pantheon-opencode 1.3.4 → 1.3.5-beta.57.2e03676

package/scripts/install/opencode.mjs

@@ -1,6 +1,16 @@
 #!/usr/bin/env node
 /**
  * opencode.mjs — OpenCode platform installer
+ *
+ * Dual-version install (Phase 3): the generated config is V1-shaped and valid
+ * under BOTH OpenCode V1 (`opencode` 1.18.x) and V2 (`opencode2`
+ * v0.0.0-next-17444). V2 reads the same config locations and normalizes V1
+ * fields in memory — do NOT convert to native V2 format. Known V2 beta gaps
+ * handled here: top-level `subagent_depth` is silently ignored (migrated to
+ * `experimental.subagent_depth`), and the `instructions` config key is
+ * accepted-but-not-loaded (content consolidated into AGENTS.md, which both
+ * versions load). Pass --version v2 to pantheon-init for an informational
+ * label; state isolation is handled at runtime via OPENCODE_DB.
  */
 
 import { chmodSync, existsSync, mkdirSync, readdirSync, readFileSync, rmSync } from 'node:fs'
@@ -221,6 +231,20 @@ export async function installOpenCode(
   const componentSet = new Set(components)
   const stats = summary.opencode
 
+  // V1/V2 dual-version awareness (Phase 3): the SAME config works under both
+  // OpenCode V1 (`opencode`) and V2 (`opencode2`, beta v0.0.0-next-17444).
+  // V2 normalizes V1 fields in memory (no rewrite) and isolates its state DB
+  // via OPENCODE_DB (~/.local/share/opencode/opencode-v2.db) with a distinct
+  // service port (49375 vs V1's 49374). The installer writes one shared
+  // config; the --version flag only labels the install for the operator.
+  const version = opts.version === 'v2' ? 'v2' : 'v1'
+  if (version === 'v2') {
+    info(
+      'OpenCode V2 target — shared config; state isolated via OPENCODE_DB ' +
+        '(~/.local/share/opencode/opencode-v2.db), service port 49375',
+    )
+  }
+
   // Interactive mode handling
   const stdinTTY = process.stdin.isTTY && process.stdout.isTTY
   const forceInteractive = opts.interactive === true
@@ -333,8 +357,13 @@ export async function installOpenCode(
   }
 
   // -----------------------------------------------------------------------
-  // 2.5 Install instructions: AGENTS.md + instructions/ (--components instructions)
+  // 2.5 Install instructions: AGENTS.md only (--components instructions)
   // -----------------------------------------------------------------------
+  // AGENTS.md is the single instruction file both V1 and V2 load; the
+  // generated file embeds every src/instructions/*.instructions.md body, so
+  // the individual files are NOT copied anymore (nothing references
+  // <config>/instructions/ after the section-D merge fix — copying them would
+  // just leave stale duplicates on disk).
   if (componentSet.has('instructions')) {
     section('\uD83D\uDCCB Instructions')
     // AGENTS.md
@@ -346,14 +375,6 @@ export async function installOpenCode(
       if (status === 'created') stats.created++
       else stats.skipped++
     }
-    // instructions/ directory
-    const srcInstr = join(ROOT, 'src', 'instructions')
-    const dstInstr = join(target, 'instructions')
-    if (existsSync(srcInstr)) {
-      const instrResult = syncDir(srcInstr, dstInstr, dryRun, clean)
-      stats.created += instrResult.created
-      stats.skipped += instrResult.skipped
-    }
   }
 
   // -----------------------------------------------------------------------
@@ -661,11 +682,36 @@ export async function installOpenCode(
   if (!config.default_agent && pantheonConfig.default_agent) {
     config.default_agent = pantheonConfig.default_agent
   }
+  // Merge top-level model/small_model from the repo config when the target
+  // config has no top-level `model` (fresh sandbox installs have none). The
+  // repo's opencode.json carries the default pair
+  // (opencode-go/deepseek-v4-flash); a user-set model is never overwritten.
+  if (!config.model && pantheonConfig.model) {
+    config.model = pantheonConfig.model
+    if (!config.small_model && pantheonConfig.small_model) {
+      config.small_model = pantheonConfig.small_model
+    }
+  }
   // Merge subagent_depth HERE (the config merge always runs, including on a
   // fresh install) instead of a file-existence-gated block, so run #1 already
   // produces the final config — run #2 must be a byte-identical no-op (#19).
-  if (config.subagent_depth === undefined) {
-    config.subagent_depth = 2
+  //
+  // V1/V2 compat (Phase 3): top-level `subagent_depth` is in V2's
+  // unsupportedTopLevel list and is SILENTLY IGNORED. The accepted form is
+  // `experimental.subagent_depth`. Migrate any existing top-level value into
+  // experimental (preserving the user's choice) and default fresh installs to
+  // experimental.subagent_depth = 2. V1 reads experimental.subagent_depth
+  // too, so the V1-shape config stays valid under both versions.
+  if (config.experimental === undefined || typeof config.experimental !== 'object') {
+    config.experimental = {}
+  }
+  if (config.subagent_depth !== undefined) {
+    if (config.experimental.subagent_depth === undefined) {
+      config.experimental.subagent_depth = config.subagent_depth
+    }
+    delete config.subagent_depth
+  } else if (config.experimental.subagent_depth === undefined) {
+    config.experimental.subagent_depth = 2
   }
 
