update opencode external directory config
1 files changed,  +18, -8
M opencode.jsonc
+18, -8
 1@@ -6,11 +6,11 @@
 2     "agent": {
 3         "plan": {
 4             "mode": "primary",
 5-            "model": "opencode-go/deepseek-v4-pro"
 6+            "model": "opencode-go/muse-spark-1.3-contributor"
 7         },
 8         "build": {
 9             "mode": "primary",
10-            "model": "opencode-go/deepseek-v4-pro"
11+            "model": "opencode-go/muse-spark-1.3-contributor"
12         }
13     },
14     "permission": {
15@@ -20,27 +20,37 @@
16             "grep *": "allow",
17             "go *": "allow",
18             "go get *": "ask",
19+            "git add *": "deny",
20+            "git commit *": "deny",
21             "git *": "allow",
22             "pnpm add *": "ask",
23             "npm *": "ask",
24             "npx *": "ask",
25             "rm *": "ask",
26-            "rm /tmp/**/*": "allow",
27-            "rm -rf /tmp/**/*": "allow",
28+            "rm /tmp/*": "allow",
29+            "rm -rf /tmp/*": "allow",
30             "pnpm run *": "allow",
31             "echo *": "allow",
32             "pnpm format": "allow",
33             "pnpm check": "allow",
34-            "pnpm build": "allow"
35+            "pnpm build": "allow",
36+            "devenv shell *": "allow"
37+        },
38+        "external_directory": {
39+            "/nix/store/*": "allow",
40+            "/tmp/*": "allow",
41+            "~/.agents/*": "allow",
42+            "~/projects/data": "ask",
43+            "~/projects/*": "allow",
44+            "~/.ssh": "deny",
45+            "~/.config/*": "ask"
46         },
47-        "external_directory": "ask",
48         "doom_loop": "ask",
49         "read": {
50             "*": "allow",
51             "*.env": "deny",
52             "*.env.*": "deny",
53-            "*.env.example": "allow",
54-            "~/.agents/**/*": "allow"
55+            "*.env.example": "allow"
56         },
57         "write": {
58             "/tmp/**/*": "allow",