@theokit/sdk 4.42.0 → 4.42.1

package/CHANGELOG.md

@@ -1,5 +1,36 @@
 # Changelog
 
+## 4.42.1
+
+### Patch Changes
+
+- dc18357: **Security.** Fix a containment check that admitted a sibling directory and any symlink.
+
+  `.theokit/context/*.md` frontmatter carries a `path:`, so the value is repository-controlled —
+  untrusted whenever the repository came from somewhere else. `loadSources` guarded it with
+  `absolute.startsWith(resolvePath(cwd))`, which fails twice:
+
+  - **No separator boundary.** With `cwd = /home/user/proj`, the value `../proj-evil/secret.md`
+    resolves to `/home/user/proj-evil/secret.md`, which starts with `/home/user/proj`. A sibling
+    directory whose name merely extends the project's is admitted; no traversal past the parent is
+    needed.
+  - **Lexical, not real.** A symlink whose name sits inside the root and whose target does not passes
+    any comparison made before symlink resolution.
+
+  Measured against the pre-fix code: the file outside the root was READ and its content reached the
+  context snapshot. The obvious escapes (`../../etc/passwd`, an absolute path) were refused, and
+  refusing them is what made the check look correct in review.
+
+  The correct rule already existed in the package as a private function in the import resolver, written
+  for the 4.41.1 patch. It now lives in `path-containment.ts` and both readers of repository-supplied
+  paths share it — one rule, one representation, so the two cannot drift apart again.
+
+  **A second, independent defect fixed alongside it.** `refresh()` carried every legacy source into the
+  aggregator without filtering, and then stamped `"included"` on everything the budget kept — so the
+  containment verdict was computed and discarded three statements later, and `snapshot()` reported an
+  excluded source as included. Nothing leaked through that path (the content was empty), but a consumer
+  auditing "what is in my context" got the wrong answer.
+
 ## 4.42.0
 
 ### Minor Changes

package/dist/{agent-HGDXQEQQ.cjs → agent-DRUORJTU.cjs}

@@ -1,6 +1,6 @@
 'use strict';
 
-var chunkYHQ3DG24_cjs = require('./chunk-YHQ3DG24.cjs');
+var chunk4OQXDCMN_cjs = require('./chunk-4OQXDCMN.cjs');
 require('./chunk-FAUKVJCC.cjs');
 require('./chunk-BV2MWEMV.cjs');
 require('./chunk-KCQUYQ3V.cjs');
@@ -13,7 +13,7 @@ require('./chunk-FZ4YMZA3.cjs');
 require('./chunk-GH52NOCL.cjs');
 require('./chunk-HECR7KF5.cjs');
 require('./chunk-BBZYXVLZ.cjs');
-require('./chunk-22EMHGBO.cjs');
+require('./chunk-GAXYZXYY.cjs');
 require('./chunk-6X2HUT4A.cjs');
 require('./chunk-7PESI6YD.cjs');
 require('./chunk-S4Q5OMIK.cjs');
@@ -50,7 +50,7 @@ require('./chunk-ZHPET3LZ.cjs');
 
 Object.defineProperty(exports, "Agent", {
   enumerable: true,
-  get: function () { return chunkYHQ3DG24_cjs.Agent; }
+  get: function () { return chunk4OQXDCMN_cjs.Agent; }
 });
-//# sourceMappingURL=agent-HGDXQEQQ.cjs.map
-//# sourceMappingURL=agent-HGDXQEQQ.cjs.map
+//# sourceMappingURL=agent-DRUORJTU.cjs.map
+//# sourceMappingURL=agent-DRUORJTU.cjs.map

package/dist/{agent-HGDXQEQQ.cjs.map → agent-DRUORJTU.cjs.map}

@@ -1 +1 @@
-{"version":3,"sources":[],"names":[],"mappings":"","file":"agent-HGDXQEQQ.cjs"}
+{"version":3,"sources":[],"names":[],"mappings":"","file":"agent-DRUORJTU.cjs"}

package/dist/{agent-WUVYXIFX.js → agent-MVYGMWPM.js}

@@ -1,4 +1,4 @@
-export { Agent } from './chunk-KO5V6L3E.js';
+export { Agent } from './chunk-V5V5A6B7.js';
 import './chunk-UJ7HK7BX.js';
 import './chunk-2SFBB54R.js';
 import './chunk-GNMPCZNN.js';
@@ -11,7 +11,7 @@ import './chunk-ZTEAJAE6.js';
 import './chunk-RJBHWM6D.js';
 import './chunk-J5RW43IR.js';
 import './chunk-AM2CNBKE.js';
-import './chunk-Q2PPSHBS.js';
+import './chunk-ZZAAQOAZ.js';
 import './chunk-ZS6SLELQ.js';
 import './chunk-LLE7HPRI.js';
 import './chunk-SNKY3C2L.js';
@@ -43,5 +43,5 @@ import './chunk-6FSQ3CHQ.js';
 import './chunk-OLLOUAUJ.js';
 import './chunk-MRKSSN36.js';
 import './chunk-PBML2FHN.js';
-//# sourceMappingURL=agent-WUVYXIFX.js.map
-//# sourceMappingURL=agent-WUVYXIFX.js.map
+//# sourceMappingURL=agent-MVYGMWPM.js.map
+//# sourceMappingURL=agent-MVYGMWPM.js.map

package/dist/{agent-WUVYXIFX.js.map → agent-MVYGMWPM.js.map}

@@ -1 +1 @@
-{"version":3,"sources":[],"names":[],"mappings":"","file":"agent-WUVYXIFX.js"}
+{"version":3,"sources":[],"names":[],"mappings":"","file":"agent-MVYGMWPM.js"}

package/dist/{chunk-YHQ3DG24.cjs → chunk-4OQXDCMN.cjs}

@@ -8,7 +8,7 @@ var chunkQFFNMJAS_cjs = require('./chunk-QFFNMJAS.cjs');
 var chunkGH52NOCL_cjs = require('./chunk-GH52NOCL.cjs');
 var chunkHECR7KF5_cjs = require('./chunk-HECR7KF5.cjs');
 var chunkBBZYXVLZ_cjs = require('./chunk-BBZYXVLZ.cjs');
-var chunk22EMHGBO_cjs = require('./chunk-22EMHGBO.cjs');
+var chunkGAXYZXYY_cjs = require('./chunk-GAXYZXYY.cjs');
 var chunk6X2HUT4A_cjs = require('./chunk-6X2HUT4A.cjs');
 var chunk7PESI6YD_cjs = require('./chunk-7PESI6YD.cjs');
 var chunk6JSIEDKL_cjs = require('./chunk-6JSIEDKL.cjs');
@@ -3345,7 +3345,7 @@ var HISTOGRAM_NAMES = {
 };
 function safeRequire(moduleName) {
   try {
-    const r = module$1.createRequire((typeof document === 'undefined' ? require('u' + 'rl').pathToFileURL(__filename).href : (_documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === 'SCRIPT' && _documentCurrentScript.src || new URL('chunk-YHQ3DG24.cjs', document.baseURI).href)));
+    const r = module$1.createRequire((typeof document === 'undefined' ? require('u' + 'rl').pathToFileURL(__filename).href : (_documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === 'SCRIPT' && _documentCurrentScript.src || new URL('chunk-4OQXDCMN.cjs', document.baseURI).href)));
     return r(moduleName);
   } catch {
     return void 0;
@@ -3570,7 +3570,7 @@ var cachedOtel;
 function loadOtel() {
   if (cachedOtel === void 0) {
     try {
-      const r = module$1.createRequire((typeof document === 'undefined' ? require('u' + 'rl').pathToFileURL(__filename).href : (_documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === 'SCRIPT' && _documentCurrentScript.src || new URL('chunk-YHQ3DG24.cjs', document.baseURI).href)));
+      const r = module$1.createRequire((typeof document === 'undefined' ? require('u' + 'rl').pathToFileURL(__filename).href : (_documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === 'SCRIPT' && _documentCurrentScript.src || new URL('chunk-4OQXDCMN.cjs', document.baseURI).href)));
       const mod = r("@opentelemetry/api");
       cachedOtel = mod;
     } catch {
@@ -3890,7 +3890,7 @@ function applyAggregateCap(sources, maxTotal) {
     }
     const remaining = maxTotal - totalBytes;
     if (remaining > 0) {
-      const { finalContent } = chunk22EMHGBO_cjs.truncateWithMarker(s.content, remaining);
+      const { finalContent } = chunkGAXYZXYY_cjs.truncateWithMarker(s.content, remaining);
       kept.push({ ...s, content: finalContent, truncated: true });
       totalBytes = maxTotal;
     } else {
@@ -3964,15 +3964,15 @@ var FileContextManager = class {
     this.lastScope = [...touchedFiles];
     const config = await loadContextConfig(this.cwd);
     const legacy = await loadSources(config, this.cwd);
-    const maxBytesPerFile = this.settings.maxBytesPerFile ?? chunk22EMHGBO_cjs.DEFAULT_MAX_BYTES_PER_FILE;
+    const maxBytesPerFile = this.settings.maxBytesPerFile ?? chunkGAXYZXYY_cjs.DEFAULT_MAX_BYTES_PER_FILE;
     const maxBytesTotal = this.settings.maxBytesTotal ?? DEFAULT_MAX_BYTES_TOTAL;
-    const discovered = await chunk22EMHGBO_cjs.runDiscovery({
+    const discovered = await chunkGAXYZXYY_cjs.runDiscovery({
       cwd: this.cwd,
       maxBytesPerFile,
       skipLegacyTheokitContext: true,
       touchedFiles
     });
-    const legacyAsAggregator = legacy.map((src) => ({
+    const legacyAsAggregator = legacy.filter((src) => src.status !== "excluded").map((src) => ({
       id: src.name,
       source: src.path,
       content: src.tokens.join(""),
@@ -4106,7 +4106,7 @@ async function loadSources(config, cwd) {
       continue;
     }
     const absolute = path.resolve(cwd, source.path);
-    if (!absolute.startsWith(path.resolve(cwd))) {
+    if (!chunkGAXYZXYY_cjs.insideRoot(absolute, cwd)) {
       results.push({ ...source, status: "excluded", tokens: [] });
       continue;
     }
@@ -10333,5 +10333,5 @@ exports.generateCronId = generateCronId;
 exports.getPricingEntry = getPricingEntry;
 exports.openRouterMemoryEmbeddingProviderAdapter = openRouterMemoryEmbeddingProviderAdapter;
 exports.resolveApiKey = resolveApiKey;
-//# sourceMappingURL=chunk-YHQ3DG24.cjs.map
-//# sourceMappingURL=chunk-YHQ3DG24.cjs.map
+//# sourceMappingURL=chunk-4OQXDCMN.cjs.map
+//# sourceMappingURL=chunk-4OQXDCMN.cjs.map