@theokit/sdk 3.2.3 → 3.3.0

package/dist/{cron-DuhVPer6.d.ts → cron-BxoLC-XX.d.cts}

@@ -1,6 +1,6 @@
 import * as zod from 'zod';
 import { ZodType } from 'zod';
-import { C as CustomTool, M as ModelSelection, a7 as SDKUserMessage, a9 as SendOptions, b as Run, G as GenerateOptions, k as GenerateRunResult, V as RunToCompletionOptions, W as RunToCompletionResult, S as SDKMessage, ag as StreamToCompletionResult, a as McpServerConfig, P as Processor, r as MessageOrigin } from './run-CrHz9BAP.js';
+import { C as CustomTool, c as PermissionMode, M as ModelSelection, ac as SDKUserMessage, ae as SendOptions, b as Run, G as GenerateOptions, m as GenerateRunResult, _ as RunToCompletionOptions, $ as RunToCompletionResult, S as SDKMessage, al as StreamToCompletionResult, a as McpServerConfig, P as Processor, t as MessageOrigin } from './run-CL5Rw6a5.cjs';
 
 /**
  * Fork primitive public type contracts (T1.2, ADRs D110-D114).
@@ -1100,6 +1100,13 @@ interface PreToolCallContext {
     args: Record<string, unknown>;
     agentId: string;
     runId: string;
+    /**
+     * SE1 — the run's resolved `PermissionMode` (from `SendOptions.permissionMode`
+     * ?? `AgentOptions.permissionMode`), threaded so a permission-style plugin can
+     * gate per-run rather than at construction time. Absent ⇒ the plugin's own
+     * default applies. Ignored by non-permission plugins.
+     */
+    permissionMode?: PermissionMode;
 }
 interface PreToolCallDecision {
     block: true;
@@ -1563,6 +1570,13 @@ interface AgentOptions {
      * The two forms are mutually exclusive — pass one or the other.
      */
     plugins?: PluginsSettings | readonly Plugin[];
+    /**
+     * SE1 — the default permission mode for this agent's runs, threaded to a
+     * registered `PermissionPlugin`'s pre-tool gate. A per-send
+     * `SendOptions.permissionMode` overrides it. Absent ⇒ the plugin's own
+     * construction-time mode applies. Local runtime.
+     */
+    permissionMode?: PermissionMode;
     /**
      * Skills configuration. Either a static {@link SkillsSettings} object or —
      * SE22 — a {@link SkillsResolver} evaluated per `send()` to pick skills from

package/dist/{cron-4u1UdmgC.d.cts → cron-DFta_5kE.d.ts}

@@ -1,6 +1,6 @@
 import * as zod from 'zod';
 import { ZodType } from 'zod';
-import { C as CustomTool, M as ModelSelection, a7 as SDKUserMessage, a9 as SendOptions, b as Run, G as GenerateOptions, k as GenerateRunResult, V as RunToCompletionOptions, W as RunToCompletionResult, S as SDKMessage, ag as StreamToCompletionResult, a as McpServerConfig, P as Processor, r as MessageOrigin } from './run-CrHz9BAP.cjs';
+import { C as CustomTool, c as PermissionMode, M as ModelSelection, ac as SDKUserMessage, ae as SendOptions, b as Run, G as GenerateOptions, m as GenerateRunResult, _ as RunToCompletionOptions, $ as RunToCompletionResult, S as SDKMessage, al as StreamToCompletionResult, a as McpServerConfig, P as Processor, t as MessageOrigin } from './run-CL5Rw6a5.js';
 
 /**
  * Fork primitive public type contracts (T1.2, ADRs D110-D114).
@@ -1100,6 +1100,13 @@ interface PreToolCallContext {
     args: Record<string, unknown>;
     agentId: string;
     runId: string;
+    /**
+     * SE1 — the run's resolved `PermissionMode` (from `SendOptions.permissionMode`
+     * ?? `AgentOptions.permissionMode`), threaded so a permission-style plugin can
+     * gate per-run rather than at construction time. Absent ⇒ the plugin's own
+     * default applies. Ignored by non-permission plugins.
+     */
+    permissionMode?: PermissionMode;
 }
 interface PreToolCallDecision {
     block: true;
@@ -1563,6 +1570,13 @@ interface AgentOptions {
      * The two forms are mutually exclusive — pass one or the other.
      */
     plugins?: PluginsSettings | readonly Plugin[];
+    /**
+     * SE1 — the default permission mode for this agent's runs, threaded to a
+     * registered `PermissionPlugin`'s pre-tool gate. A per-send
+     * `SendOptions.permissionMode` overrides it. Absent ⇒ the plugin's own
+     * construction-time mode applies. Local runtime.
+     */
+    permissionMode?: PermissionMode;
     /**
      * Skills configuration. Either a static {@link SkillsSettings} object or —
      * SE22 — a {@link SkillsResolver} evaluated per `send()` to pick skills from

package/dist/cron.cjs

@@ -9006,7 +9006,9 @@ async function vetoFromPluginPreHook(inputs, call, callId, events) {
     name: call.name,
     args: call.input,
     agentId: inputs.agentId,
-    runId: inputs.runId
+    runId: inputs.runId,
+    // SE1 — thread the run's permission mode so a PermissionPlugin gates per-run.
+    ...inputs.permissionMode !== void 0 ? { permissionMode: inputs.permissionMode } : {}
   });
   if (pluginVeto === void 0) return void 0;
   emitRunEvent(inputs.runEventSink, {
@@ -13417,6 +13419,10 @@ function buildLoopInputs(options, runId, userText) {
     ...options.onDelta !== void 0 ? { onDelta: options.onDelta } : {},
     ...options.sendOptions.toolChoice !== void 0 ? { toolChoice: options.sendOptions.toolChoice } : {},
     ...options.sendOptions.activeTools !== void 0 ? { activeTools: options.sendOptions.activeTools } : {},
+    // SE1 — resolve the run's permission mode: per-send wins over creation-time.
+    ...(options.sendOptions.permissionMode ?? options.agentOptions.permissionMode) !== void 0 ? {
+      permissionMode: options.sendOptions.permissionMode ?? options.agentOptions.permissionMode
+    } : {},
     ...options.priorMessages !== void 0 ? { priorMessages: options.priorMessages } : {},
     ...options.memoryTools !== void 0 && options.memoryTools.length > 0 ? { memoryTools: options.memoryTools } : {},
     ...buildCustomToolsInput(