@theokit/sdk-tools 0.24.0 → 0.25.0

package/dist/index.cjs

@@ -865,9 +865,7 @@ function createGitStatusTool(opts) {
       }
       const scopeCheck = checkPathScope(path$1, projectRoot);
       if (scopeCheck !== null) return scopeCheck;
-      const args = ["status", "--porcelain=v1"];
-      if (opts.includeBranch !== false) args.push("-b");
-      if (path$1 !== void 0 && path$1 !== "") args.push("--", path$1);
+      const args = montarArgs(path$1, opts.includeBranch !== false);
       if (opts.sandbox !== void 0) {
         return statusViaSandbox(opts.sandbox, ctx, args, timeoutMs);
       }
@@ -876,6 +874,12 @@ function createGitStatusTool(opts) {
     }
   });
 }
+function montarArgs(path, comBranch) {
+  const args = ["status", "--porcelain=v1"];
+  if (comBranch) args.push("-b");
+  if (path !== void 0 && path !== "") args.push("--", path);
+  return args;
+}
 async function statusViaSandbox(sandbox$1, ctx, args, timeoutMs) {
   const command = ["git", ...args].map(shq).join(" ");
   const backend = await sandbox.resolveSandbox(sandbox$1, ctx ?? {});
@@ -1796,19 +1800,11 @@ function createQuestionTool(opts) {
 }
 var MAX_FILE_SIZE = 5 * 1024 * 1024;
 var BINARY_PROBE_BYTES = 8 * 1024;
-var SENSITIVE_SEGMENTS = /* @__PURE__ */ new Set([".env", ".git", "node_modules", ".theo"]);
-function isForbiddenAtAnyDepth(path) {
-  const segs = path.replace(/\\/g, "/").split("/").filter(Boolean);
-  return segs.some((s) => {
-    if (s === ".env.example") return false;
-    return SENSITIVE_SEGMENTS.has(s) || /^\.env\./.test(s);
-  });
-}
 function forbiddenReadError(path$1, allowAbsolute) {
   if (pathSafety.isForbiddenPath(path$1)) {
     return JSON.stringify({ ok: false, error: "forbidden_path", path: path$1 });
   }
-  if (allowAbsolute && path.isAbsolute(path$1) && isForbiddenAtAnyDepth(path$1)) {
+  if (allowAbsolute && path.isAbsolute(path$1) && ehProibidoEmQualquerProfundidade(path$1)) {
     return JSON.stringify({ ok: false, error: "forbidden_path", path: path$1 });
   }
   return null;