@kisev/agentomatic 11.0.2 → 12.0.0

package/dist/agent-profiles.js

@@ -4,7 +4,7 @@ import { homedir } from "node:os";
 import { dirname, resolve } from "node:path";
 import { promisify } from "node:util";
 import { fileURLToPath } from "node:url";
-import { applyTransaction, deploymentRoot, destination, LifecycleError, lifecycleRoot, listDirectRegular, readRegular, recoverTransaction, sha256, stable, withLifecycleLock, } from "./lifecycle.js";
+import { applyTransaction, deploymentRoot, destination, LifecycleError, lifecycleRoot, listDirectRegular, readRegular, sha256, stable, withLifecycleLock, } from "./lifecycle.js";
 import { readPackageVersion } from "./package-metadata.js";
 export const FIXED_AGENT_ROLES = [
     "manager",
@@ -51,6 +51,8 @@ function packageVersion() {
 function emptyConfig() {
     return {
         schema_version: 1,
+        selected_fixed: [],
+        selected_critics: [],
         fixed: Object.fromEntries(FIXED_AGENT_ROLES.map((role) => [role, {}])),
         additional_critics: {},
     };
@@ -100,7 +102,10 @@ function parseConfig(raw) {
         throw new AgentProfileError("invalid_configuration", "Agent profile configuration is not valid JSON");
     }
     const config = value;
-    if (config.schema_version !== 1 ||
+    if (!config ||
+        typeof config !== "object" ||
+        Array.isArray(config) ||
+        config.schema_version !== 1 ||
         !config.fixed ||
         typeof config.fixed !== "object" ||
         Array.isArray(config.fixed) ||
@@ -109,17 +114,37 @@ function parseConfig(raw) {
         Array.isArray(config.additional_critics)) {
         throw new AgentProfileError("invalid_configuration", "Agent profile configuration has an unsupported schema");
     }
+    if (Object.keys(config).some((key) => ![
+        "schema_version",
+        "selected_fixed",
+        "selected_critics",
+        "fixed",
+        "additional_critics",
+    ].includes(key)))
+        throw new AgentProfileError("invalid_configuration", "Agent profile configuration contains unknown fields; preserve and inspect it before retrying");
     if (Object.keys(config.fixed).sort().join(",") !== [...FIXED_AGENT_ROLES].sort().join(","))
         throw new AgentProfileError("invalid_configuration", "Configuration must contain every fixed role exactly once");
     const fixed = Object.fromEntries(FIXED_AGENT_ROLES.map((role) => [role, parseSelection(config.fixed[role], false)]));
+    if (config.selected_fixed !== undefined &&
+        (!Array.isArray(config.selected_fixed) ||
+            config.selected_fixed.some((role) => !FIXED_AGENT_ROLES.includes(role)) ||
+            new Set(config.selected_fixed).size !== config.selected_fixed.length))
+        throw new AgentProfileError("invalid_configuration", "selected_fixed must contain unique fixed roles");
     const additional = {};
     for (const [name, selection] of Object.entries(config.additional_critics)) {
         if (!CRITIC_PATTERN.test(name))
             throw new AgentProfileError("invalid_configuration", `Unsafe additional critic name: ${name}`);
         additional[name] = parseSelection(selection, true);
     }
+    if (config.selected_critics !== undefined &&
+        (!Array.isArray(config.selected_critics) ||
+            config.selected_critics.some((name) => !CRITIC_PATTERN.test(name) || !(name in additional)) ||
+            new Set(config.selected_critics).size !== config.selected_critics.length))
+        throw new AgentProfileError("invalid_configuration", "selected_critics must reference unique saved critics");
     return {
         schema_version: 1,
+        selected_fixed: config.selected_fixed ?? [],
+        selected_critics: config.selected_critics ?? [],
         fixed,
         additional_critics: Object.fromEntries(Object.entries(additional).sort(([left], [right]) => left.localeCompare(right))),
     };
@@ -183,10 +208,17 @@ async function loadState(scope, root) {
         throw new AgentProfileError("unsafe_configuration", "Agent profile configuration must use mode 0600");
     if (manifestRaw && (await inspectFileMode(manifestPath)) !== 0o600)
         throw new AgentProfileError("unsafe_manifest", "Agent deployment manifest must use mode 0600");
+    const manifest = manifestRaw ? parseManifest(manifestRaw, scope) : undefined;
+    const config = configRaw ? parseConfig(configRaw) : emptyConfig();
+    // Recover the selected set from ownership when reading an existing pre-selection file.
