@opencow-ai/opencow-agent-sdk 0.4.25 → 0.4.27

package/dist/constants/envVars.d.ts

@@ -236,6 +236,7 @@ export declare const ENV_VARS: {
     readonly DISABLE_EARLY_INPUT: EnvVarSpec;
     readonly ENABLE_EXTENDED_KEYS: EnvVarSpec;
     readonly ENABLE_STREAM_WATCHDOG: EnvVarSpec;
+    readonly SKILL_LISTING: EnvVarSpec;
     readonly STREAM_IDLE_TIMEOUT_MS: EnvVarSpec;
     readonly UNBOUNDED_CONNECTION_RETRY: EnvVarSpec;
     readonly STREAM_REPLAY_RETRIES: EnvVarSpec;

package/dist/constants/oauth.d.ts

@@ -27,13 +27,5 @@ type OauthConfig = {
     MCP_PROXY_URL: string;
     MCP_PROXY_PATH: string;
 };
-/**
- * Client ID Metadata Document URL for MCP OAuth (CIMD / SEP-991).
- * When an MCP auth server advertises client_id_metadata_document_supported: true,
- * Claude Code uses this URL as its client_id instead of Dynamic Client Registration.
- * The URL must point to a JSON document hosted by Anthropic.
- * See: https://datatracker.ietf.org/doc/html/draft-ietf-oauth-client-id-metadata-document-00
- */
-export declare const MCP_CLIENT_METADATA_URL = "https://claude.ai/oauth/claude-code-client-metadata";
 export declare function getOauthConfig(): OauthConfig;
 export {};

package/dist/controller/dispatch/toolHooks.d.ts

@@ -13,9 +13,10 @@ export declare function runPostToolUseFailureHooks<Input extends AnyObject>(tool
 /**
  * Resolve a PreToolUse hook's permission result into a final PermissionDecision.
  *
- * Encapsulates the invariant that hook 'allow' does NOT bypass settings.json
- * deny/ask rules — checkRuleBasedPermissions still applies (inc-4788 analog).
- * Also handles the requiresUserInteraction/requireCanUseTool guards and the
+ * Encapsulates the invariant that hook 'allow' is advisory: the host's
+ * canUseTool still decides, so a hook can never bypass the host's gate nor
+ * settings.json deny/ask rules. The only exemption is an interactive tool whose
+ * answers were supplied by the hook itself (updatedInput). Also handles the
  * 'ask' forceDecision passthrough.
  *
  * Shared by toolExecution.ts (main query loop) and REPLTool/toolWrappers.ts

