@tangle-network/agent-profile-materialize 0.26.7 → 0.26.9

package/dist/control-maps.d.ts

@@ -1,7 +1,13 @@
 export declare function normalizedControlName(name: string): string;
+/** Tool IDs accepted by Claude Code. */
+export declare const CLAUDE_CODE_NATIVE_TOOL_IDS: readonly string[];
+/** Permission IDs accepted by Claude Code (same as tool IDs). */
+export declare const CLAUDE_CODE_NATIVE_PERMISSION_IDS: readonly string[];
 export declare function claudeToolName(name: string): string | undefined;
 /** Tool IDs reported by the OpenCode binary shipped in the Sandbox image. */
 export declare const OPENCODE_NATIVE_TOOL_IDS: readonly ["apply_patch", "bash", "codesearch", "edit", "glob", "grep", "question", "read", "skill", "task", "todowrite", "webfetch", "websearch", "write"];
+/** Permission IDs accepted by OpenCode (tools except read, plus special permissions). */
+export declare const OPENCODE_NATIVE_PERMISSION_IDS: readonly ["apply_patch", "bash", "codesearch", "doom_loop", "edit", "external_directory", "glob", "grep", "mcp", "question", "skill", "task", "todowrite", "webfetch", "websearch", "write"];
 /** Resolve portable and legacy profile names to current OpenCode tool IDs. */
 export declare function openCodeNativeToolId(name: string): string | undefined;
 export declare function openCodeToolName(name: string): string | undefined;

package/dist/control-maps.js

@@ -26,6 +26,10 @@ const CLAUDE_TOOL_NAMES = {
     websearch: "WebSearch",
     write: "Write",
 };
+/** Tool IDs accepted by Claude Code. */
+export const CLAUDE_CODE_NATIVE_TOOL_IDS = Object.values(CLAUDE_TOOL_NAMES).sort();
+/** Permission IDs accepted by Claude Code (same as tool IDs). */
+export const CLAUDE_CODE_NATIVE_PERMISSION_IDS = CLAUDE_CODE_NATIVE_TOOL_IDS;
 export function claudeToolName(name) {
     const web = nativeWebToolKind(name);
     if (web === "search")
@@ -52,6 +56,25 @@ export const OPENCODE_NATIVE_TOOL_IDS = [
     "write",
 ];
 const OPENCODE_NATIVE_TOOL_ID_SET = new Set(OPENCODE_NATIVE_TOOL_IDS);
+/** Permission IDs accepted by OpenCode (tools except read, plus special permissions). */
+export const OPENCODE_NATIVE_PERMISSION_IDS = [
+    "apply_patch",
+    "bash",
+    "codesearch",
+    "doom_loop",
+    "edit",
+    "external_directory",
+    "glob",
+    "grep",
+    "mcp",
+    "question",
+    "skill",
+    "task",
+    "todowrite",
+    "webfetch",
+    "websearch",
+    "write",
+];
 /** Resolve portable and legacy profile names to current OpenCode tool IDs. */
 export function openCodeNativeToolId(name) {
     const web = nativeWebToolKind(name);

