fix: handle missing Instance context in Read tool

packages/opencode/src/tool/external-directory.ts

@@ -14,7 +14,13 @@ export async function assertExternalDirectory(ctx: Tool.Context, target?: string
 
   if (options?.bypass) return
 
-  if (Instance.containsPath(target)) return
+  // Instance context may not be available in certain execution paths (e.g., MCP, plugins)
+  // Skip the containsPath check if context is missing - permission will still be requested
+  try {
+    if (Instance.containsPath(target)) return
+  } catch {
+    // Instance context not available - proceed to ask for permission
+  }
 
   const kind = options?.kind ?? "file"
   const parentDir = kind === "directory" ? target : path.dirname(target)

packages/opencode/src/tool/read.ts

@@ -25,7 +25,16 @@ export const ReadTool = Tool.define("read", {
     if (!path.isAbsolute(filepath)) {
       filepath = path.join(process.cwd(), filepath)
     }
-    const title = path.relative(Instance.worktree, filepath)
+
+    // Instance context may not be available in certain execution paths (e.g., MCP, plugins)
+    // Gracefully handle missing context to avoid cryptic native binding errors
+    let worktree: string | undefined
+    try {
+      worktree = Instance.worktree
+    } catch {
+      // Instance context not available - fall back to basename for title
+    }
+    const title = worktree ? path.relative(worktree, filepath) : path.basename(filepath)
 
     await assertExternalDirectory(ctx, filepath, {
       bypass: Boolean(ctx.extra?.["bypassCwdCheck"]),