fix(opencode): full access keeps the selected agent's deny rules

apps/server/src/orchestration-v2/Adapters/OpenCodeAdapterV2.testkit.ts

@@ -364,6 +364,9 @@ function makeReplayClient(controller: OpenCodeReplayController): OpencodeClient
       status: () => request("mcp.status", {}),
       add: (input: unknown) => request("mcp.add", input),
     },
+    app: {
+      agents: () => request("app.agents", {}),
+    },
   } as unknown as OpencodeClient;
 }
 

apps/server/src/orchestration-v2/testkit/fixtures/opencode_background_wake/opencode_transcript.ndjson

@@ -2,6 +2,10 @@
 {"type":"expect_outbound","label":"event.subscribe","frame":{"type":"event.subscribe"}}
 {"type":"expect_outbound","label":"session.create","frame":{"type":"session.create","input":{"title":"<any>","permission":"<any>"}}}
 {"type":"emit_inbound","label":"session.created","frame":{"type":"sdk.response","operation":"session.create","data":{"id":"ses_1a0b5c3d4e5ffBgWakeRoot0001","slug":"wake-fixture","version":"1.19.5","projectID":"global","directory":"/tmp/t3-opencode-wake","path":"tmp/t3-opencode-wake","title":"T3 OpenCode background wake","time":{"created":1794000000000,"updated":1794000000000}}}}
+{"type":"expect_outbound","label":"app.agents.agent-policy","frame":{"type":"app.agents","input":{}}}
+{"type":"emit_inbound","label":"app.agents.agent-policy.response","frame":{"type":"sdk.response","operation":"app.agents","data":[{"name":"build","mode":"primary","options":{},"permission":[{"permission":"*","pattern":"*","action":"allow"},{"permission":"doom_loop","pattern":"*","action":"ask"},{"permission":"external_directory","pattern":"*","action":"ask"},{"permission":"external_directory","pattern":"/home/user/.local/share/opencode/tool-output/*","action":"allow"},{"permission":"external_directory","pattern":"/tmp/opencode/*","action":"allow"},{"permission":"question","pattern":"*","action":"deny"},{"permission":"plan_enter","pattern":"*","action":"deny"},{"permission":"plan_exit","pattern":"*","action":"deny"},{"permission":"read","pattern":"*","action":"allow"},{"permission":"read","pattern":"*.env","action":"ask"},{"permission":"read","pattern":"*.env.*","action":"ask"},{"permission":"read","pattern":"*.env.example","action":"allow"},{"permission":"question","pattern":"*","action":"allow"},{"permission":"plan_enter","pattern":"*","action":"allow"},{"permission":"external_directory","pattern":"/home/user/.local/share/opencode/tool-output/*","action":"allow"}]}]}}
+{"type":"expect_outbound","label":"session.update.agent-policy","frame":{"type":"session.update","input":{"sessionID":"ses_1a0b5c3d4e5ffBgWakeRoot0001","permission":[{"permission":"*","pattern":"*","action":"allow"},{"permission":"*","pattern":"*","action":"allow"},{"permission":"doom_loop","pattern":"*","action":"allow"},{"permission":"external_directory","pattern":"*","action":"allow"},{"permission":"external_directory","pattern":"/home/user/.local/share/opencode/tool-output/*","action":"allow"},{"permission":"external_directory","pattern":"/tmp/opencode/*","action":"allow"},{"permission":"question","pattern":"*","action":"deny"},{"permission":"plan_enter","pattern":"*","action":"deny"},{"permission":"plan_exit","pattern":"*","action":"deny"},{"permission":"read","pattern":"*","action":"allow"},{"permission":"read","pattern":"*.env","action":"allow"},{"permission":"read","pattern":"*.env.*","action":"allow"},{"permission":"read","pattern":"*.env.example","action":"allow"},{"permission":"question","pattern":"*","action":"allow"},{"permission":"plan_enter","pattern":"*","action":"allow"},{"permission":"external_directory","pattern":"/home/user/.local/share/opencode/tool-output/*","action":"allow"}]}}}
