@theokit/sdk 5.5.0 → 5.7.0

package/dist/index.cjs

@@ -3,33 +3,34 @@
 var chunkTFG5IBZS_cjs = require('./chunk-TFG5IBZS.cjs');
 var chunkOBA6YK2R_cjs = require('./chunk-OBA6YK2R.cjs');
 var chunkQDM3OHUT_cjs = require('./chunk-QDM3OHUT.cjs');
-var chunkVPK6PHIE_cjs = require('./chunk-VPK6PHIE.cjs');
+var chunkE6QXZZKE_cjs = require('./chunk-E6QXZZKE.cjs');
 var chunkQWD4RDZ3_cjs = require('./chunk-QWD4RDZ3.cjs');
 require('./chunk-7JJ3A6AT.cjs');
 var chunk4HS6FFGL_cjs = require('./chunk-4HS6FFGL.cjs');
 require('./chunk-4A3SKJ53.cjs');
 require('./chunk-VTYY7XL5.cjs');
-var chunk2ZLQZHZC_cjs = require('./chunk-2ZLQZHZC.cjs');
-var chunkUKJJRU7C_cjs = require('./chunk-UKJJRU7C.cjs');
+var chunkER5BOIYD_cjs = require('./chunk-ER5BOIYD.cjs');
+var chunkA575WPBL_cjs = require('./chunk-A575WPBL.cjs');
 var chunkKVSAY6NZ_cjs = require('./chunk-KVSAY6NZ.cjs');
-require('./chunk-DZG77WU7.cjs');
+require('./chunk-3XSWF5AP.cjs');
 require('./chunk-BUUUWQMB.cjs');
-require('./chunk-Z2JFX372.cjs');
-require('./chunk-VY6NKMOA.cjs');
+require('./chunk-33A27NFX.cjs');
+require('./chunk-YYN6BB7R.cjs');
 require('./chunk-BV2MWEMV.cjs');
 require('./chunk-D6POWE7E.cjs');
 require('./chunk-GHX4P3V2.cjs');
 require('./chunk-TMKTSYDS.cjs');
-var chunkNQTNSHSB_cjs = require('./chunk-NQTNSHSB.cjs');
+var chunkHNAYCTX4_cjs = require('./chunk-HNAYCTX4.cjs');
 var chunk7FDKWDA2_cjs = require('./chunk-7FDKWDA2.cjs');
-var chunkC4ZQPWXJ_cjs = require('./chunk-C4ZQPWXJ.cjs');
+var chunkZLMU5EU3_cjs = require('./chunk-ZLMU5EU3.cjs');
 require('./chunk-FUSDYC2B.cjs');
 require('./chunk-YJNYDJ2T.cjs');
 require('./chunk-24SYBZPL.cjs');
 require('./chunk-QOGNZMHD.cjs');
 var chunkYIFFF23U_cjs = require('./chunk-YIFFF23U.cjs');
 require('./chunk-2ZPEDVLM.cjs');
-require('./chunk-IU5N5224.cjs');
+require('./chunk-EFETPSJZ.cjs');
+require('./chunk-GK3UG7YQ.cjs');
 require('./chunk-KRD3GQAA.cjs');
 require('./chunk-RQMCOFAI.cjs');
 require('./chunk-MUUQ2WFJ.cjs');
@@ -38,8 +39,8 @@ require('./chunk-YSTXFWQE.cjs');
 require('./chunk-FRITRLZQ.cjs');
 require('./chunk-NQTD6QOW.cjs');
 require('./chunk-NINIJCHU.cjs');
-require('./chunk-QATRS7JD.cjs');
-require('./chunk-LOHMT36V.cjs');
+var chunkMYJGWS2J_cjs = require('./chunk-MYJGWS2J.cjs');
+require('./chunk-7KBNBPFK.cjs');
 require('./chunk-IJ7M6GOG.cjs');
 require('./chunk-7A6535RA.cjs');
 require('./chunk-SA6K24NB.cjs');
@@ -53,9 +54,9 @@ require('./chunk-BJUJT5ED.cjs');
 var chunkZF2LDKQQ_cjs = require('./chunk-ZF2LDKQQ.cjs');
 var chunkHCT4HPCL_cjs = require('./chunk-HCT4HPCL.cjs');
 var chunkJLRLCBJ4_cjs = require('./chunk-JLRLCBJ4.cjs');
-require('./chunk-AYA65JA5.cjs');
-require('./chunk-43YXGD3P.cjs');
