@theokit/sdk 4.41.1 → 4.42.1

package/dist/context/index.d.cts

@@ -0,0 +1,78 @@
+/**
+ * `@theokit/sdk/context` — context assembly, as a SANCTIONED PUBLIC surface.
+ *
+ * Everything re-exported here is under semver. That is the whole difference from the
+ * `internal/*` subpaths (`internal/persistence`, `internal/security`, `internal/memory-adapters`),
+ * which the package documents as "internal API — semver-exempt" and is retiring:
+ * `internal/persistence` is `@deprecated` in favour of the sanctioned `@theokit/sdk/persistence`,
+ * and `internal/plugins` + `internal/observability` were deleted as dead public surface in July.
+ *
+ * **The list is explicit and there is no `export *`.** The tree behind it holds 13 files, including
+ * YAML shims and parser internals a consumer never needs. Publishing the directory would commit
+ * this package to every file in it; widening this list is a deliberate act.
+ *
+ * @public
+ */
+export type { DiscoveryParser, DiscoveryScope, DiscoverySpec, } from "../internal/runtime/context/context-discovery.js";
+/**
+ * The seven conventions {@link runDiscovery} looks for when `specs` is omitted — `AGENTS.md`,
+ * `GEMINI.md`, `CLAUDE.md`, `.cursor/rules/*.mdc`, `.theokit/rules/*.md`, `.theokit/context/*.md`
+ * and `.theokit/THEO.md`.
+ *
+ * Exported because `specs` REPLACES this list rather than extending it. Without the constant, a
+ * consumer registering one convention of its own silently loses every built-in one, and the loss is
+ * invisible — discovery simply returns fewer sources. Spread it to extend:
+ *
+ * ```ts
+ * await runDiscovery({ cwd, maxBytesPerFile, specs: [...DEFAULT_DISCOVERY_SPECS, mySpec] });
+ * ```
+ *
+ * @public
+ */
+export { DEFAULT_DISCOVERY_SPECS } from "../internal/runtime/context/context-discovery.js";
+export { type DiscoveryRunnerOptions, runDiscovery, } from "../internal/runtime/context/context-discovery-runner.js";
+export { parseRules, shouldActivateRule, } from "../internal/runtime/context/context-rules-frontmatter.js";
+/**
+ * Options for {@link resolveContextImports}.
+ *
+ * `projectRoot` is REQUIRED here and OPTIONAL on the internal `resolveImports`, and the asymmetry
+ * is the point rather than an oversight.
+ *
+ * Internally the field has to be optional: it was added in 4.41.1 to close a defect where a
+ * repository-supplied `CLAUDE.md` could name `@~/.ssh/id_rsa` and have that file inlined into the
+ * agent's system prompt, and making it required would have broken every caller that predates it.
+ *
+ * As a PUBLIC contract the same optionality inverts into a trap. The obvious call omits the field,
+ * compiles, and silently restores the un-contained behaviour — so the easiest way to use the API
+ * would be the unsafe one, published under semver and therefore unfixable without a breaking
+ * change. Requiring it makes the safe call the only call.
+ *
+ * @public
+ */
+export interface ResolveContextImportsOptions {
+    /**
+     * The directory an `@import` may not escape, compared after symlink resolution.
+     *
+     * A document carrying imports is repository-controlled — untrusted input whenever the repository
+     * came from somewhere else — so the boundary is not optional.
+     */
+    readonly projectRoot: string;
+    /** Per-import file cap, forwarded to the loader. */
+    readonly maxBytesPerFile: number;
+    /** Absolute paths already resolved, for cycle detection. Defaults to an empty set. */
+    readonly visited?: Set<string>;
+    /** Current recursion depth. Defaults to 0; the resolver caps at 5 hops. */
+    readonly depth?: number;
+}
+/**
+ * Expand `@path` import directives in `content`, confined to `options.projectRoot`.
+ *
+ * A line that is exactly `@some/path` is replaced with that file's content, recursively, with cycle
+ * detection and a 5-hop cap. A target resolving outside the root — by `..`, by an absolute path, by
+ * `~/`, or through a symlink — is replaced with a refusal placeholder rather than its bytes, and the
+ * placeholder echoes the path as the author wrote it rather than as resolved, so a refusal does not
+ * leak the layout of the machine back into the same untrusted document.
+ *
+ * @public
+ */
+export declare function resolveContextImports(content: string, basePath: string, options: ResolveContextImportsOptions): Promise<string>;

