squadrant 0.20.0 → 0.20.1

package/dist/index.js

@@ -14659,7 +14659,57 @@ function writePerCrewOpencodeConfig(o) {
       websearch: "allow",
       task: "allow",
       lsp: "allow",
-      external_directory: { "**": "allow" }
+      // unlike most permission keys, external_directory defaults to "ask" in
+      // opencode. The catch-all is deliberately "ask" (not "allow") so unknown
+      // external paths stay human-gated — least privilege. Trusted AI/config/
+      // memory/tmp dirs are allow-listed explicitly below; each dir is listed
+      // both as the bare path AND as `<dir>/**`, so the directory itself is
+      // reachable, not only its contents.
+      //
+      // Ordering: opencode evaluates patterns last-match-wins, so the catch-all
+      // goes FIRST and the specific allows follow. If a future version resolves
+      // first-match instead, the failure mode is over-prompting (visible, safe)
+      // rather than a silent allow-all (invisible, unsafe).
+      external_directory: {
+        "**": "ask",
+        "/tmp": "allow",
+        "/tmp/**": "allow",
+        "/private/tmp": "allow",
+        "/private/tmp/**": "allow",
+        "/var/folders": "allow",
+        "/var/folders/**": "allow",
+        "~/.config/squadrant": "allow",
+        "~/.config/squadrant/**": "allow",
+        "~/.config/opencode": "allow",
+        "~/.config/opencode/**": "allow",
+        "~/.config/cmux": "allow",
+        "~/.config/cmux/**": "allow",
+        "~/.opencode": "allow",
+        "~/.opencode/**": "allow",
+        "~/.local/share/opencode": "allow",
+        "~/.local/share/opencode/**": "allow",
+        "~/.local/share/claude": "allow",
+        "~/.local/share/claude/**": "allow",
+        "~/.cache/opencode": "allow",
+        "~/.cache/opencode/**": "allow",
+        "~/.claude": "allow",
+        "~/.claude/**": "allow",
+        "~/.claude.json": "allow",
+        "~/squadrant-hub": "allow",
+        "~/squadrant-hub/**": "allow",
+        "~/.claude-mem": "allow",
+        "~/.claude-mem/**": "allow",
+        "~/.agents": "allow",
+        "~/.agents/**": "allow",
+        "~/.cmuxterm": "allow",
+        "~/.cmuxterm/**": "allow",
+        "~/.codex": "allow",
+        "~/.codex/**": "allow",
+        "~/.cursor": "allow",
+        "~/.cursor/**": "allow",
+        "~/.gemini": "allow",
+        "~/.gemini/**": "allow"
+      }
     }
   };
   writeFileSync11(file, JSON.stringify(config, null, 2));
@@ -18016,6 +18066,10 @@ var launchCommand = new Command14("launch").description(
       hadFailure = true;
       return;
     }
+    let captainOpencodeConfigPath;
+    if (isOpencodeCaptain && projectName) {
+      captainOpencodeConfigPath = writePerCrewOpencodeConfig({ stateRoot, project: projectName, taskId: "captain" });
+    }
     const priorRecord = projectName ? readCaptainAddress(stateRoot, projectName) : null;
     const captainPort = isOpencodeCaptain ? await getFreePort() : void 0;
     let opencodeResumeSessionId;
@@ -18036,7 +18090,7 @@ var launchCommand = new Command14("launch").description(
           }
           const captainBoot = isOpencodeCaptain ? { port: captainPort, sessionId: pickResumeSessionId(priorRecord, "opencode", forceFresh) } : void 0;
           opencodeResumeSessionId = captainBoot?.sessionId;
-          return buildAgentCmd(
+          const baseCmd = buildAgentCmd(
             agentName,
             registry,
             role,
@@ -18049,6 +18103,7 @@ var launchCommand = new Command14("launch").description(
             thinking,
             captainBoot
           );
+          return captainOpencodeConfigPath ? `OPENCODE_CONFIG=${captainOpencodeConfigPath} ${baseCmd}` : baseCmd;
         },
         initialPrompt,
         runtime,