@yanlinglabs/winter-agent-runtime 0.0.32 → 0.0.34

package/dist/index.d.ts

@@ -6,6 +6,9 @@ export { recordedProviderSystems, resetRecordedProviderSystems } from "./provide
 export { SCENARIO_FINAL_TEXT, SCENARIO_FIRST_TEXT, SCENARIO_CHILD_AGENT, SCENARIO_CHILD_MODEL, SCENARIO_CHILD_WIRE_ID, SCENARIO_DELEGATE_MARKER, SCENARIO_MODELS, SCENARIO_TOOL_CALLING_NONE, SCENARIO_TOOL_INPUT, SCENARIO_TOOL_NAME, startScenarioFake, } from "./provider/scenario-fake.js";
 export type { ScenarioFake, ScenarioFakeOptions, ScenarioRequest } from "./provider/scenario-fake.js";
 export { onCompaction } from "./tools/registry.js";
+export { buildWorkflowWorkerSeatbeltProfile } from "./sandbox/profile.js";
+export type { SandboxBrand } from "./sandbox/profile.js";
+export { WORKFLOW_SANDBOX_REFUSED_EXIT_CODE } from "./workflows/runtime.js";
 export { createInMemoryChannel } from "./protocol/channel.js";
 export type { Duplex, FrameSource, FrameSink } from "./protocol/channel.js";
 export { createRpcBridge } from "./rpc/bridge.js";

package/dist/index.js

@@ -6,6 +6,8 @@ import {
   sessionTempDir2,
   ensureTasksDir2,
   resolveProjectDirName2,
+  buildWorkflowWorkerSeatbeltProfile2,
+  WORKFLOW_SANDBOX_REFUSED_EXIT_CODE2,
   DEFAULT_CONTEXT_WINDOW_TOKENS2,
   createContextAccountant2,
   runEngine2,
@@ -53,10 +55,10 @@ import {
   DEFAULT_CLASSIFIER_TIMEOUT_MS2,
   createModelClassifier2,
   selectClassifierRoute2
-} from "./index-qdang0ag.js";
-import"./index-9s68t0pd.js";
-import"./index-z6s3r4xm.js";
-import"./index-bgeqc7ax.js";
+} from "./index-rprst8z5.js";
+import"./index-1hef2gff.js";
+import"./index-mwew595z.js";
+import"./index-2wgfv0pa.js";
 import"./index-bef62z3r.js";
 import {
   createInMemoryChannel2
@@ -306,11 +308,13 @@ export {
   SUBAGENT_CHILD_PROBE_TEXT2 as SUBAGENT_CHILD_PROBE_TEXT,
   TranscriptWriter2 as TranscriptWriter,
   TranscriptWriterError2 as TranscriptWriterError,
+  WORKFLOW_SANDBOX_REFUSED_EXIT_CODE2 as WORKFLOW_SANDBOX_REFUSED_EXIT_CODE,
   WinterCompatibilitySessionStore,
   WinterPathsError2 as WinterPathsError,
   WinterStoreError,
   WinterStoreLeaseError,
   assistantEntry2 as assistantEntry,
+  buildWorkflowWorkerSeatbeltProfile2 as buildWorkflowWorkerSeatbeltProfile,
   claudeCompactBoundaryEntry2 as claudeCompactBoundaryEntry,
   claudeCompactSummaryEntry2 as claudeCompactSummaryEntry,
   compatibilityKeys,

package/dist/mcp/client.d.ts

@@ -80,8 +80,13 @@ export interface ConnectedMcpClient {
     readResource(uri: string, opts?: {
         timeoutMs?: number;
     }): Promise<McpResourceContent[]>;
+    /**
+     * WS-27: `opts.signal` is the calling tool execution's abort (a turn interrupt). It cancels the MCP
+     * request (`notifications/cancelled`) and any elicitation the call raised (see `callScope` below).
+     */
     callTool(toolName: string, args: Record<string, unknown>, opts?: {
         timeoutMs?: number;
+        signal?: AbortSignal;
     }): Promise<McpToolCallResult>;
     close(): Promise<void>;
 }

