Permission check for tool-output directory never matches, causes hang in headless mode

[Th0rgal]

When running in headless/automated mode (e.g. ralph loops), opencode hangs indefinitely when trying to read truncated tool output.

The issue is in agent.ts - the allow rule for Truncate.DIR uses the directory path directly, but external-directory.ts creates patterns with /* appended. The wildcard matching fails and falls through to "ask", which hangs without a UI.

Logs show:

pattern=/Users/thomas/.local/share/opencode/tool-output/*
action={"pattern":"*","action":"ask"} evaluated

The rule pattern is /tool-output but the requested pattern is /tool-output/*.

[github-actions]

This issue might be related to a previously reported problem:

• external_directory permission triggered for .opencode/state within git worktree #7758: external_directory permission triggered for .opencode/state within git worktree (CLOSED)

While #7758 was closed and focused on a different directory access pattern, both issues involve permission rule matching for internal opencode directories. The root cause in #7758 involved pattern matching logic and containment checks that might have similarities to the wildcard matching issue described here.

Feel free to ignore if your specific case (tool-output directory pattern mismatch with wildcards) is distinct from that closed issue.

[rekram1-node]

I did a tweak that was kinda ugly that I think fixes this