@cobusgreyling/loop-init 1.3.1 → 1.3.3

package/README.md

@@ -31,6 +31,13 @@ After scaffolding, always run `npx @cobusgreyling/loop-audit . --suggest` and ac
 
 L2 patterns (`ci-sweeper`, `dependency-sweeper`) also copy `minimal-fix` and `loop-verifier` templates when missing from the starter.
 
+Fix-capable patterns (`pr-babysitter`, `ci-sweeper`, `dependency-sweeper`, `post-merge-cleanup`) also get a **circuit breaker**:
+
+- `loop-guard` skill — logs each attempt to `loop-ledger.json` and runs [`loop-context`](../loop-context) `--check` before retrying
+- `loop-ledger.json` — seeded with the pattern's goal, its `pattern`/`level`, and an empty `attempts` array
+
+The ledger's `pattern`/`level` let `loop-guard` size the breaker's `--token-budget` from [`loop-cost`](../loop-cost)'s realistic per-run estimate instead of a hand-typed number. The breaker escalates (same error N× in a row, too many consecutive failures, token budget, or iteration cap) instead of looping in vain. Report-only patterns skip it.
+
 Every scaffold also creates:
 
 - `loop-budget.md` — pattern-specific daily caps and kill switch

package/dist/cli.js

@@ -3,6 +3,7 @@ import { spawn } from 'node:child_process';
 import { cp, mkdir, readFile, writeFile, access } from 'node:fs/promises';
 import path from 'node:path';
 import { fileURLToPath } from 'node:url';
+import { printContributorCta } from './contributor-cta.js';
 const __dirname = path.dirname(fileURLToPath(import.meta.url));
 const PACKAGE_ROOT = path.resolve(__dirname, '..');
 const MONOREPO_STARTERS = path.resolve(PACKAGE_ROOT, '../../starters');
@@ -142,6 +143,53 @@ async function copyL2Templates(pattern, tool, targetDir, templatesRoot, dryRun)
         await copyTemplateVerifier(templatesRoot, targetDir, tool, dryRun);
     }
 }
+/** Per-pattern goal seeded into loop-ledger.json for the circuit breaker. */
+const LEDGER_GOAL = {
+    'daily-triage': 'Keep the repo healthy and STATE.md current',
+    'pr-babysitter': 'Get the watched PR review-ready and green',
+    'ci-sweeper': 'Get failing CI back to green',
+    'dependency-sweeper': 'Land safe dependency updates',
+    'post-merge-cleanup': 'Clean up regressions from recent merges',
+    'changelog-drafter': 'Draft accurate release notes',
+    'issue-triage': 'Triage the open issue queue',
+};
+/**
+ * Readiness level seeded into loop-ledger.json so the loop-guard skill can
+ * resolve a realistic per-run token budget from `loop-cost --json` instead of a
+ * hand-typed number. Fix-capable loops draft changes with a verifier (a human
+ * still merges), so L2 is the right default; tune it in the ledger if a loop
+ * runs unattended (L3) or report-only (L1).
+ */
+const LEDGER_LEVEL = {
+    'daily-triage': 'L1',
+    'pr-babysitter': 'L2',
+    'ci-sweeper': 'L2',
+    'dependency-sweeper': 'L2',
+    'post-merge-cleanup': 'L2',
+    'changelog-drafter': 'L1',
+    'issue-triage': 'L1',
+};
+/**
+ * Fix-capable loops retry actions, so they need a circuit breaker: scaffold the
+ * loop-guard skill plus a seeded loop-ledger.json wired to `loop-context`.
+ * Report-only patterns (daily-triage, issue-triage, changelog-drafter) don't
+ * retry fixes, so they skip this to keep the scaffold minimal.
+ */
+async function scaffoldCircuitBreaker(pattern, tool, targetDir, templatesRoot, dryRun) {
+    if (!PATTERNS_NEEDING_FIX.has(pattern))
+        return;
+    await copyTemplateSkill(templatesRoot, 'SKILL.md.loop-guard', targetDir, tool, 'loop-guard', dryRun);
+    const ledgerPath = path.join(targetDir, 'loop-ledger.json');
+    if (await exists(ledgerPath))
+        return;
+    const seed = `${JSON.stringify({ goal: LEDGER_GOAL[pattern], pattern, level: LEDGER_LEVEL[pattern], attempts: [] }, null, 2)}\n`;
+    if (dryRun) {
+        console.log(`  would write: ${ledgerPath}`);
+        return;
+    }
+    await writeFile(ledgerPath, seed);
+    console.log('  created: loop-ledger.json (circuit breaker)');
+}
 function formatTokenCap(n) {
     if (n >= 1_000_000)
         return `${n / 1_000_000}M`;
@@ -361,7 +409,7 @@ Examples:
     const targetDir = path.resolve(target);
     const baseStarter = PATTERN_STARTERS[pattern];
     const suffix = TOOL_SUFFIX[tool];
-    const starterName = pattern === 'daily-triage' ? `minimal-loop${suffix}` : baseStarter;
+    const starterName = `${baseStarter}${suffix}`;
     const startersRoot = await resolveBundledOrMonorepo('starters');
     const templatesRoot = await resolveBundledOrMonorepo('templates');
     const starterRoot = path.join(startersRoot, starterName);
@@ -442,6 +490,7 @@ Examples:
         await copyFile(loopMd, path.join(targetDir, 'LOOP.md'), dryRun);
     }
     await copyL2Templates(pattern, tool, targetDir, templatesRoot, dryRun);
+    await scaffoldCircuitBreaker(pattern, tool, targetDir, templatesRoot, dryRun);
     await scaffoldObservability(pattern, tool, targetDir, templatesRoot, dryRun);
     await scaffoldConstraints(targetDir, templatesRoot, tool, dryRun);
     if (tool !== 'opencode' && !dryRun && !(await exists(path.join(targetDir, 'AGENTS.md')))) {
@@ -475,12 +524,17 @@ npm run lint
             console.log(`  npx @cobusgreyling/loop-audit ${auditArg} --suggest`);
         }
     }
+    if (PATTERNS_NEEDING_FIX.has(pattern)) {
+        console.log('');
+        console.log('Circuit breaker wired (loop-guard skill + loop-ledger.json):');
+        console.log('  npx @cobusgreyling/loop-context --check --ledger loop-ledger.json');
+    }
     console.log('');
     console.log(`First loop (${tool}):`);
     console.log(`  ${firstLoopCommand(pattern, tool)}`);
     console.log('');
     console.log(`Estimate cost: npx @cobusgreyling/loop-cost --pattern ${pattern} --level L1`);
-    console.log('');
+    printContributorCta();
 }
 async function readDirNames(dir) {
     const { readdir } = await import('node:fs/promises');

