@nail00749/agent-gvozd 0.1.2 → 0.1.4

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (19) hide show
  1. package/README.md +12 -6
  2. package/defaults/agents/devops.jsonc +138 -29
  3. package/defaults/agents/git.jsonc +950 -36
  4. package/defaults/agents/verifier.jsonc +1283 -20
  5. package/defaults/prompts/back-deep.md +1 -1
  6. package/defaults/prompts/back-fast.md +1 -1
  7. package/defaults/prompts/devops.md +1 -1
  8. package/defaults/prompts/docs.md +1 -1
  9. package/defaults/prompts/front-deep.md +1 -1
  10. package/defaults/prompts/front-fast.md +1 -1
  11. package/defaults/prompts/git.md +3 -1
  12. package/defaults/prompts/master.md +10 -1
  13. package/defaults/prompts/researcher.md +1 -1
  14. package/defaults/prompts/review-deep.md +1 -1
  15. package/defaults/prompts/verifier.md +3 -1
  16. package/defaults/schema.json +11 -1
  17. package/dist/cli.js +475 -8
  18. package/dist/index.js +350 -258
  19. package/package.json +1 -1
package/README.md CHANGED
@@ -263,10 +263,11 @@ reservations fail immediately, and `edit`, `write`, or `apply_patch` targets
263
263
  outside the claimed lease are denied.
264
264
 
265
265
  Writer and coordinator agents cannot use arbitrary shell commands because
266
- shell writes cannot be safely inferred from command text. Verifier runs builds
267
- and tests only after active writer leases are released. If a writer discovers
268
- another required file, it reports the exact path to Master, which can extend
269
- the lease after a conflict check or serialize the work.
266
+ shell writes cannot be safely inferred from command text. Read-only roles keep
267
+ running the toolchain verification baseline while writer leases are active;
268
+ only approval-gated commands pause until the leases are released. If a writer
269
+ discovers another required file, it reports the exact path to Master, which can
270
+ extend the lease after a conflict check or serialize the work.
270
271
 
271
272
  Leases are in-memory and protect child sessions within one OpenCode server
272
273
  process. Unclaimed reservations expire after five minutes; active leases expire
@@ -379,8 +380,13 @@ Researcher, Git, and Docs prefer `openai/gpt-5.6-luna` with
379
380
  `openai/gpt-5.6-sol` as fallback. Explorer prefers
380
381
  `openai/gpt-5.3-codex-spark` with `openai/gpt-5.6-luna` as fallback. Researcher
381
382
  is restricted to web search and fetch tools; Explorer is restricted to local
382
- glob, grep, and read tools. Git allows common read-only Git commands and asks
383
- for approval before diff/history inspection or any mutating Git command. Docs
383
+ glob, grep, and read tools. Git and Verifier allow read-only Git commands and
384
+ listing forms (status, diff, log, show, rev-parse, ls-files, branch, tag,
385
+ remote, symbolic-ref HEAD, reflog, worktree list); any form that creates,
386
+ deletes, renames, or rewrites state requires approval, and destructive
387
+ commands (push --force, reset --hard, clean, rebase, branch -D, remote
388
+ remove/set-url/add, restore, checkout --, filter-branch/filter-repo) are
389
+ denied outright. Docs
384
390
  can edit Markdown and files under `docs/`; edits elsewhere require approval,
385
391
  and shell access is denied.
386
392
 