+{"type":"emit_inbound","label":"session.update.agent-policy.response","frame":{"type":"sdk.response","operation":"session.update","data":{"id":"ses_1a0b5c3d4e5ffBgWakeRoot0001","slug":"wake-fixture","version":"1.19.5","projectID":"global","directory":"/tmp/t3-opencode-wake","path":"tmp/t3-opencode-wake","title":"T3 OpenCode background wake","time":{"created":1794000000000,"updated":1794000000000},"permission":[{"permission":"*","pattern":"*","action":"allow"},{"permission":"*","pattern":"*","action":"allow"},{"permission":"*","pattern":"*","action":"allow"},{"permission":"doom_loop","pattern":"*","action":"allow"},{"permission":"external_directory","pattern":"*","action":"allow"},{"permission":"external_directory","pattern":"/home/user/.local/share/opencode/tool-output/*","action":"allow"},{"permission":"external_directory","pattern":"/tmp/opencode/*","action":"allow"},{"permission":"question","pattern":"*","action":"deny"},{"permission":"plan_enter","pattern":"*","action":"deny"},{"permission":"plan_exit","pattern":"*","action":"deny"},{"permission":"read","pattern":"*","action":"allow"},{"permission":"read","pattern":"*.env","action":"allow"},{"permission":"read","pattern":"*.env.*","action":"allow"},{"permission":"read","pattern":"*.env.example","action":"allow"},{"permission":"question","pattern":"*","action":"allow"},{"permission":"plan_enter","pattern":"*","action":"allow"},{"permission":"external_directory","pattern":"/home/user/.local/share/opencode/tool-output/*","action":"allow"}]}}}
 {"type":"expect_outbound","label":"session.promptAsync","frame":{"type":"session.promptAsync","input":{"sessionID":"ses_1a0b5c3d4e5ffBgWakeRoot0001","model":{"providerID":"openai","modelID":"gpt-5.4-mini"},"agent":"build","parts":[{"type":"text","text":"Use the task tool once with background set to true to delegate to the general subagent with the prompt: Respond exactly CHILD_OK. As soon as it is launched, reply exactly PARENT_OK and end your turn without waiting for it."}],"messageID":"msg_1a0b5c3d4e5fRootPrompt0001"}}}
 {"type":"emit_inbound","label":"session.promptAsync.response","frame":{"type":"sdk.response","operation":"session.promptAsync","data":null}}
 {"type":"emit_inbound","label":"root.user","frame":{"type":"sdk.event","event":{"id":"evt_1a0b5c3d4e5f0001WakeFixture","type":"message.updated","properties":{"sessionID":"ses_1a0b5c3d4e5ffBgWakeRoot0001","info":{"id":"msg_1a0b5c3d4e5fRootPrompt0001","role":"user","sessionID":"ses_1a0b5c3d4e5ffBgWakeRoot0001","time":{"created":1794000000001},"agent":"build","model":{"providerID":"openai","modelID":"gpt-5.4-mini"}}}}}}
@@ -37,6 +41,8 @@
 {"type":"emit_inbound","label":"wake.assistant.completed","frame":{"type":"sdk.event","event":{"id":"evt_1a0b5c3d4e5f0027WakeFixture","type":"message.updated","properties":{"sessionID":"ses_1a0b5c3d4e5ffBgWakeRoot0001","info":{"id":"msg_1a0b5c3d4e5fWakeAnswer0001","parentID":"msg_1a0b5c3d4e5fWakeResult0001","role":"assistant","mode":"build","agent":"build","path":{"cwd":"/tmp/t3-opencode-wake","root":"/"},"cost":0,"tokens":{"input":0,"output":0,"reasoning":0,"cache":{"read":0,"write":0}},"modelID":"gpt-5.4-mini","providerID":"openai","time":{"created":1794000000012,"completed":1794000000014},"sessionID":"ses_1a0b5c3d4e5ffBgWakeRoot0001","finish":"stop"}}}}}
