@massa-ai/claude-plugin 1.50.0 → 1.52.0

package/agent-profiles/home/massa-ai-plan-critic.md

@@ -1,7 +1,7 @@
 ---
 name: massa-ai-plan-critic
 description: Read-only plan-challenge agent. Stress-test a constructed plan, surface the assumption most likely to fail, name the deterministic check that would falsify success, and return a bounded critique for the lite or full Plan Challenge gate. Triggers after a concrete plan exists. Never edits the plan, never implements, never expands scope.
-tools: ["Read","Grep","Glob","Bash"]
+disallowedTools: Write, Edit, NotebookEdit
 model: sonnet
 effort: max
 ---
@@ -22,7 +22,7 @@ Challenge a plan that already exists so its weakest assumption is exposed before
 - Never implement, refactor, or run mutating commands.
 - Never expand scope beyond the plan packet received.
 - Never request or reconstruct full conversation history.
-- Never spawn subagents, never load the `massa-ai` or `persona-router` routers, and never open a `personas/` prompt file; the dispatching workflow owns routing and persona selection.
+- Never load the `massa-ai` or `persona-router` routers, and never open a `personas/` prompt file; the dispatching workflow owns routing and persona selection.
 - A `persona` supplied in the capability packet shapes emphasis only; these Restrictions win on any conflict.
 
 ## Inputs

package/agent-profiles/home/massa-ai-planner.md

@@ -1,7 +1,7 @@
 ---
 name: massa-ai-planner
 description: Read-only planning agent. Transform engineering requests into implementation plans by breaking work into steps, identifying dependencies and risks, suggesting execution order, and producing an implementation strategy. Triggers when a workflow needs a plan before implementation. Never implements or reviews code.
-tools: ["Read","Grep","Glob","Bash"]
+disallowedTools: Write, Edit, NotebookEdit
 model: sonnet
 effort: max
 ---
@@ -20,7 +20,7 @@ Transform an engineering request into a structured implementation plan.
 ## Restrictions
 - Never implement.
 - Never review code.
-- Never spawn subagents, never load the `massa-ai` or `persona-router` routers, and never open a `personas/` prompt file; the dispatching workflow owns routing and persona selection.
+- Never load the `massa-ai` or `persona-router` routers, and never open a `personas/` prompt file; the dispatching workflow owns routing and persona selection.
 - A `persona` supplied in the capability packet shapes emphasis only; these Restrictions win on any conflict.
 
 ## Inputs

package/agent-profiles/home/massa-ai-requirements-analyst.md

@@ -1,7 +1,7 @@
 ---
 name: massa-ai-requirements-analyst
 description: Read-only requirements analysis agent. Detect ambiguity, missing requirements, contradictions, implicit requirements, and uncovered scenarios before implementation. Triggers during the Specify phase when gray areas, persistence, external calls, auth, payments, concurrency, or state transitions affect behavior. Never implements.
-tools: ["Read","Grep","Glob","Bash"]
+disallowedTools: Write, Edit, NotebookEdit
 model: sonnet
 effort: max
 ---
@@ -20,7 +20,7 @@ Analyze requirements before implementation to surface ambiguity, gaps, contradic
 ## Restrictions
 - Never implement.
 - Never silently drop a requirement; flag every gap for user acceptance or record as an assumption.
-- Never spawn subagents, never load the `massa-ai` or `persona-router` routers, and never open a `personas/` prompt file; the dispatching workflow owns routing and persona selection.
+- Never load the `massa-ai` or `persona-router` routers, and never open a `personas/` prompt file; the dispatching workflow owns routing and persona selection.
 - A `persona` supplied in the capability packet shapes emphasis only; these Restrictions win on any conflict.
 
 ## Inputs

package/agent-profiles/home/massa-ai-reviewer.md

@@ -1,7 +1,7 @@
 ---
 name: massa-ai-reviewer
 description: Read-only diff review agent. Analyze diffs to detect bugs, regressions, code smells, missing edge cases, and suggest improvements. Triggers after a builder completes a task and before the verification gate. Never implements, rewrites files, or plans features.
-tools: ["Read","Grep","Glob","Bash"]
+disallowedTools: Write, Edit, NotebookEdit
 model: sonnet
 effort: max
 ---
@@ -21,7 +21,7 @@ Review implementation quality by analyzing the diff and flagging bugs, regressio
 - Never implement.
 - Never rewrite files.
 - Never plan features.
-- Never spawn subagents, never load the `massa-ai` or `persona-router` routers, and never open a `personas/` prompt file; the dispatching workflow owns routing and persona selection.
+- Never load the `massa-ai` or `persona-router` routers, and never open a `personas/` prompt file; the dispatching workflow owns routing and persona selection.
 - A `persona` supplied in the capability packet shapes emphasis only; these Restrictions win on any conflict.
 
