@theokit/sdk-tools 0.24.0 → 0.25.0

package/dist/index.js

@@ -863,9 +863,7 @@ function createGitStatusTool(opts) {
       }
       const scopeCheck = checkPathScope(path, projectRoot);
       if (scopeCheck !== null) return scopeCheck;
-      const args = ["status", "--porcelain=v1"];
-      if (opts.includeBranch !== false) args.push("-b");
-      if (path !== void 0 && path !== "") args.push("--", path);
+      const args = montarArgs(path, opts.includeBranch !== false);
       if (opts.sandbox !== void 0) {
         return statusViaSandbox(opts.sandbox, ctx, args, timeoutMs);
       }
@@ -874,6 +872,12 @@ function createGitStatusTool(opts) {
     }
   });
 }
+function montarArgs(path, comBranch) {
+  const args = ["status", "--porcelain=v1"];
+  if (comBranch) args.push("-b");
+  if (path !== void 0 && path !== "") args.push("--", path);
+  return args;
+}
 async function statusViaSandbox(sandbox, ctx, args, timeoutMs) {
   const command = ["git", ...args].map(shq).join(" ");
   const backend = await resolveSandbox(sandbox, ctx ?? {});
@@ -1794,19 +1798,11 @@ function createQuestionTool(opts) {
 }
 var MAX_FILE_SIZE = 5 * 1024 * 1024;
 var BINARY_PROBE_BYTES = 8 * 1024;
-var SENSITIVE_SEGMENTS = /* @__PURE__ */ new Set([".env", ".git", "node_modules", ".theo"]);
-function isForbiddenAtAnyDepth(path) {
-  const segs = path.replace(/\\/g, "/").split("/").filter(Boolean);
-  return segs.some((s) => {
-    if (s === ".env.example") return false;
-    return SENSITIVE_SEGMENTS.has(s) || /^\.env\./.test(s);
-  });
-}
 function forbiddenReadError(path, allowAbsolute) {
   if (isForbiddenPath(path)) {
     return JSON.stringify({ ok: false, error: "forbidden_path", path });
   }
-  if (allowAbsolute && isAbsolute(path) && isForbiddenAtAnyDepth(path)) {
+  if (allowAbsolute && isAbsolute(path) && ehProibidoEmQualquerProfundidade(path)) {
     return JSON.stringify({ ok: false, error: "forbidden_path", path });
   }
   return null;