@nail00749/agent-gvozd 0.1.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 nail00749
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,233 @@
+# Gvozd for OpenCode V2
+
+Gvozd installs one permission-aware agent team globally, so every OpenCode
+project can use it without copying plugin or agent files into the repository.
+The first release targets OpenCode V2 `0.0.0-beta-19425` exactly.
+
+## Global setup
+
+Run the guided setup once:
+
+```bash
+npx @nail00749/agent-gvozd setup
+```
+
+Or with Bun:
+
+```bash
+bunx @nail00749/agent-gvozd setup
+```
+
+The wizard discovers `opencode2` (then `opencode`), reads the live model
+catalog, asks for fast and deep preferences, registers the plugin through
+OpenCode, writes marker-owned global agents, restarts the service, and runs a
+read-only doctor. It does not configure provider credentials. Authenticate with
+OpenCode first if the desired provider is absent from `opencode models`.
+
+For a deterministic unattended rerun, use `gvozd setup --yes`. It retains a
+valid existing profile, or selects the built-in OpenAI preset only when Luna,
+Sol, and Codex Spark are all available. Rerunning setup is the supported v0.1
+upgrade path.
+
+Inspect an installation at any time:
+
+```bash
+gvozd doctor
+gvozd doctor --json
+```
+
+Setup owns `<OpenCode config>/gvozd/config.jsonc`, its generated schema, and
+the Gvozd Markdown files under `<OpenCode config>/agents`. It refuses to
+overwrite unmanaged agent or schema files and preserves unrelated JSONC fields
+and comments. Project overrides under `docs/.gvozd` still take precedence.
+
+The installed team contains:
+
+- `master` — primary coordinator
+- `planner` — read-only planning subagent
+- `back-fast` / `back-deep` — fast and deep backend implementation tiers
+- `front-fast` / `front-deep` — fast and deep frontend implementation tiers
+- `review-fast` / `review-deep` — fast and deep read-only review tiers
+- `researcher` — source-backed internet research
+- `explorer` — read-only local file and execution-path discovery
+- `git` — focused Git inspection and explicitly authorized operations
+- `docs` — documentation, examples, and migration notes
+- `verifier` — independent build, runtime, and manual scenario verification
+- `debugger` — read-only root-cause investigation
+- `security` — read-only security and trust-boundary review
+- `devops` — CI, Docker, infrastructure, deployment, and release configuration
+
+## Development setup
+
+```bash
+bun install
+bun run sync
+opencode2 service restart
+```
+
+`bun run sync` materializes the resolved configuration as native
+`.opencode/agents/*.md` files and installs the local plugin entrypoint at
+`.opencode/plugins/agent-gvozd/index.ts`. OpenCode V2 discovers that entrypoint
+automatically.
+
+Run `bun run sync --check` to report drift without changing files. The command
+prints a diff before replacing or removing an existing generated agent and
+never overwrites an agent file it does not own.
+
+Run `bun test`, `bun run typecheck`, and `bun run build` for local verification.
+
+## Configuration layers
+
+Configuration is merged in this order:
+
+1. package defaults in `defaults/default.jsonc` and `defaults/agents/*.jsonc`
+2. global overrides under the platform/XDG OpenCode config root in `gvozd/config.jsonc`
+3. project overrides in `<project>/docs/.gvozd/config.jsonc` and its `agents/` directory
+
+Later scalar values replace earlier values. Arrays such as `models`, `skills`,
+`mcp`, and `permissions` replace the complete earlier array.
+
+## Cooperative file leases
+
+Writer agents coordinate exact project files before editing them. The default
+roles are:
+
+- `master`: `coordinator`
+- backend, frontend, Docs, and DevOps agents: `writer`
+- planning, exploration, review, research, Git, verification, debugging, and
+  security agents: `readonly`
+
+Custom agents default to `readonly`. Set `fileLease` explicitly when a custom
+agent must write:
+
+```jsonc
+{
+  "agents": {
+    "custom-writer": {
+      "fileLease": "writer"
+    }
+  }
+}
+```
+
+Before parallel writer delegation, Master asks Explorer for the exact existing
+and planned files in each independent work package. Master reserves each set
+with `gvozd_lease` and passes the returned `leaseId` to the matching writer.
+The writer calls `gvozd_claim` before its first mutation. Overlapping
+reservations fail immediately, and `edit`, `write`, or `apply_patch` targets
+outside the claimed lease are denied.
+
+Writer and coordinator agents cannot use arbitrary shell commands because
+shell writes cannot be safely inferred from command text. Verifier runs builds
+and tests only after active writer leases are released. If a writer discovers
+another required file, it reports the exact path to Master, which can extend
+the lease after a conflict check or serialize the work.
+
+Leases are in-memory and protect child sessions within one OpenCode server
+process. Unclaimed reservations expire after five minutes; active leases expire
+after thirty minutes without tool activity and are released on terminal session
+events. Separate OpenCode processes and remote hosts are not coordinated.
+
+An agent override can be inline:
+
+```jsonc
+{
+  "$schema": "./schema.json",
+  "defaultAgent": "master",
+  "agents": {
+    "review-deep": {
+      "models": [
+        "openai/gpt-5.6-sol",
+        "openai/gpt-5.6-luna"
+      ],
+      "skills": ["code-review"],
+      "mcp": ["gitlab"]
+    }
+  }
+}
+```
+
+Or it can live in `docs/.gvozd/agents/review-deep.jsonc`. Relative prompt paths
+are resolved from the file that declares them. Prompt files and a custom
+`agentsDirectory` must remain inside the configuration layer that owns them;
+sync rejects symlinked output directories and files.
+
+`skills` contains exact skill IDs. `mcp` contains MCP server names; the plugin
+converts them to the V2 `<server>_*` permission action. Use explicit
+`permissions` with a matching normalized action (for example,
+`gitlab_get_issue`) when an agent should receive only selected tools from a
+server. If an MCP action can match more than one normalized server prefix,
+access to that ambiguous action is denied.
+
+## Default capabilities
+
+The built-in team uses exact skill IDs and tool-level MCP permissions from the
+current OpenCode setup. Server-wide `mcp` grants remain empty by default because
+GitLab, GitNexus, and Playwright each expose actions that are too broad for at
+least one receiving role.
+
+| Agents | Skills | MCP access |
+| --- | --- | --- |
+| `planner` | verification planning, ASCII UI review, GitNexus impact | GitNexus read-only |
+| `back-deep` | GitNexus impact and refactoring | GitNexus except group sync |
+| `front-fast` | modern web and interface polish | Playwright observation; interactions ask |
+| `front-deep` | frontend/layout skills plus GitNexus impact/refactoring | GitNexus except group sync; Playwright interactions ask |
+| `review-fast` | code review | read-only GitLab without CI variables |
+| `review-deep` | code review and GitNexus review/impact | read-only GitLab and GitNexus |
+| `explorer` | GitNexus exploration | GitNexus read-only |
+| `git` | none | GitLab reads; mutations ask; CI variables denied |
+| `verifier` | verification before completion | read-only GitNexus; Playwright interactions ask |
+| `debugger` | systematic debugging and GitNexus debugging/PDG | read-only GitNexus; Playwright interactions ask |
+| `security` | code review and GitNexus taint/PDG | read-only GitLab/GitNexus; Playwright interactions ask |
+| `devops` | verification before completion | GitLab reads and CI validation; mutations ask; CI variables denied |
+
+`master`, `back-fast`, `researcher`, and `docs` intentionally keep their
+existing narrow capability sets. TDD skills are not enabled implicitly.
+
+## Model order
+
+`models` is an ordered preference list. During plugin activation, agent-gvozd
+selects the first enabled model and variant present in the OpenCode catalog. If
+none is currently catalogued, it preserves the first configured model so that
+OpenCode can report the underlying availability problem.
+
+OpenCode V2 currently exposes only one model on an agent and does not expose a
+safe hook for replacing that model inside an already dispatched provider
+request. The ordered list therefore handles activation-time availability; an
+outage or rate limit after dispatch still follows OpenCode's own retry policy.
+
+## Fast and deep routing
+
+Fast workers and reviewers prefer `openai/gpt-5.6-luna` with
+`openai/gpt-5.6-sol` as fallback. Deep agents use the reverse order. Master
+selects the tier from task complexity and risk: localized, clear, low-risk
+changes go to fast; ambiguous, cross-module, security-sensitive, migration,
+concurrency, or otherwise material work goes to deep. Review depth is selected
+independently from implementation depth.
+
+Researcher, Git, and Docs prefer `openai/gpt-5.6-luna` with
+`openai/gpt-5.6-sol` as fallback. Explorer prefers
+`openai/gpt-5.3-codex-spark` with `openai/gpt-5.6-luna` as fallback. Researcher
+is restricted to web search and fetch tools; Explorer is restricted to local
+glob, grep, and read tools. Git allows common read-only Git commands and asks
+for approval before diff/history inspection or any mutating Git command. Docs
+can edit Markdown and files under `docs/`; edits elsewhere require approval,
+and shell access is denied.
+
+Verifier uses `openai/gpt-5.6-luna` with `openai/gpt-5.6-sol` as fallback.
+Debugger, Security, and DevOps use the reverse order. Verifier, Debugger, and
+Security are read-only and require approval for shell commands. DevOps can edit
+common CI, Docker, and infrastructure paths; other edits and every shell or
+external mutation require approval.
+
+This pre-release change replaces the earlier single-tier agent IDs. Existing
+global or project overrides must be split explicitly:
+
+| Previous ID | New IDs |
+| --- | --- |
+| `backender` | `back-fast`, `back-deep` |
+| `frontend` | `front-fast`, `front-deep` |
+| `reviewer` | `review-fast`, `review-deep` |
+
+There are no automatic aliases because copying one override to both tiers could
+silently give them the same model order and defeat complexity-based routing.

