jorgex-stack 1.0.22 → 1.0.24

package/README.md

@@ -24,6 +24,8 @@ For development from a clone, run the same commands through `pnpm cli <command>`
 
 Every command supports `--dry-run`, `--yes`, and `--target-dir <dir>` for testing without touching the real config. Writes create automatic backups and verify idempotency; merges into user config are surgical (marked markdown sections, JSON/TOML upserts), so user-owned content is never touched.
 
+Runtime defaults are documented in [docs/references/permissions.md](docs/references/permissions.md) for permissions and [docs/references/models.md](docs/references/models.md) for model selection, GPT-5.6 subagent tiers, and orchestrator inheritance.
+
 ### Modes: Human and Programmatic
 
 `install` and `sync` accept two mutually-exclusive installation modes. The choice is global (not per runtime) and is saved in `~/.jorgex-stack/install-mode.json` on first run; subsequent `sync` calls reuse it. Re-run `install` with `--mode` to switch.

package/dist/cli.js

@@ -179,21 +179,22 @@ function resolveAgentModel(models, agentName, tier) {
 }
 var DEFAULT_MODEL_MAP = {
   opencode: {
-    strong: { model: "openai/gpt-5.4", variant: "high" },
-    standard: { model: "openai/gpt-5.4-mini", variant: "high" },
-    cheap: { model: "minimax/MiniMax-M3" }
+    strong: { model: "openai/gpt-5.6-terra", variant: "xhigh" },
+    standard: { model: "openai/gpt-5.6-terra", variant: "xhigh" },
+    cheap: { model: "openai/gpt-5.6-luna", variant: "medium" }
   },
   "claude-code": {
     strong: { model: "fable" },
     standard: { model: "sonnet" },
     cheap: { model: "haiku" }
   },
-  // Codex: "default" = no fijar modelo (usa el del CLI, que OpenAI actualiza
-  // solo — D6); variant → model_reasoning_effort.
+  // El primary (orchestrator) no usa estos tiers: tanto el profile de CLI como
+  // la skill de la app heredan el modelo elegido por el usuario. Estos defaults
+  // son solo para subagentes; variant → model_reasoning_effort.
   codex: {
-    strong: { model: "default", variant: "high" },
-    standard: { model: "default", variant: "medium" },
-    cheap: { model: "default", variant: "low" }
+    strong: { model: "gpt-5.6-terra", variant: "xhigh" },
+    standard: { model: "gpt-5.6-terra", variant: "xhigh" },
+    cheap: { model: "gpt-5.6-luna", variant: "medium" }
   }
 };
 function modelMapFile() {
@@ -614,11 +615,17 @@ ${agent.body}`,
   planMainConfig(canonical, ctx) {
     const file = path7.join(ctx.configDir, "opencode.json");
     const { pluginsDir } = this.paths(ctx.configDir);
-    const content = upsertJson(readTextIfExists(file), (root) => {
+    const original = readTextIfExists(file);
+    const contentSource = original === null || original.trim() === "" ? null : original;
+    const isFreshConfig = contentSource === null;
+    const content = upsertJson(contentSource, (root) => {
       root["$schema"] ??= "https://opencode.ai/config.json";
       const defaults = loadCanonicalDefaults(ctx.stackDir)["opencode"];
-      if (defaults?.["permission"] !== void 0 && !("permission" in root)) {
+      if (isFreshConfig && defaults?.["permission"] !== void 0) {
         root["permission"] = defaults["permission"];
+        ctx.warnings.push(
+          "OpenCode: fresh config enables read-anywhere via external_directory:*; edits, web egress and arbitrary bash remain approval-gated, but broad local reads can expose secrets not covered by deny rules."
+        );
       }
       const mcp = root["mcp"] ??= {};
       for (const [name, server] of Object.entries(canonical.servers)) {
@@ -818,12 +825,19 @@ ${agent.body}`,
   planHooks(canonical, ctx) {
     const actions = [];
     const { scriptsDir } = this.paths(ctx.configDir);
+    const original = readTextIfExists(path8.join(ctx.configDir, "settings.json"));
+    const contentSource = original === null || original.trim() === "" ? null : original;
     const settingsFile = path8.join(ctx.configDir, "settings.json");
-    let content = upsertNativeHooks(readTextIfExists(settingsFile), canonical, scriptsDir);
+    let content = upsertNativeHooks(contentSource, canonical, scriptsDir);
     const defaults = loadCanonicalDefaults(ctx.stackDir)["claude-code"];
-    if (defaults?.["permissions"] !== void 0) {
+    if (contentSource === null && defaults?.["permissions"] !== void 0) {
       content = upsertJson(content, (root) => {
-        if (!("permissions" in root)) root["permissions"] = defaults["permissions"];
+        if (root["permissions"] === void 0) {
+          root["permissions"] = defaults["permissions"];
+          ctx.warnings.push(
+            "Claude Code: fresh config enables read-anywhere via Read/Grep/Glob allow rules; shell, writes and web egress remain approval-gated, but broad local reads can expose secrets not covered by deny rules."
+          );
+        }
       });
     }
     actions.push({ kind: "write", target: settingsFile, content });
@@ -1026,13 +1040,52 @@ ${body}`
   },
   planMainConfig(canonical, ctx) {
     const file = path9.join(ctx.configDir, "config.toml");
-    let content = readTextIfExists(file);
-    const defaults = loadCanonicalDefaults(ctx.stackDir)["codex"] ?? {};
-    for (const [key, value] of Object.entries(defaults)) {
-      if (content !== null && new RegExp(`^\\s*${key}\\s*=`, "m").test(content)) continue;
-      const line = `${key} = ${tomlString(String(value))}
+    const original = readTextIfExists(file);
+    const contentSource = original === null || original.trim() === "" ? null : original;
+    let content = contentSource;
+    if (contentSource === null) {
+      const defaults = loadCanonicalDefaults(ctx.stackDir)["codex"] ?? {};
+      for (const [key, value] of Object.entries(defaults)) {
+        const line = `${key} = ${tomlString(String(value))}
 `;
-      content = content === null ? line : line + content;
+        content = content === null ? line : line + content;
+      }
+      ctx.warnings.push(
+        "Codex: fresh config enables read-anywhere via the jorgex-read-anywhere permission profile; broad local reads can expose secrets not covered by deny rules."
+      );
+      content = upsertTomlSection(content, "permissions.jorgex-read-anywhere", 'extends = ":workspace"');
+      content = upsertTomlSection(
+        content,
+        "permissions.jorgex-read-anywhere.filesystem",
+        [
+          '":root" = "read"',
+          '"*.env" = "deny"',
+          '"*.env.*" = "deny"',
+          '"~/.ssh/**" = "deny"',
+          '"~/.aws/credentials" = "deny"',
+          '"~/.npmrc" = "deny"',
+          '"~/.git-credentials" = "deny"',
+          '"**/id_rsa" = "deny"',
+          '"**/id_ed25519" = "deny"',
+          '"**/*.pem" = "deny"',
+          '"**/*.key" = "deny"'
+        ].join("\n")
+      );
+      content += [
+        '\n[permissions.jorgex-read-anywhere.filesystem.":workspace_roots"]',
+        '"." = "write"',
+        '"*.env" = "deny"',
+        '"*.env.*" = "deny"',
+        '".ssh/**" = "deny"',
+        '".aws/credentials" = "deny"',
+        '".npmrc" = "deny"',
+        '".git-credentials" = "deny"',
+        '"**/id_rsa" = "deny"',
+        '"**/id_ed25519" = "deny"',
+        '"**/*.pem" = "deny"',
+        '"**/*.key" = "deny"',
+        ""
+      ].join("\n");
     }
     for (const [name, server] of Object.entries(canonical.servers)) {
       const section = `mcp_servers.${name}`;
@@ -2790,7 +2843,15 @@ import * as p5 from "@clack/prompts";
 var TIERS = ["strong", "standard", "cheap"];
 var EFFORTS = ["low", "medium", "high", "xhigh"];
 var CLAUDE_ALIASES = ["fable", "opus", "sonnet", "haiku", "inherit"];
-var CODEX_MODELS = ["default", "gpt-5.5", "gpt-5.4", "gpt-5.4-mini"];
+var CODEX_MODELS = [
+  "default",
+  "gpt-5.6-sol",
+  "gpt-5.6-terra",
+  "gpt-5.6-luna",
+  "gpt-5.5",
+  "gpt-5.4",
+  "gpt-5.4-mini"
+];
 var CODEX_CUSTOM = "__custom__";
 var CANCEL = /* @__PURE__ */ Symbol("cancel");
 function opencodeLiveModels(binPath) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "jorgex-stack",
-  "version": "1.0.22",
+  "version": "1.0.24",
   "description": "Harness multi-agente portable: instala la config JorgeX (agentes, skills, hooks, Engram, MCPs) en Claude Code, Codex CLI y OpenCode",
   "type": "module",
   "license": "MIT",

