fix(cli): deny sort output flag

packages/opencode/src/kilocode/agent/index.ts

@@ -118,6 +118,8 @@ export const readOnlyBash: Record<string, "allow" | "ask" | "deny"> = {
   "* >| *": "deny",
   "sort -o *": "deny",
   "sort * -o *": "deny",
+  "sort --output*": "deny",
+  "sort * --output*": "deny",
 }
 
 function askGuard(mcp: Record<string, "allow" | "ask" | "deny"> = {}) {

packages/opencode/test/kilocode/ask-agent-permissions.test.ts

@@ -114,6 +114,8 @@ describe("Ask agent bash permissions", () => {
       "cat a > b",
       "jq . a.json > b.json",
       "sort names.txt -o names.txt",
+      "sort --output=names.txt names.txt",
+      "sort names.txt --output=names.txt",
     ]
 
     for (const cmd of denied) {