apex-code 0.0.1-alpha.6 → 0.0.1-alpha.7

package/dist/core/agent-session.js

@@ -34,6 +34,7 @@ import { emitSessionShutdownEvent } from "./extensions/runner.js";
 import { ModelRegistry } from "./model-registry.js";
 import { evaluateToolCall } from "./permissions/gate.js";
 import { createInteractiveResponder } from "./permissions/responder.js";
+import { resolveEffectiveModeWithOrigin } from "./permissions/startup.js";
 import { expandPromptTemplate } from "./prompt-templates.js";
 import { CURRENT_SESSION_VERSION, getLatestCompactionEntry, TODO_CUSTOM_ENTRY_TYPE, } from "./session-manager.js";
 import { slugifySkillCommandName } from "./skills.js";
@@ -1296,6 +1297,33 @@ export class AgentSession {
             source,
         });
     }
+    /** True when this session runs behind a permission gate at all. */
+    get hasPermissionGate() {
+        return this._permissionGate !== undefined;
+    }
+    /**
+     * The mode in force right now, and which source won. `getMode` in the gate
+     * config re-reads the store on every decision, so a mode written here applies
+     * to the next tool call with no restart.
+     */
+    async getPermissionMode() {
+        if (!this._permissionGate)
+            return undefined;
+        const snapshot = await this._permissionGate.store.snapshot();
+        return resolveEffectiveModeWithOrigin(this._permissionGate.flagMode, snapshot.modesBySource);
+    }
+    /**
+     * Persist a permission mode to user scope (`~/.apex-code/agent/permissions.json`).
+     * Returns the resolution that is actually in force afterwards, which is *not*
+     * necessarily `mode`: `flag`, `local`, and `project` all outrank `user`, so the
+     * caller has to be able to tell the user their choice was recorded but shadowed.
+     */
+    async setPermissionMode(mode) {
+        if (!this._permissionGate)
+            return undefined;
+        await this._permissionGate.store.apply({ type: "setMode", destination: "user", mode });
+        return this.getPermissionMode();
+    }
     /**
      * Set model directly.
      * Validates that auth is configured, saves to session and settings.