cleveragents/cleveragents-core
4
0
Fork 3
Code Issues 6.0k Pull Requests 115 Actions Packages Projects Releases Wiki Activity

build: opened up echo and cat perms to help smooth over some tool calls

Browse Source
This commit is contained in:
clever-agent
2026-05-05 20:11:19 -04:00
parent b75feaf7a3
commit 3da61ba891
37 changed files with 74 additions and 37 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.opencode/agents/async-agent-util.md
+2 -1
View File
@@ -104,7 +104,8 @@ permission:
bash:
# All agents should start with deny and then add in as needed
"*": deny
"echo $*": allow
"echo *": allow
"cat *": allow
"printenv *": allow
"git -C * remote get-url origin": allow
"git remote get-url origin": allow
.opencode/agents/auto-agents.md
+2 -1
View File
@@ -104,7 +104,8 @@ permission:
bash:
# All agents should start with deny and then add in as needed
"*": deny
"echo $*": allow
"echo *": allow
"cat *": allow
"printenv *": allow
"git -C * remote get-url origin": allow
"git remote get-url origin": allow
.opencode/agents/estimator-implementation.md
+2 -1
View File
@@ -106,7 +106,8 @@ permission:
bash:
# All agents should start with deny and then add in as needed
"*": deny
"echo $*": allow
"echo *": allow
"cat *": allow
"printenv *": allow
"git -C * remote get-url origin": allow
"git remote get-url origin": allow
.opencode/agents/git-checkout-util.md
+2 -1
View File
@@ -99,7 +99,8 @@ permission:
bash:
# All agents should start with deny and then add in as needed
"*": deny
"echo $*": allow
"echo *": allow
"cat *": allow
"printenv *": allow
"git -C * remote get-url origin": allow
"git remote get-url origin": allow
.opencode/agents/git-cleanup-util.md
+2 -1
View File
@@ -99,7 +99,8 @@ permission:
bash:
# All agents should start with deny and then add in as needed
"*": deny
"echo $*": allow
"echo *": allow
"cat *": allow
"printenv *": allow
"git -C * remote get-url origin": allow
"git remote get-url origin": allow
.opencode/agents/git-clone-util.md
+2 -1
View File
@@ -102,7 +102,8 @@ permission:
bash:
# All agents should start with deny and then add in as needed
"*": deny
"echo $*": allow
"echo *": allow
"cat *": allow
"printenv *": allow
"git -C * remote get-url origin": allow
"git remote get-url origin": allow
.opencode/agents/git-commit-and-push-util.md
+2 -1
View File
@@ -101,7 +101,8 @@ permission:
bash:
# All agents should start with deny and then add in as needed
"*": deny
"echo $*": allow
"echo *": allow
"cat *": allow
"printenv *": allow
"git -C * remote get-url origin": allow
"git remote get-url origin": allow
.opencode/agents/git-commit-util.md
+2 -1
View File
@@ -102,7 +102,8 @@ permission:
bash:
# All agents should start with deny and then add in as needed
"*": deny
"echo $*": allow
"echo *": allow
"cat *": allow
"printenv *": allow
"git -C * remote get-url origin": allow
"git remote get-url origin": allow
.opencode/agents/git-create-commit-util.md
+2 -1
View File
@@ -102,7 +102,8 @@ permission:
bash:
# All agents should start with deny and then add in as needed
"*": deny
"echo $*": allow
"echo *": allow
"cat *": allow
"printenv *": allow
"git -C * remote get-url origin": allow
"git remote get-url origin": allow
.opencode/agents/git-fetch-util.md
+2 -1
View File
@@ -99,7 +99,8 @@ permission:
bash:
# All agents should start with deny and then add in as needed
"*": deny
"echo $*": allow
"echo *": allow
"cat *": allow
"printenv *": allow
"git -C * remote get-url origin": allow
"git remote get-url origin": allow
.opencode/agents/git-force-push-with-lease-util.md
+2 -1
View File
@@ -101,7 +101,8 @@ permission:
bash:
# All agents should start with deny and then add in as needed
"*": deny
"echo $*": allow
"echo *": allow
"cat *": allow
"printenv *": allow
"git -C * remote get-url origin": allow
"git remote get-url origin": allow
.opencode/agents/git-isolator-util.md
+2 -1
View File
@@ -103,7 +103,8 @@ permission:
bash:
# All agents should start with deny and then add in as needed
"*": deny
"echo $*": allow
"echo *": allow
"cat *": allow
