cato-opencode

Cato safety plugin for OpenCode.

Protects your files and commands from AI agents using configurable rules.

Install

# 1. Install cato binary
brew tap harikrishnareddyl/cato && brew install cato

# 2. Install this plugin
npm install cato-opencode

# 3. Create rules
cato init

Usage

In your opencode.config.ts:

import { CatoPlugin } from "cato-opencode"

export default {
  plugins: [CatoPlugin]
}

What it does

Intercepts every tool call (file read, write, shell commands) and checks against your .cato.toml rules before execution. If denied, the tool call is blocked with a helpful message.

Configuration

Rules are defined in .cato.toml in your project root. See Cato docs.