{
  "$schema": "https://opencode.ai/config.json",
  "agent": {
    "gentle-orchestrator": {
      "description": "Gentle AI SDD Orchestrator - coordinates sub-agents, never does work inline",
      "mode": "primary",
      "permission": {
        "question": "allow",
        "read": "allow",
        "edit": "allow",
        "bash": "allow",
        "glob": "allow",
        "grep": "allow",
        "list": "allow",
        "webfetch": "allow",
        "websearch": "allow",
        "todowrite": "allow",
        "task": { "*": "allow" }
      }
    }
  },
  "default_agent": "gentle-orchestrator",
  "mcp": {
    "context7": {
      "enabled": true,
      "type": "remote",
      "url": "https://mcp.context7.com/mcp"
    },
    "engram": {
      "command": ["engram", "mcp", "--tools=agent"],
      "type": "local"
    },
    "coolify": {
      "enabled": true,
      "type": "remote",
      "url": "{env:COOLIFY_BASE_URL}/mcp",
      "headers": {
        "Authorization": "Bearer {env:COOLIFY_API_TOKEN}"
      }
    },
    "tavily": {
      "enabled": true,
      "type": "remote",
      "url": "https://mcp.tavily.com/mcp",
      "headers": {
        "Authorization": "Bearer {env:TAVILY_API_KEY}"
      }
    },
    "chrome-devtools": {
      "enabled": true,
      "type": "local",
      "command": ["chrome-devtools-mcp", "--headless"]
    }
  },
  "server": {
    "port": 4096,
    "hostname": "127.0.0.1",
    "cors": ["https://opencode.jt.som-os.dev"]
  },
  "permission": {
    "bash": {
      "*": "allow",
      "git commit *": "ask",
      "git push": "ask",
      "git push *": "ask",
      "git push --force *": "ask",
      "git rebase *": "ask",
      "git reset --hard *": "ask"
    },
    "read": {
      "*": "allow",
      "**/*.key": "deny",
      "**/*.pem": "deny",
      "**/.aws/credentials": "deny",
      "**/.config/gh/hosts.yml": "deny",
      "**/.credentials/**": "deny",
      "**/.env": "deny",
      "**/.env.*": "deny",
      "**/.ssh/**": "deny",
      "**/credentials.json": "deny",
      "**/secrets/**": "deny"
    },
    "edit": { "*": "allow" },
    "glob": { "*": "allow" },
    "grep": { "*": "allow" },
    "list": { "*": "allow" },
    "task": { "*": "allow" },
    "webfetch": "allow",
    "websearch": "allow",
    "question": "allow",
    "todowrite": "allow"
  },
  "share": "disabled"
}