@plainconceptsplatform/workflows 1.6.16 → 1.6.23

package/loops/actions/verify-route-matrix/verify-route-matrix.sh

@@ -1788,6 +1788,63 @@ fi
 # leaving a verdict or an attempt is a loop: the train cannot tell a gate that declined from a gate
 # that has not run. Refusals are for what the train never hands over (a fork, a stranger, a pull
 # request that is not open), and the train filters those itself.
+# The implement run is mostly model turns and repeated verification: Pliny-Bot #694 reached its
+# full verification at minute forty-one after six scoped runs, and #751 spent fifteen of twenty-two
+# minutes in twelve tiny worker tasks. These sentences are what keep a run near twenty minutes.
+if worker_installed implement; then
+  if grep -qF 'Run them once, on the final tree.' "$IMPLEMENT_WORKER_MD"     && grep -qF 'on both paths, before the commands above.' "$IMPLEMENT_WORKER_MD"     && grep -qF 'Ask it for few, coarse tasks' "$IMPLEMENT_WORKER_MD"     && grep -qF 'WORK IN FEW TURNS' "$IMPLEMENT_WORKER_MD"; then
+    PASS=$((PASS + 1))
+  else
+    FAIL=$((FAIL + 1))
+    echo "FAIL: the implement prompt must verify once on the final tree, ask for coarse tasks and work in few turns" >&2
+  fi
+fi
+# gh-aw leaves OPENCODE_MODEL empty, so every lead ran on opencode.ci.json's one model. Each worker
+# names its own in AGENT_LEAD_MODEL, the merge step writes it onto ci-workflow-agent, and the model
+# it names, like every tier model in harness.json, has to be declared in opencode.ci.json or the
+# run dies at its first turn on "model not found".
+LEAD_OK=1
+# A consumer has it at its root; this package keeps the template beside the workflows.
+CI_JSON="${HERE}/../../../opencode.ci.json"
+[ -f "$CI_JSON" ] || CI_JSON="${HERE}/../../templates/opencode/opencode.ci.json"
+for route in refine implement triage apply-review merge-gate audit release; do
+  worker_md="${WORKFLOWS_DIR}/agent-${route}.md"
+  [ -f "$worker_md" ] || continue
+  lead=$(sed -n 's/^  AGENT_LEAD_MODEL: "\(.*\)"$/\1/p' "$worker_md")
+  if [ -z "$lead" ]; then
+    LEAD_OK=0; echo "FAIL: agent-${route} names no AGENT_LEAD_MODEL, so its session runs on the cheap default" >&2; continue
+  fi
+  if [ -f "$CI_JSON" ] && ! jq -e --arg p "${lead%%/*}" --arg m "${lead#*/}" '.providers[$p].models[$m]' "$CI_JSON" > /dev/null; then
+    LEAD_OK=0; echo "FAIL: agent-${route} leads on ${lead}, which opencode.ci.json does not declare" >&2
+  fi
+done
+if [ -f "${WORKFLOWS_DIR}/agent-refine.md" ] && grep -q '^  AGENT_LEAD_MODEL: "forge/carina' "${WORKFLOWS_DIR}/agent-refine.md"; then
+  LEAD_OK=0; echo "FAIL: refine must never lead on carina" >&2
+fi
+if ! grep -qF 'jq --arg model "$AGENT_LEAD_MODEL"' "${WORKFLOWS_DIR}/shared/opencode-ci.md"; then
+  LEAD_OK=0; echo "FAIL: the CI config merge must write AGENT_LEAD_MODEL onto ci-workflow-agent" >&2
+fi
+if worker_installed implement && ! grep -qF 'subagent_type: planner' "$IMPLEMENT_WORKER_MD"; then
+  LEAD_OK=0; echo "FAIL: the implement prompt must run propose and archive in the planner agent" >&2
+fi
+if [ "$LEAD_OK" -eq 1 ]; then PASS=$((PASS + 1)); else FAIL=$((FAIL + 1)); fi
+# The harness plugins only load with .opencode/node_modules installed; without it every CI run
+# spawned untiered workers on the session's model. And the tier model a worker pins has to be one
+# opencode.ci.json declares, under the provider name harness.json uses.
+PLUGINS_OK=1
+if ! grep -qF "(cd .opencode && npm install" "${WORKFLOWS_DIR}/shared/opencode-ci.md"; then
+  PLUGINS_OK=0; echo "FAIL: the CI setup must install .opencode's dependencies or the harness plugins never load" >&2
+fi
+for route in refine implement triage apply-review merge-gate audit release; do
+  worker_md="${WORKFLOWS_DIR}/agent-${route}.md"
+  [ -f "$worker_md" ] || continue
+  tier=$(sed -n 's/^  AGENT_TIER_MODEL: "\(.*\)"$/\1/p' "$worker_md")
+  [ -n "$tier" ] || continue
+  if [ -f "$CI_JSON" ] && ! jq -e --arg p "${tier%%/*}" --arg m "${tier#*/}" '.providers[$p].models[$m]' "$CI_JSON" > /dev/null; then