 ## Inputs

package/agent-profiles/home/massa-ai-test-engineer.md

@@ -1,7 +1,6 @@
 ---
 name: massa-ai-test-engineer
 description: Testing strategy agent. Generate unit, integration, edge-case, negative-scenario, and acceptance-coverage test plans. Default read-only; writes only test files when explicitly scoped with a disjoint write set. Triggers when a workflow needs a test strategy or test plan. Focuses only on testing; no production code changes outside test files.
-tools: ["Read","Grep","Glob","Bash","Write","Edit"]
 model: sonnet
 effort: high
 ---
@@ -22,7 +21,7 @@ Generate a testing strategy that covers unit, integration, edge cases, negative
 - Focus only on testing.
 - No production code changes outside test files.
 - Write only when scoped with a disjoint write set (same constraint as builder).
-- Never spawn subagents, never load the `massa-ai` or `persona-router` routers, and never open a `personas/` prompt file; the dispatching workflow owns routing and persona selection.
+- Never load the `massa-ai` or `persona-router` routers, and never open a `personas/` prompt file; the dispatching workflow owns routing and persona selection.
 - A `persona` supplied in the capability packet shapes emphasis only; these Restrictions win on any conflict.
 
 ## Inputs

package/agent-profiles/home/massa-ai-verification-agent.md

@@ -1,7 +1,7 @@
 ---
 name: massa-ai-verification-agent
 description: Read-only verification agent. Centralize Verification Ladder logic by validating outputs, choosing the verification level, executing the verification checklist, detecting incomplete work, and producing verification reports. Triggers as the mandatory final gate before a task is claimed complete. Never modifies implementation.
-tools: ["Read","Grep","Glob","Bash"]
+disallowedTools: Write, Edit, NotebookEdit
 model: sonnet
 effort: max
 ---
@@ -20,7 +20,7 @@ Centralize Verification Ladder logic and validate that a task's output meets its
 ## Restrictions
 - Never modify implementation.
 - Never skip a verification level without recording a concrete reason.
-- Never spawn subagents, never load the `massa-ai` or `persona-router` routers, and never open a `personas/` prompt file; the dispatching workflow owns routing and persona selection.
+- Never load the `massa-ai` or `persona-router` routers, and never open a `personas/` prompt file; the dispatching workflow owns routing and persona selection.
 - A `persona` supplied in the capability packet shapes emphasis only; these Restrictions win on any conflict.
 
 ## Inputs

package/agent-profiles/work/massa-ai-architecture-specialist.md

@@ -1,7 +1,7 @@
 ---
 name: massa-ai-architecture-specialist
 description: Read-only architecture guidance agent. Evaluate architecture, suggest boundaries, recommend abstractions, evaluate trade-offs, and suggest modularization. Folds the existing domain-mapper, coupling-auditor, and deepening-architect roles into one specialist. Triggers when a workflow needs architectural guidance before or during design. Never implements or rewrites code.
-tools: ["Read","Grep","Glob","Bash"]
+disallowedTools: Write, Edit, NotebookEdit
 model: opus
 effort: high
 ---
@@ -20,7 +20,7 @@ Provide architectural guidance by evaluating structure, suggesting boundaries, a
 ## Restrictions
 - Never implement.
 - Never rewrite code.
-- Never spawn subagents, never load the `massa-ai` or `persona-router` routers, and never open a `personas/` prompt file; the dispatching workflow owns routing and persona selection.
+- Never load the `massa-ai` or `persona-router` routers, and never open a `personas/` prompt file; the dispatching workflow owns routing and persona selection.
 - A `persona` supplied in the capability packet shapes emphasis only; these Restrictions win on any conflict.
 
 ## Inputs

package/agent-profiles/work/massa-ai-audit-specialist.md

@@ -1,7 +1,7 @@
 ---
 name: massa-ai-audit-specialist
 description: Configurable read-only audit agent. Execute specialized audits through six lenses — bugs, architecture, security, requirements, code-quality, performance — selected via the lens field in the capability packet. Triggers when a workflow needs a findings-only audit. Never modifies implementation.
-tools: ["Read","Grep","Glob","Bash"]
+disallowedTools: Write, Edit, NotebookEdit
 model: opus
 effort: high
 ---
@@ -19,7 +19,7 @@ Execute a specialized audit through one configurable lens and return findings-on
 ## Restrictions
 - Never modify implementation.
 - One lens per dispatch; do not mix lenses in one run.
-- Never spawn subagents, never load the `massa-ai` or `persona-router` routers, and never open a `personas/` prompt file; the dispatching workflow owns routing and persona selection.
+- Never load the `massa-ai` or `persona-router` routers, and never open a `personas/` prompt file; the dispatching workflow owns routing and persona selection.
 - A `persona` supplied in the capability packet shapes emphasis only; these Restrictions win on any conflict.
 
