@yanlinglabs/winter-runtime-sdk 0.0.3 → 0.0.4

package/dist/door.d.ts

@@ -68,11 +68,13 @@ export interface RouterOfficialInput {
      */
     credentials?: readonly AuthCredentialPlan[];
     /**
-     * NON-SECRET family variables: a gateway's `ANTHROPIC_BASE_URL`, a region, a project.
+     * NON-SECRET family variables: a gateway's `ANTHROPIC_BASE_URL`, a region, a project, or (router
+     * 0.0.4, C1) a `console-profile` session's `ANTHROPIC_PROFILE` name and `ANTHROPIC_CONFIG_DIR` path.
      *
      * Separate from `credentials` because they are not secrets and must not travel through a keychain
      * read — and because §12's gateway caveat ("set the full credential pair or neither") is checked
-     * across both halves by the auth validator, whichever side each variable came from.
+     * across both halves by the auth validator, whichever side each variable came from. The same shape
+     * applies to `console-profile`'s pairing rule: set both names here or neither.
      */
     connectionEnv?: Readonly<Record<string, string>>;
     /** §3's minimal OS set. Build it with `minimalOsEnvironmentFrom(process.env)` at the host's call site. */
@@ -273,16 +275,31 @@ export declare function officialUserTurn(text: string, sessionId: string): Offic
  * DERIVED ONLY WHERE THE MAPPING IS UNAMBIGUOUS. `api-key` is one variable; `console-oauth` is a
  * bearer token whose endpoint is non-secret and travels in `connectionEnv` (§12's "gateway configs
  * MUST set the full credential pair" is then checked by the auth validator, across both halves). The
- * two families that inject nothing inject nothing. A cloud credential chain and a `custom` family name
- * their own variables, because their sets are the host's: a chain's variables depend on which of
- * Bedrock's or Vertex's several auth modes the deployment uses, and `custom` is open by definition.
+ * three families that inject nothing (`claude-oauth`, `local-none`, and router 0.0.4's
+ * `console-profile` — its `ANTHROPIC_PROFILE`/`ANTHROPIC_CONFIG_DIR` pair are non-secret and travel in
+ * `connectionEnv` exactly like `console-oauth`'s base URL, never through a keychain-backed plan)
+ * inject nothing. A cloud credential chain and a `custom` family name their own variables, because
+ * their sets are the host's: a chain's variables depend on which of Bedrock's or Vertex's several auth
+ * modes the deployment uses, and `custom` is open by definition.
  */
 export declare function officialCredentialPlan(args: {
     selection: RuntimeSelection;
     provider: ProviderSelection | undefined;
     explicit: readonly AuthCredentialPlan[] | undefined;
 }): readonly AuthCredentialPlan[];
-/** Non-secret connection variables a family sets, from the contract's own `ProviderConnectionConfig`. */
+/**
+ * Non-secret connection variables a family sets, from the contract's own `ProviderConnectionConfig`
+ * plus whatever the host names in `RouterOfficialInput.connectionEnv`.
+ *
+ * ROUTER 0.0.4, C1: `console-profile`'s `ANTHROPIC_PROFILE` and `ANTHROPIC_CONFIG_DIR` have no
+ * counterpart on `ProviderConnectionConfig` (that shape carries only `baseUrl`, a pinned contract type
+ * this package does not extend) and are non-secret by the same reasoning `ANTHROPIC_BASE_URL` is, so a
+ * host sets them the identical way — `connectionEnv: { ANTHROPIC_PROFILE, ANTHROPIC_CONFIG_DIR }` —
+ * and they ride through `explicit` here unchanged, exactly like any other family's non-secret pair.
+ * No family-specific derivation is needed for them the way `console-oauth`'s base URL gets one below,
+ * because the host already has both values in hand (a profile name, a directory it manages) and there
+ * is no `ProviderSelection` field to read them from instead.
+ */
 export declare function officialConnectionEnv(args: {
     selection: RuntimeSelection;
     provider: ProviderSelection | undefined;

package/dist/{index-mfd2rg7x.js → index-294jzb3e.js}

@@ -431,6 +431,7 @@ var AUTH_FAMILY_VARIABLES = {
   "console-oauth": ["ANTHROPIC_AUTH_TOKEN", "ANTHROPIC_BASE_URL"],
   bedrock: ["CLAUDE_CODE_USE_BEDROCK", "AWS_REGION", "AWS_PROFILE", "AWS_ACCESS_KEY_ID", "AWS_SECRET_ACCESS_KEY", "AWS_SESSION_TOKEN", "AWS_BEARER_TOKEN_BEDROCK", "ANTHROPIC_BEDROCK_BASE_URL"],
   vertex: ["CLAUDE_CODE_USE_VERTEX", "ANTHROPIC_VERTEX_PROJECT_ID", "CLOUD_ML_REGION", "GOOGLE_APPLICATION_CREDENTIALS", "ANTHROPIC_VERTEX_BASE_URL"],
+  "console-profile": ["ANTHROPIC_PROFILE", "ANTHROPIC_CONFIG_DIR"],
   "claude-oauth": [],
   "local-none": []
 };
@@ -499,6 +500,13 @@ function validateAuthEnvironment(args) {
         branchLabel: args.branchLabel
       });
     }
+    if (args.selection.authFamily === "console-profile" && names.includes("ANTHROPIC_PROFILE") !== names.includes("ANTHROPIC_CONFIG_DIR")) {
+      throw new OfficialConfigurationError({
+        option: "credentials",
+        reason: "the console-profile family sets ANTHROPIC_PROFILE and ANTHROPIC_CONFIG_DIR together or not at all — one without the other resolves against whatever the CLI's own default profile store holds, silently (router 0.0.4, C1)",
+        branchLabel: args.branchLabel
+      });
+    }
   }
 }
 async function fetchAuthCredentials(args) {

package/dist/index.js

@@ -35,7 +35,7 @@ import {
   officialToolAliases,
   resolveSavedApprovalDisposition,
   targetsForbiddenPath
-} from "./index-mfd2rg7x.js";
+} from "./index-294jzb3e.js";
 