package/dist/context/index.d.ts

@@ -0,0 +1,78 @@
+/**
+ * `@theokit/sdk/context` — context assembly, as a SANCTIONED PUBLIC surface.
+ *
+ * Everything re-exported here is under semver. That is the whole difference from the
+ * `internal/*` subpaths (`internal/persistence`, `internal/security`, `internal/memory-adapters`),
+ * which the package documents as "internal API — semver-exempt" and is retiring:
+ * `internal/persistence` is `@deprecated` in favour of the sanctioned `@theokit/sdk/persistence`,
+ * and `internal/plugins` + `internal/observability` were deleted as dead public surface in July.
+ *
+ * **The list is explicit and there is no `export *`.** The tree behind it holds 13 files, including
+ * YAML shims and parser internals a consumer never needs. Publishing the directory would commit
+ * this package to every file in it; widening this list is a deliberate act.
+ *
+ * @public
+ */
+export type { DiscoveryParser, DiscoveryScope, DiscoverySpec, } from "../internal/runtime/context/context-discovery.js";
+/**
+ * The seven conventions {@link runDiscovery} looks for when `specs` is omitted — `AGENTS.md`,
+ * `GEMINI.md`, `CLAUDE.md`, `.cursor/rules/*.mdc`, `.theokit/rules/*.md`, `.theokit/context/*.md`
+ * and `.theokit/THEO.md`.
+ *
+ * Exported because `specs` REPLACES this list rather than extending it. Without the constant, a
+ * consumer registering one convention of its own silently loses every built-in one, and the loss is
+ * invisible — discovery simply returns fewer sources. Spread it to extend:
+ *
+ * ```ts
+ * await runDiscovery({ cwd, maxBytesPerFile, specs: [...DEFAULT_DISCOVERY_SPECS, mySpec] });
+ * ```
+ *
+ * @public
+ */
+export { DEFAULT_DISCOVERY_SPECS } from "../internal/runtime/context/context-discovery.js";
+export { type DiscoveryRunnerOptions, runDiscovery, } from "../internal/runtime/context/context-discovery-runner.js";
+export { parseRules, shouldActivateRule, } from "../internal/runtime/context/context-rules-frontmatter.js";
+/**
+ * Options for {@link resolveContextImports}.
+ *
+ * `projectRoot` is REQUIRED here and OPTIONAL on the internal `resolveImports`, and the asymmetry
+ * is the point rather than an oversight.
+ *
+ * Internally the field has to be optional: it was added in 4.41.1 to close a defect where a
+ * repository-supplied `CLAUDE.md` could name `@~/.ssh/id_rsa` and have that file inlined into the
+ * agent's system prompt, and making it required would have broken every caller that predates it.
+ *
+ * As a PUBLIC contract the same optionality inverts into a trap. The obvious call omits the field,
+ * compiles, and silently restores the un-contained behaviour — so the easiest way to use the API
+ * would be the unsafe one, published under semver and therefore unfixable without a breaking
+ * change. Requiring it makes the safe call the only call.
+ *
+ * @public
+ */
+export interface ResolveContextImportsOptions {
+    /**
+     * The directory an `@import` may not escape, compared after symlink resolution.
+     *
+     * A document carrying imports is repository-controlled — untrusted input whenever the repository
+     * came from somewhere else — so the boundary is not optional.
+     */
+    readonly projectRoot: string;
+    /** Per-import file cap, forwarded to the loader. */
+    readonly maxBytesPerFile: number;
+    /** Absolute paths already resolved, for cycle detection. Defaults to an empty set. */
+    readonly visited?: Set<string>;
+    /** Current recursion depth. Defaults to 0; the resolver caps at 5 hops. */
+    readonly depth?: number;
+}
+/**
+ * Expand `@path` import directives in `content`, confined to `options.projectRoot`.
+ *
+ * A line that is exactly `@some/path` is replaced with that file's content, recursively, with cycle
+ * detection and a 5-hop cap. A target resolving outside the root — by `..`, by an absolute path, by
+ * `~/`, or through a symlink — is replaced with a refusal placeholder rather than its bytes, and the
+ * placeholder echoes the path as the author wrote it rather than as resolved, so a refusal does not
+ * leak the layout of the machine back into the same untrusted document.
+ *
+ * @public
+ */
+export declare function resolveContextImports(content: string, basePath: string, options: ResolveContextImportsOptions): Promise<string>;

