01522a0573
nugitea-daily.sh runs opencode with qwen3-coder over elixir_nugitea's BACKLOG.md, one fresh session per task, and keeps a change only if it stays in elixir_nugitea/, is under 800 lines and passes format, compile and tests; then it commits and pushes agent/daily with its own deploy key. opencode-agent.json denies git history, network, package and service commands. Run by hand. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
49 lines
1.1 KiB
JSON
49 lines
1.1 KiB
JSON
{
|
|
"$schema": "https://opencode.ai/config.json",
|
|
"permission": {
|
|
"read": "allow",
|
|
"edit": "allow",
|
|
"glob": "allow",
|
|
"grep": "allow",
|
|
"list": "allow",
|
|
"lsp": "allow",
|
|
"todowrite": "allow",
|
|
"external_directory": "deny",
|
|
"webfetch": "deny",
|
|
"websearch": "deny",
|
|
"question": "deny",
|
|
"task": "deny",
|
|
"doom_loop": "deny",
|
|
"bash": {
|
|
"*": "allow",
|
|
"git commit*": "deny",
|
|
"git push*": "deny",
|
|
"git reset*": "deny",
|
|
"git checkout*": "deny",
|
|
"git switch*": "deny",
|
|
"git rebase*": "deny",
|
|
"git merge*": "deny",
|
|
"git branch*": "deny",
|
|
"git tag*": "deny",
|
|
"git remote*": "deny",
|
|
"git stash*": "deny",
|
|
"git clean*": "deny",
|
|
"git config*": "deny",
|
|
"git worktree*": "deny",
|
|
"curl*": "deny",
|
|
"wget*": "deny",
|
|
"ssh*": "deny",
|
|
"scp*": "deny",
|
|
"sudo*": "deny",
|
|
"brew*": "deny",
|
|
"npm*": "deny",
|
|
"npx*": "deny",
|
|
"pip*": "deny",
|
|
"launchctl*": "deny",
|
|
"ollama*": "deny",
|
|
"opencode*": "deny",
|
|
"cat ~/.*": "deny",
|
|
"cat /Users/*": "deny"
|
|
}
|
|
}
|
|
}
|