update opencode

Author: zreigz

go/deployment-operator/pkg/agentrun-harness/tool/opencode/opencode_templates_test.go

@@ -201,6 +201,21 @@ func TestConfigTemplate_Provider(t *testing.T) {
 	})
 }
 
+func TestConfigTemplate_SkillPermissions(t *testing.T) {
+	t.Run("analysis and autonomous agents allow all skills", func(t *testing.T) {
+		out := renderJSON(t, baseInput(console.AgentRunModeWrite))
+
+		agent := out["agent"].(map[string]any)
+		for _, name := range []string{"analysis", "autonomous"} {
+			permission := agent[name].(map[string]any)["permission"].(map[string]any)
+			skill := permission["skill"].(map[string]any)
+			if skill["*"] != "allow" {
+				t.Fatalf("agent.%s permission.skill.* = %v, want allow", name, skill["*"])
+			}
+		}
+	})
+}
+
 func TestConfigTemplate_AgentTools(t *testing.T) {
 	t.Run("analysis agent has plural* tool only", func(t *testing.T) {
 		out := renderJSON(t, baseInput(console.AgentRunModeWrite))

go/deployment-operator/pkg/agentrun-harness/tool/opencode/templates/opencode.json.gotmpl

@@ -30,7 +30,10 @@
         },
         {{- end }}
         "edit": "deny",
-        "webfetch": "allow"
+        "webfetch": "allow",
+        "skill": {
+          "*": "allow"
+        }
       }
     },
     "autonomous": {
@@ -48,7 +51,10 @@
         "bash": "allow",
         "edit": "allow",
         "webfetch": "allow",
-        "git": "deny"
+        "git": "deny",
+        "skill": {
+          "*": "allow"
+        }
       }
     }
   },