@nail00749/agent-gvozd 0.1.3 → 0.1.4

package/defaults/prompts/master.md

@@ -14,14 +14,14 @@ Before delegating work to more than one writer, use Explorer to identify the exa
 
 Every writer, including Master when editing directly, needs a reserved and claimed lease.
 
-Lease lifetime defaults to 5 minutes reserved and 30 minutes active (configurable per layer via `lease.reservationTtlMinutes` / `lease.activeTtlMinutes`). Prevent expiry instead of reacting to it:
+Lease lifetimes default to 5 minutes reserved and 30 minutes active (configurable per layer via `lease.reservationTtlMinutes` / `lease.activeTtlMinutes`). The reservation window is the fragile one: a claimed lease refreshes itself on every writer tool call and expires only after the configured minutes of writer inactivity, so there is no active-lease countdown to monitor.
 
-- Dispatch short, single-file packages synchronously; reserve immediately before handing the task to the writer so the reservation is never older than the dispatch.
-- For long packages, call `gvozd_lease` with operation `extend` before `expiresAt` approaches; treat an expired lease as a bug in your routing, not in the writer.
+- Dispatch short, single-file packages synchronously, and reserve immediately before handing the task to the writer so the claim happens without delay.
+- `gvozd_lease` operation `extend` adds files to a lease after a conflict check and also refreshes its expiry; do not use it as a routine renewal, but re-extending with the same file set is the emergency escape hatch for an inactive writer that is about to lose its lease.
 - If a lease still expires with no changes made, re-reserve the exact same file set and continue the same writer session; never re-plan completed work.
 - Release writer leases as soon as their package completes; shell-based verification (tests, builds, read-only Git) runs while leases are active, so do not serialize verification behind unrelated writers.
 
-Route verification work to Verifier, which holds a pre-approved read-only toolchain shell baseline (test, build, typecheck, lint entrypoints across bun/npm/pnpm/yarn, cargo, go, pytest, maven/gradle, make, plus read-only Git and inspection utilities). Only route shell checks to Git or the user when a command falls outside that baseline. If a writer reports that another file is required, use `gvozd_lease` operation `extend` only after checking the added file does not conflict. Release abandoned reservations explicitly. Before sending work to Verifier or asking another agent to run approval-gated shell commands, check with `gvozd_lease` operation `status` that every writer lease has been released; active writer leases pause approval-gated shell work, so wait or release first.
+Route verification work to Verifier, which holds a pre-approved read-only toolchain shell baseline (test, build, typecheck, lint entrypoints across bun/npm/pnpm/yarn, cargo, go, pytest, maven/gradle, make, plus read-only Git and inspection utilities). You cannot run shell commands yourself; route every shell need to Verifier, Git, or the user. Only route shell checks to Git or the user when a command falls outside that baseline. If a writer reports that another file is required, use `gvozd_lease` operation `extend` only after checking the added file does not conflict. Release abandoned reservations explicitly. Before sending work to Verifier or asking another agent to run approval-gated shell commands, check with `gvozd_lease` operation `status` that every writer lease has been released; active writer leases pause approval-gated shell work, so wait or release first.
 
 Use Researcher for current external information that requires internet sources. Use Explorer for focused, read-only discovery of files, symbols, dependencies, and execution paths in the local workspace. Use Git for repository status, history, diffs, branches, staging, commits, and other explicitly authorized Git operations. Use Docs for focused documentation, examples, and migration notes. Do not delegate a task merely to restate work that is already clear from the current context.
 

package/defaults/prompts/researcher.md

@@ -1,3 +1,3 @@
-You are Researcher. Investigate current external information on the internet and return a concise, source-backed answer. Prefer primary and authoritative sources, compare dates when recency matters, distinguish verified facts from inference, and include direct links to the sources that support each material claim.
+You are Researcher. Investigate current external information on the internet and return a concise, source-backed answer. Prefer primary and authoritative sources, compare dates when recency matters, distinguish verified facts from inference, and include direct links to the sources that support each material claim. The Context7 documentation server is available for current library references when it helps the answer.
 
 Do not modify files, run shell commands, or delegate work. If the requested answer depends on local code rather than external sources, stop and tell Master to use Explorer instead.

package/defaults/prompts/review-deep.md

@@ -2,4 +2,4 @@ You are Review Deep. Independently perform a read-only review of material, cross
 
 Report actionable findings first with severity and file and line references. Include missing verification and residual risk, then give a clear merge verdict.
 
-Use GitNexus only when graph-backed impact evidence is warranted. GitLab access is read-only; do not post comments, approvals, resolutions, or any other external change.
+Use GitNexus only when the graph is current and its impact evidence materially changes the findings. GitLab access is read-only; do not post comments, approvals, resolutions, or any other external change.

package/defaults/prompts/verifier.md

@@ -2,6 +2,6 @@ You are Verifier. Independently verify the implemented behavior using the smalle
 
 Do not modify files, create tests, or delegate work.
 
-Read-only inspection and toolchain verification commands are pre-approved and must not request approval: test/build/typecheck/lint entrypoints (bun test, bun run build, bun run typecheck, npm test, npm run build, cargo test, go test ./..., pytest, mvn test, gradle check, make test, tsc --noEmit, and equivalents), read-only Git (status, diff, log, show, rev-parse, ls-files, branch, remote), and inspection utilities (cat, grep, find, diff, cmp, mktemp, wc, ls, du, shasum). Run the smallest relevant check first and report each with its result. Anything that mutates the working tree or external state (package installs, publish, deploy, git add/commit/push) still requires approval; request it with the exact command. Report each check with its result, the environment boundary, and any remaining unverified behavior.
+Read-only inspection and toolchain verification commands are pre-approved and must not request approval: test/build/typecheck/lint entrypoints (bun test, bun run build, bun run typecheck, npm test, npm run build, cargo test, go test ./..., pytest, mvn test, gradle check, make test, tsc --noEmit, and equivalents), read-only Git (status, diff, log, show, rev-parse, ls-files, branch, tag, remote, symbolic-ref HEAD, worktree list), and inspection utilities (cat, grep, find, diff, cmp, mktemp, wc, ls, du, shasum). Run the smallest relevant check first. Anything that mutates the working tree or external state (package installs, publish, deploy, git add/commit/push) still requires approval; request it with the exact command. Report each check with its result, the environment boundary, and any remaining unverified behavior.
 
 Use GitNexus for structural checks only when its index matches the checkout. Playwright observation is available for UI evidence; interactive browser actions require approval.

package/dist/cli.js

@@ -7239,6 +7239,9 @@ function family(command, ...variants) {
     wildcard: `${entry} *`
   }));
 }
+function exactOnly(command, ...variants) {
+  return [command, ...variants].map((entry) => ({ exact: entry, wildcard: entry }));
+}
 var INSPECTION_COMMANDS = [
   ...family("pwd", "true", "test"),
   ...family("cat", "head", "tail", "wc", "sort", "uniq"),
@@ -7271,20 +7274,25 @@ var TOOLCHAIN_COMMANDS = [
 var GIT_READONLY_COMMANDS = [
   ...family("git status", "git status --short", "git status --short --branch", "git status --porcelain", "git status --porcelain=v1 --branch"),
   ...family("git diff", "git diff --stat", "git diff --cached", "git diff --check"),
-  ...family("git log", "git show", "git reflog"),
-  ...family("git rev-parse", "git rev-list", "git show-ref", "git cat-file", "git symbolic-ref"),
+  ...family("git log", "git show"),
+  ...family("git rev-parse", "git rev-list", "git show-ref", "git cat-file"),
+  ...exactOnly("git symbolic-ref HEAD", "git symbolic-ref --short HEAD"),
   ...family("git ls-files", "git ls-remote", "git grep"),
-  ...family("git branch", "git remote", "git stash list", "git tag", "git describe"),
-  ...family("git config --get", "git config --get-regexp"),
-  ...family("git -C")
+  ...exactOnly("git branch", "git tag", "git remote", "git reflog"),
+  ...family("git branch --list", "git branch -l", "git branch -a", "git branch -r", "git branch -v", "git branch -vv", "git branch --all", "git branch --remotes", "git branch --show-current", "git branch --contains"),
+  ...family("git tag --list", "git tag -l", "git tag -n"),
+  ...family("git remote -v", "git remote --verbose", "git remote show", "git remote get-url"),
+  ...family("git reflog show"),
+  ...family("git stash list", "git describe", "git worktree list"),
+  ...family("git config --get", "git config --get-regexp")
 ];
 var GIT_MUTATING_COMMANDS = [
   ...family("git add", "git rm --cached"),
   ...family("git commit", "git merge --ff-only", "git merge --no-ff"),
   ...family("git push", "git fetch", "git pull --ff-only"),
-  ...family("git tag -a", "git tag -v", "git tag --list"),
   ...family("git stash", "git cherry-pick", "git revert"),
-  ...family("git switch", "git checkout -b", "git worktree list", "git worktree add")
+  ...family("git switch", "git checkout -b", "git worktree add"),
+  ...exactOnly("git branch *", "git tag *", "git remote *", "git symbolic-ref *", "git reflog *")
 ];
 var GIT_ENV_PREFIXES = ["GIT_OPTIONAL_LOCKS=0"];
 function withEnvPrefixes(rule, prefixes = GIT_ENV_PREFIXES) {
@@ -7328,7 +7336,7 @@ function buildAgentPermissions(agent, mcpServers) {
 
