diff --git a/opencode/.config/opencode/opencode.json b/opencode/.config/opencode/opencode.json
index 0b0c7f5..23f5622 100644
--- a/opencode/.config/opencode/opencode.json
+++ b/opencode/.config/opencode/opencode.json
@@ -1,5 +1,11 @@
 {
   "$schema": "https://opencode.ai/config.json",
+  "plugins": [
+    {
+      "package": "opencode-permission-reviewer@^2.4.0",
+      "options": {}
+    }
+  ],
   "default_agent": "safe-plan",
   "permission": {
     "write": "ask",
@@ -24,7 +30,11 @@
     },
     "searxng": {
       "type": "local",
-      "command": ["npx", "-y", "mcp-searxng"],
+      "command": [
+        "npx",
+        "-y",
+        "mcp-searxng"
+      ],
       "environment": {
         "SEARXNG_URL": "http://localhost:26745"
       },
@@ -32,12 +42,19 @@
     },
     "playwright": {
       "type": "local",
-      "command": ["npx", "-y", "@playwright/mcp@latest"],
+      "command": [
+        "npx",
+        "-y",
+        "@playwright/mcp@latest"
+      ],
       "enabled": false
     },
     "duckduckgo": {
       "type": "local",
-      "command": ["uvx", "duckduckgo-mcp-server"],
+      "command": [
+        "uvx",
+        "duckduckgo-mcp-server"
+      ],
       "enabled": true
     }
   },
diff --git a/opencode/.config/opencode/permission-reviewer.jsonc b/opencode/.config/opencode/permission-reviewer.jsonc
new file mode 100644
index 0000000..d599f46
--- /dev/null
+++ b/opencode/.config/opencode/permission-reviewer.jsonc
@@ -0,0 +1,10 @@
+{
+  // Модель-ревьюер разрешений. Провайдеры: deepseek, opencode-go.
+  // Если модель не поддерживает structured output (например opencode-go/deepseek-v4-flash),
+  // переключить outputFormat на "text".
+  "model": "deepseek/deepseek-flash",
+  "outputFormat": "json_schema",
+  "variant": "none",
+  // Ниже порога уверенности решение уходит человеку
+  "confidenceThreshold": 0.7
+}