 {"type":"emit_inbound","label":"wake.idle","frame":{"type":"sdk.event","event":{"id":"evt_1a0b5c3d4e5f0028WakeFixture","type":"session.status","properties":{"sessionID":"ses_1a0b5c3d4e5ffBgWakeRoot0001","status":{"type":"idle"}}}}}
 {"type":"emit_inbound","label":"wake.session.idle","frame":{"type":"sdk.event","event":{"id":"evt_1a0b5c3d4e5f0029WakeFixture","type":"session.idle","properties":{"sessionID":"ses_1a0b5c3d4e5ffBgWakeRoot0001"}}}}
+{"type":"expect_outbound","label":"app.agents.agent-policy","frame":{"type":"app.agents","input":{}}}
+{"type":"emit_inbound","label":"app.agents.agent-policy.response","frame":{"type":"sdk.response","operation":"app.agents","data":[{"name":"build","mode":"primary","options":{},"permission":[{"permission":"*","pattern":"*","action":"allow"},{"permission":"doom_loop","pattern":"*","action":"ask"},{"permission":"external_directory","pattern":"*","action":"ask"},{"permission":"external_directory","pattern":"/home/user/.local/share/opencode/tool-output/*","action":"allow"},{"permission":"external_directory","pattern":"/tmp/opencode/*","action":"allow"},{"permission":"question","pattern":"*","action":"deny"},{"permission":"plan_enter","pattern":"*","action":"deny"},{"permission":"plan_exit","pattern":"*","action":"deny"},{"permission":"read","pattern":"*","action":"allow"},{"permission":"read","pattern":"*.env","action":"ask"},{"permission":"read","pattern":"*.env.*","action":"ask"},{"permission":"read","pattern":"*.env.example","action":"allow"},{"permission":"question","pattern":"*","action":"allow"},{"permission":"plan_enter","pattern":"*","action":"allow"},{"permission":"external_directory","pattern":"/home/user/.local/share/opencode/tool-output/*","action":"allow"}]}]}}
 {"type":"expect_outbound","label":"session.abort.cleanup","frame":{"type":"session.abort","input":{"sessionID":"ses_1a0b5c3d4e5ffBgWakeRoot0001"}}}
 {"type":"emit_inbound","label":"session.abort.cleanup.response","frame":{"type":"sdk.response","operation":"session.abort","data":true}}
 {"type":"expect_outbound","label":"session.children.cleanup","frame":{"type":"session.children","input":{"sessionID":"ses_1a0b5c3d4e5ffBgWakeRoot0001"}}}

apps/server/src/orchestration-v2/testkit/fixtures/opencode_child_approval/opencode_transcript.ndjson

@@ -2,6 +2,10 @@
 {"type": "expect_outbound", "label": "event.subscribe", "frame": {"type": "event.subscribe"}}
 {"type": "expect_outbound", "label": "session.create", "frame": {"type": "session.create", "input": {"title": "<any>", "permission": "<any>"}}}
 {"type": "emit_inbound", "label": "session.created", "frame": {"type": "sdk.response", "operation": "session.create", "data": {"id": "ses_1235df8f8ffekByXP7gVnnXA3P", "slug": "kind-tiger", "version": "1.14.39", "projectID": "global", "directory": "/private/tmp/t3-opencode-probe", "path": "private/tmp/t3-opencode-probe", "title": "T3 OpenCode v2 probe", "time": {"created": 1781818066695, "updated": 1781818066695}}}}
+{"type":"expect_outbound","label":"app.agents.agent-policy","frame":{"type":"app.agents","input":{}}}
