Fetch method in codemode can access the host #50771

Description

Fetch method in codemode can access the host. I think it should be blocked because require, process import() in sandbox are all blocked.

Plugins

none

OpenCode version

2.0.14

Steps to reproduce

1. open a MCP server with codemode open
2. set { "permissions": [{ "action": "read", "resource": "*", "effect": "deny" }] } in opencode.jsonc
3. let model to run return (await (await fetch('file:///etc/hosts')).text()).slice(0, 60) in excute

Screenshot and/or share link

No response

Operating System

macos 27.0

Terminal

Mac default Terminal