@theokit/sdk-tools 0.26.1 → 0.26.3

package/CHANGELOG.md

@@ -1,5 +1,45 @@
 # Changelog
 
+## 0.26.3
+
+### Patch Changes
+
+- 8790f70: Refuse a `workspace:` range before it can reach npm.
+
+  Five of this repo's twelve publishable packages declare internal dependencies as `workspace:^`, which
+  is correct on disk and becomes an unrecoverable defect if the publish goes out through a tool that
+  does not rewrite it: `pnpm` resolves the protocol while packing, `npm` ships the manifest verbatim.
+  A version published that way fails to install for everyone and cannot be corrected — only
+  deprecated.
+
+  Every publishable package now runs the guard in `prepublishOnly`, so it fires whichever way the
+  publish is invoked, and `pnpm release` runs it once across the repo before `changeset publish`.
+
+  Note for anyone reading a published manifest: the `prepublishOnly` entry points at a path inside
+  this repository. It never runs for a consumer — the hook only fires when the package itself is
+  published — and guarding the entry point that a hand-run `npm publish` actually uses was worth the
+  cosmetic wart of shipping the line.
+
+## 0.26.2
+
+### Patch Changes
+
+- a713fc7: `interactive_shell` no longer flattens a session-cap error into
+  `interactive_unavailable`.
+
+  `toErrorJson` matched `InteractiveUnavailableError` first, so `MaxSessionsError` — which extends it —
+  took that branch and lost `max` and `liveSessionIds`. Those are the only actionable fields in the
+  error: without them the model cannot tell a missing backend from a session cap it could clear by
+  reusing one of the open sessions, which is exactly what `@theokit/sdk-pty`'s docblock says those
+  fields exist for.
+
+  The check is structural rather than `instanceof`, because the class lives in `@theokit/sdk-pty` and
+  this package does not depend on it — and the tool takes an injected backend, so any provider
+  reporting the same two fields gets the same treatment.
+
+  Measured from a consumer that had forked this tool's entire schema and handler to recover the fields,
+  since there is no error seam to override.
+
 ## 0.20.1
 
 ### Patch Changes

package/README.md

@@ -4,7 +4,7 @@ Built-in tools for `@theokit/sdk` agents. File system, git, subprocess, search-t
 
 Extracted from `@theokit/sdk@1.7.0` as part of the SDK 2.0 package split.
 
-See the [**Theo Harness Capability Map**](../../docs/harness-capability-map.md) for every tool + guard primitive (`buildRepoMap`, `isBlockedIp`, `screenedFetch`, `catastrophicShellReason`, ...) with import paths and examples.
+See the [**Theo Harness Capability Map**](../../wiki/reference/harness-capability-map.md) for every tool + guard primitive (`buildRepoMap`, `isBlockedIp`, `screenedFetch`, `catastrophicShellReason`, ...) with import paths and examples.
 
 ## Install
 

package/dist/index.cjs

@@ -793,12 +793,12 @@ function checkPathScope(path, projectRoot) {
     throw err;
   }
 }
-var SEGMENTOS_SENSIVEIS = /* @__PURE__ */ new Set([".env", ".git", "node_modules", ".theo"]);
-function ehProibidoEmQualquerProfundidade(path) {
+var SENSITIVE_SEGMENTS = /* @__PURE__ */ new Set([".env", ".git", "node_modules", ".theo"]);
+function isForbiddenAtAnyDepth(path) {
   const segs = path.replace(/\\/g, "/").split("/").filter(Boolean);
   return segs.some((s) => {
     if (s === ".env.example") return false;
-    return SEGMENTOS_SENSIVEIS.has(s) || /^\.env\./.test(s);
+    return SENSITIVE_SEGMENTS.has(s) || /^\.env\./.test(s);
   });
 }
 
