@theokit/sdk 4.48.0 → 4.50.0

package/CHANGELOG.md

@@ -1,5 +1,17 @@
 # Changelog
 
+## 4.50.0
+
+### Minor Changes
+
+- 7e6a0d4: Add `planReaping`: decide which session artifacts may be deleted — and never delete them. Tri-state (keep / reap / undetermined), a keep-last floor, and liveness that outranks age.
+
+## 4.49.0
+
+### Minor Changes
+
+- d0d62bd: Add `auditEnvReachability`: report config keys with no environment path and no documented opt-out, and opt-outs that no longer exempt anything.
+
 ## 4.48.0
 
 ### Minor Changes

package/dist/index.cjs

@@ -661,6 +661,17 @@ var SkillReadTool = class {
   }
 };
 
+// src/env-reachability.ts
+function auditEnvReachability(input) {
+  const reachable = new Set(input.reachable);
+  const exempt = new Set(input.optOuts.map((o) => o.key));
+  const declared = new Set(input.keys);
+  return {
+    unreachable: input.keys.filter((k) => !reachable.has(k) && !exempt.has(k)),
+    staleOptOuts: input.optOuts.filter((o) => !declared.has(o.key) || reachable.has(o.key)).map((o) => o.key)
+  };
+}
+
 // src/event-bus.ts
 var EventBus = class {
   handlers = /* @__PURE__ */ new Map();
@@ -1560,6 +1571,60 @@ function loadProjectEnv(env = process.env, load = typeof process.loadEnvFile ===
   }
 }
 
+// src/reap-plan.ts
+var RetentionPolicyError = class extends chunkYULF6FPB_cjs.TheokitAgentError {
+  name = "RetentionPolicyError";
+};
+function assertPolicy(retention) {
+  const { maxAgeMs, keepLast } = retention;
+  if (!Number.isFinite(maxAgeMs) || maxAgeMs < 0) {
+    throw new RetentionPolicyError(
+      `retention.maxAgeMs must be a non-negative number of milliseconds, got ${String(maxAgeMs)}`
+    );
+  }
+  if (!Number.isInteger(keepLast) || keepLast < 0) {
+    throw new RetentionPolicyError(
+      `retention.keepLast must be a non-negative integer, got ${String(keepLast)}`
+    );
+  }
+}
+function classifyByOwnReason(input) {
+  const keep = [];
+  const atRisk = [];
+  for (const artifact of input.artifacts) {
+    if (artifact.live === "unknown") continue;
+    if (artifact.live === true) {
+      keep.push({ ...artifact, reason: "live" });
+      continue;
+    }
+    if (input.nowMs - artifact.lastModifiedMs <= input.retention.maxAgeMs) {
+      keep.push({ ...artifact, reason: "within-retention" });
+      continue;
+    }
+    atRisk.push(artifact);
+  }
+  return { keep, atRisk };
+}
+function applyFloor(kept, atRisk, keepLast) {
+  const shortfall = Math.max(0, keepLast - kept.length);
+  const newestFirst = [...atRisk].sort((a, b) => b.lastModifiedMs - a.lastModifiedMs);
+  const spared = new Set(newestFirst.slice(0, shortfall).map((a) => a.id));
+  const rescued = [];
+  const reap = [];
+  for (const artifact of atRisk) {
+    if (spared.has(artifact.id)) rescued.push({ ...artifact, reason: "keep-last" });
+    else reap.push(artifact);
+  }
+  return { rescued, reap };
+}
+function planReaping(input) {
+  assertPolicy(input.retention);
+  const undetermined = input.artifacts.filter((a) => a.live === "unknown");
+  const { keep, atRisk } = classifyByOwnReason(input);
+  const { rescued, reap } = applyFloor(keep, atRisk, input.retention.keepLast);
+  return { reap, keep: [...keep, ...rescued], undetermined };
+}
+
 // src/schema-normalizer.ts
 function isJsonSchemaObject(s) {
   if (typeof s !== "object" || s === null) return false;
@@ -2359,6 +2424,7 @@ exports.PermissionEngine = PermissionEngine;
 exports.PermissionPlugin = PermissionPlugin;
 exports.Plugin = Plugin;
 exports.Provider = Provider;
+exports.RetentionPolicyError = RetentionPolicyError;
 exports.SOVEREIGN_ENV_KEYS = SOVEREIGN_ENV_KEYS;
 exports.Security = Security;
 exports.Skill = Skill;
@@ -2371,6 +2437,7 @@ exports.UngatedCapabilityError = UngatedCapabilityError;
 exports.UnicodeNormalizer = UnicodeNormalizer;
 exports.applyMode = applyMode;
 exports.applySecurityFloor = applySecurityFloor;
+exports.auditEnvReachability = auditEnvReachability;
 exports.chargeAndCheckThresholds = chargeAndCheckThresholds;
 exports.createCounterBudgetTracker = createCounterBudgetTracker;
 exports.estimateTokens = estimateTokens;
@@ -2382,6 +2449,7 @@ exports.migrateSqliteToLance = migrateSqliteToLance2;
 exports.mkMemoryId = mkMemoryId;
 exports.normalizeSchema = normalizeSchema;
 exports.normalizeUsage = normalizeUsage;
+exports.planReaping = planReaping;
 exports.preflightCheck = preflightCheck;
 exports.recordWiring = recordWiring;
 exports.resolveTrustPosture = resolveTrustPosture;