@hiai-gg/hiai-opencode 0.1.1 → 0.1.3

package/src/shared/AGENTS.md

@@ -1,54 +1,54 @@
-# src/shared/ — 100+ Utility Files
-
-**Generated:** 2026-04-11
-
-## OVERVIEW
-
-Cross-cutting utilities used throughout the plugin. Barrel-exported from `index.ts`. Logger writes to `/tmp/oh-my-opencode.log`.
-
-## CATEGORY MAP
-
-| Category | Files | Key Exports |
-|----------|-------|-------------|
-| **Model Resolution** | ~22 | `resolveModel()`, `checkModelAvailability()`, `AGENT_MODEL_REQUIREMENTS` |
-| **Tmux Integration** | 11 | `createTmuxSession()`, `spawnPane()`, `closePane()`, server health |
-| **Configuration & Paths** | 10 | `resolveOpenCodeConfigDir()`, `getDataPath()`, `parseJSONC()` |
-| **Session Management** | 8 | `SessionCursor`, `trackInjectedPath()`, `SessionToolsStore` |
-| **Git Worktree** | 7 | `parseGitStatusPorcelain()`, `collectGitDiffStats()`, `formatFileChanges()` |
-| **Command Execution** | 7 | `executeCommand()`, `executeHookCommand()`, embedded command registry |
-| **Migration** | 6 | `migrateConfigFile()`, AGENT_NAME_MAP, HOOK_NAME_MAP, MODEL_VERSION_MAP |
-| **String & Tool Utils** | 6 | `toSnakeCase()`, `normalizeToolName()`, `parseFrontmatter()` |
-| **Agent Configuration** | 5 | `getAgentVariant()`, `AGENT_DISPLAY_NAMES`, `AGENT_TOOL_RESTRICTIONS` |
-| **OpenCode Integration** | 5 | `injectServerAuth()`, `detectExternalPlugins()`, client accessors |
-| **Type Helpers** | 4 | `deepMerge()`, `DynamicTruncator`, `matchPattern()`, `isRecord()` |
-| **Misc** | 8 | `log()`, `readFile()`, `extractZip()`, `downloadBinary()`, `findAvailablePort()` |
-
-## MODEL RESOLUTION PIPELINE
-
-```
-resolveModel(input)
-  1. Override: UI-selected model (primary agents only)
-  2. Category default: From category config
-  3. Provider fallback: AGENT_MODEL_REQUIREMENTS chains
-  4. System default: Ultimate fallback
-```
-
-Key files: `model-resolver.ts` (entry), `model-resolution-pipeline.ts` (orchestration), `model-requirements.ts` (fallback chains), `model-availability.ts` (fuzzy matching).
-
-## MIGRATION SYSTEM
-
-Automatically transforms legacy config on load:
-- `agent-names.ts`: Old agent names → new (e.g., `junior` → `sub`)
-- `hook-names.ts`: Old hook names → new
-- `model-versions.ts`: Old model IDs → current
-- `agent-category.ts`: Legacy agent configs → category system
-
-## MOST IMPORTED
-
-| Utility | Import Count | Purpose |
-|---------|-------------|---------|
-| `logger.ts` | 62 | `/tmp/oh-my-opencode.log` |
-| `data-path.ts` | 11 | XDG storage resolution |
-| `model-requirements.ts` | 11 | Agent fallback chains |
-| `system-directive.ts` | 11 | System message filtering |
-| `frontmatter.ts` | 10 | YAML metadata extraction |
+# src/shared/ — 100+ Utility Files
+
+**Generated:** 2026-04-11
+
+## OVERVIEW
+
+Cross-cutting utilities used throughout the plugin. Barrel-exported from `index.ts`. Logger writes to `/tmp/oh-my-opencode.log`.
