v0.1.3

Tightens the request guard on OpenCode 2 so every Tinfoil request is verified and encrypted to the enclave before it is sent, including when the config has a providers.tinfoil entry or another plugin changes the provider's package or transport. A request that cannot go through the guard is refused instead of sent.

Upgrade an existing OpenCode 2 installation:

opencode plugin update @tinfoilsh/opencode-provider
opencode service restart

Validated on OpenCode 2.0.30 with provider config overrides, plugins that change the package or transport, and failing attestation.

Via #10.

Full changelog