[FEATURE]: Limit tool (e.g. write, edit) permissions to specific folders

[driebe]

Feature hasn't been suggested before.

• I have verified this feature I'm about to request hasn't been suggested before.

Describe the enhancement you want to request

Hi opencode team,

I love your product and have a suggestion on how to improve secure interaction with the agents. It would be great if some of the tools (primarily write & edit) could be limited to certain project folders in the project.

For example: I want to limit my tester.md to only be able to create files in my ____tests_____ folders or edit files which have test in the filename - but no other files.

This could potentially look like this:

permission:
  write:
    "*/*test*": allow
    "*": deny
  edit:
    "*/*test*": allow
    "*": deny

Thanks for your consideration!

[github-actions]

This issue might be a duplicate of existing issues. Please check:

• [FEATURE]: Add per-agent filesystem boundaries (allow/deny paths) + optional run-as user for bash #5529: [FEATURE]: Add per-agent filesystem boundaries (allow/deny paths) + optional run-as user for bash - This is the most comprehensive and directly related issue, proposing allow/deny filesystem path patterns per-agent with extensive discussion on implementation
• Limiting access for tools in a safer way #4667: Limiting access for tools in a safer way - Proposes sandbox-style security contexts with read/write path restrictions and allowed executables
• Add pattern-based directory access restrictions to prevent verbose per-tool configurations #3585: Add pattern-based directory access restrictions to prevent verbose per-tool configurations - Requests global pattern-based exclusion rules for sensitive files
• Is there a way to sandbox the agent ? #2242: Is there a way to sandbox the agent? - General sandboxing request with discussion about restricting access outside the working directory

Feel free to ignore if none of these address your specific case.

[driebe]

Your github actions search is way more comprehensive than the GitiHub search :(. I will close this for #5529

[thdxr]

To stay organized issues are automatically closed after 90 days of no activity. If the issue is still relevant please open a new one.