vetto 0.2.8

Daemon-less sandbox + security layer for AI coding agents (Landlock/Seatbelt, TUI statusline, post-session audit reports)
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44

# OpenCode Integration Guide

OpenCode is an open-source terminal coding assistant. Vetto integrates directly with OpenCode to sandbox all generated code executions and shell commands.

---

## 1. Automated Installation

Run:
```bash
vetto plugin install opencode
```

This creates or merges `~/.config/opencode/config.json` with an atomic backup at `~/.config/opencode/config.json.bak.<timestamp>`.

---

## 2. Configuration Format

```json
{
  "sandbox": {
    "command": "vetto",
    "args": [
      "--ci",
      "--"
    ]
  },
  "vetto": {
    "enabled": true,
    "version": "0.2.5"
  }
}
```

---

## 3. Manual Verification

To run OpenCode directly under Vetto:
```bash
vetto --profile strict -- opencode
```
All subagents and background commands spawned by OpenCode inherit the security sandbox restrictions.