@theokit/sdk 4.44.1 → 4.46.0

package/CHANGELOG.md

@@ -1,5 +1,49 @@
 # Changelog
 
+## 4.46.0
+
+### Minor Changes
+
+- dbead57: `foldLayers` / `verifyLayerOrdering` — combine configuration layers in a declared order.
+
+  Later layers win, `undefined` never overwrites, and named keys ACCUMULATE instead of being
+  replaced. That last rule is not a nicety: with plain last-wins a project file DISPLACES the user's
+  entries for a list-valued key rather than adding to them, and for a key like `hooks` — arbitrary
+  command execution on every tool call — that is the difference between a repository adding a hook and
+  a repository removing yours.
+
+  `verifyLayerOrdering` refuses a chain that is not strictly ascending, naming both layers and both
+  precedences. Tolerating it would make resolution depend on array order rather than on declared
+  precedence: two sources of truth for one decision.
+
+  The layer NAMES are the caller's, supplied as data — one product's chain is
+  defaults/user/project/profile/env/cli and `profile` is that product's idea. Entries may omit
+  `precedence` to mean "this array is already the order".
+
+  Additive. Nothing calls it yet.
+
+## 4.45.0
+
+### Minor Changes
+
+- f9a29f5: `applySecurityFloor` — a lower-trust configuration layer may tighten a security setting, never loosen it.
+
+  Layered configuration usually resolves last-wins, and for the keys that decide confinement that is a
+  hole: a project layer outranks the user's own file, so a cloned repository can hand itself the most
+  permissive sandbox and the operator's global choice loses silently, at the moment the directory is
+  opened. Nothing fails; the confinement is simply gone.
+
+  The rule is generic and the vocabulary is not, so the vocabulary is parameters: which values count
+  as more permissive, which layers are restricted, and which layer is the operator's explicit
+  override. A second product supplies its own without inheriting the first's words.
+
+  The override is returned verbatim even when outside the vocabulary — validating the operator's flag
+  is the consumer's job, and silently dropping an unrecognised one is worse than passing it through. A
+  value outside the vocabulary in a RESTRICTED layer is ignored instead: a typo in a repository's
+  config must neither become the effective setting nor read as maximally permissive.
+
+  Additive. Nothing calls it yet.
+
 ## 4.44.1
 
 ### Patch Changes

package/dist/index.cjs

@@ -919,6 +919,42 @@ var JobQueue = class {
     if (next !== void 0) next();
   }
 };
+
+// src/layer-fold.ts
+var LayerOrderError = class extends chunkYULF6FPB_cjs.TheokitAgentError {
+  name = "LayerOrderError";
+};
+function verifyLayerOrdering(layers) {
+  let previous;
+  for (const current of layers) {
+    if (current.precedence === void 0) continue;
+    const declared = { layer: current.layer, precedence: current.precedence };
+    if (previous !== void 0 && declared.precedence <= previous.precedence) {
+      throw new LayerOrderError(
+        `layers out of order: \`${declared.layer}\` (precedence ${String(declared.precedence)}) comes after \`${previous.layer}\` (precedence ${String(previous.precedence)}) but does not outrank it`
+      );
+    }
+    previous = declared;
+  }
+}
+function foldLayers(entries, accumulatingKeys = []) {
+  verifyLayerOrdering(entries);
+  const accumulated = new Map(accumulatingKeys.map((k) => [k, []]));
+  const combined = {};
+  for (const { values } of entries) {
+    for (const [key, value] of Object.entries(values)) {
+      if (value === void 0) continue;
+      const stack = accumulated.get(key);
+      if (stack !== void 0 && Array.isArray(value)) {
+        stack.push(...value);
+        combined[key] = [...stack];
+        continue;
+      }
+      combined[key] = value;
+    }
+  }
+  return combined;
+}
 function diaryPath(cwd) {
   return path.join(chunkGH52NOCL_cjs.memoryDir(cwd), "dream-diary.md");
 }
@@ -1621,6 +1657,39 @@ var Security = class {
   }
 };
 
+// src/security-floor.ts
+function permissivenessOf(order, value) {
+  if (value === void 0) return -1;
+  return order.indexOf(value);
+}
+function baseline(input) {
+  const { restricted, override, layers } = input;
+  let value;
+  for (const [name, candidate] of Object.entries(layers)) {
+    if (name === override || restricted.includes(name)) continue;
+    if (candidate !== void 0) value = candidate;
+  }
+  return value;
+}
+function tightenOnly(input, start) {
+  const { permissiveness, restricted, layers } = input;
+  let resolved = start;
+  let ceiling = permissivenessOf(permissiveness, start);
+  for (const layer of restricted) {
+    const candidate = layers[layer];
+    if (candidate === void 0) continue;
+    const level = permissivenessOf(permissiveness, candidate);
+    if (level < 0) continue;
+    if (ceiling >= 0 && level > ceiling) continue;
+    resolved = candidate;
+    ceiling = level;
+  }
+  return resolved;
+}
+function applySecurityFloor(input) {
+  return input.layers[input.override] ?? tightenOnly(input, baseline(input));
+}
+
 // src/session-scope.ts
 function scopedConversationId(scope, id) {
   return `${scope}__${id}`;
@@ -2251,6 +2320,7 @@ exports.AgentFactory = AgentFactory;
 exports.Budget = Budget;
 exports.EventBus = EventBus;
 exports.JobQueue = JobQueue;
+exports.LayerOrderError = LayerOrderError;
 exports.Memory = Memory;
 exports.NoopMemoryProvider = NoopMemoryProvider;
 exports.PermissionEngine = PermissionEngine;
@@ -2267,10 +2337,12 @@ exports.Theokit = Theokit;
 exports.TokenLimiter = TokenLimiter;
 exports.UnicodeNormalizer = UnicodeNormalizer;
 exports.applyMode = applyMode;
+exports.applySecurityFloor = applySecurityFloor;
 exports.chargeAndCheckThresholds = chargeAndCheckThresholds;
 exports.createCounterBudgetTracker = createCounterBudgetTracker;
 exports.estimateTokens = estimateTokens;
 exports.extractRawId = extractRawId;
+exports.foldLayers = foldLayers;
 exports.inferApiMode = inferApiMode;
 exports.loadProjectEnv = loadProjectEnv;
 exports.migrateSqliteToLance = migrateSqliteToLance2;
@@ -2282,5 +2354,6 @@ exports.runGoalLoop = runGoalLoop;
 exports.scopedConversationId = scopedConversationId;
 exports.sessionScopePrefix = sessionScopePrefix;
 exports.toShareGptTrajectory = toShareGptTrajectory;
+exports.verifyLayerOrdering = verifyLayerOrdering;
 //# sourceMappingURL=index.cjs.map
 //# sourceMappingURL=index.cjs.map