From 3da61ba891eb7f1ecd80eae52300e56dfa17b63e Mon Sep 17 00:00:00 2001 From: clever-agent Date: Tue, 5 May 2026 20:11:19 -0400 Subject: [PATCH] build: opened up echo and cat perms to help smooth over some tool calls --- .opencode/agents/async-agent-util.md | 3 ++- .opencode/agents/auto-agents.md | 3 ++- .opencode/agents/estimator-implementation.md | 3 ++- .opencode/agents/git-checkout-util.md | 3 ++- .opencode/agents/git-cleanup-util.md | 3 ++- .opencode/agents/git-clone-util.md | 3 ++- .opencode/agents/git-commit-and-push-util.md | 3 ++- .opencode/agents/git-commit-util.md | 3 ++- .opencode/agents/git-create-commit-util.md | 3 ++- .opencode/agents/git-fetch-util.md | 3 ++- .opencode/agents/git-force-push-with-lease-util.md | 3 ++- .opencode/agents/git-isolator-util.md | 3 ++- .opencode/agents/git-push-util.md | 3 ++- .opencode/agents/git-rebase-and-push-util.md | 3 ++- .opencode/agents/git-rebase-util.md | 3 ++- .opencode/agents/git-stage-util.md | 3 ++- .opencode/agents/implementation-supervisor.md | 3 ++- .opencode/agents/implementation-worker.md | 3 ++- .opencode/agents/pr-merge-supervisor.md | 3 ++- .opencode/agents/pr-merge-worker.md | 3 ++- .opencode/agents/pr-review-supervisor.md | 3 ++- .opencode/agents/pr-review-worker.md | 3 ++- .opencode/agents/session-health-full-util.md | 3 ++- .opencode/agents/session-health-quick-util.md | 3 ++- .opencode/agents/session-health-util.md | 3 ++- .opencode/agents/supervisor.md | 3 ++- .opencode/agents/task-implementor.md | 3 ++- .opencode/agents/tier-codex.md | 3 ++- .opencode/agents/tier-dispatcher.md | 3 ++- .opencode/agents/tier-gpt5-mini.md | 3 ++- .opencode/agents/tier-gpt5-nano.md | 3 ++- .opencode/agents/tier-haiku.md | 3 ++- .opencode/agents/tier-o4-mini.md | 3 ++- .opencode/agents/tier-opus.md | 3 ++- .opencode/agents/tier-qwen.md | 3 ++- .opencode/agents/tier-sonnet.md | 3 ++- .opencode/agents/work-group-util.md | 3 ++- 37 files changed, 74 insertions(+), 37 deletions(-) diff --git a/.opencode/agents/async-agent-util.md b/.opencode/agents/async-agent-util.md index 36d1eae0e..7aea0343f 100644 --- a/.opencode/agents/async-agent-util.md +++ b/.opencode/agents/async-agent-util.md @@ -104,7 +104,8 @@ permission: bash: # All agents should start with deny and then add in as needed "*": deny - "echo $*": allow + "echo *": allow + "cat *": allow "printenv *": allow "git -C * remote get-url origin": allow "git remote get-url origin": allow diff --git a/.opencode/agents/auto-agents.md b/.opencode/agents/auto-agents.md index 16a2f7514..69b4eb863 100644 --- a/.opencode/agents/auto-agents.md +++ b/.opencode/agents/auto-agents.md @@ -104,7 +104,8 @@ permission: bash: # All agents should start with deny and then add in as needed "*": deny - "echo $*": allow + "echo *": allow + "cat *": allow "printenv *": allow "git -C * remote get-url origin": allow "git remote get-url origin": allow diff --git a/.opencode/agents/estimator-implementation.md b/.opencode/agents/estimator-implementation.md index 6d06f0f50..3b4b23653 100644 --- a/.opencode/agents/estimator-implementation.md +++ b/.opencode/agents/estimator-implementation.md @@ -106,7 +106,8 @@ permission: bash: # All agents should start with deny and then add in as needed "*": deny - "echo $*": allow + "echo *": allow + "cat *": allow "printenv *": allow "git -C * remote get-url origin": allow "git remote get-url origin": allow diff --git a/.opencode/agents/git-checkout-util.md b/.opencode/agents/git-checkout-util.md index ff908e3dc..bc8416083 100644 --- a/.opencode/agents/git-checkout-util.md +++ b/.opencode/agents/git-checkout-util.md @@ -99,7 +99,8 @@ permission: bash: # All agents should start with deny and then add in as needed "*": deny - "echo $*": allow + "echo *": allow + "cat *": allow "printenv *": allow "git -C * remote get-url origin": allow "git remote get-url origin": allow diff --git a/.opencode/agents/git-cleanup-util.md b/.opencode/agents/git-cleanup-util.md