Skip to content

feat(opencode): add SDLC reviewer subagents - #88

Merged
xnoto merged 3 commits into
mainfrom
opencode-sdlc-reviewer-subagents
Sep 8, 2026
Merged

feat(opencode): add SDLC reviewer subagents#88
xnoto merged 3 commits into
mainfrom
opencode-sdlc-reviewer-subagents

Conversation

@xnoto

@xnoto xnoto commented Sep 8, 2026

Copy link
Copy Markdown
Contributor

Summary

Adds five specialized SDLC subagents to opencode-server, extending the proven recruiter-resume-reviewer pattern (read-only, edit/bash denied, required inputs with HOLD/BLOCKED on absence, fresh-context independence, ranked-findings verdicts) from career documents to delivery work:

  • adversarial-code-reviewer — hostile pre-PR review of any non-trivial completed implementation (openai/gpt-5.6-terra, xhigh)
  • infra-security-reviewer — pre-merge security posture review of infrastructure-affecting changes; reviews secret shape, never content (openai/gpt-5.6-terra, xhigh)
  • qa-engineer — test design, CI-coverage mapping, validation-gap analysis, failing-check triage; read-only analyst (openai/gpt-5.6-luna)
  • release-engineer — pre-merge release readiness: version/pin checks, consistency, delivery-chain enumeration, release-note draft (kimi-for-coding/k3-256k, high)
  • docs-writer — drafts, revises, and consistency-checks standalone repository documentation from parent-supplied source; returns complete ready-to-commit Markdown, flags unverified claims; excluded from agent-knowledge subtrees and policy/instruction files (kimi-for-coding/k3-256k, high)

The five code-touching primary agents (default, makeitwork, xnoto, career, teacher) gain a shared pre-pull-request review-gate bullet with conditional dispatches for validation, release, and documentation risk; the lifestyle primaries intentionally do not, since they do not author code, chart, or workflow changes — rationale documented in docs/agent-instruction-architecture.md, which also records the specialized-subagent class. Chart version bumped 0.1.670.1.68.

No driving issue; owner-approved recommendation from this session.

Type of change

  • Bug fix
  • Feature / enhancement
  • Documentation
  • Infrastructure (OpenTofu root or module)
  • GitOps desired state (manifests, kustomize, charts, SOPS/KSOPS secrets)
  • Container image
  • CI / reusable workflow
  • Refactor / cleanup
  • Breaking change

Validation

CI is the validation environment. This pull request's repository-hygiene, Helm-rendering, and packaging checks validate the authored chart content; they are being monitored to terminal status.

  • Required pull-request checks pass
  • Generated or centrally distributed files were regenerated by their owning automation, not hand-edited — no generated files changed; the new agent files are authored content auto-globbed by templates/configmap.yaml and templates/deployment.yaml (no template changes required)

Intentionally not validated here: runtime behavior of the new subagents (model routing, verdict protocols). That is functional verification performed only after merge → publication → GitOps pin → Argo CD reconciliation, as a separate stage.

Impact and rollout

  • Producer: opencode-server chart 0.1.68. Consumer: the kustomize-cluster OpenCode Application via the version pin.
  • Rollout (each stage separate): confirmed merge publishes the OCI chart → charts automation opens/updates the kustomize-cluster pin PR (auto-merge per current contract) → Argo CD reconciliation replaces the pod via the ConfigMap checksum (configuration is not hot-reloaded) → functional verification that a fresh session lists the five new subagents with correct models.
  • The pre-PR review gate is scoped to non-trivial changes; trivial rewording and scoped agent-knowledge commits are explicitly exempt, so routine knowledge maintenance is not taxed with high-reasoning reviews.

Safety and secrets

  • Contains no plaintext secrets, decrypted SOPS values, state files, kubeconfigs, tokens, or private endpoints — author-reviewed; all content is non-sensitive prompt and documentation text
  • No local OpenTofu init/plan/apply/destroy/import/state operations were run or claimed — plans come from pull-request checks
  • Breaking or irreversible effects are described above with rollback notes — none; the change is additive (new agent files, one inserted policy bullet per touched primary). Rollback is revert plus a new chart version.

AI-agent disclosure: materially produced by the makeitwork OpenCode agent from an owner-approved recommendation; cache-sourced reads were freshness-verified against remote main (bb522d47) before branching.

Add adversarial-code-reviewer, infra-security-reviewer, qa-engineer, and
release-engineer subagents following the recruiter-resume-reviewer pattern:
read-only, required inputs, and ranked-findings verdicts. Gate non-trivial
pull requests through adversarial review in the code-touching primary
agents, document the reviewer class in the instruction architecture, and
bump the chart version to 0.1.68.
Document the specialized reviewer class and the code-touching primary review
gate in the instruction architecture, and update the chart README's packaged
configuration description.
@github-actions

github-actions Bot commented Sep 8, 2026

Copy link
Copy Markdown

Chart CI passed

Repository hygiene and Helm validation passed. View the workflow run.

Add a read-only documentation drafting and consistency-check subagent scoped
to standalone repository documentation, extend the primary review gate with a
conditional docs-writer dispatch, and document the role in the instruction
architecture and chart README.
@xnoto
xnoto merged commit 78f096f into main Sep 8, 2026
4 checks passed
@xnoto
xnoto deleted the opencode-sdlc-reviewer-subagents branch September 8, 2026 04:46
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant