Skip to content

Unexpected Requests for iCloud, Photos Access #14982

Closed

Description

@Faqahat

Question

Image

I’ve been using OpenCode for a while, and all my projects are located strictly in my home directory (~/Code). None of them rely on or reference any resources from Downloads, Desktop, iCloud, Photos, or other external directories.

Today, after updating iCloud, macOS prompted OpenCode to request access to iCloud. I dismissed the request. A few minutes later, it requested access to Photos, which I also declined.

The Photos access request is my biggest concern, as I don’t see any reason why OpenCode would need permission to access my photo library.

After this, I went into macOS Privacy & Security settings and removed all permissions previously granted to OpenCode.

Later, I reopened OpenCode. While downloading a file in my browser, as soon as the download started, OpenCode requested access to my Downloads directory.

This behavior is unexpected because:

My projects are only in ~/Code

I am not opening or referencing files from Downloads

I have not interacted with iCloud or Photos through OpenCode

I had removed all permissions beforehand

Could you please clarify:

Why is OpenCode requesting access to Photos?

Why is it requesting access to Downloads when I am not using that directory?

Is any background indexing or file system scanning occurring?

The Photos permission request, in particular, raises privacy concerns for me, so I would appreciate clarification on the intended behavior.

Activity

  1. added
    coreAnything pertaining to core functionality of the application (opencode server stuff)
    on Feb 25, 2026
  2. deadcoder0904 commented on Feb 25, 2026

    @deadcoder0904

    Oh yeah, same issue for me: #15029

    I'll close that one :)

  3. git-malu commented on Feb 25, 2026

    @git-malu

    also

    Image
  4. shamsghi commented on Feb 25, 2026

    @shamsghi

    For me even after granting folder access, it would eventually prompt for the same permission again. It also requested access to Desktop, Downloads, Photos, and other apps data.

    But when i go to the Files and Folder on Privacy and Security i dont see requested folders (never gave it full disk access)
    Image

    And when entering Full Disk Access i dont have OpenCode enabled:

    Image
  5. neriousy commented on Feb 26, 2026

    @neriousy
    Member

    fixed in #15136

  6. git-malu commented on Feb 26, 2026

    @git-malu

    I have upgraded to 1.2.15.
    it seems the problem still persists.
    I haven't try rebooting my mac yet.

    Image
  7. deadcoder0904 commented on Feb 26, 2026

    @deadcoder0904

    Can confirm. It still happens.

  8. Faqahat commented on Feb 26, 2026

    @Faqahat
    Author
    Image

    This is still happening in Version 1.2.15 (1.2.15)

  9. git-malu commented on Feb 27, 2026

    @git-malu

    Interestingly the terminal tool Warp has the same issue. Warp is also a coding agent app.
    Does the dependency of opencode and warp have something in common? Otherwise why would they have the same issue?

    Image Image
  10. neriousy commented on Feb 27, 2026

    @neriousy
    Member

    Is it happening during using opencode?

  11. git-malu commented on Feb 27, 2026

    @git-malu

    Is it happening during using opencode?

    It has happened twice.

    The first time was a couple of days ago. Warp asked for permission, and I'm sure I wasn't using the Opencode CLI in Warp at that time (though I might have been using the Opencode desktop app).

    The second time happened just now, while I was using the Opencode CLI inside Warp.

  12. neriousy commented on Feb 27, 2026

    @neriousy
    Member

    Was there maybe a update to the macOS some time ago?

  13. git-malu commented on Feb 27, 2026

    @git-malu

    Was there maybe a update to the macOS some time ago?

    unlikely, my os version is quite old.

    Image
  14. hwkns commented on Feb 28, 2026

    @hwkns

    Might be related to a file watcher -- I created a new file inside my Dropbox folder, and OpenCode immediately asked for permission to access files in there.

  15. coderzc commented on Feb 28, 2026

    @coderzc
    Image

    I think this may be related to opencode scanning the root directory incorrectly.

  16. marcel-ouska2 commented on Mar 2, 2026

    @marcel-ouska2

    Opencode as its working is capable of asking with this dialog sometimes 7-10x times in a row. And then again in like 2 mins. Its making the whole computer unusable as all I do is click dialogs..

    Image

    It seems to me that its happening now when i want it to fix something in docker. -- Could be unrelated

    my version: Version 1.2.15 (1.2.15)

  17. Lermatroid commented on Mar 2, 2026

    @Lermatroid

    +1. This still seems to be happening to me.

    Image
  18. modkaffes commented on Mar 6, 2026

    @modkaffes

    I didn’t think to screenshot it but I just received a notification that OpenCode wanted access to my iCloud files. This is concerning.

  19. shamsghi commented on Mar 6, 2026

    @shamsghi

    I’m getting more OpenCode notifications to access files when using the GUI app compared to the CLI.

  20. cwar082 commented on Mar 6, 2026

    @cwar082

    Same here with latest version (1.2.20) of Mac Desktop app:

    Image
  21. moodler commented on Mar 10, 2026

    @moodler

    Happening with me too, even with OpenCode in server mode or CLI.

    This just should not be happening, and the fact it continues doing this makes me doubt the security of the whole system.

    I'm going to have a look at the code and see if I can find why.

    (Edit, found it, patch below)

  22. moodler commented on Mar 11, 2026

    @moodler

    #16891 was merged today so this should be fixed in next release I assume

  23. git-malu commented on Mar 13, 2026

    @git-malu

    I've been using v1.2.25 for about 10 minutes now, and the issue seems to be gone.

  24. git-malu commented on Mar 16, 2026

    @git-malu
    Image

    v1.2.26 It's much less frequent to see this now. but I still see this one today.

  25. moodler commented on Mar 16, 2026

    @moodler

    Yes I'm seeing it with 1.2.27 too. Maybe someone should actually look at my patch #16849

  26. thdxr commented on Apr 26, 2026

    @thdxr
    Member

    the root issue here is in the old desktop app the server is spawned in your home directory. and when it does that it operates like you ran opencode in your home directory. this has been fixed in our new electron switch so closing these issues

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

Labels

coreAnything pertaining to core functionality of the application (opencode server stuff)

Type

No type

Projects

No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions