Skip to content

Fix paths in permission window#49

Closed
ezynda3 wants to merge 2 commits into
anomalyco:devfrom
mark3labs:fix-paths-in-permission-window
Closed

Fix paths in permission window#49
ezynda3 wants to merge 2 commits into
anomalyco:devfrom
mark3labs:fix-paths-in-permission-window

Conversation

@ezynda3

@ezynda3 ezynda3 commented May 22, 2025

Copy link
Copy Markdown
Contributor

I don't know what happened with the original PR I made for this but it seems like it didn't take. This one should work...

@ezynda3 ezynda3 closed this May 22, 2025
randomm referenced this pull request in randomm/opencode Jan 9, 2026
…49)

* feat(#46): add database query delegation protocol for research agent

Enable research agent to get database insights via delegation to
postgres specialist, maintaining security boundaries.

Research agent additions:
- Database investigation protocol section
- Clear delegation format and examples
- List of allowed query types
- DO NOT attempt direct psql access

Postgres agent additions:
- Query delegation acceptance protocol
- Query validation rules (read-only only)
- Execution safety guidelines
- Example delegation handling

Research basis: Multi-agent systems best practice shows delegation
patterns are superior to direct access for security and auditability.
Single audit point maintained (only postgres has DB access).

Files: 2 prompts

* fix(#48): add database command denials to enforce delegation pattern

Added explicit database command denials (psql*, mysql*, mongosh*, redis-cli*, sqlite3*) to bash permissions for 11 agents to ensure all database operations go through the proper delegation channels.

This security fix ensures a single audit point for all database interactions and prevents agents from bypassing the established delegation protocols.
bussard76 pushed a commit to bussard76/openwork that referenced this pull request May 12, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant