dotfiles

andersuno
git clone git://git.andersuno.nu/dotfiles.git
Log | Files | Refs | README

commit 8536c690111450925422fb04ca00df07944f31cc
parent e23f562ab4c16ad2d19e72447df685e323f42573
Author: Anders Hedman <anders.hedman01@gmail.com>
Date:   Wed,  2 Sep 2026 21:18:12 +0200

chore(opencode): update model configs and permission rules

- Switch multiplexer type from tmux to auto
- Add deepseek-v4-flash and deepseek-v4-pro to model fallbacks
- Allow webfetch and echo commands
- Deny environment variable exposure via echo/printenv/env

Diffstat:
M.config/opencode/oh-my-opencode-slim.jsonc | 15++++++++++-----
M.config/opencode/opencode.jsonc | 7++++++-
2 files changed, 16 insertions(+), 6 deletions(-)

diff --git a/.config/opencode/oh-my-opencode-slim.jsonc b/.config/opencode/oh-my-opencode-slim.jsonc @@ -4,7 +4,7 @@ "preset": "opencode-zen", "multiplexer": { - "type": "tmux", + "type": "auto", "layout": "main-vertical", "main_pane_size": 60 }, @@ -65,7 +65,7 @@ "orchestrator": { "model": [ {"id": "opencode-go/minimax-m3", "variant": "thinking"}, - {"id": "opencode/big-pickle", "variant": "max"}, + {"id": "opencode/big-pickle", "variant": "max"} ], // "model": "opencode-go/minimax-m3", // "variant": "thinking", @@ -121,8 +121,9 @@ "opencode-zen": { "orchestrator": { "model": [ + {"id": "opencode/deepseek-v4-flash", "variant": "max"}, {"id": "opencode/big-pickle", "variant": "max"}, - {"id": "opencode-go/minimax-m3", "variant": "thinking"}, + {"id": "opencode-go/minimax-m3", "variant": "thinking"} ], "skills": [ "*" @@ -133,8 +134,12 @@ ] }, "oracle": { - "model": "opencode/qwen3.7-max", - "variant": "max", + "model": [ + {"id": "deepseek-v4-pro", "variant": "max"}, + {"id": "opencode/qwen3.7-max", "variant": "max"} + ], + // "model": "opencode/qwen3.7-max", + // "variant": "max", "skills": [ "simplify" ], diff --git a/.config/opencode/opencode.jsonc b/.config/opencode/opencode.jsonc @@ -75,7 +75,7 @@ "skill": "allow", "todowrite": "allow", "question": "allow", - "webfetch": "ask", + "webfetch": "allow", "websearch": "allow", "edit": "ask", @@ -86,6 +86,7 @@ "ls*": "allow", "pwd*": "allow", "cat*": "allow", + "echo*": "allow", "head*": "allow", "tail*": "allow", "find*": "allow", @@ -143,6 +144,10 @@ "mkdir*": "ask", "touch*": "ask", "rm *": "ask", + // enivronment $VAR + "echo *$*": "deny", + "printenv *": "deny", + "env *": "deny", // .env / .envrc via shell "cat* .env*": "deny", "grep* .env*": "deny",