V2 does not load managed config from %ProgramData%\opencode (V1 managed settings) #51107

Activity

1. ctmay4 commented on Sep 24, 2026

   

   ctmay4

   on Sep 24, 2026

   Author

   More actions

   Following up with some source-code references from the v2.0.16 tag (commit 3a103fe) that may help narrow this down:

   Where the V2 loader lives, and why the managed dir is skipped

   V2's config discovery is in packages/core/src/config/discovery.ts, and the entry assembly is in packages/core/src/config.ts (Config.load). The full source list is:

   1. well-known (remote) configs
   2. global dir (~/.config/opencode)
   3. OPENCODE_CONFIG (explicit file)
   4. direct project opencode.json(c) files (outer → inner)
   5. .opencode/opencode.json(c) directories
   6. OPENCODE_CONFIG_CONTENT

   There is no source for the system-managed directory (%ProgramData%\opencode / /etc/opencode / /Library/Application Support/opencode). The only "managed" concept in V2 is packages/core/src/managed-policy.ts, which is about policies compiled by a connected OpenCode Console workspace — that doesn't help self-hosted/MDM-managed deployments that rely on the on-disk managed config.

   The V1 implementation being replaced

   For reference, the V1 equivalent is packages/opencode/src/config/managed.ts (1.x line), which reads the managed directory at highest file precedence and, on macOS, also reads .mobileconfig MDM plists via plutil. Both behaviors are missing in V2.

   Impact / workarounds

   This is blocking our fleet upgrade (many VPCs whose provider restrictions are enforced via managed config). We've confirmed two workarounds that restore the behavior on 2.0.16:

   • Deploying the same file to %USERPROFILE%\.config\opencode\opencode.json (per user), or
   • A directory junction from %USERPROFILE%\.config\opencode to %ProgramData%\opencode (single-user machines).

   Both lose the admin-only-writability of the managed location, so restoring the managed dir would be preferable.

   Suggested expectation for a fix

   Load <managed-dir>\opencode.json(c) in V2 with the same precedence as V1 — above all project/global file config, below Console-delivered policy statements — and keep the macOS MDM plist path, which would otherwise be a second silent regression for MDM-based fleets.

   Happy to test a build if there's a branch or snapshot where this is being addressed.

   👍React with 👍3Reacted by Renato Duarte, joe-workman and Michael Booth
2. rntdrts commented on Sep 25, 2026

   

   rntdrts

   on Sep 25, 2026

   Contributor

   More actions

   Opened #51337 against v2 with a fix: loads the system managed directory and the macOS ai.opencode.managed plist at the highest file precedence, with managed policy statements ranked below Console organization statements. V1-shaped managed files go through the normal migration, so enabled_providers becomes enforced policies. Happy to adjust if you'd prefer a different precedence model.

   👍React with 👍1Reacted by Chuck May
3. rntdrts

   added 19 commits that reference this issue on Sep 25, 2026

   fix(core): load managed config directory and macOS managed preferences

   ...

   This issue will close once commit 41c5113 is merged into the 'dev' branch.

   41c5113

   fix(core): load managed config directory and macOS managed preferences

   ...

   This issue will close once commit 57b1e7c is merged into the 'dev' branch.

   57b1e7c

   fix(core): load managed config directory and macOS managed preferences

   ...

   This issue will close once commit 25bc21f is merged into the 'dev' branch.

   25bc21f

   fix(core): load managed config directory and macOS managed preferences

   ...

   This issue will close once commit 319f9ad is merged into the 'dev' branch.

   319f9ad

   fix(core): load managed config directory and macOS managed preferences

   ...

   This issue will close once commit f131e7e is merged into the 'dev' branch.

   f131e7e

   fix(core): load managed config directory and macOS managed preferences

   ...

   This issue will close once commit 860b526 is merged into the 'dev' branch.

   860b526

   fix(core): load managed config directory and macOS managed preferences

   ...

   This issue will close once commit 5b2b686 is merged into the 'dev' branch.

   5b2b686

   fix(core): load managed config directory and macOS managed preferences

   ...

   This issue will close once commit 4a89c60 is merged into the 'dev' branch.

   4a89c60

   fix(core): load managed config directory and macOS managed preferences

   ...

   This issue will close once commit 8ce51cb is merged into the 'dev' branch.

   8ce51cb

   fix(core): load managed config directory and macOS managed preferences

   ...

   This issue will close once commit d071894 is merged into the 'dev' branch.

   d071894

   fix(core): load managed config directory and macOS managed preferences

   ...

   This issue will close once commit 3053e2f is merged into the 'dev' branch.

   3053e2f

   fix(core): load managed config directory and macOS managed preferences

   ...

   This issue will close once commit a3bebe5 is merged into the 'dev' branch.

   a3bebe5

   fix(core): load managed config directory and macOS managed preferences

   ...

   This issue will close once commit fbd6243 is merged into the 'dev' branch.

   fbd6243

   fix(core): load managed config directory and macOS managed preferences

   ...

   This issue will close once commit 22c5f9e is merged into the 'dev' branch.

   22c5f9e

   fix(core): load managed config directory and macOS managed preferences

   ...

   This issue will close once commit 7e32c81 is merged into the 'dev' branch.

   7e32c81

   fix(core): load managed config directory and macOS managed preferences

   ...

   This issue will close once commit f49c696 is merged into the 'dev' branch.

   f49c696

   fix(core): load managed config directory and macOS managed preferences

   ...

   This issue will close once commit 08c1b30 is merged into the 'dev' branch.

   08c1b30

   fix(core): load managed config directory and macOS managed preferences

   ...

   This issue will close once commit 01e49b1 is merged into the 'dev' branch.

   01e49b1

   fix(core): load managed config directory and macOS managed preferences

   ...

   This issue will close once commit 9ad6c3b is merged into the 'dev' branch.

   9ad6c3b
4. rekram1-node commented on Oct 13, 2026

   

   rekram1-node

   on Oct 13, 2026

   Last edited by rekram1-node

   Collaborator

   More actions

   OpenCode V2 works a bit differently here — the system config folder is loaded first as a base default, and non-overridable rules are enforced through experimental.policies (which evaluate in reverse order, so system policies override user and project configs). If anything you need to enforce isn't covered by experimental.policies yet, let us know and we'll expand it.

   We will avoid breaking it even tho it's still listed as "experimental" it is already being used to power some features our console offering relies on, it just may get further extended.

   Edit:
   Copying for clarity:
   #51337 (comment)
5. rekram1-node

   closed this as completedin #54921on Oct 13, 2026