   // --------------------------------------------------------------------
@@ -695,16 +741,24 @@ export async function installOpenCode(
     }
   }
 
-  // The runtime hooks plugin MUST always be registered. The packaged
-  // opencode.json no longer carries dev-machine plugin paths (removed in
-  // 3e552cc), so config.plugin would otherwise stay empty and the
-  // pantheon-hooks runtime would never load. Register it unconditionally,
-  // replacing any stale entry for the same file (same basename-dedup as
-  // above) so installs and upgrades are idempotent and hermetic.
-  const hooksPlugin = resolveInstalledPlugin('src/plugins/pantheon-hooks.ts')
-  const hooksFile = basename(hooksPlugin)
-  config.plugin = config.plugin.filter((p) => basename(p) !== hooksFile)
-  config.plugin.push(hooksPlugin)
+  // The two Pantheon plugins MUST always be registered, on fresh installs AND
+  // upgrades. The packaged opencode.json carries no `plugin` key (dev-machine
+  // paths removed in 3e552cc), so config.plugin would otherwise only contain
+  // whatever the user had — a fresh install would register NOTHING and lose
+  // delegation tools, GoalLoop, cost command, hashline and vision. Register
+  // both unconditionally, replacing any stale entry for the same file
+  // (basename-dedup) so installs and upgrades are idempotent and hermetic
+  // while preserving any user plugins.
+  const ensurePantheonPlugin = (ref) => {
+    const resolved = resolveInstalledPlugin(ref)
+    const file = basename(resolved)
+    config.plugin = config.plugin.filter((p) => basename(p) !== file)
+    config.plugin.push(resolved)
+  }
+  // Root-level delegation plugin (PR #45): tools, GoalLoop, cost, hashline.
+  ensurePantheonPlugin('src/plugin.ts')
+  // Runtime hooks plugin: chat hooks, hook-runner, TUI wiring.
+  ensurePantheonPlugin('src/plugins/pantheon-hooks.ts')
 
   if (!config.provider && pantheonConfig.provider) {
     config.provider = deepClone(pantheonConfig.provider)
@@ -747,10 +801,25 @@ export async function installOpenCode(
   // --------------------------------------------------------------------
   // D. Merge instructions paths
   // --------------------------------------------------------------------
-  const pantheonInstructions = ['AGENTS.md', 'instructions/*.instructions.md']
+  // AGENTS.md is the single instruction file both V1 and V2 load (V1
+  // auto-discovers it, V2 loads it explicitly). The generated AGENTS.md
+  // (scripts/build-agents-md.mjs) already embeds every
+  // src/instructions/*.instructions.md body, so the `instructions/*.md`
+  // glob is no longer needed — keeping it would duplicate content under V1
+  // and is ignored under V2 anyway. Only ensure AGENTS.md is present.
+  const pantheonInstructions = ['AGENTS.md']
   if (!config.instructions) {
     config.instructions = [...pantheonInstructions]
   } else {
+    // Strip stale per-file instruction globs from PREVIOUS installs
+    // (e.g. `instructions/*.instructions.md` / `src/instructions/*.md`).
+    // The merge is additive-only otherwise, so without this filter existing
+    // configs would keep loading instruction content twice under V1
+    // (generated AGENTS.md + individual files). User entries that are not
+    // *.instructions.md globs are preserved.
+    config.instructions = config.instructions.filter(
+      (instr) => typeof instr !== 'string' || !instr.endsWith('.instructions.md'),
+    )
     for (const instr of pantheonInstructions) {
       if (!config.instructions.includes(instr)) {
         config.instructions.push(instr)

