opencode-codeops 1.8.1 → 1.10.0

package/skills/make-plan/SKILL.md

@@ -24,6 +24,16 @@ If `$ARGUMENTS` contains exactly one exact standalone `--explore-scope` token be
 do not report or plan optional additions. Exploration may propose `SE-*` items but
 never accepts them; only the user may choose `Keep`.
 
+## Auto-effort option
+
+If `$ARGUMENTS` contains exactly one exact standalone `--auto-effort` or `--auto-effort=<level>`
+token before the first `--` sentinel, remove it before resolving targets, paths, or modes; zero
+occurrences means this skill's recommended level (`high`) is printed as a suggestion only, more
+than one or an invalid level is an argument error; announce
+`Auto-effort active — reasoning <level> applied for this run`; then read and apply
+[../../_shared/reasoning-effort.md](../../_shared/reasoning-effort.md) §Auto-effort option. The
+run clears the level before its final summary.
+
 ## Plan readiness proof
 
 A plan is not ready merely because its documents exist. Before presenting it as executable,
@@ -106,6 +116,7 @@ Mini-plan shape:
 
 > **Type**: Task (lightweight) · **Feature**: search · **CodeOps Artifact Schema**: 1
 > **Progress**: 0/3 tasks (0%)
+> **Reasoning**: medium — bounded UI change reusing existing patterns
 
