permissions: external read outside project never prompts in TUI prompt mode #55207

Activity

1. opencode-agent commented on Oct 13, 2026

   

   opencode-agentBot

   on Oct 13, 2026 – with OpenCode Agent

   Contributor

   More actions

   Thanks for the thorough report and the checks you ran.

   I think this is a duplicate of #54524. In v2.0.25, #53585 removed the built-in external_directory → ask rule on purpose. The default ruleset is now * → allow plus the *.env read prompts, so paths outside the project are read without a prompt. You can see this in your report: external reads are silent, .env reads still prompt, and nothing appears in the permission queue. The permissions docs were never updated and still list the old default, which is why this looks like a bug. #54524 is tracking the docs mismatch, the missing release note and requests to bring the old default back.

   Until that's settled, this config rule brings the prompts back. It covers reads, writes and other access outside the project:

   {
     "permissions": [
       { "action": "external_directory", "resource": "*", "effect": "ask" }
     ]
   }

   Possible duplicates and related issues, ordered by likelihood:

   • permissions: built-in external_directory ask never prompts, identical explicit rule does #54524: the same issue: with default config, nothing prompts for paths outside the project (open, main discussion)
   • Documented default permission doesn't match the one in the code (no default restriction for external_directory) #55070: the docs still say external_directory defaults to ask, but the code doesn't (already marked as a duplicate of permissions: built-in external_directory ask never prompts, identical explicit rule does #54524)
   • Config permissions/agents overrides cannot override built-in agent policies (external_directory always asks) #43669: the earlier always-ask external_directory default couldn't be overridden
   • Security: external_directory does not gate PowerShell/bash file writes on Windows #46398 / Bug: external_directory: "deny" is bypassed by the bash tool (macOS) #54465: shell commands getting around external_directory rules

   The bot will close this issue as a duplicate in 1 day unless you reply explaining how your problem is different.
2. opencode-agent

   added

   pending close

   triaging

   on Oct 13, 2026
3. opencode-agent

   closed this as duplicateon Oct 14, 2026
4. opencode-agent commented on Oct 14, 2026

   

   opencode-agentBot

   on Oct 14, 2026 – with OpenCode Agent

   Contributor

   More actions

   Closing this as a duplicate of #54524, since there's been no reply in the past day explaining how it's different. The silent reads outside the project come from the default change in 2.0.25 (#53585), which removed the built-in external_directory → ask rule. Please follow #54524 for the docs fix and the discussion about bringing that default back.

   Until then, adding this rule to your config brings the prompts back:

   {
     "permissions": [
       { "action": "external_directory", "resource": "*", "effect": "ask" }
     ]
   }

   If you still don't get prompts with this rule, please reply here and we can reopen. Thanks again for the detailed report.