qwen-agent-server 0.11.1

package/dist/embed.js

@@ -0,0 +1,92 @@
+// SPDX-License-Identifier: MIT
+//
+// embed.ts — direct-HTTP dispatch for `qwen_embed`.
+//
+// llama-server exposes /v1/embeddings (OpenAI-compat) when started with
+// `--embedding` and an embedding-capable model (e.g. bge-m3,
+// qwen3-embedding-0.6b). The SDK is text-chat only and doesn't surface
+// this endpoint; we POST directly via the shared OpenAI-compat helper.
+import { createLogger } from "./log.js";
+import { dispatchOpenAIPost } from "./openai-compat.js";
+const log = createLogger("qwen-embed");
+const DEFAULT_TIMEOUT_MS = 60_000;
+/**
+ * POST to a backend's /v1/embeddings with one-or-many text inputs.
+ * Never throws; failures encoded in result.error.
+ */
+export async function dispatchEmbed(backend, texts, opts = {}) {
+    const timeout_ms = opts.timeout_ms ?? DEFAULT_TIMEOUT_MS;
+    const body = {
+        model: backend.model,
+        input: texts.length === 1 ? texts[0] : texts,
+    };
+    if (opts.encoding_format !== undefined) {
+        body.encoding_format = opts.encoding_format;
+    }
+    const outcome = await dispatchOpenAIPost(backend, "/v1/embeddings", body, {
+        timeout_ms,
+    });
+    if (!outcome.ok) {
+        if (outcome.status !== undefined) {
+            log.warn({
+                backend_id: backend.id,
+                status: outcome.status,
+                body_excerpt: outcome.body_text?.slice(0, 200),
+            }, "embed dispatch HTTP failure");
+        }
+        return {
+            ok: false,
+            elapsed_ms: outcome.elapsed_ms,
+            backend_id: backend.id,
+            error: outcome.error,
+        };
+    }
+    let parsed;
+    try {
+        parsed = JSON.parse(outcome.body_text);
+    }
+    catch (err) {
+        return {
+            ok: false,
+            elapsed_ms: outcome.elapsed_ms,
+            backend_id: backend.id,
+            error: {
+                code: "backend_error",
+                message: `non-JSON response: ${err.message}`,
+            },
+        };
+    }
+    if (!Array.isArray(parsed.data) || parsed.data.length === 0) {
+        return {
+            ok: false,
+            elapsed_ms: outcome.elapsed_ms,
+            backend_id: backend.id,
+            error: { code: "no_data", message: "backend returned empty data array" },
+        };
+    }
+    // Reassemble in input order (data[].index can be sparse on some servers).
+    const ordered = [...parsed.data].sort((a, b) => (a.index ?? 0) - (b.index ?? 0));
+    const embeddings = ordered
+        .map((d) => d.embedding)
+        .filter((e) => Array.isArray(e));
+    if (embeddings.length !== texts.length) {
+        return {
+            ok: false,
+            elapsed_ms: outcome.elapsed_ms,
+            backend_id: backend.id,
+            error: {
+                code: "no_data",
+                message: `expected ${texts.length} embeddings, got ${embeddings.length}`,
+            },
+        };
+    }
+    return {
+        ok: true,
+        embeddings,
+        ...(parsed.usage !== undefined ? { usage: parsed.usage } : {}),
+        ...(parsed.model !== undefined ? { model: parsed.model } : {}),
+        elapsed_ms: outcome.elapsed_ms,
+        backend_id: backend.id,
+    };
+}
+//# sourceMappingURL=embed.js.map

package/dist/embed.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"embed.js","sourceRoot":"","sources":["../src/embed.ts"],"names":[],"mappings":"AAAA,+BAA+B;AAC/B,EAAE;AACF,oDAAoD;AACpD,EAAE;AACF,wEAAwE;AACxE,6DAA6D;AAC7D,uEAAuE;AACvE,uEAAuE;AAEvE,OAAO,EAAE,YAAY,EAAE,MAAM,UAAU,CAAC;AACxC,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AAGxD,MAAM,GAAG,GAAG,YAAY,CAAC,YAAY,CAAC,CAAC;AAuCvC,MAAM,kBAAkB,GAAG,MAAM,CAAC;AAElC;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,OAAgB,EAChB,KAAe,EACf,OAAkB,EAAE;IAEpB,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,IAAI,kBAAkB,CAAC;IAEzD,MAAM,IAAI,GAA4B;QACpC,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,KAAK,EAAE,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK;KAC7C,CAAC;IACF,IAAI,IAAI,CAAC,eAAe,KAAK,SAAS,EAAE,CAAC;QACvC,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC,eAAe,CAAC;IAC9C,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,kBAAkB,CAAC,OAAO,EAAE,gBAAgB,EAAE,IAAI,EAAE;QACxE,UAAU;KACX,CAAC,CAAC;IAEH,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;QAChB,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YACjC,GAAG,CAAC,IAAI,CACN;gBACE,UAAU,EAAE,OAAO,CAAC,EAAE;gBACtB,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,YAAY,EAAE,OAAO,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;aAC/C,EACD,6BAA6B,CAC9B,CAAC;QACJ,CAAC;QACD,OAAO;YACL,EAAE,EAAE,KAAK;YACT,UAAU,EAAE,OAAO,CAAC,UAAU;YAC9B,UAAU,EAAE,OAAO,CAAC,EAAE;YACtB,KAAK,EAAE,OAAO,CAAC,KAAK;SACrB,CAAC;IACJ,CAAC;IAED,IAAI,MAIH,CAAC;IACF,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IACzC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO;YACL,EAAE,EAAE,KAAK;YACT,UAAU,EAAE,OAAO,CAAC,UAAU;YAC9B,UAAU,EAAE,OAAO,CAAC,EAAE;YACtB,KAAK,EAAE;gBACL,IAAI,EAAE,eAAe;gBACrB,OAAO,EAAE,sBAAuB,GAAa,CAAC,OAAO,EAAE;aACxD;SACF,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5D,OAAO;YACL,EAAE,EAAE,KAAK;YACT,UAAU,EAAE,OAAO,CAAC,UAAU;YAC9B,UAAU,EAAE,OAAO,CAAC,EAAE;YACtB,KAAK,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,mCAAmC,EAAE;SACzE,CAAC;IACJ,CAAC;IAED,0EAA0E;IAC1E,MAAM,OAAO,GAAG,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CACnC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,CAC1C,CAAC;IACF,MAAM,UAAU,GAAG,OAAO;SACvB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;SACvB,MAAM,CAAC,CAAC,CAAC,EAAiB,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;IAElD,IAAI,UAAU,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,EAAE,CAAC;QACvC,OAAO;YACL,EAAE,EAAE,KAAK;YACT,UAAU,EAAE,OAAO,CAAC,UAAU;YAC9B,UAAU,EAAE,OAAO,CAAC,EAAE;YACtB,KAAK,EAAE;gBACL,IAAI,EAAE,SAAS;gBACf,OAAO,EAAE,YAAY,KAAK,CAAC,MAAM,oBAAoB,UAAU,CAAC,MAAM,EAAE;aACzE;SACF,CAAC;IACJ,CAAC;IAED,OAAO;QACL,EAAE,EAAE,IAAI;QACR,UAAU;QACV,GAAG,CAAC,MAAM,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9D,GAAG,CAAC,MAAM,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9D,UAAU,EAAE,OAAO,CAAC,UAAU;QAC9B,UAAU,EAAE,OAAO,CAAC,EAAE;KACvB,CAAC;AACJ,CAAC"}

package/dist/extensions.js

@@ -0,0 +1,497 @@
+// SPDX-License-Identifier: MIT
+//
+// Per-spawn extension loadout helpers — RDR-002.
+//
+// This module exposes the supervisor-side bridge between Claude's
+// orchestrator and the Qwen Code CLI's extensions surface:
+//
+//   resolveQwenRealBin(env, whichFn?)  — resolve the real qwen binary
+//     path the wrapper script will exec. Called once at supervisor
+//     startup; result is cached on the handlers/pool context and
+//     forwarded to every session via QueryOptions.env.QWEN_REAL_BIN.
+//
+//   resolveWrapperPath()  — absolute path to the bash wrapper shipped
+//     in this package at scripts/qwen-extensions-wrapper.sh. The
+//     wrapper is a fixed file; per-session variation is via env vars
+//     (QWEN_REAL_BIN, QWEN_AGENT_EXTENSIONS).
+//
+//   parseInstalledExtensions(stdout)  — pure parser for `qwen
+//     extensions list` output. Returns the list of installed names
+//     (lowercased) or [] on empty / unparseable input. Never throws.
+//
+//   createInstalledExtensionsCache(qwenRealBin, execFn?)  — async
+//     factory returning a cache object with get/reload/size methods.
+//     Initial population shells out to `<qwenRealBin> extensions list`;
+//     execFn is injected for testability.
+//
+// Subsequent phases will add the resolveExtensions(opts, sessionDefault,
+// installedCache) algorithm and the qwen_spawn handler integration.
+import { execFile, execFileSync } from "node:child_process";
+import { statSync } from "node:fs";
+import { dirname, resolve } from "node:path";
+import { fileURLToPath } from "node:url";
+import { createLogger } from "./log.js";
+import { readConfigDefaultExtensions } from "./backends.js";
+const log = createLogger("qwen-extensions");
+/**
+ * Default `which` implementation used when a caller doesn't inject one.
+ * Returns the resolved absolute path or null if the command is not on
+ * PATH. Never throws.
+ */
+function defaultWhich(cmd) {
+    try {
+        const out = execFileSync("/usr/bin/env", ["which", cmd], {
+            encoding: "utf8",
+            stdio: ["ignore", "pipe", "ignore"],
+        }).trim();
+        return out === "" ? null : out;
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * Resolve the real qwen binary path the wrapper script will `exec`.
+ *
+ * Policy (RDR-002 §The wrapper-script bridge → QWEN_REAL_BIN bullet):
+ *
+ *   1. If `env.QWEN_REAL_BIN` is set and non-empty, honour it verbatim.
+ *      Verify the path exists and has any executable bit set; throw
+ *      with a descriptive message on miss. The supervisor exits
+ *      non-zero at startup rather than failing at first spawn.
+ *   2. Else, run `which qwen`. If empty/null, throw — the supervisor
+ *      cannot start without a resolvable qwen binary.
+ *
+ * The `whichFn` parameter is injected for testability; production code
+ * leaves it undefined and `defaultWhich` is used.
+ */
+export function resolveQwenRealBin(env, whichFn) {
+    const override = env["QWEN_REAL_BIN"];
+    if (override !== undefined && override !== "") {
+        let mode;
+        try {
+            const stat = statSync(override);
+            if (!stat.isFile()) {
+                throw new Error(`QWEN_REAL_BIN=${override} is not a regular file`);
+            }
+            mode = stat.mode;
+        }
+        catch (err) {
+            // Re-throw our own descriptive errors; wrap fs errors with the path.
+            if (err instanceof Error && err.message.startsWith("QWEN_REAL_BIN=")) {
+                throw err;
+            }
+            throw new Error(`QWEN_REAL_BIN=${override} does not exist or is not accessible`);
+        }
+        if ((mode & 0o111) === 0) {
+            throw new Error(`QWEN_REAL_BIN=${override} exists but is not executable (mode bits 0o111 unset)`);
+        }
+        return override;
+    }
+    const which = whichFn ?? defaultWhich;
+    const found = which("qwen");
+    if (found === null || found === "") {
+        throw new Error("QWEN_REAL_BIN unset and 'qwen' not on PATH — install Qwen Code or set QWEN_REAL_BIN");
+    }
+    return found;
+}
+/**
+ * Absolute path to the wrapper script shipped at
+ * `mcp-bridges/qwen-agent-server/scripts/qwen-extensions-wrapper.sh`.
+ *
+ * Resolution is anchored on `import.meta.url` so the same code works
+ * whether the module loads from `src/` (during tests) or from `dist/`
+ * (after `tsc` build) — both sit one level below the package root.
+ */
+export function resolveWrapperPath() {
+    const here = dirname(fileURLToPath(import.meta.url));
+    return resolve(here, "..", "scripts", "qwen-extensions-wrapper.sh");
+}
+// ─────────────────────────────────────────────────────────────────
+// Installed-extensions cache
+/**
+ * Strip ANSI SGR escape sequences (chalk emits these around status
+ * glyphs) so the parser can match plain-text content.
+ */
+const ANSI_RE = /\x1b\[[0-9;]*m/g;
+/**
+ * First-line header of an extension block emitted by
+ * `extensionToOutputString` (cli.js:456690):
+ *
+ *     <glyph> <name> (<version>)
+ *
+ * where `<glyph>` is `✓` (U+2713) or `✗` (U+2717) and `<name>` is the
+ * `config.name` field of the extension manifest. The glyph is REQUIRED:
+ * `extensionToOutputString` only emits a leading-space-only line in
+ * `inline2 = true` mode, which `handleList` (cli.js:456770) does not
+ * pass. Requiring the glyph narrows the regex so unrelated lines that
+ * happen to end with `(something)` cannot accidentally register as
+ * extension names if a future block-separator change causes the
+ * `\n{2,}` split to miss boundaries.
+ *
+ * The version sub-pattern `[^()]+` deliberately rejects nested parens,
+ * which keeps the second-line ` Source: ... (Type: ...)` from
+ * accidentally matching when block boundaries don't separate cleanly.
+ */
+const HEADER_RE = /^\s*[✓✗]\s+(.+?)\s+\([^()]+\)\s*$/;
+/**
+ * Parse `qwen extensions list` stdout and return the lowercased
+ * `config.name` of each installed extension.
+ *
+ * Fail-soft per RDR-002 audit-note #4: empty input, the
+ * "No extensions installed." sentinel, and unrecognized output all
+ * yield `[]` rather than throwing — an upstream output-format change
+ * degrades gracefully (cache populates empty; future spawns reject
+ * unknown names) instead of bricking the supervisor.
+ */
+export function parseInstalledExtensions(stdout) {
+    return parseInstalledExtensionsRich(stdout).map((e) => e.name);
+}
+/**
+ * Parse `qwen extensions list` stdout into structured per-extension
+ * records. Mirrors `extensionToOutputString` in cli.js:456690 — each
+ * block is joined by `\n\n` and starts with `<glyph> <name> (<version>)`.
+ *
+ * Fail-soft: on empty / sentinel / unparseable input, returns `[]`.
+ * Individual fields that don't match expected line patterns are simply
+ * omitted from the record; we never throw.
+ */
+export function parseInstalledExtensionsRich(stdout) {
+    if (typeof stdout !== "string")
+        return [];
+    const cleaned = stdout.replace(ANSI_RE, "");
+    if (cleaned.trim() === "")
+        return [];
+    if (/no extensions installed/i.test(cleaned))
+        return [];
+    const blocks = cleaned.split(/\n{2,}/);
+    const out = [];
+    for (const block of blocks) {
+        const lines = block.split("\n");
+        const firstLine = lines[0]?.trim() ?? "";
+        if (firstLine === "")
+            continue;
+        // Header match: glyph + name + (version)
+        const headerMatch = /^\s*([✓✗])\s+(.+?)\s+\(([^()]+)\)\s*$/.exec(firstLine);
+        if (!headerMatch)
+            continue;
+        const glyph = headerMatch[1];
+        const name = headerMatch[2]?.trim();
+        const version = headerMatch[3]?.trim();
+        if (!name)
+            continue;
+        const info = { name: name.toLowerCase() };
+        if (version)
+            info.version = version;
+        info.enabled_workspace = glyph === "✓";
+        // Field lines and list-section accumulation. Format reference:
+        //   ` Path: <path>`
+        //   ` Source: <source> (Type: <type>)` [optional]
+        //   ` Enabled (User): <bool>`
+        //   ` Enabled (Workspace): <bool>`
+        //   ` Context files:` then `  <file>` lines
+        //   ` Commands:` then `  /<cmd>` lines
+        //   ` Skills:` then `  <skill>` lines
+        //   ` Agents:` then `  <agent>` lines
+        //   ` MCP servers:` then `  <name>` lines
+        let currentList = null;
+        for (let i = 1; i < lines.length; i++) {
+            const line = lines[i];
+            if (line === undefined)
+                continue;
+            const trimmed = line.trim();
+            if (trimmed === "")
+                continue;
+            // List-item lines start with two spaces of indent; field lines start with one.
+            const isListItem = /^ {2,}\S/.test(line) && !/^\s*\w[\w\s]*?:/.test(trimmed);
+            if (isListItem && currentList !== null) {
+                // Strip the leading slash for commands ("/foo" → "foo") to match
+                // how the supervisor's resolveExtensions expects them.
+                const item = trimmed.replace(/^\//, "");
+                if (item)
+                    currentList.push(item);
+                continue;
+            }
+            currentList = null;
+            const fieldMatch = /^\s*([\w\s()]+?):\s*(.*)$/.exec(line);
+            if (!fieldMatch)
+                continue;
+            const key = (fieldMatch[1] ?? "").trim().toLowerCase();
+            const val = (fieldMatch[2] ?? "").trim();
+            if (key === "path") {
+                if (val)
+                    info.path = val;
+            }
+            else if (key === "source") {
+                // Strip trailing "(Type: ...)" suffix — source is just the identifier.
