From e88b11d8bb9a638818397836ea446ee1dc253e70 Mon Sep 17 00:00:00 2001
From: Christoph Schmatzler <christoph@schmatzler.com>
Date: Fri, 13 Mar 2026 16:27:03 +0000
Subject: [PATCH] tahani: allow opencode external_directory access for
 inbox-triage ingestion

---
 modules/tahani.nix | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/modules/tahani.nix b/modules/tahani.nix
index d9ef376..08defe0 100644
--- a/modules/tahani.nix
+++ b/modules/tahani.nix
@@ -62,6 +62,12 @@
 	in {
 		programs.git.settings.user.email = "christoph@schmatzler.com";
 
+		# Allow inbox-triage to access attachment staging and paperless ingestion dirs
+		programs.opencode.settings.permission.external_directory = {
+			"/tmp/himalaya-triage/*" = "allow";
+			"/var/lib/paperless/consume/inbox-triage/*" = "allow";
+		};
+
 		# Auto-start zellij in nushell on tahani (headless server)
 		programs.nushell.extraConfig = ''
 			if $nu.is-interactive and ('SSH_CONNECTION' in ($env | columns)) and ('ZELLIJ' not-in ($env | columns)) {