feat(api): add POST /session/:sessionID/todo endpoint for plugin todo management

packages/opencode/src/server/routes/session.ts

@@ -114,7 +114,7 @@ export const SessionRoutes = lazy(() =>
       validator(
         "param",
         z.object({
-          sessionID: Session.get.schema,
+          sessionID: SessionID.zod,
         }),
       ),
       async (c) => {
@@ -185,6 +185,38 @@ export const SessionRoutes = lazy(() =>
         return c.json(todos)
       },
     )
+    .post(
+      "/:sessionID/todo",
+      describeRoute({
+        summary: "Update session todos",
+        description: "Update the todo list for a specific session. This triggers a todo.updated event that refreshes the TUI sidebar.",
+        operationId: "session.todoUpdate",
+        responses: {
+          200: {
+            description: "Todos updated successfully",
+            content: {
+              "application/json": {
+                schema: resolver(Todo.Info.array()),
+              },
+            },
+          },
+          ...errors(400, 404),
+        },
+      }),
+      validator(
+        "param",
+        z.object({
+          sessionID: SessionID.zod,
+        }),
+      ),
+      validator("json", z.object({ todos: z.array(Todo.Info) })),
+      async (c) => {
+        const sessionID = c.req.valid("param").sessionID
+        const { todos } = c.req.valid("json")
+        await Todo.update({ sessionID, todos })
+        return c.json(todos)
+      },
+    )
     .post(
       "/",
       describeRoute({

packages/sdk/js/src/v2/gen/sdk.gen.ts

@@ -143,6 +143,8 @@ import type {
   SessionSummarizeResponses,
   SessionTodoErrors,
   SessionTodoResponses,
+  SessionTodoUpdateErrors,
+  SessionTodoUpdateResponses,
   SessionUnrevertErrors,
   SessionUnrevertResponses,
   SessionUnshareErrors,
@@ -151,6 +153,7 @@ import type {
   SessionUpdateResponses,
   SubtaskPartInput,
   TextPartInput,
+  Todo,
   ToolIdsErrors,
   ToolIdsResponses,
   ToolListErrors,
@@ -1527,6 +1530,45 @@ export class Session2 extends HeyApiClient {
     })
   }
 
+  /**
+   * Update session todos
+   *
+   * Update the todo list for a specific session. This triggers a todo.updated event that refreshes the TUI sidebar.
+   */
+  public todoUpdate<ThrowOnError extends boolean = false>(
+    parameters: {
+      sessionID: string
+      directory?: string
+      workspace?: string
+      todos?: Array<Todo>
+    },
+    options?: Options<never, ThrowOnError>,
+  ) {
+    const params = buildClientParams(
+      [parameters],
+      [
+        {
+          args: [
+            { in: "path", key: "sessionID" },
+            { in: "query", key: "directory" },
+            { in: "query", key: "workspace" },
+            { in: "body", key: "todos" },
+          ],
+        },
+      ],
+    )
+    return (options?.client ?? this.client).post<SessionTodoUpdateResponses, SessionTodoUpdateErrors, ThrowOnError>({
+      url: "/session/{sessionID}/todo",
+      ...options,
+      ...params,
+      headers: {
+        "Content-Type": "application/json",
+        ...options?.headers,
+        ...params.headers,
+      },
+    })
+  }
+
   /**
    * Initialize session
    *

packages/sdk/js/src/v2/gen/types.gen.ts

@@ -3032,6 +3032,42 @@ export type SessionTodoResponses = {
 
 export type SessionTodoResponse = SessionTodoResponses[keyof SessionTodoResponses]
 
+export type SessionTodoUpdateData = {
+  body?: {
+    todos: Array<Todo>
+  }
+  path: {
+    sessionID: string
+  }
+  query?: {
+    directory?: string
+    workspace?: string
+  }
+  url: "/session/{sessionID}/todo"
+}
+
+export type SessionTodoUpdateErrors = {
+  /**
+   * Bad request
+   */
+  400: BadRequestError
+  /**
+   * Not found
+   */
+  404: NotFoundError
+}
+
+export type SessionTodoUpdateError = SessionTodoUpdateErrors[keyof SessionTodoUpdateErrors]
+
+export type SessionTodoUpdateResponses = {
+  /**
+   * Todos updated successfully
+   */
+  200: Array<Todo>
+}
+
+export type SessionTodoUpdateResponse = SessionTodoUpdateResponses[keyof SessionTodoUpdateResponses]
+
 export type SessionInitData = {
   body?: {
     modelID: string