package/dist/mcp/elicitation.d.ts

@@ -19,9 +19,18 @@ export declare const MCP_ELICITATION_SUBTYPE = "mcp_elicitation";
 export interface ElicitationSender {
     request<T = unknown>(subtype: string, payload: unknown, opts?: {
         timeoutMs?: number;
+        signal?: AbortSignal;
     }): Promise<T>;
 }
-export type ElicitationAsker = (payload: ElicitationRequestPayload) => Promise<ElicitationResultPayload>;
+/**
+ * WS-27: `opts.signal` aborts when the elicitation stops mattering -- the MCP server cancelled its request,
+ * or the tool call that raised it ended. The asker then stops waiting at once: the bridge sends the host a
+ * `control_cancel_request` (which aborts `Options.onElicitation`'s own `options.signal`), a host answer that
+ * arrives afterwards is dropped as an unknown request id, and the server is answered `cancel`.
+ */
+export type ElicitationAsker = (payload: ElicitationRequestPayload, opts?: {
+    signal?: AbortSignal;
+}) => Promise<ElicitationResultPayload>;
 export declare function createElicitationAsker(sender: ElicitationSender | undefined): ElicitationAsker;
 interface RawElicitParams {
     message: string;
@@ -31,5 +40,5 @@ interface RawElicitParams {
     requestedSchema?: Record<string, unknown> | undefined;
 }
 export declare function buildElicitationPayload(serverName: string, params: RawElicitParams): ElicitationRequestPayload;
-export declare function installElicitationHandler(client: Client, serverName: string, ask: ElicitationAsker): void;
+export declare function installElicitationHandler(client: Client, serverName: string, ask: ElicitationAsker, callScope?: () => AbortSignal | undefined): void;
 export {};

package/dist/mcp-auth.js

@@ -38,10 +38,10 @@ import {
   MCP_OAUTH_HOST_HELD_REFRESH_TOKEN2,
   toSessionMcpTokenRecord2,
   refreshMcpOAuthToken2
-} from "./index-z6s3r4xm.js";
+} from "./index-mwew595z.js";
 import {
   validateMcpOAuthConfig2
-} from "./index-bgeqc7ax.js";
+} from "./index-2wgfv0pa.js";
 // src/mcp-auth/login.ts
 import { auth, computeScopeUnion, exchangeAuthorization, OAuthError, OAuthErrorCode } from "@modelcontextprotocol/client";
 import { randomBytes, timingSafeEqual } from "node:crypto";

package/dist/mcp-client.js

@@ -5,8 +5,8 @@ import {
   McpConnectError2,
   resolveVersionNegotiation2,
   connectMcpServer2
-} from "./index-9s68t0pd.js";
-import"./index-z6s3r4xm.js";
+} from "./index-1hef2gff.js";
+import"./index-mwew595z.js";
 
 // src/mcp-client.ts
 import { WINTER_BRAND } from "@yanlinglabs/winter-agent-sdk";

package/dist/permissions/evaluator.d.ts

@@ -1,4 +1,4 @@
-import type { PermissionBehavior, PermissionUpdate, RuleSource, PermissionDecisionClassification } from "@yanlinglabs/winter-agent-sdk";
+import type { McpServerIdentity, PermissionBehavior, PermissionUpdate, RuleSource, PermissionDecisionClassification } from "@yanlinglabs/winter-agent-sdk";
 import type { SourcedRuleEntry, SourcedRuleSet } from "./ruleset.js";
 import type { PolicyState, AutoModeConfig } from "./policy-state.js";
 import { type ProtectedBrand } from "./protected.js";
@@ -9,6 +9,12 @@ export interface PermissionCall {
     input: Record<string, unknown>;
     toolUseId?: string;
     agentId?: string;
+    /**
+     * WS-27: the MCP server the CALLED tool belongs to (hooks/runner.ts's `mcpServerIdentity`, computed
+     * by the engine from the name the model called -- `toolName` may be a renamed server's declared
+     * spelling). Carried to the PreToolUse hook's `winter_mcp_server` and `canUseTool`'s `mcpServer`.
+     */
+    mcpServer?: McpServerIdentity;
 }
 export declare const ASK_USER_QUESTION_TOOL_NAME = "AskUserQuestion";
 export interface HookDecision {

package/dist/provider/keychain-store.d.ts

@@ -1,6 +1,6 @@
 import type { CredentialMaterial, CredentialStore } from "@yanlinglabs/winter-provider-runtime";
-import { DEFAULT_KEYCHAIN_SERVICE, type CredentialRef } from "@yanlinglabs/winter-agent-sdk";
-export { DEFAULT_KEYCHAIN_SERVICE };
+import { DEFAULT_KEYCHAIN_SERVICE, TEST_KEYCHAIN_ENV, TEST_KEYCHAIN_MEMORY, type CredentialRef } from "@yanlinglabs/winter-agent-sdk";
+export { DEFAULT_KEYCHAIN_SERVICE, TEST_KEYCHAIN_ENV, TEST_KEYCHAIN_MEMORY };
 /**
  * The shape this store needs from a secrets backend.
  *

package/dist/store/dialect.d.ts

@@ -478,7 +478,7 @@ export declare class TranscriptWriter implements SessionPersistence {
     private dialectRecord;
     static readBack(store: SessionStore, key: SessionKey): Promise<SessionStoreEntry[]>;
 }
-export declare const RUNTIME_ENGINE_VERSION = "0.0.32";
+export declare const RUNTIME_ENGINE_VERSION = "0.0.34";
 export interface ResolvedEngineSession {
     config: RuntimeConfig;
     store: SessionPersistence | undefined;

package/dist/testing.js

@@ -3,10 +3,10 @@ import {
   runEngine2,
   echoProvider2,
   resolveEngineSession2
-} from "./index-qdang0ag.js";
-import"./index-9s68t0pd.js";
-import"./index-z6s3r4xm.js";
-import"./index-bgeqc7ax.js";
+} from "./index-rprst8z5.js";
+import"./index-1hef2gff.js";
+import"./index-mwew595z.js";
+import"./index-2wgfv0pa.js";
 import"./index-bef62z3r.js";
 import {
   registerDefaultChildEngineFactory,
@@ -14,7 +14,7 @@ import {
   buildProductionWiring,
   withAutoSkillPermissions,
   restoreChildRoster
-} from "./index-yg5ve6sg.js";
+} from "./index-dske1c00.js";
 import {
   Queue
 } from "./index-97t2rmtf.js";

package/dist/version.d.ts

@@ -1 +1 @@
-export declare const RUNTIME_VERSION = "0.0.32";
+export declare const RUNTIME_VERSION = "0.0.34";

package/dist/version.js

@@ -1,5 +1,5 @@
 // src/version.ts
-var RUNTIME_VERSION = "0.0.32";
+var RUNTIME_VERSION = "0.0.34";
 export {
   RUNTIME_VERSION
 };

package/dist/workflows/runtime.d.ts

@@ -22,7 +22,28 @@ export interface WorkerProcess {
     onExit(cb: (code: number | null) => void): void;
     onError(cb: (err: Error) => void): void;
     kill(): void;
+    /** WS-27: the worker's last non-empty stderr line so far, when the spawner captures stderr (the real one does). */
+    lastStderrLine?(): string | undefined;
 }
+/**
+ * WS-27: the exit code a workflow worker uses to REFUSE to run -- it found itself outside a sandbox that
+ * denies Keychain access (a host's workers check this at start). Reported as a sandbox failure, never as a
+ * crash, so the host can tell the user what is actually wrong.
+ */
+export declare const WORKFLOW_SANDBOX_REFUSED_EXIT_CODE = 77;
+/** The failure text for a worker that exited without a terminal bridge message. */
+export declare function workerExitMessage(code: number | null, lastStderrLine?: string): string;
+/** At most this many characters of the reported line. */
+export declare const STDERR_LINE_CAP = 500;
+/** At most this many characters of an unterminated line are held while waiting for its newline. */
+export declare const STDERR_CARRY_CAP = 4096;
+/**
+ * Keeps the last non-empty line of a stream, bounded -- never the whole of a chatty worker's stderr.
+ * Decoded with a streaming `StringDecoder`, so a multi-byte character split across two chunks survives;
+ * the reported line is sanitized (`UNSAFE_LINE_CHARS`) and capped at `STDERR_LINE_CAP`, and an
+ * unterminated line keeps only its last `STDERR_CARRY_CAP` characters.
+ */
+export declare function stderrTail(stream: NodeJS.ReadableStream | null | undefined): () => string | undefined;
 export type WorkerSpawner = (command: WorkerCommand, opts: {
     home?: string;
     winterHome?: string;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@yanlinglabs/winter-agent-runtime",
-  "version": "0.0.32",
+  "version": "0.0.34",
   "license": "MIT",
   "type": "module",
   "engines": {
@@ -73,9 +73,9 @@
     "@modelcontextprotocol/client": "^2.1.0",
     "ajv": "^8.20.0",
     "ignore": "7.0.5",
-    "@yanlinglabs/winter-agent-sdk": "0.0.32",
-    "@yanlinglabs/winter-provider-runtime": "0.0.32",
-    "@yanlinglabs/winter-provider-catalog": "0.0.32"
+    "@yanlinglabs/winter-agent-sdk": "0.0.34",
+    "@yanlinglabs/winter-provider-runtime": "0.0.34",
+    "@yanlinglabs/winter-provider-catalog": "0.0.34"
   },
   "devDependencies": {
     "@modelcontextprotocol/server": "^2.1.0"