catalog:",
       error2
     );
@@ -55384,6 +55814,7 @@ function createServeApp(opts, getPort = () => opts.port, deps = {}) {
     Storage.getRuntimeBaseDir()
   );
   const bridge = injectedWorkspaceRegistry?.primary.bridge ?? deps.bridge ?? createAcpSessionBridge({
+    artifactSnapshotRuntimeBaseDir: Storage.getRuntimeBaseDir(),
     sessionAttachmentsRoot: attachmentsRoots.root,
     sessionAttachmentsFallbackRoot: attachmentsRoots.fallback,
     maxSessions: opts.maxSessions,
@@ -55697,7 +56128,7 @@ function createServeApp(opts, getPort = () => opts.port, deps = {}) {
     try {
       setScreenHandler.call(
         runtime.bridge,
-        ({ callerSessionId }) => liveCoordinator.captureScreenContext(callerSessionId)
+        ({ callerSessionId }) => liveCoordinator.captureVisualContext(callerSessionId)
       );
       setTaskHandler.call(
         runtime.bridge,
@@ -56112,14 +56543,14 @@ function createServeApp(opts, getPort = () => opts.port, deps = {}) {
     }, deps.recordDaemonRequest)
   );
   const buildWorkspaceCtx = createBuildWorkspaceCtx(primaryBoundWorkspace);
-  const syncModelProvidersRuntime = /* @__PURE__ */ __name(async (route) => {
+  const syncModelProvidersRuntime = /* @__PURE__ */ __name(async (route, writeScope) => {
     const trusted = isPrimaryWorkspaceTrusted();
     const settings = loadSettings(primaryBoundWorkspace, {
       skipLoadEnvironment: true,
       skipWorkspaceSettings: !trusted,
       workspaceTrusted: trusted
     });
-    const scope = getModelProvidersOwnerScope(settings) ?? "User" /* User */;
+    const scope = writeScope ?? getModelProvidersOwnerScope(settings) ?? "User" /* User */;
     const primaryContext = buildWorkspaceCtx(route);
     const secondaryRuntimes = scope === "User" /* User */ ? workspaceRegistry.listAll().filter((runtime) => !runtime.primary) : [];
     const [primaryResult, ...secondaryResults] = await Promise.allSettled([
@@ -56575,6 +57006,7 @@ function createServeApp(opts, getPort = () => opts.port, deps = {}) {
       persistSetting: /* @__PURE__ */ __name(async (...args) => {
         await persistSetting(...args);
       }, "persistSetting"),
+      syncImageModel: /* @__PURE__ */ __name((scope) => syncModelProvidersRuntime("POST /workspace/settings imageModel", scope), "syncImageModel"),
       updateSessionWorkflow: /* @__PURE__ */ __name((enabled) => primaryBridge.invokeWorkspaceCommand(
         SERVE_CONTROL_EXT_METHODS.workspaceSessionWorkflow,
         { enabled }
@@ -56688,9 +57120,10 @@ function createServeApp(opts, getPort = () => opts.port, deps = {}) {
       mutate,
       safeBody,
       persistSettings: deps.persistSettings,
+      updateModelContextWindow: deps.updateModelContextWindow,
       broadcastSettingsChanged,
       parseAndValidateClientId: /* @__PURE__ */ __name((req, res) => parseAndValidateWorkspaceClientId(req, res, primaryBridge), "parseAndValidateClientId"),
-      syncModelProvidersRuntime: /* @__PURE__ */ __name(() => syncModelProvidersRuntime("DELETE /workspace/models"), "syncModelProvidersRuntime")
+      syncModelProvidersRuntime: /* @__PURE__ */ __name((writeScope, method) => syncModelProvidersRuntime(`${method} /workspace/models`, writeScope), "syncModelProvidersRuntime")
     });
   }
   registerA2uiActionRoutes(app, {