pluidr 0.5.0 → 0.6.0

package/src/templates/opencode.config.json

@@ -36,11 +36,12 @@
           "coder": "allow",
           "tester": "allow",
           "reviewer": "allow",
-          "writer": "allow"
+          "compose-reporter": "allow"
         }
       }
     },
 
+
     "debugger": {
       "mode": "primary",
       "description": "Root-cause analysis via inspector/fixer/reporter. Standalone primary agent — does not depend on Composer. Pure orchestrator — all investigation, fixes, and reports delegated to subagents.",
@@ -60,11 +61,12 @@
           "*": "deny",
           "inspector": "allow",
           "fixer": "allow",
-          "reporter": "allow"
+          "debug-reporter": "allow"
         }
       }
     },
 
+
     "coder": {
       "mode": "subagent",
       "description": "Implements tasks assigned by Composer, following the PRD exactly. Tracks own progress via todowrite.",
@@ -152,10 +154,10 @@
       }
     },
 
-    "writer": {
+    "compose-reporter": {
       "mode": "subagent",
       "description": "Text-file executor for Composer. Writes and edits .md/.txt files across the project — like coder but for documents only. No bash.",
-      "prompt": "{file:./prompts/writer.txt}",
+      "prompt": "{file:./prompts/compose-reporter.txt}",
       "permission": {
         "read": "allow",
         "glob": "allow",
@@ -168,6 +170,7 @@
       }
     },
 
+
     "researcher": {
       "mode": "subagent",
       "description": "Researches technical and codebase context for Composer during EXPLORE phase. Outputs confirmed_facts / inferred_facts / unknowns / risks only.",
@@ -301,10 +304,135 @@
       }
     },
 
-    "reporter": {
+    "debug-reporter": {
       "mode": "subagent",
       "description": "Stateless formatter for Debugger. Produces diagnosis + remedy reports from structured input — no inference, no decisions. Summary mode only.",
-      "prompt": "{file:./prompts/reporter.txt}",
+      "prompt": "{file:./prompts/debug-reporter.txt}",
+      "permission": {
+        "read": "allow",
+        "glob": "allow",
+        "grep": "allow",
+        "edit": {
+          "*": "deny",
+          "docs/reports/**": "allow"
+        },
+        "write": {
+          "*": "deny",
+          "docs/reports/**": "allow"
+        },
+        "bash": "deny",
+        "task": "deny"
+      }
+    },
+
+    "prober": {
+      "mode": "primary",
+      "temperature": 0.7,
+      "description": "Standalone security and quality auditing agent. Recon and vuln trace, minimal patch application, validation gate.",
+      "prompt": "{file:./prompts/prober.txt}",
+      "permission": {
+        "read": "deny",
+        "glob": "deny",
+        "grep": "deny",
+        "edit": "deny",
+        "write": "deny",
+        "webfetch": "deny",
+        "websearch": "deny",
+        "bash": "deny",
+        "question": "allow",
+        "todowrite": "allow",
+        "task": {
+          "*": "deny",
+          "tracer": "allow",
+          "patcher": "allow",
+          "auditor": "allow",
+          "probe-reporter": "allow"
+        }
+      }
+    },
+
+    "tracer": {
+      "mode": "subagent",
+      "description": "Recon attack surface and trace vulnerability paths for Prober. Guided by WSTG and secure code review practices.",
+      "prompt": "{file:./prompts/tracer.txt}",
+      "permission": {
+        "read": "allow",
+        "glob": "allow",
+        "grep": "allow",
+        "edit": "deny",
+        "write": "deny",
+        "bash": "allow",
+        "task": "deny"
+      }
+    },
+
+    "patcher": {
+      "mode": "subagent",
+      "description": "Applies minimal, security-targeted patches for Prober using Ponytail mindset.",
+      "prompt": "{file:./prompts/patcher.txt}",
+      "permission": {
+        "read": "allow",
+        "glob": "allow",
+        "grep": "allow",
+        "edit": {
+          "*": "deny",
+          "src/**": "allow",
+          "*.{json,md,txt}": "allow",
+          "package.json": "allow"
+        },
+        "write": {
+          "*": "deny",
+          "src/**": "allow",
+          "*.{json,md,txt}": "allow"
+        },
+        "todowrite": "allow",
+        "bash": {
+          "*": "deny",
+          "npm *": "allow",
+          "npx *": "allow",
+          "node *": "allow",
+          "git *": "allow",
+          "mkdir *": "allow",
+          "cp *": "allow",
+          "rm *": "allow",
+          "mv *": "allow",
+          "cat *": "allow",
+          "ls *": "allow",
+          "pwd": "allow",
+          "echo *": "allow",
+          "rg *": "allow",
+          "grep *": "allow",
+          "find *": "allow",
+          "which *": "allow",
+          "where *": "allow",
+          "dir *": "allow",
+          "type *": "allow",
+          "node --test": "allow",
+          "cd *": "allow"
+        },
+        "task": "deny"
+      }
+    },
+
+    "auditor": {
+      "mode": "subagent",
+      "description": "Validation gate for Prober: checks patch effectiveness and over-engineering. PASS/FAIL + Gap/BLOAT lists only.",
+      "prompt": "{file:./prompts/auditor.txt}",
+      "permission": {
+        "read": "allow",
+        "glob": "allow",
+        "grep": "allow",
+        "edit": "deny",
+        "write": "deny",
+        "bash": "allow",
+        "task": "deny"
+      }
+    },
+
+    "probe-reporter": {
+      "mode": "subagent",
+      "description": "Stateless formatter for Prober. Produces security audit reports under docs/reports/.",
+      "prompt": "{file:./prompts/probe-reporter.txt}",
       "permission": {
         "read": "allow",
         "glob": "allow",