@opencode-ai/protocol 0.0.0-dev-17471

package/dist/groups/migration.d.ts

@@ -0,0 +1,28 @@
+import { Schema } from "effect";
+import { HttpApiEndpoint, HttpApiGroup } from "effect/unstable/httpapi";
+export declare const V1MigrationStatus: Schema.Union<readonly [Schema.Struct<{
+    readonly status: Schema.Literals<readonly ["required", "completed"]>;
+}>, Schema.Struct<{
+    readonly status: Schema.Literal<"running">;
+    readonly progress: Schema.Struct<{
+        readonly label: Schema.String;
+        readonly numerator: Schema.optional<Schema.Int>;
+        readonly denominator: Schema.optional<Schema.Int>;
+    }>;
+}>, Schema.Struct<{
+    readonly status: Schema.Literal<"error">;
+    readonly error: Schema.String;
+}>]>;
+export declare const MigrationGroup: HttpApiGroup.HttpApiGroup<"server.migration", HttpApiEndpoint.HttpApiEndpoint<"migration.v1.status", "GET", "/api/experimental/migration/v1", never, never, never, never, Schema.toCodecJson<Schema.Union<readonly [Schema.Struct<{
+    readonly status: Schema.Literals<readonly ["required", "completed"]>;
+}>, Schema.Struct<{
+    readonly status: Schema.Literal<"running">;
+    readonly progress: Schema.Struct<{
+        readonly label: Schema.String;
+        readonly numerator: Schema.optional<Schema.Int>;
+        readonly denominator: Schema.optional<Schema.Int>;
+    }>;
+}>, Schema.Struct<{
+    readonly status: Schema.Literal<"error">;
+    readonly error: Schema.String;
+}>]>>, never, never, never>, false>;

package/dist/groups/migration.js

@@ -0,0 +1,21 @@
+import { Schema } from "effect";
+import { HttpApiEndpoint, HttpApiGroup, OpenApi } from "effect/unstable/httpapi";
+const V1MigrationProgress = Schema.Struct({
+    label: Schema.String,
+    numerator: Schema.optional(Schema.Int.check(Schema.isGreaterThanOrEqualTo(0))),
+    denominator: Schema.optional(Schema.Int.check(Schema.isGreaterThanOrEqualTo(0))),
+});
+export const V1MigrationStatus = Schema.Union([
+    Schema.Struct({ status: Schema.Literals(["required", "completed"]) }),
+    Schema.Struct({ status: Schema.Literal("running"), progress: V1MigrationProgress }),
+    Schema.Struct({ status: Schema.Literal("error"), error: Schema.String }),
+]);
+export const MigrationGroup = HttpApiGroup.make("server.migration")
+    .add(HttpApiEndpoint.get("migration.v1.status", "/api/experimental/migration/v1", {
+    success: V1MigrationStatus,
+}).annotateMerge(OpenApi.annotations({
+    identifier: "v2.experimental.migration.v1.status",
+    summary: "Get V1 migration status",
+    description: "Return the progress of the V1 to V2 session history migration.",
+})))
+    .annotateMerge(OpenApi.annotations({ title: "migration" }));