package/dist/contributor-cta.d.ts

@@ -0,0 +1,2 @@
+export declare const CONTRIBUTOR_QUICKSTART_URL = "https://github.com/cobusgreyling/loop-engineering/discussions/123";
+export declare function printContributorCta(): void;

package/dist/contributor-cta.js

@@ -0,0 +1,6 @@
+export const CONTRIBUTOR_QUICKSTART_URL = 'https://github.com/cobusgreyling/loop-engineering/discussions/123';
+export function printContributorCta() {
+    console.log('');
+    console.log('Contribute (~15 min tasks):');
+    console.log(`  ${CONTRIBUTOR_QUICKSTART_URL}`);
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cobusgreyling/loop-init",
-  "version": "1.3.1",
+  "version": "1.3.3",
   "description": "Scaffold loop engineering patterns and starters into any project. Supports Grok, Claude Code, Codex, Opencode and more. npx @cobusgreyling/loop-init . --pattern daily-triage --tool opencode",
   "type": "module",
   "bin": {

package/starters/README.md

@@ -21,11 +21,17 @@ npx @cobusgreyling/loop-init . -p pr-babysitter -t claude
 | Starter | Pattern | Tools | Readiness |
 |---------|---------|-------|-----------|
 | [pr-babysitter](./pr-babysitter/) | PR Babysitter | Grok, Claude, Codex | L2 assisted |
+| [pr-babysitter-opencode](./pr-babysitter-opencode/) | PR Babysitter | Opencode | L1 → L2 |
 | [ci-sweeper](./ci-sweeper/) | CI Sweeper | Grok, Claude, Codex | L2 assisted |
+| [ci-sweeper-opencode](./ci-sweeper-opencode/) | CI Sweeper | Opencode | L2 cautious |
 | [dependency-sweeper](./dependency-sweeper/) | Dependency Sweeper | Grok, Claude, Codex | L2 patch-only |
+| [dependency-sweeper-opencode](./dependency-sweeper-opencode/) | Dependency Sweeper | Opencode | L2 patch-only |
 | [post-merge-cleanup](./post-merge-cleanup/) | Post-Merge Cleanup | Grok, Claude, Codex | L1 → L2 |
+| [post-merge-cleanup-opencode](./post-merge-cleanup-opencode/) | Post-Merge Cleanup | Opencode | L1 → L2 |
 | [changelog-drafter](./changelog-drafter/) | Changelog Drafter | Grok, Claude, Codex | L1 draft → L2 |
+| [changelog-drafter-opencode](./changelog-drafter-opencode/) | Changelog Drafter | Opencode | L1 draft → L2 |
 | [issue-triage](./issue-triage/) | Issue Triage | Grok, Claude, Codex | L1 propose-only |
+| [issue-triage-opencode](./issue-triage-opencode/) | Issue Triage | Opencode | L1 propose-only |
 
 After copying:
 

package/starters/changelog-drafter-opencode/AGENTS.md

@@ -0,0 +1,15 @@
+# AGENTS.md — Changelog Drafter (Opencode)
+
+## Loop Mode
+- L1 report + draft for the first 1-2 weeks.
+- Read `changelog-drafter-state.md` before every run.
+- Human approves every draft before any publish or PR.
+
+## Safety
+- Never create tags, GitHub releases, or update CHANGELOG.md without explicit human approval.
+- Breaking changes and security items must be surfaced explicitly.
+- Draft PRs only when L2 is enabled — never auto-merge.
+
+## Verification
+- Verifier checks draft completeness: categories, date range, links.
+- Record draft status and human feedback in state.

package/starters/changelog-drafter-opencode/LOOP.md

@@ -0,0 +1,26 @@
+# Loop Configuration — Changelog Drafter (Opencode)
+
+## Active Loops
+
+| Pattern | Cadence | Status | Command |
+|---------|---------|--------|---------|
+| Changelog Drafter | 1d or on release prep | L1 draft-only | `opencode run "Run changelog-scan"` via cron (after merges settle) |
+
+## Human Gates
+- Breaking changes always human review.
+- Security notes / CVEs human must approve wording.
+- No tags, no PRs, no publishes without explicit approval.
+- First 3 releases: human approves full draft.
+
+## Budget
+- Max sub-agent spawns per run: 2 (scanner + drafter).
+- Prefer running after merges settle (evening).
+
+## Output Convention
+- Draft: `RELEASE_NOTES_DRAFT.md` at repo root.
+- State: `changelog-drafter-state.md`.
+
+## Links
+- Pattern: [changelog-drafter](../../patterns/changelog-drafter.md)
+- Example: [examples/opencode/changelog-drafter.md](../../examples/opencode/changelog-drafter.md)
+- Safety: [docs/safety.md](../../docs/safety.md)

package/starters/changelog-drafter-opencode/README.md

@@ -0,0 +1,44 @@
+# Changelog Drafter — Opencode Starter
+
+Clone-and-run scaffold for the **Changelog Drafter** pattern with opencode. Scan merged PRs and commits, produce categorized release notes.
+
+## Quick Start
+
+```bash
+npx @cobusgreyling/loop-init . --pattern changelog-drafter --tool opencode
+```
+
+Or copy manually:
+
+```bash
+cp -r starters/changelog-drafter-opencode/skills .
+cp starters/changelog-drafter-opencode/AGENTS.md .
+cp starters/changelog-drafter-opencode/LOOP.md .
+cp starters/changelog-drafter-opencode/changelog-drafter-state.md.example changelog-drafter-state.md
+cp starters/changelog-drafter-opencode/opencode.json.example opencode.json
+```
+
+Start (L1 report + draft, week 1):
+
+```bash
+opencode run \
+  "Run skills/changelog-scan/SKILL.md. Scan merges since last tag (or last 7 days). Produce categorized draft in RELEASE_NOTES_DRAFT.md. Update state. Do not publish or create PRs." \
+  --title "Changelog drafter"
+```
+
+## What's Included
+
+| File | Purpose |
+|------|---------|
+| `changelog-drafter-state.md.example` | State spine (last release, draft status) |
+| `skills/changelog-scan/SKILL.md` | Merge scan and categorization skill |
+| `AGENTS.md` | Always-on safety rules |
+| `LOOP.md` | Cadence, gates, budget |
+| `opencode.json.example` | Named agent definitions |
+
+## Next Steps
+
+- [patterns/changelog-drafter.md](../../patterns/changelog-drafter.md)
+- [examples/opencode/changelog-drafter.md](../../examples/opencode/changelog-drafter.md)
+- [docs/loop-design-checklist.md](../../docs/loop-design-checklist.md)
+- [stories/changelog-drafter-week-one.md](../../stories/changelog-drafter-week-one.md)

