From 737fac434525ce435a6b17f24f5697dd9cbe3dcc Mon Sep 17 00:00:00 2001
From: YeonGyu-Kim <code.yeon.gyu@gmail.com>
Date: Wed, 4 Feb 2026 11:35:02 +0900
Subject: [PATCH] fix(agent-restrictions): add read-only restrictions for metis
 and momus

- Add metis and momus to AGENT_RESTRICTIONS with same pattern as oracle
- Deny write, edit, task, and delegate_task tools
- Enforces read-only design for these advisor agents
- Addresses cubic review feedback on #1462
---
 src/shared/agent-tool-restrictions.ts | 14 ++++++++++++++
 1 file changed, 14 insertions(+)

diff --git a/src/shared/agent-tool-restrictions.ts b/src/shared/agent-tool-restrictions.ts
index 0e58a60b..02b908f7 100644
--- a/src/shared/agent-tool-restrictions.ts
+++ b/src/shared/agent-tool-restrictions.ts
@@ -24,6 +24,20 @@ const AGENT_RESTRICTIONS: Record<string, Record<string, boolean>> = {
     delegate_task: false,
   },
 
+  metis: {
+    write: false,
+    edit: false,
+    task: false,
+    delegate_task: false,
+  },
+
+  momus: {
+    write: false,
+    edit: false,
+    task: false,
+    delegate_task: false,
+  },
+
   "multimodal-looker": {
     read: true,
   },