Skip to content

fix: warn on unrecognized permission keys in opencode.json#15601

Open
Br1an67 wants to merge 1 commit intoanomalyco:devfrom
Br1an67:fix/issue-15507-unknown-permissions
Open

fix: warn on unrecognized permission keys in opencode.json#15601
Br1an67 wants to merge 1 commit intoanomalyco:devfrom
Br1an67:fix/issue-15507-unknown-permissions

Conversation

@Br1an67
Copy link

@Br1an67 Br1an67 commented Mar 1, 2026

Issue for this PR

Closes #15507

Type of change

  • Bug fix
  • New feature
  • Refactor / code improvement
  • Documentation

What does this PR do?

The permission block in opencode.json uses .catchall(PermissionRule) which silently accepts unknown keys. Users migrating from Claude Code (which uses PascalCase like "Bash", "Read") get zero signal that their permissions have no effect.

The fix adds a KNOWN_PERMISSION_KEYS set and checks each key in the permissionTransform function. Unrecognized keys trigger a warning log with a case-insensitive hint (e.g. "Bash" — did you mean "bash"?).

The .catchall() is preserved so the schema doesn't reject configs outright — the warning is informational.

How did you verify your code works?

Ran the existing config test suite (bun test test/config/config.test.ts) — all previously-passing tests still pass (55/61, 6 pre-existing failures unrelated to permissions).

Screenshots / recordings

N/A — log output change, no UI impact.

Checklist

  • I have tested my changes locally
  • I have not included unrelated changes in this PR

The permission block used .catchall(PermissionRule) which silently
accepted unknown keys. Users migrating from Claude Code (PascalCase
keys like "Bash") got no signal that their permissions had no effect.

Now logs a warning for each unrecognized key, with a suggestion if the
lowercase version is a known key.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

opencode.json permission block silently ignores unknown/PascalCase keys — no warning or diagnostic

1 participant