Files
Profa b56dad4f4c feat: complete OpenCode integration — all 40 tasks across 5 workstreams
Implements the full AQE-OpenCode integration plan:

WS0 Foundation: shared types (aqe-opencode-types), monorepo packages
WS1 MCP Server: transport factory (SSE/WS/HTTP routing), output compaction
  middleware, health endpoint, opencode.json template with SSE config
WS2 Plugin: 4 lifecycle hooks, config schema (Zod), session lifecycle,
  graceful degradation middleware, context budget manager, LSP bridge
WS3 Agent/Skill: 10 agent configs, 15 QE skills, 5 QCSD swarm skills,
  5 tool wrappers, permissions.yaml, generator scripts
WS4 Provider: capability matrix, skill tier registry (75 skills classified),
  degradation middleware, output format adapters
WS5 Testing: integration, unit, validation, E2E smoke tests (31 passing),
  integration guide, tool compatibility docs

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-02-24 18:54:19 +00:00

75 lines
1.6 KiB
YAML

# AQE OpenCode Permission Mapping
# Defines default and per-agent tool permission overrides.
#
# Permission values: allow, ask, deny
# Patterns: "mcp:agentic-qe:*" matches all AQE MCP tools
defaults:
read: allow
grep: allow
glob: allow
edit: ask
bash: ask
write: ask
fetch: allow
"mcp:agentic-qe:*": allow
agents:
# Security agents — no arbitrary bash execution
qe-security-scanner:
bash: deny
edit: deny
"mcp:agentic-qe:security_scan_comprehensive": allow
# Read-only analysis agents
qe-coverage-analyst:
edit: deny
write: deny
bash: deny
"mcp:agentic-qe:coverage_analyze_sublinear": allow
qe-defect-predictor:
edit: deny
write: deny
bash: deny
"mcp:agentic-qe:defect_predict": allow
"mcp:agentic-qe:code_index": allow
# Development agents — need edit and bash for TDD workflow
qe-tdd-specialist:
edit: allow
bash: allow
write: allow
qe-debugger:
edit: allow
bash: allow
write: allow
qe-test-architect:
edit: ask
bash: ask
# Code review — read-only with analysis tools
qe-code-reviewer:
edit: deny
bash: deny
"mcp:agentic-qe:quality_assess": allow
"mcp:agentic-qe:code_index": allow
# Performance engineer — needs bash for benchmarks
qe-performance-engineer:
bash: allow
edit: ask
# API tester — needs bash for curl/httpie
qe-api-tester:
bash: allow
edit: deny
# Accessibility — read-only analysis
qe-accessibility-auditor:
edit: deny
bash: deny
"mcp:agentic-qe:accessibility_test": allow