@doingdev/opencode-claude-manager-plugin 0.1.35 → 0.1.43

package/dist/src/plugin/agent-hierarchy.js

@@ -0,0 +1,157 @@
+/**
+ * Agent hierarchy configuration for the CTO + Engineer Wrapper architecture.
+ *
+ * CTO (cto)                      — pure orchestrator, spawns engineers, reviews diffs, commits
+ * Engineer Plan (engineer_plan)   — manages a Claude Code session for read-only investigation
+ * Engineer Build (engineer_build) — manages a Claude Code session for implementation
+ * Claude Code session             — the underlying AI session (prompt only, no OpenCode agent)
+ */
+// ---------------------------------------------------------------------------
+// Agent names
+// ---------------------------------------------------------------------------
+export const AGENT_CTO = 'cto';
+export const AGENT_ENGINEER_PLAN = 'engineer_plan';
+export const AGENT_ENGINEER_BUILD = 'engineer_build';
+// ---------------------------------------------------------------------------
+// Tool IDs — grouped by domain
+// ---------------------------------------------------------------------------
+/** Shared engineer session tools (compact, clear, status, diagnostics) */
+const ENGINEER_SHARED_TOOL_IDS = [
+    'compact_context',
+    'clear_session',
+    'session_health',
+    'list_transcripts',
+    'list_history',
+];
+/** All engineer tools — mode-locked sends + shared session tools */
+const ENGINEER_TOOL_IDS = ['explore', 'implement', ...ENGINEER_SHARED_TOOL_IDS];
+/** Tools for the engineer_plan wrapper (plan-mode send + shared) */
+const ENGINEER_PLAN_TOOL_IDS = ['explore', ...ENGINEER_SHARED_TOOL_IDS];
+/** Tools for the engineer_build wrapper (build-mode send + shared) */
+const ENGINEER_BUILD_TOOL_IDS = ['implement', ...ENGINEER_SHARED_TOOL_IDS];
+/** Git tools — owned by CTO */
+const GIT_TOOL_IDS = ['git_diff', 'git_commit', 'git_reset'];
+/** Approval tools — owned by CTO */
+const APPROVAL_TOOL_IDS = ['approval_policy', 'approval_decisions', 'approval_update'];
+/** All restricted tool IDs (union of all domain groups) */
+export const ALL_RESTRICTED_TOOL_IDS = [
+    ...ENGINEER_TOOL_IDS,
+    ...GIT_TOOL_IDS,
+    ...APPROVAL_TOOL_IDS,
+];
+/** Tools the CTO can use directly (git + approval only, NO engineer tools) */
+const CTO_TOOL_IDS = [...GIT_TOOL_IDS, ...APPROVAL_TOOL_IDS];
+// ---------------------------------------------------------------------------
+// Shared read-only tool permissions
+// ---------------------------------------------------------------------------
+const READONLY_TOOLS = {
+    read: 'allow',
+    grep: 'allow',
+    glob: 'allow',
+    list: 'allow',
+    codesearch: 'allow',
+    webfetch: 'allow',
+    websearch: 'allow',
+    lsp: 'allow',
+    todowrite: 'allow',
+    todoread: 'allow',
+    question: 'allow',
+};
+// ---------------------------------------------------------------------------
+// Permission builders
+// ---------------------------------------------------------------------------
+/** CTO: pure orchestrator — read-only + git + approval + task (spawn engineers). No session tools. */
+function buildCtoPermissions() {
+    const denied = {};
+    for (const toolId of ALL_RESTRICTED_TOOL_IDS) {
+        denied[toolId] = 'deny';
+    }
+    const allowed = {};
+    for (const toolId of CTO_TOOL_IDS) {
+        allowed[toolId] = 'allow';
+    }
+    return {
+        '*': 'deny',
+        ...READONLY_TOOLS,
+        ...denied,
+        ...allowed,
+        task: {
+            '*': 'deny',
+            [AGENT_ENGINEER_PLAN]: 'allow',
+            [AGENT_ENGINEER_BUILD]: 'allow',
+        },
+    };
+}
+/** Engineer plan wrapper: read-only investigation + explore + shared session tools. */
+function buildEngineerPlanPermissions() {
+    const denied = {};
+    for (const toolId of ALL_RESTRICTED_TOOL_IDS) {
+        denied[toolId] = 'deny';
+    }
+    const allowed = {};
+    for (const toolId of ENGINEER_PLAN_TOOL_IDS) {
+        allowed[toolId] = 'allow';
+    }
+    return {
+        '*': 'deny',
+        ...READONLY_TOOLS,
+        ...denied,
+        ...allowed,
+    };
+}
+/** Engineer build wrapper: read-only investigation + implement + shared session tools. */
+function buildEngineerBuildPermissions() {
+    const denied = {};
+    for (const toolId of ALL_RESTRICTED_TOOL_IDS) {
+        denied[toolId] = 'deny';
+    }
+    const allowed = {};
+    for (const toolId of ENGINEER_BUILD_TOOL_IDS) {
+        allowed[toolId] = 'allow';
+    }
+    return {
+        '*': 'deny',
+        ...READONLY_TOOLS,
+        ...denied,
+        ...allowed,
+    };
+}
+// ---------------------------------------------------------------------------
+// Agent config builders
+// ---------------------------------------------------------------------------
+export function buildCtoAgentConfig(prompts) {
+    return {
+        description: 'Delegates by default with minimal spot-checks, spawns engineers for exploration and implementation, reviews diffs, and commits.',
+        mode: 'primary',
+        color: '#D97757',
+        permission: buildCtoPermissions(),
+        prompt: prompts.ctoSystemPrompt,
+    };
+}
+export function buildEngineerPlanAgentConfig(prompts) {
+    return {
+        description: 'Thin high-judgment wrapper that frames work quickly and dispatches to Claude Code in plan mode for read-only investigation.',
+        mode: 'subagent',
+        color: '#D97757',
+        permission: buildEngineerPlanPermissions(),
+        prompt: prompts.engineerPlanPrompt,
+    };
+}
+export function buildEngineerBuildAgentConfig(prompts) {
+    return {
+        description: 'Thin high-judgment wrapper that frames work quickly and dispatches to Claude Code in free mode for implementation.',
+        mode: 'subagent',
+        color: '#D97757',
+        permission: buildEngineerBuildPermissions(),
+        prompt: prompts.engineerBuildPrompt,
+    };
+}
+// ---------------------------------------------------------------------------
+// Global permission helper
+// ---------------------------------------------------------------------------
+/** Deny all restricted tools at the global level so only designated agents can use them. */
+export function denyRestrictedToolsGlobally(permissions) {
+    for (const toolId of ALL_RESTRICTED_TOOL_IDS) {
+        permissions[toolId] ??= 'deny';
+    }
+}

package/dist/src/plugin/claude-manager.plugin.d.ts

@@ -0,0 +1,2 @@
+import { type Plugin } from '@opencode-ai/plugin';
+export declare const ClaudeManagerPlugin: Plugin;