Skip to content

opencode-power-pack v0.5.0

Choose a tag to compare

View all tags
@waybarrios waybarrios released this 17 Aug 18:48
v0.5.0
9f26764
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

OpenCode Power Pack v0.5.0

Version 0.5.0 introduces a portable sandbox capability contract and an opt-in native runner for lightweight, fail-closed command containment across Codex, OpenCode, Claude Code, and Pi.

Highlights

  • Assigns every one of the 54 bundled skills a least-capability sandbox profile and explicit escalation policy.
  • Adds sandbox doctor, sandbox resolve, and sandbox exec commands to the npm CLI.
  • Runs one command tree through native macOS Seatbelt or Linux Bubblewrap containment without a persistent container or daemon.
  • Provides four ordered profiles: observe, develop, network-read, and publish.
  • Denies unrelated host reads, credential-shaped files, unapproved network destinations, unsafe environment variables, and external side effects by default.
  • Preserves ordinary Git inspection across nested directories, linked worktrees, and validated submodules without exposing hooks or mutable host Git configuration.
  • Ships real containment tests on both ubuntu-latest and macos-latest.
  • Documents the exact compatibility boundary and adapter roadmap for Codex, OpenCode, Claude Code, and Pi.

Install

Install or update the CLI:

npm install --global @waybarrios/opencode-power-pack@0.5.0

Check that the operating-system boundary is available:

opencode-power-pack sandbox doctor
opencode-power-pack sandbox doctor --json

Run a read-only code-review command:

opencode-power-pack sandbox exec --skill code-review -- git status --short
opencode-power-pack sandbox exec --skill code-review -- rg TODO .

Allow one declared network destination:

opencode-power-pack sandbox exec \
  --skill code-review \
  --sandbox-profile network-read \
  --allow-domain api.github.com \
  -- curl https://api.github.com/repos/waybarrios/opencode-power-pack

Does it work with Codex and OpenCode?

Yes. Codex and OpenCode can explicitly invoke the same opencode-power-pack sandbox exec command. Claude Code and Pi can invoke it as well when the npm CLI is available.

The current boundary is shell-contained: the selected command and all of its descendants are isolated. Automatic host routing is not implemented yet, so ordinary shell, file, browser, MCP, connector, and computer-use tools are not silently redirected through this runner. Version 0.5.0 does not claim whole-agent isolation.

Platform requirements

  • Node.js 20.11.0 or newer.
  • macOS with the built-in Seatbelt backend.
  • Linux with trusted system installations of bubblewrap, socat, and rg, plus working user and network namespaces.
  • WSL2 is expected through the Linux backend but dedicated CI is still pending.
  • Windows native and WSL1 intentionally fail closed.

Verification

  • 400 automated tests defined, with 399 passing and one native integration entry activated separately by CI.
  • Native sandbox containment passing on Ubuntu and macOS.
  • Strict Claude Code plugin validation passing.
  • OpenCode 1.18.7 smoke validation passing.
  • Packed npm artifact verified with 291 files, including all runtime, contract, schema, and compatibility resources.

Documentation

Assets 2
Loading