@opencode/protocol 0.0.0-dev-19656 → 0.0.0-dev-19658

package/dist/groups/event.d.ts

@@ -867,7 +867,7 @@ export declare const EventGroup: HttpApiGroup.HttpApiGroup<"server.event", HttpA
     };
     readonly created: Schema.Finite;
     readonly metadata: Schema.decodeTo<Schema.optional<Schema.toType<Schema.$Record<Schema.String, Schema.Unknown>>>, Schema.optionalKey<Schema.$Record<Schema.String, Schema.Unknown>>, never, never>;
-    readonly type: Schema.Literal<"session.permissions.updated">;
+    readonly type: Schema.Literal<"session.permissions">;
     readonly durable: Schema.Struct<{
         readonly aggregateID: Schema.String;
         readonly seq: Schema.brand<Schema.Int, "Event.Seq">;
@@ -904,7 +904,7 @@ export declare const EventGroup: HttpApiGroup.HttpApiGroup<"server.event", HttpA
         };
     }>;
 }> & {
-    type: "session.permissions.updated";
+    type: "session.permissions";
     durability: "durable";
     durable: {
         readonly version: number;
@@ -6850,7 +6850,7 @@ export declare const EventGroup: HttpApiGroup.HttpApiGroup<"server.event", HttpA
         readonly seq: number & import("effect/Brand").Brand<"Event.Seq">;
         readonly version: number & import("effect/Brand").Brand<"Event.Version">;
     };
-    readonly type: "session.permissions.updated";
+    readonly type: "session.permissions";
     readonly created: number;
     readonly location?: {
         readonly directory: string & import("effect/Brand").Brand<"AbsolutePath">;
@@ -9283,7 +9283,7 @@ export declare const OpenCodeEvent: Schema.Union<readonly [Schema.Struct<{
     };
     readonly created: Schema.Finite;
     readonly metadata: Schema.decodeTo<Schema.optional<Schema.toType<Schema.$Record<Schema.String, Schema.Unknown>>>, Schema.optionalKey<Schema.$Record<Schema.String, Schema.Unknown>>, never, never>;
-    readonly type: Schema.Literal<"session.permissions.updated">;
+    readonly type: Schema.Literal<"session.permissions">;
     readonly durable: Schema.Struct<{
         readonly aggregateID: Schema.String;
         readonly seq: Schema.brand<Schema.Int, "Event.Seq">;
@@ -9320,7 +9320,7 @@ export declare const OpenCodeEvent: Schema.Union<readonly [Schema.Struct<{
         };
     }>;
 }> & {
-    type: "session.permissions.updated";
+    type: "session.permissions";
     durability: "durable";
     durable: {
         readonly version: number;

package/dist/groups/permission.d.ts

@@ -157,15 +157,4 @@ export declare const makePermissionGroup: <LocationId extends HttpApiMiddleware.
 }>>, never, Schema.toCodecJson<Schema.Struct<{
     readonly decision: Schema.Literals<readonly ["once", "always", "reject"]>;
     readonly message: Schema.optional<Schema.String>;
-}>>, never, Schema.toCodecJson<HttpApiSchema.NoContent>, Schema.toCodecJson<typeof SessionNotFoundError | typeof PermissionNotFoundError>, SessionLocationId, HttpApiMiddleware.Requires<SessionLocationId>> | HttpApiEndpoint.HttpApiEndpoint<"session.permission.rules", "PUT", "/api/session/:sessionID/permission/rules", Schema.toCodecStringTree<Schema.Struct<{
-    sessionID: Schema.brand<Schema.String, "SessionID"> & {
-        create: () => string & import("effect/Brand").Brand<"SessionID">;
-        descending: (id?: string) => string & import("effect/Brand").Brand<"SessionID">;
-    };
-}>>, never, Schema.toCodecJson<Schema.Struct<{
-    readonly permissions: Schema.$Array<Schema.Struct<{
-        readonly action: Schema.String;
-        readonly resource: Schema.String;
-        readonly effect: Schema.Literals<readonly ["allow", "deny", "ask"]>;
-    }>>;
-}>>, never, Schema.toCodecJson<HttpApiSchema.NoContent>, Schema.toCodecJson<typeof SessionNotFoundError>, SessionLocationId, HttpApiMiddleware.Requires<SessionLocationId>>, false>;
+}>>, never, Schema.toCodecJson<HttpApiSchema.NoContent>, Schema.toCodecJson<typeof SessionNotFoundError | typeof PermissionNotFoundError>, SessionLocationId, HttpApiMiddleware.Requires<SessionLocationId>>, false>;

package/dist/groups/permission.js

@@ -93,17 +93,5 @@ export const makePermissionGroup = (locationMiddleware, sessionLocationMiddlewar
     identifier: "session.permission.reply",
     summary: "Reply to pending permission request",
     description: "Respond to a pending permission request owned by a session.",
-})))
-    .add(HttpApiEndpoint.put("session.permission.rules", "/api/session/:sessionID/permission/rules", {
-    params: { sessionID: Session.ID },
-    payload: Schema.Struct({ permissions: Permission.Ruleset }),
-    success: HttpApiSchema.NoContent,
-    error: SessionNotFoundError,
-})
-    .middleware(sessionLocationMiddleware)
-    .annotateMerge(OpenApi.annotations({
-    identifier: "session.permission.rules",
-    summary: "Replace session permission rules",
-    description: "Replace the session-scoped permission rules. Rules are evaluated after the agent's rules, and the last matching rule wins.",
 })))
     .annotateMerge(OpenApi.annotations({ title: "permission", description: "Experimental permission routes." }));

