// Global OpenCode 2 config used by opencode-sandbox for every project. Override it with
// ~/.config/opencode-sandbox/opencode.jsonc or OCSB_OPENCODE_CONFIG. Project settings
// (model, MCP servers, project plugins) stay in the project's opencode.jsonc.
{
  "$schema": "https://opencode.ai/config.json",
  "share": "disabled",
  "update": "disable",

  // Plugin lists from the global and project configs are merged. Versions are pinned: a
  // plugin is code inside the OpenCode process with all of its rights.
  "plugins": [
    // desktop notifications (in the sandbox: through a D-Bus proxy limited to notifications)
    "@mohak34/opencode-notifier@1.1.0",
    // parses commands before tools run and blocks destructive ones (git reset --hard,
    // clean -f, checkout --, branch -D, rm -rf on dangerous paths, curl | bash) and secret
    // access (~/.ssh, .env). Project exceptions: <project>/.cc-safety-net/policy.json.
    // Does not inspect docker or kubectl
    "cc-safety-net@2.7.0"
  ]
}