core: deny question tool permission by default in CLI sessions to prevent unauthorized usage

2026-01-07 20:27:13 -05:00 · 2026-01-07 20:27:13 -05:00 · 5a2768b546
parent 0c3cb95f64
commit 5a2768b546
1 changed files with 22 additions and 1 deletions
--- a/packages/opencode/src/cli/cmd/run.ts
+++ b/packages/opencode/src/cli/cmd/run.ts
@ -292,7 +292,28 @@ export const RunCommand = cmd({
              : args.title
            : undefined

-        const result = await sdk.session.create(title ? { title } : {})
+        const result = await sdk.session.create(
+          title
+            ? {
+                title,
+                permission: [
+                  {
+                    permission: "question",
+                    action: "deny",
+                    pattern: "*",
+                  },
+                ],
+              }
+            : {
+                permission: [
+                  {
+                    permission: "question",
+                    action: "deny",
+                    pattern: "*",
+                  },
+                ],
+              },
+        )
        return result.data?.id
      })()