 // src/index.ts
 export * from "@yanlinglabs/winter-agent-sdk";
@@ -456,9 +456,11 @@ function officialUserTurn(text, sessionId) {
   return { type: "user", message: { role: "user", content: text }, parent_tool_use_id: null, session_id: sessionId };
 }
 function officialCredentialPlan(args) {
+  const family = authVariableSetKey(args.selection);
+  if (family === "console-profile")
+    return [];
   if (args.explicit !== undefined)
     return args.explicit;
-  const family = authVariableSetKey(args.selection);
   if (family === "claude-oauth" || family === "local-none")
     return [];
   const ref = args.provider?.authRef;

package/dist/official/auth.d.ts

@@ -25,6 +25,17 @@ export declare const AUTH_FAMILY_VARIABLES: {
     readonly "console-oauth": readonly ["ANTHROPIC_AUTH_TOKEN", "ANTHROPIC_BASE_URL"];
     readonly bedrock: readonly ["CLAUDE_CODE_USE_BEDROCK", "AWS_REGION", "AWS_PROFILE", "AWS_ACCESS_KEY_ID", "AWS_SECRET_ACCESS_KEY", "AWS_SESSION_TOKEN", "AWS_BEARER_TOKEN_BEDROCK", "ANTHROPIC_BEDROCK_BASE_URL"];
     readonly vertex: readonly ["CLAUDE_CODE_USE_VERTEX", "ANTHROPIC_VERTEX_PROJECT_ID", "CLOUD_ML_REGION", "GOOGLE_APPLICATION_CREDENTIALS", "ANTHROPIC_VERTEX_BASE_URL"];
+    /**
+     * router 0.0.4, C1: the Anthropic Console CLI's own PROFILE. Both names are NON-SECRET (a profile
+     * name and a directory path, not material) and NEITHER is a bearer credential — the profile store the
+     * CLI already manages at `ANTHROPIC_CONFIG_DIR` owns the token, so this family injects nothing that
+     * could re-point billing by itself. `officialCredentialPlan` (`door.ts`) treats it exactly like
+     * `claude-oauth`/`local-none`: an EMPTY plan, even when `provider.authRef` resolves to material, so a
+     * host that also has an API key configured never leaks it in here by accident. `ANTHROPIC_API_KEY`
+     * and `ANTHROPIC_AUTH_TOKEN` are refused for this family by the same family-membership check every
+     * other row already gets (§12's "exactly one auth family").
+     */
+    readonly "console-profile": readonly ["ANTHROPIC_PROFILE", "ANTHROPIC_CONFIG_DIR"];
     /**
      * §12's last row: NONE. "Claude OAuth (D14-gated) — stored subscription credentials live inside the
      * spool namespace; no env credential injected." The empty set is the rule, not an oversight.

package/dist/selection/runtime-selection.d.ts

@@ -34,7 +34,18 @@ export interface RuntimeSelection {
      */
     modelRef: string;
     family: string;
-    authFamily: "api-key" | "cloud-credential-chain" | "claude-oauth" | "console-oauth" | "local-none" | "custom";
+    /**
+     * `"console-profile"` (router 0.0.4, C1): the Anthropic Console CLI's own PROFILE — `ANTHROPIC_PROFILE`
+     * + `ANTHROPIC_CONFIG_DIR`, no bearer credential in the child at all (the profile store the CLI already
+     * manages owns the token). Distinct from `"console-oauth"`, which injects a bearer pair the router
+     * itself resolves (`ANTHROPIC_AUTH_TOKEN` + `ANTHROPIC_BASE_URL`) — reusing that family would either
+     * demand a token this flow never has or let the two mechanisms silently race on precedence. Reachable
+     * only by explicit declaration, the same as `claude-oauth`: never inferred from a credential ref's
+     * storage kind (`authFamilyFromRefKind`) and not a member of `OFFICIAL_SERVED_AUTH_FAMILIES`, so the
+     * D13 auto-selector never routes to it on its own — a host that wants this family builds the
+     * `RuntimeSelection` for it directly, the same shape a `custom` or `claude-oauth` host already does.
+     */
+    authFamily: "api-key" | "cloud-credential-chain" | "claude-oauth" | "console-oauth" | "console-profile" | "local-none" | "custom";
     sdkVersion: string;
     engineVersion?: string;
     reason: string;

package/dist/testing/host.js

@@ -1,6 +1,6 @@
 import {
   TRAFFIC_OPT_OUT_VARIABLES
-} from "../index-mfd2rg7x.js";
+} from "../index-294jzb3e.js";
 
 // src/testing/hermetic.ts
 import { mkdtempSync, rmSync } from "node:fs";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@yanlinglabs/winter-runtime-sdk",
-  "version": "0.0.3",
+  "version": "0.0.4",
   "license": "MIT",
   "type": "module",
   "description": "One door over the Winter Agent SDK and the official Claude Agent SDK: runtime selection, the official-SDK adapter, the shared session store, the handoff barrier and the cross-runtime messaging router.",