package/defaults/agents/back-deep.jsonc

@@ -0,0 +1,20 @@
+{
+  "description": "Implements complex or high-risk backend, data, API, and integration changes.",
+  "mode": "subagent",
+  "fileLease": "writer",
+  "models": [
+    "openai/gpt-5.6-sol",
+    "openai/gpt-5.6-luna"
+  ],
+  "prompt": "../prompts/back-deep.md",
+  "skills": [
+    "gitnexus-impact-analysis",
+    "gitnexus-refactoring"
+  ],
+  "mcp": [],
+  "permissions": [
+    { "action": "subagent", "resource": "*", "effect": "deny" },
+    { "action": "gitnexus_*", "resource": "*", "effect": "allow" },
+    { "action": "gitnexus_group_sync", "resource": "*", "effect": "deny" }
+  ]
+}

package/defaults/agents/back-fast.jsonc

@@ -0,0 +1,15 @@
+{
+  "description": "Implements small, clear, low-risk backend changes with minimal exploration.",
+  "mode": "subagent",
+  "fileLease": "writer",
+  "models": [
+    "openai/gpt-5.6-luna",
+    "openai/gpt-5.6-sol"
+  ],
+  "prompt": "../prompts/back-fast.md",
+  "skills": [],
+  "mcp": [],
+  "permissions": [
+    { "action": "subagent", "resource": "*", "effect": "deny" }
+  ]
+}

package/defaults/agents/debugger.jsonc

@@ -0,0 +1,37 @@
+{
+  "description": "Diagnoses unclear failures and establishes a concrete root cause without modifying files.",
+  "mode": "subagent",
+  "fileLease": "readonly",
+  "models": [
+    "openai/gpt-5.6-sol",
+    "openai/gpt-5.6-luna"
+  ],
+  "prompt": "../prompts/debugger.md",
+  "skills": [
+    "systematic-debugging",
+    "gitnexus-debugging",
+    "gitnexus-pdg-query"
+  ],
+  "mcp": [],
+  "permissions": [
+    { "action": "*", "resource": "*", "effect": "deny" },
+    { "action": "read", "resource": "*", "effect": "allow" },
+    { "action": "glob", "resource": "*", "effect": "allow" },
+    { "action": "grep", "resource": "*", "effect": "allow" },
+    { "action": "shell", "resource": "*", "effect": "ask" },
+    { "action": "gitnexus_*", "resource": "*", "effect": "allow" },
+    { "action": "gitnexus_rename", "resource": "*", "effect": "deny" },
+    { "action": "gitnexus_group_sync", "resource": "*", "effect": "deny" },
+    { "action": "playwright_*", "resource": "*", "effect": "ask" },
+    { "action": "playwright_browser_get_config", "resource": "*", "effect": "allow" },
+    { "action": "playwright_browser_snapshot", "resource": "*", "effect": "allow" },
+    { "action": "playwright_browser_take_screenshot", "resource": "*", "effect": "allow" },
+    { "action": "playwright_browser_console_messages", "resource": "*", "effect": "allow" },
+    { "action": "playwright_browser_network_requests", "resource": "*", "effect": "allow" },
+    { "action": "playwright_browser_tabs", "resource": "*", "effect": "allow" },
+    { "action": "playwright_browser_find", "resource": "*", "effect": "allow" },
+    { "action": "playwright_browser_generate_locator", "resource": "*", "effect": "allow" },
+    { "action": "playwright_browser_verify_*", "resource": "*", "effect": "allow" },
+    { "action": "playwright_browser_run_code_unsafe", "resource": "*", "effect": "deny" }
+  ]
+}

package/defaults/agents/devops.jsonc

@@ -0,0 +1,42 @@
+{
+  "description": "Implements focused CI, Docker, infrastructure, deployment, and release configuration changes.",
+  "mode": "subagent",
+  "fileLease": "writer",
+  "models": [
+    "openai/gpt-5.6-sol",
+    "openai/gpt-5.6-luna"
+  ],
+  "prompt": "../prompts/devops.md",
+  "skills": [
+    "verification-before-completion"
+  ],
+  "mcp": [],
+  "permissions": [
+    { "action": "*", "resource": "*", "effect": "deny" },
+    { "action": "read", "resource": "*", "effect": "allow" },
+    { "action": "glob", "resource": "*", "effect": "allow" },
+    { "action": "grep", "resource": "*", "effect": "allow" },
+    { "action": "edit", "resource": "*", "effect": "ask" },
+    { "action": "edit", "resource": "Dockerfile", "effect": "allow" },
+    { "action": "edit", "resource": "Dockerfile.*", "effect": "allow" },
+    { "action": "edit", "resource": "docker-compose*.yml", "effect": "allow" },
+    { "action": "edit", "resource": "docker-compose*.yaml", "effect": "allow" },
+    { "action": "edit", "resource": ".github/workflows/*", "effect": "allow" },
+    { "action": "edit", "resource": ".gitlab-ci.yml", "effect": "allow" },
+    { "action": "edit", "resource": "deploy/*", "effect": "allow" },
+    { "action": "edit", "resource": "infra/*", "effect": "allow" },
+    { "action": "edit", "resource": "k8s/*", "effect": "allow" },
+    { "action": "edit", "resource": "helm/*", "effect": "allow" },
+    { "action": "shell", "resource": "*", "effect": "ask" },
+    { "action": "gitlab_*", "resource": "*", "effect": "ask" },
+    { "action": "gitlab_get_*", "resource": "*", "effect": "allow" },
+    { "action": "gitlab_list_*", "resource": "*", "effect": "allow" },
+    { "action": "gitlab_search_*", "resource": "*", "effect": "allow" },
+    { "action": "gitlab_validate_*", "resource": "*", "effect": "allow" },
+    { "action": "gitlab_health_check", "resource": "*", "effect": "allow" },
+    { "action": "gitlab_get_project_variable", "resource": "*", "effect": "deny" },
+    { "action": "gitlab_get_group_variable", "resource": "*", "effect": "deny" },
+    { "action": "gitlab_list_project_variables", "resource": "*", "effect": "deny" },
+    { "action": "gitlab_list_group_variables", "resource": "*", "effect": "deny" }
+  ]
+}