package/dist/execution-controls.js

@@ -4,8 +4,8 @@ export function materializeExecutionControls(h, tools, permissions, modes, plan,
     switch (h) {
         case "claude-code": {
             if (toolEntries.length > 0 || permissionEntries.length > 0) {
-                const nativeTools = mapSupportedBooleanEntries(toolEntries, claudeToolName, (name) => unsupported("tools", `claude-code: no verified native tool mapping for "${name}"`));
-                const nativePermissions = mapSupportedPermissionEntries(permissionEntries, claudeToolName, (name) => unsupported("permissions", `claude-code: no verified native permission mapping for "${name}"`), "claude-code permission");
+                const nativeTools = mapSupportedBooleanEntries(toolEntries, claudeToolName, (name) => unsupported("tools", `claude-code: no verified native tool mapping for "${name}". Accepted: ${CLAUDE_CODE_NATIVE_TOOL_IDS.join(", ")}`));
+                const nativePermissions = mapSupportedPermissionEntries(permissionEntries, claudeToolName, (name) => unsupported("permissions", `claude-code: no verified native permission mapping for "${name}". Accepted: ${CLAUDE_CODE_NATIVE_PERMISSION_IDS.join(", ")}`), "claude-code permission");
                 const rules = claudePermissionRules(nativePermissions);
                 for (const [tool, enabled] of nativeTools) {
                     rules[enabled ? "allow" : "deny"].push(tool);
@@ -32,9 +32,9 @@ export function materializeExecutionControls(h, tools, permissions, modes, plan,
                 }
                 return false;
             });
-            const nativeTools = mapSupportedBooleanEntries(enforceableTools, openCodeToolName, (name) => unsupported("tools", `opencode: no verified native tool mapping for "${name}"`));
+            const nativeTools = mapSupportedBooleanEntries(enforceableTools, openCodeToolName, (name) => unsupported("tools", `opencode: no verified native tool mapping for "${name}". Accepted: ${OPENCODE_NATIVE_TOOL_IDS.join(", ")}`));
             const nativePermissions = mapSupportedPermissionEntries(enforceablePermissions, (name) => openCodeDeclaredMcpPermissionName(name, mcpAliases) ??
-                openCodePermissionName(name), (name) => unsupported("permissions", `opencode: no verified native permission mapping for "${name}"`), "opencode permission");
+                openCodePermissionName(name), (name) => unsupported("permissions", `opencode: no verified native permission mapping for "${name}". Accepted: ${OPENCODE_NATIVE_PERMISSION_IDS.join(", ")}`), "opencode permission");
             if (enforceableTools.length > 0 || permissionEntries.length > 0) {
                 add(OPENCODE_CONFIG_FILE, serializeWorkspacePlanJson({
                     $schema: OPENCODE_CONFIG_SCHEMA,
@@ -184,7 +184,7 @@ function piExecutionControlExtensionSource(enabledTools, excludedTools) {
     ].join("\n");
 }
 import { resolveNativeWebTools } from "@tangle-network/agent-interface";
-import { claudePermissionRules, claudeToolName, mapSupportedBooleanEntries, mapSupportedPermissionEntries, normalizedControlName, openCodeDeclaredMcpPermissionName, openCodePermissionName, openCodeToolName, PI_EXECUTION_CONTROL_EXTENSION_PATH, permissionAllowsEverything, piToolId, sealClaudePermissionRules, } from "./control-maps.js";
+import { CLAUDE_CODE_NATIVE_PERMISSION_IDS, CLAUDE_CODE_NATIVE_TOOL_IDS, claudePermissionRules, claudeToolName, mapSupportedBooleanEntries, mapSupportedPermissionEntries, normalizedControlName, OPENCODE_NATIVE_PERMISSION_IDS, OPENCODE_NATIVE_TOOL_IDS, openCodeDeclaredMcpPermissionName, openCodePermissionName, openCodeToolName, PI_EXECUTION_CONTROL_EXTENSION_PATH, permissionAllowsEverything, piToolId, sealClaudePermissionRules, } from "./control-maps.js";
 import { CLAUDE_SETTINGS_PATH, OPENCODE_CONFIG_FILE, OPENCODE_CONFIG_SCHEMA, } from "./harness.js";
 import { registerClaudeSettings } from "./hooks.js";
 import { serializeWorkspacePlanJson } from "./plan-json.js";

package/dist/secret-session-view.d.ts

@@ -13,11 +13,17 @@ export declare function secretSessionViewWorkspace(input: {
 }): string;
 /**
  * Point a session's view at one published secret revision before the
- * session's turn runs. The view's `reference/` becomes a fresh tree of hard
- * links to the revision's read-only files (the same inodes, owner, mode and
- * ACL), so the session reads this turn's files and nothing the previous
- * revision held. The view holds nothing else, so OpenCode's config search
- * finds no config there; profile config stays bound by absolute path.
+ * session's turn runs. The view's `reference/` and `.opencode/skills/` become
+ * fresh trees of hard links to the revision's read-only files (the same
+ * inodes, owner, mode and ACL), so the session reads this turn's files and
+ * skills and nothing the previous revision held. A product's skill index
+ * names `.opencode/skills/<id>/SKILL.md` cwd-relative, and OpenCode's skill
+ * tool lists the same files through the revision's config directory.
+ *
+ * The view holds nothing else: no `opencode.json`, and a `.opencode/` with
+ * only the revision's digest-attested skills, which the launch does not load
+ * as project config (it sets OPENCODE_DISABLE_PROJECT_CONFIG). Profile config
+ * stays bound by absolute path.
  *
  * The swap is not atomic for a reader that is already running: the caller
  * runs one turn of a session at a time and binds before that turn spawns.

