@theokit/sdk 4.45.0 → 4.47.0

package/CHANGELOG.md

@@ -1,5 +1,52 @@
 # Changelog
 
+## 4.47.0
+
+### Minor Changes
+
+- d511e6a: `resolveTrustPosture` — decide what a project directory is allowed to switch on.
+
+  A product that reads a repository must answer this before it builds anything: are that repository's
+  hooks honoured, are its MCP servers started, do its instructions enter the persona? The stakes are
+  not configuration-shaped — a hook is arbitrary command execution on every tool call, and an MCP
+  server is an external process SPAWNED while the agent is built, before any per-tool approval exists
+  to refuse it.
+
+  The arithmetic is small; the invariant is the point. Untrusted means EVERY declared capability is
+  off, and `allows` is built FROM the declared list, so a product that adds a ninth capability cannot
+  forget to gate it. That failure is invisible when it happens: the new capability simply works in a
+  directory where it should not.
+
+  It deliberately does NOT decide what "trusted" means. Where the record lives, what the environment
+  variable is called, whether a legacy alias is honoured — all the consumer's, because all of it is
+  that product's vocabulary. `source` is reported (`env` / `store` / `default`) because "trusted
+  because the operator recorded this directory" and "trusted because a blanket switch is on" are
+  different facts, and only the second stays on across every directory the process opens.
+
+  Additive. Nothing calls it yet.
+
+## 4.46.0
+
+### Minor Changes
+
+- dbead57: `foldLayers` / `verifyLayerOrdering` — combine configuration layers in a declared order.
+
+  Later layers win, `undefined` never overwrites, and named keys ACCUMULATE instead of being
+  replaced. That last rule is not a nicety: with plain last-wins a project file DISPLACES the user's
+  entries for a list-valued key rather than adding to them, and for a key like `hooks` — arbitrary
+  command execution on every tool call — that is the difference between a repository adding a hook and
+  a repository removing yours.
+
+  `verifyLayerOrdering` refuses a chain that is not strictly ascending, naming both layers and both
+  precedences. Tolerating it would make resolution depend on array order rather than on declared
+  precedence: two sources of truth for one decision.
+
+  The layer NAMES are the caller's, supplied as data — one product's chain is
+  defaults/user/project/profile/env/cli and `profile` is that product's idea. Entries may omit
+  `precedence` to mean "this array is already the order".
+
+  Additive. Nothing calls it yet.
+
 ## 4.45.0
 
 ### Minor Changes

package/dist/index.cjs

@@ -919,6 +919,42 @@ var JobQueue = class {
     if (next !== void 0) next();
   }
 };
+
+// src/layer-fold.ts
+var LayerOrderError = class extends chunkYULF6FPB_cjs.TheokitAgentError {
+  name = "LayerOrderError";
+};
+function verifyLayerOrdering(layers) {
+  let previous;
+  for (const current of layers) {
+    if (current.precedence === void 0) continue;
+    const declared = { layer: current.layer, precedence: current.precedence };
+    if (previous !== void 0 && declared.precedence <= previous.precedence) {
+      throw new LayerOrderError(
+        `layers out of order: \`${declared.layer}\` (precedence ${String(declared.precedence)}) comes after \`${previous.layer}\` (precedence ${String(previous.precedence)}) but does not outrank it`
+      );
+    }
+    previous = declared;
+  }
+}
+function foldLayers(entries, accumulatingKeys = []) {
+  verifyLayerOrdering(entries);
+  const accumulated = new Map(accumulatingKeys.map((k) => [k, []]));
+  const combined = {};
+  for (const { values } of entries) {
+    for (const [key, value] of Object.entries(values)) {
+      if (value === void 0) continue;
+      const stack = accumulated.get(key);
+      if (stack !== void 0 && Array.isArray(value)) {
+        stack.push(...value);
+        combined[key] = [...stack];
+        continue;
+      }
+      combined[key] = value;
+    }
+  }
+  return combined;
+}
 function diaryPath(cwd) {
   return path.join(chunkGH52NOCL_cjs.memoryDir(cwd), "dream-diary.md");
 }
@@ -2152,6 +2188,15 @@ function safeStringify(v) {
   }
 }
 
+// src/trust-posture.ts
+function resolveTrustPosture(input) {
+  const source = input.envOverride === true ? "env" : input.isTrusted() ? "store" : "default";
+  const level = source === "default" ? "untrusted" : "trusted";
+  const granted = level === "trusted";
+  const allows = Object.fromEntries(input.capabilities.map((key) => [key, granted]));
+  return { level, source, allows };
+}
+
 Object.defineProperty(exports, "GOAL_CONTINUATION_MARKER", {
   enumerable: true,
   get: function () { return chunkOBA6YK2R_cjs.GOAL_CONTINUATION_MARKER; }
@@ -2284,6 +2329,7 @@ exports.AgentFactory = AgentFactory;
 exports.Budget = Budget;
 exports.EventBus = EventBus;
 exports.JobQueue = JobQueue;
+exports.LayerOrderError = LayerOrderError;
 exports.Memory = Memory;
 exports.NoopMemoryProvider = NoopMemoryProvider;
 exports.PermissionEngine = PermissionEngine;
@@ -2305,6 +2351,7 @@ exports.chargeAndCheckThresholds = chargeAndCheckThresholds;
 exports.createCounterBudgetTracker = createCounterBudgetTracker;
 exports.estimateTokens = estimateTokens;
 exports.extractRawId = extractRawId;
+exports.foldLayers = foldLayers;
 exports.inferApiMode = inferApiMode;
 exports.loadProjectEnv = loadProjectEnv;
 exports.migrateSqliteToLance = migrateSqliteToLance2;
@@ -2312,9 +2359,11 @@ exports.mkMemoryId = mkMemoryId;
 exports.normalizeSchema = normalizeSchema;
 exports.normalizeUsage = normalizeUsage;
 exports.preflightCheck = preflightCheck;
+exports.resolveTrustPosture = resolveTrustPosture;
 exports.runGoalLoop = runGoalLoop;
 exports.scopedConversationId = scopedConversationId;
 exports.sessionScopePrefix = sessionScopePrefix;
 exports.toShareGptTrajectory = toShareGptTrajectory;
+exports.verifyLayerOrdering = verifyLayerOrdering;
 //# sourceMappingURL=index.cjs.map
 //# sourceMappingURL=index.cjs.map