PyPI - unique-sdk - Versions diffs - 2026.46.0.dev5__tar.gz → 2026.48.0.dev0__tar.gz - Mend

@@ -468,6 +468,16 @@ class ShellState:
             return True
         return self._metadata_filter.allows_folder_scope(scope_id)
+    def folder_navigable(self, scope_id: str) -> bool:
+        """True if ``ls``/``cd`` may open *scope_id* under the active scope.
+        The per-message filter decides when present; otherwise a non-empty
+        ``scopeIds`` list admits only those folders and their descendants.
+        """
+        if self._metadata_filter is not None:
+            return self.folder_allowed_by_metadata_filter(scope_id)
+        return self.is_folder_target_within_workspace(scope_id)
     def folder_path_allowed_by_metadata_filter(self, folder_path: str) -> bool:
         """True if an absolute folder *path* lies within a navigable scope.
@@ -564,10 +574,8 @@ class ShellState:
         return f"{self._path}> "
     def _require_navigable_folder(self, scope_id: str) -> None:
-        """Refuse a folder the per-message filter excludes. See UN-28458."""
-        if self._metadata_filter is None:
-            return
-        if self.folder_allowed_by_metadata_filter(scope_id):
+        """Refuse a folder outside the active scope. See UN-28458."""
+        if self.folder_navigable(scope_id):
             return
         raise ValueError(
             "permission denied: target is outside your task scope "

@@ -1,6 +1,6 @@
 Metadata-Version: 2.3
 Name: unique-sdk
-Version: 2026.46.0.dev5
+Version: 2026.48.0.dev0
 Summary:
 Author: Martin Fadler, Konstantin Krauss, Andreas Hauri
 Author-email: Martin Fadler <martin.fadler@unique.ch>, Konstantin Krauss <konstantin@unique.ch>, Andreas Hauri <andreas@unique.ch>

@@ -1,6 +1,6 @@
 [project]
 name = "unique_sdk"
-version = "2026.46.0.dev5"
+version = "2026.48.0.dev0"
 description = ""
 readme = "README.md"
 license = { text = "MIT" }

@@ -184,14 +184,10 @@ def cmd_ls(
         else:
             resolved_path, scope_id = state.cwd, state.scope_id
-        # A non-root target must lie inside the per-message scope: without
-        # this, `ls <path>` would enumerate out-of-scope folders/files that
-        # read/cite correctly deny. See UN-21780.
-        if (
-            scope_id is not None
-            and state.workspace_metadata_filter is not None
-            and not state.folder_allowed_by_metadata_filter(scope_id)
-        ):
+        # A non-root target must lie inside the task scope: without this,
+        # `ls <path>` would enumerate out-of-scope folders/files that
+        # read/cite correctly deny. See UN-21780 and UN-28458.
+        if scope_id is not None and not state.folder_navigable(scope_id):
             return (
                 f"ls: permission denied: target is outside your task scope "
                 f"({state.scope_denial_hint()})."

@@ -214,6 +214,16 @@ def cmd_search(
         folder_scope_id: str | None = None
         if folder:
             folder_scope_id = _resolve_folder_to_scope_id(state, folder)
+            # Without a per-message filter, --folder replaces the static
+            # scopeIds, so it must lie inside them. See UN-28458.
+            if (
+                not state.workspace_metadata_filter
+                and not state.is_folder_target_within_workspace(folder_scope_id)
+            ):
+                return (
+                    f"{SEARCH_ERROR_PREFIX} permission denied: {folder} is "
+                    f"outside your task scope ({state.scope_denial_hint()})."
+                )
         elif state.scope_id and not state.workspace_metadata_filter:
             # The incidental cwd narrows search only when there is no
             # per-message filter. With a filter active, only an explicit

unique-sdk 2026.46.0.dev5__tar.gz → 2026.48.0.dev0__tar.gz