diff --git a/.opencode/agents/implementation-worker.md b/.opencode/agents/implementation-worker.md index 6683734da..61ddd3e80 100644 --- a/.opencode/agents/implementation-worker.md +++ b/.opencode/agents/implementation-worker.md @@ -30,6 +30,9 @@ permission: "find *": allow "grep *": allow "wc *": allow + "curl *": allow + "printenv *": allow + "echo $*": allow # Block ALL commands that could hit the label creation endpoints "*api/v1/orgs/*/labels*": deny "*api/v1/repos/*/labels*": deny @@ -57,6 +60,8 @@ permission: "forgejo_list_issue_comments": allow "forgejo_issue_add_comment": allow "forgejo_get_pull_request_by_index": allow + "forgejo_list_pull_request_files": allow + "forgejo_get_pull_request_diff": allow "forgejo_list_pull_reviews": allow "forgejo_list_pull_review_comments": allow "forgejo_list_repo_milestones": allow diff --git a/CHANGELOG.md b/CHANGELOG.md index 4cd7c0bbb..ee2f3d5bf 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -106,6 +106,14 @@ The format follows [Keep a Changelog](https://keepachangelog.com/en/1.1.0/). (#828) +- **Implementation Worker PR Inspection Permissions** (#8175): Added + `forgejo_list_pull_request_files` and `forgejo_get_pull_request_diff` permissions + to `implementation-worker.md`. These read-only permissions enable the worker to + directly inspect PR changes in PR fix mode, reducing unnecessary full-repo clones + and aligning permissions with the `pr-reviewer` agent. Also added `curl *`, + `printenv *`, and `echo $*` bash permissions needed for Forgejo API calls, + environment variable checks, and basic shell operations. + - **TDD Issue-Capture Test Activation** (#7025): Replaced 234 bare `@skip` tags across 82 Behave feature files with the correct `@tdd_expected_fail @tdd_issue @tdd_issue_` tag system. Scenarios whose referenced bugs were already fixed