@opencow-ai/opencow-agent-sdk 0.4.25 → 0.4.26

package/dist/capabilities/mcp/codexConfigFields.d.ts

@@ -0,0 +1,20 @@
+/**
+ * Codex 插件把第三方授权写成「按名引用」的宿主专属字段：`env_vars`、
+ * `bearer_token_env_var`、`env_http_headers`、`http_headers`。MCP 协议与本运行时
+ * 都不读这些键，`McpServerConfigSchema` 会把它们当未知字段静默丢弃 —— 结果是插件
+ * MCP 启动时没有 Authorization / env，请求必然失败。
+ *
+ * 因此在校验前把它们翻译成运行时真正读取的 `env` / `headers`，值写成 `${VAR}`
+ * 引用，交由 `resolvePluginMcpEnvironment` 展开（值来源见 `SdkManagedPlugin.env`）。
+ *
+ * 与 Host 侧 `src/shared/mcpConfigConvert.ts` 同一语义；Host 的渲染层依赖使它无法
+ * 引用 SDK，两份实现必须同步修改。差异：Host 还要把 mcpb/Claude 的占位写法
+ * （`${input:…}`、`${user_config.…}`、`${{ secrets.… }}`）改写成待配置变量，
+ * 那是无 user-config 通道时的兜底；这里 `${user_config.…}` 由运行时原生支持，
+ * 不做改写。
+ */
+/**
+ * 翻译单个 MCP server 配置（不是 `{ mcpServers: … }` 包装层）。
+ * 输入不被修改；非对象输入原样返回。
+ */
+export declare function normalizeCodexMcpFields(input: unknown): Record<string, unknown>;

package/dist/capabilities/mcp/envExpansion.d.ts

@@ -4,9 +4,12 @@
 /**
  * Expand environment variables in a string value
  * Handles ${VAR} and ${VAR:-default} syntax
+ * @param env Lookup source for variable values. Defaults to `process.env`;
+ *   callers pass a per-plugin overlay so plugin-scoped values (e.g. credentials
+ *   the host collected for that plugin) win over the ambient process env.
  * @returns Object with expanded string and list of missing variables
  */
-export declare function expandEnvVarsInString(value: string): {
+export declare function expandEnvVarsInString(value: string, env?: Record<string, string | undefined>): {
     expanded: string;
     missingVars: string[];
 };

package/dist/capabilities/plugins/lspPluginIntegration.d.ts

@@ -21,6 +21,7 @@ export declare function resolvePluginLspEnvironment(config: LspServerConfig, plu
     path: string;
     source: string;
     dataPath?: string;
+    env?: Record<string, string>;
 }, userConfig?: PluginOptionValues, _errors?: PluginError[]): LspServerConfig;
 /**
  * Add plugin scope to LSP server configs

package/dist/capabilities/plugins/mcpPluginIntegration.d.ts

@@ -48,6 +48,7 @@ export declare function resolvePluginMcpEnvironment(config: McpServerConfig, plu
     path: string;
     source: string;
     dataPath?: string;
+    env?: Record<string, string>;
 }, userConfig?: UserConfigValues, errors?: PluginError[], pluginName?: string, serverName?: string): McpServerConfig;
 /**
  * Get MCP servers from a specific plugin with environment variable resolution and scoping

package/dist/cli.mjs

@@ -974,6 +974,11 @@ var init_paths = __esm(() => {
 });
 
 // src/session/layout/LayoutProfile.ts
+var exports_LayoutProfile = {};
+__export(exports_LayoutProfile, {
+  DEFAULT_LAYOUT_PROFILE: () => DEFAULT_LAYOUT_PROFILE,
+  resolveLayoutProfile: () => resolveLayoutProfile
+});
 function resolveBinding(binding) {
   if (typeof binding === "string") {
     return BUILT_IN_BINDINGS[binding];
@@ -47761,6 +47766,63 @@ var init_toolSchemaCache = __esm(() => {
 });
 
