| import { Location } from "@opencode-ai/core/location" |
| import { PermissionV2 } from "@opencode-ai/core/permission" |
| import { PermissionSaved } from "@opencode-ai/core/permission/saved" |
| import { Effect } from "effect" |
| import { HttpApiBuilder, HttpApiSchema } from "effect/unstable/httpapi" |
| import { Api } from "../api" |
| import { PermissionNotFoundError, SessionNotFoundError } from "@opencode-ai/protocol/errors" |
| import { response } from "../location" |
|
|
| function missingRequest(id: PermissionV2.ID) { |
| return new PermissionNotFoundError({ requestID: id, message: `Permission request not found: ${id}` }) |
| } |
|
|
| export const PermissionHandler = HttpApiBuilder.group(Api, "server.permission", (handlers) => |
| Effect.gen(function* () { |
| return handlers |
| .handle( |
| "permission.request.list", |
| Effect.fn(function* () { |
| return yield* response((yield* PermissionV2.Service).list()) |
| }), |
| ) |
| .handle( |
| "session.permission.create", |
| Effect.fn(function* (ctx) { |
| const permission = yield* PermissionV2.Service |
| return { |
| data: yield* permission |
| .ask({ |
| id: ctx.payload.id, |
| sessionID: ctx.params.sessionID, |
| action: ctx.payload.action, |
| resources: ctx.payload.resources, |
| save: ctx.payload.save, |
| metadata: ctx.payload.metadata, |
| source: ctx.payload.source, |
| agent: ctx.payload.agent, |
| }) |
| .pipe( |
| Effect.catchTag( |
| "Session.NotFoundError", |
| (error) => |
| new SessionNotFoundError({ |
| sessionID: error.sessionID, |
| message: `Session not found: ${error.sessionID}`, |
| }), |
| ), |
| ), |
| } |
| }), |
| ) |
| .handle( |
| "session.permission.list", |
| Effect.fn(function* (ctx) { |
| const permission = yield* PermissionV2.Service |
| return { data: yield* permission.forSession(ctx.params.sessionID) } |
| }), |
| ) |
| .handle( |
| "session.permission.get", |
| Effect.fn(function* (ctx) { |
| const request = yield* (yield* PermissionV2.Service).get(ctx.params.requestID) |
| if (!request || request.sessionID !== ctx.params.sessionID) return yield* missingRequest(ctx.params.requestID) |
| return { data: request } |
| }), |
| ) |
| .handle( |
| "session.permission.reply", |
| Effect.fn(function* (ctx) { |
| const permission = yield* PermissionV2.Service |
| const request = yield* permission.get(ctx.params.requestID) |
| if (!request || request.sessionID !== ctx.params.sessionID) return yield* missingRequest(ctx.params.requestID) |
| yield* permission |
| .reply({ requestID: ctx.params.requestID, reply: ctx.payload.reply, message: ctx.payload.message }) |
| .pipe(Effect.catchTag("PermissionV2.NotFoundError", () => missingRequest(ctx.params.requestID))) |
| return HttpApiSchema.NoContent.make() |
| }), |
| ) |
| .handle( |
| "permission.saved.list", |
| Effect.fn(function* (ctx) { |
| const location = yield* Location.Service |
| return { |
| data: yield* (yield* PermissionSaved.Service).list({ |
| projectID: ctx.query.projectID ?? location.project.id, |
| }), |
| } |
| }), |
| ) |
| .handle( |
| "permission.saved.remove", |
| Effect.fn(function* (ctx) { |
| yield* (yield* PermissionSaved.Service).remove(ctx.params.id) |
| return HttpApiSchema.NoContent.make() |
| }), |
| ) |
| }), |
| ) |
|
|
