Repository navigation
feat(bwopencode): bind managed /etc/opencode/AGENTS.md into the sandbox - #28
Open
Garrett Bischof (gwbischof) wants to merge 1 commit into
Open
Garrett Bischof (gwbischof) wants to merge 1 commit into
Garrett Bischof (gwbischof) wants to merge 1 commit into
Conversation
bwopencode and bwopencode2 bind /etc/opencode/opencode.json{,c} into the
sandbox but not a managed AGENTS.md, so facility-wide agent instructions
deployed there (referenced from opencode.jsonc via "instructions") were
invisible to the sandboxed CLIs. Bind /etc/opencode/AGENTS.md read-only when
present. Companion to the NSLS2/ansible compliance-role change that deploys it.
Assisted-by: opencode:claude-opus-4-8
There was a problem hiding this comment.
🟢 Approval recommended
The narrow additions follow existing mount setup, preserve read-only isolation, and have no identified blocking issues.
No open issues 🎉
What changed in this PR
This PR makes facility-managed agent instructions available to sandboxed OpenCode CLIs alongside their managed configuration.
Changes:
- Add optional read-only binds for
/etc/opencode/AGENTS.mdin both wrappers’ managed-configuration blocks. - Document the newly exposed managed file.
| File | Description |
|---|---|
docs/bw-wrappers.md |
Lists AGENTS.md among managed OpenCode mounts. |
bin/bwopencode2 |
Mounts managed AGENTS.md read-only when present. |
bin/bwopencode |
Mounts managed AGENTS.md read-only when present. |
Review effort: Balanced
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
bwopencode and bwopencode2 bind /etc/opencode/opencode.json{,c} into the sandbox but not a managed AGENTS.md, so facility-wide agent instructions deployed there (referenced from opencode.jsonc via "instructions") were invisible to the sandboxed CLIs. Bind /etc/opencode/AGENTS.md read-only when present. Companion to the NSLS2/ansible compliance-role change that deploys it.
Assisted-by: opencode:claude-opus-4-8