Task permission patterns substring-match agent names (general blocks general-small) #33276

Task permission patterns match as substrings instead of exact/glob matches.

The permission rule {"permission":"task","pattern":"general","action":"deny"} intended to block only the general subagent also blocks general-small because the pattern matcher treats general as a substring match.

Expected: Patterns without wildcards should be exact matches (general matches only general, not general-small).

Actual: general matches any agent name containing "general" as a substring.

Workaround: Renaming the custom agent to f-exec avoids the substring collision.