+
+## CATEGORY MAP
+
+| Category | Files | Key Exports |
+|----------|-------|-------------|
+| **Model Resolution** | ~22 | `resolveModel()`, `checkModelAvailability()`, `AGENT_MODEL_REQUIREMENTS` |
+| **Tmux Integration** | 11 | `createTmuxSession()`, `spawnPane()`, `closePane()`, server health |
+| **Configuration & Paths** | 10 | `resolveOpenCodeConfigDir()`, `getDataPath()`, `parseJSONC()` |
+| **Session Management** | 8 | `SessionCursor`, `trackInjectedPath()`, `SessionToolsStore` |
+| **Git Worktree** | 7 | `parseGitStatusPorcelain()`, `collectGitDiffStats()`, `formatFileChanges()` |
+| **Command Execution** | 7 | `executeCommand()`, `executeHookCommand()`, embedded command registry |
+| **Migration** | 6 | `migrateConfigFile()`, AGENT_NAME_MAP, HOOK_NAME_MAP, MODEL_VERSION_MAP |
+| **String & Tool Utils** | 6 | `toSnakeCase()`, `normalizeToolName()`, `parseFrontmatter()` |
+| **Agent Configuration** | 5 | `getAgentVariant()`, `AGENT_DISPLAY_NAMES`, `AGENT_TOOL_RESTRICTIONS` |
+| **OpenCode Integration** | 5 | `injectServerAuth()`, `detectExternalPlugins()`, client accessors |
+| **Type Helpers** | 4 | `deepMerge()`, `DynamicTruncator`, `matchPattern()`, `isRecord()` |
+| **Misc** | 8 | `log()`, `readFile()`, `extractZip()`, `downloadBinary()`, `findAvailablePort()` |
+
+## MODEL RESOLUTION PIPELINE
+
+```
+resolveModel(input)
+  1. Override: UI-selected model (primary agents only)
+  2. Category default: From category config
+  3. Provider fallback: AGENT_MODEL_REQUIREMENTS chains
+  4. System default: Ultimate fallback
+```
+
+Key files: `model-resolver.ts` (entry), `model-resolution-pipeline.ts` (orchestration), `model-requirements.ts` (fallback chains), `model-availability.ts` (fuzzy matching).
+
+## MIGRATION SYSTEM
+
+Automatically transforms legacy config on load:
+- `agent-names.ts`: Old agent names → new (e.g., `junior` → `sub`)
+- `hook-names.ts`: Old hook names → new
+- `model-versions.ts`: Old model IDs → current
+- `agent-category.ts`: Legacy agent configs → category system
+
+## MOST IMPORTED
+
+| Utility | Import Count | Purpose |
+|---------|-------------|---------|
+| `logger.ts` | 62 | `/tmp/oh-my-opencode.log` |
+| `data-path.ts` | 11 | XDG storage resolution |
+| `model-requirements.ts` | 11 | Agent fallback chains |
+| `system-directive.ts` | 11 | System message filtering |
+| `frontmatter.ts` | 10 | YAML metadata extraction |

package/src/shared/agent-display-names.ts

@@ -1,182 +1,182 @@
-import { AGENT_NAME_MAP } from "./migration/agent-names"
-
-/**
- * Agent config keys to display names mapping.
- * Config keys are lowercase (e.g., "bob", "guard").
- * Display names include suffixes for UI/logs (e.g., "Bob - Ultraworker").
- *
- * IMPORTANT: Display names MUST NOT contain parentheses or other characters
- * that are invalid in HTTP header values per RFC 7230. OpenCode passes the
- * agent name in the `x-opencode-agent-name` header, and parentheses cause
- * header validation failures that prevent agents from appearing in the UI
- * type selector dropdown. Use ` - ` (space-dash-space) instead of `(...)`.
- */
-export const AGENT_DISPLAY_NAMES: Record<string, string> = {
-  "bob": "Bob",
-  "coder": "Coder",
-  "strategist": "Strategist",
-  "critic": "Critic",
-  "designer": "Designer",
-  "researcher": "Researcher",
-  "quality-guardian": "Quality Guardian",
-  "platform-manager": "Manager",
-  "brainstormer": "Brainstormer",
-  "agent-skills": "Agent Skills",
-  "guard": "Guard",
-  "sub": "Sub",
-  "multimodal": "Vision",
-  "ui": "Vision",
-}
-
-const AGENT_LIST_SORT_PREFIXES: Record<string, string> = {}
-
-const INVISIBLE_AGENT_CHARACTERS_REGEX = /[\u200B\u200C\u200D\uFEFF]/g
-
-export function stripInvisibleAgentCharacters(agentName: string): string {
-  return agentName.replace(INVISIBLE_AGENT_CHARACTERS_REGEX, "")
-}
-
-export function stripAgentListSortPrefix(agentName: string): string {
-  return stripInvisibleAgentCharacters(agentName)
-}
-
-export function getAgentRuntimeName(configKey: string): string {
-  const canonicalKey = resolveKnownAgentConfigKey(configKey) ?? configKey
-  const displayName = getAgentDisplayName(canonicalKey)
-  const prefix = AGENT_LIST_SORT_PREFIXES[canonicalKey.toLowerCase()]
-
-  return prefix ? `${prefix}${displayName}` : displayName
-}
-
-/**
- * Get display name for an agent config key.
- * Uses case-insensitive lookup for backward compatibility.
- * Returns original key if not found.
- */
-export function getAgentDisplayName(configKey: string): string {
-  const resolvedConfigKey = resolveKnownAgentConfigKey(configKey)
-  if (resolvedConfigKey !== undefined) {
-    const resolvedDisplayName = AGENT_DISPLAY_NAMES[resolvedConfigKey]
-    if (resolvedDisplayName !== undefined) return resolvedDisplayName
-  }
-
-  // Try exact match first
-  const exactMatch = AGENT_DISPLAY_NAMES[configKey]
-  if (exactMatch !== undefined) return exactMatch
-  
-  // Fall back to case-insensitive search
-  const lowerKey = configKey.toLowerCase()
-  for (const [k, v] of Object.entries(AGENT_DISPLAY_NAMES)) {
-    if (k.toLowerCase() === lowerKey) return v
-  }
-  
-  // Unknown agent: return original key
-  return configKey
-}
-
-/**
- * Runtime-facing agent name used for OpenCode list ordering.
- */
-export function getAgentListDisplayName(configKey: string): string {
-  return getAgentRuntimeName(configKey)
-}
-
-const REVERSE_DISPLAY_NAMES: Record<string, string> = Object.fromEntries(
-  Object.entries(AGENT_DISPLAY_NAMES).map(([key, displayName]) => [displayName.toLowerCase(), key]),
-)
-
-// Legacy parenthesized display names for backward compatibility.
-// Old configs/sessions may reference these names; resolve them to config keys.
-const LEGACY_DISPLAY_NAMES: Record<string, string> = {
-  "bob (ultraworker)": "bob",
-  "bob - ultraworker": "bob",
-  "coder (deep agent)": "coder",
-  "coder - deep agent": "coder",
-  "strategist (plan builder)": "strategist",
-  "strategist - plan builder": "strategist",
-  "guard (plan executor)": "guard",
-  "guard - plan executor": "guard",
-  "pre-plan (plan consultant)": "strategist",
-  "critic (plan critic)": "critic",
-  "critic - plan critic": "critic",
-  "designer": "designer",
-  "athena (council)": "strategist",
-  "athena-junior (council)": "strategist",
-  "researcher (codebase explorer)": "researcher",
-  "researcher - codebase explorer": "researcher",
-  "quality guardian (verifier)": "quality-guardian",
-  "quality guardian - verifier": "quality-guardian",
-  "manager": "platform-manager",
-  "platform manager (utility)": "platform-manager",
-  "platform manager - utility": "platform-manager",
-  "brainstormer - idea explorer": "brainstormer",
-  "agent skills - skill composer": "agent-skills",
-  "subagent": "sub",
-  "ui": "multimodal",
-  "vision": "multimodal",
-  "ui - multimodal": "multimodal",
-}
-
-function resolveKnownAgentConfigKey(agentName: string): string | undefined {
-  const lower = stripAgentListSortPrefix(agentName).trim().toLowerCase()
-  if (!lower) return undefined
-
-  const reversed = REVERSE_DISPLAY_NAMES[lower]
-  if (reversed !== undefined) return reversed
-
-  const legacy = LEGACY_DISPLAY_NAMES[lower]
-  if (legacy !== undefined) return legacy
-
-  const migrated = AGENT_NAME_MAP[lower]
-  if (migrated !== undefined) return migrated
-
-  if (AGENT_DISPLAY_NAMES[lower] !== undefined) return lower
-
-  return undefined
-}
-
-/**
- * Resolve an agent name (display name or config key) to its lowercase config key.