+    PLUGINS_OK=0; echo "FAIL: agent-${route} pins its tiers to ${tier}, which opencode.ci.json does not declare" >&2
+  fi
+done
+if [ "$PLUGINS_OK" -eq 1 ]; then PASS=$((PASS + 1)); else FAIL=$((FAIL + 1)); fi
 # The shape of the tests reaches the agent only through these two prompts (check-diff measures size,
 # never shape), so losing the sentence silently brings the pyramid back.
 if worker_installed implement; then
@@ -2695,6 +2752,52 @@ if [ -f "$HK_YML" ] && [ -f "$TRAIN_SH_HB" ]; then
     echo "FAIL: the merge train has no heartbeat from housekeeping, or does not cancel a repair gate whose CI turned green" >&2
   fi
 fi
+# The implement queue was the issue's key modulo the number of queues, so three independent issues whose
+# numbers were multiples of three (Pliny-Bot #726, #750 and #694 under #690) shared queue zero and ran in
+# series behind a three-hour run. The queue is now the key's place among the keys of the issues waiting for
+# an implement, and the children of one refine still share a key.
+if grep -qF "implement-queue-" "$ROUTER_YML" 2>/dev/null; then
+  if grep -qF 'place=$index' "$ROUTER_YML"     && grep -qF 'queue=$(( place % queues ))' "$ROUTER_YML"     && ! grep -qF 'queue=$(( key % queues ))' "$ROUTER_YML"; then
+    PASS=$((PASS + 1))
+  else
+    FAIL=$((FAIL + 1))
+    echo "FAIL: the implement queue is chosen by the issue number modulo the queue count, which puts independent issues in one queue" >&2
+  fi
+fi
+# The runner VM kills any job that outlives RUNNER_JOB_TIMEOUT, whatever the workflow allows. The default
+# of 90 minutes killed three Pliny-Bot implements that the workflow had given 180: no log, no pull request.
+# The cap in cloud-init has to stay above the longest agent job, or the workflow's own timeout is decoration.
+CLOUD_INIT_YML="${HERE}/../../../runners/cloud-init.yaml"
+if [ -f "$CLOUD_INIT_YML" ] && [ -f "${WORKFLOWS_DIR}/agent-implement.md" ]; then
+  cap="$(sed -n 's/^ *RUNNER_JOB_TIMEOUT=\([0-9][0-9]*\)$/\1/p' "$CLOUD_INIT_YML" | tail -1)"
+  longest="$(grep -hoE '^timeout-minutes: [0-9]+' "${WORKFLOWS_DIR}"/agent-*.md | grep -oE '[0-9]+' | sort -n | tail -1)"
+  if [ -n "$cap" ] && [ -n "$longest" ] && [ "$cap" -gt $((longest * 60)) ]; then
+    PASS=$((PASS + 1))
+  else
+    FAIL=$((FAIL + 1))
+    echo "FAIL: the runner job cap (${cap:-unset} s in cloud-init.yaml) is not above the longest agent timeout (${longest:-?} min); a long agent job would be killed by the VM" >&2
+  fi
+fi
+# decide-agent-retry reads why an agent job died from the job's annotations, and the annotations API needs
+# `checks: read`. Without it the read fails quietly (`2>/dev/null || true`), a runner shut down mid-job
+# (exit code 143) reads as no cause, and the issue is parked for a person instead of being run again:
+# Pliny-Bot #750 died at 44 minutes with exactly that annotation and was flagged for review.
+RETRY_PERM_OK=1
+for worker in "${WORKFLOWS_DIR}"/agent-*.md; do
+  [ -f "$worker" ] || continue
+  grep -q "decide-agent-retry" "$worker" || continue
+  missing="$(awk '
+    function flush() { if (job != "" && uses && !checks) printf "%s ", job }
+    /^  [a-z_]+:$/ { flush(); job = $1; uses = 0; checks = 0; next }
+    /decide-agent-retry/ { uses = 1 }
+    /^      checks: read$/ { checks = 1 }
+    END { flush() }' "$worker")"
+  if [ -n "${missing// /}" ]; then
+    RETRY_PERM_OK=0
+    echo "FAIL: ${worker##*/}: job(s) ${missing}use decide-agent-retry without checks: read, so a runner shutdown reads as no cause" >&2
+  fi
+done
+if [ "$RETRY_PERM_OK" -eq 1 ]; then PASS=$((PASS + 1)); else FAIL=$((FAIL + 1)); fi
 # The implement prompt tells the agent it is already on its branch and to skip the pc-plan-goal
 # branching phase. That is only true if a step before the agent made the branch, and nothing in the
 # sandbox can do it later: no git credentials, and the prompt forbids the commands. Without the

