@theokit/sdk 5.3.3 → 5.5.0

package/dist/{chunk-363RBGIR.js → chunk-ODBID5TG.js}

@@ -1,13 +1,13 @@
 import { submit, emitRunEvent } from './chunk-K2VMFZQ5.js';
-import { enqueueSessionWrite, hydrateSession, persistTurnToTranscript, flushSessionWrites, appendSessionMessage, getSessionMessages, discardSession, clearSession } from './chunk-AWINL3ZC.js';
+import { enqueueSessionWrite, hydrateSession, persistTurnToTranscript, flushSessionWrites, appendSessionMessage, getSessionMessages, discardSession, clearSession } from './chunk-2QKV4CGK.js';
 import { IndexManager } from './chunk-7SZAV6QG.js';
-import { loadHookConfig, warnOnce, currentPersonalityContext, warnPersonalitySwitchInsideFork } from './chunk-7L3MIW2F.js';
+import { loadHookConfig, warnOnce, currentPersonalityContext, warnPersonalitySwitchInsideFork } from './chunk-S6B5XYC3.js';
 import { extractCodePlugins } from './chunk-2SFBB54R.js';
 import { createOpenAiCompatibleRuntime } from './chunk-55GB6JYQ.js';
 import { persistActiveMemoryTranscript } from './chunk-OR6XIWLB.js';
 import { writeSessionSummary, resolveMemoryRoot, MEMORY_KINDS, appendFact, readFacts, legacyMemoryJsonPath, memoryMdPath, appendFactToMarkdown } from './chunk-SADXXGWU.js';
 import { FsSessionStore } from './chunk-AAEZSPTC.js';
-import { discoverProviderPlugins, validateApiKeyShape, getConfiguredBaseUrl, httpRequest, isFixtureApiKey, presentProviderCredentialEnvVars, buildDefaultSummarizer, shouldUseRealLocalRuntime, parseSseStream, CircuitBreaker, resolveRunProvider, mergeExplicitApiKey, resolveProviderChain, abortError, tryFirstEvent, relayStream, renderToolResultContentText } from './chunk-K3NH62DG.js';
+import { discoverProviderPlugins, validateApiKeyShape, getConfiguredBaseUrl, httpRequest, isFixtureApiKey, presentProviderCredentialEnvVars, buildDefaultSummarizer, shouldUseRealLocalRuntime, parseSseStream, CircuitBreaker, resolveRunProvider, mergeExplicitApiKey, resolveProviderChain, abortError, tryFirstEvent, relayStream, renderToolResultContentText } from './chunk-KZSKIUXZ.js';
 import { resolveChildEnv } from './chunk-HKCKOAIO.js';
 import { DEFAULT_MAX_BYTES_PER_FILE, runDiscovery, truncateWithMarker } from './chunk-N6OOOYFZ.js';
 import { readVersionedJson, writeVersionedJson } from './chunk-SVQIW5RJ.js';
@@ -24,8 +24,8 @@ import { expandTilde, defaultBaseDir } from './chunk-JOFVLOFY.js';
 import { withFileLock } from './chunk-TA3K7SBK.js';
 import { withCwdMutex } from './chunk-Q5EWJPRY.js';
 import { sweepStaleAtomicTemps, atomicWriteJson } from './chunk-3JHIFQ4I.js';
-import { loadSubagents, pluginBundleDirs } from './chunk-DLFWMJE3.js';
-import { reportUndeclaredSources, theokitConfigRoot, undefinedVariablesIn, getTheokitHome, adapterForConfigPath, projectConfigRoots, pluginBundleRoots } from './chunk-RP3VXJMA.js';
+import { loadSubagents, pluginBundleDirs } from './chunk-O7L7M42F.js';
+import { reportUndeclaredSources, theokitConfigRoot, undefinedVariablesIn, getTheokitHome, adapterForConfigPath, projectConfigRoots, pluginBundleRoots } from './chunk-NSLHPAC7.js';
 import { readWorkspaceDir, parseSimpleYaml } from './chunk-JNAA4G4H.js';
 import { resolveEffectiveContextWindow, CONTEXT_WINDOW_FLOOR, CONTEXT_WINDOW_MARGIN } from './chunk-6M2OIS4Y.js';
 import { parseModelId } from './chunk-R7WIIPUR.js';
@@ -2600,12 +2600,14 @@ function spawnAndCollect(options) {
 
 // src/internal/runtime/hooks/hooks-executor.ts
 var HooksExecutor = class {
-  constructor(cwd, compatSources = []) {
+  constructor(cwd, compatSources = [], gate = void 0) {
     this.cwd = cwd;
     this.compatSources = compatSources;
+    this.gate = gate;
   }
   cwd;
   compatSources;
+  gate;
   config = {};
   async initialize(settingSourcesIncludeProject) {
     if (!settingSourcesIncludeProject) {
@@ -2645,8 +2647,33 @@ var HooksExecutor = class {
       }
     });
   }
+  /**
+   * #631 — the consumer's gate, consulted at the ONLY point a hook is spawned.
