wave-agent-sdk 0.13.1 → 0.13.2

package/dist/managers/subagentManager.d.ts

@@ -6,6 +6,7 @@ import { MessageManager } from "./messageManager.js";
 import { ToolManager } from "./toolManager.js";
 import { UserMessageParams, type AgentToolBlockUpdateParams } from "../utils/messageOperations.js";
 import { Container } from "../utils/container.js";
+import type { PermissionMode } from "../types/permissions.js";
 export interface SubagentManagerCallbacks {
     /** Triggered when subagent adds user message */
     onSubagentUserMessageAdded?: (subagentId: string, params: UserMessageParams) => void;
@@ -47,6 +48,7 @@ export interface SubagentManagerOptions {
 }
 export declare class SubagentManager {
     private instances;
+    private subagentPermissionManagers;
     private cachedConfigurations;
     private workdir;
     private callbacks?;
@@ -59,6 +61,10 @@ export declare class SubagentManager {
      * Initialize the SubagentManager by loading and caching configurations
      */
     initialize(): Promise<void>;
+    /**
+     * Sync parent permission rules to all running subagents
+     */
+    private syncPermissionRulesToSubagents;
     /**
      * Load all available subagent configurations and cache them
      */
@@ -81,6 +87,7 @@ export declare class SubagentManager {
         allowedTools?: string[];
         model?: string;
         stream?: boolean;
+        permissionModeOverride?: PermissionMode;
     }, runInBackground?: boolean, onUpdate?: () => void): Promise<SubagentInstance>;
     /**
      * Create a new subagent instance initialized with a copy of the current message history.
@@ -90,6 +97,7 @@ export declare class SubagentManager {
         description: string;
         allowedTools?: string[];
         model?: string;
+        permissionModeOverride?: PermissionMode;
     }, onUpdate?: () => void): Promise<SubagentInstance>;
     /**
      * Execute agent using subagent instance

package/dist/managers/subagentManager.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"subagentManager.d.ts","sourceRoot":"","sources":["../../src/managers/subagentManager.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AAEzB,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AACxE,OAAO,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,mBAAmB,CAAC;AACxD,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAC3C,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AACrD,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAQ/C,OAAO,EACL,iBAAiB,EACjB,KAAK,0BAA0B,EAChC,MAAM,+BAA+B,CAAC;AAEvC,OAAO,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAIlD,MAAM,WAAW,wBAAwB;IAEvC,gDAAgD;IAChD,0BAA0B,CAAC,EAAE,CAC3B,UAAU,EAAE,MAAM,EAClB,MAAM,EAAE,iBAAiB,KACtB,IAAI,CAAC;IACV,wDAAwD;IACxD,+BAA+B,CAAC,EAAE,CAAC,UAAU,EAAE,MAAM,KAAK,IAAI,CAAC;IAC/D,0DAA0D;IAC1D,iCAAiC,CAAC,EAAE,CAClC,UAAU,EAAE,MAAM,EAClB,KAAK,EAAE,MAAM,EACb,WAAW,EAAE,MAAM,KAChB,IAAI,CAAC;IACV,4DAA4D;IAC5D,mCAAmC,CAAC,EAAE,CACpC,UAAU,EAAE,MAAM,EAClB,KAAK,EAAE,MAAM,EACb,WAAW,EAAE,MAAM,KAChB,IAAI,CAAC;IACV,oDAAoD;IACpD,0BAA0B,CAAC,EAAE,CAC3B,UAAU,EAAE,MAAM,EAClB,MAAM,EAAE,0BAA0B,KAC/B,IAAI,CAAC;IACV,8CAA8C;IAC9C,wBAAwB,CAAC,EAAE,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,IAAI,CAAC;IAC7E,yDAAyD;IACzD,iCAAiC,CAAC,EAAE,CAClC,UAAU,EAAE,MAAM,EAClB,MAAM,EAAE,MAAM,KACX,IAAI,CAAC;CACX;AAED,MAAM,WAAW,gBAAgB;IAC/B,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,EAAE,qBAAqB,CAAC;IACrC,SAAS,EAAE,SAAS,CAAC;IACrB,cAAc,EAAE,cAAc,CAAC;IAC/B,WAAW,EAAE,WAAW,CAAC;IACzB,MAAM,EAAE,cAAc,GAAG,QAAQ,GAAG,WAAW,GAAG,OAAO,GAAG,SAAS,CAAC;IACtE,QAAQ,EAAE,OAAO,EAAE,CAAC;IACpB,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,EAAE,MAAM,IAAI,CAAC;IACtB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC;CAC5B;AAED,MAAM,WAAW,sBAAsB;IACrC,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,wBAAwB,CAAC;IACrC,YAAY,CAAC,EAAE,CAAC,KAAK,EAAE,KAAK,KAAK,IAAI,CAAC;IACtC,MAAM,EAAE,OAAO,CAAC;CACjB;AAED,qBAAa,eAAe;IAC1B,OAAO,CAAC,SAAS,CAAuC;IACxD,OAAO,CAAC,oBAAoB,CAAwC;IAEpE,OAAO,CAAC,OAAO,CAAS;IACxB,OAAO,CAAC,SAAS,CAAC,CAA2B;IAC7C,OAAO,CAAC,YAAY,CAAC,CAAyB;IAC9C,OAAO,CAAC,SAAS,CAAY;IAC7B,OAAO,CAAC,MAAM,CAAU;gBAEZ,SAAS,EAAE,SAAS,EAAE,OAAO,EAAE,sBAAsB;IAQjE,OAAO,KAAK,oBAAoB,GAE/B;IAED;;OAEG;IACG,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;IAIjC;;OAEG;IACG,kBAAkB,IAAI,OAAO,CAAC,qBAAqB,EAAE,CAAC;IAY5D;;OAEG;IACH,iBAAiB,IAAI,qBAAqB,EAAE;IAS5C;;OAEG;IACG,YAAY,CAAC,IAAI,EAAE,MAAM;IAK/B;;OAEG;IACG,cAAc,CAClB,aAAa,EAAE,qBAAqB,EACpC,UAAU,EAAE;QACV,WAAW,EAAE,MAAM,CAAC;QACpB,MAAM,EAAE,MAAM,CAAC;QACf,aAAa,EAAE,MAAM,CAAC;QACtB,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;QACxB,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,MAAM,CAAC,EAAE,OAAO,CAAC;KAClB,EACD,eAAe,CAAC,EAAE,OAAO,EACzB,QAAQ,CAAC,EAAE,MAAM,IAAI,GACpB,OAAO,CAAC,gBAAgB,CAAC;IAoG5B;;;OAGG;IACG,SAAS,CACb,YAAY,EAAE,MAAM,EACpB,QAAQ,EAAE,OAAO,EAAE,EACnB,UAAU,EAAE;QACV,WAAW,EAAE,MAAM,CAAC;QACpB,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;QACxB,KAAK,CAAC,EAAE,MAAM,CAAC;KAChB,EACD,QAAQ,CAAC,EAAE,MAAM,IAAI,GACpB,OAAO,CAAC,gBAAgB,CAAC;IAuB5B;;;;;OAKG;IACG,YAAY,CAChB,QAAQ,EAAE,gBAAgB,EAC1B,MAAM,EAAE,MAAM,EACd,WAAW,CAAC,EAAE,WAAW,EACzB,eAAe,CAAC,EAAE,OAAO,GACxB,OAAO,CAAC,MAAM,CAAC;IAgFZ,kBAAkB,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;YA6C/C,eAAe;IAuH7B;;OAEG;IACH,WAAW,CAAC,UAAU,EAAE,MAAM,GAAG,gBAAgB,GAAG,IAAI;IAIxD;;OAEG;IACH,oBAAoB,CAClB,UAAU,EAAE,MAAM,EAClB,MAAM,EAAE,gBAAgB,CAAC,QAAQ,CAAC,GACjC,IAAI;IAOP;;OAEG;IACH,oBAAoB,CAAC,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,IAAI;IAOhE;;OAEG;IACH,eAAe,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI;IAYzC;;OAEG;IACH,kBAAkB,IAAI,gBAAgB,EAAE;IAOxC;;OAEG;IACH,OAAO,IAAI,IAAI;IAIf;;;OAGG;IACH,OAAO,CAAC,uBAAuB;CAgGhC"}