package/dist/secret-session-view.js

@@ -1,10 +1,22 @@
 import { createHash, randomBytes } from "node:crypto";
 import { chmodSync, linkSync, lstatSync, mkdirSync, readdirSync, renameSync, rmSync, } from "node:fs";
 import { basename, dirname, join } from "node:path";
+import { HARNESS_SKILL_DIRS } from "./harness.js";
 import { assertLaunchRoot } from "./managed-workspace.js";
 import { runSetfacl } from "./secret-concurrent-revision.js";
-/** The only cwd-relative content a secret OpenCode revision serves. */
-const VIEW_ENTRY = "reference";
+/** The profile's read-only files, which products name cwd-relative. */
+const REFERENCE_ENTRY = "reference";
+/**
+ * The profile's mounted skills, at the cwd-relative directory the platform
+ * publishes for products to name in their prompts (`.opencode/skills`).
+ */
+const SKILLS_DIR = HARNESS_SKILL_DIRS.opencode;
+const SKILLS_ENTRY = dirname(SKILLS_DIR);
+/** The only cwd-relative content a secret OpenCode session view serves. */
+const VIEW_ENTRIES = new Set([
+    REFERENCE_ENTRY,
+    SKILLS_ENTRY,
+]);
 /**
  * The stable, sealed cwd of one secret OpenCode session. OpenCode reopens a
  * native session at the directory it was created in, so a session resumed on
@@ -27,11 +39,17 @@ export function secretSessionViewWorkspace(input) {
 }
 /**
  * Point a session's view at one published secret revision before the
- * session's turn runs. The view's `reference/` becomes a fresh tree of hard
- * links to the revision's read-only files (the same inodes, owner, mode and
- * ACL), so the session reads this turn's files and nothing the previous
- * revision held. The view holds nothing else, so OpenCode's config search
- * finds no config there; profile config stays bound by absolute path.
+ * session's turn runs. The view's `reference/` and `.opencode/skills/` become
+ * fresh trees of hard links to the revision's read-only files (the same
+ * inodes, owner, mode and ACL), so the session reads this turn's files and
+ * skills and nothing the previous revision held. A product's skill index
+ * names `.opencode/skills/<id>/SKILL.md` cwd-relative, and OpenCode's skill
+ * tool lists the same files through the revision's config directory.
+ *
+ * The view holds nothing else: no `opencode.json`, and a `.opencode/` with
+ * only the revision's digest-attested skills, which the launch does not load
+ * as project config (it sets OPENCODE_DISABLE_PROJECT_CONFIG). Profile config
+ * stays bound by absolute path.
  *
  * The swap is not atomic for a reader that is already running: the caller
  * runs one turn of a session at a time and binds before that turn spawns.
@@ -61,32 +79,57 @@ export function bindSecretSessionView(input) {
             throw new Error("Secret session view is not an executor-owned directory");
         }
     }
-    if (readdirSync(viewWorkspaceDir).some((name) => name !== VIEW_ENTRY)) {
+    if (readdirSync(viewWorkspaceDir).some((name) => !VIEW_ENTRIES.has(name))) {
         throw new Error("Secret session view holds an unexpected entry");
     }
     // Only this function writes a view. An interrupted bind leaves a staged or
     // retired tree beside `workspace`, never inside it.
     clearBesideWorkspace(viewRoot);
-    const source = join(revisionWorkspaceDir, VIEW_ENTRY);
-    const sourceStat = lstatIfPresent(source);
-    let staged;
-    if (sourceStat) {
-        if (!isSealedNode(sourceStat, "directory")) {
-            throw new Error("Secret revision reference/ is not sealed");
-        }
-        staged = join(viewRoot, `.stage-${randomBytes(8).toString("hex")}`);
-        const directories = linkSealedTree(source, staged);
+    const staged = new Map();
+    const reference = sealedRevisionDirectory(revisionWorkspaceDir, REFERENCE_ENTRY);
+    if (reference) {
+        const target = besideWorkspace(viewRoot, "stage");
+        sealDirectories(linkSealedTree(reference, target), input.subprocessUid);
+        staged.set(REFERENCE_ENTRY, target);
+    }
+    const skills = sealedRevisionDirectory(revisionWorkspaceDir, SKILLS_DIR);
+    if (skills) {
+        const target = besideWorkspace(viewRoot, "stage");
+        mkdirSync(target, { mode: 0o700 });
+        const directories = [
+            target,
+            ...linkSealedTree(skills, join(target, basename(SKILLS_DIR))),
+        ];
         sealDirectories(directories, input.subprocessUid);
+        staged.set(SKILLS_ENTRY, target);
     }
-    const current = join(viewWorkspaceDir, VIEW_ENTRY);
-    if (lstatIfPresent(current)) {
-        renameSync(current, join(viewRoot, `.retired-${randomBytes(8).toString("hex")}`));
+    for (const entry of VIEW_ENTRIES) {
+        const current = join(viewWorkspaceDir, entry);
+        if (lstatIfPresent(current)) {
+            renameSync(current, besideWorkspace(viewRoot, "retired"));
+        }
+        const next = staged.get(entry);
+        if (next)
+            renameSync(next, current);
     }
-    if (staged)
-        renameSync(staged, current);
     clearBesideWorkspace(viewRoot);
     sealDirectories([viewRoot, viewWorkspaceDir], input.subprocessUid);
 }
+/** A sealed directory of the published revision, or undefined when absent. */
+function sealedRevisionDirectory(revisionWorkspaceDir, relPath) {
+    const source = join(revisionWorkspaceDir, relPath);
+    const stat = lstatIfPresent(source);
+    if (!stat)
+        return undefined;
+    if (!isSealedNode(stat, "directory")) {
+        throw new Error(`Secret revision ${relPath}/ is not sealed`);
+    }
+    return source;
+}
+/** A fresh staged or retired path beside the view's `workspace`. */
+function besideWorkspace(viewRoot, kind) {
+    return join(viewRoot, `.${kind}-${randomBytes(8).toString("hex")}`);
+}
 function isLaunchWorkspace(launchRoot, workspace, name) {
     return (basename(workspace) === "workspace" &&
         dirname(dirname(workspace)) === launchRoot &&

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tangle-network/agent-profile-materialize",
-  "version": "0.26.7",
+  "version": "0.26.9",
   "description": "Materialize an AgentProfile into the native per-harness workspace files (the one shared materializer for cli-bridge, agent-container, and VB).",
   "type": "module",
   "repository": {
@@ -35,8 +35,8 @@
     "@tangle-network/agent-interface": "^3.0.0 || ^4.0.0 || ^5.0.0"
   },
   "tangleRelease": {
-    "sourceSha": "3a57bb381718597c9aac7fe2f0d2c60b35223474",
-    "mergedAt": "2026-10-19T11:40:06-06:00"
+    "sourceSha": "be89262c7e1faaedf04926a27d0ecbf17d91a318",
+    "mergedAt": "2026-10-19T23:54:34-06:00"
   },
   "scripts": {
     "build": "tsc -p tsconfig.json",