tahani: allow opencode external_directory access for inbox-triage ingestion

modules/_hosts/tahani/paperless.nix

@@ -26,7 +26,7 @@
 	virtualisation.oci-containers = {
 		backend = "docker";
 		containers.paperless-ai = {
-			image = "clusterzx/paperless-ai:v3.0.9";
+			image = "clusterzx/paperless-ai:3.0.9";
 			autoStart = true;
 			ports = [
 				"127.0.0.1:3000:3000"

modules/tahani.nix

@@ -62,6 +62,12 @@
 	in {
 		programs.git.settings.user.email = "christoph@schmatzler.com";
 
+		# Allow inbox-triage to access attachment staging and paperless ingestion dirs
+		programs.opencode.settings.permission.external_directory = {
+			"/tmp/himalaya-triage/*" = "allow";
+			"/var/lib/paperless/consume/inbox-triage/*" = "allow";
+		};
+
 		# Auto-start zellij in nushell on tahani (headless server)
 		programs.nushell.extraConfig = ''
 			if $nu.is-interactive and ('SSH_CONNECTION' in ($env | columns)) and ('ZELLIJ' not-in ($env | columns)) {