anomalyco/opencode
1
0
Fork 0
mirror of https://github.com/anomalyco/opencode.git synced 2026-07-22 02:05:26 -04:00
Code Issues 5.9k Packages Projects Releases 19 Wiki Activity

AGENT.md is invalid without debug information #3628

New Issue
Closed
opened 2026-02-16 17:40:56 -05:00 by yindo · 8 comments
yindo commented 2026-02-16 17:40:56 -05:00
Owner
Copy Link
Copy Source

Originally created by @driebe on GitHub (Dec 17, 2025).

Originally assigned to: @rekram1-node on GitHub.

Description

I set up my agent.md file according to the documentation example of ~/.config/opencode/agent/review.md Permissions

I narrowed it done to the bash configuration which doesn't seem to be accepted anymore by the current version of opencode. When I remove the bash block for the file, everything works normally.

I think allowing specific bash commands makes sense and I hope that feature will be restored or the documentation updated to show how to set it up correctly now.

OpenCode version

1.0.164

Steps to reproduce

Add bash specific bash permissions to your agent.md file based on the official opencode documentation

permission:
  edit: deny
  bash:
    "git diff": allow
    "git log*": allow
    "*": ask
  webfetch: deny

Screenshot and/or share link

opencode does not provide more information than core.md is invalid - even when increasing the log-level to debug.

Operating System

6.12.48-1-MANJARO x86_64

Terminal

zsh

Originally created by @driebe on GitHub (Dec 17, 2025). Originally assigned to: @rekram1-node on GitHub. ### Description I set up my `agent.md` file according to the documentation example of `~/.config/opencode/agent/review.md` [Permissions](https://opencode.ai/docs/agents/#permissions) I narrowed it done to the bash configuration which doesn't seem to be accepted anymore by the current version of opencode. When I remove the bash block for the file, everything works normally. I think allowing specific bash commands makes sense and I hope that feature will be restored or the documentation updated to show how to set it up correctly now. ### OpenCode version 1.0.164 ### Steps to reproduce Add bash specific bash permissions to your agent.md file based on the official opencode documentation ``` permission: edit: deny bash: "git diff": allow "git log*": allow "*": ask webfetch: deny ``` ### Screenshot and/or share link opencode does not provide more information than `core.md is invalid` - even when increasing the log-level to debug. ### Operating System 6.12.48-1-MANJARO x86_64 ### Terminal zsh
yindo added the bugdocs labels 2026-02-16 17:40:56 -05:00
yindo closed this issue 2026-02-16 17:40:56 -05:00
yindo commented 2026-02-16 17:40:56 -05:00
Author
Owner
Copy Link
Copy Source

@github-actions[bot] commented on GitHub (Dec 17, 2025):

This issue appears to be related to how bash permission patterns are validated in agent configuration files. While no direct duplicates were found, there are several related issues you may want to review:

  • #4041: Discusses bash chain permission behavior and acceptance patterns
  • #5529: Comprehensive feature request about per-agent filesystem and bash permission granularity
  • #4287: Similar request for finer-grained permission control using glob patterns
  • #4667: Security-focused feature request about tool access limitations

The core issue seems to be that the bash permission configuration format from the documentation is no longer accepted, and there's insufficient error messaging to help debug the schema mismatch. This appears to be a unique bug rather than a duplicate.

@github-actions[bot] commented on GitHub (Dec 17, 2025): This issue appears to be related to how bash permission patterns are validated in agent configuration files. While no direct duplicates were found, there are several related issues you may want to review: - #4041: Discusses bash chain permission behavior and acceptance patterns - #5529: Comprehensive feature request about per-agent filesystem and bash permission granularity - #4287: Similar request for finer-grained permission control using glob patterns - #4667: Security-focused feature request about tool access limitations The core issue seems to be that the bash permission configuration format from the documentation is no longer accepted, and there's insufficient error messaging to help debug the schema mismatch. This appears to be a unique bug rather than a duplicate.
yindo commented 2026-02-16 17:40:56 -05:00
Author
Owner
Copy Link
Copy Source

@rekram1-node commented on GitHub (Dec 17, 2025):

@driebe can u share the full file?

@rekram1-node commented on GitHub (Dec 17, 2025): @driebe can u share the full file?
yindo commented 2026-02-16 17:40:56 -05:00
Author
Owner
Copy Link
Copy Source

@driebe commented on GitHub (Dec 17, 2025):

Sure. Btw, it doesn't seem to make a difference whether I use the permission or ´tools' flag - with the latter working fine in past opencode versions.

---
description: Core Orchestrator Agent
mode: primary
model: opencode/qwen3-coder-high
temperature: 0.1
permission:
  write: false
  edit: false
  bash:
    "git status*": allow
    "git diff*": allow
    "ls*": allow
    "cat*": allow
---

Coordinate the workflow using subagents. You never execute tasks yourself.

## Workflow
1. Receive IMP + tasks from @architect.
2. For each task: choose correct subagent and delegate with minimal context.
3. Wait for output; verify it aligns with the task (no execution).
4. If issues appear, diagnose the reason and re-delegate to the right agent.
5. Keep tasks moving until all subtasks are done.

