@cohortapp/agent-sdk 2.18.17 → 2.18.18

package/lib/runtime/adapter.mjs

@@ -239,6 +239,19 @@ export function sessionArgs(i = {}) {
     : ["--session-id", String(i.sessionId)];
 }
 
+/**
+ * Argv for a lane whose whole job is text in, JSON out (capture, reflect,
+ * curator). The child gets NO tools and NO MCP servers: it reads a transcript
+ * or a memory set, and anything in that text that reads like an instruction
+ * ("merge the PR", "run this") must stay text. A tool-bearing child would
+ * inherit the seat's permission mode and could act on it. The parent parses
+ * the child's stdout, so nothing the lane needs is lost.
+ *
+ * @param {{model: string}} i - the lane input.
+ * @returns {string[]} the claude argv.
+ */
+const TEXT_ONLY_ARGV = (i) => ["--print", "--model", i.model, "--strict-mcp-config", "--tools", ""];
+
 const LANES = Object.freeze({
   dispatcher: {
     posture: "stock-oauth", stdin: false, retarget: true,
@@ -270,15 +283,15 @@ const LANES = Object.freeze({
   },
   capture: {
     posture: "path", stdin: true, retarget: false, collectiveChild: true,
-    argv: (i, x) => ["--print", "--model", i.model, ...x.mcp],
+    argv: (i) => TEXT_ONLY_ARGV(i),
   },
   reflect: {
     posture: "path", stdin: true, retarget: false, collectiveChild: true,
-    argv: (i, x) => ["--print", "--model", i.model, ...x.mcp],
+    argv: (i) => TEXT_ONLY_ARGV(i),
   },
   curator: {
     posture: "path", stdin: true, retarget: false, collectiveChild: true,
-    argv: (i, x) => ["--print", "--model", i.model, ...x.mcp],
+    argv: (i) => TEXT_ONLY_ARGV(i),
   },
   enrich: {
     posture: "inherit", stdin: false, retarget: false,
@@ -490,7 +503,7 @@ export const ENGINE_RUN_FLAGS = Object.freeze([
   "-p", "--print", "--output-format", "--model", "--session-id", "--resume", "--max-turns", "--append-system-prompt",
   // W2-D: MCP, permissions, settings.
   "--mcp-config", "--strict-mcp-config", "--permission-mode", "--dangerously-skip-permissions",
-  "--allowedTools", "--disallowedTools", "--settings",
+  "--allowedTools", "--disallowedTools", "--settings", "--tools",
   // W3-G (CF-45): the router knobs and the daemon's bare mode.
   "--add-dir", "--plugin-dir", "--effort", "--agents", "--bare",
   // W4-E1 (row 24): the per-session spend cap.
@@ -516,6 +529,7 @@ const CLAUDE_TO_ENGINE = Object.freeze({
   "--permission-mode": { flag: "--permission-mode", value: true },
   "--allowedTools": { flag: "--allowedTools", value: true },
   "--disallowedTools": { flag: "--disallowedTools", value: true },
+  "--tools": { flag: "--tools", value: true },
   "--settings": { flag: "--settings", value: true },
   "--add-dir": { flag: "--add-dir", value: true },
   "--plugin-dir": { flag: "--plugin-dir", value: true },

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cohortapp/agent-sdk",
-  "version": "2.18.17",
+  "version": "2.18.18",
   "description": "Cohort Agent SDK — autonomous AI colleague runtime. Deploy senior AI colleagues on dedicated Mac minis, wired to the Cohort operating surface.",
   "type": "module",
   "bin": {