diff --git a/.opencode/agents/async-agent-util.md b/.opencode/agents/async-agent-util.md index d0a91a760..4fa8e8e48 100644 --- a/.opencode/agents/async-agent-util.md +++ b/.opencode/agents/async-agent-util.md @@ -103,7 +103,7 @@ permission: bash: # All agents should start with deny and then add in as needed - "*": allow + "*": deny "echo *": allow "cat *": allow "printenv *": allow diff --git a/.opencode/agents/auto-agents.md b/.opencode/agents/auto-agents.md index bb15466b8..e9b0aeeb4 100644 --- a/.opencode/agents/auto-agents.md +++ b/.opencode/agents/auto-agents.md @@ -103,7 +103,7 @@ permission: bash: # All agents should start with deny and then add in as needed - "*": allow + "*": deny "echo *": allow "cat *": allow "printenv *": allow diff --git a/.opencode/agents/estimator-implementation.md b/.opencode/agents/estimator-implementation.md index e6ad598e3..abb59975d 100644 --- a/.opencode/agents/estimator-implementation.md +++ b/.opencode/agents/estimator-implementation.md @@ -105,7 +105,7 @@ permission: bash: # All agents should start with deny and then add in as needed - "*": allow + "*": deny "echo *": allow "cat *": allow "printenv *": allow diff --git a/.opencode/agents/git-checkout-util.md b/.opencode/agents/git-checkout-util.md index 52253d2cc..c039bc885 100644 --- a/.opencode/agents/git-checkout-util.md +++ b/.opencode/agents/git-checkout-util.md @@ -98,7 +98,7 @@ permission: bash: # All agents should start with deny and then add in as needed - "*": allow + "*": deny "echo *": allow "cat *": allow "printenv *": allow diff --git a/.opencode/agents/git-cleanup-util.md b/.opencode/agents/git-cleanup-util.md index 9a971333b..bbad57dba 100644 --- a/.opencode/agents/git-cleanup-util.md +++ b/.opencode/agents/git-cleanup-util.md @@ -98,7 +98,7 @@ permission: bash: # All agents should start with deny and then add in as needed - "*": allow + "*": deny "echo *": allow "cat *": allow "printenv *": allow diff --git a/.opencode/agents/git-clone-util.md b/.opencode/agents/git-clone-util.md index 8872f4e1d..d9eac6930 100644 --- a/.opencode/agents/git-clone-util.md +++ b/.opencode/agents/git-clone-util.md @@ -101,7 +101,7 @@ permission: bash: # All agents should start with deny and then add in as needed - "*": allow + "*": deny "echo *": allow "cat *": allow "printenv *": allow diff --git a/.opencode/agents/git-commit-and-push-util.md b/.opencode/agents/git-commit-and-push-util.md index e46ed4fe6..1baa3e33a 100644 --- a/.opencode/agents/git-commit-and-push-util.md +++ b/.opencode/agents/git-commit-and-push-util.md @@ -100,7 +100,7 @@ permission: bash: # All agents should start with deny and then add in as needed - "*": allow + "*": deny "echo *": allow "cat *": allow "printenv *": allow diff --git a/.opencode/agents/git-commit-util.md b/.opencode/agents/git-commit-util.md index 045899290..8723b8f83 100644 --- a/.opencode/agents/git-commit-util.md +++ b/.opencode/agents/git-commit-util.md @@ -101,7 +101,7 @@ permission: bash: # All agents should start with deny and then add in as needed - "*": allow + "*": deny "echo *": allow "cat *": allow "printenv *": allow diff --git a/.opencode/agents/git-create-commit-util.md b/.opencode/agents/git-create-commit-util.md index d94fa532b..91b9f0aa6 100644 --- a/.opencode/agents/git-create-commit-util.md +++ b/.opencode/agents/git-create-commit-util.md @@ -101,7 +101,7 @@ permission: bash: # All agents should start with deny and then add in as needed - "*": allow + "*": deny "echo *": allow "cat *": allow "printenv *": allow diff --git a/.opencode/agents/git-fetch-util.md b/.opencode/agents/git-fetch-util.md index 07a3b8faf..7f7f29cb0 100644 --- a/.opencode/agents/git-fetch-util.md +++ b/.opencode/agents/git-fetch-util.md @@ -98,7 +98,7 @@ permission: bash: # All agents should start with deny and then add in as needed - "*": allow + "*": deny "echo *": allow "cat *": allow "printenv *": allow diff --git