roboco

External/roboco

Fork 0

mirror of https://github.com/rennf93/roboco.git synced 2026-08-03 07:23:24 +02:00

Files

T

History

3787d15524 fix(agents): block subagent spawning at the Claude Code level (disallow Task) (#377 )

The fleet-wide subagent ban was implemented as an allowlist omission, but Task
is a default-permitted Claude Code built-in — an allowlist auto-approves, it
does not restrict. Under permission_mode="dontAsk" (intake/secretary SDK) and
defaultMode="bypassPermissions" (fleet), Task ran regardless and can_use_tool
was never invoked for it, so every Claude-path agent could still spawn
subagents despite allows_subagent=False. Only the grok path blocked it.

Explicitly disallow the subagent tool at every Claude-path spawn point:
disallowed_tools=["Task"] on the intake and secretary SDK drivers, and "Task"
in the fleet settings.json base_deny (an explicit deny applies even under
bypassPermissions). This mirrors the grok path's --disallowed-tools Agent.

Pins the ban in test_cc_lockdown.py (fleet settings deny Task) and a new
test_sdk_driver_subagent_ban.py (intake + secretary options disallow Task).

Co-authored-by: Renn F <rennf93@users.noreply.github.com>

2026-07-10 02:37:12 +02:00

__init__.py

Gateway/full (#9 )

2026-05-02 03:11:49 +02:00

test_agent_headers.py

feat(video): switch 0.19.0 renderer Remotion → HyperFrames (HTML-native, Apache-2.0) (#314 )

2026-07-07 10:09:23 +02:00

test_grok_cli_session.py

fix(tests): grok session test pins the fleet-wide subagent ban

2026-07-09 18:53:28 +02:00

test_grok_interactive_entrypoints.py

feat(grok): pluggable agent providers + Grok on the official grok CLI (#218 )