fix(agents): block apply_patch tool for all read-only agents

Oracle, Librarian, Explore, Momus, and Metis could modify files via apply_patch despite being read-only agents. Also fixed duplicate task entries in Librarian and Explore restriction lists.
2026-02-18 15:51:31 +09:00
parent 96ff1e00cc
commit 101dadbce2
6 changed files with 104 additions and 4 deletions
@@ -306,6 +306,7 @@ User confirms the button works as expected.
 const metisRestrictions = createAgentToolRestrictions([
  "write",
  "edit",
+  "apply_patch",
  "task",
 ])