package/loops/templates/opencode/opencode.ci.json

@@ -44,7 +44,61 @@
         "apiKey": "{env:OPENAI_API_KEY}"
       },
       "models": {
+        "carina-60b": {
+          "name": "Carina 60B",
+          "capabilities": {
+            "tools": true,
+            "input": [
+              "text",
+              "image"
+            ],
+            "output": [
+              "text"
+            ]
+          },
+          "limit": {
+            "context": 1048576,
+            "input": 1048576,
+            "output": 131072
+          }
+        },
+        "quasar-438b": {
+          "name": "Quasar 438B",
+          "capabilities": {
+            "tools": true,
+            "input": [
+              "text",
+              "image"
+            ],
+            "output": [
+              "text"
+            ]
+          },
+          "limit": {
+            "context": 1048576,
+            "input": 1048576,
+            "output": 131072
+          }
+        },
         "glm-5-2": {
+          "name": "GLM 5.2",
+          "capabilities": {
+            "tools": true,
+            "input": [
+              "text",
+              "image"
+            ],
+            "output": [
+              "text"
+            ]
+          },
+          "limit": {
+            "context": 1048576,
+            "input": 1048576,
+            "output": 131072
+          }
+        },
+        "glm-5-3": {
           "name": "GLM 5.3",
           "capabilities": {
             "tools": true,
@@ -61,8 +115,53 @@
             "input": 1048576,
             "output": 131072
           }
+        }
+      }
+    },
+    "plainconcepts": {
+      "package": "aisdk:@ai-sdk/openai-compatible",
+      "settings": {
+        "baseURL": "{env:OPENAI_BASE_URL}",
+        "apiKey": "{env:OPENAI_API_KEY}"
+      },
+      "models": {
+        "carina-60b": {
+          "name": "Carina 60B",
+          "capabilities": {
+            "tools": true,
+            "input": [
+              "text",
+              "image"
+            ],
+            "output": [
+              "text"
+            ]
+          },
+          "limit": {
+            "context": 1048576,
+            "input": 1048576,
+            "output": 131072
+          }
         },
         "quasar-438b": {
+          "name": "Quasar 438B",
+          "capabilities": {
+            "tools": true,
+            "input": [
+              "text",
+              "image"
+            ],
+            "output": [
+              "text"
+            ]
+          },
+          "limit": {
+            "context": 1048576,
+            "input": 1048576,
+            "output": 131072
+          }
+        },
+        "glm-5-2": {
           "name": "GLM 5.2",
           "capabilities": {
             "tools": true,
@@ -79,6 +178,24 @@
             "input": 1048576,
             "output": 131072
           }
+        },
+        "glm-5-3": {
+          "name": "GLM 5.3",
+          "capabilities": {
+            "tools": true,
+            "input": [
+              "text",
+              "image"
+            ],
+            "output": [
+              "text"
+            ]
+          },
+          "limit": {
+            "context": 1048576,
+            "input": 1048576,
+            "output": 131072
+          }
         }
       }
     }

