企业部署与治理

// opencode.json
{
  "auth": {
    "provider": "oauth",
    "oauth": {
      "clientId": "opencode-client",
      "clientSecret": "${OAUTH_CLIENT_SECRET}",
      "authorizeUrl": "https://sso.company.com/oauth/authorize",
      "tokenUrl": "https://sso.company.com/oauth/token",
      "userInfoUrl": "https://sso.company.com/oauth/userinfo",
      "scopes": ["openid", "profile", "email"]
    }
  }
}

{
  "auth": {
    "provider": "ldap",
    "ldap": {
      "url": "ldap://ldap.company.com:389",
      "bindDN": "cn=admin,dc=company,dc=com",
      "bindPassword": "${LDAP_PASSWORD}",
      "userBase": "ou=users,dc=company,dc=com",
      "groupBase": "ou=groups,dc=company,dc=com"
    }
  }
}

{
  "rbac": {
    "roles": {
      "developer": {
        "tools": ["read", "edit", "bash"],
        "models": ["anthropic/*", "openai/*"],
        "mcp": ["fs", "github"],
        "permissions": {
          "bash": "ask",
          "edit": "allow"
        }
      },
      "reviewer": {
        "tools": ["read"],
        "models": ["anthropic/claude-sonnet-4-5"],
        "mcp": [],
        "permissions": {
          "edit": "deny",
          "bash": "deny"
        }
      }
    },
    "groups": {
      "frontend-team": ["developer"],
      "security-team": ["reviewer", "developer"]
    }
  }
}

{
  "audit": {
    "enabled": true,
    "level": "detailed",
    "destination": {
      "type": "webhook",
      "url": "https://logs.company.com/opencode",
      "headers": {
        "Authorization": "Bearer ${LOG_TOKEN}"
      }
    },
    "include": [
      "tool_calls",
      "file_edits",
      "commands",
      "model_changes",
      "auth_events"
    ],
    "exclude": [
      "health_checks"
    ],
    "retention": "90d"
  }
}

{
  "timestamp": "2026-06-18T10:30:00Z",
  "user": "[email protected]",
  "action": "tool_call",
  "tool": "edit",
  "details": {
    "file": "src/auth.ts",
    "lines_added": 45,
    "lines_removed": 12
  },
  "session": "sess_abc123",
  "ip": "10.0.1.50",
  "model": "anthropic/claude-sonnet-4-5"
}

company-opencode/
├── README.md
├── skills/
│   ├── code-review/
│   │   └── SKILL.md
│   ├── security-check/
│   │   └── SKILL.md
│   └── onboarding/
│       └── SKILL.md
├── themes/
│   └── company-dark/
│       └── theme.json
└── rules/
    ├── typescript.md
    ├── python.md
    └── security.md

{
  "quotas": {
    "per_user_daily": {
      "tokens": 100000,
      "cost_usd": 5.0,
      "requests": 500
    },
    "per_project_monthly": {
      "tokens": 10000000,
      "cost_usd": 500.0
    }
  },
  "alerts": {
    "token_threshold": 0.8,
    "cost_threshold": 0.9,
    "channels": ["email", "slack", "webhook"]
  }
}