@theokit/sdk 3.1.1 → 3.2.2

package/dist/{errors-D_Bfo30u.d.ts → errors-_fPS0X80.d.ts}

@@ -1,4 +1,4 @@
-import { H as RunOperation } from './run-CLXKMRgq.js';
+import { H as RunOperation } from './run-CrHz9BAP.js';
 
 /**
  * Public type contract for the Budget enforcement primitive

package/dist/{errors-DZpCGlYv.d.cts → errors-jxK4yfp5.d.cts}

@@ -1,4 +1,4 @@
-import { H as RunOperation } from './run-CLXKMRgq.cjs';
+import { H as RunOperation } from './run-CrHz9BAP.cjs';
 
 /**
  * Public type contract for the Budget enforcement primitive

package/dist/errors.d.cts

@@ -1,3 +1,3 @@
-export { A as AgentDisposedError, c as AgentRunError, d as AgentRunErrorCode, e as AuthenticationError, g as BudgetExceededError, C as ConfigurationError, u as CredentialPoolExhaustedError, m as ErrorCode, E as ErrorMetadata, I as IntegrationNotConnectedError, n as InvalidTaskIdError, K as KnownAgentRunErrorCode, M as MemoryAdapterError, o as MemoryAdapterErrorCode, N as NetworkError, R as RateLimitError, p as TaskNotFoundError, T as TheokitAgentError, U as UnknownAgentError, q as UnsupportedBudgetOperationError, r as UnsupportedRunOperationError, s as UnsupportedTaskOperationError, t as isTransientError } from './errors-DZpCGlYv.cjs';
-import './run-CLXKMRgq.cjs';
+export { A as AgentDisposedError, c as AgentRunError, d as AgentRunErrorCode, e as AuthenticationError, g as BudgetExceededError, C as ConfigurationError, u as CredentialPoolExhaustedError, m as ErrorCode, E as ErrorMetadata, I as IntegrationNotConnectedError, n as InvalidTaskIdError, K as KnownAgentRunErrorCode, M as MemoryAdapterError, o as MemoryAdapterErrorCode, N as NetworkError, R as RateLimitError, p as TaskNotFoundError, T as TheokitAgentError, U as UnknownAgentError, q as UnsupportedBudgetOperationError, r as UnsupportedRunOperationError, s as UnsupportedTaskOperationError, t as isTransientError } from './errors-jxK4yfp5.cjs';
+import './run-CrHz9BAP.cjs';
 import 'zod';

