From ac2ab2ebf02bfb3518a9b9492f7285a03ac1eb5b Mon Sep 17 00:00:00 2001 From: Sergio Date: Fri, 6 Mar 2026 10:33:44 -0800 Subject: [PATCH 1/2] fix(permission): apply read filename deny rules consistently --- packages/opencode/src/tool/read.ts | 2 +- packages/opencode/test/tool/read.test.ts | 2 ++ 2 files changed, 3 insertions(+), 1 deletion(-) diff --git a/packages/opencode/src/tool/read.ts b/packages/opencode/src/tool/read.ts index c981ac16e43..205887bd537 100644 --- a/packages/opencode/src/tool/read.ts +++ b/packages/opencode/src/tool/read.ts @@ -44,7 +44,7 @@ export const ReadTool = Tool.define("read", { await ctx.ask({ permission: "read", - patterns: [filepath], + patterns: [path.relative(Instance.worktree, filepath)], always: ["*"], metadata: {}, }) diff --git a/packages/opencode/test/tool/read.test.ts b/packages/opencode/test/tool/read.test.ts index b22fc3e7120..d89c2b178bb 100644 --- a/packages/opencode/test/tool/read.test.ts +++ b/packages/opencode/test/tool/read.test.ts @@ -158,6 +158,8 @@ describe("tool.read env file permissions", () => { [".env.local", true], [".env.production", true], [".env.development.local", true], + ["appsettings.json", true], + ["appsettings.Development.json", true], [".env.example", false], [".envrc", false], ["environment.ts", false], From dfb54601a8e023a37569247b0630d972c4094f56 Mon Sep 17 00:00:00 2001 From: Sergio Date: Fri, 6 Mar 2026 10:54:55 -0800 Subject: [PATCH 2/2] test(read): align appsettings env prompt expectations --- packages/opencode/test/tool/read.test.ts | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/packages/opencode/test/tool/read.test.ts b/packages/opencode/test/tool/read.test.ts index d89c2b178bb..717c5a9c596 100644 --- a/packages/opencode/test/tool/read.test.ts +++ b/packages/opencode/test/tool/read.test.ts @@ -158,8 +158,8 @@ describe("tool.read env file permissions", () => { [".env.local", true], [".env.production", true], [".env.development.local", true], - ["appsettings.json", true], - ["appsettings.Development.json", true], + ["appsettings.json", false], + ["appsettings.Development.json", false], [".env.example", false], [".envrc", false], ["environment.ts", false],