+{"type":"emit_inbound","label":"app.agents.agent-policy.response","frame":{"type":"sdk.response","operation":"app.agents","data":[{"name":"build","mode":"primary","options":{},"permission":[{"permission":"*","pattern":"*","action":"allow"},{"permission":"doom_loop","pattern":"*","action":"ask"},{"permission":"external_directory","pattern":"*","action":"ask"},{"permission":"read","pattern":"*","action":"allow"},{"permission":"read","pattern":"*.env","action":"ask"}]}]}}
+{"type":"expect_outbound","label":"session.update.agent-policy","frame":{"type":"session.update","input":{"sessionID":"ses_1235df8f8ffekByXP7gVnnXA3P","permission":[{"permission":"*","pattern":"*","action":"allow"},{"permission":"*","pattern":"*","action":"allow"},{"permission":"doom_loop","pattern":"*","action":"allow"},{"permission":"external_directory","pattern":"*","action":"allow"},{"permission":"read","pattern":"*","action":"allow"},{"permission":"read","pattern":"*.env","action":"allow"}]}}}
+{"type":"emit_inbound","label":"session.update.agent-policy.response","frame":{"type":"sdk.response","operation":"session.update","data":{"id":"ses_1235df8f8ffekByXP7gVnnXA3P","slug":"kind-tiger","version":"1.14.39","projectID":"global","directory":"/private/tmp/t3-opencode-probe","path":"private/tmp/t3-opencode-probe","title":"T3 OpenCode v2 probe","time":{"created":1781818066695,"updated":1781818066695},"permission":[{"permission":"*","pattern":"*","action":"allow"},{"permission":"*","pattern":"*","action":"allow"},{"permission":"*","pattern":"*","action":"allow"},{"permission":"doom_loop","pattern":"*","action":"allow"},{"permission":"external_directory","pattern":"*","action":"allow"},{"permission":"read","pattern":"*","action":"allow"},{"permission":"read","pattern":"*.env","action":"allow"}]}}}
 {"type":"expect_outbound","label":"session.promptAsync","frame":{"type":"session.promptAsync","input":{"sessionID":"ses_1235df8f8ffekByXP7gVnnXA3P","model":{"providerID":"openai","modelID":"gpt-5.4-mini"},"agent":"build","parts":[{"type":"text","text":"Use the task tool exactly once. Delegate to the general subagent with this prompt: Respond exactly CHILD_OK. After the task completes, respond exactly PARENT_OK."}],"messageID":"msg_edca20735001Esh39V762TEx7f"}}}
 {"type": "emit_inbound", "label": "session.promptAsync.response", "frame": {"type": "sdk.response", "operation": "session.promptAsync", "data": null}}
 {"type": "emit_inbound", "label": "root.user", "frame": {"type": "sdk.event", "event": {"id": "evt_edca20735003a32yj1UtyUpHkU", "type": "message.updated", "properties": {"sessionID": "ses_1235df8f8ffekByXP7gVnnXA3P", "info": {"id": "msg_edca20735001Esh39V762TEx7f", "role": "user", "sessionID": "ses_1235df8f8ffekByXP7gVnnXA3P", "time": {"created": 1781818066741}, "agent": "build", "model": {"providerID": "openai", "modelID": "gpt-5.4-mini"}}}}}}

apps/server/src/orchestration-v2/testkit/fixtures/opencode_running_child_approval/opencode_transcript.ndjson

@@ -2,6 +2,10 @@
 {"type":"expect_outbound","label":"event.subscribe","frame":{"type":"event.subscribe"}}
 {"type":"expect_outbound","label":"session.create","frame":{"type":"session.create","input":{"title":"<any>","permission":"<any>"}}}
 {"type":"emit_inbound","label":"session.created","frame":{"type":"sdk.response","operation":"session.create","data":{"id":"ses_1235df8f8ffekByXP7gVnnXA3P","slug":"kind-tiger","version":"1.14.39","projectID":"global","directory":"/private/tmp/t3-opencode-probe","path":"private/tmp/t3-opencode-probe","title":"T3 OpenCode v2 probe","time":{"created":1781818066695,"updated":1781818066695}}}}
+{"type":"expect_outbound","label":"app.agents.agent-policy","frame":{"type":"app.agents","input":{}}}
+{"type":"emit_inbound","label":"app.agents.agent-policy.response","frame":{"type":"sdk.response","operation":"app.agents","data":[{"name":"build","mode":"primary","options":{},"permission":[{"permission":"*","pattern":"*","action":"allow"},{"permission":"doom_loop","pattern":"*","action":"ask"},{"permission":"external_directory","pattern":"*","action":"ask"},{"permission":"read","pattern":"*","action":"allow"},{"permission":"read","pattern":"*.env","action":"ask"}]}]}}
+{"type":"expect_outbound","label":"session.update.agent-policy","frame":{"type":"session.update","input":{"sessionID":"ses_1235df8f8ffekByXP7gVnnXA3P","permission":[{"permission":"*","pattern":"*","action":"allow"},{"permission":"*","pattern":"*","action":"allow"},{"permission":"doom_loop","pattern":"*","action":"allow"},{"permission":"external_directory","pattern":"*","action":"allow"},{"permission":"read","pattern":"*","action":"allow"},{"permission":"read","pattern":"*.env","action":"allow"}]}}}
+{"type":"emit_inbound","label":"session.update.agent-policy.response","frame":{"type":"sdk.response","operation":"session.update","data":{"id":"ses_1235df8f8ffekByXP7gVnnXA3P","slug":"kind-tiger","version":"1.14.39","projectID":"global","directory":"/private/tmp/t3-opencode-probe","path":"private/tmp/t3-opencode-probe","title":"T3 OpenCode v2 probe","time":{"created":1781818066695,"updated":1781818066695},"permission":[{"permission":"*","pattern":"*","action":"allow"},{"permission":"*","pattern":"*","action":"allow"},{"permission":"*","pattern":"*","action":"allow"},{"permission":"doom_loop","pattern":"*","action":"allow"},{"permission":"external_directory","pattern":"*","action":"allow"},{"permission":"read","pattern":"*","action":"allow"},{"permission":"read","pattern":"*.env","action":"allow"}]}}}
 {"type":"expect_outbound","label":"session.promptAsync","frame":{"type":"session.promptAsync","input":{"sessionID":"ses_1235df8f8ffekByXP7gVnnXA3P","model":{"providerID":"openai","modelID":"gpt-5.4-mini"},"agent":"build","parts":[{"type":"text","text":"Use the task tool exactly once. Delegate to the general subagent with this prompt: Respond exactly CHILD_OK. After the task completes, respond exactly PARENT_OK."}],"messageID":"msg_edca20735001Esh39V762TEx7f"}}}
 {"type":"emit_inbound","label":"session.promptAsync.response","frame":{"type":"sdk.response","operation":"session.promptAsync","data":null}}
 {"type":"emit_inbound","label":"root.user","frame":{"type":"sdk.event","event":{"id":"evt_edca20735003a32yj1UtyUpHkU","type":"message.updated","properties":{"sessionID":"ses_1235df8f8ffekByXP7gVnnXA3P","info":{"id":"msg_edca20735001Esh39V762TEx7f","role":"user","sessionID":"ses_1235df8f8ffekByXP7gVnnXA3P","time":{"created":1781818066741},"agent":"build","model":{"providerID":"openai","modelID":"gpt-5.4-mini"}}}}}}

apps/server/src/orchestration-v2/testkit/fixtures/opencode_subagent/opencode_transcript.ndjson

@@ -2,6 +2,10 @@
 {"type":"expect_outbound","label":"event.subscribe","frame":{"type":"event.subscribe"}}
 {"type":"expect_outbound","label":"session.create","frame":{"type":"session.create","input":{"title":"<any>","permission":"<any>"}}}
