@sureshsankaran/opencode-destructive-check 1.0.2 → 1.0.4

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sureshsankaran/opencode-destructive-check",
-  "version": "1.0.2",
+  "version": "1.0.4",
   "description": "OpenCode plugin that checks for destructive commands before any tool/bash call and asks for permission",
   "main": "src/index.ts",
   "types": "src/index.ts",

package/src/index.ts

@@ -308,24 +308,55 @@ const destructiveCheck: Plugin = async () => {
     async ["permission.ask"](
       input: {
         id: string
-        type: string
+        // Old permission system uses 'type', new system uses 'permission'
+        type?: string
+        permission?: string
         pattern?: string | string[]
+        patterns?: string[]
         sessionID: string
-        messageID: string
+        messageID?: string
         callID?: string
-        title: string
+        title?: string
         metadata: Record<string, unknown>
-        time: { created: number }
+        time?: { created: number }
       },
       output: { status: "ask" | "deny" | "allow" },
     ): Promise<void> {
       const stats = getStats(input.sessionID)
 
+      // Get permission type from either old or new system
+      const permissionType = input.permission || input.type || ""
+
       // Check if this is a bash/command execution permission
-      if (input.type === "bash" || input.type === "command" || input.type === "shell") {
-        const command = (input.metadata?.command as string) || input.title || ""
+      if (permissionType === "bash" || permissionType === "command" || permissionType === "shell") {
+        // Get commands from patterns (new system) or metadata/title (old system)
+        const patterns =
+          input.patterns || (Array.isArray(input.pattern) ? input.pattern : input.pattern ? [input.pattern] : [])
+
+        // Check each pattern individually for destructive commands
+        for (const pattern of patterns) {
+          const match = checkCommand(pattern)
+          if (match) {
+            stats.permissionsRequested++
+            globalStats.permissionsRequested++
+            stats.lastMatch = match
 
-        if (command) {
+            console.warn(
+              `[destructive-check] PERMISSION REQUIRED: ${match.severity.toUpperCase()} destructive command detected`,
+            )
+            console.warn(`  Category: ${match.category}`)
+            console.warn(`  Severity: ${match.severity}`)
+            console.warn(`  Command: ${pattern.slice(0, 100)}${pattern.length > 100 ? "..." : ""}`)
+
+            // Ask for permission for all severity levels
+            output.status = "ask"
+            return
+          }
+        }
+
+        // Also check joined patterns and metadata as fallback
+        const command = patterns.join(" ") || (input.metadata?.command as string) || input.title || ""
+        if (command && patterns.length === 0) {
           const match = checkCommand(command)
           if (match) {
             stats.permissionsRequested++
@@ -347,8 +378,9 @@ const destructiveCheck: Plugin = async () => {
       }
 
       // Check file operations
-      if (input.type === "write" || input.type === "edit" || input.type === "delete") {
-        const patterns = Array.isArray(input.pattern) ? input.pattern : input.pattern ? [input.pattern] : []
+      if (permissionType === "write" || permissionType === "edit" || permissionType === "delete") {
+        const patterns =
+          input.patterns || (Array.isArray(input.pattern) ? input.pattern : input.pattern ? [input.pattern] : [])
         for (const p of patterns) {
           if (isDangerousPath(p)) {
             stats.permissionsRequested++