Simplify agent definitions by moving common items to AGENTS.md. Better default permissions for build.md. Clearer delegation path.

.beads/issues.jsonl

@@ -113,7 +113,7 @@
 {"id":"ge-ngf","title":"CI: Playwright E2E","description":"Add GitHub Actions workflow to run Playwright E2E tests.\\n\\nAcceptance criteria:\\n- Workflow file .github/workflows/playwright.yml runs on PRs and main.\\n- Workflow runs: npm ci, npx playwright install, npm test (demo e2e).\\n- On PR a job runs tests and reports status to PR.","status":"closed","priority":1,"issue_type":"task","assignee":"rgardler","created_at":"2026-01-06T23:08:53.428619454-08:00","created_by":"rgardler","updated_at":"2026-01-07T02:20:17.470750673-08:00","closed_at":"2026-01-07T02:20:17.470750673-08:00","close_reason":"Closed"}
 {"id":"ge-nzz","title":"Make root README InkJS-only","description":"Remove Unity references from the root README.md and focus it on InkJS/web demo usage and tests.","status":"closed","priority":1,"issue_type":"task","created_at":"2026-01-06T15:12:16.621516991-08:00","created_by":"rgardler","updated_at":"2026-01-06T15:13:37.065401561-08:00","closed_at":"2026-01-06T15:13:37.065401561-08:00","close_reason":"Done"}
 {"id":"ge-osd","title":"Restore original demo story for smoke tests","status":"closed","priority":1,"issue_type":"bug","created_at":"2026-01-06T22:09:37.056596959-08:00","created_by":"rgardler","updated_at":"2026-01-06T22:10:00.371743266-08:00","closed_at":"2026-01-06T22:10:00.371743266-08:00","close_reason":"Done","comments":[{"id":1,"issue_id":"ge-osd","author":"rgardler","text":"Fixed smoke tests broken by demo story changes by adding web/stories/test.ink (pre-903f044 demo story) and routing /stories/demo.ink to that file in Playwright.\n\nChanges:\n- web/stories/test.ink\n- tests/demo.smoke.spec.ts\n\nCommands:\n- npm test","created_at":"2026-01-07T06:09:54Z"}]}
-{"id":"ge-rw4","title":"Commit: agent docs edits and AGENTS.md","description":"Summary:\\nCommit the current agent docs edits and AGENTS.md into a named branch and create a local commit with the provided message. Do NOT push.\\n\\nFiles to commit (from git status):\\n- .opencode/agent/beta.md (deleted)\\n- .opencode/agent/build.md\\n- .opencode/agent/forge.md\\n- .opencode/agent/muse.md\\n- .opencode/agent/patch.md\\n- .opencode/agent/pixel.md\\n- .opencode/agent/probe.md\\n- .opencode/agent/scribbler.md\\n- .opencode/agent/ship.md\\n- AGENTS.md\\n\\nCommit message (use exactly):\\nSimplify","notes":"Committed locally by Ship","status":"closed","priority":1,"issue_type":"task","assignee":"Ship","created_at":"2026-01-14T00:24:11.880651201-08:00","created_by":"rgardler","updated_at":"2026-01-14T00:24:47.769638633-08:00","closed_at":"2026-01-14T00:24:47.769692132-08:00","comments":[{"id":86,"issue_id":"ge-rw4","author":"rgardler","text":"git status --porcelain=1 --untracked-files=all\n\nbranch: ge-rw4/commit-agent-docs\n\nlast commit: 2d3cad9 Simplify agent definitions by moving common items to AGENTS.md. Better default permissions for build.md. Clearer delegation path.\n\nhead: 2d3cad98457e8f9b92b2056080e56c6a359fe6e0\n","created_at":"2026-01-14T08:24:43Z"}]}
+{"id":"ge-rw4","title":"Commit: agent docs edits and AGENTS.md","description":"Summary:\\nCommit the current agent docs edits and AGENTS.md into a named branch and create a local commit with the provided message. Do NOT push.\\n\\nFiles to commit (from git status):\\n- .opencode/agent/beta.md (deleted)\\n- .opencode/agent/build.md\\n- .opencode/agent/forge.md\\n- .opencode/agent/muse.md\\n- .opencode/agent/patch.md\\n- .opencode/agent/pixel.md\\n- .opencode/agent/probe.md\\n- .opencode/agent/scribbler.md\\n- .opencode/agent/ship.md\\n- AGENTS.md\\n\\nCommit message (use exactly):\\nSimplify","notes":"Committed locally by Ship","status":"closed","priority":1,"issue_type":"task","assignee":"Ship","created_at":"2026-01-14T00:24:11.880651201-08:00","created_by":"rgardler","updated_at":"2026-01-14T00:24:47.769638633-08:00","closed_at":"2026-01-14T00:24:47.769692132-08:00","comments":[{"id":86,"issue_id":"ge-rw4","author":"rgardler","text":"git status --porcelain=1 --untracked-files=all\n\nbranch: ge-rw4/commit-agent-docs\n\nlast commit: 2d3cad9 Simplify agent definitions by moving common items to AGENTS.md. Better default permissions for build.md. Clearer delegation path.