Function _resolve_run_dir

src/agent/opencode_agent/runner.py:192–216

Return OpenCode's working directory for this run. The safe default is the repo root with local file/bash/edit tools denied. Any filesystem/code capability must opt into a dedicated workspace folder. This keeps the default comparable to tools-only MCP agents while allowing a separate

(
    *,
    workspace_dir: Path | str | None = None,
    allow_bash: bool = False,
    allow_edit: bool = False,
    allow_files: bool = False,
)

def _resolve_run_dir(
    *,
    workspace_dir: Path | str | None = None,
    allow_bash: bool = False,
    allow_edit: bool = False,
    allow_files: bool = False,
) -> Path:
    """Return OpenCode's working directory for this run.

    The safe default is the repo root with local file/bash/edit tools denied.
    Any filesystem/code capability must opt into a dedicated workspace folder.
    This keeps the default comparable to tools-only MCP agents while allowing a
    separate CLI/code-capable track.
    """
    workspace_requested = allow_bash or allow_edit or allow_files
    if workspace_requested and workspace_dir is None:
        raise ValueError(
            "--workspace-dir is required when enabling files, edits, or bash"
        )
    if workspace_dir is None:
        return _REPO_ROOT

    run_dir = Path(workspace_dir).expanduser().resolve()
    run_dir.mkdir(parents=True, exist_ok=True)
    return run_dir


def _json_events(stdout: str) -> tuple[list[dict[str, Any]], list[str]]: