set perms for explore subagent

.config/opencode/opencode.jsonc

@@ -4,7 +4,10 @@
         "edit": "ask",
         "bash": {
             "*": "ask",
-            "ctx7 *": "allow"
+            "ctx7 *": "allow",
+            "tvly *": "allow",
+            "which *": "allow",
+            "ls *": "allow"
         },
         "webfetch": "ask",
         "read": {
@@ -21,7 +24,8 @@
         "list": "ask",
         "skill": {
             "*": "ask",
-            "context7-cli": "allow"
+            "context7-cli": "allow",
+            "tavily-*": "allow"
         },
         "todowrite": "allow",
         "todoread": "allow",
@@ -33,9 +37,53 @@
                 "edit": "deny",
                 "bash": {
                     "*": "ask",
-                    "cat *>*": "deny",
+                    "cat *|*": "ask",
+                    "cat *>*": "ask",
+                    "cat *<*": "ask",
+                    "cat /etc/*": "ask",
+                    "cat /proc/*": "ask",
+                    "cat /sys/*": "ask",
+                    "cat *.md": "allow",
+                    "cat *.txt": "allow",
+                    "cat *.json": "allow",
+                    "cat *.yml": "allow",
+                    "cat *.yaml": "allow",
+                    "cat *.js": "allow",
+                    "cat *.ts": "allow",
+                    "cat *.py": "allow",
+                    "cat *.sh": "allow",
+                    "cat *.fish": "allow",
+                    "cat ./*": "allow",
+                    "cat /home/*/*": "allow",
+                    "cat README*": "allow",
+                    "cat SKILL*": "allow",
+                    "cat PLAN*": "allow",
+                    "cat AGENTS*": "allow",
+                    "cat CHANGELOG*": "allow",
+                    "cat LICENSE*": "allow",
+                    "cat Dockerfile*": "allow",
+                    "cat compose.yml": "allow",
+                    "cat compose.yaml": "allow",
+                    "cat package.json": "allow",
+                    "cat *-lock.json": "deny",
+                    "cat yarn.lock": "deny",
+                    "cat pnpm-lock.yaml": "deny",
                     "sed *": "deny",
-                    "ctx7 *": "allow"
+                    "ctx7 *": "allow",
+                    "tvly *": "allow",
+                    "which *": "allow",
+                    "ls *": "allow"
+                }
+            }
+        },
+        "explore": {
+            "permission": {
+                "bash": {
+                    "*": "ask",
+                    "tvly *": "allow",
+                    "ctx7 *": "allow",
+                    "which *": "allow",
+                    "ls *": "allow"
                 }
             }
         }