- * "Guard - Plan Executor" -> "guard", "Guard (Plan Executor)" -> "guard", "guard" -> "guard"
- */
-export function getAgentConfigKey(agentName: string): string {
-  const lower = stripAgentListSortPrefix(agentName).trim().toLowerCase()
-  return resolveKnownAgentConfigKey(agentName) ?? lower
-}
-
-/**
- * Normalize an agent name for prompt APIs.
- * - Known display names -> canonical display names
- * - Known config keys (any case) -> canonical display names
- * - Unknown/custom names -> preserved as-is (trimmed)
- */
-export function normalizeAgentForPrompt(agentName: string | undefined): string | undefined {
-  if (typeof agentName !== "string") {
-    return undefined
-  }
-
-  const trimmed = stripAgentListSortPrefix(agentName).trim()
-  if (!trimmed) {
-    return undefined
-  }
-
-  const configKey = resolveKnownAgentConfigKey(trimmed)
-  if (configKey !== undefined) {
-    return AGENT_DISPLAY_NAMES[configKey] ?? trimmed
-  }
-
-  return trimmed
-}
-
-export function normalizeAgentForPromptKey(agentName: string | undefined): string | undefined {
-  if (typeof agentName !== "string") {
-    return undefined
-  }
-
-  const trimmed = stripAgentListSortPrefix(agentName).trim()
-  if (!trimmed) {
-    return undefined
-  }
-
-  return resolveKnownAgentConfigKey(trimmed) ?? trimmed
-}
+import { AGENT_NAME_MAP } from "./migration/agent-names"
+
+/**
+ * Agent config keys to display names mapping.
+ * Config keys are lowercase (e.g., "bob", "guard").
+ * Display names include suffixes for UI/logs (e.g., "Bob - Ultraworker").
+ *
+ * IMPORTANT: Display names MUST NOT contain parentheses or other characters
+ * that are invalid in HTTP header values per RFC 7230. OpenCode passes the
+ * agent name in the `x-opencode-agent-name` header, and parentheses cause
+ * header validation failures that prevent agents from appearing in the UI
+ * type selector dropdown. Use ` - ` (space-dash-space) instead of `(...)`.
