@theokit/sdk 5.12.1 → 5.13.0

package/dist/{chunk-BJ7BPLQK.js → chunk-JX4LB6XO.js}

@@ -1,13 +1,13 @@
 import { submit, emitRunEvent } from './chunk-HWMGR3HA.js';
-import { enqueueSessionWrite, hydrateSession, persistTurnToTranscript, flushSessionWrites, appendSessionMessage, getSessionMessages, discardSession, clearSession } from './chunk-4GUFNDZR.js';
+import { enqueueSessionWrite, hydrateSession, persistTurnToTranscript, flushSessionWrites, appendSessionMessage, getSessionMessages, discardSession, clearSession } from './chunk-XOYNB3YN.js';
 import { IndexManager } from './chunk-2C24NSNV.js';
 import { currentPersonalityContext, warnPersonalitySwitchInsideFork } from './chunk-HJ2LV464.js';
-import { extractCodePlugins } from './chunk-2SFBB54R.js';
+import { extractCodePlugins, isCodePlugin } from './chunk-2SFBB54R.js';
 import { createOpenAiCompatibleRuntime } from './chunk-H7G65PNI.js';
 import { persistActiveMemoryTranscript } from './chunk-QK2ERTO3.js';
 import { resolveMaxFacts, writeSessionSummary, resolveMemoryRoot, MEMORY_KINDS, appendFact, readFacts, legacyMemoryJsonPath, memoryMdPath, appendFactToMarkdown } from './chunk-DF77RBF4.js';
 import { FsSessionStore } from './chunk-AB4OPJLD.js';
-import { discoverProviderPlugins, validateApiKeyShape, getConfiguredBaseUrl, httpRequest, isFixtureApiKey, presentProviderCredentialEnvVars, buildDefaultSummarizer, shouldUseRealLocalRuntime, parseSseStream, CircuitBreaker, resolveRunProvider, mergeExplicitApiKey, resolveProviderChain, abortError, tryFirstEvent, relayStream, renderToolResultContentText } from './chunk-XJ4C4NFX.js';
+import { discoverProviderPlugins, validateApiKeyShape, getConfiguredBaseUrl, httpRequest, isFixtureApiKey, presentProviderCredentialEnvVars, readTrustArray, buildDefaultSummarizer, shouldUseRealLocalRuntime, parseSseStream, CircuitBreaker, trustFilePath, resolveRunProvider, mergeExplicitApiKey, resolveProviderChain, abortError, tryFirstEvent, relayStream, renderToolResultContentText } from './chunk-2PRGRYEQ.js';
 import { resolveChildEnv } from './chunk-HKCKOAIO.js';
 import { DEFAULT_MAX_BYTES_PER_FILE, runDiscovery, truncateWithMarker } from './chunk-KCM3RMKR.js';
 import { warnFailureOnce, loadHookConfig, warnOnce } from './chunk-XJ3WU5CZ.js';
@@ -39,10 +39,11 @@ import { AgentRunError, coerceToKnownAgentRunErrorCode, UnknownAgentError, Confi
 import { diag, resolveApiKey, API_KEY_ENV_VAR, redactSecrets, diagFailure } from './chunk-3OY6H3I7.js';
 import { stat, mkdir, readFile, readdir, access, unlink } from 'fs/promises';
 import { randomUUID, createHash } from 'crypto';
-import { join, dirname, resolve, relative, isAbsolute } from 'path';
-import { existsSync, readFileSync } from 'fs';
+import { join, dirname, isAbsolute, resolve, relative } from 'path';
+import { existsSync, readFileSync, realpathSync } from 'fs';
 import { platform } from 'process';
 import { spawn } from 'child_process';
+import { pathToFileURL } from 'url';
 import { z } from 'zod';
 import { createRequire } from 'module';
 import { homedir } from 'os';
@@ -161,7 +162,7 @@ async function agentGenerate(agent, agentModel, agentApiKey, agentLocal, input,
   const { output, maxRetries, errorStrategy, ...sendOptions } = options;
   const run = await agent.send(input, sendOptions);
   const result = await run.wait();
-  const { generateObjectImpl, GenerateObjectError } = await import('./generate-object-S7MNVF2V.js');
+  const { generateObjectImpl, GenerateObjectError } = await import('./generate-object-TBDOBBYW.js');
   const answer = structurableAnswerOrThrow(result, GenerateObjectError);