 // src/providers/shared/auth.ts
+var exports_auth = {};
+__export(exports_auth, {
+  calculateApiKeyHelperTTL: () => calculateApiKeyHelperTTL,
+  checkAndRefreshOAuthTokenIfNeeded: () => checkAndRefreshOAuthTokenIfNeeded,
+  checkGcpCredentialsValid: () => checkGcpCredentialsValid,
+  clearApiKeyHelperCache: () => clearApiKeyHelperCache,
+  clearAwsCredentialsCache: () => clearAwsCredentialsCache,
+  clearGcpCredentialsCache: () => clearGcpCredentialsCache,
+  clearOAuthTokenCache: () => clearOAuthTokenCache,
+  getAccountInformation: () => getAccountInformation,
+  getAnthropicApiKey: () => getAnthropicApiKey,
+  getAnthropicApiKeyWithSource: () => getAnthropicApiKeyWithSource,
+  getApiKeyFromApiKeyHelper: () => getApiKeyFromApiKeyHelper,
+  getApiKeyFromApiKeyHelperCached: () => getApiKeyFromApiKeyHelperCached,
+  getApiKeyFromConfigOrMacOSKeychain: () => getApiKeyFromConfigOrMacOSKeychain,
+  getApiKeyHelperElapsedMs: () => getApiKeyHelperElapsedMs,
+  getAuthTokenSource: () => getAuthTokenSource,
+  getClaudeAIOAuthTokens: () => getClaudeAIOAuthTokens,
+  getClaudeAIOAuthTokensAsync: () => getClaudeAIOAuthTokensAsync,
+  getConfiguredApiKeyHelper: () => getConfiguredApiKeyHelper,
+  getOauthAccountInfo: () => getOauthAccountInfo,
+  getOtelHeadersFromHelper: () => getOtelHeadersFromHelper,
+  getRateLimitTier: () => getRateLimitTier,
+  getSubscriptionName: () => getSubscriptionName,
+  getSubscriptionType: () => getSubscriptionType,
+  handleOAuth401Error: () => handleOAuth401Error,
+  hasAnthropicApiKeyAuth: () => hasAnthropicApiKeyAuth,
+  hasOpusAccess: () => hasOpusAccess,
+  hasProfileScope: () => hasProfileScope,
+  is1PApiCustomer: () => is1PApiCustomer,
+  isAnthropicAuthEnabled: () => isAnthropicAuthEnabled,
+  isAwsAuthRefreshFromProjectSettings: () => isAwsAuthRefreshFromProjectSettings,
+  isAwsCredentialExportFromProjectSettings: () => isAwsCredentialExportFromProjectSettings,
+  isClaudeAISubscriber: () => isClaudeAISubscriber,
+  isConsumerSubscriber: () => isConsumerSubscriber,
+  isCustomApiKeyApproved: () => isCustomApiKeyApproved,
+  isEnterpriseSubscriber: () => isEnterpriseSubscriber,
+  isGcpAuthRefreshFromProjectSettings: () => isGcpAuthRefreshFromProjectSettings,
+  isMaxSubscriber: () => isMaxSubscriber,
+  isOtelHeadersHelperFromProjectOrLocalSettings: () => isOtelHeadersHelperFromProjectOrLocalSettings,
+  isOverageProvisioningAllowed: () => isOverageProvisioningAllowed,
+  isProSubscriber: () => isProSubscriber,
+  isTeamPremiumSubscriber: () => isTeamPremiumSubscriber,
+  isTeamSubscriber: () => isTeamSubscriber,
+  isUsing3PServices: () => isUsing3PServices,
+  prefetchApiKeyFromApiKeyHelperIfSafe: () => prefetchApiKeyFromApiKeyHelperIfSafe,
+  prefetchAwsCredentialsAndBedRockInfoIfSafe: () => prefetchAwsCredentialsAndBedRockInfoIfSafe,
+  prefetchGcpCredentialsIfSafe: () => prefetchGcpCredentialsIfSafe,
+  refreshAndGetAwsCredentials: () => refreshAndGetAwsCredentials,
+  refreshAwsAuth: () => refreshAwsAuth,
+  refreshGcpAuth: () => refreshGcpAuth,
+  refreshGcpCredentialsIfNeeded: () => refreshGcpCredentialsIfNeeded,
+  removeApiKey: () => removeApiKey,
+  saveApiKey: () => saveApiKey,
+  saveOAuthTokensIfNeeded: () => saveOAuthTokensIfNeeded,
+  validateForceLoginOrg: () => validateForceLoginOrg
+});
 import { exec } from "child_process";
 import { join as join18 } from "path";
 function isManagedOAuthContext() {
@@ -48350,6 +48412,11 @@ async function saveApiKey(apiKey) {
   getApiKeyFromConfigOrMacOSKeychain.cache.clear?.();
   clearLegacyApiKeyPrefetch();
 }
+function isCustomApiKeyApproved(apiKey) {
+  const config = getGlobalConfig();
+  const normalizedKey = normalizeApiKeyForConfig(apiKey);
+  return config.customApiKeyResponses?.approved?.includes(normalizedKey) ?? false;
+}
 async function removeApiKey() {
   await maybeRemoveApiKeyFromMacOSKeychain();
   saveGlobalConfig((current) => ({
@@ -48588,6 +48655,10 @@ function isOverageProvisioningAllowed() {
   }
   return true;
 }
+function hasOpusAccess() {
+  const subscriptionType = getSubscriptionType();
+  return subscriptionType === "max" || subscriptionType === "enterprise" || subscriptionType === "team" || subscriptionType === "pro" || subscriptionType === null;
+}
 function getSubscriptionType() {
   if (shouldUseMockSubscription()) {
     return getMockSubscriptionType();
@@ -80953,7 +81024,7 @@ function buildQueryContextFromSdk(options) {
   const memoryBaseDir = resolveEnvVar("REMOTE_MEMORY_DIR") ?? configHomeDir;
   const autoMemEnvOverride = resolveEnvVar("MEMORY_PATH_OVERRIDE");
   const autoMemSettingsOverride = resolvedFileSystemLayer === "disabled" ? undefined : readAutoMemSettingsOverride();
-  init_managedPath();
+  const { getManagedFilePath } = (init_managedPath(), __toCommonJS(exports_managedPath));
   const paths = computeSessionPaths({
     cwd,
     projectRoot: cwd,
@@ -83882,6 +83953,11 @@ var init_platform2 = __esm(() => {
 });
 
 // src/session/settings/managedPath.ts
+var exports_managedPath = {};
+__export(exports_managedPath, {
+  getManagedFilePath: () => getManagedFilePath,
+  getManagedSettingsDropInDir: () => getManagedSettingsDropInDir
+});
 import { join as join22 } from "path";
 var getManagedFilePath, getManagedSettingsDropInDir;
 var init_managedPath = __esm(() => {
@@ -84078,8 +84154,8 @@ function createBootQueryContext() {
   }
   const sessionId = randomUUID();
   init_paths();
-  init_LayoutProfile();
-  init_managedPath();
+  const { DEFAULT_LAYOUT_PROFILE } = (init_LayoutProfile(), __toCommonJS(exports_LayoutProfile));
+  const { getManagedFilePath } = (init_managedPath(), __toCommonJS(exports_managedPath));
   const { homedir } = __require("node:os");
   const bootConfigHomeDir = process.env.CLAUDE_CONFIG_DIR ? process.env.CLAUDE_CONFIG_DIR.normalize("NFC") : (homedir() + "/.opencow").normalize("NFC");
   const bootMemoryBaseDir = resolveEnvVar("REMOTE_MEMORY_DIR") ?? bootConfigHomeDir;
@@ -84555,6 +84631,7 @@ var init_envVars = __esm(() => {
     DISABLE_EARLY_INPUT: envVar("OPENCOW_DISABLE_EARLY_INPUT"),
     ENABLE_EXTENDED_KEYS: envVar("OPENCOW_ENABLE_EXTENDED_KEYS"),
     ENABLE_STREAM_WATCHDOG: envVar("OPENCOW_ENABLE_STREAM_WATCHDOG"),
+    SKILL_LISTING: envVar("OPENCOW_SKILL_LISTING"),
     STREAM_IDLE_TIMEOUT_MS: envVar("OPENCOW_STREAM_IDLE_TIMEOUT_MS"),
     UNBOUNDED_CONNECTION_RETRY: envVar("OPENCOW_UNBOUNDED_CONNECTION_RETRY"),
     STREAM_REPLAY_RETRIES: envVar("OPENCOW_STREAM_REPLAY_RETRIES"),
@@ -86601,7 +86678,7 @@ function printStartupScreen() {
   const sLen = ` ● ${sL}    Ready — type /help to begin`.length;
   out.push(boxRow(sRow, W, sLen));
   out.push(`${rgb(...BORDER)}╚${"═".repeat(W - 2)}╝${RESET}`);
-  out.push(`  ${DIM}${rgb(...DIMCOL)}opencow ${RESET}${rgb(...ACCENT)}v${"0.4.25"}${RESET}`);
+  out.push(`  ${DIM}${rgb(...DIMCOL)}opencow ${RESET}${rgb(...ACCENT)}v${"0.4.26"}${RESET}`);
   out.push("");
   process.stdout.write(out.join(`
 `) + `
@@ -131694,11 +131771,11 @@ function getPluginErrorMessage(error) {
 }
 
