OpenCode++

A verification control plane around OpenCode Desktop that makes AI diffs, boundaries and evidence reviewable.

Stars
★ 113
Last updated
1mo ago
License
MIT
Primary language
TypeScript

At a glance

How it runs
Agent plugin / skill
Works with
Platform-specific
Cost
Free software; you pay for model usage
Setup effort
Low · running in minutes
You'll need
OpenCode DesktopWindows x64Node.jsShell / CLILocal filesystem
Typical use
A Windows developer using OpenCode Desktop who wants every AI change backed by auditable evidence.
Not a fit if
  • Teams not using OpenCode Desktop
  • Anyone needing OS-level sandbox isolation
  • Users working on macOS or Linux desktops

What does this agent do, and when should you use it?

OpenCode++ is a Windows-first Harness plugin for the official OpenCode Desktop application, shipped as a per-user EXE installer that needs no Administrator rights and does not patch app.asar. Installing it adds one primary mode called OpenCode++ to the mode picker; the currently selected OpenCode model then calls the in-process plugin tools instead of spawning a second model or a CLI process. Around the model's own file reads, edits and command runs, it supplies deterministic context retrieval, edit boundaries, command and protected-path guards, execution evidence bound to the current working-tree hash, and policy, freshness, regression, hallucination and convergence gates. Runtime artifacts land in the repository's .agent-context/ directory (traces, runs, loops, sidecar summaries). The plugin works offline by default, fetches no remote context and exposes no hidden chain-of-thought.

The plugin drives a task through Plan → Prepare → Retrieve → Execute → Collect → Evaluate → Decide → Persist → Finalize. prepare sets task boundaries and required checks; retrieve selects relevant files, symbols, versions and dependencies before blind search and records rejected files with reasons; guards check commands and protected paths; command or CI results are then matched to the current working-tree hash and the active evidence policy. evaluate and next return the next allowed action — repair, repack, human review or finalize — with a compact ✓ Verified / ✗ Repair required / ⚠ Human review status. The opencode_plusplus_dashboard tool exposes stage progress, selected and rejected files, decision basis, evidence freshness, intervention counts and the final summary. An Intervention Ledger tracks observed, prevented, requested, repaired, verified, unresolved and human-review states.

  1. A Windows developer using OpenCode Desktop who wants every AI change backed by auditable evidence.
  2. A team whose agent keeps declaring success without running tests, and who needs a fresh-evidence gate.
  3. A maintainer who wants to confine edits to specific directories and block dangerous shell commands.
  4. An engineer who wants a reviewable trace of decisions and executions left inside the repository.
  5. A team that wants to customize retrieval ranking, command rules or stopping policy and redistribute their own checksummed installer.

How do you install or deploy this agent?

Download the installer from GitHub Releases:

opencode-plusplus-setup-win-x64.exe

Fully exit OpenCode Desktop, then double-click the EXE and accept the installation message. It installs per-user on Windows x64 and requires no Administrator permission.

Only the following OpenCode configuration files are written (default config directory %USERPROFILE%\.config\opencode; OPENCODE_CONFIG_DIR takes precedence):

<OpenCode config>\plugins\opencode-plusplus.js
<OpenCode config>\agents\opencode-plusplus.md
<OpenCode config>\opencode-plusplus\state.json
<OpenCode config>\opencode-plusplus\installation.json

It removes Slash Command files or app.asar patches created by older releases and no longer changes the OpenCode Desktop bundle.

How do you use this agent?

Restart OpenCode Desktop, open a repository, and select OpenCode++ in the mode picker at the bottom of the prompt box. Describe the task normally, for example:

Fix the login timeout and add a regression test

Let the selected mode call prepare, retrieve, evaluate and next while it works, and do not switch back to Build for a task that needs the Harness gates.

Read the compact status returned by evaluate or next, and call the dashboard tool when you want stage progress, selected and rejected files, decision basis, evidence freshness and interventions. Inspect the repository directory for traces, findings, required commands or the final report:

.agent-context/traces/
.agent-context/runs/
.agent-context/loops/
.agent-context/sidecar/latest.md
.agent-context/sidecar/visualization.json

Context cache and registry usage live under .agent-context/cache/ and .agent-context/context-registry/usage/; these local artifacts should normally remain uncommitted.

What are this agent's strengths and limitations?

Pros
  • Draws a hard line between a suggested fix and a verified fix: only fresh command or CI evidence for the current working tree counts, not annotations, older test runs or model summaries.
  • Ships as a per-user EXE that leaves app.asar untouched and writes only four config files, so install and upgrade boundaries are clear.
  • Offline by default, no second model call, and every runtime artifact stays in the repository's .agent-context/ for review.
  • Documents concrete extension points: the agent prompt, command and protected-path rules, retrieval ranking, evidence trust and loop stopping.
  • The dashboard reports recorded system facts and decision inputs rather than dressing up model reasoning as audit evidence.
Limitations
  • Core operation depends on OpenCode Desktop on Windows x64; there is no documented install path for macOS or Linux desktops.
  • Explicitly not an operating-system sandbox: it cannot stop other applications from editing files and cannot prove business semantics from an exit code.
  • Requires OpenCode Desktop to load the configured plugin directory; antivirus locks, read-only folders and permission failures degrade to diagnostics or human review.
  • CLI and MCP entry points exist but are positioned as developer/compatibility surfaces, so they are not a substitute for the Desktop dependency.
  • No hosted or centrally managed policy distribution is described; team-wide policy means forking the plugin and rebuilding a checksummed installer.

