desktop: permission dialog stuck after tool interrupt/timeout; Deny/Allow replies 404 forever, composer blocked #55678

Activity

1. opencode-agent commented on Oct 15, 2026

   

   opencode-agentBot

   on Oct 15, 2026 – with OpenCode Agent

   Contributor

   More actions

   Thanks for the detailed report. I reproduced this on 2.0.29, and it still happens on the latest dev (4397ee4).

   Steps (simulated model; I used a shell ask rule instead of edit, but both go through the same permission check):

   1. A tool call hits an ask rule, and the "Permission required" prompt appears.
   2. The session is interrupted while the prompt is pending. The tool part shows "Tool execution interrupted".
   3. The prompt is still displayed, but the server's pending permission list is now empty.
   4. Replying to that prompt returns 404 PermissionNotFoundError, which matches the 404s in your log.

   The server drops the pending request when the tool call is interrupted but never sends a permission.replied event, so the client is never told to remove the prompt. In the terminal UI, pressing Enter clears the prompt locally after the failed reply. The Desktop app keeps it and blocks the composer, as you describe.

   The recording and screenshot below show the prompt still on screen after the interrupt, and the script below reproduces it.

   Related: #52846 (the same stale prompt after location disposal or idle eviction), plus #52526 and #29422 (the same interrupt case, both closed).

   recording.mp4

   

   Reproduction script (drive.ts)

   // Repro for anomalyco/opencode#55678: interrupting a session while a permission
   // prompt is pending drops the request server-side without a permission.replied
   // event, so the client keeps showing the prompt and every reply 404s.
   import { Effect } from "effect"
   import { Llm, OpenCodeDriver } from "opencode-drive"
   
   export default OpenCodeDriver.use(
     {
       ...(process.env.OC_DEV ? { opencode: { dev: process.env.OC_DEV } } : {}),
       tui: { recording: true },
       config: { permissions: [{ action: "shell", resource: "*", effect: "ask" }] },
       project: { git: true, files: { "README.md": "hello\n" } },
     },
     ({ ui, llm, opencode }) =>
       Effect.gen(function* () {
         yield* llm.queue(
           Llm.toolCall({ index: 0, id: "call_shell", name: "shell", input: { command: "echo hi > notes.txt" } }),
           Llm.finish("tool-calls"),
         )
         yield* ui.submit("Create notes.txt")
         yield* ui.waitFor("Allow once", { timeout: 30_000 })
         yield* ui.screenshot("1-permission-pending")
   
         const before = yield* opencode.permission.request.list()
         yield* Effect.log(`pending before interrupt: ${before.data.length}`)
         const req = before.data[0]!
   
         // Interrupt the run while the prompt is pending (same as aborting in Desktop).
         const res = yield* opencode.session.interrupt({ sessionID: req.sessionID })
         yield* Effect.log(`interrupt: ${JSON.stringify(res)}`)
         yield* Effect.sleep("3 seconds")
   
         const after = yield* opencode.permission.request.list()
         yield* Effect.log(`pending after interrupt: ${after.data.length}`)
         yield* ui.screenshot("2-after-interrupt")
   
         const reply = yield* opencode.permission
           .reply({ sessionID: req.sessionID, requestID: req.id, decision: "once" })
           .pipe(Effect.as("ok"), Effect.catch((e) => Effect.succeed(`error: ${(e as any)?._tag ?? String(e)}`)))
         yield* Effect.log(`reply to still-displayed prompt: ${reply}`)
   
         // Press Enter on "Allow once" in the TUI.
         yield* ui.press("return")
         yield* Effect.sleep("2 seconds")
         const frame = yield* ui.capture()
         const shown = JSON.stringify(frame).includes("Allow once")
         // The TUI drops the prompt locally once its reply fails; the Desktop/web app
         // keeps it, which is what the issue reports. Server-side there is never a
         // permission.replied event for the interrupted request.
         yield* Effect.log(`TUI prompt still shown after pressing Enter: ${shown}`)
         yield* ui.screenshot("3-after-enter")
       }),
   )

   Run it with opencode-drive: opencode-drive run ./drive.ts. It drives opencode from your PATH; set OC_DEV to the path of an OpenCode checkout to run that from source instead.
2. opencode-agent

   added

   reproduced

   on Oct 15, 2026