ceos/opencode
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

fix(core): deny subagent tool for default subagents

Browse source
This commit is contained in:
Dax Raad 2026-06-30 23:11:06 -04:00
commit c26f6f95f7
2 changed files with 34 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

8
packages/core/src/plugin/agent.ts
View file

@ -158,7 +158,12 @@ export const Plugin = define({
item.description =
"General-purpose agent for researching complex questions and executing multi-step tasks. Use this agent to execute multiple units of work in parallel."
item.mode = "subagent"
item.permissions.push(...PermissionV2.merge(defaults, [{ action: "todowrite", resource: "*", effect: "deny" }]))
item.permissions.push(
...PermissionV2.merge(defaults, [
{ action: "subagent", resource: "*", effect: "deny" },
{ action: "todowrite", resource: "*", effect: "deny" },
]),
)
})
draft.update(AgentV2.ID.make("explore"), (item) => {
@ -176,6 +181,7 @@ export const Plugin = define({
{ action: "webfetch", resource: "*", effect: "allow" },
{ action: "websearch", resource: "*", effect: "allow" },
{ action: "read", resource: "*", effect: "allow" },
{ action: "subagent", resource: "*", effect: "deny" },
],
readonlyExternalDirectory,
),