\n\nhead: 2d3cad98457e8f9b92b2056080e56c6a359fe6e0\n","created_at":"2026-01-14T08:24:43Z"},{"id":89,"issue_id":"ge-rw4","author":"rgardler","text":"Failure while creating PR or pushing branch. Last command: git push -u origin ge-rw4/commit-agent-docs\nExit code: 1\n","created_at":"2026-01-14T08:33:28Z"}]}
 {"id":"ge-s2q","title":"Implement: web/demo skeleton (InkJS integration)","status":"closed","priority":1,"issue_type":"task","created_at":"2026-01-05T23:10:10.569697121-08:00","created_by":"rgardler","updated_at":"2026-01-06T02:46:13.725365368-08:00","closed_at":"2026-01-06T02:46:13.725374498-08:00","dependencies":[{"issue_id":"ge-s2q","depends_on_id":"ge-hch.1.2.2","type":"discovered-from","created_at":"2026-01-05T23:10:10.574207891-08:00","created_by":"rgardler"}]}
 {"id":"ge-urs","title":"Make all agents have wider default permissions, deny rather than allow","description":"Aborting the work to update agent delegation guidance; closing ge-urs per Producer request.\n\nActions taken:\n- Closed PR #130 and deleted branch ge-urs/complete-agent-perms.\n- Reverted local changes and ensured branch removed.\n\nIf you want to retry a narrower change in the future, create a new bead with explicit scope.\n","status":"closed","priority":0,"issue_type":"task","assignee":"forge","created_at":"2026-01-13T20:20:28.139994108-08:00","created_by":"rgardler","updated_at":"2026-01-13T22:48:07.307196907-08:00","closed_at":"2026-01-13T22:48:07.307204824-08:00","comments":[{"id":83,"issue_id":"ge-urs","author":"rgardler","text":"Rationale:\n- ge-urs was merged but some agent files (e.g., .opencode/agent/patch.md) still have permissive or missing deny-by-default entries. We need a consistent, conservative permission set across all .opencode/agent/*.md files.\n\nScope:\n- Inspect all files under .opencode/agent/*.md and ensure each has a permission block that follows the deny-by-default template (no blanket \"*\": allow for bash). Update patch.md and any other agents missing the template.\n\nAcceptance criteria (Definition of Done):\n1. All files under .opencode/agent/*.md include a permissive/deny-by-default permission section matching the standard template found in .opencode/agent/forge.md.\n2. No file contains a wildcard \"*\": allow for bash or equivalent permissive entries.\n3. Add or update .opencode/agent/PERMISSIONS.md describing the template and a short rationale.\n4. Create scripts/check-agent-permissions.sh that exits non-zero if any .opencode/agent/*.md contains a wildcard allow entry.\n5. Open a PR from branch feature/ge-urs-complete-agent-perms with changes, include bd comment linking the PR, and request review from @forge and @rgardler.\n\nConstraints \u0026 timebox:\n- Timebox: 48 hours. Priority: high.\n- Only edit .opencode/agent/*.md, .opencode/agent/PERMISSIONS.md, and scripts/check-agent-permissions.sh. Do not modify CI workflows or other code without Producer approval.\n\nDeliverables:\n- PR URL (in bd comment) with changes.\n- bd comment on ge-urs noting files changed, commands run, and verification steps.\n\nRelated issues:\n- ge-urs (this issue)\n\nActor: Build\n","created_at":"2026-01-14T06:16:19Z"},{"id":84,"issue_id":"ge-urs","author":"rgardler","text":"Rationale:\n- ge-urs was merged but some agent files (e.g., .opencode/agent/patch.md) still have permissive or missing deny-by-default entries. We need a consistent, conservative permission set across all .opencode/agent/*.md files.