opencode not respecting permissions

[vstenvik]

Description

This is my opencode.json:

  {
    "$schema": "https://opencode.ai/config.json",
    "autoupdate": true,
    "share": "disabled",
    "permission": {
      "bash": {
        "find": "allow",
        "ls": "allow",
        "wc": "allow",
        "grep": "allow",
        "tail": "allow",
        "head": "allow",
        "cat": "allow",
        "jq": "allow",
        "git": "deny"
      },
      "webfetch": "ask",
      "edit": "allow"
    },

But opencode keeps running git commands anyways

Plugins

No response

OpenCode version

No response

Steps to reproduce

No response

Screenshot and/or share link

No response

Operating System

No response

Terminal

No response

[cxiiiiiii]

Me too. I set it to allow edit, but in a session that has been running for a long time, it keeps prompting me that I don't have the edit/apply-patch tool.

[rekram1-node]

You need to be using wildcards, we try to make this pretty clear in the docs that unless u are trying to match a particular command u need to wildcard to match all the variations of it, like "git *" instead of git

[nraboy]

This is what my opencode.json file looks like and I think I followed the documentation correctly:

{
  "$schema": "https://opencode.ai/config.json",
  "agent": {
    "build": {
      "permission": {
        "edit": "ask",
        "bash": "ask"
      }
    },
    "vibe": {
      "description": "Vibe coding without interruptions",
      "permission": {
        "edit": "allow",
        "bash": {
          "*": "ask",
          "rm *": "deny",
          "npm *": "allow",
          "git *": "allow",
          "grep *": "allow"
        }
      },
      "mode": "all"
    }
  }
}

When I am using my vibe agent, it asks me to approve any git commands even though I have it with a wildcard and set to allow.

Did I miss something?

[y0umu]

I have a similar question.

cat $HOME/.config/opencode/opencode.json

{
  "$schema": "https://opencode.ai/config.json",
  "permission": {
    "bash": {
      "*": "ask",
      "ls *": "allow",
      "grep *": "allow",
      "find *": "allow",
      "cat *": "allow"
    },
    "edit": "ask",
    "external_directory": "ask"
  },
  "agent": {
    "plan": {
      "permission": {
        "bash": {
          "ls *": "allow",
          "grep *": "allow",
          "find *": "allow",
          "cat *": "allow"
        }
      }
    }
  }
// more are truncated
}

I did specify that the global permission to allow some read-only, non-destructive commands (ls, grep, find, cat, as long as we don't redirect to files), but the agent kept asking me whenever it wanted to call find or grep.

[vittolewerissa]

Same thing on my side, maybe it has something to do with permissions when we call it with pipe and redirections?

[rekram1-node]

you may wanna whitelist other commands like head, sort, etc. The agent likes to chain those in

[rekram1-node]

I tested ur config @nraboy perhaps u can share full opencode debug config so I can help u further