+{"version":3,"file":"subagentManager.d.ts","sourceRoot":"","sources":["../../src/managers/subagentManager.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AAEzB,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AACxE,OAAO,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,mBAAmB,CAAC;AACxD,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAC3C,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AACrD,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAQ/C,OAAO,EACL,iBAAiB,EACjB,KAAK,0BAA0B,EAChC,MAAM,+BAA+B,CAAC;AAEvC,OAAO,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAElD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AAG9D,MAAM,WAAW,wBAAwB;IAEvC,gDAAgD;IAChD,0BAA0B,CAAC,EAAE,CAC3B,UAAU,EAAE,MAAM,EAClB,MAAM,EAAE,iBAAiB,KACtB,IAAI,CAAC;IACV,wDAAwD;IACxD,+BAA+B,CAAC,EAAE,CAAC,UAAU,EAAE,MAAM,KAAK,IAAI,CAAC;IAC/D,0DAA0D;IAC1D,iCAAiC,CAAC,EAAE,CAClC,UAAU,EAAE,MAAM,EAClB,KAAK,EAAE,MAAM,EACb,WAAW,EAAE,MAAM,KAChB,IAAI,CAAC;IACV,4DAA4D;IAC5D,mCAAmC,CAAC,EAAE,CACpC,UAAU,EAAE,MAAM,EAClB,KAAK,EAAE,MAAM,EACb,WAAW,EAAE,MAAM,KAChB,IAAI,CAAC;IACV,oDAAoD;IACpD,0BAA0B,CAAC,EAAE,CAC3B,UAAU,EAAE,MAAM,EAClB,MAAM,EAAE,0BAA0B,KAC/B,IAAI,CAAC;IACV,8CAA8C;IAC9C,wBAAwB,CAAC,EAAE,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,IAAI,CAAC;IAC7E,yDAAyD;IACzD,iCAAiC,CAAC,EAAE,CAClC,UAAU,EAAE,MAAM,EAClB,MAAM,EAAE,MAAM,KACX,IAAI,CAAC;CACX;AAED,MAAM,WAAW,gBAAgB;IAC/B,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,EAAE,qBAAqB,CAAC;IACrC,SAAS,EAAE,SAAS,CAAC;IACrB,cAAc,EAAE,cAAc,CAAC;IAC/B,WAAW,EAAE,WAAW,CAAC;IACzB,MAAM,EAAE,cAAc,GAAG,QAAQ,GAAG,WAAW,GAAG,OAAO,GAAG,SAAS,CAAC;IACtE,QAAQ,EAAE,OAAO,EAAE,CAAC;IACpB,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,EAAE,MAAM,IAAI,CAAC;IACtB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC;CAC5B;AAED,MAAM,WAAW,sBAAsB;IACrC,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,wBAAwB,CAAC;IACrC,YAAY,CAAC,EAAE,CAAC,KAAK,EAAE,KAAK,KAAK,IAAI,CAAC;IACtC,MAAM,EAAE,OAAO,CAAC;CACjB;AAED,qBAAa,eAAe;IAC1B,OAAO,CAAC,SAAS,CAAuC;IACxD,OAAO,CAAC,0BAA0B,CAAwC;IAC1E,OAAO,CAAC,oBAAoB,CAAwC;IAEpE,OAAO,CAAC,OAAO,CAAS;IACxB,OAAO,CAAC,SAAS,CAAC,CAA2B;IAC7C,OAAO,CAAC,YAAY,CAAC,CAAyB;IAC9C,OAAO,CAAC,SAAS,CAAY;IAC7B,OAAO,CAAC,MAAM,CAAU;gBAEZ,SAAS,EAAE,SAAS,EAAE,OAAO,EAAE,sBAAsB;IAQjE,OAAO,KAAK,oBAAoB,GAE/B;IAED;;OAEG;IACG,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;IA+BjC;;OAEG;IACH,OAAO,CAAC,8BAA8B;IAWtC;;OAEG;IACG,kBAAkB,IAAI,OAAO,CAAC,qBAAqB,EAAE,CAAC;IAY5D;;OAEG;IACH,iBAAiB,IAAI,qBAAqB,EAAE;IAS5C;;OAEG;IACG,YAAY,CAAC,IAAI,EAAE,MAAM;IAK/B;;OAEG;IACG,cAAc,CAClB,aAAa,EAAE,qBAAqB,EACpC,UAAU,EAAE;QACV,WAAW,EAAE,MAAM,CAAC;QACpB,MAAM,EAAE,MAAM,CAAC;QACf,aAAa,EAAE,MAAM,CAAC;QACtB,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;QACxB,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,MAAM,CAAC,EAAE,OAAO,CAAC;QACjB,sBAAsB,CAAC,EAAE,cAAc,CAAC;KACzC,EACD,eAAe,CAAC,EAAE,OAAO,EACzB,QAAQ,CAAC,EAAE,MAAM,IAAI,GACpB,OAAO,CAAC,gBAAgB,CAAC;IAwG5B;;;OAGG;IACG,SAAS,CACb,YAAY,EAAE,MAAM,EACpB,QAAQ,EAAE,OAAO,EAAE,EACnB,UAAU,EAAE;QACV,WAAW,EAAE,MAAM,CAAC;QACpB,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;QACxB,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,sBAAsB,CAAC,EAAE,cAAc,CAAC;KACzC,EACD,QAAQ,CAAC,EAAE,MAAM,IAAI,GACpB,OAAO,CAAC,gBAAgB,CAAC;IAuB5B;;;;;OAKG;IACG,YAAY,CAChB,QAAQ,EAAE,gBAAgB,EAC1B,MAAM,EAAE,MAAM,EACd,WAAW,CAAC,EAAE,WAAW,EACzB,eAAe,CAAC,EAAE,OAAO,GACxB,OAAO,CAAC,MAAM,CAAC;IAgFZ,kBAAkB,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;YA6C/C,eAAe;IAuH7B;;OAEG;IACH,WAAW,CAAC,UAAU,EAAE,MAAM,GAAG,gBAAgB,GAAG,IAAI;IAIxD;;OAEG;IACH,oBAAoB,CAClB,UAAU,EAAE,MAAM,EAClB,MAAM,EAAE,gBAAgB,CAAC,QAAQ,CAAC,GACjC,IAAI;IAOP;;OAEG;IACH,oBAAoB,CAAC,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,IAAI;IAOhE;;OAEG;IACH,eAAe,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI;IAazC;;OAEG;IACH,kBAAkB,IAAI,gBAAgB,EAAE;IAOxC;;OAEG;IACH,OAAO,IAAI,IAAI;IAIf;;;OAGG;IACH,OAAO,CAAC,uBAAuB;CAgGhC"}