-require('./chunk-HW7SEELD.cjs');
+require('./chunk-RWPLWMCZ.cjs');
+var chunkTY56BKSK_cjs = require('./chunk-TY56BKSK.cjs');
+require('./chunk-QRVS2PRE.cjs');
 var chunkATT276RD_cjs = require('./chunk-ATT276RD.cjs');
 var chunk3EE6LVWT_cjs = require('./chunk-3EE6LVWT.cjs');
 require('./chunk-ANMJJD6D.cjs');
@@ -67,15 +68,16 @@ require('./chunk-HUFSABUZ.cjs');
 var chunkJ7J7J2GN_cjs = require('./chunk-J7J7J2GN.cjs');
 var chunk6LHQPOMI_cjs = require('./chunk-6LHQPOMI.cjs');
 var crypto = require('crypto');
-var zod = require('zod');
 var promises = require('fs/promises');
 var path = require('path');
+var zod = require('zod');
+var os = require('os');
 
 // src/agent-factory.ts
 function createAgentFactory(common) {
   return {
-    forSession: (agentId, overrides) => chunkUKJJRU7C_cjs.Agent.create(mergeAgentOptions(common, overrides, agentId)),
-    getOrCreate: (agentId, overrides) => chunkUKJJRU7C_cjs.Agent.getOrCreate(agentId, mergeAgentOptions(common, overrides, agentId))
+    forSession: (agentId, overrides) => chunkA575WPBL_cjs.Agent.create(mergeAgentOptions(common, overrides, agentId)),
+    getOrCreate: (agentId, overrides) => chunkA575WPBL_cjs.Agent.getOrCreate(agentId, mergeAgentOptions(common, overrides, agentId))
   };
 }
 function mergeAgentOptions(common, overrides, agentId) {
@@ -686,12 +688,43 @@ var Provider = class _Provider {
     return _Provider.builtins().find((p) => p.name === provider);
   }
 };
+async function resolveBody(skill) {
+  if (typeof skill.instructions === "string") {
+    const inline = skill;
+    return inline.references === void 0 ? { instructions: inline.instructions } : { instructions: inline.instructions, references: inline.references };
+  }
+  const source = skill.source;
+  const skillDir = path.dirname(source);
+  const body = chunkMYJGWS2J_cjs.stripSkillFrontmatter(await promises.readFile(source, "utf8"));
+  const instructions = body.replaceAll(SKILL_DIR_PLACEHOLDER, skillDir);
+  const references = await readReferences(skillDir);
+  return references === void 0 ? { instructions } : { instructions, references };
+}
+var SKILL_DIR_PLACEHOLDER = "${CLAUDE_SKILL_DIR}";
+async function readReferences(skillDir) {
+  const dir = path.join(skillDir, "references");
+  let names;
+  try {
+    names = await promises.readdir(dir);
+  } catch {
+    return void 0;
+  }
+  const refs = {};
+  for (const name of names) {
+    try {
+      refs[name] = await promises.readFile(path.join(dir, name), "utf8");
+    } catch {
+    }
+  }
+  return Object.keys(refs).length > 0 ? refs : void 0;
+}
 var SkillReadInputSchema = zod.z.object({
   name: zod.z.string().min(1, "skill_read: `name` is required.")
