@theokit/sdk 3.2.2 → 3.3.0

package/dist/{cron-DuhVPer6.d.ts → cron-BxoLC-XX.d.cts}

@@ -1,6 +1,6 @@
 import * as zod from 'zod';
 import { ZodType } from 'zod';
-import { C as CustomTool, M as ModelSelection, a7 as SDKUserMessage, a9 as SendOptions, b as Run, G as GenerateOptions, k as GenerateRunResult, V as RunToCompletionOptions, W as RunToCompletionResult, S as SDKMessage, ag as StreamToCompletionResult, a as McpServerConfig, P as Processor, r as MessageOrigin } from './run-CrHz9BAP.js';
+import { C as CustomTool, c as PermissionMode, M as ModelSelection, ac as SDKUserMessage, ae as SendOptions, b as Run, G as GenerateOptions, m as GenerateRunResult, _ as RunToCompletionOptions, $ as RunToCompletionResult, S as SDKMessage, al as StreamToCompletionResult, a as McpServerConfig, P as Processor, t as MessageOrigin } from './run-CL5Rw6a5.cjs';
 
 /**
  * Fork primitive public type contracts (T1.2, ADRs D110-D114).
@@ -1100,6 +1100,13 @@ interface PreToolCallContext {
     args: Record<string, unknown>;
     agentId: string;
     runId: string;
+    /**
+     * SE1 — the run's resolved `PermissionMode` (from `SendOptions.permissionMode`
+     * ?? `AgentOptions.permissionMode`), threaded so a permission-style plugin can
+     * gate per-run rather than at construction time. Absent ⇒ the plugin's own
+     * default applies. Ignored by non-permission plugins.
+     */
+    permissionMode?: PermissionMode;
 }
 interface PreToolCallDecision {
     block: true;
@@ -1563,6 +1570,13 @@ interface AgentOptions {
      * The two forms are mutually exclusive — pass one or the other.
      */
     plugins?: PluginsSettings | readonly Plugin[];
+    /**
+     * SE1 — the default permission mode for this agent's runs, threaded to a
+     * registered `PermissionPlugin`'s pre-tool gate. A per-send
+     * `SendOptions.permissionMode` overrides it. Absent ⇒ the plugin's own
+     * construction-time mode applies. Local runtime.
+     */
+    permissionMode?: PermissionMode;
     /**
      * Skills configuration. Either a static {@link SkillsSettings} object or —
      * SE22 — a {@link SkillsResolver} evaluated per `send()` to pick skills from

package/dist/{cron-4u1UdmgC.d.cts → cron-DFta_5kE.d.ts}

@@ -1,6 +1,6 @@
 import * as zod from 'zod';
 import { ZodType } from 'zod';
-import { C as CustomTool, M as ModelSelection, a7 as SDKUserMessage, a9 as SendOptions, b as Run, G as GenerateOptions, k as GenerateRunResult, V as RunToCompletionOptions, W as RunToCompletionResult, S as SDKMessage, ag as StreamToCompletionResult, a as McpServerConfig, P as Processor, r as MessageOrigin } from './run-CrHz9BAP.cjs';
+import { C as CustomTool, c as PermissionMode, M as ModelSelection, ac as SDKUserMessage, ae as SendOptions, b as Run, G as GenerateOptions, m as GenerateRunResult, _ as RunToCompletionOptions, $ as RunToCompletionResult, S as SDKMessage, al as StreamToCompletionResult, a as McpServerConfig, P as Processor, t as MessageOrigin } from './run-CL5Rw6a5.js';
 