package/defaults/agents/docs.jsonc

@@ -0,0 +1,22 @@
+{
+  "description": "Writes and updates focused project documentation, examples, and migration notes.",
+  "mode": "subagent",
+  "fileLease": "writer",
+  "models": [
+    "openai/gpt-5.6-luna",
+    "openai/gpt-5.6-sol"
+  ],
+  "prompt": "../prompts/docs.md",
+  "skills": [],
+  "mcp": [],
+  "permissions": [
+    { "action": "*", "resource": "*", "effect": "deny" },
+    { "action": "read", "resource": "*", "effect": "allow" },
+    { "action": "glob", "resource": "*", "effect": "allow" },
+    { "action": "grep", "resource": "*", "effect": "allow" },
+    { "action": "edit", "resource": "*", "effect": "ask" },
+    { "action": "edit", "resource": "*.md", "effect": "allow" },
+    { "action": "edit", "resource": "*.mdx", "effect": "allow" },
+    { "action": "edit", "resource": "docs/*", "effect": "allow" }
+  ]
+}

package/defaults/agents/explorer.jsonc

@@ -0,0 +1,23 @@
+{
+  "description": "Finds relevant files, symbols, and local execution paths without changing the workspace.",
+  "mode": "subagent",
+  "fileLease": "readonly",
+  "models": [
+    "openai/gpt-5.3-codex-spark",
+    "openai/gpt-5.6-luna"
+  ],
+  "prompt": "../prompts/explorer.md",
+  "skills": [
+    "gitnexus-exploring"
+  ],
+  "mcp": [],
+  "permissions": [
+    { "action": "*", "resource": "*", "effect": "deny" },
+    { "action": "glob", "resource": "*", "effect": "allow" },
+    { "action": "grep", "resource": "*", "effect": "allow" },
+    { "action": "read", "resource": "*", "effect": "allow" },
+    { "action": "gitnexus_*", "resource": "*", "effect": "allow" },
+    { "action": "gitnexus_rename", "resource": "*", "effect": "deny" },
+    { "action": "gitnexus_group_sync", "resource": "*", "effect": "deny" }
+  ]
+}

package/defaults/agents/front-deep.jsonc

@@ -0,0 +1,34 @@
+{
+  "description": "Implements complex frontend architecture, state, UX, and accessibility changes.",
+  "mode": "subagent",
+  "fileLease": "writer",
+  "models": [
+    "openai/gpt-5.6-sol",
+    "openai/gpt-5.6-luna"
+  ],
+  "prompt": "../prompts/front-deep.md",
+  "skills": [
+    "modern-web-guidance",
+    "make-interfaces-feel-better",
+    "ascii-ui-review",
+    "gitnexus-impact-analysis",
+    "gitnexus-refactoring"
+  ],
+  "mcp": [],
+  "permissions": [
+    { "action": "subagent", "resource": "*", "effect": "deny" },
+    { "action": "gitnexus_*", "resource": "*", "effect": "allow" },
+    { "action": "gitnexus_group_sync", "resource": "*", "effect": "deny" },
+    { "action": "playwright_*", "resource": "*", "effect": "ask" },
+    { "action": "playwright_browser_get_config", "resource": "*", "effect": "allow" },
+    { "action": "playwright_browser_snapshot", "resource": "*", "effect": "allow" },
+    { "action": "playwright_browser_take_screenshot", "resource": "*", "effect": "allow" },
+    { "action": "playwright_browser_console_messages", "resource": "*", "effect": "allow" },
+    { "action": "playwright_browser_network_requests", "resource": "*", "effect": "allow" },
+    { "action": "playwright_browser_tabs", "resource": "*", "effect": "allow" },
+    { "action": "playwright_browser_find", "resource": "*", "effect": "allow" },
+    { "action": "playwright_browser_generate_locator", "resource": "*", "effect": "allow" },
+    { "action": "playwright_browser_verify_*", "resource": "*", "effect": "allow" },
+    { "action": "playwright_browser_run_code_unsafe", "resource": "*", "effect": "deny" }
+  ]
+}