+    if (configRaw && !("selected_fixed" in JSON.parse(configRaw.toString("utf8")))) {
+        config.selected_fixed = FIXED_AGENT_ROLES.filter((role) => Boolean(manifest?.profiles[role]));
+        config.selected_critics = Object.keys(config.additional_critics).filter((name) => Boolean(manifest?.profiles[name]));
+    }
     return {
-        config: configRaw ? parseConfig(configRaw) : emptyConfig(),
+        config,
         configRaw,
-        manifest: manifestRaw ? parseManifest(manifestRaw, scope) : undefined,
+        manifest,
         manifestRaw,
     };
 }
@@ -210,21 +242,21 @@ function withSelection(content, selection) {
     const mode = filtered.findIndex((line, index) => index < end && line.startsWith("mode:"));
     if (mode < 0)
         throw new AgentProfileError("asset_error", "Canonical agent has no mode");
-    filtered.splice(mode + 1, 0, `model: ${selection.model}`, ...(selection.variant ? [`variant: ${selection.variant}`] : []));
+    filtered.splice(mode + 1, 0, `model: ${selection.model}${selection.variant ? `#${selection.variant}` : ""}`);
     return filtered.join("\n");
 }
 function replaceTaskAllowlist(content, allowed) {
     const lines = content.split("\n");
-    const permission = lines.indexOf("permission:");
+    const permission = lines.indexOf("permissions:");
     if (permission < 0)
         throw new AgentProfileError("asset_error", "Canonical primary agent has no permission block");
-    const task = lines.findIndex((line, index) => index > permission && line === "  task:");
+    const task = lines.findIndex((line, index) => index > permission && line.startsWith("  - { action: subagent,"));
     if (task < 0)
         throw new AgentProfileError("asset_error", "Canonical primary agent has no task permission");
     let end = task + 1;
-    while (end < lines.length && (lines[end].startsWith("    ") || lines[end] === ""))
+    while (end < lines.length && lines[end].startsWith("  - { action: subagent,"))
         end += 1;
-    lines.splice(task, end - task, "  task:", '    "*": deny', ...allowed.map((name) => `    ${name}: allow`));
+    lines.splice(task, end - task, '  - { action: subagent, resource: "*", effect: deny }', ...allowed.map((name) => `  - { action: subagent, resource: ${JSON.stringify(name)}, effect: allow }`));
     return lines.join("\n");
 }
 export function renderAgentProfile(name, config, canonical) {
@@ -234,9 +266,12 @@ export function renderAgentProfile(name, config, canonical) {
     if (!selection)
         throw new AgentProfileError("invalid_configuration", `No configuration exists for ${name}`);
     let rendered = withSelection(canonical[role].toString("utf8"), selection);
-    const pool = ["critic", ...Object.keys(config.additional_critics)].sort();
+    const pool = desiredNames(config).filter((item) => item === "critic" || CRITIC_PATTERN.test(item));
     if (name === "manager")
-        rendered = replaceTaskAllowlist(rendered, ["architect", "worker", "mapper", "review", ...pool]);
+        rendered = replaceTaskAllowlist(rendered, [
+            ...config.selected_fixed.filter((role) => ["architect", "worker", "mapper", "review"].includes(role)),
+            ...pool,
+        ]);
     if (name === "review")
         rendered = replaceTaskAllowlist(rendered, pool);
     return Buffer.from(rendered);
@@ -247,7 +282,7 @@ function selectionFor(config, name) {
         : config.additional_critics[name];
 }
 function desiredNames(config) {
-    return [...FIXED_AGENT_ROLES, ...Object.keys(config.additional_critics)].sort();