 });
-function renderSkill(skill) {
-  const parts = [`# Skill: ${skill.name}`, "", skill.instructions];
-  const refs = skill.references;
+async function renderSkill(skill) {
+  const { instructions, references } = await resolveBody(skill);
+  const parts = [`# Skill: ${skill.name}`, "", instructions];
+  const refs = references;
   if (refs !== void 0 && Object.keys(refs).length > 0) {
     parts.push("", "## References");
     for (const [file, content] of Object.entries(refs)) {
@@ -714,6 +747,11 @@ function defineSkillReadTool(skills) {
     name: "skill_read",
     description: "Read a skill's full instructions (and any bundled reference documents) by its name. Use this to load the body of a skill listed in the <skills> block before acting on it.",
     inputSchema: chunkAA27GEYS_cjs.toJsonSchema(SkillReadInputSchema),
+    // NOT `async`. Marking the whole handler async turns the schema's SYNCHRONOUS throw into a
+    // rejected promise, and this module's contract is that malformed input "fails at the trust
+    // boundary via the schema" — measured, two trust-boundary tests went from throwing to
+    // returning `undefined`. Only the body read needs to be asynchronous, so only it returns a
+    // promise: parse and the not-found answer stay exactly as synchronous as they were.
     handler: (input) => {
       const { name } = SkillReadInputSchema.parse(input);
       const skill = skills.find((s) => s.name === name);
@@ -1023,10 +1061,10 @@ var JobQueue = class {
       this.running += 1;
       return Promise.resolve();
     }
-    return new Promise((resolve) => {
+    return new Promise((resolve2) => {
       this.waiting.push(() => {
         this.running += 1;
-        resolve();
+        resolve2();
       });
     });
   }
@@ -1220,8 +1258,8 @@ async function runInner(options) {
   const now = options.now ?? Date.now;
   const timestampMs = now();
   try {
-    const root = options.memoryRoot ?? chunkNQTNSHSB_cjs.resolveMemoryRoot(options.cwd);
-    const facts = await chunkNQTNSHSB_cjs.readFactsFromMarkdown(
+    const root = options.memoryRoot ?? chunkHNAYCTX4_cjs.resolveMemoryRoot(options.cwd);
+    const facts = await chunkHNAYCTX4_cjs.readFactsFromMarkdown(
       options.cwd,
       options.memoryRoot ? { directory: options.memoryRoot } : void 0
     );
@@ -1240,7 +1278,7 @@ async function runInner(options) {
       notesWritten,
       diaryEntryHash: void 0
     };
-    await chunkVPK6PHIE_cjs.appendDiaryEntry(root, {
+    await chunkE6QXZZKE_cjs.appendDiaryEntry(root, {
       timestampMs,
       factsBefore: result.factsBefore,
       factsAfter: result.factsAfter,
@@ -1334,8 +1372,8 @@ var Memory = {
       openArgs.embedding = await resolveEmbedding(opts.embedding, peer.MEMORY_EMBEDDING_ADAPTERS);
       return await peer.IndexManager.open(openArgs);
     }
-    const { IndexManager } = await import('./index-manager-3UNPYH34.cjs');
-    openArgs.embedding = await resolveEmbedding(opts.embedding, chunkUKJJRU7C_cjs.MEMORY_EMBEDDING_ADAPTERS);
+    const { IndexManager } = await import('./index-manager-W7RHSL6G.cjs');
+    openArgs.embedding = await resolveEmbedding(opts.embedding, chunkA575WPBL_cjs.MEMORY_EMBEDDING_ADAPTERS);
