@botiverse/oar 0.75.0 → 0.76.0

package/dist/runtimes/qoder/options.js

@@ -1,5 +1,6 @@
 import { UnsupportedOptionError } from "../../contracts/errors.js";
 export const qoderRefusedSessionOptions = {
+    goals: "This runtime interface exposes no structured native goal controls",
     serviceTier: "Qoder has no verified service-tier option",
     outputSchema: "Qoder has no verified structured-output option for long-lived sessions",
     userConfiguration: "Qoder has no verified way to exclude user configuration while preserving native credentials and history",

package/dist/runtimes/qoder/options.js.map

@@ -1 +1 @@
-{"version":3,"file":"options.js","sources":["../../../src/runtimes/qoder/options.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,sBAAsB,EAAE,MAAM,2BAA2B,CAAC;AAEnE,MAAM,CAAC,MAAM,0BAA0B,GAA0B;IAC/D,WAAW,EAAE,2CAA2C;IACxD,YAAY,EAAE,wEAAwE;IACtF,iBAAiB,EAAE,yGAAyG;IAC5H,IAAI,EAAE,wDAAwD;CAC/D,CAAC;AACF,MAAM,UAAU,oBAAoB,CAAC,IAAmC;IACtE,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,CAAC,SAAS,EAAE,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAE,iBAAiB,EAAE,IAAI,EAAE,cAAc,EAAE,UAAU,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI;QAC7I,gBAAgB,EAAE,UAAU,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,0BAA0B,EAAE,oBAAoB,EAAE,QAAQ,EAAE,IAAI;QACvI,wBAAwB,EAAE,2BAA2B,EAAE,IAAI,CAAC,CAAC,CAAC;IAChE,KAAK,MAAM,GAAG,IAAI,IAAI,IAAI,EAAE,EAAE,CAAC;QAC7B,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC;QACzC,IAAI,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YAAC,MAAM,IAAI,sBAAsB,CAAC,YAAY,EAAE,oCAAoC,IAAI,8CAA8C,CAAC,CAAC;QAAC,CAAC;IACpK,CAAC;AACH,CAAC"}
+{"version":3,"file":"options.js","sources":["../../../src/runtimes/qoder/options.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,sBAAsB,EAAE,MAAM,2BAA2B,CAAC;AAEnE,MAAM,CAAC,MAAM,0BAA0B,GAA0B;IAC/D,KAAK,EAAE,mEAAmE;IAC1E,WAAW,EAAE,2CAA2C;IACxD,YAAY,EAAE,wEAAwE;IACtF,iBAAiB,EAAE,yGAAyG;IAC5H,IAAI,EAAE,wDAAwD;CAC/D,CAAC;AACF,MAAM,UAAU,oBAAoB,CAAC,IAAmC;IACtE,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,CAAC,SAAS,EAAE,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAE,iBAAiB,EAAE,IAAI,EAAE,cAAc,EAAE,UAAU,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI;QAC7I,gBAAgB,EAAE,UAAU,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,0BAA0B,EAAE,oBAAoB,EAAE,QAAQ,EAAE,IAAI;QACvI,wBAAwB,EAAE,2BAA2B,EAAE,IAAI,CAAC,CAAC,CAAC;IAChE,KAAK,MAAM,GAAG,IAAI,IAAI,IAAI,EAAE,EAAE,CAAC;QAC7B,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC;QACzC,IAAI,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YAAC,MAAM,IAAI,sBAAsB,CAAC,YAAY,EAAE,oCAAoC,IAAI,8CAA8C,CAAC,CAAC;QAAC,CAAC;IACpK,CAAC;AACH,CAAC"}

package/dist/runtimes/qwen/auth-files.d.ts

@@ -0,0 +1,15 @@
+import { type JsonRecord } from "../../shared/json.js";
+export interface QwenSettingsLayer {
+    readonly source: string;
+    readonly value: JsonRecord;
+}
+export interface QwenAuthFiles {
+    readonly home: string;
+    readonly qwenHome: string;
+    readonly layers: readonly QwenSettingsLayer[];
+    readonly dotenv: readonly Readonly<Record<string, string>>[];
+}
+export declare function qwenCredentialFileExists(file: string, signal: AbortSignal): Promise<boolean>;
+/** Qwen 0.26.2 user/system scope only. No workspace walk, migration, backup or write. */
+export declare function readQwenAuthFiles(env: Readonly<NodeJS.ProcessEnv>, signal: AbortSignal): Promise<QwenAuthFiles>;
+//# sourceMappingURL=auth-files.d.ts.map

package/dist/runtimes/qwen/auth-files.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-files.d.ts","sources":["../../../src/runtimes/qwen/auth-files.ts"],"names":[],"mappings":"AAMA,OAAO,EAAY,KAAK,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAEjE,MAAM,WAAW,iBAAiB;IAAG,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAA;CAAE;AAC1F,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,MAAM,EAAE,SAAS,iBAAiB,EAAE,CAAC;IAC9C,QAAQ,CAAC,MAAM,EAAE,SAAS,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,EAAE,CAAC;CAC9D;AAeD,wBAAsB,wBAAwB,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC,CAWlG;AAOD,yFAAyF;AACzF,wBAAsB,iBAAiB,CAAC,GAAG,EAAE,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,aAAa,CAAC,CAiCrH"}

package/dist/runtimes/qwen/auth-files.js

@@ -0,0 +1,91 @@
+import { readFile, stat } from "node:fs/promises";
+import path from "node:path";
+import { parse } from "dotenv";
+import stripJsonComments from "strip-json-comments";
+import { environmentValue } from "../../shared/environment.js";
+import { environmentHome } from "../../shared/environment-home.js";
+import { asRecord } from "../../shared/json.js";
+/** Read configuration, never a token file; unreadable/non-regular files stay unknown. */
+async function readConfiguration(file, signal) {
+    signal.throwIfAborted();
+    try {
+        const info = await stat(file);
+        signal.throwIfAborted();
+        if (!info.isFile() || info.size > 4 * 1024 * 1024) {
+            throw new Error("Unsupported Qwen configuration file");
+        }
+        return await readFile(file, { encoding: "utf8", signal });
+    }
+    catch (error) {
+        if (error instanceof Error && "code" in error && error.code === "ENOENT") {
+            return undefined;
+        }
+        throw new Error("Qwen configuration could not be read", { cause: error });
+    }
+}
+export async function qwenCredentialFileExists(file, signal) {
+    try {
+        signal.throwIfAborted();
+        const info = await stat(file);
+        signal.throwIfAborted();
+        return info.isFile();
+    }
+    catch (error) {
+        if (error instanceof Error && "code" in error && error.code === "ENOENT") {
+            return false;
+        }
+        throw new Error("Credential metadata could not be read", { cause: error });
+    }
+}
+function configDirectory(value, home) {
+    if (value === undefined || value === "") {
+        return path.join(home, ".qwen");
+    }
+    return value === "~" || value.startsWith("~/") || value.startsWith("~\\")
+        ? path.join(home, ...value.slice(2).split(/[/\\]+/u).filter(Boolean)) : path.resolve(value);
+}
+/** Qwen 0.26.2 user/system scope only. No workspace walk, migration, backup or write. */
+export async function readQwenAuthFiles(env, signal) {
+    const home = environmentHome(env);
+    const initial = environmentValue(env, "QWEN_HOME");
+    let qwenHome = configDirectory(initial, home);
+    const readEnv = async (file) => parse(await readConfiguration(file, signal) ?? "");
+    // Native bootstrap reads QWEN_HOME before locating settings. An explicitly
+    // present empty value prevents this bootstrap assignment too.
+    if (initial === undefined) {
+        for (const file of [path.join(qwenHome, ".env"), path.join(home, ".env")]) {
+            const value = environmentValue(await readEnv(file), "QWEN_HOME");
+            if (value !== undefined && value !== "") {
+                qwenHome = configDirectory(value, home);
+                break;
+            }
+        }
+    }
+    const defaultSystem = process.platform === "darwin" ? "/Library/Application Support/QwenCode/settings.json"
+        : (process.platform === "win32" ? String.raw `C:\ProgramData\qwen-code\settings.json` : "/etc/qwen-code/settings.json");
+    const systemOverride = environmentValue(env, "QWEN_CODE_SYSTEM_SETTINGS_PATH");
+    const system = systemOverride === undefined || systemOverride === "" ? defaultSystem : systemOverride;
+    const defaultsOverride = environmentValue(env, "QWEN_CODE_SYSTEM_DEFAULTS_PATH");
+    const defaults = defaultsOverride === undefined || defaultsOverride === "" ? path.join(path.dirname(system), "system-defaults.json") : defaultsOverride;
+    const layers = [];
+    for (const [source, file] of [["system defaults", defaults], ["user settings", path.join(qwenHome, "settings.json")], ["system settings", system]]) {
+        const content = await readConfiguration(file, signal);
+        if (content === undefined) {
+            continue;
+        }
+        const parsed = JSON.parse(stripJsonComments(content.replace(/^\uFEFF/u, "")));
+        const value = asRecord(parsed);
+        if (value === null) {
+            throw new Error("Qwen settings is not an object");
+        }
+        const version = value.$version;
+        if (version !== undefined && (!Number.isInteger(version) || typeof version !== "number" || version < 1 || version > 4)) {
+            throw new Error("Unknown Qwen settings version");
+        }
+        layers.push({ source, value });
+    }
+    const files = [...new Set([path.join(qwenHome, ".env"), path.join(home, ".qwen", ".env"), path.join(home, ".env")])];
+    const dotenv = await Promise.all(files.map(async (file) => { const value = await readEnv(file); return value; }));
+    return { home, qwenHome, layers, dotenv };
+}
+//# sourceMappingURL=auth-files.js.map

package/dist/runtimes/qwen/auth-files.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-files.js","sources":["../../../src/runtimes/qwen/auth-files.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,KAAK,EAAE,MAAM,QAAQ,CAAC;AAC/B,OAAO,iBAAiB,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AAC/D,OAAO,EAAE,eAAe,EAAE,MAAM,kCAAkC,CAAC;AACnE,OAAO,EAAE,QAAQ,EAAmB,MAAM,sBAAsB,CAAC;AAUjE,yFAAyF;AACzF,KAAK,UAAU,iBAAiB,CAAC,IAAY,EAAE,MAAmB;IAChE,MAAM,CAAC,cAAc,EAAE,CAAC;IACxB,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC;QAC9B,MAAM,CAAC,cAAc,EAAE,CAAC;QACxB,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,IAAI,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,EAAE,CAAC;YAAC,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;QAAC,CAAC;QAC9G,OAAO,MAAM,QAAQ,CAAC,IAAI,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;IAC5D,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,KAAK,IAAI,MAAM,IAAI,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAAC,OAAO,SAAS,CAAC;QAAC,CAAC;QAC/F,MAAM,IAAI,KAAK,CAAC,sCAAsC,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;IAC5E,CAAC;AACH,CAAC;AACD,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAAC,IAAY,EAAE,MAAmB;IAC9E,IAAI,CAAC;QACH,MAAM,CAAC,cAAc,EAAE,CAAC;QACxB,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC;QAC9B,MAAM,CAAC,cAAc,EAAE,CAAC;QACxB,OAAO,IAAI,CAAC,MAAM,EAAE,CAAC;IACvB,CAAC;IACD,OAAO,KAAK,EAAE,CAAC;QACb,IAAI,KAAK,YAAY,KAAK,IAAI,MAAM,IAAI,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAAC,OAAO,KAAK,CAAC;QAAC,CAAC;QAC3F,MAAM,IAAI,KAAK,CAAC,uCAAuC,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;IAC7E,CAAC;AACH,CAAC;AACD,SAAS,eAAe,CAAC,KAAyB,EAAE,IAAY;IAC9D,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,EAAE,EAAE,CAAC;QAAC,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAAC,CAAC;IAC7E,OAAO,KAAK,KAAK,GAAG,IAAI,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC;QACvE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAChG,CAAC;AAED,yFAAyF;AACzF,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,GAAgC,EAAE,MAAmB;IAC3F,MAAM,IAAI,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;IAClC,MAAM,OAAO,GAAG,gBAAgB,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;IACnD,IAAI,QAAQ,GAAG,eAAe,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IAC9C,MAAM,OAAO,GAAG,KAAK,EAAE,IAAY,EAAmC,EAAE,CAAC,KAAK,CAAC,MAAM,iBAAiB,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;IAC5H,2EAA2E;IAC3E,8DAA8D;IAC9D,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC1B,KAAK,MAAM,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,EAAE,CAAC;YAC1E,MAAM,KAAK,GAAG,gBAAgB,CAAC,MAAM,OAAO,CAAC,IAAI,CAAC,EAAE,WAAW,CAAC,CAAC;YACjE,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,EAAE,EAAE,CAAC;gBAAC,QAAQ,GAAG,eAAe,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;gBAAC,MAAM;YAAC,CAAC;QAC9F,CAAC;IACH,CAAC;IACD,MAAM,aAAa,GAAG,OAAO,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,qDAAqD;QACzG,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAA,wCAAwC,CAAC,CAAC,CAAC,8BAA8B,CAAC,CAAC;IACzH,MAAM,cAAc,GAAG,gBAAgB,CAAC,GAAG,EAAE,gCAAgC,CAAC,CAAC;IAC/E,MAAM,MAAM,GAAG,cAAc,KAAK,SAAS,IAAI,cAAc,KAAK,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,cAAc,CAAC;IACtG,MAAM,gBAAgB,GAAG,gBAAgB,CAAC,GAAG,EAAE,gCAAgC,CAAC,CAAC;IACjF,MAAM,QAAQ,GAAG,gBAAgB,KAAK,SAAS,IAAI,gBAAgB,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,sBAAsB,CAAC,CAAC,CAAC,CAAC,gBAAgB,CAAC;IACxJ,MAAM,MAAM,GAAwB,EAAE,CAAC;IACvC,KAAK,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,iBAAiB,EAAE,QAAQ,CAAC,EAAE,CAAC,eAAe,EAAE,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,eAAe,CAAC,CAAC,EAAE,CAAC,iBAAiB,EAAE,MAAM,CAAC,CAAU,EAAE,CAAC;QAC5J,MAAM,OAAO,GAAG,MAAM,iBAAiB,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACtD,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAAC,SAAS;QAAC,CAAC;QACxC,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,iBAAiB,CAAC,OAAO,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;QACvF,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC;QAC/B,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;YAAC,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;QAAC,CAAC;QAC1E,MAAM,OAAO,GAAG,KAAK,CAAC,QAAQ,CAAC;QAC/B,IAAI,OAAO,KAAK,SAAS,IAAI,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,GAAG,CAAC,IAAI,OAAO,GAAG,CAAC,CAAC,EAAE,CAAC;YAAC,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;QAAC,CAAC;QAC7K,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;IACjC,CAAC;IACD,MAAM,KAAK,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;IACrH,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,GAAG,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAClH,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;AAC5C,CAAC"}

package/dist/runtimes/qwen/auth-status.d.ts

@@ -0,0 +1,4 @@
+import type { AuthStatusReader } from "../../contracts/login.js";
+/** Presence only. Never starts Qwen, sends requests, refreshes or reads token contents. */
+export declare const qwenAuthStatus: AuthStatusReader;
+//# sourceMappingURL=auth-status.d.ts.map

package/dist/runtimes/qwen/auth-status.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-status.d.ts","sources":["../../../src/runtimes/qwen/auth-status.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAiC,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AA4EhG,2FAA2F;AAC3F,eAAO,MAAM,cAAc,EAAE,gBAiBG,CAAC"}

package/dist/runtimes/qwen/auth-status.js

@@ -0,0 +1,114 @@
+import path from "node:path";
+import { environmentValue, sessionEnvironment } from "../../shared/environment.js";
+import { asRecord, asRecordList } from "../../shared/json.js";
+import { qwenCredentialFileExists, readQwenAuthFiles } from "./auth-files.js";
+const SOURCE = "Qwen user/system credential configuration";
+const SCOPE = "Project settings, workspace .env files and launch arguments may still supply credentials.";
+// Native auth protocols plus the provider presets shipped in Qwen 0.26.2.
+const KEY_NAMES = ["OPENAI_API_KEY", "ANTHROPIC_API_KEY", "GEMINI_API_KEY", "GOOGLE_API_KEY", "BAILIAN_CODING_PLAN_API_KEY", "BAILIAN_TOKEN_PLAN_API_KEY", "OPENROUTER_API_KEY", "REQUESTY_API_KEY", "DASHSCOPE_API_KEY", "QWENCLOUD_API_KEY", "QWENCLOUD_TOKEN_PLAN_API_KEY", "MOONSHOT_API_KEY", "IDEALAB_API_KEY", "MODELSCOPE_API_KEY", "MINIMAX_API_KEY", "ZAI_API_KEY", "DEEPSEEK_API_KEY", "XAI_API_KEY"];
+const AUTH_TYPES = new Set(["openai", "openai-responses", "anthropic", "gemini", "vertex-ai", "qwen-oauth"]);
+const present = (value) => typeof value === "string" && value.length > 0;
+const unknown = (detail) => ({ kind: "unknown", source: SOURCE, detail });
+function configuredSources(env, files) {
+    // This is a presence audit, not a second native credential resolver. A
+    // configured source stays unknown even if another layer shadows it.
+    const keys = new Set(KEY_NAMES);
+    const sources = new Set();
+    const settingsEnv = [];
+    for (const { source, value } of files.layers) {
+        const auth = asRecord(asRecord(value.security)?.auth);
+        const selected = auth?.selectedType ?? value.selectedAuthType;
+        const type = typeof selected === "string" && AUTH_TYPES.has(selected) ? ` (${selected})` : "";
+        if (present(auth?.apiKey)) {
+            sources.add(`${source}: security.auth.apiKey${type}`);
+        }
+        if (selected === "vertex-ai" || selected === "qwen-oauth") {
+            sources.add(`${source}: selectedType${type}; cached or external credentials are not validated`);
+        }
+        else if (present(selected) && type === "") {
+            sources.add(`${source}: unrecognized selectedType`);
+        }
+        if (auth?.useExternal === true || value.useExternalAuth === true) {
+            sources.add(`${source}: external authentication configured`);
+        }
+        const entries = Object.entries(asRecord(value.env) ?? {});
+        settingsEnv.push(Object.fromEntries(entries.filter((entry) => typeof entry[1] === "string")));
+        for (const models of Object.values(asRecord(value.modelProviders) ?? {})) {
+            for (const model of asRecordList(models)) {
+                if (present(model.envKey)) {
+                    keys.add(model.envKey);
+                }
+            }
+        }
+    }
+    const value = (name) => {
+        for (const map of [env, ...files.dotenv, ...settingsEnv.toReversed()]) {
+            const found = environmentValue(map, name);
+            if (present(found)) {
+                return found;
+            }
+        }
+        return undefined;
+    };
+    for (const name of keys) {
+        if (!present(value(name))) {
+            continue;
+        }
+        const label = /^[A-Za-z_][\w]{0,127}$/u.test(name) ? name : "custom modelProviders envKey";
+        const origin = present(environmentValue(env, name)) ? "environment" : "user .env or settings.env";
+        sources.add(`${origin}: ${label}`);
+    }
+    return { sources: [...sources], value };
+}
+async function inspectCredentials(env, signal) {
+    const files = await readQwenAuthFiles(env, signal);
+    const { sources, value } = configuredSources(env, files);
+    const observed = [...sources];
+    // ADC may come from a file, federation executable or metadata service.
+    // Inspect only file presence; never load the Google client or read a token.
+    const explicitAdc = value("GOOGLE_APPLICATION_CREDENTIALS");
+    if (explicitAdc !== undefined) {
+        const exists = await qwenCredentialFileExists(explicitAdc, signal);
+        observed.push(`GOOGLE_APPLICATION_CREDENTIALS file ${exists ? "exists" : "not found"}; contents and validity were not read`);
+    }
+    if (present(value("QWEN_OAUTH"))) {
+        observed.push("QWEN_OAUTH requests legacy OAuth; cached credentials were not validated");
+    }
+    if (present(value("GOOGLE_CLOUD_PROJECT"))) {
+        observed.push("GOOGLE_CLOUD_PROJECT: Vertex ADC may use external credentials");
+    }
+    const appData = value("APPDATA");
+    const adc = process.platform === "win32"
+        ? (appData === undefined ? undefined : path.join(appData, "gcloud", "application_default_credentials.json"))
+        : path.join(files.home, ".config", "gcloud", "application_default_credentials.json");
+    if (adc !== undefined && await qwenCredentialFileExists(adc, signal)) {
+        observed.push("Vertex ADC file exists; contents and validity were not read");
+    }
+    if (await qwenCredentialFileExists(path.join(files.qwenHome, "oauth_creds.json"), signal)) {
+        observed.push("legacy Qwen OAuth credential file exists; free tier discontinued 2026-04-15");
+    }
+    signal.throwIfAborted();
+    return observed.length > 0
+        ? unknown(`Configured sources: ${observed.join("; ")}. No credential was validated. ${SCOPE}`)
+        : { kind: "logged_out", source: SOURCE, detail: `No user/system provider credential found. Configure OPENAI_API_KEY + OPENAI_BASE_URL + OPENAI_MODEL, or BAILIAN_CODING_PLAN_API_KEY / BAILIAN_TOKEN_PLAN_API_KEY with the region's plan URL, or OPENROUTER_API_KEY / REQUESTY_API_KEY with its provider URL. ${SCOPE}` };
+}
+/** Presence only. Never starts Qwen, sends requests, refreshes or reads token contents. */
+export const qwenAuthStatus = Object.assign(async (_installation, options = {}) => {
+    const abort = new AbortController();
+    const deadline = Promise.withResolvers();
+    const timer = setTimeout(() => {
+        abort.abort();
+        deadline.reject(new Error("Qwen credential inspection timed out"));
+    }, options.timeoutMs ?? 20_000);
+    timer.unref();
+    try {
+        return await Promise.race([inspectCredentials(sessionEnvironment(options.env), abort.signal), deadline.promise]);
+    }
+    catch {
+        return unknown(abort.signal.aborted ? "Qwen local credential inspection timed out" : "Qwen user/system configuration could not be completely inspected; credentials may be configured");
+    }
+    finally {
+        clearTimeout(timer);
+    }
+}, { localOnly: true });
+//# sourceMappingURL=auth-status.js.map

package/dist/runtimes/qwen/auth-status.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-status.js","sources":["../../../src/runtimes/qwen/auth-status.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAG7B,OAAO,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,MAAM,6BAA6B,CAAC;AACnF,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AAC9D,OAAO,EAAE,wBAAwB,EAAE,iBAAiB,EAAsB,MAAM,iBAAiB,CAAC;AAElG,MAAM,MAAM,GAAG,2CAA2C,CAAC;AAC3D,MAAM,KAAK,GAAG,2FAA2F,CAAC;AAC1G,0EAA0E;AAC1E,MAAM,SAAS,GAAG,CAAC,gBAAgB,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,6BAA6B,EAAE,4BAA4B,EAAE,oBAAoB,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,8BAA8B,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,iBAAiB,EAAE,aAAa,EAAE,kBAAkB,EAAE,aAAa,CAAC,CAAC;AACjZ,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,CAAC,QAAQ,EAAE,kBAAkB,EAAE,WAAW,EAAE,QAAQ,EAAE,WAAW,EAAE,YAAY,CAAC,CAAC,CAAC;AAC7G,MAAM,OAAO,GAAG,CAAC,KAAc,EAAmB,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC;AACnG,MAAM,OAAO,GAAG,CAAC,MAAc,EAAc,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;AAE9F,SAAS,iBAAiB,CAAC,GAAgC,EAAE,KAAoB;IAC/E,uEAAuE;IACvE,oEAAoE;IACpE,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,CAAC;IAChC,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAClC,MAAM,WAAW,GAAkC,EAAE,CAAC;IACtD,KAAK,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;QAC7C,MAAM,IAAI,GAAG,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,CAAC;QACtD,MAAM,QAAQ,GAAG,IAAI,EAAE,YAAY,IAAI,KAAK,CAAC,gBAAgB,CAAC;QAC9D,MAAM,IAAI,GAAG,OAAO,QAAQ,KAAK,QAAQ,IAAI,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,KAAK,QAAQ,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9F,IAAI,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC;YAAC,OAAO,CAAC,GAAG,CAAC,GAAG,MAAM,yBAAyB,IAAI,EAAE,CAAC,CAAC;QAAC,CAAC;QACrF,IAAI,QAAQ,KAAK,WAAW,IAAI,QAAQ,KAAK,YAAY,EAAE,CAAC;YAAC,OAAO,CAAC,GAAG,CAAC,GAAG,MAAM,iBAAiB,IAAI,oDAAoD,CAAC,CAAC;QAAC,CAAC;aAC1J,IAAI,OAAO,CAAC,QAAQ,CAAC,IAAI,IAAI,KAAK,EAAE,EAAE,CAAC;YAAC,OAAO,CAAC,GAAG,CAAC,GAAG,MAAM,6BAA6B,CAAC,CAAC;QAAC,CAAC;QACnG,IAAI,IAAI,EAAE,WAAW,KAAK,IAAI,IAAI,KAAK,CAAC,eAAe,KAAK,IAAI,EAAE,CAAC;YAAC,OAAO,CAAC,GAAG,CAAC,GAAG,MAAM,sCAAsC,CAAC,CAAC;QAAC,CAAC;QACnI,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;QAC1D,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,KAAK,EAA6B,EAAE,CAAC,OAAO,KAAK,CAAC,CAAC,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC;QACzH,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC;YACzE,KAAK,MAAM,KAAK,IAAI,YAAY,CAAC,MAAM,CAAC,EAAE,CAAC;gBACzC,IAAI,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;oBAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;gBAAC,CAAC;YACxD,CAAC;QACH,CAAC;IACH,CAAC;IACD,MAAM,KAAK,GAAG,CAAC,IAAY,EAAsB,EAAE;QACjD,KAAK,MAAM,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,MAAM,EAAE,GAAG,WAAW,CAAC,UAAU,EAAE,CAAC,EAAE,CAAC;YACtE,MAAM,KAAK,GAAG,gBAAgB,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;YAC1C,IAAI,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;gBAAC,OAAO,KAAK,CAAC;YAAC,CAAC;QACvC,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC,CAAC;IACF,KAAK,MAAM,IAAI,IAAI,IAAI,EAAE,CAAC;QACxB,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;YAAC,SAAS;QAAC,CAAC;QACxC,MAAM,KAAK,GAAG,yBAAyB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,8BAA8B,CAAC;QAC3F,MAAM,MAAM,GAAG,OAAO,CAAC,gBAAgB,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,2BAA2B,CAAC;QAClG,OAAO,CAAC,GAAG,CAAC,GAAG,MAAM,KAAK,KAAK,EAAE,CAAC,CAAC;IACrC,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,CAAC,GAAG,OAAO,CAAC,EAAE,KAAK,EAAE,CAAC;AAC1C,CAAC;AAED,KAAK,UAAU,kBAAkB,CAAC,GAAgC,EAAE,MAAmB;IACrF,MAAM,KAAK,GAAG,MAAM,iBAAiB,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IACnD,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,iBAAiB,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IACzD,MAAM,QAAQ,GAAG,CAAC,GAAG,OAAO,CAAC,CAAC;IAC9B,uEAAuE;IACvE,4EAA4E;IAC5E,MAAM,WAAW,GAAG,KAAK,CAAC,gCAAgC,CAAC,CAAC;IAC5D,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;QAC9B,MAAM,MAAM,GAAG,MAAM,wBAAwB,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;QACnE,QAAQ,CAAC,IAAI,CAAC,uCAAuC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,WAAW,uCAAuC,CAAC,CAAC;IAC/H,CAAC;IACD,IAAI,OAAO,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,EAAE,CAAC;QAAC,QAAQ,CAAC,IAAI,CAAC,yEAAyE,CAAC,CAAC;IAAC,CAAC;IAC/H,IAAI,OAAO,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC,EAAE,CAAC;QAAC,QAAQ,CAAC,IAAI,CAAC,+DAA+D,CAAC,CAAC;IAAC,CAAC;IAC/H,MAAM,OAAO,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC;IACjC,MAAM,GAAG,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO;QACtC,CAAC,CAAC,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,EAAE,sCAAsC,CAAC,CAAC;QAC5G,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,sCAAsC,CAAC,CAAC;IACvF,IAAI,GAAG,KAAK,SAAS,IAAI,MAAM,wBAAwB,CAAC,GAAG,EAAE,MAAM,CAAC,EAAE,CAAC;QAAC,QAAQ,CAAC,IAAI,CAAC,6DAA6D,CAAC,CAAC;IAAC,CAAC;IACvJ,IAAI,MAAM,wBAAwB,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,kBAAkB,CAAC,EAAE,MAAM,CAAC,EAAE,CAAC;QAAC,QAAQ,CAAC,IAAI,CAAC,6EAA6E,CAAC,CAAC;IAAC,CAAC;IAC5L,MAAM,CAAC,cAAc,EAAE,CAAC;IACxB,OAAO,QAAQ,CAAC,MAAM,GAAG,CAAC;QACxB,CAAC,CAAC,OAAO,CAAC,uBAAuB,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,kCAAkC,KAAK,EAAE,CAAC;QAC9F,CAAC,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,gQAAgQ,KAAK,EAAE,EAAE,CAAC;AAC9T,CAAC;AAED,2FAA2F;AAC3F,MAAM,CAAC,MAAM,cAAc,GAAqB,MAAM,CAAC,MAAM,CAAC,KAAK,EACjE,aAAoC,EAAE,OAAO,GAAsB,EAAE,EAChD,EAAE;IACvB,MAAM,KAAK,GAAG,IAAI,eAAe,EAAE,CAAC;IACpC,MAAM,QAAQ,GAAG,OAAO,CAAC,aAAa,EAAS,CAAC;IAChD,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;QAC5B,KAAK,CAAC,KAAK,EAAE,CAAC;QACd,QAAQ,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC,CAAC;IACrE,CAAC,EAAE,OAAO,CAAC,SAAS,IAAI,MAAM,CAAC,CAAC;IAChC,KAAK,CAAC,KAAK,EAAE,CAAC;IACd,IAAI,CAAC;QACH,OAAO,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,kBAAkB,CAAC,kBAAkB,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;IACnH,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,4CAA4C,CAAC,CAAC,CAAC,iGAAiG,CAAC,CAAC;IAC1L,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,KAAK,CAAC,CAAC;IACtB,CAAC;AACH,CAAC,EAAE,EAAE,SAAS,EAAE,IAAa,EAAE,CAAC,CAAC"}

package/dist/runtimes/qwen/index.d.ts

@@ -1,3 +1,5 @@
+export { createQwenProviderAuth, QwenProviderAuthError } from "./provider-auth.js";
+export type { QwenProvider, QwenProviderAuth, QwenProviderAuthOptions, QwenProviderAuthErrorKind, QwenProviderConnectOptions, QwenProviderConnectResult } from "./provider-auth.js";
 export declare const qwenRuntime: {
     readonly id: "qwen";
     readonly brand: {
@@ -10,6 +12,9 @@ export declare const qwenRuntime: {
     };
     readonly refusedSessionOptions: Readonly<Partial<Record<import("../../contracts/runtime.js").RefusableSessionOption, string>>>;
     readonly installation: import("../../browser.js").InstallationProbe;
+    readonly authStatus: ((installation: import("../../browser.js").AvailableInstallation, options?: import("../../browser.js").AuthStatusOptions | undefined) => Promise<import("../../browser.js").AuthStatus>) & {
+        localOnly: true;
+    };
     readonly installPlan: import("../../browser.js").InstallPlanner;
     readonly install: import("../../browser.js").Installer;
     readonly listModels: (installation: import("../../browser.js").AvailableInstallation, options?: import("../../browser.js").ListModelsOptions | undefined) => Promise<import("../../browser.js").ListModelsResult>;

package/dist/runtimes/qwen/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sources":["../../../src/runtimes/qwen/index.ts"],"names":[],"mappings":"AAOA,eAAO,MAAM,WAAW;;;;;;;;;;;;;;;;;;CActB,CAAC"}
+{"version":3,"file":"index.d.ts","sources":["../../../src/runtimes/qwen/index.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,sBAAsB,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAC;AACnF,YAAY,EAAE,YAAY,EAAE,gBAAgB,EAAE,uBAAuB,EAAE,yBAAyB,EAAE,0BAA0B,EAAE,yBAAyB,EAAE,MAAM,oBAAoB,CAAC;AAEpL,eAAO,MAAM,WAAW;;;;;;;;;;;;;;;;;;;;;CAkBtB,CAAC"}

