public/opencode-sandbox
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Update agent instructions; check a worktree is clean before its pre-rm hook

Browse Source 
- AGENTS.md and the skill: only the user's browser is off (xdg-open); browser tools run
  in the sandbox, headless or in a Wayland window; host-run project files are read-only
- wt rm: refuse a dirty worktree before wt-pre-rm runs, so its stack is not stopped for
  nothing
This commit is contained in:
k.denisov
2026-10-30 01:41:08 -07:00
parent 01fc1627c1
commit 727feb6be3
3 changed files with 7 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
opencode/AGENTS.md
+5 -1
View File
@@ -7,4 +7,8 @@ network, files outside the project, git remotes, Docker, or worktrees. In short:
the system is read-only. "Read-only file system" is the sandbox, not a bug — do not retry.
- Network goes through a filtering proxy. A 403 from the proxy is policy: tell the user which
domain you need and why; do not try to bypass it.
- You cannot open a browser; give the user the link instead.
- You cannot open the user's browser (`xdg-open` is disabled); give the user the link instead.
Browser tools (Playwright) run inside the sandbox: headless, or in a window on the user's
desktop when `WAYLAND_DISPLAY` is set.
- `.opencode-sandbox/`, `.cc-safety-net/`, `.git/hooks` and `.git/config` are read-only: the
host runs them. Ask the user to change them.