package/dist/entrypoints/sdk/controlSchemas.d.ts

@@ -63,6 +63,7 @@ export declare const SDKControlInitializeRequestSchema: () => z.ZodObject<{
             command: z.ZodString;
             args: z.ZodOptional<z.ZodArray<z.ZodString>>;
             env: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+            cwd: z.ZodOptional<z.ZodString>;
         }, z.core.$strip>, z.ZodObject<{
             type: z.ZodLiteral<"sse">;
             url: z.ZodString;
@@ -298,6 +299,7 @@ export declare const SDKControlMcpStatusResponseSchema: () => z.ZodObject<{
             command: z.ZodString;
             args: z.ZodOptional<z.ZodArray<z.ZodString>>;
             env: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+            cwd: z.ZodOptional<z.ZodString>;
         }, z.core.$strip>, z.ZodObject<{
             type: z.ZodLiteral<"sse">;
             url: z.ZodString;
@@ -948,6 +950,7 @@ export declare const SDKControlMcpSetServersRequestSchema: () => z.ZodObject<{
         command: z.ZodString;
         args: z.ZodOptional<z.ZodArray<z.ZodString>>;
         env: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+        cwd: z.ZodOptional<z.ZodString>;
     }, z.core.$strip>, z.ZodObject<{
         type: z.ZodLiteral<"sse">;
         url: z.ZodString;
@@ -1004,6 +1007,7 @@ export declare const SDKControlReloadPluginsResponseSchema: () => z.ZodObject<{
             command: z.ZodString;
             args: z.ZodOptional<z.ZodArray<z.ZodString>>;
             env: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+            cwd: z.ZodOptional<z.ZodString>;
         }, z.core.$strip>, z.ZodObject<{
             type: z.ZodLiteral<"sse">;
             url: z.ZodString;
@@ -1252,6 +1256,7 @@ export declare const SDKControlRequestInnerSchema: () => z.ZodUnion<readonly [z.
             command: z.ZodString;
             args: z.ZodOptional<z.ZodArray<z.ZodString>>;
             env: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+            cwd: z.ZodOptional<z.ZodString>;
         }, z.core.$strip>, z.ZodObject<{
             type: z.ZodLiteral<"sse">;
             url: z.ZodString;
@@ -1822,6 +1827,7 @@ export declare const SDKControlRequestInnerSchema: () => z.ZodUnion<readonly [z.
         command: z.ZodString;
         args: z.ZodOptional<z.ZodArray<z.ZodString>>;
         env: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+        cwd: z.ZodOptional<z.ZodString>;
     }, z.core.$strip>, z.ZodObject<{
         type: z.ZodLiteral<"sse">;
         url: z.ZodString;
@@ -2020,6 +2026,7 @@ export declare const SDKControlRequestSchema: () => z.ZodObject<{
                 command: z.ZodString;
                 args: z.ZodOptional<z.ZodArray<z.ZodString>>;
                 env: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+                cwd: z.ZodOptional<z.ZodString>;
             }, z.core.$strip>, z.ZodObject<{
                 type: z.ZodLiteral<"sse">;
                 url: z.ZodString;
@@ -2590,6 +2597,7 @@ export declare const SDKControlRequestSchema: () => z.ZodObject<{
             command: z.ZodString;
             args: z.ZodOptional<z.ZodArray<z.ZodString>>;
             env: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+            cwd: z.ZodOptional<z.ZodString>;
         }, z.core.$strip>, z.ZodObject<{
             type: z.ZodLiteral<"sse">;
             url: z.ZodString;
@@ -2798,6 +2806,7 @@ export declare const ControlErrorResponseSchema: () => z.ZodObject<{
                     command: z.ZodString;
                     args: z.ZodOptional<z.ZodArray<z.ZodString>>;
                     env: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+                    cwd: z.ZodOptional<z.ZodString>;
                 }, z.core.$strip>, z.ZodObject<{
                     type: z.ZodLiteral<"sse">;
                     url: z.ZodString;
@@ -3368,6 +3377,7 @@ export declare const ControlErrorResponseSchema: () => z.ZodObject<{
                 command: z.ZodString;
                 args: z.ZodOptional<z.ZodArray<z.ZodString>>;
                 env: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+                cwd: z.ZodOptional<z.ZodString>;
             }, z.core.$strip>, z.ZodObject<{
                 type: z.ZodLiteral<"sse">;
                 url: z.ZodString;
@@ -3578,6 +3588,7 @@ export declare const SDKControlResponseSchema: () => z.ZodObject<{
                         command: z.ZodString;
                         args: z.ZodOptional<z.ZodArray<z.ZodString>>;
