Struct SubAgentPermissions 

pub struct SubAgentPermissions {
    pub secrets: Vec<String>,
    pub max_turns: u32,
    pub background: bool,
    pub timeout_secs: u64,
    pub ttl_secs: u64,
    pub permission_mode: PermissionMode,
    pub max_history_messages: usize,
    pub worktree: bool,
}

Runtime permission settings for a sub-agent.

All fields have defaults that apply when the permissions section is absent from the frontmatter: 20 turns, 600 s timeout, foreground execution, default permission mode.

Fields

secrets: Vec<String>

Vault secret keys this agent is allowed to request at runtime.

max_turns: u32

Maximum number of LLM turns before the agent is force-stopped.

background: bool

When true, the agent runs independently of the parent cancellation token.

timeout_secs: u64

Hard wall-clock timeout in seconds for the entire agent session.

ttl_secs: u64

Time-to-live in seconds for permission grants issued to this agent.

permission_mode: PermissionMode

Controls tool access philosophy (Default, Plan, BypassPermissions).

max_history_messages: usize

Maximum number of messages retained in the in-memory history buffer.

When the live messages vec exceeds this limit the oldest non-system messages are evicted from the front, keeping the system message intact. Set to 0 to disable eviction entirely (not recommended for long-running agents).

worktree: bool

When true, the agent runs inside a dedicated git worktree (INV-1/INV-3).

Requires worktree.enabled = true in the global config and a non-None bg_isolation setting. When the worktree subsystem is disabled, this field is silently ignored.

Trait Implementations

impl Clone for SubAgentPermissions

fn clone(&self) -> SubAgentPermissions

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for SubAgentPermissions

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for SubAgentPermissions

fn default() -> Self

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for SubAgentPermissions

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Serialize for SubAgentPermissions

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.