74 lines
1.7 KiB
Text
74 lines
1.7 KiB
Text
---
|
|
title: Permissions
|
|
description: Control what agents can do in your codebase.
|
|
---
|
|
|
|
By default, opencode **allows all operations** without requiring explicit approval.
|
|
|
|
The permissions system provides granular control to restrict what actions AI agents can perform in your codebase, allowing you to configure explicit approval requirements for sensitive operations like file editing, bash commands, and more.
|
|
|
|
---
|
|
|
|
## Configure
|
|
|
|
Permissions are configured in your `opencode.json` file under the `permission` key. Here are the available options.
|
|
|
|
---
|
|
|
|
### edit
|
|
|
|
Use the `permission.edit` key to control whether file editing operations require user approval.
|
|
|
|
- `"ask"` - Prompt for approval before editing files
|
|
- `"allow"` - Allow all file editing operations without approval
|
|
|
|
```json title="opencode.json" {4}
|
|
{
|
|
"$schema": "https://opencode.ai/config.json",
|
|
"permission": {
|
|
"edit": "ask"
|
|
}
|
|
}
|
|
```
|
|
|
|
---
|
|
|
|
### bash
|
|
|
|
Controls whether bash commands require user approval.
|
|
|
|
:::tip
|
|
You can specify which commands you want to have run without approval.
|
|
:::
|
|
|
|
This can be configured globally or with specific patterns. Setting this to `"ask"` is the strictest mode, requiring approval for all bash commands.
|
|
|
|
For example.
|
|
|
|
- **Ask for approval for all commands**
|
|
|
|
```json title="opencode.json"
|
|
{
|
|
"$schema": "https://opencode.ai/config.json",
|
|
"permission": {
|
|
"bash": "ask"
|
|
}
|
|
}
|
|
```
|
|
|
|
- **Approve specific commands**
|
|
|
|
```json title="opencode.json"
|
|
{
|
|
"$schema": "https://opencode.ai/config.json",
|
|
"permission": {
|
|
"bash": {
|
|
"git status": "allow",
|
|
"git diff": "allow",
|
|
"npm run build": "allow",
|
|
"ls": "allow",
|
|
"pwd": "allow"
|
|
}
|
|
}
|
|
}
|
|
```
|