                         env: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+                        cwd: z.ZodOptional<z.ZodString>;
                     }, z.core.$strip>, z.ZodObject<{
                         type: z.ZodLiteral<"sse">;
                         url: z.ZodString;
@@ -4148,6 +4159,7 @@ export declare const SDKControlResponseSchema: () => z.ZodObject<{
                     command: z.ZodString;
                     args: z.ZodOptional<z.ZodArray<z.ZodString>>;
                     env: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+                    cwd: z.ZodOptional<z.ZodString>;
                 }, z.core.$strip>, z.ZodObject<{
                     type: z.ZodLiteral<"sse">;
                     url: z.ZodString;
@@ -4801,6 +4813,7 @@ export declare const StdoutMessageSchema: () => z.ZodUnion<readonly [z.ZodUnion<
                         command: z.ZodString;
                         args: z.ZodOptional<z.ZodArray<z.ZodString>>;
                         env: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+                        cwd: z.ZodOptional<z.ZodString>;
                     }, z.core.$strip>, z.ZodObject<{
                         type: z.ZodLiteral<"sse">;
                         url: z.ZodString;
@@ -5371,6 +5384,7 @@ export declare const StdoutMessageSchema: () => z.ZodUnion<readonly [z.ZodUnion<
                     command: z.ZodString;
                     args: z.ZodOptional<z.ZodArray<z.ZodString>>;
                     env: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+                    cwd: z.ZodOptional<z.ZodString>;
                 }, z.core.$strip>, z.ZodObject<{
                     type: z.ZodLiteral<"sse">;
                     url: z.ZodString;
@@ -5571,6 +5585,7 @@ export declare const StdoutMessageSchema: () => z.ZodUnion<readonly [z.ZodUnion<
                 command: z.ZodString;
                 args: z.ZodOptional<z.ZodArray<z.ZodString>>;
                 env: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+                cwd: z.ZodOptional<z.ZodString>;
             }, z.core.$strip>, z.ZodObject<{
                 type: z.ZodLiteral<"sse">;
                 url: z.ZodString;
@@ -6141,6 +6156,7 @@ export declare const StdoutMessageSchema: () => z.ZodUnion<readonly [z.ZodUnion<
             command: z.ZodString;
             args: z.ZodOptional<z.ZodArray<z.ZodString>>;
             env: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+            cwd: z.ZodOptional<z.ZodString>;
         }, z.core.$strip>, z.ZodObject<{
             type: z.ZodLiteral<"sse">;
             url: z.ZodString;
@@ -6359,6 +6375,7 @@ export declare const StdinMessageSchema: () => z.ZodUnion<readonly [z.ZodObject<
                 command: z.ZodString;
                 args: z.ZodOptional<z.ZodArray<z.ZodString>>;
                 env: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+                cwd: z.ZodOptional<z.ZodString>;
             }, z.core.$strip>, z.ZodObject<{
                 type: z.ZodLiteral<"sse">;
                 url: z.ZodString;
@@ -6929,6 +6946,7 @@ export declare const StdinMessageSchema: () => z.ZodUnion<readonly [z.ZodObject<
             command: z.ZodString;
             args: z.ZodOptional<z.ZodArray<z.ZodString>>;
             env: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+            cwd: z.ZodOptional<z.ZodString>;
         }, z.core.$strip>, z.ZodObject<{
             type: z.ZodLiteral<"sse">;
             url: z.ZodString;
@@ -7137,6 +7155,7 @@ export declare const StdinMessageSchema: () => z.ZodUnion<readonly [z.ZodObject<
                         command: z.ZodString;
                         args: z.ZodOptional<z.ZodArray<z.ZodString>>;
                         env: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+                        cwd: z.ZodOptional<z.ZodString>;
                     }, z.core.$strip>, z.ZodObject<{
                         type: z.ZodLiteral<"sse">;
                         url: z.ZodString;
@@ -7707,6 +7726,7 @@ export declare const StdinMessageSchema: () => z.ZodUnion<readonly [z.ZodObject<
                     command: z.ZodString;
                     args: z.ZodOptional<z.ZodArray<z.ZodString>>;
                     env: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+                    cwd: z.ZodOptional<z.ZodString>;
                 }, z.core.$strip>, z.ZodObject<{
                     type: z.ZodLiteral<"sse">;
                     url: z.ZodString;

