OpenCode AI config to deny read access to .env, node_modules, build artifacts, cache dirs and ask before bash execution

opencode_config.json

{
  "$schema": "https://opencode.ai/config.json",
  "permission": {
    "bash": {
      "*": "ask"
    },
    "read": {
      "*": "allow",
      "**/.env": "deny",
      "**/.env.*": "deny",
      "**/.env.local": "deny",
      "**/.env.development": "deny",
      "**/.env.production": "deny",
      "**/.env.test": "deny",
      "**/.env.example": "allow",
      "**/node_modules/**": "deny",
      "**/.next/**": "deny",
      "**/dist/**": "deny",
      "**/build/**": "deny",
      "**/out/**": "deny",
      "**/.turbo/**": "deny",
      "**/.cache/**": "deny",
      "**/.parcel-cache/**": "deny",
      "**/.vite/**": "deny",
      "**/public/**": "deny",
      "**/static/**": "deny",
      "**/coverage/**": "deny",
      "**/*.log": "deny",
      "**/.git/**": "deny",
      "**/.pnpm-store/**": "deny",
      "**/.yarn/**": "deny",
      "**/.DS_Store": "deny",
      "**/tmp/**": "deny",
      "**/temp/**": "deny",
      "**/.vercel/**": "deny",
      "**/.output/**": "deny",
      "**/.nuxt/**": "deny",
      "**/.svelte-kit/**": "deny",
      "**/.angular/**": "deny",
      "**/.astro/**": "deny",
      "**/.firebase/**": "deny",
      "**/.wrangler/**": "deny",
      "**/.serverless/**": "deny",
      "**/storybook-static/**": "deny",
      "**/vendor/**": "deny",
      "**/__pycache__/**": "deny",
      "**/.pytest_cache/**": "deny",
      "**/.mypy_cache/**": "deny",
      "**/.ruff_cache/**": "deny",
      "**/.venv/**": "deny",
      "**/venv/**": "deny"
    }
  }
}