 {"type":"emit_inbound","label":"session.created","frame":{"type":"sdk.response","operation":"session.create","data":{"id":"ses_1235df8f8ffekByXP7gVnnXA3P","slug":"kind-tiger","version":"1.14.39","projectID":"global","directory":"/private/tmp/t3-opencode-probe","path":"private/tmp/t3-opencode-probe","title":"T3 OpenCode v2 probe","time":{"created":1781818066695,"updated":1781818066695}}}}
+{"type":"expect_outbound","label":"app.agents.agent-policy","frame":{"type":"app.agents","input":{}}}
+{"type":"emit_inbound","label":"app.agents.agent-policy.response","frame":{"type":"sdk.response","operation":"app.agents","data":[{"name":"build","mode":"primary","options":{},"permission":[{"permission":"*","pattern":"*","action":"allow"},{"permission":"doom_loop","pattern":"*","action":"ask"},{"permission":"external_directory","pattern":"*","action":"ask"},{"permission":"read","pattern":"*","action":"allow"},{"permission":"read","pattern":"*.env","action":"ask"}]}]}}
+{"type":"expect_outbound","label":"session.update.agent-policy","frame":{"type":"session.update","input":{"sessionID":"ses_1235df8f8ffekByXP7gVnnXA3P","permission":[{"permission":"*","pattern":"*","action":"allow"},{"permission":"*","pattern":"*","action":"allow"},{"permission":"doom_loop","pattern":"*","action":"allow"},{"permission":"external_directory","pattern":"*","action":"allow"},{"permission":"read","pattern":"*","action":"allow"},{"permission":"read","pattern":"*.env","action":"allow"}]}}}
+{"type":"emit_inbound","label":"session.update.agent-policy.response","frame":{"type":"sdk.response","operation":"session.update","data":{"id":"ses_1235df8f8ffekByXP7gVnnXA3P","slug":"kind-tiger","version":"1.14.39","projectID":"global","directory":"/private/tmp/t3-opencode-probe","path":"private/tmp/t3-opencode-probe","title":"T3 OpenCode v2 probe","time":{"created":1781818066695,"updated":1781818066695},"permission":[{"permission":"*","pattern":"*","action":"allow"},{"permission":"*","pattern":"*","action":"allow"},{"permission":"*","pattern":"*","action":"allow"},{"permission":"doom_loop","pattern":"*","action":"allow"},{"permission":"external_directory","pattern":"*","action":"allow"},{"permission":"read","pattern":"*","action":"allow"},{"permission":"read","pattern":"*.env","action":"allow"}]}}}
 {"type":"expect_outbound","label":"session.promptAsync","frame":{"type":"session.promptAsync","input":{"sessionID":"ses_1235df8f8ffekByXP7gVnnXA3P","model":{"providerID":"openai","modelID":"gpt-5.4-mini"},"agent":"build","parts":[{"type":"text","text":"Use the task tool exactly once. Delegate to the general subagent with this prompt: Respond exactly CHILD_OK. After the task completes, respond exactly PARENT_OK."}],"messageID":"msg_edca20735001Esh39V762TEx7f"}}}
 {"type":"emit_inbound","label":"session.promptAsync.response","frame":{"type":"sdk.response","operation":"session.promptAsync","data":null}}
 {"type":"emit_inbound","label":"root.user","frame":{"type":"sdk.event","event":{"id":"evt_edca20735003a32yj1UtyUpHkU","type":"message.updated","properties":{"sessionID":"ses_1235df8f8ffekByXP7gVnnXA3P","info":{"id":"msg_edca20735001Esh39V762TEx7f","role":"user","sessionID":"ses_1235df8f8ffekByXP7gVnnXA3P","time":{"created":1781818066741},"agent":"build","model":{"providerID":"openai","modelID":"gpt-5.4-mini"}}}}}}