qwen-agent-server 0.11.1

package/dist/vision.js

@@ -0,0 +1,293 @@
+// SPDX-License-Identifier: MIT
+//
+// vision.ts — direct-HTTP multimodal dispatch path for `qwen_oneshot_vision`.
+//
+// @qwen-code/sdk's ContentBlock union is {TextBlock | ThinkingBlock |
+// ToolUseBlock | ToolResultBlock} — there is no ImageBlock. The whole
+// SDK pipeline (qwen_spawn → query() → CLI subprocess) is text-only.
+// To pass images we bypass the SDK entirely and POST directly to the
+// backend's OpenAI-compat /v1/chat/completions endpoint, matching the
+// shape llama-server expects when its --mmproj projector is loaded.
+//
+// Prerequisite: the chosen backend must be running with --mmproj.
+// Without it, llama-server returns:
+//   "image input is not supported - hint: if this is unexpected, you
+//   may need to provide the mmproj"
+// at HTTP 500. The supervisor surfaces this as `error.code="backend_no_mmproj"`
+// so callers can route around or fail cleanly.
+import { promises as fs, realpathSync } from "node:fs";
+import os from "node:os";
+import path from "node:path";
+import { createLogger } from "./log.js";
+import { dispatchOpenAIPost } from "./openai-compat.js";
+const log = createLogger("qwen-vision");
+// ─────────────────────────────────────────────────────────────────
+// Input validation (bead qwen-coprocessor-stack-mtt)
+//
+// Pre-mtt: normalizeImage did fs.readFile(input.path) on caller-
+// supplied paths with zero sandboxing, and forwarded {url} inputs
+// to the backend with zero scheme validation. Single-operator local
+// use is self-harm only, but the moment the plugin runs in a shared
+// or non-trusting MCP-client setting, both surfaces become arbitrary
+// file read / SSRF assist. This module enforces an allowlist on both.
+/** Schemes acceptable for {url} inputs. http(s) and data: are what
+ *  llama-server's mmproj path is actually known to accept; file:,
+ *  javascript:, etc. should never reach the backend. */
+const ALLOWED_URL_SCHEMES = new Set(["http:", "https:", "data:"]);
+/** Default path roots for {path} inputs. Operators can extend this set
+ *  via the QWEN_VISION_IMAGE_PATHS env var (colon-separated absolute
+ *  paths). The defaults cover the two common drop-zones — the user's
+ *  home directory (screenshots, downloads, image collections) and
+ *  os.tmpdir() (clipboard / pasted-image pipelines). */
+function resolveAllowedRoots() {
+    const roots = new Set();
+    const tmp = fs_realpathSync(os.tmpdir());
+    const home = fs_realpathSync(os.homedir());
+    if (tmp)
+        roots.add(tmp);
+    if (home)
+        roots.add(home);
+    const extra = process.env["QWEN_VISION_IMAGE_PATHS"];
+    if (extra && extra.trim() !== "") {
+        for (const p of extra.split(":")) {
+            const trimmed = p.trim();
+            if (trimmed === "")
+                continue;
+            const real = fs_realpathSync(trimmed);
+            if (real)
+                roots.add(real);
+        }
+    }
+    return [...roots];
+}
+/** Synchronously realpath a directory, returning undefined on any
+ *  error (path doesn't exist, permission denied, etc.). Used at root-
+ *  resolution time so we never include a non-canonicalized prefix in
+ *  the allowlist (which would let symlink trickery escape the sandbox). */
+function fs_realpathSync(p) {
+    try {
+        return realpathSync(p);
+    }
+    catch {
+        return undefined;
+    }
+}
+/** True if `child` (already realpath'd) is inside `parent` (already
+ *  realpath'd). Uses path.relative so we get cross-platform separator
+ *  handling without manual slicing. */
+function isInside(child, parent) {
+    const rel = path.relative(parent, child);
+    return rel === "" || (!rel.startsWith("..") && !path.isAbsolute(rel));
+}
+const DEFAULT_TIMEOUT_MS = 300_000;
+const DEFAULT_MAX_TOKENS = 2048;
+const DEFAULT_TEMPERATURE = 0.3;
+// MIME inference from common extensions. Restricted to formats
+// llama-server's mmproj reliably accepts; everything else gets
+// passed as application/octet-stream and may fail at the backend.
+const EXT_TO_MIME = {
+    ".png": "image/png",
+    ".jpg": "image/jpeg",
+    ".jpeg": "image/jpeg",
+    ".webp": "image/webp",
+    ".gif": "image/gif",
+    ".bmp": "image/bmp",
+};
+function inferMimeFromPath(p) {
+    const ext = path.extname(p).toLowerCase();
+    return EXT_TO_MIME[ext] ?? "application/octet-stream";
+}
+/**
+ * Normalize one image input to an OpenAI-compat content block.
+ * Returns either {image_url} ready to drop into the chat-completions
+ * messages array, or throws on a filesystem read failure.
+ */
+export async function normalizeImage(input) {
+    if ("url" in input) {
+        // Reject anything outside the http(s)/data: allowlist. Past `file:`,
+        // `javascript:`, custom schemes etc. would be forwarded to llama-
+        // server, which might not handle them cleanly — and `file:` in
+        // particular invites local-file disclosure if the backend ever
+        // implements remote-fetch.
+        let scheme;
+        try {
+            scheme = new URL(input.url).protocol;
+        }
+        catch {
+            throw new Error(`invalid image URL (not parseable): ${input.url.slice(0, 80)}`);
+        }
+        if (!ALLOWED_URL_SCHEMES.has(scheme)) {
+            throw new Error(`image URL scheme "${scheme}" not allowed (permitted: http, https, data)`);
+        }
+        return { type: "image_url", image_url: { url: input.url } };
+    }
+    if ("base64" in input) {
+        return {
+            type: "image_url",
+            image_url: { url: `data:${input.mime};base64,${input.base64}` },
+        };
+    }
+    // {path}: resolve via realpath (defeats symlink escape) then verify
+    // the canonical path lives under at least one allowlisted root.
+    // Operators can extend the root set via QWEN_VISION_IMAGE_PATHS;
+    // anything outside is rejected before fs.readFile runs.
+    let realPath;
+    try {
+        realPath = await fs.realpath(input.path);
+    }
+    catch (err) {
+        throw new Error(`cannot resolve image path "${input.path}": ${err.message}`);
+    }
+    const roots = resolveAllowedRoots();
+    if (!roots.some((r) => isInside(realPath, r))) {
+        throw new Error(`image path "${input.path}" resolves to "${realPath}" which is outside the allowed roots (${roots.join(", ") || "<none configured>"}); set QWEN_VISION_IMAGE_PATHS to extend`);
+    }
+    const buf = await fs.readFile(realPath);
+    const mime = input.mime ?? inferMimeFromPath(realPath);
+    const b64 = buf.toString("base64");
+    return { type: "image_url", image_url: { url: `data:${mime};base64,${b64}` } };
+}
+/**
+ * POST to a backend's /v1/chat/completions with multimodal content.
+ * Returns a VisionOneshotResult shape; never throws — all failures are
+ * encoded in result.error.
+ */
+export async function dispatchVisionOneshot(backend, task, images, opts = {}, prior_messages = []) {
+    const start = Date.now();
+    const timeout_ms = opts.timeout_ms ?? DEFAULT_TIMEOUT_MS;
+    const max_tokens = opts.max_tokens ?? DEFAULT_MAX_TOKENS;
+    const temperature = opts.temperature ?? DEFAULT_TEMPERATURE;
+    const no_think = opts.no_think ?? true;
+    let imageBlocks;
+    try {
+        imageBlocks = await Promise.all(images.map(normalizeImage));
+    }
+    catch (err) {
+        return {
+            ok: false,
+            elapsed_ms: Date.now() - start,
+            backend_id: backend.id,
+            error: {
+                code: "image_read_failed",
+                message: err instanceof Error ? err.message : String(err),
+            },
+        };
+    }
+    const userText = no_think ? `/no_think ${task}` : task;
+    const messages = [];
+    if (opts.system) {
+        messages.push({ role: "system", content: opts.system });
+    }
+    // Prior turns from a continuation thread, oldest-first. v1 carries
+    // only text; images from prior vision turns get a placeholder in the
+    // formatter.
+    for (const m of prior_messages) {
+        messages.push({ role: m.role, content: m.content });
+    }
+    messages.push({
+        role: "user",
+        content: [{ type: "text", text: userText }, ...imageBlocks],
+    });
+    const body = {
+        model: backend.model,
+        messages,
+        max_tokens,
+        temperature,
+        stream: false,
+    };
+    if (opts.json_schema) {
+        body.response_format = {
+            type: "json_schema",
+            json_schema: { name: "output", strict: true, schema: opts.json_schema },
+        };
+    }
+    if (opts.grammar !== undefined && opts.grammar !== "") {
+        body.grammar = opts.grammar;
+    }
+    const outcome = await dispatchOpenAIPost(backend, "/v1/chat/completions", body, {
+        timeout_ms,
+    });
+    if (!outcome.ok) {
+        // llama-server returns the "image input is not supported" hint with
+        // HTTP 500; classify that case specifically so callers can route.
+        const noMmproj = outcome.status === 500 &&
+            typeof outcome.body_text === "string" &&
+            /image input is not supported/i.test(outcome.body_text);
+        if (outcome.status !== undefined) {
+            log.warn({
+                backend_id: backend.id,
+                status: outcome.status,
+                no_mmproj: noMmproj,
+                body_excerpt: outcome.body_text?.slice(0, 200),
+            }, "vision dispatch HTTP failure");
+        }
+        return {
+            ok: false,
+            elapsed_ms: outcome.elapsed_ms,
+            backend_id: backend.id,
+            error: noMmproj
+                ? {
+                    code: "backend_no_mmproj",
+                    message: outcome.error.message,
+                }
+                : outcome.error,
+        };
+    }
+    let body_parsed;
+    try {
+        body_parsed = JSON.parse(outcome.body_text);
+    }
+    catch (err) {
+        return {
+            ok: false,
+            elapsed_ms: outcome.elapsed_ms,
+            backend_id: backend.id,
+            error: {
+                code: "backend_error",
+                message: `non-JSON response from backend: ${err.message}`,
+            },
+        };
+    }
+    const choice = body_parsed.choices?.[0];
+    const content = choice?.message?.content;
+    if (typeof content !== "string") {
+        return {
+            ok: false,
+            elapsed_ms: outcome.elapsed_ms,
+            backend_id: backend.id,
+            ...(body_parsed.usage !== undefined ? { usage: body_parsed.usage } : {}),
+            error: {
+                code: "no_choices",
+                message: "backend returned no choices or empty content",
+            },
+        };
+    }
+    let parsed;
+    if (opts.json_schema) {
+        try {
+            parsed = JSON.parse(content);
+        }
+        catch {
+            return {
+                ok: false,
+                result: content,
+                elapsed_ms: outcome.elapsed_ms,
+                backend_id: backend.id,
+                ...(body_parsed.usage !== undefined ? { usage: body_parsed.usage } : {}),
+                error: {
+                    code: "validation_failed",
+                    message: "response did not parse as JSON despite json_schema",
+                },
+            };
+        }
+    }
+    return {
+        ok: true,
+        result: content,
+        ...(parsed !== undefined ? { parsed } : {}),
+        ...(body_parsed.usage !== undefined ? { usage: body_parsed.usage } : {}),
+        elapsed_ms: outcome.elapsed_ms,
+        backend_id: backend.id,
+    };
+}
+//# sourceMappingURL=vision.js.map

package/dist/vision.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"vision.js","sourceRoot":"","sources":["../src/vision.ts"],"names":[],"mappings":"AAAA,+BAA+B;AAC/B,EAAE;AACF,8EAA8E;AAC9E,EAAE;AACF,sEAAsE;AACtE,sEAAsE;AACtE,qEAAqE;AACrE,qEAAqE;AACrE,sEAAsE;AACtE,oEAAoE;AACpE,EAAE;AACF,kEAAkE;AAClE,oCAAoC;AACpC,qEAAqE;AACrE,oCAAoC;AACpC,gFAAgF;AAChF,+CAA+C;AAE/C,OAAO,EAAE,QAAQ,IAAI,EAAE,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvD,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,YAAY,EAAE,MAAM,UAAU,CAAC;AACxC,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AAGxD,MAAM,GAAG,GAAG,YAAY,CAAC,aAAa,CAAC,CAAC;AAExC,oEAAoE;AACpE,qDAAqD;AACrD,EAAE;AACF,iEAAiE;AACjE,kEAAkE;AAClE,oEAAoE;AACpE,oEAAoE;AACpE,qEAAqE;AACrE,sEAAsE;AAEtE;;wDAEwD;AACxD,MAAM,mBAAmB,GAAG,IAAI,GAAG,CAAC,CAAC,OAAO,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC;AAElE;;;;wDAIwD;AACxD,SAAS,mBAAmB;IAC1B,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;IAChC,MAAM,GAAG,GAAG,eAAe,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC;IACzC,MAAM,IAAI,GAAG,eAAe,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;IAC3C,IAAI,GAAG;QAAE,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACxB,IAAI,IAAI;QAAE,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAE1B,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC,CAAC;IACrD,IAAI,KAAK,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QACjC,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;YACjC,MAAM,OAAO,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;YACzB,IAAI,OAAO,KAAK,EAAE;gBAAE,SAAS;YAC7B,MAAM,IAAI,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;YACtC,IAAI,IAAI;gBAAE,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC5B,CAAC;IACH,CAAC;IACD,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC;AACpB,CAAC;AAED;;;2EAG2E;AAC3E,SAAS,eAAe,CAAC,CAAS;IAChC,IAAI,CAAC;QACH,OAAO,YAAY,CAAC,CAAC,CAAC,CAAC;IACzB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED;;uCAEuC;AACvC,SAAS,QAAQ,CAAC,KAAa,EAAE,MAAc;IAC7C,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IACzC,OAAO,GAAG,KAAK,EAAE,IAAI,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;AACxE,CAAC;AA4FD,MAAM,kBAAkB,GAAG,OAAO,CAAC;AACnC,MAAM,kBAAkB,GAAG,IAAI,CAAC;AAChC,MAAM,mBAAmB,GAAG,GAAG,CAAC;AAEhC,+DAA+D;AAC/D,+DAA+D;AAC/D,kEAAkE;AAClE,MAAM,WAAW,GAA2B;IAC1C,MAAM,EAAE,WAAW;IACnB,MAAM,EAAE,YAAY;IACpB,OAAO,EAAE,YAAY;IACrB,OAAO,EAAE,YAAY;IACrB,MAAM,EAAE,WAAW;IACnB,MAAM,EAAE,WAAW;CACpB,CAAC;AAEF,SAAS,iBAAiB,CAAC,CAAS;IAClC,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;IAC1C,OAAO,WAAW,CAAC,GAAG,CAAC,IAAI,0BAA0B,CAAC;AACxD,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,KAAuB;IAEvB,IAAI,KAAK,IAAI,KAAK,EAAE,CAAC;QACnB,qEAAqE;QACrE,kEAAkE;QAClE,+DAA+D;QAC/D,+DAA+D;QAC/D,2BAA2B;QAC3B,IAAI,MAAc,CAAC;QACnB,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC;QACvC,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,KAAK,CAAC,sCAAsC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC;QAClF,CAAC;QACD,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;YACrC,MAAM,IAAI,KAAK,CACb,qBAAqB,MAAM,8CAA8C,CAC1E,CAAC;QACJ,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,SAAS,EAAE,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