     return await IndexManager.open(openArgs);
   },
   /**
@@ -1346,7 +1384,7 @@ var Memory = {
    */
   async runDreamingSweep(opts) {
     const peer = await tryLoadSdkMemoryPeer();
-    const catalog = peer !== null ? peer.MEMORY_EMBEDDING_ADAPTERS : chunkUKJJRU7C_cjs.MEMORY_EMBEDDING_ADAPTERS;
+    const catalog = peer !== null ? peer.MEMORY_EMBEDDING_ADAPTERS : chunkA575WPBL_cjs.MEMORY_EMBEDDING_ADAPTERS;
     const sweepArgs = await buildDreamingSweepArgs(opts, catalog);
     const result = peer !== null ? (
       // biome-ignore lint/suspicious/noExplicitAny: peer is dynamically loaded — structural compat ensured by sdk-memory
@@ -1380,7 +1418,7 @@ async function buildDreamingSweepArgs(opts, catalog) {
   const runtime = await resolveEmbedding(opts.embedding, catalog);
   return {
     cwd: opts.cwd,
-    memoryRoot: chunkNQTNSHSB_cjs.resolveMemoryRoot(opts.cwd, { directory: opts.directory }),
+    memoryRoot: chunkHNAYCTX4_cjs.resolveMemoryRoot(opts.cwd, { directory: opts.directory }),
     embedding: runtime,
     ...opts.dedupThreshold !== void 0 ? { dedupThreshold: opts.dedupThreshold } : {},
     ...opts.clusterThreshold !== void 0 ? { clusterThreshold: opts.clusterThreshold } : {}
@@ -1419,7 +1457,7 @@ async function migrateSqliteToLance2(options) {
   if (peer !== null) {
     return peer.migrateSqliteToLance(options);
   }
-  return chunkVPK6PHIE_cjs.migrateSqliteToLance(options);
+  return chunkE6QXZZKE_cjs.migrateSqliteToLance(options);
 }
 
 // src/permission-engine.ts
@@ -1479,6 +1517,111 @@ var PermissionEngine = class {
     return true;
   }
 };
+var PROTECTED_SEGMENTS = [
+  ".git",
+  // The two agent-configuration directories come from the dialect declarations rather than being
+  // spelled again here. A second copy of `.theokit` would drift from the one `paths.ts` resolves
+  // against, and this list would then protect a directory the runtime no longer uses — worse than
+  // not protecting it, because the gap would be invisible.
+  chunkTY56BKSK_cjs.CLAUDE_DIR_NAME,
+  chunkTY56BKSK_cjs.THEOKIT_DIR_LITERAL,
+  ".ssh",
+  ".gnupg"
+];
+var PROTECTED_FILES = [
+  ".envrc",
+  ".npmrc",
+  ".mcp.json",
+  ".pre-commit-config.yaml",
+  ".netrc"
+];
+var WRITING_TOOLS = /^(write|edit|apply_?patch|multi_?edit|notebook_?edit|create)/i;
+var PATH_ARGS = ["file_path", "path", "notebook_path"];
+var COMMAND_ARGS = ["command", "cmd"];
+function permissionFloorReason(toolName, args, context = {}) {
+  const cwd = path.resolve(context.cwd ?? process.cwd());
+  const home = path.resolve(context.home ?? os.homedir());
+  const command = firstString(args, COMMAND_ARGS);
+  if (command !== void 0) {
+    const target = destructiveTargetIn(command, { cwd, home });
+    if (target !== void 0) {
+      return `refused by the critical-path floor: "${command}" is a destructive operation on ${target}. This tier is above every permission rule and every mode \u2014 it is not a rule you can reorder, and nothing in your settings is misconfigured.`;
+    }
+  }
+  if (!WRITING_TOOLS.test(toolName)) return void 0;
+  const path$1 = firstString(args, PATH_ARGS);
+  if (path$1 === void 0) return void 0;
+  const protectedBy = protectedReasonFor(path$1);
