@really-knows-ai/foundry 3.8.0 → 3.8.1

package/dist/.opencode/plugins/foundry-tools/stage-tools.js

@@ -51,8 +51,16 @@ function verifyStageToken(token, secret, stage, cycle, agent) {
 }
 
 function checkTokenAgentBinding(payload, agent) {
-  if (!payload.model || !agent || payload.model === agent) return { payload };
-  return { error: `foundry_stage_begin: token is scoped to subagent '${payload.model}', not '${agent}'. Dispatch forge via task(), not inline.` };
+  // Token has no model scope — allow (legacy or test tokens)
+  if (!payload.model) return { payload };
+  // Unknown agent — allow (test environments, edge cases)
+  if (!agent) return { payload };
+  // Main Foundry agent cannot use subagent-scoped tokens
+  if (agent === 'foundry') {
+    return { error: `foundry_stage_begin: token is scoped to subagent '${payload.model}'. Dispatch forge via task(), not inline.` };
+  }
+  // Subagent — allow (model-specific or default foundry-forge/foundry-appraise)
+  return { payload };
 }
 
 async function executeStageBegin(args, context, pending) {

package/dist/CHANGELOG.md

@@ -1,5 +1,11 @@
 # Changelog
 
+## [3.8.1] - 2026-05-27
+
+### Fixed
+
+- Token agent binding now only blocks the main Foundry agent (`context.agent === "foundry"`) from using subagent-scoped tokens. Subagents always pass regardless of exact agent identifier format. The previous exact-match check caused legitimate forge subagents to fail with a "bad signature" error because OpenCode's internal agent identifier format differs from the token's `model` field.
+
 ## [3.8.0] - 2026-05-27
 
 ### Added

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@really-knows-ai/foundry",
-  "version": "3.8.0",
+  "version": "3.8.1",
   "description": "A skill-driven framework for governed artefact generation with AI coding tools. Define your own artefact types, laws, and flows — Foundry handles the forge → quench → appraise pipeline with deterministic routing, quality gates, and iterative refinement.",
   "type": "module",
   "main": "dist/.opencode/plugins/foundry.js",