.opencode/agents/implementation-worker.md

@@ -30,6 +30,9 @@ permission:
     "find *": allow
     "grep *": allow
     "wc *": allow
+    "curl *": allow
+    "printenv *": allow
+    "echo $*": allow
     # Block ALL commands that could hit the label creation endpoints
     "*api/v1/orgs/*/labels*": deny
     "*api/v1/repos/*/labels*": deny
@@ -57,6 +60,8 @@ permission:
   "forgejo_list_issue_comments": allow
   "forgejo_issue_add_comment": allow
   "forgejo_get_pull_request_by_index": allow
+  "forgejo_list_pull_request_files": allow
+  "forgejo_get_pull_request_diff": allow
   "forgejo_list_pull_reviews": allow
   "forgejo_list_pull_review_comments": allow
   "forgejo_list_repo_milestones": allow

CHANGELOG.md

@@ -106,6 +106,14 @@ The format follows [Keep a Changelog](https://keepachangelog.com/en/1.1.0/).
   (#828)
 
 
+- **Implementation Worker PR Inspection Permissions** (#8175): Added
+  `forgejo_list_pull_request_files` and `forgejo_get_pull_request_diff` permissions
+  to `implementation-worker.md`. These read-only permissions enable the worker to
+  directly inspect PR changes in PR fix mode, reducing unnecessary full-repo clones
+  and aligning permissions with the `pr-reviewer` agent. Also added `curl *`,
+  `printenv *`, and `echo $*` bash permissions needed for Forgejo API calls,
+  environment variable checks, and basic shell operations.
+
 - **TDD Issue-Capture Test Activation** (#7025): Replaced 234 bare `@skip` tags
   across 82 Behave feature files with the correct `@tdd_expected_fail @tdd_issue
   @tdd_issue_<N>` tag system. Scenarios whose referenced bugs were already fixed