feat: modified agents to give more granular permissions

.config/opencode/agent/developer.md

@@ -4,19 +4,19 @@ mode: primary
 temperature: 0.1
 permissions:
   bash:
-    "rm -rf *": "ask"
-    "sudo *": "deny"
     "chmod *": "ask"
     "curl *": "ask"
-    "wget *": "ask"
     "docker *": "ask"
     "kubectl *": "ask"
+    "rm -rf *": "ask"
+    "sudo *": "deny"
+    "wget *": "ask"
   edit:
     "**/*.env*": "deny"
     "**/*.key": "deny"
     "**/*.secret": "deny"
-    "node_modules/**": "deny"
     ".git/**": "deny"
+    "node_modules/**": "deny"
 ---
 
 # Implementation Agent

.config/opencode/agent/subagents/coder.md

@@ -12,18 +12,9 @@ permissions:
     "**/*.env*": "deny"
     "**/*.key": "deny"
     "**/*.secret": "deny"
-    "node_modules/**": "deny"
     ".git/**": "deny"
+    "node_modules/**": "deny"
 ---
-tools:
-  read: true
-  edit: true
-  write: true
-  grep: true
-  glob: true
-  bash: true
-  patch: true
-  webfetch: false
 
 # Coder Agent (@coder-agent)
 

.config/opencode/agent/subagents/research.md

@@ -4,24 +4,24 @@ mode: subagent
 model: github-copilot/gpt-4.1
 temperature: 0.1
 tools:
-  write: false
   bash: false
   patch: false
+  write: false
 permissions:
   bash:
-    "rm -rf *": "ask"
-    "sudo *": "deny"
     "chmod *": "ask"
     "curl *": "ask"
-    "wget *": "ask"
     "docker *": "ask"
     "kubectl *": "ask"
+    "rm -rf *": "ask"
+    "sudo *": "deny"
+    "wget *": "ask"
   edit:
     "**/*.env*": "deny"
     "**/*.key": "deny"
     "**/*.secret": "deny"
-    "node_modules/**": "deny"
     ".git/**": "deny"
+    "node_modules/**": "deny"
 ---
 
 # Research Subagent (@research)

.config/opencode/agent/subagents/reviewer.md

@@ -5,13 +5,9 @@ model: github-copilot/gpt-4.1
 temperature: 0.1
 tools:
   bash: false
+  edit: false
   patch: false
   webfetch: false
-permissions:
-  bash:
-    "*": "deny"
-  edit:
-    "**/*": "deny"
 ---
 
 # Review Agent

.config/opencode/agent/subagents/task-manager.md

@@ -5,15 +5,7 @@ model: github-copilot/gpt-4.1
 temperature: 0.1
 tools:
   bash: false
-permissions:
-  bash:
-    "*": "deny"
-  edit:
-    "**/*.env*": "deny"
-    "**/*.key": "deny"
-    "**/*.secret": "deny"
-    "node_modules/**": "deny"
-    ".git/**": "deny"
+  edit: false
 ---
 
 # Task Manager Subagent (@subagents/task-manager)

.config/opencode/agent/subagents/tester.md

@@ -4,8 +4,8 @@ mode: subagent
 model: github-copilot/gpt-4.1
 temperature: 0.1
 tools:
-  webfetch: false
   patch: false
+  webfetch: false
 permissions:
   bash:
     "rm -rf *": "ask"

.config/opencode/agent/writer.md

@@ -7,20 +7,12 @@ tools:
   patch: false
   webfetch: false
 permissions:
-  bash:
-    "rm -rf *": "ask"
-    "sudo *": "deny"
-    "chmod *": "ask"
-    "curl *": "ask"
-    "wget *": "ask"
-    "docker *": "ask"
-    "kubectl *": "ask"
   edit:
     "**/*.env*": "deny"
     "**/*.key": "deny"
     "**/*.secret": "deny"
-    "node_modules/**": "deny"
     ".git/**": "deny"
+    "node_modules/**": "deny"
 ---
 
 # Writer Agent