PLAN agent specific permission

I was wondering if there was an existing system to to give the PLAN AGENT permissions to rg, find, and grep. The permissions docs say that the agent begins with all permissions but you can get more granular, implying that it's referring the to build agent.

I'd like the plan agent to always be able to use rg and grep and find so I don't have to stay by it and give it "always" access on any given instance

{
  "$schema": "https://opencode.ai/config.json",
  "permission": {
    "bash": {
      "rg *": "allow",
      "grep *": "allow",
      " *": "allow"
    }
  }
}

@sai-sy

@sai-sy the config you provided will override the permissions of all agents for bash including plan, if you instead wish to specifically alter plan and nothing else, you can do (you can do this for any agent, and you can override whatever part you want, for list of available options see https://opencode.ai/config.json:

{
  "$schema": "https://opencode.ai/config.json",
  "agent": {
    "plan": {
      "permission": {
        "bash": {
          "echo *": "allow"
        }
      }
    }
  }
}

Then perhaps my opencode just isn't reading from my .config/opencode/opencode.json

Is there some extra step not outlined in the docs?

@sai-sy

@sai-sy run opencode debug config lets see what it says?

Huh weird it finds the config yet it asked for permission to run rg * or grep * or find * Maybe when I did this last night I didn’t restart opencode. Thanks for the help I suspect if I ran open code now it would work. I’ll be back later if it doesn’t. thank you

…

--- Thanks! He/Him Saihaan "Sai" Syed

On Tue, Oct 7, 2025 at 12:13 AM Aiden Cline ***@***.***> wrote: *rekram1-node* left a comment (anomalyco/opencode#2989) <#2989 (comment)> @sai-sy <https://github.com/sai-sy> run opencode debug config lets see what it says? — Reply to this email directly, view it on GitHub <#2989 (comment)>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/AR3GQZL5IUJTRNNR4ZQGNDL3WM4UZAVCNFSM6AAAAACIMDRBTCVHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMZTGNZVGEZDINBTHE> . You are receiving this because you were mentioned.Message ID: ***@***.***>

sounds good yeah definitely need to restart lmk if u have more problems

@sai-sy the config you provided will override the permissions of all agents for bash including plan, if you instead wish to specifically alter plan and nothing else, you can do (you can do this for any agent, and you can override whatever part you want, for list of available options see https://opencode.ai/config.json:
{
  "$schema": "https://opencode.ai/config.json",
  "agent": {
    "plan": {
      "permission": {
        "bash": {
          "echo *": "allow"
        }
      }
    }
  }
}

Should this example or any example highlighting the ability to target specifically plan or build agent not be included in the permissions page on the docs. I see that it's mentioned in the config/#agents section but just including this example might help people

yeah we probably should

@rekram1-node

@rekram1-node the doc site itself isn't on GH for me to go quickly change?

ah nvm https://github.com/sst/opencode/blob/dev/packages/web/src/content/docs/permissions.mdx

Navigation Menu

Repository navigation

PLAN agent specific permission #2989

Metadata

Assignees

Labels

Type

Projects

Milestone

Relationships

Development

PLAN agent specific permission #2989

Description

Activity

rekram1-node commented on Oct 6, 2025

sai-sy commented on Oct 7, 2025

rekram1-node commented on Oct 7, 2025

sai-sy commented on Oct 7, 2025

rekram1-node commented on Oct 7, 2025

sai-sy commented on Oct 7, 2025

rekram1-node commented on Oct 7, 2025

sai-sy commented on Oct 7, 2025

sai-sy commented on Oct 7, 2025

Metadata

Metadata

Assignees

Labels

Type

Projects

Milestone

Relationships

Development

Issue actions