package/dist/context/index.js

@@ -0,0 +1,18 @@
+import { resolveImports } from '../chunk-ZZAAQOAZ.js';
+export { parseRules, runDiscovery, shouldActivateRule } from '../chunk-ZZAAQOAZ.js';
+export { DEFAULT_DISCOVERY_SPECS } from '../chunk-UJ7IQJAG.js';
+
+// src/context/index.ts
+function resolveContextImports(content, basePath, options) {
+  const internalOptions = {
+    visited: options.visited ?? /* @__PURE__ */ new Set(),
+    depth: options.depth ?? 0,
+    maxBytesPerFile: options.maxBytesPerFile,
+    projectRoot: options.projectRoot
+  };
+  return resolveImports(content, basePath, internalOptions);
+}
+
+export { resolveContextImports };
+//# sourceMappingURL=index.js.map
+//# sourceMappingURL=index.js.map

package/dist/context/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/context/index.ts"],"names":[],"mappings":";;;;;AA+FO,SAAS,qBAAA,CACd,OAAA,EACA,QAAA,EACA,OAAA,EACiB;AACjB,EAAA,MAAM,eAAA,GAAyC;AAAA,IAC7C,OAAA,EAAS,OAAA,CAAQ,OAAA,oBAAW,IAAI,GAAA,EAAY;AAAA,IAC5C,KAAA,EAAO,QAAQ,KAAA,IAAS,CAAA;AAAA,IACxB,iBAAiB,OAAA,CAAQ,eAAA;AAAA,IACzB,aAAa,OAAA,CAAQ;AAAA,GACvB;AACA,EAAA,OAAO,cAAA,CAAuB,OAAA,EAAS,QAAA,EAAU,eAAe,CAAA;AAClE","file":"index.js","sourcesContent":["/**\n * `@theokit/sdk/context` — context assembly, as a SANCTIONED PUBLIC surface.\n *\n * Everything re-exported here is under semver. That is the whole difference from the\n * `internal/*` subpaths (`internal/persistence`, `internal/security`, `internal/memory-adapters`),\n * which the package documents as \"internal API — semver-exempt\" and is retiring:\n * `internal/persistence` is `@deprecated` in favour of the sanctioned `@theokit/sdk/persistence`,\n * and `internal/plugins` + `internal/observability` were deleted as dead public surface in July.\n *\n * **The list is explicit and there is no `export *`.** The tree behind it holds 13 files, including\n * YAML shims and parser internals a consumer never needs. Publishing the directory would commit\n * this package to every file in it; widening this list is a deliberate act.\n *\n * @public\n */\n\nimport {\n  type ResolveImportsOptions,\n  resolveImports as resolveImportsInternal,\n} from \"../internal/runtime/context/context-import-resolver.js\";\n\nexport type {\n  DiscoveryParser,\n  DiscoveryScope,\n  DiscoverySpec,\n} from \"../internal/runtime/context/context-discovery.js\";\n/**\n * The seven conventions {@link runDiscovery} looks for when `specs` is omitted — `AGENTS.md`,\n * `GEMINI.md`, `CLAUDE.md`, `.cursor/rules/*.mdc`, `.theokit/rules/*.md`, `.theokit/context/*.md`\n * and `.theokit/THEO.md`.\n *\n * Exported because `specs` REPLACES this list rather than extending it. Without the constant, a\n * consumer registering one convention of its own silently loses every built-in one, and the loss is\n * invisible — discovery simply returns fewer sources. Spread it to extend:\n *\n * ```ts\n * await runDiscovery({ cwd, maxBytesPerFile, specs: [...DEFAULT_DISCOVERY_SPECS, mySpec] });\n * ```\n *\n * @public\n */\nexport { DEFAULT_DISCOVERY_SPECS } from \"../internal/runtime/context/context-discovery.js\";\nexport {\n  type DiscoveryRunnerOptions,\n  runDiscovery,\n} from \"../internal/runtime/context/context-discovery-runner.js\";\nexport {\n  parseRules,\n  shouldActivateRule,\n} from \"../internal/runtime/context/context-rules-frontmatter.js\";\n\n/**\n * Options for {@link resolveContextImports}.\n *\n * `projectRoot` is REQUIRED here and OPTIONAL on the internal `resolveImports`, and the asymmetry\n * is the point rather than an oversight.\n *\n * Internally the field has to be optional: it was added in 4.41.1 to close a defect where a\n * repository-supplied `CLAUDE.md` could name `@~/.ssh/id_rsa` and have that file inlined into the\n * agent's system prompt, and making it required would have broken every caller that predates it.\n *\n * As a PUBLIC contract the same optionality inverts into a trap. The obvious call omits the field,\n * compiles, and silently restores the un-contained behaviour — so the easiest way to use the API\n * would be the unsafe one, published under semver and therefore unfixable without a breaking\n * change. Requiring it makes the safe call the only call.\n *\n * @public\n */\nexport interface ResolveContextImportsOptions {\n  /**\n   * The directory an `@import` may not escape, compared after symlink resolution.\n   *\n   * A document carrying imports is repository-controlled — untrusted input whenever the repository\n   * came from somewhere else — so the boundary is not optional.\n   */\n  readonly projectRoot: string;\n  /** Per-import file cap, forwarded to the loader. */\n  readonly maxBytesPerFile: number;\n  /** Absolute paths already resolved, for cycle detection. Defaults to an empty set. */\n  readonly visited?: Set<string>;\n  /** Current recursion depth. Defaults to 0; the resolver caps at 5 hops. */\n  readonly depth?: number;\n}\n\n/**\n * Expand `@path` import directives in `content`, confined to `options.projectRoot`.\n *\n * A line that is exactly `@some/path` is replaced with that file's content, recursively, with cycle\n * detection and a 5-hop cap. A target resolving outside the root — by `..`, by an absolute path, by\n * `~/`, or through a symlink — is replaced with a refusal placeholder rather than its bytes, and the\n * placeholder echoes the path as the author wrote it rather than as resolved, so a refusal does not\n * leak the layout of the machine back into the same untrusted document.\n *\n * @public\n */\nexport function resolveContextImports(\n  content: string,\n  basePath: string,\n  options: ResolveContextImportsOptions,\n): Promise<string> {\n  const internalOptions: ResolveImportsOptions = {\n    visited: options.visited ?? new Set<string>(),\n    depth: options.depth ?? 0,\n    maxBytesPerFile: options.maxBytesPerFile,\n    projectRoot: options.projectRoot,\n  };\n  return resolveImportsInternal(content, basePath, internalOptions);\n}\n"]}

package/dist/cron.cjs

@@ -1,19 +1,20 @@
 'use strict';
 
-var chunkGTLH2NI2_cjs = require('./chunk-GTLH2NI2.cjs');
-require('./chunk-RPL3POFZ.cjs');
+var chunkHLGEXZZP_cjs = require('./chunk-HLGEXZZP.cjs');
+require('./chunk-4OQXDCMN.cjs');
+require('./chunk-FAUKVJCC.cjs');
 require('./chunk-BV2MWEMV.cjs');
 require('./chunk-KCQUYQ3V.cjs');
 require('./chunk-BUUUWQMB.cjs');
-require('./chunk-ZO2L5U6F.cjs');
 require('./chunk-NRA36JKG.cjs');
-require('./chunk-FMIKUGF2.cjs');
-require('./chunk-HLNLYLNN.cjs');
+require('./chunk-QFFNMJAS.cjs');
 require('./chunk-4JBHSLQO.cjs');
+require('./chunk-HLNLYLNN.cjs');
 require('./chunk-FZ4YMZA3.cjs');
 require('./chunk-GH52NOCL.cjs');
 require('./chunk-HECR7KF5.cjs');
 require('./chunk-BBZYXVLZ.cjs');
+require('./chunk-GAXYZXYY.cjs');
 require('./chunk-6X2HUT4A.cjs');
 require('./chunk-7PESI6YD.cjs');
 require('./chunk-S4Q5OMIK.cjs');
@@ -50,7 +51,7 @@ require('./chunk-ZHPET3LZ.cjs');
 
