OpenCode 1.19.5: selected real-provider log fields (private metadata omitted).

base
parent session created; "[{\"permission\":\"*\",\"pattern\":\"*\",\"action\":\"allow\"}]"
child session created; "[{\"permission\":\"task\",\"pattern\":\"*\",\"action\":\"deny\"}]"
evaluated permission=external_directory pattern=/tmp/factory-issue-35246-evidence-1/sample/outside/* action.permission=external_directory action.pattern=* action.action=ask
asking id=per_1d0c7b8f5001zncKTR3jq48JvF permission=external_directory patterns="[\"/tmp/factory-issue-35246-evidence-1/sample/outside/*\"]"

head
parent session created; "[{\"permission\":\"*\",\"pattern\":\"*\",\"action\":\"allow\"},{\"permission\":\"external_directory\",\"pattern\":\"*\",\"action\":\"allow\"}]"
child session created; "[{\"permission\":\"external_directory\",\"pattern\":\"*\",\"action\":\"allow\"},{\"permission\":\"task\",\"pattern\":\"*\",\"action\":\"deny\"}]"
evaluated permission=external_directory pattern=/tmp/factory-issue-35246-evidence-1/sample/outside/* action.permission=external_directory action.pattern=* action.action=allow