@yanlinglabs/winter-agent-sdk 0.0.41 → 0.0.43

package/dist/index.js

@@ -1271,32 +1271,38 @@ function withTestKeychainRedirect(env) {
   return { ...env, [TEST_KEYCHAIN_ENV]: redirect };
 }
 // src/version.ts
-var SDK_VERSION = "0.0.41";
+var SDK_VERSION = "0.0.43";
 // src/paths/project-key.ts
 var TRANSCRIPT_PROJECT_KEY_MAX_LENGTH = 64;
 var VENDOR_PROJECT_KEY_PATTERN = /^[A-Za-z0-9_-]{1,64}$/;
 function isVendorCompliantProjectKey(key) {
   return VENDOR_PROJECT_KEY_PATTERN.test(key);
 }
-function sanitize(absPath) {
-  return absPath.replace(/[^a-zA-Z0-9]/g, "-");
+function isAsciiAlphanumeric(code) {
+  return code >= 48 && code <= 57 || code >= 65 && code <= 90 || code >= 97 && code <= 122;
 }
-function rollingHash32(raw) {
-  let hash = 0;
-  for (let i = 0;i < raw.length; i++) {
-    hash = (hash << 5) - hash + raw.charCodeAt(i) | 0;
+function sanitizeForKey(text) {
+  let out = "";
+  for (let i = 0;i < text.length; i++) {
+    const code = text.charCodeAt(i);
+    out += isAsciiAlphanumeric(code) ? text[i] : "-";
   }
-  return hash;
+  return out;
 }
-function overflowSuffix(rawAbsPath) {
-  return Math.abs(rollingHash32(rawAbsPath)).toString(36);
+function hashSuffix(text) {
+  let hash = 0;
+  for (let i = 0;i < text.length; i++) {
+    hash = Math.imul(hash, 31) + text.charCodeAt(i) | 0;
+  }
+  return Math.abs(hash).toString(36);
 }
 function transcriptProjectKey(absPath) {
-  const sanitized = sanitize(absPath);
+  const sanitized = sanitizeForKey(absPath);
   if (sanitized.length <= TRANSCRIPT_PROJECT_KEY_MAX_LENGTH)
     return sanitized;
-  const suffix = overflowSuffix(absPath);
-  return sanitized.slice(0, TRANSCRIPT_PROJECT_KEY_MAX_LENGTH - 1 - suffix.length) + "-" + suffix;
+  const suffix = hashSuffix(absPath);
+  const prefixLength = TRANSCRIPT_PROJECT_KEY_MAX_LENGTH - 1 - suffix.length;
+  return `${sanitized.slice(0, prefixLength)}-${suffix}`;
 }
 // src/paths/keys.ts
 import { realpathSync } from "node:fs";
@@ -2053,52 +2059,52 @@ import { CATALOG_TAG_RENAMES } from "@yanlinglabs/winter-provider-catalog";
 
 // src/plugins/manage.ts
 import { mkdir, open, readFile as readFile2, rename, rmdir, unlink, writeFile } from "node:fs/promises";
-import { dirname as dirname3, isAbsolute as isAbsolute2, join as join3, resolve as resolve2 } from "node:path";
+import { dirname as dirname3, isAbsolute as isAbsolute2, join as join3, resolve } from "node:path";
 import { randomBytes } from "node:crypto";
 
 // src/plugins/marketplace-path.ts
-import { resolve, sep } from "node:path";
-var BARE_SOURCE_NAME = /^[A-Za-z0-9][-A-Za-z0-9._]*$/;
-function isBareSourceName(source) {
-  return BARE_SOURCE_NAME.test(source) && !source.includes("..");
-}
-function normalizePluginRoot(pluginRoot) {
-  if (typeof pluginRoot !== "string" || pluginRoot === "" || pluginRoot.startsWith("/") || pluginRoot.includes("\\") || pluginRoot.includes(":"))
+import path from "node:path";
+var MARKETPLACE_DIR = Symbol("marketplace-dir");
+function usableRoot(pluginRoot) {
+  if (typeof pluginRoot !== "string")
     return;
-  const stripped = pluginRoot.replace(/^\.\//, "").replace(/\/+$/, "");
-  if (stripped === "" || stripped === ".")
-    return ".";
-  if (stripped.split("/").some((segment) => segment === "" || segment === "." || segment === ".."))
+  if (pluginRoot === "" || pluginRoot.startsWith("/"))
     return;
-  return stripped;
-}
-function withPluginRootPrefix(source, normalizedRoot) {
-  if (normalizedRoot === undefined || !isBareSourceName(source))
-    return source;
-  return normalizedRoot === "." ? `./${source}` : `./${normalizedRoot}/${source}`;
-}
-function schemaSourcePath(source) {
-  const normalized = source === "." ? "./" : source;
-  return normalized.startsWith("./") ? normalized : undefined;
-}
-function resolveWithinBase(base, relativePath) {
-  const normalizedBase = resolve(base);
-  const resolved = resolve(base, relativePath);
-  if (resolved !== normalizedBase && !resolved.startsWith(normalizedBase + sep)) {
-    throw new Error(`Path traversal detected: "${relativePath}" would escape the base directory`);
+  if (pluginRoot.includes("\\") || pluginRoot.includes(":"))
+    return;
+  let rest = pluginRoot.startsWith("./") ? pluginRoot.slice(2) : pluginRoot;
+  rest = rest.replace(/\/+$/, "");
+  if (rest === "" || rest === ".")
+    return MARKETPLACE_DIR;
+  for (const piece of rest.split("/")) {
+    if (piece === "" || piece === "." || piece === "..")
+      return;
   }
-  return resolved;
+  return rest;
+}
+function isBareName(source) {
+  return /^[A-Za-z0-9][A-Za-z0-9._-]*$/.test(source) && !source.includes("..");
 }
 function resolveMarketplacePluginPath(installLocation, pluginRoot, source) {
-  if (typeof source !== "string" || source === "")
-    return;
-  const normalizedRoot = normalizePluginRoot(pluginRoot);
-  const prefixed = withPluginRootPrefix(source, normalizedRoot);
-  const sourcePath = schemaSourcePath(prefixed);
-  if (sourcePath === undefined)
-    return;
   try {
-    return resolveWithinBase(installLocation, sourcePath);
+    if (typeof source !== "string" || source === "")
+      return;
+    let relativePath = source;
+    if (isBareName(source)) {
+      const root = usableRoot(pluginRoot);
+      if (root !== undefined) {
+        relativePath = root === MARKETPLACE_DIR ? `./${source}` : `./${root}/${source}`;
+      }
+    }
+    if (relativePath === ".")
+      relativePath = "./";
+    if (!relativePath.startsWith("./"))
+      return;
+    const base = path.resolve(installLocation);
+    const candidate = path.resolve(installLocation, relativePath);
+    if (candidate === base || candidate.startsWith(base + path.sep))
+      return candidate;
+    return;
   } catch {
     return;
   }
@@ -2244,7 +2250,7 @@ function classifySource(source) {
   if (/^[a-zA-Z0-9](?:[a-zA-Z0-9._-]*[a-zA-Z0-9])?\/[a-zA-Z0-9](?:[a-zA-Z0-9._-]*[a-zA-Z0-9])?$/.test(source) && !source.includes("..")) {
     return { kind: "github", locator: source };
   }
-  return { kind: "directory", locator: isAbsolute2(source) ? source : resolve2(source) };
+  return { kind: "directory", locator: isAbsolute2(source) ? source : resolve(source) };
 }
 function marketplaceInfoOf(name, record) {
   const kind = record.source.source;

