@theokit/sdk 4.41.1 → 4.42.1

package/CHANGELOG.md

@@ -1,5 +1,65 @@
 # Changelog
 
+## 4.42.1
+
+### Patch Changes
+
+- dc18357: **Security.** Fix a containment check that admitted a sibling directory and any symlink.
+
+  `.theokit/context/*.md` frontmatter carries a `path:`, so the value is repository-controlled —
+  untrusted whenever the repository came from somewhere else. `loadSources` guarded it with
+  `absolute.startsWith(resolvePath(cwd))`, which fails twice:
+
+  - **No separator boundary.** With `cwd = /home/user/proj`, the value `../proj-evil/secret.md`
+    resolves to `/home/user/proj-evil/secret.md`, which starts with `/home/user/proj`. A sibling
+    directory whose name merely extends the project's is admitted; no traversal past the parent is
+    needed.
+  - **Lexical, not real.** A symlink whose name sits inside the root and whose target does not passes
+    any comparison made before symlink resolution.
+
+  Measured against the pre-fix code: the file outside the root was READ and its content reached the
+  context snapshot. The obvious escapes (`../../etc/passwd`, an absolute path) were refused, and
+  refusing them is what made the check look correct in review.
+
+  The correct rule already existed in the package as a private function in the import resolver, written
+  for the 4.41.1 patch. It now lives in `path-containment.ts` and both readers of repository-supplied
+  paths share it — one rule, one representation, so the two cannot drift apart again.
+
+  **A second, independent defect fixed alongside it.** `refresh()` carried every legacy source into the
+  aggregator without filtering, and then stamped `"included"` on everything the budget kept — so the
+  containment verdict was computed and discarded three statements later, and `snapshot()` reported an
+  excluded source as included. Nothing leaked through that path (the content was empty), but a consumer
+  auditing "what is in my context" got the wrong answer.
+
+## 4.42.0
+
+### Minor Changes
+
+- 09d5dbc: Add `@theokit/sdk/context` — a sanctioned public barrel for context assembly.
+
+  Discovery, rule activation and `@path` import resolution were implemented inside
+  `internal/runtime/context/` and reachable by nobody: 31 subpaths were declared, none covered the
+  tree, and every deep import answered `ERR_PACKAGE_PATH_NOT_EXPORTED`. A consumer that wanted the
+  capability had to re-derive it — measured at ~430 LoC in one downstream product.
+
+  The barrel is a curated list, never `export *`: `runDiscovery`, `parseRules`, `shouldActivateRule`,
+  `resolveContextImports`, plus the `DiscoverySpec` / `DiscoveryScope` / `DiscoveryParser` types. The
+  tree behind it holds 13 files including YAML shims and parser internals a consumer never needs, and
+  publishing the directory would commit this package to every file in it.
+
+  Deliberately NOT under `internal/*`. Those subpaths are documented "internal API — semver-exempt",
+  `internal/persistence` is `@deprecated` in favour of a sanctioned barrel, and two siblings were
+  deleted as dead public surface. What is exported here is under semver.
+
+  **`resolveContextImports` is a wrapper, not a re-export, and the difference is a security boundary.**
+  The internal `resolveImports` takes `projectRoot` as an OPTIONAL field — correct for the callers that
+  predate 4.41.1, and a trap as a public contract: the obvious call omits it and silently restores the
+  un-contained behaviour that 4.41.1 patched, published under semver and therefore unfixable without a
+  breaking change. On the public surface the root is REQUIRED, asserted by a `@ts-expect-error` test.
+
+  `applyAggregateCap` is deliberately excluded: its `priority` field means "position among the SDK's
+  own seven specs", which is not a contract a consumer registering its own source can use.
+
 ## 4.41.1
 
 ### Patch Changes

package/dist/{agent-JDJEBJHU.cjs → agent-DRUORJTU.cjs}

@@ -1,18 +1,19 @@
 'use strict';
 
