@probelabs/probe 0.6.0-rc168 → 0.6.0-rc169

package/build/agent/ProbeAgent.js

@@ -420,14 +420,20 @@ export class ProbeAgent {
    * Initialize tools with configuration
    */
   initializeTools() {
+    const isToolAllowed = (toolName) => this.allowedTools.isEnabled(toolName);
+
     const configOptions = {
       sessionId: this.sessionId,
       debug: this.debug,
       defaultPath: this.allowedFolders.length > 0 ? this.allowedFolders[0] : process.cwd(),
       allowedFolders: this.allowedFolders,
       outline: this.outline,
+      allowEdit: this.allowEdit,
+      enableDelegate: this.enableDelegate,
       enableBash: this.enableBash,
-      bashConfig: this.bashConfig
+      bashConfig: this.bashConfig,
+      allowedTools: this.allowedTools,
+      isToolAllowed
     };
 
     // Create base tools
@@ -436,15 +442,33 @@ export class ProbeAgent {
     // Create wrapped tools with event emission
     const wrappedTools = createWrappedTools(baseTools);
 
-    // Store tool instances for execution
-    this.toolImplementations = {
-      search: wrappedTools.searchToolInstance,
-      query: wrappedTools.queryToolInstance,
-      extract: wrappedTools.extractToolInstance,
-      delegate: wrappedTools.delegateToolInstance,
-      listFiles: listFilesToolInstance,
-      searchFiles: searchFilesToolInstance,
-      readImage: {
+    // Store tool instances for execution (respect allowedTools + feature flags)
+    this.toolImplementations = {};
+
+    if (wrappedTools.searchToolInstance && isToolAllowed('search')) {
+      this.toolImplementations.search = wrappedTools.searchToolInstance;
+    }
+    if (wrappedTools.queryToolInstance && isToolAllowed('query')) {
+      this.toolImplementations.query = wrappedTools.queryToolInstance;
+    }
+    if (wrappedTools.extractToolInstance && isToolAllowed('extract')) {
+      this.toolImplementations.extract = wrappedTools.extractToolInstance;
+    }
+    if (this.enableDelegate && wrappedTools.delegateToolInstance && isToolAllowed('delegate')) {
+      this.toolImplementations.delegate = wrappedTools.delegateToolInstance;
+    }
+
+    // File browsing tools
+    if (isToolAllowed('listFiles')) {
+      this.toolImplementations.listFiles = listFilesToolInstance;
+    }
+    if (isToolAllowed('searchFiles')) {
+      this.toolImplementations.searchFiles = searchFilesToolInstance;
+    }
+
+    // Image loading tool
+    if (isToolAllowed('readImage')) {
+      this.toolImplementations.readImage = {
         execute: async (params) => {
           const imagePath = params.path;
           if (!imagePath) {
@@ -460,20 +484,20 @@ export class ProbeAgent {
 
           return `Image loaded successfully: ${imagePath}. The image is now available for analysis in the conversation.`;
         }
-      }
-    };
+      };
+    }
 
-    // Add bash tool if enabled
-    if (this.enableBash && wrappedTools.bashToolInstance) {
+    // Add bash tool if enabled and allowed
+    if (this.enableBash && wrappedTools.bashToolInstance && isToolAllowed('bash')) {
       this.toolImplementations.bash = wrappedTools.bashToolInstance;
     }
 
-    // Add edit and create tools if enabled
+    // Add edit and create tools if enabled and allowed
     if (this.allowEdit) {
-      if (wrappedTools.editToolInstance) {
+      if (wrappedTools.editToolInstance && isToolAllowed('edit')) {
         this.toolImplementations.edit = wrappedTools.editToolInstance;
       }
-      if (wrappedTools.createToolInstance) {
+      if (wrappedTools.createToolInstance && isToolAllowed('create')) {
         this.toolImplementations.create = wrappedTools.createToolInstance;
       }
     }

