build: Had to re-restrict the permissions on the agents, they were misbehaving

.opencode/agents/async-agent-util.md

@@ -103,7 +103,7 @@ permission:
 
   bash:
     # All agents should start with deny and then add in as needed
-    "*": allow
+    "*": deny
     "echo *": allow
     "cat *": allow
     "printenv *": allow

.opencode/agents/auto-agents.md

@@ -103,7 +103,7 @@ permission:
 
   bash:
     # All agents should start with deny and then add in as needed
-    "*": allow
+    "*": deny
     "echo *": allow
     "cat *": allow
     "printenv *": allow

.opencode/agents/estimator-implementation.md

@@ -105,7 +105,7 @@ permission:
 
   bash:
     # All agents should start with deny and then add in as needed
-    "*": allow
+    "*": deny
     "echo *": allow
     "cat *": allow
     "printenv *": allow

.opencode/agents/git-checkout-util.md

@@ -98,7 +98,7 @@ permission:
 
   bash:
     # All agents should start with deny and then add in as needed
-    "*": allow
+    "*": deny
     "echo *": allow
     "cat *": allow
     "printenv *": allow

.opencode/agents/git-cleanup-util.md

@@ -98,7 +98,7 @@ permission:
 
   bash:
     # All agents should start with deny and then add in as needed
-    "*": allow
+    "*": deny
     "echo *": allow
     "cat *": allow
     "printenv *": allow

.opencode/agents/git-clone-util.md

@@ -101,7 +101,7 @@ permission:
 
   bash:
     # All agents should start with deny and then add in as needed
-    "*": allow
+    "*": deny
     "echo *": allow
     "cat *": allow
     "printenv *": allow

.opencode/agents/git-commit-and-push-util.md

@@ -100,7 +100,7 @@ permission:
 
   bash:
     # All agents should start with deny and then add in as needed
-    "*": allow
+    "*": deny
     "echo *": allow
     "cat *": allow
     "printenv *": allow

.opencode/agents/git-commit-util.md

@@ -101,7 +101,7 @@ permission:
 
   bash:
     # All agents should start with deny and then add in as needed
-    "*": allow
+    "*": deny
     "echo *": allow
     "cat *": allow
     "printenv *": allow

.opencode/agents/git-create-commit-util.md

@@ -101,7 +101,7 @@ permission:
 
   bash:
     # All agents should start with deny and then add in as needed
-    "*": allow
+    "*": deny
     "echo *": allow
     "cat *": allow
     "printenv *": allow

.opencode/agents/git-fetch-util.md

@@ -98,7 +98,7 @@ permission:
 
   bash:
     # All agents should start with deny and then add in as needed
-    "*": allow
+    "*": deny
     "echo *": allow
     "cat *": allow
     "printenv *": allow

.opencode/agents/git-force-push-with-lease-util.md

@@ -100,7 +100,7 @@ permission:
 
   bash:
     # All agents should start with deny and then add in as needed
-    "*": allow
+    "*": deny
     "echo *": allow
     "cat *": allow
     "printenv *": allow

.opencode/agents/git-isolator-util.md

@@ -102,7 +102,7 @@ permission:
 
   bash:
     # All agents should start with deny and then add in as needed
-    "*": allow
+    "*": deny
     "echo *": allow
     "cat *": allow
     "printenv *": allow

.opencode/agents/git-push-util.md

@@ -99,7 +99,7 @@ permission:
 
   bash:
     # All agents should start with deny and then add in as needed
-    "*": allow
+    "*": deny
     "echo *": allow
     "cat *": allow
     "printenv *": allow

.opencode/agents/git-rebase-and-push-util.md

@@ -100,7 +100,7 @@ permission:
 
   bash:
     # All agents should start with deny and then add in as needed
-    "*": allow
+    "*": deny
     "echo *": allow
     "cat *": allow
     "printenv *": allow

.opencode/agents/git-rebase-util.md

@@ -102,7 +102,7 @@ permission:
 
   bash:
     # All agents should start with deny and then add in as needed
-    "*": allow
+    "*": deny
     "echo *": allow
     "cat *": allow
     "printenv *": allow

.opencode/agents/git-stage-util.md

@@ -99,7 +99,7 @@ permission:
 
   bash:
     # All agents should start with deny and then add in as needed
-    "*": allow
+    "*": deny
     "echo *": allow
     "cat *": allow
     "printenv *": allow

.opencode/agents/implementation-supervisor.md

@@ -108,7 +108,7 @@ permission:
 
   bash:
     # All agents should start with deny and then add in as needed
-    "*": allow
+    "*": deny
     "echo *": allow
     "cat *": allow
     "printenv *": allow

.opencode/agents/implementation-worker.md

@@ -106,7 +106,7 @@ permission:
 
   bash:
     # All agents should start with deny and then add in as needed
-    "*": allow
+    "*": deny
 
     # The wrapper only needs three commands: env-var fallback, identity output,
     # and reading the git origin URL to derive `forgejo_url` / `forgejo_owner` /

.opencode/agents/pr-merge-supervisor.md

@@ -101,7 +101,7 @@ permission:
 
   bash:
     # All agents should start with deny and then add in as needed
-    "*": allow
+    "*": deny
     "echo *": allow
     "cat *": allow
     "printenv *": allow

.opencode/agents/pr-merge-worker.md

@@ -101,7 +101,7 @@ permission:
 
   bash:
     # All agents should start with deny and then add in as needed
-    "*": allow
+    "*": deny
     "echo *": allow
     "cat *": allow
     "printenv *": allow

