anomalyco/opencode
1
0
Fork 0
mirror of https://github.com/anomalyco/opencode.git synced 2026-07-22 10:15:31 -04:00
Code Issues 5.9k Packages Projects Releases 19 Wiki Activity

auto upgrade to 1.1.1, surprise! commands no longer require approval #4188

New Issue
Closed
opened 2026-02-16 17:42:57 -05:00 by yindo · 14 comments
yindo commented 2026-02-16 17:42:57 -05:00
Owner
Copy Link
Copy Source

Originally created by @aaronnewsome on GitHub (Jan 4, 2026).

Originally assigned to: @rekram1-node on GitHub.

Description

i've been running this in opencode.json since i can remember

"permission": {
      "webfetch": "allow",
      "bash": {
        "rm *": "ask",
        "git push *": "ask",
        "git commit *": "ask",
        "git add *": "ask",
        "git log *": "allow",
        "git status *": "allow",
        "git diff *": "allow",
        "docker *": "ask",
        "kubectl *": "ask",
        "npm run build": "allow",
        "npm run typecheck": "allow",
        "npm run lint": "allow",
        "npm *": "ask",
        "pkill *": "ask",
        "kill *": "ask",
        "python3 *": "ask",
        "python *": "ask",
        "node *": "ask"
      }
  },

since upgrading to 1.1.1, all of these commands are simply run now with no approval required in build mode. is this intentional?

Plugins

No response

OpenCode version

No response

Steps to reproduce

No response

Screenshot and/or share link

No response

Operating System

No response

Terminal

No response

Originally created by @aaronnewsome on GitHub (Jan 4, 2026). Originally assigned to: @rekram1-node on GitHub. ### Description i've been running this in opencode.json since i can remember ``` "permission": { "webfetch": "allow", "bash": { "rm *": "ask", "git push *": "ask", "git commit *": "ask", "git add *": "ask", "git log *": "allow", "git status *": "allow", "git diff *": "allow", "docker *": "ask", "kubectl *": "ask", "npm run build": "allow", "npm run typecheck": "allow", "npm run lint": "allow", "npm *": "ask", "pkill *": "ask", "kill *": "ask", "python3 *": "ask", "python *": "ask", "node *": "ask" } }, ``` since upgrading to 1.1.1, all of these commands are simply run now with no approval required in build mode. is this intentional? ### Plugins _No response_ ### OpenCode version _No response_ ### Steps to reproduce _No response_ ### Screenshot and/or share link _No response_ ### Operating System _No response_ ### Terminal _No response_
yindo added the bug label 2026-02-16 17:42:57 -05:00
yindo closed this issue 2026-02-16 17:42:57 -05:00
yindo commented 2026-02-16 17:42:58 -05:00
Author
Owner
Copy Link
Copy Source

@rekram1-node commented on GitHub (Jan 4, 2026):

can u show me output of:

opencode debug config

@rekram1-node commented on GitHub (Jan 4, 2026): can u show me output of: opencode debug config
yindo commented 2026-02-16 17:42:58 -05:00
Author
Owner
Copy Link
Copy Source

@aaronnewsome commented on GitHub (Jan 4, 2026):

