Main agent often asking to access external_directory which is the one we are in (worktrees)

[jacquesbh]

Description

Using the Desktop app, on macOS.

I've started a new workspace (git worktree) and I am running some sessions on it.

The main agent often ask for permission to access "external_dir" which is the directory of the worktree itself inside the ~/.opencode directory.

I always need to deny the permission and say You don't need to access external directory, everything you need is in the current dir. and it continues correctly.

Plugins

No response

OpenCode version

1.1.60, but it happens for a while now.

Steps to reproduce

Hard to do so, you need a new workspace and your agent needs to decide to use the external directory instead of current…
I use GPT 5.2 Codex xhigh most of the time.

Screenshot and/or share link

Operating System

macOS Sequoia 15.7

Terminal

No response

[github-actions]

This issue might be a duplicate of or related to existing issues. Please check:

• "Access external directory" warning is ambiguous #12699: "Access external directory" warning is ambiguous - discusses the unclear nature of external_directory permission prompts
• Worktrees created from bare repos are not recognized #10643: Worktrees created from bare repos are not recognized - related worktree issue
• Split external_directory permission into read vs write #5395: Split external_directory permission into read vs write - related feature request about external_directory permissions

If this is a different concern, please clarify what distinguishes it from the above.

[rekram1-node]

can u share opencode debug config

[jacquesbh]

Hi, I've reviewed the config myself, I have some MCPs, some agents and sub-agents. Nothing fancy, no special configuration or anything.

The main agent was working when I had my issue (the Build one), for me the hint is on workspaces.

I can share the config after cleaning it if you really need but imho…

For me the agent knows it's in a workspace but somehow it "forgets". I didn't compact lately, using gpt 5.2.

[NachoFLizaur]

Hi there! is oc requesting access for the workspace's own directory? or do you have different workspaces and it's trying to access the directory of one from another?

[jacquesbh]

@NachoFLizaur Hi!

It's requesting for its own workspace. I've never noticed OC asking for another workspace than the one it is running on.

[fteotini]

can confirm this behaviour. I'm on Mac, latest opencode version:

{
  "$schema": "https://opencode.ai/config.json",
  "model": "github-copilot/claude-haiku-4.5",
  "small_model": "github-copilot/gpt-5-mini",
  "agent": {
    "explore": {
      "model": "github-copilot/claude-haiku-4.5",
      "options": {},
      "permission": {}
    },
    "title": {
      "model": "github-copilot/gpt-5-mini",
      "options": {},
      "permission": {}
    },
    "compaction": {
      "model": "github-copilot/gpt-5-mini",
      "options": {},
      "permission": {}
    }
  },
  "mcp": {
    "context7": {
      "type": "remote",
      "url": "https://mcp.context7.com/mcp",
      "headers": {
        "CONTEXT7_API_KEY": "..."
      }
    }
  },
  "formatter": {
    "charpier": {
      "command": [
        "dotnet",
        "csharpier",
        "format",
        "$FILE"
      ],
      "extensions": [
        ".cs"
      ]
    }
  },
  "compaction": {
    "auto": true,
    "prune": true,
    "reserved": 8000
  },
  "mode": {},
  "plugin": [],
  "command": {},
  "username": "..."
}

[remorses]

I just opened #23290 which fixes one source of repeated external_directory prompts for task-spawned subagents.

That change preserves parent external_directory approvals and deny rules in child sessions, so a subagent does not ask again for paths that were already approved on the parent session.

If this still reproduces on the main agent without task, then this issue is probably a separate worktree/path-containment bug.