axconfig 3.5.1 → 3.5.2

package/dist/agents/opencode-permission-builder.js

@@ -76,6 +76,29 @@ export function collectBashPatterns(rules) {
         .filter((r) => r.type === "bash")
         .map((r) => r.pattern);
 }
+/**
+ * Normalize a bash pattern for OpenCode by adding a trailing wildcard if needed.
+ *
+ * OpenCode uses an "arity" system to extract command prefixes for permission
+ * checking. For example, `gh` has arity 3, so `gh api repos/foo/bar` extracts
+ * the prefix `gh api repos/foo/bar` (first 3 tokens). A pattern `gh api` won't
+ * match because it's missing the third token.
+ *
+ * By appending `*` to patterns that don't already have wildcards, we ensure
+ * patterns like `gh api` become `gh api*` which matches `gh api repos/...`.
+ *
+ * @example
+ * normalizeBashPattern("gh api") // "gh api*"
+ * normalizeBashPattern("git *")  // "git *" (already has wildcard)
+ * normalizeBashPattern("cat")    // "cat*"
+ */
+function normalizeBashPattern(pattern) {
+    // Don't add another * if pattern already ends with one
+    if (pattern.endsWith("*")) {
+        return pattern;
+    }
+    return `${pattern}*`;
+}
 /**
  * Build bash permission config from patterns and tool permissions.
  *
@@ -101,10 +124,10 @@ export function buildBashPermission(allowPatterns, denyPatterns, bashAllowed, ba
             "*": bashAllowed ? "allow" : "deny",
         };
         for (const pattern of allowPatterns) {
-            bashConfig[pattern] = "allow";
+            bashConfig[normalizeBashPattern(pattern)] = "allow";
         }
         for (const pattern of denyPatterns) {
-            bashConfig[pattern] = "deny";
+            bashConfig[normalizeBashPattern(pattern)] = "deny";
         }
         return bashConfig;
     }

package/package.json

@@ -2,7 +2,7 @@
   "name": "axconfig",
   "author": "Łukasz Jerciński",
   "license": "MIT",
-  "version": "3.5.1",
+  "version": "3.5.2",
   "description": "Unified configuration management for AI coding agents - common API for permissions, settings, and config across Claude Code, Codex, Gemini CLI, and OpenCode",
   "repository": {
     "type": "git",