[BUG] opencode's folder permission control is not working

[mask-maker]

Description

The permission control for folders in opencode is not working. I set up opencode.json in the project root directory like this:

{
  "$schema": "https://opencode.ai/config.json",
  "permission": {
    "edit": "ask",
    "bash": {
      "*": "ask",
      "env *": "deny",
      "env": "deny",
      "printenv *": "deny",
      "printenv": "deny",
      "export *": "deny",
      "echo *": "deny",
      "set *": "deny"
    },
    "read": {
      "*": "allow",
      "*.log": "deny",
      "APP-META/**": "deny",
      "logs/**": "deny",
      "app/config/**": "deny",
      "*.env": "deny",
      "*.env.*": "deny",
      ".env": "deny",
      ".env.*": "deny",
      "*.env.local": "deny",
      "*.env.example": "allow"
    }
  }
}

However, opencode can still directly read the contents of the APP-META folder.

Plugins

No response

OpenCode version

1.1.44

Steps to reproduce

No response

Screenshot and/or share link

Operating System

macOS 26.2

Terminal

No response

[github-actions]

This issue might be a duplicate of existing issues. Please check:

• opencode not respecting permissions #8832: opencode not respecting permissions - general issue with permissions not being enforced
• Bash permission deny rules in agent config not being enforced #11218: Bash permission deny rules in agent config not being enforced - similar issue with deny rules not working
• Bug: permission pathing crossplatform #7279: Bug: permission pathing crossplatform - cross-platform path matching issues in permission rules

Feel free to ignore if none of these address your specific case.

[github-actions]

To stay organized issues are automatically closed after 90 days of no activity. If the issue is still relevant please open a new one.