build: got auto-agents to a working state with deterministic starting

.opencode/agents/git-create-commit-util.md

@@ -9,24 +9,88 @@ description: >
 mode: subagent
 hidden: false
 temperature: 0.0
-model: "CleverThis-8/Qwen3-Coder-Next-GGUF-Q6-K"
+model: "CleverThis-15/Qwen3-6-35B-A3B-GGUF-UD-Q3-K-XL"
 reasoningEffort: "high"
 color: "#5555FF"
 permission:
-  "*": deny
+  "glob": allow
+  "grep": allow
   "doom_loop": deny
+
+  # This agent only needs to call one subagent
   "question": deny
 
+  # All agents are supposed to be working in isolated repos in `/tmp`, so this forces that
   external_directory:
-    "/tmp/*": allow
+    "/tmp/**": allow
+    "/app/**": deny
   edit:
-    "*": deny
-    "/tmp/*": allow
-  write:
-    "*": deny
-    "/tmp/*": allow
+    "a**": deny
+    "b**": deny
+    "c**": deny
+    "d**": deny
+    "e**": deny
+    "f**": deny
+    "g**": deny
+    "h**": deny
+    "i**": deny
+    "j**": deny
+    "k**": deny
+    "l**": deny
+    "m**": deny
+    "n**": deny
+    "o**": deny
+    "p**": deny
+    "q**": deny
+    "r**": deny
+    "s**": deny
+    "t**": deny
+    "u**": deny
+    "v**": deny
+    "w**": deny
+    "x**": deny
+    "y**": deny
+    "z**": deny
+    "A**": deny
+    "B**": deny
+    "C**": deny
+    "D**": deny
+    "E**": deny
+    "F**": deny
+    "G**": deny
+    "H**": deny
+    "I**": deny
+    "J**": deny
+    "K**": deny
+    "L**": deny
+    "M**": deny
+    "N**": deny
+    "O**": deny
+    "P**": deny
+    "Q**": deny
+    "R**": deny
+    "S**": deny
+    "T**": deny
+    "U**": deny
+    "V**": deny
+    "W**": deny
+    "X**": deny
+    "Y**": deny
+    "Z**": deny
+    "1**": deny
+    "2**": deny
+    "3**": deny
+    "4**": deny
+    "5**": deny
+    "6**": deny
+    "7**": deny
+    "8**": deny
+    "9**": deny
+    "0**": deny
+    "/app/**": deny
+    "/tmp/**": allow
   read:
-    "*": allow
+    "**": allow
 
   "sequential-thinking*": deny
   "context7*": deny
@@ -36,9 +100,13 @@ permission:
   codesearch: deny
 
   bash:
+    # All agents should start with deny and then add in as needed
     "*": deny
-    "echo $*": allow
+    "echo *": allow
+    "cat *": allow
     "printenv *": allow
+    "git -C * remote get-url origin": allow
+    "git remote get-url origin": allow
 
     "git -C /tmp/*": allow
 
@@ -48,6 +116,9 @@ permission:
     "curl*localhost:4096*": deny
     "curl*127.0.0.1:4096*": deny
 
+    "*force_merge*": deny
+    "*sudo*": deny
+
   task:
     "*": deny
 
@@ -110,3 +181,7 @@ On any other failure:
 ok: false
 error: <one-line description>
 ```
+
+## **CRITICAL** Rules
+
+- **CRITICAL:** Never under **any** circumstances are you to ask any questions of the user. If you have a question, use your best judgement and answer it yourself. Even if you are completely unsure of the answer, make your best guest. It is **COMPLETELY FORBIDDEN** for you to ever ask a question.