package/dist/runtimes/qwen/index.js

@@ -4,10 +4,15 @@ import { onFirstCall } from "../../shared/lazy.js";
 import { qwenInstallation } from "./installation.js";
 import { qwenInstall, qwenInstallPlan } from "./install.js";
 import { qwenRefusedSessionOptions } from "./options.js";
+export { createQwenProviderAuth, QwenProviderAuthError } from "./provider-auth.js";
 export const qwenRuntime = defineRuntime({
     id: "qwen", brand: runtimeBrands.qwen,
     refusedSessionOptions: qwenRefusedSessionOptions,
     installation: qwenInstallation,
+    authStatus: Object.assign(onFirstCall(async () => {
+        const { qwenAuthStatus } = await import("./auth-status.js");
+        return qwenAuthStatus;
+    }), { localOnly: true }),
     installPlan: qwenInstallPlan,
     install: qwenInstall,
     listModels: onFirstCall(async () => {

package/dist/runtimes/qwen/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sources":["../../../src/runtimes/qwen/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAChD,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAC3D,OAAO,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AACnD,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AACrD,OAAO,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAC5D,OAAO,EAAE,yBAAyB,EAAE,MAAM,cAAc,CAAC;AAEzD,MAAM,CAAC,MAAM,WAAW,GAAG,aAAa,CAAC;IACvC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,aAAa,CAAC,IAAI;IACrC,qBAAqB,EAAE,yBAAyB;IAChD,YAAY,EAAE,gBAAgB;IAC9B,WAAW,EAAE,eAAe;IAC5B,OAAO,EAAE,WAAW;IACpB,UAAU,EAAE,WAAW,CAAC,KAAK,IAAI,EAAE;QACjC,MAAM,EAAE,cAAc,EAAE,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAAC;QAC5D,OAAO,cAAc,CAAC;IACxB,CAAC,CAAC;IACF,OAAO,EAAE,WAAW,CAAC,KAAK,IAAI,EAAE;QAC9B,MAAM,EAAE,WAAW,EAAE,GAAG,MAAM,MAAM,CAAC,cAAc,CAAC,CAAC;QACrD,OAAO,WAAW,CAAC;IACrB,CAAC,CAAC;CACH,CAAC,CAAC"}
+{"version":3,"file":"index.js","sources":["../../../src/runtimes/qwen/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAChD,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAC3D,OAAO,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AACnD,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AACrD,OAAO,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAC5D,OAAO,EAAE,yBAAyB,EAAE,MAAM,cAAc,CAAC;AAEzD,OAAO,EAAE,sBAAsB,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAC;AAGnF,MAAM,CAAC,MAAM,WAAW,GAAG,aAAa,CAAC;IACvC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,aAAa,CAAC,IAAI;IACrC,qBAAqB,EAAE,yBAAyB;IAChD,YAAY,EAAE,gBAAgB;IAC9B,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,KAAK,IAAI,EAAE;QAC/C,MAAM,EAAE,cAAc,EAAE,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAAC;QAC5D,OAAO,cAAc,CAAC;IACxB,CAAC,CAAC,EAAE,EAAE,SAAS,EAAE,IAAa,EAAE,CAAC;IACjC,WAAW,EAAE,eAAe;IAC5B,OAAO,EAAE,WAAW;IACpB,UAAU,EAAE,WAAW,CAAC,KAAK,IAAI,EAAE;QACjC,MAAM,EAAE,cAAc,EAAE,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAAC;QAC5D,OAAO,cAAc,CAAC;IACxB,CAAC,CAAC;IACF,OAAO,EAAE,WAAW,CAAC,KAAK,IAAI,EAAE;QAC9B,MAAM,EAAE,WAAW,EAAE,GAAG,MAAM,MAAM,CAAC,cAAc,CAAC,CAAC;QACrD,OAAO,WAAW,CAAC;IACrB,CAAC,CAAC;CACH,CAAC,CAAC"}

package/dist/runtimes/qwen/options.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"options.d.ts","sources":["../../../src/runtimes/qwen/options.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AAGxE,eAAO,MAAM,yBAAyB,EAAE,qBAKvC,CAAC;AAEF,gGAAgG;AAChG,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,GAAG,IAAI,CAiB7E"}
+{"version":3,"file":"options.d.ts","sources":["../../../src/runtimes/qwen/options.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AAGxE,eAAO,MAAM,yBAAyB,EAAE,qBAMvC,CAAC;AAEF,gGAAgG;AAChG,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,GAAG,IAAI,CAiB7E"}

package/dist/runtimes/qwen/options.js

@@ -1,5 +1,6 @@
 import { UnsupportedOptionError } from "../../contracts/errors.js";
 export const qwenRefusedSessionOptions = {
+    goals: "This runtime interface exposes no structured native goal controls",
     userConfiguration: "qwen has no verified separation of user configuration from its native login",
     serviceTier: "Qwen's stream-json interface does not expose a service-tier setting",
     outputSchema: "Qwen rejects --json-schema with its long-lived stream-json input protocol",

package/dist/runtimes/qwen/options.js.map

@@ -1 +1 @@
-{"version":3,"file":"options.js","sources":["../../../src/runtimes/qwen/options.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,sBAAsB,EAAE,MAAM,2BAA2B,CAAC;AAEnE,MAAM,CAAC,MAAM,yBAAyB,GAA0B;IAC9D,iBAAiB,EAAE,6EAA6E;IAChG,WAAW,EAAE,qEAAqE;IAClF,YAAY,EAAE,2EAA2E;IACzF,IAAI,EAAE,sEAAsE;CAC7E,CAAC;AAEF,gGAAgG;AAChG,MAAM,UAAU,mBAAmB,CAAC,IAAmC;IACrE,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC;QACtB,gBAAgB,EAAE,iBAAiB,EAAE,WAAW,EAAE,iBAAiB,EAAE,QAAQ,EAAE,IAAI;QACnF,cAAc,EAAE,UAAU,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO;QAC/E,UAAU,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,sBAAsB,EAAE,IAAI;QACrE,oBAAoB,EAAE,WAAW,EAAE,aAAa,EAAE,cAAc;QAChE,sBAAsB,EAAE,mBAAmB,EAAE,IAAI,EAAE,IAAI;KACxD,CAAC,CAAC;IACH,KAAK,MAAM,GAAG,IAAI,IAAI,IAAI,EAAE,EAAE,CAAC;QAC7B,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC;QACzC,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;YAChC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,SAAS,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,MAAM,CAAC,WAAW,EAAE,EAAE,CAAC;YACpE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QACrB,IAAI,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YACtB,MAAM,IAAI,sBAAsB,CAAC,YAAY,EAAE,mCAAmC,IAAI,wFAAwF,CAAC,CAAC;QAClL,CAAC;IACH,CAAC;AACH,CAAC"}
+{"version":3,"file":"options.js","sources":["../../../src/runtimes/qwen/options.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,sBAAsB,EAAE,MAAM,2BAA2B,CAAC;AAEnE,MAAM,CAAC,MAAM,yBAAyB,GAA0B;IAC9D,KAAK,EAAE,mEAAmE;IAC1E,iBAAiB,EAAE,6EAA6E;IAChG,WAAW,EAAE,qEAAqE;IAClF,YAAY,EAAE,2EAA2E;IACzF,IAAI,EAAE,sEAAsE;CAC7E,CAAC;AAEF,gGAAgG;AAChG,MAAM,UAAU,mBAAmB,CAAC,IAAmC;IACrE,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC;QACtB,gBAAgB,EAAE,iBAAiB,EAAE,WAAW,EAAE,iBAAiB,EAAE,QAAQ,EAAE,IAAI;QACnF,cAAc,EAAE,UAAU,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO;QAC/E,UAAU,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,sBAAsB,EAAE,IAAI;QACrE,oBAAoB,EAAE,WAAW,EAAE,aAAa,EAAE,cAAc;QAChE,sBAAsB,EAAE,mBAAmB,EAAE,IAAI,EAAE,IAAI;KACxD,CAAC,CAAC;IACH,KAAK,MAAM,GAAG,IAAI,IAAI,IAAI,EAAE,EAAE,CAAC;QAC7B,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC;QACzC,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;YAChC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,SAAS,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,MAAM,CAAC,WAAW,EAAE,EAAE,CAAC;YACpE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QACrB,IAAI,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YACtB,MAAM,IAAI,sBAAsB,CAAC,YAAY,EAAE,mCAAmC,IAAI,wFAAwF,CAAC,CAAC;QAClL,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/runtimes/qwen/provider-auth-rpc.d.ts

@@ -0,0 +1,4 @@
+import type { ExecutableInstallation } from "../../contracts/installation.js";
+import { type QwenProviderAuth, type QwenProviderAuthOptions } from "./provider-auth.js";
+export declare function qwenProviderAuth(installation: ExecutableInstallation, options: QwenProviderAuthOptions): QwenProviderAuth;
+//# sourceMappingURL=provider-auth-rpc.d.ts.map

package/dist/runtimes/qwen/provider-auth-rpc.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider-auth-rpc.d.ts","sources":["../../../src/runtimes/qwen/provider-auth-rpc.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,iCAAiC,CAAC;AAM9E,OAAO,EAEc,KAAK,gBAAgB,EAAE,KAAK,uBAAuB,EAEvE,MAAM,oBAAoB,CAAC;AAmD5B,wBAAgB,gBAAgB,CAAC,YAAY,EAAE,sBAAsB,EAAE,OAAO,EAAE,uBAAuB,GAAG,gBAAgB,CAiDzH"}

package/dist/runtimes/qwen/provider-auth-rpc.js

@@ -0,0 +1,134 @@
+/* oxlint-disable typescript/promise-function-async -- Deadline callbacks forward the official SDK promises. */
+import { RequestError } from "@agentclientprotocol/sdk";
+import { resolve } from "node:path";
+import { AcpError } from "../../shared/acp/errors.js";
+import { createAcpClient, methods, startAcpProcess, withAcpDeadline } from "../../shared/acp/process.js";
+import { sessionEnvironment } from "../../shared/environment.js";
+import { asRecord } from "../../shared/json.js";
+import { redactText } from "../../shared/redact-text.js";
+import { QwenProviderAuthError, } from "./provider-auth.js";
+const LIST = "qwen/providers/list";
+const CONNECT = "qwen/providers/connect";
+/** No sessions or host callbacks: consume only response envelopes, never log other native output. */
+function providerResponse(value, pending, redact) {
+    const row = asRecord(value);
+    if (row === null || row.jsonrpc !== "2.0" || "method" in row || (typeof row.id !== "number" && typeof row.id !== "string") || !pending.has(row.id)) {
+        return undefined;
+    }
+    const { id } = row;
+    const error = asRecord(row.error);
+    if (error !== null) {
+        if (typeof error.code !== "number") {
+            return undefined;
+        }
+        pending.delete(id);
+        return { jsonrpc: "2.0", id, error: { code: error.code, message: "Qwen provider request failed" } };
+    }
+    if (!("result" in row)) {
+        return undefined;
+    }
+    pending.delete(id);
+    return { jsonrpc: "2.0", id, result: redactText(row.result, redact, (text) => redact(text) !== text) };
+}
+function provider(value) {
+    const row = asRecord(value);
+    if (row === null || typeof row.id !== "string" || typeof row.label !== "string" || typeof row.protocol !== "string") {
+        throw new QwenProviderAuthError("invalid_response", LIST);
+    }
+    const existingConfig = asRecord(row.existingConfig);
+    if (row.existingConfig !== undefined && existingConfig === null) {
+        throw new QwenProviderAuthError("invalid_response", LIST);
+    }
+    return { ...row, id: row.id, label: row.label, protocol: row.protocol,
+        ...(existingConfig === null ? {} : { existingConfig }) };
+}
+function connected(value) {
+    const row = asRecord(value);
+    if (row?.success !== true || typeof row.providerId !== "string" || typeof row.providerLabel !== "string" || typeof row.authType !== "string"
+        || (row.modelId !== undefined && typeof row.modelId !== "string") || (row.baseUrl !== undefined && typeof row.baseUrl !== "string")) {
+        throw new QwenProviderAuthError("invalid_response", CONNECT);
+    }
+    return { success: true, providerId: row.providerId, providerLabel: row.providerLabel, authType: row.authType,
+        ...(row.modelId === undefined ? {} : { modelId: row.modelId }), ...(row.baseUrl === undefined ? {} : { baseUrl: row.baseUrl }) };
+}
+function failure(error, method) {
+    if (error instanceof QwenProviderAuthError) {
+        return error;
+    }
+    if (error instanceof RequestError) {
+        return new QwenProviderAuthError("native", method, error.code);
+    }
+    if (error instanceof AcpError) {
+        return new QwenProviderAuthError(error.kind, method);
+    }
+    return new QwenProviderAuthError("launch_failed", method);
+}
+export function qwenProviderAuth(installation, options) {
+    const timeoutMs = options.timeoutMs ?? 30_000;
+    if (!Number.isFinite(timeoutMs) || timeoutMs <= 0) {
+        throw new RangeError("Qwen provider timeoutMs must be positive and finite");
+    }
+    const command = installation.command;
+    const cwd = resolve(options.cwd ?? process.cwd());
+    const overlay = { ...options.env };
+    const secrets = new Set();
+    const redact = (text) => [...secrets].toSorted((a, b) => b.length - a.length).reduce((result, key) => result.replaceAll(key, "[redacted]"), text);
+    const request = async (method, params) => {
+        const until = Date.now() + timeoutMs;
+        const pending = new Set();
+        let child = undefined;
+        try {
+            const opened = startAcpProcess(command, ["--acp"], createAcpClient({ name: "oar-qwen-provider-auth" }), {
+                cwd, env: sessionEnvironment(overlay), redact, inheritStderr: false,
+                incoming: (message) => providerResponse(message, pending, redact),
+                outgoing: (message) => { if ("id" in message && "method" in message && message.id !== null) {
+                    pending.add(message.id);
+                } },
+            });
+            child = opened;
+            await withAcpDeadline(opened, "initialize", Math.max(1, until - Date.now()), (sendOptions) => opened.connection.agent.request(methods.agent.initialize, {
+                protocolVersion: 1, clientCapabilities: { fs: { readTextFile: false, writeTextFile: false }, terminal: false },
+            }, sendOptions));
+            if (Date.now() >= until) {
+                throw new QwenProviderAuthError("timeout", method);
+            }
+            const result = await withAcpDeadline(opened, method, until - Date.now(), (sendOptions) => opened.connection.agent.request(method, params, sendOptions));
+            return redactText(result, redact, (text) => [...secrets].some((key) => text.includes(key)));
+        }
+        catch (error) {
+            throw failure(error, method);
+        }
+        finally {
+            if (child !== undefined) {
+                child.kill();
+                await child.exited;
+            }
+        }
+    };
+    return {
+        async listProviders() {
+            const result = asRecord(await request(LIST, {}));
+            if (!Array.isArray(result?.providers)) {
+                throw new QwenProviderAuthError("invalid_response", LIST);
+            }
+            return result.providers.map(provider);
+        },
+        async connect(params) {
+            if (typeof params.apiKey === "string" && params.apiKey.length > 0) {
+                secrets.add(params.apiKey);
+                if (params.apiKey.trim().length > 0) {
+                    secrets.add(params.apiKey.trim());
+                }
+            }
+            // Only declared native fields; no extra runtime options or launch arguments.
+            const input = { providerId: params.providerId };
+            for (const key of ["apiKey", "baseUrl", "protocol", "wireApi", "modelIds", "scope"]) {
+                if (params[key] !== undefined) {
+                    input[key] = params[key];
+                }
+            }
+            return connected(await request(CONNECT, input));
+        },
+    };
+}
+//# sourceMappingURL=provider-auth-rpc.js.map

package/dist/runtimes/qwen/provider-auth-rpc.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider-auth-rpc.js","sources":["../../../src/runtimes/qwen/provider-auth-rpc.ts"],"names":[],"mappings":"AAAA,+GAA+G;AAC/G,OAAO,EAAE,YAAY,EAAmB,MAAM,0BAA0B,CAAC;AACzE,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEpC,OAAO,EAAE,QAAQ,EAAE,MAAM,4BAA4B,CAAC;AACtD,OAAO,EAAE,eAAe,EAAE,OAAO,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAC;AACzG,OAAO,EAAE,kBAAkB,EAAE,MAAM,6BAA6B,CAAC;AACjE,OAAO,EAAE,QAAQ,EAAmB,MAAM,sBAAsB,CAAC;AACjE,OAAO,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAC;AACzD,OAAO,EACL,qBAAqB,GAGtB,MAAM,oBAAoB,CAAC;AAE5B,MAAM,IAAI,GAAG,qBAAqB,CAAC;AACnC,MAAM,OAAO,GAAG,wBAAwB,CAAC;AAEzC,qGAAqG;AACrG,SAAS,gBAAgB,CAAC,KAAc,EAAE,OAA6B,EAAE,MAAgC;IACvG,MAAM,GAAG,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC5B,IAAI,GAAG,KAAK,IAAI,IAAI,GAAG,CAAC,OAAO,KAAK,KAAK,IAAI,QAAQ,IAAI,GAAG,IAAI,CAAC,OAAO,GAAG,CAAC,EAAE,KAAK,QAAQ,IAAI,OAAO,GAAG,CAAC,EAAE,KAAK,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;QAAC,OAAO,SAAS,CAAC;IAAC,CAAC;IACzK,MAAM,EAAE,EAAE,EAAE,GAAG,GAAG,CAAC;IACnB,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAClC,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QACnB,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAAC,OAAO,SAAS,CAAC;QAAC,CAAC;QACzD,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACnB,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,OAAO,EAAE,8BAA8B,EAAE,EAAE,CAAC;IACtG,CAAC;IACD,IAAI,CAAC,CAAC,QAAQ,IAAI,GAAG,CAAC,EAAE,CAAC;QAAC,OAAO,SAAS,CAAC;IAAC,CAAC;IAC7C,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACnB,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,UAAU,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,EAAE,CAAC;AACzG,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,MAAM,GAAG,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC5B,IAAI,GAAG,KAAK,IAAI,IAAI,OAAO,GAAG,CAAC,EAAE,KAAK,QAAQ,IAAI,OAAO,GAAG,CAAC,KAAK,KAAK,QAAQ,IAAI,OAAO,GAAG,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QACpH,MAAM,IAAI,qBAAqB,CAAC,kBAAkB,EAAE,IAAI,CAAC,CAAC;IAC5D,CAAC;IACD,MAAM,cAAc,GAAG,QAAQ,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;IACpD,IAAI,GAAG,CAAC,cAAc,KAAK,SAAS,IAAI,cAAc,KAAK,IAAI,EAAE,CAAC;QAChE,MAAM,IAAI,qBAAqB,CAAC,kBAAkB,EAAE,IAAI,CAAC,CAAC;IAC5D,CAAC;IACD,OAAO,EAAE,GAAG,GAAG,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ;QACnE,GAAG,CAAC,cAAc,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,CAAC,EAAE,CAAC;AAC7D,CAAC;AAED,SAAS,SAAS,CAAC,KAAc;IAC/B,MAAM,GAAG,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC5B,IAAI,GAAG,EAAE,OAAO,KAAK,IAAI,IAAI,OAAO,GAAG,CAAC,UAAU,KAAK,QAAQ,IAAI,OAAO,GAAG,CAAC,aAAa,KAAK,QAAQ,IAAI,OAAO,GAAG,CAAC,QAAQ,KAAK,QAAQ;WACvI,CAAC,GAAG,CAAC,OAAO,KAAK,SAAS,IAAI,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,KAAK,SAAS,IAAI,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ,CAAC,EAAE,CAAC;QACtI,MAAM,IAAI,qBAAqB,CAAC,kBAAkB,EAAE,OAAO,CAAC,CAAC;IAC/D,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,CAAC,UAAU,EAAE,aAAa,EAAE,GAAG,CAAC,aAAa,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ;QAC1G,GAAG,CAAC,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,EAAE,GAAG,CAAC,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,EAAE,CAAC;AACrI,CAAC;AAED,SAAS,OAAO,CAAC,KAAc,EAAE,MAAc;IAC7C,IAAI,KAAK,YAAY,qBAAqB,EAAE,CAAC;QAAC,OAAO,KAAK,CAAC;IAAC,CAAC;IAC7D,IAAI,KAAK,YAAY,YAAY,EAAE,CAAC;QAAC,OAAO,IAAI,qBAAqB,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;IAAC,CAAC;IACtG,IAAI,KAAK,YAAY,QAAQ,EAAE,CAAC;QAAC,OAAO,IAAI,qBAAqB,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAAC,CAAC;IACxF,OAAO,IAAI,qBAAqB,CAAC,eAAe,EAAE,MAAM,CAAC,CAAC;AAC5D,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,YAAoC,EAAE,OAAgC;IACrG,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,MAAM,CAAC;IAC9C,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,SAAS,IAAI,CAAC,EAAE,CAAC;QAAC,MAAM,IAAI,UAAU,CAAC,qDAAqD,CAAC,CAAC;IAAC,CAAC;IACnI,MAAM,OAAO,GAAG,YAAY,CAAC,OAAO,CAAC;IACrC,MAAM,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IAClD,MAAM,OAAO,GAAG,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;IACnC,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAClC,MAAM,MAAM,GAAG,CAAC,IAAY,EAAU,EAAE,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG,EAAE,YAAY,CAAC,EAAE,IAAI,CAAC,CAAC;IAElK,MAAM,OAAO,GAAG,KAAK,EAAE,MAAc,EAAE,MAAkB,EAAoB,EAAE;QAC7E,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;QACrC,MAAM,OAAO,GAAG,IAAI,GAAG,EAAmB,CAAC;QAC3C,IAAI,KAAK,GAAmD,SAAS,CAAC;QACtE,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,eAAe,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,EAAE,eAAe,CAAC,EAAE,IAAI,EAAE,wBAAwB,EAAE,CAAC,EAAE;gBACtG,GAAG,EAAE,GAAG,EAAE,kBAAkB,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,aAAa,EAAE,KAAK;gBACnE,QAAQ,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC;gBACjE,QAAQ,EAAE,CAAC,OAAO,EAAE,EAAE,GAAG,IAAI,IAAI,IAAI,OAAO,IAAI,QAAQ,IAAI,OAAO,IAAI,OAAO,CAAC,EAAE,KAAK,IAAI,EAAE,CAAC;oBAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;gBAAC,CAAC,CAAC,CAAC;aAC3H,CAAC,CAAC;YACH,KAAK,GAAG,MAAM,CAAC;YACf,MAAM,eAAe,CAAC,MAAM,EAAE,YAAY,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,UAAU,EAAE;gBACtJ,eAAe,EAAE,CAAC,EAAE,kBAAkB,EAAE,EAAE,EAAE,EAAE,EAAE,YAAY,EAAE,KAAK,EAAE,aAAa,EAAE,KAAK,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE;aAC/G,EAAE,WAAW,CAAC,CAAC,CAAC;YACjB,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,KAAK,EAAE,CAAC;gBAAC,MAAM,IAAI,qBAAqB,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;YAAC,CAAC;YAChF,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,WAAW,CAAC,CAAC,CAAC;YACxJ,OAAO,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QAC9F,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAAC,MAAM,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QAAC,CAAC;gBACzC,CAAC;YAAC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;gBAAC,KAAK,CAAC,IAAI,EAAE,CAAC;gBAAC,MAAM,KAAK,CAAC,MAAM,CAAC;YAAC,CAAC;QAAC,CAAC;IAC5E,CAAC,CAAC;IAEF,OAAO;QACL,KAAK,CAAC,aAAa;YACjB,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC;YACjD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,SAAS,CAAC,EAAE,CAAC;gBAAC,MAAM,IAAI,qBAAqB,CAAC,kBAAkB,EAAE,IAAI,CAAC,CAAC;YAAC,CAAC;YACrG,OAAO,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACxC,CAAC;QACD,KAAK,CAAC,OAAO,CAAC,MAAM;YAClB,IAAI,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAClE,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;gBAC3B,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;gBAAC,CAAC;YAC7E,CAAC;YACD,6EAA6E;YAC7E,MAAM,KAAK,GAAe,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC;YAC5D,KAAK,MAAM,GAAG,IAAI,CAAC,QAAQ,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,EAAE,OAAO,CAAU,EAAE,CAAC;gBAC7F,IAAI,MAAM,CAAC,GAAG,CAAC,KAAK,SAAS,EAAE,CAAC;oBAAC,KAAK,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;gBAAC,CAAC;YAC9D,CAAC;YACD,OAAO,SAAS,CAAC,MAAM,OAAO,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC;QAClD,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/runtimes/qwen/provider-auth.d.ts

@@ -0,0 +1,66 @@
+import type { ExecutableInstallation } from "../../contracts/installation.js";
+import type { SessionOptions } from "../../contracts/session-options.js";
+export interface QwenProviderAuthOptions {
+    /** Native settings are loaded relative to this directory; defaults to the host cwd. */
+    readonly cwd?: string;
+    /** The session overlay: strings override, null removes. The host is untouched. */
+    readonly env?: SessionOptions["env"];
+    /** Total initialization and request budget per operation, default 30 seconds. Cleanup follows. */
+    readonly timeoutMs?: number;
+}
+/** Qwen's provider menu metadata. Additional native UI fields are retained as JSON. */
+export interface QwenProvider {
+    readonly id: string;
+    readonly label: string;
+    readonly protocol: string;
+    /**
+     * Qwen's existing settings-file configuration, returned unchanged. It excludes
+     * process environment, .env and security.auth.apiKey, and depends on cwd.
+     * Presence (even hasApiKey) is not credential validity; absence is not logout.
+     * Use qwenRuntime.authStatus for the broader local credential observation.
+     */
+    readonly existingConfig?: Readonly<Record<string, unknown>>;
+    readonly [nativeField: string]: unknown;
+}
+export interface QwenProviderConnectOptions {
+    readonly providerId: string;
+    /** Sent only on ACP stdin. Omit to let Qwen reuse a stored key, if it can. */
+    readonly apiKey?: string;
+    readonly baseUrl?: string;
+    readonly protocol?: "openai" | "anthropic" | "gemini";
+    readonly wireApi?: "chat-completions" | "responses";
+    readonly modelIds?: readonly string[];
+    /** Omit to leave the destination to Qwen; 0.26.2 probes observed user settings. */
+    readonly scope?: "user" | "workspace";
+}
+/** Native configuration completion, not a claim that the provider accepts the key. */
+export interface QwenProviderConnectResult {
+    readonly success: true;
+    readonly providerId: string;
+    readonly providerLabel: string;
+    readonly authType: string;
+    readonly modelId?: string;
+    readonly baseUrl?: string;
+}
+/** No OAuth or logout: Qwen's native provider extensions expose neither operation. */
+export interface QwenProviderAuth {
+    /** Starts one bounded native ACP reader. Does not create a conversation or send a prompt. */
+    listProviders(): Promise<readonly QwenProvider[]>;
+    /**
+     * Qwen owns validation, persistence and scope. Success means configuration was
+     * written, not remote authentication; run a turn to test provider acceptance.
+     * A timeout or lost process can leave an unknown write outcome. No automatic retry.
+     */
+    connect(options: QwenProviderConnectOptions): Promise<QwenProviderConnectResult>;
+}
+export type QwenProviderAuthErrorKind = "native" | "timeout" | "process_exited" | "launch_failed" | "invalid_response";
+/** Native ACP code is preserved; raw messages, data, stderr and causes may contain stored keys and are omitted. */
+export declare class QwenProviderAuthError extends Error {
+    readonly kind: QwenProviderAuthErrorKind;
+    readonly method: string;
+    readonly code: number | undefined;
+    constructor(kind: QwenProviderAuthErrorKind, method: string, code?: number);
+}
+/** Create the native provider-settings facade. Processes are started only by its operations. */
+export declare function createQwenProviderAuth(installation: ExecutableInstallation, options?: QwenProviderAuthOptions): Promise<QwenProviderAuth>;
+//# sourceMappingURL=provider-auth.d.ts.map

package/dist/runtimes/qwen/provider-auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider-auth.d.ts","sources":["../../../src/runtimes/qwen/provider-auth.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,iCAAiC,CAAC;AAC9E,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,oCAAoC,CAAC;AAEzE,MAAM,WAAW,uBAAuB;IACtC,uFAAuF;IACvF,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IACtB,kFAAkF;IAClF,QAAQ,CAAC,GAAG,CAAC,EAAE,cAAc,CAAC,KAAK,CAAC,CAAC;IACrC,kGAAkG;IAClG,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED,uFAAuF;AACvF,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B;;;;;OAKG;IACH,QAAQ,CAAC,cAAc,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IAC5D,QAAQ,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC;CACzC;AAED,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,8EAA8E;IAC9E,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,QAAQ,CAAC,EAAE,QAAQ,GAAG,WAAW,GAAG,QAAQ,CAAC;IACtD,QAAQ,CAAC,OAAO,CAAC,EAAE,kBAAkB,GAAG,WAAW,CAAC;IACpD,QAAQ,CAAC,QAAQ,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACtC,mFAAmF;IACnF,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,WAAW,CAAC;CACvC;AAED,sFAAsF;AACtF,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,OAAO,EAAE,IAAI,CAAC;IACvB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,sFAAsF;AACtF,MAAM,WAAW,gBAAgB;IAC/B,6FAA6F;IAC7F,aAAa,IAAI,OAAO,CAAC,SAAS,YAAY,EAAE,CAAC,CAAC;IAClD;;;;OAIG;IACH,OAAO,CAAC,OAAO,EAAE,0BAA0B,GAAG,OAAO,CAAC,yBAAyB,CAAC,CAAC;CAClF;AAED,MAAM,MAAM,yBAAyB,GAAG,QAAQ,GAAG,SAAS,GAAG,gBAAgB,GAAG,eAAe,GAAG,kBAAkB,CAAC;AAEvH,mHAAmH;AACnH,qBAAa,qBAAsB,SAAQ,KAAK;IAC9C,QAAQ,CAAC,IAAI,EAAE,yBAAyB,CAAC;IACzC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,CAAC;IAElC,YAAY,IAAI,EAAE,yBAAyB,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,EAMzE;CACF;AAED,gGAAgG;AAChG,wBAAsB,sBAAsB,CAC1C,YAAY,EAAE,sBAAsB,EACpC,OAAO,GAAE,uBAA4B,GACpC,OAAO,CAAC,gBAAgB,CAAC,CAG3B"}

package/dist/runtimes/qwen/provider-auth.js

@@ -0,0 +1,19 @@
+/** Native ACP code is preserved; raw messages, data, stderr and causes may contain stored keys and are omitted. */
+export class QwenProviderAuthError extends Error {
+    kind;
+    method;
+    code;
+    constructor(kind, method, code) {
+        super(`Qwen ${method} failed: ${kind}${code === undefined ? "" : ` (ACP ${code})`}`);
+        this.name = "QwenProviderAuthError";
+        this.kind = kind;
+        this.method = method;
+        this.code = code;
+    }
+}
+/** Create the native provider-settings facade. Processes are started only by its operations. */
+export async function createQwenProviderAuth(installation, options = {}) {
+    const { qwenProviderAuth } = await import("./provider-auth-rpc.js");
+    return qwenProviderAuth(installation, options);
+}
+//# sourceMappingURL=provider-auth.js.map

package/dist/runtimes/qwen/provider-auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider-auth.js","sources":["../../../src/runtimes/qwen/provider-auth.ts"],"names":[],"mappings":"AA+DA,mHAAmH;AACnH,MAAM,OAAO,qBAAsB,SAAQ,KAAK;IACrC,IAAI,CAA4B;IAChC,MAAM,CAAS;IACf,IAAI,CAAqB;IAElC,YAAY,IAA+B,EAAE,MAAc,EAAE,IAAa;QACxE,KAAK,CAAC,QAAQ,MAAM,YAAY,IAAI,GAAG,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,IAAI,GAAG,EAAE,CAAC,CAAC;QACrF,IAAI,CAAC,IAAI,GAAG,uBAAuB,CAAC;QACpC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACnB,CAAC;CACF;AAED,gGAAgG;AAChG,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,YAAoC,EACpC,OAAO,GAA4B,EAAE;IAErC,MAAM,EAAE,gBAAgB,EAAE,GAAG,MAAM,MAAM,CAAC,wBAAwB,CAAC,CAAC;IACpE,OAAO,gBAAgB,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;AACjD,CAAC"}