+    return [...config.selected_fixed, ...config.selected_critics].sort();
 }
 function desiredManifest(scope, config, rendered, canonical, names = desiredNames(config)) {
     const profiles = {};
@@ -273,6 +308,11 @@ function desiredManifest(scope, config, rendered, canonical, names = desiredName
 }
 function changeConfig(current, request) {
     const config = JSON.parse(JSON.stringify(current));
+    if (request.changes) {
+        if (request.changes.some((change) => change.changes || !["model-set", "critic-add", "critic-remove"].includes(change.action)))
+            throw new AgentProfileError("invalid_input", "Profile drafts accept only model and critic changes");
+        return request.changes.reduce((draft, change) => changeConfig(draft, change), config);
+    }
     if (request.action === "model-set") {
         const name = validateAgentName(request.name ?? "");
         if (!NAME_PATTERN.test(name) && !(name in config.additional_critics))
@@ -297,6 +337,7 @@ function changeConfig(current, request) {
         if (variant)
             selection.variant = variant;
         config.additional_critics[name] = selection;
+        config.selected_critics.push(name);
     }
     else if (request.action === "critic-remove") {
         const name = request.name ?? "";
@@ -307,6 +348,7 @@ function changeConfig(current, request) {
         if (!(name in config.additional_critics))
             throw new AgentProfileError("unknown_profile", `Additional critic is not configured: ${name}`);
         delete config.additional_critics[name];
+        config.selected_critics = config.selected_critics.filter((item) => item !== name);
     }
     config.additional_critics = Object.fromEntries(Object.entries(config.additional_critics).sort(([left], [right]) => left.localeCompare(right)));
     return config;
@@ -335,11 +377,17 @@ export async function buildAgentProfilePlan(request, scope, cwd = process.cwd(),
     ]);
     const byFile = new Map(agentFiles.filter((item) => item.name.endsWith(".md")).map((item) => [item.name, item.content]));
     const config = changeConfig(state.config, request);
-    const names = request.action === "uninstall"
-        ? []
-        : selectedAgents === undefined
-            ? desiredNames(config)
-            : [...selectedAgents, ...Object.keys(config.additional_critics)].sort();
+    if (request.action === "install" && selectedAgents === undefined && !state.configRaw)
+        config.selected_fixed = [...FIXED_AGENT_ROLES];
+    if (selectedAgents !== undefined)
+        config.selected_fixed = [...selectedAgents];
+    if (request.action === "install")
+        config.selected_critics = Object.keys(config.additional_critics).sort();
+    if (request.action === "uninstall") {
+        config.selected_fixed = [];
+        config.selected_critics = [];
+    }
+    const names = request.action === "uninstall" ? [] : desiredNames(config);
     const rendered = Object.fromEntries(names.map((name) => [name, renderAgentProfile(name, config, canonical)]));
     const desired = request.action === "uninstall"
         ? undefined
@@ -412,11 +460,13 @@ export async function buildAgentProfilePlan(request, scope, cwd = process.cwd(),
             (!content ||
                 sha256(content) !== ownedHash ||
                 agentFiles.find((item) => item.name === `${name}.md`)?.mode !== 0o600);
-        if (drift && request.action !== "reconcile") {
+        if (drift &&
+            !(["install", "reconcile"].includes(request.action) &&
+                (!content || sha256(content) === ownedHash))) {
             operations.push({
                 path,
                 operation: "conflict",
-                reason: "managed profile drift requires explicit reconcile",
+                reason: "managed profile drift is preserved; restore the recorded bytes before retrying",
                 ...(content ? { sha256: sha256(content) } : {}),
             });
             continue;
@@ -455,8 +505,7 @@ export async function buildAgentProfilePlan(request, scope, cwd = process.cwd(),
         }
     }
     const configContent = Buffer.from(`${stable(config)}\n`);
-    if (request.action !== "uninstall" &&
-        names.length > 0 &&
+    if ((names.length > 0 || Boolean(state.configRaw) || request.action === "model-set") &&
         (!state.configRaw || !state.configRaw.equals(configContent))) {
         operations.push({
             path: CONFIG_PATH,
@@ -521,13 +570,14 @@ export async function buildAgentProfilePlan(request, scope, cwd = process.cwd(),
     };
     const plan = {
         ...base,
+        digest: sha256(stable({ mutations, config: state.configRaw, manifest: state.manifestRaw, base })),
     };
     return {
         plan,
         mutations,
         config,
         manifest: finalManifest,
-        expectedConfig: names.length ? configContent : state.configRaw,
+        expectedConfig: names.length || state.configRaw || request.action === "model-set" ? configContent : undefined,
         expectedManifest: manifestContent,
         legacyTransferred,
     };
@@ -577,17 +627,25 @@ export async function listAgentProfiles(scope, cwd = process.cwd(), home = homed
     const records = [];
     const collisions = [];
     const drift = [];
-    for (const name of configured) {
+    for (const name of [
+        ...new Set([
+            ...FIXED_AGENT_ROLES,
+            ...Object.keys(state.config.additional_critics),
+            ...configured,
+        ]),
+    ].sort()) {
         const file = byName.get(name);
         const owned = state.manifest?.profiles[name];
         let stateValue;
-        if (!owned && file)
-            stateValue = "collision";
+        if (!configured.includes(name) && !owned && !file)
+            stateValue = "not-installed";
+        else if (!owned && file)
+            stateValue = configured.includes(name) ? "collision" : "current";
         else if (!file)
             stateValue = owned ? "drift" : "missing";
         else if (!owned ||
             sha256(file.content) !== owned.rendered_sha256 ||
-            !file.content.equals(desired[name]) ||
+            (configured.includes(name) && !file.content.equals(desired[name])) ||
             file.mode !== 0o600)
             stateValue = owned ? "drift" : "collision";
         else
@@ -599,7 +657,11 @@ export async function listAgentProfiles(scope, cwd = process.cwd(), home = homed
         const selection = selectionFor(state.config, name);
         records.push({
             name,
-            ownership: NAME_PATTERN.test(name) ? "package-owned" : "managed",
+            ownership: !configured.includes(name) && file && !owned
+                ? "user-owned"
+                : NAME_PATTERN.test(name)
+                    ? "package-owned"
+                    : "managed",
             state: stateValue,
             ...("model" in selection
                 ? { model: selection.model, ...(selection.variant ? { variant: selection.variant } : {}) }
@@ -621,9 +683,12 @@ export async function listAgentProfiles(scope, cwd = process.cwd(), home = homed
         root,
         package_version: packageVersion(),
         critic_pool: state.manifest?.critic_pool ??