package/dist/groups/session.d.ts

@@ -3016,13 +3016,18 @@ export declare const makeSessionGroup: <I extends HttpApiMiddleware.AnyId, S, Fo
             readonly variant?: (string & import("effect/Brand").Brand<"Model.VariantID">) | undefined;
         };
     };
-}>>, never, Schema.toCodecJson<HttpApiSchema.NoContent>, Schema.toCodecJson<typeof SessionNotFoundError>, I, HttpApiMiddleware.Requires<I>> | HttpApiEndpoint.HttpApiEndpoint<"session.rename", "PATCH", "/api/session/:sessionID", Schema.toCodecStringTree<Schema.Struct<{
+}>>, never, Schema.toCodecJson<HttpApiSchema.NoContent>, Schema.toCodecJson<typeof SessionNotFoundError>, I, HttpApiMiddleware.Requires<I>> | HttpApiEndpoint.HttpApiEndpoint<"session.update", "PATCH", "/api/session/:sessionID", Schema.toCodecStringTree<Schema.Struct<{
     sessionID: Schema.brand<Schema.String, "SessionID"> & {
         create: () => string & import("effect/Brand").Brand<"SessionID">;
         descending: (id?: string) => string & import("effect/Brand").Brand<"SessionID">;
     };
 }>>, never, Schema.toCodecJson<Schema.Struct<{
-    readonly title: Schema.String;
+    readonly title: Schema.optional<Schema.String>;
+    readonly permissions: Schema.optional<Schema.$Array<Schema.Struct<{
+        readonly action: Schema.String;
+        readonly resource: Schema.String;
+        readonly effect: Schema.Literals<readonly ["allow", "deny", "ask"]>;
+    }>>>;
 }>>, never, Schema.toCodecJson<HttpApiSchema.NoContent>, Schema.toCodecJson<typeof SessionNotFoundError>, I, HttpApiMiddleware.Requires<I>> | HttpApiEndpoint.HttpApiEndpoint<"session.move", "POST", "/api/session/:sessionID/move", Schema.toCodecStringTree<Schema.Struct<{
     sessionID: Schema.brand<Schema.String, "SessionID"> & {
         create: () => string & import("effect/Brand").Brand<"SessionID">;
@@ -5098,7 +5103,7 @@ export declare const makeSessionGroup: <I extends HttpApiMiddleware.AnyId, S, Fo
     };
     readonly created: Schema.Finite;
     readonly metadata: Schema.decodeTo<Schema.optional<Schema.toType<Schema.$Record<Schema.String, Schema.Unknown>>>, Schema.optionalKey<Schema.$Record<Schema.String, Schema.Unknown>>, never, never>;
-    readonly type: Schema.Literal<"session.permissions.updated">;
+    readonly type: Schema.Literal<"session.permissions">;
     readonly durable: Schema.Struct<{
         readonly aggregateID: Schema.String;
         readonly seq: Schema.brand<Schema.Int, "Event.Seq">;
@@ -5135,7 +5140,7 @@ export declare const makeSessionGroup: <I extends HttpApiMiddleware.AnyId, S, Fo
         };
     }>;
 }> & {
-    type: "session.permissions.updated";
+    type: "session.permissions";
     durability: "durable";
     durable: {
         readonly version: number;
@@ -8687,7 +8692,7 @@ export declare const makeSessionGroup: <I extends HttpApiMiddleware.AnyId, S, Fo
         readonly seq: number & import("effect/Brand").Brand<"Event.Seq">;
         readonly version: number & import("effect/Brand").Brand<"Event.Version">;
     };
-    readonly type: "session.permissions.updated";
+    readonly type: "session.permissions";
     readonly created: number;
     readonly location?: {
         readonly directory: string & import("effect/Brand").Brand<"AbsolutePath">;

package/dist/groups/session.js

@@ -249,17 +249,20 @@ export const makeSessionGroup = (sessionLocationMiddleware, formLocationMiddlewa
     summary: "Switch session model",
     description: "Switch the model used by subsequent provider turns.",
 })))
-    .add(HttpApiEndpoint.patch("session.rename", "/api/session/:sessionID", {
+    .add(HttpApiEndpoint.patch("session.update", "/api/session/:sessionID", {
     params: { sessionID: Session.ID },
-    payload: Schema.Struct({ title: Schema.String }),
+    payload: Schema.Struct({
+        title: Schema.String.pipe(Schema.optional),
+        permissions: Permission.Ruleset.pipe(Schema.optional),
+    }),
     success: HttpApiSchema.NoContent,
     error: SessionNotFoundError,
 })
     .middleware(sessionLocationMiddleware)
     .annotateMerge(OpenApi.annotations({
-    identifier: "session.rename",
-    summary: "Rename session",
-    description: "Update the session title.",
+    identifier: "session.update",
+    summary: "Update session",
+    description: "Update mutable session properties.",
 })))
     .add(HttpApiEndpoint.post("session.move", "/api/session/:sessionID/move", {
     params: { sessionID: Session.ID },

package/package.json

@@ -1,7 +1,7 @@
 {
   "$schema": "https://json.schemastore.org/package.json",
   "name": "@opencode/protocol",
-  "version": "0.0.0-dev-19656",
+  "version": "0.0.0-dev-19658",
   "type": "module",
   "license": "MIT",
   "repository": {
@@ -32,7 +32,7 @@
     "typecheck": "tsgo --noEmit"
   },
   "dependencies": {
-    "@opencode/schema": "0.0.0-dev-19656",
+    "@opencode/schema": "0.0.0-dev-19658",
     "effect": "4.0.0-rc.112"
   },
   "devDependencies": {