nitm-ai-dev-toolkit 3.0.22 → 4.0.0

package/src/repo/.opencode/agents/green.md

@@ -1,10 +1,16 @@
 ---
 description: "Write minimal code to make failing tests pass. Part of the TDD red-green-refactor cycle."
 mode: subagent
-temperature: 0.1
-permission:
-  edit: allow
-  bash: allow
+request:
+  body:
+    temperature: 0.1
+permissions:
+  - action: edit
+    resource: "*"
+    effect: allow
+  - action: shell
+    resource: "*"
+    effect: allow
 ---
 
 # Green Agent (TDD — Make Tests Pass)

package/src/repo/.opencode/agents/implementer.md

@@ -1,10 +1,16 @@
 ---
 description: "Implement code changes for a specific task. Follow TDD, write tests alongside code, and self-review before reporting completion."
 mode: subagent
-temperature: 0.1
-permission:
-  edit: allow
-  bash: allow
+request:
+  body:
+    temperature: 0.1
+permissions:
+  - action: edit
+    resource: "*"
+    effect: allow
+  - action: shell
+    resource: "*"
+    effect: allow
 ---
 
 # Implementer Agent

package/src/repo/.opencode/agents/planner.md

@@ -1,10 +1,16 @@
 ---
 description: "Break down feature requests into implementation tasks. Read specifications, analyze codebase patterns, and produce structured plans with dependencies."
 mode: subagent
-temperature: 0.1
-permission:
-  edit: allow
-  bash: allow
+request:
+  body:
+    temperature: 0.1
+permissions:
+  - action: edit
+    resource: "*"
+    effect: allow
+  - action: shell
+    resource: "*"
+    effect: allow
 ---
 
 # Planner Agent

package/src/repo/.opencode/agents/red.md

@@ -1,10 +1,16 @@
 ---
 description: "Write failing tests that define expected behavior. Part of the TDD red-green-refactor cycle."
 mode: subagent
-temperature: 0.1
-permission:
-  edit: allow
-  bash: allow
+request:
+  body:
+    temperature: 0.1
+permissions:
+  - action: edit
+    resource: "*"
+    effect: allow
+  - action: shell
+    resource: "*"
+    effect: allow
 ---
 
 # Red Agent (TDD — Write Failing Tests)

package/src/repo/.opencode/agents/refactor.md

@@ -1,10 +1,16 @@
 ---
 description: "Improve code quality and structure while keeping all tests passing. Part of the TDD red-green-refactor cycle."
 mode: subagent
-temperature: 0.1
-permission:
-  edit: allow
-  bash: allow
+request:
+  body:
+    temperature: 0.1
+permissions:
+  - action: edit
+    resource: "*"
+    effect: allow
+  - action: shell
+    resource: "*"
+    effect: allow
 ---
 
 # Refactor Agent (TDD — Improve Code Quality)

package/src/repo/.opencode/agents/researcher.md

@@ -1,10 +1,16 @@
 ---
 description: "Research codebase patterns, dependencies, and technical context. Analyze code structure, find relevant examples, and report findings without making changes."
 mode: subagent
-temperature: 0.1
-permission:
-  edit: deny
-  bash: deny
+request:
+  body:
+    temperature: 0.1
+permissions:
+  - action: edit
+    resource: "*"
+    effect: deny
+  - action: shell
+    resource: "*"
+    effect: deny
 ---
 
 # Researcher Agent

package/src/repo/.opencode/agents/reviewer.md

@@ -1,10 +1,16 @@
 ---
 description: "Review code changes for correctness, code quality, security, and adherence to project patterns. Provide actionable feedback with specific file and line references. Use immediately after writing or modifying code, or as a quality gate in orchestrated workflows."
 mode: subagent
-temperature: 0.1
-permission:
-  edit: deny
-  bash: allow
+request:
+  body:
+    temperature: 0.1
+permissions:
+  - action: edit
+    resource: "*"
+    effect: deny
+  - action: shell
+    resource: "*"
+    effect: allow
 ---
 