{
  "$schema": "https://opencode.ai/config.json",
  "model": "ai/minimax-m2",
  "agent": {
    "plan": {
      "model": "ai/minimax-m2",
      "tools": {
        "write": false,
        "edit": false,
        "read": true,
        "grep": true,
        "glob": true,
        "list": true,
        "todowrite": true,
        "todoread": true,
        "webfetch": true,
        "bash": false
      },
      "mode": "primary",
      "options": {},
      "permission": {
        "edit": "deny",
        "read": "allow",
        "grep": "allow",
        "glob": "allow",
        "list": "allow",
        "todowrite": "allow",
        "todoread": "allow",
        "webfetch": "allow",
        "bash": "deny"
      }
    },
    "build": {
      "model": "ai/minimax-m2",
      "tools": {
        "write": true,
        "edit": true,
        "read": true,
        "bash": true,
        "grep": true,
        "glob": true,
        "list": true,
        "todowrite": true,
        "todoread": true,
        "webfetch": true,
        "git": true
      },
      "mode": "primary",
      "options": {},
      "permission": {
        "edit": "allow",
        "read": "allow",
        "bash": "allow",
        "grep": "allow",
        "glob": "allow",
        "list": "allow",
        "todowrite": "allow",
        "todoread": "allow",
        "webfetch": "allow",
        "git": "allow"
      }
    },
    "code-reviewer": {
      "model": "ai/minimax-m2",
      "prompt": "You are a code reviewer. Focus on security, performance, and maintainability.",
      "tools": {
        "read": true,
        "write": false,
        "grep": true,
        "glob": true,
        "list": true,
        "todowrite": true,
        "todoread": true,
        "webfetch": true,
        "edit": false
      },
      "description": "Reviews code for best practices and potential issues",
      "mode": "subagent",
      "options": {},
      "permission": {
        "read": "allow",
        "edit": "deny",
        "grep": "allow",
        "glob": "allow",
        "list": "allow",
        "todowrite": "allow",
        "todoread": "allow",
        "webfetch": "allow"
      }
    }
  },
  "provider": {
    "openrouter": {
      "npm": "@ai-sdk/openai-compatible",
      "models": {
        "moonshotai/kimi-k2:nitro": {
          "id": "moonshotai/kimi-k2:nitro",
          "name": "Kimi K2 Nitro",
          "attachment": false,
          "reasoning": true,
          "temperature": true,
          "tool_call": true,
          "limit": {
            "context": 200000,
            "output": 4096
          }
        }
      },
      "options": {
        "baseURL": "https://openrouter.ai/api/v1"
      }
    },
    "hawk": {
      "npm": "@ai-sdk/openai-compatible",
      "models": {
        "minimax-m2": {
          "name": "minimax-m2",
          "reasoning": true,
          "tool_call": true,
          "cost": {
            "input": 0.4,
            "output": 2
          },
          "options": {
            "num_ctx": 131072,
            "temperature": 1,
            "top_p": 0.95,
            "top_k": 40
          }
        },
        "glm-4.5-air": {
          "name": "glm-4.5-air",
          "reasoning": true,
          "tool_call": true,
          "cost": {
            "input": 0.1,
            "output": 1.2
          },
          "options": {
            "num_ctx": 131072,
            "temperature": 1,
            "top_p": 0.95,
            "top_k": 40
          }
        }
      },
      "options": {
        "baseURL": "http://hawk.swift.local:8080/v1",
        "timeout": 10000000,
        "includeUsage": true
      }
    },
    "ai": {
      "npm": "@ai-sdk/openai-compatible",
      "models": {
        "minimax-m2": {
          "name": "minimax-m2",
          "reasoning": true,
          "tool_call": true,
          "cost": {
            "input": 0.1,
            "output": 1.2
          },
          "options": {