+  if (protectedBy !== void 0) {
+    return `refused by the protected-path floor: writing "${path$1}" would change ${protectedBy}, which no allow rule can pre-approve. This tier is above every permission rule; nothing in your settings is misconfigured.`;
+  }
+  return void 0;
+}
+function firstString(args, names) {
+  if (args === void 0) return void 0;
+  for (const name of names) {
+    const v = args[name];
+    if (typeof v === "string") return v;
+  }
+  return void 0;
+}
+function protectedReasonFor(path$1) {
+  const segments = path.normalize(path$1).split(/[\\/]+/).filter((s) => s.length > 0);
+  for (const segment of segments) {
+    if (PROTECTED_SEGMENTS.includes(segment)) return `the ${segment} directory`;
+  }
+  const last = segments.at(-1);
+  if (last !== void 0 && PROTECTED_FILES.includes(last)) return `the ${last} file`;
+  return void 0;
+}
+var DESTRUCTIVE = /(?:^|[;&|])\s*(rm|rmdir|shred|mkfs(?:\.[\w.-]{1,32})?|dd)\s/;
+function destructiveTargetIn(command, roots) {
+  if (!DESTRUCTIVE.test(command)) return void 0;
+  if (SUBSTITUTES.test(command)) {
+    return "a target this floor cannot resolve (the command substitutes or expands it)";
+  }
+  const critical = criticalRootsFor(roots);
+  for (const token of command.split(/\s+/)) {
+    const target = absoluteTargetOf(token, roots.home);
+    const hit = target === void 0 ? void 0 : critical.get(target);
+    if (hit !== void 0) return hit;
+  }
+  return void 0;
+}
+var SUBSTITUTES = /\$\(|`|\$\{?\w/;
+function criticalRootsFor(roots) {
+  const map = /* @__PURE__ */ new Map([
+    [path.resolve("/"), "the filesystem root"],
+    [roots.home, "the home directory"]
+  ]);
+  for (const parent of ancestorsOf(roots.cwd)) {
+    map.set(parent, "a parent of the working directory");
+  }
+  map.set(roots.cwd, "the working directory");
+  return map;
+}
+function absoluteTargetOf(token, home) {
+  const bare = token.replace(/["']/g, "").replace(/\/\*+$/, "");
+  if (bare.length === 0 || bare.startsWith("-")) return void 0;
+  const expanded = bare === "~" || bare.startsWith(`~${path.sep}`) ? home : bare;
+  return path.isAbsolute(expanded) ? path.resolve(expanded) : void 0;
+}
+function ancestorsOf(dir) {
+  const out = [];
+  let current = dir;
+  const { root } = path.parse(dir);
+  while (current !== root) {
+    const parent = path.resolve(current, "..");
+    if (parent === current) break;
+    out.push(parent);
+    current = parent;
+  }
+  return out;
+}
+function isInside(parent, child) {
+  const rel = path.relative(path.resolve(parent), path.resolve(child));
+  return rel.length > 0 && !rel.startsWith("..") && !path.isAbsolute(rel);
+}
 
 // src/permission-plugin.ts
 async function resolveAsk(opts, name, args, mode) {
@@ -1502,6 +1645,8 @@ function createPermissionPlugin(engine, opts = {}) {
       ctx.on("pre_tool_call", async (rawCtx) => {
         const { name, args, permissionMode } = rawCtx;
         const mode = permissionMode ?? opts.mode ?? "default";
+        const floor = permissionFloorReason(name, args, {});
+        if (floor !== void 0) return { block: true, message: floor };
         const action = engine.evaluate(name, args, mode);
         if (action === "deny") {
