core: permission config schema now provides full IntelliSense for all tool permission keys

The permission configuration previously used a generic record type that didn't offer editor completions. Updated the schema to explicitly list all tool permission keys (read, edit, glob, grep, list, bash, task, external_directory, lsp, skill, todowrite, question, webfetch, websearch, codesearch, doom_loop) with proper types, enabling autocomplete when editing permission files.

2 files changed, 108 insertions, 22 deletions

diff --git a/packages/sdk/js/src/v2/gen/types.gen.ts b/packages/sdk/js/src/v2/gen/types.gen.ts
index 51a79d99d..0ad88bb50 100644
--- a/packages/sdk/js/src/v2/gen/types.gen.ts
+++ b/packages/sdk/js/src/v2/gen/types.gen.ts
@@ -1198,15 +1198,35 @@ export type ServerConfig = {
 
 export type PermissionActionConfig = "ask" | "allow" | "deny"
 
+export type PermissionObjectConfig = {
+  [key: string]: PermissionActionConfig
+}
+
+export type PermissionRuleConfig = PermissionActionConfig | PermissionObjectConfig
+
 export type PermissionConfig =
   | PermissionActionConfig
-  | {
-      [key: string]:
-        | PermissionActionConfig
-        | {
-            [key: string]: PermissionActionConfig
-          }
-    }
+  | ({
+      [key: string]: PermissionRuleConfig
+    } & {
+      read?: PermissionRuleConfig
+      edit?: PermissionRuleConfig
+      glob?: PermissionRuleConfig
+      grep?: PermissionRuleConfig
+      list?: PermissionRuleConfig
+      bash?: PermissionRuleConfig
+      task?: PermissionRuleConfig
+      external_directory?: PermissionRuleConfig
+      todowrite?: PermissionActionConfig
+      question?: PermissionActionConfig
+      webfetch?: PermissionActionConfig
+      websearch?: PermissionActionConfig
+      codesearch?: PermissionActionConfig
+      lsp?: PermissionRuleConfig
+      doom_loop?: PermissionActionConfig
+      skill?: PermissionRuleConfig
+      [key: string]: PermissionRuleConfig | PermissionActionConfig | undefined
+    })
 
 export type AgentConfig = {
   model?: string
diff --git a/packages/sdk/openapi.json b/packages/sdk/openapi.json
index cbb9aaecc..7be58195b 100644
--- a/packages/sdk/openapi.json
+++ b/packages/sdk/openapi.json
@@ -10926,32 +10926,98 @@
         "type": "string",
         "enum": ["ask", "allow", "deny"]
       },
+      "PermissionObjectConfig": {
+        "type": "object",
+        "propertyNames": {
+          "type": "string"
+        },
+        "additionalProperties": {
+          "$ref": "#/components/schemas/PermissionActionConfig"
+        }
+      },
+      "PermissionRuleConfig": {
+        "anyOf": [
+          {
+            "$ref": "#/components/schemas/PermissionActionConfig"
+          },
+          {
+            "$ref": "#/components/schemas/PermissionObjectConfig"
+          }
+        ]
+      },
       "PermissionConfig": {
         "anyOf": [
           {
             "$ref": "#/components/schemas/PermissionActionConfig"
           },
           {
-            "type": "object",
-            "propertyNames": {
-              "type": "string"
-            },
-            "additionalProperties": {
-              "anyOf": [
-                {
-                  "$ref": "#/components/schemas/PermissionActionConfig"
+            "allOf": [
+              {
+                "type": "object",
+                "propertyNames": {
+                  "type": "string"
                 },
-                {
-                  "type": "object",
-                  "propertyNames": {
-                    "type": "string"
+                "additionalProperties": {
+                  "$ref": "#/components/schemas/PermissionRuleConfig"
+                }
+              },
+              {
+                "type": "object",
+                "properties": {
+                  "read": {
+                    "$ref": "#/components/schemas/PermissionRuleConfig"
                   },
-                  "additionalProperties": {
+                  "edit": {
+                    "$ref": "#/components/schemas/PermissionRuleConfig"
+                  },
+                  "glob": {
+                    "$ref": "#/components/schemas/PermissionRuleConfig"
+                  },
+                  "grep": {
+                    "$ref": "#/components/schemas/PermissionRuleConfig"
+                  },
+                  "list": {
+                    "$ref": "#/components/schemas/PermissionRuleConfig"
+                  },
+                  "bash": {
+                    "$ref": "#/components/schemas/PermissionRuleConfig"
+                  },
+                  "task": {
+                    "$ref": "#/components/schemas/PermissionRuleConfig"
+                  },
+                  "external_directory": {
+                    "$ref": "#/components/schemas/PermissionRuleConfig"
+                  },
+                  "todowrite": {
+                    "$ref": "#/components/schemas/PermissionActionConfig"
+                  },
+                  "question": {
                     "$ref": "#/components/schemas/PermissionActionConfig"
+                  },
+                  "webfetch": {
+                    "$ref": "#/components/schemas/PermissionActionConfig"
+                  },
+                  "websearch": {
+                    "$ref": "#/components/schemas/PermissionActionConfig"
+                  },
+                  "codesearch": {
+                    "$ref": "#/components/schemas/PermissionActionConfig"
+                  },
+                  "lsp": {
+                    "$ref": "#/components/schemas/PermissionRuleConfig"
+                  },
+                  "doom_loop": {
+                    "$ref": "#/components/schemas/PermissionActionConfig"
+                  },
+                  "skill": {
+                    "$ref": "#/components/schemas/PermissionRuleConfig"
                   }
+                },
+                "additionalProperties": {
+                  "$ref": "#/components/schemas/PermissionRuleConfig"
                 }
-              ]
-            }
+              }
+            ]
           }
         ]
       },