package/dist/groups/model.d.ts

@@ -0,0 +1,218 @@
+import { Model } from "@opencode-ai/schema/model";
+import { Location } from "@opencode-ai/schema/location";
+import { Schema } from "effect";
+import { HttpApiEndpoint, HttpApiGroup } from "effect/unstable/httpapi";
+import { ServiceUnavailableError } from "../errors.js";
+export declare const ModelGroup: HttpApiGroup.HttpApiGroup<"server.model", HttpApiEndpoint.HttpApiEndpoint<"model.list", "GET", "/api/model", never, Schema.toCodecStringTree<Schema.Struct<{
+    readonly location: Schema.optional<Schema.Struct<{
+        readonly directory: Schema.optional<Schema.String>;
+        readonly workspace: Schema.optional<Schema.String>;
+    }>>;
+}>>, never, never, Schema.toCodecJson<Schema.Struct<{
+    readonly location: typeof Location.Info;
+    readonly data: Schema.$Array<Schema.Struct<{
+        readonly capabilities: Schema.Struct<{
+            readonly tools: Schema.Boolean;
+            readonly input: Schema.$Array<Schema.String>;
+            readonly output: Schema.$Array<Schema.String>;
+        }>;
+        readonly variants: Schema.$Array<Schema.Struct<{
+            readonly settings: Schema.decodeTo<Schema.optional<Schema.toType<Schema.$Record<Schema.String, Schema.Any>>>, Schema.optionalKey<Schema.$Record<Schema.String, Schema.Any>>, never, never>;
+            readonly headers: Schema.decodeTo<Schema.optional<Schema.toType<Schema.$Record<Schema.String, Schema.String>>>, Schema.optionalKey<Schema.$Record<Schema.String, Schema.String>>, never, never>;
+            readonly body: Schema.decodeTo<Schema.optional<Schema.toType<Schema.$Record<Schema.String, Schema.Any>>>, Schema.optionalKey<Schema.$Record<Schema.String, Schema.Any>>, never, never>;
+            readonly id: Schema.brand<Schema.String, "Model.VariantID">;
+        }>>;
+        readonly time: Schema.Struct<{
+            readonly released: Schema.Finite;
+        }>;
+        readonly cost: Schema.$Array<Schema.Struct<{
+            readonly tier: Schema.decodeTo<Schema.optional<Schema.toType<Schema.Struct<{
+                readonly type: Schema.tag<"context">;
+                readonly size: Schema.Int;
+            }>>>, Schema.optionalKey<Schema.Struct<{
+                readonly type: Schema.tag<"context">;
+                readonly size: Schema.Int;
+            }>>, never, never>;
+            readonly input: Schema.brand<Schema.Finite, "Money.USDPerMillionTokens"> & {
+                zero: number & import("effect/Brand").Brand<"Money.USDPerMillionTokens">;
+            };
+            readonly output: Schema.brand<Schema.Finite, "Money.USDPerMillionTokens"> & {
+                zero: number & import("effect/Brand").Brand<"Money.USDPerMillionTokens">;
+            };
+            readonly cache: Schema.Struct<{
+                readonly read: Schema.brand<Schema.Finite, "Money.USDPerMillionTokens"> & {
+                    zero: number & import("effect/Brand").Brand<"Money.USDPerMillionTokens">;
+                };
+                readonly write: Schema.brand<Schema.Finite, "Money.USDPerMillionTokens"> & {
+                    zero: number & import("effect/Brand").Brand<"Money.USDPerMillionTokens">;
+                };
+            }>;
+        }>>;
+        readonly status: Schema.Literals<readonly ["alpha", "beta", "deprecated", "active"]>;
+        readonly enabled: Schema.Boolean;
+        readonly limit: Schema.Struct<{
+            readonly context: Schema.Int;
+            readonly input: Schema.decodeTo<Schema.optional<Schema.toType<Schema.Int>>, Schema.optionalKey<Schema.Int>, never, never>;
+            readonly output: Schema.Int;
+        }>;
+        readonly settings: Schema.decodeTo<Schema.optional<Schema.toType<Schema.$Record<Schema.String, Schema.Any>>>, Schema.optionalKey<Schema.$Record<Schema.String, Schema.Any>>, never, never>;
+        readonly headers: Schema.decodeTo<Schema.optional<Schema.toType<Schema.$Record<Schema.String, Schema.String>>>, Schema.optionalKey<Schema.$Record<Schema.String, Schema.String>>, never, never>;
+        readonly body: Schema.decodeTo<Schema.optional<Schema.toType<Schema.$Record<Schema.String, Schema.Any>>>, Schema.optionalKey<Schema.$Record<Schema.String, Schema.Any>>, never, never>;
+        readonly id: Schema.brand<Schema.String, "Model.ID">;
+        readonly modelID: Schema.brand<Schema.String, "Model.ID">;
+        readonly providerID: Schema.brand<Schema.String, "Provider.ID"> & {
+            opencode: string & import("effect/Brand").Brand<"Provider.ID">;
+            anthropic: string & import("effect/Brand").Brand<"Provider.ID">;
+            openai: string & import("effect/Brand").Brand<"Provider.ID">;
+            google: string & import("effect/Brand").Brand<"Provider.ID">;
+            googleVertex: string & import("effect/Brand").Brand<"Provider.ID">;
+            githubCopilot: string & import("effect/Brand").Brand<"Provider.ID">;
+            amazonBedrock: string & import("effect/Brand").Brand<"Provider.ID">;
+            azure: string & import("effect/Brand").Brand<"Provider.ID">;
+            openrouter: string & import("effect/Brand").Brand<"Provider.ID">;
+            mistral: string & import("effect/Brand").Brand<"Provider.ID">;
+            gitlab: string & import("effect/Brand").Brand<"Provider.ID">;
+        };
+        readonly family: Schema.decodeTo<Schema.optional<Schema.toType<Schema.brand<Schema.String, "Model.Family">>>, Schema.optionalKey<Schema.brand<Schema.String, "Model.Family">>, never, never>;
+        readonly name: Schema.String;
+        readonly compatibility: Schema.decodeTo<Schema.optional<Schema.toType<Schema.Struct<{
+            readonly reasoningField: Schema.decodeTo<Schema.optional<Schema.toType<Schema.Codec<Model.ReasoningField, Model.ReasoningField, never, never>>>, Schema.optionalKey<Schema.Codec<Model.ReasoningField, Model.ReasoningField, never, never>>, never, never>;
+            readonly maxTokensField: Schema.decodeTo<Schema.optional<Schema.toType<Schema.Literals<readonly ["max_completion_tokens", "max_tokens"]>>>, Schema.optionalKey<Schema.Literals<readonly ["max_completion_tokens", "max_tokens"]>>, never, never>;
+            readonly requireFinishReason: Schema.decodeTo<Schema.optional<Schema.toType<Schema.Boolean>>, Schema.optionalKey<Schema.Boolean>, never, never>;
+        }>>>, Schema.optionalKey<Schema.Struct<{
+            readonly reasoningField: Schema.decodeTo<Schema.optional<Schema.toType<Schema.Codec<Model.ReasoningField, Model.ReasoningField, never, never>>>, Schema.optionalKey<Schema.Codec<Model.ReasoningField, Model.ReasoningField, never, never>>, never, never>;
+            readonly maxTokensField: Schema.decodeTo<Schema.optional<Schema.toType<Schema.Literals<readonly ["max_completion_tokens", "max_tokens"]>>>, Schema.optionalKey<Schema.Literals<readonly ["max_completion_tokens", "max_tokens"]>>, never, never>;
+            readonly requireFinishReason: Schema.decodeTo<Schema.optional<Schema.toType<Schema.Boolean>>, Schema.optionalKey<Schema.Boolean>, never, never>;
+        }>>, never, never>;
+        readonly package: Schema.decodeTo<Schema.optional<Schema.toType<Schema.String>>, Schema.optionalKey<Schema.String>, never, never>;
+    }> & {
+        default: (providerID: import("@opencode-ai/schema/provider").ID, id: Model.ID) => {
+            id: string & import("effect/Brand").Brand<"Model.ID">;
+            modelID: string & import("effect/Brand").Brand<"Model.ID">;
+            providerID: string & import("effect/Brand").Brand<"Provider.ID">;
+            name: string & import("effect/Brand").Brand<"Model.ID">;
+            capabilities: {
+                tools: true;
+                input: string[];
+                output: string[];
+            };
+            variants: never[];
+            time: {
+                released: number;
+            };
+            cost: never[];
+            status: "active";
+            enabled: true;
+            limit: {
+                context: number;
+                output: number;
+            };
+        };
+    }>;
+}>>, Schema.toCodecJson<typeof ServiceUnavailableError>, never, never> | HttpApiEndpoint.HttpApiEndpoint<"model.default", "GET", "/api/model/default", never, Schema.toCodecStringTree<Schema.Struct<{
+    readonly location: Schema.optional<Schema.Struct<{
+        readonly directory: Schema.optional<Schema.String>;
+        readonly workspace: Schema.optional<Schema.String>;
+    }>>;
+}>>, never, never, Schema.toCodecJson<Schema.Struct<{
+    readonly location: typeof Location.Info;
+    readonly data: Schema.UndefinedOr<Schema.Struct<{
+        readonly capabilities: Schema.Struct<{
+            readonly tools: Schema.Boolean;
+            readonly input: Schema.$Array<Schema.String>;
+            readonly output: Schema.$Array<Schema.String>;
+        }>;
+        readonly variants: Schema.$Array<Schema.Struct<{
+            readonly settings: Schema.decodeTo<Schema.optional<Schema.toType<Schema.$Record<Schema.String, Schema.Any>>>, Schema.optionalKey<Schema.$Record<Schema.String, Schema.Any>>, never, never>;
+            readonly headers: Schema.decodeTo<Schema.optional<Schema.toType<Schema.$Record<Schema.String, Schema.String>>>, Schema.optionalKey<Schema.$Record<Schema.String, Schema.String>>, never, never>;
+            readonly body: Schema.decodeTo<Schema.optional<Schema.toType<Schema.$Record<Schema.String, Schema.Any>>>, Schema.optionalKey<Schema.$Record<Schema.String, Schema.Any>>, never, never>;
+            readonly id: Schema.brand<Schema.String, "Model.VariantID">;
+        }>>;
+        readonly time: Schema.Struct<{
+            readonly released: Schema.Finite;
+        }>;
+        readonly cost: Schema.$Array<Schema.Struct<{
+            readonly tier: Schema.decodeTo<Schema.optional<Schema.toType<Schema.Struct<{
+                readonly type: Schema.tag<"context">;
+                readonly size: Schema.Int;
+            }>>>, Schema.optionalKey<Schema.Struct<{
+                readonly type: Schema.tag<"context">;
+                readonly size: Schema.Int;
+            }>>, never, never>;
+            readonly input: Schema.brand<Schema.Finite, "Money.USDPerMillionTokens"> & {
+                zero: number & import("effect/Brand").Brand<"Money.USDPerMillionTokens">;
+            };
+            readonly output: Schema.brand<Schema.Finite, "Money.USDPerMillionTokens"> & {
+                zero: number & import("effect/Brand").Brand<"Money.USDPerMillionTokens">;
+            };
+            readonly cache: Schema.Struct<{
+                readonly read: Schema.brand<Schema.Finite, "Money.USDPerMillionTokens"> & {
