@opencode/server 0.0.0-dev-19448 → 0.0.0-dev-19449

package/dist/api.d.ts

@@ -305,6 +305,15 @@ export declare const Api: import("@opencode/protocol/api").Api<LocationMiddlewar
             };
         }>, never, never>;
         readonly metadata: import("effect/Schema").decodeTo<import("effect/Schema").optional<import("effect/Schema").toType<import("effect/Schema").$Record<import("effect/Schema").String, import("effect/Schema").Codec<import("effect/Schema").Json, import("effect/Schema").Json, never, never>>>>, import("effect/Schema").optionalKey<import("effect/Schema").$Record<import("effect/Schema").String, import("effect/Schema").Codec<import("effect/Schema").Json, import("effect/Schema").Json, never, never>>>, never, never>;
+        readonly permissions: import("effect/Schema").decodeTo<import("effect/Schema").optional<import("effect/Schema").toType<import("effect/Schema").$Array<import("effect/Schema").Struct<{
+            readonly action: import("effect/Schema").String;
+            readonly resource: import("effect/Schema").String;
+            readonly effect: import("effect/Schema").Literals<readonly ["allow", "deny", "ask"]>;
+        }>>>>, import("effect/Schema").optionalKey<import("effect/Schema").$Array<import("effect/Schema").Struct<{
+            readonly action: import("effect/Schema").String;
+            readonly resource: import("effect/Schema").String;
+            readonly effect: import("effect/Schema").Literals<readonly ["allow", "deny", "ask"]>;
+        }>>>, never, never>;
         readonly version: import("effect/Schema").String;
         readonly sessionID: import("effect/Schema").brand<import("effect/Schema").String, "SessionID"> & {
             create: () => string & import("effect/Brand").Brand<"SessionID">;
@@ -389,6 +398,15 @@ export declare const Api: import("@opencode/protocol/api").Api<LocationMiddlewar
             };
         }>, never, never>;
         readonly metadata: import("effect/Schema").decodeTo<import("effect/Schema").optional<import("effect/Schema").toType<import("effect/Schema").$Record<import("effect/Schema").String, import("effect/Schema").Codec<import("effect/Schema").Json, import("effect/Schema").Json, never, never>>>>, import("effect/Schema").optionalKey<import("effect/Schema").$Record<import("effect/Schema").String, import("effect/Schema").Codec<import("effect/Schema").Json, import("effect/Schema").Json, never, never>>>, never, never>;
+        readonly permissions: import("effect/Schema").decodeTo<import("effect/Schema").optional<import("effect/Schema").toType<import("effect/Schema").$Array<import("effect/Schema").Struct<{
+            readonly action: import("effect/Schema").String;
+            readonly resource: import("effect/Schema").String;
+            readonly effect: import("effect/Schema").Literals<readonly ["allow", "deny", "ask"]>;
+        }>>>>, import("effect/Schema").optionalKey<import("effect/Schema").$Array<import("effect/Schema").Struct<{
+            readonly action: import("effect/Schema").String;
+            readonly resource: import("effect/Schema").String;
+            readonly effect: import("effect/Schema").Literals<readonly ["allow", "deny", "ask"]>;
+        }>>>, never, never>;
         readonly version: import("effect/Schema").String;
         readonly sessionID: import("effect/Schema").brand<import("effect/Schema").String, "SessionID"> & {
             create: () => string & import("effect/Brand").Brand<"SessionID">;
@@ -765,6 +783,66 @@ export declare const Api: import("@opencode/protocol/api").Api<LocationMiddlewar
             descending: (id?: string) => string & import("effect/Brand").Brand<"SessionID">;
         };
     }>;
+}, import("effect/Schema").Struct<{
+    readonly id: import("effect/Schema").brand<import("effect/Schema").String, "Event.ID"> & {
+        create: () => string & import("effect/Brand").Brand<"Event.ID">;
+    };
+    readonly created: import("effect/Schema").Finite;
+    readonly metadata: import("effect/Schema").decodeTo<import("effect/Schema").optional<import("effect/Schema").toType<import("effect/Schema").$Record<import("effect/Schema").String, import("effect/Schema").Unknown>>>, import("effect/Schema").optionalKey<import("effect/Schema").$Record<import("effect/Schema").String, import("effect/Schema").Unknown>>, never, never>;
+    readonly type: import("effect/Schema").Literal<"session.permissions.updated">;
+    readonly durable: import("effect/Schema").Struct<{
+        readonly aggregateID: import("effect/Schema").String;
+        readonly seq: import("effect/Schema").brand<import("effect/Schema").Int, "Event.Seq">;
+        readonly version: import("effect/Schema").decodeTo<import("effect/Schema").toType<import("effect/Schema").brand<import("effect/Schema").Int, "Event.Version">>, import("effect/Schema").Literal<number>, never, never>;
+    }>;
+    readonly location: import("effect/Schema").decodeTo<import("effect/Schema").optional<import("effect/Schema").toType<import("effect/Schema").Struct<{
+        readonly directory: import("effect/Schema").brand<import("effect/Schema").String, "AbsolutePath">;
+        readonly workspaceID: import("effect/Schema").decodeTo<import("effect/Schema").optional<import("effect/Schema").toType<import("effect/Schema").brand<import("effect/Schema").String, "Workspace.ID"> & {