           return { block: true, message: `denied by permission engine: ${name}` };
@@ -1520,6 +1665,85 @@ var PermissionPlugin = class {
   }
 };
 
+// src/permission-rules.ts
+var PRIMARY_ARG_NAMES = ["command", "file_path", "path", "url", "query"];
+function parsePermissionRules(set) {
+  return [
+    ...(set.deny ?? []).flatMap((r) => parseOne(r, "deny")),
+    ...(set.ask ?? []).flatMap((r) => parseOne(r, "ask")),
+    ...(set.allow ?? []).flatMap((r) => parseOne(r, "allow"))
+  ];
+}
+function parseOne(rule, action) {
+  const trimmed = rule.trim();
+  const open = trimmed.indexOf("(");
+  if (open === -1) {
+    if (trimmed.length === 0) {
+      throw new chunkJ7J7J2GN_cjs.ConfigurationError("permission rule is empty", { code: "permission_rule_invalid" });
+    }
+    return [{ tool: normaliseToolName(trimmed), action }];
+  }
+  if (!trimmed.endsWith(")")) {
+    throw new chunkJ7J7J2GN_cjs.ConfigurationError(
+      `permission rule "${rule}" opens a specifier and never closes it \u2014 expected Tool(specifier)`,
+      { code: "permission_rule_invalid" }
+    );
+  }
+  const tool = trimmed.slice(0, open).trim();
+  const specifier = trimmed.slice(open + 1, -1);
+  if (tool.length === 0) {
+    throw new chunkJ7J7J2GN_cjs.ConfigurationError(`permission rule "${rule}" names no tool`, {
+      code: "permission_rule_invalid"
+    });
+  }
+  if (specifier === "*") return [{ tool: normaliseToolName(tool), action }];
+  const test = predicateFor(specifier);
+  const name = normaliseToolName(tool);
+  return PRIMARY_ARG_NAMES.map((arg) => ({ tool: name, action, args: { [arg]: test } }));
+}
+function normaliseToolName(tool) {
+  if (!tool.startsWith("mcp__")) return tool;
+  return `mcp_${tool.slice("mcp__".length).replaceAll("__", "_")}`;
+}
+function predicateFor(specifier) {
+  if (specifier.startsWith("path:")) {
+    const re = globToRegExp(specifier.slice("path:".length));
+    return (v) => typeof v === "string" && re.test(v);
+  }
+  if (specifier.startsWith("domain:")) {
+    const host = specifier.slice("domain:".length).toLowerCase();
+    return (v) => typeof v === "string" && hostOf(v) === host;
+  }
+  if (specifier.endsWith("*")) {
+    const prefix = specifier.slice(0, -1);
+    return (v) => typeof v === "string" && v.startsWith(prefix);
+  }
+  return (v) => v === specifier;
+}
+function hostOf(value) {
+  try {
+    return new URL(value).hostname.toLowerCase();
+  } catch {
+    return void 0;
+  }
+}
+function translateGlobChar(glob, i) {
+  const c = glob[i] ?? "";
+  if (c === "?") return { pattern: "[^/]", consumed: 0 };
+  if (c !== "*") return { pattern: c.replace(/[.+^${}()|[\]\\]/g, "\\$&"), consumed: 0 };
+  if (glob[i + 1] !== "*") return { pattern: "[^/]*", consumed: 0 };
+  return { pattern: ".*", consumed: glob[i + 2] === "/" ? 2 : 1 };
+}
+function globToRegExp(glob) {
+  let out = "";
+  for (let i = 0; i < glob.length; i += 1) {
+    const piece = translateGlobChar(glob, i);
+    out += piece.pattern;
+    i += piece.consumed;
+  }
+  return new RegExp(`^${out}$`);
+}
+
 // src/project-env.ts
 var SOVEREIGN_ENV_KEYS = [
   /** Locates the SDK home — sessions, and the credential store beneath it. */