 // src/capabilities/mcp/envExpansion.ts
-function expandEnvVarsInString(value) {
+function expandEnvVarsInString(value, env = process.env) {
   const missingVars = [];
   const expanded = value.replace(/\$\{([^}]+)\}/g, (match, varContent) => {
     const [varName, defaultValue] = varContent.split(":-", 2);
-    const envValue = process.env[varName];
+    const envValue = env[varName];
     if (envValue !== undefined) {
       return envValue;
     }
@@ -131714,6 +131791,61 @@ function expandEnvVarsInString(value) {
   };
 }
 
+// src/capabilities/mcp/codexConfigFields.ts
+function isPlainObject6(value) {
+  return !!value && typeof value === "object" && !Array.isArray(value);
+}
+function setMissing(record, key, value) {
+  if (record[key] !== undefined)
+    return;
+  record[key] = value;
+}
+function recordFor(config, key) {
+  const existing = config[key];
+  if (isPlainObject6(existing))
+    return existing;
+  const created = {};
+  config[key] = created;
+  return created;
+}
+function stringRecordEntries(value) {
+  if (!isPlainObject6(value))
+    return [];
+  return Object.entries(value).filter((entry) => typeof entry[1] === "string");
+}
+function normalizeCodexMcpFields(input) {
+  if (!isPlainObject6(input))
+    return {};
+  const config = structuredClone(input);
+  const envVars = config["env_vars"];
+  if (Array.isArray(envVars)) {
+    for (const name of envVars.filter((item) => typeof item === "string")) {
+      setMissing(recordFor(config, "env"), name, `\${${name}}`);
+    }
+    delete config["env_vars"];
+  }
+  const envHttpHeaders = config["env_http_headers"];
+  if (isPlainObject6(envHttpHeaders)) {
+    for (const [header, varName] of stringRecordEntries(envHttpHeaders)) {
+      setMissing(recordFor(config, "headers"), header, `\${${varName}}`);
+    }
+    delete config["env_http_headers"];
+  }
+  const bearer = config["bearer_token_env_var"];
+  if (typeof bearer === "string" && bearer.trim()) {
+    setMissing(recordFor(config, "headers"), "Authorization", `Bearer \${${bearer.trim()}}`);
+    delete config["bearer_token_env_var"];
+  }
+  const httpHeaders = config["http_headers"];
+  if (isPlainObject6(httpHeaders)) {
+    for (const [header, value] of stringRecordEntries(httpHeaders)) {
+      setMissing(recordFor(config, "headers"), header, value);
+    }
+    delete config["http_headers"];
+  }
+  return config;
+}
+
 // native-stub:@anthropic-ai/mcpb
 var exports_mcpb = {};
 __export(exports_mcpb, {
@@ -135298,7 +135430,7 @@ async function loadMcpServersFromFile(pluginPath, relativePath, errors, plugin,
     const mcpServers = parsed.mcpServers || parsed;
     const validatedServers = {};
     for (const [name, config] of Object.entries(mcpServers)) {
-      const result = McpServerConfigSchema().safeParse(config);
+      const result = McpServerConfigSchema().safeParse(normalizeCodexMcpFields(config));
       if (result.success) {
         validatedServers[name] = result.data;
       } else {
@@ -135379,12 +135511,13 @@ function buildMcpUserConfig(plugin, serverName) {
 }
 function resolvePluginMcpEnvironment(config, plugin, userConfig, errors, pluginName, serverName) {
   const allMissingVars = [];
+  const envLookup = plugin.env ? { ...process.env, ...plugin.env } : process.env;
   const resolveValue = (value) => {
     let resolved = substitutePluginVariables(value, plugin);
     if (userConfig) {
       resolved = substituteUserConfigVariables(resolved, userConfig);
     }
-    const { expanded, missingVars } = expandEnvVarsInString(resolved);
+    const { expanded, missingVars } = expandEnvVarsInString(resolved, envLookup);
     allMissingVars.push(...missingVars);
     return expanded;
   };
@@ -235127,7 +235260,7 @@ function getAnthropicEnvMetadata() {
 function getBuildAgeMinutes() {
   if (false)
     ;
-  const buildTime = new Date("2026-10-09T14:01:34.561Z").getTime();
+  const buildTime = new Date("2026-10-19T06:49:44.552Z").getTime();
   if (isNaN(buildTime))
     return;
   return Math.floor((Date.now() - buildTime) / 60000);
@@ -256556,12 +256689,13 @@ async function loadLspServersFromManifest(declaration, pluginPath, pluginName, e
 }
 function resolvePluginLspEnvironment(config, plugin, userConfig, _errors) {
   const allMissingVars = [];
+  const envLookup = plugin.env ? { ...process.env, ...plugin.env } : process.env;
   const resolveValue = (value) => {
     let resolved = substitutePluginVariables(value, plugin);
     if (userConfig) {
       resolved = substituteUserConfigVariables(resolved, userConfig);
     }
-    const { expanded, missingVars } = expandEnvVarsInString(resolved);
+    const { expanded, missingVars } = expandEnvVarsInString(resolved, envLookup);
     allMissingVars.push(...missingVars);
     return expanded;
   };
@@ -290124,7 +290258,7 @@ async function getAttachments(input, toolUseContext, ideSelection, queuedCommand
     maybe("changed_files", () => getChangedFiles(context)),
     maybe("nested_memory", () => getNestedMemoryAttachments(context)),
     maybe("dynamic_skill", () => getDynamicSkillAttachments(context)),
-    maybe("skill_listing", () => getSkillListingAttachments(context)),
+    ...isSkillListingEnabled() ? [maybe("skill_listing", () => getSkillListingAttachments(context))] : [],
     maybe("plan_mode", () => getPlanModeAttachments(messages, toolUseContext)),
     maybe("plan_mode_exit", () => getPlanModeExitAttachment(toolUseContext)),
     ...[],
@@ -290961,6 +291095,9 @@ function resetSentSkillNames() {
 function suppressNextSkillListing() {
   getQueryContext().registries.skillListingSuppressNext = true;
 }
+function isSkillListingEnabled() {
+  return !isEnvDefinedFalsy(resolveEnvVar("SKILL_LISTING"));
+}
 async function getSkillListingAttachments(toolUseContext) {
   if (false) {}
   if (!toolUseContext.options.tools.some((t) => toolMatchesName2(t, SKILL_TOOL_NAME))) {
@@ -389512,7 +389649,7 @@ async function enrollTrustedDevice() {
       logForDebugging2("[trusted-device] CLAUDE_TRUSTED_DEVICE_TOKEN env var is set, skipping enrollment (env var takes precedence)");
       return;
     }
-    init_auth();
+    const { getClaudeAIOAuthTokens } = (init_auth(), __toCommonJS(exports_auth));
     const accessToken = getClaudeAIOAuthTokens()?.accessToken;
     if (!accessToken) {
       logForDebugging2("[trusted-device] No OAuth token, skipping enrollment");
@@ -480080,7 +480217,7 @@ function buildPrimarySection() {
   }, undefined, false, undefined, this);
   return [{
     label: "Version",
-    value: "0.4.25"
+    value: "0.4.26"
   }, {
     label: "Session name",
     value: nameValue
@@ -528159,7 +528296,7 @@ var init_bridge_kick = __esm(() => {
 var call58 = async () => {
   return {
     type: "text",
-    value: `${"99.0.0"} (built ${"2026-10-09T14:01:34.561Z"})`
+    value: `${"99.0.0"} (built ${"2026-10-19T06:49:44.552Z"})`
   };
 }, version2, version_default;
 var init_version = __esm(() => {
@@ -545838,7 +545975,7 @@ function WelcomeV2() {
             dimColor: true,
             children: [
               "v",
-              "0.4.25",
+              "0.4.26",
               " "
             ]
           }, undefined, true, undefined, this)
@@ -546038,7 +546175,7 @@ function WelcomeV2() {
           dimColor: true,
           children: [
             "v",
-            "0.4.25",
+            "0.4.26",
             " "
           ]
         }, undefined, true, undefined, this)
@@ -546264,7 +546401,7 @@ function AppleTerminalWelcomeV2(t0) {
         dimColor: true,
         children: [
           "v",
-          "0.4.25",
+          "0.4.26",
           " "
         ]
       }, undefined, true, undefined, this);
@@ -546518,7 +546655,7 @@ function AppleTerminalWelcomeV2(t0) {
       dimColor: true,
       children: [
         "v",
-        "0.4.25",
+        "0.4.26",
         " "
       ]
     }, undefined, true, undefined, this);
@@ -567277,7 +567414,7 @@ Usage: claude --remote "your task description"`, () => gracefulShutdown(1));
         pendingHookMessages
       }, renderAndRun);
     }
-  }).version("0.4.25 (OpenCow)", "-v, --version", "Output the version number");
+  }).version("0.4.26 (OpenCow)", "-v, --version", "Output the version number");
   program.option("-w, --worktree [name]", "Create a new git worktree for this session (optionally specify a name)");
   program.option("--tmux", "Create a tmux session for the worktree (requires --worktree). Uses iTerm2 native panes when available; use --tmux=classic for traditional tmux.");
   if (canUserConfigureAdvisor()) {
@@ -567872,7 +568009,7 @@ if (false) {}
 async function main2() {
   const args = process.argv.slice(2);
   if (args.length === 1 && (args[0] === "--version" || args[0] === "-v" || args[0] === "-V")) {
-    console.log(`${"0.4.25"} (OpenCow)`);
+    console.log(`${"0.4.26"} (OpenCow)`);
     return;
   }
   if (args.includes("--provider")) {
@@ -567972,4 +568109,4 @@ async function main2() {
 }
 main2();
 
-//# debugId=C78360B14966554964756E2164756E21
+//# debugId=D1987FE5FC94AB4064756E2164756E21

package/dist/client.js

@@ -19269,6 +19269,7 @@ var init_envVars = __esm(() => {
     DISABLE_EARLY_INPUT: envVar("OPENCOW_DISABLE_EARLY_INPUT"),
     ENABLE_EXTENDED_KEYS: envVar("OPENCOW_ENABLE_EXTENDED_KEYS"),
     ENABLE_STREAM_WATCHDOG: envVar("OPENCOW_ENABLE_STREAM_WATCHDOG"),
+    SKILL_LISTING: envVar("OPENCOW_SKILL_LISTING"),
     STREAM_IDLE_TIMEOUT_MS: envVar("OPENCOW_STREAM_IDLE_TIMEOUT_MS"),
     UNBOUNDED_CONNECTION_RETRY: envVar("OPENCOW_UNBOUNDED_CONNECTION_RETRY"),
     STREAM_REPLAY_RETRIES: envVar("OPENCOW_STREAM_REPLAY_RETRIES"),
@@ -19543,6 +19544,12 @@ var init_paths = __esm(() => {
 });
 
 // src/session/layout/LayoutProfile.ts
+var exports_LayoutProfile = {};
+__export(exports_LayoutProfile, {
+  DEFAULT_LAYOUT_PROFILE: () => DEFAULT_LAYOUT_PROFILE,
+  resolveBinding: () => resolveBinding,
+  resolveLayoutProfile: () => resolveLayoutProfile
+});
 function resolveBinding(binding) {
   if (typeof binding === "string") {
     return BUILT_IN_BINDINGS[binding];
@@ -27244,6 +27251,11 @@ var init_platform = __esm(() => {
 });
 
 // src/session/settings/managedPath.ts
+var exports_managedPath = {};
+__export(exports_managedPath, {
+  getManagedFilePath: () => getManagedFilePath,
+  getManagedSettingsDropInDir: () => getManagedSettingsDropInDir
+});
 import { join as join5 } from "path";
 var getManagedFilePath, getManagedSettingsDropInDir;
 var init_managedPath = __esm(() => {
@@ -90142,8 +90154,8 @@ function createBootQueryContext() {
   }
   const sessionId = randomUUID();
   init_paths();
-  init_LayoutProfile();
-  init_managedPath();
+  const { DEFAULT_LAYOUT_PROFILE } = (init_LayoutProfile(), __toCommonJS(exports_LayoutProfile));
+  const { getManagedFilePath } = (init_managedPath(), __toCommonJS(exports_managedPath));
   const { homedir } = __require("node:os");
   const bootConfigHomeDir = process.env.CLAUDE_CONFIG_DIR ? process.env.CLAUDE_CONFIG_DIR.normalize("NFC") : (homedir() + "/.opencow").normalize("NFC");
   const bootMemoryBaseDir = resolveEnvVar("REMOTE_MEMORY_DIR") ?? bootConfigHomeDir;
@@ -90491,7 +90503,7 @@ function buildQueryContextFromSdk(options) {
   const memoryBaseDir = resolveEnvVar("REMOTE_MEMORY_DIR") ?? configHomeDir;
   const autoMemEnvOverride = resolveEnvVar("MEMORY_PATH_OVERRIDE");
   const autoMemSettingsOverride = resolvedFileSystemLayer === "disabled" ? undefined : readAutoMemSettingsOverride();
-  init_managedPath();
+  const { getManagedFilePath } = (init_managedPath(), __toCommonJS(exports_managedPath));
   const paths = computeSessionPaths({
     cwd,
     projectRoot: cwd,
@@ -171573,11 +171585,11 @@ For example, to get tab context:
 var init_knownServers = () => {};
 
 // src/capabilities/mcp/envExpansion.ts
-function expandEnvVarsInString(value) {
+function expandEnvVarsInString(value, env = process.env) {
   const missingVars = [];
   const expanded = value.replace(/\$\{([^}]+)\}/g, (match, varContent) => {
     const [varName, defaultValue] = varContent.split(":-", 2);
-    const envValue = process.env[varName];
+    const envValue = env[varName];
     if (envValue !== undefined) {
       return envValue;
     }
@@ -171593,6 +171605,61 @@ function expandEnvVarsInString(value) {
   };
 }
 
+// src/capabilities/mcp/codexConfigFields.ts
+function isPlainObject6(value) {
+  return !!value && typeof value === "object" && !Array.isArray(value);
+}
+function setMissing(record, key, value) {
+  if (record[key] !== undefined)
+    return;
+  record[key] = value;
+}
+function recordFor(config, key) {
+  const existing = config[key];
+  if (isPlainObject6(existing))
+    return existing;
+  const created = {};
+  config[key] = created;
+  return created;
+}
+function stringRecordEntries(value) {
+  if (!isPlainObject6(value))
+    return [];
+  return Object.entries(value).filter((entry) => typeof entry[1] === "string");
+}
+function normalizeCodexMcpFields(input) {
+  if (!isPlainObject6(input))
+    return {};
+  const config = structuredClone(input);
+  const envVars = config["env_vars"];
+  if (Array.isArray(envVars)) {
+    for (const name of envVars.filter((item) => typeof item === "string")) {
+      setMissing(recordFor(config, "env"), name, `\${${name}}`);
+    }
+    delete config["env_vars"];
+  }
+  const envHttpHeaders = config["env_http_headers"];
+  if (isPlainObject6(envHttpHeaders)) {
+    for (const [header, varName] of stringRecordEntries(envHttpHeaders)) {
+      setMissing(recordFor(config, "headers"), header, `\${${varName}}`);
+    }
+    delete config["env_http_headers"];
+  }
+  const bearer = config["bearer_token_env_var"];
+  if (typeof bearer === "string" && bearer.trim()) {
+    setMissing(recordFor(config, "headers"), "Authorization", `Bearer \${${bearer.trim()}}`);
+    delete config["bearer_token_env_var"];
+  }
+  const httpHeaders = config["http_headers"];
+  if (isPlainObject6(httpHeaders)) {
+    for (const [header, value] of stringRecordEntries(httpHeaders)) {
+      setMissing(recordFor(config, "headers"), header, value);
+    }
+    delete config["http_headers"];
+  }
+  return config;
+}
+
 // src/capabilities/plugins/mcpPluginIntegration.ts
 import { join as join40 } from "path";
 async function loadMcpServersFromMcpb(plugin, mcpbPath, errors) {
@@ -171725,7 +171792,7 @@ async function loadMcpServersFromFile(pluginPath, relativePath, errors, plugin,
     const mcpServers = parsed.mcpServers || parsed;
     const validatedServers = {};
     for (const [name, config] of Object.entries(mcpServers)) {
-      const result = McpServerConfigSchema().safeParse(config);
+      const result = McpServerConfigSchema().safeParse(normalizeCodexMcpFields(config));
       if (result.success) {
         validatedServers[name] = result.data;
       } else {
@@ -171783,12 +171850,13 @@ function buildMcpUserConfig(plugin, serverName) {
 }
 function resolvePluginMcpEnvironment(config, plugin, userConfig, errors, pluginName, serverName) {
   const allMissingVars = [];
+  const envLookup = plugin.env ? { ...process.env, ...plugin.env } : process.env;
   const resolveValue = (value) => {
     let resolved = substitutePluginVariables(value, plugin);
     if (userConfig) {
       resolved = substituteUserConfigVariables(resolved, userConfig);
     }
-    const { expanded, missingVars } = expandEnvVarsInString(resolved);
+    const { expanded, missingVars } = expandEnvVarsInString(resolved, envLookup);
     allMissingVars.push(...missingVars);
     return expanded;
   };
@@ -193304,12 +193372,13 @@ async function loadLspServersFromManifest(declaration, pluginPath, pluginName, e
 }
 function resolvePluginLspEnvironment(config, plugin, userConfig, _errors) {
   const allMissingVars = [];
+  const envLookup = plugin.env ? { ...process.env, ...plugin.env } : process.env;
   const resolveValue = (value) => {
     let resolved = substitutePluginVariables(value, plugin);
     if (userConfig) {
       resolved = substituteUserConfigVariables(resolved, userConfig);
     }
-    const { expanded, missingVars } = expandEnvVarsInString(resolved);
+    const { expanded, missingVars } = expandEnvVarsInString(resolved, envLookup);
     allMissingVars.push(...missingVars);
     return expanded;
   };
@@ -227327,7 +227396,7 @@ function getAnthropicEnvMetadata() {
 function getBuildAgeMinutes() {
   if (false)
     ;
-  const buildTime = new Date("2026-10-09T14:01:34.561Z").getTime();
+  const buildTime = new Date("2026-10-19T06:49:44.552Z").getTime();
   if (isNaN(buildTime))
     return;
   return Math.floor((Date.now() - buildTime) / 60000);
@@ -231551,7 +231620,7 @@ async function getAttachments(input, toolUseContext, ideSelection, queuedCommand
     maybe("changed_files", () => getChangedFiles(context)),
     maybe("nested_memory", () => getNestedMemoryAttachments(context)),
     maybe("dynamic_skill", () => getDynamicSkillAttachments(context)),
-    maybe("skill_listing", () => getSkillListingAttachments(context)),
+    ...isSkillListingEnabled() ? [maybe("skill_listing", () => getSkillListingAttachments(context))] : [],
     maybe("plan_mode", () => getPlanModeAttachments(messages, toolUseContext)),
     maybe("plan_mode_exit", () => getPlanModeExitAttachment(toolUseContext)),
     ...[],
@@ -232380,6 +232449,9 @@ async function getDynamicSkillAttachments(toolUseContext) {
   }
   return attachments;
 }
+function isSkillListingEnabled() {
+  return !isEnvDefinedFalsy(resolveEnvVar("SKILL_LISTING"));
+}
 async function getSkillListingAttachments(toolUseContext) {
   if (false) {}
   if (!toolUseContext.options.tools.some((t) => toolMatchesName2(t, SKILL_TOOL_NAME))) {
@@ -278312,10 +278384,15 @@ function assertNoDependencyCycles(plugins) {
   for (const plugin of plugins)
     visit(plugin, []);
 }
+var HOST_PROVIDED_ENVIRONMENT_NAMES = new Set([
+  "CLAUDE_PLUGIN_ROOT",
+  "CLAUDE_PLUGIN_DATA"
+]);
 function collectEnvironmentNames(value, output) {
   if (typeof value === "string") {
     for (const match of value.matchAll(/\$\{([A-Z][A-Z0-9_]*)\}/g)) {
-      output.add(match[1]);
+      if (!HOST_PROVIDED_ENVIRONMENT_NAMES.has(match[1]))
+        output.add(match[1]);
     }
     return;
   }
@@ -278328,8 +278405,10 @@ function collectEnvironmentNames(value, output) {
     return;
   for (const [key, item] of Object.entries(value)) {
     if (key === "env" && item && typeof item === "object" && !Array.isArray(item)) {
-      for (const name of Object.keys(item))
-        output.add(name);
+      for (const name of Object.keys(item)) {
+        if (!HOST_PROVIDED_ENVIRONMENT_NAMES.has(name))
+          output.add(name);
+      }
     }
     collectEnvironmentNames(item, output);
   }
@@ -278458,6 +278537,8 @@ async function stageResolvedPlugins(revision, inputs) {
     plugin.source = input.id;
     plugin.repository = input.id;
     plugin.dataPath = dataPath;
+    if (input.env && Object.keys(input.env).length > 0)
+      plugin.env = { ...input.env };
     plugin.manifest = { ...plugin.manifest, userConfig: undefined };
     loadedPlugins.push(plugin);
     diagnostics.push(...errors.map((error) => diagnosticFromPluginError(input.id, error)));
@@ -278596,7 +278677,8 @@ async function stageManagedPluginSnapshot(snapshot, appliedState) {
       id: plugin.id,
       path: plugin.source.path,
       dataPath: plugin.dataPath,
-      permissionGrant: plugin.permissionGrant
+      permissionGrant: plugin.permissionGrant,
+      env: plugin.env
     })));
     return {
       status: "staged",
@@ -278842,7 +278924,8 @@ function optionsWithProviderRoutingEnv(options) {
   const reasoningEffort = options.reasoningEffort;
   const openaiResponses = options.providerSpecific?.openaiResponses;
   const extraBody = extraBodyFromOptions(options);
-  if (transport === undefined && reasoningEffort === undefined && openaiResponses === undefined && extraBody === undefined) {
+  const skillListing = options.skillListing;
+  if (transport === undefined && reasoningEffort === undefined && openaiResponses === undefined && extraBody === undefined && skillListing === undefined) {
     return options;
   }
   const mergedEnv = { ...options.env ?? {} };
@@ -278862,6 +278945,9 @@ function optionsWithProviderRoutingEnv(options) {
     mergedEnv[ENV_VARS.EXTRA_BODY.primary] = rawExtraBody;
     mergedEnv[QUERY_ENV_KEY_EXTRA_BODY] = rawExtraBody;
   }
+  if (typeof skillListing === "boolean") {
+    mergedEnv[ENV_VARS.SKILL_LISTING.primary] = skillListing ? "1" : "0";
+  }
   return { ...options, env: mergedEnv };
 }
 function createQueryLike(generator, runtimeState, finalize) {
@@ -280498,4 +280584,4 @@ export {
   watchScheduledTasks
 };
 