+            ascending: (id?: string) => string & import("effect/Brand").Brand<"Workspace.ID">;
+            create: () => string & import("effect/Brand").Brand<"Workspace.ID">;
+        }>>, import("effect/Schema").optionalKey<import("effect/Schema").brand<import("effect/Schema").String, "Workspace.ID"> & {
+            ascending: (id?: string) => string & import("effect/Brand").Brand<"Workspace.ID">;
+            create: () => string & import("effect/Brand").Brand<"Workspace.ID">;
+        }>, never, never>;
+    }>>>, import("effect/Schema").optionalKey<import("effect/Schema").Struct<{
+        readonly directory: import("effect/Schema").brand<import("effect/Schema").String, "AbsolutePath">;
+        readonly workspaceID: import("effect/Schema").decodeTo<import("effect/Schema").optional<import("effect/Schema").toType<import("effect/Schema").brand<import("effect/Schema").String, "Workspace.ID"> & {
+            ascending: (id?: string) => string & import("effect/Brand").Brand<"Workspace.ID">;
+            create: () => string & import("effect/Brand").Brand<"Workspace.ID">;
+        }>>, import("effect/Schema").optionalKey<import("effect/Schema").brand<import("effect/Schema").String, "Workspace.ID"> & {
+            ascending: (id?: string) => string & import("effect/Brand").Brand<"Workspace.ID">;
+            create: () => string & import("effect/Brand").Brand<"Workspace.ID">;
+        }>, never, never>;
+    }>>, never, never>;
+    readonly data: import("effect/Schema").Struct<{
+        readonly permissions: import("effect/Schema").$Array<import("effect/Schema").Struct<{
+            readonly action: import("effect/Schema").String;
+            readonly resource: import("effect/Schema").String;
+            readonly effect: import("effect/Schema").Literals<readonly ["allow", "deny", "ask"]>;
+        }>>;
+        readonly sessionID: import("effect/Schema").brand<import("effect/Schema").String, "SessionID"> & {
+            create: () => string & import("effect/Brand").Brand<"SessionID">;
+            descending: (id?: string) => string & import("effect/Brand").Brand<"SessionID">;
+        };
+    }>;
+}> & {
+    type: "session.permissions.updated";
+    durability: "durable";
+    durable: {
+        readonly version: number;
+        readonly aggregate: string;
+    };
+    data: import("effect/Schema").Struct<{
+        readonly permissions: import("effect/Schema").$Array<import("effect/Schema").Struct<{
+            readonly action: import("effect/Schema").String;
+            readonly resource: import("effect/Schema").String;
+            readonly effect: import("effect/Schema").Literals<readonly ["allow", "deny", "ask"]>;
+        }>>;
+        readonly sessionID: import("effect/Schema").brand<import("effect/Schema").String, "SessionID"> & {
+            create: () => string & import("effect/Brand").Brand<"SessionID">;
+            descending: (id?: string) => string & import("effect/Brand").Brand<"SessionID">;
+        };
+    }>;
 }, import("effect/Schema").Struct<{
     readonly id: import("effect/Schema").brand<import("effect/Schema").String, "Event.ID"> & {
         create: () => string & import("effect/Brand").Brand<"Event.ID">;
@@ -6554,6 +6632,11 @@ export declare const Api: import("@opencode/protocol/api").Api<LocationMiddlewar
             readonly providerID: string & import("effect/Brand").Brand<"Provider.ID">;
             readonly variant?: (string & import("effect/Brand").Brand<"Model.VariantID">) | undefined;
         } | undefined;
+        readonly permissions?: readonly {
+            readonly action: string;
+            readonly resource: string;
+            readonly effect: "allow" | "deny" | "ask";
+        }[] | undefined;
         readonly agent?: (string & import("effect/Brand").Brand<"Agent.ID">) | undefined;
         readonly subpath?: (string & import("effect/Brand").Brand<"RelativePath">) | undefined;
         readonly parentID?: (string & import("effect/Brand").Brand<"SessionID">) | undefined;
@@ -6667,6 +6750,30 @@ export declare const Api: import("@opencode/protocol/api").Api<LocationMiddlewar
     readonly metadata?: {
         readonly [x: string]: unknown;
     } | undefined;
+} | {
+    readonly id: string & import("effect/Brand").Brand<"Event.ID">;
+    readonly data: {
+        readonly permissions: readonly {
+            readonly action: string;
+            readonly resource: string;
+            readonly effect: "allow" | "deny" | "ask";
+        }[];
+        readonly sessionID: string & import("effect/Brand").Brand<"SessionID">;
+    };
+    readonly durable: {
+        readonly aggregateID: string;
+        readonly seq: number & import("effect/Brand").Brand<"Event.Seq">;
+        readonly version: number & import("effect/Brand").Brand<"Event.Version">;
+    };
+    readonly type: "session.permissions.updated";
+    readonly created: number;
+    readonly location?: {
+        readonly directory: string & import("effect/Brand").Brand<"AbsolutePath">;
+        readonly workspaceID?: (string & import("effect/Brand").Brand<"Workspace.ID">) | undefined;
+    } | undefined;
+    readonly metadata?: {
+        readonly [x: string]: unknown;
+    } | undefined;
 } | {
     readonly id: string & import("effect/Brand").Brand<"Event.ID">;
     readonly data: {