package/dist/eval.cjs

@@ -962,10 +962,10 @@ function buildToolPrompt(prompt) {
 Respond by calling the \`output\` tool with the structured answer that matches the schema.`;
 }
 function setupStructuredOutput(schema, maxRetries) {
-  const z8 = requireZod();
+  const z9 = requireZod();
   const jsonSchema = toJsonSchema(schema, { unrepresentable: "any" });
   return {
-    z: z8,
+    z: z9,
     jsonSchema,
     maxRetries: maxRetries ?? 1,
     initialUsage: { inputTokens: 0, outputTokens: 0 }
@@ -4743,7 +4743,14 @@ var init_env_policy = __esm({
       /[_-]PWD/i,
       /CREDENTIAL/i,
       /PRIVATE/i,
-      /_AUTH/i
+      /_AUTH/i,
+      // #54-a — value-embedded-secret conventions (no generic `*_URL` — see keep-list test).
+      /DSN/i,
+      /WEBHOOK/i,
+      /COOKIE/i,
+      /CONNECTION[_-]?STRING/i,
+      // Known DB / message-broker connection-string vars (carry `user:pass@`).
+      /(?:^|[_-])(?:DATABASE|DB|REDIS|MONGO(?:DB)?|POSTGRES(?:QL)?|MYSQL|MARIADB|AMQP|RABBITMQ|CLICKHOUSE|ELASTIC(?:SEARCH)?|CASSANDRA|COUCHDB|MEMCACHED|NATS|KAFKA)[_-]?(?:URL|URI|DSN|CONNECTION)/i
     ];
     CORE_VARS = [
       "PATH",
@@ -6041,7 +6048,7 @@ async function buildSystemPromptContext(inputs, userText, memoryFacts, manager =
     memory: memoryFacts.map((fact) => ({ text: fact.text }))
   };
 }
-async function buildAssemblyContext(inputs, userText, baseSystemPrompt, memoryFacts, activeMemorySummary) {
+async function buildAssemblyContext(inputs, userText, baseSystemPrompt, memoryFacts, activeMemorySummary, contextPaths) {
   const resolved = await resolveSendSkills(inputs, userText, memoryFacts);
   const baseCtx = await buildSystemPromptContext(inputs, userText, memoryFacts, resolved.manager);
   const assemblyCtx = {
@@ -6054,19 +6061,21 @@ async function buildAssemblyContext(inputs, userText, baseSystemPrompt, memoryFa
     assemblyCtx.activeMemorySummary = activeMemorySummary;
   }
   if (inputs.context !== void 0) {
+    await inputs.context.applyScope(contextPaths);
     const internal = inputs.context.internalAssemblySnapshot();
     assemblyCtx.contextSnapshot = { sources: internal.sources };
     if (internal.maxTokens !== void 0) assemblyCtx.contextMaxTokens = internal.maxTokens;
   }
   return assemblyCtx;
 }
-async function assembleSystemPromptForSend(inputs, userText, baseSystemPrompt, memoryFacts, activeMemorySummary) {
+async function assembleSystemPromptForSend(inputs, userText, baseSystemPrompt, memoryFacts, activeMemorySummary, contextPaths) {
   const ctx = await buildAssemblyContext(
     inputs,
     userText,
     baseSystemPrompt,
     memoryFacts,
-    activeMemorySummary
+    activeMemorySummary,
+    contextPaths
   );
   return inputs.systemPromptPipeline.assemble(ctx);
 }
@@ -6773,6 +6782,14 @@ var init_context_discovery = __esm({
         followImports: false,
         priority: 40
       },
+      {
+        id: "theokit-rules",
+        pattern: ".theokit/rules/*.md",
+        scope: "globbed",
+        parser: "rules-frontmatter",
+        followImports: false,
+        priority: 45
+      },
       {
         id: "theokit-context",
         pattern: ".theokit/context/*.md",
@@ -6856,32 +6873,27 @@ var init_context_import_resolver = __esm({
     MAX_HOPS = 5;
   }
 });
-function parseMdc(content) {
-  const m = FRONTMATTER_RE.exec(content);
-  if (m === null) {
-    return { frontmatter: { alwaysApply: true }, body: content };
-  }
-  const yamlBody = m[1] ?? "";
-  const body = m[2] ?? "";
-  try {
-    const parsed = parseSimpleYaml2(yamlBody);
-    const validated = McdFrontmatterSchema.safeParse(parsed);
-    if (!validated.success) return void 0;
