Qwen Code adds a workspace-scoped channel management API with bearer-token guards
qqqys · ghdev · 2026-07-24
Qwen Code exposes a workspace-scoped channel management API for qwen serve
A PR for QwenLM/qwen-code #7637 adds the first independently mergeable Channel-management contract for qwen serve.
What it introduces
- Workspace-scoped type discovery
- Sanitized instance snapshots
- Optimistic-concurrency CRUD operations
- Persisted startup selection
- Lifecycle actions and pairing-request approval
- Primary-workspace routes plus exact workspace-qualified routes for trusted runtimes
SDK and safety details
- Adds TypeScript SDK types and helpers for the primary and secondary workspaces
- Only DingTalk, WeCom, and Feishu expose typed management metadata today; others remain runtime-compatible but are treated as unmanaged
- Uses strict bearer-token gating for all mutations and pairing actions
- Secret values are exposed only as presence/source metadata
- Sensitive responses are non-cacheable and credential-redacted
- The configured channel working directory must match the selected workspace before lifecycle or pairing actions can proceed
The author says the work is needed for a web shell that must manage channels safely across multiple workspaces without editing settings files directly.
More from coding & agent
- SF 'Code Engineering' event picks up where 1,000-person harness engineering meetup left off — LangChain · 2026-10-27
- Prompt turns Claude Code into an iPhone backup forensics tool exposing 30-day 'deleted' photo copies — alex_verem · 2026-10-27
- Prompt turns Claude Code into a forensics tool finding deleted iPhone photos in backups — alex_verem · 2026-10-27
- Phones won't be mobile IDEs but control planes for agent fleets, argues Yuchen Jin — Yuchenj_UW · 2026-10-27
- Agent Field Kit launches $29 security runbooks for production AI agents — alvelda · 2026-10-27
- Cloudflare Durable Objects validated as top architecture for AI agent WebSocket servers — tristanbob · 2026-10-27