## Subagents
- @backend / @frontend — feature code
- @tester — tests
- @refactor — code cleanup
- @devops — infra, bash, pipelines, env setup
- @auditor — security checks
- @documenter — docs

## Behavior
- **Never run bash, never edit files, never write code.**
- **Delegate everything.**
- Identify issues but always assign fixes to the proper agent.
- Use minimal task-specific context when delegating.
- Parallelize when possible.
- Ask clarifying questions if needed.
``
@driebe commented on GitHub (Dec 17, 2025): Sure. Btw, it doesn't seem to make a difference whether I use the `permission` or ´tools' flag - with the latter working fine in past opencode versions. ``` --- description: Core Orchestrator Agent mode: primary model: opencode/qwen3-coder-high temperature: 0.1 permission: write: false edit: false bash: "git status*": allow "git diff*": allow "ls*": allow "cat*": allow --- Coordinate the workflow using subagents. You never execute tasks yourself. ## Workflow 1. Receive IMP + tasks from @architect. 2. For each task: choose correct subagent and delegate with minimal context. 3. Wait for output; verify it aligns with the task (no execution). 4. If issues appear, diagnose the reason and re-delegate to the right agent. 5. Keep tasks moving until all subtasks are done. ## Subagents - @backend / @frontend — feature code - @tester — tests - @refactor — code cleanup - @devops — infra, bash, pipelines, env setup - @auditor — security checks - @documenter — docs ## Behavior - **Never run bash, never edit files, never write code.** - **Delegate everything.** - Identify issues but always assign fixes to the proper agent. - Use minimal task-specific context when delegating. - Parallelize when possible. - Ask clarifying questions if needed. ``
yindo commented 2026-02-16 17:40:56 -05:00
Author
Owner
Copy Link
Copy Source

@rekram1-node commented on GitHub (Dec 17, 2025):

@driebe as per docs example change:

permission:
  write: false
  edit: false

to:

permission:
  write: deny
  edit: deny

And itll work

Error message sucks tho Ill fix

@rekram1-node commented on GitHub (Dec 17, 2025): @driebe as per docs example change: ``` permission: write: false edit: false ``` to: ``` permission: write: deny edit: deny ``` And itll work Error message sucks tho Ill fix
yindo commented 2026-02-16 17:40:56 -05:00
Author
Owner
Copy Link
Copy Source

@driebe commented on GitHub (Dec 17, 2025):

Please check again. The bash part is not working anymore even though it is suggested it is in the official example

This is what it says in the documentation https://opencode.ai/docs/agents/#permissions:

You can also set permissions in Markdown agents.
~/.config/opencode/agent/review.md
---
description: Code review without edits
mode: subagent
permission:
  edit: deny
  bash:
    "git diff": allow
    "git log*": allow
    "*": ask
  webfetch: deny
---
Only analyze code and suggest changes.
@driebe commented on GitHub (Dec 17, 2025): Please check again. The bash part is not working anymore even though it is suggested it is in the official example This is what it says in the documentation https://opencode.ai/docs/agents/#permissions: ``` You can also set permissions in Markdown agents. ~/.config/opencode/agent/review.md --- description: Code review without edits mode: subagent permission: edit: deny bash: "git diff": allow "git log*": allow "*": ask webfetch: deny --- Only analyze code and suggest changes. ```
yindo commented 2026-02-16 17:40:56 -05:00
Author
Owner
Copy Link
Copy Source

@rekram1-node commented on GitHub (Dec 17, 2025):

@driebe what error are you getting?

@rekram1-node commented on GitHub (Dec 17, 2025): @driebe what error are you getting?
yindo commented 2026-02-16 17:40:57 -05:00
Author
Owner
Copy Link
Copy Source

@rekram1-node commented on GitHub (Dec 17, 2025):

I can't replicate any error using this, aside from the qwen3 coder model id being custom which I assume u have supported elsewhere in ur config

@rekram1-node commented on GitHub (Dec 17, 2025): I can't replicate any error using this, aside from the qwen3 coder model id being custom which I assume u have supported elsewhere in ur config
yindo commented 2026-02-16 17:40:57 -05:00
Author
Owner
Copy Link
Copy Source

@driebe commented on GitHub (Dec 19, 2025):

I found my error. When using the tools flag for controlling permissions the attributes are false or true but when using the permission flag its deny and allow - so when switching from the one to the other I oversaw that difference. Sorry that I didn't notice this :(

@driebe commented on GitHub (Dec 19, 2025): I found my error. When using the `tools` flag for controlling permissions the attributes are `false` or `true` but when using the `permission` flag its `deny` and `allow` - so when switching from the one to the other I oversaw that difference. Sorry that I didn't notice this :(
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels
acp
bad
bug
discussion
docs
documentation
enhancement
extension
good first issue
growth
help-wanted
mcp
model-problem
needs:compliance
nix
opentui
perf
pull-request
Mirrored from GitHub Pull Request
 tui
web
windows
zen
No Label bug docs
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
yindo
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: anomalyco/opencode#3628
Delete Branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?