package/starters/changelog-drafter-opencode/changelog-drafter-state.md.example

@@ -0,0 +1,10 @@
+# Changelog Drafter State
+Last run: 2026-06-20 09:00 UTC
+Last tag scanned: v0.0.0
+Draft status: none
+Human feedback: pending
+
+## Scan Window
+- From: <!-- last tag or date -->
+- To: <!-- current -->
+- Merges found: 0

package/starters/changelog-drafter-opencode/opencode.json.example

@@ -0,0 +1,35 @@
+{
+  "$schema": "https://opencode.ai/config.json",
+  "agent": {
+    "changelog-scan": {
+      "name": "changelog-scan",
+      "description": "Changelog drafting loop. Reads changelog-drafter-state.md, scans merges, and produces categorized release notes.",
+      "mode": "primary",
+      "prompt": "Read AGENTS.md, LOOP.md, changelog-drafter-state.md, and skills/changelog-scan/SKILL.md. Scan merges since last tag. Produce categorized draft in RELEASE_NOTES_DRAFT.md. Never publish or tag without human approval.",
+      "permission": {
+        "bash": "ask",
+        "edit": "ask"
+      }
+    },
+    "implementer": {
+      "name": "implementer",
+      "description": "L2 implementer for creating changelog PRs.",
+      "mode": "subagent",
+      "prompt": "Commit the approved release notes to a new branch and open a draft PR. Flag breaking changes and security items explicitly in the PR body. Do not merge.",
+      "permission": {
+        "bash": "ask",
+        "edit": "ask"
+      }
+    },
+    "verifier": {
+      "name": "verifier",
+      "description": "Checker agent for draft release notes. APPROVE or REJECT only.",
+      "mode": "subagent",
+      "prompt": "Review the draft notes for completeness, categorization, and correct date range. Flag missing sections. Do not edit. APPROVE or REJECT.",
+      "permission": {
+        "bash": "ask",
+        "edit": "deny"
+      }
+    }
+  }
+}

package/starters/changelog-drafter-opencode/skills/changelog-scan/SKILL.md

@@ -0,0 +1,38 @@
+---
+name: changelog-scan
+description: >
+  Scan merged PRs and commits since a given reference, extract
+  titles, labels, types, and signals. Produces structured input
+  for release notes drafting.
+user_invocable: true
+---
+
+# Changelog Scan Skill
+
+You are a changelog drafting agent. Scan merges and produce release notes.
+
+## Scan Sources
+
+- `git log --merges --oneline <last-tag>..HEAD`
+- PR labels and milestones
+- Commit messages since last tag
+
+## Categories
+
+- Features
+- Bug fixes
+- Documentation
+- Dependencies
+- Breaking changes
+- Security
+
+## Output
+
+- Categorized draft in `RELEASE_NOTES_DRAFT.md`
+- Update `changelog-drafter-state.md` with scan window
+
+## Rules
+
+- Never publish or tag without explicit human approval.
+- Surface breaking changes and security items explicitly.
+- L1: draft only — no PRs, no tags.

package/starters/ci-sweeper-opencode/AGENTS.md

@@ -0,0 +1,17 @@
+# AGENTS.md — CI Sweeper (Opencode)
+
+## Loop Mode
+- CI sweeper is L2 from week one (action-oriented — CIs are urgent).
+- Read `ci-sweeper-state.md` before every run.
+- Classify failures before attempting any fix.
+
+## Safety
+- Always dispatch into a git worktree per attempt.
+- Infra / security / payments test failures: do not auto-fix; flag and stop.
+- Max 3 fix attempts per item; escalate after.
+- Enforce budget cap from `LOOP.md`.
+
+## Verification
+- Verifier must run tests after implementer.
+- Record attempt count in `ci-sweeper-state.md`.
+- No auto-merge without verifier approval.

package/starters/ci-sweeper-opencode/LOOP.md

@@ -0,0 +1,26 @@
+# Loop Configuration — CI Sweeper (Opencode)
+
+## Active Loops
+
+| Pattern | Cadence | Status | Command |
+|---------|---------|--------|---------|
+| CI Sweeper | 5-15m | L2 cautious | `opencode run "Run ci-triage" --agent loop-triage` via cron/systemd |
+
+## Human Gates
+- Infra / security / payments test failures: do not auto-fix.
+- Max 3 fix attempts per item; escalate after.
+- No auto-merge without verifier pass.
+
+## Worktrees
+- Always dispatch into a git worktree per attempt.
+- One worktree per fix; discard after REJECT.
+
+## Budget
+- Max sub-agent spawns per run: 3.
+- Max auto-PRs per day: 5.
+- Early exit if no failures found.
+
+## Links
+- Pattern: [ci-sweeper](../../patterns/ci-sweeper.md)
+- Example: [examples/opencode/ci-sweeper.md](../../examples/opencode/ci-sweeper.md)
+- Safety: [docs/safety.md](../../docs/safety.md)

package/starters/ci-sweeper-opencode/README.md

@@ -0,0 +1,43 @@
+# CI Sweeper — Opencode Starter
+
+Clone-and-run scaffold for the **CI Sweeper** pattern with opencode. React to failing CI with minimal fixes at short cadences.
+
+## Quick Start
+
+```bash
+npx @cobusgreyling/loop-init . --pattern ci-sweeper --tool opencode
+```
+
+Or copy manually:
+
+```bash
+cp -r starters/ci-sweeper-opencode/skills .
+cp starters/ci-sweeper-opencode/AGENTS.md .
+cp starters/ci-sweeper-opencode/LOOP.md .
+cp starters/ci-sweeper-opencode/ci-sweeper-state.md.example ci-sweeper-state.md
+cp starters/ci-sweeper-opencode/opencode.json.example opencode.json
+```
+
+Start (L2 cautious — CI sweeper is action-oriented from week one):
+
+```bash
+opencode run \
+  "Run skills/ci-triage/SKILL.md. Classify each failing check. For clear single-file regressions, create a worktree and apply a minimal fix with verifier. Update ci-sweeper-state.md. Infra and security failures: escalate." \
+  --title "CI sweeper"
+```
+
+## What's Included
+
+| File | Purpose |
+|------|---------|
+| `ci-sweeper-state.md.example` | State spine (in-flight CI failures) |
+| `skills/ci-triage/SKILL.md` | CI-focused triage skill |
+| `AGENTS.md` | Always-on safety rules |
+| `LOOP.md` | Cadence, gates, budget |
+| `opencode.json.example` | Named agent definitions |
+
+## Next Steps
+
+- [patterns/ci-sweeper.md](../../patterns/ci-sweeper.md)
+- [examples/opencode/ci-sweeper.md](../../examples/opencode/ci-sweeper.md)
+- [docs/loop-design-checklist.md](../../docs/loop-design-checklist.md)

package/starters/ci-sweeper-opencode/ci-sweeper-state.md.example

@@ -0,0 +1,10 @@
+# CI Sweeper State
+Last run: 2026-06-20 09:00 UTC
+Active failures: 0
+Attempt counts: {}
+
+## Failures
+- <!-- Add failing checks here -->
+
+## Escalated
+- <!-- Infra/security failures escalated to human -->

