fix: check apply_patch move destinations

Author: dev-willbird1936

packages/opencode/src/tool/apply_patch.ts

@@ -202,7 +202,15 @@ export const ApplyPatchTool = Tool.define(
       }))
 
       // Check permissions if needed
-      const relativePaths = fileChanges.map((c) => path.relative(instance.worktree, c.filePath).replaceAll("\\", "/"))
+      const relativePaths = Array.from(
+        new Set(
+          fileChanges.flatMap((change) =>
+            [change.filePath, change.movePath]
+              .filter((filePath): filePath is string => filePath !== undefined)
+              .map((filePath) => path.relative(instance.worktree, filePath).replaceAll("\\", "/")),
+          ),
+        ),
+      )
       yield* ctx.ask({
         permission: "edit",
         patterns: relativePaths,

packages/opencode/test/tool/apply_patch.test.ts

@@ -178,6 +178,7 @@ describe("tool.apply_patch freeform", () => {
         expect(moveFile.type).toBe("move")
         expect(moveFile.relativePath).toBe("renamed/dir/name.txt")
         expect(moveFile.movePath).toBe(path.join(test.directory, "renamed/dir/name.txt"))
+        expect(permissionCall.patterns).toEqual(["old/name.txt", "renamed/dir/name.txt"])
         expect(moveFile.patch).toContain("-old content")
         expect(moveFile.patch).toContain("+new content")
       }),