You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
I have verified this feature I'm about to request hasn't been suggested before.
Describe the enhancement you want to request
Now if my main agent (.md) doesnt have access to edit / apply_patch, the GENERAL agent it spawns also doesn't have access to it.
I explicitly set edit - deny to some agents so they can focus purely on orchestrating general agents. Why did you make it so that now you can't do that anymore?
If I spawn an agent from the Build agent, GPT-5.5 gets the apply_patch and the editing toolset back.
All three stem from the same regression in 1.14.46 where deriveSubagentSessionPermission() appends parent deny rules into the child session, overriding the subagent's explicit allows.
I have this same problem. All my subagents were voided upon upgrading. I was debugging this for 2-3 hours trying to understand what was happening. This is insane. Sometimes we want to force agents to delegate work. This makes it impossible.
I feel you, i had the same reaction when I saw GPT-5.5 saying "Oh, apply_patch is not active so let me use bash with python..."
A lot of ridiculous merges as of late, especially the compaction when you manually type /compact and it automatically makes the agent continue work. Before it was only doing that IF the agent was in-progress, which was way smarter UX.
This was fixed in #27201 and should be out in the next release.
The fix keeps Plan Mode’s inherited edit restriction, but stops parent agent self-restrictions like read, bash, and task from erasing a subagent’s own explicit permissions.
Thanks for calling this out. The controller/delegation workflow should work again with the next release.
This should work with the fix in #27654. The root cause is that parent edit: deny unconditionally overrides subagent edit: allow even when you deliberately delegate. The PR adds a check: if the subagent explicitly declares edit: allow, the parent's deny doesn't propagate to it. Your general agent with edit permissions would keep its edit tool.
Activity
github-actions commentedon May 12, 2026
This issue might be a duplicate of existing issues. Please check:
All three stem from the same regression in 1.14.46 where
deriveSubagentSessionPermission()appends parent deny rules into the child session, overriding the subagent's explicit allows.lucasbabur commentedon May 12, 2026
I have this same problem. All my subagents were voided upon upgrading. I was debugging this for 2-3 hours trying to understand what was happening. This is insane. Sometimes we want to force agents to delegate work. This makes it impossible.
nmzpy commentedon May 13, 2026
I feel you, i had the same reaction when I saw GPT-5.5 saying "Oh, apply_patch is not active so let me use bash with python..."
A lot of ridiculous merges as of late, especially the compaction when you manually type /compact and it automatically makes the agent continue work. Before it was only doing that IF the agent was in-progress, which was way smarter UX.
kitlangton commentedon May 13, 2026
This was fixed in #27201 and should be out in the next release.
The fix keeps Plan Mode’s inherited edit restriction, but stops parent agent self-restrictions like
read,bash, andtaskfrom erasing a subagent’s own explicit permissions.Thanks for calling this out. The controller/delegation workflow should work again with the next release.
OrShmuel22 commentedon May 15, 2026
This should work with the fix in #27654. The root cause is that parent
edit: denyunconditionally overrides subagentedit: alloweven when you deliberately delegate. The PR adds a check: if the subagent explicitly declaresedit: allow, the parent's deny doesn't propagate to it. Your general agent with edit permissions would keep its edit tool.fix(task): subagent explicit edit:allow overrides parent edit:deny