@yanlinglabs/winter-agent-sdk 0.0.32 → 0.0.33

package/dist/index.d.ts

@@ -50,9 +50,9 @@ export type { SettingSource, ResolvedSettingSource, PolicySettingsOrigin, Settin
 export type { WorkspaceTrustFilterOptions } from "./settings/resolve.js";
 export type { PermissionMode, PermissionBehavior, PermissionRuleValue } from "./permissions/types.js";
 export type { PermissionUpdate, PermissionUpdateDestination, RuleSource } from "./permissions/types.js";
-export type { CanUseTool, PermissionResult, PermissionDecisionClassification, PermissionRequestPayload } from "./permissions/types.js";
+export type { CanUseTool, McpServerIdentity, PermissionResult, PermissionDecisionClassification, PermissionRequestPayload } from "./permissions/types.js";
 export { HOOK_EVENTS } from "./permissions/types.js";
-export type { HookEvent, HookEventName, HookSource, HookPermissionDecision, BaseHookInput, McpToolProvenance, PreToolUseHookInput, PostToolUseHookInput, PostToolUseFailureHookInput, UserPromptSubmitHookInput, StopHookInput, SessionStartHookInput, SessionEndHookInput, NotificationHookInput, PermissionRequestHookInput, PermissionDeniedHookInput, SubagentStartHookInput, SubagentStopHookInput, GenericHookInput, HookInput, AsyncHookJSONOutput, SyncHookJSONOutput, HookJSONOutput, PreToolUseHookSpecificOutput, PostToolUseHookSpecificOutput, PostToolUseFailureHookSpecificOutput, UserPromptSubmitHookSpecificOutput, StopHookSpecificOutput, SubagentStartHookSpecificOutput, SubagentStopHookSpecificOutput, SessionStartHookSpecificOutput, NotificationHookSpecificOutput, PermissionRequestHookSpecificOutput, PermissionDeniedHookSpecificOutput, GenericHookSpecificOutput, HookSpecificOutput, HookCallback, HookCallbackMatcher, HookInvocationPayload, } from "./permissions/types.js";
+export type { HookEvent, HookEventName, HookSource, HookPermissionDecision, BaseHookInput, McpToolProvenance, WinterMcpServerHookField, PreToolUseHookInput, PostToolUseHookInput, PostToolUseFailureHookInput, UserPromptSubmitHookInput, StopHookInput, SessionStartHookInput, SessionEndHookInput, NotificationHookInput, PermissionRequestHookInput, PermissionDeniedHookInput, SubagentStartHookInput, SubagentStopHookInput, GenericHookInput, HookInput, AsyncHookJSONOutput, SyncHookJSONOutput, HookJSONOutput, PreToolUseHookSpecificOutput, PostToolUseHookSpecificOutput, PostToolUseFailureHookSpecificOutput, UserPromptSubmitHookSpecificOutput, StopHookSpecificOutput, SubagentStartHookSpecificOutput, SubagentStopHookSpecificOutput, SessionStartHookSpecificOutput, NotificationHookSpecificOutput, PermissionRequestHookSpecificOutput, PermissionDeniedHookSpecificOutput, GenericHookSpecificOutput, HookSpecificOutput, HookCallback, HookCallbackMatcher, HookInvocationPayload, } from "./permissions/types.js";
 export { CATALOG_TAG_RENAMES } from "@yanlinglabs/winter-provider-catalog";
 export { PluginManagerError, listMarketplaces, addMarketplace, removeMarketplace, updateMarketplace, installPlugin, uninstallPlugin, setPluginEnabled, updatePlugin, listPlugins } from "./plugins/manage.js";
 export type { PluginScope, PluginManagerOptions, MarketplaceInfo, InstalledPlugin, PluginListing } from "./plugins/manage.js";

