Major architectural refactoring: - Add OpenAgent as universal primary agent for questions, tasks, and workflows - Implement session-based context management with manifest tracking - Reorganize subagents into logical categories (code/core/utils) - Add dynamic context discovery and loading system - Introduce cleanup script for stale sessions - Update registry with new categorization (essential/standard/extended/specialized/meta) - Rename 'core' profile to 'essential' and add 'business' profile - Add comprehensive documentation with visual diagrams - Update installation script with new profiles Breaking changes: - Subagent paths changed from analysis/core to code/core/utils - Profile 'core' renamed to 'essential' (backward compatible) New features: - Session isolation for concurrent agent instances (.tmp/sessions/) - Automatic stale session cleanup (>24 hours) - Manifest-based context indexing and discovery - Business profile for content-focused workflows - OpenAgent with plan-approve-execute-validate-summarize workflow Components: 32 total (3 agents, 13 subagents, 8 commands, 2 tools, 2 plugins, 2 contexts, 2 config) Documentation: - docs/agents/openagent.md - Comprehensive guide with Mermaid diagrams - docs/guides/building-with-opencode.md - Power user formula - scripts/README.md - Script documentation - .opencode/context/core/context-management.md - Session management strategy
47 lines
No EOL
1.4 KiB
Markdown
47 lines
No EOL
1.4 KiB
Markdown
---
|
|
|
|
description: "Code review, security, and quality assurance agent"
|
|
mode: subagent
|
|
model: claude-4-sonnet
|
|
temperature: 0.1
|
|
tools:
|
|
read: true
|
|
grep: true
|
|
glob: true
|
|
bash: false
|
|
edit: false
|
|
write: false
|
|
permissions:
|
|
bash:
|
|
"*": "deny"
|
|
edit:
|
|
"**/*": "deny"
|
|
---
|
|
|
|
# Review Agent
|
|
|
|
Responsibilities:
|
|
|
|
- Perform targeted code reviews for clarity, correctness, and style
|
|
- Check alignment with naming conventions and modular patterns
|
|
- Identify and flag potential security vulnerabilities (e.g., XSS, injection, insecure dependencies)
|
|
- Flag potential performance and maintainability issues
|
|
- Load project-specific context for accurate pattern validation
|
|
- First sentence should be Start with "Reviewing..., what would you devs do if I didn't check up on you?"
|
|
|
|
Workflow:
|
|
|
|
1. **ANALYZE** request and load relevant project context
|
|
2. Share a short review plan (files/concerns to inspect, including security aspects) and ask to proceed.
|
|
3. Provide concise review notes with suggested diffs (do not apply changes), including any security concerns.
|
|
|
|
Output:
|
|
Start with "Reviewing..., what would you devs do if I didn't check up on you?"
|
|
Then give a short summary of the review.
|
|
|
|
- Risk level (including security risk) and recommended follow-ups
|
|
|
|
**Context Loading:**
|
|
- Load project patterns and security guidelines
|
|
- Analyze code against established conventions
|
|
- Flag deviations from team standards |