From ed9f227828459b730e6adea3e88abe447bc1e447 Mon Sep 17 00:00:00 2001
From: Charles Packer <packercharles@gmail.com>
Date: Wed, 7 Jan 2026 22:37:00 -0800
Subject: [PATCH] fix: Fix subagents not inheriting parent's tool permission
 rules (#492)

Co-authored-by: Letta <noreply@letta.com>
---
 src/headless.ts | 11 +++++++++++
 1 file changed, 11 insertions(+)

diff --git a/src/headless.ts b/src/headless.ts
index 0a32253..6254450 100644
--- a/src/headless.ts
+++ b/src/headless.ts
@@ -130,6 +130,17 @@ export async function handleHeadlessCommand(
     }
   }
 
+  // Set CLI permission overrides if provided (inherited from parent agent)
+  if (values.allowedTools || values.disallowedTools) {
+    const { cliPermissions } = await import("./permissions/cli");
+    if (values.allowedTools) {
+      cliPermissions.setAllowedTools(values.allowedTools as string);
+    }
+    if (values.disallowedTools) {
+      cliPermissions.setDisallowedTools(values.disallowedTools as string);
+    }
+  }
+
   // Check for input-format early - if stream-json, we don't need a prompt
   const inputFormat = values["input-format"] as string | undefined;
   const isBidirectionalMode = inputFormat === "stream-json";