            "num_ctx": 131072,
            "temperature": 1,
            "top_p": 0.95,
            "top_k": 40
          }
        },
        "glm-4.5-air": {
          "name": "glm-4.5-air",
          "reasoning": true,
          "tool_call": true,
          "cost": {
            "input": 0.1,
            "output": 1.2
          },
          "options": {
            "num_ctx": 131072,
            "temperature": 1,
            "top_p": 0.95,
            "top_k": 40
          }
        },
        "glm-4.7": {
          "name": "glm-4.7",
          "reasoning": true,
          "tool_call": true,
          "cost": {
            "input": 0.2,
            "output": 1.2
          },
          "options": {
            "num_ctx": 131072,
            "temperature": 1,
            "top_p": 0.95
          }
        }
      },
      "options": {
        "baseURL": "http://ai.swift.local:8080/v1",
        "timeout": 10000000,
        "includeUsage": true
      }
    },
    "ai-vllm": {
      "npm": "@ai-sdk/openai-compatible",
      "models": {
        "PrimeIntellect/INTELLECT-3-FP8": {
          "name": "intellect-3",
          "reasoning": true,
          "tool_call": true,
          "cost": {
            "input": 0.4,
            "output": 3
          },
          "options": {
            "num_ctx": 131072,
            "temperature": 1,
            "top_p": 0.95,
            "top_k": 40
          }
        }
      },
      "options": {
        "baseURL": "http://ai.swift.local:8000/v1",
        "timeout": 10000000,
        "includeUsage": true
      }
    },
    "ollama": {
      "npm": "@ai-sdk/openai-compatible",
      "models": {
        "qwen3-coder:30b": {
          "name": "qwen3-coder:30b",
          "reasoning": true,
          "tool_call": true,
          "cost": {
            "input": 0.1,
            "output": 1.2
          }
        },
        "gpt-oss:120b": {
          "name": "gpt-oss:120b",
          "reasoning": true,
          "tool_call": true,
          "cost": {
            "input": 0.1,
            "output": 1.2
          }
        },
        "ministral-3:14b": {
          "name": "ministral-3:14b",
          "reasoning": true,
          "tool_call": true,
          "cost": {
            "input": 0.1,
            "output": 1.2
          }
        },
        "deepseek-r1:32b": {
          "name": "deepseek-r1:32b",
          "reasoning": true,
          "tool_call": true,
          "cost": {
            "input": 0.1,
            "output": 1.2
          }
        }
      },
      "options": {
        "baseURL": "http://hawk.swift.local:11434/v1",
        "timeout": 1000000,
        "includeUsage": true
      }
    }
  },
  "mcp": {
    "chrome-devtools": {
      "type": "local",
      "command": [
        "npx",
        "chrome-devtools-mcp@latest",
        "--browserUrl",
        "http://127.0.0.1:9222"
      ],
      "environment": {
        "DISPLAY": ":0"
      },
      "enabled": true
    },
    "context7": {
      "type": "remote",
      "url": "https://mcp.context7.com/mcp",
      "enabled": false,
      "headers": {
        "Authorization": ""
      }
    },
    "netvault-mcp": {
      "type": "remote",
      "url": "http://netvault-mcp.swift.local/mcp",
      "enabled": false,
      "headers": {
        "Authorization": ""
      }
    }
  },
  "permission": {
    "bash": {
      "rm *": "ask",
      "git push *": "ask",
      "git commit *": "ask",
      "git add *": "ask",
      "git log *": "allow",
      "git status *": "allow",
      "git diff *": "allow",
      "docker *": "ask",
      "kubectl *": "ask",
      "npm run build": "allow",
      "npm run typecheck": "allow",
      "npm run lint": "allow",
      "npm *": "ask",
      "pkill *": "ask",
      "kill *": "ask",
      "python3 *": "ask",
      "python *": "ask",
      "node *": "ask"
    },
    "webfetch": "allow"
  },
  "mode": {},
  "plugin": [],
  "command": {},
  "username": "anewsome",
  "keybinds": {
    "leader": "ctrl+x",
    "app_exit": "ctrl+c,ctrl+d,<leader>q",
    "editor_open": "<leader>e",
    "theme_list": "<leader>t",
    "sidebar_toggle": "<leader>b",
    "scrollbar_toggle": "none",
    "username_toggle": "none",
    "status_view": "<leader>s",
    "session_export": "<leader>x",
    "session_new": "<leader>n",
    "session_list": "<leader>l",
    "session_timeline": "<leader>g",
    "session_fork": "none",
    "session_rename": "none",
    "session_share": "none",
    "session_unshare": "none",
    "session_interrupt": "escape",
    "session_compact": "<leader>c",
    "messages_page_up": "pageup",
    "messages_page_down": "pagedown",
    "messages_half_page_up": "ctrl+alt+u",
    "messages_half_page_down": "ctrl+alt+d",
    "messages_first": "ctrl+g,home",
    "messages_last": "ctrl+alt+g,end",
    "messages_next": "none",
    "messages_previous": "none",
    "messages_last_user": "none",
    "messages_copy": "<leader>y",
    "messages_undo": "<leader>u",
    "messages_redo": "<leader>r",
    "messages_toggle_conceal": "<leader>h",
    "tool_details": "none",
    "model_list": "<leader>m",
    "model_cycle_recent": "f2",
    "model_cycle_recent_reverse": "shift+f2",
    "model_cycle_favorite": "none",
    "model_cycle_favorite_reverse": "none",
    "command_list": "ctrl+p",
    "agent_list": "<leader>a",
    "agent_cycle": "tab",
    "agent_cycle_reverse": "shift+tab",
    "variant_cycle": "ctrl+t",
    "input_clear": "ctrl+c",
    "input_paste": "ctrl+v",
    "input_submit": "return",
    "input_newline": "shift+return,ctrl+return,alt+return,ctrl+j",
    "input_move_left": "left,ctrl+b",
    "input_move_right": "right,ctrl+f",
    "input_move_up": "up",
    "input_move_down": "down",
    "input_select_left": "shift+left",
    "input_select_right": "shift+right",
    "input_select_up": "shift+up",
    "input_select_down": "shift+down",
    "input_line_home": "ctrl+a",
    "input_line_end": "ctrl+e",
    "input_select_line_home": "ctrl+shift+a",
    "input_select_line_end": "ctrl+shift+e",
    "input_visual_line_home": "alt+a",
    "input_visual_line_end": "alt+e",
    "input_select_visual_line_home": "alt+shift+a",
    "input_select_visual_line_end": "alt+shift+e",
    "input_buffer_home": "home",
    "input_buffer_end": "end",
    "input_select_buffer_home": "shift+home",
    "input_select_buffer_end": "shift+end",
    "input_delete_line": "ctrl+shift+d",
    "input_delete_to_line_end": "ctrl+k",
    "input_delete_to_line_start": "ctrl+u",
    "input_backspace": "backspace,shift+backspace",
    "input_delete": "ctrl+d,delete,shift+delete",
    "input_undo": "ctrl+-,super+z",
    "input_redo": "ctrl+.,super+shift+z",
    "input_word_forward": "alt+f,alt+right,ctrl+right",
    "input_word_backward": "alt+b,alt+left,ctrl+left",
    "input_select_word_forward": "alt+shift+f,alt+shift+right",
    "input_select_word_backward": "alt+shift+b,alt+shift+left",
    "input_delete_word_forward": "alt+d,alt+delete,ctrl+delete",
    "input_delete_word_backward": "ctrl+w,ctrl+backspace,alt+backspace",
    "history_previous": "up",
    "history_next": "down",
    "session_child_cycle": "<leader>right",
    "session_child_cycle_reverse": "<leader>left",
    "session_parent": "<leader>up",
    "terminal_suspend": "ctrl+z",
    "terminal_title_toggle": "none",
    "tips_toggle": "<leader>h"
  }
}
@aaronnewsome commented on GitHub (Jan 4, 2026): ``` { "$schema": "https://opencode.ai/config.json", "model": "ai/minimax-m2", "agent": { "plan": { "model": "ai/minimax-m2", "tools": { "write": false, "edit": false, "read": true, "grep": true, "glob": true, "list": true, "todowrite": true, "todoread": true, "webfetch": true, "bash": false }, "mode": "primary", "options": {}, "permission": { "edit": "deny", "read": "allow", "grep": "allow", "glob": "allow", "list": "allow", "todowrite": "allow", "todoread": "allow", "webfetch": "allow", "bash": "deny" } }, "build": { "model": "ai/minimax-m2", "tools": { "write": true, "edit": true, "read": true, "bash": true, "grep": true, "glob": true, "list": true, "todowrite": true, "todoread": true, "webfetch": true, "git": true }, "mode": "primary", "options": {}, "permission": { "edit": "allow", "read": "allow", "bash": "allow", "grep": "allow", "glob": "allow", "list": "allow", "todowrite": "allow", "todoread": "allow", "webfetch": "allow", "git": "allow" } }, "code-reviewer": { "model": "ai/minimax-m2", "prompt": "You are a code reviewer. Focus on security, performance, and maintainability.", "tools": { "read": true, "write": false, "grep": true, "glob": true, "list": true, "todowrite": true, "todoread": true, "webfetch": true, "edit": false }, "description": "Reviews code for best practices and potential issues", "mode": "subagent", "options": {}, "permission": { "read": "allow", "edit": "deny", "grep": "allow", "glob": "allow", "list": "allow", "todowrite": "allow", "todoread": "allow", "webfetch": "allow" } } }, "provider": { "openrouter": { "npm": "@ai-sdk/openai-compatible", "models": { "moonshotai/kimi-k2:nitro": { "id": "moonshotai/kimi-k2:nitro", "name": "Kimi K2 Nitro", "attachment": false, "reasoning": true, "temperature": true, "tool_call": true, "limit": { "context": 200000, "output": 4096 } } }, "options": { "baseURL": "https://openrouter.ai/api/v1" } }, "hawk": { "npm": "@ai-sdk/openai-compatible", "models": { "minimax-m2": { "name": "minimax-m2", "reasoning": true, "tool_call": true, "cost": { "input": 0.4, "output": 2 }, "options": { "num_ctx": 131072, "temperature": 1, "top_p": 0.95, "top_k": 40 } }, "glm-4.5-air": { "name": "glm-4.5-air", "reasoning": true, "tool_call": true, "cost": { "input": 0.1, "output": 1.2 }, "options": { "num_ctx": 131072, "temperature": 1, "top_p": 0.95, "top_k": 40 } } }, "options": { "baseURL": "http://hawk.swift.local:8080/v1", "timeout": 10000000, "includeUsage": true } }, "ai": { "npm": "@ai-sdk/openai-compatible", "models": { "minimax-m2": { "name": "minimax-m2", "reasoning": true, "tool_call": true, "cost": { "input": 0.1, "output": 1.2 }, "options": { "num_ctx": 131072, "temperature": 1, "top_p": 0.95, "top_k": 40 } }, "glm-4.5-air": { "name": "glm-4.5-air", "reasoning": true, "tool_call": true, "cost": { "input": 0.1, "output": 1.2 }, "options": { "num_ctx": 131072, "temperature": 1, "top_p": 0.95, "top_k": 40 } }, "glm-4.7": { "name": "glm-4.7", "reasoning": true, "tool_call": true, "cost": { "input": 0.2, "output": 1.2 }, "options": { "num_ctx": 131072, "temperature": 1, "top_p": 0.95 } } }, "options": { "baseURL": "http://ai.swift.local:8080/v1", "timeout": 10000000, "includeUsage": true } }, "ai-vllm": { "npm": "@ai-sdk/openai-compatible", "models": { "PrimeIntellect/INTELLECT-3-FP8": { "name": "intellect-3", "reasoning": true, "tool_call": true, "cost": { "input": 0.4, "output": 3 }, "options": { "num_ctx": 131072, "temperature": 1, "top_p": 0.95, "top_k": 40 } } }, "options": { "baseURL": "http://ai.swift.local:8000/v1", "timeout": 10000000, "includeUsage": true } }, "ollama": { "npm": "@ai-sdk/openai-compatible", "models": { "qwen3-coder:30b": { "name": "qwen3-coder:30b", "reasoning": true, "tool_call": true, "cost": { "input": 0.1, "output": 1.2 } }, "gpt-oss:120b": { "name": "gpt-oss:120b", "reasoning": true, "tool_call": true, "cost": { "input": 0.1, "output": 1.2 } }, "ministral-3:14b": { "name": "ministral-3:14b", "reasoning": true, "tool_call": true, "cost": { "input": 0.1, "output": 1.2 } }, "deepseek-r1:32b": { "name": "deepseek-r1:32b", "reasoning": true, "tool_call": true, "cost": { "input": 0.1, "output": 1.2 } } }, "options": { "baseURL": "http://hawk.swift.local:11434/v1", "timeout": 1000000, "includeUsage": true } } }, "mcp": { "chrome-devtools": { "type": "local", "command": [ "npx", "chrome-devtools-mcp@latest", "--browserUrl", "http://127.0.0.1:9222" ], "environment": { "DISPLAY": ":0" }, "enabled": true }, "context7": { "type": "remote", "url": "https://mcp.context7.com/mcp", "enabled": false, "headers": { "Authorization": "" } }, "netvault-mcp": { "type": "remote", "url": "http://netvault-mcp.swift.local/mcp", "enabled": false, "headers": { "Authorization": "" } } }, "permission": { "bash": { "rm *": "ask", "git push *": "ask", "git commit *": "ask", "git add *": "ask", "git log *": "allow", "git status *": "allow", "git diff *": "allow", "docker *": "ask", "kubectl *": "ask", "npm run build": "allow", "npm run typecheck": "allow", "npm run lint": "allow", "npm *": "ask", "pkill *": "ask", "kill *": "ask", "python3 *": "ask", "python *": "ask", "node *": "ask" }, "webfetch": "allow" }, "mode": {}, "plugin": [], "command": {}, "username": "anewsome", "keybinds": { "leader": "ctrl+x", "app_exit": "ctrl+c,ctrl+d,<leader>q", "editor_open": "<leader>e", "theme_list": "<leader>t", "sidebar_toggle": "<leader>b", "scrollbar_toggle": "none", "username_toggle": "none", "status_view": "<leader>s", "session_export": "<leader>x", "session_new": "<leader>n", "session_list": "<leader>l", "session_timeline": "<leader>g", "session_fork": "none", "session_rename": "none", "session_share": "none", "session_unshare": "none", "session_interrupt": "escape", "session_compact": "<leader>c", "messages_page_up": "pageup", "messages_page_down": "pagedown", "messages_half_page_up": "ctrl+alt+u", "messages_half_page_down": "ctrl+alt+d", "messages_first": "ctrl+g,home", "messages_last": "ctrl+alt+g,end", "messages_next": "none", "messages_previous": "none", "messages_last_user": "none", "messages_copy": "<leader>y", "messages_undo": "<leader>u", "messages_redo": "<leader>r", "messages_toggle_conceal": "<leader>h", "tool_details": "none", "model_list": "<leader>m", "model_cycle_recent": "f2", "model_cycle_recent_reverse": "shift+f2", "model_cycle_favorite": "none", "model_cycle_favorite_reverse": "none", "command_list": "ctrl+p", "agent_list": "<leader>a", "agent_cycle": "tab", "agent_cycle_reverse": "shift+tab", "variant_cycle": "ctrl+t", "input_clear": "ctrl+c", "input_paste": "ctrl+v", "input_submit": "return", "input_newline": "shift+return,ctrl+return,alt+return,ctrl+j", "input_move_left": "left,ctrl+b", "input_move_right": "right,ctrl+f", "input_move_up": "up", "input_move_down": "down", "input_select_left": "shift+left", "input_select_right": "shift+right", "input_select_up": "shift+up", "input_select_down": "shift+down", "input_line_home": "ctrl+a", "input_line_end": "ctrl+e", "input_select_line_home": "ctrl+shift+a", "input_select_line_end": "ctrl+shift+e", "input_visual_line_home": "alt+a", "input_visual_line_end": "alt+e", "input_select_visual_line_home": "alt+shift+a", "input_select_visual_line_end": "alt+shift+e", "input_buffer_home": "home", "input_buffer_end": "end", "input_select_buffer_home": "shift+home", "input_select_buffer_end": "shift+end", "input_delete_line": "ctrl+shift+d", "input_delete_to_line_end": "ctrl+k", "input_delete_to_line_start": "ctrl+u", "input_backspace": "backspace,shift+backspace", "input_delete": "ctrl+d,delete,shift+delete", "input_undo": "ctrl+-,super+z", "input_redo": "ctrl+.,super+shift+z", "input_word_forward": "alt+f,alt+right,ctrl+right", "input_word_backward": "alt+b,alt+left,ctrl+left", "input_select_word_forward": "alt+shift+f,alt+shift+right", "input_select_word_backward": "alt+shift+b,alt+shift+left", "input_delete_word_forward": "alt+d,alt+delete,ctrl+delete", "input_delete_word_backward": "ctrl+w,ctrl+backspace,alt+backspace", "history_previous": "up", "history_next": "down", "session_child_cycle": "<leader>right", "session_child_cycle_reverse": "<leader>left", "session_parent": "<leader>up", "terminal_suspend": "ctrl+z", "terminal_title_toggle": "none", "tips_toggle": "<leader>h" } } ```
yindo commented 2026-02-16 17:42:58 -05:00
Author
Owner
Copy Link
Copy Source

