commit 3c3d4017fa7bbe3939c78218952a37c41a7185c9
parent 7a9fec84cb8c5da98885b9d34567940b91717d00
Author: Anders Hedman <anders.hedman01@gmail.com>
Date: Mon, 14 Sep 2026 11:15:54 +0200
chore(opencode): allow git grep, command -v, and /tmp/opencode
Read-only lookup commands no longer prompt, and /tmp/opencode is
pre-approved as scratch space for agent temp work.
Diffstat:
1 file changed, 3 insertions(+), 0 deletions(-)
diff --git a/.config/opencode/opencode.jsonc b/.config/opencode/opencode.jsonc
@@ -106,6 +106,7 @@
"diff*": "allow",
"file*": "allow",
"which*": "allow",
+ "command -v *": "allow",
"wc*": "allow",
"du*": "allow",
"df*": "allow",
@@ -115,6 +116,7 @@
"git status*": "allow",
"git diff*": "allow",
"git log*": "allow",
+ "git grep*": "allow",
"git show*": "allow",
"git fetch*": "allow",
"git branch*": "allow",
@@ -187,6 +189,7 @@
// Files outside the workspace: confirm, but block secrets outright
"external_directory": {
"*": "ask",
+ "/tmp/opencode/**": "allow",
"~/.config/opencode/skills/**": "allow",
"~/.aws/**": "deny",
"~/.gnupg/**": "deny",