+ */
+export const AGENT_DISPLAY_NAMES: Record<string, string> = {
+  "bob": "Bob",
+  "coder": "Coder",
+  "strategist": "Strategist",
+  "critic": "Critic",
+  "designer": "Designer",
+  "researcher": "Researcher",
+  "quality-guardian": "Quality Guardian",
+  "platform-manager": "Manager",
+  "brainstormer": "Brainstormer",
+  "agent-skills": "Agent Skills",
+  "guard": "Guard",
+  "sub": "Sub",
+  "multimodal": "Vision",
+  "ui": "Vision",
+}
+
+const AGENT_LIST_SORT_PREFIXES: Record<string, string> = {}
+
+const INVISIBLE_AGENT_CHARACTERS_REGEX = /[\u200B\u200C\u200D\uFEFF]/g
+
+export function stripInvisibleAgentCharacters(agentName: string): string {
+  return agentName.replace(INVISIBLE_AGENT_CHARACTERS_REGEX, "")
+}
+
+export function stripAgentListSortPrefix(agentName: string): string {
+  return stripInvisibleAgentCharacters(agentName)
+}
+
+export function getAgentRuntimeName(configKey: string): string {
+  const canonicalKey = resolveKnownAgentConfigKey(configKey) ?? configKey
+  const displayName = getAgentDisplayName(canonicalKey)
+  const prefix = AGENT_LIST_SORT_PREFIXES[canonicalKey.toLowerCase()]
+
+  return prefix ? `${prefix}${displayName}` : displayName
+}
+
+/**
+ * Get display name for an agent config key.
+ * Uses case-insensitive lookup for backward compatibility.
+ * Returns original key if not found.
+ */
+export function getAgentDisplayName(configKey: string): string {
+  const resolvedConfigKey = resolveKnownAgentConfigKey(configKey)
+  if (resolvedConfigKey !== undefined) {
+    const resolvedDisplayName = AGENT_DISPLAY_NAMES[resolvedConfigKey]
+    if (resolvedDisplayName !== undefined) return resolvedDisplayName
+  }
+
+  // Try exact match first
+  const exactMatch = AGENT_DISPLAY_NAMES[configKey]
+  if (exactMatch !== undefined) return exactMatch
+  
+  // Fall back to case-insensitive search
+  const lowerKey = configKey.toLowerCase()
+  for (const [k, v] of Object.entries(AGENT_DISPLAY_NAMES)) {
+    if (k.toLowerCase() === lowerKey) return v
+  }
+  
+  // Unknown agent: return original key
+  return configKey
+}
+
+/**
+ * Runtime-facing agent name used for OpenCode list ordering.
+ */
+export function getAgentListDisplayName(configKey: string): string {
+  return getAgentRuntimeName(configKey)
+}
+
+const REVERSE_DISPLAY_NAMES: Record<string, string> = Object.fromEntries(
+  Object.entries(AGENT_DISPLAY_NAMES).map(([key, displayName]) => [displayName.toLowerCase(), key]),
+)
+
+// Legacy parenthesized display names for backward compatibility.
+// Old configs/sessions may reference these names; resolve them to config keys.
+const LEGACY_DISPLAY_NAMES: Record<string, string> = {
+  "bob (ultraworker)": "bob",
+  "bob - ultraworker": "bob",
+  "coder (deep agent)": "coder",
+  "coder - deep agent": "coder",
+  "strategist (plan builder)": "strategist",
+  "strategist - plan builder": "strategist",
+  "guard (plan executor)": "guard",
+  "guard - plan executor": "guard",
+  "pre-plan (plan consultant)": "strategist",
+  "critic (plan critic)": "critic",
+  "critic - plan critic": "critic",
+  "designer": "designer",
+  "athena (council)": "strategist",
+  "athena-junior (council)": "strategist",
+  "researcher (codebase explorer)": "researcher",
+  "researcher - codebase explorer": "researcher",
+  "quality guardian (verifier)": "quality-guardian",
+  "quality guardian - verifier": "quality-guardian",
+  "manager": "platform-manager",
+  "platform manager (utility)": "platform-manager",
+  "platform manager - utility": "platform-manager",
+  "brainstormer - idea explorer": "brainstormer",
+  "agent skills - skill composer": "agent-skills",
+  "subagent": "sub",
+  "ui": "multimodal",
+  "vision": "multimodal",
+  "ui - multimodal": "multimodal",
+}
+
+function resolveKnownAgentConfigKey(agentName: string): string | undefined {
+  const lower = stripAgentListSortPrefix(agentName).trim().toLowerCase()
+  if (!lower) return undefined
+
+  const reversed = REVERSE_DISPLAY_NAMES[lower]
+  if (reversed !== undefined) return reversed
+
+  const legacy = LEGACY_DISPLAY_NAMES[lower]
+  if (legacy !== undefined) return legacy
+
+  const migrated = AGENT_NAME_MAP[lower]
+  if (migrated !== undefined) return migrated
+
+  if (AGENT_DISPLAY_NAMES[lower] !== undefined) return lower
+
+  return undefined
+}
+
+/**
+ * Resolve an agent name (display name or config key) to its lowercase config key.
+ * "Guard - Plan Executor" -> "guard", "Guard (Plan Executor)" -> "guard", "guard" -> "guard"
+ */
+export function getAgentConfigKey(agentName: string): string {
+  const lower = stripAgentListSortPrefix(agentName).trim().toLowerCase()
+  return resolveKnownAgentConfigKey(agentName) ?? lower
+}
+
+/**
+ * Normalize an agent name for prompt APIs.
+ * - Known display names -> canonical display names
+ * - Known config keys (any case) -> canonical display names
+ * - Unknown/custom names -> preserved as-is (trimmed)
+ */
+export function normalizeAgentForPrompt(agentName: string | undefined): string | undefined {
+  if (typeof agentName !== "string") {
+    return undefined
+  }
+
+  const trimmed = stripAgentListSortPrefix(agentName).trim()
+  if (!trimmed) {
+    return undefined
+  }
+
+  const configKey = resolveKnownAgentConfigKey(trimmed)
+  if (configKey !== undefined) {
+    return AGENT_DISPLAY_NAMES[configKey] ?? trimmed
+  }
+
+  return trimmed
+}
+
+export function normalizeAgentForPromptKey(agentName: string | undefined): string | undefined {
+  if (typeof agentName !== "string") {
+    return undefined
+  }
+
+  const trimmed = stripAgentListSortPrefix(agentName).trim()
+  if (!trimmed) {
+    return undefined
+  }
+
+  return resolveKnownAgentConfigKey(trimmed) ?? trimmed
+}

package/src/shared/agent-tool-restrictions.ts

@@ -1,80 +1,80 @@
-import { getAgentConfigKey, stripInvisibleAgentCharacters } from "./agent-display-names"
-
-/**
- * Agent tool restrictions for session.prompt calls.
- * OpenCode SDK's session.prompt `tools` parameter expects boolean values.
- * true = tool allowed, false = tool denied.
- */
-
-const RESEARCHER_DENYLIST: Record<string, boolean> = {
-  write: false,
-  edit: false,
-  task: false,
-  call_omo_agent: false,
-}
-
-const CANONICAL_AGENT_RESTRICTIONS: Record<string, Record<string, boolean>> = {
-  researcher: RESEARCHER_DENYLIST,
-  critic: {
-    write: false,
-    edit: false,
-    task: false,
-  },
-  multimodal: {
-    read: true,
-  },
-  sub: {
-    task: false,
-  },
-}
-
-const LEGACY_AGENT_RESTRICTION_OVERRIDES: Record<string, Record<string, boolean>> = {
-  ui: CANONICAL_AGENT_RESTRICTIONS.multimodal,
-}
-
-const LEGACY_AGENT_ALIAS_TO_CANONICAL: Record<string, string> = {
-  ui: "multimodal",
-  "plan-consultant": "critic",
-}
-
-function toNormalizedAgentKey(agentName: string): string {
-  return stripInvisibleAgentCharacters(agentName).trim().toLowerCase()
-}
-
-function getRestrictionCandidates(agentName: string): string[] {
-  const direct = toNormalizedAgentKey(agentName)
-  const configKey = toNormalizedAgentKey(getAgentConfigKey(agentName))
-  return direct === configKey ? [direct] : [direct, configKey]
-}
-
-function resolveRestrictions(agentName: string): Record<string, boolean> | undefined {
-  const candidates = getRestrictionCandidates(agentName)
-
-  for (const candidate of candidates) {
-    const override = LEGACY_AGENT_RESTRICTION_OVERRIDES[candidate]
-    if (override) {
-      return override
-    }
-  }
-
-  for (const candidate of candidates) {
-    const canonicalKey = LEGACY_AGENT_ALIAS_TO_CANONICAL[candidate] ?? candidate
-    const canonical = CANONICAL_AGENT_RESTRICTIONS[canonicalKey]
-    if (canonical) {
-      return canonical
-    }
-  }
-
-  return undefined
-}
-
-export function getAgentToolRestrictions(agentName: string): Record<string, boolean> {
-  // Custom/unknown agents get no restrictions (empty object), matching Claude Code's
-  // trust model where project-registered agents retain full tool access including bash.