 Object.defineProperty(exports, "Cron", {
   enumerable: true,
-  get: function () { return chunkGTLH2NI2_cjs.Cron; }
+  get: function () { return chunkHLGEXZZP_cjs.Cron; }
 });
 //# sourceMappingURL=cron.cjs.map
 //# sourceMappingURL=cron.cjs.map

package/dist/cron.js

@@ -1,17 +1,18 @@
-export { Cron } from './chunk-AUMSEL33.js';
-import './chunk-DHLVOLUX.js';
+export { Cron } from './chunk-O67XODD5.js';
+import './chunk-V5V5A6B7.js';
+import './chunk-UJ7HK7BX.js';
 import './chunk-2SFBB54R.js';
 import './chunk-GNMPCZNN.js';
 import './chunk-K2BQQ445.js';
-import './chunk-IMX5YODO.js';
 import './chunk-PYM5OUL4.js';
-import './chunk-UTYCG4RB.js';
-import './chunk-F4RUADRC.js';
+import './chunk-TDDRPFO3.js';
 import './chunk-4QEC4CCS.js';
+import './chunk-F4RUADRC.js';
 import './chunk-ZTEAJAE6.js';
 import './chunk-RJBHWM6D.js';
 import './chunk-J5RW43IR.js';
 import './chunk-AM2CNBKE.js';
+import './chunk-ZZAAQOAZ.js';
 import './chunk-ZS6SLELQ.js';
 import './chunk-LLE7HPRI.js';
 import './chunk-SNKY3C2L.js';

package/dist/eval.cjs

@@ -1,19 +1,20 @@
 'use strict';
 
 var chunkR3CKCRK3_cjs = require('./chunk-R3CKCRK3.cjs');
-var chunkRPL3POFZ_cjs = require('./chunk-RPL3POFZ.cjs');
+var chunk4OQXDCMN_cjs = require('./chunk-4OQXDCMN.cjs');
+require('./chunk-FAUKVJCC.cjs');
 require('./chunk-BV2MWEMV.cjs');
 require('./chunk-KCQUYQ3V.cjs');
 var chunkBUUUWQMB_cjs = require('./chunk-BUUUWQMB.cjs');
-require('./chunk-ZO2L5U6F.cjs');
 require('./chunk-NRA36JKG.cjs');
-require('./chunk-FMIKUGF2.cjs');
-require('./chunk-HLNLYLNN.cjs');
+require('./chunk-QFFNMJAS.cjs');
 require('./chunk-4JBHSLQO.cjs');
+require('./chunk-HLNLYLNN.cjs');
 require('./chunk-FZ4YMZA3.cjs');
 require('./chunk-GH52NOCL.cjs');
 require('./chunk-HECR7KF5.cjs');
 require('./chunk-BBZYXVLZ.cjs');
+require('./chunk-GAXYZXYY.cjs');
 require('./chunk-6X2HUT4A.cjs');
 require('./chunk-7PESI6YD.cjs');
 require('./chunk-S4Q5OMIK.cjs');
@@ -773,7 +774,7 @@ function makeDefaultEmbedder(opts) {
   let runtime;
   return (texts) => {
     if (runtime === void 0) {
-      runtime = chunkRPL3POFZ_cjs.openRouterMemoryEmbeddingProviderAdapter.create(embedderCreateOptions(opts));
+      runtime = chunk4OQXDCMN_cjs.openRouterMemoryEmbeddingProviderAdapter.create(embedderCreateOptions(opts));
     }
     return runtime.then((rt) => rt.embed(texts));
   };