"printenv *": allow
"git -C * remote get-url origin": allow
"git remote get-url origin": allow
.opencode/agents/git-push-util.md
+2 -1
View File
@@ -100,7 +100,8 @@ permission:
bash:
# All agents should start with deny and then add in as needed
"*": deny
"echo $*": allow
"echo *": allow
"cat *": allow
"printenv *": allow
"git -C * remote get-url origin": allow
"git remote get-url origin": allow
.opencode/agents/git-rebase-and-push-util.md
+2 -1
View File
@@ -101,7 +101,8 @@ permission:
bash:
# All agents should start with deny and then add in as needed
"*": deny
"echo $*": allow
"echo *": allow
"cat *": allow
"printenv *": allow
"git -C * remote get-url origin": allow
"git remote get-url origin": allow
.opencode/agents/git-rebase-util.md
+2 -1
View File
@@ -103,7 +103,8 @@ permission:
bash:
# All agents should start with deny and then add in as needed
"*": deny
"echo $*": allow
"echo *": allow
"cat *": allow
"printenv *": allow
"git -C * remote get-url origin": allow
"git remote get-url origin": allow
.opencode/agents/git-stage-util.md
+2 -1
View File
@@ -100,7 +100,8 @@ permission:
bash:
# All agents should start with deny and then add in as needed
"*": deny
"echo $*": allow
"echo *": allow
"cat *": allow
"printenv *": allow
"git -C * remote get-url origin": allow
"git remote get-url origin": allow
.opencode/agents/implementation-supervisor.md
+2 -1
View File
@@ -109,7 +109,8 @@ permission:
bash:
# All agents should start with deny and then add in as needed
"*": deny
"echo $*": allow
"echo *": allow
"cat *": allow
"printenv *": allow
"git -C * remote get-url origin": allow
"git remote get-url origin": allow
.opencode/agents/implementation-worker.md
+2 -1
View File
@@ -111,7 +111,8 @@ permission:
# The wrapper only needs three commands: env-var fallback, identity output,
# and reading the git origin URL to derive `forgejo_url` / `forgejo_owner` /
# `forgejo_repo` when those are not provided in the prompt or environment.
"echo $*": allow
"echo *": allow
"cat *": allow
"printenv *": allow
"git -C * remote get-url origin": allow
"git remote get-url origin": allow
.opencode/agents/pr-merge-supervisor.md
+2 -1
View File
@@ -102,7 +102,8 @@ permission:
bash:
# All agents should start with deny and then add in as needed
"*": deny
"echo $*": allow
"echo *": allow
"cat *": allow
"printenv *": allow
"git -C * remote get-url origin": allow
"git remote get-url origin": allow
.opencode/agents/pr-merge-worker.md
+2 -1
View File
@@ -102,7 +102,8 @@ permission:
bash:
# All agents should start with deny and then add in as needed
"*": deny
"echo $*": allow
"echo *": allow
"cat *": allow
"printenv *": allow
"git -C * remote get-url origin": allow
"git remote get-url origin": allow
.opencode/agents/pr-review-supervisor.md
+2 -1
View File
@@ -105,7 +105,8 @@ permission:
bash:
# All agents should start with deny and then add in as needed
"*": deny
"echo $*": allow
"echo *": allow
"cat *": allow
"printenv *": allow
"git -C * remote get-url origin": allow
"git remote get-url origin": allow
.opencode/agents/pr-review-worker.md
+2 -1
View File
@@ -106,7 +106,8 @@ permission:
bash:
# All agents should start with deny and then add in as needed
"*": deny
"echo $*": allow
"echo *": allow
"cat *": allow
"printenv *": allow
"git -C * remote get-url origin": allow
"git remote get-url origin": allow
.opencode/agents/session-health-full-util.md
+2 -1
View File
@@ -103,7 +103,8 @@ permission:
bash:
# All agents should start with deny and then add in as needed
"*": deny
"echo $*": allow
"echo *": allow
"cat *": allow
"printenv *": allow
"git -C * remote get-url origin": allow
"git remote get-url origin": allow
.opencode/agents/session-health-quick-util.md
+2 -1
View File
@@ -103,7 +103,8 @@ permission:
bash:
# All agents should start with deny and then add in as needed
"*": deny
"echo $*": allow
"echo *": allow
"cat *": allow
"printenv *": allow
"git -C * remote get-url origin": allow
"git remote get-url origin": allow
.opencode/agents/session-health-util.md
+2 -1
View File