package/dist/paths/project-key.d.ts

@@ -1,3 +1,4 @@
 export declare const TRANSCRIPT_PROJECT_KEY_MAX_LENGTH = 64;
 export declare function isVendorCompliantProjectKey(key: string): boolean;
+/** The transcript project key for an absolute path. */
 export declare function transcriptProjectKey(absPath: string): string;

package/dist/plugins/marketplace-path.d.ts

@@ -1,10 +1 @@
-/**
- * Resolve one marketplace manifest plugin entry's install path -- the ONE function
- * `packages/runtime/src/plugins/installed.ts` (the daemon's own directory-marketplace fallback,
- * SV-4) and `packages/sdk/src/plugins/manage.ts` (`resolvePluginSourcePath`, the CLI-facing install
- * command) both call, so the two can never resolve the identical manifest entry to two different
- * paths. `undefined` for anything invalid or refused -- a bare name with no usable `pluginRoot`, an
- * absolute/malformed source, or a path that would escape `installLocation` -- NEVER a throw a
- * caller must remember to catch; each caller renders its own typed rejection from `undefined`.
- */
 export declare function resolveMarketplacePluginPath(installLocation: string, pluginRoot: unknown, source: unknown): string | undefined;

package/dist/settings/types.d.ts

@@ -69,12 +69,10 @@ export interface Settings {
      * `permissions.deny`'s own union exists to prevent; see `unionSandboxFilesystemDenyArrays` below).
      * CORRECTED in fix round 10, item C: round 9 reasoned `allowWrite` should NOT union (a widening
      * key should never accumulate) and used the ordinary replace-by-higher-tier merge for it instead
-     * -- the controller's round-10 ruling reverses this, dump-confirmed against claude's own live
-     * sandbox-reconciliation code unioning its OWN rule-derived allowWrite set with the native
-     * sandbox's currently-configured one (`xr=se([...yr,...$r.filter(...)])`, not a replacement).
-     * Claude itself unions the widening array too; ported here to match. `allowRead` (also new this
-     * round) is claude's own read carve-out (`getFsReadConfig`'s `allowWithinDeny`) -- carried and
-     * unioned identically for merge-parity, though `packages/runtime/src/sandbox/profile.ts`'s own
+     * -- the controller's round-10 ruling reverses this: Claude Code accumulates allowWrite entries
+     * from every source rather than letting one replace another, so Winter unions the widening array
+     * too. `allowRead` (also new this round) is the settings key for re-permitting reads inside a
+     * denied region -- carried and unioned identically for merge-parity, though `packages/runtime/src/sandbox/profile.ts`'s own
      * `buildSeatbeltProfile` does not yet enforce it (a disclosed, fails-CLOSED gap: see that file's
      * own `SandboxFilesystemSettings.allowRead` doc comment).
      */

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@yanlinglabs/winter-agent-sdk",
-  "version": "0.0.41",
+  "version": "0.0.43",
   "license": "MIT",
   "type": "module",
   "engines": {
@@ -45,15 +45,15 @@
     }
   },
   "dependencies": {
-    "@yanlinglabs/winter-provider-catalog": "0.0.41"
+    "@yanlinglabs/winter-provider-catalog": "0.0.43"
   },
   "optionalDependencies": {
-    "@yanlinglabs/winter-agent-sdk-darwin-arm64": "0.0.41"
+    "@yanlinglabs/winter-agent-sdk-darwin-arm64": "0.0.43"
   },
   "devDependencies": {
     "@types/node": "^26.4.0",
-    "@yanlinglabs/winter-conformance": "0.0.41",
-    "@yanlinglabs/winter-agent-runtime": "0.0.41"
+    "@yanlinglabs/winter-agent-runtime": "0.0.43",
+    "@yanlinglabs/winter-conformance": "0.0.43"
   },
   "scripts": {}
 }