-            ["critic", ...Object.keys(state.config.additional_critics)].sort(),
+            configured.filter((name) => name === "critic" || CRITIC_PATTERN.test(name)),
         profiles: records.sort((left, right) => left.name.localeCompare(right.name)),
-        user_owned: userOwned,
+        user_owned: records
+            .filter((record) => record.ownership === "user-owned")
+            .map((record) => record.name)
+            .sort(),
         collisions,
         drift,
         requires_restart: false,
@@ -632,25 +697,24 @@ export async function listAgentProfiles(scope, cwd = process.cwd(), home = homed
 }
 export async function previewAgentProfileChange(request, scope, cwd = process.cwd(), home = homedir()) {
     const stateRoot = lifecycleRoot(scope, cwd, home);
-    return withLifecycleLock(stateRoot, async () => {
-        if (await recoverTransaction(deploymentRoot(scope, cwd, home), stateRoot))
-            throw new AgentProfileError("recovered_transaction", "Recovered an interrupted transaction; request a fresh plan");
-        return (await buildAgentProfilePlan(request, scope, cwd, home)).plan;
-    });
+    if (await readRegular(resolve(stateRoot, "transaction-journal.json")))
+        throw new AgentProfileError("recovery_required", "Run maintenance recover before a fresh preview");
+    return (await buildAgentProfilePlan(request, scope, cwd, home)).plan;
 }
 export async function applyAgentProfileChange(request, scope, cwd = process.cwd(), home = homedir(), options = {}) {
     const stateRoot = lifecycleRoot(scope, cwd, home);
     const root = deploymentRoot(scope, cwd, home);
     return withLifecycleLock(stateRoot, async () => {
-        if (await recoverTransaction(root, stateRoot))
-            throw new AgentProfileError("recovered_transaction", "Recovered an interrupted transaction; request a fresh plan");
+        if (await readRegular(resolve(stateRoot, "transaction-journal.json")))
+            throw new AgentProfileError("recovery_required", "Run maintenance recover before a fresh preview");
         const built = await buildAgentProfilePlan(request, scope, cwd, home);
+        if (options.expectedDigest && options.expectedDigest !== built.plan.digest)
+            throw new AgentProfileError("stale_plan", "Profiles changed; request a fresh preview");
         if (built.plan.operations.some((item) => item.operation === "conflict" && item.reason.includes("collision")))
             throw new AgentProfileError("collision", "Exact-name user-owned collision blocks apply");
         if (request.action !== "uninstall" &&
-            request.action !== "reconcile" &&
             built.plan.operations.some((item) => item.operation === "conflict"))
-            throw new AgentProfileError("drift", "Managed profile drift requires explicit reconcile");
+            throw new AgentProfileError("drift", "Managed profile drift is preserved; restore the recorded bytes before retrying");
         await applyTransaction(root, stateRoot, built.mutations, {
             ...options,
             validateFinal: async () => {
@@ -662,7 +726,7 @@ export async function applyAgentProfileChange(request, scope, cwd = process.cwd(
                         final.drift.length ||
                         final.profiles
                             .filter((item) => item.ownership !== "user-owned")
-                            .some((item) => item.state !== "current"))) {
+                            .some((item) => item.state !== "current" && item.state !== "not-installed"))) {
                     throw new AgentProfileError("final_validation_failed", "Final agent inventory validation failed");
                 }
             },
@@ -675,65 +739,50 @@ export async function applyAgentProfileChange(request, scope, cwd = process.cwd(
         };
     });
 }
+async function modelCatalog() {
+    const query = new URLSearchParams({ "location[directory]": process.cwd() });
+    const { stdout } = await execFileAsync("opencode", ["api", "get", `/api/model?${query}`], {
+        timeout: 10_000,
+        encoding: "utf8",
+        maxBuffer: 10 * 1024 * 1024,
+    });
+    const response = JSON.parse(stdout);
+    if (!Array.isArray(response.data) ||
+        !response.data.every((entry) => entry &&
+            typeof entry.providerID === "string" &&
+            typeof entry.id === "string" &&
+            MODEL_PATTERN.test(`${entry.providerID}/${entry.id}`)))
+        throw new Error("invalid V2 model inventory");
+    return response.data;
+}
 export async function availableModels() {
     try {
-        const { stdout } = await execFileAsync("opencode", ["models"], {
-            timeout: 10_000,
-            encoding: "utf8",
-        });
         const models = [
-            ...new Set(stdout
-                .split(/\r?\n/)
-                .map((line) => line.trim())
-                .filter((line) => MODEL_PATTERN.test(line))),
