fix(agents): block apply_patch tool for all read-only agents

Oracle, Librarian, Explore, Momus, and Metis could modify files via apply_patch despite being read-only agents. Also fixed duplicate task entries in Librarian and Explore restriction lists.
2026-02-18 15:51:31 +09:00
parent 96ff1e00cc
commit 101dadbce2
6 changed files with 104 additions and 4 deletions
@@ -146,7 +146,7 @@ export function createOracleAgent(model: string): AgentConfig {
  const restrictions = createAgentToolRestrictions([
    "write",
    "edit",
-    "task",
+    "apply_patch",
    "task",
  ])