axconfig 3.5.0 → 3.5.2

package/dist/agents/opencode-permission-builder.d.ts

@@ -47,10 +47,25 @@ export declare function collectTools(rules: PermissionRule[]): Set<CanonicalTool
 export declare function collectBashPatterns(rules: PermissionRule[]): string[];
 /**
  * Build bash permission config from patterns and tool permissions.
+ *
+ * IMPORTANT: The wildcard "*" rule must be added FIRST in the config object.
+ * OpenCode's `disabled()` function uses `findLast()` to find any rule matching
+ * the permission name, then checks if that rule has `pattern === "*"` and
+ * `action === "deny"`. If the "*" rule is last, bash gets disabled entirely
+ * even when specific patterns are allowed. By adding "*" first, `findLast()`
+ * returns a specific pattern rule instead, keeping bash available to the model.
+ *
+ * At execution time, `evaluate()` correctly handles rule precedence because it
+ * uses `findLast()` with BOTH permission AND pattern matching - so specific
+ * patterns still take priority over the wildcard when the command matches.
  */
 export declare function buildBashPermission(allowPatterns: string[], denyPatterns: string[], bashAllowed: boolean, bashDenied: boolean): OpenCodePermission | Record<string, OpenCodePermission>;
 /**
  * Build tool permission config with optional path patterns.
+ *
+ * IMPORTANT: Like buildBashPermission, the wildcard "*" rule must be added
+ * FIRST to prevent OpenCode's disabled() from hiding the tool entirely.
+ * See buildBashPermission comment for detailed explanation.
  */
 export declare function buildToolPermission(canonicalName: CanonicalTool, opencodeName: string, allowedTools: Set<CanonicalTool>, deniedTools: Set<CanonicalTool>, allowPathPatterns: Map<string, string[]>, denyPathPatterns: Map<string, string[]>): OpenCodePermission | Record<string, OpenCodePermission>;
 /**

package/dist/agents/opencode-permission-builder.js

@@ -76,28 +76,69 @@ export function collectBashPatterns(rules) {
         .filter((r) => r.type === "bash")
         .map((r) => r.pattern);
 }
+/**
+ * Normalize a bash pattern for OpenCode by adding a trailing wildcard if needed.
+ *
+ * OpenCode uses an "arity" system to extract command prefixes for permission
+ * checking. For example, `gh` has arity 3, so `gh api repos/foo/bar` extracts
+ * the prefix `gh api repos/foo/bar` (first 3 tokens). A pattern `gh api` won't
+ * match because it's missing the third token.
+ *
+ * By appending `*` to patterns that don't already have wildcards, we ensure
+ * patterns like `gh api` become `gh api*` which matches `gh api repos/...`.
+ *
+ * @example
+ * normalizeBashPattern("gh api") // "gh api*"
+ * normalizeBashPattern("git *")  // "git *" (already has wildcard)
+ * normalizeBashPattern("cat")    // "cat*"
+ */
+function normalizeBashPattern(pattern) {
+    // Don't add another * if pattern already ends with one
+    if (pattern.endsWith("*")) {
+        return pattern;
+    }
+    return `${pattern}*`;
+}
 /**
  * Build bash permission config from patterns and tool permissions.
+ *
+ * IMPORTANT: The wildcard "*" rule must be added FIRST in the config object.
+ * OpenCode's `disabled()` function uses `findLast()` to find any rule matching
+ * the permission name, then checks if that rule has `pattern === "*"` and
+ * `action === "deny"`. If the "*" rule is last, bash gets disabled entirely
+ * even when specific patterns are allowed. By adding "*" first, `findLast()`
+ * returns a specific pattern rule instead, keeping bash available to the model.
+ *
+ * At execution time, `evaluate()` correctly handles rule precedence because it
+ * uses `findLast()` with BOTH permission AND pattern matching - so specific
+ * patterns still take priority over the wildcard when the command matches.
  */
 export function buildBashPermission(allowPatterns, denyPatterns, bashAllowed, bashDenied) {
     if (bashDenied && allowPatterns.length === 0) {
         return "deny";
     }
     if (allowPatterns.length > 0 || denyPatterns.length > 0) {
-        const bashConfig = {};
+        // Add wildcard FIRST so specific patterns come after in ruleset order.
+        // This prevents OpenCode's disabled() from hiding bash from the model.
+        const bashConfig = {
+            "*": bashAllowed ? "allow" : "deny",
+        };
         for (const pattern of allowPatterns) {
-            bashConfig[pattern] = "allow";
+            bashConfig[normalizeBashPattern(pattern)] = "allow";
         }
         for (const pattern of denyPatterns) {
-            bashConfig[pattern] = "deny";
+            bashConfig[normalizeBashPattern(pattern)] = "deny";
         }
-        bashConfig["*"] = bashAllowed ? "allow" : "deny";
         return bashConfig;
     }
     return bashAllowed ? "allow" : "deny";
 }
 /**
  * Build tool permission config with optional path patterns.
+ *
+ * IMPORTANT: Like buildBashPermission, the wildcard "*" rule must be added
+ * FIRST to prevent OpenCode's disabled() from hiding the tool entirely.
+ * See buildBashPermission comment for detailed explanation.
  */
 export function buildToolPermission(canonicalName, opencodeName, allowedTools, deniedTools, allowPathPatterns, denyPathPatterns) {
     const hasAllowPatterns = allowPathPatterns.has(opencodeName);
@@ -114,14 +155,17 @@ export function buildToolPermission(canonicalName, opencodeName, allowedTools, d
         return "deny";
     }
     if (hasAllowPatterns || hasDenyPatterns) {
-        const patternConfig = {};
+        // Add wildcard FIRST so specific patterns come after in ruleset order.
+        // This prevents OpenCode's disabled() from hiding the tool from the model.
+        const patternConfig = {
+            "*": effectiveAllowed ? "allow" : "deny",
+        };
         for (const pattern of allowPathPatterns.get(opencodeName) ?? []) {
             patternConfig[pattern] = "allow";
         }
         for (const pattern of denyPathPatterns.get(opencodeName) ?? []) {
             patternConfig[pattern] = "deny";
         }
-        patternConfig["*"] = effectiveAllowed ? "allow" : "deny";
         return patternConfig;
     }
     return effectiveAllowed ? "allow" : "deny";

package/package.json

@@ -2,7 +2,7 @@
   "name": "axconfig",
   "author": "Łukasz Jerciński",
   "license": "MIT",
-  "version": "3.5.0",
+  "version": "3.5.2",
   "description": "Unified configuration management for AI coding agents - common API for permissions, settings, and config across Claude Code, Codex, Gemini CLI, and OpenCode",
   "repository": {
     "type": "git",