+   *
+   * Here and not at the caller on purpose: a check anywhere else could be reached around by a
+   * second execution path later, and this one cannot — `spawnAndCollect` is called for a hook from
+   * exactly one place.
+   *
+   * No gate means no refusal, which is what every consumer gets today.
+   */
+  async refusedByConsumer(command, payload, timeoutMs) {
+    if (this.gate?.approve === void 0) return false;
+    const request = {
+      command: command.command,
+      event: payload.event,
+      // #637 — the EFFECTIVE timeout, passed in rather than recomputed here, so the number the
+      // consumer is shown and the number `spawnAndCollect` enforces are the same expression.
+      // Recomputing would be one line and would be the place they later diverge.
+      timeoutMs,
+      sourceEvent: command.sourceEvent,
+      ...command.sourcePath === void 0 ? {} : { sourcePath: command.sourcePath },
+      ...command.matcher === void 0 ? {} : { matcher: command.matcher }
+    };
+    return !await this.gate.approve(request);
+  }
   async executeOne(command, payload) {
     const timeoutMs = command.timeoutMs ?? 3e4;
+    if (await this.refusedByConsumer(command, payload, timeoutMs)) return { decision: "allow" };
     const env = runtimeEnvFor(command.sourcePath, this.cwd);
     const result = await spawnAndCollect({
       command: "sh",
@@ -2656,23 +2683,31 @@ var HooksExecutor = class {
       timeoutMs,
       stdin: JSON.stringify(payload)
     });
-    if (result.timedOut) {
-      return { decision: "deny", reason: `Hook timed out after ${timeoutMs}ms` };
-    }
+    const failure = this.decisionFromFailure(result, command, env, timeoutMs);
+    return failure ?? parseDecisionFromStdout(result.stdout);
+  }
+  /**
+   * A run that did not succeed, turned into a decision. `undefined` when it did.
+   *
+   * Extracted from `executeOne` when the approval gate pushed that function past the complexity
+   * gate. The seam is not arbitrary — every branch here answers one question, "the command did not
+   * run cleanly, so what does this hook decide?", and none of them knows how the command was
+   * spawned.
+   */
+  decisionFromFailure(result, command, env, timeoutMs) {
+    if (result.timedOut) return { decision: "deny", reason: `Hook timed out after ${timeoutMs}ms` };
     if (result.spawnError !== void 0) {
       return { decision: "deny", reason: `Hook spawn failed: ${result.spawnError.message}` };
     }
-    if (result.exitCode !== 0) {
-      const stderr = result.stderr.trim();
-      const base = stderr.length > 0 ? stderr : `Hook exited with code ${result.exitCode}`;
-      const missing = undefinedVariablesIn(command.command, env);
-      if (missing.length === 0) return { decision: "deny", reason: base };
-      return {
-        decision: "deny",
-        reason: `${base} \u2014 this hook came from ${command.sourcePath ?? "an unrecorded source"} and uses ${missing.map((n) => `$${n}`).join(", ")}, which nothing defines here. A variable this runtime does not supply expands to the empty string, so the error above names a path rather than the cause.`
-      };
-    }
-    return parseDecisionFromStdout(result.stdout);
+    if (result.exitCode === 0) return void 0;
+    const stderr = result.stderr.trim();
+    const base = stderr.length > 0 ? stderr : `Hook exited with code ${result.exitCode}`;
+    const missing = undefinedVariablesIn(command.command, env);
+    if (missing.length === 0) return { decision: "deny", reason: base };
+    return {
+      decision: "deny",