a/.opencode/agents/git-force-push-with-lease-util.md b/.opencode/agents/git-force-push-with-lease-util.md index c230f4fb2..78bea4761 100644 --- a/.opencode/agents/git-force-push-with-lease-util.md +++ b/.opencode/agents/git-force-push-with-lease-util.md @@ -100,7 +100,7 @@ permission: bash: # All agents should start with deny and then add in as needed - "*": allow + "*": deny "echo *": allow "cat *": allow "printenv *": allow diff --git a/.opencode/agents/git-isolator-util.md b/.opencode/agents/git-isolator-util.md index fb5f005d1..319748bae 100644 --- a/.opencode/agents/git-isolator-util.md +++ b/.opencode/agents/git-isolator-util.md @@ -102,7 +102,7 @@ permission: bash: # All agents should start with deny and then add in as needed - "*": allow + "*": deny "echo *": allow "cat *": allow "printenv *": allow diff --git a/.opencode/agents/git-push-util.md b/.opencode/agents/git-push-util.md index bfb4da765..64f8fc8bf 100644 --- a/.opencode/agents/git-push-util.md +++ b/.opencode/agents/git-push-util.md @@ -99,7 +99,7 @@ permission: bash: # All agents should start with deny and then add in as needed - "*": allow + "*": deny "echo *": allow "cat *": allow "printenv *": allow diff --git a/.opencode/agents/git-rebase-and-push-util.md b/.opencode/agents/git-rebase-and-push-util.md index 466c31651..a0417ce7b 100644 --- a/.opencode/agents/git-rebase-and-push-util.md +++ b/.opencode/agents/git-rebase-and-push-util.md @@ -100,7 +100,7 @@ permission: bash: # All agents should start with deny and then add in as needed - "*": allow + "*": deny "echo *": allow "cat *": allow "printenv *": allow diff --git a/.opencode/agents/git-rebase-util.md b/.opencode/agents/git-rebase-util.md index e5eb2a073..8e709b35b 100644 --- a/.opencode/agents/git-rebase-util.md +++ b/.opencode/agents/git-rebase-util.md @@ -102,7 +102,7 @@ permission: bash: # All agents should start with deny and then add in as needed - "*": allow + "*": deny "echo *": allow "cat *": allow "printenv *": allow diff --git a/.opencode/agents/git-stage-util.md b/.opencode/agents/git-stage-util.md index 881fc833d..5f1f466ff 100644 --- a/.opencode/agents/git-stage-util.md +++ b/.opencode/agents/git-stage-util.md @@ -99,7 +99,7 @@ permission: bash: # All agents should start with deny and then add in as needed - "*": allow + "*": deny "echo *": allow "cat *": allow "printenv *": allow diff --git a/.opencode/agents/implementation-supervisor.md b/.opencode/agents/implementation-supervisor.md index 4657140d3..675ea38e3 100644 --- a/.opencode/agents/implementation-supervisor.md +++ b/.opencode/agents/implementation-supervisor.md @@ -108,7 +108,7 @@ permission: bash: # All agents should start with deny and then add in as needed - "*": allow + "*": deny "echo *": allow "cat *": allow "printenv *": allow diff --git a/.opencode/agents/implementation-worker.md b/.opencode/agents/implementation-worker.md index e8a8c6270..2bfa704a1 100644 --- a/.opencode/agents/implementation-worker.md +++ b/.opencode/agents/implementation-worker.md @@ -106,7 +106,7 @@ permission: bash: # All agents should start with deny and then add in as needed - "*": allow + "*": deny # The wrapper only needs three commands: env-var fallback, identity output, # and reading the git origin URL to derive `forgejo_url` / `forgejo_owner` / diff --git a/.opencode/agents/pr-merge-supervisor.md b/.opencode/agents/pr-merge-supervisor.md index 188055a1c..463c0a25e 100644 --- a/.opencode/agents/pr-merge-supervisor.md +++ b/.opencode/agents/pr-merge-supervisor.md @@ -101,7 +101,7 @@ permission: bash: # All agents should start with deny and then add in as needed - "*": allow + "*": deny "echo *": allow "cat *": allow "printenv *": allow diff --git a/.opencode/agents/pr-merge-worker.md b/.opencode/agents/pr-merge-worker.md index 6c277f8e1..fed8a9888 100644 --- a/.opencode/agents/pr-merge-worker.md +++ b/.opencode/agents/pr-merge-worker.md @@ -101,7 +101,7 @@ permission: bash: # All agents should start with deny and then add in as needed - "*": allow + "*": deny "echo *": allow "cat *": allow "printenv *": allow diff --git a/.opencode/agents/pr-review-supervisor.md b/.opencode/agents/pr-review-supervisor.md index 7e2ac4180..a79c0cdbf 100644 --- a/.opencode/agents/pr-review-supervisor.md +++ b/.opencode/agents/pr-review-supervisor.md @@ -104,7 +104,7 @@ permission: bash: # All agents should start with deny and then add in as needed - "*": allow + "*": deny "echo *": allow "cat *": allow "printenv *": allow diff --git a/.opencode/agents/pr-review-worker.md b/.opencode/agents/pr-review-worker.md index 53ad99ae7..ad4db7e62 100644 --- a/.opencode/agents/pr-review-worker.md +++ b/.opencode/agents/pr-review-worker.md @@ -105,7 +105,7 @@ permission: bash: # All agents should start with deny and then add in as needed - "*": allow + "*": deny "echo *": allow "cat *": allow "printenv *": allow diff --git a/.opencode/agents/session-health-full-util.md b/.opencode/agents/session-health-full-util.md index 85efd4702..410d0bff1 100644 --- a/.opencode/agents/session-health-full-util.md +++ b/.opencode/agents/session-health-full-util.md @@ -102,7 +102,7 @@ permission: bash: # All agents should start with deny and then add in as needed - "*": allow + "*": deny "echo *": allow "cat *": allow "printenv *": allow diff --git a/.opencode/agents/session-health-quick-util.md b/.opencode/agents/session-health-quick-util.md index 427503c1f..0c2473208 100644 --- a/.opencode/agents/session-health-quick-util.md +++ b/.opencode/agents/session-health-quick-util.md @@ -102,7 +102,7 @@ permission: bash: # All agents should start with deny and then add in as needed - "*": allow + "*": deny "echo *": allow "cat *": allow "printenv *": allow diff --git a/.opencode/agents/session-health-util.md b/.opencode/agents/session-health-util.md index 1c83af74e..4fc5e934e 100644 --- a/.opencode/agents/session-health-util.md +++ b/.opencode/agents/session-health-util.md @@ -102,7 +102,7 @@ permission: bash: # All agents should start with deny and then add in as needed - "*": allow + "*": deny "echo *": allow "cat *": allow "printenv *": allow diff --git a/.opencode/agents/supervisor.md b/.opencode/agents/supervisor.md index 8c471d014..5fbea95e1 100644 --- a/.opencode/agents/supervisor.md +++ b/.opencode/agents/supervisor.md @@ -100,7 +100,7 @@ permission: bash: # All agents should start with deny and then add in as needed - "*": allow + "*": deny "echo *": allow "cat *": allow "printenv *": allow diff --git a/.opencode/agents/task-implementor.md b/.opencode/agents/task-implementor.md index 24a3bd231..fc3394124 100644 --- a/.opencode/agents/task-implementor.md +++ b/.opencode/agents/task-implementor.md @@ -105,7 +105,7 @@ permission: bash: # All agents should start with deny and then add in as needed - "*": allow + "*": deny "echo *": allow "cat *": allow "printenv *": allow diff --git a/.opencode/agents/tier-codex.md b/.opencode/agents/tier-codex.md index d00466b43..a719af598 100644 --- a/.opencode/agents/tier-codex.md +++ b/.opencode/agents/tier-codex.md @@ -104,7 +104,7 @@ permission: bash: # All agents should start with deny and then add in as needed - "*": allow + "*": deny "echo *": allow "cat *": allow "printenv *": allow diff --git a/.opencode/agents/tier-dispatcher.md b/.opencode/agents/tier-dispatcher.md index e87e12b10..ad29fbdb4 100644 --- a/.opencode/agents/tier-dispatcher.md +++ b/.opencode/agents/tier-dispatcher.md @@ -108,7 +108,7 @@ permission: bash: # All agents should start with deny and then add in as needed - "*": allow + "*": deny # The dispatcher only needs three commands: env-var fallback, identity output, # and reading the git origin URL to derive `forgejo_url` / `forgejo_owner` / diff --git a/.opencode/agents/tier-gpt5-mini.md b/.opencode/agents/tier-gpt5-mini.md index 7b820ef0c..8f66b4e44 100644 --- a/.opencode/agents/tier-gpt5-mini.md +++ b/.opencode/agents/tier-gpt5-mini.md @@ -103,7 +103,7 @@ permission: bash: # All agents should start with deny and then add in as needed - "*": allow + "*": deny "echo *": allow "cat *": allow "printenv *": allow diff --git a/.opencode/agents/tier-gpt5-nano.md b/.opencode/agents/tier-gpt5-nano.md index 47bf8d379..f39b7c50f 100644 --- a/.opencode/agents/tier-gpt5-nano.md +++ b/.opencode/agents/tier-gpt5-nano.md @@ -103,7 +103,7 @@ permission: bash: # All agents should start with deny and then add in as needed - "*": allow + "*": deny "echo *": allow "cat *": allow "printenv *": allow diff --git a/.opencode/agents/tier-haiku.md b/.opencode/agents/tier-haiku.md index 249080e64..e222a9e86 100644 --- a/.opencode/agents/tier-haiku.md +++ b/.opencode/agents/tier-haiku.md @@ -103,7 +103,7 @@ permission: bash: # All agents should start with deny and then add in as needed - "*": allow + "*": deny "echo *": allow "cat *": allow "printenv *": allow diff --git a/.opencode/agents/tier-kimi.md b/.opencode/agents/tier-kimi.md index d2a292fe0..315ee77f3 100644 --- a/.opencode/agents/tier-kimi.md +++ b/.opencode/agents/tier-kimi.md @@ -102,7 +102,7 @@ permission: bash: # All agents should start with deny and then add in as needed - "*": allow + "*": deny "echo *": allow "cat *": allow "printenv *": allow diff --git a/.opencode/agents/tier-o4-mini.md b/.opencode/agents/tier-o4-mini.md index 22b914955..8508aa427 100644 --- a/.opencode/agents/tier-o4-mini.md +++ b/.opencode/agents/tier-o4-mini.md @@ -103,7 +103,7 @@ permission: bash: # All agents should start with deny and then add in as needed - "*": allow + "*": deny "echo *": allow "cat *": allow "printenv *": allow diff --git a/.opencode/agents/tier-opus.md b/.opencode/agents/tier-opus.md index 07192736c..a1e5bbce2 100644 --- a/.opencode/agents/tier-opus.md +++ b/.opencode/agents/tier-opus.md @@ -104,7 +104,7 @@ permission: bash: # All agents should start with deny and then add in as needed - "*": allow + "*": deny "echo *": allow "cat *": allow "printenv *": allow diff --git a/.opencode/agents/tier-qwen-large.md b/.opencode/agents/tier-qwen-large.md index 664555c94..6dd9e3d8b 100644 --- a/.opencode/agents/tier-qwen-large.md +++ b/.opencode/agents/tier-qwen-large.md @@ -102,7 +102,7 @@ permission: bash: # All agents should start with deny and then add in as needed - "*": allow + "*": deny "echo *": allow "cat *": allow "printenv *": allow diff --git a/.opencode/agents/tier-qwen-med.md b/.opencode/agents/tier-qwen-med.md index 754114393..d97e6a93a 100644 --- a/.opencode/agents/tier-qwen-med.md +++ b/.opencode/agents/tier-qwen-med.md @@ -103,7 +103,7 @@ permission: bash: # All agents should start with deny and then add in as needed - "*": allow + "*": deny "echo *": allow "cat *": allow "printenv *": allow diff --git a/.opencode/agents/tier-qwen-small.md b/.opencode/agents/tier-qwen-small.md index c75434b05..d0410a396 100644 --- a/.opencode/agents/tier-qwen-small.md +++ b/.opencode/agents/tier-qwen-small.md @@ -103,7 +103,7 @@ permission: bash: # All agents should start with deny and then add in as needed - "*": allow + "*": deny "echo *": allow "cat *": allow "printenv *": allow diff --git a/.opencode/agents/tier-sonnet.md b/.opencode/agents/tier-sonnet.md index 69818c052..cd23ab07f 100644 --- a/.opencode/agents/tier-sonnet.md +++ b/.opencode/agents/tier-sonnet.md @@ -103,7 +103,7 @@ permission: bash: # All agents should start with deny and then add in as needed - "*": allow + "*": deny "echo *": allow "cat *": allow "printenv *": allow diff --git a/.opencode/agents/work-group-util.md b/.opencode/agents/work-group-util.md index 5808fdae9..a98d0b82f 100644 --- a/.opencode/agents/work-group-util.md +++ b/.opencode/agents/work-group-util.md @@ -102,7 +102,7 @@ permission: bash: # All agents should start with deny and then add in as needed - "*": allow + "*": deny "echo *": allow "cat *": allow "printenv *": allow