.opencode/agents/pr-review-supervisor.md

@@ -104,7 +104,7 @@ permission:
 
   bash:
     # All agents should start with deny and then add in as needed
-    "*": allow
+    "*": deny
     "echo *": allow
     "cat *": allow
     "printenv *": allow

.opencode/agents/pr-review-worker.md

@@ -105,7 +105,7 @@ permission:
 
   bash:
     # All agents should start with deny and then add in as needed
-    "*": allow
+    "*": deny
     "echo *": allow
     "cat *": allow
     "printenv *": allow

.opencode/agents/session-health-full-util.md

@@ -102,7 +102,7 @@ permission:
 
   bash:
     # All agents should start with deny and then add in as needed
-    "*": allow
+    "*": deny
     "echo *": allow
     "cat *": allow
     "printenv *": allow

.opencode/agents/session-health-quick-util.md

@@ -102,7 +102,7 @@ permission:
 
   bash:
     # All agents should start with deny and then add in as needed
-    "*": allow
+    "*": deny
     "echo *": allow
     "cat *": allow
     "printenv *": allow

.opencode/agents/session-health-util.md

@@ -102,7 +102,7 @@ permission:
 
   bash:
     # All agents should start with deny and then add in as needed
-    "*": allow
+    "*": deny
     "echo *": allow
     "cat *": allow
     "printenv *": allow

.opencode/agents/supervisor.md

@@ -100,7 +100,7 @@ permission:
 
   bash:
     # All agents should start with deny and then add in as needed
-    "*": allow
+    "*": deny
     "echo *": allow
     "cat *": allow
     "printenv *": allow

.opencode/agents/task-implementor.md

@@ -105,7 +105,7 @@ permission:
 
   bash:
     # All agents should start with deny and then add in as needed
-    "*": allow
+    "*": deny
     "echo *": allow
     "cat *": allow
     "printenv *": allow

.opencode/agents/tier-codex.md

@@ -104,7 +104,7 @@ permission:
 
   bash:
     # All agents should start with deny and then add in as needed
-    "*": allow
+    "*": deny
     "echo *": allow
     "cat *": allow
     "printenv *": allow

.opencode/agents/tier-dispatcher.md

@@ -108,7 +108,7 @@ permission:
 
   bash:
     # All agents should start with deny and then add in as needed
-    "*": allow
+    "*": deny
 
     # The dispatcher only needs three commands: env-var fallback, identity output,
     # and reading the git origin URL to derive `forgejo_url` / `forgejo_owner` /

.opencode/agents/tier-gpt5-mini.md

@@ -103,7 +103,7 @@ permission:
 
   bash:
     # All agents should start with deny and then add in as needed
-    "*": allow
+    "*": deny
     "echo *": allow
     "cat *": allow
     "printenv *": allow

.opencode/agents/tier-gpt5-nano.md

@@ -103,7 +103,7 @@ permission:
 
   bash:
     # All agents should start with deny and then add in as needed
-    "*": allow
+    "*": deny
     "echo *": allow
     "cat *": allow
     "printenv *": allow

.opencode/agents/tier-haiku.md

@@ -103,7 +103,7 @@ permission:
 
   bash:
     # All agents should start with deny and then add in as needed
-    "*": allow
+    "*": deny
     "echo *": allow
     "cat *": allow
     "printenv *": allow

.opencode/agents/tier-kimi.md

@@ -102,7 +102,7 @@ permission:
 
   bash:
     # All agents should start with deny and then add in as needed
-    "*": allow
+    "*": deny
     "echo *": allow
     "cat *": allow
     "printenv *": allow

.opencode/agents/tier-o4-mini.md

@@ -103,7 +103,7 @@ permission:
 
   bash:
     # All agents should start with deny and then add in as needed
-    "*": allow
+    "*": deny
     "echo *": allow
     "cat *": allow
     "printenv *": allow

.opencode/agents/tier-opus.md

@@ -104,7 +104,7 @@ permission:
 
   bash:
     # All agents should start with deny and then add in as needed
-    "*": allow
+    "*": deny
     "echo *": allow
     "cat *": allow
     "printenv *": allow

.opencode/agents/tier-qwen-large.md

@@ -102,7 +102,7 @@ permission:
 
   bash:
     # All agents should start with deny and then add in as needed
-    "*": allow
+    "*": deny
     "echo *": allow
     "cat *": allow
     "printenv *": allow

.opencode/agents/tier-qwen-med.md

@@ -103,7 +103,7 @@ permission:
 
   bash:
     # All agents should start with deny and then add in as needed
-    "*": allow
+    "*": deny
     "echo *": allow
     "cat *": allow
     "printenv *": allow

.opencode/agents/tier-qwen-small.md

@@ -103,7 +103,7 @@ permission:
 
   bash:
     # All agents should start with deny and then add in as needed
-    "*": allow
+    "*": deny
     "echo *": allow
     "cat *": allow
     "printenv *": allow

.opencode/agents/tier-sonnet.md

@@ -103,7 +103,7 @@ permission:
 
   bash:
     # All agents should start with deny and then add in as needed
-    "*": allow
+    "*": deny
     "echo *": allow
     "cat *": allow
     "printenv *": allow

.opencode/agents/work-group-util.md

@@ -102,7 +102,7 @@ permission:
 
   bash:
     # All agents should start with deny and then add in as needed
-    "*": allow
+    "*": deny
     "echo *": allow
     "cat *": allow
     "printenv *": allow