@theokit/sdk 4.46.0 → 4.48.0

package/CHANGELOG.md

@@ -1,5 +1,36 @@
 # Changelog
 
+## 4.48.0
+
+### Minor Changes
+
+- d9ddcbe: Add `recordWiring`: report which project entities a build requested, which it wired, and which a trust posture withheld — derived from the values handed to the builder rather than from re-reading configuration.
+
+## 4.47.0
+
+### Minor Changes
+
+- d511e6a: `resolveTrustPosture` — decide what a project directory is allowed to switch on.
+
+  A product that reads a repository must answer this before it builds anything: are that repository's
+  hooks honoured, are its MCP servers started, do its instructions enter the persona? The stakes are
+  not configuration-shaped — a hook is arbitrary command execution on every tool call, and an MCP
+  server is an external process SPAWNED while the agent is built, before any per-tool approval exists
+  to refuse it.
+
+  The arithmetic is small; the invariant is the point. Untrusted means EVERY declared capability is
+  off, and `allows` is built FROM the declared list, so a product that adds a ninth capability cannot
+  forget to gate it. That failure is invisible when it happens: the new capability simply works in a
+  directory where it should not.
+
+  It deliberately does NOT decide what "trusted" means. Where the record lives, what the environment
+  variable is called, whether a legacy alias is honoured — all the consumer's, because all of it is
+  that product's vocabulary. `source` is reported (`env` / `store` / `default`) because "trusted
+  because the operator recorded this directory" and "trusted because a blanket switch is on" are
+  different facts, and only the second stays on across every directory the process opens.
+
+  Additive. Nothing calls it yet.
+
 ## 4.46.0
 
 ### Minor Changes

package/dist/index.cjs

@@ -2188,6 +2188,38 @@ function safeStringify(v) {
   }
 }
 
+// src/trust-posture.ts
+function resolveTrustPosture(input) {
+  const source = input.envOverride === true ? "env" : input.isTrusted() ? "store" : "default";
+  const level = source === "default" ? "untrusted" : "trusted";
+  const granted = level === "trusted";
+  const allows = Object.fromEntries(input.capabilities.map((key) => [key, granted]));
+  return { level, source, allows };
+}
+
+// src/wiring-record.ts
+var UngatedCapabilityError = class extends chunkYULF6FPB_cjs.TheokitAgentError {
+  name = "UngatedCapabilityError";
+};
+function recordWiring(input) {
+  const record = {};
+  for (const [capability, requested] of Object.entries(input.requested)) {
+    const allowed = input.posture.allows[capability];
+    if (allowed === void 0) {
+      throw new UngatedCapabilityError(
+        `capability \`${capability}\` was recorded as wired but the posture does not gate it; gated capabilities are: ${Object.keys(input.posture.allows).join(", ") || "(none)"}`
+      );
+    }
+    record[capability] = {
+      // Copied, not aliased. See the @returns note.
+      active: allowed ? [...requested] : [],
+      requested: [...requested],
+      suppressedByTrust: !allowed && requested.length > 0
+    };
+  }
+  return record;
+}
+
 Object.defineProperty(exports, "GOAL_CONTINUATION_MARKER", {
   enumerable: true,
   get: function () { return chunkOBA6YK2R_cjs.GOAL_CONTINUATION_MARKER; }
@@ -2335,6 +2367,7 @@ exports.Squad = Squad;
 exports.Task = Task;
 exports.Theokit = Theokit;
 exports.TokenLimiter = TokenLimiter;
+exports.UngatedCapabilityError = UngatedCapabilityError;
 exports.UnicodeNormalizer = UnicodeNormalizer;
 exports.applyMode = applyMode;
 exports.applySecurityFloor = applySecurityFloor;
@@ -2350,6 +2383,8 @@ exports.mkMemoryId = mkMemoryId;
 exports.normalizeSchema = normalizeSchema;
 exports.normalizeUsage = normalizeUsage;
 exports.preflightCheck = preflightCheck;
+exports.recordWiring = recordWiring;
+exports.resolveTrustPosture = resolveTrustPosture;
 exports.runGoalLoop = runGoalLoop;
 exports.scopedConversationId = scopedConversationId;
 exports.sessionScopePrefix = sessionScopePrefix;