+                    zero: number & import("effect/Brand").Brand<"Money.USDPerMillionTokens">;
+                };
+                readonly write: Schema.brand<Schema.Finite, "Money.USDPerMillionTokens"> & {
+                    zero: number & import("effect/Brand").Brand<"Money.USDPerMillionTokens">;
+                };
+            }>;
+        }>>;
+        readonly status: Schema.Literals<readonly ["alpha", "beta", "deprecated", "active"]>;
+        readonly enabled: Schema.Boolean;
+        readonly limit: Schema.Struct<{
+            readonly context: Schema.Int;
+            readonly input: Schema.decodeTo<Schema.optional<Schema.toType<Schema.Int>>, Schema.optionalKey<Schema.Int>, never, never>;
+            readonly output: Schema.Int;
+        }>;
+        readonly settings: Schema.decodeTo<Schema.optional<Schema.toType<Schema.$Record<Schema.String, Schema.Any>>>, Schema.optionalKey<Schema.$Record<Schema.String, Schema.Any>>, never, never>;
+        readonly headers: Schema.decodeTo<Schema.optional<Schema.toType<Schema.$Record<Schema.String, Schema.String>>>, Schema.optionalKey<Schema.$Record<Schema.String, Schema.String>>, never, never>;
+        readonly body: Schema.decodeTo<Schema.optional<Schema.toType<Schema.$Record<Schema.String, Schema.Any>>>, Schema.optionalKey<Schema.$Record<Schema.String, Schema.Any>>, never, never>;
+        readonly id: Schema.brand<Schema.String, "Model.ID">;
+        readonly modelID: Schema.brand<Schema.String, "Model.ID">;
+        readonly providerID: Schema.brand<Schema.String, "Provider.ID"> & {
+            opencode: string & import("effect/Brand").Brand<"Provider.ID">;
+            anthropic: string & import("effect/Brand").Brand<"Provider.ID">;
+            openai: string & import("effect/Brand").Brand<"Provider.ID">;
+            google: string & import("effect/Brand").Brand<"Provider.ID">;
+            googleVertex: string & import("effect/Brand").Brand<"Provider.ID">;
+            githubCopilot: string & import("effect/Brand").Brand<"Provider.ID">;
+            amazonBedrock: string & import("effect/Brand").Brand<"Provider.ID">;
+            azure: string & import("effect/Brand").Brand<"Provider.ID">;
+            openrouter: string & import("effect/Brand").Brand<"Provider.ID">;
+            mistral: string & import("effect/Brand").Brand<"Provider.ID">;
+            gitlab: string & import("effect/Brand").Brand<"Provider.ID">;
+        };
+        readonly family: Schema.decodeTo<Schema.optional<Schema.toType<Schema.brand<Schema.String, "Model.Family">>>, Schema.optionalKey<Schema.brand<Schema.String, "Model.Family">>, never, never>;
+        readonly name: Schema.String;
+        readonly compatibility: Schema.decodeTo<Schema.optional<Schema.toType<Schema.Struct<{
+            readonly reasoningField: Schema.decodeTo<Schema.optional<Schema.toType<Schema.Codec<Model.ReasoningField, Model.ReasoningField, never, never>>>, Schema.optionalKey<Schema.Codec<Model.ReasoningField, Model.ReasoningField, never, never>>, never, never>;
+            readonly maxTokensField: Schema.decodeTo<Schema.optional<Schema.toType<Schema.Literals<readonly ["max_completion_tokens", "max_tokens"]>>>, Schema.optionalKey<Schema.Literals<readonly ["max_completion_tokens", "max_tokens"]>>, never, never>;
+            readonly requireFinishReason: Schema.decodeTo<Schema.optional<Schema.toType<Schema.Boolean>>, Schema.optionalKey<Schema.Boolean>, never, never>;
+        }>>>, Schema.optionalKey<Schema.Struct<{
+            readonly reasoningField: Schema.decodeTo<Schema.optional<Schema.toType<Schema.Codec<Model.ReasoningField, Model.ReasoningField, never, never>>>, Schema.optionalKey<Schema.Codec<Model.ReasoningField, Model.ReasoningField, never, never>>, never, never>;
+            readonly maxTokensField: Schema.decodeTo<Schema.optional<Schema.toType<Schema.Literals<readonly ["max_completion_tokens", "max_tokens"]>>>, Schema.optionalKey<Schema.Literals<readonly ["max_completion_tokens", "max_tokens"]>>, never, never>;
+            readonly requireFinishReason: Schema.decodeTo<Schema.optional<Schema.toType<Schema.Boolean>>, Schema.optionalKey<Schema.Boolean>, never, never>;
+        }>>, never, never>;
+        readonly package: Schema.decodeTo<Schema.optional<Schema.toType<Schema.String>>, Schema.optionalKey<Schema.String>, never, never>;
+    }> & {
+        default: (providerID: import("@opencode-ai/schema/provider").ID, id: Model.ID) => {
+            id: string & import("effect/Brand").Brand<"Model.ID">;
+            modelID: string & import("effect/Brand").Brand<"Model.ID">;
+            providerID: string & import("effect/Brand").Brand<"Provider.ID">;
+            name: string & import("effect/Brand").Brand<"Model.ID">;
+            capabilities: {
+                tools: true;
+                input: string[];
+                output: string[];
+            };
+            variants: never[];
+            time: {
+                released: number;
+            };
+            cost: never[];
+            status: "active";
+            enabled: true;
+            limit: {
+                context: number;
+                output: number;
+            };
+        };
+    }>;
+}>>, Schema.toCodecJson<typeof ServiceUnavailableError>, never, never>, false>;

