feat: add readonly mode configs for agents

2026-07-25 16:25:35 -05:00
parent 9e52253bba
commit c93ec1d009
4 changed files with 57 additions and 14 deletions
@@ -0,0 +1,29 @@
+{
+  "$schema": "https://opencode.ai/config.json",
+  "permission": {
+    "edit": "deny",
+    "read": {
+      "*": "allow",
+      "*.env": "deny",
+      "*.env.*": "deny",
+      "*.env.example": "allow"
+    },
+    "glob": "allow",
+    "grep": "allow",
+    "lsp": "allow",
+    "webfetch": "allow",
+    "websearch": "allow",
+    "bash": {
+      "*": "deny",
+      "git status*": "allow",
+      "git log*": "allow",
+      "git diff*": "allow",
+      "git show*": "allow",
+      "git branch*": "allow",
+      "git blame*": "allow"
+    },
+    "external_directory": {
+      "~/**": "allow"
+    }
+  }
+}