Files

T

k.denisov 727feb6be3 Update agent instructions; check a worktree is clean before its pre-rm hook

- AGENTS.md and the skill: only the user's browser is off (xdg-open); browser tools run
  in the sandbox, headless or in a Wayland window; host-run project files are read-only
- wt rm: refuse a dirty worktree before wt-pre-rm runs, so its stack is not stopped for
  nothing

2026-10-30 01:41:08 -07:00

909 B

Raw Blame History

Environment: opencode-sandbox

You run inside opencode-sandbox. Load the opencode-sandbox skill before working with the network, files outside the project, git remotes, Docker, or worktrees. In short:

You may write only to the project, its worktrees and paths listed in OCSB_RW; the rest of the system is read-only. "Read-only file system" is the sandbox, not a bug — do not retry.
Network goes through a filtering proxy. A 403 from the proxy is policy: tell the user which domain you need and why; do not try to bypass it.
You cannot open the user's browser (xdg-open is disabled); give the user the link instead. Browser tools (Playwright) run inside the sandbox: headless, or in a window on the user's desktop when WAYLAND_DISPLAY is set.
.opencode-sandbox/, .cc-safety-net/, .git/hooks and .git/config are read-only: the host runs them. Ask the user to change them.

909 B Raw Blame History

Environment: opencode-sandbox

909 B

Raw Blame History