@@ -1770,7 +1994,7 @@ function guardSessionDestruction(sessionId, live) {
 // src/session-messages.ts
 async function readSessionMessages2(options) {
   const cwd = options.cwd ?? process.cwd();
-  const baseDir = chunkUKJJRU7C_cjs.resolveSessionDir({ sessionDir: options.sessionDir });
+  const baseDir = chunkA575WPBL_cjs.resolveSessionDir({ sessionDir: options.sessionDir });
   return chunkYIFFF23U_cjs.readSessionMessages(new chunk7FDKWDA2_cjs.FsSessionStore({ baseDir, cwd }), options.sessionId);
 }
 
@@ -1787,7 +2011,7 @@ function isBuiltAgent(m) {
   return typeof m.send === "function";
 }
 async function materialize(def, index) {
-  const { Agent: Agent2 } = await import('./agent-YWSIHHFM.cjs');
+  const { Agent: Agent2 } = await import('./agent-KA63WDQH.cjs');
   return Agent2.create({
     // `AgentDefinition.model` admits the sentinel `'inherit'`, which is not a model id. Inheriting
     // here means "declare nothing and let the default apply" — forwarding the literal would create
@@ -1929,7 +2153,7 @@ var FIXTURE_USER = {
 };
 var FIXTURE_MODELS = [
   {
-    id: chunkUKJJRU7C_cjs.DEFAULT_AGENTIC_MODEL_ID,
+    id: chunkA575WPBL_cjs.DEFAULT_AGENTIC_MODEL_ID,
     name: "Gemini 2.0 Flash",
     displayName: "Gemini 2.0 Flash",
     parameters: [
@@ -2005,7 +2229,7 @@ async function listLocalModelsViaOpenAiCompat(baseUrl) {
   try {
     response = await fetch(url, { method: "GET" });
   } catch (fetchErr) {
-    const mapped = chunkC4ZQPWXJ_cjs.mapOllamaTransportError({
+    const mapped = chunkZLMU5EU3_cjs.mapOllamaTransportError({
       providerId: "ollama",
       cause: fetchErr,
       endpoint: "/v1/models"
@@ -2017,8 +2241,8 @@ async function listLocalModelsViaOpenAiCompat(baseUrl) {
     );
   }
   if (!response.ok) {
-    const body = await chunkC4ZQPWXJ_cjs.readErrorResponseBody(response);
-    const mapped = chunkC4ZQPWXJ_cjs.mapOllamaHttpError({
+    const body = await chunkZLMU5EU3_cjs.readErrorResponseBody(response);
+    const mapped = chunkZLMU5EU3_cjs.mapOllamaHttpError({
       providerId: "ollama",
       status: response.status,
       body,
@@ -2132,7 +2356,7 @@ var Theokit = class {
         envVars: p.envVars
       }));
     },
-    embeddingAdapters: () => Object.entries(chunkUKJJRU7C_cjs.MEMORY_EMBEDDING_ADAPTERS).map(([id, adapter]) => ({
+    embeddingAdapters: () => Object.entries(chunkA575WPBL_cjs.MEMORY_EMBEDDING_ADAPTERS).map(([id, adapter]) => ({
       id,
       transport: adapter.transport,
       defaultModel: adapter.defaultModel
@@ -2150,7 +2374,7 @@ var Theokit = class {
 };
 async function maybeListLocalModels(providerName) {
   chunkQC55H6RJ_cjs.registerBuiltins();
-  await chunkC4ZQPWXJ_cjs.discoverProviderPlugins();
+  await chunkZLMU5EU3_cjs.discoverProviderPlugins();
   const profile = chunkQC55H6RJ_cjs.getProviderProfile(providerName);
   if (profile === void 0) return void 0;
   if (profile.authType !== "none") return void 0;
@@ -2168,13 +2392,13 @@ async function executeCatalogRequest(request) {
   if (apiKey === void 0) {
     throw new chunkJ7J7J2GN_cjs.AuthenticationError("Missing API key", { code: "missing_api_key" });
   }
-  if (chunkC4ZQPWXJ_cjs.shouldUseFixtureMode(apiKey)) {
+  if (chunkZLMU5EU3_cjs.shouldUseFixtureMode(apiKey)) {
