fix(permissions): require approval for backend queries

src/routes/chatPermissionPolicy.ts

@@ -6,7 +6,6 @@ const lowRiskToolPermissions = new Set([
   "locate_features",
   "render_junctions",
   "show_chart",
-  "tjwater_server_query",
   "view_history",
   "view_scada",
   "web_search",

tests/routes/chatPermissionPolicy.test.ts

@@ -9,13 +9,18 @@ describe("permission approval policy", () => {
   it.each([
     "show_chart",
     "web_search",
-    "tjwater_server_query",
-    "tjwater_tjwater_server_query",
   ])("allows low-risk permission %s", (permission) => {
     expect(canAutoApprovePermission(permission)).toBe(true);
   });
 
-  it.each(["bash", "edit", "external_directory", "store_render_ref"])(
+  it.each([
+    "bash",
+    "edit",
+    "external_directory",
+    "store_render_ref",
+    "tjwater_server_query",
+    "tjwater_tjwater_server_query",
+  ])(
     "requires confirmation for permission %s",
     (permission) => {
       expect(canAutoApprovePermission(permission)).toBe(false);

tests/routes/chatStream.test.ts

@@ -71,7 +71,7 @@ describe("streamPromptResponse", () => {
             properties: {
               id: "perm-1",
               sessionID: "runtime-session-1",
-              permission: "tjwater_tjwater_server_query",
+              permission: "show_chart",
               patterns: ["*"],
               metadata: {},
               always: ["*"],

tests/runtime/opencodeConfig.test.ts

@@ -13,6 +13,7 @@ describe("internal OpenCode permissions", () => {
 
     expect(permission["*"]).toBe("ask");
     expect(permission.external_directory).toBe("deny");
+    expect(permission.task).toBe("deny");
     expect(permission.question).toBe("allow");
     expect(permission.todowrite).toBe("allow");
     expect(read?.["*"]).toBe("allow");