 ## Objective
 Debounce the search box to 300ms to cut redundant queries.
@@ -121,6 +132,12 @@ shared debounce subsystem.
 **Verify**: [project verify command]
 ```
 
+Every phase and every task mini-plan carries the same advisory
+`> **Reasoning**: <level> — <reason>` line. Derive the level from the signals the plan already
+records, using [../../_shared/reasoning-effort.md](../../_shared/reasoning-effort.md) §Plan
+suggestion derivation, and keep the reason a short plain-language phrase. The line is a
+suggestion: no gate reads it, deleting it is valid, and its absence means "inherit".
+
 Everything below is the **full feature** pipeline; skip it for tasks.
 
 ## Project configuration
@@ -282,3 +299,11 @@ See the **roadmap skill** for the full Roadmap Keeper protocol.
 - **upgrade-plan skill** — upgrades outdated plans; the gate applies to new decisions only.
 - **techdocs skill** — architecture docs read during Phase 1.2 and updated during execution.
 - For coding, testing, and git standards, follow **your project's coding standards (AGENTS.md)** and use **git-commit skill** / **git-commit skill in push mode** for commits.
+
+---
+
+> **Workspace hygiene (non-negotiable):** put every temporary artifact this run creates in
+> `$CODEOPS_TMPDIR` (fallback: the OS temp directory), never in the repository, and delete them
+> all before reporting completion. Never delete user files, versioned artifacts, worktrees, or
+> another session's temporary files. Full rules:
+> [_shared/workspace-hygiene.md](../../_shared/workspace-hygiene.md).

package/skills/make-plan/templates.md

@@ -458,6 +458,8 @@ task-size criteria in [quality-checklist.md](quality-checklist.md))
 > committed, staged, unstaged, and untracked phase-start state)_
 > **Lenses**: [add-on lenses — include this line only when the target repo carries a quality
 > profile; informational: activation stays profile-driven]
+> **Reasoning**: [advisory level — `low`, `medium`, `high`, or `max`, with a one-line reason;
+> derivation in `../../_shared/reasoning-effort.md` §Plan suggestion derivation]
 
 ### Step 1.1: [Step Objective]
 

package/skills/make-requirements/SKILL.md

@@ -27,6 +27,16 @@ requirements decisions under that policy and propagate its downward-only context
 invoked supported children; an unsupported child fails closed. This mode does not grant action permission or scope expansion. **Normal mode:** without the exact token, every material choice
 still requires an explicit user decision; historical delegated records must not infer delegated authority.
 
+## Auto-effort option
+
+If `$ARGUMENTS` contains exactly one exact standalone `--auto-effort` or `--auto-effort=<level>`
+token before the first `--` sentinel, remove it before resolving targets, paths, or modes; zero
+occurrences means this skill's recommended level (`high`) is printed as a suggestion only, more
+than one or an invalid level is an argument error; announce
+`Auto-effort active — reasoning <level> applied for this run`; then read and apply
+[../../_shared/reasoning-effort.md](../../_shared/reasoning-effort.md) §Auto-effort option. The
+run clears the level before its final summary.
+
 Transform a rough project idea into a structured, complete set of formal
 **requirement documents (RDs)**. This skill is upstream of, and independent
 from, the make-plan skill — neither requires the other.
@@ -268,3 +278,11 @@ comparable systems → key discovery focus is in **`discovery-phases.md`**.
 - the upgrade-plan skill — upgrading outdated requirements (upgrade_requirements)
 - the roadmap skill — sync each newly drafted RD to stage `RD Drafted`
 - Read the project's AGENTS.md (or detected project conventions) for project-specific constraints
+
+---
+
+> **Workspace hygiene (non-negotiable):** put every temporary artifact this run creates in
+> `$CODEOPS_TMPDIR` (fallback: the OS temp directory), never in the repository, and delete them
+> all before reporting completion. Never delete user files, versioned artifacts, worktrees, or
+> another session's temporary files. Full rules:
+> [_shared/workspace-hygiene.md](../../_shared/workspace-hygiene.md).

package/skills/outcome-review/SKILL.md

@@ -32,3 +32,11 @@ Outcome evidence is opt-in, local, and content-free. Invocation counts are not q
 6. Present the smallest change likely to improve the measured outcome and define how to evaluate it.
 
 Never upload or quote project content from the outcome store.
+
+---
+
+> **Workspace hygiene (non-negotiable):** put every temporary artifact this run creates in
+> `$CODEOPS_TMPDIR` (fallback: the OS temp directory), never in the repository, and delete them
+> all before reporting completion. Never delete user files, versioned artifacts, worktrees, or
+> another session's temporary files. Full rules:
+> [_shared/workspace-hygiene.md](../../_shared/workspace-hygiene.md).

package/skills/preflight/SKILL.md

@@ -33,6 +33,16 @@ If `$ARGUMENTS` contains exactly one exact standalone `--explore-scope` token be
 do not report optional additions as findings or suggestions. Exploration records them
 as separate `SE-*` proposals; finding resolution never chooses `Keep`.
 
+## Auto-effort option
+
+If `$ARGUMENTS` contains exactly one exact standalone `--auto-effort` or `--auto-effort=<level>`
