commit d08e347c64f85c5880edd707f792237a3e33e6bf
parent 93c195ce63a77457f5d7816c498444f60c12525f
Author: Anders Hedman <anders.hedman01@gmail.com>
Date: Tue, 22 Sep 2026 15:36:29 +0200
chore(opencode): require confirmation for rm -rf /tmp/opencode
The earlier V2 migration converted the deny rules for rm -rf* to
ordered rules; add explicit ask rules for /tmp/opencode paths so
cleanup of the scratch dir still prompts.
Diffstat:
1 file changed, 2 insertions(+), 0 deletions(-)
diff --git a/.config/opencode/opencode.jsonc b/.config/opencode/opencode.jsonc
@@ -167,6 +167,8 @@
{ "action": "shell", "resource": "mkdir*", "effect": "ask" },
{ "action": "shell", "resource": "touch*", "effect": "ask" },
{ "action": "shell", "resource": "rm *", "effect": "ask" },
+ { "action": "shell", "resource": "rm -rf /tmp/opencode/*", "effect": "ask" },
+ { "action": "shell", "resource": "rm -fr /tmp/opencode/*", "effect": "ask" },
// environment $VAR
{ "action": "shell", "resource": "printenv *", "effect": "deny" },
{ "action": "shell", "resource": "env *", "effect": "deny" },