package/dist/managers/subagentManager.js

@@ -11,6 +11,7 @@ import { logger } from "../utils/globalLogger.js";
 export class SubagentManager {
     constructor(container, options) {
         this.instances = new Map();
+        this.subagentPermissionManagers = new Map();
         this.cachedConfigurations = null;
         this.container = container;
         this.workdir = options.workdir;
@@ -26,6 +27,41 @@ export class SubagentManager {
      */
     async initialize() {
         await this.loadConfigurations();
+        // Hook into parent PermissionManager's update methods to propagate rules to subagents
+        const parentPm = this.container.get("PermissionManager");
+        if (parentPm &&
+            typeof parentPm.updateAllowedRules === "function" &&
+            typeof parentPm.updateDeniedRules === "function" &&
+            typeof parentPm.updateAdditionalDirectories === "function") {
+            const origUpdateAllowed = parentPm.updateAllowedRules.bind(parentPm);
+            const origUpdateDenied = parentPm.updateDeniedRules.bind(parentPm);
+            const origUpdateDirs = parentPm.updateAdditionalDirectories.bind(parentPm);
+            parentPm.updateAllowedRules = (rules) => {
+                origUpdateAllowed(rules);
+                this.syncPermissionRulesToSubagents();
+            };
+            parentPm.updateDeniedRules = (rules) => {
+                origUpdateDenied(rules);
+                this.syncPermissionRulesToSubagents();
+            };
+            parentPm.updateAdditionalDirectories = (directories) => {
+                origUpdateDirs(directories);
+                this.syncPermissionRulesToSubagents();
+            };
+        }
+    }
+    /**
+     * Sync parent permission rules to all running subagents
+     */
+    syncPermissionRulesToSubagents() {
+        const parentPm = this.container.get("PermissionManager");
+        if (!parentPm)
+            return;
+        for (const [, pm] of this.subagentPermissionManagers) {
+            pm.updateAllowedRules(parentPm.getAllowedRules());
+            pm.updateDeniedRules(parentPm.getDeniedRules());
+            pm.updateAdditionalDirectories(parentPm.getAdditionalDirectories());
+        }
     }
     /**
      * Load all available subagent configurations and cache them
@@ -69,7 +105,8 @@ export class SubagentManager {
         const parentPermissionManager = this.container.get("PermissionManager");
         const subagentPermissionManager = new PermissionManager(subagentContainer, {
             workdir: this.workdir,
-            configuredPermissionMode: parentPermissionManager?.getConfiguredPermissionMode(),
+            configuredPermissionMode: parameters.permissionModeOverride ??
+                parentPermissionManager?.getConfiguredPermissionMode(),
             allowedRules: parentPermissionManager?.getAllowedRules(),
             deniedRules: parentPermissionManager?.getDeniedRules(),
             instanceAllowedRules: parentPermissionManager?.getInstanceAllowedRules?.(),
@@ -82,6 +119,8 @@ export class SubagentManager {
             planFilePath: parentPermissionManager?.getPlanFilePath(),
         });
         subagentContainer.register("PermissionManager", subagentPermissionManager);
+        // Track this subagent's PermissionManager for rule sync
+        this.subagentPermissionManagers.set(subagentId, subagentPermissionManager);
         // Add temporary permission rules if provided
         if (parameters.allowedTools) {
             logger.debug(`Adding ${parameters.allowedTools.length} temporary permission rules to subagent ${subagentId}`, { rules: parameters.allowedTools });
@@ -394,6 +433,7 @@ export class SubagentManager {
                 instance.status === "error" ||
                 instance.status === "aborted")) {
             this.instances.delete(subagentId);
+            this.subagentPermissionManagers.delete(subagentId);
         }
     }
     /**

