@theokit/sdk 4.19.2 → 4.19.4

package/dist/eval.cjs

@@ -850,6 +850,11 @@ var init_atomic_write = __esm({
     warnedNfsDirs = /* @__PURE__ */ new Set();
   }
 });
+function isInside(target, base) {
+  if (target === base) return true;
+  const prefix = base.endsWith(path.sep) ? base : base + path.sep;
+  return target.startsWith(prefix);
+}
 function safePathJoin(base, ...parts) {
   if (base === "") {
     throw new Error("safePathJoin: base must be non-empty");
@@ -860,7 +865,7 @@ function safePathJoin(base, ...parts) {
   }
   const baseResolved = path.resolve(base);
   const target = path.resolve(base, ...parts);
-  if (target !== baseResolved && !target.startsWith(baseResolved + path.sep)) {
+  if (!isInside(target, baseResolved)) {
     throw new PathTraversalError(parts.join("/"), target);
   }
   return target;
@@ -885,7 +890,7 @@ function assertNoSymlinkEscape(path$1, base) {
   }
   const resolved = realpathOfDeepestExisting(path$1);
   if (resolved === void 0) return;
-  if (resolved !== baseResolved && !resolved.startsWith(baseResolved + path.sep)) {
+  if (!isInside(resolved, baseResolved)) {
     throw new PathTraversalError(`symlink ${path$1}`, resolved);
   }
 }
@@ -17163,9 +17168,7 @@ async function loadDriver(filePath) {
   }
   try {
     const mod = await (driverLoaderOverrides?.nodeSqlite?.() ?? Promise.resolve(
-      process.getBuiltinModule?.(
-        "node:sqlite"
-      ) ?? (() => {
+      process.getBuiltinModule?.("node:sqlite") ?? (() => {
         throw new Error("node:sqlite built-in unavailable (Node < 22.3)");
       })()
     ));
@@ -19699,8 +19702,8 @@ async function getRegisteredAgentOrThrow(agentId) {
 // src/agent.ts
 init_errors();
 init_discovery();
-init_agent_factory_registry();
 init_agent_session();
+init_agent_factory_registry();
 var streamObjectImport;
 var Agent = class _Agent {
   constructor() {
@@ -19992,9 +19995,7 @@ var Agent = class _Agent {
       reg = getRegisteredAgent(agentId);
     }
     if (reg === void 0 || reg.runtime !== "local") {
-      throw new UnknownAgentError(
-        `No local agent "${agentId}" registered \u2014 compact targets local sessions.`
-      );
+      throw new UnknownAgentError(`No local agent "${agentId}" registered \u2014 compact targets local sessions.`);
     }
     const cwd = reg.cwd ?? process.cwd();
     const optModel = reg.options.model;
@@ -20004,20 +20005,16 @@ var Agent = class _Agent {
     const { defaultBaseDir: defaultBaseDir2, expandTilde: expandTilde2 } = await Promise.resolve().then(() => (init_session_transcript(), session_transcript_exports));
     const baseDir = reg.options.local?.baseDir !== void 0 ? expandTilde2(reg.options.local.baseDir) : defaultBaseDir2();
     const store = new FsSessionStore2({ baseDir, cwd });
-    return enqueueSessionWrite(
-      cwd,
-      agentId,
-      () => compactSessionTranscript2({
-        store,
-        loc: { cwd, agentId, model },
-        sessionId: agentId,
-        trigger: options.trigger ?? "manual",
-        summarize: options.summarize ?? buildDefaultSummarizer2({
-          agentModel: model,
-          ...reg.options.apiKey !== void 0 ? { apiKey: reg.options.apiKey } : {}
-        })
+    return enqueueSessionWrite(cwd, agentId, () => compactSessionTranscript2({
+      store,
+      loc: { cwd, agentId, model },
+      sessionId: agentId,
+      trigger: options.trigger ?? "manual",
+      summarize: options.summarize ?? buildDefaultSummarizer2({
+        agentModel: model,
+        ...reg.options.apiKey !== void 0 ? { apiKey: reg.options.apiKey } : {}
       })
-    );
+    }));
   }
   /**
    * M51 — inject a SYNTHETIC user+assistant pair into a LOCAL session's persisted transcript WITHOUT
@@ -20034,9 +20031,7 @@ var Agent = class _Agent {
       reg = getRegisteredAgent(agentId);
     }
     if (reg === void 0 || reg.runtime !== "local") {
-      throw new UnknownAgentError(
-        `No local agent "${agentId}" registered \u2014 injectSessionTurn targets local sessions.`
-      );
+      throw new UnknownAgentError(`No local agent "${agentId}" registered \u2014 injectSessionTurn targets local sessions.`);
     }
     const cwd = reg.cwd ?? process.cwd();
     const optModel = reg.options.model;