qwen-web — browser wrapper that runs the qwen TUI per session

[ihubanov]

Built this on top of qwen-code to host qwen for users who shouldn't get a shell on the box.

Each WebSocket connection spawns qwen inside a PTY and pipes it to xterm.js in the browser, so you get the full TUI. Slash menus, approval prompts, colors. Per-user sandboxed workspace dir; the admin owns the HOME dir that holds the generated settings.json and trustedFolders.json, so the user can't rewrite their own config.

Uses the slashCommands.disabled setting from #3445 for per-user command denylists. UNION merge means users can only add to the deny list, not shrink it from workspace scope.

Repo: https://github.com/ihubanov/qwen-web

Early state... single-user anonymous works end-to-end. SQLite user store, per-role denylists, admin API planned.

Dropping a note here in case it's useful to anyone with a similar use case.

[pomelo-nwu]

@ihubanov Excellent work!!

[pomelo-nwu]

@ihubanov I think this would make a great official Qwen Code package. Would you be interested in contributing? I haven't figured out where to place it yet. If convenient, add me on WeChat to discuss: pomelo-nwu

[ihubanov]

I'm open for contributions, but a bit overloaded these days. 😔
Anyway I'll register WeChat and find you there for more live discussion. 🙂