since opencode acted like it had taken over my computer, i switched to cline, a vscode extension that makes me feel safer. i use it with the deepseek api (it's basically free, you'd lose your mind if you saw what you can do for a dollar), and it only acts as an agent within the workspace you've opened, asking your permission every single time, like, should i change this? and if you review the changes it makes and approve them, it edits the file. i think this is a pretty good thing, because when you're building a project with an agent it's impossible not to lose the thread.
if you switch to another workspace, you have to activate the cline extension again. opencode, on the other hand, on the very first prompt had dumped the project into the computer's root. i don't have much knowledge on these matters (security), but it's unnerving.