commit 8536c690111450925422fb04ca00df07944f31cc
parent e23f562ab4c16ad2d19e72447df685e323f42573
Author: Anders Hedman <anders.hedman01@gmail.com>
Date: Wed, 2 Sep 2026 21:18:12 +0200
chore(opencode): update model configs and permission rules
- Switch multiplexer type from tmux to auto
- Add deepseek-v4-flash and deepseek-v4-pro to model fallbacks
- Allow webfetch and echo commands
- Deny environment variable exposure via echo/printenv/env
Diffstat:
2 files changed, 16 insertions(+), 6 deletions(-)
diff --git a/.config/opencode/oh-my-opencode-slim.jsonc b/.config/opencode/oh-my-opencode-slim.jsonc
@@ -4,7 +4,7 @@
"preset": "opencode-zen",
"multiplexer": {
- "type": "tmux",
+ "type": "auto",
"layout": "main-vertical",
"main_pane_size": 60
},
@@ -65,7 +65,7 @@
"orchestrator": {
"model": [
{"id": "opencode-go/minimax-m3", "variant": "thinking"},
- {"id": "opencode/big-pickle", "variant": "max"},
+ {"id": "opencode/big-pickle", "variant": "max"}
],
// "model": "opencode-go/minimax-m3",
// "variant": "thinking",
@@ -121,8 +121,9 @@
"opencode-zen": {
"orchestrator": {
"model": [
+ {"id": "opencode/deepseek-v4-flash", "variant": "max"},
{"id": "opencode/big-pickle", "variant": "max"},
- {"id": "opencode-go/minimax-m3", "variant": "thinking"},
+ {"id": "opencode-go/minimax-m3", "variant": "thinking"}
],
"skills": [
"*"
@@ -133,8 +134,12 @@
]
},
"oracle": {
- "model": "opencode/qwen3.7-max",
- "variant": "max",
+ "model": [
+ {"id": "deepseek-v4-pro", "variant": "max"},
+ {"id": "opencode/qwen3.7-max", "variant": "max"}
+ ],
+ // "model": "opencode/qwen3.7-max",
+ // "variant": "max",
"skills": [
"simplify"
],
diff --git a/.config/opencode/opencode.jsonc b/.config/opencode/opencode.jsonc
@@ -75,7 +75,7 @@
"skill": "allow",
"todowrite": "allow",
"question": "allow",
- "webfetch": "ask",
+ "webfetch": "allow",
"websearch": "allow",
"edit": "ask",
@@ -86,6 +86,7 @@
"ls*": "allow",
"pwd*": "allow",
"cat*": "allow",
+ "echo*": "allow",
"head*": "allow",
"tail*": "allow",
"find*": "allow",
@@ -143,6 +144,10 @@
"mkdir*": "ask",
"touch*": "ask",
"rm *": "ask",
+ // enivronment $VAR
+ "echo *$*": "deny",
+ "printenv *": "deny",
+ "env *": "deny",
// .env / .envrc via shell
"cat* .env*": "deny",
"grep* .env*": "deny",