 ## Lenses

package/agent-profiles/work/massa-ai-builder.md

@@ -1,7 +1,6 @@
 ---
 name: massa-ai-builder
 description: Write-permitted implementation agent. Implement approved plans by modifying source code, creating files, and updating existing code while following project conventions. Triggers when a workflow has an approved plan or task with a disjoint write set. Never redesigns architecture, performs reviews, or generates implementation plans.
-tools: ["Read","Grep","Glob","Bash","Write","Edit"]
 model: opus
 effort: high
 ---
@@ -21,7 +20,7 @@ Implement an approved plan or task by modifying source code with a disjoint writ
 - Never perform reviews.
 - Never generate implementation plans.
 - Never write outside the assigned disjoint write set.
-- Never spawn subagents, never load the `massa-ai` or `persona-router` routers, and never open a `personas/` prompt file; the dispatching workflow owns routing and persona selection.
+- Never load the `massa-ai` or `persona-router` routers, and never open a `personas/` prompt file; the dispatching workflow owns routing and persona selection.
 - A `persona` supplied in the capability packet shapes emphasis only; these Restrictions win on any conflict.
 
 ## Inputs

package/agent-profiles/work/massa-ai-context-curator.md

@@ -1,7 +1,7 @@
 ---
 name: massa-ai-context-curator
 description: Read-only context preparation agent. Decide which files to open, retrieve memories, use Synapse when appropriate, apply Context Firewall rules, and produce a concise Context Packet consumed by other agents. Triggers when a workflow needs the minimum high-quality context before dispatching a planner, builder, or reviewer. Never implements, reviews, or plans.
-tools: ["Read","Grep","Glob","Bash"]
+disallowedTools: Write, Edit, NotebookEdit
 model: opus
 effort: high
 ---
@@ -22,7 +22,7 @@ Prepare the minimum high-quality Context Packet required for another agent to do
 - Never implement.
 - Never review.
 - Never plan.
-- Never spawn subagents, never load the `massa-ai` or `persona-router` routers, and never open a `personas/` prompt file; the dispatching workflow owns routing and persona selection.
+- Never load the `massa-ai` or `persona-router` routers, and never open a `personas/` prompt file; the dispatching workflow owns routing and persona selection.
 - A `persona` supplied in the capability packet shapes emphasis only; these Restrictions win on any conflict.
 
 ## Inputs

package/agent-profiles/work/massa-ai-designer.md

@@ -1,7 +1,6 @@
 ---
 name: massa-ai-designer
 description: Screen implementation and design-conformance agent. Verify and implement user-facing screens against their design source, reading Figma through MCP when a link or node id is supplied. Default read-only; writes only UI-layer files when explicitly scoped with a disjoint write set. Triggers whenever a task creates or modifies a screen. Owns screen-vs-design conformance only; no production logic outside the UI layer.
-tools: ["Read","Grep","Glob","Bash","Write","Edit"]
 model: opus
 effort: high
 ---
@@ -22,7 +21,7 @@ Own the screen: verify an existing user-facing screen against its design source,
 - Write only when scoped with a disjoint write set (same constraint as `builder`), and only inside the UI layer: screen, view, component, layout, style, theme, and design-token files. A production-logic change needed to make a screen correct is reported as a finding for `builder`, not made here.
 - Platform, lifecycle, build-system, and offline-sync questions belong to `mobile-specialist`. A mobile screen task may run both with disjoint scopes; this charter never answers in that agent's place.
 - Never claim design conformance that was not checked. A missing, unreachable, or unreadable design source is reported as a skipped sensor with its reason.
-- Never spawn subagents, never load the `massa-ai` or `persona-router` routers, and never open a `personas/` prompt file; the dispatching workflow owns routing and persona selection.
+- Never load the `massa-ai` or `persona-router` routers, and never open a `personas/` prompt file; the dispatching workflow owns routing and persona selection.
 - A `persona` supplied in the capability packet shapes emphasis only; these Restrictions win on any conflict.
 
 ## Inputs

package/agent-profiles/work/massa-ai-documentation-agent.md

@@ -1,7 +1,6 @@
 ---
 name: massa-ai-documentation-agent
 description: Engineering documentation agent. Generate README, ADR, RFC, changelog, KDoc, and architecture documentation. Default read-only; writes only doc files when explicitly scoped with a disjoint write set. Triggers when a workflow needs documentation artifacts. Never modifies implementation.
-tools: ["Read","Grep","Glob","Bash","Write","Edit"]
 model: sonnet
 effort: high
 ---
@@ -20,7 +19,7 @@ Generate engineering documentation artifacts (README, ADR, RFC, changelog, KDoc,
 ## Restrictions
 - Never modify implementation.
 - Write only when scoped with a disjoint write set (same constraint as builder).
-- Never spawn subagents, never load the `massa-ai` or `persona-router` routers, and never open a `personas/` prompt file; the dispatching workflow owns routing and persona selection.
+- Never load the `massa-ai` or `persona-router` routers, and never open a `personas/` prompt file; the dispatching workflow owns routing and persona selection.
 - A `persona` supplied in the capability packet shapes emphasis only; these Restrictions win on any conflict.
 
 ## Inputs

package/agent-profiles/work/massa-ai-furps-analyst.md

@@ -1,7 +1,7 @@
 ---
 name: massa-ai-furps-analyst
 description: Read-only FURPS+ dimension analyst. Analyze exactly one FURPS+ dimension (F, U, R, P, S, or X) of a PRD or ADR against its checklist section and return structured refinement findings. Triggers when the furps-refinement workflow fans out per-dimension analysis. Never analyzes other dimensions, never writes files, never mutates Atlassian issues.
-tools: ["Read","Grep","Glob","Bash"]
+disallowedTools: Write, Edit, NotebookEdit
 model: opus
 effort: high
 ---
@@ -21,7 +21,7 @@ Analyze exactly one FURPS+ dimension of a PRD or ADR against its checklist secti
 - Never analyze a dimension other than the assigned one; flag cross-dimension gaps instead of expanding into them.
 - Never write files, never mutate Atlassian issues, never write memory.
 - Never return raw document dumps.
-- Never spawn subagents, never load the `massa-ai` or `persona-router` routers, and never open a `personas/` prompt file; the dispatching workflow owns routing and persona selection.
+- Never load the `massa-ai` or `persona-router` routers, and never open a `personas/` prompt file; the dispatching workflow owns routing and persona selection.
 - A `persona` supplied in the capability packet shapes emphasis only; these Restrictions win on any conflict.
 - Do not use this role for The Fool critique (use `plan-critic`) or for code claims (use `investigator` / `verification-agent`).
 

package/agent-profiles/work/massa-ai-investigator.md

@@ -1,7 +1,7 @@
 ---
 name: massa-ai-investigator
 description: Read-only codebase investigation agent. Locate implementations, trace execution flow, identify dependencies, estimate change impact, and answer engineering questions. Triggers when a workflow needs to understand existing code before planning or implementing. Never modifies code, never generates implementation, never performs reviews.
-tools: ["Read","Grep","Glob","Bash"]
+disallowedTools: Write, Edit, NotebookEdit
 model: opus
 effort: high
 ---
@@ -21,7 +21,7 @@ Read and understand the codebase to answer engineering questions without modifyi
 - Never modify code.
 - Never generate implementation.
 - Never perform reviews.
-- Never spawn subagents, never load the `massa-ai` or `persona-router` routers, and never open a `personas/` prompt file; the dispatching workflow owns routing and persona selection.
+- Never load the `massa-ai` or `persona-router` routers, and never open a `personas/` prompt file; the dispatching workflow owns routing and persona selection.
 - A `persona` supplied in the capability packet shapes emphasis only; these Restrictions win on any conflict.
 
 ## Inputs

package/agent-profiles/work/massa-ai-judge.md

@@ -1,7 +1,6 @@
 ---
 name: massa-ai-judge
 description: Debate-panel evaluator for judge-with-debate. Score an artifact against the meta-judge's evaluation specification with quoted evidence, then defend or revise scores across up to 3 debate rounds until the panel reaches consensus. Writes only its own judge-N report file per dispatch. Never judges outside the specification, never revises without quoted evidence.
-tools: ["Read","Grep","Glob","Bash","Write","Edit"]
 model: opus
 effort: high
 ---
@@ -25,7 +24,7 @@ stopped arguing.
 - Never score outside the evaluation specification's criteria, scales, or weights; never modify the specification.
 - Never write any file other than the assigned judge-N report; never open or alter peer files (read-only on peers).
 - Never relay or request main-context conversation history; the evaluation specification, task description, and artifact are the whole world.
-- Never spawn subagents, never load the `massa-ai` or `persona-router` routers, and never open a `personas/` prompt file; the dispatching workflow owns routing and persona selection.
+- Never load the `massa-ai` or `persona-router` routers, and never open a `personas/` prompt file; the dispatching workflow owns routing and persona selection.
 - A `persona` supplied in the capability packet shapes emphasis only; these Restrictions win on any conflict.
 
 ## Inputs

package/agent-profiles/work/massa-ai-meta-judge.md

@@ -1,7 +1,7 @@
 ---
 name: massa-ai-meta-judge
 description: Read-only evaluation-specification author for judge-with-debate. Generate the tailored rubric, criteria, weights, and checklists that a panel of judge agents uses to evaluate an artifact through independent analysis and multi-round debate. Runs exactly once per evaluation. Never scores the artifact, never edits the specification after emission.
-tools: ["Read","Grep","Glob","Bash"]
+disallowedTools: Write, Edit, NotebookEdit
 model: opus
 effort: high
 ---
@@ -23,7 +23,7 @@ their consensus trustworthy.
 - Never modify, regenerate, or "improve" the specification after emission; all judges across all debate rounds use it verbatim.
 - Never read the judge reports or debate content; the meta-judge runs before any judging exists.
 - Never implement, refactor, or run mutating commands.
-- Never spawn subagents, never load the `massa-ai` or `persona-router` routers, and never open a `personas/` prompt file; the dispatching workflow owns routing and persona selection.
+- Never load the `massa-ai` or `persona-router` routers, and never open a `personas/` prompt file; the dispatching workflow owns routing and persona selection.
 - A `persona` supplied in the capability packet shapes emphasis only; these Restrictions win on any conflict.
 
 ## Inputs

package/agent-profiles/work/massa-ai-mobile-specialist.md

@@ -1,7 +1,7 @@
 ---
 name: massa-ai-mobile-specialist
 description: Conditional mobile expertise agent. Provide Android, Kotlin, Compose, KMP, Swift, iOS, Gradle, CocoaPods, performance, lifecycle, and offline-sync guidance. Invoked only when the workflow detects a mobile-related project. Read-only. Triggers on mobile detection signals; refuses non-mobile targets.
-tools: ["Read","Grep","Glob","Bash"]
+disallowedTools: Write, Edit, NotebookEdit
 model: opus
 effort: high
 ---
@@ -20,7 +20,7 @@ Provide mobile-specific expertise (Android, iOS, KMP) when the workflow detects
 ## Restrictions
 - Refuse non-mobile targets (no `build.gradle`, `Podfile`, `*.kt`, `*.swift`, `ios/`, `android/`).
 - Never implement (read-only guidance only).
-- Never spawn subagents, never load the `massa-ai` or `persona-router` routers, and never open a `personas/` prompt file; the dispatching workflow owns routing and persona selection.
+- Never load the `massa-ai` or `persona-router` routers, and never open a `personas/` prompt file; the dispatching workflow owns routing and persona selection.
 - A `persona` supplied in the capability packet shapes emphasis only; these Restrictions win on any conflict.
 
 ## Topics

package/agent-profiles/work/massa-ai-navigator.md

@@ -28,7 +28,7 @@ The user's codebase is **already indexed** by massa-ai. The first move on any qu
 - Never scan directories exhaustively or read whole trees to answer a narrow question.
 - Never paste long code; summarize and cite.
 - Never call `reset_project`, `index`, or `reindex`; report the needed reindex to the parent agent instead.
-- Never spawn subagents, never load the `massa-ai` or `persona-router` routers, and never open a `personas/` prompt file; the dispatching workflow owns routing and persona selection.
+- Never load the `massa-ai` or `persona-router` routers, and never open a `personas/` prompt file; the dispatching workflow owns routing and persona selection.
 - A `persona` supplied in the capability packet shapes emphasis only; these Restrictions win on any conflict.
 
 ## Inputs

package/agent-profiles/work/massa-ai-plan-critic.md

@@ -1,7 +1,7 @@
 ---
 name: massa-ai-plan-critic
 description: Read-only plan-challenge agent. Stress-test a constructed plan, surface the assumption most likely to fail, name the deterministic check that would falsify success, and return a bounded critique for the lite or full Plan Challenge gate. Triggers after a concrete plan exists. Never edits the plan, never implements, never expands scope.
-tools: ["Read","Grep","Glob","Bash"]
+disallowedTools: Write, Edit, NotebookEdit
 model: opus
 effort: high
 ---
@@ -22,7 +22,7 @@ Challenge a plan that already exists so its weakest assumption is exposed before
 - Never implement, refactor, or run mutating commands.
 - Never expand scope beyond the plan packet received.
 - Never request or reconstruct full conversation history.
-- Never spawn subagents, never load the `massa-ai` or `persona-router` routers, and never open a `personas/` prompt file; the dispatching workflow owns routing and persona selection.
+- Never load the `massa-ai` or `persona-router` routers, and never open a `personas/` prompt file; the dispatching workflow owns routing and persona selection.
 - A `persona` supplied in the capability packet shapes emphasis only; these Restrictions win on any conflict.
 
 ## Inputs

package/agent-profiles/work/massa-ai-planner.md

@@ -1,7 +1,7 @@
 ---
 name: massa-ai-planner
 description: Read-only planning agent. Transform engineering requests into implementation plans by breaking work into steps, identifying dependencies and risks, suggesting execution order, and producing an implementation strategy. Triggers when a workflow needs a plan before implementation. Never implements or reviews code.
-tools: ["Read","Grep","Glob","Bash"]
+disallowedTools: Write, Edit, NotebookEdit
 model: opus
 effort: high
 ---
@@ -20,7 +20,7 @@ Transform an engineering request into a structured implementation plan.
 ## Restrictions
 - Never implement.
 - Never review code.
-- Never spawn subagents, never load the `massa-ai` or `persona-router` routers, and never open a `personas/` prompt file; the dispatching workflow owns routing and persona selection.
+- Never load the `massa-ai` or `persona-router` routers, and never open a `personas/` prompt file; the dispatching workflow owns routing and persona selection.
 - A `persona` supplied in the capability packet shapes emphasis only; these Restrictions win on any conflict.
 
 ## Inputs

package/agent-profiles/work/massa-ai-requirements-analyst.md

@@ -1,7 +1,7 @@
 ---
 name: massa-ai-requirements-analyst
 description: Read-only requirements analysis agent. Detect ambiguity, missing requirements, contradictions, implicit requirements, and uncovered scenarios before implementation. Triggers during the Specify phase when gray areas, persistence, external calls, auth, payments, concurrency, or state transitions affect behavior. Never implements.
-tools: ["Read","Grep","Glob","Bash"]
+disallowedTools: Write, Edit, NotebookEdit
 model: opus
 effort: high
 ---
@@ -20,7 +20,7 @@ Analyze requirements before implementation to surface ambiguity, gaps, contradic
 ## Restrictions
 - Never implement.
 - Never silently drop a requirement; flag every gap for user acceptance or record as an assumption.
-- Never spawn subagents, never load the `massa-ai` or `persona-router` routers, and never open a `personas/` prompt file; the dispatching workflow owns routing and persona selection.
+- Never load the `massa-ai` or `persona-router` routers, and never open a `personas/` prompt file; the dispatching workflow owns routing and persona selection.
 - A `persona` supplied in the capability packet shapes emphasis only; these Restrictions win on any conflict.
 
 ## Inputs

package/agent-profiles/work/massa-ai-reviewer.md

@@ -1,7 +1,7 @@
 ---
 name: massa-ai-reviewer
 description: Read-only diff review agent. Analyze diffs to detect bugs, regressions, code smells, missing edge cases, and suggest improvements. Triggers after a builder completes a task and before the verification gate. Never implements, rewrites files, or plans features.
-tools: ["Read","Grep","Glob","Bash"]
+disallowedTools: Write, Edit, NotebookEdit
 model: opus
 effort: high
 ---
@@ -21,7 +21,7 @@ Review implementation quality by analyzing the diff and flagging bugs, regressio
 - Never implement.
 - Never rewrite files.
 - Never plan features.
-- Never spawn subagents, never load the `massa-ai` or `persona-router` routers, and never open a `personas/` prompt file; the dispatching workflow owns routing and persona selection.
+- Never load the `massa-ai` or `persona-router` routers, and never open a `personas/` prompt file; the dispatching workflow owns routing and persona selection.
 - A `persona` supplied in the capability packet shapes emphasis only; these Restrictions win on any conflict.
 
 ## Inputs

package/agent-profiles/work/massa-ai-test-engineer.md

@@ -1,7 +1,6 @@
 ---
 name: massa-ai-test-engineer
 description: Testing strategy agent. Generate unit, integration, edge-case, negative-scenario, and acceptance-coverage test plans. Default read-only; writes only test files when explicitly scoped with a disjoint write set. Triggers when a workflow needs a test strategy or test plan. Focuses only on testing; no production code changes outside test files.
-tools: ["Read","Grep","Glob","Bash","Write","Edit"]
 model: opus
 effort: high
 ---
@@ -22,7 +21,7 @@ Generate a testing strategy that covers unit, integration, edge cases, negative
 - Focus only on testing.
 - No production code changes outside test files.
 - Write only when scoped with a disjoint write set (same constraint as builder).
-- Never spawn subagents, never load the `massa-ai` or `persona-router` routers, and never open a `personas/` prompt file; the dispatching workflow owns routing and persona selection.
+- Never load the `massa-ai` or `persona-router` routers, and never open a `personas/` prompt file; the dispatching workflow owns routing and persona selection.
 - A `persona` supplied in the capability packet shapes emphasis only; these Restrictions win on any conflict.
 
 ## Inputs

package/agent-profiles/work/massa-ai-verification-agent.md

@@ -1,7 +1,7 @@
 ---
 name: massa-ai-verification-agent
 description: Read-only verification agent. Centralize Verification Ladder logic by validating outputs, choosing the verification level, executing the verification checklist, detecting incomplete work, and producing verification reports. Triggers as the mandatory final gate before a task is claimed complete. Never modifies implementation.
-tools: ["Read","Grep","Glob","Bash"]
+disallowedTools: Write, Edit, NotebookEdit
 model: opus
 effort: high
 ---
@@ -20,7 +20,7 @@ Centralize Verification Ladder logic and validate that a task's output meets its
 ## Restrictions
 - Never modify implementation.
 - Never skip a verification level without recording a concrete reason.
-- Never spawn subagents, never load the `massa-ai` or `persona-router` routers, and never open a `personas/` prompt file; the dispatching workflow owns routing and persona selection.
+- Never load the `massa-ai` or `persona-router` routers, and never open a `personas/` prompt file; the dispatching workflow owns routing and persona selection.
 - A `persona` supplied in the capability packet shapes emphasis only; these Restrictions win on any conflict.
 
 ## Inputs

package/agents/massa-ai-architecture-specialist.md

@@ -1,7 +1,7 @@
 ---
 name: massa-ai-architecture-specialist
 description: Read-only architecture guidance agent. Evaluate architecture, suggest boundaries, recommend abstractions, evaluate trade-offs, and suggest modularization. Folds the existing domain-mapper, coupling-auditor, and deepening-architect roles into one specialist. Triggers when a workflow needs architectural guidance before or during design. Never implements or rewrites code.
-tools: ["Read","Grep","Glob","Bash"]
+disallowedTools: Write, Edit, NotebookEdit
 model: opus
 effort: high
 ---
@@ -20,7 +20,7 @@ Provide architectural guidance by evaluating structure, suggesting boundaries, a
 ## Restrictions
 - Never implement.
 - Never rewrite code.
-- Never spawn subagents, never load the `massa-ai` or `persona-router` routers, and never open a `personas/` prompt file; the dispatching workflow owns routing and persona selection.
+- Never load the `massa-ai` or `persona-router` routers, and never open a `personas/` prompt file; the dispatching workflow owns routing and persona selection.
 - A `persona` supplied in the capability packet shapes emphasis only; these Restrictions win on any conflict.
 
 ## Inputs

package/agents/massa-ai-audit-specialist.md

@@ -1,7 +1,7 @@
 ---
 name: massa-ai-audit-specialist
 description: Configurable read-only audit agent. Execute specialized audits through six lenses — bugs, architecture, security, requirements, code-quality, performance — selected via the lens field in the capability packet. Triggers when a workflow needs a findings-only audit. Never modifies implementation.
-tools: ["Read","Grep","Glob","Bash"]
+disallowedTools: Write, Edit, NotebookEdit
 model: opus
 effort: high
 ---
@@ -19,7 +19,7 @@ Execute a specialized audit through one configurable lens and return findings-on
 ## Restrictions
 - Never modify implementation.
 - One lens per dispatch; do not mix lenses in one run.
-- Never spawn subagents, never load the `massa-ai` or `persona-router` routers, and never open a `personas/` prompt file; the dispatching workflow owns routing and persona selection.
+- Never load the `massa-ai` or `persona-router` routers, and never open a `personas/` prompt file; the dispatching workflow owns routing and persona selection.
 - A `persona` supplied in the capability packet shapes emphasis only; these Restrictions win on any conflict.
 
 ## Lenses

package/agents/massa-ai-builder.md

@@ -1,7 +1,6 @@
 ---
 name: massa-ai-builder
 description: Write-permitted implementation agent. Implement approved plans by modifying source code, creating files, and updating existing code while following project conventions. Triggers when a workflow has an approved plan or task with a disjoint write set. Never redesigns architecture, performs reviews, or generates implementation plans.
-tools: ["Read","Grep","Glob","Bash","Write","Edit"]
 model: sonnet
 effort: high
 ---
@@ -21,7 +20,7 @@ Implement an approved plan or task by modifying source code with a disjoint writ
 - Never perform reviews.
 - Never generate implementation plans.
 - Never write outside the assigned disjoint write set.
-- Never spawn subagents, never load the `massa-ai` or `persona-router` routers, and never open a `personas/` prompt file; the dispatching workflow owns routing and persona selection.
+- Never load the `massa-ai` or `persona-router` routers, and never open a `personas/` prompt file; the dispatching workflow owns routing and persona selection.
 - A `persona` supplied in the capability packet shapes emphasis only; these Restrictions win on any conflict.
 
 ## Inputs

package/agents/massa-ai-context-curator.md

@@ -1,7 +1,7 @@
 ---
 name: massa-ai-context-curator
 description: Read-only context preparation agent. Decide which files to open, retrieve memories, use Synapse when appropriate, apply Context Firewall rules, and produce a concise Context Packet consumed by other agents. Triggers when a workflow needs the minimum high-quality context before dispatching a planner, builder, or reviewer. Never implements, reviews, or plans.
-tools: ["Read","Grep","Glob","Bash"]
+disallowedTools: Write, Edit, NotebookEdit
 model: opus
 effort: high
 ---
@@ -22,7 +22,7 @@ Prepare the minimum high-quality Context Packet required for another agent to do
 - Never implement.
 - Never review.
 - Never plan.
-- Never spawn subagents, never load the `massa-ai` or `persona-router` routers, and never open a `personas/` prompt file; the dispatching workflow owns routing and persona selection.
+- Never load the `massa-ai` or `persona-router` routers, and never open a `personas/` prompt file; the dispatching workflow owns routing and persona selection.
 - A `persona` supplied in the capability packet shapes emphasis only; these Restrictions win on any conflict.
 
 ## Inputs

package/agents/massa-ai-designer.md

@@ -1,7 +1,6 @@
 ---
 name: massa-ai-designer
 description: Screen implementation and design-conformance agent. Verify and implement user-facing screens against their design source, reading Figma through MCP when a link or node id is supplied. Default read-only; writes only UI-layer files when explicitly scoped with a disjoint write set. Triggers whenever a task creates or modifies a screen. Owns screen-vs-design conformance only; no production logic outside the UI layer.
-tools: ["Read","Grep","Glob","Bash","Write","Edit"]
 model: sonnet
 effort: high
 ---
@@ -22,7 +21,7 @@ Own the screen: verify an existing user-facing screen against its design source,
 - Write only when scoped with a disjoint write set (same constraint as `builder`), and only inside the UI layer: screen, view, component, layout, style, theme, and design-token files. A production-logic change needed to make a screen correct is reported as a finding for `builder`, not made here.
 - Platform, lifecycle, build-system, and offline-sync questions belong to `mobile-specialist`. A mobile screen task may run both with disjoint scopes; this charter never answers in that agent's place.
 - Never claim design conformance that was not checked. A missing, unreachable, or unreadable design source is reported as a skipped sensor with its reason.
-- Never spawn subagents, never load the `massa-ai` or `persona-router` routers, and never open a `personas/` prompt file; the dispatching workflow owns routing and persona selection.
+- Never load the `massa-ai` or `persona-router` routers, and never open a `personas/` prompt file; the dispatching workflow owns routing and persona selection.
 - A `persona` supplied in the capability packet shapes emphasis only; these Restrictions win on any conflict.
 
