From f1cdb3bce1c8bbb49cb9f1d70a97e2d808d098a1 Mon Sep 17 00:00:00 2001 From: justsisyphus Date: Fri, 16 Jan 2026 17:13:08 +0900 Subject: [PATCH] feat: global sisyphus_task deny with orchestrator exceptions - Add sisyphus_task: deny to global config.permission - Add sisyphus_task: allow exception for orchestrator-sisyphus, Sisyphus, and Prometheus (Planner) - Ensures only orchestrator agents can spawn sisyphus_task subagents --- src/plugin-handlers/config-handler.ts | 7 ++++--- 1 file changed, 4 insertions(+), 3 deletions(-) diff --git a/src/plugin-handlers/config-handler.ts b/src/plugin-handlers/config-handler.ts index b258c29c..23b3195c 100644 --- a/src/plugin-handlers/config-handler.ts +++ b/src/plugin-handlers/config-handler.ts @@ -303,21 +303,22 @@ export function createConfigHandler(deps: ConfigHandlerDeps) { } if (agentResult["orchestrator-sisyphus"]) { const agent = agentResult["orchestrator-sisyphus"] as AgentWithPermission; - agent.permission = { ...agent.permission, task: "deny", call_omo_agent: "deny" }; + agent.permission = { ...agent.permission, task: "deny", call_omo_agent: "deny", sisyphus_task: "allow" }; } if (agentResult.Sisyphus) { const agent = agentResult.Sisyphus as AgentWithPermission; - agent.permission = { ...agent.permission, call_omo_agent: "deny" }; + agent.permission = { ...agent.permission, call_omo_agent: "deny", sisyphus_task: "allow" }; } if (agentResult["Prometheus (Planner)"]) { const agent = agentResult["Prometheus (Planner)"] as AgentWithPermission; - agent.permission = { ...agent.permission, call_omo_agent: "deny" }; + agent.permission = { ...agent.permission, call_omo_agent: "deny", sisyphus_task: "allow" }; } config.permission = { ...(config.permission as Record), webfetch: "allow", external_directory: "allow", + sisyphus_task: "deny", }; const mcpResult = (pluginConfig.claude_code?.mcp ?? true)