[bug] Restrict which subagents a custom agent can spawn (built-in Plan mode can write files via sub agent) #4267

Activity

1. tbarron-xyz

   added

   discussionUsed for feature requests, proposals, ideas, etc. Open discussionUsed for feature requests, proposals, ideas, etc. Open discussion

   on Nov 12, 2025
2. github-actions commented on Nov 12, 2025

   

   github-actionsBot

   on Nov 12, 2025 – with GitHub Actions

   Contributor

   More actions

   This issue might be a duplicate of existing issues. Please check:

   • Task should inherit current agent permissions/tools for MCP #3808: Task should inherit current agent permissions/tools for MCP - This describes the same core problem where agents with restricted permissions can circumvent their limitations by delegating tasks to subagents that don't inherit the same restrictions.

   Feel free to ignore if none of these address your specific case.
3. tbarron-xyz commented on Nov 13, 2025

   

   tbarron-xyz

   on Nov 13, 2025

   Author

   More actions

   I'm changing this from a feature request to a Bug. It just happened to me on the default Plan agent (spawned a task which wrote a file). Seems like a problem that the default Plan agent can write files lol.
4. tbarron-xyz

   changed the title [-][FEATURE]: Restrict which subagents a custom agent can spawn[/-] [+]Restrict which subagents a custom agent can spawn (built-in Plan mode can write files via sub agent)[/+] on Nov 13, 2025
5. NaikSoftware commented on Nov 13, 2025

   

   NaikSoftware

   on Nov 13, 2025

   Last edited by NaikSoftware

   More actions

   Same issue, plan agent always trying to edit something. My plan agent config:

   "agent": {
       "plan": {
         "mode": "primary",
         "model": "anthropic/claude-opus-4-1-20250805",
         "tools": {
           "write": false,
           "edit": false,
           "bash": false
         }
       }
     },

   Maybe the issue is more critical and not related to subagents, because when you asked Plan agent like this "Let’s refactor..." he tries to edit code immediately instead of planning it first.

   IMHO now we should focus on stability over features, because the basic usage flow has a lot of problems and a lot of regressions after migration to the new TUI. For example such a simple thing as editing Java file now very unstable, periodically broke syntax, append the same lines twice, etc. Maybe problem with jdtls, but it is one of the tens of bugs I faced in the every session when I give yet another chance to use opencode instead of claude or codex.

   👍React with 👍1Reacted by Nikhil Maddirala
6. tbarron-xyz

   changed the title [-]Restrict which subagents a custom agent can spawn (built-in Plan mode can write files via sub agent)[/-] [+][bug] Restrict which subagents a custom agent can spawn (built-in Plan mode can write files via sub agent)[/+] on Nov 13, 2025
7. rekram1-node

   closed this as completedin #4773on Jan 7, 2026