-//# debugId=7505C50D413CC12764756E2164756E21
+//# debugId=E5F427337E592C6D64756E2164756E21

package/dist/constants/envVars.d.ts

@@ -236,6 +236,7 @@ export declare const ENV_VARS: {
     readonly DISABLE_EARLY_INPUT: EnvVarSpec;
     readonly ENABLE_EXTENDED_KEYS: EnvVarSpec;
     readonly ENABLE_STREAM_WATCHDOG: EnvVarSpec;
+    readonly SKILL_LISTING: EnvVarSpec;
     readonly STREAM_IDLE_TIMEOUT_MS: EnvVarSpec;
     readonly UNBOUNDED_CONNECTION_RETRY: EnvVarSpec;
     readonly STREAM_REPLAY_RETRIES: EnvVarSpec;

package/dist/entrypoints/sdk/runtimeTypes.d.ts

@@ -149,6 +149,12 @@ export type SdkManagedPlugin = {
     contentHash: string;
     dataPath: string;
     permissionGrant: SdkPluginPermissionGrant;
+    /**
+     * Host-supplied runtime environment values for this plugin's components
+     * (e.g. a third-party token the user entered in the host UI). Values take
+     * precedence over the ambient process env and stay scoped to this plugin.
+     */
+    env?: Record<string, string>;
 };
 export type SdkPluginSnapshot = {
     revision: string;
@@ -362,6 +368,16 @@ export type Options = {
      * query startup never blocks on host skill resolution.
      */
     skillCommandsProvider?: () => Promise<readonly unknown[]>;
+    /**
+     * 技能清单附件（`skill_listing`）总开关，默认 `true`（行为与未加开关前一致）。
+     *
+     * 置 `false` 后 SDK 不再把技能清单作为附件挂到用户消息上——用于 host 自己在
+     * 系统提示里维护技能目录、并自行通知技能增删变化的场景。技能正文仍走 Skill
+     * 工具按名加载，不受影响。
+     *
+     * 进程级等价物为 `OPENCOW_SKILL_LISTING=0`；per-query 的显式选项优先于进程环境。
+     */
+    skillListing?: boolean;
     /**
      * Phase 1B.11d — host-provided agent definitions. Each entry is merged
      * into the internal agent list used by the built-in AgentTool. Type is

package/dist/sdk.js

@@ -19269,6 +19269,7 @@ var init_envVars = __esm(() => {
     DISABLE_EARLY_INPUT: envVar("OPENCOW_DISABLE_EARLY_INPUT"),
     ENABLE_EXTENDED_KEYS: envVar("OPENCOW_ENABLE_EXTENDED_KEYS"),
     ENABLE_STREAM_WATCHDOG: envVar("OPENCOW_ENABLE_STREAM_WATCHDOG"),
+    SKILL_LISTING: envVar("OPENCOW_SKILL_LISTING"),
     STREAM_IDLE_TIMEOUT_MS: envVar("OPENCOW_STREAM_IDLE_TIMEOUT_MS"),
     UNBOUNDED_CONNECTION_RETRY: envVar("OPENCOW_UNBOUNDED_CONNECTION_RETRY"),
     STREAM_REPLAY_RETRIES: envVar("OPENCOW_STREAM_REPLAY_RETRIES"),
@@ -19543,6 +19544,12 @@ var init_paths = __esm(() => {
 });
 
 // src/session/layout/LayoutProfile.ts
+var exports_LayoutProfile = {};
+__export(exports_LayoutProfile, {
+  DEFAULT_LAYOUT_PROFILE: () => DEFAULT_LAYOUT_PROFILE,
+  resolveBinding: () => resolveBinding,
+  resolveLayoutProfile: () => resolveLayoutProfile
+});
 function resolveBinding(binding) {
   if (typeof binding === "string") {
     return BUILT_IN_BINDINGS[binding];
@@ -27244,6 +27251,11 @@ var init_platform = __esm(() => {
 });
 
