@theokit/sdk 4.44.1 → 4.45.0

package/CHANGELOG.md

@@ -1,5 +1,27 @@
 # Changelog
 
+## 4.45.0
+
+### Minor Changes
+
+- f9a29f5: `applySecurityFloor` — a lower-trust configuration layer may tighten a security setting, never loosen it.
+
+  Layered configuration usually resolves last-wins, and for the keys that decide confinement that is a
+  hole: a project layer outranks the user's own file, so a cloned repository can hand itself the most
+  permissive sandbox and the operator's global choice loses silently, at the moment the directory is
+  opened. Nothing fails; the confinement is simply gone.
+
+  The rule is generic and the vocabulary is not, so the vocabulary is parameters: which values count
+  as more permissive, which layers are restricted, and which layer is the operator's explicit
+  override. A second product supplies its own without inheriting the first's words.
+
+  The override is returned verbatim even when outside the vocabulary — validating the operator's flag
+  is the consumer's job, and silently dropping an unrecognised one is worse than passing it through. A
+  value outside the vocabulary in a RESTRICTED layer is ignored instead: a typo in a repository's
+  config must neither become the effective setting nor read as maximally permissive.
+
+  Additive. Nothing calls it yet.
+
 ## 4.44.1
 
 ### Patch Changes

package/dist/index.cjs

@@ -1621,6 +1621,39 @@ var Security = class {
   }
 };
 
+// src/security-floor.ts
+function permissivenessOf(order, value) {
+  if (value === void 0) return -1;
+  return order.indexOf(value);
+}
+function baseline(input) {
+  const { restricted, override, layers } = input;
+  let value;
+  for (const [name, candidate] of Object.entries(layers)) {
+    if (name === override || restricted.includes(name)) continue;
+    if (candidate !== void 0) value = candidate;
+  }
+  return value;
+}
+function tightenOnly(input, start) {
+  const { permissiveness, restricted, layers } = input;
+  let resolved = start;
+  let ceiling = permissivenessOf(permissiveness, start);
+  for (const layer of restricted) {
+    const candidate = layers[layer];
+    if (candidate === void 0) continue;
+    const level = permissivenessOf(permissiveness, candidate);
+    if (level < 0) continue;
+    if (ceiling >= 0 && level > ceiling) continue;
+    resolved = candidate;
+    ceiling = level;
+  }
+  return resolved;
+}
+function applySecurityFloor(input) {
+  return input.layers[input.override] ?? tightenOnly(input, baseline(input));
+}
+
 // src/session-scope.ts
 function scopedConversationId(scope, id) {
   return `${scope}__${id}`;
@@ -2267,6 +2300,7 @@ exports.Theokit = Theokit;
 exports.TokenLimiter = TokenLimiter;
 exports.UnicodeNormalizer = UnicodeNormalizer;
 exports.applyMode = applyMode;
+exports.applySecurityFloor = applySecurityFloor;
 exports.chargeAndCheckThresholds = chargeAndCheckThresholds;
 exports.createCounterBudgetTracker = createCounterBudgetTracker;
 exports.estimateTokens = estimateTokens;