opencode.json

{
  "$schema": "https://opencode.ai/config.json",
  "instructions": ["AGENTS.md", "CLAUDE.md", "SECURITY.md"],
  "command": {
    "security-check": {
      "description": "Run mandatory security gates",
      "template": "Run ./scripts/security-check.sh, summarise any failures by tool, and propose the smallest safe fixes first."
    },
    "monitor-fly": {
      "description": "Collect and summarise Fly logs",
      "template": "Run ./scripts/logs.sh with suitable arguments from $ARGUMENTS if provided (use the `search` or `analyse` subcommand for grep / probe-driven analysis of an existing run). Summarise critical patterns, error spikes, and likely causes."
    },
    "load-test": {
      "description": "Run scripted load test safely",
      "template": "Run ./scripts/generate-test-jobs.sh using $ARGUMENTS when provided. Confirm prerequisites first, avoid exposing tokens, and summarise outcomes and risk signals."
    },
    "pr-status": {
      "description": "Fetch CodeRabbit comments and CI check status for a PR",
      "template": "Run bash scripts/pr-status-check.sh $ARGUMENTS. Summarise findings by severity, note any failing or pending CI checks, and propose fixes for actionable comments."
    },
    "pr-reply": {
      "description": "Reply to and resolve PR review comment threads",
      "template": "Run bash scripts/pr-comment-reply.sh $ARGUMENTS. Use --list to show open threads, --reply INDEX \"message\" to respond, --resolve INDEX to resolve, or combine with --reply INDEX \"message\" --resolve. Do not use raw gh api GraphQL mutations."
    }
  },
  "mcp": {
    "context7": {
      "type": "remote",
      "url": "https://mcp.context7.com/mcp",
      "enabled": true,
      "headers": {
        "CONTEXT7_API_KEY": "{env:CONTEXT7_API_KEY}"
      }
    },
    "figma": {
      "type": "remote",
      "url": "http://127.0.0.1:3845/mcp",
      "enabled": true
    },
    "sentry": {
      "type": "remote",
      "url": "https://mcp.sentry.dev/mcp",
      "enabled": true,
      "oauth": {}
    }
  },
  "permission": {
    "bash": {
      "*": "ask",

      "ls": "allow",
      "ls *": "allow",
      "wc *": "allow",
      "pwd": "allow",
      "which *": "allow",
      "echo *": "allow",
      "cat *": "allow",
      "grep *": "allow",
      "head *": "allow",
      "tail *": "allow",
      "sed *": "allow",

      "git status": "allow",
      "git status *": "allow",
      "git log *": "allow",
      "git diff *": "allow",
      "git branch": "allow",
      "git branch *": "allow",
      "git fetch *": "allow",
      "git add *": "allow",
      "git commit *": "allow",
      "git pull *": "allow",
      "git checkout *": "allow",
      "git push *": "ask",
      "git merge *": "ask",
      "git rebase *": "ask",
      "git reset *": "ask",

      "gh auth *": "allow",
      "gh status": "allow",
      "gh api repos/good-native/*/pulls/*/comments *": "allow",
      "gh api repos/good-native/*/issues/*/comments *": "allow",
      "gh api repos/good-native/*/pulls *": "allow",
      "gh repo view *": "allow",
      "gh pr list *": "allow",
      "gh pr view *": "allow",
      "gh pr status *": "allow",
      "gh pr create *": "ask",
      "gh pr merge *": "ask",
      "gh pr checks *": "allow",
      "gh pr comment *": "allow",
      "gh run view *": "allow",
      "gh run list *": "allow",
      "gh run rerun --failed *": "allow",
      "gh issue list *": "allow",
      "gh issue view *": "allow",

      "npm run *": "allow",
      "npm test": "allow",
      "npm test *": "allow",
      "npm list *": "allow",
      "npm outdated": "allow",
      "npm audit": "allow",
      "npm audit *": "allow",
      "npm install": "ask",
      "npm install *": "ask",
      "npm uninstall *": "ask",
      "npm publish *": "ask",

      "node *": "allow",

      "go test *": "allow",
      "go build *": "allow",
      "go run *": "allow",
      "go vet *": "allow",
      "go fmt *": "allow",
      "go mod tidy": "allow",
      "go mod tidy *": "allow",
      "go mod edit *": "allow",
      "go list *": "allow",
      "go tool cover *": "allow",
      "go version": "allow",
      "gofmt *": "allow",
      "goimports *": "allow",
      "golangci-lint run *": "allow",
      "air": "allow",

      "npx prettier *": "allow",
      "npx eslint *": "allow",

      "bash scripts/*.sh": "allow",
      "bash scripts/*.sh *": "allow",

      "git show *": "allow",
      "git tag *": "allow",
      "git stash *": "allow",
      "git worktree *": "allow",

      "supabase start": "allow",
      "supabase stop": "allow",
      "supabase status *": "allow",

      "docker build *": "allow",
      "docker ps *": "allow",
      "docker logs *": "allow",

      "fly logs *": "allow",
      "fly status *": "allow",
      "fly domains *": "allow",
      "fly apps list *": "allow",
      "flyctl logs *": "allow",
      "flyctl status *": "allow",

      "./dev.sh": "allow",
      "./scripts/test-db.sh *": "allow",

      "rm *": "ask",
      "rm -rf *": "ask"
    },
    "edit": "allow",
    "read": {
      "*": "allow",
      "*.env": "deny",
      "*.env.*": "deny",
      "*.env.example": "allow"
    },
    "external_directory": "ask",
    "doom_loop": "ask"
  },
  "plugin": [
    "opencode-shell-strategy",
    "opencode-dynamic-context-pruning",
    "opencode-pty",
    "opencode-worktree"
  ]
}