From e2b0d29f3c188fa89dfea1f3ac3c5b6855dfaab6 Mon Sep 17 00:00:00 2001 From: Steven Welch Date: Wed, 9 Sep 2026 01:37:13 -0600 Subject: [PATCH 1/5] fix(opencode): allow live-system output diagnostics --- opencode-server/Chart.yaml | 2 +- opencode-server/files/AGENTS.md | 4 +++- 2 files changed, 4 insertions(+), 2 deletions(-) diff --git a/opencode-server/Chart.yaml b/opencode-server/Chart.yaml index fea4864..2dfd9ce 100644 --- a/opencode-server/Chart.yaml +++ b/opencode-server/Chart.yaml @@ -1,6 +1,6 @@ apiVersion: v2 name: opencode-server description: OpenCode server Deployment and non-secret configuration -version: 0.1.72 +version: 0.1.73 appVersion: "1.18.29" type: application diff --git a/opencode-server/files/AGENTS.md b/opencode-server/files/AGENTS.md index 0267be2..add9a9d 100644 --- a/opencode-server/files/AGENTS.md +++ b/opencode-server/files/AGENTS.md @@ -23,7 +23,9 @@ documentation. - Treat public repositories as public. Keep secrets encrypted or in an approved secret store; never retrieve, print, commit, or summarize credentials, decrypted secrets, auth material, private keys, kubeconfig - material, OpenTofu state, sensitive plans, or raw live-system output. + material, OpenTofu state, or sensitive plans. Raw live-system output may be + retrieved, printed, and summarized when needed for an authorized task, while + safeguarding any protected material it contains. - Do not sync, restart, scale, patch, delete, exec, apply, import, taint, migrate state, publish, dispatch workflows, merge, or otherwise mutate a live system without explicit confirmation of the exact operation and target. From 15281354276065e4af56fe6cafe15de9f8d66b13 Mon Sep 17 00:00:00 2001 From: Steven Welch Date: Wed, 9 Sep 2026 01:45:21 -0600 Subject: [PATCH 2/5] docs(opencode): clarify diagnostic output policy --- opencode-server/README.md | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/opencode-server/README.md b/opencode-server/README.md index 13e7e28..e187d23 100644 --- a/opencode-server/README.md +++ b/opencode-server/README.md @@ -19,6 +19,14 @@ The chart copies these immutable package inputs into `/home/opencode/.config/ope A change to any packaged file is chart content and requires a new `Chart.yaml` version. See [Agent instruction architecture](docs/agent-instruction-architecture.md) for the primary-agent, subagent, and shared-instruction design. +### Runtime diagnostic output + +For authorized diagnostic work, the shared policy permits agents to retrieve, +print, and summarize raw live-system output. Agents must not expose protected +material within that output, including credentials, decrypted secrets, auth +material, private keys, kubeconfig material, OpenTofu state, or sensitive +plans. This reporting allowance does not authorize live-system mutations. + ### Twilio documentation MCP `twilio-docs` connects only to Twilio's public-beta [documentation MCP](https://www.twilio.com/docs/ai/mcp) at `https://mcp.twilio.com/docs`. It provides public API-documentation and schema discovery, including error-code and A2P guidance, for troubleshooting reference only. From 5a85152b52bb571cf7c9fb415dd666bab53af898 Mon Sep 17 00:00:00 2001 From: Steven Welch Date: Wed, 9 Sep 2026 01:53:02 -0600 Subject: [PATCH 3/5] fix(opencode): retain protected-output safeguards --- opencode-server/files/AGENTS.md | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/opencode-server/files/AGENTS.md b/opencode-server/files/AGENTS.md index add9a9d..e3022cf 100644 --- a/opencode-server/files/AGENTS.md +++ b/opencode-server/files/AGENTS.md @@ -24,8 +24,10 @@ documentation. approved secret store; never retrieve, print, commit, or summarize credentials, decrypted secrets, auth material, private keys, kubeconfig material, OpenTofu state, or sensitive plans. Raw live-system output may be - retrieved, printed, and summarized when needed for an authorized task, while - safeguarding any protected material it contains. + retrieved, printed, and summarized when needed for an authorized task. Do + not intentionally request protected material; if it appears unexpectedly, + do not print, summarize, commit, or persist it, and redact or omit it from + user-facing content. - Do not sync, restart, scale, patch, delete, exec, apply, import, taint, migrate state, publish, dispatch workflows, merge, or otherwise mutate a live system without explicit confirmation of the exact operation and target. From 