@opencode/client 0.0.0-dev-19448 → 0.0.0-dev-19449

package/dist/effect/api/api.d.ts

@@ -10,6 +10,7 @@ import type { RelativePath } from "@opencode/schema/schema";
 import type { Brand } from "effect";
 import type { Model } from "@opencode/schema/model";
 import type { DateTime } from "effect";
+import type { Permission } from "@opencode/schema/permission";
 import type { SessionMessage } from "@opencode/schema/session-message";
 import type { SessionInbox } from "@opencode/schema/session-inbox";
 import type { PromptInput } from "@opencode/schema/prompt-input";
@@ -25,7 +26,6 @@ import type { Integration } from "@opencode/schema/integration";
 import type { Form } from "@opencode/schema/form";
 import type { Mcp } from "@opencode/schema/mcp";
 import type { Credential } from "@opencode/schema/credential";
-import type { Permission } from "@opencode/schema/permission";
 import type { PermissionSaved } from "@opencode/schema/permission-saved";
 import type { FileSystem } from "@opencode/schema/filesystem";
 import type { Command } from "@opencode/schema/command";
@@ -239,6 +239,7 @@ export type SessionCreateInput = {
     readonly model?: Model.Ref | undefined;
     readonly location?: Location.Ref | undefined;
     readonly metadata?: Session.Metadata | undefined;
+    readonly permissions?: Permission.Ruleset | undefined;
 };
 export type SessionCreateOutput = Session.Info;
 export type SessionCreateOperation<E = never> = (input?: SessionCreateInput) => Effect.Effect<SessionCreateOutput, E>;
@@ -472,6 +473,7 @@ export type SessionLogOutput = ({
         readonly agent?: Agent.ID | undefined;
         readonly model?: Model.Ref | undefined;
         readonly metadata?: Session.Metadata | undefined;
+        readonly permissions?: Permission.Ruleset | undefined;
         readonly version: string;
     };
 } | {
@@ -546,6 +548,23 @@ export type SessionLogOutput = ({
         readonly sessionID: Session.ID;
         readonly title: string;
     };
+} | {
+    readonly id: Event.ID;
+    readonly created: number;
+    readonly metadata?: {
+        readonly [x: string]: unknown;
+    } | undefined;
+    readonly type: "session.permissions.updated";
+    readonly durable: {
+        readonly aggregateID: string;
+        readonly seq: Event.Seq;
+        readonly version: Event.Version;
+    };
+    readonly location?: Location.Ref | undefined;
+    readonly data: {
+        readonly sessionID: Session.ID;
+        readonly permissions: Permission.Ruleset;
+    };
 } | {
     readonly id: Event.ID;
     readonly created: number;
@@ -1950,6 +1969,12 @@ export type PermissionReplyInput = {
 };
 export type PermissionReplyOutput = void;
 export type PermissionReplyOperation<E = never> = (input: PermissionReplyInput) => Effect.Effect<PermissionReplyOutput, E>;
+export type PermissionRulesInput = {
+    readonly sessionID: Session.ID;
+    readonly permissions: Permission.Ruleset;
+};
+export type PermissionRulesOutput = void;
+export type PermissionRulesOperation<E = never> = (input: PermissionRulesInput) => Effect.Effect<PermissionRulesOutput, E>;
 export interface PermissionApi<E = never> {
     readonly request: {
         readonly list: PermissionRequestListOperation<E>;
@@ -1962,6 +1987,7 @@ export interface PermissionApi<E = never> {
     readonly list: PermissionListOperation<E>;
     readonly get: PermissionGetOperation<E>;
     readonly reply: PermissionReplyOperation<E>;
+    readonly rules: PermissionRulesOperation<E>;
 }
 export type FileListInput = {
     readonly location?: {

package/dist/effect/client.d.ts

@@ -458,6 +458,11 @@ export declare const make: (options?: {
                     readonly providerID: string & import("effect/Brand").Brand<"Provider.ID">;
                     readonly variant?: (string & import("effect/Brand").Brand<"Model.VariantID">) | undefined;
                 } | undefined;
+                readonly permissions?: readonly {
+                    readonly action: string;
+                    readonly resource: string;
+                    readonly effect: "allow" | "deny" | "ask";
+                }[] | undefined;
                 readonly agent?: (string & import("effect/Brand").Brand<"Agent.ID">) | undefined;
                 readonly subpath?: (string & import("effect/Brand").Brand<"RelativePath">) | undefined;
                 readonly parentID?: (string & import("effect/Brand").Brand<"SessionID">) | undefined;
@@ -571,6 +576,30 @@ export declare const make: (options?: {
             readonly metadata?: {
                 readonly [x: string]: unknown;
             } | undefined;
+        } | {
+            readonly id: string & import("effect/Brand").Brand<"Event.ID">;
+            readonly data: {
+                readonly permissions: readonly {
+                    readonly action: string;
+                    readonly resource: string;
+                    readonly effect: "allow" | "deny" | "ask";
+                }[];
+                readonly sessionID: string & import("effect/Brand").Brand<"SessionID">;
+            };
+            readonly durable: {
+                readonly aggregateID: string;
+                readonly seq: number & import("effect/Brand").Brand<"Event.Seq">;
+                readonly version: number & import("effect/Brand").Brand<"Event.Version">;
+            };
+            readonly type: "session.permissions.updated";
+            readonly created: number;
+            readonly location?: {
+                readonly directory: string & import("effect/Brand").Brand<"AbsolutePath">;
+                readonly workspaceID?: (string & import("effect/Brand").Brand<"Workspace.ID">) | undefined;
+            } | undefined;
+            readonly metadata?: {
+                readonly [x: string]: unknown;
+            } | undefined;
         } | {
             readonly id: string & import("effect/Brand").Brand<"Event.ID">;
             readonly data: {
@@ -2347,6 +2376,7 @@ export declare const make: (options?: {
         list: (input: import("./api.js").PermissionListInput) => Effect.Effect<import("./api.js").PermissionListOutput, import("@opencode/protocol/errors").InvalidRequestError | import("@opencode/protocol/errors").UnauthorizedError | import("@opencode/protocol/errors").SessionNotFoundError | import("effect/Schema").SchemaError | ClientError | import("effect/unstable/http/HttpClientError").HttpClientError, never>;
         get: (input: import("./api.js").PermissionGetInput) => Effect.Effect<import("@opencode/schema/permission").Request, import("@opencode/protocol/errors").InvalidRequestError | import("@opencode/protocol/errors").UnauthorizedError | import("@opencode/protocol/errors").SessionNotFoundError | import("@opencode/protocol/errors").PermissionNotFoundError | import("effect/Schema").SchemaError | ClientError | import("effect/unstable/http/HttpClientError").HttpClientError, never>;
         reply: (input: import("./api.js").PermissionReplyInput) => Effect.Effect<void, import("@opencode/protocol/errors").InvalidRequestError | import("@opencode/protocol/errors").UnauthorizedError | import("@opencode/protocol/errors").SessionNotFoundError | import("@opencode/protocol/errors").PermissionNotFoundError | import("effect/Schema").SchemaError | ClientError | import("effect/unstable/http/HttpClientError").HttpClientError, never>;
+        rules: (input: import("./api.js").PermissionRulesInput) => Effect.Effect<void, import("@opencode/protocol/errors").InvalidRequestError | import("@opencode/protocol/errors").UnauthorizedError | import("@opencode/protocol/errors").SessionNotFoundError | import("effect/Schema").SchemaError | ClientError | import("effect/unstable/http/HttpClientError").HttpClientError, never>;
     };
     file: {
         list: (input?: import("./api.js").FileListInput) => Effect.Effect<import("./api.js").FileListOutput, import("@opencode/protocol/errors").InvalidRequestError | import("@opencode/protocol/errors").UnauthorizedError | import("effect/Schema").SchemaError | ClientError | import("effect/unstable/http/HttpClientError").HttpClientError, never>;