package/stack/config/defaults.json

@@ -1,17 +1,36 @@
 {
-  "$comment": "Permisos por defecto del stack: casi todo permitido, lo destructivo pregunta o se bloquea. REGLA DE ORO: cada bloque se escribe SOLO si el usuario aún no tiene esa clave en su config — si ya la tiene (suya o ajustada después), el sync no la toca jamás. Quitar o editar estos valores tras el install es seguro: pasan a ser config del usuario.",
+  "$comment": "Permisos por defecto del stack: cada bloque se escribe SOLO en config fresca o vacía; una config existente no se auto-expande jamás. OpenCode fresh default permite leer fuera del cwd, pero deja edit/bash en ask salvo allow explícito para lecturas seguras.",
   "opencode": {
     "permission": {
-      "edit": "allow",
-      "read": "allow",
+      "edit": "ask",
+      "read": {
+        "*": "allow",
+        "*.env": "deny",
+        "*.env.*": "deny",
+        "*.env.example": "allow",
+        "*/.ssh/*": "deny",
+        "*/.aws/credentials": "deny",
+        "*/.npmrc": "deny",
+        "*/.git-credentials": "deny",
+        "*/id_rsa": "deny",
+        "*/id_ed25519": "deny",
+        "*.pem": "deny",
+        "*.key": "deny"
+      },
+      "external_directory": {
+        "*": "allow"
+      },
       "glob": "allow",
       "grep": "allow",
       "list": "allow",
       "lsp": "allow",
-      "webfetch": "allow",
-      "websearch": "allow",
+      "webfetch": "ask",
+      "websearch": "ask",
       "bash": {
-        "*": "allow",
+        "*": "ask",
+        "git diff*": "ask",
+        "git log*": "allow",
+        "git status*": "allow",
         "rm *": "ask",
         "del *": "ask",
         "rmdir *": "ask",
@@ -25,13 +44,28 @@
   },
   "claude-code": {
     "permissions": {
-      "allow": ["Bash", "Edit", "Write", "WebFetch", "WebSearch"],
-      "ask": ["Bash(rm:*)", "Bash(rmdir:*)", "Bash(del:*)", "Bash(git push --force:*)"],
-      "deny": ["Bash(format:*)", "Bash(mkfs:*)", "Bash(dd:*)", "Bash(shred:*)", "Read(./.env)", "Read(./.env.*)"]
+      "allow": ["Read", "Grep", "Glob"],
+      "ask": ["Bash", "Edit", "Write", "WebFetch", "WebSearch", "Bash(rm:*)", "Bash(rmdir:*)", "Bash(del:*)", "Bash(git push --force:*)"],
+      "deny": [
+        "Bash(format:*)",
+        "Bash(mkfs:*)",
+        "Bash(dd:*)",
+        "Bash(shred:*)",
+        "Read(//**/.env)",
+        "Read(//**/.env.*)",
+        "Read(//**/.ssh/**)",
+        "Read(//**/.aws/credentials)",
+        "Read(//**/.npmrc)",
+        "Read(//**/.git-credentials)",
+        "Read(//**/id_rsa)",
+        "Read(//**/id_ed25519)",
+        "Read(//**/*.pem)",
+        "Read(//**/*.key)"
+      ]
     }
   },
   "codex": {
     "approval_policy": "on-request",
-    "sandbox_mode": "workspace-write"
+    "default_permissions": "jorgex-read-anywhere"
   }
 }