@theokit/sdk-tools 0.10.0 → 0.11.1

package/CHANGELOG.md

@@ -1,5 +1,25 @@
 # Changelog
 
+## 0.11.1
+
+### Patch Changes
+
+- 453ad2d: SE43 — system-design audit fixes (public-surface changes).
+
+  - **`@theokit/sdk` (minor):** the shared persistence kernel is now reachable from the sanctioned public `@theokit/sdk/persistence` barrel — `withCwdMutex`, `sanitizeFts5Query`, and `PersistenceSchema` are added (joining `replaceFileAtomic` / `openSqliteResilient` / `atomicWriteText` / `atomicWriteJson`). The `@theokit/sdk/internal/persistence` export is now **deprecated**: it re-exports its full surface unchanged for one release (back-compat) and is scheduled for removal in a future major. No breaking change; existing imports keep working.
+  - **Satellites (patch):** `sdk-tools` / `sdk-memory` / `sdk-cache` / `sdk-handoff` / `sdk-budget` tightened their `@theokit/sdk` peer-range floor from `>=1.7.0` to `>=4.0.0`, matching the v4-only surfaces they import (prevents a non-workspace install resolving an incompatible old sdk).
+
+## 0.11.0
+
+### Minor Changes
+
+- SE38 (#119) — `createTodolistTool()` is now session-aware: it scopes its items by the
+  run's `ctx.threadId`, so one tool object served to many sessions from a single process
+  (the multi-tenant server shape) no longer leaks one session's list into another. When no
+  `threadId` is present (single-session CLI usage) every call shares one default session, so
+  existing behavior is unchanged. `handler` accepts an optional 2nd `ctx` argument and
+  `getItems(threadId?)` is session-scoped — both additive/back-compatible.
+
 ## 0.10.0
 
 ### Minor Changes

package/dist/index.cjs

@@ -5,8 +5,8 @@ var path = require('path');
 var sdk = require('@theokit/sdk');
 var zod = require('zod');
 var fs = require('fs');
-var persistence = require('@theokit/sdk/internal/persistence');
 var pathSafety = require('@theokit/sdk/path-safety');
+var persistence = require('@theokit/sdk/persistence');
 var child_process = require('child_process');
 var promises$1 = require('dns/promises');
 var net = require('net');
@@ -1803,7 +1803,7 @@ function requireId(input) {
   if (!("id" in input) || !input.id) return null;
   return input.id;
 }
-function createTodolistTool() {
+function makeSessionOps() {
   const items = [];
   let nextId = 1;
   function genId() {
@@ -1872,6 +1872,26 @@ ${done}/${items.length} done | ${inProg} in progress | ${pending} pending`);
     list: () => listResult({}),
     clear_completed: handleClearCompleted
   };
+  return {
+    handle: (input) => {
+      const action = actions[input.action];
+      if (!action) return fail({ error: "invalid_action" });
+      return action(input);
+    },
+    getItems: () => [...items]
+  };
+}
+function createTodolistTool() {
+  const sessions = /* @__PURE__ */ new Map();
+  function ops(threadId) {
+    const key = threadId ?? "__default__";
+    let session = sessions.get(key);
+    if (session === void 0) {
+      session = makeSessionOps();
+      sessions.set(key, session);
+    }
+    return session;
+  }
   return {
     name: "todolist",
     description: "Create and maintain a structured task list for the current session \u2014 tracks progress and keeps a multi-step plan visible across turns. Use it proactively when the work has 3+ steps or the user gave multiple tasks; skip it for a single trivial step. Keep exactly ONE item 'in_progress' at a time, and mark 'complete' only after the work is actually done. Actions: 'add' (create with title), 'in_progress' (mark started by id), 'complete' (mark done by id), 'remove' (delete by id), 'list' (show all), 'clear_completed' (remove done items). Returns { ok, items, items_summary } (items = structured array; items_summary = formatted text).",
@@ -1894,12 +1914,8 @@ ${done}/${items.length} done | ${inProg} in progress | ${pending} pending`);
       },
       required: ["action"]
     },
-    handler: (input) => {
-      const action = actions[input.action];
-      if (!action) return fail({ error: "invalid_action" });
-      return action(input);
-    },
-    getItems: () => [...items]
+    handler: (input, ctx) => ops(ctx?.threadId).handle(input),
+    getItems: (threadId) => ops(threadId).getItems()
   };
 }
 function truncateOutput(output, opts) {