package/scripts/release-beta-version.mjs

@@ -0,0 +1,80 @@
+#!/usr/bin/env node
+/** Compute and optionally apply the beta version for a release PR. */
+
+import { readFileSync, writeFileSync } from 'node:fs'
+import { join } from 'node:path'
+
+export const MANIFESTS = [
+  { file: 'package.json', kind: 'json' },
+  { file: 'pyproject.toml', kind: 'toml' },
+  { file: 'plugin.json', kind: 'json' },
+  { file: 'src/plugins/tui/package.json', kind: 'json' },
+]
+
+const STABLE = /^(\d+)\.(\d+)\.(\d+)$/
+
+export function nextStableVersion(latest, intent = 'patch') {
+  const match = STABLE.exec(String(latest))
+  if (!match) throw new Error(`npm latest is not a stable semver: "${latest}"`)
+  const [major, minor, patch] = match.slice(1).map(Number)
+  if (!['patch', 'minor', 'major'].includes(intent)) {
+    throw new Error(`release intent must be patch, minor, or major: "${intent}"`)
+  }
+  if (intent === 'major') return `${major + 1}.0.0`
+  if (intent === 'minor') return `${major}.${minor + 1}.0`
+  return `${major}.${minor}.${patch + 1}`
+}
+
+export function betaVersion(latest, intent, pr, sha) {
+  if (!/^\d+$/.test(String(pr)) || Number(pr) < 1) throw new Error(`invalid PR number: "${pr}"`)
+  const shortSha = String(sha).slice(0, 7)
+  if (!/^[0-9a-f]{7,}$/i.test(shortSha)) throw new Error(`invalid commit SHA: "${sha}"`)
+  return `${nextStableVersion(latest, intent)}-beta.${pr}.${shortSha}`
+}
+
+function writeVersion(root, { file, kind }, version) {
+  const path = join(root, file)
+  const raw = readFileSync(path, 'utf8')
+  if (kind === 'toml') {
+    const updated = raw.replace(/^(version\s*=\s*")[^"]+("\s*)$/m, `$1${version}$2`)
+    if (updated === raw) throw new Error(`no version field in ${file}`)
+    writeFileSync(path, updated)
+    return
+  }
+  const content = JSON.parse(raw)
+  content.version = version
+  writeFileSync(path, `${JSON.stringify(content, null, 2)}\n`)
+}
+
+export function applyBetaVersion(root, version) {
+  for (const manifest of MANIFESTS) writeVersion(root, manifest, version)
+  // Keep npm's lockfile metadata consistent without changing dependency data.
+  const lockPath = join(root, 'package-lock.json')
+  const lock = JSON.parse(readFileSync(lockPath, 'utf8'))
+  lock.version = version
+  if (lock.packages?.['']) lock.packages[''].version = version
+  writeFileSync(lockPath, `${JSON.stringify(lock, null, 2)}\n`)
+}
+
+const args = new Map(
+  process.argv.slice(2).map((arg) => {
+    const [key, ...value] = arg.split('=')
+    return [key.replace(/^--/, ''), value.join('=')]
+  }),
+)
+
+if (args.has('latest')) {
+  try {
+    const version = betaVersion(
+      args.get('latest'),
+      args.get('intent') || 'patch',
+      args.get('pr'),
+      args.get('sha'),
+    )
+    if (args.has('apply')) applyBetaVersion(process.cwd(), version)
+    console.log(version)
+  } catch (error) {
+    console.error(`release-beta-version: ${error.message}`)
+    process.exit(1)
+  }
+}

package/scripts/validate-routing.mjs

@@ -89,7 +89,9 @@ for (const dir of [srcSkillsDir, dotSkillsDir]) {
         if (existsSync(join(skillDir, 'SKILL.md')) && !existingSkills.includes(d)) {
           existingSkills.push(d)
         }
-      } catch { /* skip */ }
+      } catch {
+        /* skip */
+      }
     }
   }
 }
@@ -165,6 +167,168 @@ for (const w of presetValidation.warnings) {
 }
 console.log(`  Presets defined: ${Object.keys(presetDefs).length}`)
 