index 693c314e7..45c61d559 100644 --- a/.opencode/agents/git-cleanup-util.md +++ b/.opencode/agents/git-cleanup-util.md @@ -99,7 +99,8 @@ permission: bash: # All agents should start with deny and then add in as needed "*": deny - "echo $*": allow + "echo *": allow + "cat *": allow "printenv *": allow "git -C * remote get-url origin": allow "git remote get-url origin": allow diff --git a/.opencode/agents/git-clone-util.md b/.opencode/agents/git-clone-util.md index 7e27bc107..58b0bd32e 100644 --- a/.opencode/agents/git-clone-util.md +++ b/.opencode/agents/git-clone-util.md @@ -102,7 +102,8 @@ permission: bash: # All agents should start with deny and then add in as needed "*": deny - "echo $*": allow + "echo *": allow + "cat *": allow "printenv *": allow "git -C * remote get-url origin": allow "git remote get-url origin": allow diff --git a/.opencode/agents/git-commit-and-push-util.md b/.opencode/agents/git-commit-and-push-util.md index bc77ca11d..c88856230 100644 --- a/.opencode/agents/git-commit-and-push-util.md +++ b/.opencode/agents/git-commit-and-push-util.md @@ -101,7 +101,8 @@ permission: bash: # All agents should start with deny and then add in as needed "*": deny - "echo $*": allow + "echo *": allow + "cat *": allow "printenv *": allow "git -C * remote get-url origin": allow "git remote get-url origin": allow diff --git a/.opencode/agents/git-commit-util.md b/.opencode/agents/git-commit-util.md index 1a2cd3a6b..706d569e9 100644 --- a/.opencode/agents/git-commit-util.md +++ b/.opencode/agents/git-commit-util.md @@ -102,7 +102,8 @@ permission: bash: # All agents should start with deny and then add in as needed "*": deny - "echo $*": allow + "echo *": allow + "cat *": allow "printenv *": allow "git -C * remote get-url origin": allow "git remote get-url origin": allow diff --git a/.opencode/agents/git-create-commit-util.md b/.opencode/agents/git-create-commit-util.md index 68882f9d3..9578995fb 100644 --- a/.opencode/agents/git-create-commit-util.md +++ b/.opencode/agents/git-create-commit-util.md @@ -102,7 +102,8 @@ permission: bash: # All agents should start with deny and then add in as needed "*": deny - "echo $*": allow + "echo *": allow + "cat *": allow "printenv *": allow "git -C * remote get-url origin": allow "git remote get-url origin": allow diff --git a/.opencode/agents/git-fetch-util.md b/.opencode/agents/git-fetch-util.md index b0a83c7f0..9c18fa10e 100644 --- a/.opencode/agents/git-fetch-util.md +++ b/.opencode/agents/git-fetch-util.md @@ -99,7 +99,8 @@ permission: bash: # All agents should start with deny and then add in as needed "*": deny - "echo $*": allow + "echo *": allow + "cat *": allow "printenv *": allow "git -C * remote get-url origin": allow "git remote get-url origin": allow diff --git a/.opencode/agents/git-force-push-with-lease-util.md b/.opencode/agents/git-force-push-with-lease-util.md index a1c980c8b..cbff76c47 100644 --- a/.opencode/agents/git-force-push-with-lease-util.md +++ b/.opencode/agents/git-force-push-with-lease-util.md @@ -101,7 +101,8 @@ permission: bash: # All agents should start with deny and then add in as needed "*": deny - "echo $*": allow + "echo *": allow + "cat *": allow "printenv *": allow "git -C * remote get-url origin": allow "git remote get-url origin": allow diff --git a/.opencode/agents/git-isolator-util.md b/.opencode/agents/git-isolator-util.md index 807aa5e59..89f0c16da 100644 --- a/.opencode/agents/git-isolator-util.md +++ b/.opencode/agents/git-isolator-util.md @@ -103,7 +103,8 @@ permission: bash: # All agents should start with deny and then add in as needed "*": deny - "echo $*": allow + "echo *": allow + "cat *": allow "printenv *": allow "git -C * remote get-url origin": allow "git remote get-url origin": allow diff --git a/.opencode/agents/git-push-util.md b/.opencode/agents/git-push-util.md index a7c791887..a0f78b51b 100644 --- a/.opencode/agents/git-push-util.md +++ b/.opencode/agents/git-push-util.md @@ -100,7 +100,8 @@ permission: bash: # All agents should start with deny and then add in as needed "*": deny - "echo $*": allow + "echo *": allow + "cat *": allow "printenv *": allow "git -C * remote get-url origin": allow "git remote get-url origin": allow diff --git a/.opencode/agents/git-rebase-and-push-util.md b/.opencode/agents/git-rebase-and-push-util.md index 95d6b3a31..292a0ebc4 100644 --- a/.opencode/agents/git-rebase-and-push-util.md +++ b/.opencode/agents/git-rebase-and-push-util.md @@ -101,7 +101,8 @@ permission: bash: # All agents should start with deny and then add in as needed "*": deny - "echo $*": allow + "echo *": allow + "cat *": allow "printenv *": allow "git -C * remote get-url origin": allow "git remote get-url origin": allow diff --git a/.opencode/agents/git-rebase-util.md b/.opencode/agents/git-rebase-util.md index 14c397ec8..5ffcbb529 100644 --- a/.opencode/agents/git-rebase-util.md +++ b/.opencode/agents/git-rebase-util.md @@ -103,7 +103,8 @@ permission: bash: # All agents should start with deny and then add in as needed "*": deny - "echo $*": allow + "echo *": allow + "cat *": allow "printenv *": allow "git -C * remote get-url origin": allow "git remote get-url origin": allow diff --git a/.opencode/agents/git-stage-util.md b/.opencode/agents/git-stage-util.md index 02cf1edf0..1075f7da4 100644 --- a/.opencode/agents/git-stage-util.md +++ b/.opencode/agents/git-stage-util.md @@ -100,7 +100,8 @@ permission: bash: # All agents should start with deny and then add in as needed "*": deny - "echo $*": allow + "echo *": allow + "cat *": allow "printenv *": allow "git -C * remote get-url origin": allow "git remote get-url origin": allow diff --git a/.opencode/agents/implementation-supervisor.md b/.opencode/agents/implementation-supervisor.md index b9ec1c8e0..4320a54a8 100644 --- a/.opencode/agents/implementation-supervisor.md +++ b/.opencode/agents/implementation-supervisor.md @@ -109,7 +109,8 @@ permission: bash: # All agents should start with deny and then add in as needed "*": deny - "echo $*": allow + "echo *": allow + "cat *": allow "printenv *": allow "git -C * remote get-url origin": allow "git remote get-url origin": allow diff --git a/.opencode/agents/implementation-worker.md b/.opencode/agents/implementation-worker.md index 653396126..3f79aca57 100644 --- a/.opencode/agents/implementation-worker.md +++ b/.opencode/agents/implementation-worker.md @@ -111,7 +111,8 @@ permission: # The wrapper only needs three commands: env-var fallback, identity output, # and reading the git origin URL to derive `forgejo_url` / `forgejo_owner` / # `forgejo_repo` when those are not provided in the prompt or environment. - "echo $*": allow + "echo *": allow + "cat *": allow "printenv *": allow "git -C * remote get-url origin": allow "git remote get-url origin": allow diff --git a/.opencode/agents/pr-merge-supervisor.md b/.opencode/agents/pr-merge-supervisor.md index e4ad7461f..e04be2cb6 100644 --- a/.opencode/agents/pr-merge-supervisor.md +++ b/.opencode/agents/pr-merge-supervisor.md @@ -102,7 +102,8 @@ permission: bash: # All agents should start with deny and then add in as needed "*": deny - "echo $*": allow + "echo *": allow + "cat *": allow "printenv *": allow "git -C * remote get-url origin": allow "git remote get-url origin": allow diff --git a/.opencode/agents/pr-merge-worker.md b/.opencode/agents/pr-merge-worker.md index 94cf13d57..0c82268af 100644 --- a/.opencode/agents/pr-merge-worker.md +++ b/.opencode/agents/pr-merge-worker.md @@ -102,7 +102,8 @@ permission: bash: # All agents should start with deny and then add in as needed "*": deny - "echo $*": allow + "echo *": allow + "cat *": allow "printenv *": allow "git -C * remote get-url origin": allow "git remote get-url origin": allow diff --git a/.opencode/agents/pr-review-supervisor.md b/.opencode/agents/pr-review-supervisor.md index 06f559686..a3cc29b05 100644 --- a/.opencode/agents/pr-review-supervisor.md +++ b/.opencode/agents/pr-review-supervisor.md @@ -105,7 +105,8 @@ permission: bash: # All agents should start with deny and then add in as needed "*": deny - "echo $*": allow + "echo *": allow + "cat *": allow "printenv *": allow "git -C * remote get-url origin": allow "git remote get-url origin": allow diff --git a/.opencode/agents/pr-review-worker.md b/.opencode/agents/pr-review-worker.md index 2c3cab265..1fc008a58 100644 --- a/.opencode/agents/pr-review-worker.md +++ b/.opencode/agents/pr-review-worker.md @@ -106,7 +106,8 @@ permission: bash: # All agents should start with deny and then add in as needed "*": deny - "echo $*": allow + "echo *": allow + "cat *": allow "printenv *": allow "git -C * remote get-url origin": allow "git remote get-url origin": allow diff --git a/.opencode/agents/session-health-full-util.md b/.opencode/agents/session-health-full-util.md index b6051e846..307fe7075 100644 --- a/.opencode/agents/session-health-full-util.md +++ b/.opencode/agents/session-health-full-util.md @@ -103,7 +103,8 @@ permission: bash: # All agents should start with deny and then add in as needed "*": deny - "echo $*": allow + "echo *": allow + "cat *": allow "printenv *": allow "git -C * remote get-url origin": allow "git remote get-url origin": allow diff --git a/.opencode/agents/session-health-quick-util.md b/.opencode/agents/session-health-quick-util.md index dd8189140..b0e8d7c00 100644 --- a/.opencode/agents/session-health-quick-util.md +++ b/.opencode/agents/session-health-quick-util.md @@ -103,7 +103,8 @@ permission: bash: # All agents should start with deny and then add in as needed "*": deny - "echo $*": allow + "echo *": allow + "cat *": allow "printenv *": allow "git -C * remote get-url origin": allow "git remote get-url origin": allow diff --git a/.opencode/agents/session-health-util.md b/.opencode/agents/session-health-util.md index 95efde515..590ec62ad 100644 --- a/.opencode/agents/session-health-util.md +++ b/.opencode/agents/session-health-util.md @@ -103,7 +103,8 @@ permission: bash: # All agents should start with deny and then add in as needed "*": deny - "echo $*": allow + "echo *": allow + "cat *": allow "printenv *": allow "git -C * remote get-url origin": allow "git remote get-url origin": allow diff --git a/.opencode/agents/supervisor.md b/.opencode/agents/supervisor.md index e4c5fcf07..208ea9a85 100644 --- a/.opencode/agents/supervisor.md +++ b/.opencode/agents/supervisor.md @@ -101,7 +101,8 @@ permission: bash: # All agents should start with deny and then add in as needed "*": deny - "echo $*": allow + "echo *": allow + "cat *": allow "printenv *": allow "git -C * remote get-url origin": allow "git remote get-url origin": allow diff --git a/.opencode/agents/task-implementor.md b/.opencode/agents/task-implementor.md index 57db96428..041ab81c6 100644 --- a/.opencode/agents/task-implementor.md +++ b/.opencode/agents/task-implementor.md @@ -106,7 +106,8 @@ permission: bash: # All agents should start with deny and then add in as needed "*": deny - "echo $*": allow + "echo *": allow + "cat *": allow "printenv *": allow "git -C * remote get-url origin": allow "git remote get-url origin": allow diff --git a/.opencode/agents/tier-codex.md b/.opencode/agents/tier-codex.md index b5226463f..00744533d 100644 --- a/.opencode/agents/tier-codex.md +++ b/.opencode/agents/tier-codex.md @@ -105,7 +105,8 @@ permission: bash: # All agents should start with deny and then add in as needed "*": deny - "echo $*": allow + "echo *": allow + "cat *": allow "printenv *": allow "git -C * remote get-url origin": allow "git remote get-url origin": allow diff --git a/.opencode/agents/tier-dispatcher.md b/.opencode/agents/tier-dispatcher.md index e8005b451..d04f59b02 100644 --- a/.opencode/agents/tier-dispatcher.md +++ b/.opencode/agents/tier-dispatcher.md @@ -113,7 +113,8 @@ permission: # The dispatcher only needs three commands: env-var