Make Rust allowlist codegen reproducible

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

Author: jpbufe3

rust/src/wire.rs

@@ -52,7 +52,7 @@ pub(crate) struct SessionCreateWire {
     pub session_id: Option<SessionId>,
     #[serde(skip_serializing_if = "Option::is_none")]
     pub model: Option<String>,
-    #[serde(skip_serializing_if = "Option::is_none")]
+    #[serde(rename = "allowedModels", skip_serializing_if = "Option::is_none")]
     pub allowed_models: Option<Vec<String>>,
     #[serde(skip_serializing_if = "Option::is_none")]
     pub client_name: Option<String>,
@@ -212,7 +212,7 @@ pub(crate) struct SessionResumeWire {
     pub session_id: SessionId,
     #[serde(skip_serializing_if = "Option::is_none")]
     pub model: Option<String>,
-    #[serde(skip_serializing_if = "Option::is_none")]
+    #[serde(rename = "allowedModels", skip_serializing_if = "Option::is_none")]
     pub allowed_models: Option<Vec<String>>,
     #[serde(skip_serializing_if = "Option::is_none")]
     pub client_name: Option<String>,

scripts/codegen/rust.ts

@@ -69,6 +69,114 @@ const EXTERNAL_SCHEMA_RUST_TYPE_MODULE: Record<string, Record<string, string>> =
 	},
 };
 
+/**
+ * Add the live model-allowlist RPC until the pinned CLI schema includes it.
+ *
+ * This is Rust-only because the compatibility surface is currently exposed
+ * only by the Rust SDK.
+ */
+function addModelSetAllowedModelsToApiSchema(schema: ApiSchema): ApiSchema {
+	const session = (schema.session ??= {});
+	const model = (session.model ??= {}) as Record<string, unknown>;
+	if (model.setAllowedModels !== undefined) return schema;
+
+	const definitions = (schema.definitions ??= {});
+	if (
+		definitions.ModelSetAllowedModelsRequest !== undefined ||
+		definitions.ModelSetAllowedModelsResult !== undefined
+	) {
+		throw new Error(
+			"Model allowlist schema definitions exist without session.model.setAllowedModels",
+		);
+	}
+
+	const allowedModelsProperty = {
+		anyOf: [
+			{
+				type: "array",
+				items: {
+					type: "string",
+				},
+			},
+			{
+				type: "null",
+			},
+		],
+		description: "Exact model IDs to permit, or null to clear the host restriction.",
+	};
+	const requestDescription =
+		"Host-supplied exact CAPI model IDs to allow for this running session. The runtime intersects the list with repository `.github/allowed_models.txt` policy. Omit or pass null to clear the host restriction; an explicit empty or disjoint list is rejected.";
+
+	definitions.ModelSetAllowedModelsRequest = {
+		type: "object",
+		properties: {
+			allowedModels: allowedModelsProperty,
+		},
+		additionalProperties: false,
+		description: requestDescription,
+		title: "ModelSetAllowedModelsRequest",
+		stability: "experimental",
+	} as JSONSchema7Definition;
+	definitions.ModelSetAllowedModelsResult = {
+		type: "object",
+		properties: {
+			allowedModels: {
+				type: "array",
+				items: {
+					type: "string",
+				},
+				description: "Normalized host allowlist. Omitted when the host restriction was cleared.",
+			},
+			effectiveAllowedModels: {
+				type: "array",
+				items: {
+					type: "string",
+				},
+				description:
+					"Effective exact IDs or repository policy patterns after applying the host restriction. Omitted by relay clients whose AHP host applies the policy asynchronously.",
+			},
+			fallbackModel: {
+				type: "string",
+				description: "Effective deterministic fallback model, when the policy defines one.",
+			},
+			modelId: {
+				type: "string",
+				description:
+					"Selected session model after reconciling a now-disallowed concrete selection.",
+			},
+		},
+		additionalProperties: false,
+		description: "The applied host allowlist and effective session model policy after intersection.",
+		title: "ModelSetAllowedModelsResult",
+	} as JSONSchema7Definition;
+	model.setAllowedModels = {
+		rpcMethod: "session.model.setAllowedModels",
+		description: "Replaces or clears the host-supplied model allowlist for a running session.",
+		params: {
+			type: "object",
+			properties: {
+				sessionId: {
+					type: "string",
+					description: "Target session identifier",
+				},
+				allowedModels: allowedModelsProperty,
+			},
+			required: ["sessionId"],
+			additionalProperties: false,
+			description: requestDescription,
+			title: "ModelSetAllowedModelsRequest",
+			stability: "experimental",
+		},
+		result: {
+			$ref: "#/definitions/ModelSetAllowedModelsResult",
+			description: "The applied host allowlist and effective session model policy after intersection.",
+		},
+		stability: "experimental",
+	};
+
+	return schema;
+}
+
 function rustDeprecatedAttributes(indent = ""): string[] {
 	return [`${indent}#[doc(hidden)]`, `${indent}#[deprecated]`];
 }
@@ -2219,8 +2327,10 @@ async function generate(): Promise<void> {
 	const sessionEventsRaw = normalizeSchemaBrandCasing(
 		JSON.parse(await fs.readFile(sessionEventsSchemaPath, "utf-8")),
 	);
-	const apiRaw = normalizeSchemaBrandCasing(
-		JSON.parse(await fs.readFile(apiSchemaPath, "utf-8")) as ApiSchema,
+	const apiRaw = addModelSetAllowedModelsToApiSchema(
+		normalizeSchemaBrandCasing(
+			JSON.parse(await fs.readFile(apiSchemaPath, "utf-8")) as ApiSchema,
+		),
 	);
 
 	const sessionEventsSchema = propagateInternalVisibility(