diff --git a/packages/opencode/src/tool/read.ts b/packages/opencode/src/tool/read.ts
index c981ac16e43..205887bd537 100644
--- a/packages/opencode/src/tool/read.ts
+++ b/packages/opencode/src/tool/read.ts
@@ -44,7 +44,7 @@ export const ReadTool = Tool.define("read", {
 
     await ctx.ask({
       permission: "read",
-      patterns: [filepath],
+      patterns: [path.relative(Instance.worktree, filepath)],
       always: ["*"],
       metadata: {},
     })
diff --git a/packages/opencode/test/tool/read.test.ts b/packages/opencode/test/tool/read.test.ts
index b22fc3e7120..717c5a9c596 100644
--- a/packages/opencode/test/tool/read.test.ts
+++ b/packages/opencode/test/tool/read.test.ts
@@ -158,6 +158,8 @@ describe("tool.read env file permissions", () => {
     [".env.local", true],
     [".env.production", true],
     [".env.development.local", true],
+    ["appsettings.json", false],
+    ["appsettings.Development.json", false],
     [".env.example", false],
     [".envrc", false],
     ["environment.ts", false],