[client] core::package::permission