{
  "$schema": "https://opencode.ai/config.json",
  "command": {},
  "mcp": {},
  "permission": {
    "read": "allow",
    "glob": "allow",
    "grep": "allow",
    "edit": {
      "*": "ask",
      ".remediate-code/**": "allow",
      ".audit-tools/**": "allow",
      ".audit-code/**": "allow",
      ".audit-artifacts/**": "allow",
      "audit-report.md": "allow"
    },
    "bash": {
      "*": "ask",
      "*audit-code.mjs": "allow",
      "*audit-code.mjs* cleanup*": "deny",
      "*audit-code.mjs* ensure*": "allow",
      "*audit-code.mjs* ingest-results*": "deny",
      "*audit-code.mjs* next-step*": "allow",
      "*audit-code.mjs* requeue*": "deny",
      "*audit-code.mjs* synthesize*": "deny",
      "*audit-code.mjs* validate*": "allow",
      "*dist*index.js* cleanup*": "deny",
      "*dist*index.js* ingest-results*": "deny",
      "*dist*index.js* requeue*": "deny",
      "*dist*index.js* synthesize*": "deny",
      "*remediate-code.mjs": "allow",
      "*remediate-code.mjs* ensure*": "allow",
      "*remediate-code.mjs* next-step*": "allow",
      "*remediate-code.mjs* validate*": "allow",
      "*remediate-code.mjs* validate-artifacts*": "allow",
      "Select-String *": "allow",
      "audit-code": "allow",
      "audit-code cleanup*": "deny",
      "audit-code ensure*": "allow",
      "audit-code ingest-results*": "deny",
      "audit-code next-step*": "allow",
      "audit-code requeue*": "deny",
      "audit-code synthesize*": "deny",
      "audit-code validate*": "allow",
      "git diff*": "allow",
      "git status*": "allow",
      "grep *": "allow",
      "remediate-code": "allow",
      "remediate-code ensure*": "allow",
      "remediate-code next-step*": "allow",
      "remediate-code validate*": "allow",
      "remediate-code validate-artifacts*": "allow",
      "rm *": "deny"
    }
  },
  "agent": {
    "auditor": {
      "description": "Read-heavy audit orchestration agent for the /audit-code workflow.",
      "permission": {
        "read": "allow",
        "glob": "allow",
        "grep": "allow",
        "edit": {
          "*": "ask",
          ".audit-code/**": "allow",
          ".audit-tools/**": "allow",
          ".audit-artifacts/**": "allow",
          "audit-report.md": "allow"
        },
        "bash": {
          "*": "ask",
          "audit-code synthesize*": "deny",
          "*dist*index.js* synthesize*": "deny",
          "*audit-code.mjs* synthesize*": "deny",
          "audit-code cleanup*": "deny",
          "*dist*index.js* cleanup*": "deny",
          "*audit-code.mjs* cleanup*": "deny",
          "audit-code requeue*": "deny",
          "*dist*index.js* requeue*": "deny",
          "*audit-code.mjs* requeue*": "deny",
          "audit-code ingest-results*": "deny",
          "*dist*index.js* ingest-results*": "deny",
          "*audit-code.mjs* ingest-results*": "deny",
          "audit-code": "allow",
          "audit-code ensure*": "allow",
          "*audit-code.mjs* ensure*": "allow",
          "audit-code next-step*": "allow",
          "*audit-code.mjs* next-step*": "allow",
          "audit-code validate*": "allow",
          "*audit-code.mjs* validate*": "allow",
          "*audit-code.mjs": "allow",
          "git status*": "allow",
          "git diff*": "allow",
          "grep *": "allow",
          "Select-String *": "allow",
          "rm *": "deny"
        },
        "auditor_*": "allow",
        "question": "allow",
        "task": "allow"
      }
    },
    "remediator": {
      "description": "Remediation orchestration agent for the /remediate-code workflow.",
      "permission": {
        "read": "allow",
        "glob": "allow",
        "grep": "allow",
        "edit": {
          "*": "ask",
          ".remediate-code/**": "allow",
          ".audit-tools/**": "allow",
          ".remediation-artifacts/**": "allow",
          "remediation-report.md": "allow",
          "remediation-report.json": "allow",
          "remediation-closing-result.json": "allow"
        },
        "bash": {
          "*": "ask",
          "remediate-code": "allow",
          "remediate-code ensure*": "allow",
          "*remediate-code.mjs* ensure*": "allow",
          "remediate-code next-step*": "allow",
          "*remediate-code.mjs* next-step*": "allow",
          "remediate-code validate*": "allow",
          "*remediate-code.mjs* validate*": "allow",
          "*remediate-code.mjs": "allow",
          "git status*": "allow",
          "git diff*": "allow",
          "grep *": "allow",
          "Select-String *": "allow",
          "rm *": "deny",
          "remediate-code validate-artifacts*": "allow",
          "*remediate-code.mjs* validate-artifacts*": "allow"
        },
        "remediator_*": "allow",
        "question": "allow",
        "task": "allow"
      }
    }
  }
}