@fitlab-ai/agent-infra 0.7.7 → 0.8.0

package/dist/lib/sandbox/commands/create.js

@@ -514,6 +514,58 @@ function readHostJsonSafe(filePath) {
         return null;
     }
 }
+const CLAUDE_SETTINGS_INHERIT_TOP_LEVEL_KEYS = [
+    'model',
+    'fallbackModel',
+    'availableModels',
+    'modelOverrides',
+    'enforceAvailableModels',
+    'advisorModel',
+    'apiKeyHelper',
+    'effortLevel'
+];
+function isJsonObjectRecord(value) {
+    return value !== null && typeof value === 'object' && !Array.isArray(value);
+}
+function mergeMissingStringEnvFields(target, source) {
+    if (!isJsonObjectRecord(source.env)) {
+        return false;
+    }
+    if (Object.hasOwn(target, 'env') && !isJsonObjectRecord(target.env)) {
+        return false;
+    }
+    let targetEnv = target.env;
+    let changed = false;
+    for (const [key, value] of Object.entries(source.env)) {
+        if (typeof value !== 'string' || value === '') {
+            continue;
+        }
+        if (!targetEnv) {
+            targetEnv = {};
+            target.env = targetEnv;
+        }
+        if (!Object.hasOwn(targetEnv, key)) {
+            targetEnv[key] = value;
+            changed = true;
+        }
+    }
+    return changed;
+}
+function mergeMissingTopLevelSettings(target, source) {
+    let changed = false;
+    for (const key of CLAUDE_SETTINGS_INHERIT_TOP_LEVEL_KEYS) {
+        if (!Object.hasOwn(source, key) || Object.hasOwn(target, key)) {
+            continue;
+        }
+        const value = source[key];
+        if (value === null || value === undefined || value === '') {
+            continue;
+        }
+        target[key] = value;
+        changed = true;
+    }
+    return changed;
+}
 export function ensureClaudeOnboarding(toolDir, hostHomeDir) {
     const claudeJsonPath = path.join(toolDir, '.claude.json');
     let data = {};
@@ -592,12 +644,9 @@ export function ensureClaudeSettings(toolDir, hostHomeDir) {
     }
     if (hostHomeDir) {
         const hostSettings = readHostJsonSafe(path.join(hostHomeDir, '.claude', 'settings.json'));
-        if (hostSettings
-            && typeof hostSettings.effortLevel === 'string'
-            && hostSettings.effortLevel !== ''
-            && !Object.hasOwn(data, 'effortLevel')) {
-            data.effortLevel = hostSettings.effortLevel;
-            changed = true;
+        if (hostSettings) {
+            changed = mergeMissingStringEnvFields(data, hostSettings) || changed;
+            changed = mergeMissingTopLevelSettings(data, hostSettings) || changed;
         }
     }
     if (changed) {

package/dist/lib/server/adapters/_contract.js

@@ -0,0 +1,9 @@
+// Adapter contract for agent-infra-server.
+//
+// This is a pure type + constant module: it carries no runtime logic and no
+// third-party imports. Subtask B (the feishu adapter) and subtask C (the
+// command protocol / runner) build against these shapes. Bump
+// ADAPTER_CONTRACT_VERSION on a breaking change so plugin-loader can reject
+// adapters compiled against an older contract.
+export const ADAPTER_CONTRACT_VERSION = 1;
+//# sourceMappingURL=_contract.js.map

package/dist/lib/server/adapters/feishu/index.js

@@ -0,0 +1,40 @@
+import { createFeishuTransport, normalizeMessage } from "./transport.js";
+// Assemble the feishu adapter. The transport is injectable so unit tests can
+// drive start/dispatch/reply/sendMessage against a fake transport without the
+// real SDK; production uses the default SDK-backed transport.
+export function createFeishuAdapter(config, transport = createFeishuTransport(config)) {
+    let ctx = null;
+    return {
+        name: 'feishu',
+        async start(adapterCtx) {
+            ctx = adapterCtx;
+            await transport.start(async (raw) => {
+                try {
+                    const normalized = normalizeMessage(raw);
+                    const message = {
+                        adapter: 'feishu',
+                        userId: normalized.userId,
+                        chatId: normalized.chatId,
+                        text: normalized.text,
+                        messageId: normalized.messageId,
+                        raw: normalized.raw,
+                        reply: (text) => transport.send(normalized.chatId, text)
+                    };
+                    await adapterCtx.dispatch(message);
+                }
+                catch (error) {
+                    ctx?.logger.err(`feishu: dropped message: ${error instanceof Error ? error.message : String(error)}`);
+                }
+            });
+        },
+        async stop() {
+            await transport.stop();
+        },
+        async sendMessage(target, text) {
+            await transport.send(target.chatId, text);
+        }
+    };
+}
+const factory = (adapterConfig) => createFeishuAdapter(adapterConfig);
+export default factory;
+//# sourceMappingURL=index.js.map

