Repository navigation
[Bug] Cmdlet permissions not working on Windows #36696
Description
Description
Hello,
I tried to configure my opencode with windows cmdlet permissions but none seems to work.
Here my configuration :
{
"$schema": "https://opencode.ai/config.json",
"permission": {
"*": "ask",
//"read": "allow", // Not working
"Read": "allow",
//"glob": "deny", // Not working
"Glob": "deny",
"bash": {
"*": "ask",
// PowerShell read-only cmdlets
//"Test-Path *": "allow",
//"Test-Path*": "allow",
//"Test*": "allow",
// Explicit PowerShell invocations
//"pwsh -Command Test-Path *": "allow", // Not working due to lack of " or '
"pwsh -Command 'Test-Path*'": "allow", // Not working too
},
},
}Also documentation is linux centered and don't handle this cases.
https://opencode.ai/docs/permissions/#granular-rules-object-syntax
Issue discovered at the same time #36690
Plugins
None
OpenCode version
1.17.18
Steps to reproduce
- Set a new project with opencode.jsonc (or unzip the one I gave)
- Ask to search files and test paths on windows, prompt :
Test if TOTO.md exist with Test-Path cmdlet windows and read content. - Permission "Test-Path" cmdlet is asked. <- Would be allowed with permissions
Modify prompt for pwsh
Screenshot and/or share link
Operating System
Windows 11 25H2 26200.8655
Terminal
OpenCode vscode extension
Metadata
Metadata
Assignees
Labels
No labels
Activity
m21-cerutti commentedon Jul 13, 2026
Need to verify it also for agents (json + fontmatter)
m21-cerutti commentedon Jul 13, 2026
Could be same problem as #36681 where permissions are not cumulative (since bash nested in permission)
m21-cerutti commentedon Aug 17, 2026
Still relevant today, linked to closed #8832
thdxr commentedon Oct 11, 2026
Thanks for the report! OpenCode 2.0 is now out and development is focused on V2, so we're closing issues filed against OpenCode 1. Please upgrade (
opencode upgrade --major, details: https://anoma.ly/notes/opencode-2-0), and if this is still relevant on 2.0, reopen this issue or open a new one with your 2.0 version.— from 𝕺𝖕𝖊𝖓𝕮𝖔𝖉𝖊