vgxness 1.20.1 → 1.20.2

package/dist/agents/canonical-agent-manifest.js

@@ -168,7 +168,7 @@ Coordinate SDD; keep chat thin, use VGXNESS MCP state, delegate to exact SDD sub
 - Before phase advancement, call \`vgxness_sdd_status\`/\`vgxness_sdd_next\` plus \`vgxness_sdd_ready\` or \`vgxness_sdd_get_readiness\`.
 - Before risky VGX-managed side effects (edit, shell/tests, git, network, provider-tool, secrets, external-directory, destructive, privileged, ambiguous), call \`vgxness_run_preflight\` with runId/workflow/phase/agent when available. Stop on approval/block; never invent approval.
 - Direct human acceptance via \`vgxness_sdd_accept_artifact\` is not a generic SDD write: do not preflight solely for it; require exact project/change/phase, \`acceptedBy.type\` \`"human"\`, non-empty \`acceptedBy.id\`, and eligible status/readiness. Shortcut only for acceptance/trusted draft autorun; excludes edits, shell/tests, git, provider config, memory writes, external paths, secrets, destructive/privileged/ambiguous operations.
-- manager native repo tools are disabled in config (read/glob/edit/write/bash); report config-level enforcement, not proof of host runtime behavior. Subagents keep phase tools.
+- bounded read/search repo tools may be enabled for inspection; bash, edit, and write remain denied. Diagnostics are config-level evidence, not host runtime proof.
 - Do not mutate provider/global OpenCode config. Do not publish packages unless explicitly requested. Never revert/overwrite unrelated user work. Preserve \`permission.task\` deny-by-default with only exact known SDD subagents.
 - Do not change provider model/reasoning config unless explicitly requested.
 

package/dist/agents/canonical-agent-projection.js

@@ -137,7 +137,7 @@ function openCodeManagerPermissionsFor(agent) {
         ...openCodePermissionsFor(agent, { task: createCanonicalOpenCodeSddTaskPermissions() }),
         bash: 'deny',
         edit: 'deny',
-        read: 'deny',
+        read: 'allow',
         write: 'deny',
     };
 }
@@ -148,9 +148,9 @@ function openCodeManagerTools() {
         delegation_list: true,
         delegation_read: true,
         edit: false,
-        glob: false,
-        grep: false,
-        read: false,
+        glob: true,
+        grep: true,
+        read: true,
         write: false,
     };
 }

package/dist/agents/renderers/opencode-renderer.js

@@ -15,7 +15,7 @@ const openCodeCapabilities = {
         'instructions',
         'mode',
         'adapter model',
-        'adapter config keys: variant, temperature, top_p, hidden, options, color, steps, permission',
+        'adapter config keys: variant, temperature, top_p, hidden, options, color, steps, permission, tools',
     ],
     skillInjectionModes: ['external preview services may inject skill payloads before rendering; renderer does not resolve skills'],
     permissionCategories: ['registry permission metadata mapped from adapter permission config'],
@@ -78,6 +78,7 @@ function openCodeAgentConfig(agent) {
     copyString(config, rendered, 'color');
     copyNumber(config, rendered, 'steps');
     copyJson(config, rendered, 'permission');
+    copyJson(config, rendered, 'tools');
     return rendered;
 }
 function copyString(source, target, key) {

package/dist/mcp/client-install-opencode-contract.js

@@ -197,7 +197,11 @@ function warningsForScope(scope, overwriteVgxness, agentPlan, bashPermissionPoli
             `Reinstall/overwrite is enabled: existing VGXNESS-managed OpenCode entries will be replaced (${agentPlan.installsAgents ? 'mcp.vgxness, default_agent, instructions AGENTS.md, and known VGXNESS agents' : 'mcp.vgxness only'}); unrelated OpenCode config is preserved.`,
         ]
         : [];
-    const bashWarnings = bashPermissionPolicy.manager === 'deny' ? ['OpenCode top-level permission.bash is set to ask; the VGXNESS manager agent denies bash while SDD subagents keep explicit phase permissions.'] : ['OpenCode top-level permission.bash is set to ask.'];
+    const bashWarnings = bashPermissionPolicy.manager === 'deny'
+        ? [
+            'OpenCode config sets top-level permission.bash = ask; manager read/search discovery tools (read/glob/grep) are allowed while manager bash/edit/write are denied; SDD subagents keep explicit phase permissions. This is config-level evidence only and does not verify provider runtime enforcement.',
+        ]
+        : ['OpenCode top-level permission.bash is set to ask.'];
     return [
         'Restart OpenCode after installation so it reloads the user MCP config.',
         'OpenCode project config may override user config for a workspace; check project-level config if vgxness is not visible.',

package/dist/mcp/client-install-opencode.js

@@ -214,7 +214,10 @@ function confirmationRequiredMessage(scope) {
     return `\`mcp install opencode\` requires explicit --yes before any ${scope} config write.`;
 }
 function warnings() {
-    return ['Restart OpenCode after installation so it reloads the project MCP config.', 'OpenCode top-level permission.bash is set to ask; the VGXNESS manager agent denies bash while SDD subagents keep explicit phase permissions.'];
+    return [
+        'Restart OpenCode after installation so it reloads the project MCP config.',
+        'OpenCode config sets top-level permission.bash = ask; manager read/search discovery tools (read/glob/grep) are allowed while manager bash/edit/write are denied; SDD subagents keep explicit phase permissions. This is config-level evidence only and does not verify provider runtime enforcement.',
+    ];
 }
 function manualTest(databasePath, source) {
     return {

package/dist/mcp/provider-doctor.js

@@ -40,6 +40,7 @@ export class ProviderDoctorService {
             configReadableCheck(readableJson.length, paths.filter((path) => path.exists).length),
             mcpEntryCheck(config),
             defaultAgentCheck(config),
+            managerNativeCapabilityCheck(config),
             subagentsCheck(config),
             delegationCheck(config),
             { id: 'mcp-current-call', status: 'pass', detail: 'Current MCP call reached the VGXNESS control-plane.' },
@@ -255,6 +256,35 @@ function defaultAgentCheck(config) {
         return { id: 'opencode-default-agent', status: 'fail', detail: 'OpenCode default_agent is not vgxness-manager or the manager config is missing.' };
     return { id: 'opencode-default-agent', status: 'pass', detail: 'OpenCode default agent points to vgxness-manager.' };
 }
+function managerNativeCapabilityCheck(config) {
+    const manager = isRecord(config?.agent) && isRecord(config.agent[vgxnessOpenCodeDefaultAgent]) ? config.agent[vgxnessOpenCodeDefaultAgent] : undefined;
+    const permission = isRecord(manager?.permission) ? manager.permission : undefined;
+    const tools = isRecord(manager?.tools) ? manager.tools : undefined;
+    const problems = [];
+    if (permission?.read !== 'allow')
+        problems.push('permission.read is not allow');
+    for (const tool of ['read', 'glob', 'grep']) {
+        if (tools?.[tool] !== true)
+            problems.push(`tools.${tool} is not enabled`);
+    }
+    for (const tool of ['bash', 'edit', 'write']) {
+        if (tools?.[tool] !== false)
+            problems.push(`tools.${tool} is not disabled`);
+    }
+    const evidenceSuffix = 'This is config-level evidence only; host runtime/tool presence is not verified.';
+    if (problems.length > 0)
+        return {
+            id: 'opencode-manager-native-capability',
+            status: 'fail',
+            detail: `Manager native capability drift detected: ${problems.join('; ')}. ${evidenceSuffix}`,
+            remediation: 'Re-run explicit OpenCode setup/install only after reviewing provider config drift; doctor does not auto-repair or write config.',
+        };
+    return {
+        id: 'opencode-manager-native-capability',
+        status: 'pass',
+        detail: `Manager config allows read/glob/grep inspection and denies bash/edit/write native tools. ${evidenceSuffix}`,
+    };
+}
 function subagentsCheck(config) {
     const agents = isRecord(config?.agent) ? config.agent : undefined;
     const missing = vgxnessOpenCodeSddSubagents.filter((name) => !isRecord(agents?.[name]) || agents[name]?.hidden !== true);

package/dist/mcp/provider-status.js

@@ -27,10 +27,11 @@ export class ProviderStatusService {
         const mcpEntry = inspectOpenCodeMcpEntry(paths);
         const providerConfig = readFirstParsedConfig(paths);
         const managerConfigured = hasConfiguredManager(providerConfig);
+        const managerNativeCapabilityStatus = inspectManagerNativeCapability(providerConfig);
         const subagentsConfigured = hasConfiguredSubagents(providerConfig);
         const tools = requiredToolPresence();
         const evidence = providerEvidence({ staticManifestKnown: true, renderedConfigExpected: true, configPathInspected: paths.length > 0 });
-        const configStatus = resolveConfigStatus(paths, mcpEntry, managerConfigured, subagentsConfigured);
+        const configStatus = resolveConfigStatus(paths, mcpEntry, managerConfigured, managerNativeCapabilityStatus, subagentsConfigured);
         const status = rollupProviderHealth([canonicalAgentManifest.status, configStatus, ...tools.map((tool) => (tool.present ? 'pass' : 'fail'))]);
         const sdd = normalized.change.length > 0 ? this.readSdd(normalized.project, normalized.change) : undefined;
         const generatedAt = 'read-only-snapshot';
@@ -38,14 +39,14 @@ export class ProviderStatusService {
             ? paths.map((path) => path.path)
             : paths.filter((path) => path.exists || path.status !== 'not-configured').map((path) => path.path);
         const verboseShape = {
-            config: { status: configStatus, paths, mcpEntry },
+            config: { status: configStatus, paths, mcpEntry, managerNativeCapability: managerNativeCapabilityStatus },
             canonicalAgentManifest,
             providerEvidence: evidence,
             sdd,
             mcpRequiredTools: tools,
         };
         const compactShape = {
-            config: { status: configStatus, paths: compactPaths(paths, 'compact'), mcpEntry: compactMcpEntry(mcpEntry, 'compact') },
+            config: { status: configStatus, paths: compactPaths(paths, 'compact'), mcpEntry: compactMcpEntry(mcpEntry, 'compact'), managerNativeCapability: managerNativeCapabilityStatus },
             canonicalAgentManifest,
             providerEvidence: evidence,
             sdd: sdd === undefined ? undefined : compactSdd(sdd, 'compact'),
@@ -86,8 +87,8 @@ export class ProviderStatusService {
         return {
             ok: true,
             value: normalized.payloadMode === 'verbose'
-                ? { ...reportBase, payloadMode: 'verbose', config: { status: configStatus, paths: compactPaths(paths, 'verbose'), mcpEntry: compactMcpEntry(mcpEntry, 'verbose') } }
-                : { ...reportBase, payloadMode: 'compact', config: { status: configStatus, paths: compactPaths(paths, 'compact'), mcpEntry: compactMcpEntry(mcpEntry, 'compact') } },
+                ? { ...reportBase, payloadMode: 'verbose', config: { status: configStatus, paths: compactPaths(paths, 'verbose'), mcpEntry: compactMcpEntry(mcpEntry, 'verbose'), managerNativeCapability: managerNativeCapabilityStatus } }
+                : { ...reportBase, payloadMode: 'compact', config: { status: configStatus, paths: compactPaths(paths, 'compact'), mcpEntry: compactMcpEntry(mcpEntry, 'compact'), managerNativeCapability: managerNativeCapabilityStatus } },
         };
     }
     readSdd(project, change) {
@@ -393,12 +394,12 @@ function requiredToolPresence() {
         diagnostic: 'Static VGXNESS manifest expects this MCP tool; provider host tool presence was not verified.',
     }));
 }
-function resolveConfigStatus(paths, mcpEntry, managerConfigured, subagentsConfigured) {
+function resolveConfigStatus(paths, mcpEntry, managerConfigured, managerNativeCapabilityStatus, subagentsConfigured) {
     if (paths.some((path) => path.status === 'fail') || mcpEntry.status === 'fail')
         return 'fail';
     if (mcpEntry.status === 'not-configured')
         return 'not-configured';
-    if (!managerConfigured || !subagentsConfigured)
+    if (!managerConfigured || managerNativeCapabilityStatus === 'warn' || !subagentsConfigured)
         return 'warn';
     if (hasProjectConfigAlongsideUser(paths))
         return 'warn';
@@ -449,6 +450,17 @@ function hasConfiguredManager(config) {
         isRecord(agent?.[vgxnessOpenCodeDefaultAgent]) &&
         promptContractVersion(agent[vgxnessOpenCodeDefaultAgent]) === vgxnessOpenCodePromptContractVersion);
 }
+function inspectManagerNativeCapability(config) {
+    if (config === undefined)
+        return 'not-configured';
+    const agent = isRecord(config.agent) ? config.agent : undefined;
+    const manager = isRecord(agent?.[vgxnessOpenCodeDefaultAgent]) ? agent[vgxnessOpenCodeDefaultAgent] : undefined;
+    const permission = isRecord(manager?.permission) ? manager.permission : undefined;
+    const tools = isRecord(manager?.tools) ? manager.tools : undefined;
+    const readSearchEnabled = permission?.read === 'allow' && tools?.read === true && tools.glob === true && tools.grep === true;
+    const writeShellDenied = tools?.bash === false && tools.edit === false && tools.write === false;
+    return readSearchEnabled && writeShellDenied ? 'pass' : 'warn';
+}
 function hasConfiguredSubagents(config) {
     if (config === undefined)
         return false;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "vgxness",
-  "version": "1.20.1",
+  "version": "1.20.2",
   "description": "CLI and MCP control plane for guided AI-agent workflows, SDD, memory, and OpenCode setup.",
   "license": "SEE LICENSE IN LICENSE",
   "repository": {