package/dist/lib/server/adapters/feishu/transport.js

@@ -0,0 +1,95 @@
+import * as lark from '@larksuiteoapi/node-sdk';
+function asRecord(value) {
+    return typeof value === 'object' && value !== null ? value : {};
+}
+// Strip feishu mention placeholders (e.g. "@_user_1") that the platform injects
+// for @-mentions, then collapse surrounding whitespace. A group message like
+// "@_user_1 /ping" normalizes to "/ping" so the daemon dispatcher matches it.
+function stripMentions(text) {
+    return text.replace(/@_user_\d+/g, ' ').replace(/\s+/g, ' ').trim();
+}
+// Parse an im.message.receive_v1 event into the daemon's shape. Pure: no SDK,
+// no IO. Throws on missing/invalid fields so the adapter can drop a single bad
+// message without crashing the long connection.
+export function normalizeMessage(event) {
+    const message = asRecord(asRecord(event).message);
+    const messageId = message.message_id;
+    const chatId = message.chat_id;
+    const content = message.content;
+    if (typeof messageId !== 'string' || typeof chatId !== 'string' || typeof content !== 'string') {
+        throw new Error('feishu: malformed im.message.receive_v1 event (missing message_id/chat_id/content)');
+    }
+    const senderId = asRecord(asRecord(asRecord(event).sender).sender_id);
+    const userId = (typeof senderId.open_id === 'string' && senderId.open_id) ||
+        (typeof senderId.union_id === 'string' && senderId.union_id) ||
+        (typeof senderId.user_id === 'string' && senderId.user_id) ||
+        '';
+    let parsed;
+    try {
+        parsed = JSON.parse(content);
+    }
+    catch {
+        throw new Error('feishu: message.content is not valid JSON');
+    }
+    const rawText = asRecord(parsed).text;
+    if (typeof rawText !== 'string') {
+        throw new Error('feishu: unsupported message content (no text field)');
+    }
+    return { userId, chatId, text: stripMentions(rawText), messageId, raw: event };
+}
+function resolveDomain(value) {
+    return value === 'lark' || value === 'Lark' ? lark.Domain.Lark : lark.Domain.Feishu;
+}
+// Build the real SDK-backed transport from adapter config. appId/appSecret come
+// from server config (appSecret only via server.local.json / env). The WSClient
+// long connection delivers events; the Client REST call sends replies.
+// Feishu self-built app IDs have this shape; the SDK's WSClient.start() silently
+// rejects anything else, so we validate up front to fail loudly instead.
+const APP_ID_PATTERN = /^cli_[0-9a-fA-F]{16}$/;
+export function createFeishuTransport(config) {
+    const appId = String(config.appId ?? '').trim();
+    const appSecret = String(config.appSecret ?? '').trim();
+    const domain = resolveDomain(config.domain);
+    // Fail fast on missing or malformed credentials. The SDK only logs to its own
+    // logger and resolves WSClient.start() for an empty or malformed appId, so
+    // without these checks an enabled-but-misconfigured feishu adapter would be
+    // counted as loaded while the long connection never opens. Throwing here lets
+    // loadAdapters log `failed to load adapter "feishu": ...` and skip it.
+    if (appId === '' || appSecret === '') {
+        throw new Error('feishu: appId and appSecret are required; put appSecret in .agents/server.local.json or AGENT_INFRA_SERVER_adapters__feishu__appSecret');
+    }
+    if (!APP_ID_PATTERN.test(appId)) {
+        throw new Error('feishu: appId must match cli_[0-9a-fA-F]{16}');
+    }
+    const client = new lark.Client({ appId, appSecret, domain });
+    const wsClient = new lark.WSClient({ appId, appSecret, domain, loggerLevel: lark.LoggerLevel.warn });
+    return {
+        async start(onMessage) {
+            const eventDispatcher = new lark.EventDispatcher({}).register({
+                'im.message.receive_v1': async (data) => {
+                    await onMessage(data);
+                }
+            });
+            wsClient.start({ eventDispatcher });
+        },
+        async stop() {
+            // Best-effort: close the long connection if the SDK exposes it. Never throw
+            // from shutdown — unloadAdapters isolates stop failures, but staying quiet
+            // keeps the daemon shutdown path clean.
+            const closable = wsClient;
+            try {
+                closable.close?.();
+            }
+            catch {
+                // Ignore: the daemon is shutting down regardless.
+            }
+        },
+        async send(chatId, text) {
+            await client.im.message.create({
+                params: { receive_id_type: 'chat_id' },
+                data: { receive_id: chatId, msg_type: 'text', content: JSON.stringify({ text }) }
+            });
+        }
+    };
+}
+//# sourceMappingURL=transport.js.map

package/dist/lib/server/auth.js

@@ -0,0 +1,19 @@
+const ROLE_RANK = { read: 1, write: 2, exec: 3 };
+function userRole(auth, key) {
+    const users = auth.users;
+    if (!users || typeof users !== 'object' || Array.isArray(users))
+        return null;
+    const record = users[key];
+    if (!record || typeof record !== 'object' || Array.isArray(record))
+        return null;
+    const role = record.role;
+    return role === 'read' || role === 'write' || role === 'exec' ? role : null;
+}
+export function authorize(user, required, auth) {
+    const role = userRole(auth ?? {}, `${user.adapter}:${user.userId}`);
+    if (!role || ROLE_RANK[role] < ROLE_RANK[required]) {
+        return { ok: false, message: `requires ${required}` };
+    }
+    return { ok: true };
+}
+//# sourceMappingURL=auth.js.map

package/dist/lib/server/config.js

@@ -0,0 +1,183 @@
+import fs from 'node:fs';
+import path from 'node:path';
+import { homedir } from 'node:os';
+import { createHash } from 'node:crypto';
+import { execFileSync } from 'node:child_process';
+const ENV_PREFIX = 'AGENT_INFRA_SERVER_';
+// Keys whose presence in the *committed* server.json is treated as a leaked
+// secret. Secrets belong in .agents/server.local.json or the environment.
+const SECRET_KEY_PATTERN = /secret|token|password|passwd|credential|apikey|api_key/i;
+const DEFAULT_ROTATE_BYTES = 52_428_800; // 50 MiB
+export const DEFAULT_SERVER_CONFIG = {
+    log: { rotateAtBytes: DEFAULT_ROTATE_BYTES },
+    heartbeatMs: 30_000,
+    adapters: {}
+};
+function isPlainObject(value) {
+    return typeof value === 'object' && value !== null && !Array.isArray(value);
+}
+// Daemon runtime state (log + PID) lives OUTSIDE the repo, under the user's home
+// directory, keyed by the .airc.json "project" AND a stable hash of the repo
+// root path:
+//   ~/.agent-infra/logs/<project>/<repo-hash>/server.log
+//   ~/.agent-infra/run/<project>/<repo-hash>/server.pid
+// The <project> segment groups a project's checkouts for readability; the
+// <repo-hash> segment guarantees that two checkouts/worktrees of the same
+// project (same "project" but different absolute path) get ISOLATED runtime
+// dirs, so they never read/control each other's daemon. Using os.homedir() +
+// path.join keeps this correct on Windows too (C:\Users\<name>\.agent-infra\...).
+// An explicit log.path in server.json/.local/env still overrides the log default.
+function resolveProjectKey(repoRoot) {
+    try {
+        const airc = JSON.parse(fs.readFileSync(path.join(repoRoot, '.agents', '.airc.json'), 'utf8'));
+        if (typeof airc.project === 'string' && airc.project.trim() !== '') {
+            return airc.project.trim();
+        }
+    }
+    catch {
+        // No .airc.json / unreadable → fall back to the repo directory name.
+    }
+    return path.basename(repoRoot);
+}
+// Short, stable, filesystem-safe discriminator for a checkout's absolute path.
+function repoKey(repoRoot) {
+    return createHash('sha256').update(repoRoot).digest('hex').slice(0, 12);
+}
+function runtimePath(repoRoot, projectKey, kind, file) {
+    return path.join(homedir(), '.agent-infra', kind, projectKey, repoKey(repoRoot), file);
+}
+function detectRepoRoot() {
+    try {
+        return execFileSync('git', ['rev-parse', '--show-toplevel'], {
+            encoding: 'utf8',
+            stdio: ['pipe', 'pipe', 'pipe']
+        }).trim();
+    }
+    catch {
+        throw new Error('server: current directory is not inside a git repository');
+    }
+}
+// Plain-object deep merge: objects recurse, everything else (arrays, scalars)
+// replaces. Intentionally small — server config is shallow and this avoids
+// coupling to lib/merge.ts, whose semantics target the task workspace.
+function deepMerge(base, override) {
+    const result = { ...base };
+    for (const [key, value] of Object.entries(override)) {
+        const current = result[key];
+        if (isPlainObject(current) && isPlainObject(value)) {
+            result[key] = deepMerge(current, value);
+        }
+        else {
+            result[key] = value;
+        }
+    }
+    return result;
+}
+function readJsonIfPresent(filePath) {
+    if (!fs.existsSync(filePath))
+        return {};
+    const parsed = JSON.parse(fs.readFileSync(filePath, 'utf8'));
+    if (!isPlainObject(parsed)) {
+        throw new Error(`server: ${path.basename(filePath)} must contain a JSON object`);
+    }
+    return parsed;
+}
+function coerceEnvValue(raw) {
