install refuses OpenCode agent files written by an earlier release, and fails the whole run

[dergachoff]

Problem

Upgrading a 0.9.1-rc.1-era setup to v0.11.0, install -y refuses three OpenCode agent files that cbm's own installer wrote, and the refusal fails the entire install.

Evidence

error: agent_config agent=OpenCode op=agent_install path=~/.config/opencode/agents/codebase-memory-scout.md (target: regular file, 1729 bytes)
error: one or more agent configurations failed; the published/current executable was kept, and PATH/index cleanup was not attempted

All three files are dated 2026-07-31 21:13 — written by the rc.1 installer, never touched by me. Moving them aside and rerunning install -y --clients=opencode succeeds with zero errors, and the files it then writes differ from the rc.1 ones by exactly two lines:

+  tool_search: allow
+  tool_search_regex: allow

So the renderer changed, the previous rendering isn't registered anywhere, and cbm's own output now reads as a foreign file.

Expected fix

Register the pre-0.11.0 OpenCode agent rendering as a known released shape so upgrades migrate it, the way #1408 did for the rc.1 Codex profiles. The escalation is worth a second look too — #1656 fixed exactly that for Hermes, and here one refused file skips PATH and index cleanup for the whole run.

v0.11.0, macOS arm64.

[DeusData]

Thank you for isolating this to the two added permission lines and for preserving the old files. I checked current main (59a05eb): the OpenCode renderer includes tool_search and tool_search_regex, while the profile migration path recognizes the current/alternate renderings, a Codex-specific rc.1 shape, and an optional legacy verify profile. It does not provide the equivalent prior OpenCode rendering for all three tiers.

This is a high-priority upgrade compatibility bug. The fix needs to recognize the exact released OpenCode shapes while continuing to preserve genuinely user-modified profiles. The whole-install failure behavior also needs a separate look; we should not silently overwrite an unrecognized file to make the error disappear. Your report provides enough detail to investigate, so this is not waiting on more reporter information.

Code checked:

codebase-memory-mcp/src/cli/cli.c

Lines 8670 to 8724 in 59a05eb

	for (int value = 0; value < (int)CBM_GRAPH_TIER_COUNT; value++) {
	cbm_graph_tier_t tier = (cbm_graph_tier_t)value;
	char path[CLI_BUF_1K];
	if (cbm_tiered_profile_path(profiles.verify_path, tier, path, sizeof(path)) != CLI_OK) {
	record_agent_config_error(false, profiles.label, "agent_path", profiles.verify_path);
	continue;
	}
	if (g_install_plan) {
	plan_record(profiles.label, "agent", path);
	continue;
	}
	if (dry_run) {
	printf(" agent: %s\n", path);
	continue;
	}
	char *current =
	cbm_render_graph_profile(profiles.dialect, tier, access, profiles.binary_path);
	if (!current) {
	record_agent_config_error(false, profiles.label, "agent_render", path);
	continue;
	}
	cbm_graph_access_t alternate_access =
	access == CBM_GRAPH_ACCESS_DIRECT ? CBM_GRAPH_ACCESS_HANDOFF : CBM_GRAPH_ACCESS_DIRECT;
	char *alternate = cbm_render_graph_profile(profiles.dialect, tier, alternate_access,
	profiles.binary_path);
	char *codex_rc1 =
	profiles.dialect == CBM_GRAPH_DIALECT_CODEX && access == CBM_GRAPH_ACCESS_DIRECT
	? cbm_render_graph_profile_codex_rc1(tier)
	: NULL;
	const char *released[3];
	size_t released_count = 0U;
	if (alternate) {
	released[released_count++] = alternate;
	}
	if (codex_rc1) {
	released[released_count++] = codex_rc1;
	}
	if (tier == CBM_GRAPH_TIER_VERIFY && profiles.legacy_verify_content) {
	released[released_count++] = profiles.legacy_verify_content;
	}
	int result = prepare_config_parent(path)
	? cbm_text_migrate_owned_document(path, current, released, released_count)
	: CLI_ERR;
	free(codex_rc1);
	free(alternate);
	free(current);
	if (result != CLI_OK) {
	if (result > CLI_OK) {
	printf(" agent: preserved modified profile %s\n", path);
	}
	record_agent_config_error(false, profiles.label, "agent_install", path);
	continue;
	}
	printf(" agent: %s\n", path);
	}