@integrity-labs/agt-cli 0.28.788 → 0.28.790

package/dist/bin/agt.js

@@ -40,12 +40,12 @@ import {
   success,
   table,
   warn
-} from "../chunk-3YXKR5EE.js";
+} from "../chunk-R54PIXWM.js";
 import {
   getProjectDir,
   isSessionResumeDisabled,
   readDirectChatSessionState
-} from "../chunk-FHIBQZEN.js";
+} from "../chunk-6BD4IUWX.js";
 import {
   AnchorSessionClient,
   CHANNEL_REGISTRY,
@@ -79,7 +79,7 @@ import {
   serializeManifestForSlackCli,
   sessionFileExists,
   sessionTranscriptDir
-} from "../chunk-I6NTKEXA.js";
+} from "../chunk-RDPAELV2.js";
 import "../chunk-XWVM4KPK.js";
 
 // src/bin/agt.ts
@@ -5467,7 +5467,7 @@ import { execFileSync, execSync } from "child_process";
 import { existsSync as existsSync11, realpathSync as realpathSync2 } from "fs";
 import chalk18 from "chalk";
 import ora16 from "ora";
-var cliVersion = true ? "0.28.788" : "dev";
+var cliVersion = true ? "0.28.790" : "dev";
 async function fetchLatestVersion() {
   const host2 = getHost();
   if (!host2) return null;
@@ -6658,7 +6658,7 @@ function handleError(err) {
 }
 
 // src/bin/agt.ts
-var cliVersion2 = true ? "0.28.788" : "dev";
+var cliVersion2 = true ? "0.28.790" : "dev";
 var program = new Command();
 program.name("agt").description("Augmented CLI \u2014 agent provisioning and management").version(cliVersion2).option("--json", "Emit machine-readable JSON output (suppress spinners and colors)").option("--skip-update-check", "Skip the automatic update check on startup");
 program.hook("preAction", async (thisCommand, actionCommand) => {

package/dist/{chunk-FHIBQZEN.js → chunk-6BD4IUWX.js}

@@ -18,7 +18,7 @@ import {
   rotateDailySession,
   sessionFileExists,
   todayLocalIso
-} from "./chunk-I6NTKEXA.js";
+} from "./chunk-RDPAELV2.js";
 import {
   reapOrphanChannelMcps
 } from "./chunk-XWVM4KPK.js";
@@ -182,8 +182,20 @@ function sanitizeMcpJson(mcpConfigPath, apiHost) {
 
 // src/lib/claude-tools.ts
 var BASE_TOOLS = ["Bash", "Read", "Write", "Edit", "Grep", "Glob", "Agent", "Skill", "ToolSearch"];
-function buildAllowedTools(mcpServerNames) {
-  return [...mcpWildcardsForServers(mcpServerNames), ...BASE_TOOLS].join(",");
+var UNREMOVABLE_TOOLS = ["Agent", "Skill", "ToolSearch"];
+function builtinToolsForPolicy(policy) {
+  if (!policy) return null;
+  const removable = new Set(policy.remove);
+  for (const keep of UNREMOVABLE_TOOLS) removable.delete(keep);
+  if (removable.size === 0) return null;
+  const kept = BASE_TOOLS.filter((t) => !removable.has(t));
+  return kept.join(",");
+}
+function buildAllowedTools(mcpServerNames, policy) {
+  const removable = new Set(policy?.remove ?? []);
+  for (const keep of UNREMOVABLE_TOOLS) removable.delete(keep);
+  const builtins = BASE_TOOLS.filter((t) => !removable.has(t));
+  return [...mcpWildcardsForServers(mcpServerNames), ...builtins].join(",");
 }
 
 // src/lib/mcp-env-probe.ts
@@ -4177,7 +4189,9 @@ function spawnSession(config, session) {
     args.push("--strict-mcp-config");
     args.push("--name", tmuxSession);
     const mcpServerNames = collectMcpServerNames(mcpConfigPath);
-    args.push("--allowedTools", buildAllowedTools(mcpServerNames));
+    args.push("--allowedTools", buildAllowedTools(mcpServerNames, config.toolPolicy));
+    const builtinTools = builtinToolsForPolicy(config.toolPolicy);
+    if (builtinTools !== null) args.push("--tools", builtinTools);
     const initPrompt = resuming ? "" : 'You are now online. Say "Ready." and wait for incoming messages. Do not run any tools or load any data until a message arrives.';
     const claudeBin = resolveClaudeBinary();
     const claudeArgsJoined = args.map((a) => a.includes(" ") || a.includes("*") ? JSON.stringify(a) : a).join(" ");
@@ -5141,4 +5155,4 @@ export {
   stopAllSessionsAndWait,
   getProjectDir
 };
-//# sourceMappingURL=chunk-FHIBQZEN.js.map
+//# sourceMappingURL=chunk-6BD4IUWX.js.map