package/dist/effect/generated/client.d.ts

@@ -1,7 +1,7 @@
 import { Effect, Stream, Schema } from "effect";
 import { Sse } from "effect/unstable/encoding";
 import { HttpClientError } from "effect/unstable/http";
-import type { HealthGetOutput, ServerGetOutput, LocationGetInput, AgentListInput, AgentListOutput, AgentGetInput, AgentGetOutput, PluginListInput, PluginListOutput, PluginAwaitActivationInput, PluginCheckInput, PluginCheckOutput, PluginUpdateInput, SessionListInput, SessionListOutput, SessionStatsInput, SessionStatsOutput, SessionCreateInput, SessionImportInput, SessionExportInput, SessionExportOutput, SessionActiveOutput, SessionGetInput, SessionRemoveInput, SessionForkInput, SessionSwitchAgentInput, SessionSwitchModelInput, SessionRenameInput, SessionMoveInput, SessionPromptInput, SessionCommandInput, SessionSkillInput, SessionSyntheticInput, SessionShellInput, SessionCompactInput, SessionWaitInput, SessionRevertStageInput, SessionRevertClearInput, SessionRevertCommitInput, SessionContextInput, SessionContextOutput, SessionInboxListInput, SessionInboxListOutput, SessionInboxCancelInput, SessionInboxSteerInput, SessionInboxQueueInput, SessionInstructionsEntryListInput, SessionInstructionsEntryListOutput, SessionInstructionsEntryPutInput, SessionInstructionsEntryRemoveInput, SessionGenerateInput, SessionGenerateOutput, SessionLogInput, SessionLogOutput, SessionInterruptInput, SessionInterruptOutput, SessionBackgroundInput, SessionMessageInput, SessionEnvironmentInput, SessionViewInput, MessageListInput, MessageListOutput, ModelListInput, ModelListOutput, ModelDefaultInput, ModelDefaultOutput, GenerateTextInput, GenerateTextOutput, ProviderListInput, ProviderListOutput, ProviderGetInput, ProviderGetOutput, IntegrationListInput, IntegrationListOutput, IntegrationGetInput, IntegrationGetOutput, IntegrationWellknownAddInput, IntegrationConnectKeyInput, IntegrationOauthConnectInput, IntegrationOauthConnectOutput, IntegrationOauthStatusInput, IntegrationOauthStatusOutput, IntegrationOauthCompleteInput, IntegrationOauthCancelInput, IntegrationCommandConnectInput, IntegrationCommandConnectOutput, IntegrationCommandStatusInput, IntegrationCommandStatusOutput, IntegrationCommandCancelInput, McpListInput, McpListOutput, McpAddInput, McpRemoveInput, McpConnectInput, McpDisconnectInput, McpResourceCatalogInput, McpResourceCatalogOutput, CredentialUpdateInput, CredentialActivateInput, CredentialRemoveInput, ProjectListOutput, ProjectUpdateInput, ProjectCurrentInput, FormRequestListInput, FormRequestListOutput, FormListInput, FormListOutput, FormCreateInput, FormGetInput, FormStateInput, FormReplyInput, FormCancelInput, PermissionRequestListInput, PermissionRequestListOutput, PermissionSavedListInput, PermissionSavedListOutput, PermissionSavedRemoveInput, PermissionCreateInput, PermissionCreateOutput, PermissionListInput, PermissionListOutput, PermissionGetInput, PermissionReplyInput, FileListInput, FileListOutput, FileFindInput, FileFindOutput, CommandListInput, CommandListOutput, SkillListInput, SkillListOutput, RpcCallInput, RpcCallOutput, PtyListInput, PtyListOutput, PtyCreateInput, PtyCreateOutput, PtyGetInput, PtyGetOutput, PtyUpdateInput, PtyUpdateOutput, PtyRemoveInput, PtyConnectTokenInput, PtyConnectTokenOutput, ExperimentalPersistentPtyReadInput, ExperimentalPersistentPtyReadOutput, ExperimentalPersistentPtyListInput, ExperimentalPersistentPtyListOutput, ExperimentalPersistentPtyCreateInput, ExperimentalPersistentPtyCreateOutput, ExperimentalPersistentPtyHandoffOutput, ExperimentalPersistentPtyGetInput, ExperimentalPersistentPtyGetOutput, ExperimentalPersistentPtyUpdateInput, ExperimentalPersistentPtyUpdateOutput, ExperimentalPersistentPtySnapshotInput, ExperimentalPersistentPtySnapshotOutput, ExperimentalPersistentPtyRemoveInput, ExperimentalPersistentPtyConnectTokenInput, ShellListInput, ShellListOutput, ShellCreateInput, ShellCreateOutput, ShellGetInput, ShellGetOutput, ShellTimeoutInput, ShellTimeoutOutput, ShellOutputInput, ShellOutputOutput, ShellRemoveInput, ReferenceListInput, ReferenceListOutput, WorktreeListInput, WorktreeCreateInput, WorktreeRemoveInput, WorktreeRefreshInput, WorkspaceCreateInput, WorkspaceDestroyInput, VcsGetInput, VcsGetOutput, VcsBaseInput, VcsBaseOutput, VcsStatusInput, VcsStatusOutput, VcsBranchesInput, VcsBranchesOutput, VcsDiffInput, VcsDiffOutput, DebugLocationListOutput, DebugLocationEvictInput, MigrationV1StatusOutput, WebsearchProvidersInput, WebsearchProvidersOutput, WebsearchQueryInput, WebsearchQueryOutput, ConfigGetInput, ConfigGetOutput } from "../api/api.js";
+import type { HealthGetOutput, ServerGetOutput, LocationGetInput, AgentListInput, AgentListOutput, AgentGetInput, AgentGetOutput, PluginListInput, PluginListOutput, PluginAwaitActivationInput, PluginCheckInput, PluginCheckOutput, PluginUpdateInput, SessionListInput, SessionListOutput, SessionStatsInput, SessionStatsOutput, SessionCreateInput, SessionImportInput, SessionExportInput, SessionExportOutput, SessionActiveOutput, SessionGetInput, SessionRemoveInput, SessionForkInput, SessionSwitchAgentInput, SessionSwitchModelInput, SessionRenameInput, SessionMoveInput, SessionPromptInput, SessionCommandInput, SessionSkillInput, SessionSyntheticInput, SessionShellInput, SessionCompactInput, SessionWaitInput, SessionRevertStageInput, SessionRevertClearInput, SessionRevertCommitInput, SessionContextInput, SessionContextOutput, SessionInboxListInput, SessionInboxListOutput, SessionInboxCancelInput, SessionInboxSteerInput, SessionInboxQueueInput, SessionInstructionsEntryListInput, SessionInstructionsEntryListOutput, SessionInstructionsEntryPutInput, SessionInstructionsEntryRemoveInput, SessionGenerateInput, SessionGenerateOutput, SessionLogInput, SessionLogOutput, SessionInterruptInput, SessionInterruptOutput, SessionBackgroundInput, SessionMessageInput, SessionEnvironmentInput, SessionViewInput, MessageListInput, MessageListOutput, ModelListInput, ModelListOutput, ModelDefaultInput, ModelDefaultOutput, GenerateTextInput, GenerateTextOutput, ProviderListInput, ProviderListOutput, ProviderGetInput, ProviderGetOutput, IntegrationListInput, IntegrationListOutput, IntegrationGetInput, IntegrationGetOutput, IntegrationWellknownAddInput, IntegrationConnectKeyInput, IntegrationOauthConnectInput, IntegrationOauthConnectOutput, IntegrationOauthStatusInput, IntegrationOauthStatusOutput, IntegrationOauthCompleteInput, IntegrationOauthCancelInput, IntegrationCommandConnectInput, IntegrationCommandConnectOutput, IntegrationCommandStatusInput, IntegrationCommandStatusOutput, IntegrationCommandCancelInput, McpListInput, McpListOutput, McpAddInput, McpRemoveInput, McpConnectInput, McpDisconnectInput, McpResourceCatalogInput, McpResourceCatalogOutput, CredentialUpdateInput, CredentialActivateInput, CredentialRemoveInput, ProjectListOutput, ProjectUpdateInput, ProjectCurrentInput, FormRequestListInput, FormRequestListOutput, FormListInput, FormListOutput, FormCreateInput, FormGetInput, FormStateInput, FormReplyInput, FormCancelInput, PermissionRequestListInput, PermissionRequestListOutput, PermissionSavedListInput, PermissionSavedListOutput, PermissionSavedRemoveInput, PermissionCreateInput, PermissionCreateOutput, PermissionListInput, PermissionListOutput, PermissionGetInput, PermissionReplyInput, PermissionRulesInput, FileListInput, FileListOutput, FileFindInput, FileFindOutput, CommandListInput, CommandListOutput, SkillListInput, SkillListOutput, RpcCallInput, RpcCallOutput, PtyListInput, PtyListOutput, PtyCreateInput, PtyCreateOutput, PtyGetInput, PtyGetOutput, PtyUpdateInput, PtyUpdateOutput, PtyRemoveInput, PtyConnectTokenInput, PtyConnectTokenOutput, ExperimentalPersistentPtyReadInput, ExperimentalPersistentPtyReadOutput, ExperimentalPersistentPtyListInput, ExperimentalPersistentPtyListOutput, ExperimentalPersistentPtyCreateInput, ExperimentalPersistentPtyCreateOutput, ExperimentalPersistentPtyHandoffOutput, ExperimentalPersistentPtyGetInput, ExperimentalPersistentPtyGetOutput, ExperimentalPersistentPtyUpdateInput, ExperimentalPersistentPtyUpdateOutput, ExperimentalPersistentPtySnapshotInput, ExperimentalPersistentPtySnapshotOutput, ExperimentalPersistentPtyRemoveInput, ExperimentalPersistentPtyConnectTokenInput, ShellListInput, ShellListOutput, ShellCreateInput, ShellCreateOutput, ShellGetInput, ShellGetOutput, ShellTimeoutInput, ShellTimeoutOutput, ShellOutputInput, ShellOutputOutput, ShellRemoveInput, ReferenceListInput, ReferenceListOutput, WorktreeListInput, WorktreeCreateInput, WorktreeRemoveInput, WorktreeRefreshInput, WorkspaceCreateInput, WorkspaceDestroyInput, VcsGetInput, VcsGetOutput, VcsBaseInput, VcsBaseOutput, VcsStatusInput, VcsStatusOutput, VcsBranchesInput, VcsBranchesOutput, VcsDiffInput, VcsDiffOutput, DebugLocationListOutput, DebugLocationEvictInput, MigrationV1StatusOutput, WebsearchProvidersInput, WebsearchProvidersOutput, WebsearchQueryInput, WebsearchQueryOutput, ConfigGetInput, ConfigGetOutput } from "../api/api.js";
 import { ClientError } from "./client-error.js";
 export declare const make: (options?: {
     readonly baseUrl?: URL | string;
@@ -160,6 +160,7 @@ export declare const make: (options?: {
         list: (input: PermissionListInput) => Effect.Effect<PermissionListOutput, import("@opencode/protocol/errors").InvalidRequestError | import("@opencode/protocol/errors").UnauthorizedError | import("@opencode/protocol/errors").SessionNotFoundError | Schema.SchemaError | ClientError | HttpClientError.HttpClientError, never>;
         get: (input: PermissionGetInput) => Effect.Effect<import("@opencode/schema/permission").Request, import("@opencode/protocol/errors").InvalidRequestError | import("@opencode/protocol/errors").UnauthorizedError | import("@opencode/protocol/errors").SessionNotFoundError | import("@opencode/protocol/errors").PermissionNotFoundError | Schema.SchemaError | ClientError | HttpClientError.HttpClientError, never>;
         reply: (input: PermissionReplyInput) => Effect.Effect<void, import("@opencode/protocol/errors").InvalidRequestError | import("@opencode/protocol/errors").UnauthorizedError | import("@opencode/protocol/errors").SessionNotFoundError | import("@opencode/protocol/errors").PermissionNotFoundError | Schema.SchemaError | ClientError | HttpClientError.HttpClientError, never>;
+        rules: (input: PermissionRulesInput) => Effect.Effect<void, import("@opencode/protocol/errors").InvalidRequestError | import("@opencode/protocol/errors").UnauthorizedError | import("@opencode/protocol/errors").SessionNotFoundError | Schema.SchemaError | ClientError | HttpClientError.HttpClientError, never>;
     };
     file: {
         list: (input?: FileListInput) => Effect.Effect<FileListOutput, import("@opencode/protocol/errors").InvalidRequestError | import("@opencode/protocol/errors").UnauthorizedError | Schema.SchemaError | ClientError | HttpClientError.HttpClientError, never>;
@@ -625,6 +626,11 @@ export declare const make: (options?: {
                     readonly providerID: string & import("effect/Brand").Brand<"Provider.ID">;
                     readonly variant?: (string & import("effect/Brand").Brand<"Model.VariantID">) | undefined;
                 } | undefined;
+                readonly permissions?: readonly {
+                    readonly action: string;
+                    readonly resource: string;
+                    readonly effect: "allow" | "deny" | "ask";
+                }[] | undefined;
                 readonly agent?: (string & import("effect/Brand").Brand<"Agent.ID">) | undefined;
                 readonly subpath?: (string & import("effect/Brand").Brand<"RelativePath">) | undefined;
                 readonly parentID?: (string & import("effect/Brand").Brand<"SessionID">) | undefined;
@@ -738,6 +744,30 @@ export declare const make: (options?: {
             readonly metadata?: {
                 readonly [x: string]: unknown;
             } | undefined;
+        } | {
+            readonly id: string & import("effect/Brand").Brand<"Event.ID">;
+            readonly data: {
+                readonly permissions: readonly {
+                    readonly action: string;
+                    readonly resource: string;
+                    readonly effect: "allow" | "deny" | "ask";
+                }[];
+                readonly sessionID: string & import("effect/Brand").Brand<"SessionID">;
+            };
+            readonly durable: {
+                readonly aggregateID: string;
+                readonly seq: number & import("effect/Brand").Brand<"Event.Seq">;
+                readonly version: number & import("effect/Brand").Brand<"Event.Version">;
+            };
+            readonly type: "session.permissions.updated";
+            readonly created: number;
+            readonly location?: {
+                readonly directory: string & import("effect/Brand").Brand<"AbsolutePath">;
+                readonly workspaceID?: (string & import("effect/Brand").Brand<"Workspace.ID">) | undefined;
+            } | undefined;
+            readonly metadata?: {
+                readonly [x: string]: unknown;
+            } | undefined;
         } | {
             readonly id: string & import("effect/Brand").Brand<"Event.ID">;
             readonly data: {

