@theokit/sdk 3.2.3 → 3.3.0

package/dist/index.cjs

@@ -9016,7 +9016,9 @@ async function vetoFromPluginPreHook(inputs, call, callId, events) {
     name: call.name,
     args: call.input,
     agentId: inputs.agentId,
-    runId: inputs.runId
+    runId: inputs.runId,
+    // SE1 — thread the run's permission mode so a PermissionPlugin gates per-run.
+    ...inputs.permissionMode !== void 0 ? { permissionMode: inputs.permissionMode } : {}
   });
   if (pluginVeto === void 0) return void 0;
   emitRunEvent(inputs.runEventSink, {
@@ -13441,6 +13443,10 @@ function buildLoopInputs(options, runId, userText) {
     ...options.onDelta !== void 0 ? { onDelta: options.onDelta } : {},
     ...options.sendOptions.toolChoice !== void 0 ? { toolChoice: options.sendOptions.toolChoice } : {},
     ...options.sendOptions.activeTools !== void 0 ? { activeTools: options.sendOptions.activeTools } : {},
+    // SE1 — resolve the run's permission mode: per-send wins over creation-time.
+    ...(options.sendOptions.permissionMode ?? options.agentOptions.permissionMode) !== void 0 ? {
+      permissionMode: options.sendOptions.permissionMode ?? options.agentOptions.permissionMode
+    } : {},
     ...options.priorMessages !== void 0 ? { priorMessages: options.priorMessages } : {},
     ...options.memoryTools !== void 0 && options.memoryTools.length > 0 ? { memoryTools: options.memoryTools } : {},
     ...buildCustomToolsInput(
@@ -22846,13 +22852,17 @@ function applyMode(verdict, mode, explicit) {
       return verdict;
     // allow stays allow
     case "bypass":
+    case "bypassPermissions":
       return "allow";
   }
 }
 function argMatches(matcher, value) {
   if (typeof matcher === "function") return matcher(value);
   if (value === void 0) return false;
-  if (matcher instanceof RegExp) return matcher.test(String(value));
+  if (matcher instanceof RegExp) {
+    matcher.lastIndex = 0;
+    return matcher.test(String(value));
+  }
   return matcher === value;
 }
 var PermissionEngine = class {
@@ -22896,19 +22906,19 @@ async function resolveAsk(opts, name, args, mode) {
     } catch {
       return { block: true, message: `permission gate error (fail-closed): ${name}` };
     }
-    return decision.behavior === "deny" ? { block: true, message: decision.message ?? `denied: ${name}` } : void 0;
+    return decision?.behavior === "allow" ? void 0 : { block: true, message: decision?.message ?? `denied: ${name}` };
   }
   return opts.onAsk ? opts.onAsk(name) : { block: true, message: `requires approval: ${name}` };
 }
 function createPermissionPlugin(engine, opts = {}) {
-  const mode = opts.mode ?? "default";
   return definePlugin({
     name: opts.name ?? "permission-engine",
     version: "1.0.0",
     kind: "general",
     register(ctx) {
       ctx.on("pre_tool_call", async (rawCtx) => {
-        const { name, args } = rawCtx;
+        const { name, args, permissionMode } = rawCtx;
+        const mode = permissionMode ?? opts.mode ?? "default";
         const action = engine.evaluate(name, args, mode);
         if (action === "deny") {
           return { block: true, message: `denied by permission engine: ${name}` };