fix(tool/read): match permission patterns against worktree-relative path

Read permission checks now use the same worktree-relative path basis as edit/write/apply_patch, so configured patterns apply consistently.
2026-05-09 18:46:29 -04:00
parent bd1029b19f
commit ba9e4b67ed
2 changed files with 15 additions and 2 deletions
--- a/packages/opencode/src/tool/read.ts
+++ b/packages/opencode/src/tool/read.ts
@@ -178,7 +178,7 @@ export const ReadTool = Tool.define(

      yield* ctx.ask({
        permission: "read",
-        patterns: [filepath],
+        patterns: [path.relative(instance.worktree, filepath)],
        always: ["*"],
        metadata: {},
      })