-    return { frontmatter: validated.data, body };
-  } catch {
-    return void 0;
-  }
+
+// src/internal/runtime/context/context-glob.ts
+function globToRegex(glob) {
+  const compiled = glob.replace(/[.+^${}()|[\]\\]/g, "\\$&").replace(/\*\*\//g, "::GLOBSTAR_SLASH::").replace(/\*\*/g, "::GLOBSTAR::").replace(/\*/g, "[^/]*").replace(/\?/g, "[^/]").replace(/::GLOBSTAR_SLASH::/g, "(?:.*/)?").replace(/::GLOBSTAR::/g, ".*");
+  return new RegExp(`^${compiled}$`);
 }
-function shouldActivate(fm, touchedFiles) {
-  if (fm.alwaysApply === true) return true;
-  if (fm.globs === void 0 || fm.globs.length === 0) return false;
-  if (touchedFiles.length === 0) return false;
-  const globRes = fm.globs.map(globToRegex);
-  return touchedFiles.some((file) => globRes.some((re) => re.test(file)));
+function anyGlobMatches(patterns, paths) {
+  if (patterns.length === 0 || paths.length === 0) return false;
+  const res = patterns.map(globToRegex);
+  return paths.some((p) => res.some((re) => re.test(p)));
 }
-function globToRegex(glob) {
-  const escaped = glob.replace(/[.+^${}()|[\]\\]/g, "\\$&").replace(/\*\*/g, "::DOUBLESTAR::").replace(/\*/g, "[^/]*").replace(/::DOUBLESTAR::/g, ".*").replace(/\?/g, ".");
-  return new RegExp(`^${escaped}$`);
+var init_context_glob = __esm({
+  "src/internal/runtime/context/context-glob.ts"() {
+  }
+});
+
+// src/internal/runtime/context/context-yaml-lite.ts
+function splitFrontmatter3(content) {
+  const m = FRONTMATTER_RE.exec(content);
+  if (m === null) return { yaml: void 0, body: content };
+  return { yaml: m[1] ?? "", body: m[2] ?? "" };
 }
 function parseSimpleYaml2(yaml) {
   const out = {};
@@ -6928,15 +6940,76 @@ function parseScalar(s) {
   if (/^-?\d+$/.test(s)) return parseInt(s, 10);
   return s.replace(/^["']|["']$/g, "");
 }
-var McdFrontmatterSchema, FRONTMATTER_RE;
+var FRONTMATTER_RE;
+var init_context_yaml_lite = __esm({
+  "src/internal/runtime/context/context-yaml-lite.ts"() {
+    FRONTMATTER_RE = /^---\s*\n([\s\S]*?)\n---\s*\n([\s\S]*)$/;
+  }
+});
+function parseMdc(content) {
+  const { yaml, body } = splitFrontmatter3(content);
+  if (yaml === void 0) {
+    return { frontmatter: { alwaysApply: true }, body: content };
+  }
+  try {
+    const parsed = parseSimpleYaml2(yaml);
+    const validated = McdFrontmatterSchema.safeParse(parsed);
+    if (!validated.success) return void 0;
+    return { frontmatter: validated.data, body };
+  } catch {
+    return void 0;
+  }
+}
+function shouldActivate(fm, touchedFiles) {
+  if (fm.alwaysApply === true) return true;
+  if (fm.globs === void 0 || fm.globs.length === 0) return false;
+  return anyGlobMatches(fm.globs, touchedFiles);
+}
+var McdFrontmatterSchema;
 var init_context_mdc_parser = __esm({
   "src/internal/runtime/context/context-mdc-parser.ts"() {
+    init_context_glob();
+    init_context_yaml_lite();
     McdFrontmatterSchema = zod.z.object({
       description: zod.z.string().optional(),
       globs: zod.z.array(zod.z.string()).optional(),
       alwaysApply: zod.z.boolean().optional()
     });
-    FRONTMATTER_RE = /^---\s*\n([\s\S]*?)\n---\s*\n([\s\S]*)$/;
+  }
+});
+function parseRules(content) {
+  const { yaml, body } = splitFrontmatter3(content);
+  if (yaml === void 0) {
+    return { frontmatter: { alwaysApply: true }, body: content };
+  }
+  try {
+    const parsed = parseSimpleYaml2(yaml);
+    const validated = RulesFrontmatterSchema.safeParse(parsed);
+    if (!validated.success) return void 0;
+    return { frontmatter: validated.data, body };
+  } catch {
+    return void 0;
+  }
+}
+function shouldActivateRule(fm, inScopePaths) {
+  if (fm.enabled === false) return false;
+  if (fm.alwaysApply === true) return true;
+  const patterns = [...fm.paths ?? [], ...fm.globs ?? []];
+  if (patterns.length === 0) return false;
+  return anyGlobMatches(patterns, inScopePaths);
+}
+var RulesFrontmatterSchema;
+var init_context_rules_frontmatter = __esm({
+  "src/internal/runtime/context/context-rules-frontmatter.ts"() {
+    init_context_glob();
+    init_context_yaml_lite();
+    RulesFrontmatterSchema = zod.z.object({
+      description: zod.z.string().optional(),
+      paths: zod.z.array(zod.z.string()).optional(),
+      globs: zod.z.array(zod.z.string()).optional(),
+      alwaysApply: zod.z.boolean().optional(),
+      enabled: zod.z.boolean().optional()
+    });
   }
 });
 async function runDiscovery(opts) {
@@ -6972,6 +7045,9 @@ async function loadOneSource(spec, path$1, opts, gitRoot) {
   if (spec.parser === "mdc") {
     return loadMdcSource(spec, path$1, id, opts);
   }
+  if (spec.parser === "rules-frontmatter") {
+    return loadRulesSource(spec, path$1, id, opts);
+  }
   if (spec.parser === "frontmatter-zod") {
     return void 0;
   }
@@ -6995,6 +7071,24 @@ async function loadMdcSource(spec, path, id, opts) {
     truncated: false
   };
 }
+async function loadRulesSource(spec, path, id, opts) {
+  let raw;
+  try {
+    raw = await promises.readFile(path, "utf8");
+  } catch {
+    return void 0;
+  }
+  const parsed = parseRules(raw);
+  if (parsed === void 0) return void 0;
+  if (!shouldActivateRule(parsed.frontmatter, opts.touchedFiles ?? [])) return void 0;
+  return {
+    id,
+    source: path,
+    content: parsed.body,
+    priority: spec.priority,
+    truncated: false
+  };
+}
 async function loadPlainMarkdownSource(spec, path, id, opts) {
   const loaded = await loadPlainMarkdown(path, { maxBytesPerFile: opts.maxBytesPerFile });
   if (loaded === void 0) return void 0;
@@ -7020,6 +7114,7 @@ var init_context_discovery_runner = __esm({
     init_context_import_resolver();
     init_context_loaders();
     init_context_mdc_parser();
+    init_context_rules_frontmatter();
   }
 });
 var ContextSourceFrontmatterSchema;
@@ -7155,6 +7250,10 @@ function matchesGlob(pattern, path) {
 function tokenizeContent(content) {
   return content.split(/\s+/).filter((token) => token.length > 0);
 }
+function sameScope(a, b) {
+  if (a.length !== b.length) return false;
+  return a.every((v, i) => v === b[i]);
+}
 var FileContextManager;
 var init_context_manager = __esm({
   "src/internal/runtime/context/context-manager.ts"() {
@@ -7175,6 +7274,13 @@ var init_context_manager = __esm({
       settings;
       settingSourcesIncludeProject;
       state;
+      /**
+       * The in-scope file set used by the most recent `refresh`. Tracked so
+       * `applyScope` only touches state when the scope actually changes — a
+       * caller that never scopes (the common case) keeps the create-time
+       * snapshot untouched, at zero per-send cost.
+       */
+      lastScope = [];
       async initialize() {
         if (!this.settingSourcesIncludeProject && this.settings.manager !== "file") {
           this.state = { config: { sources: [] }, loadedSources: [] };
@@ -7182,14 +7288,31 @@ var init_context_manager = __esm({
         }
         await this.refresh();
       }
-      async refresh() {
+      /**
+       * Re-run discovery for a specific per-send in-scope file set (T3). Path-scoped
+       * rules (`.theokit/rules/*.md`, `.cursor/rules/*.mdc` globs) activate iff a
+       * pattern matches one of `contextPaths`. Idempotent: unchanged scope is a
+       * no-op, and `undefined` scope while never previously scoped never touches
+       * state (preserves the create-time snapshot for non-users).
+       */
+      async applyScope(contextPaths) {
+        const scope = contextPaths ?? [];
+        if (scope.length === 0 && this.lastScope.length === 0) return;
+        if (sameScope(scope, this.lastScope)) return;
+        await this.refresh({ touchedFiles: scope });
+      }
+      async refresh(opts) {
+        const touchedFiles = opts?.touchedFiles ?? [];
+        this.lastScope = [...touchedFiles];
         const config = await loadContextConfig(this.cwd);
         const legacy = await loadSources(config, this.cwd);
         const maxBytesPerFile = this.settings.maxBytesPerFile ?? DEFAULT_MAX_BYTES_PER_FILE;
         const maxBytesTotal = this.settings.maxBytesTotal ?? DEFAULT_MAX_BYTES_TOTAL;
         const discovered = await runDiscovery({
           cwd: this.cwd,
-          maxBytesPerFile});
+          maxBytesPerFile,
+          touchedFiles
+        });
         const legacyAsAggregator = legacy.map((src) => ({
           id: src.name,
           source: src.path,
@@ -7624,15 +7747,19 @@ async function collectChildToolResults(run) {
 ${lines.join("\n")}
 </subagent-tool-results>`;
 }
-async function runChildAgent(spec, input, signal, maxSteps, inherited) {
-  const { Agent: Agent2 } = await Promise.resolve().then(() => (init_agent(), agent_exports));
+function buildChildCreateOptions(spec, inherited) {
   const model = spec.model ? { id: spec.model } : inherited?.model;
-  const agent = await Agent2.create({
+  return {
     ...inherited?.apiKey !== void 0 ? { apiKey: inherited.apiKey } : {},
     ...model !== void 0 ? { model } : {},
+    ...inherited?.plugins !== void 0 ? { plugins: inherited.plugins } : {},
     systemPrompt: spec.instructions,
     tools: spec.tools ?? []
-  });
+  };
+}
+async function runChildAgent(spec, input, signal, maxSteps, inherited) {
+  const { Agent: Agent2 } = await Promise.resolve().then(() => (init_agent(), agent_exports));
+  const agent = await Agent2.create(buildChildCreateOptions(spec, inherited));
   try {
     const sendOptions = {
       ...signal !== void 0 ? { signal } : {},
@@ -9535,7 +9662,10 @@ async function runAgentLoop(inputs) {
       }
       budget.consume();
       inputs.budgetTracker?.nextIteration?.();
-      if (inputs.signal?.aborted === true) break;
+      if (inputs.signal?.aborted === true) {
+        ctx.finalStatus = "cancelled";
+        break;
+      }
     }
     if (lastTurnDecision === "continue" && budget.shouldContinue() === false) {
       ctx.stoppedAtIterationLimit = true;
@@ -9720,15 +9850,15 @@ async function guardAndTransformToolResults(inputs, raw, ctx) {
 }
 async function continueOrTerminate(inputs, ctx, llmOutput) {
   if (llmOutput.errored) return "error";
-  if (llmOutput.text.length > 0) {
-    await emitAssistantTextStep(inputs, ctx, llmOutput.text);
+  const tCtx = { agentId: inputs.agentId, runId: inputs.runId };
+  const text = llmOutput.text.length > 0 ? await transformLlmOutputText(inputs, llmOutput.text, tCtx) : llmOutput.text;
+  if (text.length > 0) {
+    await emitAssistantTextStep(inputs, ctx, text);
   }
   if (llmOutput.stopReason !== "tool_use" || llmOutput.toolCalls.length === 0) {
     return finishOrReflect(inputs, ctx, llmOutput);
   }
-  const tCtx = { agentId: inputs.agentId, runId: inputs.runId };
-  const outText = await transformLlmOutputText(inputs, llmOutput.text, tCtx);
-  ctx.messages.push(buildAssistantTurn(outText, llmOutput.toolCalls));
+  ctx.messages.push(buildAssistantTurn(text, llmOutput.toolCalls));
   const rawResults = await dispatchTools(
     // SE12 — forward a read-only text projection of the transcript-so-far to tool
     // handlers via `ctx.messages` (consumed by defineSubAgent's messageFilter).
