[dario-coscia]

Description

Summary of Changes

Goal

Relax the old “never modify source code” rule and add automatic approval prompts when an agent edits files under pina/, tests/, or docs/.

Shared instruction

.opencode/skills/RULES.md, added a single shared rule:

Modify files - If the request will modify source files (pina, tests),
announce which files and wait for the user's explicit approval before editing..

opencode

• .opencode/commands/pina-agentic.md

  • Replaced “never write files” with:
    • confirm target paths before writing;
    • require explicit approval for pina/, tests/, docs/.
  • Updated the delivery guidance so saved scripts require path confirmation.

• .opencode/opencode.json (new)

  • Added edit permissions:

    "pina/*": "ask",
    "tests/*": "ask",
    "docs/*": "ask",
    "*": "allow"

• .opencode/plugin/source-edit-guard.ts (new)

  • permission.ask re-asserts ask for protected source paths.
  • tool.execute.before shows a warning toast before an edit/write/patch.
  • Covers edit, write, and patch tools.

Claude Code

• .claude/settings.json (new)

  • Added a PreToolUse hook for:
    Edit|Write|MultiEdit|NotebookEdit.

• .claude/hooks/source_edit_guard.py (new)

  • Reads hook JSON from stdin.
  • Extracts file_path / notebook_path.
  • Returns:

    {
      "hookSpecificOutput": {
        "hookEventName": "PreToolUse",
        "permissionDecision": "ask",
        "permissionDecisionReason": "Modifying source file ..."
      }
    }

  • Stays silent for files outside the protected directories.

Tool support

Tool	Enforcement
opencode	Permission config + TS plugin
Claude Code	PreToolUse hook
Codex	Instruction-level only via RULES.md / AGENTS.md

Verification

• opencode plugin logic tested with Node type stripping.
• Claude hook tested with protected/relative/absolute/out-of-project paths.
• Both JSON config files validated.
• Claude Code should pick up the hook automatically; restart if not.

This PR fixes #842.

Checklist

• Code follows the project’s Code Style Guidelines
• Tests have been added or updated
• Documentation has been updated if necessary
• Pull request is linked to an open issue

[GiovanniCanali]

The PR looks clean. Both OpenCode and Claude Code provide native permission mechanisms that replicate the behavior previously enforced through custom hooks. I therefore removed the hooks and updated the corresponding JSON configuration files.

Additionally, I configured both tools to require explicit approval before executing shell commands. If you prefer a less restrictive setup, feel free to adjust the permissions in .claude/settings.json and .opencode/opencode.json.

I tested the updated configuration in OpenCode and confirmed that it behaves as expected.

[dario-coscia]

Looks great! Ready to merge for me