external_directory: "deny" não bloqueia subagentes de acessarem pastas fora do workspace

Description

Comportamento esperado

Com external_directory: "deny" no opencode.json, qualquer tentativa de leitura/escrita fora do workspace deveria ser bloqueada, inclusive por subagentes.

Comportamento atual

O subagente explore consegue acessar e listar arquivos em pastas fora do workspace (ex: C:\Users\Play\Desktop\guiadosimples\) sem nenhum bloqueio, mesmo com a config ativa.

Passos para reproduzir

Criar opencode.json na raiz do workspace:

{
  "$schema": "https://opencode.ai/config.json",
  "permission": {
    "external_directory": "deny"
  }
}

### Plugins

_No response_

### OpenCode version

_No response_

### Steps to reproduce

_No response_

### Screenshot and/or share link

_No response_

### Operating System

_No response_

### Terminal

_No response_

This issue might be a duplicate of existing issues. Please check:

Subagent permission rules are ignored, hence deny rules never applied #33223: Subagent permission rules are ignored, hence deny rules never applied — same root cause: deriveSubagentSessionPermission does not propagate deny rules to subagent sessions
Sub-agents (Task tool) bypass deny permission rules for read and grep #32024: Sub-agents (Task tool) bypass deny permission rules for read and grep — same symptom: subagents bypass deny rules configured in opencode.json

ok

To stay organized issues are automatically closed after 60 days of no activity. If the issue is still relevant please open a new one.

Navigation Menu

Repository navigation

external_directory: "deny" não bloqueia subagentes de acessarem pastas fora do workspace #34987

Description

Comportamento esperado

Comportamento atual

Passos para reproduzir

Metadata

Assignees

Labels

Type

Projects

Milestone

Relationships

Development

external_directory: "deny" não bloqueia subagentes de acessarem pastas fora do workspace #34987

Description

Description

Comportamento esperado

Comportamento atual

Passos para reproduzir

Activity

github-actions commented on Jul 2, 2026

HPLAY00 commented on Jul 2, 2026

github-actions commented on Sep 1, 2026

Metadata

Metadata

Assignees

Labels

Type

Projects

Milestone

Relationships

Development

Issue actions