@@ -13052,7 +13182,12 @@ var init_client = __esm({
             code: "mcp_http_error"
           });
         }
-        return await response.json();
+        try {
+          return await response.json();
+        } catch (cause) {
+          if (isAbortLike(cause)) throw mcpTimeoutError(this.name, timeoutMs);
+          throw cause;
+        }
       }
     };
   }
@@ -13292,9 +13427,11 @@ function declarativeSubagentTools(agentOptions, parentTools) {
   return subAgentToolsFromDefinitions(agents2, parentTools);
 }
 function bindParentCredentials(tools, agentOptions) {
+  const parentPlugins = Array.isArray(agentOptions.plugins) ? agentOptions.plugins : void 0;
   const credentials = {
     ...agentOptions.apiKey !== void 0 ? { apiKey: agentOptions.apiKey } : {},
-    ...typeof agentOptions.model === "object" ? { model: agentOptions.model } : {}
+    ...typeof agentOptions.model === "object" ? { model: agentOptions.model } : {},
+    ...parentPlugins !== void 0 ? { plugins: parentPlugins } : {}
   };
   for (const tool of tools) inheritSubAgentCredentials(tool, credentials);
 }
@@ -15819,10 +15956,11 @@ var init_local_agent_memory = __esm({
       }
       buildTelemetryRecallArgs(telemetry) {
         const userId = typeof this.options.memoryContext?.userId === "string" ? this.options.memoryContext.userId : void 0;
+        const tenantId = typeof this.options.memoryContext?.tenantId === "string" ? this.options.memoryContext.tenantId : void 0;
         return {
           ...telemetry !== void 0 ? { telemetry } : {},
           ...userId !== void 0 ? { userId } : {},
-          namespace: "default",
+          namespace: tenantId ?? "default",
           scope: "session"
         };
       }
@@ -17119,7 +17257,8 @@ async function executeSendLocked(inputs, message, options) {
     userText,
     baseSystemPrompt,
     memoryFacts,
-    activeMemorySummary
+    activeMemorySummary,
+    options.contextPaths
   );
   const projectedSystemPrompt = await projectCurrentObjective(
     inputs.storageHandle,
@@ -18007,7 +18146,7 @@ var init_local_agent = __esm({
             runPreHook: (ut) => this.runPreHook(ut),
             // biome-ignore format: G8 budget — callbacks wire to private methods.
             resolveSystemPromptForSend: (ut, o, mf) => this.resolveSystemPrompt(ut, o, mf),
-            assembleSystemPromptForSend: (ut, bp, mf, ams) => assembleSystemPromptForSend(this.assemblyInputs(), ut, bp, mf, ams),
+            assembleSystemPromptForSend: (ut, bp, mf, ams, cp) => assembleSystemPromptForSend(this.assemblyInputs(), ut, bp, mf, ams, cp),
             dispatchRun: (msg, o, sp, mf, pm, mt, mp) => this.dispatchRun(msg, o, sp, mf, pm, mt, mp)
           },
           message,
@@ -19707,14 +19846,6 @@ async function llmJudgeScore(options) {
 init_env_policy();
 
 // src/sandbox/types.ts
-var SandboxSecurityError = class extends Error {
-  code = "sandbox_security";
-  constructor(message) {
-    super(message);
-    this.name = "SandboxSecurityError";
-  }
-};
-var SHELL_METACHARACTERS = /[;&|`$(){}]/;
 var SandboxBackend = class {
   config;
   constructor(config = {}) {
@@ -19757,13 +19888,6 @@ var SandboxBackend = class {
     if (result.exitCode !== 0) return [];
     return result.stdout.trim().split("\n").filter(Boolean);
   }
-  validateCommand(command) {
-    if (SHELL_METACHARACTERS.test(command)) {
-      throw new SandboxSecurityError(
-        `Command contains shell metacharacters: ${command.slice(0, 80)}`
-      );
-    }
-  }
   truncateOutput(output) {
     const max = this.config.maxOutputBytes ?? 5 * 1024 * 1024;
     if (Buffer.byteLength(output) > max) {