+                if (val)
+                    info.source = val.replace(/\s*\(Type:\s*[^)]*\)\s*$/, "");
+            }
+            else if (key === "enabled (user)") {
+                info.enabled_user = /^true$/i.test(val);
+            }
+            else if (key === "enabled (workspace)") {
+                info.enabled_workspace = /^true$/i.test(val);
+            }
+            else if (key === "context files") {
+                info.context_files = [];
+                currentList = info.context_files;
+            }
+            else if (key === "commands") {
+                info.commands = [];
+                currentList = info.commands;
+            }
+            else if (key === "skills") {
+                info.skills = [];
+                currentList = info.skills;
+            }
+            else if (key === "agents") {
+                info.agents = [];
+                currentList = info.agents;
+            }
+            else if (key === "mcp servers") {
+                info.mcp_servers = [];
+                currentList = info.mcp_servers;
+            }
+        }
+        // Drop empty list arrays so JSON stays compact.
+        for (const k of ["context_files", "commands", "skills", "agents", "mcp_servers"]) {
+            if (info[k] && info[k]?.length === 0)
+                delete info[k];
+        }
+        out.push(info);
+    }
+    return out;
+}
+export const defaultExecExtensionsList = (qwenRealBin) => new Promise((res, rej) => {
+    execFile(qwenRealBin, ["extensions", "list"], { encoding: "utf8" }, (err, stdout) => {
+        if (err) {
+            rej(err);
+            return;
+        }
+        res(stdout);
+    });
+});
+/**
+ * Shell out to `<qwenRealBin> extensions list`, parse the rich form, and
+ * return the structured per-extension records. Throws on exec failure
+ * (qwen binary missing, etc.). Returns `[]` if output is empty or
+ * unparseable — same fail-soft contract as the bare-name parser.
+ *
+ * Used by the `qwen_extensions` MCP tool to give callers the full
+ * installed-extensions inventory (versions, paths, source, declared
+ * commands/skills/agents/MCP servers) without going through the
+ * cache (which only retains names).
+ */
+export async function listInstalledExtensions(qwenRealBin, execFn = defaultExecExtensionsList) {
+    const stdout = await execFn(qwenRealBin);
+    return parseInstalledExtensionsRich(stdout);
+}
+/**
+ * Construct an `InstalledExtensionsCache` and prime it once.
+ *
+ * - Exec errors propagate (fail-fast at startup) — the supervisor
+ *   should not start if the qwen binary cannot be invoked.
+ * - Output that is non-empty but unparseable is treated as an empty
+ *   set; a structured-log warning records the first 200 chars of the
+ *   output so an operator can diagnose without a crash.
+ */
+export async function createInstalledExtensionsCache(qwenRealBin, execFn) {
+    const exec = execFn ?? defaultExecExtensionsList;
+    let names = new Set();
+    async function loadOnce() {
+        const stdout = await exec(qwenRealBin);
+        const parsed = parseInstalledExtensions(stdout);
+        if (parsed.length === 0 &&
+            stdout.trim() !== "" &&
+            !/no extensions installed/i.test(stdout)) {
+            log.warn({ stdout_preview: stdout.slice(0, 200) }, "qwen extensions list output did not match expected format; cache populated empty");
+        }
+        return new Set(parsed);
+    }
+    names = await loadOnce();
+    return {
+        get: () => names,
+        reload: async () => {
+            names = await loadOnce();
+            return names;
+        },
+        size: () => names.size,
+    };
+}
+/**
+ * Thrown by `resolveExtensions` when the resolved set contains a name
+ * the supervisor's installed-extensions cache does not know, or when
+ * the caller asked for enable/disable without a session-default base
+ * to mutate. Caught by the qwen_spawn handler and translated into a
+ * `{ error: { code: 'spawn_error', message } }` envelope.
+ */
+export class ExtensionResolutionError extends Error {
+    unknown;
+    constructor(message, unknown = []) {
+        super(message);
+        this.name = "ExtensionResolutionError";
+        this.unknown = unknown;
+    }
+}
+/**
+ * Read the supervisor's session-default extension set.
+ *
+ * Resolution priority (highest first):
+ *   1. `QWEN_DEFAULT_EXTENSIONS` env var (back-compat / one-shot override)
+ *   2. `default_extensions` field in `~/.qwen-coprocessor-stack/config.json`
+ *   3. "leave-defaults" sentinel — wrapper drops --extensions; CLI defaults
+ *      (all enabled per extension-enablement.json) apply
+ *
+ * The config-file source is mtime-cached at the `readConfig()` layer in
+ * backends.ts, so re-invocation on every spawn is cheap.
+ */
+export function getSessionDefaultExtensions(env) {
+    // 1. env override
+    const raw = env["QWEN_DEFAULT_EXTENSIONS"];
+    if (raw !== undefined && raw !== "") {
+        return dedupeLower(raw.split(",").map((s) => s.trim()).filter((s) => s !== ""));
+    }
+    // 2. config file
+    const fromFile = readConfigDefaultExtensions();
+    if (fromFile && fromFile.length > 0) {
+        return dedupeLower(fromFile);
+    }
+    // 3. unset → CLI defaults apply
+    return "leave-defaults";
+}
+function dedupeLower(input) {
+    const seen = new Set();
+    const out = [];
+    for (const name of input) {
+        const lower = name.toLowerCase();
+        if (lower === "" || seen.has(lower))
+            continue;
+        seen.add(lower);
+        out.push(lower);
+    }
+    return out;
+}
+/**
+ * Framework-required extension set — RDR-002 §Framework-required
+ * extensions. Empty today: the supervisor's contract with the inner
+ * Qwen (write-authority gating, ask_user_question exclusion,
+ * system-prompt preamble, multi-turn streamInput) is enforced via
+ * QueryOptions and does not require any extension to be loaded. Adding
+ * even one would change the supervisor's contract and must be
+ * RDR-tracked.