package/dist/effect/generated/client.js

@@ -62,6 +62,7 @@ const EndpointSessionCreate = (raw) => (input) => preserveEffect()(raw["session.
         model: input?.["model"],
         location: input?.["location"],
         metadata: input?.["metadata"],
+        permissions: input?.["permissions"],
     },
 }).pipe(Effect.mapError(mapClientError), Effect.map((value) => value.data)));
 const EndpointSessionImport = (raw) => (input) => preserveEffect()(raw["session.import"]({
@@ -376,6 +377,10 @@ const EndpointPermissionReply = (raw) => (input) => preserveEffect()(raw["sessio
     params: { sessionID: input["sessionID"], requestID: input["requestID"] },
     payload: { reply: input["reply"], message: input["message"] },
 }).pipe(Effect.mapError(mapClientError)));
+const EndpointPermissionRules = (raw) => (input) => preserveEffect()(raw["session.permission.rules"]({
+    params: { sessionID: input["sessionID"] },
+    payload: { permissions: input["permissions"] },
+}).pipe(Effect.mapError(mapClientError)));
 const adaptGroupPermission = (raw) => ({
     request: { list: EndpointPermissionRequestList(raw) },
     saved: { list: EndpointPermissionSavedList(raw), remove: EndpointPermissionSavedRemove(raw) },
@@ -383,6 +388,7 @@ const adaptGroupPermission = (raw) => ({
     list: EndpointPermissionList(raw),
     get: EndpointPermissionGet(raw),
     reply: EndpointPermissionReply(raw),
+    rules: EndpointPermissionRules(raw),
 });
 const EndpointFileList = (raw) => (input) => preserveEffect()(raw["fs.list"]({ query: { location: input?.["location"], path: input?.["path"] } }).pipe(Effect.mapError(mapClientError)));
 const EndpointFileFind = (raw) => (input) => preserveEffect()(raw["fs.find"]({

package/dist/promise/client.d.ts

@@ -171,6 +171,7 @@ export declare function make(options: ClientOptions): {
         list: (input: import("./index.js").PermissionListInput, requestOptions?: OpenCode.RequestOptions) => Promise<import("./index.js").PermissionRequest[]>;
         get: (input: import("./index.js").PermissionGetInput, requestOptions?: OpenCode.RequestOptions) => Promise<import("./index.js").PermissionRequest>;
         reply: (input: import("./index.js").PermissionReplyInput, requestOptions?: OpenCode.RequestOptions) => Promise<void>;
+        rules: (input: import("./index.js").PermissionRulesInput, requestOptions?: OpenCode.RequestOptions) => Promise<void>;
     };
     file: {
         read: (input: import("./index.js").FileReadInput, requestOptions?: OpenCode.RequestOptions) => Promise<import("./index.js").FileReadOutput>;

