@theokit/sdk 3.2.3 → 3.3.0

package/dist/{errors-_fPS0X80.d.ts → errors-CFEt27lI.d.ts}

@@ -1,4 +1,4 @@
-import { H as RunOperation } from './run-CrHz9BAP.js';
+import { Q as RunOperation } from './run-CL5Rw6a5.js';
 
 /**
  * Public type contract for the Budget enforcement primitive

package/dist/{errors-jxK4yfp5.d.cts → errors-CIDoPGa7.d.cts}

@@ -1,4 +1,4 @@
-import { H as RunOperation } from './run-CrHz9BAP.cjs';
+import { Q as RunOperation } from './run-CL5Rw6a5.cjs';
 
 /**
  * Public type contract for the Budget enforcement primitive

package/dist/errors.d.cts

@@ -1,3 +1,3 @@
-export { A as AgentDisposedError, c as AgentRunError, d as AgentRunErrorCode, e as AuthenticationError, g as BudgetExceededError, C as ConfigurationError, u as CredentialPoolExhaustedError, m as ErrorCode, E as ErrorMetadata, I as IntegrationNotConnectedError, n as InvalidTaskIdError, K as KnownAgentRunErrorCode, M as MemoryAdapterError, o as MemoryAdapterErrorCode, N as NetworkError, R as RateLimitError, p as TaskNotFoundError, T as TheokitAgentError, U as UnknownAgentError, q as UnsupportedBudgetOperationError, r as UnsupportedRunOperationError, s as UnsupportedTaskOperationError, t as isTransientError } from './errors-jxK4yfp5.cjs';
-import './run-CrHz9BAP.cjs';
+export { A as AgentDisposedError, c as AgentRunError, d as AgentRunErrorCode, e as AuthenticationError, g as BudgetExceededError, C as ConfigurationError, u as CredentialPoolExhaustedError, m as ErrorCode, E as ErrorMetadata, I as IntegrationNotConnectedError, n as InvalidTaskIdError, K as KnownAgentRunErrorCode, M as MemoryAdapterError, o as MemoryAdapterErrorCode, N as NetworkError, R as RateLimitError, p as TaskNotFoundError, T as TheokitAgentError, U as UnknownAgentError, q as UnsupportedBudgetOperationError, r as UnsupportedRunOperationError, s as UnsupportedTaskOperationError, t as isTransientError } from './errors-CIDoPGa7.cjs';
+import './run-CL5Rw6a5.cjs';
 import 'zod';

package/dist/eval.cjs

@@ -9002,7 +9002,9 @@ async function vetoFromPluginPreHook(inputs, call, callId, events) {
     name: call.name,
     args: call.input,
     agentId: inputs.agentId,
-    runId: inputs.runId
+    runId: inputs.runId,
+    // SE1 — thread the run's permission mode so a PermissionPlugin gates per-run.
+    ...inputs.permissionMode !== void 0 ? { permissionMode: inputs.permissionMode } : {}
   });
   if (pluginVeto === void 0) return void 0;
   emitRunEvent(inputs.runEventSink, {
@@ -13413,6 +13415,10 @@ function buildLoopInputs(options, runId, userText) {
     ...options.onDelta !== void 0 ? { onDelta: options.onDelta } : {},
     ...options.sendOptions.toolChoice !== void 0 ? { toolChoice: options.sendOptions.toolChoice } : {},
     ...options.sendOptions.activeTools !== void 0 ? { activeTools: options.sendOptions.activeTools } : {},
+    // SE1 — resolve the run's permission mode: per-send wins over creation-time.
+    ...(options.sendOptions.permissionMode ?? options.agentOptions.permissionMode) !== void 0 ? {
+      permissionMode: options.sendOptions.permissionMode ?? options.agentOptions.permissionMode
+    } : {},
     ...options.priorMessages !== void 0 ? { priorMessages: options.priorMessages } : {},
     ...options.memoryTools !== void 0 && options.memoryTools.length > 0 ? { memoryTools: options.memoryTools } : {},
     ...buildCustomToolsInput(