package/dist/groups/model.js

@@ -0,0 +1,33 @@
+import { Model } from "@opencode-ai/schema/model";
+import { Location } from "@opencode-ai/schema/location";
+import { Schema } from "effect";
+import { HttpApiEndpoint, HttpApiGroup, OpenApi } from "effect/unstable/httpapi";
+import { ServiceUnavailableError } from "../errors.js";
+import { LocationQuery, locationQueryOpenApi } from "./location.js";
+export const ModelGroup = HttpApiGroup.make("server.model")
+    .add(HttpApiEndpoint.get("model.list", "/api/model", {
+    query: LocationQuery,
+    success: Location.response(Schema.Array(Model.Info)),
+    error: ServiceUnavailableError,
+})
+    .annotateMerge(locationQueryOpenApi)
+    .annotateMerge(OpenApi.annotations({
+    identifier: "v2.model.list",
+    summary: "List models",
+    description: "Retrieve the current snapshot of available models ordered by release date. The snapshot may precede initial plugin settlement.",
+})))
+    .add(HttpApiEndpoint.get("model.default", "/api/model/default", {
+    query: LocationQuery,
+    success: Location.response(Schema.UndefinedOr(Model.Info)),
+    error: ServiceUnavailableError,
+})
+    .annotateMerge(locationQueryOpenApi)
+    .annotateMerge(OpenApi.annotations({
+    identifier: "v2.model.default",
+    summary: "Get default model",
+    description: "Retrieve the model used when a session has no explicit model selection.",
+})))
+    .annotateMerge(OpenApi.annotations({
+    title: "model",
+    description: "Experimental model routes.",
+}));

