@plainconceptsplatform/workflows 1.6.21 → 1.6.23

package/loops/actions/verify-route-matrix/verify-route-matrix.sh

@@ -1828,6 +1828,23 @@ if worker_installed implement && ! grep -qF 'subagent_type: planner' "$IMPLEMENT
   LEAD_OK=0; echo "FAIL: the implement prompt must run propose and archive in the planner agent" >&2
 fi
 if [ "$LEAD_OK" -eq 1 ]; then PASS=$((PASS + 1)); else FAIL=$((FAIL + 1)); fi
+# The harness plugins only load with .opencode/node_modules installed; without it every CI run
+# spawned untiered workers on the session's model. And the tier model a worker pins has to be one
+# opencode.ci.json declares, under the provider name harness.json uses.
+PLUGINS_OK=1
+if ! grep -qF "(cd .opencode && npm install" "${WORKFLOWS_DIR}/shared/opencode-ci.md"; then
+  PLUGINS_OK=0; echo "FAIL: the CI setup must install .opencode's dependencies or the harness plugins never load" >&2
+fi
+for route in refine implement triage apply-review merge-gate audit release; do
+  worker_md="${WORKFLOWS_DIR}/agent-${route}.md"
+  [ -f "$worker_md" ] || continue
+  tier=$(sed -n 's/^  AGENT_TIER_MODEL: "\(.*\)"$/\1/p' "$worker_md")
+  [ -n "$tier" ] || continue
+  if [ -f "$CI_JSON" ] && ! jq -e --arg p "${tier%%/*}" --arg m "${tier#*/}" '.providers[$p].models[$m]' "$CI_JSON" > /dev/null; then
+    PLUGINS_OK=0; echo "FAIL: agent-${route} pins its tiers to ${tier}, which opencode.ci.json does not declare" >&2
+  fi
+done
+if [ "$PLUGINS_OK" -eq 1 ]; then PASS=$((PASS + 1)); else FAIL=$((FAIL + 1)); fi
 # The shape of the tests reaches the agent only through these two prompts (check-diff measures size,
 # never shape), so losing the sentence silently brings the pyramid back.
 if worker_installed implement; then

package/loops/templates/opencode/opencode.ci.json

@@ -1,6 +1,6 @@
 {
   "$schema": "https://opencode.ai/config.json",
-  "model": "forge/carina-60b",
+  "model": "forge/glm-5-2",
   "default_agent": "ci-workflow-agent",
   "agents": {
     "ci-workflow-agent": {

package/loops/workflows/agent-apply-review.md

@@ -5,7 +5,10 @@ env:
   # every agent without its own model falls back to; the lead is where a wrong call costs a run,
   # so it names its model here. `model:` below only satisfies the compiler. A repository may
   # change it to any model its opencode.ci.json declares.
-  AGENT_LEAD_MODEL: "forge/quasar-438b"
+  AGENT_LEAD_MODEL: "forge/glm-5-2"
+  # The model every harness tier (plan, build, fast) runs on in CI, planner included. Unset,
+  # the tiers take harness.json, whose models the AWF proxy may not price.
+  AGENT_TIER_MODEL: "plainconcepts/glm-5-2"
   # Printed by the prompt as the verification block. Consumers set their own commands.
   VERIFY_COMMANDS: ""
   REPO_RULES: "Apply only actionable outstanding reviewer feedback to the selected bot pull request. Make minimal changes that address each comment. Preserve architecture and do not weaken tests. Run full verification after changes."
@@ -411,7 +414,7 @@ engine:
   env:
     OPENAI_BASE_URL: https://forge.plainconcepts.com/v1
 
-model: openai/quasar-438b
+model: openai/glm-5-2
 
 max-turns: 300
 max-turn-cache-misses: 3000

package/loops/workflows/agent-audit.md

@@ -5,7 +5,10 @@ env:
   # every agent without its own model falls back to; the lead is where a wrong call costs a run,
   # so it names its model here. `model:` below only satisfies the compiler. A repository may
   # change it to any model its opencode.ci.json declares.
-  AGENT_LEAD_MODEL: "forge/quasar-438b"
+  AGENT_LEAD_MODEL: "forge/glm-5-2"
+  # The model every harness tier (plan, build, fast) runs on in CI, planner included. Unset,
+  # the tiers take harness.json, whose models the AWF proxy may not price.
+  AGENT_TIER_MODEL: "plainconcepts/glm-5-2"
   REPO_RULES: "Read-only repository audit. Report only reproducible, actionable defects with evidence. Do not modify files, commit, push, or run write operations."
   # Split out of REPO_RULES, which carried both the read-only discipline above and the list
   # below. All four consuming repositories had customised the list and none could touch it
@@ -72,7 +75,7 @@ engine:
   env:
     OPENAI_BASE_URL: https://forge.plainconcepts.com/v1
 
-model: openai/quasar-438b
+model: openai/glm-5-2
 
 max-turns: 300
 max-turn-cache-misses: 3000

package/loops/workflows/agent-implement.md

@@ -5,7 +5,10 @@ env:
   # every agent without its own model falls back to; the lead is where a wrong call costs a run,
   # so it names its model here. `model:` below only satisfies the compiler. A repository may
   # change it to any model its opencode.ci.json declares.
-  AGENT_LEAD_MODEL: "forge/quasar-438b"
+  AGENT_LEAD_MODEL: "forge/glm-5-2"
+  # The model every harness tier (plan, build, fast) runs on in CI, planner included. Unset,
+  # the tiers take harness.json, whose models the AWF proxy may not price.
+  AGENT_TIER_MODEL: "plainconcepts/glm-5-2"
   VERIFY_COMMANDS: ""
   REPO_RULES: "Implement only the selected issue. Follow repository documentation and existing conventions. Do not weaken tests, lower coverage thresholds, or bypass checks."
   # Split out of REPO_RULES because one field asked to carry architecture, testing, coverage and
@@ -627,7 +630,7 @@ engine:
   env:
     OPENAI_BASE_URL: https://forge.plainconcepts.com/v1
 
-model: openai/quasar-438b
+model: openai/glm-5-2
 
 max-turns: 300
 max-turn-cache-misses: 3000

package/loops/workflows/agent-merge-gate.md

@@ -5,7 +5,10 @@ env:
   # every agent without its own model falls back to; the lead is where a wrong call costs a run,
   # so it names its model here. `model:` below only satisfies the compiler. A repository may
   # change it to any model its opencode.ci.json declares.
-  AGENT_LEAD_MODEL: "forge/quasar-438b"
+  AGENT_LEAD_MODEL: "forge/glm-5-2"
+  # The model every harness tier (plan, build, fast) runs on in CI, planner included. Unset,
+  # the tiers take harness.json, whose models the AWF proxy may not price.
+  AGENT_TIER_MODEL: "plainconcepts/glm-5-2"
   VERIFY_COMMANDS: ""
   REPO_RULES: "Review the selected pull request for defects and report what you verified. Do not decide the outcome: the workflow computes it from your report and from facts it measured before you ran."
   # Where to look first, not what to escalate on. This list used to be the check that decided
@@ -875,7 +878,7 @@ engine:
   env:
     OPENAI_BASE_URL: https://forge.plainconcepts.com/v1
 
-model: openai/quasar-438b
+model: openai/glm-5-2
 
 max-turns: 300
 max-turn-cache-misses: 3000

package/loops/workflows/agent-refine.md

@@ -5,7 +5,10 @@ env:
   # every agent without its own model falls back to; the lead is where a wrong call costs a run,
   # so it names its model here. `model:` below only satisfies the compiler. A repository may
   # change it to any model its opencode.ci.json declares.
-  AGENT_LEAD_MODEL: "forge/glm-5-3"
+  AGENT_LEAD_MODEL: "forge/glm-5-2"
+  # The model every harness tier (plan, build, fast) runs on in CI, planner included. Unset,
+  # the tiers take harness.json, whose models the AWF proxy may not price.
+  AGENT_TIER_MODEL: "plainconcepts/glm-5-2"
   REPO_RULES: "Refine only the selected issue into a grounded, implementation-ready user story. Read repository documentation for domain context. Write acceptance criteria that match existing patterns. Where a story or its open questions decide how business data (named people, roles, addresses) is stored, resolve it toward the repository's convention for that data -- a database entity or a settings entry -- and record that choice in the acceptance criteria; do not carry a person's name or email address into the story as something the code reads from a constant. Do not implement code. Do not use web search or web fetch tools. The issue body already contains the research that motivated it; derive your domain context from the repository's own code and documentation only."
   # The estimate decides whether a story gets split, and the prompt tells the agent these bands
   # come from this repository's own merged pull requests. They have to actually come from it, or
@@ -812,7 +815,7 @@ engine:
   env:
     OPENAI_BASE_URL: https://forge.plainconcepts.com/v1
 
-model: openai/glm-5-3
+model: openai/glm-5-2
 # 150 rather than 500. With a four-hour clock this is the loop guard, and the worst
 # observed run used 44 turns, so this leaves better than three times the worst case.
 max-turns: 150

package/loops/workflows/agent-release.md

@@ -5,7 +5,10 @@ env:
   # every agent without its own model falls back to; the lead is where a wrong call costs a run,
   # so it names its model here. `model:` below only satisfies the compiler. A repository may
   # change it to any model its opencode.ci.json declares.
-  AGENT_LEAD_MODEL: "forge/quasar-438b"
+  AGENT_LEAD_MODEL: "forge/glm-5-2"
+  # The model every harness tier (plan, build, fast) runs on in CI, planner included. Unset,
+  # the tiers take harness.json, whose models the AWF proxy may not price.
+  AGENT_TIER_MODEL: "plainconcepts/glm-5-2"
   GIT_AUTHOR_NAME: "github-actions[bot]"
   GIT_AUTHOR_EMAIL: "github-actions[bot]@users.noreply.github.com"
   GIT_COMMITTER_NAME: "github-actions[bot]"
@@ -47,7 +50,7 @@ engine:
   env:
     OPENAI_BASE_URL: https://forge.plainconcepts.com/v1
 
