.opencode/AGENTS.md

# .opencode/ — Project-Scope Skills & Commands

**Generated:** 2026-05-20

## OVERVIEW

Project-scope OpenCode configuration: 5 skills and 5 slash commands committed alongside the source. Picked up by [`src/features/opencode-skill-loader/`](file:///Users/yeongyu/local-workspaces/omo/src/features/opencode-skill-loader/) and the slash-command discovery pipeline.

**Relationship to `.agents/`:** `.agents/` is the migration target during the `oh-my-opencode` → `oh-my-openagent` rename. It is a SUPERSET of `.opencode/` (mirrors all 5 skills + adds 5 more, mirrors the 5 commands). Both directories load during the transition; consumers should prefer `.agents/`.

## SKILLS (5)

| Skill | Purpose |
|-------|---------|
| `work-with-pr/` | Full PR lifecycle skill: worktree → implement → atomic commits → PR → verification loop → merge. |
| `work-with-pr-workspace/` | Iteration workspace for `work-with-pr` — captures benchmark inputs for the iteration-* subdirs. |
| `github-triage/` | Read-only triage of issues + PRs. 1 item = 1 background task. Writes evidence-backed reports. Never takes GitHub actions. |
| `hyperplan/` | Adversarial multi-agent planning. 5 hostile category members cross-critique, lead synthesizes. |
| `pre-publish-review/` | Nuclear-grade 16-agent pre-publish release gate. Runs `/get-unpublished-changes`, spawns ultrabrain agents per change, oracle for synthesis. |

Each skill follows the standard layout (`SKILL.md` + optional `scripts/`, `references/`, `assets/`).

## COMMANDS (5 slash commands)

| Command | Purpose |
|---------|---------|
| `/get-unpublished-changes` | Compare HEAD with the latest published npm version and list unpublished changes. |
| `/omomomo` | Easter-egg command — about oh-my-opencode. |
| `/publish` | Publish via GitHub Actions workflow. Argument: `<patch|minor|major>`. |
| `/remove-deadcode` | Remove unused code with LSP-verified safety + atomic commits. |
| `/security-research` | Run the Team Mode security-research audit with 3 vulnerability hunters and 2 PoC engineers. |

## OTHER CONTENTS

- `background-tasks.json` — Runtime state for active background tasks (gitignored from sensitive content but tracked structurally).
- `bun.lock`, `package.json`, `node_modules/` — Skill dependencies (some skills install their own packages).
- `.gitignore` — Local scope ignore patterns.

## CONVENTIONS

- **Skill YAML frontmatter is mandatory.** [`opencode-skill-loader`](file:///Users/yeongyu/local-workspaces/omo/src/features/opencode-skill-loader/) rejects skills without `name` + `description`.
- **Project-scope > user-scope.** A skill at `.opencode/skills/X/` overrides `~/.config/opencode/skills/X/` of the same name.
- **Trigger words** in the skill description determine when OpenCode loads the skill. Be specific.
- **Commands are user-visible.** Name them with a leading `/` (the loader normalizes filename → command).

## ANTI-PATTERNS

- Never duplicate a built-in skill from `src/features/builtin-skills/` here without a clear reason.
- Never commit `background-tasks.json` contents that include session IDs or token secrets.
- Never write a skill that calls `session.promptAsync` directly — go through `dispatchInternalPrompt` (see root AGENTS.md "Internal message injection is dangerous").
docs(agents): regenerate hierarchical AGENTS.md for 2026-05-20 2026-05-20 17:18:44 +09:00			`# .opencode/ — Project-Scope Skills & Commands`

			`Generated: 2026-05-20`

			`## OVERVIEW`

fix(skills): register security-review builtin 2026-05-30 19:32:26 +09:00			Project-scope OpenCode configuration: 5 skills and 5 slash commands committed alongside the source. Picked up by [`src/features/opencode-skill-loader/`](file:///Users/yeongyu/local-workspaces/omo/src/features/opencode-skill-loader/) and the slash-command discovery pipeline.
docs(agents): regenerate hierarchical AGENTS.md for 2026-05-20 2026-05-20 17:18:44 +09:00
fix(skills): register security-review builtin 2026-05-30 19:32:26 +09:00			Relationship to `.agents/`: `.agents/` is the migration target during the `oh-my-opencode` → `oh-my-openagent` rename. It is a SUPERSET of `.opencode/` (mirrors all 5 skills + adds 5 more, mirrors the 5 commands). Both directories load during the transition; consumers should prefer `.agents/`.
docs(agents): regenerate hierarchical AGENTS.md for 2026-05-20 2026-05-20 17:18:44 +09:00
			`## SKILLS (5)`

			`\| Skill \| Purpose \|`
			`\|-------\|---------\|`
			\| `work-with-pr/` \| Full PR lifecycle skill: worktree → implement → atomic commits → PR → verification loop → merge. \|
			\| `work-with-pr-workspace/` \| Iteration workspace for `work-with-pr` — captures benchmark inputs for the iteration-* subdirs. \|
			\| `github-triage/` \| Read-only triage of issues + PRs. 1 item = 1 background task. Writes evidence-backed reports. Never takes GitHub actions. \|
			\| `hyperplan/` \| Adversarial multi-agent planning. 5 hostile category members cross-critique, lead synthesizes. \|
			\| `pre-publish-review/` \| Nuclear-grade 16-agent pre-publish release gate. Runs `/get-unpublished-changes`, spawns ultrabrain agents per change, oracle for synthesis. \|

			Each skill follows the standard layout (`SKILL.md` + optional `scripts/`, `references/`, `assets/`).

fix(skills): register security-review builtin 2026-05-30 19:32:26 +09:00			`## COMMANDS (5 slash commands)`
docs(agents): regenerate hierarchical AGENTS.md for 2026-05-20 2026-05-20 17:18:44 +09:00
			`\| Command \| Purpose \|`
			`\|---------\|---------\|`
			\| `/get-unpublished-changes` \| Compare HEAD with the latest published npm version and list unpublished changes. \|
			\| `/omomomo` \| Easter-egg command — about oh-my-opencode. \|
			\| `/publish` \| Publish via GitHub Actions workflow. Argument: `<patch\|minor\|major>`. \|
			\| `/remove-deadcode` \| Remove unused code with LSP-verified safety + atomic commits. \|
feat(skills): add security-research orchestration 2026-05-23 14:03:38 +09:00			\| `/security-research` \| Run the Team Mode security-research audit with 3 vulnerability hunters and 2 PoC engineers. \|
docs(agents): regenerate hierarchical AGENTS.md for 2026-05-20 2026-05-20 17:18:44 +09:00
			`## OTHER CONTENTS`

			- `background-tasks.json` — Runtime state for active background tasks (gitignored from sensitive content but tracked structurally).
			- `bun.lock`, `package.json`, `node_modules/` — Skill dependencies (some skills install their own packages).
			- `.gitignore` — Local scope ignore patterns.

			`## CONVENTIONS`

			- Skill YAML frontmatter is mandatory. [`opencode-skill-loader`](file:///Users/yeongyu/local-workspaces/omo/src/features/opencode-skill-loader/) rejects skills without `name` + `description`.
			- Project-scope > user-scope. A skill at `.opencode/skills/X/` overrides `~/.config/opencode/skills/X/` of the same name.
			`- Trigger words in the skill description determine when OpenCode loads the skill. Be specific.`
			- Commands are user-visible. Name them with a leading `/` (the loader normalizes filename → command).

			`## ANTI-PATTERNS`

			- Never duplicate a built-in skill from `src/features/builtin-skills/` here without a clear reason.
			- Never commit `background-tasks.json` contents that include session IDs or token secrets.
			- Never write a skill that calls `session.promptAsync` directly — go through `dispatchInternalPrompt` (see root AGENTS.md "Internal message injection is dangerous").