+token before the first `--` sentinel, remove it before resolving targets, paths, or modes; zero
+occurrences means this skill's recommended level (`high`, or `max` with `--thorough`) is printed
+as a suggestion only, more than one or an invalid level is an argument error; announce
+`Auto-effort active — reasoning <level> applied for this run`; then read and apply
+[../../_shared/reasoning-effort.md](../../_shared/reasoning-effort.md) §Auto-effort option. The
+run clears the level before its final summary.
+
 Run a rigorous quality audit of the artifact named in `$ARGUMENTS`, **grounded in the actual
 codebase**. Find every issue, ambiguity, contradiction, gap, and risk; verify every claim and
 assumption against the real code; present each finding with options + a recommendation; iterate
@@ -308,3 +318,11 @@ checklist. Full safeguards in [report-format.md](report-format.md).
 **Standalone:** when used without a follow-up, finish the scan + resolution, present the final
 status, then ask the user what to do next (apply fixes, create a plan, start execution, or review
 specific findings).
+
+---
+
+> **Workspace hygiene (non-negotiable):** put every temporary artifact this run creates in
+> `$CODEOPS_TMPDIR` (fallback: the OS temp directory), never in the repository, and delete them
+> all before reporting completion. Never delete user files, versioned artifacts, worktrees, or
+> another session's temporary files. Full rules:
+> [_shared/workspace-hygiene.md](../../_shared/workspace-hygiene.md).

package/skills/retro-requirements/SKILL.md

@@ -20,6 +20,16 @@ description: >-
 
 > **CodeOps Artifact Schema**: 1
 
+## Auto-effort option
+
+If `$ARGUMENTS` contains exactly one exact standalone `--auto-effort` or `--auto-effort=<level>`
+token before the first `--` sentinel, remove it before resolving targets, paths, or modes; zero
+occurrences means this skill's recommended level (`high`) is printed as a suggestion only, more
+than one or an invalid level is an argument error; announce
+`Auto-effort active — reasoning <level> applied for this run`; then read and apply
+[../../_shared/reasoning-effort.md](../../_shared/reasoning-effort.md) §Auto-effort option. The
+run clears the level before its final summary.
+
 Analyze an existing codebase — any language, any framework — and produce a
 structured **reconstruction brief** that can be fed to the make-requirements
 skill to generate formal requirement documents capable of rebuilding the entire
@@ -216,3 +226,11 @@ mapping is in **`phases.md`**.
 - the make-requirements skill — consumes `09-reconstruction-brief.md` to produce formal RDs (downstream; this brief is its input)
 - the make-plan skill — turns RDs into implementation plans (rebuild pipeline)
 - your project's coding/testing standards (AGENTS.md) — code-quality and test patterns to reference while analyzing
+
+---
+
+> **Workspace hygiene (non-negotiable):** put every temporary artifact this run creates in
+> `$CODEOPS_TMPDIR` (fallback: the OS temp directory), never in the repository, and delete them
+> all before reporting completion. Never delete user files, versioned artifacts, worktrees, or
+> another session's temporary files. Full rules:
+> [_shared/workspace-hygiene.md](../../_shared/workspace-hygiene.md).

package/skills/roadmap/SKILL.md

@@ -379,3 +379,11 @@ only facts you can read — do not invent settings.
 - Related skills: requirements (`RD Drafted` hook), preflight (`RD/Plan Preflighted`
   hooks), make-plan (`Plan Created` hook + linking), exec-plan (`Executing` / `Done` /
   `Blocked` hooks).
+
+---
+
+> **Workspace hygiene (non-negotiable):** put every temporary artifact this run creates in
+> `$CODEOPS_TMPDIR` (fallback: the OS temp directory), never in the repository, and delete them
+> all before reporting completion. Never delete user files, versioned artifacts, worktrees, or
+> another session's temporary files. Full rules:
+> [_shared/workspace-hygiene.md](../../_shared/workspace-hygiene.md).

package/skills/setup-codeops/SKILL.md

@@ -92,3 +92,11 @@ on), present only **genuinely viable** options, second-guessed and grounded in w
 actually reported, and lead with a recommendation. The user decides; never apply a migration
 without an explicit confirmation (or `--yes`). For consequential choices, apply the
 recommendation-hardening protocol (`_shared/recommendation-hardening.md`).
+
+---
+
+> **Workspace hygiene (non-negotiable):** put every temporary artifact this run creates in
+> `$CODEOPS_TMPDIR` (fallback: the OS temp directory), never in the repository, and delete them
+> all before reporting completion. Never delete user files, versioned artifacts, worktrees, or
+> another session's temporary files. Full rules:
+> [_shared/workspace-hygiene.md](../../_shared/workspace-hygiene.md).

package/skills/setup-routing/SKILL.md

@@ -50,6 +50,8 @@ Present:
 
 - detected domains and concrete evidence;
 - phase tag → capability/effort policy;
+- reasoning-effort defaults per role when risk signals justify them (see
+  [routing.md](routing.md) §Reasoning effort policy);
 - required specialist reviewers;
 - proposed concurrency limit;
 - whether custom TOML agents add value over dynamic packets; and
@@ -114,3 +116,11 @@ python3 "${CODEOPS_PLUGIN_ROOT}/scripts/install_agents.py" --project . --check
 ```
 
