opencode permission gate is fail-open: 'ask' rules run shell commands before approval
ExNihil14 · ghdev · 2026-10-18
- A bug report against opencode v2.0.32 shows that permission rules with effect: "ask" do not pause execution: matching shell commands (e.g. rm ) are spawned immediately.
- The permission prompt is published to the client, but every reply attempt is rejected with HTTP 404, so the prompt can never be answered — the gate is effectively fail-open.
- The reporter includes full reproduction steps via /.config/opencode/opencode.json and server logs showing the command spawning 3 seconds before the first client reply; tested from a mobile web client against opencode serve, with 7 comments so far.
More from coding & agent
- Index Network open-sources Social Discovery Protocol: agents negotiate fit on your behalf — carsonfarmer · 2026-10-23
- Installed a formal-verification skill: it silently installed Java, MacBook runs 10 degrees hotter — zealcaiden · 2026-10-23
- OpenAI's Decisions API hits GA: near real-time routing up to 10x faster than GPT-6 Luna — OpenAIDevs · 2026-10-23
- Ruff author warns: upgrade Node/Bun now — --use-system-ca still accepts the eMudhra cert — charliermarsh · 2026-10-23
- Proof of Agent: paste one prompt and your AI mines, grades, and self-governs — adamamcbride · 2026-10-23
- DeepLearning.AI weekly: GPT-6.1 hits 97.9% byte parity on COBOL migration — DeepLearningAI · 2026-10-23