,EAAE,CAAC;IAC9D,CAAC;IACD,IAAI,QAAQ,IAAI,KAAK,EAAE,CAAC;QACtB,OAAO;YACL,IAAI,EAAE,WAAW;YACjB,SAAS,EAAE,EAAE,GAAG,EAAE,QAAQ,KAAK,CAAC,IAAI,WAAW,KAAK,CAAC,MAAM,EAAE,EAAE;SAChE,CAAC;IACJ,CAAC;IACD,oEAAoE;IACpE,gEAAgE;IAChE,iEAAiE;IACjE,wDAAwD;IACxD,IAAI,QAAgB,CAAC;IACrB,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC3C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CACb,8BAA8B,KAAK,CAAC,IAAI,MAAO,GAAa,CAAC,OAAO,EAAE,CACvE,CAAC;IACJ,CAAC;IACD,MAAM,KAAK,GAAG,mBAAmB,EAAE,CAAC;IACpC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9C,MAAM,IAAI,KAAK,CACb,eAAe,KAAK,CAAC,IAAI,kBAAkB,QAAQ,yCAAyC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,mBAAmB,0CAA0C,CAC9K,CAAC;IACJ,CAAC;IACD,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACxC,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,IAAI,iBAAiB,CAAC,QAAQ,CAAC,CAAC;IACvD,MAAM,GAAG,GAAG,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACnC,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,SAAS,EAAE,EAAE,GAAG,EAAE,QAAQ,IAAI,WAAW,GAAG,EAAE,EAAE,EAAE,CAAC;AACjF,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,OAAgB,EAChB,IAAY,EACZ,MAA0B,EAC1B,OAA0B,EAAE,EAC5B,iBAAiF,EAAE;IAEnF,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACzB,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,IAAI,kBAAkB,CAAC;IACzD,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,IAAI,kBAAkB,CAAC;IACzD,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,IAAI,mBAAmB,CAAC;IAC5D,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC;IAEvC,IAAI,WAAW,CAAC;IAChB,IAAI,CAAC;QACH,WAAW,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC;IAC9D,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO;YACL,EAAE,EAAE,KAAK;YACT,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK;YAC9B,UAAU,EAAE,OAAO,CAAC,EAAE;YACtB,KAAK,EAAE;gBACL,IAAI,EAAE,mBAAmB;gBACzB,OAAO,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;aAC1D;SACF,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAG,QAAQ,CAAC,CAAC,CAAC,aAAa,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IACvD,MAAM,QAAQ,GAAmC,EAAE,CAAC;IACpD,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;QAChB,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;IAC1D,CAAC;IACD,mEAAmE;IACnE,qEAAqE;IACrE,aAAa;IACb,KAAK,MAAM,CAAC,IAAI,cAAc,EAAE,CAAC;QAC/B,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;IACtD,CAAC;IACD,QAAQ,CAAC,IAAI,CAAC;QACZ,IAAI,EAAE,MAAM;QACZ,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,GAAG,WAAW,CAAC;KAC5D,CAAC,CAAC;IAEH,MAAM,IAAI,GAA4B;QACpC,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,QAAQ;QACR,UAAU;QACV,WAAW;QACX,MAAM,EAAE,KAAK;KACd,CAAC;IACF,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;QACrB,IAAI,CAAC,eAAe,GAAG;YACrB,IAAI,EAAE,aAAa;YACnB,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,WAAW,EAAE;SACxE,CAAC;IACJ,CAAC;IACD,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,IAAI,IAAI,CAAC,OAAO,KAAK,EAAE,EAAE,CAAC;QACtD,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;IAC9B,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,kBAAkB,CAAC,OAAO,EAAE,sBAAsB,EAAE,IAAI,EAAE;QAC9E,UAAU;KACX,CAAC,CAAC;IAEH,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;QAChB,oEAAoE;QACpE,kEAAkE;QAClE,MAAM,QAAQ,GACZ,OAAO,CAAC,MAAM,KAAK,GAAG;YACtB,OAAO,OAAO,CAAC,SAAS,KAAK,QAAQ;YACrC,+BAA+B,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAC1D,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YACjC,GAAG,CAAC,IAAI,CACN;gBACE,UAAU,EAAE,OAAO,CAAC,EAAE;gBACtB,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,SAAS,EAAE,QAAQ;gBACnB,YAAY,EAAE,OAAO,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;aAC/C,EACD,8BAA8B,CAC/B,CAAC;QACJ,CAAC;QACD,OAAO;YACL,EAAE,EAAE,KAAK;YACT,UAAU,EAAE,OAAO,CAAC,UAAU;YAC9B,UAAU,EAAE,OAAO,CAAC,EAAE;YACtB,KAAK,EAAE,QAAQ;gBACb,CAAC,CAAC;oBACE,IAAI,EAAE,mBAAmB;oBACzB,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,OAAO;iBAC/B;gBACH,CAAC,CAAC,OAAO,CAAC,KAAK;SAClB,CAAC;IACJ,CAAC;IAED,IAAI,WAMH,CAAC;IACF,IAAI,CAAC;QACH,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAC9C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO;YACL,EAAE,EAAE,KAAK;YACT,UAAU,EAAE,OAAO,CAAC,UAAU;YAC9B,UAAU,EAAE,OAAO,CAAC,EAAE;YACtB,KAAK,EAAE;gBACL,IAAI,EAAE,eAAe;gBACrB,OAAO,EAAE,mCAAoC,GAAa,CAAC,OAAO,EAAE;aACrE;SACF,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,WAAW,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC;IACxC,MAAM,OAAO,GAAG,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC;IACzC,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;QAChC,OAAO;YACL,EAAE,EAAE,KAAK;YACT,UAAU,EAAE,OAAO,CAAC,UAAU;YAC9B,UAAU,EAAE,OAAO,CAAC,EAAE;YACtB,GAAG,CAAC,WAAW,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,WAAW,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACxE,KAAK,EAAE;gBACL,IAAI,EAAE,YAAY;gBAClB,OAAO,EAAE,8CAA8C;aACxD;SACF,CAAC;IACJ,CAAC;IAED,IAAI,MAA2B,CAAC;IAChC,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;QACrB,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC/B,CAAC;QAAC,MAAM,CAAC;YACP,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,MAAM,EAAE,OAAO;gBACf,UAAU,EAAE,OAAO,CAAC,UAAU;gBAC9B,UAAU,EAAE,OAAO,CAAC,EAAE;gBACtB,GAAG,CAAC,WAAW,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,WAAW,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACxE,KAAK,EAAE;oBACL,IAAI,EAAE,mBAAmB;oBACzB,OAAO,EAAE,oDAAoD;iBAC9D;aACF,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO;QACL,EAAE,EAAE,IAAI;QACR,MAAM,EAAE,OAAO;QACf,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3C,GAAG,CAAC,WAAW,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,WAAW,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACxE,UAAU,EAAE,OAAO,CAAC,UAAU;QAC9B,UAAU,EAAE,OAAO,CAAC,EAAE;KACvB,CAAC;AACJ,CAAC"}

package/package.json

@@ -0,0 +1,42 @@
+{
+  "name": "qwen-agent-server",
+  "version": "0.11.1",
+  "description": "Stateful MCP supervisor exposing Qwen Code as a multi-backend agent — see docs/rdr/RDR-001",
+  "type": "module",
+  "license": "MIT",
+  "author": "Hal Hildebrand",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/Hellblazer/qwen-coprocessor-stack.git",
+    "directory": "mcp-bridges/qwen-agent-server"
+  },
+  "main": "dist/server.js",
+  "bin": {
+    "qwen-agent-server": "dist/server.js"
+  },
+  "files": [
+    "dist"
+  ],
+  "scripts": {
+    "build": "tsc",
+    "prepublishOnly": "tsc",
+    "test": "vitest run --exclude 'tests/integration/**'",
+    "test:integration": "vitest run --dir tests/integration",
+    "start": "node dist/server.js",
+    "bench": "npm run build && tsx ../../scripts/bench/qwen_vs_claude.ts"
+  },
+  "dependencies": {
+    "@modelcontextprotocol/sdk": "1.29.0",
+    "@qwen-code/sdk": "0.1.7",
+    "pino": "10.3.1"
+  },
+  "devDependencies": {
+    "@types/node": "25.6.0",
+    "tsx": "4.20.6",
+    "typescript": "6.0.3",
+    "vitest": "4.1.5"
+  },
+  "engines": {
+    "node": ">=20.0.0"
+  }
+}