package/loops/workflows/agent-apply-review.md

@@ -1,6 +1,14 @@
 ---
 # Managed by @plainconceptsplatform/workflows. Source: loops/workflows/agent-apply-review.md. Update with `workflows update --force`; consumer edits may be overwritten.
 env:
+  # The model this worker's own session runs on. opencode.ci.json's `model` is the cheap default
+  # every agent without its own model falls back to; the lead is where a wrong call costs a run,
+  # so it names its model here. `model:` below only satisfies the compiler. A repository may
+  # change it to any model its opencode.ci.json declares.
+  AGENT_LEAD_MODEL: "forge/glm-5-2"
+  # The model every harness tier (plan, build, fast) runs on in CI, planner included. Unset,
+  # the tiers take harness.json, whose models the AWF proxy may not price.
+  AGENT_TIER_MODEL: "plainconcepts/glm-5-2"
   # Printed by the prompt as the verification block. Consumers set their own commands.
   VERIFY_COMMANDS: ""
   REPO_RULES: "Apply only actionable outstanding reviewer feedback to the selected bot pull request. Make minimal changes that address each comment. Preserve architecture and do not weaken tests. Run full verification after changes."
@@ -307,6 +315,10 @@ jobs:
       issues: write
       # the retry re-enters through the router, which is a workflow_dispatch
       actions: write
+      # decide-agent-retry reads why the agent job died from its annotations, and the annotations API needs this scope.
+      # Without it the read fails quietly, a runner shut down mid-job (exit code 143) reads as no cause,
+      # and the issue is parked for a person instead of being run again (Pliny-Bot #750).
+      checks: read
     steps:
       - name: Checkout workflow actions
         uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1

package/loops/workflows/agent-audit.md

@@ -1,6 +1,14 @@
 ---
 # Managed by @plainconceptsplatform/workflows. Source: loops/workflows/agent-audit.md. Update with `workflows update --force`; consumer edits may be overwritten.
 env:
+  # The model this worker's own session runs on. opencode.ci.json's `model` is the cheap default
+  # every agent without its own model falls back to; the lead is where a wrong call costs a run,
+  # so it names its model here. `model:` below only satisfies the compiler. A repository may
+  # change it to any model its opencode.ci.json declares.
+  AGENT_LEAD_MODEL: "forge/glm-5-2"
+  # The model every harness tier (plan, build, fast) runs on in CI, planner included. Unset,
+  # the tiers take harness.json, whose models the AWF proxy may not price.
+  AGENT_TIER_MODEL: "plainconcepts/glm-5-2"
   REPO_RULES: "Read-only repository audit. Report only reproducible, actionable defects with evidence. Do not modify files, commit, push, or run write operations."
   # Split out of REPO_RULES, which carried both the read-only discipline above and the list
   # below. All four consuming repositories had customised the list and none could touch it

package/loops/workflows/agent-implement.md

@@ -1,6 +1,14 @@
 ---
 # Managed by @plainconceptsplatform/workflows. Source: loops/workflows/agent-implement.md. Update with `workflows update --force`; consumer edits may be overwritten.
 env:
+  # The model this worker's own session runs on. opencode.ci.json's `model` is the cheap default
+  # every agent without its own model falls back to; the lead is where a wrong call costs a run,
+  # so it names its model here. `model:` below only satisfies the compiler. A repository may
+  # change it to any model its opencode.ci.json declares.
+  AGENT_LEAD_MODEL: "forge/glm-5-2"
+  # The model every harness tier (plan, build, fast) runs on in CI, planner included. Unset,
+  # the tiers take harness.json, whose models the AWF proxy may not price.
+  AGENT_TIER_MODEL: "plainconcepts/glm-5-2"
   VERIFY_COMMANDS: ""
   REPO_RULES: "Implement only the selected issue. Follow repository documentation and existing conventions. Do not weaken tests, lower coverage thresholds, or bypass checks."
   # Split out of REPO_RULES because one field asked to carry architecture, testing, coverage and
@@ -247,6 +255,10 @@ jobs:
       pull-requests: write
       # reads the agent job's log and annotations, and re-enters through the router on a retry
       actions: write
+      # decide-agent-retry reads why the agent job died from its annotations, and the annotations API needs this scope.
+      # Without it the read fails quietly, a runner shut down mid-job (exit code 143) reads as no cause,
+      # and the issue is parked for a person instead of being run again (Pliny-Bot #750).
+      checks: read
     steps:
       - name: Checkout workflow actions
         uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
@@ -509,6 +521,10 @@ jobs:
       issues: write
       # the retry re-enters through the router, which is a workflow_dispatch
       actions: write
+      # decide-agent-retry reads why the agent job died from its annotations, and the annotations API needs this scope.
+      # Without it the read fails quietly, a runner shut down mid-job (exit code 143) reads as no cause,
+      # and the issue is parked for a person instead of being run again (Pliny-Bot #750).
+      checks: read
     steps:
       - name: Checkout workflow actions
         uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
@@ -732,18 +748,33 @@ timeout-minutes: 180
    wrote instead:
 