+// G. Delegation Matrix Invariants (B1 — Zeus strict + read-only exceptions)
+console.log(`\n  Delegation matrix invariants:`)
+
+// G1. can_delegate: true only for zeus, athena (→apollo), hermes (→apollo)
+const CAN_DELEGATE_AGENTS = ['zeus', 'athena', 'hermes']
+for (const [name, agentInfo] of Object.entries(routing.agents || {})) {
+  if (agentInfo.can_delegate === true) {
+    check(
+      CAN_DELEGATE_AGENTS.includes(name),
+      `Agent "${name}" has can_delegate: true but is not in allowed list [${CAN_DELEGATE_AGENTS}]`,
+    )
+  }
+}
+
+// G3. subagent_can_delegate_to only references existing agents
+for (const [name, agentInfo] of Object.entries(routing.agents || {})) {
+  const delegates = agentInfo.subagent_can_delegate_to || []
+  for (const target of delegates) {
+    check(
+      routingAgents.includes(target),
+      `Agent "${name}" can_delegate_to unknown agent "${target}"`,
+    )
+  }
+}
+
+// G4. athena and hermes can only delegate to apollo (read-only exception)
+for (const agentName of ['athena', 'hermes']) {
+  const agentInfo = routing.agents[agentName]
+  if (agentInfo) {
+    const delegates = agentInfo.subagent_can_delegate_to || []
+    check(
+      delegates.length <= 1 && delegates[0] === 'apollo',
+      `Agent "${agentName}" subagent_can_delegate_to must be [apollo] only, got [${delegates}]`,
+    )
+  }
+}
+
+// G5. Frontmatter permission.task invariants
+const AGENT_FILES_DIR = join(ROOT, 'src', 'agents')
+const FRONTMATTER_RE = /^---\n([\s\S]*?)\n---/
+
+function parseFrontmatter(filePath) {
+  const content = readFileSync(filePath, 'utf8')
+  const match = content.match(FRONTMATTER_RE)
+  if (!match) return null
+  try {
+    return yaml.load(match[1])
+  } catch {
+    return null
+  }
+}
+
+// G5a. Frontmatter mode must match routing.yml task eligibility.
+const frontmatterByAgent = new Map()
+for (const agentName of canonicalFiles) {
+  frontmatterByAgent.set(agentName, parseFrontmatter(join(AGENT_FILES_DIR, `${agentName}.md`)))
+}
+
+for (const [name, agentInfo] of Object.entries(routing.agents || {})) {
+  const fm = frontmatterByAgent.get(name)
+  if (!fm) continue
+
+  if (name === 'zeus') {
+    check(fm.mode === 'primary', 'Agent "zeus" must use mode primary')
+  } else if (agentInfo.can_receive_delegation === true) {
+    const expectedMode = agentInfo.user_invocable === true ? 'all' : 'subagent'
+    check(
+      fm.mode === expectedMode,
+      `Agent "${name}" mode must be "${expectedMode}" for routing.yml eligibility, got "${fm.mode}"`,
+    )
+  }
+}
+
+// G5b. Zeus targets must exist, receive delegation, and never be primary.
+for (const targetEntry of routing.delegation?.zeus || []) {
+  const target = typeof targetEntry === 'string' ? targetEntry : targetEntry.target
+  const targetInfo = routing.agents[target]
+  const targetFm = frontmatterByAgent.get(target)
+  check(targetInfo !== undefined, `Zeus delegation target "${target}" must exist`)
+  if (targetInfo && targetFm) {
+    check(
+      targetInfo.can_receive_delegation === true && targetFm.mode !== 'primary',
+      `Zeus delegation target "${target}" must not be mode primary and must receive delegation`,
+    )
+  }
+}
+
+// G5c. Every subagent delegation target must exist and be eligible.
+for (const [name, agentInfo] of Object.entries(routing.agents || {})) {
+  for (const target of agentInfo.subagent_can_delegate_to || []) {
+    const targetInfo = routing.agents[target]
+    const targetFm = frontmatterByAgent.get(target)
+    check(targetInfo !== undefined, `Agent "${name}" can_delegate_to unknown agent "${target}"`)
+    if (targetInfo && targetFm) {
+      check(
+        targetInfo.can_receive_delegation === true && targetFm.mode !== 'primary',
+        `Agent "${name}" can_delegate_to target "${target}" is not eligible`,
+      )
+    }
+  }
+}
+
+// Expected permission.task matrix
+const EXPECTED_TASK_PERMISSIONS = {
+  zeus: { '*': 'allow' },
+  athena: { '*': 'deny', apollo: 'allow' },
+  hermes: { '*': 'deny', apollo: 'allow' },
+  themis: { '*': 'deny' },
+  aphrodite: { '*': 'deny' },
+  demeter: { '*': 'deny' },
+  apollo: { '*': 'deny' },
+  gaia: { '*': 'deny' },
+  prometheus: { '*': 'deny' },
+  hephaestus: { '*': 'deny' },
+  nyx: { '*': 'deny' },
+  iris: { '*': 'deny' },
+  talos: { '*': 'deny' },
+  mnemosyne: { '*': 'deny' },
+}
+
+for (const agentName of canonicalFiles) {
+  const fmPath = join(AGENT_FILES_DIR, `${agentName}.md`)
+  const fm = parseFrontmatter(fmPath)
+  if (!fm) {
+    check(false, `Agent "${agentName}" has no valid frontmatter`)
+    continue
+  }
+
+  // G5a. permission.task must exist
+  const hasTask = fm.permission?.task
+  check(hasTask, `Agent "${agentName}" missing permission.task in frontmatter`)
+
+  if (!hasTask) continue
+
+  // G5b. Only zeus may have "*": allow
+  const starRule = fm.permission.task['*']
+  if (starRule === 'allow') {
+    check(
+      agentName === 'zeus',
+      `Agent "${agentName}" has permission.task "*": allow — only zeus is allowed`,
+    )
+  }
+
+  // G5c. Verify exact expected permissions
+  const expected = EXPECTED_TASK_PERMISSIONS[agentName]
+  if (expected) {
+    const actual = fm.permission.task
+    const actualKeys = Object.keys(actual).sort()
+    const expectedKeys = Object.keys(expected).sort()
+    check(
+      JSON.stringify(actualKeys) === JSON.stringify(expectedKeys),
+      `Agent "${agentName}" permission.task keys mismatch: expected [${expectedKeys}], got [${actualKeys}]`,
+    )
+    for (const [key, val] of Object.entries(expected)) {
+      check(
+        actual[key] === val,
+        `Agent "${agentName}" permission.task.${key}: expected "${val}", got "${actual[key]}"`,
+      )
+    }
+  }
+}
+
 // Summary
 console.log(`\n${'='.repeat(50)}`)
 const status = failures === 0 ? '✅ PASSED' : `❌ FAILED (${failures}/${checks} checks failed)`

package/src/agents/aphrodite.md

@@ -1,7 +1,7 @@
 ---
 name: aphrodite
 description: "Frontend specialist — React 19, TypeScript strict, WCAG accessibility, responsive design, TDD, modern API patterns, deprecated npm detection. Calls apollo for discovery, sends to themis for review."
-mode: primary
+mode: all
 reasoning_effort: medium
 permission:
   read: allow
@@ -11,6 +11,8 @@ permission:
   webfetch: allow
   glob: allow
   question: allow
+  task:
+    "*": deny
 temperature: 0.3
 steps: 50
 skills:

package/src/agents/apollo.md

@@ -10,6 +10,8 @@ permission:
   webfetch: allow
   edit: deny
   bash: deny
+  task:
+    "*": deny
 temperature: 0.1
 steps: 30
 skills:

package/src/agents/athena.md

@@ -3,7 +3,7 @@ name: athena
 description: Strategic planner & architect — research-first, plan-only, never implements.
   Plans include quality gates (ruff/Biome, dep detection, LTS policy). Calls apollo
   for discovery.
-mode: primary
+mode: all
 reasoning_effort: high
 
 steps: 30
@@ -21,6 +21,9 @@ permission:
   grep: allow
   glob: allow
   webfetch: allow
+  task:
+    "*": deny
+    apollo: allow
 ---
 
 ##  When NOT to Use Athena

package/src/agents/demeter.md

@@ -1,7 +1,7 @@
 ---
 name: demeter
 description: "Database specialist — SQLAlchemy 2.0, Alembic, query optimization, N+1 prevention, TDD migrations, modern DB libs. Calls apollo for discovery, sends to themis."
-mode: primary
+mode: all
 reasoning_effort: medium
 permission:
   read: allow
@@ -9,6 +9,8 @@ permission:
   edit: allow
   bash: allow
   webfetch: allow
+  task:
+    "*": deny
 temperature: 0.2
 steps: 40
 skills:

package/src/agents/gaia.md

@@ -9,6 +9,8 @@ permission:
   webfetch: allow
   edit: deny
   bash: deny
+  task:
+    "*": deny
 temperature: 0.2
 steps: 30
 skills:

package/src/agents/hephaestus.md

@@ -1,7 +1,7 @@
 ---
 name: hephaestus
 description: "AI tooling & pipelines specialist — LangChain/LangGraph chains, RAG architecture, vector stores, embedding strategies. Forges AI infrastructure. Calls apollo, sends to themis."
-mode: subagent
+mode: all
 reasoning_effort: medium
 permission:
   read: allow
@@ -9,6 +9,8 @@ permission:
   edit: allow
   bash: allow
   webfetch: allow
+  task:
+    "*": deny
 temperature: 0.3
 steps: 40
 skills:

package/src/agents/hermes.md

@@ -3,7 +3,7 @@ name: hermes
 description: Backend specialist — FastAPI, Python, async, TDD (RED→GREEN→REFACTOR),
   modern Python stdlib, obsolete lib detection. Calls apollo for discovery, sends
   to themis.
-mode: primary
+mode: all
 reasoning_effort: medium
 
 mcp_tools:
@@ -25,6 +25,9 @@ permission:
   edit: allow
   webfetch: allow
   glob: allow
+  task:
+    "*": deny
+    apollo: allow
 ---
 
 ## Table of Contents

package/src/agents/iris.md

@@ -1,7 +1,7 @@
 ---
 name: iris
 description: "GitHub operations specialist — branches, pull requests, issues, releases, tags. Called by zeus after review. Never pushes or merges without explicit human approval. Integrates with GitHub CLI (gh) for operations."
-mode: subagent
+mode: all
 reasoning_effort: low
 permission:
   read: allow
@@ -11,6 +11,8 @@ permission:
     gh *: allow
   webfetch: allow
   edit: deny
+  task:
+    "*": deny
 temperature: 0.2
 steps: 25
 skills:

package/src/agents/mnemosyne.md

@@ -3,7 +3,7 @@ name: mnemosyne
 description: Memory bank quality owner — initializes .pantheon/memory-bank/, writes ADRs
   and task records on explicit request. Called by zeus. Never invoked automatically
   after phases.
-mode: primary
+mode: all
 reasoning_effort: low
 
 steps: 25
@@ -35,6 +35,8 @@ permission:
   read: allow
   grep: allow
   edit: deny
+  task:
+    "*": deny
 ---
 
 ## ⚠️ SCOPE BOUNDARY

package/src/agents/nyx.md

@@ -1,7 +1,7 @@
 ---
 name: nyx
 description: "Observability & monitoring specialist — OpenTelemetry tracing, token/cost tracking, agent performance analytics, LangSmith integration. Calls apollo for discovery, sends to themis."
-mode: subagent
+mode: all
 reasoning_effort: low
 permission:
   read: allow
@@ -9,6 +9,8 @@ permission:
   bash: allow
   webfetch: allow
   edit: deny
+  task:
+    "*": deny
 temperature: 0.1
 steps: 25
 skills:

package/src/agents/prometheus.md

@@ -1,7 +1,7 @@
 ---
 name: prometheus
 description: "Infrastructure + model provider specialist — Docker, CI/CD, multi-model routing, cost optimization, provider abstraction"
-mode: subagent
+mode: all
 reasoning_effort: medium
 permission:
   read: allow
@@ -9,6 +9,8 @@ permission:
   edit: allow
   bash: allow
   webfetch: allow
+  task:
+    "*": deny
 temperature: 0.2
 steps: 30
 skills:

package/src/agents/talos.md

@@ -1,12 +1,14 @@
 ---
 name: talos
 description: "Hotfix express lane — direct fixes for small bugs, CSS, typos, minor logic. No TDD ceremony, no orchestration overhead. Standalone, no subagents. Escalates complex issues to zeus."
-mode: subagent
+mode: all
 reasoning_effort: low
 permission:
   read: allow
   edit: allow
   bash: allow
+  task:
+    "*": deny
 temperature: 0.3
 steps: 35
 skills:

package/src/agents/themis.md

@@ -1,13 +1,15 @@
 ---
 name: themis
 description: "Quality & security gate — Ruff/Biome linting, dead/legacy code detection, OWASP Top 10, coverage >80%, correctness, deprecation audit. Called by implementers; escalates blockers to zeus."
-mode: subagent
+mode: all
 reasoning_effort: high
 permission:
   read: allow
   grep: allow
   bash: allow
   edit: deny
+  task:
+    "*": deny
 temperature: 0.1
 steps: 30
 skills: