dotfiles

commit 584c8359fbb97b8d8432cbe9ba627e99812cab1c
parent 2b6aaa25ff30ee7b6872e83f1d4d54d3d221a215
Author: Anders Hedman <anders.hedman01@gmail.com>
Date:   Thu,  8 Oct 2026 22:09:36 +0200

chore(config): allow shell access to .env.example

The .env* deny rules also blocked legitimate reads of .env.example
templates. Add an explicit allow exception for commands targeting
.env.example files.

Diffstat:
M
.config/opencode/opencode.jsonc
 | 
2
++

1 file changed, 2 insertions(+), 0 deletions(-)
diff --git a/.config/opencode/opencode.jsonc b/.config/opencode/opencode.jsonc
@@ -201,6 +201,8 @@
     { "action": "shell", "resource": "grep* */.env*", "effect": "deny" },
     { "action": "shell", "resource": "rg* .env*", "effect": "deny" },
     { "action": "shell", "resource": "rg* */.env*", "effect": "deny" },
+    // .env.example exceptions
+    { "action": "shell", "resource": "* .env.example", "effect": "allow" },
     // terraform state — same readers; no dot-prefix, so one absorb pattern each
     { "action": "shell", "resource": "cat* *.tfstate*", "effect": "deny" },
     { "action": "shell", "resource": "head* *.tfstate*", "effect": "deny" },