Request to list opencode-seatbelt (https://github.com/ssmirr/opencode-seatbelt) under plugins.
What it is: a macOS Seatbelt sandbox applied to the OpenCode process, so tools and child processes can't read files matched by .ocignore. Enforcement is at the syscall level, so unlike a tool.execute.before hook it doesn't depend on matching command text. It ships a built-in secret baseline and installs with opencode plugin add opencode-seatbelt.
Follows this repo's YAML entry format; PR to follow (#774).
Request to list opencode-seatbelt (https://github.com/ssmirr/opencode-seatbelt) under plugins.
What it is: a macOS Seatbelt sandbox applied to the OpenCode process, so tools and child processes can't read files matched by
.ocignore. Enforcement is at the syscall level, so unlike atool.execute.beforehook it doesn't depend on matching command text. It ships a built-in secret baseline and installs withopencode plugin add opencode-seatbelt.Follows this repo's YAML entry format; PR to follow (#774).