From 0bb37a6f3933ada52f006b8e27be739f4cac5d5a Mon Sep 17 00:00:00 2001
From: CleverThis <hal9000@cleverthis.com>
Date: Sun, 14 Jun 2026 03:44:33 -0400
Subject: [PATCH] fix(agents): fix bug-hunt-pool-supervisor bash permission
 block

- Add missing ': allow' suffix to 'git clone*' entry (was a bare key,
  effectively null/denied, breaking Worker Mode clone step)
- Add 'rm -rf /tmp/*': allow for mandatory clone cleanup on exit

ISSUES CLOSED: #10820
---
 .opencode/agents/bug-hunt-pool-supervisor.md | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/.opencode/agents/bug-hunt-pool-supervisor.md b/.opencode/agents/bug-hunt-pool-supervisor.md
index 046eea08e..2739e07a5 100644
--- a/.opencode/agents/bug-hunt-pool-supervisor.md
+++ b/.opencode/agents/bug-hunt-pool-supervisor.md
@@ -30,8 +30,10 @@ permission:
     "wc *": allow
     "head *": allow
     "tail *": allow
+    # Cleanup (mandatory on exit):
+    "rm -rf /tmp/*": allow
     # Read-only git commands:
-    "git clone*"
+    "git clone*": allow
     "git log*": allow
     "git status*": allow
     "git diff*": allow