diff --git a/.config/opencode/opencode.jsonc b/.config/opencode/opencode.jsonc
index 9b4d43d..1363286 100644
--- a/.config/opencode/opencode.jsonc
+++ b/.config/opencode/opencode.jsonc
@@ -37,9 +37,42 @@
                 "edit": "deny",
                 "bash": {
                     "*": "ask",
-                    "cat *>*": "deny",
+                    "cat *|*": "ask",
+                    "cat *>*": "ask",
+                    "cat *<*": "ask",
+                    "cat /etc/*": "ask",
+                    "cat /proc/*": "ask",
+                    "cat /sys/*": "ask",
+                    "cat *.md": "allow",
+                    "cat *.txt": "allow",
+                    "cat *.json": "allow",
+                    "cat *.yml": "allow",
+                    "cat *.yaml": "allow",
+                    "cat *.js": "allow",
+                    "cat *.ts": "allow",
+                    "cat *.py": "allow",
+                    "cat *.sh": "allow",
+                    "cat *.fish": "allow",
+                    "cat ./*": "allow",
+                    "cat /home/*/*": "allow",
+                    "cat README*": "allow",
+                    "cat SKILL*": "allow",
+                    "cat PLAN*": "allow",
+                    "cat AGENTS*": "allow",
+                    "cat CHANGELOG*": "allow",
+                    "cat LICENSE*": "allow",
+                    "cat Dockerfile*": "allow",
+                    "cat compose.yml": "allow",
+                    "cat compose.yaml": "allow",
+                    "cat package.json": "allow",
+                    "cat *-lock.json": "deny",
+                    "cat yarn.lock": "deny",
+                    "cat pnpm-lock.yaml": "deny",
                     "sed *": "deny",
-                    "ctx7 *": "allow"
+                    "ctx7 *": "allow",
+                    "tvly *": "allow",
+                    "which *": "allow",
+                    "ls *": "allow"
                 }
             }
         }