mirror of
https://github.com/sst/opencode.git
synced 2025-12-23 10:11:41 +00:00
23935f045d
Implements ACL-based file protection system to prevent AI agents from accessing sensitive credentials and files. Adds CLI commands for setup, protection management, and status checking. Key features: - Restricted user execution (opencode-agent) - Kernel-level ACL enforcement via macOS Access Control Lists - Command whitelisting for common development tools (git) - Configurable whitelist via ~/.opencode/security.json Implementation: - New src/util/security/ module (~980 lines) - Security config management and ACL operations - Protected command execution via ProtectedExecutor class - CLI commands: protect setup, protect lock, protect status - Integration with bash tool executor Technical details: - 14 files changed, 1,070 insertions(+), 12 deletions(-) - Platform-specific implementation for macOS (darwin) - Sudo-based ACL management with passwordless sudoers config |
||
|---|---|---|
| .. | ||
| console | ||
| desktop | ||
| enterprise | ||
| extensions/zed | ||
| function | ||
| identity | ||
| opencode | ||
| plugin | ||
| script | ||
| sdk | ||
| slack | ||
| tauri | ||
| ui | ||
| util | ||
| web | ||