dsh-agy-link 0.4.41 → 0.4.42

package/CHANGELOG.md

@@ -1,5 +1,15 @@
 # Changelog
 
+## 0.4.42 (2026-09-30)
+
+### English
+
+- **Fix: provisioned pool keychains are now set to never auto-lock.** A created keychain can lock later (system sleep / lock policy); a locked keychain turns every agy keyring save into an unanswerable password dialog — the keychain password is random and only the plugin knows it, so the user's login password is always rejected. `ensureIsolatedKeychain` now applies never-auto-lock settings on every boot/spawn/login (idempotent), not just at creation.
+
+### 中文 (Chinese)
+
+- **修复：预置的池账号钥匙串现在设置为永不自动锁。** 新建的钥匙串之后可能被系统上锁（系统睡眠/锁定策略）；一旦上锁，agy 的每次 keyring 保存都会弹一个**无法回答**的密码框——钥匙串密码是随机的、只有插件自己知道，用户输登录密码永远不对。`ensureIsolatedKeychain` 现在在每次启动/拉起/登录时都会幂等地套用"永不自动锁"设置，而不仅仅在创建时。
+
 ## 0.4.41 (2026-09-30)
 
 ### English

package/dist/index.js

@@ -2067,13 +2067,16 @@ function ensureIsolatedKeychain(dir, platform = process.platform, run = (file, a
 	if (platform !== "darwin") return false;
 	if (dir === "") return false;
 	const kc = join(dir, "Library", "Keychains", "login.keychain-db");
-	if (existsSync(kc)) return false;
 	try {
-		mkdirSync(join(dir, "Library", "Keychains"), { recursive: true });
 		const env = {
 			...process.env,
 			HOME: dir
 		};
+		if (existsSync(kc)) {
+			run("security", ["set-keychain-settings", kc], env);
+			return false;
+		}
+		mkdirSync(join(dir, "Library", "Keychains"), { recursive: true });
 		run("security", [
 			"create-keychain",
 			"-p",
@@ -2085,6 +2088,7 @@ function ensureIsolatedKeychain(dir, platform = process.platform, run = (file, a
 			"-s",
 			kc
 		], env);
+		run("security", ["set-keychain-settings", kc], env);
 		return true;
 	} catch {
 		return false;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-agy-link",
-  "version": "0.4.41",
+  "version": "0.4.42",
   "description": "Google Antigravity (agy CLI) models for DeepSeek Harness — stream Gemini/Claude/GPT-OSS subscriptions into DSH with thinking, tool activity, token usage and in-GUI Google OAuth login.",
   "type": "module",
   "license": "MIT",