    1. `pc-plan-goal`, then Phase 0 as it describes.
+
+   **Propose and archive run in the `planner` agent, not in this session.** Spawn it with the
+   task tool (`subagent_type: planner`) and a prompt that names the skill to load
+   (`pc-plan-propose` or `pc-plan-archive`), the issue context path above, the branch, and that it
+   runs in autonomous mode with no one to ask. `planner` runs on the repository's plan model, which
+   is stronger than this session's, and these two steps decide the whole change. Wait for it in the
+   same turn, then continue with the next phase yourself. Only when no `planner` agent exists
+   (agent-harness older than 3.4.0) load the skill here instead.
+
    2. `pc-plan-propose`, even when the issue is refined. It is what turns the issue into
       `openspec/changes/<id>/tasks.md` with every task annotated
       `<!-- agent: <engineer>.<tier>, depends_on: [...], touches: [...] -->`. **You never write
       `proposal.md` or `tasks.md` yourself.** A hand-written `tasks.md` carries no annotations,
       and without them `pc-plan-apply` has no workers to spawn, so the whole change is done by
       you alone, in sequence, on one model. That is the failure this step exists to prevent.
+      Ask it for few, coarse tasks: one task per area of files, the tests for that code in the
+      same task, and no task whose only job is to repair what an earlier task broke. Five tasks
+      in three waves cover most issues. Every task is a fresh worker that rereads the code it
+      needs before it edits anything, one to three minutes each: Pliny-Bot #751 split a small
+      web feature into twelve tasks and spent fifteen of its twenty-two minutes in them, and
+      #696 ended with a twelve-minute task that fixed the test doubles the earlier tasks broke.
    3. `pc-plan-apply`. The tasks are implemented by the subagents it spawns, in waves, each on
       the model tier its annotation names. **In this phase you do not edit source files
       yourself.** If it stops because a worker cannot be resolved, report that with
       `report_incomplete`, naming the task and the missing worker; do not do the task yourself
       to get past it.
-   4. `pc-repo-verify`, then `pc-plan-archive`, as `pc-plan-goal` directs.
+   4. `pc-repo-verify`, then `pc-plan-archive` in `planner`, as `pc-plan-goal` directs.
 
    Before the first edit to a source file, check that
    `openspec/changes/<id>/tasks.md` exists and that its tasks carry the annotation above. If it
@@ -767,6 +798,12 @@ timeout-minutes: 180
        Adhere to ${{ env.REPO_RULES }}, ${{ env.ARCHITECTURE_RULES }} and
        ${{ env.TESTING_RULES }}.
 
+   **WORK IN FEW TURNS**, on both paths. Every turn is a model call of three to twenty
+   seconds, and the turns, not the commands, are most of a run. Read a file whole, or in
+   ranges of a few hundred lines, once; never eight or fifteen lines at a time. Put
+   independent reads and searches in the same turn. Leave whitespace and line endings to the
+   formatter instead of inspecting them with `hexdump` or `cat -A`.
+
    **DECISIVE IMPLEMENTATION**, on both paths. When a design choice is ambiguous, pick the most
    standard interpretation and implement it immediately. Do not deliberate between options for
    more than one turn. Do not ask clarifying questions the issue author expects you to use good
@@ -781,6 +818,21 @@ timeout-minutes: 180
 
      Never open a pull request that does not pass them.
 
+     **Run them once, on the final tree.** They are slow: Pliny-Bot's `pnpm verify` is about
+     twenty minutes of work on this runner. `pc-plan-apply` runs them in its verify step, and
+     that run is this one: do not run them again when nothing changed since. Order the end of
+     the run so the last run is the only one: first `check-diff` below, which takes seconds, and
+     fix what it lists; then these commands. While you work, check with the narrowest command
+     that covers what you changed (build the project you edited, run the test files you
+     edited, typecheck the web app), not with these. Pliny-Bot #694 ran three typechecks and
+     three test runs of its own before it reached the full verification at minute forty-one.
+
+     A test that cannot start in this sandbox (it needs Docker, a database or a host the
+     firewall blocks) and fails the same way on the default branch is not yours to fix: say so
+     in the pull request and move on, CI runs it with the service. Pliny-Bot #696 spent its
+     turns on 365 integration tests that could not start here because Testcontainers found an
+     empty Docker configuration.
+
      **Run every command in the foreground and wait for it in the same turn. Never move a command
      to the background and never end a turn to wait for it.** This run is not interactive: nothing
      resumes you. A turn that ends with text and no tool call ends the whole run, and the work is
@@ -803,7 +855,7 @@ timeout-minutes: 180
 
      When `.opencode/scripts/check-diff.mjs` exists, also run
      `node .opencode/scripts/check-diff.mjs`
-     on both paths. It must exit 0. It holds the comments and tests you add to the size of the
+     on both paths, before the commands above. It must exit 0. It holds the comments and tests you add to the size of the
      change and makes you clean the files you touched; fix every line it lists. The merge gate
      runs it again and does not merge while it fails.
 
@@ -812,8 +864,9 @@ timeout-minutes: 180
      unit test only for logic with real branching. A bug fix gets one regression test. Do not
      write tests of constants, configured defaults, mocks of your own code or markup attributes.
 
-     Anything you change to satisfy `check-diff` is a change: run the verification commands
-     again afterwards, and open the pull request only from a tree where both pass. Do not delete
+     Anything you change to satisfy `check-diff` is a change: run it again, and run the
+     verification commands only after it passes, so they run on the tree you ship. Open the
+     pull request only from a tree where both pass. Do not delete
      a test that covers a branch you added to fit the budget; the complexity gate in CI measures
      that coverage.
 

package/loops/workflows/agent-merge-gate.md

@@ -1,6 +1,14 @@
 ---
 # Managed by @plainconceptsplatform/workflows. Source: loops/workflows/agent-merge-gate.md. Update with `workflows update --force`; consumer edits may be overwritten.
 env:
+  # The model this worker's own session runs on. opencode.ci.json's `model` is the cheap default
+  # every agent without its own model falls back to; the lead is where a wrong call costs a run,
+  # so it names its model here. `model:` below only satisfies the compiler. A repository may
+  # change it to any model its opencode.ci.json declares.
+  AGENT_LEAD_MODEL: "forge/glm-5-2"
+  # The model every harness tier (plan, build, fast) runs on in CI, planner included. Unset,
+  # the tiers take harness.json, whose models the AWF proxy may not price.
+  AGENT_TIER_MODEL: "plainconcepts/glm-5-2"
   VERIFY_COMMANDS: ""
   REPO_RULES: "Review the selected pull request for defects and report what you verified. Do not decide the outcome: the workflow computes it from your report and from facts it measured before you ran."
   # Where to look first, not what to escalate on. This list used to be the check that decided

package/loops/workflows/agent-refine.md

@@ -1,6 +1,14 @@
 ---
 # Managed by @plainconceptsplatform/workflows. Source: loops/workflows/agent-refine.md. Update with `workflows update --force`; consumer edits may be overwritten.
 env:
+  # The model this worker's own session runs on. opencode.ci.json's `model` is the cheap default
+  # every agent without its own model falls back to; the lead is where a wrong call costs a run,
+  # so it names its model here. `model:` below only satisfies the compiler. A repository may
+  # change it to any model its opencode.ci.json declares.
+  AGENT_LEAD_MODEL: "forge/glm-5-2"
+  # The model every harness tier (plan, build, fast) runs on in CI, planner included. Unset,
+  # the tiers take harness.json, whose models the AWF proxy may not price.
+  AGENT_TIER_MODEL: "plainconcepts/glm-5-2"
   REPO_RULES: "Refine only the selected issue into a grounded, implementation-ready user story. Read repository documentation for domain context. Write acceptance criteria that match existing patterns. Where a story or its open questions decide how business data (named people, roles, addresses) is stored, resolve it toward the repository's convention for that data -- a database entity or a settings entry -- and record that choice in the acceptance criteria; do not carry a person's name or email address into the story as something the code reads from a constant. Do not implement code. Do not use web search or web fetch tools. The issue body already contains the research that motivated it; derive your domain context from the repository's own code and documentation only."
   # The estimate decides whether a story gets split, and the prompt tells the agent these bands
   # come from this repository's own merged pull requests. They have to actually come from it, or
@@ -672,6 +680,10 @@ jobs:
       issues: write
       # the retry re-enters through the router, which is a workflow_dispatch
       actions: write
+      # decide-agent-retry reads why the agent job died from its annotations, and the annotations API needs this scope.
+      # Without it the read fails quietly, a runner shut down mid-job (exit code 143) reads as no cause,
+      # and the issue is parked for a person instead of being run again (Pliny-Bot #750).
+      checks: read
     steps:
       - name: Checkout workflow actions
         uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1

