No longer Auto rejects filesystem calls outside of CWD #2653

Closed
opened 2026-02-16 17:36:37 -05:00 by yindo · 2 comments
Owner

Originally created by @wojons on GitHub (Nov 7, 2025).

Description

I am finding when using CLI (not checked tui as much) that I get prompted for Permission to a file outside of the working space directory. Since the cli is run by another program i have no way to even click reject if i want to. Is there a flag or setting to auto reject these so my automation can continue?

INFO  2025-11-07T03:59:11 +365ms service=permission sessionID=ses_5a3883bf6ffeYz3FVdndF6rYtj messageID=msg_a5c77cc68001mNHm9E8SsP4eEb toolCallID=call_dcda0979760649d1ab0ef5f7 pattern=/workspace/memory-bank asking
INFO  2025-11-07T03:59:11 +0ms service=bus type=permission.updated publishing
INFO  2025-11-07T03:59:11 +2ms service=bus type=message.part.updated publishing
[?25l│
◆  Permission required to run: Access file outside working directory: /workspace/memory-bank/projectbrief.md
│  ● Allow once
│  ○ Always allow
│  ○ Reject
└```

### OpenCode version

1.0.39

### Steps to reproduce

1. Run `opencode run` on the cli 

### Screenshot and/or share link

_No response_

### Operating System

Ubuntu 24.04

### Terminal

bash
Originally created by @wojons on GitHub (Nov 7, 2025). ### Description I am finding when using CLI (not checked tui as much) that I get prompted for Permission to a file outside of the working space directory. Since the cli is run by another program i have no way to even click reject if i want to. Is there a flag or setting to auto reject these so my automation can continue? ``` INFO 2025-11-07T03:59:11 +365ms service=permission sessionID=ses_5a3883bf6ffeYz3FVdndF6rYtj messageID=msg_a5c77cc68001mNHm9E8SsP4eEb toolCallID=call_dcda0979760649d1ab0ef5f7 pattern=/workspace/memory-bank asking INFO 2025-11-07T03:59:11 +0ms service=bus type=permission.updated publishing INFO 2025-11-07T03:59:11 +2ms service=bus type=message.part.updated publishing [?25l│ ◆ Permission required to run: Access file outside working directory: /workspace/memory-bank/projectbrief.md │ ● Allow once │ ○ Always allow │ ○ Reject └``` ### OpenCode version 1.0.39 ### Steps to reproduce 1. Run `opencode run` on the cli ### Screenshot and/or share link _No response_ ### Operating System Ubuntu 24.04 ### Terminal bash
yindo added the bug label 2026-02-16 17:36:37 -05:00
yindo closed this issue 2026-02-16 17:36:37 -05:00
Author
Owner

@rekram1-node commented on GitHub (Nov 7, 2025):

ill add a flag for it

@rekram1-node commented on GitHub (Nov 7, 2025): ill add a flag for it
Author
Owner

@wojons commented on GitHub (Nov 8, 2025):

wanted to give an example i go to run /init and it is just always trying to scan things it doesnt need to scan outside of the repo that almost every command i have just routes out and i am deny deny deny

Image
@wojons commented on GitHub (Nov 8, 2025): wanted to give an example i go to run /init and it is just always trying to scan things it doesnt need to scan outside of the repo that almost every command i have just routes out and i am deny deny deny <img width="1694" height="962" alt="Image" src="https://github.com/user-attachments/assets/49b81864-304e-48a8-9046-b4e79794fe68" />
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: anomalyco/opencode#2653