permission.ask plugin hook is never triggered #47674

Activity

1. github-actions

   assigned

   kitlangton

   on Sep 6, 2026
2. github-actions commented on Sep 6, 2026

   

   github-actionsBot

   on Sep 6, 2026 – with GitHub Actions

   Contributor

   More actions

   This issue might be a duplicate of existing issues. Please check:

   • permission.ask plugin hook is defined but not triggered #7006: permission.ask plugin hook is defined but not triggered (open)
   • plugin: permission.ask is typed and documented but never triggered #46809: plugin: permission.ask is typed and documented but never triggered (closed)
   • Plugin hook "permission.ask" is dead code — declared (and still taught by the bundled customize-opencode skill) but never invoked since v1.3.0 #47654: Plugin hook "permission.ask" is dead code — declared but never invoked (closed)
   • Plugin SDK: permission.ask hook is never called #9229: Plugin SDK: permission.ask hook is never called (closed)

   Please review these before proceeding, and consider adding your findings or a +1 to one of the existing issues instead.
3. rekram1-node commented on Oct 14, 2026

   

   rekram1-node

   on Oct 14, 2026

   Collaborator

   More actions

   In OpenCode V2 the replacement is ctx.permission.hook("evaluate"), which runs for every permission check (tool calls and external_directory) before any prompt is shown:

   export default {
     id: "my-policy",
     async setup(ctx) {
       await ctx.permission.hook("evaluate", async (event) => {
         // event: { sessionID, agent, action, resources, metadata, source, effect, message }
         if (event.action === "shell" && event.resources.some((r) => r.startsWith("rm "))) {
           event.effect = "deny" // or "allow" to skip the prompt, or "ask" to force one
           event.message = "Blocked by policy"
         }
       })
     },
   }
   

   Setting allow skips the prompt, deny blocks the action with your message, and ask forces a prompt. An explicit deny in config is final and doesn't reach the hook. Docs: Plugins → Permission hooks and Migrate plugins from V1.
4. rekram1-node

   closed this as completedon Oct 14, 2026