package/loops/workflows/agent-release.md

@@ -1,6 +1,14 @@
 ---
 # Managed by @plainconceptsplatform/workflows. Source: loops/workflows/agent-release.md. Update with `workflows update --force`; consumer edits may be overwritten.
 env:
+  # The model this worker's own session runs on. opencode.ci.json's `model` is the cheap default
+  # every agent without its own model falls back to; the lead is where a wrong call costs a run,
+  # so it names its model here. `model:` below only satisfies the compiler. A repository may
+  # change it to any model its opencode.ci.json declares.
+  AGENT_LEAD_MODEL: "forge/glm-5-2"
+  # The model every harness tier (plan, build, fast) runs on in CI, planner included. Unset,
+  # the tiers take harness.json, whose models the AWF proxy may not price.
+  AGENT_TIER_MODEL: "plainconcepts/glm-5-2"
   GIT_AUTHOR_NAME: "github-actions[bot]"
   GIT_AUTHOR_EMAIL: "github-actions[bot]@users.noreply.github.com"
   GIT_COMMITTER_NAME: "github-actions[bot]"

package/loops/workflows/agent-triage.md

@@ -1,6 +1,14 @@
 ---
 # Managed by @plainconceptsplatform/workflows. Source: loops/workflows/agent-triage.md. Update with `workflows update --force`; consumer edits may be overwritten.
 env:
+  # The model this worker's own session runs on. opencode.ci.json's `model` is the cheap default
+  # every agent without its own model falls back to; the lead is where a wrong call costs a run,
+  # so it names its model here. `model:` below only satisfies the compiler. A repository may
+  # change it to any model its opencode.ci.json declares.
+  AGENT_LEAD_MODEL: "forge/glm-5-2"
+  # The model every harness tier (plan, build, fast) runs on in CI, planner included. Unset,
+  # the tiers take harness.json, whose models the AWF proxy may not price.
+  AGENT_TIER_MODEL: "plainconcepts/glm-5-2"
   REPO_RULES: "Triage issues opened by outside collaborators. Assess template completeness, security risk, change size, danger level, duplicates, clarity, reproducibility, acceptance criteria, and cross-cutting impact. When the request names specific people, email addresses, or business entities as the thing the code acts on, judge where that data is meant to live: business data that belongs in the database or a settings page is a design decision, not a wording detail, and it must not be left for the implementer to decide by hardcoding it. Do not implement code. Do not modify the issue body."
   # What a product owner may ask for, and what has to become a maintainer-owned technical
   # proposal instead. This is business policy, so it belongs to the repository rather than to
@@ -314,6 +322,10 @@ jobs:
       issues: write
       # the retry re-enters through the router, which is a workflow_dispatch
       actions: write
+      # decide-agent-retry reads why the agent job died from its annotations, and the annotations API needs this scope.
+      # Without it the read fails quietly, a runner shut down mid-job (exit code 143) reads as no cause,
+      # and the issue is parked for a person instead of being run again (Pliny-Bot #750).
+      checks: read
     steps:
       - name: Checkout workflow actions
         uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1

package/loops/workflows/shared/opencode-ci.md

@@ -165,6 +165,45 @@ pre-agent-steps:
   - name: Install workspace dependencies
     run: pnpm install --frozen-lockfile
 
+  - name: Cache the agent-harness plugins' dependencies
+    uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
+    with:
+      path: .opencode/node_modules
+      key: opencode-plugins-${{ runner.os }}-${{ hashFiles('.opencode/package.json') }}
+
+  - name: Install the agent-harness plugins' dependencies
+    # The harness plugins under .opencode/plugins import @opencode/plugin, which lives in
+    # .opencode/node_modules, and that directory is gitignored. Without it OpenCode logs
+    # "failed to load plugin ... Cannot find package '@opencode/plugin'" and goes on: no tier
+    # workers, no planner, no concurrency cap. Every CI run until 1.6.23 ran that way, so
+    # pc-plan-apply spawned the untiered base engineers on the session's model.
+    #
+    # Two of the three run here. pc-system-reminders gates shell and edits on skills a CI
+    # worker's prompt does not load, and has never run in CI; it stays off until it does.
+    #
+    # The tier models come from AGENT_TIER_MODEL when a worker sets it. The AWF proxy refuses
+    # a model it has no AI credits price for, and harness.json names carina-60b and
+    # quasar-438b, which it has none for (Atlas #2016), so CI pins every tier to one priced
+    # model through the gitignored per-user override the plugin reads first.
+    run: |
+      set -euo pipefail
+      if [ ! -f .opencode/package.json ]; then
+        echo "No .opencode/package.json: agent-harness is not installed, nothing to load"; exit 0
+      fi
+      if [ ! -d .opencode/node_modules/@opencode/plugin ]; then
+        (cd .opencode && npm install --no-audit --no-fund --no-package-lock --ignore-scripts --loglevel=error)
+      fi
+      if [ -f .opencode/plugins/pc-system-reminders.js ]; then
+        rm .opencode/plugins/pc-system-reminders.js
+        # Tracked, so hide the deletion: an agent that sees it in `git status` restores it.
+        git update-index --skip-worktree .opencode/plugins/pc-system-reminders.js 2>/dev/null || true
+      fi
+      if [ -n "${AGENT_TIER_MODEL:-}" ]; then
+        jq -n --arg m "$AGENT_TIER_MODEL" '{models: {plan: $m, build: $m, fast: $m}}' > .opencode/harness.user.json
+      fi
+      echo "Harness plugins: $(ls .opencode/plugins | tr '\n' ' ')"
+      echo "Tier models: $(jq -c '.models' .opencode/harness.user.json 2>/dev/null || jq -c '.models' .opencode/harness.json)"
+
   - name: Merge the CI-only OpenCode provider into opencode.jsonc
     run: |
       set -euo pipefail
@@ -195,6 +234,12 @@ pre-agent-steps:
         merged=$(jq -S . "$FRAGMENT")
       fi
 
+      # The worker's lead model, from its env. gh-aw leaves OPENCODE_MODEL empty, so without this
+      # every worker's session would run on opencode.ci.json's default.
+      if [ -n "${AGENT_LEAD_MODEL:-}" ]; then
+        merged=$(printf '%s' "$merged" | jq --arg model "$AGENT_LEAD_MODEL" '.agents["ci-workflow-agent"].model = $model')
+      fi
+
       printf '%s\n' "$merged" > "$CONFIG"
 
       # A tracked config now differs from HEAD, so the agent sees it in `git diff`, takes it for
@@ -210,5 +255,5 @@ pre-agent-steps:
       # `$existing * $base`. Base wins on conflicting keys, but it defines neither `model`
       # nor this provider, so both survive and `awf-proxy` is added alongside.
       echo "Wrote $CONFIG from $FRAGMENT:"
-      jq -r '"  model: \(.model // "unset")", "  plugins: \(.plugins // [] | join(", "))", "  providers: \(.providers // {} | keys | join(", "))"' "$CONFIG"
+      jq -r '"  model: \(.model // "unset")", "  lead: \(.agents["ci-workflow-agent"].model // "the default")", "  plugins: \(.plugins // [] | join(", "))", "  providers: \(.providers // {} | keys | join(", "))"' "$CONFIG"
 ---

package/loops/workflows/work-router.yml

@@ -551,9 +551,29 @@ jobs:
           body=$(gh issue view "$ISSUE_NUMBER" --repo "$REPO" --json body --jq '.body // ""' 2>/dev/null || echo '')
           parent=$(printf '%s' "$body" | grep -oE '<!-- split-parent: [0-9]+ -->' | head -1 | grep -oE '[0-9]+' || true)
           key="${parent:-$ISSUE_NUMBER}"
-          queue=$(( key % queues ))
+
+          # The queue is the key's place among the keys of every issue waiting for an implement, not
+          # the key modulo the number of queues. Three independent issues whose numbers were all
+          # multiples of three (Pliny-Bot #726, #750 and #694, whose parent is #690) landed in queue
+          # zero together and ran one after another behind a three-hour run while two queues sat
+          # empty. A place among the waiting keys puts independent issues in different queues, and
+          # the children of one refine, which share a key, still share one.
+          waiting=$(
+            { printf '%s\n' "$key"
+              gh issue list --repo "$REPO" --label "implement" --state open --limit 100 --json number,body \
+                --jq '.[] | ((.body // "") | capture("<!-- split-parent: (?<p>[0-9]+) -->").p) // (.number | tostring)' \
+                2>/dev/null || true
+            } | grep -E '^[0-9]+$' | sort -un
+          )
+          place=0
+          index=0
+          for candidate in $waiting; do
+            [ "$candidate" = "$key" ] && place=$index
+            index=$((index + 1))
+          done
+          queue=$(( place % queues ))
           echo "queue=$queue" >> "$GITHUB_OUTPUT"
-          echo "#$ISSUE_NUMBER waits in implement queue $queue of $queues (keyed on #$key)."
+          echo "#$ISSUE_NUMBER waits in implement queue $queue of $queues (keyed on #$key, place $place among $index waiting)."
       - name: Resolve the feature branch from the stack markers
         id: stack
         env:

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@plainconceptsplatform/workflows",
-  "version": "1.6.16",
+  "version": "1.6.23",
   "description": "Install and update Platform GitHub agentic workflows.",
   "keywords": [
     "github-actions",