 /**
  * Fork primitive public type contracts (T1.2, ADRs D110-D114).
@@ -1100,6 +1100,13 @@ interface PreToolCallContext {
     args: Record<string, unknown>;
     agentId: string;
     runId: string;
+    /**
+     * SE1 — the run's resolved `PermissionMode` (from `SendOptions.permissionMode`
+     * ?? `AgentOptions.permissionMode`), threaded so a permission-style plugin can
+     * gate per-run rather than at construction time. Absent ⇒ the plugin's own
+     * default applies. Ignored by non-permission plugins.
+     */
+    permissionMode?: PermissionMode;
 }
 interface PreToolCallDecision {
     block: true;
@@ -1563,6 +1570,13 @@ interface AgentOptions {
      * The two forms are mutually exclusive — pass one or the other.
      */
     plugins?: PluginsSettings | readonly Plugin[];
+    /**
+     * SE1 — the default permission mode for this agent's runs, threaded to a
+     * registered `PermissionPlugin`'s pre-tool gate. A per-send
+     * `SendOptions.permissionMode` overrides it. Absent ⇒ the plugin's own
+     * construction-time mode applies. Local runtime.
+     */
+    permissionMode?: PermissionMode;
     /**
      * Skills configuration. Either a static {@link SkillsSettings} object or —
      * SE22 — a {@link SkillsResolver} evaluated per `send()` to pick skills from

package/dist/cron.cjs

@@ -5163,12 +5163,23 @@ var init_objective_coerce = __esm({
 // src/internal/persistence/pagination.ts
 function paginate(items, opts) {
   if (opts === void 0 || opts.offset === void 0 && opts.limit === void 0) return items;
-  const start = Math.max(0, opts.offset ?? 0);
-  const end = opts.limit === void 0 ? items.length : start + Math.max(0, opts.limit);
+  const start = opts.offset === void 0 ? 0 : requireNonNegativeInt(opts.offset, "offset");
+  const limit = opts.limit === void 0 ? void 0 : requireNonNegativeInt(opts.limit, "limit");
+  const end = limit === void 0 ? items.length : start + limit;
   return items.slice(start, end);
 }
+function requireNonNegativeInt(value, field) {
+  if (!Number.isInteger(value) || value < 0) {
+    throw new ConfigurationError(
+      `Invalid pagination ${field}: expected a non-negative integer, got ${value}`,
+      { code: "pagination_invalid" }
+    );
+  }
+  return value;
+}
 var init_pagination = __esm({
   "src/internal/persistence/pagination.ts"() {
+    init_errors();
   }
 });
 
@@ -8995,7 +9006,9 @@ async function vetoFromPluginPreHook(inputs, call, callId, events) {
     name: call.name,
     args: call.input,
     agentId: inputs.agentId,
-    runId: inputs.runId
+    runId: inputs.runId,
+    // SE1 — thread the run's permission mode so a PermissionPlugin gates per-run.
+    ...inputs.permissionMode !== void 0 ? { permissionMode: inputs.permissionMode } : {}
   });
   if (pluginVeto === void 0) return void 0;
   emitRunEvent(inputs.runEventSink, {
@@ -10326,6 +10339,8 @@ function parseRetryAfter(headers) {
   if (raw === null) return void 0;
   const n = Number(raw);
   if (Number.isFinite(n) && n >= 0) return Math.ceil(n);
+  const dateMs = Date.parse(raw);
+  if (Number.isFinite(dateMs)) return Math.max(0, Math.ceil((dateMs - Date.now()) / 1e3));
   return void 0;
 }
 function truncateRaw(body) {
@@ -10646,6 +10661,7 @@ function buildAnthropicBody(request) {
 var AnthropicClient, AnthropicStreamAccumulator;
 var init_anthropic3 = __esm({
   "src/internal/llm/anthropic.ts"() {
+    init_errors();
     init_anthropic2();
     init_anthropic_shared();
     init_finish();
@@ -10699,12 +10715,23 @@ var init_anthropic3 = __esm({
           const events = accumulator.consume(parsed);
           for (const event of events) yield event;
         }
+        if (!accumulator.finishReasonSeen) {
+          throw new NetworkError("Anthropic SSE stream truncated (no stop_reason)", {
+            code: "stream_truncated"
+          });
+        }
         return accumulator.finish();
       }
     };
     AnthropicStreamAccumulator = class {
       text = "";
       stopReason = "end_turn";
+      /**
+       * M2 #61 — whether a `message_delta` carrying a real `stop_reason` was seen.
+       * A stream that closes before it is a truncation (server FIN / proxy hiccup),
+       * not a clean `end_turn` — the caller throws `stream_truncated` on `false`.
+       */
+      sawStopReason = false;
       inputTokens;
       outputTokens;
       cacheReadTokens;
@@ -10751,6 +10778,9 @@ var init_anthropic3 = __esm({
        * spinning the SSE parser.
        */
       handleMessageDelta(md) {
+        if (md.delta.stop_reason !== void 0 && md.delta.stop_reason !== null) {
+          this.sawStopReason = true;
+        }
         this.stopReason = mapAnthropicStopReason(md.delta.stop_reason);
         if (md.usage?.input_tokens !== void 0) this.inputTokens = md.usage.input_tokens;
         if (md.usage?.output_tokens !== void 0) this.outputTokens = md.usage.output_tokens;
@@ -10761,6 +10791,10 @@ var init_anthropic3 = __esm({
           this.cacheReadTokens = md.usage.cache_read_input_tokens;
         }
       }
+      /** M2 #61 — whether the terminal `message_delta` (stop_reason) was seen. */
+      get finishReasonSeen() {
+        return this.sawStopReason;
+      }
       finish() {
         const toolCalls = [];
         for (const [index, tool] of this.toolCalls.entries()) {
@@ -12994,7 +13028,6 @@ var init_client = __esm({
       // concurrent request so parallel tool dispatch after a drop awaits one handshake
       // instead of racing (or spuriously failing with mcp_not_init).
       dropped = false;
-      reconnectAttempts = 0;
       reconnectPromise;
       get timeoutMs() {
         return this.config.requestTimeoutMs ?? DEFAULT_MCP_TIMEOUT_MS;
@@ -13047,15 +13080,22 @@ var init_client = __esm({
         return this.reconnectPromise;
       }
       async reconnect() {
-        if (this.reconnectAttempts >= MAX_RECONNECT_ATTEMPTS) {
-          throw new NetworkError(`MCP ${this.name} reconnect exhausted`, { code: "mcp_disconnected" });
+        let lastErr;
+        for (let attempt = 0; attempt < MAX_RECONNECT_ATTEMPTS; attempt += 1) {
+          await reconnectDelay(attempt);
+          this.spawnChild();
+          try {
+            await super.initialize();
+            this.dropped = false;
+            return;
+          } catch (err) {
+            lastErr = err;
+          }
         }
-        await reconnectDelay(this.reconnectAttempts);
-        this.reconnectAttempts += 1;
-        this.spawnChild();
-        await super.initialize();
-        this.dropped = false;
-        this.reconnectAttempts = 0;
+        throw new NetworkError(`MCP ${this.name} reconnect exhausted`, {
+          code: "mcp_disconnected",
+          ...lastErr instanceof Error ? { cause: lastErr } : {}
+        });
       }
       async close() {
         this.rejectAllPending(new NetworkError(`MCP ${this.name} closed`, { code: "mcp_closed" }));
@@ -13379,6 +13419,10 @@ function buildLoopInputs(options, runId, userText) {
     ...options.onDelta !== void 0 ? { onDelta: options.onDelta } : {},
     ...options.sendOptions.toolChoice !== void 0 ? { toolChoice: options.sendOptions.toolChoice } : {},
     ...options.sendOptions.activeTools !== void 0 ? { activeTools: options.sendOptions.activeTools } : {},
+    // SE1 — resolve the run's permission mode: per-send wins over creation-time.
+    ...(options.sendOptions.permissionMode ?? options.agentOptions.permissionMode) !== void 0 ? {
+      permissionMode: options.sendOptions.permissionMode ?? options.agentOptions.permissionMode
+    } : {},
     ...options.priorMessages !== void 0 ? { priorMessages: options.priorMessages } : {},
     ...options.memoryTools !== void 0 && options.memoryTools.length > 0 ? { memoryTools: options.memoryTools } : {},
     ...buildCustomToolsInput(