OpenCode uses tool name 'bash' (not 'run_in_terminal') for shell execution. The hook was early-exiting for 'bash' tool calls, leaving banned commands unchecked. Added 'bash' to both the inspect allowlist and COMMAND extraction.
OpenCode uses tool name 'bash' (not 'run_in_terminal') for shell execution. The hook was early-exiting for 'bash' tool calls, leaving banned commands unchecked. Added 'bash' to both the inspect allowlist and COMMAND extraction.