diff --git a/flake.lock b/flake.lock
index 27a3907..8124030 100644
--- a/flake.lock
+++ b/flake.lock
@@ -69,11 +69,11 @@
         "treefmt-nix": "treefmt-nix"
       },
       "locked": {
-        "lastModified": 1768227710,
-        "narHash": "sha256-m6GRI1hzt/jfKaPyyraxUCi0HAc6ROwasemyeWGulJA=",
+        "lastModified": 1768533022,
+        "narHash": "sha256-z2A4JDlOQ0KxHO4XLSoTArhi3BcYqoKuoMD2mPvZ1sQ=",
         "owner": "numtide",
         "repo": "llm-agents.nix",
-        "rev": "321aab84a04492df7230090eabc61fa0b224a106",
+        "rev": "765ba8f934426582f38b6adfc1da6d57942f83f4",
         "type": "github"
       },
       "original": {
@@ -116,11 +116,11 @@
     },
     "nixpkgs_2": {
       "locked": {
-        "lastModified": 1768178648,
-        "narHash": "sha256-kz/F6mhESPvU1diB7tOM3nLcBfQe7GU7GQCymRlTi/s=",
+        "lastModified": 1768395095,
+        "narHash": "sha256-ZhuYJbwbZT32QA95tSkXd9zXHcdZj90EzHpEXBMabaw=",
         "owner": "NixOS",
         "repo": "nixpkgs",
-        "rev": "3fbab70c6e69c87ea2b6e48aa6629da2aa6a23b0",
+        "rev": "13868c071cc73a5e9f610c47d7bb08e5da64fdd5",
         "type": "github"
       },
       "original": {
diff --git a/modules/ai/opencode.nix b/modules/ai/opencode.nix
index 0c67683..d6d6709 100644
--- a/modules/ai/opencode.nix
+++ b/modules/ai/opencode.nix
@@ -31,8 +31,12 @@ in
                 id = "allow";
                 "uname*" = "allow";
                 "date*" = "allow";
-
                 "ls*" = "allow";
+                "find*" = "allow";
+                "head*" = "allow";
+                "wc*" = "allow";
+                "tail*" = "allow";
+                "sort*" = "allow";
 
                 "git status*" = "allow";
                 "git diff*" = "allow";