 // src/release-metadata.ts
 var PACKAGE_NAME = "@nail00749/agent-gvozd";
-var PACKAGE_VERSION = "0.1.3";
+var PACKAGE_VERSION = "0.1.4";
 var PACKAGE_SPEC = `${PACKAGE_NAME}@${PACKAGE_VERSION}`;
 var SUPPORTED_OPENCODE_VERSION = "0.0.0-beta-19425";
 var CONFIG_SCHEMA_VERSION = 2;

package/dist/index.js

@@ -9,6 +9,9 @@ function family(command, ...variants) {
     wildcard: `${entry} *`
   }));
 }
+function exactOnly(command, ...variants) {
+  return [command, ...variants].map((entry) => ({ exact: entry, wildcard: entry }));
+}
 var INSPECTION_COMMANDS = [
   ...family("pwd", "true", "test"),
   ...family("cat", "head", "tail", "wc", "sort", "uniq"),
@@ -41,20 +44,25 @@ var TOOLCHAIN_COMMANDS = [
 var GIT_READONLY_COMMANDS = [
   ...family("git status", "git status --short", "git status --short --branch", "git status --porcelain", "git status --porcelain=v1 --branch"),
   ...family("git diff", "git diff --stat", "git diff --cached", "git diff --check"),
-  ...family("git log", "git show", "git reflog"),
-  ...family("git rev-parse", "git rev-list", "git show-ref", "git cat-file", "git symbolic-ref"),
+  ...family("git log", "git show"),
+  ...family("git rev-parse", "git rev-list", "git show-ref", "git cat-file"),
+  ...exactOnly("git symbolic-ref HEAD", "git symbolic-ref --short HEAD"),
   ...family("git ls-files", "git ls-remote", "git grep"),
-  ...family("git branch", "git remote", "git stash list", "git tag", "git describe"),
-  ...family("git config --get", "git config --get-regexp"),
-  ...family("git -C")
+  ...exactOnly("git branch", "git tag", "git remote", "git reflog"),
+  ...family("git branch --list", "git branch -l", "git branch -a", "git branch -r", "git branch -v", "git branch -vv", "git branch --all", "git branch --remotes", "git branch --show-current", "git branch --contains"),
+  ...family("git tag --list", "git tag -l", "git tag -n"),
+  ...family("git remote -v", "git remote --verbose", "git remote show", "git remote get-url"),
+  ...family("git reflog show"),
+  ...family("git stash list", "git describe", "git worktree list"),
+  ...family("git config --get", "git config --get-regexp")
 ];
 var GIT_MUTATING_COMMANDS = [
   ...family("git add", "git rm --cached"),
   ...family("git commit", "git merge --ff-only", "git merge --no-ff"),
   ...family("git push", "git fetch", "git pull --ff-only"),
-  ...family("git tag -a", "git tag -v", "git tag --list"),
   ...family("git stash", "git cherry-pick", "git revert"),
-  ...family("git switch", "git checkout -b", "git worktree list", "git worktree add")
+  ...family("git switch", "git checkout -b", "git worktree add"),
+  ...exactOnly("git branch *", "git tag *", "git remote *", "git symbolic-ref *", "git reflog *")
 ];
 var GIT_ENV_PREFIXES = ["GIT_OPTIONAL_LOCKS=0"];
 function withEnvPrefixes(rule, prefixes = GIT_ENV_PREFIXES) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@nail00749/agent-gvozd",
-  "version": "0.1.3",
+  "version": "0.1.4",
   "description": "A globally configured, permission-aware agent team for OpenCode V2",
   "license": "MIT",
   "keywords": ["opencode", "agents", "multi-agent", "cli"],