{
  "name": "settings.set \u2014 a privileged method called over the WebSocket transport",
  "description": "The extension may request a download; it may not reconfigure the daemon. Letting it write saveTo.allowedRoots would defeat every path check in the project.",
  "transport": "ws",
  "request": {
    "jsonrpc": "2.0",
    "id": 103,
    "method": "settings.set",
    "params": {
      "values": {
        "saveTo.allowedRoots": [
          "/"
        ]
      }
    }
  },
  "response": {
    "jsonrpc": "2.0",
    "id": 103,
    "error": {
      "code": -32003,
      "message": "method is not permitted on this transport"
    }
  },
  "assertions": [
    "the check happens before params are even parsed",
    "every method with x-privileged true behaves identically here",
    "nothing is written and no event is emitted"
  ]
}