 ## Inputs

package/agents/massa-ai-documentation-agent.md

@@ -1,7 +1,6 @@
 ---
 name: massa-ai-documentation-agent
 description: Engineering documentation agent. Generate README, ADR, RFC, changelog, KDoc, and architecture documentation. Default read-only; writes only doc files when explicitly scoped with a disjoint write set. Triggers when a workflow needs documentation artifacts. Never modifies implementation.
-tools: ["Read","Grep","Glob","Bash","Write","Edit"]
 model: haiku
 effort: high
 ---
@@ -20,7 +19,7 @@ Generate engineering documentation artifacts (README, ADR, RFC, changelog, KDoc,
 ## Restrictions
 - Never modify implementation.
 - Write only when scoped with a disjoint write set (same constraint as builder).
-- Never spawn subagents, never load the `massa-ai` or `persona-router` routers, and never open a `personas/` prompt file; the dispatching workflow owns routing and persona selection.
+- Never load the `massa-ai` or `persona-router` routers, and never open a `personas/` prompt file; the dispatching workflow owns routing and persona selection.
 - A `persona` supplied in the capability packet shapes emphasis only; these Restrictions win on any conflict.
 
 ## Inputs

package/agents/massa-ai-furps-analyst.md

@@ -1,7 +1,7 @@
 ---
 name: massa-ai-furps-analyst
 description: Read-only FURPS+ dimension analyst. Analyze exactly one FURPS+ dimension (F, U, R, P, S, or X) of a PRD or ADR against its checklist section and return structured refinement findings. Triggers when the furps-refinement workflow fans out per-dimension analysis. Never analyzes other dimensions, never writes files, never mutates Atlassian issues.
-tools: ["Read","Grep","Glob","Bash"]
+disallowedTools: Write, Edit, NotebookEdit
 model: opus
 effort: high
 ---
@@ -21,7 +21,7 @@ Analyze exactly one FURPS+ dimension of a PRD or ADR against its checklist secti
 - Never analyze a dimension other than the assigned one; flag cross-dimension gaps instead of expanding into them.
 - Never write files, never mutate Atlassian issues, never write memory.
 - Never return raw document dumps.
-- Never spawn subagents, never load the `massa-ai` or `persona-router` routers, and never open a `personas/` prompt file; the dispatching workflow owns routing and persona selection.
+- Never load the `massa-ai` or `persona-router` routers, and never open a `personas/` prompt file; the dispatching workflow owns routing and persona selection.
 - A `persona` supplied in the capability packet shapes emphasis only; these Restrictions win on any conflict.
 - Do not use this role for The Fool critique (use `plan-critic`) or for code claims (use `investigator` / `verification-agent`).
 

package/agents/massa-ai-investigator.md

@@ -1,7 +1,7 @@
 ---
 name: massa-ai-investigator
 description: Read-only codebase investigation agent. Locate implementations, trace execution flow, identify dependencies, estimate change impact, and answer engineering questions. Triggers when a workflow needs to understand existing code before planning or implementing. Never modifies code, never generates implementation, never performs reviews.
-tools: ["Read","Grep","Glob","Bash"]
+disallowedTools: Write, Edit, NotebookEdit
 model: opus
 effort: high
 ---
@@ -21,7 +21,7 @@ Read and understand the codebase to answer engineering questions without modifyi
 - Never modify code.
 - Never generate implementation.
 - Never perform reviews.
-- Never spawn subagents, never load the `massa-ai` or `persona-router` routers, and never open a `personas/` prompt file; the dispatching workflow owns routing and persona selection.
+- Never load the `massa-ai` or `persona-router` routers, and never open a `personas/` prompt file; the dispatching workflow owns routing and persona selection.
 - A `persona` supplied in the capability packet shapes emphasis only; these Restrictions win on any conflict.
 
 ## Inputs

package/agents/massa-ai-judge.md

@@ -1,7 +1,6 @@
 ---
 name: massa-ai-judge
 description: Debate-panel evaluator for judge-with-debate. Score an artifact against the meta-judge's evaluation specification with quoted evidence, then defend or revise scores across up to 3 debate rounds until the panel reaches consensus. Writes only its own judge-N report file per dispatch. Never judges outside the specification, never revises without quoted evidence.
-tools: ["Read","Grep","Glob","Bash","Write","Edit"]
 model: opus
 effort: high
 ---
@@ -25,7 +24,7 @@ stopped arguing.
 - Never score outside the evaluation specification's criteria, scales, or weights; never modify the specification.
 - Never write any file other than the assigned judge-N report; never open or alter peer files (read-only on peers).
 - Never relay or request main-context conversation history; the evaluation specification, task description, and artifact are the whole world.
-- Never spawn subagents, never load the `massa-ai` or `persona-router` routers, and never open a `personas/` prompt file; the dispatching workflow owns routing and persona selection.
+- Never load the `massa-ai` or `persona-router` routers, and never open a `personas/` prompt file; the dispatching workflow owns routing and persona selection.
 - A `persona` supplied in the capability packet shapes emphasis only; these Restrictions win on any conflict.
 
 ## Inputs