[PR #6612] Permission revamp docs + new API endpoints #12003

Closed
opened 2026-02-16 18:16:56 -05:00 by yindo · 0 comments
Owner

Original Pull Request: https://github.com/anomalyco/opencode/pull/6612

State: closed
Merged: No


Findings (new user-facing changes)

  • 351ddeed9 “Permission rework (#6319)” introduces a revamped permission system that now gates many more tools (ex: read, list, glob, grep, task, codesearch, websearch, todowrite, todoread) and changes how “always” rules work for bash (command-prefix/arity based).
  • It also adds new server/API surface area for permissions: GET /permission and POST /permission/:requestID/reply, while keeping the old session-scoped permission endpoint as deprecated.

Other listed commits looked like tests/bugfixes/internal changes or already-updated docs (5f2be55e5).

Docs Updated

  • Updated permission docs to cover the expanded permission keys + updated bash “always” semantics: packages/web/src/content/docs/permissions.mdx:6
  • Updated server API docs to document the new permission endpoints and mark the old one deprecated: packages/web/src/content/docs/server.mdx:159
  • Updated JS SDK docs to add client.permission.* methods and remove the old session-scoped permission method from Sessions: packages/web/src/content/docs/sdk.mdx:252
  • Updated plugin event list from permission.updatedpermission.asked: packages/web/src/content/docs/plugins.mdx:171
  • Updated agent permissions docs to reflect that permissions apply to more than edit/bash/webfetch: packages/web/src/content/docs/agents.mdx:385

Validation

  • packages/web docs site builds successfully via bun run build (warnings only, no failures).

Triggered by scheduled workflow

New%20session%20-%202026-01-02T00%3A26%3A10.665Z
opencode session  |  github run

**Original Pull Request:** https://github.com/anomalyco/opencode/pull/6612 **State:** closed **Merged:** No --- **Findings (new user-facing changes)** - `351ddeed9` “Permission rework (#6319)” introduces a revamped permission system that now gates many more tools (ex: `read`, `list`, `glob`, `grep`, `task`, `codesearch`, `websearch`, `todowrite`, `todoread`) and changes how “always” rules work for `bash` (command-prefix/arity based). - It also adds new server/API surface area for permissions: `GET /permission` and `POST /permission/:requestID/reply`, while keeping the old session-scoped permission endpoint as deprecated. Other listed commits looked like tests/bugfixes/internal changes or already-updated docs (`5f2be55e5`). **Docs Updated** - Updated permission docs to cover the expanded permission keys + updated bash “always” semantics: `packages/web/src/content/docs/permissions.mdx:6` - Updated server API docs to document the new permission endpoints and mark the old one deprecated: `packages/web/src/content/docs/server.mdx:159` - Updated JS SDK docs to add `client.permission.*` methods and remove the old session-scoped permission method from Sessions: `packages/web/src/content/docs/sdk.mdx:252` - Updated plugin event list from `permission.updated` → `permission.asked`: `packages/web/src/content/docs/plugins.mdx:171` - Updated agent permissions docs to reflect that permissions apply to more than `edit`/`bash`/`webfetch`: `packages/web/src/content/docs/agents.mdx:385` **Validation** - `packages/web` docs site builds successfully via `bun run build` (warnings only, no failures). Triggered by scheduled workflow <a href="https://opencode.ai/s/iOKSoNUf"><img width="200" alt="New%20session%20-%202026-01-02T00%3A26%3A10.665Z" src="https://social-cards.sst.dev/opencode-share/TmV3IHNlc3Npb24gLSAyMDI2LTAxLTAyVDAwOjI2OjEwLjY2NVo=.png?model=opencode/gpt-5.2&version=1.0.223&id=iOKSoNUf" /></a> [opencode session](https://opencode.ai/s/iOKSoNUf)&nbsp;&nbsp;|&nbsp;&nbsp;[github run](/sst/opencode/actions/runs/20648063021)
yindo added the pull-request label 2026-02-16 18:16:56 -05:00
yindo closed this issue 2026-02-16 18:16:56 -05:00
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: anomalyco/opencode#12003