@syntesseraai/opencode-feature-factory 0.12.4 → 0.12.6

package/AGENTS.md

@@ -9,7 +9,7 @@ This file is installed to `~/.config/opencode/AGENTS.md` by `@syntesseraai/openc
 - Stage sub-agents with default model routing:
   - `planning` -> `openai/gpt-5.4-fast`
   - `building` -> `openai/gpt-5.4-fast`
-  - `reviewing` -> `opencode/claude-opus-4-7`
+  - `reviewing` -> `opencode/glm-5.1`
   - `documenting` -> `opencode/gemini-3.1-pro`
 - Specialized agents: `feature-factory`, `planning`, `building`, `reviewing`, and `documenting`.
 - Quick commands: `/ff-review [optional prompt]`, `/ff-document [optional prompt]`, and `/ff-rework [optional prompt]` (all run as main agents on the relevant stage).
@@ -41,8 +41,8 @@ When work changes behavior, workflows, configuration, operational guidance, or r
 - Use `read`, `glob`, and `grep` for targeted file inspection.
 - Writable agents should prefer native `edit` for file updates.
 - Keep `edit` restricted on read-only agents (`planning`, `reviewing`).
-- Route Git operations through `bash` with explicit `git`/`gh` allowlists (and optional `oo git`/`oo gh` wrappers) per OpenCode granular `permissions` rules (`permissions.bash` object syntax), with last-match-wins ordering.
-- Keep read-only agents deny-first for shell usage (`bash: {'*': deny}` with explicit `git`/`gh` and `oo git`/`oo gh` overrides).
+- Prefer explicit agent frontmatter tool restrictions for read-only stages when model compatibility is a concern; `reviewing` uses a `tools` block instead of `permissions` to avoid provider-specific issues observed with some OpenCode models.
+- Keep read-only agents from modifying files by disabling `edit` and other write-capable tools in frontmatter.
 - Explicitly disable PTY tools (`pty_spawn`, `pty_write`, `pty_read`, `pty_list`, `pty_kill`) on read-only agents; they must not rely on PTY as a back door.
 - Use `todowrite` for multi-step tasks to keep progress visible.
 

package/README.md

@@ -61,7 +61,7 @@ Instead, the `feature-factory` primary agent orchestrates workflows natively by
 - `feature-factory` (orchestrator) -> default model `openai/gpt-5.4-fast`
   - `planning` -> default model `openai/gpt-5.4-fast`
   - `building` -> default model `openai/gpt-5.4-fast`
-  - `reviewing` -> default model `opencode/claude-opus-4-7`
+  - `reviewing` -> default model `opencode/glm-5.1`
   - `documenting` -> default model `opencode/gemini-3.1-pro`
 
 ### Fixed execution path
@@ -84,13 +84,13 @@ Writable stage agents (`building`, `documenting`) prefer native `edit` (and `wri
 
 Stage-agent code discovery is graph-first: planning/building/reviewing/documenting prefer codebase-memory MCP tools (`codebase-memory-mcp_search_graph`, `codebase-memory-mcp_get_architecture`, `codebase-memory-mcp_trace_call_path`, `codebase-memory-mcp_get_code_snippet`) for repository-local analysis, and use `gh_grep_searchGitHub` when investigating public GitHub source examples.
 
-### Permission policy for shell and PTY tools
+### Agent tool-access policy
 
-Feature Factory agent assets follow OpenCode granular `permissions` blocks (including `permissions.bash` object syntax) with deny/allow precedence based on **last matching rule wins**.
+Feature Factory agent assets primarily use OpenCode agent frontmatter to keep stage capabilities explicit.
 
-- Stage agents (`planning`, `building`, `reviewing`, `documenting`) expose `bash` and explicitly allow `git`/`gh` command patterns, including `oo`-prefixed variants (`oo git ...`, `oo gh ...`).
-- Read-only agents (`planning`, `reviewing`) are deny-first for shell commands (`'*': deny`) with explicit `git`/`gh` exceptions, including `oo git`/`oo gh`.
-- Read-only agents explicitly disable PTY tools (`pty_spawn`, `pty_write`, `pty_read`, `pty_list`, `pty_kill`) so command execution does not route through interactive PTY paths.
+- `reviewing` now uses a `tools` block instead of `permissions` because some OpenCode models (including GLM/Kimi-family models) have compatibility issues with permission-based agent configs.
+- `reviewing` remains read-only by disabling `write`, `edit`, `bash`, all PTY tools, and `task` directly in the `tools` block.
+- Other stage agents may still use more granular permission-based shell allowances where model compatibility allows it.
 
 ### Plugin auto-handoff safety net
 

package/agents/building.md

@@ -1,8 +1,8 @@
 ---
 description: Implements features from approved plans and returns structured implementation outputs for pipeline handoff.
-mode: all
+mode: secondary
 color: '#d2d21a'
-model: openai/gpt-5.4-fast
+model: openai/gpt-5.5-fast
 permissions:
   skill:
     '*': allow

package/agents/documenting.md

@@ -1,6 +1,6 @@
 ---
 description: Documentation implementation specialist for pipeline documentation stage.
-mode: all
+mode: secondary
 color: '#f97316'
 model: opencode/gemini-3.1-pro
 permissions:

package/agents/feature-factory.md

@@ -2,7 +2,7 @@
 description: Feature Factory — native stage orchestrator for planning, building, reviewing, and documenting through sub-agents.
 mode: primary
 color: '#0fc24e'
-model: openai/gpt-5.4-fast
+model: openai/gpt-5.5-fast
 permissions:
   write: deny
   edit: deny

package/agents/planning.md

@@ -1,8 +1,8 @@
 ---
 description: Creates implementation plans and planning gates for pipeline and ad-hoc work. Uses result-based handoff instead of file artifacts.
-mode: all
+mode: secondary
 color: '#3b82f6'
-model: openai/gpt-5.4-fast
+model: openai/gpt-5.5-fast
 permissions:
   write: deny
   edit: deny

package/agents/reviewing.md

@@ -1,30 +1,18 @@
 ---
 description: Unified validation agent for code and documentation. Performs acceptance, quality, security, and architecture review with context-driven scope.
-mode: all
+mode: secondary
 color: '#8b5cf6'
 model: opencode/glm-5.1
-permissions:
-  write: deny
-  edit: deny
-  pty_spawn: deny
-  pty_write: deny
-  pty_read: deny
-  pty_list: deny
-  pty_kill: deny
-  skill:
-    '*': allow
-  task:
-    '*': deny
-  bash:
-    '*': deny
-    git: allow
-    'git *': allow
-    'oo git': allow
-    'oo git *': allow
-    gh: allow
-    'gh *': allow
-    'oo gh': allow
-    'oo gh *': allow
+tools:
+  write: false
+  edit: false
+  bash: false
+  pty_spawn: false
+  pty_write: false
+  pty_read: false
+  pty_list: false
+  pty_kill: false
+  task: false
 ---
 
 You are the unified reviewing specialist.

package/package.json

@@ -1,7 +1,7 @@
 {
   "$schema": "https://json.schemastore.org/package.json",
   "name": "@syntesseraai/opencode-feature-factory",
-  "version": "0.12.4",
+  "version": "0.12.6",
   "type": "module",
   "description": "OpenCode plugin for Feature Factory agents - provides sub-agents and skills for validation, review, security, and architecture assessment",
   "license": "MIT",