package/dist/services/autoMemoryService.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"autoMemoryService.d.ts","sourceRoot":"","sources":["../../src/services/autoMemoryService.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAUlD;;;GAGG;AACH,qBAAa,iBAAiB;IAIhB,OAAO,CAAC,SAAS;IAH7B,OAAO,CAAC,mBAAmB,CAAuB;IAClD,OAAO,CAAC,wBAAwB,CAAa;gBAEzB,SAAS,EAAE,SAAS;IAExC,OAAO,KAAK,cAAc,GAEzB;IAED,OAAO,KAAK,eAAe,GAE1B;IAED,OAAO,KAAK,aAAa,GAExB;IAED,OAAO,KAAK,oBAAoB,GAE/B;IAED;;OAEG;IACG,SAAS,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAqE/C;;OAEG;YACW,aAAa;CAgE5B"}
+{"version":3,"file":"autoMemoryService.d.ts","sourceRoot":"","sources":["../../src/services/autoMemoryService.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAUlD;;;GAGG;AACH,qBAAa,iBAAiB;IAIhB,OAAO,CAAC,SAAS;IAH7B,OAAO,CAAC,mBAAmB,CAAuB;IAClD,OAAO,CAAC,wBAAwB,CAAa;gBAEzB,SAAS,EAAE,SAAS;IAExC,OAAO,KAAK,cAAc,GAEzB;IAED,OAAO,KAAK,eAAe,GAE1B;IAED,OAAO,KAAK,aAAa,GAExB;IAED,OAAO,KAAK,oBAAoB,GAE/B;IAED;;OAEG;IACG,SAAS,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAqE/C;;OAEG;YACW,aAAa;CAiE5B"}

package/dist/services/autoMemoryService.js

@@ -125,6 +125,7 @@ export class AutoMemoryService {
                 `Edit(${memoryDir}/**/*)`,
             ],
             model: "fastModel", // Use fast model for background tasks to reduce latency and cost
+            permissionModeOverride: "default", // Force default mode to prevent acceptEdits bypass
         });
         const prompt = buildAutoMemoryExtractionPrompt(newMessageCount, existingMemoriesManifest);
         // Execute in background so it doesn't block the main conversation flow