+            ...new Set((await modelCatalog()).map((entry) => `${entry.providerID}/${entry.id}`)),
         ].sort();
         if (!models.length)
             throw new Error("empty catalog");
         return models;
     }
     catch (error) {
-        throw new AgentProfileError("catalog_unavailable", `Cached OpenCode model catalog is unavailable; provide an explicit provider/model: ${error instanceof Error ? error.message : String(error)}`);
+        throw new AgentProfileError("catalog_unavailable", `OpenCode V2 model snapshot is unavailable; provide an explicit provider/model: ${error instanceof Error ? error.message : String(error)}`);
     }
 }
 export async function availableModelVariants(model) {
     const selected = validateModel(model);
-    const provider = selected.split("/", 1)[0];
     try {
-        const { stdout } = await execFileAsync("opencode", ["models", provider, "--verbose"], {
-            timeout: 10_000,
-            encoding: "utf8",
-            maxBuffer: 10 * 1024 * 1024,
-        });
-        const lines = stdout.split(/\r?\n/);
-        for (let index = 0; index < lines.length; index += 1) {
-            if (lines[index].trim() !== selected)
-                continue;
-            let document = "";
-            for (index += 1; index < lines.length; index += 1) {
-                document += `${lines[index]}\n`;
-                try {
-                    const metadata = JSON.parse(document);
-                    if (metadata.variants === undefined)
-                        return [];
-                    if (!metadata.variants ||
-                        typeof metadata.variants !== "object" ||
-                        Array.isArray(metadata.variants))
-                        throw new Error("invalid variants metadata");
-                    const variants = Object.keys(metadata.variants);
-                    if (!variants.every((variant) => VARIANT_PATTERN.test(variant)))
-                        throw new Error("unsafe variant");
-                    return variants;
-                }
-                catch (error) {
-                    if (!(error instanceof SyntaxError))
-                        throw error;
-                }
-            }
-        }
-        throw new Error("selected model is absent");
+        const metadata = (await modelCatalog()).find((entry) => `${entry.providerID}/${entry.id}` === selected);
+        if (!metadata)
+            throw new Error("selected model is absent");
+        if (metadata.variants === undefined)
+            return [];
+        if (!Array.isArray(metadata.variants) ||
+            !metadata.variants.every((variant) => variant && typeof variant.id === "string" && VARIANT_PATTERN.test(variant.id)))
+            throw new Error("invalid variants metadata");
+        return metadata.variants.map((variant) => variant.id);
     }
     catch (error) {
-        throw new AgentProfileError("catalog_unavailable", `Cached OpenCode model variants are unavailable: ${error instanceof Error ? error.message : String(error)}`);
+        throw new AgentProfileError("catalog_unavailable", `OpenCode V2 model variants are unavailable: ${error instanceof Error ? error.message : String(error)}`);
     }
 }
 export async function inspectFileMode(path) {

package/dist/assets/agents/architect.md

@@ -3,10 +3,10 @@ description: Analyzes architecture choices, compatibility, and operational risk.
 mode: subagent
 hidden: true
 steps: 16
-permission:
-  edit: deny
-  bash: deny
-  task: deny
+permissions:
+  - { action: edit, resource: "*", effect: deny }
+  - { action: shell, resource: "*", effect: deny }
+  - { action: subagent, resource: "*", effect: deny }
 ---
 
 # Architect

package/dist/assets/agents/critic.md

@@ -3,14 +3,13 @@ description: Independently reviews changes for correctness, security, and regres
 mode: subagent
 hidden: true
 steps: 12
-permission:
-  edit: deny
-  bash:
-    "*": deny
-    "git --no-optional-locks -c core.fsmonitor=false status --porcelain=v1 --untracked-files=all": allow
-    "git -c diff.external= -c diff.trustExitCode=false diff --no-ext-diff --no-textconv --": allow
-    "git -c diff.external= -c diff.trustExitCode=false diff --cached --no-ext-diff --no-textconv --": allow
-  task: deny
+permissions:
+  - { action: edit, resource: "*", effect: deny }
+  - { action: shell, resource: "*", effect: deny }
+  - { action: shell, resource: "git --no-optional-locks -c core.fsmonitor=false status --porcelain=v1 --untracked-files=all", effect: allow }
+  - { action: shell, resource: "git -c diff.external= -c diff.trustExitCode=false diff --no-ext-diff --no-textconv --", effect: allow }
+  - { action: shell, resource: "git -c diff.external= -c diff.trustExitCode=false diff --cached --no-ext-diff --no-textconv --", effect: allow }
+  - { action: subagent, resource: "*", effect: deny }
 ---
 
 # Critic
@@ -24,7 +23,7 @@ a non-code target. Stay read-only and never delegate.
