Subagent escalating permissions

Description

When a agent calls a subagent to do a task it requires a tool that the subagent is explicity denied from using, the subagent is able to utilize the denied tool

Plugins

No response

OpenCode version

1.18.7

Steps to reproduce

Following the steps from Opencode docs, add a subagent such as

# ~/.config/opencode/agents/tester.md 
--- 
description: Reviews changes without modifying files
mode: subagent
model: "code"
color: "#ff6b6b"
steps: 8
permissions:
  - action: edit
    resource: "*"
    effect: deny
  - action: shell
    resource: "*"
    effect: deny
  - action: write
    resource: "*"
    effect: deny
---

Review for correctness, security, regressions, and missing tests.
List findings in severity order with file and line references.

Tell the main agent to modify a file using the subagent.
When subagent is called it will have the ability to use the edit tool which is denied.

Screenshot and/or share link

1. Main Agent calls subagent to edit file

2. Subagent is able to edit file when permissions for edit are set to deny

Operating System

MacOs

Terminal

No response