1df915256d88196f432d8c6fffd2316062d9649e Mon Sep 17 00:00:00 2001 From: Steven Welch Date: Wed, 9 Sep 2026 01:53:51 -0600 Subject: [PATCH 4/5] docs(opencode): retain protected-output safeguards --- opencode-server/README.md | 8 +++++--- 1 file changed, 5 insertions(+), 3 deletions(-) diff --git a/opencode-server/README.md b/opencode-server/README.md index e187d23..a9a68a9 100644 --- a/opencode-server/README.md +++ b/opencode-server/README.md @@ -22,10 +22,12 @@ A change to any packaged file is chart content and requires a new `Chart.yaml` v ### Runtime diagnostic output For authorized diagnostic work, the shared policy permits agents to retrieve, -print, and summarize raw live-system output. Agents must not expose protected -material within that output, including credentials, decrypted secrets, auth +print, and summarize raw live-system output. Agents must not intentionally +request protected material, including credentials, decrypted secrets, auth material, private keys, kubeconfig material, OpenTofu state, or sensitive -plans. This reporting allowance does not authorize live-system mutations. +plans. If protected material appears unexpectedly, agents must not print, +summarize, commit, or persist it, and must redact or omit it from user-facing +content. This reporting allowance does not authorize live-system mutations. ### Twilio documentation MCP From 0593b6fa6eb7adc4a30e6062e60914e0e640bc8c Mon Sep 17 00:00:00 2001 From: Steven Welch Date: Wed, 9 Sep 2026 01:55:52 -0600 Subject: [PATCH 5/5] fix(opencode): bound live diagnostic output --- opencode-server/README.md | 12 +++++++----- opencode-server/files/AGENTS.md | 10 ++++++---- 2 files changed, 13 insertions(+), 9 deletions(-) diff --git a/opencode-server/README.md b/opencode-server/README.md index a9a68a9..342b41e 100644 --- a/opencode-server/README.md +++ b/opencode-server/README.md @@ -22,11 +22,13 @@ A change to any packaged file is chart content and requires a new `Chart.yaml` v ### Runtime diagnostic output For authorized diagnostic work, the shared policy permits agents to retrieve, -print, and summarize raw live-system output. Agents must not intentionally -request protected material, including credentials, decrypted secrets, auth -material, private keys, kubeconfig material, OpenTofu state, or sensitive -plans. If protected material appears unexpectedly, agents must not print, -summarize, commit, or persist it, and must redact or omit it from user-facing +print, and summarize raw live-system output only after constraining the +requested source, fields, and time range to reasonably exclude protected +material. Agents must not intentionally request credentials, decrypted secrets, +auth material, private keys, kubeconfig material, OpenTofu state, or sensitive +plans. If a source cannot be bounded this way, agents must not retrieve it. If +protected material appears unexpectedly, agents must not print, summarize, +commit, attach, or persist it, and must redact or omit it from user-facing content. This reporting allowance does not authorize live-system mutations. ### Twilio documentation MCP diff --git a/opencode-server/files/AGENTS.md b/opencode-server/files/AGENTS.md index e3022cf..5af9034 100644 --- a/opencode-server/files/AGENTS.md +++ b/opencode-server/files/AGENTS.md @@ -24,10 +24,12 @@ documentation. approved secret store; never retrieve, print, commit, or summarize credentials, decrypted secrets, auth material, private keys, kubeconfig material, OpenTofu state, or sensitive plans. Raw live-system output may be - retrieved, printed, and summarized when needed for an authorized task. Do - not intentionally request protected material; if it appears unexpectedly, - do not print, summarize, commit, or persist it, and redact or omit it from - user-facing content. + retrieved, printed, and summarized only for an authorized task and only after + constraining the requested source, fields, and time range to reasonably + exclude protected material. Do not intentionally request protected material. + If a source cannot be bounded this way, do not retrieve it. If protected + material appears unexpectedly, do not print, summarize, commit, attach, or + persist it, and redact or omit it from user-facing content. - Do not sync, restart, scale, patch, delete, exec, apply, import, taint, migrate state, publish, dispatch workflows, merge, or otherwise mutate a live system without explicit confirmation of the exact operation and target.