cleveragents/cleveragents-core
4
0
Fork 3
Code Issues 6.0k Pull Requests 115 Actions Packages Projects Releases Wiki Activity

build: reordered agent perms
CI / benchmark-publish (push) Waiting to run
Details
CI / push-validation (push) Successful in 30s
Details
CI / helm (push) Successful in 42s
Details
CI / build (push) Successful in 47s
Details
CI / quality (push) Successful in 1m14s
Details
CI / lint (push) Successful in 1m25s
Details
CI / typecheck (push) Successful in 1m35s
Details
CI / security (push) Successful in 1m34s
Details
CI / e2e_tests (push) Successful in 5m57s
Details
CI / integration_tests (push) Successful in 7m11s
Details
CI / unit_tests (push) Successful in 9m0s
Details
CI / docker (push) Failing after 1s
Details
CI / coverage (push) Successful in 12m23s
Details
CI / status-check (push) Failing after 3s
Details

Browse Source
This commit is contained in:
Jeffrey Phillips Freeman
2026-05-02 14:33:45 -04:00
parent 6ee703fef5
commit ce396d2b43
34 changed files with 170 additions and 170 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.opencode/agents/async-agent-util.md
+5 -5
View File
@@ -21,16 +21,16 @@ permission:
"question": deny
# All agents are supposed to be working in isolated repos in `/tmp`, so this forces that
read:
"*": allow
write:
"*": deny
external_directory:
"/tmp/*": allow
edit:
"*": deny
"/tmp/*": allow
external_directory:
write:
"*": deny
"/tmp/*": allow
read:
"*": allow
# I don't think MCP permissions work, but just in case they do these two should be the only ones usually allowed
"sequential-thinking*": allow
.opencode/agents/auto-agents.md
+5 -5
View File
@@ -21,16 +21,16 @@ permission:
"question": deny
# All agents are supposed to be working in isolated repos in `/tmp`, so this forces that
read:
"*": allow
write:
"*": deny
external_directory:
"/tmp/*": allow
edit:
"*": deny
"/tmp/*": allow
external_directory:
write:
"*": deny
"/tmp/*": allow
read:
"*": allow
# I don't think MCP permissions work, but just in case they do these two should be the only ones usually allowed
"sequential-thinking*": allow
.opencode/agents/estimator-implementation.md
+5 -5
View File
@@ -23,16 +23,16 @@ permission:
"question": deny
# All agents are supposed to be working in isolated repos in `/tmp`, so this forces that
read:
"*": allow
write:
"*": deny
external_directory:
"/tmp/*": allow
edit:
"*": deny
"/tmp/*": allow
external_directory:
write:
"*": deny
"/tmp/*": allow
read:
"*": allow
# I don't think MCP permissions work, but just in case they do these two should be the only ones usually allowed
"sequential-thinking*": allow
.opencode/agents/git-checkout-util.md
+5 -5
View File
@@ -14,16 +14,16 @@ permission:
"doom_loop": deny
"question": deny
read:
"*": allow
write:
"*": deny
external_directory:
"/tmp/*": allow
edit:
"*": deny
"/tmp/*": allow
external_directory:
write:
"*": deny
"/tmp/*": allow
read:
"*": allow
"sequential-thinking*": deny
"context7*": deny
.opencode/agents/git-clone-util.md
+5 -5
View File
@@ -17,16 +17,16 @@ permission:
"doom_loop": deny
"question": deny
read:
"*": allow
write:
"*": deny
external_directory:
"/tmp/*": allow
edit:
"*": deny
"/tmp/*": allow
external_directory:
write:
"*": deny
"/tmp/*": allow
read:
"*": allow
"sequential-thinking*": deny
"context7*": deny
.opencode/agents/git-commit-and-push-util.md
+5 -5
View File
@@ -16,16 +16,16 @@ permission:
"doom_loop": deny
"question": deny
read:
"*": allow
write:
"*": deny
external_directory:
"/tmp/*": allow
edit:
"*": deny
"/tmp/*": allow
external_directory:
write:
"*": deny
"/tmp/*": allow
read:
"*": allow
"sequential-thinking*": deny
"context7*": deny
.opencode/agents/git-commit-util.md
+5 -5
View File
@@ -19,16 +19,16 @@ permission:
"question": deny
# All agents are supposed to be working in isolated repos in `/tmp`, so this forces that
read:
"*": allow
write:
"*": deny
external_directory:
"/tmp/*": allow
edit:
"*": deny
"/tmp/*": allow
external_directory:
write:
"*": deny
"/tmp/*": allow
read:
"*": allow
