From c72effda284ba07e6c4e7fb6e61b3e7947c05273 Mon Sep 17 00:00:00 2001
From: Arpad Krejczinger <krejczinger.arpad@gmail.com>
Date: Thu, 11 Sep 2025 21:57:17 +0200
Subject: [PATCH] Added opencode.json template with current working config

---
 opencode.template.jsonc | 57 +++++++++++++++++++++++++++++++++++++++++
 1 file changed, 57 insertions(+)
 create mode 100644 opencode.template.jsonc

diff --git a/opencode.template.jsonc b/opencode.template.jsonc
new file mode 100644
index 00000000..3ddcdb09
--- /dev/null
+++ b/opencode.template.jsonc
@@ -0,0 +1,57 @@
+{
+  // Template opencode configuration with restrictive permissions
+  // Copy this file to ~/.config/opencode.json (or opencode.json inside a repo)
+  // and modify as needed
+  "$schema": "https://opencode.ai/config.json",
+  "mcp": {
+    "weather": {
+      "type": "local",
+      "command": ["opencode", "x", "@h1deya/mcp-server-weather"]
+    }
+  },
+  "permission": {
+    "bash": {
+      "git branch -d": "ask",
+      "git branch -D": "ask",
+      "git status": "allow",
+      "git diff": "allow",
+      "git log": "allow",
+      "git show": "allow",
+      "git branch": "allow",
+      "git remote": "allow",
+      "git fetch": "allow",
+      "git pull": "allow",
+      "git merge": "ask",
+      "git rebase": "ask",
+      "git commit": "ask",
+      "git push": "ask",
+      "git checkout": "ask",
+      "git switch": "ask",
+      "git reset": "ask",
+      "git revert": "ask",
+      "git rm": "ask",
+      "git mv": "ask",
+      "git worktree": "ask",
+      "cat": "allow",
+      "tail": "allow",
+      "head": "allow",
+      "less": "allow",
+      "more": "allow",
+      "grep": "allow",
+      "find": "allow",
+      "ls": "allow",
+      "pwd": "allow",
+      "cd": "allow",
+      "mkdir": "ask",
+      "rm": "ask",
+      "rmdir": "ask",
+      "mv": "ask",
+      "cp": "ask",
+      "touch": "ask",
+      "chmod": "ask",
+      "chown": "ask",
+      "su": "deny",
+      "sudo": "deny"
+    }
+  }
+}