feat: add macOS managed preferences support for enterprise MDM deployments

[lennyvaknine43]

Issue for this PR

Closes #19158

Type of change

• Bug fix
• New feature
• Refactor / code improvement
• Documentation

What does this PR do?

Adds support for reading macOS managed preferences deployed via .mobileconfig / MDM (Jamf, Kandji, FleetDM). On macOS, readManagedPreferences() checks for a plist at /Library/Managed Preferences/ under the ai.opencode.managed preference domain, converts it to JSON via plutil, strips MDM metadata keys (PayloadUUID, _manualProfile, etc.), and merges the result at the highest priority tier — above file-based managed config, project config, and user config.

This is the standard macOS mechanism for enterprise config enforcement (same pattern as Claude Code's com.anthropic.claudecode domain). The plist is root-owned and only writable by MDM, so users cannot override it. Every existing opencode.json key works as a plist key — no schema changes needed.

The changes are ~35 lines in config.ts, 2 lines in preload.ts for test isolation, and 5 tests covering override behavior and graceful missing-plist handling.

Available settings reference

Every key from opencode.json works as a managed preference key. The plist structure maps 1:1 to the JSON config:

Key	Type	Values / Description
share	string	"manual" | "auto" | "disabled"
autoupdate	boolean | string	true | false | "notify"
model	string	"provider/model" (e.g. "anthropic/claude-sonnet-4-5")
small_model	string	"provider/model" — model for lightweight tasks
default_agent	string	Name of default agent ("build", "plan", or custom)
username	string	Display name in conversations
enabled_providers	string[]	When set, ONLY these providers are loaded
disabled_providers	string[]	Providers to exclude from auto-loading
snapshot	boolean	Enable/disable filesystem snapshot tracking
server.hostname	string	Bind address (e.g. "127.0.0.1")
server.port	integer	Port number
server.mdns	boolean	Enable/disable mDNS service discovery
server.cors	string[]	Additional CORS domains
permission.*	string	Global default: "ask" | "allow" | "deny"
permission.read	string | object	"ask" | "allow" | "deny" or { "pattern": "action" }
permission.edit	string | object	Same as read
permission.bash	string | object	Same — object form allows per-command rules
permission.glob	string	"ask" | "allow" | "deny"
permission.grep	string	"ask" | "allow" | "deny"
permission.list	string	"ask" | "allow" | "deny"
permission.task	string | object	"ask" | "allow" | "deny"
permission.skill	string | object	"ask" | "allow" | "deny"
permission.webfetch	string	"ask" | "allow" | "deny"
permission.websearch	string	"ask" | "allow" | "deny"
permission.todowrite	string	"ask" | "allow" | "deny"
permission.external_directory	string | object	"ask" | "allow" | "deny"
permission.doom_loop	string	"ask" | "allow" | "deny"
permission.lsp	string | object	"ask" | "allow" | "deny"
permission.<path-glob>	string	Top-level path deny (e.g. "~/.ssh/*": "deny")
compaction.auto	boolean	Enable auto-compaction when context is full
compaction.prune	boolean	Enable pruning of old tool outputs
mcp.<name>.type	string	"local" | "remote"
mcp.<name>.url	string	Remote MCP server URL
mcp.<name>.command	string[]	Local MCP server command
mcp.<name>.enabled	boolean	Enable/disable the MCP server
instructions	string[]	Additional instruction file paths
plugin	string[]	Plugin specifiers

Usage guide for MDM admins

1. Create a .mobileconfig

The plist keys map directly to opencode.json fields:

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN"
  "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
  <key>PayloadContent</key>
  <array>
    <dict>
      <key>PayloadType</key>
      <string>ai.opencode.managed</string>
      <key>PayloadIdentifier</key>
      <string>com.example.opencode.config</string>
      <key>PayloadUUID</key>
      <string>GENERATE-YOUR-OWN-UUID</string>
      <key>PayloadVersion</key>
      <integer>1</integer>
      <key>share</key>
      <string>disabled</string>
      <key>server</key>
      <dict>
        <key>hostname</key>
        <string>127.0.0.1</string>
      </dict>
      <key>permission</key>
      <dict>
        <key>*</key>
        <string>ask</string>
        <key>bash</key>
        <dict>
          <key>*</key>
          <string>ask</string>
          <key>rm -rf *</key>
          <string>deny</string>
        </dict>
      </dict>
    </dict>
  </array>
  <key>PayloadType</key>
  <string>Configuration</string>
  <key>PayloadIdentifier</key>
  <string>com.example.opencode</string>
  <key>PayloadUUID</key>
  <string>GENERATE-YOUR-OWN-UUID</string>
  <key>PayloadVersion</key>
  <integer>1</integer>
</dict>
</plist>

2. Deploy via MDM

Jamf Pro: Computers > Configuration Profiles > Upload > scope to target devices

FleetDM: Add the .mobileconfig under mdm.macos_settings.custom_settings and run fleetctl apply

3. Verify on a device

Double-click the .mobileconfig to install locally for testing (shows in System Settings > Privacy & Security > Profiles), then:

plutil -p "/Library/Managed Preferences/$(whoami)/ai.opencode.managed.plist"
opencode debug config

How did you verify your code works?

• Deployed a binary plist to /Library/Managed Preferences/ on a Jamf-enrolled macOS device
• Verified bun dev debug config resolved all managed settings correctly
• Set conflicting values in ~/.config/opencode/opencode.json (e.g. share: auto, bash: allow) and confirmed MDM settings override them
• All 71 config tests pass (66 existing + 5 new), 0 type errors

Screenshots / recordings

N/A — no UI changes.

Checklist

• I have tested my changes locally
• I have not included unrelated changes in this PR

[github-actions]

Thanks for updating your PR! It now meets our contributing guidelines. 👍

[erran]

I think this branch should be removed to avoid users setting this at runtime. Instead existsSync and Process.run could be mocked.

[lennyvaknine43]

yep you're right, removed it. the parsing/stripping logic is in a separate exported parseManagedPlist() function that the tests call directly with JSON strings — no env var branches, no mocking

[rekram1-node]

Dax said we can ship this for now but I think we are going to have a better approach that should work better across the board later on