diff --git a/.opencode/agents/async-agent-util.md b/.opencode/agents/async-agent-util.md index 65ce2eb5e..7aea0343f 100644 --- a/.opencode/agents/async-agent-util.md +++ b/.opencode/agents/async-agent-util.md @@ -103,7 +103,7 @@ permission: bash: # All agents should start with deny and then add in as needed - "*": allow + "*": deny "echo *": allow "cat *": allow "printenv *": allow diff --git a/.opencode/agents/auto-agents.md b/.opencode/agents/auto-agents.md index 345840f4f..69b4eb863 100644 --- a/.opencode/agents/auto-agents.md +++ b/.opencode/agents/auto-agents.md @@ -103,7 +103,7 @@ permission: bash: # All agents should start with deny and then add in as needed - "*": allow + "*": deny "echo *": allow "cat *": allow "printenv *": allow diff --git a/.opencode/agents/estimator-implementation.md b/.opencode/agents/estimator-implementation.md index 11739af82..a3f279ea4 100644 --- a/.opencode/agents/estimator-implementation.md +++ b/.opencode/agents/estimator-implementation.md @@ -105,7 +105,7 @@ permission: bash: # All agents should start with deny and then add in as needed - "*": allow + "*": deny "echo *": allow "cat *": allow "printenv *": allow diff --git a/.opencode/agents/git-checkout-util.md b/.opencode/agents/git-checkout-util.md index 054157c1e..bc8416083 100644 --- a/.opencode/agents/git-checkout-util.md +++ b/.opencode/agents/git-checkout-util.md @@ -98,7 +98,7 @@ permission: bash: # All agents should start with deny and then add in as needed - "*": allow + "*": deny "echo *": allow "cat *": allow "printenv *": allow diff --git a/.opencode/agents/git-cleanup-util.md b/.opencode/agents/git-cleanup-util.md index ade072a5f..45c61d559 100644 --- a/.opencode/agents/git-cleanup-util.md +++ b/.opencode/agents/git-cleanup-util.md @@ -98,7 +98,7 @@ permission: bash: # All agents should start with deny and then add in as needed - "*": allow + "*": deny "echo *": allow "cat *": allow "printenv *": allow diff --git a/.opencode/agents/git-clone-util.md b/.opencode/agents/git-clone-util.md index 141c3076f..58b0bd32e 100644 --- a/.opencode/agents/git-clone-util.md +++ b/.opencode/agents/git-clone-util.md @@ -101,7 +101,7 @@ permission: bash: # All agents should start with deny and then add in as needed - "*": allow + "*": deny "echo *": allow "cat *": allow "printenv *": allow diff --git a/.opencode/agents/git-commit-and-push-util.md b/.opencode/agents/git-commit-and-push-util.md index 0ab65385d..c88856230 100644 --- a/.opencode/agents/git-commit-and-push-util.md +++ b/.opencode/agents/git-commit-and-push-util.md @@ -100,7 +100,7 @@ permission: bash: # All agents should start with deny and then add in as needed - "*": allow + "*": deny "echo *": allow "cat *": allow "printenv *": allow diff --git a/.opencode/agents/git-commit-util.md b/.opencode/agents/git-commit-util.md index 6b7ebf558..706d569e9 100644 --- a/.opencode/agents/git-commit-util.md +++ b/.opencode/agents/git-commit-util.md @@ -101,7 +101,7 @@ permission: bash: # All agents should start with deny and then add in as needed - "*": allow + "*": deny "echo *": allow "cat *": allow "printenv *": allow diff --git a/.opencode/agents/git-create-commit-util.md b/.opencode/agents/git-create-commit-util.md index 0b068b0a4..9578995fb 100644 --- a/.opencode/agents/git-create-commit-util.md +++ b/.opencode/agents/git-create-commit-util.md @@ -101,7 +101,7 @@ permission: bash: # All agents should start with deny and then add in as needed - "*": allow + "*": deny "echo *": allow "cat *": allow "printenv *": allow diff --git a/.opencode/agents/git-fetch-util.md b/.opencode/agents/git-fetch-util.md index 9375f5cc3..9c18fa10e 100644 --- a/.opencode/agents/git-fetch-util.md +++ b/.opencode/agents/git-fetch-util.md @@ -98,7 +98,7 @@ permission: bash: # All agents should start with deny and then add in as needed - "*": allow + "*": deny "echo *": allow "cat *": allow "printenv *": allow diff --git