@malhashemi commented on GitHub (Jan 4, 2026):

The bash:allow in the build agent configuration is overriding the global bash config that you set. This has yet to be documented but from my understanding of the new system this is how it should work. Try removing that line and see what happens

@malhashemi commented on GitHub (Jan 4, 2026): The `bash:allow` in the build agent configuration is overriding the global bash config that you set. This has yet to be documented but from my understanding of the new system this is how it should work. Try removing that line and see what happens
yindo commented 2026-02-16 17:42:58 -05:00
Author
Owner
Copy Link
Copy Source

@aaronnewsome commented on GitHub (Jan 4, 2026):

there's no bash:allow in build agent config, but there is a bash: true, so I've removed that and i'll test. weird thing is, the config was working for months.

@aaronnewsome commented on GitHub (Jan 4, 2026): there's no bash:allow in build agent config, but there is a bash: true, so I've removed that and i'll test. weird thing is, the config was working for months.
yindo commented 2026-02-16 17:42:58 -05:00
Author
Owner
Copy Link
Copy Source

@malhashemi commented on GitHub (Jan 4, 2026):

there's no bash:allow in build agent config, but there is a bash: true, so I've removed that and i'll test.

Oh I was just going by the reply you posted which showed

agent.build.permission.bash was set to allow.

weird thing is, the config was working for months.

Yeah the permission system just got a big overhaul in the latest release few hours ago.

@malhashemi commented on GitHub (Jan 4, 2026): > there's no bash:allow in build agent config, but there is a bash: true, so I've removed that and i'll test. Oh I was just going by the reply you posted which showed agent.build.permission.bash was set to allow. >weird thing is, the config was working for months. Yeah the permission system just got a big overhaul in the latest release few hours ago.
yindo commented 2026-02-16 17:42:58 -05:00
Author
Owner
Copy Link
Copy Source

@thdxr commented on GitHub (Jan 4, 2026):

hm this isn't intentional. can i see your full config?

@thdxr commented on GitHub (Jan 4, 2026): hm this isn't intentional. can i see your full config?
yindo commented 2026-02-16 17:42:58 -05:00
Author
Owner
Copy Link
Copy Source

@thdxr commented on GitHub (Jan 4, 2026):

oh looking closer this is likely because of your tools config because it says bash: true - we got rid of that field but we try to convert it to permissions

however we merge it before the rest of your permissions so not sure why it seems to be overriding

@thdxr commented on GitHub (Jan 4, 2026): oh looking closer this is likely because of your tools config because it says `bash: true` - we got rid of that field but we try to convert it to permissions however we merge it _before_ the rest of your permissions so not sure why it seems to be overriding
yindo commented 2026-02-16 17:42:58 -05:00
Author
Owner
Copy Link
Copy Source

@thdxr commented on GitHub (Jan 4, 2026):

can you run opencode debug agent build

@thdxr commented on GitHub (Jan 4, 2026): can you run `opencode debug agent build`
yindo commented 2026-02-16 17:42:58 -05:00
Author
Owner
Copy Link
Copy Source

@thdxr commented on GitHub (Jan 4, 2026):

ok looked closer into this - our backwards compatible logic for the tools field isn't great

we see bash: true at the agent level and assume that means you want to enable all bash permissions which overrides the global permissions

i'm not too sure of a good way to do it otherwise though, gets messy. best thing to do is to get rid of tools field everywhere

@thdxr commented on GitHub (Jan 4, 2026): ok looked closer into this - our backwards compatible logic for the `tools` field isn't great we see `bash: true` at the agent level and assume that means you want to enable all bash permissions which overrides the global permissions i'm not too sure of a good way to do it otherwise though, gets messy. best thing to do is to get rid of `tools` field everywhere
yindo commented 2026-02-16 17:42:58 -05:00
Author
Owner
Copy Link
Copy Source

@aaronnewsome commented on GitHub (Jan 4, 2026):

ok, i removed bash: true from build agent config. the changed behavior caught me off guard as soon as opencode started automatically running commands that it used to prompt for 5 minutes ago. removing bash:true fixed it.

@aaronnewsome commented on GitHub (Jan 4, 2026): ok, i removed `bash: true` from build agent config. the changed behavior caught me off guard as soon as opencode started automatically running commands that it used to prompt for 5 minutes ago. removing bash:true fixed it.
yindo commented 2026-02-16 17:42:58 -05:00
Author
Owner
Copy Link
Copy Source

@Mithrillion commented on GitHub (Jan 6, 2026):

So if I understand correctly,

Old behaviour - bash: true inherits the top level bash permissions

New behaviour - not having bash: true or bash: false inherits top level bash permissions, whereas bash: true overrides the top level permissions and sets every bash command to be allowed

Not sure why the new behaviour is implemented. The old one seems to make more sense.

@Mithrillion commented on GitHub (Jan 6, 2026): So if I understand correctly, Old behaviour - `bash: true` inherits the top level bash permissions New behaviour - not having `bash: true` or `bash: false` inherits top level bash permissions, whereas `bash: true` overrides the top level permissions and sets every bash command to be allowed Not sure why the new behaviour is implemented. The old one seems to make more sense.
yindo commented 2026-02-16 17:42:58 -05:00
Author
Owner
Copy Link
Copy Source

@randomm commented on GitHub (Jan 7, 2026):

Root Cause Found and Fixed

This issue helped us identify the root cause of the permission bug! We found that the tools field in the Agent schema is being spread into the resolved config, overriding permission-based restrictions.

Fix verified in #6527 - see the detailed fix and verification there.

The solution is to exclude tools and maxSteps during the Agent config transform:

const { tools, maxSteps, ...rest } = agent
return { ...rest, options, permission, steps }

This ensures permission properly controls tool availability for subagents.

@randomm commented on GitHub (Jan 7, 2026): ## Root Cause Found and Fixed This issue helped us identify the root cause of the permission bug! We found that the `tools` field in the Agent schema is being spread into the resolved config, overriding permission-based restrictions. **Fix verified in #6527** - see the detailed fix and verification there. The solution is to exclude `tools` and `maxSteps` during the Agent config transform: ```typescript const { tools, maxSteps, ...rest } = agent return { ...rest, options, permission, steps } ``` This ensures `permission` properly controls tool availability for subagents.
yindo commented 2026-02-16 17:42:58 -05:00
Author
Owner
Copy Link
Copy Source

@randomm commented on GitHub (Jan 7, 2026):

FYI - we've submitted PR #7237 which addresses the related tools field issue by excluding it from the agent config spread.

This complements the fix discussed in this thread.

@randomm commented on GitHub (Jan 7, 2026): FYI - we've submitted PR #7237 which addresses the related `tools` field issue by excluding it from the agent config spread. This complements the fix discussed in this thread.
yindo commented 2026-02-16 17:42:58 -05:00
Author
Owner
Copy Link
Copy Source

@randomm commented on GitHub (Jan 8, 2026):

Note: Our earlier comments here were incorrect - that fix attempt didn't address the root cause.

The workaround in this thread (removing tools field) fixes primary agent permissions, but subagent permissions remain broken in v1.1.x. See #6527 for the full analysis and tracking.

@randomm commented on GitHub (Jan 8, 2026): Note: Our earlier comments here were incorrect - that fix attempt didn't address the root cause. The workaround in this thread (removing `tools` field) fixes **primary agent** permissions, but **subagent permissions remain broken** in v1.1.x. See #6527 for the full analysis and tracking.
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels
acp
bad
bug
discussion
docs
documentation
enhancement
extension
good first issue
growth
help-wanted
mcp
model-problem
needs:compliance
nix
opentui
perf
pull-request
Mirrored from GitHub Pull Request
 tui
web
windows
zen
No Label bug
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
yindo
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: anomalyco/opencode#4188
Delete Branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?