Permission from opencode.json are ignored on /init command

Description

Deny-rules from the opencode.json config are ignored when running the /init command in a directory - env files are read regardless of whether the user allowed the agent to or not.

Plugins

No response

OpenCode version

1.18.31

Steps to reproduce

1. Setup an opencode.json in $HOME/.opencode/opencode.json
2. Setup deny-rules on .env-files (example config below)
3. run opencode in any directory containing a .env file
4. watch opencode list files via ls -la followed by immediately cat ing the .env file

Example opencode.json used in testing

{
  "$schema": "https://opencode.ai/config.json",
  "permission": {
    "read": {
      "*": "allow",
      "*.env": "deny",
      "*.env.*": "deny",
      "*.env.example": "allow"
    },
    "grep": {
      "*": "allow",
      "*.env": "deny",
      "*.env.*": "deny",
      "*.env.example": "allow"
    },
    "glob": {
      "*": "allow",
      "*.env": "deny",
      "*.env.*": "deny",
      "*.env.example": "allow"
    }
  }
}

Screenshot and/or share link

No response

Operating System

No response

Terminal

No response