@algosuite/vo-mcp 0.2.0-beta.70 → 0.2.0-beta.71

package/dist/agent-auth-probe-cli.mjs

@@ -300,15 +300,21 @@ function normalizeClaudePermissionMode(value) {
   }
   return normalized;
 }
-function buildClaudeArgs({ permissionMode = DEFAULT_PERMISSION_MODE, maxTurns, model, effort, maxBudgetUsd, researchHarness = false, env = process.env } = {}) {
+function buildClaudeArgs({ permissionMode = DEFAULT_PERMISSION_MODE, maxTurns, model, effort, maxBudgetUsd, researchHarness = false, toolPolicy = "default", env = process.env } = {}) {
   const effectivePermissionMode = normalizeClaudePermissionMode(permissionMode);
-  const noWeb = String(env?.VO_CODE_RUNNER_NO_WEB ?? "").trim() === "1";
+  if (!["default", "skill_readonly", "frozen_inputs_only"].includes(toolPolicy)) {
+    throw new Error(`unsupported Claude tool policy "${toolPolicy}"`);
+  }
+  const frozenInputsOnly = toolPolicy === "frozen_inputs_only";
+  const skillReadonly = toolPolicy === "skill_readonly";
+  const restrictedSkill = frozenInputsOnly || skillReadonly;
+  const noWeb = frozenInputsOnly || String(env?.VO_CODE_RUNNER_NO_WEB ?? "").trim() === "1";
   const research = noWeb ? [] : VO_RESEARCH_TOOLS;
   const noWorkflow = noWeb || String(env?.VO_CODE_RUNNER_NO_WORKFLOW ?? "").trim() === "1";
-  const workflow = researchHarness === true && !noWorkflow ? VO_WORKFLOW_TOOLS : [];
-  const noConsensus = String(env?.VO_CODE_RUNNER_NO_CONSENSUS ?? "").trim() === "1";
+  const workflow = !restrictedSkill && researchHarness === true && !noWorkflow ? VO_WORKFLOW_TOOLS : [];
+  const noConsensus = frozenInputsOnly || String(env?.VO_CODE_RUNNER_NO_CONSENSUS ?? "").trim() === "1";
   const consensus = noConsensus ? [] : VO_CONSENSUS_TOOLS;
-  const baseTools = effectivePermissionMode === DEFAULT_PERMISSION_MODE ? [VO_SESSION_STATE_TOOL, VO_HEADLESS_PNPM_TOOL, VO_HEADLESS_PNPM_FROM_DIR_TOOL] : [VO_SESSION_STATE_TOOL];
+  const baseTools = restrictedSkill ? [] : effectivePermissionMode === DEFAULT_PERMISSION_MODE ? [VO_SESSION_STATE_TOOL, VO_HEADLESS_PNPM_TOOL, VO_HEADLESS_PNPM_FROM_DIR_TOOL] : [VO_SESSION_STATE_TOOL];
   const allowedTools = [...baseTools, ...consensus, ...research, ...workflow].join(",");
   const args = [
     "-p",
@@ -320,6 +326,21 @@ function buildClaudeArgs({ permissionMode = DEFAULT_PERMISSION_MODE, maxTurns, m
     "--allowedTools",
     allowedTools
   ];
+  if (restrictedSkill) {
+    const builtInTools = skillReadonly ? research.join(",") : "";
+    args.push(
+      "--tools",
+      builtInTools,
+      "--disable-slash-commands",
+      "--no-chrome",
+      "--no-session-persistence",
+      "--permission-prompts",
+      "none"
+    );
+  }
+  if (frozenInputsOnly) {
+    args.push("--strict-mcp-config", "--safe-mode");
+  }
   if (Number.isInteger(maxTurns) && maxTurns > 0) {
     args.push("--max-turns", String(maxTurns));
   }
@@ -332,7 +353,9 @@ function buildClaudeArgs({ permissionMode = DEFAULT_PERMISSION_MODE, maxTurns, m
   if (typeof maxBudgetUsd === "number" && maxBudgetUsd > 0) {
     args.push("--max-budget-usd", String(maxBudgetUsd));
   }
-  args.push(...context7McpArgs(env));
+  if (!restrictedSkill) {
+    args.push(...context7McpArgs(env));
+  }
   return args;
 }
 
@@ -624,8 +647,8 @@ var ClaudeRunner = class {
   get binary() {
     return "claude";
   }
-  buildArgs({ permissionMode, maxTurns, model, effort, maxBudgetUsd, researchHarness } = {}) {
-    return buildClaudeArgs({ permissionMode, maxTurns, model, effort, maxBudgetUsd, researchHarness });
+  buildArgs({ permissionMode, maxTurns, model, effort, maxBudgetUsd, researchHarness, toolPolicy } = {}) {
+    return buildClaudeArgs({ permissionMode, maxTurns, model, effort, maxBudgetUsd, researchHarness, toolPolicy });
   }
   parseEvent(line) {
     return parseStreamEvent(line);