From 09e367a06e9303035c9ec76c3b530bdb09769641 Mon Sep 17 00:00:00 2001
From: Avi-Akeyless <121791719+Avi-Akeyless@users.noreply.github.com>
Date: Sun, 11 Oct 2026 11:33:24 +0300
Subject: [PATCH] Update docs-agent.yml

---
 .github/workflows/docs-agent.yml | 10 ++++++++++
 1 file changed, 10 insertions(+)

diff --git a/.github/workflows/docs-agent.yml b/.github/workflows/docs-agent.yml
index d2a4fae8e..3f45b86e2 100644
--- a/.github/workflows/docs-agent.yml
+++ b/.github/workflows/docs-agent.yml
@@ -301,7 +301,17 @@ jobs:
           # what it actually did and what its permission denials were.
           # Turn this back off once we understand what happened.
           show_full_output: true
+          # --disallowedTools "Task" blocks Claude from spawning a background
+          # subagent (e.g. an "Explore" agent) to do its research. This run
+          # is a single one-shot, non-interactive SDK call: if Claude hands
+          # off work to a background subagent and ends its own turn waiting
+          # on it, there is no live session left for that subagent's eventual
+          # completion to be delivered back into -- the job just ends with
+          # "success" and nothing done. Disallowing Task forces all research
+          # to happen inline (Grep/Glob/Read) within the one turn sequence
+          # Claude is already running, so it actually finishes the work.
           claude_args: >-
             --allowedTools "Bash,Edit,Write,Read,Glob,Grep"
+            --disallowedTools "Task"
             --max-turns 40
             --model claude-sonnet-5