+      reason: `${base} \u2014 this hook came from ${command.sourcePath ?? "an unrecorded source"} and uses ${missing.map((n) => `$${n}`).join(", ")}, which nothing defines here. A variable this runtime does not supply expands to the empty string, so the error above names a path rather than the cause.`
+    };
   }
 };
 function runtimeEnvFor(sourcePath, cwd) {
@@ -9122,7 +9157,7 @@ async function* localAgentStreamToCompletion(agent, message, options) {
 async function localAgentFork(parent, options) {
   const { forkAgentImpl } = await import('./fork-agent-S2EPIML7.js');
   const { getAgentFacade } = await import('./agent-factory-registry-ZVTABLEY.js');
-  const { withPersonalityContext } = await import('./context-BUIE52VH.js');
+  const { withPersonalityContext } = await import('./context-3HPU754C.js');
   const create = getAgentFacade().create;
   return withPersonalityContext(
     { slug: parent.personalitySlugSnapshot, isFork: true },
@@ -9764,6 +9799,7 @@ var KNOWN_LOCAL_OPTION_KEYS = /* @__PURE__ */ new Set([
   "cwd",
   "settingSources",
   "compatSources",
+  "hooks",
   "sandboxOptions",
   "sessionDir",
   "baseDir",
@@ -9915,7 +9951,7 @@ var LocalAgent = class {
     reportUnknownLocalOptions(options.local);
     const compatSources = resolveCompatSources(options, this.workspaceCwd);
     reportUndeclaredSources(this.workspaceCwd, compatSources);
-    this.hooksExecutor = new HooksExecutor(this.workspaceCwd, compatSources);
+    this.hooksExecutor = new HooksExecutor(this.workspaceCwd, compatSources, options.local?.hooks);
     this.defaultMemoryProviderForLoop = createLocalAgentMemoryProvider({
       agentOptions: options,
       workspaceCwd: this.workspaceCwd,
@@ -10820,7 +10856,7 @@ var Agent = class _Agent {
    */
   static async compact(agentId, options = {}) {
     const reg = await requireLocalAgent(agentId, "compact");
-    const { compactSessionTranscript, buildDefaultSummarizer: buildDefaultSummarizer2 } = await import('./compact-session-W4WLJTHA.js');
+    const { compactSessionTranscript, buildDefaultSummarizer: buildDefaultSummarizer2 } = await import('./compact-session-YSEK7NQF.js');
     const { cwd, model, store } = await openLocalStore(reg);
     return enqueueSessionWrite(
       cwd,
@@ -10847,7 +10883,7 @@ var Agent = class _Agent {
    */
   static async injectSessionTurn(agentId, turn) {
     const reg = await requireLocalAgent(agentId, "injectSessionTurn");
-    const { injectSessionTurn } = await import('./inject-session-SUM6TDJF.js');
+    const { injectSessionTurn } = await import('./inject-session-J4LBWAPH.js');
     const { cwd, model, store } = await openLocalStore(reg);
     await injectSessionTurn({
       store,
@@ -10898,7 +10934,7 @@ var Agent = class _Agent {
    */
   static async describe(agentId) {
     const agent = await getRegisteredAgentOrThrow(agentId);
-    const { loadSubagents: loadSubagents2 } = await import('./subagents-loader-PAZVOZHI.js');
+    const { loadSubagents: loadSubagents2 } = await import('./subagents-loader-AIVDQ2D5.js');
     const settingSources = agent.options.local?.settingSources;
     const subagents = await loadSubagents2(
       agent.cwd ?? process.cwd(),
@@ -11005,5 +11041,5 @@ async function openLocalStore(reg) {
 }
 
 export { Agent, AgentBuilder, DEFAULT_AGENTIC_MODEL_ID, MEMORY_EMBEDDING_ADAPTERS, Tool, ToolError, UsageAccumulator, computeCost, generateCronId, getPricingEntry, openRouterMemoryEmbeddingProviderAdapter, resolveSessionDir };
-//# sourceMappingURL=chunk-363RBGIR.js.map
-//# sourceMappingURL=chunk-363RBGIR.js.map
+//# sourceMappingURL=chunk-ODBID5TG.js.map
+//# sourceMappingURL=chunk-ODBID5TG.js.map