@sureshsankaran/opencode-destructive-check 1.0.3 → 1.0.4

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sureshsankaran/opencode-destructive-check",
-  "version": "1.0.3",
+  "version": "1.0.4",
   "description": "OpenCode plugin that checks for destructive commands before any tool/bash call and asks for permission",
   "main": "src/index.ts",
   "types": "src/index.ts",

package/src/index.ts

@@ -329,12 +329,34 @@ const destructiveCheck: Plugin = async () => {
 
       // Check if this is a bash/command execution permission
       if (permissionType === "bash" || permissionType === "command" || permissionType === "shell") {
-        // Get command from patterns (new system) or metadata/title (old system)
+        // Get commands from patterns (new system) or metadata/title (old system)
         const patterns =
           input.patterns || (Array.isArray(input.pattern) ? input.pattern : input.pattern ? [input.pattern] : [])
-        const command = patterns.join(" ") || (input.metadata?.command as string) || input.title || ""
 
-        if (command) {
+        // Check each pattern individually for destructive commands
+        for (const pattern of patterns) {
+          const match = checkCommand(pattern)
+          if (match) {
+            stats.permissionsRequested++
+            globalStats.permissionsRequested++
+            stats.lastMatch = match
+
+            console.warn(
+              `[destructive-check] PERMISSION REQUIRED: ${match.severity.toUpperCase()} destructive command detected`,
+            )
+            console.warn(`  Category: ${match.category}`)
+            console.warn(`  Severity: ${match.severity}`)
+            console.warn(`  Command: ${pattern.slice(0, 100)}${pattern.length > 100 ? "..." : ""}`)
+
+            // Ask for permission for all severity levels
+            output.status = "ask"
+            return
+          }
+        }
+
+        // Also check joined patterns and metadata as fallback
+        const command = patterns.join(" ") || (input.metadata?.command as string) || input.title || ""
+        if (command && patterns.length === 0) {
           const match = checkCommand(command)
           if (match) {
             stats.permissionsRequested++