   const { getAgentFacade } = await import('./agent-factory-registry-ZVTABLEY.js');
   const facade = getAgentFacade();
@@ -3081,6 +3082,87 @@ async function safeConversation(run) {
     return [];
   }
 }
+var WORKSPACE_TRUST = {
+  subject: "workspace plugins",
+  entries: "absolute folder realpaths"
+};
+function workspaceTrustRecordPath() {
+  return join(dirname(trustFilePath()), "trusted-workspace-plugins.json");
+}
+function readTrustedWorkspaceFolders() {
+  const path = workspaceTrustRecordPath();
+  const trusted = /* @__PURE__ */ new Set();
+  for (const entry of readTrustArray(path, WORKSPACE_TRUST)) {
+    if (isAbsolute(entry)) {
+      trusted.add(entry);
+      continue;
+    }
+    diag(
+      `[theokit-sdk] WARN: ${path} entry "${entry}" is not an absolute path \u2014 discarded (entries must be ${WORKSPACE_TRUST.entries})
+`
+    );
+  }
+  return trusted;
+}
+
+// src/internal/runtime/plugin-loader/manifest-entry-import.ts
+var warnedFolders = globalSingleton(
+  "theokit-sdk.plugins.manifest-untrusted-warned",
+  () => /* @__PURE__ */ new Set()
+);
+async function importTrustedManifestPlugins(candidates, trustedFolders) {
+  const plugins = [];
+  for (const candidate of candidates) {
+    const realFolder = realpathOrUndefined(candidate.folderPath);
+    if (realFolder === void 0 || !trustedFolders.has(realFolder)) {
+      warnUntrustedOnce(candidate, realFolder ?? candidate.folderPath);
+      continue;
+    }
+    plugins.push(await importEntry(candidate));
+  }
+  return plugins;
+}
+function realpathOrUndefined(path) {
+  try {
+    return realpathSync(path);
+  } catch {
+    return void 0;
+  }
+}
+function warnUntrustedOnce(candidate, realFolder) {
+  if (warnedFolders.has(candidate.entryPath)) return;
+  warnedFolders.add(candidate.entryPath);
+  const { folder, metadata } = candidate;
+  const declared = metadata.name === folder ? "" : ` (declares name "${metadata.name}")`;
+  diag(
+    `[theokit-sdk] workspace plugin folder "${folder}"${declared} is not trusted \u2014 its entry was not imported. To trust it, add "${realFolder}" to ${workspaceTrustRecordPath()} (JSON array of folder realpaths).
+`
+  );
+}
+async function importEntry(candidate) {
+  const { metadata } = candidate;
+  const entry = metadata.entry ?? "";
+  let mod;
+  try {
+    mod = await import(pathToFileURL(candidate.entryPath).href);
+  } catch (cause) {
+    throw new ConfigurationError(`Plugin ${metadata.name} entry failed to import: ${entry}`, {
+      code: "plugin_entry_import_failed",
+      cause
+    });
+  }
+  const plugin = mod.default;
+  if (!isGeneralPlugin(plugin)) {
+    throw new ConfigurationError(
+      `Plugin ${metadata.name} entry must default-export a general plugin (kind "general", name, register): ${entry}`,
+      { code: "plugin_entry_shape" }
+    );
+  }
+  return plugin;
+}
+function isGeneralPlugin(value) {
+  return isCodePlugin(value) && value.kind === "general" && typeof value.name === "string";
+}
 var SkillsManager = class {
   constructor(cwd, _enabled, settingSourcesIncludeProject, skillsDir, inline, compatSources = []) {
     this.cwd = cwd;
@@ -4576,6 +4658,12 @@ var PluginsManager = class {
   localPaths;
   compatSources;
   plugins = [];
+  /**
+   * B-686 — where each listed object was discovered. Keyed by the object, not by name: two plugins
+   * may share a declared name across roots or folders, and a field would leak a host path through
+   * `plugins.list()`. `refresh()` replaces the objects, so stale origins are collected with them.
+   */
+  #origin = /* @__PURE__ */ new WeakMap();
   async initialize() {
     this.assertCloudRules();
     if (!this.settingSourcesIncludePlugins) {
@@ -4601,6 +4689,7 @@ var PluginsManager = class {
         const cliMetadata = await loadPluginManifestFromJson(this.cwd, cliPath, folderName);
         if (this.enabled === void 0 || this.enabled.includes(cliMetadata.name)) {
           this.plugins.push(cliMetadata);
+          this.#origin.set(cliMetadata, { root: pluginsRoot, folder: folderName });
         }
         continue;
       }
@@ -4623,12 +4712,26 @@ var PluginsManager = class {
       if (this.enabled === void 0 || this.enabled.includes(metadata.name)) {
         await this.assertEntryFileExists(metadata, folderName, pluginsRoot);
         this.plugins.push(metadata);
+        this.#origin.set(metadata, { root: pluginsRoot, folder: folderName });
       }
     }
   }
   list() {
     return Promise.resolve(this.plugins);
   }
+  /** Listed native-root plugins that declare an `entry`, in list order. Reads no file. */
+  nativeEntryCandidates() {
+    const nativeRoot = join(theokitConfigRoot(this.cwd), "plugins");
+    return this.plugins.flatMap((metadata) => {
+      const origin = this.#origin.get(metadata);
+      if (origin === void 0 || origin.root !== nativeRoot || metadata.entry === void 0) {
+        return [];
+      }
+      const folderPath = join(origin.root, origin.folder);
+      const entryPath = safePathJoin(folderPath, metadata.entry);
+      return [{ metadata, folder: origin.folder, folderPath, entryPath }];
+    });
+  }
   async assertEntryFileExists(metadata, folderName, pluginsRoot) {
     const entry = metadata.entry;
     if (entry === void 0) return;
@@ -7846,6 +7949,7 @@ var RealLocalRun = class extends FixtureRunBase {
   }
   async initializeMcp(inputs) {
     for (const [name, client] of inputs.mcp.entries()) {
+      if (this.terminated) break;
       try {
         await client.initialize();
       } catch (cause) {
@@ -10286,13 +10390,20 @@ var LocalAgent = class {
       workspaceCwd: this.workspaceCwd
     });
   }
+  /** B-686 — the workspace trust record is read only when a native manifest declares an entry. */
+  async importManifestPlugins() {
+    const candidates = this.pluginsManager?.nativeEntryCandidates() ?? [];
+    if (candidates.length === 0) return [];
+    return importTrustedManifestPlugins(candidates, readTrustedWorkspaceFolders());
+  }
   async initialize() {
     await this.hooksExecutor.initialize(this.settingSourcesIncludeProject);
     if (this.context !== void 0) await this.context.initialize();
     if (this.skillsManager !== void 0) await this.skillsManager.initialize();
     if (this.pluginsManager !== void 0) await this.pluginsManager.initialize();
     const codePlugins = extractCodePlugins(this.options.plugins);
-    await this.pluginManagerCode.initialize(codePlugins);
+    const manifestPlugins = await this.importManifestPlugins();
+    await this.pluginManagerCode.initialize([...codePlugins, ...manifestPlugins]);
     this.resolvedSubagents = await loadSubagents(
       this.workspaceCwd,
       this.settingSourcesIncludeProject,
@@ -10983,7 +11094,7 @@ var Agent = class _Agent {
    * @public
    */
   static async generateObject(options) {
-    const { generateObjectImpl } = await import('./generate-object-S7MNVF2V.js');
+    const { generateObjectImpl } = await import('./generate-object-TBDOBBYW.js');
     return generateObjectImpl(options, {
       create: (opts) => _Agent.create(opts),
       delete: (agentId) => _Agent.delete(agentId)
@@ -11007,7 +11118,7 @@ var Agent = class _Agent {
       delete: (agentId) => _Agent.delete(agentId)
     };
     async function* wrapper() {
-      streamObjectImport ??= import('./stream-object-R6SMYV4R.js');
+      streamObjectImport ??= import('./stream-object-EKM4WGTI.js');
       const { streamObjectImpl } = await streamObjectImport;
       yield* streamObjectImpl(options, deps);
     }
@@ -11183,7 +11294,7 @@ var Agent = class _Agent {
    */
   static async compact(agentId, options = {}) {
     const reg = await requireLocalAgent(agentId, "compact");
-    const { compactSessionTranscript, buildDefaultSummarizer: buildDefaultSummarizer2 } = await import('./compact-session-3U2JYTVG.js');
+    const { compactSessionTranscript, buildDefaultSummarizer: buildDefaultSummarizer2 } = await import('./compact-session-5HMX6KYT.js');
     const { cwd, model, store } = await openLocalStore(reg);
     return enqueueSessionWrite(
       cwd,
@@ -11213,7 +11324,7 @@ var Agent = class _Agent {
    */
   static async injectSessionTurn(agentId, turn) {
     const reg = await requireLocalAgent(agentId, "injectSessionTurn");
-    const { injectSessionTurn } = await import('./inject-session-THABTKJY.js');
+    const { injectSessionTurn } = await import('./inject-session-75L3NCNL.js');
     const { cwd, model, store } = await openLocalStore(reg);
     await injectSessionTurn({
       store,
@@ -11371,5 +11482,5 @@ async function openLocalStore(reg) {
 }
 
 export { Agent, AgentBuilder, DEFAULT_AGENTIC_MODEL_ID, MEMORY_EMBEDDING_ADAPTERS, Tool, ToolError, UsageAccumulator, computeCost, generateCronId, getPricingEntry, managedSettingsPathFor, openRouterMemoryEmbeddingProviderAdapter, readManagedSettings, resolveSessionDir };
-//# sourceMappingURL=chunk-BJ7BPLQK.js.map
-//# sourceMappingURL=chunk-BJ7BPLQK.js.map
+//# sourceMappingURL=chunk-JX4LB6XO.js.map
+//# sourceMappingURL=chunk-JX4LB6XO.js.map