[PR #5966] Read tool: dotenv block; .envrc allowed #11673

Closed
opened 2026-02-16 18:16:35 -05:00 by yindo · 0 comments
Owner

Original Pull Request: https://github.com/anomalyco/opencode/pull/5966

State: closed
Merged: No


Commits Needing Docs

  • 60db171b4 changes user-facing safety behavior for the read tool: dotenv files are blocked more precisely (blocks .env, .env.*), and .envrc is no longer blocked.

Docs Updates Made (Undocumented Behavior)

  • Documented read tool dotenv blocking/allowlist and clarified that .envrc is allowed in packages/web/src/content/docs/tools.mdx:148.
  • Updated the plugin example that previously used filePath.includes(".env") (which would also block .envrc) to use basename + regex matching, in packages/web/src/content/docs/plugins.mdx:159.

No Other Docs Needed

  • The remaining commits are CI changes, URL fix, UI color tweaks, dialog copy text cleanup, and release/generate chores—no new user-facing features/API changes requiring documentation.

Triggered by scheduled workflow

New%20session%20-%202025-12-22T16%3A07%3A06.486Z
opencode session  |  github run

**Original Pull Request:** https://github.com/anomalyco/opencode/pull/5966 **State:** closed **Merged:** No --- **Commits Needing Docs** - `60db171b4` changes user-facing safety behavior for the `read` tool: dotenv files are blocked more precisely (blocks `.env`, `.env.*`), and `.envrc` is no longer blocked. **Docs Updates Made (Undocumented Behavior)** - Documented `read` tool dotenv blocking/allowlist and clarified that `.envrc` is allowed in `packages/web/src/content/docs/tools.mdx:148`. - Updated the plugin example that previously used `filePath.includes(".env")` (which would also block `.envrc`) to use basename + regex matching, in `packages/web/src/content/docs/plugins.mdx:159`. **No Other Docs Needed** - The remaining commits are CI changes, URL fix, UI color tweaks, dialog copy text cleanup, and release/generate chores—no new user-facing features/API changes requiring documentation. Triggered by scheduled workflow <a href="https://opencode.ai/s/K61D5zKj"><img width="200" alt="New%20session%20-%202025-12-22T16%3A07%3A06.486Z" src="https://social-cards.sst.dev/opencode-share/TmV3IHNlc3Npb24gLSAyMDI1LTEyLTIyVDE2OjA3OjA2LjQ4Nlo=.png?model=opencode/gpt-5.2&version=1.0.186&id=K61D5zKj" /></a> [opencode session](https://opencode.ai/s/K61D5zKj)&nbsp;&nbsp;|&nbsp;&nbsp;[github run](/sst/opencode/actions/runs/20437259501)
yindo added the pull-request label 2026-02-16 18:16:35 -05:00
yindo closed this issue 2026-02-16 18:16:35 -05:00
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: anomalyco/opencode#11673