@@ -866,7 +866,7 @@ function createGitStatusTool(opts) {
       }
       const scopeCheck = checkPathScope(path$1, projectRoot);
       if (scopeCheck !== null) return scopeCheck;
-      const args = montarArgs(path$1, opts.includeBranch !== false);
+      const args = buildArgs(path$1, opts.includeBranch !== false);
       if (opts.sandbox !== void 0) {
         return statusViaSandbox(opts.sandbox, ctx, args, timeoutMs);
       }
@@ -875,9 +875,9 @@ function createGitStatusTool(opts) {
     }
   });
 }
-function montarArgs(path, comBranch) {
+function buildArgs(path, withBranch) {
   const args = ["status", "--porcelain=v1"];
-  if (comBranch) args.push("-b");
+  if (withBranch) args.push("-b");
   if (path !== void 0 && path !== "") args.push("--", path);
   return args;
 }
@@ -1004,7 +1004,26 @@ function globToRegex(pattern) {
   }
   return new RegExp(`^${regexStr}$`);
 }
+function capFields(err) {
+  const e = err;
+  if (typeof e.max !== "number") return void 0;
+  if (!Array.isArray(e.liveSessionIds)) return void 0;
+  if (!e.liveSessionIds.every((id) => typeof id === "string")) return void 0;
+  return { max: e.max, liveSessionIds: e.liveSessionIds };
+}
 function toErrorJson(err) {
+  if (typeof err === "object" && err !== null) {
+    const cap = capFields(err);
+    if (cap !== void 0) {
+      return JSON.stringify({
+        ok: false,
+        error: "interactive_session_limit",
+        max: cap.max,
+        live_session_ids: [...cap.liveSessionIds],
+        message: err.message
+      });
+    }
+  }
   if (err instanceof interactive.InteractiveUnavailableError) {
     return JSON.stringify({ ok: false, error: "interactive_unavailable" });
   }
@@ -1567,10 +1586,10 @@ function createListDirTool(opts) {
     }),
     handler: async ({ path }, ctx) => {
       const relative3 = path === "" || path === "." ? "." : path;
-      const veredito = decidirEscopo(relative3, path, opts.allowAbsolute === true);
-      if (veredito.erro !== void 0) return veredito.erro;
-      if (veredito.raizAbsoluta !== void 0) {
-        return listViaLocalFs(veredito.raizAbsoluta, ".", path, max);
+      const verdict = decideScope(relative3, path, opts.allowAbsolute === true);
+      if (verdict.error !== void 0) return verdict.error;
+      if (verdict.absoluteRoot !== void 0) {
+        return listViaLocalFs(verdict.absoluteRoot, ".", path, max);
       }
       if (filesystem$1) {
         const backend = await filesystem.resolveFilesystem(filesystem$1, ctx ?? {});
@@ -1580,15 +1599,15 @@ function createListDirTool(opts) {
     }
   });
 }
-function decidirEscopo(relative3, original, allowAbsolute) {
-  const recusa = (error) => ({
-    erro: JSON.stringify({ ok: false, error, path: original })
+function decideScope(relative3, original, allowAbsolute) {
+  const refuse = (error) => ({
+    error: JSON.stringify({ ok: false, error, path: original })
   });
-  if (relative3 !== "." && pathSafety.isForbiddenPath(relative3)) return recusa("forbidden_path");
+  if (relative3 !== "." && pathSafety.isForbiddenPath(relative3)) return refuse("forbidden_path");
   if (!path.isAbsolute(relative3)) return {};
-  if (!allowAbsolute) return recusa("path_traversal");
-  if (ehProibidoEmQualquerProfundidade(relative3)) return recusa("forbidden_path");
-  return { raizAbsoluta: relative3 };
+  if (!allowAbsolute) return refuse("path_traversal");
+  if (isForbiddenAtAnyDepth(relative3)) return refuse("forbidden_path");
+  return { absoluteRoot: relative3 };
 }
 async function listViaLocalFs(projectRoot, relative3, originalPath, max) {
   const boundary = resolveDirBoundary(relative3, projectRoot, originalPath);
@@ -1750,10 +1769,10 @@ function createPlanModeTool(options) {
 }
 
 // src/question.ts
-function askerDoContexto(context) {
+function askerFromContext(context) {
   if (typeof context !== "object" || context === null) return void 0;
-  const candidato = context.askUser;
-  return typeof candidato === "function" ? candidato : void 0;
+  const candidate = context.askUser;
+  return typeof candidate === "function" ? candidate : void 0;
 }
 function createQuestionTool(opts) {
   const timeoutMs = opts.timeoutMs ?? 3e5;
@@ -1768,7 +1787,7 @@ function createQuestionTool(opts) {
       required: ["question"]
     },
     handler: async (input, ctx) => {
-      const askUser = askerDoContexto(ctx?.context) ?? opts.askUser;
+      const askUser = askerFromContext(ctx?.context) ?? opts.askUser;
       if (askUser === void 0) {
         return JSON.stringify({
           ok: false,
@@ -1805,7 +1824,7 @@ function forbiddenReadError(path$1, allowAbsolute) {
   if (pathSafety.isForbiddenPath(path$1)) {
     return JSON.stringify({ ok: false, error: "forbidden_path", path: path$1 });
   }
-  if (allowAbsolute && path.isAbsolute(path$1) && ehProibidoEmQualquerProfundidade(path$1)) {
+  if (allowAbsolute && path.isAbsolute(path$1) && isForbiddenAtAnyDepth(path$1)) {
     return JSON.stringify({ ok: false, error: "forbidden_path", path: path$1 });
   }
   return null;