[FEATURE]: macOS managed preferences support for enterprise MDM deployments #19158

Feature hasn't been suggested before.

• I have verified this feature I'm about to request hasn't been suggested before.

Describe the enhancement you want to request

OpenCode has managed config directories (/Library/Application Support/opencode/ on macOS) which works, but it requires deploying scripts (Jamf shell scripts, Fleet scripts) that write JSON files to disk. This is fragile and non-standard for macOS enterprise deployments.

The native macOS way to enforce application settings is via managed preferences deployed through .mobileconfig profiles (Jamf, Kandji, Mosyle, etc). Claude Code already supports this via the com.anthropic.claudecode preference domain.

Proposal: Add support for reading macOS managed preferences from the ai.opencode.managed preference domain. When a .mobileconfig is deployed via MDM, OpenCode reads the settings from /Library/Managed Preferences/ and applies them at the highest priority tier (above file-based managed config).

This lets admins deploy a single .mobileconfig through their existing MDM instead of maintaining shell scripts. The settings are truly managed — users can't modify /Library/Managed Preferences/ without root.