package/dist/promise/generated/client.d.ts

@@ -1,4 +1,4 @@
-import type { ServerGetOutput, LocationGetInput, LocationGetOutput, AgentListInput, AgentListOutput, AgentGetInput, AgentGetOutput, PluginListInput, PluginListOutput, PluginAwaitActivationInput, PluginCheckInput, PluginCheckOutput, PluginUpdateInput, SessionListInput, SessionStatsInput, SessionCreateInput, SessionImportInput, SessionExportInput, SessionGetInput, SessionRemoveInput, SessionForkInput, SessionSwitchAgentInput, SessionSwitchModelInput, SessionRenameInput, SessionMoveInput, SessionPromptInput, SessionCommandInput, SessionSkillInput, SessionSyntheticInput, SessionShellInput, SessionCompactInput, SessionWaitInput, SessionRevertStageInput, SessionRevertClearInput, SessionRevertCommitInput, SessionContextInput, SessionInboxListInput, SessionInboxCancelInput, SessionInboxSteerInput, SessionInboxQueueInput, SessionInstructionsEntryListInput, SessionInstructionsEntryPutInput, SessionInstructionsEntryRemoveInput, SessionGenerateInput, SessionLogInput, SessionLogOutput, SessionInterruptInput, SessionBackgroundInput, SessionMessageInput, SessionEnvironmentInput, SessionViewInput, MessageListInput, ModelListInput, ModelListOutput, ModelDefaultInput, ModelDefaultOutput, GenerateTextInput, ProviderListInput, ProviderListOutput, ProviderGetInput, ProviderGetOutput, IntegrationListInput, IntegrationListOutput, IntegrationGetInput, IntegrationGetOutput, IntegrationWellknownAddInput, IntegrationConnectKeyInput, IntegrationOauthConnectInput, IntegrationOauthConnectOutput, IntegrationOauthStatusInput, IntegrationOauthStatusOutput, IntegrationOauthCompleteInput, IntegrationOauthCancelInput, IntegrationCommandConnectInput, IntegrationCommandConnectOutput, IntegrationCommandStatusInput, IntegrationCommandStatusOutput, IntegrationCommandCancelInput, McpListInput, McpListOutput, McpAddInput, McpRemoveInput, McpConnectInput, McpDisconnectInput, McpResourceCatalogInput, McpResourceCatalogOutput, CredentialUpdateInput, CredentialActivateInput, CredentialRemoveInput, ProjectListOutput, ProjectUpdateInput, ProjectCurrentInput, FormRequestListInput, FormRequestListOutput, FormListInput, FormCreateInput, FormGetInput, FormStateInput, FormReplyInput, FormCancelInput, PermissionRequestListInput, PermissionRequestListOutput, PermissionSavedListInput, PermissionSavedRemoveInput, PermissionCreateInput, PermissionListInput, PermissionGetInput, PermissionReplyInput, FileReadInput, FileReadOutput, FileListInput, FileListOutput, FileFindInput, FileFindOutput, CommandListInput, CommandListOutput, SkillListInput, SkillListOutput, RpcCallInput, EventSubscribeOutput, PtyListInput, PtyListOutput, PtyCreateInput, PtyCreateOutput, PtyGetInput, PtyGetOutput, PtyUpdateInput, PtyUpdateOutput, PtyRemoveInput, PtyConnectTokenInput, PtyConnectTokenOutput, ExperimentalPersistentPtyReadInput, ExperimentalPersistentPtyListInput, ExperimentalPersistentPtyCreateInput, ExperimentalPersistentPtyHandoffOutput, ExperimentalPersistentPtyGetInput, ExperimentalPersistentPtyUpdateInput, ExperimentalPersistentPtySnapshotInput, ExperimentalPersistentPtyRemoveInput, ExperimentalPersistentPtyConnectTokenInput, ShellListInput, ShellListOutput, ShellCreateInput, ShellCreateOutput, ShellGetInput, ShellGetOutput, ShellTimeoutInput, ShellTimeoutOutput, ShellOutputInput, ShellOutputOutput, ShellRemoveInput, ReferenceListInput, ReferenceListOutput, WorktreeListInput, WorktreeCreateInput, WorktreeRemoveInput, WorktreeRefreshInput, WorkspaceCreateInput, WorkspaceDestroyInput, VcsGetInput, VcsGetOutput, VcsBaseInput, VcsBaseOutput, VcsStatusInput, VcsStatusOutput, VcsBranchesInput, VcsBranchesOutput, VcsDiffInput, VcsDiffOutput, DebugLocationListOutput, DebugLocationEvictInput, MigrationV1StatusOutput, WebsearchProvidersInput, WebsearchProvidersOutput, WebsearchQueryInput, WebsearchQueryOutput, ConfigGetInput, ConfigGetOutput } from "./types.js";
+import type { ServerGetOutput, LocationGetInput, LocationGetOutput, AgentListInput, AgentListOutput, AgentGetInput, AgentGetOutput, PluginListInput, PluginListOutput, PluginAwaitActivationInput, PluginCheckInput, PluginCheckOutput, PluginUpdateInput, SessionListInput, SessionStatsInput, SessionCreateInput, SessionImportInput, SessionExportInput, SessionGetInput, SessionRemoveInput, SessionForkInput, SessionSwitchAgentInput, SessionSwitchModelInput, SessionRenameInput, SessionMoveInput, SessionPromptInput, SessionCommandInput, SessionSkillInput, SessionSyntheticInput, SessionShellInput, SessionCompactInput, SessionWaitInput, SessionRevertStageInput, SessionRevertClearInput, SessionRevertCommitInput, SessionContextInput, SessionInboxListInput, SessionInboxCancelInput, SessionInboxSteerInput, SessionInboxQueueInput, SessionInstructionsEntryListInput, SessionInstructionsEntryPutInput, SessionInstructionsEntryRemoveInput, SessionGenerateInput, SessionLogInput, SessionLogOutput, SessionInterruptInput, SessionBackgroundInput, SessionMessageInput, SessionEnvironmentInput, SessionViewInput, MessageListInput, ModelListInput, ModelListOutput, ModelDefaultInput, ModelDefaultOutput, GenerateTextInput, ProviderListInput, ProviderListOutput, ProviderGetInput, ProviderGetOutput, IntegrationListInput, IntegrationListOutput, IntegrationGetInput, IntegrationGetOutput, IntegrationWellknownAddInput, IntegrationConnectKeyInput, IntegrationOauthConnectInput, IntegrationOauthConnectOutput, IntegrationOauthStatusInput, IntegrationOauthStatusOutput, IntegrationOauthCompleteInput, IntegrationOauthCancelInput, IntegrationCommandConnectInput, IntegrationCommandConnectOutput, IntegrationCommandStatusInput, IntegrationCommandStatusOutput, IntegrationCommandCancelInput, McpListInput, McpListOutput, McpAddInput, McpRemoveInput, McpConnectInput, McpDisconnectInput, McpResourceCatalogInput, McpResourceCatalogOutput, CredentialUpdateInput, CredentialActivateInput, CredentialRemoveInput, ProjectListOutput, ProjectUpdateInput, ProjectCurrentInput, FormRequestListInput, FormRequestListOutput, FormListInput, FormCreateInput, FormGetInput, FormStateInput, FormReplyInput, FormCancelInput, PermissionRequestListInput, PermissionRequestListOutput, PermissionSavedListInput, PermissionSavedRemoveInput, PermissionCreateInput, PermissionListInput, PermissionGetInput, PermissionReplyInput, PermissionRulesInput, FileReadInput, FileReadOutput, FileListInput, FileListOutput, FileFindInput, FileFindOutput, CommandListInput, CommandListOutput, SkillListInput, SkillListOutput, RpcCallInput, EventSubscribeOutput, PtyListInput, PtyListOutput, PtyCreateInput, PtyCreateOutput, PtyGetInput, PtyGetOutput, PtyUpdateInput, PtyUpdateOutput, PtyRemoveInput, PtyConnectTokenInput, PtyConnectTokenOutput, ExperimentalPersistentPtyReadInput, ExperimentalPersistentPtyListInput, ExperimentalPersistentPtyCreateInput, ExperimentalPersistentPtyHandoffOutput, ExperimentalPersistentPtyGetInput, ExperimentalPersistentPtyUpdateInput, ExperimentalPersistentPtySnapshotInput, ExperimentalPersistentPtyRemoveInput, ExperimentalPersistentPtyConnectTokenInput, ShellListInput, ShellListOutput, ShellCreateInput, ShellCreateOutput, ShellGetInput, ShellGetOutput, ShellTimeoutInput, ShellTimeoutOutput, ShellOutputInput, ShellOutputOutput, ShellRemoveInput, ReferenceListInput, ReferenceListOutput, WorktreeListInput, WorktreeCreateInput, WorktreeRemoveInput, WorktreeRefreshInput, WorkspaceCreateInput, WorkspaceDestroyInput, VcsGetInput, VcsGetOutput, VcsBaseInput, VcsBaseOutput, VcsStatusInput, VcsStatusOutput, VcsBranchesInput, VcsBranchesOutput, VcsDiffInput, VcsDiffOutput, DebugLocationListOutput, DebugLocationEvictInput, MigrationV1StatusOutput, WebsearchProvidersInput, WebsearchProvidersOutput, WebsearchQueryInput, WebsearchQueryOutput, ConfigGetInput, ConfigGetOutput } from "./types.js";
 export interface ClientOptions {
     readonly baseUrl: string;
     readonly fetch?: typeof globalThis.fetch;
@@ -172,6 +172,7 @@ export declare function make(options: ClientOptions): {
         list: (input: PermissionListInput, requestOptions?: RequestOptions) => Promise<import("./types.js").PermissionRequest[]>;
         get: (input: PermissionGetInput, requestOptions?: RequestOptions) => Promise<import("./types.js").PermissionRequest>;
         reply: (input: PermissionReplyInput, requestOptions?: RequestOptions) => Promise<void>;
+        rules: (input: PermissionRulesInput, requestOptions?: RequestOptions) => Promise<void>;
     };
     file: {
         read: (input: FileReadInput, requestOptions?: RequestOptions) => Promise<FileReadOutput>;