How does this agent compare with similar options?

Key facts side by side with the most closely related agents.

Agent Source review Form / cost Stars Updated Language Full support on
OpenCode++ This agent 52 · Major gaps Agent plugin / skillFree + model costs ★ 113 1mo ago TypeScript —
Claudexor 76 · Good CLIFree + model costs ★ 520 today TypeScript Codex · Claude Code
Swarm 60 · Some gaps Agent plugin / skillFree ★ 747 5mo ago TypeScript Claude Code
Calyx 59 · Major gaps Desktop appFree ★ 351 6d ago Swift Codex · Claude Code

How does FollowAgents rate this agent?

FollowAgents source review · FARS-2.1
Major gaps
52/ 100 5-point scale 2.6 / 5
Trust 17/29
Reliability 8/14
Adaptability 9/18
Convention 8/18
Effectiveness 6/13
Verifiability 4/8
Why each dimension lost points
Trust17 / 29 · 2.9/5

Permission-boundary docs clearly separate host authorization from plugin semantic blocking with a three-state disposition, giving real least-privilege and confirmation design (2). Dependencies are declared only with caret ranges and no lockfile or audit evidence is shown, deducted to 1; source attribution is generic contributor naming in package.json/LICENSE with unverified publisher, 1. Rollback via --repair restoring only owned files without overwriting user config earns 2.

Reliability8 / 14 · 2.9/5

Failure reporting semantics (stale/missing/forbidden/no-progress) are explicit and well specified (2). Dependency availability rests on version ranges without lockfile evidence and the Windows EXE path depends on release artifacts unverifiable statically, 1. Self-consistency between the three-state permission model and evidence boundary is coherent (2).

Adaptability9 / 18 · 2.5/5

Audience and scenario (OpenCode Desktop Windows users) are well scoped (2) and capability boundaries (CLI/MCP as developer surfaces, not replacing global permissions) are stated (2). Environment fit is Windows-Desktop only with no cross-platform support, 1; trigger precision relies on mode picker and prompt steering without verifiable trigger rules, 1.

Convention8 / 18 · 2.2/5

Information architecture has bilingual docs with a reference layer (2), concrete install steps (2), and a full MIT license (2). No CHANGELOG and version only in package.json 0.2.12 (1); naming stability shows evolution traces via legacy allowed field alongside disposition (1); examples/FAQ are thin (1); known limitations are scattered rather than consolidated (1); maintenance responsibility points only to generic contributors (1).

Effectiveness6 / 13 · 2.3/5

Output usability is strong with compact status, Dashboard, and six audit questions (2). Marginal value and cost-benefit lack quantified benchmark results; only scripts and fixtures are visible, no result data, 1.

Verifiability4 / 8 · 2.5/5

Claims trace to docs and code structure but lack result data or external corroboration (1); cross-source corroboration is limited to in-repo self-description (1); fact/inference separation is good, docs explicitly distinguish claims from system verification (2).

Risks and how to mitigate them
  • Publisher identity is unverified by FollowAgents; verify origin and signature before running the installer EXE.
  • Dependencies use caret ranges with no visible lockfile or audit evidence; assess supply-chain risk independently.
  • Windows OpenCode Desktop only; other platforms or CLI-only scenarios are unsupported.
  • Benchmarks provide only scripts and fixtures, no actual result data, so effectiveness claims lack quantified support.
  • No CHANGELOG; version evolution and compatibility changes must be inferred from code.
Evidence confidence: Low Reviewed Oct 29, 2026 Reviewed revision 598767170bb7
See the full review method →

FAQ

Does it start another model or agent process?
No. The plugin runs inside OpenCode Desktop and its tools are called by the currently selected OpenCode model; the repository states it does not start a second model or a CLI process.
Does a passing command prove the code is correct?
No. Documentation calls a passing command evidence rather than a complete correctness proof, since an exit code cannot verify business semantics; a human-review result means reading actionSummary.evidence for the exact missing evidence.
Does it need network access or extra API keys?
It works offline by default, fetching no remote context and calling no second model. Remote sources or feedback transport must be explicitly enabled, and model usage costs come from the OpenCode model you run.
Can I use it purely as a CLI in CI?
The repository keeps CLI and MCP entry points for source development, CI, diagnostics and compatibility integrations, but they are not the normal installation path and ordinary users do not need them.
Should .agent-context/ artifacts be committed?
Normally not. The docs describe traces, runs, loops, cache, context-registry and interventions as local runtime artifacts, and the contribution guide asks to keep them out of commits.
View on GitHub ↗ Install ↓

Compare agents like this one

The same FARS review applied across the shortlist this agent qualifies for.

Related agents