chore: update llm perms

Author: pythoninthegrass

opencode.jsonc

@@ -4,48 +4,55 @@
     "edit": "allow",
     "webfetch": "allow",
     "bash": {
-      "*": "ask",
-      "backlog *": "allow",
-      "cargo *": "allow",
-      "cat *": "allow",
-      "cp *": "allow",
-      "date *": "allow",
-      "deno fmt *": "allow",
-      "deno lint *": "allow",
-      "echo *": "allow",
-      "fd *": "allow",
-      "find *": "allow",
-      "git add *": "allow",
-      "git checkout *": "ask",
-      "git commit *": "allow",
-      "git diff *": "allow",
-      "git log *": "allow",
-      "git push *": "allow",
+      "*": "allow",
+      // Destructive file operations
+      "rm -rf /*": "deny",
+      "rm -rf /": "deny",
+      "rm *": "ask",
+      // Privilege escalation
+      "sudo *": "ask",
+      // Disk/filesystem destruction (Linux)
+      "dd *": "deny",
+      "mkfs *": "deny",
+      "fdisk *": "deny",
+      "parted *": "deny",
+      // Disk/filesystem destruction (macOS/BSD)
+      "diskutil eraseDisk*": "deny",
+      "diskutil eraseVolume*": "deny",
+      "diskutil partitionDisk*": "deny",
+      "diskutil apfs deleteContainer*": "deny",
+      "diskutil *": "ask",
+      "newfs*": "deny",
+      "mount *": "ask",
+      "umount *": "ask",
+      // System power
+      "shutdown *": "deny",
+      "reboot *": "deny",
+      "halt *": "deny",
+      // macOS system configuration
+      "nvram *": "deny",
+      "bless *": "deny",
+      "csrutil *": "deny",
+      "systemsetup *": "deny",
+      "launchctl *": "ask",
+      "networksetup *": "ask",
+      "scutil *": "ask",
+      "dscl *": "ask",
+      "pmset *": "ask",
+      "tmutil delete*": "deny",
+      "tmutil *": "ask",
+      // Git history destruction
       "git push --force*": "ask",
-      "git rev-parse *": "allow",
       "git reset --hard*": "ask",
-      "git show *": "allow",
-      "git status *": "allow",
+      // Git branch switching (potential uncommitted work loss)
+      "git checkout *": "ask",
       "git switch *": "ask",
-      "grep *": "allow",
-      "head *": "allow",
-      "jq *": "allow",
-      "ls *": "allow",
-      "mkdir *": "allow",
-      "mise *": "allow",
-      "mv *": "allow",
-      "npm *": "allow",
-      "npx *": "allow",
-      "prek *": "allow",
-      "rg *": "allow",
-      "rm *": "ask",
-      "sudo *": "ask",
-      "tail *": "allow",
-      "task *": "allow",
-      "touch *": "allow",
-      "tree *": "allow",
-      "wc *": "allow",
-      "yq *": "allow"
+      // Process/system disruption
+      "killall *": "ask",
+      "pkill *": "ask",
+      // Network exfiltration footguns
+      "curl * | *sh*": "deny",
+      "wget * | *sh*": "deny"
     }
   }
 }