package/defaults/agents/front-fast.jsonc

@@ -0,0 +1,29 @@
+{
+  "description": "Implements small, clear, low-risk frontend and styling changes with minimal exploration.",
+  "mode": "subagent",
+  "fileLease": "writer",
+  "models": [
+    "openai/gpt-5.6-luna",
+    "openai/gpt-5.6-sol"
+  ],
+  "prompt": "../prompts/front-fast.md",
+  "skills": [
+    "modern-web-guidance",
+    "make-interfaces-feel-better"
+  ],
+  "mcp": [],
+  "permissions": [
+    { "action": "subagent", "resource": "*", "effect": "deny" },
+    { "action": "playwright_*", "resource": "*", "effect": "ask" },
+    { "action": "playwright_browser_get_config", "resource": "*", "effect": "allow" },
+    { "action": "playwright_browser_snapshot", "resource": "*", "effect": "allow" },
+    { "action": "playwright_browser_take_screenshot", "resource": "*", "effect": "allow" },
+    { "action": "playwright_browser_console_messages", "resource": "*", "effect": "allow" },
+    { "action": "playwright_browser_network_requests", "resource": "*", "effect": "allow" },
+    { "action": "playwright_browser_tabs", "resource": "*", "effect": "allow" },
+    { "action": "playwright_browser_find", "resource": "*", "effect": "allow" },
+    { "action": "playwright_browser_generate_locator", "resource": "*", "effect": "allow" },
+    { "action": "playwright_browser_verify_*", "resource": "*", "effect": "allow" },
+    { "action": "playwright_browser_run_code_unsafe", "resource": "*", "effect": "deny" }
+  ]
+}

package/defaults/agents/git.jsonc

@@ -0,0 +1,50 @@
+{
+  "description": "Handles focused Git inspection and explicitly authorized repository operations.",
+  "mode": "subagent",
+  "fileLease": "readonly",
+  "models": [
+    "openai/gpt-5.6-luna",
+    "openai/gpt-5.6-sol"
+  ],
+  "prompt": "../prompts/git.md",
+  "skills": [],
+  "mcp": [],
+  "permissions": [
+    { "action": "*", "resource": "*", "effect": "deny" },
+    { "action": "read", "resource": "*", "effect": "allow" },
+    { "action": "glob", "resource": "*", "effect": "allow" },
+    { "action": "grep", "resource": "*", "effect": "allow" },
+    { "action": "shell", "resource": "git *", "effect": "ask" },
+    { "action": "shell", "resource": "GIT_OPTIONAL_LOCKS=0 git *", "effect": "ask" },
+    { "action": "shell", "resource": "git status", "effect": "allow" },
+    { "action": "shell", "resource": "git status --short", "effect": "allow" },
+    { "action": "shell", "resource": "git status --short --branch", "effect": "allow" },
+    { "action": "shell", "resource": "git status --porcelain=v1 --branch", "effect": "allow" },
+    { "action": "shell", "resource": "git rev-parse --show-toplevel", "effect": "allow" },
+    { "action": "shell", "resource": "git rev-parse --git-dir", "effect": "allow" },
+    { "action": "shell", "resource": "git remote -v", "effect": "allow" },
+    { "action": "shell", "resource": "git branch --show-current", "effect": "allow" },
+    { "action": "shell", "resource": "git stash list", "effect": "allow" },
+    { "action": "shell", "resource": "GIT_OPTIONAL_LOCKS=0 git status", "effect": "allow" },
+    { "action": "shell", "resource": "GIT_OPTIONAL_LOCKS=0 git status --short", "effect": "allow" },
+    { "action": "shell", "resource": "GIT_OPTIONAL_LOCKS=0 git status --short --branch", "effect": "allow" },
+    { "action": "shell", "resource": "GIT_OPTIONAL_LOCKS=0 git status --porcelain=v1 --branch", "effect": "allow" },
+    { "action": "shell", "resource": "GIT_OPTIONAL_LOCKS=0 git rev-parse --show-toplevel", "effect": "allow" },
+    { "action": "shell", "resource": "GIT_OPTIONAL_LOCKS=0 git rev-parse --git-dir", "effect": "allow" },
+    { "action": "shell", "resource": "GIT_OPTIONAL_LOCKS=0 git remote -v", "effect": "allow" },
+    { "action": "shell", "resource": "GIT_OPTIONAL_LOCKS=0 git branch --show-current", "effect": "allow" },
+    { "action": "shell", "resource": "GIT_OPTIONAL_LOCKS=0 git stash list", "effect": "allow" },
+    { "action": "gitlab_*", "resource": "*", "effect": "ask" },
+    { "action": "gitlab_get_*", "resource": "*", "effect": "allow" },
+    { "action": "gitlab_list_*", "resource": "*", "effect": "allow" },
+    { "action": "gitlab_search_*", "resource": "*", "effect": "allow" },
+    { "action": "gitlab_my_issues", "resource": "*", "effect": "allow" },
+    { "action": "gitlab_mr_discussions", "resource": "*", "effect": "allow" },
+    { "action": "gitlab_whoami", "resource": "*", "effect": "allow" },
+    { "action": "gitlab_health_check", "resource": "*", "effect": "allow" },
+    { "action": "gitlab_get_project_variable", "resource": "*", "effect": "deny" },
+    { "action": "gitlab_get_group_variable", "resource": "*", "effect": "deny" },
+    { "action": "gitlab_list_project_variables", "resource": "*", "effect": "deny" },
+    { "action": "gitlab_list_group_variables", "resource": "*", "effect": "deny" }
+  ]
+}

package/defaults/agents/master.jsonc

@@ -0,0 +1,30 @@
+{
+  "description": "Coordinates planning, implementation, manual verification, and review.",
+  "mode": "primary",
+  "fileLease": "coordinator",
+  "models": [
+    "openai/gpt-5.6-sol",
+    "openai/gpt-5.6-luna"
+  ],
+  "prompt": "../prompts/master.md",
+  "skills": [],
+  "mcp": [],
+  "permissions": [
+    { "action": "subagent", "resource": "*", "effect": "deny" },
+    { "action": "subagent", "resource": "planner", "effect": "allow" },
+    { "action": "subagent", "resource": "back-fast", "effect": "allow" },
+    { "action": "subagent", "resource": "back-deep", "effect": "allow" },
+    { "action": "subagent", "resource": "front-fast", "effect": "allow" },
+    { "action": "subagent", "resource": "front-deep", "effect": "allow" },
+    { "action": "subagent", "resource": "review-fast", "effect": "allow" },
+    { "action": "subagent", "resource": "review-deep", "effect": "allow" },
+    { "action": "subagent", "resource": "researcher", "effect": "allow" },
+    { "action": "subagent", "resource": "explorer", "effect": "allow" },
+    { "action": "subagent", "resource": "git", "effect": "allow" },
+    { "action": "subagent", "resource": "docs", "effect": "allow" },
+    { "action": "subagent", "resource": "verifier", "effect": "allow" },
+    { "action": "subagent", "resource": "debugger", "effect": "allow" },
+    { "action": "subagent", "resource": "security", "effect": "allow" },
+    { "action": "subagent", "resource": "devops", "effect": "allow" }
+  ]
+}

package/defaults/agents/planner.jsonc

@@ -0,0 +1,24 @@
+{
+  "description": "Inspects the task and produces a concise implementation plan.",
+  "mode": "subagent",
+  "fileLease": "readonly",
+  "models": [
+    "openai/gpt-5.6-sol",
+    "openai/gpt-5.6-luna"
+  ],
+  "prompt": "../prompts/planner.md",
+  "skills": [
+    "verification-planning",
+    "ascii-ui-review",
+    "gitnexus-impact-analysis"
+  ],
+  "mcp": [],
+  "permissions": [
+    { "action": "edit", "resource": "*", "effect": "deny" },
+    { "action": "subagent", "resource": "*", "effect": "deny" },
+    { "action": "shell", "resource": "*", "effect": "ask" },
+    { "action": "gitnexus_*", "resource": "*", "effect": "allow" },
+    { "action": "gitnexus_rename", "resource": "*", "effect": "deny" },
+    { "action": "gitnexus_group_sync", "resource": "*", "effect": "deny" }
+  ]
+}

package/defaults/agents/researcher.jsonc

@@ -0,0 +1,17 @@
+{
+  "description": "Researches current external information on the internet and returns source-backed findings.",
+  "mode": "subagent",
+  "fileLease": "readonly",
+  "models": [
+    "openai/gpt-5.6-luna",
+    "openai/gpt-5.6-sol"
+  ],
+  "prompt": "../prompts/researcher.md",
+  "skills": [],
+  "mcp": [],
+  "permissions": [
+    { "action": "*", "resource": "*", "effect": "deny" },
+    { "action": "websearch", "resource": "*", "effect": "allow" },
+    { "action": "webfetch", "resource": "*", "effect": "allow" }
+  ]
+}