k.denisov
727feb6be3
- AGENTS.md and the skill: only the user's browser is off (xdg-open); browser tools run in the sandbox, headless or in a Wayland window; host-run project files are read-only - wt rm: refuse a dirty worktree before wt-pre-rm runs, so its stack is not stopped for nothing
15 lines
909 B
Markdown
15 lines
909 B
Markdown
# Environment: opencode-sandbox
|
|
|
|
You run inside opencode-sandbox. Load the `opencode-sandbox` skill before working with the
|
|
network, files outside the project, git remotes, Docker, or worktrees. In short:
|
|
|
|
- You may write only to the project, its worktrees and paths listed in `OCSB_RW`; the rest of
|
|
the system is read-only. "Read-only file system" is the sandbox, not a bug — do not retry.
|
|
- Network goes through a filtering proxy. A 403 from the proxy is policy: tell the user which
|
|
domain you need and why; do not try to bypass it.
|
|
- You cannot open the user's browser (`xdg-open` is disabled); give the user the link instead.
|
|
Browser tools (Playwright) run inside the sandbox: headless, or in a window on the user's
|
|
desktop when `WAYLAND_DISPLAY` is set.
|
|
- `.opencode-sandbox/`, `.cc-safety-net/`, `.git/hooks` and `.git/config` are read-only: the
|
|
host runs them. Ask the user to change them.
|