package/dist/handlers/permission.d.ts

@@ -1,4 +1,4 @@
 import { Instance } from "@opencode/core/instance/service";
 import { PermissionSaved } from "@opencode/core/permission/saved";
 import { Session } from "@opencode/core/session";
-export declare const PermissionHandler: import("effect/Layer").Layer<import("effect/unstable/httpapi/HttpApiGroup").Service<"server", "server.permission">, never, Session.Service | Instance.Service | import("../middleware/session-location").SessionLocationMiddleware | (import("@opencode/protocol/middleware/schema-error").SchemaErrorMiddleware | import("@opencode/protocol/middleware/authorization").Authorization | import("../location").LocationMiddleware | import("effect/unstable/http/HttpRouter").Request<"Requires", PermissionSaved.Service>)>;
+export declare const PermissionHandler: import("effect/Layer").Layer<import("effect/unstable/httpapi/HttpApiGroup").Service<"server", "server.permission">, never, import("@opencode/protocol/middleware/schema-error").SchemaErrorMiddleware | import("@opencode/protocol/middleware/authorization").Authorization | Session.Service | Instance.Service | import("../location").LocationMiddleware | import("../middleware/session-location").SessionLocationMiddleware | import("effect/unstable/http/HttpRouter").Request<"Requires", PermissionSaved.Service>>;

package/dist/handlers/permission.js

@@ -43,6 +43,9 @@ export const PermissionHandler = HttpApiBuilder.group(Api, "server.permission",
   })).handle("session.permission.reply", Effect.fn(function* (ctx) {
     yield* (yield* requireOwnedRequest(ctx.params.sessionID, ctx.params.requestID)).permission.reply({ requestID: ctx.params.requestID, reply: ctx.payload.reply, message: ctx.payload.message }).pipe(Effect.catchTag("Permission.NotFoundError", () => missingRequest(ctx.params.requestID)));
     return HttpApiSchema.NoContent.make();
+  })).handle("session.permission.rules", Effect.fn(function* (ctx) {
+    yield* sessions.setPermissions({ sessionID: ctx.params.sessionID, permissions: ctx.payload.permissions }).pipe(Effect.catchTag("Session.NotFoundError", missingSession));
+    return HttpApiSchema.NoContent.make();
   })).handle("permission.saved.list", Effect.fn(function* (ctx) {
     const location = yield* Location.Service;
     return {

package/dist/handlers/session.js

@@ -77,6 +77,7 @@ export const SessionHandler = HttpApiBuilder.group(Api, "server.session", (handl
         agent: ctx.payload.agent,
         model: ctx.payload.model,
         metadata: ctx.payload.metadata,
+        permissions: ctx.payload.permissions,
         location: ctx.payload.location ?? { directory: AbsolutePath.make(process.cwd()) }
       }).pipe(Effect.orDie)
     };

package/package.json

@@ -1,7 +1,7 @@
 {
   "$schema": "https://json.schemastore.org/package.json",
   "name": "@opencode/server",
-  "version": "0.0.0-dev-19448",
+  "version": "0.0.0-dev-19449",
   "type": "module",
   "license": "MIT",
   "repository": {
@@ -30,17 +30,17 @@
   "dependencies": {
     "@effect/platform-node": "4.0.0-rc.112",
     "@effect/platform-node-shared": "4.0.0-rc.112",
-    "@opencode/core": "0.0.0-dev-19448",
-    "@opencode/protocol": "0.0.0-dev-19448",
-    "@opencode/schema": "0.0.0-dev-19448",
-    "@opencode/simulation": "0.0.0-dev-19448",
-    "@opencode/util": "0.0.0-dev-19448",
+    "@opencode/core": "0.0.0-dev-19449",
+    "@opencode/protocol": "0.0.0-dev-19449",
+    "@opencode/schema": "0.0.0-dev-19449",
+    "@opencode/simulation": "0.0.0-dev-19449",
+    "@opencode/util": "0.0.0-dev-19449",
     "drizzle-orm": "1.0.0-rc.5-169397b",
     "effect": "4.0.0-rc.112"
   },
   "devDependencies": {
-    "@opencode/client": "0.0.0-dev-19448",
-    "@opencode/plugin": "0.0.0-dev-19448",
+    "@opencode/client": "0.0.0-dev-19449",
+    "@opencode/plugin": "0.0.0-dev-19449",
     "@tsconfig/bun": "1.0.9",
     "@types/bun": "1.4.0",
     "@typescript/native-preview": "7.0.0-dev.20251207.1"