af3016fe27
Forked from OpenCode v1.17.4 with multi-agent system: - 5 agents: aircoding, scheduler, worker, architect, reviewer - Deterministic DAG scheduling engine (coordinator_tick) - Tool whitelists as hard enforcement - AirCoding validation plugin - System prompt injection for routing - V1 requirements: C4 docs, ADR, AGENTS.md, debug-log.md - Design documents in docs/
87 lines
3.5 KiB
TypeScript
87 lines
3.5 KiB
TypeScript
import { PermissionV2 } from "@opencode-ai/core/permission"
|
|
import { Location } from "@opencode-ai/core/location"
|
|
import { PermissionSaved } from "@opencode-ai/core/permission/saved"
|
|
import { ProjectV2 } from "@opencode-ai/core/project"
|
|
import { SessionV2 } from "@opencode-ai/core/session"
|
|
import { Schema } from "effect"
|
|
import { HttpApiEndpoint, HttpApiGroup, HttpApiSchema, OpenApi } from "effect/unstable/httpapi"
|
|
import { PermissionNotFoundError, SessionNotFoundError } from "../errors"
|
|
import { SessionLocationMiddleware } from "../middleware/session-location"
|
|
import { LocationQuery, locationQueryOpenApi, LocationMiddleware } from "./location"
|
|
|
|
export const PermissionGroup = HttpApiGroup.make("server.permission")
|
|
.add(
|
|
HttpApiEndpoint.get("permission.request.list", "/api/permission/request", {
|
|
query: LocationQuery,
|
|
success: Location.response(Schema.Array(PermissionV2.Request)),
|
|
})
|
|
.annotateMerge(locationQueryOpenApi)
|
|
.annotateMerge(
|
|
OpenApi.annotations({
|
|
identifier: "v2.permission.request.list",
|
|
summary: "List pending permission requests",
|
|
description: "Retrieve pending permission requests for a location.",
|
|
}),
|
|
),
|
|
)
|
|
.add(
|
|
HttpApiEndpoint.get("permission.saved.list", "/api/permission/saved", {
|
|
query: Schema.Struct({ projectID: ProjectV2.ID.pipe(Schema.optional) }),
|
|
success: Schema.Struct({ data: Schema.Array(PermissionSaved.Info) }),
|
|
}).annotateMerge(
|
|
OpenApi.annotations({
|
|
identifier: "v2.permission.saved.list",
|
|
summary: "List saved permissions",
|
|
description: "Retrieve saved permissions, optionally filtered by project.",
|
|
}),
|
|
),
|
|
)
|
|
.add(
|
|
HttpApiEndpoint.delete("permission.saved.remove", "/api/permission/saved/:id", {
|
|
params: { id: PermissionSaved.ID },
|
|
success: HttpApiSchema.NoContent,
|
|
}).annotateMerge(
|
|
OpenApi.annotations({
|
|
identifier: "v2.permission.saved.remove",
|
|
summary: "Remove saved permission",
|
|
description: "Remove a saved permission by ID.",
|
|
}),
|
|
),
|
|
)
|
|
.middleware(LocationMiddleware)
|
|
.add(
|
|
HttpApiEndpoint.get("session.permission.list", "/api/session/:sessionID/permission", {
|
|
params: { sessionID: SessionV2.ID },
|
|
success: Schema.Struct({ data: Schema.Array(PermissionV2.Request) }),
|
|
error: SessionNotFoundError,
|
|
})
|
|
.middleware(SessionLocationMiddleware)
|
|
.annotateMerge(
|
|
OpenApi.annotations({
|
|
identifier: "v2.session.permission.list",
|
|
summary: "List session permission requests",
|
|
description: "Retrieve pending permission requests owned by a session.",
|
|
}),
|
|
),
|
|
)
|
|
.add(
|
|
HttpApiEndpoint.post("session.permission.reply", "/api/session/:sessionID/permission/:requestID/reply", {
|
|
params: { sessionID: SessionV2.ID, requestID: PermissionV2.ID },
|
|
payload: Schema.Struct({
|
|
reply: PermissionV2.Reply,
|
|
message: Schema.String.pipe(Schema.optional),
|
|
}),
|
|
success: HttpApiSchema.NoContent,
|
|
error: [SessionNotFoundError, PermissionNotFoundError],
|
|
})
|
|
.middleware(SessionLocationMiddleware)
|
|
.annotateMerge(
|
|
OpenApi.annotations({
|
|
identifier: "v2.session.permission.reply",
|
|
summary: "Reply to pending permission request",
|
|
description: "Respond to a pending permission request owned by a session.",
|
|
}),
|
|
),
|
|
)
|
|
.annotateMerge(OpenApi.annotations({ title: "permissions", description: "Experimental permission routes." }))
|