$ show athal7/opencode-devcontainers
This is an OpenCode plugin that provides isolated branch workspaces using devcontainers or git worktrees. It enables developers to work on multiple branches simultaneously with full container isolation (devcontainers) or lightweight filesystem isolation (worktrees). The plugin manages the entire lifecycle: creating clones or worktrees, allocating unique ports from a configurable range, copying gitignored secrets, and intercepting bash commands to run inside the target container or worktree directory. It also offers session state persistence, background job tracking for non-blocking container starts, and unified workspace management with cleanup of stale workspaces. The codebase is well-architected with clean separation into core modules (clones, config, devcontainer, git, jobs, paths, ports, worktree, workspaces) and a main plugin entry point that registers tools and bash interception hooks. It uses Node.js built-in test runner with comprehensive unit and integration tests. The plugin demonstrates strong engineering practices including file-based locking for concurrency, atomic writes, security-conscious command construction (shell quoting, Docker filter sanitization), and support for both Docker and Podman runtimes.
The LLM identified 4 files worth highlighting for reuse:
A self-contained module that validates values used in Docker `--filter` label expressions, rejecting control characters that could corrupt CLI parsing. Demonstrates a reusable security pattern for any Node.js code that constructs Docker CLI arguments with user-controlled values.
Provides configurable path constants using getters that respect environment variable overrides, an MD5-based path ID function for consistent workspace identification, and an atomic directory initialization routine. Can be extracted into any project needing environment-overridable path resolution with idempotent setup.
Implements atomic port allocation with file-based locking (using mkdir as a lock primitive) to prevent race conditions in concurrent environments. Includes port availability checking, assignment within a configurable range, and automatic release. The lock abstraction and port allocation pattern are reusable across any multi-process Node.js application.
Contains a robust shellQuote function that safely escapes shell arguments using single quotes, preventing command injection. Also includes session caching, workspace resolution across repos, and a command classification system (host vs container). The shellQuote function is a standalone, copy-paste ready utility for any Node.js project that constructs shell commands.