[rekram1-node]

Problem

FileAccess.Interface.authorizeExternal and FileAccess.Interface.authorizeRead used an unqualified Error in their Effect error unions. Because file-access.ts does not define a local Error type alias, Error resolved to globalThis.Error instead of Permission.Error, collapsing the error union and widening the typed error channel.

Change

Qualify Permission.Error in FileAccess.Interface so callers retain the narrow tagged error union from Permission.Service.assert.

 FileAccess.Interface
   authorizeExternal
-    Effect<void, Error | SessionErrors.NotFoundError>
+    Effect<void, Permission.Error | SessionErrors.NotFoundError>
   authorizeRead
-    Effect<Target, FSUtil.Error | Error | SessionErrors.NotFoundError>
+    Effect<Target, FSUtil.Error | Permission.Error | SessionErrors.NotFoundError>

Out of scope

• Changing runtime behavior of FileAccess.authorizeExternal or FileAccess.authorizeRead.

[opencode-agent]

No problems found. The bare Error here meant the global Error, so qualifying it as Permission.Error is correct and only changes types. The packages/core type check still passes, so the existing callers in tool/plugin/* and the tests compile against the narrower error union, and test/file-access.test.ts passes.

Public API: unchanged (internal FileAccess.Interface types only).