-  return resolveRestrictions(agentName) ?? {}
-}
-
-export function hasAgentToolRestrictions(agentName: string): boolean {
-  const restrictions = getAgentToolRestrictions(agentName)
-  return Object.keys(restrictions).length > 0
-}
+import { getAgentConfigKey, stripInvisibleAgentCharacters } from "./agent-display-names"
+
+/**
+ * Agent tool restrictions for session.prompt calls.
+ * OpenCode SDK's session.prompt `tools` parameter expects boolean values.
+ * true = tool allowed, false = tool denied.
+ */
+
+const RESEARCHER_DENYLIST: Record<string, boolean> = {
+  write: false,
+  edit: false,
+  task: false,
+  call_omo_agent: false,
+}
+
+const CANONICAL_AGENT_RESTRICTIONS: Record<string, Record<string, boolean>> = {
+  researcher: RESEARCHER_DENYLIST,
+  critic: {
+    write: false,
+    edit: false,
+    task: false,
+  },
+  multimodal: {
+    read: true,
+  },
+  sub: {
+    task: false,
+  },
+}
+
+const LEGACY_AGENT_RESTRICTION_OVERRIDES: Record<string, Record<string, boolean>> = {
+  ui: CANONICAL_AGENT_RESTRICTIONS.multimodal,
+}
+
+const LEGACY_AGENT_ALIAS_TO_CANONICAL: Record<string, string> = {
+  ui: "multimodal",
+  "plan-consultant": "critic",
+}
+
+function toNormalizedAgentKey(agentName: string): string {
+  return stripInvisibleAgentCharacters(agentName).trim().toLowerCase()
+}
+
+function getRestrictionCandidates(agentName: string): string[] {
+  const direct = toNormalizedAgentKey(agentName)
+  const configKey = toNormalizedAgentKey(getAgentConfigKey(agentName))
+  return direct === configKey ? [direct] : [direct, configKey]
+}
+
+function resolveRestrictions(agentName: string): Record<string, boolean> | undefined {
+  const candidates = getRestrictionCandidates(agentName)
+
+  for (const candidate of candidates) {
+    const override = LEGACY_AGENT_RESTRICTION_OVERRIDES[candidate]
+    if (override) {
+      return override
+    }
+  }
+
+  for (const candidate of candidates) {
+    const canonicalKey = LEGACY_AGENT_ALIAS_TO_CANONICAL[candidate] ?? candidate
+    const canonical = CANONICAL_AGENT_RESTRICTIONS[canonicalKey]
+    if (canonical) {
+      return canonical
+    }
+  }
+
+  return undefined
+}
+
+export function getAgentToolRestrictions(agentName: string): Record<string, boolean> {
+  // Custom/unknown agents get no restrictions (empty object), matching Claude Code's
+  // trust model where project-registered agents retain full tool access including bash.
+  return resolveRestrictions(agentName) ?? {}
+}
+
+export function hasAgentToolRestrictions(agentName: string): boolean {
+  const restrictions = getAgentToolRestrictions(agentName)
+  return Object.keys(restrictions).length > 0
+}