# I don't think MCP permissions work, but just in case they do these two should be the only ones usually allowed
"sequential-thinking*": allow
.opencode/agents/git-create-commit-util.md
+5 -5
View File
@@ -17,16 +17,16 @@ permission:
"doom_loop": deny
"question": deny
read:
"*": allow
write:
"*": deny
external_directory:
"/tmp/*": allow
edit:
"*": deny
"/tmp/*": allow
external_directory:
write:
"*": deny
"/tmp/*": allow
read:
"*": allow
"sequential-thinking*": deny
"context7*": deny
.opencode/agents/git-fetch-util.md
+5 -5
View File
@@ -14,16 +14,16 @@ permission:
"doom_loop": deny
"question": deny
read:
"*": allow
write:
"*": deny
external_directory:
"/tmp/*": allow
edit:
"*": deny
"/tmp/*": allow
external_directory:
write:
"*": deny
"/tmp/*": allow
read:
"*": allow
"sequential-thinking*": deny
"context7*": deny
.opencode/agents/git-force-push-with-lease-util.md
+5 -5
View File
@@ -16,16 +16,16 @@ permission:
"doom_loop": deny
"question": deny
read:
"*": allow
write:
"*": deny
external_directory:
"/tmp/*": allow
edit:
"*": deny
"/tmp/*": allow
external_directory:
write:
"*": deny
"/tmp/*": allow
read:
"*": allow
"sequential-thinking*": deny
"context7*": deny
.opencode/agents/git-isolator-util.md
+5 -5
View File
@@ -20,16 +20,16 @@ permission:
"question": deny
# All agents are supposed to be working in isolated repos in `/tmp`, so this forces that
read:
"*": allow
write:
"*": deny
external_directory:
"/tmp/*": allow
edit:
"*": deny
"/tmp/*": allow
external_directory:
write:
"*": deny
"/tmp/*": allow
read:
"*": allow
# I don't think MCP permissions work, but just in case they do these two should be the only ones usually allowed
"sequential-thinking*": deny
.opencode/agents/git-push-util.md
+5 -5
View File
@@ -15,16 +15,16 @@ permission:
"doom_loop": deny
"question": deny
read:
"*": allow
write:
"*": deny
external_directory:
"/tmp/*": allow
edit:
"*": deny
"/tmp/*": allow
external_directory:
write:
"*": deny
"/tmp/*": allow
read:
"*": allow
"sequential-thinking*": deny
"context7*": deny
.opencode/agents/git-rebase-and-push-util.md
+5 -5
View File
@@ -16,16 +16,16 @@ permission:
"doom_loop": deny
"question": deny
read:
"*": allow
write:
"*": deny
external_directory:
"/tmp/*": allow
edit:
"*": deny
"/tmp/*": allow
external_directory:
write:
"*": deny
"/tmp/*": allow
read:
"*": allow
"sequential-thinking*": deny
"context7*": deny
.opencode/agents/git-rebase-util.md
+5 -5
View File
@@ -23,16 +23,16 @@ permission:
read: allow
grep: allow
glob: allow
read:
"*": allow
write:
"*": deny
external_directory:
"/tmp/*": allow
edit:
"*": deny
"/tmp/*": allow
external_directory:
write:
"*": deny
"/tmp/*": allow
read:
"*": allow
# I don't think MCP permissions work, but just in case they do these two should be the only ones usually allowed
"sequential-thinking*": allow
.opencode/agents/git-stage-util.md
+5 -5
View File
@@ -15,16 +15,16 @@ permission:
"doom_loop": deny
"question": deny
read:
"*": allow
write:
"*": deny
external_directory:
"/tmp/*": allow
edit:
"*": deny
"/tmp/*": allow
external_directory:
write:
"*": deny
"/tmp/*": allow
read:
"*": allow
"sequential-thinking*": deny
"context7*": deny
.opencode/agents/implementation-supervisor.md
+5 -5
View File
@@ -26,16 +26,16 @@ permission:
"question": deny
# All agents are supposed to be working in isolated repos in `/tmp`, so this forces that
read:
"*": allow
write:
"*": deny
external_directory:
"/tmp/*": allow
edit:
"*": deny
"/tmp/*": allow
external_directory:
write:
"*": deny
"/tmp/*": allow
read:
"*": allow
# I don't think MCP permissions work, but just in case they do these two should be the only ones usually allowed
"sequential-thinking*": deny
.opencode/agents/pr-merge-supervisor.md
+5 -5
View File
@@ -19,16 +19,16 @@ permission:
"question": deny
# All agents are supposed to be working in isolated repos in `/tmp`, so this forces that
read:
"*": allow
write:
"*": deny
external_directory:
"/tmp/*": allow
edit:
"*": deny
"/tmp/*": allow
external_directory:
write:
"*": deny
"/tmp/*": allow
read:
"*": allow
# I don't think MCP permissions work, but just in case they do these two should be the only ones usually allowed
"sequential-thinking*": deny
.opencode/agents/pr-merge-worker.md
+5 -5
View File
@@ -19,16 +19,16 @@ permission:
"question": deny
# All agents are supposed to be working in isolated repos in `/tmp`, so this forces that
read:
"*": allow
write:
"*": deny
external_directory:
"/tmp/*": allow
edit:
"*": deny
"/tmp/*": allow
external_directory:
write:
"*": deny
"/tmp/*": allow
read:
"*": allow
# I don't think MCP permissions work, but just in case they do these two should be the only ones usually allowed
"sequential-thinking*": allow
.opencode/agents/pr-review-supervisor.md
+5 -5
View File
@@ -22,16 +22,16 @@ permission:
"question": deny
# All agents are supposed to be working in isolated repos in `/tmp`, so this forces that
read:
"*": allow
write:
"*": deny
external_directory:
"/tmp/*": allow
edit:
"*": deny
"/tmp/*": allow
external_directory:
write:
"*": deny
"/tmp/*": allow
read:
"*": allow
# I don't think MCP permissions work, but just in case they do these two should be the only ones usually allowed
"sequential-thinking*": deny
.opencode/agents/pr-review-worker.md
+5 -5
View File
@@ -23,16 +23,16 @@ permission:
"question": deny
# All agents are supposed to be working in isolated repos in `/tmp`, so this forces that
read:
"*": allow
write:
"*": deny
external_directory:
"/tmp/*": allow
edit:
"*": deny
"/tmp/*": allow
external_directory:
write:
"*": deny
"/tmp/*": allow
read:
"*": allow
# I don't think MCP permissions work, but just in case they do these two should be the only ones usually allowed
"sequential-thinking*": allow
.opencode/agents/session-health-full-util.md
+5 -5
View File
@@ -18,16 +18,16 @@ permission:
"doom_loop": deny
"question": deny
read:
"*": allow
write:
"*": deny
external_directory:
"/tmp/*": allow
edit:
"*": deny
"/tmp/*": allow
external_directory:
write:
"*": deny
"/tmp/*": allow
read:
"*": allow
"sequential-thinking*": allow
"context7*": deny
.opencode/agents/session-health-quick-util.md
+5 -5
View File
@@ -18,16 +18,16 @@ permission:
"doom_loop": deny
"question": deny
read:
"*": allow
write:
"*": deny
external_directory:
"/tmp/*": allow
edit:
"*": deny
"/tmp/*": allow
external_directory:
write:
"*": deny
"/tmp/*": allow
read:
"*": allow
"sequential-thinking*": allow
"context7*": deny
.opencode/agents/session-health-util.md
+5 -5
View File
@@ -18,16 +18,16 @@ permission:
"doom_loop": deny
"question": deny
read:
"*": allow
write:
"*": deny
external_directory:
"/tmp/*": allow
edit:
"*": deny
"/tmp/*": allow
external_directory:
write:
"*": deny
"/tmp/*": allow
read:
"*": allow
"sequential-thinking*": allow
"context7*": deny
.opencode/agents/supervisor.md
+5 -5
View File
@@ -18,16 +18,16 @@ permission:
"question": deny
# All agents are supposed to be working in isolated repos in `/tmp`, so this forces that
read:
"*": allow
write:
"*": deny
external_directory:
"/tmp/*": allow
edit:
"*": deny
"/tmp/*": allow
external_directory:
write:
"*": deny
"/tmp/*": allow
read:
"*": allow
# I don't think MCP permissions work, but just in case they do these two should be the only ones usually allowed
"sequential-thinking*": allow
.opencode/agents/task-implementor.md
+5 -5
View File
@@ -25,16 +25,16 @@ permission:
"question": deny
# All agents are supposed to be working in isolated repos in `/tmp`, so this forces that
read:
"*": allow
write:
"*": deny
external_directory:
"/tmp/*": allow
edit:
"*": deny
"/tmp/*": allow
external_directory:
write:
"*": deny
"/tmp/*": allow
read:
"*": allow
# I don't think MCP permissions work, but just in case they do these two should be the only ones usually allowed
"sequential-thinking*": allow
.opencode/agents/tier-codex.md
+5 -5
View File
@@ -22,16 +22,16 @@ permission:
"question": deny
# All agents are supposed to be working in isolated repos in `/tmp`, so this forces that
read:
"*": allow
write:
"*": deny
external_directory:
"/tmp/*": allow
edit:
"*": deny
"/tmp/*": allow
external_directory:
write:
"*": deny
"/tmp/*": allow
read:
"*": allow