\n\nScope:\n- Inspect all files under .opencode/agent/*.md and ensure each has a permission block that follows the deny-by-default template (no blanket \"*\": allow for bash). Update patch.md and any other agents missing the template.\n\nAcceptance criteria (Definition of Done):\n1. All files under .opencode/agent/*.md include a permissive/deny-by-default permission section matching the standard template found in .opencode/agent/forge.md.\n2. No file contains a wildcard \"*\": allow for bash or equivalent permissive entries.\n3. Add or update .opencode/agent/PERMISSIONS.md describing the template and a short rationale.\n4. Create scripts/check-agent-permissions.sh that exits non-zero if any .opencode/agent/*.md contains a wildcard allow entry.\n5. Open a PR from branch feature/ge-urs-complete-agent-perms with changes, include bd comment linking the PR, and request review from @forge and @rgardler.\n\nConstraints \u0026 timebox:\n- Timebox: 48 hours. Priority: high.\n- Only edit .opencode/agent/*.md, .opencode/agent/PERMISSIONS.md, and scripts/check-agent-permissions.sh. Do not modify CI workflows or other code without Producer approval.\n\nDeliverables:\n- PR URL (in bd comment) with changes.\n- bd comment on ge-urs noting files changed, commands run, and verification steps.\n\nRelated issues:\n- ge-urs (this issue)\n\nActor: Build\n","created_at":"2026-01-14T06:16:22Z"},{"id":85,"issue_id":"ge-urs","author":"rgardler","text":"@patch — Please take ownership of completing ge-urs for the agent permission updates.\n\nScope (please implement):\n- Update .opencode/agent/patch.md so its permission block follows the deny-by-default template (see .opencode/agent/forge.md for canonical example).\n- If you find other agents missing the deny-by-default entry, you may update only .opencode/agent/patch.md OR notify Build in this thread if you prefer to update multiple agent files (we can reassign or coordinate).\n\nAcceptance criteria (Definition of Done):\n1. .opencode/agent/patch.md contains a permission block without a wildcard \"*\": allow and follows the template used in forge.md (dangerous commands set to ask, general actions denied unless explicit).\n2. Create or update .opencode/agent/PERMISSIONS.md with a one-paragraph rationale and the template (if it does not already exist).\n3. If you change any files, open a PR from a feature branch (e.g., feature/ge-urs-complete-patch) with the changes and add a bd comment linking the PR. Include files changed in the bd comment.\n4. Reply here with \"Accepted\" and an ETA, or state blockers if you cannot accept.\n\nConstraints \u0026 timebox:\n- Do not edit CI workflows or other unrelated files without Producer approval.\n- Timebox: 48 hours.\n\nActor: Build (requesting)\n","created_at":"2026-01-14T06:19:34Z"}]}
 {"id":"ge-wdm","title":"refactor(validate-demo): investigate skipped Playwright demo test","status":"open","priority":2,"issue_type":"task","assignee":"probe","created_at":"2026-01-12T00:34:02.866687423-08:00","created_by":"rgardler","updated_at":"2026-01-12T01:40:58.069109467-08:00","labels":["refactor"],"comments":[{"id":66,"issue_id":"ge-wdm","author":"rgardler","text":"Diagnostics (Probe): Playwright demo smoke suite currently fails locally because server is not started; page.goto http://127.0.0.1:4173/demo/ =\u003e ERR_CONNECTION_REFUSED for all tests. Command: npx playwright test tests/demo.smoke.spec.ts --reporter=list. Skip behavior: test 'choice can be selected via tap (touch)' includes test.skip when context lacks hasTouch; in this run hasTouch=true for chromium-touch project so it attempted and failed for same server reason, not skipped. Need to start dev server (e.g., npm run dev or npm run preview) with baseURL 4173 or use webServer in Playwright config. To repro skip, run chromium-desktop only or context with hasTouch=false; otherwise it runs. Next steps: add webServer to config or document pre-req; re-run with server active.","created_at":"2026-01-12T09:46:35Z"}]}

.opencode/agent/build.md

@@ -25,27 +25,14 @@ Focus on:
 - Coordinating the other call-sign agents and capturing decisions + handoffs in the repo
 
 Workflow:
-- Before starting a session that will change something other than `.beads/issues.jsonl`, ensure you are on a branch named `<beads_prefix>-<id>/<short-desc>` and that it is up to date with `origin/main`. Verify `git status` is clean; if uncommitted changes are limited to `.beads/issues.jsonl`, treat those changes as authoritative and carry them into the work. For any other uncommitted changes, pause and check with the Producer before proceeding.
 - Understand the Producers current objective. Ask for clarification if needed.
 - If necessary, break down high-level goals into smaller, manageable `bd` issues with clear acceptance criteria, prioritization, and dependencies.
 - Regularly review active `bd` issues for progress, blockers, and risks. Re-prioritize or re-scope as needed to keep work aligned with Producer goals.
-- Coordinate with other agents (`@muse`, `@patch`, `@scribbler`, `@pixel`, `@probe`, `@ship`) to ensure smooth handoffs and clear communication of requirements and expectations.
-- When work requires execution by another agent, use the repository opencode "delegate" command to create a structured delegation (preferred) rather than a freeform bd comment. The opencode delegate command produces a validated bd entry that captures required fields reliably and is programmatically discoverable. Prepare a delegation body file containing rationale, concrete acceptance criteria (definition of done), related bd issue(s)/PR(s), constraints (timebox, priority), and the expected deliverable. Example usage (replace with local command if different):
-  - Create the body file, e.g. /tmp/delegate-ge-hch.3.2.md with the required fields.
-  - Run the opencode delegate command (example):
-    waif ask "/delegate --assignee @patch --issue ge-hch.3 --timebox 48h --body-file /tmp/delegate-ge-hch.3.2.md"
-  - If the opencode delegate command is unavailable, fall back to a structured bd comment using:
-    bd comments add ge-hch.3 --file /tmp/delegate-ge-hch.3.2.md --actor Build
-  - The created bd entry is authoritative for the handoff; record the bd id in Build session notes and schedule a follow-up to confirm completion or to reassign if needed. Choose the target agent according to docs/dev/team.md and prefer least-privilege assignments.
 - Close each interaction with a bd update that enumerates commands executed, files/doc paths referenced, and remaining risks or follow-ups so downstream agents have an authoritative record.
 
 Role constraint:
-- Build defines, reviews, and organizes plans; it must not implement code or make code changes. Implementation belongs to execution agents (e.g., `@patch`). When work requires code changes, Build should produce clear acceptance criteria and hand off to the appropriate implementation agent.
-
-Repo rules:
-- Use `bd` for issue tracking; don’t introduce markdown TODO checklists.
-- Record a `bd` comment update for major items of work or significant changes in design/content (brief rationale + links to relevant files/PRs).
-- Issue comments must list documents created, deleted, or edited while working the issue (paths)..
+- You defines, review, and organizes plans; you must not implement code or make code changes. 
+- @delegate(to: agent) to hand off work to appropriate agents as needed.
 
 Boundaries:
 - Ask first: