@theokit/sdk 4.19.2 → 4.19.3

package/dist/eval.js

@@ -857,7 +857,8 @@ function safePathJoin(base, ...parts) {
   }
   const baseResolved = resolve(base);
   const target = resolve(base, ...parts);
-  if (target !== baseResolved && !target.startsWith(baseResolved + sep)) {
+  const prefix = baseResolved.endsWith(sep) ? baseResolved : baseResolved + sep;
+  if (target !== baseResolved && !target.startsWith(prefix)) {
     throw new PathTraversalError(parts.join("/"), target);
   }
   return target;
@@ -17160,9 +17161,7 @@ async function loadDriver(filePath) {
   }
   try {
     const mod = await (driverLoaderOverrides?.nodeSqlite?.() ?? Promise.resolve(
-      process.getBuiltinModule?.(
-        "node:sqlite"
-      ) ?? (() => {
+      process.getBuiltinModule?.("node:sqlite") ?? (() => {
         throw new Error("node:sqlite built-in unavailable (Node < 22.3)");
       })()
     ));
@@ -19696,8 +19695,8 @@ async function getRegisteredAgentOrThrow(agentId) {
 // src/agent.ts
 init_errors();
 init_discovery();
-init_agent_factory_registry();
 init_agent_session();
+init_agent_factory_registry();
 var streamObjectImport;
 var Agent = class _Agent {
   constructor() {
@@ -19989,9 +19988,7 @@ var Agent = class _Agent {
       reg = getRegisteredAgent(agentId);
     }
     if (reg === void 0 || reg.runtime !== "local") {
-      throw new UnknownAgentError(
-        `No local agent "${agentId}" registered \u2014 compact targets local sessions.`
-      );
+      throw new UnknownAgentError(`No local agent "${agentId}" registered \u2014 compact targets local sessions.`);
     }
     const cwd = reg.cwd ?? process.cwd();
     const optModel = reg.options.model;
@@ -20001,20 +19998,16 @@ var Agent = class _Agent {
     const { defaultBaseDir: defaultBaseDir2, expandTilde: expandTilde2 } = await Promise.resolve().then(() => (init_session_transcript(), session_transcript_exports));
     const baseDir = reg.options.local?.baseDir !== void 0 ? expandTilde2(reg.options.local.baseDir) : defaultBaseDir2();
     const store = new FsSessionStore2({ baseDir, cwd });
-    return enqueueSessionWrite(
-      cwd,
-      agentId,
-      () => compactSessionTranscript2({
-        store,
-        loc: { cwd, agentId, model },
-        sessionId: agentId,
-        trigger: options.trigger ?? "manual",
-        summarize: options.summarize ?? buildDefaultSummarizer2({
-          agentModel: model,
-          ...reg.options.apiKey !== void 0 ? { apiKey: reg.options.apiKey } : {}
-        })
+    return enqueueSessionWrite(cwd, agentId, () => compactSessionTranscript2({
+      store,
+      loc: { cwd, agentId, model },
+      sessionId: agentId,
+      trigger: options.trigger ?? "manual",
+      summarize: options.summarize ?? buildDefaultSummarizer2({
+        agentModel: model,
+        ...reg.options.apiKey !== void 0 ? { apiKey: reg.options.apiKey } : {}
       })
-    );
+    }));
   }
   /**
    * M51 — inject a SYNTHETIC user+assistant pair into a LOCAL session's persisted transcript WITHOUT
@@ -20031,9 +20024,7 @@ var Agent = class _Agent {
       reg = getRegisteredAgent(agentId);
     }
     if (reg === void 0 || reg.runtime !== "local") {
-      throw new UnknownAgentError(
-        `No local agent "${agentId}" registered \u2014 injectSessionTurn targets local sessions.`
-      );
+      throw new UnknownAgentError(`No local agent "${agentId}" registered \u2014 injectSessionTurn targets local sessions.`);
     }
     const cwd = reg.cwd ?? process.cwd();
     const optModel = reg.options.model;