feat: pass mentioned files to prompt_guard callback

The prompt_guard callback now receives the list of mentioned files from the
opencode context as a parameter. This allows users to make decisions based on
which files are included in the context.

Changes:
- Updated prompt_guard type signature from `fun(): boolean` to `fun(mentioned_files: string[]): boolean`
- Modified util.check_prompt_allowed to accept and pass mentioned_files parameter
- Updated prompt_guard_indicator to retrieve mentioned files from context
- Updated core.lua toggle and send_message to pass mentioned files to guard callback

This enables use cases like denying prompts when certain sensitive files are
mentioned, or allowing prompts only when specific files are included.

Author: guillaumeboehm

lua/opencode/core.lua

@@ -52,7 +52,9 @@ function M.open(opts)
 
   if are_windows_closed then
     -- Check if whether prompting will be allowed
-    local allowed, err_msg = util.check_prompt_allowed(config.prompt_guard)
+    local context_module = require('opencode.context')
+    local mentioned_files = context_module.context.mentioned_files or {}
+    local allowed, err_msg = util.check_prompt_allowed(config.prompt_guard, mentioned_files)
     if not allowed then
       vim.notify(err_msg or 'Prompts will be denied by prompt_guard', vim.log.levels.WARN)
     end
@@ -91,7 +93,9 @@ end
 --- @param opts? SendMessageOpts
 function M.send_message(prompt, opts)
   -- Check if prompt is allowed
-  local allowed, err_msg = util.check_prompt_allowed(config.prompt_guard)
+  local context_module = require('opencode.context')
+  local mentioned_files = context_module.context.mentioned_files or {}
+  local allowed, err_msg = util.check_prompt_allowed(config.prompt_guard, mentioned_files)
 
   if not allowed then
     vim.notify(err_msg or 'Prompt denied by prompt_guard', vim.log.levels.ERROR)

lua/opencode/types.lua

@@ -127,7 +127,7 @@
 ---@field ui OpencodeUIConfig
 ---@field context OpencodeContextConfig
 ---@field debug OpencodeDebugConfig
----@field prompt_guard? fun(): boolean
+---@field prompt_guard? fun(mentioned_files: string[]): boolean
 
 ---@class MessagePartState
 ---@field input TaskToolInput|BashToolInput|FileToolInput|TodoToolInput|GlobToolInput|GrepToolInput|WebFetchToolInput|ListToolInput Input data for the tool

lua/opencode/ui/prompt_guard_indicator.lua

@@ -4,12 +4,14 @@ local state = require('opencode.state')
 local config = require('opencode.config')
 local util = require('opencode.util')
 local icons = require('opencode.ui.icons')
+local context = require('opencode.context')
 
 ---Get the current prompt guard status
 ---@return boolean allowed
 ---@return string|nil error_message
 function M.get_status()
-  return util.check_prompt_allowed(config.prompt_guard)
+  local mentioned_files = context.context.mentioned_files or {}
+  return util.check_prompt_allowed(config.prompt_guard, mentioned_files)
 end
 
 ---Check if guard will deny prompts

lua/opencode/util.lua

@@ -349,9 +349,10 @@ end
 
 --- Check if prompt is allowed via guard callback
 --- @param guard_callback? function
+--- @param mentioned_files? string[] List of mentioned files in the context
 --- @return boolean allowed
 --- @return string|nil error_message
-function M.check_prompt_allowed(guard_callback)
+function M.check_prompt_allowed(guard_callback, mentioned_files)
   if not guard_callback then
     return true, nil -- No guard = always allowed
   end
@@ -360,7 +361,8 @@ function M.check_prompt_allowed(guard_callback)
     return false, 'prompt_guard must be a function'
   end
 
-  local success, result = pcall(guard_callback)
+  mentioned_files = mentioned_files or {}
+  local success, result = pcall(guard_callback, mentioned_files)
 
   if not success then
     return false, 'prompt_guard error: ' .. tostring(result)