package/starters/ci-sweeper-opencode/opencode.json.example

@@ -0,0 +1,35 @@
+{
+  "$schema": "https://opencode.ai/config.json",
+  "agent": {
+    "ci-triage": {
+      "name": "ci-triage",
+      "description": "CI-focused triage and fix loop. Reads ci-sweeper-state.md, classifies CI failures, and applies minimal fixes in worktrees with verifier.",
+      "mode": "primary",
+      "prompt": "Read AGENTS.md, LOOP.md, ci-sweeper-state.md, and skills/ci-triage/SKILL.md. Classify each failing check. For clear regressions: worktree + implementer + verifier. Escalate infra and security failures.",
+      "permission": {
+        "bash": "ask",
+        "edit": "ask"
+      }
+    },
+    "implementer": {
+      "name": "implementer",
+      "description": "L2 implementer for CI-fix patches inside an isolated worktree.",
+      "mode": "subagent",
+      "prompt": "Implement the minimal fix for the identified CI failure inside the supplied worktree. Run tests. Output the diff path. Max 3 attempts per item.",
+      "permission": {
+        "bash": "ask",
+        "edit": "ask"
+      }
+    },
+    "verifier": {
+      "name": "verifier",
+      "description": "Checker agent for CI fix diffs. APPROVE or REJECT only.",
+      "mode": "subagent",
+      "prompt": "Review the supplied CI-fix diff. Verify tests pass. Do not edit files. APPROVE or REJECT with evidence.",
+      "permission": {
+        "bash": "ask",
+        "edit": "deny"
+      }
+    }
+  }
+}

package/starters/ci-sweeper-opencode/skills/ci-triage/SKILL.md

@@ -0,0 +1,32 @@
+---
+name: ci-triage
+description: >
+  Classify CI failures — distinguish clear regressions from infra flakes
+  and security-test failures. Produces structured failure reports.
+user_invocable: true
+---
+
+# CI Triage Skill
+
+You are a CI triage agent. Classify each failing check and decide the next action.
+
+## Classification
+
+- **Clear regression**: single-file, obvious root cause (candidate for auto-fix)
+- **Infra flake**: network timeout, runner issue, dependency unavailable
+- **Security test failure**: never auto-fix; escalate to human
+- **Non-deterministic**: retry once before classifying
+
+## Output
+
+Update `ci-sweeper-state.md` with:
+
+- List of failures by category
+- Suggested next action per item
+- Attempt count per item
+
+## Rules
+
+- Infra and security failures always escalate.
+- Max 3 fix attempts per item.
+- Worktree isolation required for any code change.

package/starters/dependency-sweeper-opencode/AGENTS.md

@@ -0,0 +1,15 @@
+# AGENTS.md — Dependency Sweeper (Opencode)
+
+## Loop Mode
+- L2 assisted from week one (patch-only with strong verifier gates).
+- Read `dependency-sweeper-state.md` before every run.
+
+## Safety
+- Patch-only by default. Majors and breaking changes escalate to human.
+- Maintain denylist in state file — never touch those packages.
+- One worktree per update attempt.
+- Max 3 fix attempts per run; max 5 auto-PRs per day.
+
+## Verification
+- Verifier must run `npm ci && npm test` (or equivalent).
+- Record attempt count and test evidence in state.

package/starters/dependency-sweeper-opencode/LOOP.md

@@ -0,0 +1,27 @@
+# Loop Configuration — Dependency Sweeper (Opencode)
+
+## Active Loops
+
+| Pattern | Cadence | Status | Command |
+|---------|---------|--------|---------|
+| Dependency Sweeper | 6h | L2 patch-only | `opencode run "Run dependency-triage" --agent loop-triage` via cron |
+
+## Human Gates
+- Major version bumps always human.
+- High-severity CVE requiring breaking change: human.
+- Denylist packages (edit in state) never auto-touched.
+- No auto-merge without verifier pass.
+
+## Worktrees
+- One worktree per package update attempt.
+- Discard on REJECT or human escalation.
+
+## Budget
+- Max sub-agent spawns per run: 3.
+- Max auto-PRs per day: 5.
+- Pause if token budget exceeded.
+
+## Links
+- Pattern: [dependency-sweeper](../../patterns/dependency-sweeper.md)
+- Example: [examples/opencode/dependency-sweeper.md](../../examples/opencode/dependency-sweeper.md)
+- Safety: [docs/safety.md](../../docs/safety.md)

