diff --git a/.config/opencode/agent/subagents/build.md b/.config/opencode/agent/subagents/build.md
index 40da6b6..ebbaf77 100644
--- a/.config/opencode/agent/subagents/build.md
+++ b/.config/opencode/agent/subagents/build.md
@@ -5,11 +5,10 @@ model: github-copilot/gpt-4.1
 temperature: 0.1
 tools:
   webfetch: false
+  edit: false
 permissions:
   bash:
     "*": "allow"
-  edit:
-    "**/*": "deny"
 ---
 
 # Build Agent (@build)
diff --git a/.config/opencode/agent/subagents/research.md b/.config/opencode/agent/subagents/research.md
index a38f514..0c02545 100644
--- a/.config/opencode/agent/subagents/research.md
+++ b/.config/opencode/agent/subagents/research.md
@@ -7,6 +7,7 @@ tools:
   bash: false
   patch: false
   write: false
+  edit: false
 permissions:
   bash:
     "chmod *": "ask"
@@ -16,12 +17,6 @@ permissions:
     "rm -rf *": "ask"
     "sudo *": "deny"
     "wget *": "ask"
-  edit:
-    "**/*.env*": "deny"
-    "**/*.key": "deny"
-    "**/*.secret": "deny"
-    ".git/**": "deny"
-    "node_modules/**": "deny"
 ---
 
 # Research Subagent (@research)
diff --git a/.config/opencode/agent/subagents/task-manager.md b/.config/opencode/agent/subagents/task-manager.md
index 744d092..9bc6929 100644
--- a/.config/opencode/agent/subagents/task-manager.md
+++ b/.config/opencode/agent/subagents/task-manager.md
@@ -5,7 +5,12 @@ model: github-copilot/gpt-4.1
 temperature: 0.1
 tools:
   bash: false
-  edit: false
+permissions:
+  edit:
+    "tasks/**": "allow"
+    "tasks/**/*.md": "allow"
+    "index.md": "allow"
+    "**/*": "deny"
 ---
 
 # Task Manager Subagent (@subagents/task-manager)