 // src/session/settings/managedPath.ts
+var exports_managedPath = {};
+__export(exports_managedPath, {
+  getManagedFilePath: () => getManagedFilePath,
+  getManagedSettingsDropInDir: () => getManagedSettingsDropInDir
+});
 import { join as join5 } from "path";
 var getManagedFilePath, getManagedSettingsDropInDir;
 var init_managedPath = __esm(() => {
@@ -90142,8 +90154,8 @@ function createBootQueryContext() {
   }
   const sessionId = randomUUID();
   init_paths();
-  init_LayoutProfile();
-  init_managedPath();
+  const { DEFAULT_LAYOUT_PROFILE } = (init_LayoutProfile(), __toCommonJS(exports_LayoutProfile));
+  const { getManagedFilePath } = (init_managedPath(), __toCommonJS(exports_managedPath));
   const { homedir } = __require("node:os");
   const bootConfigHomeDir = process.env.CLAUDE_CONFIG_DIR ? process.env.CLAUDE_CONFIG_DIR.normalize("NFC") : (homedir() + "/.opencow").normalize("NFC");
   const bootMemoryBaseDir = resolveEnvVar("REMOTE_MEMORY_DIR") ?? bootConfigHomeDir;
@@ -90491,7 +90503,7 @@ function buildQueryContextFromSdk(options) {
   const memoryBaseDir = resolveEnvVar("REMOTE_MEMORY_DIR") ?? configHomeDir;
   const autoMemEnvOverride = resolveEnvVar("MEMORY_PATH_OVERRIDE");
   const autoMemSettingsOverride = resolvedFileSystemLayer === "disabled" ? undefined : readAutoMemSettingsOverride();
-  init_managedPath();
+  const { getManagedFilePath } = (init_managedPath(), __toCommonJS(exports_managedPath));
   const paths = computeSessionPaths({
     cwd,
     projectRoot: cwd,
@@ -171573,11 +171585,11 @@ For example, to get tab context:
 var init_knownServers = () => {};
 
 // src/capabilities/mcp/envExpansion.ts
-function expandEnvVarsInString(value) {
+function expandEnvVarsInString(value, env = process.env) {
   const missingVars = [];
   const expanded = value.replace(/\$\{([^}]+)\}/g, (match, varContent) => {
     const [varName, defaultValue] = varContent.split(":-", 2);
-    const envValue = process.env[varName];
+    const envValue = env[varName];
     if (envValue !== undefined) {
       return envValue;
     }
@@ -171593,6 +171605,61 @@ function expandEnvVarsInString(value) {
   };
 }
 