 
 For execution-card verification, inspect the actual worktree diff, not a worker summary. Use only the supplied
 execution card and worker report as context, and verify the result against the
-card's exact write set, acceptance criteria, checks, and boundaries. For Bash
+card's exact write set, acceptance criteria, checks, and boundaries. For shell
 inspection use exactly the three literal commands in this agent's allowlist:
 
 ```text
@@ -34,10 +33,10 @@ git -c diff.external= -c diff.trustExitCode=false diff --cached --no-ext-diff --
 ```
 
 Read untracked files named by status with native OpenCode `Read`, never with
-Bash. Return exactly one structured `critic_report` with matching `card_id` and
+shell. Return exactly one structured `critic_report` with matching `card_id` and
 `revision`. Its only status values are `APPROVED` and `CHANGES_REQUIRED`;
 include `schema_version: 1`, verified findings, evidence, unrun checks, and risks. Do not edit files,
-run any other Bash command, delegate work, or propose direct worker remediation.
+run any other shell command, delegate work, or propose direct worker remediation.
 
 ```json
 {

package/dist/assets/agents/manager.md

@@ -2,17 +2,16 @@
 description: Coordinates bounded OpenCode routing and execution. Russian triggers: менеджер, координация.
 mode: primary
 steps: 12
-permission:
-  edit: deny
-  bash: deny
-  question: allow
-  task:
-    "*": deny
-    architect: allow
-    worker: allow
-    mapper: allow
-    review: allow
-    critic: allow
+permissions:
+  - { action: edit, resource: "*", effect: deny }
+  - { action: shell, resource: "*", effect: deny }
+  - { action: question, resource: "*", effect: allow }
+  - { action: subagent, resource: "*", effect: deny }
+  - { action: subagent, resource: "architect", effect: allow }
+  - { action: subagent, resource: "worker", effect: allow }
+  - { action: subagent, resource: "mapper", effect: allow }
+  - { action: subagent, resource: "review", effect: allow }
+  - { action: subagent, resource: "critic", effect: allow }
 ---
 
 # Manager
@@ -33,7 +32,7 @@ Never pass caller-supplied agents, capabilities, tools, models, or availability
 to routing. Unknown or user-owned profiles require an explicit trusted override.
 
 Forward the original task, evidence, exact card, confirmation references, and
-structured result unchanged. Validate machine contracts at each OpenCode Task
+structured result unchanged. Validate machine contracts at each OpenCode subagent
 dispatch and result boundary. Resolve disagreements claim-by-claim against the
 supplied evidence and record the evidence reference; unresolved conflicts remain
 blocked and return to the manager. Never vote between agents or start another worker or

package/dist/assets/agents/mapper.md

@@ -3,10 +3,10 @@ description: Maps relevant files, callers, tests, and established repository pat
 mode: subagent
 hidden: true
 steps: 12
-permission:
-  edit: deny
-  bash: deny
-  task: deny
+permissions:
+  - { action: edit, resource: "*", effect: deny }
+  - { action: shell, resource: "*", effect: deny }
+  - { action: subagent, resource: "*", effect: deny }
 ---
 
 # Mapper

package/dist/assets/agents/review.md

@@ -1,16 +1,15 @@
 ---
 description: Reviews exact targets, coordinates independent critics, and applies fixes only on explicit request. Russian triggers: ревью, проверка.