+ *
+ * If this set ever becomes non-empty: names here are supervisor-
+ * controlled and must be validated against the installed-extensions
+ * cache once at supervisor startup; the per-spawn `resolveExtensions`
+ * step-7 union does NOT re-validate framework-required names (step 7
+ * runs after step 6 in the RDR algorithm).
+ */
+const FRAMEWORK_REQUIRED_EXTENSIONS = [];
+/**
+ * Step 7 — union with framework-required. Adds any framework-required
+ * names not already in the resolved set, lowercased and dedup-safe.
+ * Idempotent / no-op today because the framework-required set is empty.
+ *
+ * Exported for direct testability of the non-empty path: an inline
+ * call with a non-empty `frameworkRequired` argument exercises the
+ * union logic that would otherwise be unreachable from
+ * `resolveExtensions` while `FRAMEWORK_REQUIRED_EXTENSIONS` is empty.
+ */
+export function unionFrameworkRequired(base, frameworkRequired = FRAMEWORK_REQUIRED_EXTENSIONS) {
+    if (frameworkRequired.length === 0)
+        return base;
+    const seen = new Set(base);
+    const out = [...base];
+    for (const name of frameworkRequired) {
+        const lower = name.toLowerCase();
+        if (!seen.has(lower)) {
+            out.push(lower);
+            seen.add(lower);
+        }
+    }
+    return out;
+}
+/**
+ * Resolve the active extension set for a single qwen_spawn call,
+ * implementing steps 1–9 of RDR-002 §Resolution-algorithm.
+ *
+ * Steps (verbatim from the RDR):
+ *   1. Determine session-default — caller passes it in.
+ *   2. Compute base — `only` wins exact-set semantics; otherwise
+ *      session-default is the base.
+ *   3. Apply `enable` additively.
+ *   4. Apply `disable` subtractively (disable wins on overlap).
+ *   5. enable / disable independent.
+ *   6. Validate against installedCache; throw ExtensionResolutionError
+ *      with the unknown names if any.
+ *   7. Union with framework-required (today: empty).
+ *   8. Render — non-empty → comma-list; explicit empty → "none".
+ *   9. "leave-defaults" → null envValue.
+ */
+export function resolveExtensions(opts, sessionDefault, installedCache) {
+    const onlyProvided = opts?.only !== undefined;
+    const enableProvided = opts?.enable !== undefined && opts.enable.length > 0;
+    const disableProvided = opts?.disable !== undefined && opts.disable.length > 0;
+    // Step 2: compute base.
+    // 2a: only wins (enable/disable IGNORED).
+    // 2b: else base is session-default with enable/disable applied.
+    let base;
+    if (onlyProvided) {
+        base = dedupeLower(opts.only);
+    }
+    else if (sessionDefault === "leave-defaults") {
+        if (enableProvided || disableProvided) {
+            // Cannot compute a deterministic resolved set without enumerating
+            // the implicit CLI-defaults set; reject so the caller gets a
+            // visible error rather than silent surprise.
+            throw new ExtensionResolutionError("cannot apply opts.extensions.enable/disable when QWEN_DEFAULT_EXTENSIONS is unset; " +
+                "set a session default or use opts.extensions.only to specify the exact set");
+        }
+        // Step 9: no mutations and no base — leave-defaults short-circuits
+        // before validation/union (no resolved set to validate or union into).
+        return { envValue: null, resolved: "leave-defaults" };
+    }
+    else {
+        // Session-default is a concrete list. Apply enable additively, then
+        // disable subtractively (steps 3–5).
+        base = dedupeLower(sessionDefault);
+        if (enableProvided) {
+            const additions = dedupeLower(opts.enable);
+            const seen = new Set(base);
+            for (const name of additions) {
+                if (!seen.has(name)) {
+                    base.push(name);
+                    seen.add(name);
+                }
+            }
+        }
+        if (disableProvided) {
+            const removals = new Set(dedupeLower(opts.disable));
+            base = base.filter((name) => !removals.has(name));
+        }
+    }
+    // Step 6: validate caller-supplied names against the installed cache.
+    validateInstalled(base, installedCache);
+    // Step 7: union with framework-required. Names here are supervisor-
+    // controlled and pre-validated at startup; not re-validated per spawn.
+    base = unionFrameworkRequired(base);
+    // Step 8: render. An empty base reached by subtraction or an explicit
+    // only=[] renders as "none". The only path that produces leave-defaults
+    // is the no-op branch above.
+    if (base.length === 0) {
+        return { envValue: "none", resolved: "none" };
+    }
+    return { envValue: base.join(","), resolved: base };
+}
+function validateInstalled(names, installed) {
+    const unknown = [];
+    for (const name of names) {
+        if (!installed.has(name))
+            unknown.push(name);
+    }
+    if (unknown.length > 0) {
+        throw new ExtensionResolutionError(`unknown extension(s): ${unknown.join(", ")}`, unknown);
+    }
+}
+//# sourceMappingURL=extensions.js.map

package/dist/extensions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"extensions.js","sourceRoot":"","sources":["../src/extensions.ts"],"names":[],"mappings":"AAAA,+BAA+B;AAC/B,EAAE;AACF,iDAAiD;AACjD,EAAE;AACF,kEAAkE;AAClE,2DAA2D;AAC3D,EAAE;AACF,sEAAsE;AACtE,mEAAmE;AACnE,iEAAiE;AACjE,qEAAqE;AACrE,EAAE;AACF,sEAAsE;AACtE,iEAAiE;AACjE,qEAAqE;AACrE,8CAA8C;AAC9C,EAAE;AACF,8DAA8D;AAC9D,mEAAmE;AACnE,qEAAqE;AACrE,EAAE;AACF,kEAAkE;AAClE,qEAAqE;AACrE,wEAAwE;AACxE,0CAA0C;AAC1C,EAAE;AACF,yEAAyE;AACzE,oEAAoE;AAEpE,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAC5D,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACnC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC7C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC,OAAO,EAAE,YAAY,EAAE,MAAM,UAAU,CAAC;AAExC,OAAO,EAAE,2BAA2B,EAAE,MAAM,eAAe,CAAC;AAE5D,MAAM,GAAG,GAAG,YAAY,CAAC,iBAAiB,CAAC,CAAC;AAE5C;;;;GAIG;AACH,SAAS,YAAY,CAAC,GAAW;IAC/B,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,YAAY,CAAC,cAAc,EAAE,CAAC,OAAO,EAAE,GAAG,CAAC,EAAE;YACvD,QAAQ,EAAE,MAAM;YAChB,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC;SACpC,CAAC,CAAC,IAAI,EAAE,CAAC;QACV,OAAO,GAAG,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC;IACjC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,kBAAkB,CAChC,GAAsB,EACtB,OAAwC;IAExC,MAAM,QAAQ,GAAG,GAAG,CAAC,eAAe,CAAC,CAAC;IACtC,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,KAAK,EAAE,EAAE,CAAC;QAC9C,IAAI,IAAY,CAAC;QACjB,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC;YAChC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC;gBACnB,MAAM,IAAI,KAAK,CACb,iBAAiB,QAAQ,wBAAwB,CAClD,CAAC;YACJ,CAAC;YACD,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;QACnB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,qEAAqE;YACrE,IAAI,GAAG,YAAY,KAAK,IAAI,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,gBAAgB,CAAC,EAAE,CAAC;gBACrE,MAAM,GAAG,CAAC;YACZ,CAAC;YACD,MAAM,IAAI,KAAK,CACb,iBAAiB,QAAQ,sCAAsC,CAChE,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;YACzB,MAAM,IAAI,KAAK,CACb,iBAAiB,QAAQ,uDAAuD,CACjF,CAAC;QACJ,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,MAAM,KAAK,GAAG,OAAO,IAAI,YAAY,CAAC;IACtC,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC;IAC5B,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,EAAE,EAAE,CAAC;QACnC,MAAM,IAAI,KAAK,CACb,qFAAqF,CACtF,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,kBAAkB;IAChC,MAAM,IAAI,GAAG,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IACrD,OAAO,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,4BAA4B,CAAC,CAAC;AACtE,CAAC;AAED,oEAAoE;AACpE,6BAA6B;AAE7B;;;GAGG;AACH,MAAM,OAAO,GAAG,iBAAiB,CAAC;AAElC;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,SAAS,GAAG,mCAAmC,CAAC;AAEtD;;;;;;;;;GASG;AACH,MAAM,UAAU,wBAAwB,CAAC,MAAc;IACrD,OAAO,4BAA4B,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;AACjE,CAAC;AAwBD;;;;;;;;GAQG;AACH,MAAM,UAAU,4BAA4B,CAAC,MAAc;IACzD,IAAI,OAAO,MAAM,KAAK,QAAQ;QAAE,OAAO,EAAE,CAAC;IAC1C,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IAC5C,IAAI,OAAO,CAAC,IAAI,EAAE,KAAK,EAAE;QAAE,OAAO,EAAE,CAAC;IACrC,IAAI,0BAA0B,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,EAAE,CAAC;IAExD,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IACvC,MAAM,GAAG,GAAoB,EAAE,CAAC;IAChC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAChC,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;QACzC,IAAI,SAAS,KAAK,EAAE;YAAE,SAAS;QAE/B,yCAAyC;QACzC,MAAM,WAAW,GAAG,uCAAuC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC5E,IAAI,CAAC,WAAW;YAAE,SAAS;QAC3B,MAAM,KAAK,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC;QAC7B,MAAM,IAAI,GAAG,WAAW,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC;QACpC,MAAM,OAAO,GAAG,WAAW,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC;QACvC,IAAI,CAAC,IAAI;YAAE,SAAS;QAEpB,MAAM,IAAI,GAAkB,EAAE,IAAI,EAAE,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;QACzD,IAAI,OAAO;YAAE,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACpC,IAAI,CAAC,iBAAiB,GAAG,KAAK,KAAK,GAAG,CAAC;QAEvC,+DAA+D;QAC/D,oBAAoB;QACpB,kDAAkD;QAClD,8BAA8B;QAC9B,mCAAmC;QACnC,4CAA4C;QAC5C,uCAAuC;QACvC,sCAAsC;QACtC,sCAAsC;QACtC,0CAA0C;QAC1C,IAAI,WAAW,GAAoB,IAAI,CAAC;QACxC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACtC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;YACtB,IAAI,IAAI,KAAK,SAAS;gBAAE,SAAS;YACjC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;YAC5B,IAAI,OAAO,KAAK,EAAE;gBAAE,SAAS;YAE7B,+EAA+E;YAC/E,MAAM,UAAU,GAAG,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAC7E,IAAI,UAAU,IAAI,WAAW,KAAK,IAAI,EAAE,CAAC;gBACvC,iEAAiE;gBACjE,uDAAuD;gBACvD,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;gBACxC,IAAI,IAAI;oBAAE,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACjC,SAAS;YACX,CAAC;YAED,WAAW,GAAG,IAAI,CAAC;YAEnB,MAAM,UAAU,GAAG,2BAA2B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC1D,IAAI,CAAC,UAAU;gBAAE,SAAS;YAC1B,MAAM,GAAG,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;YACvD,MAAM,GAAG,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;YAEzC,IAAI,GAAG,KAAK,MAAM,EAAE,CAAC;gBACnB,IAAI,GAAG;oBAAE,IAAI,CAAC,IAAI,GAAG,GAAG,CAAC;YAC3B,CAAC;iBAAM,IAAI,GAAG,KAAK,QAAQ,EAAE,CAAC;gBAC5B,uEAAuE;gBACvE,IAAI,GAAG;oBAAE,IAAI,CAAC,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,0BAA0B,EAAE,EAAE,CAAC,CAAC;YACrE,CAAC;iBAAM,IAAI,GAAG,KAAK,gBAAgB,EAAE,CAAC;gBACpC,IAAI,CAAC,YAAY,GAAG,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC1C,CAAC;iBAAM,IAAI,GAAG,KAAK,qBAAqB,EAAE,CAAC;gBACzC,IAAI,CAAC,iBAAiB,GAAG,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC/C,CAAC;iBAAM,IAAI,GAAG,KAAK,eAAe,EAAE,CAAC;gBACnC,IAAI,CAAC,aAAa,GAAG,EAAE,CAAC;gBACxB,WAAW,GAAG,IAAI,CAAC,aAAa,CAAC;YACnC,CAAC;iBAAM,IAAI,GAAG,KAAK,UAAU,EAAE,CAAC;gBAC9B,IAAI,CAAC,QAAQ,GAAG,EAAE,CAAC;gBACnB,WAAW,GAAG,IAAI,CAAC,QAAQ,CAAC;YAC9B,CAAC;iBAAM,IAAI,GAAG,KAAK,QAAQ,EAAE,CAAC;gBAC5B,IAAI,CAAC,MAAM,GAAG,EAAE,CAAC;gBACjB,WAAW,GAAG,IAAI,CAAC,MAAM,CAAC;YAC5B,CAAC;iBAAM,IAAI,GAAG,KAAK,QAAQ,EAAE,CAAC;gBAC5B,IAAI,CAAC,MAAM,GAAG,EAAE,CAAC;gBACjB,WAAW,GAAG,IAAI,CAAC,MAAM,CAAC;YAC5B,CAAC;iBAAM,IAAI,GAAG,KAAK,aAAa,EAAE,CAAC;gBACjC,IAAI,CAAC,WAAW,GAAG,EAAE,CAAC;gBACtB,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC;YACjC,CAAC;QACH,CAAC;QAED,gDAAgD;QAChD,KAAK,MAAM,CAAC,IAAI,CAAC,eAAe,EAAE,UAAU,EAAE,QAAQ,EAAE,QAAQ,EAAE,aAAa,CAAU,EAAE,CAAC;YAC1F,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,MAAM,KAAK,CAAC;gBAAE,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC;QACvD,CAAC;QAED,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACjB,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AASD,MAAM,CAAC,MAAM,yBAAyB,GAAyB,CAAC,WAAW,EAAE,EAAE,CAC7E,IAAI,OAAO,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;IACvB,QAAQ,CACN,WAAW,EACX,CAAC,YAAY,EAAE,MAAM,CAAC,EACtB,EAAE,QAAQ,EAAE,MAAM,EAAE,EACpB,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE;QACd,IAAI,GAAG,EAAE,CAAC;YACR,GAAG,CAAC,GAAG,CAAC,CAAC;YACT,OAAO;QACT,CAAC;QACD,GAAG,CAAC,MAAM,CAAC,CAAC;IACd,CAAC,CACF,CAAC;AACJ,CAAC,CAAC,CAAC;AAEL;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,WAAmB,EACnB,SAA+B,yBAAyB;IAExD,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,CAAC;IACzC,OAAO,4BAA4B,CAAC,MAAM,CAAC,CAAC;AAC9C,CAAC;AAsBD;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,8BAA8B,CAClD,WAAmB,EACnB,MAA6B;IAE7B,MAAM,IAAI,GAAG,MAAM,IAAI,yBAAyB,CAAC;IACjD,IAAI,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;IAE9B,KAAK,UAAU,QAAQ;QACrB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,CAAC;QACvC,MAAM,MAAM,GAAG,wBAAwB,CAAC,MAAM,CAAC,CAAC;QAChD,IACE,MAAM,CAAC,MAAM,KAAK,CAAC;YACnB,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE;YACpB,CAAC,0BAA0B,CAAC,IAAI,CAAC,MAAM,CAAC,EACxC,CAAC;YACD,GAAG,CAAC,IAAI,CACN,EAAE,cAAc,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,EACxC,kFAAkF,CACnF,CAAC;QACJ,CAAC;QACD,OAAO,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC;IACzB,CAAC;IAED,KAAK,GAAG,MAAM,QAAQ,EAAE,CAAC;IAEzB,OAAO;QACL,GAAG,EAAE,GAAG,EAAE,CAAC,KAAK;QAChB,MAAM,EAAE,KAAK,IAAI,EAAE;YACjB,KAAK,GAAG,MAAM,QAAQ,EAAE,CAAC;YACzB,OAAO,KAAK,CAAC;QACf,CAAC;QACD,IAAI,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,IAAI;KACvB,CAAC;AACJ,CAAC;AAgCD;;;;;;GAMG;AACH,MAAM,OAAO,wBAAyB,SAAQ,KAAK;IACxC,OAAO,CAAW;IAC3B,YAAY,OAAe,EAAE,UAAoB,EAAE;QACjD,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,0BAA0B,CAAC;QACvC,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;IACzB,CAAC;CACF;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,2BAA2B,CACzC,GAAsB;IAEtB,kBAAkB;IAClB,MAAM,GAAG,GAAG,GAAG,CAAC,yBAAyB,CAAC,CAAC;IAC3C,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,EAAE,EAAE,CAAC;QACpC,OAAO,WAAW,CAChB,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAC5D,CAAC;IACJ,CAAC;IAED,iBAAiB;IACjB,MAAM,QAAQ,GAAG,2BAA2B,EAAE,CAAC;IAC/C,IAAI,QAAQ,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACpC,OAAO,WAAW,CAAC,QAAQ,CAAC,CAAC;IAC/B,CAAC;IAED,gCAAgC;IAChC,OAAO,gBAAgB,CAAC;AAC1B,CAAC;AAED,SAAS,WAAW,CAAC,KAAe;IAClC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;QACjC,IAAI,KAAK,KAAK,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC;YAAE,SAAS;QAC9C,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAChB,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAClB,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,6BAA6B,GAAsB,EAAE,CAAC;AAE5D;;;;;;;;;GASG;AACH,MAAM,UAAU,sBAAsB,CACpC,IAAc,EACd,oBAAuC,6BAA6B;IAEpE,IAAI,iBAAiB,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAChD,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC;IAC3B,MAAM,GAAG,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC;IACtB,KAAK,MAAM,IAAI,IAAI,iBAAiB,EAAE,CAAC;QACrC,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;QACjC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;YACrB,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAChB,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAClB,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,iBAAiB,CAC/B,IAA+B,EAC/B,cAA2C,EAC3C,cAA2B;IAE3B,MAAM,YAAY,GAAG,IAAI,EAAE,IAAI,KAAK,SAAS,CAAC;IAC9C,MAAM,cAAc,GAAG,IAAI,EAAE,MAAM,KAAK,SAAS,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC;IAC5E,MAAM,eAAe,GAAG,IAAI,EAAE,OAAO,KAAK,SAAS,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC;IAE/E,wBAAwB;IACxB,0CAA0C;IAC1C,gEAAgE;IAChE,IAAI,IAAc,CAAC;IAEnB,IAAI,YAAY,EAAE,CAAC;QACjB,IAAI,GAAG,WAAW,CAAC,IAAK,CAAC,IAAK,CAAC,CAAC;IAClC,CAAC;SAAM,IAAI,cAAc,KAAK,gBAAgB,EAAE,CAAC;QAC/C,IAAI,cAAc,IAAI,eAAe,EAAE,CAAC;YACtC,kEAAkE;YAClE,6DAA6D;YAC7D,6CAA6C;YAC7C,MAAM,IAAI,wBAAwB,CAChC,qFAAqF;gBACnF,4EAA4E,CAC/E,CAAC;QACJ,CAAC;QACD,mEAAmE;QACnE,uEAAuE;QACvE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,gBAAgB,EAAE,CAAC;IACxD,CAAC;SAAM,CAAC;QACN,oEAAoE;QACpE,qCAAqC;QACrC,IAAI,GAAG,WAAW,CAAC,cAAc,CAAC,CAAC;QACnC,IAAI,cAAc,EAAE,CAAC;YACnB,MAAM,SAAS,GAAG,WAAW,CAAC,IAAK,CAAC,MAAO,CAAC,CAAC;YAC7C,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC;YAC3B,KAAK,MAAM,IAAI,IAAI,SAAS,EAAE,CAAC;gBAC7B,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;oBACpB,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;oBAChB,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;gBACjB,CAAC;YACH,CAAC;QACH,CAAC;QACD,IAAI,eAAe,EAAE,CAAC;YACpB,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,IAAK,CAAC,OAAQ,CAAC,CAAC,CAAC;YACtD,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;QACpD,CAAC;IACH,CAAC;IAED,sEAAsE;IACtE,iBAAiB,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;IAExC,oEAAoE;IACpE,uEAAuE;IACvE,IAAI,GAAG,sBAAsB,CAAC,IAAI,CAAC,CAAC;IAEpC,sEAAsE;IACtE,wEAAwE;IACxE,6BAA6B;IAC7B,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtB,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC;IAChD,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;AACtD,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAe,EAAE,SAAsB;IAChE,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC/C,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,wBAAwB,CAChC,yBAAyB,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAC7C,OAAO,CACR,CAAC;IACJ,CAAC;AACH,CAAC"}

package/dist/log.js

@@ -0,0 +1,21 @@
+// SPDX-License-Identifier: MIT
+//
+// Shared pino logger factory.
+//
+// All loggers in this package MUST write to stderr (fd 2), never stdout.
+// This package runs as an MCP stdio server: stdout is reserved exclusively
+// for JSON-RPC protocol frames. Any non-JSONRPC bytes on stdout corrupt the
+// channel for strict MCP clients (e.g. the official Python SDK, which
+// pydantic-validates every received line as a JSONRPCMessage).
+//
+// Discovered via nexus spike_d bench, 2026-05-15 — Claude Code's MCP plugin
+// happened to be lenient with non-JSONRPC stdout, masking the bug until a
+// strict client connected.
+import pino from "pino";
+// Single shared destination — pino docs recommend reusing one destination
+// stream across loggers rather than constructing one per logger.
+const STDERR = pino.destination(2);
+export function createLogger(name) {
+    return pino({ name }, STDERR);
+}
+//# sourceMappingURL=log.js.map

package/dist/log.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"log.js","sourceRoot":"","sources":["../src/log.ts"],"names":[],"mappings":"AAAA,+BAA+B;AAC/B,EAAE;AACF,8BAA8B;AAC9B,EAAE;AACF,yEAAyE;AACzE,2EAA2E;AAC3E,4EAA4E;AAC5E,sEAAsE;AACtE,+DAA+D;AAC/D,EAAE;AACF,4EAA4E;AAC5E,0EAA0E;AAC1E,2BAA2B;AAE3B,OAAO,IAAqB,MAAM,MAAM,CAAC;AAEzC,0EAA0E;AAC1E,iEAAiE;AACjE,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;AAEnC,MAAM,UAAU,YAAY,CAAC,IAAY;IACvC,OAAO,IAAI,CAAC,EAAE,IAAI,EAAE,EAAE,MAAM,CAAC,CAAC;AAChC,CAAC"}