package/dist/groups/permission.d.ts

@@ -0,0 +1,153 @@
+import { Location } from "@opencode-ai/schema/location";
+import { Context, Schema } from "effect";
+import { HttpApiEndpoint, HttpApiGroup, HttpApiMiddleware, HttpApiSchema } from "effect/unstable/httpapi";
+import { PermissionNotFoundError, SessionNotFoundError } from "../errors.js";
+export declare const makePermissionGroup: <LocationId extends HttpApiMiddleware.AnyId, LocationService, SessionLocationId extends HttpApiMiddleware.AnyId, SessionLocationService>(locationMiddleware: Context.Key<LocationId, LocationService>, sessionLocationMiddleware: Context.Key<SessionLocationId, SessionLocationService>) => HttpApiGroup.HttpApiGroup<"server.permission", HttpApiEndpoint.HttpApiEndpoint<"permission.request.list", "GET", "/api/permission/request", never, Schema.toCodecStringTree<Schema.Struct<{
+    readonly location: Schema.optional<Schema.Struct<{
+        readonly directory: Schema.optional<Schema.String>;
+        readonly workspace: Schema.optional<Schema.String>;
+    }>>;
+}>>, never, never, Schema.toCodecJson<Schema.Struct<{
+    readonly location: typeof Location.Info;
+    readonly data: Schema.$Array<Schema.Struct<{
+        readonly sessionID: Schema.brand<Schema.String, "SessionID"> & {
+            create: () => string & import("effect/Brand").Brand<"SessionID">;
+            descending: (id?: string) => string & import("effect/Brand").Brand<"SessionID">;
+        };
+        readonly action: Schema.String;
+        readonly resources: Schema.$Array<Schema.String>;
+        readonly save: Schema.decodeTo<Schema.optional<Schema.toType<Schema.$Array<Schema.String>>>, Schema.optionalKey<Schema.$Array<Schema.String>>, never, never>;
+        readonly metadata: Schema.decodeTo<Schema.optional<Schema.toType<Schema.$Record<Schema.String, Schema.Unknown>>>, Schema.optionalKey<Schema.$Record<Schema.String, Schema.Unknown>>, never, never>;
+        readonly source: Schema.decodeTo<Schema.optional<Schema.toType<Schema.Union<readonly [Schema.Struct<{
+            readonly type: Schema.Literal<"tool">;
+            readonly messageID: Schema.String;
+            readonly id: Schema.String;
+        }>]>>>, Schema.optionalKey<Schema.Union<readonly [Schema.Struct<{
+            readonly type: Schema.Literal<"tool">;
+            readonly messageID: Schema.String;
+            readonly id: Schema.String;
+        }>]>>, never, never>;
+        readonly id: Schema.brand<Schema.String, "Permission.ID"> & {
+            create: (id?: string) => string & import("effect/Brand").Brand<"Permission.ID">;
+        };
+    }>>;
+}>>, never, LocationId, HttpApiMiddleware.Requires<LocationId>> | HttpApiEndpoint.HttpApiEndpoint<"permission.saved.list", "GET", "/api/permission/saved", never, Schema.toCodecStringTree<Schema.Struct<{
+    readonly projectID: Schema.optional<Schema.brand<Schema.String, "Project.ID"> & {
+        global: string & import("effect/Brand").Brand<"Project.ID">;
+    }>;
+}>>, never, never, Schema.toCodecJson<Schema.Struct<{
+    readonly data: Schema.$Array<Schema.Struct<{
+        readonly id: Schema.brand<Schema.String, "PermissionSaved.ID"> & {
+            create: () => string & import("effect/Brand").Brand<"PermissionSaved.ID">;
+        };
+        readonly projectID: Schema.brand<Schema.String, "Project.ID"> & {
+            global: string & import("effect/Brand").Brand<"Project.ID">;
+        };
+        readonly action: Schema.String;
+        readonly resource: Schema.String;
+    }>>;
+}>>, never, LocationId, HttpApiMiddleware.Requires<LocationId>> | HttpApiEndpoint.HttpApiEndpoint<"permission.saved.remove", "DELETE", "/api/permission/saved/:id", Schema.toCodecStringTree<Schema.Struct<{
+    id: Schema.brand<Schema.String, "PermissionSaved.ID"> & {
+        create: () => string & import("effect/Brand").Brand<"PermissionSaved.ID">;
+    };
+}>>, never, never, never, Schema.toCodecJson<HttpApiSchema.NoContent>, never, LocationId, HttpApiMiddleware.Requires<LocationId>> | HttpApiEndpoint.HttpApiEndpoint<"session.permission.create", "POST", "/api/session/:sessionID/permission", Schema.toCodecStringTree<Schema.Struct<{
+    sessionID: Schema.brand<Schema.String, "SessionID"> & {
+        create: () => string & import("effect/Brand").Brand<"SessionID">;
+        descending: (id?: string) => string & import("effect/Brand").Brand<"SessionID">;
+    };
+}>>, never, Schema.toCodecJson<Schema.Struct<{
+    readonly id: Schema.optional<Schema.brand<Schema.String, "Permission.ID"> & {
+        create: (id?: string) => string & import("effect/Brand").Brand<"Permission.ID">;
+    }>;
+    readonly action: Schema.String;
+    readonly resources: Schema.$Array<Schema.String>;
+    readonly save: Schema.decodeTo<Schema.optional<Schema.toType<Schema.$Array<Schema.String>>>, Schema.optionalKey<Schema.$Array<Schema.String>>, never, never>;
+    readonly metadata: Schema.decodeTo<Schema.optional<Schema.toType<Schema.$Record<Schema.String, Schema.Unknown>>>, Schema.optionalKey<Schema.$Record<Schema.String, Schema.Unknown>>, never, never>;
+    readonly source: Schema.decodeTo<Schema.optional<Schema.toType<Schema.Union<readonly [Schema.Struct<{
+        readonly type: Schema.Literal<"tool">;
+        readonly messageID: Schema.String;
+        readonly id: Schema.String;
+    }>]>>>, Schema.optionalKey<Schema.Union<readonly [Schema.Struct<{
+        readonly type: Schema.Literal<"tool">;
+        readonly messageID: Schema.String;
+        readonly id: Schema.String;
+    }>]>>, never, never>;
+    readonly agent: Schema.optional<Schema.brand<Schema.String, "Agent.ID">>;
+}>>, never, Schema.toCodecJson<Schema.Struct<{
+    readonly data: Schema.Struct<{
+        readonly id: Schema.brand<Schema.String, "Permission.ID"> & {
+            create: (id?: string) => string & import("effect/Brand").Brand<"Permission.ID">;
+        };
+        readonly effect: Schema.Literals<readonly ["allow", "deny", "ask"]>;
+    }>;
+}>>, Schema.toCodecJson<typeof SessionNotFoundError>, SessionLocationId, HttpApiMiddleware.Requires<SessionLocationId>> | HttpApiEndpoint.HttpApiEndpoint<"session.permission.list", "GET", "/api/session/:sessionID/permission", Schema.toCodecStringTree<Schema.Struct<{
+    sessionID: Schema.brand<Schema.String, "SessionID"> & {
+        create: () => string & import("effect/Brand").Brand<"SessionID">;
+        descending: (id?: string) => string & import("effect/Brand").Brand<"SessionID">;
+    };
+}>>, never, never, never, Schema.toCodecJson<Schema.Struct<{
+    readonly data: Schema.$Array<Schema.Struct<{
+        readonly sessionID: Schema.brand<Schema.String, "SessionID"> & {
+            create: () => string & import("effect/Brand").Brand<"SessionID">;
+            descending: (id?: string) => string & import("effect/Brand").Brand<"SessionID">;
+        };
+        readonly action: Schema.String;
+        readonly resources: Schema.$Array<Schema.String>;
+        readonly save: Schema.decodeTo<Schema.optional<Schema.toType<Schema.$Array<Schema.String>>>, Schema.optionalKey<Schema.$Array<Schema.String>>, never, never>;
+        readonly metadata: Schema.decodeTo<Schema.optional<Schema.toType<Schema.$Record<Schema.String, Schema.Unknown>>>, Schema.optionalKey<Schema.$Record<Schema.String, Schema.Unknown>>, never, never>;
+        readonly source: Schema.decodeTo<Schema.optional<Schema.toType<Schema.Union<readonly [Schema.Struct<{
+            readonly type: Schema.Literal<"tool">;
+            readonly messageID: Schema.String;
+            readonly id: Schema.String;
+        }>]>>>, Schema.optionalKey<Schema.Union<readonly [Schema.Struct<{
+            readonly type: Schema.Literal<"tool">;
+            readonly messageID: Schema.String;
+            readonly id: Schema.String;
+        }>]>>, never, never>;
+        readonly id: Schema.brand<Schema.String, "Permission.ID"> & {
+            create: (id?: string) => string & import("effect/Brand").Brand<"Permission.ID">;
+        };
+    }>>;
+}>>, Schema.toCodecJson<typeof SessionNotFoundError>, SessionLocationId, HttpApiMiddleware.Requires<SessionLocationId>> | HttpApiEndpoint.HttpApiEndpoint<"session.permission.get", "GET", "/api/session/:sessionID/permission/:requestID", Schema.toCodecStringTree<Schema.Struct<{
+    sessionID: Schema.brand<Schema.String, "SessionID"> & {
+        create: () => string & import("effect/Brand").Brand<"SessionID">;
+        descending: (id?: string) => string & import("effect/Brand").Brand<"SessionID">;
+    };
+    requestID: Schema.brand<Schema.String, "Permission.ID"> & {
+        create: (id?: string) => string & import("effect/Brand").Brand<"Permission.ID">;
+    };
+}>>, never, never, never, Schema.toCodecJson<Schema.Struct<{
+    readonly data: Schema.Struct<{
+        readonly sessionID: Schema.brand<Schema.String, "SessionID"> & {
+            create: () => string & import("effect/Brand").Brand<"SessionID">;
+            descending: (id?: string) => string & import("effect/Brand").Brand<"SessionID">;
+        };
+        readonly action: Schema.String;
+        readonly resources: Schema.$Array<Schema.String>;
+        readonly save: Schema.decodeTo<Schema.optional<Schema.toType<Schema.$Array<Schema.String>>>, Schema.optionalKey<Schema.$Array<Schema.String>>, never, never>;
+        readonly metadata: Schema.decodeTo<Schema.optional<Schema.toType<Schema.$Record<Schema.String, Schema.Unknown>>>, Schema.optionalKey<Schema.$Record<Schema.String, Schema.Unknown>>, never, never>;
+        readonly source: Schema.decodeTo<Schema.optional<Schema.toType<Schema.Union<readonly [Schema.Struct<{
+            readonly type: Schema.Literal<"tool">;
+            readonly messageID: Schema.String;
+            readonly id: Schema.String;
+        }>]>>>, Schema.optionalKey<Schema.Union<readonly [Schema.Struct<{
+            readonly type: Schema.Literal<"tool">;
+            readonly messageID: Schema.String;
+            readonly id: Schema.String;
+        }>]>>, never, never>;
+        readonly id: Schema.brand<Schema.String, "Permission.ID"> & {
+            create: (id?: string) => string & import("effect/Brand").Brand<"Permission.ID">;
+        };
+    }>;
+}>>, Schema.toCodecJson<typeof SessionNotFoundError | typeof PermissionNotFoundError>, SessionLocationId, HttpApiMiddleware.Requires<SessionLocationId>> | HttpApiEndpoint.HttpApiEndpoint<"session.permission.reply", "POST", "/api/session/:sessionID/permission/:requestID/reply", Schema.toCodecStringTree<Schema.Struct<{
+    sessionID: Schema.brand<Schema.String, "SessionID"> & {
+        create: () => string & import("effect/Brand").Brand<"SessionID">;
+        descending: (id?: string) => string & import("effect/Brand").Brand<"SessionID">;
+    };
+    requestID: Schema.brand<Schema.String, "Permission.ID"> & {
+        create: (id?: string) => string & import("effect/Brand").Brand<"Permission.ID">;
+    };
+}>>, never, Schema.toCodecJson<Schema.Struct<{
+    readonly reply: Schema.Literals<readonly ["once", "always", "reject"]>;
+    readonly message: Schema.optional<Schema.String>;
+}>>, never, Schema.toCodecJson<HttpApiSchema.NoContent>, Schema.toCodecJson<typeof SessionNotFoundError | typeof PermissionNotFoundError>, SessionLocationId, HttpApiMiddleware.Requires<SessionLocationId>>, false>;

package/dist/groups/permission.js

@@ -0,0 +1,99 @@
+import { Agent } from "@opencode-ai/schema/agent";
+import { Location } from "@opencode-ai/schema/location";
+import { Permission } from "@opencode-ai/schema/permission";
+import { PermissionSaved } from "@opencode-ai/schema/permission-saved";
+import { Project } from "@opencode-ai/schema/project";
+import { Session } from "@opencode-ai/schema/session";
+import { Context, Schema } from "effect";
+import { HttpApiEndpoint, HttpApiGroup, HttpApiMiddleware, HttpApiSchema, OpenApi } from "effect/unstable/httpapi";
+import { PermissionNotFoundError, SessionNotFoundError } from "../errors.js";
+import { LocationQuery, locationQueryOpenApi } from "./location.js";
+export const makePermissionGroup = (locationMiddleware, sessionLocationMiddleware) => HttpApiGroup.make("server.permission")
+    .add(HttpApiEndpoint.get("permission.request.list", "/api/permission/request", {
+    query: LocationQuery,
+    success: Location.response(Schema.Array(Permission.Request)),
+})
+    .annotateMerge(locationQueryOpenApi)
+    .annotateMerge(OpenApi.annotations({
+    identifier: "v2.permission.request.list",
+    summary: "List pending permission requests",
+    description: "Retrieve pending permission requests for a location.",
+})))
+    .add(HttpApiEndpoint.get("permission.saved.list", "/api/permission/saved", {
+    query: Schema.Struct({ projectID: Project.ID.pipe(Schema.optional) }),
+    success: Schema.Struct({ data: Schema.Array(PermissionSaved.Info) }),
+}).annotateMerge(OpenApi.annotations({
+    identifier: "v2.permission.saved.list",
+    summary: "List saved permissions",
+    description: "Retrieve saved permissions, optionally filtered by project.",
+})))
+    .add(HttpApiEndpoint.delete("permission.saved.remove", "/api/permission/saved/:id", {
+    params: { id: PermissionSaved.ID },
+    success: HttpApiSchema.NoContent,
+}).annotateMerge(OpenApi.annotations({
+    identifier: "v2.permission.saved.remove",
+    summary: "Remove saved permission",
+    description: "Remove a saved permission by ID.",
+})))
+    // Effect applies group middleware only to endpoints already added; session endpoints use session placement below.
+    .middleware(locationMiddleware)
+    .add(HttpApiEndpoint.post("session.permission.create", "/api/session/:sessionID/permission", {
+    params: { sessionID: Session.ID },
+    payload: Schema.Struct({
+        id: Permission.ID.pipe(Schema.optional),
+        action: Permission.Request.fields.action,
+        resources: Permission.Request.fields.resources,
+        save: Permission.Request.fields.save,
+        metadata: Permission.Request.fields.metadata,
+        source: Permission.Request.fields.source,
+        agent: Agent.ID.pipe(Schema.optional),
+    }),
+    success: Schema.Struct({
+        data: Schema.Struct({ id: Permission.ID, effect: Permission.Effect }),
+    }),
+    error: SessionNotFoundError,
+})
+    .middleware(sessionLocationMiddleware)
+    .annotateMerge(OpenApi.annotations({
+    identifier: "v2.session.permission.create",
+    summary: "Create permission request",
+    description: "Evaluate and, when approval is required, create a permission request for a session.",
+})))
+    .add(HttpApiEndpoint.get("session.permission.list", "/api/session/:sessionID/permission", {
+    params: { sessionID: Session.ID },
+    success: Schema.Struct({ data: Schema.Array(Permission.Request) }),
+    error: SessionNotFoundError,
+})
+    .middleware(sessionLocationMiddleware)
+    .annotateMerge(OpenApi.annotations({
+    identifier: "v2.session.permission.list",
+    summary: "List session permission requests",
+    description: "Retrieve pending permission requests owned by a session.",
+})))
+    .add(HttpApiEndpoint.get("session.permission.get", "/api/session/:sessionID/permission/:requestID", {
+    params: { sessionID: Session.ID, requestID: Permission.ID },
+    success: Schema.Struct({ data: Permission.Request }),
+    error: [SessionNotFoundError, PermissionNotFoundError],
+})
+    .middleware(sessionLocationMiddleware)
+    .annotateMerge(OpenApi.annotations({
+    identifier: "v2.session.permission.get",
+    summary: "Get permission request",
+    description: "Retrieve a pending permission request owned by a session.",
+})))
+    .add(HttpApiEndpoint.post("session.permission.reply", "/api/session/:sessionID/permission/:requestID/reply", {
+    params: { sessionID: Session.ID, requestID: Permission.ID },
+    payload: Schema.Struct({
+        reply: Permission.Reply,
+        message: Schema.String.pipe(Schema.optional),
+    }),
+    success: HttpApiSchema.NoContent,
+    error: [SessionNotFoundError, PermissionNotFoundError],
+})
+    .middleware(sessionLocationMiddleware)
+    .annotateMerge(OpenApi.annotations({
+    identifier: "v2.session.permission.reply",
+    summary: "Reply to pending permission request",
+    description: "Respond to a pending permission request owned by a session.",
+})))
+    .annotateMerge(OpenApi.annotations({ title: "permission", description: "Experimental permission routes." }));

package/dist/groups/plugin.d.ts

@@ -0,0 +1,14 @@
+import { Location } from "@opencode-ai/schema/location";
+import { Schema } from "effect";
+import { HttpApiEndpoint, HttpApiGroup } from "effect/unstable/httpapi";
+export declare const PluginGroup: HttpApiGroup.HttpApiGroup<"server.plugin", HttpApiEndpoint.HttpApiEndpoint<"plugin.list", "GET", "/api/plugin", never, Schema.toCodecStringTree<Schema.Struct<{
+    readonly location: Schema.optional<Schema.Struct<{
+        readonly directory: Schema.optional<Schema.String>;
+        readonly workspace: Schema.optional<Schema.String>;
+    }>>;
+}>>, never, never, Schema.toCodecJson<Schema.Struct<{
+    readonly location: typeof Location.Info;
+    readonly data: Schema.$Array<Schema.Struct<{
+        readonly id: Schema.brand<Schema.String, "Plugin.ID">;
+    }>>;
+}>>, never, never, never>, false>;

package/dist/groups/plugin.js

@@ -0,0 +1,20 @@
+import { Location } from "@opencode-ai/schema/location";
+import { Plugin } from "@opencode-ai/schema/plugin";
+import { Schema } from "effect";
+import { HttpApiEndpoint, HttpApiGroup, OpenApi } from "effect/unstable/httpapi";
+import { LocationQuery, locationQueryOpenApi } from "./location.js";
+export const PluginGroup = HttpApiGroup.make("server.plugin")
+    .add(HttpApiEndpoint.get("plugin.list", "/api/plugin", {
+    query: LocationQuery,
+    success: Location.response(Schema.Array(Plugin.Info)),
+})
+    .annotateMerge(locationQueryOpenApi)
+    .annotateMerge(OpenApi.annotations({
+    identifier: "v2.plugin.list",
+    summary: "List plugins",
+    description: "Retrieve currently loaded plugins.",
+})))
+    .annotateMerge(OpenApi.annotations({
+    title: "plugin",
+    description: "Experimental plugin routes.",
+}));