package/dist/promise/generated/client.js

@@ -242,6 +242,7 @@ export function make(options) {
                     model: input?.["model"],
                     location: input?.["location"],
                     metadata: input?.["metadata"],
+                    permissions: input?.["permissions"],
                 },
                 successStatus: 200,
                 declaredStatuses: [400, 401],
@@ -929,6 +930,14 @@ export function make(options) {
                 declaredStatuses: [400, 401, 404],
                 empty: true,
             }, requestOptions),
+            rules: (input, requestOptions) => request({
+                method: "PUT",
+                path: `/api/session/${encodeURIComponent(input.sessionID)}/permission/rules`,
+                body: { permissions: input["permissions"] },
+                successStatus: 204,
+                declaredStatuses: [400, 401, 404],
+                empty: true,
+            }, requestOptions),
         },
         file: {
             read: (input, requestOptions) => request({

package/dist/promise/generated/types.d.ts

@@ -840,33 +840,6 @@ export type InstructionEntrySnapshot = Array<{
     value: JsonValue;
     removed: boolean;
 }>;
-export type SessionCreated = {
-    id: string;
-    created: number;
-    metadata?: {
-        [x: string]: any;
-    };
-    type: "session.created";
-    durable: {
-        aggregateID: string;
-        seq: number;
-        version: 1;
-    };
-    location?: LocationRef;
-    data: {
-        sessionID: string;
-        projectID: string;
-        location: LocationRef;
-        subpath?: string;
-        parentID?: string;
-        slug: string;
-        title?: string;
-        agent?: string;
-        model?: ModelRef;
-        metadata?: SessionMetadata;
-        version: string;
-    };
-};
 export type SessionAgentSelected = {
     id: string;
     created: number;
@@ -2365,32 +2338,6 @@ export type SessionInboxMove = {
     payload: SessionInboxMovePayload;
     delivery: SessionInboxDelivery;
 };
-export type SessionInfo = {
-    id: string;
-    parentID?: string;
-    fork?: {
-        sessionID: string;
-        boundary: SessionForkBoundary;
-    };
-    projectID: string;
-    agent?: string;
-    model?: ModelRef;
-    cost: MoneyUSD;
-    tokens: TokenUsageInfo;
-    outcome?: "succeeded" | "failed" | "interrupted";
-    time: {
-        created: number;
-        updated: number;
-        idle?: number;
-        viewed?: number;
-        archived?: number;
-    };
-    title?: string;
-    location: LocationRef;
-    subpath?: string;
-    metadata?: SessionMetadata;
-    revert?: SessionRevert;
-};
 export type SessionRevertStaged = {
     id: string;
     created: number;
@@ -2696,6 +2643,79 @@ export type AgentInfo = {
     steps?: number;
     permissions: PermissionRuleset;
 };
+export type SessionPermissionsUpdated = {
+    id: string;
+    created: number;
+    metadata?: {
+        [x: string]: any;
+    };
+    type: "session.permissions.updated";
+    durable: {
+        aggregateID: string;
+        seq: number;
+        version: 1;
+    };
+    location?: LocationRef;
+    data: {
+        sessionID: string;
+        permissions: PermissionRuleset;
+    };
+};
+export type SessionInfo = {
+    id: string;
+    parentID?: string;
+    fork?: {
+        sessionID: string;
+        boundary: SessionForkBoundary;
+    };
+    projectID: string;
+    agent?: string;
+    model?: ModelRef;
+    cost: MoneyUSD;
+    tokens: TokenUsageInfo;
+    outcome?: "succeeded" | "failed" | "interrupted";
+    time: {
+        created: number;
+        updated: number;
+        idle?: number;
+        viewed?: number;
+        archived?: number;
+    };
+    title?: string;
+    location: LocationRef;
+    subpath?: string;
+    metadata?: SessionMetadata;
+    permissions?: PermissionRuleset;
+    revert?: SessionRevert;
+};
+export type SessionCreated = {
+    id: string;
+    created: number;
+    metadata?: {
+        [x: string]: any;
+    };
+    type: "session.created";
+    durable: {
+        aggregateID: string;
+        seq: number;
+        version: 1;
+    };
+    location?: LocationRef;
+    data: {
+        sessionID: string;
+        projectID: string;
+        location: LocationRef;
+        subpath?: string;
+        parentID?: string;
+        slug: string;
+        title?: string;
+        agent?: string;
+        model?: ModelRef;
+        metadata?: SessionMetadata;
+        permissions?: PermissionRuleset;
+        version: string;
+    };
+};
 export type ConfigEntry = {
     type: "document";
     path?: string;
@@ -2976,13 +2996,6 @@ export type ConfigEntry = {
     type: "claude";
     path: string;
 };
-export type SessionsResponse = {
-    data: Array<SessionInfo>;
-    cursor: {
-        previous?: string | null;
-        next?: string | null;
-    };
-};
 export type SessionInboxUser = {
     id: string;
     sessionID: string;
@@ -3039,6 +3052,13 @@ export type SessionMessageAssistantTool1 = {
 };
 export type FormFields = [FormField, ...Array<FormField>];
 export type FormFields2 = [FormField1, ...Array<FormField1>];
+export type SessionsResponse = {
+    data: Array<SessionInfo>;
+    cursor: {
+        previous?: string | null;
+        next?: string | null;
+    };
+};
 export type SessionInboxInfo = SessionInboxUser | SessionInboxSynthetic | SessionInboxCompaction | SessionInboxMove;
 export type SessionInboxEnqueued = {
     id: string;
@@ -3156,7 +3176,7 @@ export type SessionMessagesResponse = {
         next?: string | null;
     };
 };
-export type SessionEventDurable = SessionCreated | SessionAgentSelected | SessionModelSelected | SessionMoved | SessionRenamed | SessionViewed | SessionDeleted | SessionForked | SessionInboxDelivered | SessionInboxEnqueued | SessionInboxCancelled | SessionInboxDeliveryChanged | SessionExecutionStarted | SessionExecutionSucceeded | SessionExecutionFailed | SessionExecutionInterrupted | SessionInstructionsUpdated | SessionSynthetic | SessionSkillActivated | SessionShellStarted | SessionShellEnded | SessionStepStarted | SessionStepStreamed | SessionStepEnded | SessionStepFailed | SessionTextStarted | SessionTextEnded | SessionReasoningStarted | SessionReasoningEnded | SessionToolInputStarted | SessionToolInputEnded | SessionToolCalled | SessionToolSuccess | SessionToolFailed | SessionRetryScheduled | SessionCompactionStarted | SessionCompactionEnded | SessionCompactionFailed | SessionRevertStaged | SessionRevertCleared | SessionRevertCommitted | SessionUsageRecorded | SessionMessageContentUpdated;
+export type SessionEventDurable = SessionCreated | SessionAgentSelected | SessionModelSelected | SessionMoved | SessionRenamed | SessionPermissionsUpdated | SessionViewed | SessionDeleted | SessionForked | SessionInboxDelivered | SessionInboxEnqueued | SessionInboxCancelled | SessionInboxDeliveryChanged | SessionExecutionStarted | SessionExecutionSucceeded | SessionExecutionFailed | SessionExecutionInterrupted | SessionInstructionsUpdated | SessionSynthetic | SessionSkillActivated | SessionShellStarted | SessionShellEnded | SessionStepStarted | SessionStepStreamed | SessionStepEnded | SessionStepFailed | SessionTextStarted | SessionTextEnded | SessionReasoningStarted | SessionReasoningEnded | SessionToolInputStarted | SessionToolInputEnded | SessionToolCalled | SessionToolSuccess | SessionToolFailed | SessionRetryScheduled | SessionCompactionStarted | SessionCompactionEnded | SessionCompactionFailed | SessionRevertStaged | SessionRevertCleared | SessionRevertCommitted | SessionUsageRecorded | SessionMessageContentUpdated;
 export type IntegrationInfo = {
     id: string;
     name: string;
@@ -3166,7 +3186,7 @@ export type IntegrationInfo = {
     methods: Array<IntegrationMethod>;
     connections: Array<ConnectionInfo>;
 };