 # Reviewer Agent

package/src/repo/.opencode/agents/tdd.md

@@ -1,11 +1,19 @@
 ---
 description: "Implement a feature using test-driven development with red-green-refactor cycle. Coordinates specialized subagents for writing failing tests, implementing code, and refactoring."
 mode: subagent
-temperature: 0.3
-permission:
-  edit: allow
-  bash: allow
-  task: allow
+request:
+  body:
+    temperature: 0.3
+permissions:
+  - action: edit
+    resource: "*"
+    effect: allow
+  - action: shell
+    resource: "*"
+    effect: allow
+  - action: subagent
+    resource: "*"
+    effect: allow
 ---
 
 # TDD Coordinator Agent

package/src/repo/.opencode/opencode.jsonc

@@ -5,17 +5,15 @@
 		".opencode/rules/*.md",
 		".agents/skills/orient-to-recent-work/SKILL.md"
 	],
-	"skills": {
-		"paths": [
-			".agents/skills/**/*.md",
-			".claude/skills/**/*.md"
-		]
-	},
-	"plugin": [
+	"skills": [
+		".agents/skills",
+		".claude/skills"
+	],
+	"plugins": [
 		"opencode-mem",
 		"@tarquinen/opencode-dcp@latest",
-		"@dietrichgebert/ponytail",
-		"opentmux"
+		"@dietrichgebert/ponytail@4.12.0"
+		// "opentmux": V1-only; enable only after it supports V2.
 	],
 	"lsp": true
-}
+}

package/src/repo/AGENTS.md

@@ -77,8 +77,24 @@ When stopping to ask a question, do not just post an open-ended block of text. F
 
 > **Full details:** See `.github/instructions/agent-conduct.instructions.md`
 
+## OpenCode V2 Context
+
+OpenCode use with toolkit v4 requires native V2; Slim >=3.0.0 requires OpenCode >=2.0.7. Read [native setup](README.md#native-opencode-v2) before migration. All bootstrap flows run `opencode --version` before changes for confirmed OpenCode use: V1 must stop and upgrade OpenCode or remain on toolkit 3.x; missing/unparseable versions block OpenCode steps and toolkit 4.0.0 marking. Directory presence is not harness proof; other-harness-only setup is unaffected.
+
+Use `agents`/`system`, `request.body.temperature`, ordered `permissions` (`action`/`resource`/`effect`, `shell`/`subagent`), `commands`, `plugins`, directory-based `skills`, and `mcp.servers`. Preserve user models/providers/plugins and Slim's separate strict schema; do not host-migrate its `prompt`/`permission`/`variant` fields or silently upgrade the separate external starter. Templates register the author's native V2 `@dietrichgebert/ponytail@4.12.0` locally instead of a bundled Ponytail plugin; `opentmux` stays commented as V1-only. Remove only known obsolete toolkit Ponytail `.js`/`.mjs`/`.ts` copies after backup and approval, preserve unrelated local plugins, and merge/deduplicate upstream registration locally without editing global config. No local API port or bridge is used; plugin/runtime integration is untested.
+
+Ambient `AGENTS.md` works; config `instructions` entries do not load. `@refs` are ordinary text: explicitly read linked snippets. `request.body.temperature` remains in config, but the current runner does not send it. Preserve `lsp: true`; use project lint/typecheck/compiler commands, not unavailable V2 LSP diagnostics. Back up V1 before native conversion; converted files are incompatible with V1. Activate on the next run/restart.
+
 ## Detailed Instructions
 
+### Native Codex
+
+Codex-scoped installs include `.github/instructions/` and `.claude/rules-snippets/` solely as AGENTS-linked standards and their wrapper sources. Read them as references when relevant, not as automatically loaded Codex rules or evidence of Copilot/Claude use; other harness command, agent, and config directories are excluded from `--env codex`.
+
+Codex uses this `AGENTS.md` and `.agents/skills/` natively; more-specific nested `AGENTS.md` files provide scoped guidance. Read linked standards when relevant rather than assuming tool-specific rules are auto-loaded. Optional `.codex/config.toml` is comment-only and preserves inherited defaults; project config loads only after explicit user trust. Do not grant self-trust, change security/model/feature defaults, translate Claude frontmatter into Codex agents, or activate MCP servers automatically. Codex MCP uses native `[mcp_servers.name]` TOML, not `.mcp.json`.
+
+For npm setup, read and follow `.nitm/BOOTSTRAP.md`. If manually copied and `.nitm/` is absent, read `.claude/prompt-snippets/bootstrap.md` as a task document; `/bootstrap` is not a native Codex command. Determine the actual harness from runtime information or ask; scaffold directories alone do not establish use. Named custom-agent examples below apply only to harnesses that support their formats; in Codex, use workflow skills and only available native delegation capabilities.
+
 Detailed standards are split into focused instruction files in `.github/instructions/`:
 
 | Instruction File                   | Description                                     |

package/src/repo/CLAUDE.md

@@ -47,5 +47,5 @@
 - Commands are in `.opencode/commands/`.
 - Rules are in `.opencode/rules/`.
 - Agents are in `.opencode/agents/`.
-- Instructions are loaded from `AGENTS.md`, `.github/instructions/`, and `.claude/rules/`.
+- Native V2 loads ambient `AGENTS.md`, not config `instructions` entries. Explicitly read referenced snippets (`@refs` are ordinary text, not attachments). See [OpenCode setup](README.md#native-opencode-v2).
 - Skills are loaded from `.agents/skills/` and `.claude/skills/`.

package/src/repo/README.md

@@ -110,6 +110,28 @@ See the following files for AI-assisted development:
 
 ## AI Instructions and Commands
 
+### Native OpenCode V2
+
+Toolkit v4 requires **OpenCode V2 (major >=2)** for OpenCode use; oh-my-opencode-slim >=3.0.0 requires OpenCode >=2.0.7. Bootstrap, patch, and upgrade run `opencode --version` before changes (optional leading `v` accepted). V1 must stop before OpenCode customization/migration or marking toolkit 4.0.0: upgrade OpenCode or remain on toolkit 3.x. A missing CLI or unparseable version stops OpenCode steps and version marking until confirmed/installed. Confirm harness use from runtime evidence or ask, not scaffold directories; other-harness-only setup is unaffected.
+
+The template's local `plugins` array registers the author's native V2 package `@dietrichgebert/ponytail@4.12.0`, alongside `opencode-mem` and `@tarquinen/opencode-dcp@latest`; `opentmux` remains commented as V1-only. The obsolete local Ponytail plugin is no longer bundled; no local API port or bridge is used. For existing projects, back up and obtain approval before removing only known toolkit `.opencode/plugins/ponytail.js`, `.mjs`, or `.ts` copies; preserve unrelated local plugins and merge/deduplicate upstream registration locally without editing global plugins. Native local plugins are discovered automatically; do not register them twice.
+
+With approval, merge `"plugins": ["oh-my-opencode-slim@3.0.0"]` locally without replacing other registrations. Slim's separate strict schema retains `prompt`, `permission`, and `variant`; do not host-migrate it. The external starter is a separate package, not automatically upgraded. Plugin/runtime integration has not been tested.
+
+Use native `agents`/`system`, `request.body.temperature`, ordered `permissions` (`action`/`resource`/`effect`, `shell`/`subagent`), `commands`/`subagent`, `plugins` with `{ "package": "…", "options": {} }`, skill-directory arrays, and `mcp.servers` with inverse `disabled` and `timeout.catalog`/`timeout.execution`. Follow the [V2 migration guide](https://opencode.ai/v2/docs/migrate-v1) and [plugin guide](https://opencode.ai/v2/docs/build/plugins); the published schema may describe V1 and is not V2 validation authority.
+
+Ambient `AGENTS.md` works; config `instructions` entries are not loaded. `@refs` are ordinary text: read linked snippets explicitly. `request.body.temperature` remains in config, but the current runner does not send it. Preserve `lsp: true`; use project lint/typecheck/compiler commands (no V2 LSP tools/diagnostics currently).
+
+`--env opencode` supplies minimal shared references without activating other harnesses. Back up V1, merge rather than clobber models/providers/plugins, and activate on the next run/restart. Native-converted files are incompatible with V1. Verify with installed V2; `doctor` is not runtime validation. Toolkit 4.0.0 publishing has not been executed.
+
+### Native Codex
+
+`--env codex` includes `.codex/`, `.agents/`, and shared context, plus `.github/instructions/` and `.claude/rules-snippets/` solely to supply AGENTS-linked standards and their wrapper source content. No other harness command, agent, or config directories are installed; these references do not establish Copilot/Claude use or load automatically as Codex rules. Other harness scopes are unchanged.
+
+Codex reads `AGENTS.md` and `.agents/skills/` natively. The optional comment-only `.codex/config.toml` preserves inherited defaults and is loaded only after explicit user trust; it does not grant trust or activate MCP servers. Codex MCP uses native `[mcp_servers.name]` TOML, not `.mcp.json`.
+
+For npm setup, ask Codex to read and follow `.nitm/BOOTSTRAP.md`. For manual copies without `.nitm/`, provide `.claude/prompt-snippets/bootstrap.md` as a task document (copy the shared snippets too). For AI-guided updates, provide `.claude/prompt-snippets/bootstrap-patch.md`. The slash commands below and tool-specific custom-agent formats are not native Codex commands or agent definitions. Bootstrap must identify the actual running harness or ask, not infer it from scaffolded directories.
+
 This repository includes AI instruction files to standardize development workflows across tools. The `.cursor/` and `.github/` folders define how AI assistants should analyze, plan, implement, and review changes.
 
 ### Planning

package/src/monorepo/.opencode/plugins/ponytail.mjs

@@ -1,93 +0,0 @@
-// ponytail — OpenCode plugin.
-//
-// Injects the ponytail ruleset into every chat's system prompt at the active
-// intensity, and persists /ponytail mode switches. Reuses the shared instruction
-// builder so Claude Code, Codex, pi, and OpenCode all read one source of truth.
-//
-// OpenCode loads this as a server plugin — add it to your opencode.jsonc:
-//   { "plugin": ["./.opencode/plugins/ponytail.mjs"] }
-
-import { createRequire } from "module";
-import fs from "fs";
-import os from "os";
-import path from "path";
-import { fileURLToPath } from "url";
-
-const __dirname = path.dirname(fileURLToPath(import.meta.url));
-
-// The shared instruction builder is CommonJS; bridge to it from this ES module.
-const require = createRequire(import.meta.url);
-const {
-	getPonytailInstructions,
-} = require("../../hooks/ponytail-instructions");
-const {
-	getDefaultMode,
-	normalizePersistedMode,
-} = require("../../hooks/ponytail-config");
-
-// OpenCode has no flag-file convention of its own; keep mode beside its config.
-const statePath = path.join(
-	process.env.XDG_CONFIG_HOME || path.join(os.homedir(), ".config"),
-	"opencode",
-	".ponytail-active",
-);
-
-function readMode() {
-	try {
-		return (
-			normalizePersistedMode(fs.readFileSync(statePath, "utf8").trim()) ||
-			getDefaultMode()
-		);
-	} catch (e) {
-		return getDefaultMode();
-	}
-}
-
-function writeMode(mode) {
-	fs.mkdirSync(path.dirname(statePath), { recursive: true });
-	fs.writeFileSync(statePath, mode);
-}
-
-export default async ({ client } = {}) => {
-	const log = (level, message) => {
-		try {
-			client &&
-				client.app &&
-				client.app.log({ body: { service: "ponytail", level, message } });
-		} catch (e) {}
-	};
-
-	const ponytailSkillsDir = path.resolve(__dirname, "../../.agents/skills");
-
-	return {
-		// Register skills directory so opencode discovers ponytail skills.
-		config: async (config) => {
-			config.skills = config.skills || {};
-			config.skills.paths = config.skills.paths || [];
-			if (!config.skills.paths.includes(ponytailSkillsDir)) {
-				config.skills.paths.push(ponytailSkillsDir);
-			}
-		},
-
-		// Append the ruleset to the system prompt every turn.
-		"experimental.chat.system.transform": async (_input, output) => {
-			const mode = readMode();
-			if (mode === "off") return;
-			output.system.push(getPonytailInstructions(mode));
-		},
-
-		// Persist `/ponytail <level>` so the next turn's injection follows it.
-		// ponytail: mode applies from the next message, not the current one — the
-		// transform reads the flag the command writes. Good enough; switch to a
-		// synchronous store if same-turn switching ever matters.
-		"command.execute.before": async (input) => {
-			if (!input || input.command !== "ponytail") return;
-			// `off` is persisted like any mode; the transform reads it and stays silent.
-			const mode =
-				normalizePersistedMode((input.arguments || "").trim()) ||
-				getDefaultMode();
-			writeMode(mode);
-			log("info", "ponytail " + mode);
-		},
-	};
-};

package/src/repo/.opencode/plugins/ponytail.mjs

@@ -1,93 +0,0 @@
-// ponytail — OpenCode plugin.
-//
-// Injects the ponytail ruleset into every chat's system prompt at the active
-// intensity, and persists /ponytail mode switches. Reuses the shared instruction
-// builder so Claude Code, Codex, pi, and OpenCode all read one source of truth.
-//
-// OpenCode loads this as a server plugin — add it to your opencode.jsonc:
-//   { "plugin": ["./.opencode/plugins/ponytail.mjs"] }
-
-import { createRequire } from "module";
-import fs from "fs";
-import os from "os";
-import path from "path";
-import { fileURLToPath } from "url";
-
-const __dirname = path.dirname(fileURLToPath(import.meta.url));
-
-// The shared instruction builder is CommonJS; bridge to it from this ES module.
-const require = createRequire(import.meta.url);
-const {
-	getPonytailInstructions,
-} = require("../../hooks/ponytail-instructions");
-const {
-	getDefaultMode,
-	normalizePersistedMode,
-} = require("../../hooks/ponytail-config");
-
-// OpenCode has no flag-file convention of its own; keep mode beside its config.
-const statePath = path.join(
-	process.env.XDG_CONFIG_HOME || path.join(os.homedir(), ".config"),
-	"opencode",
-	".ponytail-active",
-);
-
-function readMode() {
-	try {
-		return (
-			normalizePersistedMode(fs.readFileSync(statePath, "utf8").trim()) ||
-			getDefaultMode()
-		);
-	} catch (e) {
-		return getDefaultMode();
-	}
-}
-
-function writeMode(mode) {
-	fs.mkdirSync(path.dirname(statePath), { recursive: true });
-	fs.writeFileSync(statePath, mode);
-}
-
-export default async ({ client } = {}) => {
-	const log = (level, message) => {
-		try {
-			client &&
-				client.app &&
-				client.app.log({ body: { service: "ponytail", level, message } });
-		} catch (e) {}
-	};
-
-	const ponytailSkillsDir = path.resolve(__dirname, "../../.agents/skills");
-
-	return {
-		// Register skills directory so opencode discovers ponytail skills.
-		config: async (config) => {
-			config.skills = config.skills || {};
-			config.skills.paths = config.skills.paths || [];
-			if (!config.skills.paths.includes(ponytailSkillsDir)) {
-				config.skills.paths.push(ponytailSkillsDir);
-			}
-		},
-
-		// Append the ruleset to the system prompt every turn.
-		"experimental.chat.system.transform": async (_input, output) => {
-			const mode = readMode();
-			if (mode === "off") return;
-			output.system.push(getPonytailInstructions(mode));
-		},
-
-		// Persist `/ponytail <level>` so the next turn's injection follows it.
-		// ponytail: mode applies from the next message, not the current one — the
-		// transform reads the flag the command writes. Good enough; switch to a
-		// synchronous store if same-turn switching ever matters.
-		"command.execute.before": async (input) => {
-			if (!input || input.command !== "ponytail") return;
-			// `off` is persisted like any mode; the transform reads it and stays silent.
-			const mode =
-				normalizePersistedMode((input.arguments || "").trim()) ||
-				getDefaultMode();
-			writeMode(mode);
-			log("info", "ponytail " + mode);
-		},
-	};
-};