fallback, identity output, # and reading the git origin URL to derive `forgejo_url` / `forgejo_owner` / # `forgejo_repo` when those are not provided in the prompt or environment. - "echo $*": allow + "echo *": allow + "cat *": allow "printenv *": allow "git -C * remote get-url origin": allow "git remote get-url origin": allow diff --git a/.opencode/agents/tier-gpt5-mini.md b/.opencode/agents/tier-gpt5-mini.md index c2470c951..8f66c273b 100644 --- a/.opencode/agents/tier-gpt5-mini.md +++ b/.opencode/agents/tier-gpt5-mini.md @@ -104,7 +104,8 @@ permission: bash: # All agents should start with deny and then add in as needed "*": deny - "echo $*": allow + "echo *": allow + "cat *": allow "printenv *": allow "git -C * remote get-url origin": allow "git remote get-url origin": allow diff --git a/.opencode/agents/tier-gpt5-nano.md b/.opencode/agents/tier-gpt5-nano.md index 1047175c1..03bff406a 100644 --- a/.opencode/agents/tier-gpt5-nano.md +++ b/.opencode/agents/tier-gpt5-nano.md @@ -104,7 +104,8 @@ permission: bash: # All agents should start with deny and then add in as needed "*": deny - "echo $*": allow + "echo *": allow + "cat *": allow "printenv *": allow "git -C * remote get-url origin": allow "git remote get-url origin": allow diff --git a/.opencode/agents/tier-haiku.md b/.opencode/agents/tier-haiku.md index 115805fe5..76187180e 100644 --- a/.opencode/agents/tier-haiku.md +++ b/.opencode/agents/tier-haiku.md @@ -104,7 +104,8 @@ permission: bash: # All agents should start with deny and then add in as needed "*": deny - "echo $*": allow + "echo *": allow + "cat *": allow "printenv *": allow "git -C * remote get-url origin": allow "git remote get-url origin": allow diff --git a/.opencode/agents/tier-o4-mini.md b/.opencode/agents/tier-o4-mini.md index 1cfb9208b..7cbf33adc 100644 --- a/.opencode/agents/tier-o4-mini.md +++ b/.opencode/agents/tier-o4-mini.md @@ -104,7 +104,8 @@ permission: bash: # All agents should start with deny and then add in as needed "*": deny - "echo $*": allow + "echo *": allow + "cat *": allow "printenv *": allow "git -C * remote get-url origin": allow "git remote get-url origin": allow diff --git a/.opencode/agents/tier-opus.md b/.opencode/agents/tier-opus.md index 40703fb83..54fff15b0 100644 --- a/.opencode/agents/tier-opus.md +++ b/.opencode/agents/tier-opus.md @@ -105,7 +105,8 @@ permission: bash: # All agents should start with deny and then add in as needed "*": deny - "echo $*": allow + "echo *": allow + "cat *": allow "printenv *": allow "git -C * remote get-url origin": allow "git remote get-url origin": allow diff --git a/.opencode/agents/tier-qwen.md b/.opencode/agents/tier-qwen.md index 52fdc6ef2..12fbdd65e 100644 --- a/.opencode/agents/tier-qwen.md +++ b/.opencode/agents/tier-qwen.md @@ -104,7 +104,8 @@ permission: bash: # All agents should start with deny and then add in as needed "*": deny - "echo $*": allow + "echo *": allow + "cat *": allow "printenv *": allow "git -C * remote get-url origin": allow "git remote get-url origin": allow diff --git a/.opencode/agents/tier-sonnet.md b/.opencode/agents/tier-sonnet.md index c3796c6c0..92c86a623 100644 --- a/.opencode/agents/tier-sonnet.md +++ b/.opencode/agents/tier-sonnet.md @@ -104,7 +104,8 @@ permission: bash: # All agents should start with deny and then add in as needed "*": deny - "echo $*": allow + "echo *": allow + "cat *": allow "printenv *": allow "git -C * remote get-url origin": allow "git remote get-url origin": allow diff --git a/.opencode/agents/work-group-util.md b/.opencode/agents/work-group-util.md index c3c247258..4a9e17a1a 100644 --- a/.opencode/agents/work-group-util.md +++ b/.opencode/agents/work-group-util.md @@ -103,7 +103,8 @@ permission: bash: # All agents should start with deny and then add in as needed "*": deny - "echo $*": allow + "echo *": allow + "cat *": allow "printenv *": allow "git -C * remote get-url origin": allow "git remote get-url origin": allow