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "wave-agent-sdk",
-  "version": "0.13.1",
+  "version": "0.13.2",
   "description": "SDK for building AI-powered development tools and agents",
   "keywords": [
     "ai",

package/src/managers/subagentManager.ts

@@ -21,6 +21,7 @@ import {
 
 import { Container } from "../utils/container.js";
 import type { PermissionManager } from "./permissionManager.js";
+import type { PermissionMode } from "../types/permissions.js";
 import { ConfigurationService } from "../services/configurationService.js";
 
 export interface SubagentManagerCallbacks {
@@ -85,6 +86,7 @@ export interface SubagentManagerOptions {
 
 export class SubagentManager {
   private instances = new Map<string, SubagentInstance>();
+  private subagentPermissionManagers = new Map<string, PermissionManager>();
   private cachedConfigurations: SubagentConfiguration[] | null = null;
 
   private workdir: string;
@@ -110,6 +112,47 @@ export class SubagentManager {
    */
   async initialize(): Promise<void> {
     await this.loadConfigurations();
+
+    // Hook into parent PermissionManager's update methods to propagate rules to subagents
+    const parentPm = this.container.get<PermissionManager>("PermissionManager");
+    if (
+      parentPm &&
+      typeof parentPm.updateAllowedRules === "function" &&
+      typeof parentPm.updateDeniedRules === "function" &&
+      typeof parentPm.updateAdditionalDirectories === "function"
+    ) {
+      const origUpdateAllowed = parentPm.updateAllowedRules.bind(parentPm);
+      const origUpdateDenied = parentPm.updateDeniedRules.bind(parentPm);
+      const origUpdateDirs =
+        parentPm.updateAdditionalDirectories.bind(parentPm);
+
+      parentPm.updateAllowedRules = (rules: string[]) => {
+        origUpdateAllowed(rules);
+        this.syncPermissionRulesToSubagents();
+      };
+      parentPm.updateDeniedRules = (rules: string[]) => {
+        origUpdateDenied(rules);
+        this.syncPermissionRulesToSubagents();
+      };
+      parentPm.updateAdditionalDirectories = (directories: string[]) => {
+        origUpdateDirs(directories);
+        this.syncPermissionRulesToSubagents();
+      };
+    }
+  }
+
+  /**
+   * Sync parent permission rules to all running subagents
+   */
+  private syncPermissionRulesToSubagents(): void {
+    const parentPm = this.container.get<PermissionManager>("PermissionManager");
+    if (!parentPm) return;
+
+    for (const [, pm] of this.subagentPermissionManagers) {
+      pm.updateAllowedRules(parentPm.getAllowedRules());
+      pm.updateDeniedRules(parentPm.getDeniedRules());
+      pm.updateAdditionalDirectories(parentPm.getAdditionalDirectories());
+    }
   }
 
   /**
@@ -159,6 +202,7 @@ export class SubagentManager {
       allowedTools?: string[];
       model?: string;
       stream?: boolean;
+      permissionModeOverride?: PermissionMode;
     },
     runInBackground?: boolean,
     onUpdate?: () => void,
@@ -183,6 +227,7 @@ export class SubagentManager {
     const subagentPermissionManager = new PermissionManager(subagentContainer, {
       workdir: this.workdir,
       configuredPermissionMode:
+        parameters.permissionModeOverride ??
         parentPermissionManager?.getConfiguredPermissionMode(),
       allowedRules: parentPermissionManager?.getAllowedRules(),
       deniedRules: parentPermissionManager?.getDeniedRules(),
@@ -200,6 +245,9 @@ export class SubagentManager {
     });
     subagentContainer.register("PermissionManager", subagentPermissionManager);
 
+    // Track this subagent's PermissionManager for rule sync
+    this.subagentPermissionManagers.set(subagentId, subagentPermissionManager);
+
     // Add temporary permission rules if provided
     if (parameters.allowedTools) {
       logger.debug(
@@ -273,6 +321,7 @@ export class SubagentManager {
       description: string;
       allowedTools?: string[];
       model?: string;
+      permissionModeOverride?: PermissionMode;
     },
     onUpdate?: () => void,
   ): Promise<SubagentInstance> {
@@ -595,6 +644,7 @@ export class SubagentManager {
         instance.status === "aborted")
     ) {
       this.instances.delete(subagentId);
+      this.subagentPermissionManagers.delete(subagentId);
     }
   }
 

package/src/services/autoMemoryService.ts

@@ -157,6 +157,7 @@ export class AutoMemoryService {
           `Edit(${memoryDir}/**/*)`,
         ],
         model: "fastModel", // Use fast model for background tasks to reduce latency and cost
+        permissionModeOverride: "default", // Force default mode to prevent acceptEdits bypass
       },
     );