Agents
The agent runtime is OpenCode; the manifest's agents map is governance-only, agent behavior lives in .kortix/opencode.
The agent in every session is
OpenCode. The kortix-agent daemon runs it as
opencode serve with its config dir pointed at the project's .kortix/opencode/.
OpenCode-native behavior lives there, in OpenCode's standard layout:
- Agents — a
.mdfile per agent (frontmatter + prompt body) inagents/ - Skills — on-demand
SKILL.mdknow-how inskills/ - Commands, tools, plugins
- Models, providers, MCP servers — in
opencode.jsonc
opencode.jsonc stays the OpenCode-native registry for plugins, MCP servers,
providers, model/provider settings, permissions, and default runtime behavior.
Kortix does not duplicate those settings in the manifest.
The manifest is governance, not behavior
kortix.yaml's agents: is a map keyed by agent name — one entry per agent,
joined to that agent's .kortix/opencode/agents/<name>.md by name. Each entry is
governance only: connectors, secrets, kortix_cli, skills, workspace,
enabled. Nothing about prompt, mode, tools, or permissions lives here — that's
entirely the .md file's job. default_agent is required at the top level and
must name a declared, enabled agent.
v2 is deny-by-default: an agent with no connectors/secrets/kortix_cli/
skills key gets none of that access. Give it all explicitly to grant full
access (the starter's default kortix agent does this). Chat inputs, trigger
pickers, and channel pickers list registered agents from the API, not from a
sandbox-local OpenCode query — this doesn't mean every native file under
.kortix/opencode/agents/ must be registered; unregistered files can still
exist for local experiments or runtime internals.
Legacy kortix.toml
v1 projects declare the same grants as an array, [[agents]], with the secrets
field named env instead of secrets, and per-field defaults instead of
deny-all. A v1 project with no [[agents]] at all runs in legacy unrestricted
mode — an agent inherits the launching user's full role. Once [[agents]]
exists, an unlisted agent is default-denied, same as v2.
Every project ships a default agent + the kortix-system skill, so it runs with no setup. Beyond reading/writing repo files, an agent can use external tools through connected integrations (per project — it only uses what's connected; see Connecting your tools).
New agents, skills, or tools reach future sessions only after a change request merges them. Authoring details: opencode.ai/docs and Kortix vs OpenCode config.