feat(permission): restore permission ask hook safely

[kernel-oops]

Issue for this PR

Closes #7006

Type of change

• Bug fix
• New feature
• Refactor / code improvement
• Documentation

What does this PR do?

Restores the declared permission.ask plugin hook before OpenCode creates an interactive permission request. Static deny remains final, static allow bypasses the hook, and plugins can resolve an ask to allow or deny.

This follows #39442 but preserves Effect interruption instead of turning cancellation into a pending prompt. Ordinary plugin failures fail closed to the normal prompt, and structuredClone prevents nested plugin mutation of the retained request. The SDK hook input uses the current v2 PermissionRequest type.

How did you verify your code works?

Added tests for allow, deny, failure fallback, interruption without a pending request, nested metadata isolation, and sequential multi-plugin overrides. Ran 86 permission tests (132 assertions), plugin trigger tests, OpenCode/plugin typechecks, the plugin build, and format/diff checks.

Screenshots / recordings

N/A — plugin API and permission-flow change only.

Checklist

• I have tested my changes locally
• I have not included unrelated changes in this PR

[github-actions]

The following comment was made by an LLM, it may be inaccurate:

Based on the search results, I found related PRs, but none that appear to be duplicates of PR #42633:

Related PRs (not duplicates):

1. fix(plugin): restore permission ask hook #39442 - fix(plugin): restore permission ask hook

   • This is the PR that feat(permission): restore permission ask hook safely #42633 explicitly builds upon and supersedes. feat(permission): restore permission ask hook safely #42633 is described as a "corrected/superseding implementation" of fix(plugin): restore permission ask hook #39442 with interruption-swallowing behavior fixes.

2. feat(core): optional plugin gate in PermissionV2 for allow→ask #34329 - feat(core): optional plugin gate in PermissionV2 for allow→ask

   • Related to permission hook infrastructure but addresses a different feature (optional plugin gate).

3. feat(permission): wire permission.ask plugin hook #30509 - feat(permission): wire permission.ask plugin hook

   • Historical permission hook implementation, not a duplicate.

4. fix(opencode): add permission.ask plugin hook back #19453 - fix(opencode): add permission.ask plugin hook back

   • Historical permission hook fix, not a duplicate.

No duplicate PRs found

[github-actions]

Thanks for updating your PR! It now meets our contributing guidelines. 👍