-var chunkRPL3POFZ_cjs = require('./chunk-RPL3POFZ.cjs');
+var chunk4OQXDCMN_cjs = require('./chunk-4OQXDCMN.cjs');
+require('./chunk-FAUKVJCC.cjs');
 require('./chunk-BV2MWEMV.cjs');
 require('./chunk-KCQUYQ3V.cjs');
 require('./chunk-BUUUWQMB.cjs');
-require('./chunk-ZO2L5U6F.cjs');
 require('./chunk-NRA36JKG.cjs');
-require('./chunk-FMIKUGF2.cjs');
-require('./chunk-HLNLYLNN.cjs');
+require('./chunk-QFFNMJAS.cjs');
 require('./chunk-4JBHSLQO.cjs');
+require('./chunk-HLNLYLNN.cjs');
 require('./chunk-FZ4YMZA3.cjs');
 require('./chunk-GH52NOCL.cjs');
 require('./chunk-HECR7KF5.cjs');
 require('./chunk-BBZYXVLZ.cjs');
+require('./chunk-GAXYZXYY.cjs');
 require('./chunk-6X2HUT4A.cjs');
 require('./chunk-7PESI6YD.cjs');
 require('./chunk-S4Q5OMIK.cjs');
@@ -49,7 +50,7 @@ require('./chunk-ZHPET3LZ.cjs');
 
 Object.defineProperty(exports, "Agent", {
   enumerable: true,
-  get: function () { return chunkRPL3POFZ_cjs.Agent; }
+  get: function () { return chunk4OQXDCMN_cjs.Agent; }
 });
-//# sourceMappingURL=agent-JDJEBJHU.cjs.map
-//# sourceMappingURL=agent-JDJEBJHU.cjs.map
+//# sourceMappingURL=agent-DRUORJTU.cjs.map
+//# sourceMappingURL=agent-DRUORJTU.cjs.map

package/dist/{agent-JDJEBJHU.cjs.map → agent-DRUORJTU.cjs.map}

@@ -1 +1 @@
-{"version":3,"sources":[],"names":[],"mappings":"","file":"agent-JDJEBJHU.cjs"}
+{"version":3,"sources":[],"names":[],"mappings":"","file":"agent-DRUORJTU.cjs"}

package/dist/{agent-LVKAYADR.js → agent-MVYGMWPM.js}

@@ -1,16 +1,17 @@
-export { Agent } from './chunk-DHLVOLUX.js';
+export { Agent } from './chunk-V5V5A6B7.js';
+import './chunk-UJ7HK7BX.js';
 import './chunk-2SFBB54R.js';
 import './chunk-GNMPCZNN.js';
 import './chunk-K2BQQ445.js';
-import './chunk-IMX5YODO.js';
 import './chunk-PYM5OUL4.js';
-import './chunk-UTYCG4RB.js';
-import './chunk-F4RUADRC.js';
+import './chunk-TDDRPFO3.js';
 import './chunk-4QEC4CCS.js';
+import './chunk-F4RUADRC.js';
 import './chunk-ZTEAJAE6.js';
 import './chunk-RJBHWM6D.js';
 import './chunk-J5RW43IR.js';
 import './chunk-AM2CNBKE.js';
+import './chunk-ZZAAQOAZ.js';
 import './chunk-ZS6SLELQ.js';
 import './chunk-LLE7HPRI.js';
 import './chunk-SNKY3C2L.js';
@@ -42,5 +43,5 @@ import './chunk-6FSQ3CHQ.js';
 import './chunk-OLLOUAUJ.js';
 import './chunk-MRKSSN36.js';
 import './chunk-PBML2FHN.js';
-//# sourceMappingURL=agent-LVKAYADR.js.map
-//# sourceMappingURL=agent-LVKAYADR.js.map
+//# sourceMappingURL=agent-MVYGMWPM.js.map
+//# sourceMappingURL=agent-MVYGMWPM.js.map

package/dist/{agent-LVKAYADR.js.map → agent-MVYGMWPM.js.map}

@@ -1 +1 @@
-{"version":3,"sources":[],"names":[],"mappings":"","file":"agent-LVKAYADR.js"}
+{"version":3,"sources":[],"names":[],"mappings":"","file":"agent-MVYGMWPM.js"}