-model: openai/quasar-438b
+model: openai/glm-5-2
 
 max-turns: 100
 max-turn-cache-misses: 3000

package/loops/workflows/agent-triage.md

@@ -5,7 +5,10 @@ env:
   # every agent without its own model falls back to; the lead is where a wrong call costs a run,
   # so it names its model here. `model:` below only satisfies the compiler. A repository may
   # change it to any model its opencode.ci.json declares.
-  AGENT_LEAD_MODEL: "forge/quasar-438b"
+  AGENT_LEAD_MODEL: "forge/glm-5-2"
+  # The model every harness tier (plan, build, fast) runs on in CI, planner included. Unset,
+  # the tiers take harness.json, whose models the AWF proxy may not price.
+  AGENT_TIER_MODEL: "plainconcepts/glm-5-2"
   REPO_RULES: "Triage issues opened by outside collaborators. Assess template completeness, security risk, change size, danger level, duplicates, clarity, reproducibility, acceptance criteria, and cross-cutting impact. When the request names specific people, email addresses, or business entities as the thing the code acts on, judge where that data is meant to live: business data that belongs in the database or a settings page is a design decision, not a wording detail, and it must not be left for the implementer to decide by hardcoding it. Do not implement code. Do not modify the issue body."
   # What a product owner may ask for, and what has to become a maintainer-owned technical
   # proposal instead. This is business policy, so it belongs to the repository rather than to
@@ -417,7 +420,7 @@ engine:
   env:
     OPENAI_BASE_URL: https://forge.plainconcepts.com/v1
 
-model: openai/quasar-438b
+model: openai/glm-5-2
 max-turns: 120
 max-turn-cache-misses: 3000
 max-ai-credits: 5000

package/loops/workflows/shared/opencode-ci.md

@@ -165,6 +165,45 @@ pre-agent-steps:
   - name: Install workspace dependencies
     run: pnpm install --frozen-lockfile
 
+  - name: Cache the agent-harness plugins' dependencies
+    uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
+    with:
+      path: .opencode/node_modules
+      key: opencode-plugins-${{ runner.os }}-${{ hashFiles('.opencode/package.json') }}
+
+  - name: Install the agent-harness plugins' dependencies
+    # The harness plugins under .opencode/plugins import @opencode/plugin, which lives in
+    # .opencode/node_modules, and that directory is gitignored. Without it OpenCode logs
+    # "failed to load plugin ... Cannot find package '@opencode/plugin'" and goes on: no tier
+    # workers, no planner, no concurrency cap. Every CI run until 1.6.23 ran that way, so
+    # pc-plan-apply spawned the untiered base engineers on the session's model.
+    #
+    # Two of the three run here. pc-system-reminders gates shell and edits on skills a CI
+    # worker's prompt does not load, and has never run in CI; it stays off until it does.
+    #
+    # The tier models come from AGENT_TIER_MODEL when a worker sets it. The AWF proxy refuses
+    # a model it has no AI credits price for, and harness.json names carina-60b and
+    # quasar-438b, which it has none for (Atlas #2016), so CI pins every tier to one priced
+    # model through the gitignored per-user override the plugin reads first.
+    run: |
+      set -euo pipefail
+      if [ ! -f .opencode/package.json ]; then
+        echo "No .opencode/package.json: agent-harness is not installed, nothing to load"; exit 0
+      fi
+      if [ ! -d .opencode/node_modules/@opencode/plugin ]; then
+        (cd .opencode && npm install --no-audit --no-fund --no-package-lock --ignore-scripts --loglevel=error)
+      fi
+      if [ -f .opencode/plugins/pc-system-reminders.js ]; then
+        rm .opencode/plugins/pc-system-reminders.js
+        # Tracked, so hide the deletion: an agent that sees it in `git status` restores it.
+        git update-index --skip-worktree .opencode/plugins/pc-system-reminders.js 2>/dev/null || true
+      fi
+      if [ -n "${AGENT_TIER_MODEL:-}" ]; then
+        jq -n --arg m "$AGENT_TIER_MODEL" '{models: {plan: $m, build: $m, fast: $m}}' > .opencode/harness.user.json
+      fi
+      echo "Harness plugins: $(ls .opencode/plugins | tr '\n' ' ')"
+      echo "Tier models: $(jq -c '.models' .opencode/harness.user.json 2>/dev/null || jq -c '.models' .opencode/harness.json)"
+
   - name: Merge the CI-only OpenCode provider into opencode.jsonc
     run: |
       set -euo pipefail

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@plainconceptsplatform/workflows",
-  "version": "1.6.21",
+  "version": "1.6.23",
   "description": "Install and update Platform GitHub agentic workflows.",
   "keywords": [
     "github-actions",