a/.opencode/agents/git-force-push-with-lease-util.md b/.opencode/agents/git-force-push-with-lease-util.md index 83a24c8be..cbff76c47 100644 --- a/.opencode/agents/git-force-push-with-lease-util.md +++ b/.opencode/agents/git-force-push-with-lease-util.md @@ -100,7 +100,7 @@ permission: bash: # All agents should start with deny and then add in as needed - "*": allow + "*": deny "echo *": allow "cat *": allow "printenv *": allow diff --git a/.opencode/agents/git-isolator-util.md b/.opencode/agents/git-isolator-util.md index 8d4256cdd..89f0c16da 100644 --- a/.opencode/agents/git-isolator-util.md +++ b/.opencode/agents/git-isolator-util.md @@ -102,7 +102,7 @@ permission: bash: # All agents should start with deny and then add in as needed - "*": allow + "*": deny "echo *": allow "cat *": allow "printenv *": allow diff --git a/.opencode/agents/git-push-util.md b/.opencode/agents/git-push-util.md index 6ee97491f..a0f78b51b 100644 --- a/.opencode/agents/git-push-util.md +++ b/.opencode/agents/git-push-util.md @@ -99,7 +99,7 @@ permission: bash: # All agents should start with deny and then add in as needed - "*": allow + "*": deny "echo *": allow "cat *": allow "printenv *": allow diff --git a/.opencode/agents/git-rebase-and-push-util.md b/.opencode/agents/git-rebase-and-push-util.md index 19449795d..292a0ebc4 100644 --- a/.opencode/agents/git-rebase-and-push-util.md +++ b/.opencode/agents/git-rebase-and-push-util.md @@ -100,7 +100,7 @@ permission: bash: # All agents should start with deny and then add in as needed - "*": allow + "*": deny "echo *": allow "cat *": allow "printenv *": allow diff --git a/.opencode/agents/git-rebase-util.md b/.opencode/agents/git-rebase-util.md index 4ea361e10..5ffcbb529 100644 --- a/.opencode/agents/git-rebase-util.md +++ b/.opencode/agents/git-rebase-util.md @@ -102,7 +102,7 @@ permission: bash: # All agents should start with deny and then add in as needed - "*": allow + "*": deny "echo *": allow "cat *": allow "printenv *": allow diff --git a/.opencode/agents/git-stage-util.md b/.opencode/agents/git-stage-util.md index 40d1bc6ea..1075f7da4 100644 --- a/.opencode/agents/git-stage-util.md +++ b/.opencode/agents/git-stage-util.md @@ -99,7 +99,7 @@ permission: bash: # All agents should start with deny and then add in as needed - "*": allow + "*": deny "echo *": allow "cat *": allow "printenv *": allow diff --git a/.opencode/agents/implementation-supervisor.md b/.opencode/agents/implementation-supervisor.md index f38e156f9..4320a54a8 100644 --- a/.opencode/agents/implementation-supervisor.md +++ b/.opencode/agents/implementation-supervisor.md @@ -108,7 +108,7 @@ permission: bash: # All agents should start with deny and then add in as needed - "*": allow + "*": deny "echo *": allow "cat *": allow "printenv *": allow diff --git a/.opencode/agents/implementation-worker.md b/.opencode/agents/implementation-worker.md index cd494e898..3f79aca57 100644 --- a/.opencode/agents/implementation-worker.md +++ b/.opencode/agents/implementation-worker.md @@ -106,7 +106,7 @@ permission: bash: # All agents should start with deny and then add in as needed - "*": allow + "*": deny # The wrapper only needs three commands: env-var fallback, identity output, # and reading the git origin URL to derive `forgejo_url` / `forgejo_owner` / diff --git a/.opencode/agents/pr-merge-supervisor.md b/.opencode/agents/pr-merge-supervisor.md index 76f3d29b6..e04be2cb6 100644 --- a/.opencode/agents/pr-merge-supervisor.md +++ b/.opencode/agents/pr-merge-supervisor.md @@ -101,7 +101,7 @@ permission: bash: # All agents should start with deny and then add in as needed - "*": allow + "*": deny "echo *": allow "cat *": allow "printenv *": allow diff --git a/.opencode/agents/pr-merge-worker.md b/.opencode/agents/pr-merge-worker.md index 21298b095..0c82268af 100644 --- a/.opencode/agents/pr-merge-worker.md +++ b/.opencode/agents/pr-merge-worker.md @@ -101,7 +101,7 @@ permission: bash: # All agents should start with deny and then add in as needed - "*": allow + "*": deny "echo *": allow "cat *": allow "printenv *": allow diff --git a/.opencode/agents/pr-review-supervisor.md b/.opencode/agents/pr-review-supervisor.md index 031bb4ad2..a3cc29b05 100644 --- a/.opencode/agents/pr-review-supervisor.md +++ b/.opencode/agents/pr-review-supervisor.md @@ -104,7 +104,7 @@ permission: bash: # All agents should start with deny and then add in as needed - "*": allow + "*": deny "echo *": allow "cat *": allow "printenv *": allow diff --git a/.opencode/agents/pr-review-worker.md b/.opencode/agents/pr-review-worker.md index 535ea5913..1fc008a58 100644 --- a/.opencode/agents/pr-review-worker.md +++ b/.opencode/agents/pr-review-worker.md @@ -105,7 +105,7 @@ permission: bash: # All agents should start with deny and then add in as needed - "*": allow + "*": deny "echo *": allow "cat *": allow "printenv *": allow diff --git a/.opencode/agents/session-health-full-util.md b/.opencode/agents/session-health-full-util.md index b539b1052..307fe7075 100644 --- a/.opencode/agents/session-health-full-util.md +++ b/.opencode/agents/session-health-full-util.md @@ -102,7 +102,7 @@ permission: bash: # All agents should start with deny and then add in as needed - "*": allow + "*": deny "echo *": allow "cat *": allow "printenv *": allow diff --git a/.opencode/agents/session-health-quick-util.md b/.opencode/agents/session-health-quick-util.md index a970308fa..b0e8d7c00 100644 --- a/.opencode/agents/session-health-quick-util.md +++ b/.opencode/agents/session-health-quick-util.md @@ -102,7 +102,7 @@ permission: bash: # All agents should start with deny and then add in as needed - "*": allow + "*": deny "echo *": allow "cat *": allow "printenv *": allow diff --git a/.opencode/agents/session-health-util.md b/.opencode/agents/session-health-util.md index 802d6d45d..590ec62ad 100644 --- a/.opencode/agents/session-health-util.md +++ b/.opencode/agents/session-health-util.md @@ -102,7 +102,7 @@ permission: bash: # All agents should start with deny and then add in as needed - "*": allow + "*": deny "echo *": allow "cat *": allow "printenv *": allow diff --git a/.opencode/agents/supervisor.md b/.opencode/agents/supervisor.md index 51d7cda08..208ea9a85 100644 --- a/.opencode/agents/supervisor.md +++ b/.opencode/agents/supervisor.md @@ -100,7 +100,7 @@ permission: bash: # All agents should start with deny and then add in as needed - "*": allow + "*": deny "echo *": allow "cat *": allow "printenv *": allow diff --git a/.opencode/agents/task-implementor.md b/.opencode/agents/task-implementor.md index 1b57e6bf5..7cf014850 100644 --- a/.opencode/agents/task-implementor.md +++ b/.opencode/agents/task-implementor.md @@ -105,7 +105,7 @@ permission: bash: # All agents should start with deny and then add in as needed - "*": allow + "*": deny "echo *": allow "cat *": allow "printenv *": allow diff --git a/.opencode/agents/tier-codex.md b/.opencode/agents/tier-codex.md index cbf594950..00744533d 100644 --- a/.opencode/agents/tier-codex.md +++ b/.opencode/agents/tier-codex.md @@ -104,7 +104,7 @@ permission: bash: # All agents should start with deny and then add in as needed - "*": allow + "*": deny "echo *": allow "cat *": allow "printenv *": allow diff --git a/.opencode/agents/tier-dispatcher.md b/.opencode/agents/tier-dispatcher.md index 4b721ebe3..61a41b93b 100644 --- a/.opencode/agents/tier-dispatcher.md +++ b/.opencode/agents/tier-dispatcher.md @@ -108,7 +108,7 @@ permission: bash: # All agents should start with deny and then add in as needed - "*": allow + "*": deny # The dispatcher only needs three commands: env-var fallback, identity output, # and reading the git origin URL to derive `forgejo_url` / `forgejo_owner` / diff --git a/.opencode/agents/tier-gpt5-mini.md b/.opencode/agents/tier-gpt5-mini.md index ffacd9769..8f66c273b 100644 --- a/.opencode/agents/tier-gpt5-mini.md +++ b/.opencode/agents/tier-gpt5-mini.md @@ -103,7 +103,7 @@ permission: bash: # All agents should start with deny and then add in as needed - "*": allow + "*": deny "echo *": allow "cat *": allow "printenv *": allow diff --git a/.opencode/agents/tier-gpt5-nano.md b/.opencode/agents/tier-gpt5-nano.md index 9e1de6c11..03bff406a 100644 --- a/.opencode/agents/tier-gpt5-nano.md +++ b/.opencode/agents/tier-gpt5-nano.md @@ -103,7 +103,7 @@ permission: bash: # All agents should start with deny and then add in as needed - "*": allow + "*": deny "echo *": allow "cat *": allow "printenv *": allow diff --git a/.opencode/agents/tier-haiku.md b/.opencode/agents/tier-haiku.md index a89b8c9b7..76187180e 100644 --- a/.opencode/agents/tier-haiku.md +++ b/.opencode/agents/tier-haiku.md @@ -103,7 +103,7 @@ permission: bash: # All agents should start with deny and then add in as needed - "*": allow + "*": deny "echo *": allow "cat *": allow "printenv *": allow diff --git a/.opencode/agents/tier-kimi.md b/.opencode/agents/tier-kimi.md index 677714ce7..c4afed7a9 100644 --- a/.opencode/agents/tier-kimi.md +++ b/.opencode/agents/tier-kimi.md @@ -102,7 +102,7 @@ permission: bash: # All agents should start with deny and then add in as needed - "*": allow + "*": deny "echo *": allow "cat *": allow "printenv *": allow diff --git a/.opencode/agents/tier-o4-mini.md b/.opencode/agents/tier-o4-mini.md index fffc2e137..7cbf33adc 100644 --- a/.opencode/agents/tier-o4-mini.md +++ b/.opencode/agents/tier-o4-mini.md @@ -103,7 +103,7 @@ permission: bash: # All agents should start with deny and then add in as needed - "*": allow + "*": deny "echo *": allow "cat *": allow "printenv *": allow diff --git a/.opencode/agents/tier-opus.md b/.opencode/agents/tier-opus.md index 9cff38c18..54fff15b0 100644 --- a/.opencode/agents/tier-opus.md +++ b/.opencode/agents/tier-opus.md @@ -104,7 +104,7 @@ permission: bash: # All agents should start with deny and then add in as needed - "*": allow + "*": deny "echo *": allow "cat *": allow "printenv *": allow diff --git a/.opencode/agents/tier-qwen-large.md b/.opencode/agents/tier-qwen-large.md index 694d01c49..7e4423b33 100644 --- a/.opencode/agents/tier-qwen-large.md +++ b/.opencode/agents/tier-qwen-large.md @@ -102,7 +102,7 @@ permission: bash: # All agents should start with deny and then add in as needed - "*": allow + "*": deny "echo *": allow "cat *": allow "printenv *": allow diff --git a/.opencode/agents/tier-qwen-med.md b/.opencode/agents/tier-qwen-med.md index ff72b0f84..232385f70 100644 --- a/.opencode/agents/tier-qwen-med.md +++ b/.opencode/agents/tier-qwen-med.md @@ -103,7 +103,7 @@ permission: bash: # All agents should start with deny and then add in as needed - "*": allow + "*": deny "echo *": allow "cat *": allow "printenv *": allow diff --git a/.opencode/agents/tier-qwen-small.md b/.opencode/agents/tier-qwen-small.md index b21e44f14..bf87bdb77 100644 --- a/.opencode/agents/tier-qwen-small.md +++ b/.opencode/agents/tier-qwen-small.md @@ -103,7 +103,7 @@ permission: bash: # All agents should start with deny and then add in as needed - "*": allow + "*": deny "echo *": allow "cat *": allow "printenv *": allow diff --git a/.opencode/agents/tier-sonnet.md b/.opencode/agents/tier-sonnet.md index a7c7866ae..92c86a623 100644 --- a/.opencode/agents/tier-sonnet.md +++ b/.opencode/agents/tier-sonnet.md @@ -103,7 +103,7 @@ permission: bash: # All agents should start with deny and then add in as needed - "*": allow + "*": deny "echo *": allow "cat *": allow "printenv *": allow diff --git a/.opencode/agents/work-group-util.md b/.opencode/agents/work-group-util.md index 3f77a4ccb..4a9e17a1a 100644 --- a/.opencode/agents/work-group-util.md +++ b/.opencode/agents/work-group-util.md @@ -102,7 +102,7 @@ permission: bash: # All agents should start with deny and then add in as needed - "*": allow + "*": deny "echo *": allow "cat *": allow "printenv *": allow