qwen serve

qwen serve listening on http://127.0.0.1:4170 (mode=http-bridge, workspace=/your/cwd)
qwen serve: bound to workspace "/your/cwd"
qwen serve: bearer auth disabled (loopback default). Set QWEN_SERVER_TOKEN to enable.

# 1. 本地 dev 默认（loopback 无 token）
qwen serve

# 2. 指定工作区 + ephemeral 端口
qwen serve --workspace /path/to/repo --port 0

# 3. 加固 loopback dev（loopback 上也强制 bearer）
QWEN_SERVER_TOKEN=$(openssl rand -hex 32) qwen serve --require-auth

# 4. 暴露给 LAN（非 loopback 必须配 token）
QWEN_SERVER_TOKEN=$(openssl rand -hex 32) \
  qwen serve --hostname 0.0.0.0 --port 4170

# 5. 调多 session + 大重放环
qwen serve --max-sessions 0 --event-ring-size 32000

# 6. 多客户端协作 + 严格预算
QWEN_SERVER_TOKEN=secret \
  qwen serve --require-auth \
             --mcp-client-budget 10 \
             --mcp-budget-mode enforce

# 7. settings.json 配 consensus 策略后启动
# settings.json:  { "policy": { "permissionStrategy": "consensus", "consensusQuorum": 2 } }
qwen serve

# 8. 排查问题用
QWEN_SERVE_DEBUG=1 qwen serve

# 9. 关闭 F2 池（fallback per-session）
QWEN_SERVE_NO_MCP_POOL=1 qwen serve

# 10. browser webui 跨域访问
QWEN_SERVER_TOKEN=secret \
  qwen serve --allow-origin 'http://localhost:3000'

# 11. prompt 超时限制 + SSE 空闲超时
qwen serve --prompt-deadline-ms 300000 --writer-idle-timeout-ms 600000

# 12. ACP child 空闲保活（避免反复冷启动）
qwen serve --channel-idle-timeout-ms 60000

# 13. 打开 HTTP rate limit
QWEN_SERVE_RATE_LIMIT=1 qwen serve

# 1. liveness
curl http://127.0.0.1:4170/health
# → {"status":"ok"}

# 1.1 deep health
curl -s 'http://127.0.0.1:4170/health?deep=1' | jq

# 2. capabilities（看广播了哪些 feature tag）
curl -s http://127.0.0.1:4170/capabilities | jq

# 3. preflight 看是否就绪
curl -s http://127.0.0.1:4170/workspace/preflight | jq

# 4. env 快照（机密只报存在性）
curl -s http://127.0.0.1:4170/workspace/env | jq

# 5. MCP 池 / 预算快照
curl -s http://127.0.0.1:4170/workspace/mcp | jq

# 6. 创建 session
curl -s -X POST http://127.0.0.1:4170/session \
  -H 'Content-Type: application/json' \
  -H 'X-Qwen-Client-Id: curl-debug' \
  -d '{}' | jq

# 7. tail SSE（替换 <sid>）
curl -N \
  -H 'Accept: text/event-stream' \
  -H 'X-Qwen-Client-Id: curl-debug' \
  -H 'Last-Event-ID: 0' \
  'http://127.0.0.1:4170/session/<sid>/events'

# 8. demo 页（浏览器）
open http://127.0.0.1:4170/demo

qwen serve
   │
   ▼ (process)
packages/cli/index.ts              main()
   │
   ▼
gemini.tsx                         main() — parseArguments()
   │
   ▼ (yargs 装配)
config/config.ts                   import { serveCommand } ...
config/config.ts                   .command(serveCommand)
config/config.ts                   await yargsInstance.parse()
   │
   ▼ (handler 触发)
commands/serve.ts                  handler(argv) — boot pre-checks
commands/serve.ts                  const { runQwenServe } = await import('../serve/index.js')   # lazy load
commands/serve.ts                  await runQwenServe({...})
   │
   ▼
serve/runQwenServe.ts              runQwenServe(opts, deps)
   │  ├─ trim token
   │  ├─ hostname 错配兜底
   │  ├─ auth 预检
   │  ├─ workspace 校验 + canonicalize
   │  ├─ MCP budget 校验 + childEnvOverrides
   │  ├─ loadSettings + validatePolicyConfig
   │  ├─ PermissionAuditRing + publisher
   │  ├─ resolveBridgeFsFactory
   │  └─ createHttpAcpBridge({...})
   │
   ▼
serve/runQwenServe.ts              const app = createServeApp(opts, () => actualPort, {...})
   │
   ▼
serve/server.ts                    createServeApp() — 构造 Express app（**不监听**）
   │  ├─ 中间件链（Host allowlist / CORS / bearerAuth / mutation gate / rate limit）
   │  ├─ 路由挂载（health / demo / capabilities / workspace / session / SSE / ACP HTTP）
   │  └─ return app
   │
   ▼
serve/runQwenServe.ts              server = app.listen(port, hostname, cb)
   │  ├─ server.maxConnections = cap
   │  ├─ actualPort = server.address().port
   │  ├─ 写 "qwen serve listening on ..."
   │  ├─ 注册 SIGINT / SIGTERM (onSignal)
   │  └─ resolve(handle: RunHandle)
   │
   ▼
commands/serve.ts                  await blockForever()    // 永久阻塞，等信号

import { runQwenServe } from '@qwen-code/qwen-code/serve';

const handle = await runQwenServe({
  port: 0, // ephemeral
  hostname: '127.0.0.1',
  mode: 'http-bridge',
  maxSessions: 20,
  workspace: '/abs/path/to/repo',
});
console.log(`Daemon at ${handle.url}`);
// ... 用 handle.bridge 直接调或访问 handle.server
await handle.close(); // 程序化关

import { createServeApp } from '@qwen-code/qwen-code/serve';

const app = createServeApp(
  {
    port: 0,
    hostname: '127.0.0.1',
    mode: 'http-bridge',
    maxSessions: 20,
  },
  () => 0,
  {
    /* deps: bridge, fsFactory, ... */
  },
);

const server = app.listen(0, '127.0.0.1', () => {
  console.log('listening on', server.address());
});

# 看 daemon 是否还活着
curl http://127.0.0.1:4170/health

# 看广播了哪些 capability
curl -s http://127.0.0.1:4170/capabilities | jq

# 看 daemon-host readiness
curl -s http://127.0.0.1:4170/workspace/preflight | jq

# tail SSE 看实时事件
curl -N -H 'Accept: text/event-stream' \
     -H 'Last-Event-ID: 0' \
     'http://127.0.0.1:4170/session/<sid>/events'

# 详细日志
QWEN_SERVE_DEBUG=1 qwen serve