 Report configured roles, model pins if any, read-only roles, fallbacks, and unresolved capability gaps.
+
+---
+
+> **Workspace hygiene (non-negotiable):** put every temporary artifact this run creates in
+> `$CODEOPS_TMPDIR` (fallback: the OS temp directory), never in the repository, and delete them
+> all before reporting completion. Never delete user files, versioned artifacts, worktrees, or
+> another session's temporary files. Full rules:
+> [_shared/workspace-hygiene.md](../../_shared/workspace-hygiene.md).

package/skills/setup-routing/routing.md

@@ -27,7 +27,7 @@ CodeOps routing lives under the optional `routing` and `quality` fields in `code
 
 Allowed effort values follow the active OpenCode release. Prefer `medium` for bounded reconnaissance, `high` for correctness/security review, and higher supported levels only for genuinely demanding semantic or architectural work.
 
-An optional per-role `reasoning` field sets the provider reasoning-effort passthrough (`none`, `minimal`, `low`, `medium`, `high`, `xhigh`, `max`). Generated project specialists default to `max` through their brief or the embedded `reasoningEffort`; a routing value wins over the brief. A model that rejects the option is overridden here — there is no automatic provider-capability detection.
+An optional per-role `reasoning` field sets the provider reasoning-effort passthrough (`none`, `minimal`, `low`, `medium`, `high`, `xhigh`, `max`). Generated project specialists default to `max` through their brief or the embedded `reasoningEffort`; a routing value wins over the brief and is embedded without provider-capability detection. At runtime the plugin applies a level only when the active model exposes a matching variant; an unsupported value leaves the request unchanged (see the policy below).
 
 ```json
 "roles": {
@@ -35,6 +35,21 @@ An optional per-role `reasoning` field sets the provider reasoning-effort passth
 }
 ```
 
+## Reasoning effort policy
+
+A role's `reasoning` entry is a project default, not the only source. The runtime resolution
+order is `dispatch marker > session auto-effort > routing role default > inherit parent variant`
+(see [../../_shared/reasoning-effort.md](../../_shared/reasoning-effort.md)). A dispatch marker
+comes from an execution plan's per-phase suggestion; a session level comes from an explicit
+`--auto-effort` run. Both override the routing default for their scope, and routing applies only
+when a role entry exists — with no entry the child inherits the parent variant.
+
+The suggestion vocabulary is `low`, `medium`, `high`, and `max`, while the routing field accepts
+the wider provider enum (`none`, `minimal`, `low`, `medium`, `high`, `xhigh`, `max`). The deepseek
+flash model exposes `low`/`medium`/`high`/`max`; prefer `low` for mechanical work, `medium` for
+bounded implementation, `high` for planning and review, and `max` only for adversarial analysis.
+An unsupported value is skipped at runtime, so a routing entry never produces a provider error.
+
 Model pins are optional per role. When omitted, OpenCode resolves the model from the explicit spawn, project defaults, and parent session. A missing pin must never block the workflow.
 
 Reviewer selection is driven by risk tags:

package/skills/techdocs/SKILL.md

@@ -197,3 +197,11 @@ auto-compacts context — no manual threshold handling is needed.)
 - [templates.md](templates.md) — all VitePress file templates (index, architecture/*, ADR log + ADR template, guides/*, reference/*). Read when writing any document in Phase 4.
 - [vitepress-setup.md](vitepress-setup.md) — Phase 3 install, `config.ts`, npm scripts, `.gitignore`, and sidebar auto-update. Read when scaffolding VitePress or adding pages.
 - [authoring-and-update.md](authoring-and-update.md) — Phase 5 authoring guidelines + Mermaid types, Phase 6 incremental/comprehensive update protocol with the Design Intent Preservation rule, and the review_techdocs health check. Read before authoring, before any auto-update, and for review_techdocs.
+
+---
+
+> **Workspace hygiene (non-negotiable):** put every temporary artifact this run creates in
+> `$CODEOPS_TMPDIR` (fallback: the OS temp directory), never in the repository, and delete them
+> all before reporting completion. Never delete user files, versioned artifacts, worktrees, or
+> another session's temporary files. Full rules:
+> [_shared/workspace-hygiene.md](../../_shared/workspace-hygiene.md).

package/skills/upgrade-plan/SKILL.md

@@ -7,6 +7,16 @@ description: Upgrade an existing CodeOps requirements set, specification, plan,
 
 The current CodeOps artifact schema is `1`. Historical Claude CodeOps `3.x` stamps describe the producing skill release, not this schema. Treat them as legacy input requiring assessment, not as numeric predecessors of schema 1.
 
+## Auto-effort option
+
+If `$ARGUMENTS` contains exactly one exact standalone `--auto-effort` or `--auto-effort=<level>`
+token before the first `--` sentinel, remove it before resolving targets, paths, or modes; zero
+occurrences means this skill's recommended level (`high`) is printed as a suggestion only, more
+than one or an invalid level is an argument error; announce
+`Auto-effort active — reasoning <level> applied for this run`; then read and apply
+[../../_shared/reasoning-effort.md](../../_shared/reasoning-effort.md) §Auto-effort option. The
+run clears the level before its final summary.
+
 ## Scope
 
 Upgrade content and structure in place. Layout moves belong to `setup-codeops`. Never combine a layout migration and semantic/schema upgrade into one irreversible operation.
@@ -73,3 +83,11 @@ approved drift repair; and the Git diff contains only the approved migration.
 
 Report old formats, new schema, files changed, ambiguities resolved, RD-to-plan coverage, preserved
 progress, and residual risk. Do not auto-advance lifecycle stages.
+
+---
+
+> **Workspace hygiene (non-negotiable):** put every temporary artifact this run creates in
+> `$CODEOPS_TMPDIR` (fallback: the OS temp directory), never in the repository, and delete them
+> all before reporting completion. Never delete user files, versioned artifacts, worktrees, or
+> another session's temporary files. Full rules:
+> [_shared/workspace-hygiene.md](../../_shared/workspace-hygiene.md).

package/standards/coding-standards-full.md

@@ -50,6 +50,25 @@ These apply to all code I write unless this project's `AGENTS.md` overrides a sp
 - **Prevent injection:** parameterized queries (never string-concatenate SQL/NoSQL), escape output / use framework auto-escaping (XSS), never pass unsanitized input to shells/`eval` (command injection), canonicalize and reject `..`/absolute paths (path traversal), anti-CSRF tokens + `SameSite` cookies, rate-limit auth endpoints.
 - **Protect data:** TLS in transit; encrypt sensitive data at rest; hash passwords with `bcrypt`/`argon2`/`scrypt`; never hardcode secrets (use env vars / secret managers); never log secrets or PII; return minimal errors in production; restrictive CORS; request-size limits; audit dependencies; run containers as non-root from minimal images.
 
+# Workspace hygiene (NON-NEGOTIABLE)
+
+- **Own your temporary artifacts.** Verification logs, diffs, patch files, commit-message files,
+  scratch directories, fixture trees, and downloaded artifacts are borrowed space. Put them under
+  `$CODEOPS_TMPDIR` when the CodeOps plugin exports it (one directory per session); otherwise use
+  the OS temp directory. Never write temporary files into the repository.
+- **Delete at completion.** Before reporting any task, phase, or session complete, delete every
+  temporary artifact the run created — including verification logs. If the user asked for an
+  artifact to be kept, name its exact path and keep that file only.
+- **Never delete what you do not own.** User files, repository content, versioned artifacts,
+  `codeops/` planning artifacts, and git worktrees are durable. Never touch another session's
+  temporary files, and never follow a symlink out of the temp root.
+- **No secrets in temp files.** Do not write secrets into a temporary file; if one already holds a
+  secret, delete it and say so without printing its contents.
+- **Report it.** The final summary states `Cleanup: done`, or names what was kept and why, or
+  reports a failed deletion with its path and reason.
+- The canonical protocol, including the plugin's automatic safety net, is
+  `_shared/workspace-hygiene.md`.
+
 # Testing standards
 
 - **Run the project's verify command (build + test) before completing any task or committing.** No code is "done" while any test fails.

package/standards/coding-standards.md

@@ -42,6 +42,12 @@ Do not duplicate these standards in `~/.config/opencode/AGENTS.md` — the plugi
   artifacts get validation too — see the full standards' validation-command table.
 
 # Working style
+- **Cleanup after yourself (NON-NEGOTIABLE).** Put every temporary artifact you create — logs,
+  diffs, patches, commit-message files, scratch directories — under `$CODEOPS_TMPDIR` when it is
+  set (otherwise the OS temp directory), never inside the repository, and delete them all before
+  reporting a task complete. Never delete user files, versioned artifacts, worktrees, or another
+  session's temporary files. If something must outlive the task, name it and say why. Full rules:
+  `_shared/workspace-hygiene.md`.
 - **Ask before assuming**; **verify previous work** before building on it.
 - **Do not overengineer:** use the simplest implementation that fully satisfies the authorized
   requirements and existing project conventions. Do not add abstractions, layers, dependencies,