From 0d086ddc6374dcd0bf6e44a55c724f55df777ead Mon Sep 17 00:00:00 2001 From: CleverThis Date: Thu, 9 Apr 2026 09:03:20 +0000 Subject: [PATCH] chore(agents): add git clone permission to bug-hunter worker mode Approved proposal: #3831 Pattern: permission_gap Evidence: Bug-hunter worker mode requires cloning the repository to analyze source code, but git clone/config/fetch/checkout/reset permissions were missing from the bash permission list. Workers were unable to clone the repo and therefore could not perform any code analysis. Fix: Add git clone*, git config*, git fetch*, git checkout*, git reset*, mkdir *, and rm -rf * permissions to enable workers to clone and clean up their isolated working directories. ISSUES CLOSED: #3831 --- .opencode/agents/bug-hunt-pool-supervisor.md | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/.opencode/agents/bug-hunt-pool-supervisor.md b/.opencode/agents/bug-hunt-pool-supervisor.md index c22371f1d..a580bcf33 100644 --- a/.opencode/agents/bug-hunt-pool-supervisor.md +++ b/.opencode/agents/bug-hunt-pool-supervisor.md @@ -30,6 +30,14 @@ permission: "wc *": allow "head *": allow "tail *": allow + # Clone and setup (Worker Mode needs to clone the repo): + "git clone*": allow + "git config*": allow + "git fetch*": allow + "git checkout*": allow + "git reset*": allow + "mkdir *": allow + "rm -rf /tmp/bug-hunter-*": allow # Read-only git commands: "git clone*" "git log*": allow -- 2.52.0