refactor(agents): frontmatter на нативный OpenCode v2

agents/admin.md

@@ -3,22 +3,48 @@ description: "Системный администратор — ОС, systemd,
   пакеты, бэкапы, логи. Каждое изменение — после одобрения детального плана
   с бэкапом, тестом и откатом."
 mode: all
-temperature: 0.1
+request:
+  body:
+    temperature: 0.1
 steps: 100
 color: "#16a34a"
-permission:
+permissions:
-  task: deny
+  - action: subagent
-  bash: allow
+    resource: "*"
-  read: allow
+    effect: deny
-  edit: allow
+  - action: shell
-  write: allow
+    resource: "*"
-  grep: allow
+    effect: allow
-  glob: allow
+  - action: read
-  websearch: allow
+    resource: "*"
-  webfetch: allow
+    effect: allow
-  todowrite: allow
+  - action: edit
-  question: allow
+    resource: "*"
-  skill: allow
+    effect: allow
+  - action: write
+    resource: "*"
+    effect: allow
+  - action: grep
+    resource: "*"
+    effect: allow
+  - action: glob
+    resource: "*"
+    effect: allow
+  - action: websearch
+    resource: "*"
+    effect: allow
+  - action: webfetch
+    resource: "*"
+    effect: allow
+  - action: todowrite
+    resource: "*"
+    effect: allow
+  - action: question
+    resource: "*"
+    effect: allow
+  - action: skill
+    resource: "*"
+    effect: allow
 ---
 
 # Системный администратор

agents/devops.md

@@ -3,22 +3,48 @@ description: "DevOps-инженер — CI/CD, контейнеры, IaC, деп
   Готовит изменения как код и проверяет их dry-run. Применение и коммиты —
   только за пользователем."
 mode: all
-temperature: 0.1
+request:
+  body:
+    temperature: 0.1
 steps: 100
 color: "#2563eb"
-permission:
+permissions:
-  task: deny
+  - action: subagent
-  bash: allow
+    resource: "*"
-  read: allow
+    effect: deny
-  edit: allow
+  - action: shell
-  write: allow
+    resource: "*"
-  grep: allow
+    effect: allow
-  glob: allow
+  - action: read
-  websearch: allow
+    resource: "*"
-  webfetch: allow
+    effect: allow
-  todowrite: allow
+  - action: edit
-  question: allow
+    resource: "*"
-  skill: allow
+    effect: allow
+  - action: write
+    resource: "*"
+    effect: allow
+  - action: grep
+    resource: "*"
+    effect: allow
+  - action: glob
+    resource: "*"
+    effect: allow
+  - action: websearch
+    resource: "*"
+    effect: allow
+  - action: webfetch
+    resource: "*"
+    effect: allow
+  - action: todowrite
+    resource: "*"
+    effect: allow
+  - action: question
+    resource: "*"
+    effect: allow
+  - action: skill
+    resource: "*"
+    effect: allow
 ---
 
 # DevOps-инженер

agents/fixer.md

@@ -2,7 +2,9 @@
 mode: all
 description: "Bug Fix — находит причину бага, чинит, проверяет что не сломал
   остальное. Работает строго по циклу: Investigate → Fix → Verify."
-temperature: 0.2
+request:
+  body:
+    temperature: 0.2
 steps: 100
 color: "#800080"
 ---

agents/leader.md

@@ -2,24 +2,54 @@
 description: Оркестратор — получает задачу, выбирает профиль, делегирует
   сабагентам. Сам код НЕ правит. Координирует выполнение и собирает результат.
 mode: primary
-temperature: 0.15
+request:
+  body:
+    temperature: 0.15
 steps: 200
 color: "#ffd43b"
-permission:
+permissions:
-  task: allow
+  - action: subagent
-  bash: allow
+    resource: "*"
-  read: allow
+    effect: allow
-  edit: allow
+  - action: shell
-  write: allow
+    resource: "*"
-  websearch: allow
+    effect: allow
-  webfetch: allow
+  - action: read
-  todowrite: allow
+    resource: "*"
-  skill: allow
+    effect: allow
-  question: allow
+  - action: edit
-  plan_enter: allow
+    resource: "*"
-  plan_exit: allow
+    effect: allow
-  grep: allow
+  - action: write
-  glob: allow
+    resource: "*"
+    effect: allow
+  - action: websearch
+    resource: "*"
+    effect: allow
+  - action: webfetch
+    resource: "*"
+    effect: allow
+  - action: todowrite
+    resource: "*"
+    effect: allow
+  - action: skill
+    resource: "*"
+    effect: allow
+  - action: question
+    resource: "*"
+    effect: allow
+  - action: plan_enter
+    resource: "*"
+    effect: allow
+  - action: plan_exit
+    resource: "*"
+    effect: allow
+  - action: grep
+    resource: "*"
+    effect: allow
+  - action: glob
+    resource: "*"
+    effect: allow
 ---
 
 # Orchestrator — оркестратор задач

agents/researcher.md

@@ -11,9 +11,6 @@ permissions:
   - action: shell
     resource: "*"
     effect: allow
-  - action: shell
-    resource: ls *
-    effect: allow
   - action: webfetch
     resource: "*"
     effect: deny
@@ -64,4 +61,4 @@ permissions:
 - Исследуй тщательно. Не ограничивайся поверхностным поиском.
 - Используй grep с разными паттернами: точные имена, camelCase, kebab-case, импорты.
 - Ответ должен быть структурирован — с заголовками, списками, путями к файлам.
-- Если не можешь ответить полно — скажи что ещё нужно проверить.
+- Если не можешь ответить полно — скажи что ещё нужно проверить.

agents/tester.md

@@ -2,13 +2,21 @@
 description: Тестировщик, QA-инженер. Находит баги, проверяет фиксы, запускает
   тесты, верифицирует что ничего не сломано. Read-only.
 mode: all
-temperature: 0.1
+request:
+  body:
+    temperature: 0.1
 steps: 50
 color: "#ff6b6b"
-permission:
+permissions:
-  bash: allow
+  - action: shell
-  webfetch: deny
+    resource: "*"
-  websearch: deny
+    effect: allow
+  - action: webfetch
+    resource: "*"
+    effect: deny
+  - action: websearch
+    resource: "*"
+    effect: deny
 ---
 
 # Тестировщик, QA-инженер