+    if (raw === 'true')
+        return true;
+    if (raw === 'false')
+        return false;
+    if (raw !== '' && !Number.isNaN(Number(raw)))
+        return Number(raw);
+    return raw;
+}
+// Map AGENT_INFRA_SERVER_<path> env vars into a nested override object. The
+// path after the prefix uses `__` to separate nesting levels and is treated
+// case-sensitively (e.g. AGENT_INFRA_SERVER_adapters__dev__enabled=false ->
+// { adapters: { dev: { enabled: false } } }).
+function envOverrides(env) {
+    const override = {};
+    for (const [key, rawValue] of Object.entries(env)) {
+        if (!key.startsWith(ENV_PREFIX) || rawValue === undefined)
+            continue;
+        const segments = key.slice(ENV_PREFIX.length).split('__').filter(Boolean);
+        if (segments.length === 0)
+            continue;
+        let cursor = override;
+        for (let i = 0; i < segments.length - 1; i += 1) {
+            const segment = segments[i];
+            const next = cursor[segment];
+            if (!isPlainObject(next)) {
+                cursor[segment] = {};
+            }
+            cursor = cursor[segment];
+        }
+        cursor[segments[segments.length - 1]] = coerceEnvValue(rawValue);
+    }
+    return override;
+}
+// Collect dotted paths of secret-looking, non-empty string fields.
+function collectSecretFields(value, trail = []) {
+    if (!isPlainObject(value))
+        return [];
+    const found = [];
+    for (const [key, child] of Object.entries(value)) {
+        const here = [...trail, key];
+        if (SECRET_KEY_PATTERN.test(key) && typeof child === 'string' && child.trim() !== '') {
+            found.push(here.join('.'));
+        }
+        else if (isPlainObject(child)) {
+            found.push(...collectSecretFields(child, here));
+        }
+    }
+    return found;
+}
+// Reject secrets that live in the committed server.json. server.local.json and
+// the environment are the sanctioned places for secrets and are not scanned.
+export function validateServerConfig(committed) {
+    const fields = collectSecretFields(committed);
+    if (fields.length > 0) {
+        return {
+            ok: false,
+            fields,
+            error: `server: refusing to start — secret-like field(s) found in committed .agents/server.json: ${fields.join(', ')}. ` +
+                'Move them to .agents/server.local.json or AGENT_INFRA_SERVER_* environment variables.'
+        };
+    }
+    return { ok: true };
+}
+export function loadServerConfig({ rootDir } = {}) {
+    const repoRoot = rootDir ?? detectRepoRoot();
+    const agentsDir = path.join(repoRoot, '.agents');
+    const committed = readJsonIfPresent(path.join(agentsDir, 'server.json'));
+    const validation = validateServerConfig(committed);
+    if (!validation.ok) {
+        throw new Error(validation.error);
+    }
+    const local = readJsonIfPresent(path.join(agentsDir, 'server.local.json'));
+    let merged = deepMerge({ log: { rotateAtBytes: DEFAULT_ROTATE_BYTES }, heartbeatMs: DEFAULT_SERVER_CONFIG.heartbeatMs, adapters: {} }, committed);
+    merged = deepMerge(merged, local);
+    merged = deepMerge(merged, envOverrides(process.env));
+    const projectKey = resolveProjectKey(repoRoot);
+    const log = isPlainObject(merged.log) ? merged.log : {};
+    // No explicit log.path → default under ~/.agent-infra/logs/<project>/.
+    // Explicit relative path resolves against the repo root; absolute is used as-is.
+    const explicitPath = typeof log.path === 'string' ? log.path : null;
+    const resolvedLogPath = explicitPath === null
+        ? runtimePath(repoRoot, projectKey, 'logs', 'server.log')
+        : (path.isAbsolute(explicitPath) ? explicitPath : path.join(repoRoot, explicitPath));
+    return {
+        repoRoot,
+        pidFile: runtimePath(repoRoot, projectKey, 'run', 'server.pid'),
+        log: {
+            path: resolvedLogPath,
+            rotateAtBytes: typeof log.rotateAtBytes === 'number' ? log.rotateAtBytes : DEFAULT_ROTATE_BYTES
+        },
+        heartbeatMs: typeof merged.heartbeatMs === 'number' ? merged.heartbeatMs : DEFAULT_SERVER_CONFIG.heartbeatMs,
+        adapters: isPlainObject(merged.adapters) ? merged.adapters : {},
+        command: isPlainObject(merged.command) ? merged.command : undefined,
+        auth: isPlainObject(merged.auth) ? merged.auth : undefined,
+        stream: isPlainObject(merged.stream) ? merged.stream : undefined
+    };
+}
+//# sourceMappingURL=config.js.map

package/dist/lib/server/daemon.js

@@ -0,0 +1,96 @@
+import { VERSION } from "../version.js";
+import { loadServerConfig } from "./config.js";
+import { createLogger } from "./logger.js";
+import { loadAdapters, unloadAdapters } from "./plugin-loader.js";
+import { authorize } from "./auth.js";
+import { commandHelp, parseCommand } from "./protocol.js";
+import { runAi } from "./runner.js";
+import { streamCommand } from "./streamer.js";
+function errorMessage(error) {
+    return error instanceof Error ? error.message : String(error);
+}
+// The daemon main loop. Runs in the detached child spawned by
+// process-control.start(), or in the foreground for debugging.
+//
+// Lifecycle (keep-alive / shutdown model):
+//   - The heartbeat interval is kept *ref'd*. It is both the keep-alive that
+//     holds the event loop open while subtask A has no adapters, and the
+//     observable signal that `ai server logs -f` shows.
+//   - runDaemon() awaits a shutdown promise that only resolves once a
+//     SIGINT/SIGTERM handler has finished graceful cleanup. We never unref()
+//     the only keep-alive timer (that would let the process exit immediately).
+export async function runDaemon() {
+    let config;
+    try {
+        config = loadServerConfig();
+    }
+    catch (error) {
+        process.stderr.write(`${errorMessage(error)}\n`);
+        process.exit(1);
+    }
+    const logger = createLogger(config.log);
+    logger.info(`daemon starting agent-infra ${VERSION} pid=${process.pid}`);
+    const abortController = new AbortController();
+    let resolveShutdown = () => { };
+    const shutdown = new Promise((resolve) => {
+        resolveShutdown = resolve;
+    });
+    const dispatch = async (message) => {
+        const plan = parseCommand(message.text);
+        if (plan.kind === 'ignore')
+            return;
+        if (plan.kind === 'error') {
+            await message.reply(plan.message);
+            logger.info(`command rejected from ${message.adapter}:${message.userId}: ${plan.message}`);
+            return;
+        }
+        if (plan.kind === 'builtin' && plan.name === 'ping') {
+            await message.reply(`pong ${VERSION}`);
+            return;
+        }
+        if (plan.kind === 'builtin' && plan.name === 'help') {
+            await message.reply(commandHelp());
+            return;
+        }
+        if (plan.kind === 'builtin' && plan.name === 'version') {
+            await message.reply(`agent-infra ${VERSION}`);
+            return;
+        }
+        if (plan.kind === 'ai') {
+            const allowed = authorize({ adapter: message.adapter, userId: message.userId }, plan.role, config.auth);
+            if (!allowed.ok) {
+                await message.reply(allowed.message);
+                logger.info(`unauthorized command from ${message.adapter}:${message.userId}: ${allowed.message}`);
+                return;
+            }
+            await streamCommand({
+                title: `ai ${plan.argv.join(' ')}`,
+                chunkChars: typeof config.stream?.chunkChars === 'number' ? config.stream.chunkChars : 4000,
+                throttleMs: typeof config.stream?.throttleMs === 'number' ? config.stream.throttleMs : 1500
+            }, (emit) => runAi(plan.argv, { onChunk: emit }), (text) => message.reply(text));
+        }
+    };
+    const ctx = { config, logger, dispatch, signal: abortController.signal };
+    const adapters = await loadAdapters(config, ctx);
+    logger.ok(`loaded ${adapters.length} adapter(s)`);
+    const heartbeat = setInterval(() => logger.info('heartbeat'), config.heartbeatMs);
+    let shuttingDown = false;
+    const handleSignal = (signal) => {
+        if (shuttingDown)
+            return;
+        shuttingDown = true;
+        logger.info(`received ${signal}, shutting down`);
+        abortController.abort();
+        void (async () => {
+            await unloadAdapters(adapters);
+            clearInterval(heartbeat);
+            logger.close();
+            resolveShutdown();
+        })();
+    };
+    process.on('SIGINT', () => handleSignal('SIGINT'));
+    process.on('SIGTERM', () => handleSignal('SIGTERM'));
+    await shutdown;
+    process.exit(0);
+}
+//# sourceMappingURL=daemon.js.map

package/dist/lib/server/index.js

@@ -0,0 +1,47 @@
+import { runDaemon } from "./daemon.js";
+import { start, stop, status, logs } from "./process-control.js";
+const USAGE = `Usage: ai server <command> [options]
+
+Commands:
+  start [--foreground]   Start the local daemon (detached; --foreground stays attached for debugging)
+  stop                   Stop the running daemon
+  status                 Show whether the daemon is running
+  logs [-f | --follow]   Print the daemon log ('-f' to follow new lines)
+  help                   Show this help message
+
+The daemon hosts IM adapters and command routing for agent-infra.`;
+export async function runServer(args) {
+    const [subcommand, ...rest] = args;
+    if (!subcommand) {
+        process.stdout.write(`${USAGE}\n`);
+        process.exitCode = 1;
+        return;
+    }
+    if (subcommand === 'help' || subcommand === '--help' || subcommand === '-h') {
+        process.stdout.write(`${USAGE}\n`);
+        return;
+    }
+    switch (subcommand) {
+        case 'start':
+            await start({ foreground: rest.includes('--foreground') });
+            break;
+        case 'stop':
+            await stop();
+            break;
+        case 'status':
+            status();
+            break;
+        case 'logs':
+            await logs({ follow: rest.includes('-f') || rest.includes('--follow') });
+            break;
+        // Internal entry point for the detached daemon child (not shown in USAGE).
+        case '__daemon':
+            await runDaemon();
+            break;
+        default:
+            process.stderr.write(`Unknown server command: ${subcommand}\n`);
+            process.stdout.write(`${USAGE}\n`);
+            process.exitCode = 1;
+    }
+}
+//# sourceMappingURL=index.js.map