 mode: all
-permission:
-  edit: allow
-  bash: allow
-  task:
-    "*": deny
-    critic: allow
-  webfetch: deny
-  websearch: deny
-  question: allow
-  skill: allow
+permissions:
+  - { action: edit, resource: "*", effect: allow }
+  - { action: shell, resource: "*", effect: allow }
+  - { action: subagent, resource: "*", effect: deny }
+  - { action: subagent, resource: "critic", effect: allow }
+  - { action: webfetch, resource: "*", effect: deny }
+  - { action: websearch, resource: "*", effect: deny }
+  - { action: question, resource: "*", effect: allow }
+  - { action: skill, resource: "*", effect: allow }
 ---
 
 # Reviewer
@@ -25,9 +24,9 @@ in force during review. Report changed files and checks after fixes.
 
 Use independent critics when the selected skill requires them or the user requests
 them. Select exactly
-one critic from this profile's exact task allowlist; never infer or expand the pool
+one critic from this profile's exact subagent allowlist; never infer or expand the pool
 with a prefix wildcard or auto-fan-out. Send the critic its clean package and
-use `route` with the selected critic as the override before each Task call. Keep
+use `route` with the selected critic as the override before each subagent call. Keep
 the child's session independent from the primary review and withhold your findings
 while sharing the agreed scope, evidence, and accepted limitations. Validate its
 versioned `review_report` before use. Report only verified findings,

package/dist/assets/agents/worker.md

@@ -3,38 +3,35 @@ description: Implements scoped changes and runs the relevant verification. Russi
 mode: subagent
 hidden: true
 steps: 12
-permission:
-  edit: allow
-  task: deny
-  bash:
-    "*": ask
-    mypy: allow
-    "mypy *": allow
-    "ruff check*": allow
-    "ruff format --check*": allow
-    "task --list*": allow
-    "task -l*": allow
-    rg: deny
-    "rg *": deny
-    grep: deny
-    "grep *": deny
-    find: deny
-    "find *": deny
-    fd: deny
-    "fd *": deny
-    "git grep": deny
-    "git grep *": deny
-    "git -C * grep": deny
-    "git -C * grep *": deny
-    "git * grep": deny
-    "git * grep *": deny
-  glob: deny
-  grep: deny
-  list: deny
-  webfetch: deny
-  websearch: deny
-  skill: deny
-  lsp: deny
+permissions:
+  - { action: edit, resource: "*", effect: allow }
+  - { action: subagent, resource: "*", effect: deny }
+  - { action: shell, resource: "*", effect: ask }
+  - { action: shell, resource: "mypy", effect: allow }
+  - { action: shell, resource: "mypy *", effect: allow }
+  - { action: shell, resource: "ruff check*", effect: allow }
+  - { action: shell, resource: "ruff format --check*", effect: allow }
+  - { action: shell, resource: "task --list*", effect: allow }
+  - { action: shell, resource: "task -l*", effect: allow }
+  - { action: shell, resource: "rg", effect: deny }
+  - { action: shell, resource: "rg *", effect: deny }
+  - { action: shell, resource: "grep", effect: deny }
+  - { action: shell, resource: "grep *", effect: deny }
+  - { action: shell, resource: "find", effect: deny }
+  - { action: shell, resource: "find *", effect: deny }
+  - { action: shell, resource: "fd", effect: deny }
+  - { action: shell, resource: "fd *", effect: deny }
+  - { action: shell, resource: "git grep", effect: deny }
+  - { action: shell, resource: "git grep *", effect: deny }
+  - { action: shell, resource: "git -C * grep", effect: deny }
+  - { action: shell, resource: "git -C * grep *", effect: deny }
+  - { action: shell, resource: "git * grep", effect: deny }
+  - { action: shell, resource: "git * grep *", effect: deny }
+  - { action: glob, resource: "*", effect: deny }
+  - { action: grep, resource: "*", effect: deny }
+  - { action: webfetch, resource: "*", effect: deny }
+  - { action: websearch, resource: "*", effect: deny }
+  - { action: skill, resource: "*", effect: deny }
 ---
 
 # Worker