+// src/capabilities/mcp/codexConfigFields.ts
+function isPlainObject6(value) {
+  return !!value && typeof value === "object" && !Array.isArray(value);
+}
+function setMissing(record, key, value) {
+  if (record[key] !== undefined)
+    return;
+  record[key] = value;
+}
+function recordFor(config, key) {
+  const existing = config[key];
+  if (isPlainObject6(existing))
+    return existing;
+  const created = {};
+  config[key] = created;
+  return created;
+}
+function stringRecordEntries(value) {
+  if (!isPlainObject6(value))
+    return [];
+  return Object.entries(value).filter((entry) => typeof entry[1] === "string");
+}
+function normalizeCodexMcpFields(input) {
+  if (!isPlainObject6(input))
+    return {};
+  const config = structuredClone(input);
+  const envVars = config["env_vars"];
+  if (Array.isArray(envVars)) {
+    for (const name of envVars.filter((item) => typeof item === "string")) {
+      setMissing(recordFor(config, "env"), name, `\${${name}}`);
+    }
+    delete config["env_vars"];
+  }
+  const envHttpHeaders = config["env_http_headers"];
+  if (isPlainObject6(envHttpHeaders)) {
+    for (const [header, varName] of stringRecordEntries(envHttpHeaders)) {
+      setMissing(recordFor(config, "headers"), header, `\${${varName}}`);
+    }
+    delete config["env_http_headers"];
+  }
+  const bearer = config["bearer_token_env_var"];
+  if (typeof bearer === "string" && bearer.trim()) {
+    setMissing(recordFor(config, "headers"), "Authorization", `Bearer \${${bearer.trim()}}`);
+    delete config["bearer_token_env_var"];
+  }
+  const httpHeaders = config["http_headers"];
+  if (isPlainObject6(httpHeaders)) {
+    for (const [header, value] of stringRecordEntries(httpHeaders)) {
+      setMissing(recordFor(config, "headers"), header, value);
+    }
+    delete config["http_headers"];
+  }
+  return config;
+}
+
 // src/capabilities/plugins/mcpPluginIntegration.ts
 import { join as join40 } from "path";
 async function loadMcpServersFromMcpb(plugin, mcpbPath, errors) {
@@ -171725,7 +171792,7 @@ async function loadMcpServersFromFile(pluginPath, relativePath, errors, plugin,
     const mcpServers = parsed.mcpServers || parsed;
     const validatedServers = {};
     for (const [name, config] of Object.entries(mcpServers)) {
-      const result = McpServerConfigSchema().safeParse(config);
+      const result = McpServerConfigSchema().safeParse(normalizeCodexMcpFields(config));
       if (result.success) {
         validatedServers[name] = result.data;
       } else {
@@ -171783,12 +171850,13 @@ function buildMcpUserConfig(plugin, serverName) {
 }
 function resolvePluginMcpEnvironment(config, plugin, userConfig, errors, pluginName, serverName) {
   const allMissingVars = [];
+  const envLookup = plugin.env ? { ...process.env, ...plugin.env } : process.env;
   const resolveValue = (value) => {
     let resolved = substitutePluginVariables(value, plugin);
     if (userConfig) {
       resolved = substituteUserConfigVariables(resolved, userConfig);
     }
-    const { expanded, missingVars } = expandEnvVarsInString(resolved);
+    const { expanded, missingVars } = expandEnvVarsInString(resolved, envLookup);
     allMissingVars.push(...missingVars);
     return expanded;
   };
@@ -193304,12 +193372,13 @@ async function loadLspServersFromManifest(declaration, pluginPath, pluginName, e
 }
 function resolvePluginLspEnvironment(config, plugin, userConfig, _errors) {
   const allMissingVars = [];
+  const envLookup = plugin.env ? { ...process.env, ...plugin.env } : process.env;
   const resolveValue = (value) => {
     let resolved = substitutePluginVariables(value, plugin);
     if (userConfig) {
       resolved = substituteUserConfigVariables(resolved, userConfig);
     }
-    const { expanded, missingVars } = expandEnvVarsInString(resolved);
+    const { expanded, missingVars } = expandEnvVarsInString(resolved, envLookup);
     allMissingVars.push(...missingVars);
     return expanded;
   };
@@ -227327,7 +227396,7 @@ function getAnthropicEnvMetadata() {
 function getBuildAgeMinutes() {
   if (false)
     ;
-  const buildTime = new Date("2026-10-09T14:01:34.561Z").getTime();
+  const buildTime = new Date("2026-10-19T06:49:44.552Z").getTime();
   if (isNaN(buildTime))
     return;
   return Math.floor((Date.now() - buildTime) / 60000);
@@ -231551,7 +231620,7 @@ async function getAttachments(input, toolUseContext, ideSelection, queuedCommand
     maybe("changed_files", () => getChangedFiles(context)),
     maybe("nested_memory", () => getNestedMemoryAttachments(context)),
     maybe("dynamic_skill", () => getDynamicSkillAttachments(context)),
-    maybe("skill_listing", () => getSkillListingAttachments(context)),
+    ...isSkillListingEnabled() ? [maybe("skill_listing", () => getSkillListingAttachments(context))] : [],
     maybe("plan_mode", () => getPlanModeAttachments(messages, toolUseContext)),
     maybe("plan_mode_exit", () => getPlanModeExitAttachment(toolUseContext)),
     ...[],
@@ -232380,6 +232449,9 @@ async function getDynamicSkillAttachments(toolUseContext) {
   }
   return attachments;
 }
+function isSkillListingEnabled() {
+  return !isEnvDefinedFalsy(resolveEnvVar("SKILL_LISTING"));
+}
 async function getSkillListingAttachments(toolUseContext) {
   if (false) {}
   if (!toolUseContext.options.tools.some((t) => toolMatchesName2(t, SKILL_TOOL_NAME))) {
@@ -278312,10 +278384,15 @@ function assertNoDependencyCycles(plugins) {
   for (const plugin of plugins)
     visit(plugin, []);
 }
+var HOST_PROVIDED_ENVIRONMENT_NAMES = new Set([
+  "CLAUDE_PLUGIN_ROOT",
+  "CLAUDE_PLUGIN_DATA"
+]);
 function collectEnvironmentNames(value, output) {
   if (typeof value === "string") {
     for (const match of value.matchAll(/\$\{([A-Z][A-Z0-9_]*)\}/g)) {
-      output.add(match[1]);
+      if (!HOST_PROVIDED_ENVIRONMENT_NAMES.has(match[1]))
+        output.add(match[1]);
     }
     return;
   }
@@ -278328,8 +278405,10 @@ function collectEnvironmentNames(value, output) {
     return;
   for (const [key, item] of Object.entries(value)) {
     if (key === "env" && item && typeof item === "object" && !Array.isArray(item)) {
-      for (const name of Object.keys(item))
-        output.add(name);
+      for (const name of Object.keys(item)) {
+        if (!HOST_PROVIDED_ENVIRONMENT_NAMES.has(name))
+          output.add(name);
+      }
     }
     collectEnvironmentNames(item, output);
   }
@@ -278458,6 +278537,8 @@ async function stageResolvedPlugins(revision, inputs) {
     plugin.source = input.id;
     plugin.repository = input.id;
     plugin.dataPath = dataPath;
+    if (input.env && Object.keys(input.env).length > 0)
+      plugin.env = { ...input.env };
     plugin.manifest = { ...plugin.manifest, userConfig: undefined };
     loadedPlugins.push(plugin);
     diagnostics.push(...errors.map((error) => diagnosticFromPluginError(input.id, error)));
@@ -278596,7 +278677,8 @@ async function stageManagedPluginSnapshot(snapshot, appliedState) {
       id: plugin.id,
       path: plugin.source.path,
       dataPath: plugin.dataPath,
-      permissionGrant: plugin.permissionGrant
+      permissionGrant: plugin.permissionGrant,
+      env: plugin.env
     })));
     return {
       status: "staged",
@@ -278842,7 +278924,8 @@ function optionsWithProviderRoutingEnv(options) {
   const reasoningEffort = options.reasoningEffort;
   const openaiResponses = options.providerSpecific?.openaiResponses;
   const extraBody = extraBodyFromOptions(options);
-  if (transport === undefined && reasoningEffort === undefined && openaiResponses === undefined && extraBody === undefined) {
+  const skillListing = options.skillListing;
+  if (transport === undefined && reasoningEffort === undefined && openaiResponses === undefined && extraBody === undefined && skillListing === undefined) {
     return options;
   }
   const mergedEnv = { ...options.env ?? {} };
@@ -278862,6 +278945,9 @@ function optionsWithProviderRoutingEnv(options) {
     mergedEnv[ENV_VARS.EXTRA_BODY.primary] = rawExtraBody;
     mergedEnv[QUERY_ENV_KEY_EXTRA_BODY] = rawExtraBody;
   }
+  if (typeof skillListing === "boolean") {
+    mergedEnv[ENV_VARS.SKILL_LISTING.primary] = skillListing ? "1" : "0";
+  }
   return { ...options, env: mergedEnv };
 }
 function createQueryLike(generator, runtimeState, finalize) {
@@ -280498,4 +280584,4 @@ export {
   watchScheduledTasks
 };
 
-//# debugId=40D178CA130F2D5864756E2164756E21
+//# debugId=D86F97561ED1E61E64756E2164756E21

package/dist/session/attachments.d.ts

@@ -581,6 +581,15 @@ export declare function suppressNextSkillListing(): void;
  * Falls back to bundled-only if bundled+mcp exceeds FILTERED_LISTING_MAX.
  */
 export declare function filterToBundledAndMcp(commands: Command[]): Command[];
+/**
+ * skill_listing 附件总开关。Exported for testing。
+ *
+ * 读取经 optionsWithProviderRoutingEnv 写入 per-query env 的
+ * Options.skillListing（per-query 优先于进程环境）；未设置时默认开启，
+ * 保持加开关前的行为不变。仅识别显式 falsy（'0'/'false'/'no'/'off'），
+ * 与 shouldInjectAgentListInMessages 的语义一致。
+ */
+export declare function isSkillListingEnabled(): boolean;
 export declare function extractAtMentionedFiles(content: string): string[];
 export declare function extractMcpResourceMentions(content: string): string[];
 export declare function extractAgentMentions(content: string): string[];

package/dist/types/plugin.d.ts

@@ -44,6 +44,11 @@ export type LoadedPlugin = {
     repository: string;
     /** Session-owned data directory for explicitly managed plugins. */
     dataPath?: string;
+    /**
+     * 宿主为该插件提供的运行期环境变量值（如用户在插件详情页填写的第三方 Token）。
+     * 解析 `${VAR}` 时优先于进程环境，且只作用于该插件的组件。
+     */
+    env?: Record<string, string>;
     enabled?: boolean;
     isBuiltin?: boolean;
     sha?: string;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@opencow-ai/opencow-agent-sdk",
-  "version": "0.4.25",
+  "version": "0.4.26",
   "description": "Claude Code opened to any LLM — OpenAI, Gemini, DeepSeek, Ollama, and 200+ models",
   "type": "module",
   "main": "./dist/sdk.js",