package/defaults/agents/devops.jsonc CHANGED
@@ -10,35 +10,144 @@
10
10
  "skills": [
11
11
  "verification-before-completion"
12
12
  ],
13
- "mcp": ["context7"],
13
+ "mcp": [
14
+ "context7"
15
+ ],
14
16
  "permissions": [
15
- { "action": "*", "resource": "*", "effect": "deny" },
16
- { "action": "read", "resource": "*", "effect": "allow" },
17
- { "action": "glob", "resource": "*", "effect": "allow" },
18
- { "action": "grep", "resource": "*", "effect": "allow" },
19
- { "action": "edit", "resource": "*", "effect": "ask" },
20
- { "action": "edit", "resource": "Dockerfile", "effect": "allow" },
21
- { "action": "edit", "resource": "Dockerfile.*", "effect": "allow" },
22
- { "action": "edit", "resource": "docker-compose*.yml", "effect": "allow" },
23
- { "action": "edit", "resource": "docker-compose*.yaml", "effect": "allow" },
24
- { "action": "edit", "resource": "compose.yml", "effect": "allow" },
25
- { "action": "edit", "resource": "compose.yaml", "effect": "allow" },
26
- { "action": "edit", "resource": ".github/workflows/*", "effect": "allow" },
27
- { "action": "edit", "resource": ".gitlab-ci.yml", "effect": "allow" },
28
- { "action": "edit", "resource": "deploy/*", "effect": "allow" },
29
- { "action": "edit", "resource": "infra/*", "effect": "allow" },
30
- { "action": "edit", "resource": "k8s/*", "effect": "allow" },
31
- { "action": "edit", "resource": "helm/*", "effect": "allow" },
32
- { "action": "shell", "resource": "*", "effect": "ask" },
33
- { "action": "gitlab_*", "resource": "*", "effect": "ask" },
34
- { "action": "gitlab_get_*", "resource": "*", "effect": "allow" },
35
- { "action": "gitlab_list_*", "resource": "*", "effect": "allow" },
36
- { "action": "gitlab_search_*", "resource": "*", "effect": "allow" },
37
- { "action": "gitlab_validate_*", "resource": "*", "effect": "allow" },
38
- { "action": "gitlab_health_check", "resource": "*", "effect": "allow" },
39
- { "action": "gitlab_get_project_variable", "resource": "*", "effect": "deny" },
40
- { "action": "gitlab_get_group_variable", "resource": "*", "effect": "deny" },
41
- { "action": "gitlab_list_project_variables", "resource": "*", "effect": "deny" },
42
- { "action": "gitlab_list_group_variables", "resource": "*", "effect": "deny" }
17
+ {
18
+ "action": "*",
19
+ "resource": "*",
20
+ "effect": "deny"
21
+ },
22
+ {
23
+ "action": "read",
24
+ "resource": "*",
25
+ "effect": "allow"
26
+ },
27
+ {
28
+ "action": "glob",
29
+ "resource": "*",
30
+ "effect": "allow"
31
+ },
32
+ {
33
+ "action": "grep",
34
+ "resource": "*",
35
+ "effect": "allow"
36
+ },
37
+ {
38
+ "action": "edit",
39
+ "resource": "*",
40
+ "effect": "ask"
41
+ },
42
+ {
43
+ "action": "edit",
44
+ "resource": "Dockerfile",
45
+ "effect": "allow"
46
+ },
47
+ {
48
+ "action": "edit",
49
+ "resource": "Dockerfile.*",
50
+ "effect": "allow"
51
+ },
52
+ {
53
+ "action": "edit",
54
+ "resource": "docker-compose*.yml",
55
+ "effect": "allow"
56
+ },
57
+ {
58
+ "action": "edit",
59
+ "resource": "docker-compose*.yaml",
60
+ "effect": "allow"
61
+ },
62
+ {
63
+ "action": "edit",
64
+ "resource": "compose.yml",
65
+ "effect": "allow"
66
+ },
67
+ {
68
+ "action": "edit",
69
+ "resource": "compose.yaml",
70
+ "effect": "allow"
71
+ },
72
+ {
73
+ "action": "edit",
74
+ "resource": ".github/workflows/*",
75
+ "effect": "allow"
76
+ },
77
+ {
78
+ "action": "edit",
79
+ "resource": ".gitlab-ci.yml",
80
+ "effect": "allow"
81
+ },
82
+ {
83
+ "action": "edit",
84
+ "resource": "deploy/*",
85
+ "effect": "allow"
86
+ },
87
+ {
88
+ "action": "edit",
89
+ "resource": "infra/*",
90
+ "effect": "allow"
91
+ },
92
+ {
93
+ "action": "edit",
94
+ "resource": "k8s/*",
95
+ "effect": "allow"
96
+ },
97
+ {
98
+ "action": "edit",
99
+ "resource": "helm/*",
100
+ "effect": "allow"
101
+ },
102
+ {
103
+ "action": "gitlab_*",
104
+ "resource": "*",
105
+ "effect": "ask"
106
+ },
107
+ {
108
+ "action": "gitlab_get_*",
109
+ "resource": "*",
110
+ "effect": "allow"
111
+ },
112
+ {
113
+ "action": "gitlab_list_*",
114
+ "resource": "*",
115
+ "effect": "allow"
116
+ },
117
+ {
118
+ "action": "gitlab_search_*",
119
+ "resource": "*",
120
+ "effect": "allow"
121
+ },
122
+ {
123
+ "action": "gitlab_validate_*",
124
+ "resource": "*",
125
+ "effect": "allow"
126
+ },
127
+ {
128
+ "action": "gitlab_health_check",
129
+ "resource": "*",
130
+ "effect": "allow"
131
+ },
132
+ {
133
+ "action": "gitlab_get_project_variable",
134
+ "resource": "*",
135
+ "effect": "deny"
136
+ },
137
+ {
138
+ "action": "gitlab_get_group_variable",
139
+ "resource": "*",
140
+ "effect": "deny"
141
+ },
142
+ {
143
+ "action": "gitlab_list_project_variables",
144
+ "resource": "*",
145
+ "effect": "deny"
146
+ },
147
+ {
148
+ "action": "gitlab_list_group_variables",
149
+ "resource": "*",
150
+ "effect": "deny"
151
+ }
43
152
  ]
44
153
  }