package/dist/index.js

@@ -448,13 +448,17 @@ function makeSdkMcpCallHandler(mcpServers) {
   };
 }
 function makeElicitationHandler(onElicitation, abortController) {
-  return async (payload) => {
+  return async (payload, handlerCtx) => {
     const req = payload;
     const controller = new AbortController;
     if (abortController?.signal.aborted)
       controller.abort();
     else
       abortController?.signal.addEventListener("abort", () => controller.abort(), { once: true });
+    if (handlerCtx?.signal.aborted === true)
+      controller.abort();
+    else
+      handlerCtx?.signal.addEventListener("abort", () => controller.abort(), { once: true });
     let result;
     try {
       result = await onElicitation({
@@ -565,6 +569,9 @@ function buildRuntimeHooksConfig(hooks) {
   }
   return Object.keys(out).length > 0 ? out : undefined;
 }
+function winterMcpServerHookField(server) {
+  return { name: server.name, config_name: server.configName, ...server.readOnlyHint !== undefined ? { read_only_hint: server.readOnlyHint } : {} };
+}
 function buildHookInput(req, cwd) {
   const payload = req.payload ?? {};
   return {
@@ -576,6 +583,7 @@ function buildHookInput(req, cwd) {
     ...req.toolName !== undefined ? { tool_name: req.toolName } : {},
     ...req.mcpServerName !== undefined ? { mcp_server_name: req.mcpServerName } : {},
     ...req.mcpToolName !== undefined ? { mcp_tool_name: req.mcpToolName } : {},
+    ...req.mcpServer !== undefined ? { winter_mcp_server: winterMcpServerHookField(req.mcpServer) } : {},
     ...req.input !== undefined ? { tool_input: req.input } : {},
     ...req.toolUseID !== undefined ? { tool_use_id: req.toolUseID } : {},
     ...payload
@@ -810,7 +818,8 @@ function query(args) {
           toolUseID: req.toolUseID,
           ...req.agentID !== undefined ? { agentID: req.agentID } : {},
           requestId: req.requestId,
-          ...req.matchedAskRule !== undefined ? { matchedAskRule: req.matchedAskRule } : {}
+          ...req.matchedAskRule !== undefined ? { matchedAskRule: req.matchedAskRule } : {},
+          ...req.mcpServer !== undefined ? { mcpServer: req.mcpServer } : {}
         });
       } catch (err) {
         const message = err instanceof Error ? err.message : String(err);
@@ -1119,7 +1128,7 @@ function query(args) {
   return gen;
 }
 // src/version.ts
-var SDK_VERSION = "0.0.32";
+var SDK_VERSION = "0.0.33";
 // src/paths/project-key.ts
 var TRANSCRIPT_PROJECT_KEY_MAX_LENGTH = 64;
 var VENDOR_PROJECT_KEY_PATTERN = /^[A-Za-z0-9_-]{1,64}$/;

package/dist/permissions/types.d.ts

@@ -34,6 +34,31 @@ export type PermissionUpdate = {
 };
 export type PermissionUpdateDestination = "userSettings" | "projectSettings" | "localSettings" | "session" | "cliArg";
 export type RuleSource = "managed" | "user" | "project" | "local" | "cliArg" | "session" | "sdk";
+/**
+ * WS-27 (Winter-only): WHICH MCP SERVER a tool call is for, stated exactly by the runtime -- on
+ * `canUseTool`'s options as `mcpServer`, and on the PreToolUse / PostToolUse / PostToolUseFailure hook
+ * input as `winter_mcp_server` (`WinterMcpServerHookField`, the same facts in snake_case). Present when
+ * the tool belongs to a connected MCP server (a stdio/http/sse server, or a host's in-process `sdk` one);
+ * absent for every other tool, and on an older runtime -- a host keeps its own resolver as the fallback.
+ *
+ * - `name`: the server's name as it appears in the tool name `mcp__<name>__<tool>` -- AFTER any rename.
+ *   A subagent definition's inline server that collides with a name already in use is connected under a
+ *   fresh one (`cf` -> `cf_2`); `name` is then `cf_2`.
+ * - `configName`: the key the server had in the config it came from, BEFORE any rename (`cf` above);
+ *   equal to `name` when nothing was renamed. For a plugin's server, the raw name its `.mcp.json` (or
+ *   manifest) declares -- the runtime registers plugin servers under exactly that name.
+ * - `readOnlyHint`: the tool's own `annotations.readOnlyHint` from that server's `tools/list`, only when
+ *   the server states it as a boolean. Absent means "not stated", never "false".
+ *
+ * Why the runtime states it: `mcp__<server>__<tool>` cannot be split reliably (a server name may contain
+ * `__`), a rename is invisible in the tool name, and the annotation lives only on the runtime's side of
+ * the wire.
+ */
+export interface McpServerIdentity {
+    name: string;
+    configName: string;
+    readOnlyHint?: boolean;
+}
 export type CanUseTool = (toolName: string, input: Record<string, unknown>, options: {
     signal: AbortSignal;
     suggestions?: PermissionUpdate[];
@@ -50,6 +75,8 @@ export type CanUseTool = (toolName: string, input: Record<string, unknown>, opti
         toolName: string;
         ruleContent?: string;
     };
+    /** WS-27, Winter-only: the MCP server this tool belongs to -- see `McpServerIdentity`. */
+    mcpServer?: McpServerIdentity;
 }) => Promise<PermissionResult | null>;
 export type PermissionDecisionClassification = "user_temporary" | "user_permanent" | "user_reject";
 export type PermissionResult = {
@@ -82,6 +109,8 @@ export interface PermissionRequestPayload {
         toolName: string;
         ruleContent?: string;
     };
+    /** WS-27: forwarded to `canUseTool` verbatim -- see `McpServerIdentity`. */
+    mcpServer?: McpServerIdentity;
     policyVersion: number;
 }
 export declare const HOOK_EVENTS: readonly ["PreToolUse", "PostToolUse", "PostToolUseFailure", "UserPromptSubmit", "Stop", "SubagentStart", "SubagentStop", "PreCompact", "PermissionRequest", "Notification", "PostToolBatch", "UserPromptExpansion", "MessageDisplay", "StopFailure", "PostCompact", "PermissionDenied", "SessionStart", "SessionEnd", "Setup", "TeammateIdle", "TaskCreated", "TaskCompleted", "Elicitation", "ElicitationResult", "ConfigChange", "InstructionsLoaded", "WorktreeCreate", "WorktreeRemove", "CwdChanged", "FileChanged", "DirectoryAdded"];
@@ -105,13 +134,23 @@ export interface McpToolProvenance {
     mcp_server_name?: string;
     mcp_tool_name?: string;
 }
-export interface PreToolUseHookInput extends BaseHookInput, McpToolProvenance {
+export interface WinterMcpServerHookField {
+    winter_mcp_server?: {
+        /** The server's name in the called tool's name `mcp__<name>__<tool>`, after any rename. */
+        name: string;
+        /** The server's key in the config it came from, before any rename (a plugin server: the raw name its `.mcp.json` declares). */
+        config_name: string;
+        /** The tool's own `annotations.readOnlyHint` from the server's `tools/list`, only when stated. */
+        read_only_hint?: boolean;
+    };
+}
+export interface PreToolUseHookInput extends BaseHookInput, McpToolProvenance, WinterMcpServerHookField {
     hook_event_name: "PreToolUse";
     tool_name: string;
     tool_input: unknown;
     tool_use_id: string;
 }
-export interface PostToolUseHookInput extends BaseHookInput, McpToolProvenance {
+export interface PostToolUseHookInput extends BaseHookInput, McpToolProvenance, WinterMcpServerHookField {
     hook_event_name: "PostToolUse";
     tool_name: string;
     tool_input: unknown;
@@ -119,7 +158,7 @@ export interface PostToolUseHookInput extends BaseHookInput, McpToolProvenance {
     tool_use_id: string;
     duration_ms?: number;
 }
-export interface PostToolUseFailureHookInput extends BaseHookInput, McpToolProvenance {
+export interface PostToolUseFailureHookInput extends BaseHookInput, McpToolProvenance, WinterMcpServerHookField {
     hook_event_name: "PostToolUseFailure";
     tool_name: string;
     tool_input: unknown;
@@ -302,6 +341,8 @@ export interface HookInvocationPayload {
     mcpServerName?: string;
     /** WS-24: for an MCP tool, the tool's own name on that server -- see `McpToolProvenance`. */
     mcpToolName?: string;
+    /** WS-27: PreToolUse/PostToolUse/PostToolUseFailure only -- becomes `winter_mcp_server`, see `McpServerIdentity`. */
+    mcpServer?: McpServerIdentity;
     input?: Record<string, unknown>;
     payload?: unknown;
     policyVersion: string;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@yanlinglabs/winter-agent-sdk",
-  "version": "0.0.32",
+  "version": "0.0.33",
   "license": "MIT",
   "type": "module",
   "engines": {
@@ -45,15 +45,15 @@
     }
   },
   "dependencies": {
-    "@yanlinglabs/winter-provider-catalog": "0.0.32"
+    "@yanlinglabs/winter-provider-catalog": "0.0.33"
   },
   "optionalDependencies": {
-    "@yanlinglabs/winter-agent-sdk-darwin-arm64": "0.0.32"
+    "@yanlinglabs/winter-agent-sdk-darwin-arm64": "0.0.33"
   },
   "devDependencies": {
     "@types/node": "^26.4.0",
-    "@yanlinglabs/winter-conformance": "0.0.32",
-    "@yanlinglabs/winter-agent-runtime": "0.0.32"
+    "@yanlinglabs/winter-agent-runtime": "0.0.33",
+    "@yanlinglabs/winter-conformance": "0.0.33"
   },
   "scripts": {}
 }