package/dist/lib/server/logger.js

@@ -0,0 +1,34 @@
+import fs from 'node:fs';
+import path from 'node:path';
+// Startup-only rotation: if the existing log already exceeds the threshold,
+// move it aside to `<path>.1` before the daemon starts appending. We do not
+// rotate again while running — keeping a single append stream is simpler and
+// good enough for a local daemon log.
+function rotateIfOversized(logPath, rotateAtBytes) {
+    try {
+        const { size } = fs.statSync(logPath);
+        if (size > rotateAtBytes) {
+            fs.renameSync(logPath, `${logPath}.1`);
+        }
+    }
+    catch {
+        // No existing log file (or stat failed) → nothing to rotate.
+    }
+}
+export function createLogger({ path: logPath, rotateAtBytes }) {
+    fs.mkdirSync(path.dirname(logPath), { recursive: true });
+    rotateIfOversized(logPath, rotateAtBytes);
+    const write = (level, message) => {
+        const line = `[${new Date().toISOString()}] [${level}] ${message}\n`;
+        fs.appendFileSync(logPath, line);
+    };
+    return {
+        info: (message) => write('INFO', message),
+        ok: (message) => write('OK', message),
+        err: (message) => write('ERROR', message),
+        // Synchronous appendFileSync keeps no open handle to flush; close() exists
+        // so the daemon shutdown path has a single, stable hook to call.
+        close: () => { }
+    };
+}
+//# sourceMappingURL=logger.js.map

package/dist/lib/server/plugin-loader.js

@@ -0,0 +1,73 @@
+var __rewriteRelativeImportExtension = (this && this.__rewriteRelativeImportExtension) || function (path, preserveJsx) {
+    if (typeof path === "string" && /^\.\.?\//.test(path)) {
+        return path.replace(/\.(tsx)$|((?:\.d)?)((?:\.[^./]+?)?)\.([cm]?)ts$/i, function (m, tsx, d, ext, cm) {
+            return tsx ? preserveJsx ? ".jsx" : ".js" : d && (!ext || !cm) ? m : (d + ext + "." + cm.toLowerCase() + "js");
+        });
+    }
+    return path;
+};
+import path from 'node:path';
+import { pathToFileURL } from 'node:url';
+const defaultImportAdapter = (name) => {
+    // Test-only seam: when AGENT_INFRA_SERVER_TEST_ADAPTERS_DIR is set (never in
+    // production), resolve the named adapter as a plain ESM `.js` from that
+    // fixtures dir. This lets a built daemon (`node dist/bin/cli.js`) load a test
+    // injection adapter on any node>=22 without depending on type stripping.
+    const testDir = process.env.AGENT_INFRA_SERVER_TEST_ADAPTERS_DIR;
+    if (testDir) {
+        return import(__rewriteRelativeImportExtension(pathToFileURL(path.join(testDir, name, 'index.js')).href));
+    }
+    return import(__rewriteRelativeImportExtension(`./adapters/${name}/index.ts`));
+};
+function errorMessage(error) {
+    return error instanceof Error ? error.message : String(error);
+}
+function isAdapter(value) {
+    if (typeof value !== 'object' || value === null)
+        return false;
+    const candidate = value;
+    return (typeof candidate.name === 'string' &&
+        typeof candidate.start === 'function' &&
+        typeof candidate.stop === 'function' &&
+        typeof candidate.sendMessage === 'function');
+}
+// Load every adapter whose config has `enabled === true`. Each adapter is
+// loaded, instantiated and started in isolation: a failure in one adapter is
+// logged and skipped so it never blocks the others.
+export async function loadAdapters(config, ctx, options = {}) {
+    const importAdapter = options.importAdapter ?? defaultImportAdapter;
+    const loaded = [];
+    for (const [name, adapterConfig] of Object.entries(config.adapters)) {
+        if (adapterConfig?.enabled !== true)
+            continue;
+        try {
+            const mod = (await importAdapter(name));
+            const factory = mod?.default;
+            if (typeof factory !== 'function') {
+                throw new Error(`adapter "${name}" has no default export factory`);
+            }
+            const instance = factory(adapterConfig);
+            if (!isAdapter(instance)) {
+                throw new Error(`adapter "${name}" does not satisfy the Adapter contract`);
+            }
+            await instance.start(ctx);
+            loaded.push(instance);
+        }
+        catch (error) {
+            ctx.logger.err(`failed to load adapter "${name}": ${errorMessage(error)}`);
+        }
+    }
+    return loaded;
+}
+// Stop adapters in reverse load order, isolating per-adapter stop failures.
+export async function unloadAdapters(adapters) {
+    for (const adapter of [...adapters].reverse()) {
+        try {
+            await adapter.stop();
+        }
+        catch {
+            // A failing stop must not block the rest of shutdown.
+        }
+    }
+}
+//# sourceMappingURL=plugin-loader.js.map