From c8bb36793bcd4e31a7fea68cd6e963ef52b02f84 Mon Sep 17 00:00:00 2001
From: Rui Hu <rui.hu@cleverthis.com>
Date: Wed, 20 May 2026 12:17:10 +0800
Subject: [PATCH] fix agent task permission, add rw to persist container

---
 agents/rui-orchestrator.md       | 5 ++++-
 agents/rui-review-pr.md          | 2 +-
 agents/rui-self-qa.md            | 2 +-
 start-dev-container-persist.bash | 8 ++++----
 4 files changed, 10 insertions(+), 7 deletions(-)

diff --git a/agents/rui-orchestrator.md b/agents/rui-orchestrator.md
index cb5d13f..86d650a 100644
--- a/agents/rui-orchestrator.md
+++ b/agents/rui-orchestrator.md
@@ -10,8 +10,11 @@ permission:
   skill:
     "*": allow
   task:
-    "rui-*": allow
     "*": deny
+    "rui-*": allow
+    "general": allow
+    "explore": allow
+    "scout": allow
 ---
 You are an expert orchestration agent — a master coordinator and task router with deep knowledge across software engineering, project management, and multi-agent system design. Your primary role is to analyze incoming tasks, determine their complexity, and either handle them directly or intelligently delegate them to the most appropriate specialized subagents (via task tool call).
 
diff --git a/agents/rui-review-pr.md b/agents/rui-review-pr.md
index 4bd710a..0f65fab 100644
--- a/agents/rui-review-pr.md
+++ b/agents/rui-review-pr.md
@@ -15,8 +15,8 @@ permission:
     "rui-task-discovery": deny
     "rui-pr-fix-process": deny
   task:
-    "rui-review-pr-focus": allow
     "*": deny
+    "rui-review-pr-focus": allow
 model: anthropic/claude-sonnet-4-6
 temperature: 0.2
 ---
diff --git a/agents/rui-self-qa.md b/agents/rui-self-qa.md
index 13602bf..01bc82b 100644
--- a/agents/rui-self-qa.md
+++ b/agents/rui-self-qa.md
@@ -14,9 +14,9 @@ permission:
     "rui-task-workflow": deny
     "rui-task-discovery": deny
   task:
+    "*": deny
     "rui-review-pr": allow
     "rui-fix-pr": allow
-    "*": deny
 model: anthropic/claude-sonnet-4-6
 temperature: 0.1
 ---
diff --git a/start-dev-container-persist.bash b/start-dev-container-persist.bash
index 2f37efe..4c52f69 100755
--- a/start-dev-container-persist.bash
+++ b/start-dev-container-persist.bash
@@ -23,10 +23,10 @@ docker run -it --rm \
   --user $(id -u):$(id -g) \
   --volume "${WORKDIR}:/app:z" \
   --volume "/home/skyblond/cleverthis/cleverrouter/workspace:/workspace" \
-  --volume "/home/skyblond/opencode/agents:/home/devuser/.config/opencode/agentsro" \
-  --volume "/home/skyblond/opencode/skills:/home/devuser/.config/opencode/skills:ro" \
-  --volume "/home/skyblond/opencode/opencode.json:/home/devuser/.config/opencode/opencode.json:ro" \
-  --volume "/home/skyblond/opencode/scripts:/external/opencode/scripts:ro" \
+  --volume "/home/skyblond/opencode/agents:/home/devuser/.config/opencode/agents" \
+  --volume "/home/skyblond/opencode/skills:/home/devuser/.config/opencode/skills" \
+  --volume "/home/skyblond/opencode/opencode.json:/home/devuser/.config/opencode/opencode.json" \
+  --volume "/home/skyblond/opencode/scripts:/external/opencode/scripts" \
   --env "OPENROUTER_API_KEY=${OPENROUTER_API_KEY}" \
   --env "OPENAI_API_KEY=${OPENAI_API_KEY}" \
   --env "ANTHROPIC_API_KEY=${ANTHROPIC_API_KEY}" \