-export type V2Event = ModelsDevRefreshed | CredentialUpdated | CredentialSwitched | IntegrationUpdated | CatalogUpdated | AgentUpdated | SessionCreated | SessionAgentSelected | SessionModelSelected | SessionMoved | SessionRenamed | SessionViewed | SessionUsageUpdated | SessionDeleted | SessionForked | SessionInboxDelivered | SessionInboxEnqueued | SessionInboxCancelled | SessionInboxDeliveryChanged | SessionExecutionStarted | SessionExecutionSucceeded | SessionExecutionFailed | SessionExecutionInterrupted | SessionInstructionsUpdated | SessionSynthetic | SessionSkillActivated | SessionShellStarted | SessionShellEnded | SessionStepStarted | SessionStepStreamed | SessionStepEnded | SessionStepFailed | SessionTextStarted | SessionTextDelta | SessionTextEnded | SessionReasoningStarted | SessionReasoningDelta | SessionReasoningEnded | SessionToolInputStarted | SessionToolInputDelta | SessionToolInputEnded | SessionToolCalled | SessionToolProgress | SessionToolSuccess | SessionToolFailed | SessionRetryScheduled | SessionCompactionStarted | SessionCompactionDelta | SessionCompactionEnded | SessionCompactionFailed | SessionRevertStaged | SessionRevertCleared | SessionRevertCommitted | FilesystemChanged | ReferenceUpdated | PermissionAsked | PermissionReplied | PluginUpdated | ProjectUpdated | WorktreeUpdated | WorktreeResolved | CommandUpdated | ConfigUpdated | SkillUpdated | PtyCreated | PtyUpdated | PtyExited | PtyDeleted | PersistentPtyAdded | PersistentPtyRemoved | ShellCreated | ShellExited | ShellDeleted | FormCreated | FormReplied | FormCancelled | WebsearchUpdated | SessionStatusUpdated | SessionIdle | TuiPromptAppend | TuiCommandExecute | TuiToastShow | TuiSessionSelect | InstallationUpdated | InstallationUpdateAvailable | VcsBranchUpdated | McpStatusChanged | McpResourcesChanged | V2EventRpc | V2EventServerConnected;
+export type V2Event = ModelsDevRefreshed | CredentialUpdated | CredentialSwitched | IntegrationUpdated | CatalogUpdated | AgentUpdated | SessionCreated | SessionAgentSelected | SessionModelSelected | SessionMoved | SessionRenamed | SessionPermissionsUpdated | SessionViewed | SessionUsageUpdated | SessionDeleted | SessionForked | SessionInboxDelivered | SessionInboxEnqueued | SessionInboxCancelled | SessionInboxDeliveryChanged | SessionExecutionStarted | SessionExecutionSucceeded | SessionExecutionFailed | SessionExecutionInterrupted | SessionInstructionsUpdated | SessionSynthetic | SessionSkillActivated | SessionShellStarted | SessionShellEnded | SessionStepStarted | SessionStepStreamed | SessionStepEnded | SessionStepFailed | SessionTextStarted | SessionTextDelta | SessionTextEnded | SessionReasoningStarted | SessionReasoningDelta | SessionReasoningEnded | SessionToolInputStarted | SessionToolInputDelta | SessionToolInputEnded | SessionToolCalled | SessionToolProgress | SessionToolSuccess | SessionToolFailed | SessionRetryScheduled | SessionCompactionStarted | SessionCompactionDelta | SessionCompactionEnded | SessionCompactionFailed | SessionRevertStaged | SessionRevertCleared | SessionRevertCommitted | FilesystemChanged | ReferenceUpdated | PermissionAsked | PermissionReplied | PluginUpdated | ProjectUpdated | WorktreeUpdated | WorktreeResolved | CommandUpdated | ConfigUpdated | SkillUpdated | PtyCreated | PtyUpdated | PtyExited | PtyDeleted | PersistentPtyAdded | PersistentPtyRemoved | ShellCreated | ShellExited | ShellDeleted | FormCreated | FormReplied | FormCancelled | WebsearchUpdated | SessionStatusUpdated | SessionIdle | TuiPromptAppend | TuiCommandExecute | TuiToastShow | TuiSessionSelect | InstallationUpdated | InstallationUpdateAvailable | VcsBranchUpdated | McpStatusChanged | McpResourcesChanged | V2EventRpc | V2EventServerConnected;
 export type SessionLogItem = SessionEventDurable | EventLogSynced;
 export type InvalidRequestError = {
     readonly _tag: "InvalidRequestError";
@@ -3621,6 +3641,11 @@ export type SessionCreateInput = {
         readonly metadata?: {
             readonly [x: string]: JsonValue;
         } | null;
+        readonly permissions?: ReadonlyArray<{
+            readonly action: string;
+            readonly resource: string;
+            readonly effect: "allow" | "deny" | "ask";
+        }> | null;
     }["id"];
     readonly title?: {
         readonly id?: string | null;
@@ -3638,6 +3663,11 @@ export type SessionCreateInput = {
         readonly metadata?: {
             readonly [x: string]: JsonValue;
         } | null;
+        readonly permissions?: ReadonlyArray<{
+            readonly action: string;
+            readonly resource: string;
+            readonly effect: "allow" | "deny" | "ask";
+        }> | null;
     }["title"];
     readonly agent?: {
         readonly id?: string | null;
@@ -3655,6 +3685,11 @@ export type SessionCreateInput = {
         readonly metadata?: {
             readonly [x: string]: JsonValue;
         } | null;
+        readonly permissions?: ReadonlyArray<{
+            readonly action: string;
+            readonly resource: string;
+            readonly effect: "allow" | "deny" | "ask";
+        }> | null;
     }["agent"];
     readonly model?: {
         readonly id?: string | null;
@@ -3672,6 +3707,11 @@ export type SessionCreateInput = {
         readonly metadata?: {
             readonly [x: string]: JsonValue;
         } | null;
+        readonly permissions?: ReadonlyArray<{
+            readonly action: string;
+            readonly resource: string;
+            readonly effect: "allow" | "deny" | "ask";
+        }> | null;
     }["model"];
     readonly location?: {
         readonly id?: string | null;
@@ -3689,6 +3729,11 @@ export type SessionCreateInput = {
         readonly metadata?: {
             readonly [x: string]: JsonValue;
         } | null;
+        readonly permissions?: ReadonlyArray<{
+            readonly action: string;
+            readonly resource: string;
+            readonly effect: "allow" | "deny" | "ask";
+        }> | null;
     }["location"];
     readonly metadata?: {
         readonly id?: string | null;
@@ -3706,7 +3751,34 @@ export type SessionCreateInput = {
         readonly metadata?: {
             readonly [x: string]: JsonValue;
         } | null;
+        readonly permissions?: ReadonlyArray<{
+            readonly action: string;
+            readonly resource: string;
+            readonly effect: "allow" | "deny" | "ask";
+        }> | null;
     }["metadata"];
+    readonly permissions?: {
+        readonly id?: string | null;
+        readonly title?: string | null;
+        readonly agent?: string | null;
+        readonly model?: {
+            readonly id: string;
+            readonly providerID: string;
+            readonly variant?: string;
+        } | null;
+        readonly location?: {
+            readonly directory: string;
+            readonly workspaceID?: string;
+        } | null;
+        readonly metadata?: {
+            readonly [x: string]: JsonValue;
+        } | null;
+        readonly permissions?: ReadonlyArray<{
+            readonly action: string;
+            readonly resource: string;
+            readonly effect: "allow" | "deny" | "ask";
+        }> | null;
+    }["permissions"];
 };
 export type SessionCreateOutput = {
     data: SessionInfo;
@@ -3760,6 +3832,11 @@ export type SessionImportInput = {
             readonly metadata?: {
                 readonly [x: string]: JsonValue;
             };
+            readonly permissions?: ReadonlyArray<{
+                readonly action: string;
+                readonly resource: string;
+                readonly effect: "allow" | "deny" | "ask";
+            }>;
             readonly revert?: {
                 readonly messageID: string;
                 readonly partID?: string;
@@ -4218,6 +4295,11 @@ export type SessionImportInput = {
             readonly metadata?: {
                 readonly [x: string]: JsonValue;
             };
+            readonly permissions?: ReadonlyArray<{
+                readonly action: string;
+                readonly resource: string;
+                readonly effect: "allow" | "deny" | "ask";
+            }>;
             readonly revert?: {
                 readonly messageID: string;
                 readonly partID?: string;
@@ -4676,6 +4758,11 @@ export type SessionImportInput = {
             readonly metadata?: {
                 readonly [x: string]: JsonValue;
             };
+            readonly permissions?: ReadonlyArray<{
+                readonly action: string;
+                readonly resource: string;
+                readonly effect: "allow" | "deny" | "ask";
+            }>;
             readonly revert?: {
                 readonly messageID: string;
                 readonly partID?: string;
@@ -7651,6 +7738,19 @@ export type PermissionReplyInput = {
     }["message"];
 };
 export type PermissionReplyOutput = void;
+export type PermissionRulesInput = {
+    readonly sessionID: {
+        readonly sessionID: string;
+    }["sessionID"];
+    readonly permissions: {
+        readonly permissions: ReadonlyArray<{
+            readonly action: string;
+            readonly resource: string;
+            readonly effect: "allow" | "deny" | "ask";
+        }>;
+    }["permissions"];
+};
+export type PermissionRulesOutput = void;
 export type FileReadInput = {
     readonly location?: {
         readonly location?: {

package/dist/solid/data.js

@@ -550,6 +550,10 @@ export function createData(config) {
                 });
                 return;
             }
+            case "session.permissions.updated":
+                if (store.session.info[event.data.sessionID])
+                    setStore("session", "info", event.data.sessionID, "permissions", event.data.permissions);
+                return;
             case "session.moved": {
                 const current = store.session.info[event.data.sessionID];
                 if (current) {

package/package.json

@@ -1,7 +1,7 @@
 {
   "$schema": "https://json.schemastore.org/package.json",
   "name": "@opencode/client",
-  "version": "0.0.0-dev-19448",
+  "version": "0.0.0-dev-19449",
   "type": "module",
   "license": "MIT",
   "repository": {
@@ -57,8 +57,8 @@
     "typecheck": "tsgo --noEmit"
   },
   "dependencies": {
-    "@opencode/schema": "0.0.0-dev-19448",
-    "@opencode/protocol": "0.0.0-dev-19448"
+    "@opencode/schema": "0.0.0-dev-19449",
+    "@opencode/protocol": "0.0.0-dev-19449"
   },
   "peerDependencies": {
     "effect": "4.0.0-rc.112",
@@ -74,7 +74,7 @@
   },
   "devDependencies": {
     "@effect/platform-node": "4.0.0-rc.112",
-    "@opencode/httpapi-codegen": "0.0.0-dev-19448",
+    "@opencode/httpapi-codegen": "0.0.0-dev-19449",
     "@tsconfig/bun": "1.0.9",
     "@types/bun": "1.4.0",
     "@typescript/native-preview": "7.0.0-dev.20251207.1",