@yanlinglabs/winter-agent-sdk 0.0.33 → 0.0.35

package/dist/index.d.ts

@@ -3,7 +3,7 @@ export type { Query, SdkMessage, SessionMessagingFacet } from "./query.js";
 export type { QueryInternal, ControlRequestHandler, ControlRequestHandlerResult } from "./query.js";
 export type { Options } from "./options.js";
 export { SYSTEM_PROMPT_DYNAMIC_BOUNDARY, DEFAULT_CONTEXT_WINDOW_TOKENS, DEFAULT_COMPACTION_THRESHOLD, DEFAULT_PLANS_DIRECTORY, DEFAULT_OUTPUT_STYLE } from "./options.js";
-export { DEFAULT_PROVIDER_STALL_TIMEOUT_MS, DEFAULT_KEYCHAIN_SERVICE, MCP_OAUTH_REFRESH_SUBTYPE, CREDENTIAL_RESOLVE_SUBTYPE } from "./options.js";
+export { DEFAULT_PROVIDER_STALL_TIMEOUT_MS, DEFAULT_KEYCHAIN_SERVICE, TEST_KEYCHAIN_ENV, TEST_KEYCHAIN_MEMORY, MCP_OAUTH_REFRESH_SUBTYPE, CREDENTIAL_RESOLVE_SUBTYPE } from "./options.js";
 export { WEB_TOOLS_DEFAULTS, resolveWebToolsConfig } from "./options.js";
 export type { ResolvedWebToolsConfig } from "./options.js";
 export type { WebToolsConfig, WebSearchConfig, WebFetchConfig, WebPrivateAddressPolicy, AutoMemoryConfig } from "./protocol/config.js";

package/dist/index.js

@@ -66,6 +66,8 @@ var DEFAULT_PLANS_DIRECTORY = `${WINTER_BRAND2.projectDirName}/plans`;
 var DEFAULT_OUTPUT_STYLE = "default";
 var DEFAULT_PROVIDER_STALL_TIMEOUT_MS = 120000;
 var DEFAULT_KEYCHAIN_SERVICE = WINTER_BRAND2.keychainService;
+var TEST_KEYCHAIN_ENV = "WINTER_TEST_KEYCHAIN";
+var TEST_KEYCHAIN_MEMORY = "memory";
 var MCP_OAUTH_REFRESH_SUBTYPE = "mcp_oauth_refresh";
 var CREDENTIAL_RESOLVE_SUBTYPE = "credential_resolve";
 var WEB_TOOLS_DEFAULTS = {
@@ -730,7 +732,7 @@ function query(args) {
     command,
     args: ["--run", "--config-json", JSON.stringify(config)],
     cwd: config.cwd,
-    env: options.env ?? process.env,
+    env: withTestKeychainRedirect(options.env) ?? process.env,
     ...options.abortController ? { signal: options.abortController.signal } : {}
   };
   const proc = (options.spawnClaudeCodeProcess ?? defaultSpawn)(spawnOptions);
@@ -1127,8 +1129,14 @@ function query(args) {
   };
   return gen;
 }
+function withTestKeychainRedirect(env) {
+  const redirect = process.env[TEST_KEYCHAIN_ENV];
+  if (env === undefined || redirect === undefined || redirect === "" || env[TEST_KEYCHAIN_ENV] !== undefined)
+    return env;
+  return { ...env, [TEST_KEYCHAIN_ENV]: redirect };
+}
 // src/version.ts
-var SDK_VERSION = "0.0.33";
+var SDK_VERSION = "0.0.35";
 // src/paths/project-key.ts
 var TRANSCRIPT_PROJECT_KEY_MAX_LENGTH = 64;
 var VENDOR_PROJECT_KEY_PATTERN = /^[A-Za-z0-9_-]{1,64}$/;
@@ -2323,6 +2331,8 @@ export {
   SETTING_SOURCES,
   SYSTEM_PROMPT_DYNAMIC_BOUNDARY,
   SessionNotFoundError,
+  TEST_KEYCHAIN_ENV,
+  TEST_KEYCHAIN_MEMORY,
   TRANSCRIPT_PROJECT_KEY_MAX_LENGTH,
   WEB_TOOLS_DEFAULTS,
   WINTER_BRAND2 as WINTER_BRAND,

package/dist/options.d.ts

@@ -15,6 +15,28 @@ export declare const DEFAULT_PLANS_DIRECTORY: string;
 export declare const DEFAULT_OUTPUT_STYLE = "default";
 export declare const DEFAULT_PROVIDER_STALL_TIMEOUT_MS = 120000;
 export declare const DEFAULT_KEYCHAIN_SERVICE: string;
+/**
+ * TEST-ONLY. The environment variable that redirects every DEFAULT secrets backend (the runtime's
+ * `provider/keychain-store.ts`, the one site that may reach the macOS Keychain) to a per-process
+ * in-memory store. Exactly `TEST_KEYCHAIN_MEMORY` enables the redirect; unset or empty leaves the real
+ * Keychain; any other value is REFUSED (a typed `io` credential error, which stops the store stack),
+ * never a silent fall through to the real store or to "no credential". The first time the in-memory
+ * store engages, the process prints one stderr line saying so.
+ *
+ * WHY. A test that resolves a `{ kind: "keychain" }` ref in a process that was handed no store of its
+ * own (a real `winter` child, an embedded Worker) reached the developer's REAL login Keychain -- service
+ * `DEFAULT_KEYCHAIN_SERVICE` by default -- and macOS raised a consent dialog, which also hung the child. Every
+ * `bun test` run sets this through `scripts/test-keychain-guard.ts` (each package's `bunfig.toml`), and
+ * `query()` carries it into the child's environment even when a host supplies an explicit `env`.
+ *
+ * Honoured by a compiled binary too, deliberately: the compiled legs of the test suite run the
+ * release-shaped artifact, and a build that ignored the variable would put exactly those legs back on
+ * the real Keychain. Left on by accident it fails CLOSED -- credentials read as absent, writes vanish
+ * with the process -- and it exposes nothing. Never set it outside a test run.
+ */
+export declare const TEST_KEYCHAIN_ENV = "WINTER_TEST_KEYCHAIN";
+/** The one value of `TEST_KEYCHAIN_ENV` that selects the in-memory backend. */
+export declare const TEST_KEYCHAIN_MEMORY = "memory";
 /**
  * WS-25 (MCP OAuth): the runtime -> host control subtype a session sends when a stored MCP sign-in needs
  * refreshing (`McpOAuthRefreshRequest` -> `McpOAuthRefreshAnswer`, protocol/config.ts). Spelled once:

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@yanlinglabs/winter-agent-sdk",
-  "version": "0.0.33",
+  "version": "0.0.35",
   "license": "MIT",
   "type": "module",
   "engines": {
@@ -45,15 +45,15 @@
     }
   },
   "dependencies": {
-    "@yanlinglabs/winter-provider-catalog": "0.0.33"
+    "@yanlinglabs/winter-provider-catalog": "0.0.35"
   },
   "optionalDependencies": {
-    "@yanlinglabs/winter-agent-sdk-darwin-arm64": "0.0.33"
+    "@yanlinglabs/winter-agent-sdk-darwin-arm64": "0.0.35"
   },
   "devDependencies": {
     "@types/node": "^26.4.0",
-    "@yanlinglabs/winter-agent-runtime": "0.0.33",
-    "@yanlinglabs/winter-conformance": "0.0.33"
+    "@yanlinglabs/winter-conformance": "0.0.35",
+    "@yanlinglabs/winter-agent-runtime": "0.0.35"
   },
   "scripts": {}
 }