package/dist/entrypoints/sdk/coreSchemas.d.ts

@@ -65,6 +65,7 @@ export declare const McpStdioServerConfigSchema: () => z.ZodObject<{
     command: z.ZodString;
     args: z.ZodOptional<z.ZodArray<z.ZodString>>;
     env: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+    cwd: z.ZodOptional<z.ZodString>;
 }, z.core.$strip>;
 export declare const McpSSEServerConfigSchema: () => z.ZodObject<{
     type: z.ZodLiteral<"sse">;
@@ -85,6 +86,7 @@ export declare const McpServerConfigForProcessTransportSchema: () => z.ZodUnion<
     command: z.ZodString;
     args: z.ZodOptional<z.ZodArray<z.ZodString>>;
     env: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+    cwd: z.ZodOptional<z.ZodString>;
 }, z.core.$strip>, z.ZodObject<{
     type: z.ZodLiteral<"sse">;
     url: z.ZodString;
@@ -107,6 +109,7 @@ export declare const McpServerStatusConfigSchema: () => z.ZodUnion<readonly [z.Z
     command: z.ZodString;
     args: z.ZodOptional<z.ZodArray<z.ZodString>>;
     env: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+    cwd: z.ZodOptional<z.ZodString>;
 }, z.core.$strip>, z.ZodObject<{
     type: z.ZodLiteral<"sse">;
     url: z.ZodString;
@@ -142,6 +145,7 @@ export declare const McpServerStatusSchema: () => z.ZodObject<{
         command: z.ZodString;
         args: z.ZodOptional<z.ZodArray<z.ZodString>>;
         env: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+        cwd: z.ZodOptional<z.ZodString>;
     }, z.core.$strip>, z.ZodObject<{
         type: z.ZodLiteral<"sse">;
         url: z.ZodString;
@@ -2054,6 +2058,7 @@ export declare const AgentMcpServerSpecSchema: () => z.ZodUnion<readonly [z.ZodS
     command: z.ZodString;
     args: z.ZodOptional<z.ZodArray<z.ZodString>>;
     env: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+    cwd: z.ZodOptional<z.ZodString>;
 }, z.core.$strip>, z.ZodObject<{
     type: z.ZodLiteral<"sse">;
     url: z.ZodString;
@@ -2077,6 +2082,7 @@ export declare const AgentDefinitionSchema: () => z.ZodObject<{
         command: z.ZodString;
         args: z.ZodOptional<z.ZodArray<z.ZodString>>;
         env: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+        cwd: z.ZodOptional<z.ZodString>;
     }, z.core.$strip>, z.ZodObject<{
         type: z.ZodLiteral<"sse">;
         url: z.ZodString;

package/dist/entrypoints/sdk/runtimeTypes.d.ts

@@ -62,6 +62,8 @@ export type McpStdioServerConfig = {
     command: string;
     args?: string[];
     env?: Record<string, string>;
+    /** Working directory the server process is spawned in. */
+    cwd?: string;
 };
 export type McpSSEServerConfig = {
     type: 'sse';
@@ -149,10 +151,22 @@ export type SdkManagedPlugin = {
     contentHash: string;
     dataPath: string;
     permissionGrant: SdkPluginPermissionGrant;
+    /**
+     * Host-supplied runtime environment values for this plugin's components
+     * (e.g. a third-party token the user entered in the host UI). Values take
+     * precedence over the ambient process env and stay scoped to this plugin.
+     */
+    env?: Record<string, string>;
 };
 export type SdkPluginSnapshot = {
     revision: string;
     plugins: readonly SdkManagedPlugin[];
+    /**
+     * Host-defined `${NAME}` values substituted into managed plugin skill and
+     * command bodies when they are invoked (e.g. host-specific directories).
+     * Names must match `[A-Z][A-Z0-9_]*`; unknown placeholders stay literal.
+     */
+    contentVariables?: Readonly<Record<string, string>>;
 };
 export type SdkPluginDiagnostic = {
     severity: 'warning' | 'error';
@@ -362,6 +376,16 @@ export type Options = {
      * query startup never blocks on host skill resolution.
      */
     skillCommandsProvider?: () => Promise<readonly unknown[]>;
+    /**
+     * 技能清单附件（`skill_listing`）总开关，默认 `true`（行为与未加开关前一致）。
+     *
+     * 置 `false` 后 SDK 不再把技能清单作为附件挂到用户消息上——用于 host 自己在
+     * 系统提示里维护技能目录、并自行通知技能增删变化的场景。技能正文仍走 Skill
+     * 工具按名加载，不受影响。
+     *
+     * 进程级等价物为 `OPENCOW_SKILL_LISTING=0`；per-query 的显式选项优先于进程环境。
+     */
+    skillListing?: boolean;
     /**
      * Phase 1B.11d — host-provided agent definitions. Each entry is merged
      * into the internal agent list used by the built-in AgentTool. Type is