# I don't think MCP permissions work, but just in case they do these two should be the only ones usually allowed
"sequential-thinking*": deny
.opencode/agents/tier-gpt5-mini.md
+5 -5
View File
@@ -21,16 +21,16 @@ permission:
"question": deny
# All agents are supposed to be working in isolated repos in `/tmp`, so this forces that
read:
"*": allow
write:
"*": deny
external_directory:
"/tmp/*": allow
edit:
"*": deny
"/tmp/*": allow
external_directory:
write:
"*": deny
"/tmp/*": allow
read:
"*": allow
# I don't think MCP permissions work, but just in case they do these two should be the only ones usually allowed
"sequential-thinking*": deny
.opencode/agents/tier-gpt5-nano.md
+5 -5
View File
@@ -21,16 +21,16 @@ permission:
"question": deny
# All agents are supposed to be working in isolated repos in `/tmp`, so this forces that
read:
"*": allow
write:
"*": deny
external_directory:
"/tmp/*": allow
edit:
"*": deny
"/tmp/*": allow
external_directory:
write:
"*": deny
"/tmp/*": allow
read:
"*": allow
# I don't think MCP permissions work, but just in case they do these two should be the only ones usually allowed
"sequential-thinking*": deny
.opencode/agents/tier-haiku.md
+5 -5
View File
@@ -21,16 +21,16 @@ permission:
"question": deny
# All agents are supposed to be working in isolated repos in `/tmp`, so this forces that
read:
"*": allow
write:
"*": deny
external_directory:
"/tmp/*": allow
edit:
"*": deny
"/tmp/*": allow
external_directory:
write:
"*": deny
"/tmp/*": allow
read:
"*": allow
# I don't think MCP permissions work, but just in case they do these two should be the only ones usually allowed
"sequential-thinking*": deny
.opencode/agents/tier-o4-mini.md
+5 -5
View File
@@ -21,16 +21,16 @@ permission:
"question": deny
# All agents are supposed to be working in isolated repos in `/tmp`, so this forces that
read:
"*": allow
write:
"*": deny
external_directory:
"/tmp/*": allow
edit:
"*": deny
"/tmp/*": allow
external_directory:
write:
"*": deny
"/tmp/*": allow
read:
"*": allow
# I don't think MCP permissions work, but just in case they do these two should be the only ones usually allowed
"sequential-thinking*": deny
.opencode/agents/tier-opus.md
+5 -5
View File
@@ -22,16 +22,16 @@ permission:
"question": deny
# All agents are supposed to be working in isolated repos in `/tmp`, so this forces that
read:
"*": allow
write:
"*": deny
external_directory:
"/tmp/*": allow
edit:
"*": deny
"/tmp/*": allow
external_directory:
write:
"*": deny
"/tmp/*": allow
read:
"*": allow
# I don't think MCP permissions work, but just in case they do these two should be the only ones usually allowed
"sequential-thinking*": deny
.opencode/agents/tier-qwen.md
+5 -5
View File
@@ -21,16 +21,16 @@ permission:
"question": deny
# All agents are supposed to be working in isolated repos in `/tmp`, so this forces that
read:
"*": allow
write:
"*": deny
external_directory:
"/tmp/*": allow
edit:
"*": deny
"/tmp/*": allow
external_directory:
write:
"*": deny
"/tmp/*": allow
read:
"*": allow
# I don't think MCP permissions work, but just in case they do these two should be the only ones usually allowed
"sequential-thinking*": deny
.opencode/agents/tier-sonnet.md
+5 -5
View File
@@ -21,16 +21,16 @@ permission:
"question": deny
# All agents are supposed to be working in isolated repos in `/tmp`, so this forces that
read:
"*": allow
write:
"*": deny
external_directory:
"/tmp/*": allow
edit:
"*": deny
"/tmp/*": allow
external_directory:
write:
"*": deny
"/tmp/*": allow
read:
"*": allow
# I don't think MCP permissions work, but just in case they do these two should be the only ones usually allowed
"sequential-thinking*": deny
.opencode/agents/work-group-util.md
+5 -5
View File
@@ -20,16 +20,16 @@ permission:
"question": deny
# All agents are supposed to be working in isolated repos in `/tmp`, so this forces that
read:
"*": allow
write:
"*": deny
external_directory:
"/tmp/*": allow
edit:
"*": deny
"/tmp/*": allow
external_directory:
write:
"*": deny
"/tmp/*": allow
read:
"*": allow
# MCP permissions
"sequential-thinking*": allow