opencode.json

{
  "$schema": "https://opencode.ai/config.json",
  "instructions": [
    "AGENTS.md",
    "docs/*.md"
  ],
  "skills": {
    "paths": [
      ".opencode/skills"
    ]
  },
  "reference": {
    "supercmd": {
      "repository": "SuperCmdLabs/SuperCmd",
      "branch": "main"
    },
    "raycast-extensions": {
      "repository": "raycast/extensions",
      "branch": "main"
    },
    "raycast-keepassxc": "https://github.com/raycast/extensions/tree/main/extensions/keepassxc"
  },
  "command": {
    "plan-extension": {
      "description": "Plan the read-only SuperCmd/Raycast KeePass extension implementation.",
      "template": "Review AGENTS.md and docs/*.md, then produce a concrete implementation plan for the next milestone. Preserve both Raycast and SuperCmd compatibility, keep KDBX access read-only, and reject external app or CLI dependencies."
    },
    "review-security": {
      "description": "Review credential, KDBX, key-file, and TOTP security risks.",
      "template": "Act as a security reviewer for this read-only KeePass KDBX extension. Check the current code and docs for credential persistence, logging, memory lifetime, key-file handling, TOTP handling, dependency risk, and accidental write support. Report findings first with file and line references."
    },
    "check-supercmd-compatibility": {
      "description": "Check compatibility with SuperCmd's Raycast extension runtime.",
      "template": "Review the extension implementation for standard Raycast API usage and SuperCmd compatibility. Identify any Raycast-only assumptions, unsupported APIs, native app dependencies, CLI dependencies, bundling problems, or runtime behavior that may fail in SuperCmd."
    }
  },
  "permission": {
    "*": "allow"
  },
  "share": "disabled"
}