package/starters/dependency-sweeper-opencode/README.md

@@ -0,0 +1,44 @@
+# Dependency Sweeper — Opencode Starter
+
+Clone-and-run scaffold for the **Dependency Sweeper** pattern with opencode. Discover, safely apply, and verify dependency updates.
+
+## Quick Start
+
+```bash
+npx @cobusgreyling/loop-init . --pattern dependency-sweeper --tool opencode
+```
+
+Or copy manually:
+
+```bash
+cp -r starters/dependency-sweeper-opencode/skills .
+cp starters/dependency-sweeper-opencode/AGENTS.md .
+cp starters/dependency-sweeper-opencode/LOOP.md .
+cp starters/dependency-sweeper-opencode/dependency-sweeper-state.md.example dependency-sweeper-state.md
+cp starters/dependency-sweeper-opencode/opencode.json.example opencode.json
+```
+
+Start (L2 assisted, patch-only):
+
+```bash
+opencode run \
+  "Run skills/dependency-triage/SKILL.md. Scan package manifests for outdated and vulnerable deps. Patch-only auto-fix in worktree with verifier. Escalate majors, high-sev CVEs, and denylist packages. Update state." \
+  --title "Dependency sweeper"
+```
+
+## What's Included
+
+| File | Purpose |
+|------|---------|
+| `dependency-sweeper-state.md.example` | State spine (in-flight updates, denylist) |
+| `skills/dependency-triage/SKILL.md` | Dependency-focused triage skill |
+| `AGENTS.md` | Always-on safety rules |
+| `LOOP.md` | Cadence, gates, budget |
+| `opencode.json.example` | Named agent definitions |
+
+## Next Steps
+
+- [patterns/dependency-sweeper.md](../../patterns/dependency-sweeper.md)
+- [examples/opencode/dependency-sweeper.md](../../examples/opencode/dependency-sweeper.md)
+- [docs/loop-design-checklist.md](../../docs/loop-design-checklist.md)
+- [stories/dependency-sweeper-week-one.md](../../stories/dependency-sweeper-week-one.md)

package/starters/dependency-sweeper-opencode/dependency-sweeper-state.md.example

@@ -0,0 +1,11 @@
+# Dependency Sweeper State
+Last run: 2026-06-20 09:00 UTC
+Outdated packages: 0
+Attempt counts: {}
+Auto-PRs today: 0
+
+## Denylist (never touch)
+- <!-- Add packages the loop must never update -->
+
+## Escalated to Human
+- <!-- Major bumps and high-sev CVEs -->

package/starters/dependency-sweeper-opencode/opencode.json.example

@@ -0,0 +1,35 @@
+{
+  "$schema": "https://opencode.ai/config.json",
+  "agent": {
+    "dependency-triage": {
+      "name": "dependency-triage",
+      "description": "Dependency-focused triage loop. Reads dependency-sweeper-state.md, scans manifests, and applies patch-only upgrades with verifier.",
+      "mode": "primary",
+      "prompt": "Read AGENTS.md, LOOP.md, dependency-sweeper-state.md, and skills/dependency-triage/SKILL.md. Scan manifests for outdated and vulnerable deps. Patch-only auto-fix in worktree. Escalate majors and denylisted packages.",
+      "permission": {
+        "bash": "ask",
+        "edit": "ask"
+      }
+    },
+    "implementer": {
+      "name": "implementer",
+      "description": "L2 implementer for patch-only dependency upgrades in a worktree.",
+      "mode": "subagent",
+      "prompt": "Apply the identified patch-only upgrade inside the supplied worktree. Run npm ci && npm test. Never touch denylisted packages. Output the diff.",
+      "permission": {
+        "bash": "ask",
+        "edit": "ask"
+      }
+    },
+    "verifier": {
+      "name": "verifier",
+      "description": "Checker agent for dependency upgrade diffs. APPROVE or REJECT only.",
+      "mode": "subagent",
+      "prompt": "Verify the dependency patch passes tests and touches no denylisted packages. Do not edit files. APPROVE or REJECT with evidence.",
+      "permission": {
+        "bash": "ask",
+        "edit": "deny"
+      }
+    }
+  }
+}