[FEATURE]: Limit tool (e.g. write, edit) permissions to specific folders

Feature hasn't been suggested before.

I have verified this feature I'm about to request hasn't been suggested before.

Describe the enhancement you want to request

Hi opencode team,

I love your product and have a suggestion on how to improve secure interaction with the agents. It would be great if some of the tools (primarily write & edit) could be limited to certain project folders in the project.

For example: I want to limit my tester.md to only be able to create files in my ____tests_____ folders or edit files which have test in the filename - but no other files.

This could potentially look like this:

permission:
  write:
    "*/*test*": allow
    "*": deny
  edit:
    "*/*test*": allow
    "*": deny

Thanks for your consideration!

This issue might be a duplicate of existing issues. Please check:

[FEATURE]: Add per-agent filesystem boundaries (allow/deny paths) + optional run-as user for bash #5529: [FEATURE]: Add per-agent filesystem boundaries (allow/deny paths) + optional run-as user for bash - This is the most comprehensive and directly related issue, proposing allow/deny filesystem path patterns per-agent with extensive discussion on implementation
Limiting access for tools in a safer way #4667: Limiting access for tools in a safer way - Proposes sandbox-style security contexts with read/write path restrictions and allowed executables
Add pattern-based directory access restrictions to prevent verbose per-tool configurations #3585: Add pattern-based directory access restrictions to prevent verbose per-tool configurations - Requests global pattern-based exclusion rules for sensitive files
Is there a way to sandbox the agent ? #2242: Is there a way to sandbox the agent? - General sandboxing request with discussion about restricting access outside the working directory

Feel free to ignore if none of these address your specific case.

Your github actions search is way more comprehensive than the GitiHub search :(. I will close this for #5529

To stay organized issues are automatically closed after 90 days of no activity. If the issue is still relevant please open a new one.

Navigation Menu

Repository navigation

[FEATURE]: Limit tool (e.g. write, edit) permissions to specific folders #6318

Feature hasn't been suggested before.

Describe the enhancement you want to request

Metadata

Assignees

Labels

Type

Projects

Milestone

Relationships

Development

[FEATURE]: Limit tool (e.g. write, edit) permissions to specific folders #6318

Description

Feature hasn't been suggested before.

Describe the enhancement you want to request

Activity

github-actions commented on Dec 28, 2025

driebe commented on Dec 28, 2025

thdxr commented on Mar 25, 2026

Metadata

Metadata

Assignees

Labels

Type

Projects

Milestone

Relationships

Development

Issue actions