anomalyco/opencode

I've been using OpenCode V2 since it first appeared on the website, and I can only repeat the positive views on usability, the client/server model and self-awareness/ability to edit it's config and write plugins. I'd like to mention two other impressive things about OpenCode. First, their issue tracker on GitHub works really well. They have the OpenCode GitHub App connected, and for any bug report it reads the issue, tests on the mentioned version and latest dev branch, and comments the findings along with a reproduction script. For TUI Bugs it even records a video. And all that in less than two minutes, usually. https://github.com/anomalyco/opencode/issues?q=is%3Aissue+state%3Aopen+label…

Look at the tags tab, not the releases tab. https://github.com/anomalyco/opencode/tags If you use Nix it's a flake so super easy to run too. Seconded that v2 has much better background shell + subagent management: it's now much more eager to appropriately spawn either of them on its own, and does so in a way that is asynchronous, i.e it doesn't block the conversation and you can examine them by pressing down arrow at the prompt box.

…h/Medium/Low) 5. Stores with evidence for the report 6. Generates professional reports when you're done ## Technical Details Built on OpenCode ( https://github.com/sst/opencode ), which provides: - Superior agent architecture vs generic LLM CLIs - Extensible tool framework with typed I/O - Multi-LLM support (Claude, GPT-4, Gemini, local models) Wiz adds a security layer: - 30+ tool integrations with output parsers - Findings database with OWASP/CVE categorization - Governance engine (scope enforcement, audit trails) - Report generation (HTML, PDF, Markdown) ## What It's NOT - Not a replacement for knowing what you're doing - Not for unauthorized testing - Not a magic "hack anything" but…

…en you just have to find a coding tool that works with OpenRouter. Afaik claude/codex/cursor don’t, at least not without weird hacks, but various of the OSS tools do — cline, roo code, opencode, etc. I recently started using opencode ( https://github.com/sst/opencode ), which is like an open version of claude code, and I’ve been quite happy with it. It’s a newer project so There Will Be Bugs, but the devs are very active and responsive to issues and PRs.

…e best JS runtime", since Anthropic themselves must be laser focused on user experience with Claude Code. And just look at Opencode [^1] if you want to see what leaning all the way into Bun gets you. Single file binary distribution, absurdly fast, gorgeous. Their backend, OpenTUI [^2], is a large part of this, and was built in close correspondence with the Bun folks. It's not something that could exist without Bun, in my opinion. (4) Anthropic could have certainly let Bun be a third party to which they contributed. They did not have to purchase them. But they did. There is a strange not-quite altruism in this; at worst, a casting off of the exploitation of open source we often see from the …

Opencode (from SST; not the thing that got rebranded as Crush) seems to be just that. I've had a very good experience with it for the last couple of days; having previously used gemini-cli quite a bit. Opencode also has/hosts a couple of "free" models options right now, which are quite decent IMO. https://github.com/sst/opencode There are many many similar alternatives, so here's a random sampling: Crush, Aider, Amp Code, Emacs with gptel/acp-shell, Editor Code Assistant (which aims for an editor-agnostic backend that plugs into different editors) Finally... there is quite a lot of scope for co-designing the affordances / primitives supported by the coding agent and the LLM backing it (es…

as mentioned already by the others, using opencode [1] helps with this, if you like the cli workflow. it is good enough and does not need to exceed what the leaders are doing. when combined with the ability to use github copilot to make the llm calls, i can play with almost any provider i need. also helps if you get its access through your work or school. for example, Haiku is already offered by them and costs a third in credits. [1] https://github.com/sst/opencode

harness have a say in security too, sandboxes are one part of posture, but not the only one You can decide for yourself: https://github.com/earendil-works/pi/issues/10895 Anthropic, OpenAi, and OpenCode all support this feature, we have non-developers to support and MDM is widely used. For comparison, this excellent reply from Aiden on the OpenCode team: https://github.com/anomalyco/opencode/pull/54921#issuecomment-6156929366

For Codex there is no need to decompile because unlike Claude Code, Codex is open source [1] and written in Rust. There are lot of other amazing open source agent harnesses like OpenCode [2] and Pi [3]. [1] https://github.com/openai/codex [2] https://github.com/anomalyco/opencode [3] https://github.com/earendil-works/pi

> casting about for viable egress paths if I need to flee Claude Code Check out OpenCode (the OSS product [1]) and OpenCode Go/Zen (the LLMaaS [2]). Use a more expensive model with larger context (like GLM-5.1) for orchestration and cheaper models for coding and iteration on acceptance criteria (writing and passing tests). I also throw a more expensive vision-capable model into the mix like Gemini 3 Flash to iterate on UI tasks using Playwright. With the base usage in Go and pay as you go on cheaper models like MiniMax you can get a lot done for not a lot of coin. [1] https://github.com/anomalyco/opencode [2] https://opencode.ai/go

…through to improve security. Our hunch is that the Ai told them this was ok to do, but it broke invariants users relied on. Perhaps it was not "hackable" in the sense I think you are getting at, but it did open a very big security hole through choices and design. The critical thinking was lacking (imo). https://github.com/anomalyco/opencode/pull/51337 The bots make mistakes all the time, even through multiple rounds of reviews. Thus I have zero faith that they will produce secure code reliably 100% of the time. More Ai does not magically fix this, they go down the wrong path and double down, or work around incorrect assumptions. This is a good talk by a member of the Linux security team:…

the ux is kind of crazy. you login to their website, and you are presented with a list of providers where you can click and add your provider api key. how the key is stored on the backend isn't clear, but it is akin to handing your password or if you know crypto, your private key, to someone and letting them store it for you. from what i can tell, there are no links within the console to a ToS, Privacy policy or anything else. there are no warnings or documentation about how they store your keys. someone else in this thread linked to this issue, but this comment is especially insane given that i can't find any privacy policy or tos for the console. https://github.com/anomalyco/opencode/…

I told you so: https://news.ycombinator.com/item?id=49243119 Me, 68 days ago: > Beware of the author of tweet, who happens to be author of OpenCode - OpenCode will leak all your data to themselves and to shady 3rd parties. Author feigned ignorance and never fixed the issue. OpenCode among other harnesses is the shadiest of all. > https://github.com/anomalyco/opencode/issues/10416

1. Running background code on my machine is something that gets an immediate removal from me. 2. opencode 2.0 does not exists. I mean it: there is no release[1] and per their own instructions, `npm i -g @opencode/cli@latest` does not install opencode 2.0. 3. `Error: @opencode/cli's postinstall script was not run.` Not even running postinstall.js can fix that, neither on linux nor macos. And even if it works, in a couple of days or on the next upgrade it will fail again. [1] https://github.com/anomalyco/opencode/releases

I think it's due to they are doing a funny business to parse the progress, that's pretty much vibed and no one care. Like instead of using curl's progress, they re-invented a progress tracking with the tracing interface (--trace-ascii), byte by byte :( https://github.com/anomalyco/opencode/issues/22998 https://github.com/anomalyco/opencode/issues/53702