@theokit/sdk 4.43.0 → 4.44.0

package/CHANGELOG.md

@@ -1,5 +1,31 @@
 # Changelog
 
+## 4.44.0
+
+### Minor Changes
+
+- 8cfc61b: `loadProjectEnv` — read a project's `.env` without letting it move the credential store.
+
+  `process.loadEnvFile()` reads the PROJECT's `.env` into `process.env`. That is right for a provider
+  key and is the documented way to configure a scaffolded product. It is a hole for the handful of
+  variables that decide WHERE credentials live and WHAT is trusted: a cloned repository is untrusted
+  input, and a `.env` inside it is untrusted input the runtime is about to treat as configuration.
+
+  Without a guard, a repository shipping `THEOKIT_AUTH_HOME=/tmp/attacker-store` redirects the
+  credential store the moment the product starts in that directory — before any trust prompt, because
+  locating the store is what happens first.
+
+  `loadProjectEnv(env?, load?)` captures the sovereign keys before the load and restores them after,
+  including restoring "was not set" by deleting the key. `SOVEREIGN_ENV_KEYS` names them explicitly —
+  `THEOKIT_HOME`, `THEOKIT_AUTH_HOME`, `THEOKIT_DIR_NAME`, `THEOKIT_TRUSTED_PROVIDERS`,
+  `THEOKIT_REDACT_SECRETS`, `THEOKIT_OAUTH_TX_SALT` — because a convention ("anything ending in
+  `_HOME`") silently changes meaning as variables are added, in both directions.
+
+  `THEOKIT_API_KEY` is deliberately NOT sovereign: a project supplying its own provider key is the
+  intended path, and a key the project supplies is a key the project already has.
+
+  Additive. Nothing calls it yet; existing behaviour is unchanged.
+
 ## 4.43.0
 
 ### Minor Changes

package/dist/index.cjs

@@ -1491,6 +1491,39 @@ var PermissionPlugin = class {
   }
 };
 
+// src/project-env.ts
+var SOVEREIGN_ENV_KEYS = [
+  /** Locates the SDK home — sessions, and the credential store beneath it. */
+  "THEOKIT_HOME",
+  /** Locates the credential store explicitly, independently of `THEOKIT_HOME`. */
+  "THEOKIT_AUTH_HOME",
+  /** Names the project config directory, so it decides which files are READ as configuration. */
+  "THEOKIT_DIR_NAME",
+  /** A trust decision: which providers are honoured without further checks. */
+  "THEOKIT_TRUSTED_PROVIDERS",
+  /** Turning redaction off from a repository's `.env` would put secrets into logs. */
+  "THEOKIT_REDACT_SECRETS",
+  /** Cryptographic material for the OAuth transaction cookie. */
+  "THEOKIT_OAUTH_TX_SALT"
+];
+function loadProjectEnv(env = process.env, load = typeof process.loadEnvFile === "function" ? () => {
+  process.loadEnvFile();
+} : void 0) {
+  if (load === void 0) return;
+  const sovereign = new Map(
+    SOVEREIGN_ENV_KEYS.map((key) => [key, env[key]])
+  );
+  try {
+    load();
+  } catch {
+    return;
+  }
+  for (const [key, original] of sovereign) {
+    if (original === void 0) delete env[key];
+    else env[key] = original;
+  }
+}
+
 // src/schema-normalizer.ts
 function isJsonSchemaObject(s) {
   if (typeof s !== "object" || s === null) return false;
@@ -2224,6 +2257,7 @@ exports.PermissionEngine = PermissionEngine;
 exports.PermissionPlugin = PermissionPlugin;
 exports.Plugin = Plugin;
 exports.Provider = Provider;
+exports.SOVEREIGN_ENV_KEYS = SOVEREIGN_ENV_KEYS;
 exports.Security = Security;
 exports.Skill = Skill;
 exports.SkillReadTool = SkillReadTool;
@@ -2238,6 +2272,7 @@ exports.createCounterBudgetTracker = createCounterBudgetTracker;
 exports.estimateTokens = estimateTokens;
 exports.extractRawId = extractRawId;
 exports.inferApiMode = inferApiMode;
+exports.loadProjectEnv = loadProjectEnv;
 exports.migrateSqliteToLance = migrateSqliteToLance2;
 exports.mkMemoryId = mkMemoryId;
 exports.normalizeSchema = normalizeSchema;