     return request.fixture;
   }
-  if (!chunkC4ZQPWXJ_cjs.isFixtureApiKey(apiKey) && process.env.THEOKIT_API_BASE_URL === void 0) {
+  if (!chunkZLMU5EU3_cjs.isFixtureApiKey(apiKey) && process.env.THEOKIT_API_BASE_URL === void 0) {
     throw new chunkJ7J7J2GN_cjs.AuthenticationError("Invalid API key", { code: "authentication_error" });
   }
-  return chunkC4ZQPWXJ_cjs.httpRequest(request.path, { apiKey });
+  return chunkZLMU5EU3_cjs.httpRequest(request.path, { apiKey });
 }
 
 // src/tool-blast-radius.ts
@@ -2351,35 +2575,43 @@ Object.defineProperty(exports, "fn", {
 });
 Object.defineProperty(exports, "Cron", {
   enumerable: true,
-  get: function () { return chunk2ZLQZHZC_cjs.Cron; }
+  get: function () { return chunkER5BOIYD_cjs.Cron; }
 });
 Object.defineProperty(exports, "Agent", {
   enumerable: true,
-  get: function () { return chunkUKJJRU7C_cjs.Agent; }
+  get: function () { return chunkA575WPBL_cjs.Agent; }
 });
 Object.defineProperty(exports, "AgentBuilder", {
   enumerable: true,
-  get: function () { return chunkUKJJRU7C_cjs.AgentBuilder; }
+  get: function () { return chunkA575WPBL_cjs.AgentBuilder; }
 });
 Object.defineProperty(exports, "Tool", {
   enumerable: true,
-  get: function () { return chunkUKJJRU7C_cjs.Tool; }
+  get: function () { return chunkA575WPBL_cjs.Tool; }
 });
 Object.defineProperty(exports, "ToolError", {
   enumerable: true,
-  get: function () { return chunkUKJJRU7C_cjs.ToolError; }
+  get: function () { return chunkA575WPBL_cjs.ToolError; }
 });
 Object.defineProperty(exports, "UsageAccumulator", {
   enumerable: true,
-  get: function () { return chunkUKJJRU7C_cjs.UsageAccumulator; }
+  get: function () { return chunkA575WPBL_cjs.UsageAccumulator; }
 });
 Object.defineProperty(exports, "computeCost", {
   enumerable: true,
-  get: function () { return chunkUKJJRU7C_cjs.computeCost; }
+  get: function () { return chunkA575WPBL_cjs.computeCost; }
 });
 Object.defineProperty(exports, "getPricingEntry", {
   enumerable: true,
-  get: function () { return chunkUKJJRU7C_cjs.getPricingEntry; }
+  get: function () { return chunkA575WPBL_cjs.getPricingEntry; }
+});
+Object.defineProperty(exports, "managedSettingsPathFor", {
+  enumerable: true,
+  get: function () { return chunkA575WPBL_cjs.managedSettingsPathFor; }
+});
+Object.defineProperty(exports, "readManagedSettings", {
+  enumerable: true,
+  get: function () { return chunkA575WPBL_cjs.readManagedSettings; }
 });
 Object.defineProperty(exports, "emitRunEvent", {
   enumerable: true,
@@ -2510,11 +2742,14 @@ exports.extractRawId = extractRawId;
 exports.foldLayers = foldLayers;
 exports.guardSessionDestruction = guardSessionDestruction;
 exports.inferApiMode = inferApiMode;
+exports.isInside = isInside;
 exports.loadProjectEnv = loadProjectEnv;
 exports.migrateSqliteToLance = migrateSqliteToLance2;
 exports.mkMemoryId = mkMemoryId;
 exports.normalizeSchema = normalizeSchema;
 exports.normalizeUsage = normalizeUsage;
+exports.parsePermissionRules = parsePermissionRules;
+exports.permissionFloorReason = permissionFloorReason;
 exports.planReaping = planReaping;
 exports.preflightCheck = preflightCheck;
 exports.readSessionMessages = readSessionMessages2;