vetto 0.3.7

Daemon-less sandbox + security layer for AI coding agents (Landlock/Seatbelt, TUI statusline, post-session audit reports)
Documentation
[metadata]
name = "opencode"
description = "Safe compatibility roots for OpenCode agent."

[filesystem]
allow_read = ["$AGENT"]
allow_write = ["$AGENT"]

[environment]
pass_through = [
    "OPENCODE_*",
    "OPENAI_API_KEY",
    "ANTHROPIC_API_KEY",
    "OPENROUTER_API_KEY",
]

[display_only_deny]
paths = [
    "$AGENT/*.sock",
    "$AGENT/*.ipc",
]