ceos/opencode
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

core: fix permission evaluation to use rule-based matching instead of wildcard patterns

Browse source
This commit is contained in:
Dax Raad 2026-01-05 01:06:59 -05:00
commit 9f38af44db
1 changed files with 3 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

6
packages/opencode/src/permission/next.ts
View file

@ -232,9 +232,9 @@ export namespace PermissionNext {
const result = new Set<string>() const result = new Set<string>()
for (const tool of tools) { for (const tool of tools) {
const permission = EDIT_TOOLS.includes(tool) ? "edit" : tool const permission = EDIT_TOOLS.includes(tool) ? "edit" : tool
if (evaluate(permission, "*", ruleset).action === "deny") { const rule = ruleset.findLast((r) => Wildcard.match(permission, r.pattern))
result.add(tool) if (!rule) continue
} if (rule.pattern === "*" && rule.action === "deny") result.add(tool)
} }
return result return result
} }