@@ -103,7 +103,8 @@ permission:
bash:
# All agents should start with deny and then add in as needed
"*": deny
"echo $*": allow
"echo *": allow
"cat *": allow
"printenv *": allow
"git -C * remote get-url origin": allow
"git remote get-url origin": allow
.opencode/agents/supervisor.md
+2 -1
View File
@@ -101,7 +101,8 @@ permission:
bash:
# All agents should start with deny and then add in as needed
"*": deny
"echo $*": allow
"echo *": allow
"cat *": allow
"printenv *": allow
"git -C * remote get-url origin": allow
"git remote get-url origin": allow
.opencode/agents/task-implementor.md
+2 -1
View File
@@ -106,7 +106,8 @@ permission:
bash:
# All agents should start with deny and then add in as needed
"*": deny
"echo $*": allow
"echo *": allow
"cat *": allow
"printenv *": allow
"git -C * remote get-url origin": allow
"git remote get-url origin": allow
.opencode/agents/tier-codex.md
+2 -1
View File
@@ -105,7 +105,8 @@ permission:
bash:
# All agents should start with deny and then add in as needed
"*": deny
"echo $*": allow
"echo *": allow
"cat *": allow
"printenv *": allow
"git -C * remote get-url origin": allow
"git remote get-url origin": allow
.opencode/agents/tier-dispatcher.md
+2 -1
View File
@@ -113,7 +113,8 @@ permission:
# The dispatcher only needs three commands: env-var fallback, identity output,
# and reading the git origin URL to derive `forgejo_url` / `forgejo_owner` /
# `forgejo_repo` when those are not provided in the prompt or environment.
"echo $*": allow
"echo *": allow
"cat *": allow
"printenv *": allow
"git -C * remote get-url origin": allow
"git remote get-url origin": allow
.opencode/agents/tier-gpt5-mini.md
+2 -1
View File
@@ -104,7 +104,8 @@ permission:
bash:
# All agents should start with deny and then add in as needed
"*": deny
"echo $*": allow
"echo *": allow
"cat *": allow
"printenv *": allow
"git -C * remote get-url origin": allow
"git remote get-url origin": allow
.opencode/agents/tier-gpt5-nano.md
+2 -1
View File
@@ -104,7 +104,8 @@ permission:
bash:
# All agents should start with deny and then add in as needed
"*": deny
"echo $*": allow
"echo *": allow
"cat *": allow
"printenv *": allow
"git -C * remote get-url origin": allow
"git remote get-url origin": allow
.opencode/agents/tier-haiku.md
+2 -1
View File
@@ -104,7 +104,8 @@ permission:
bash:
# All agents should start with deny and then add in as needed
"*": deny
"echo $*": allow
"echo *": allow
"cat *": allow
"printenv *": allow
"git -C * remote get-url origin": allow
"git remote get-url origin": allow
.opencode/agents/tier-o4-mini.md
+2 -1
View File
@@ -104,7 +104,8 @@ permission:
bash:
# All agents should start with deny and then add in as needed
"*": deny
"echo $*": allow
"echo *": allow
"cat *": allow
"printenv *": allow
"git -C * remote get-url origin": allow
"git remote get-url origin": allow
.opencode/agents/tier-opus.md
+2 -1
View File
@@ -105,7 +105,8 @@ permission:
bash:
# All agents should start with deny and then add in as needed
"*": deny
"echo $*": allow
"echo *": allow
"cat *": allow
"printenv *": allow
"git -C * remote get-url origin": allow
"git remote get-url origin": allow
.opencode/agents/tier-qwen.md
+2 -1
View File
@@ -104,7 +104,8 @@ permission:
bash:
# All agents should start with deny and then add in as needed
"*": deny
"echo $*": allow
"echo *": allow
"cat *": allow
"printenv *": allow
"git -C * remote get-url origin": allow
"git remote get-url origin": allow
.opencode/agents/tier-sonnet.md
+2 -1
View File
@@ -104,7 +104,8 @@ permission:
bash:
# All agents should start with deny and then add in as needed
"*": deny
"echo $*": allow
"echo *": allow
"cat *": allow
"printenv *": allow
"git -C * remote get-url origin": allow
"git remote get-url origin": allow
.opencode/agents/work-group-util.md
+2 -1
View File
@@ -103,7 +103,8 @@ permission:
bash:
# All agents should start with deny and then add in as needed
"*": deny
"echo $*": allow
"echo *": allow
"cat *": allow
"printenv *": allow
"git -C * remote get-url origin": allow
"git remote get-url origin": allow