package/build/agent/index.js

@@ -17550,17 +17550,30 @@ var init_xmlParsingUtils = __esm({
 // src/agent/tools.js
 import { randomUUID as randomUUID3 } from "crypto";
 function createTools(configOptions) {
-  const tools2 = {
-    searchTool: searchTool(configOptions),
-    queryTool: queryTool(configOptions),
-    extractTool: extractTool(configOptions),
-    delegateTool: delegateTool(configOptions)
-  };
-  if (configOptions.enableBash) {
+  const tools2 = {};
+  const isToolAllowed = configOptions.isToolAllowed || ((toolName) => {
+    if (!configOptions.allowedTools) return true;
+    return configOptions.allowedTools.isEnabled(toolName);
+  });
+  if (isToolAllowed("search")) {
+    tools2.searchTool = searchTool(configOptions);
+  }
+  if (isToolAllowed("query")) {
+    tools2.queryTool = queryTool(configOptions);
+  }
+  if (isToolAllowed("extract")) {
+    tools2.extractTool = extractTool(configOptions);
+  }
+  if (configOptions.enableDelegate && isToolAllowed("delegate")) {
+    tools2.delegateTool = delegateTool(configOptions);
+  }
+  if (configOptions.enableBash && isToolAllowed("bash")) {
     tools2.bashTool = bashTool(configOptions);
   }
-  if (configOptions.allowEdit) {
+  if (configOptions.allowEdit && isToolAllowed("edit")) {
     tools2.editTool = editTool(configOptions);
+  }
+  if (configOptions.allowEdit && isToolAllowed("create")) {
     tools2.createTool = createTool(configOptions);
   }
   return tools2;
@@ -59264,25 +59277,43 @@ var init_ProbeAgent = __esm({
        * Initialize tools with configuration
        */
       initializeTools() {
+        const isToolAllowed = (toolName) => this.allowedTools.isEnabled(toolName);
         const configOptions = {
           sessionId: this.sessionId,
           debug: this.debug,
           defaultPath: this.allowedFolders.length > 0 ? this.allowedFolders[0] : process.cwd(),
           allowedFolders: this.allowedFolders,
           outline: this.outline,
+          allowEdit: this.allowEdit,
+          enableDelegate: this.enableDelegate,
           enableBash: this.enableBash,
-          bashConfig: this.bashConfig
+          bashConfig: this.bashConfig,
+          allowedTools: this.allowedTools,
+          isToolAllowed
         };
         const baseTools = createTools(configOptions);
         const wrappedTools = createWrappedTools(baseTools);
-        this.toolImplementations = {
-          search: wrappedTools.searchToolInstance,
-          query: wrappedTools.queryToolInstance,
-          extract: wrappedTools.extractToolInstance,
-          delegate: wrappedTools.delegateToolInstance,
-          listFiles: listFilesToolInstance,
-          searchFiles: searchFilesToolInstance,
-          readImage: {
+        this.toolImplementations = {};
+        if (wrappedTools.searchToolInstance && isToolAllowed("search")) {
+          this.toolImplementations.search = wrappedTools.searchToolInstance;
+        }
+        if (wrappedTools.queryToolInstance && isToolAllowed("query")) {
+          this.toolImplementations.query = wrappedTools.queryToolInstance;
+        }
+        if (wrappedTools.extractToolInstance && isToolAllowed("extract")) {
+          this.toolImplementations.extract = wrappedTools.extractToolInstance;
+        }
+        if (this.enableDelegate && wrappedTools.delegateToolInstance && isToolAllowed("delegate")) {
+          this.toolImplementations.delegate = wrappedTools.delegateToolInstance;
+        }
+        if (isToolAllowed("listFiles")) {
+          this.toolImplementations.listFiles = listFilesToolInstance;
+        }
+        if (isToolAllowed("searchFiles")) {
+          this.toolImplementations.searchFiles = searchFilesToolInstance;
+        }
+        if (isToolAllowed("readImage")) {
+          this.toolImplementations.readImage = {
             execute: async (params) => {
               const imagePath = params.path;
               if (!imagePath) {
@@ -59294,16 +59325,16 @@ var init_ProbeAgent = __esm({
               }
               return `Image loaded successfully: ${imagePath}. The image is now available for analysis in the conversation.`;
             }
-          }
-        };
-        if (this.enableBash && wrappedTools.bashToolInstance) {
+          };
+        }
+        if (this.enableBash && wrappedTools.bashToolInstance && isToolAllowed("bash")) {
           this.toolImplementations.bash = wrappedTools.bashToolInstance;
         }
         if (this.allowEdit) {
-          if (wrappedTools.editToolInstance) {
+          if (wrappedTools.editToolInstance && isToolAllowed("edit")) {
             this.toolImplementations.edit = wrappedTools.editToolInstance;
           }
-          if (wrappedTools.createToolInstance) {
+          if (wrappedTools.createToolInstance && isToolAllowed("create")) {
             this.toolImplementations.create = wrappedTools.createToolInstance;
           }
         }

package/build/agent/tools.js

@@ -31,21 +31,39 @@ import { processXmlWithThinkingAndRecovery } from './xmlParsingUtils.js';
 
 // Create configured tool instances
 export function createTools(configOptions) {
-  const tools = {
-    searchTool: searchTool(configOptions),
-    queryTool: queryTool(configOptions),
-    extractTool: extractTool(configOptions),
-    delegateTool: delegateTool(configOptions)
-  };
+  const tools = {};
+
+  const isToolAllowed =
+    configOptions.isToolAllowed ||
+    ((toolName) => {
+      if (!configOptions.allowedTools) return true;
+      return configOptions.allowedTools.isEnabled(toolName);
+    });
+
+  // Core tools
+  if (isToolAllowed('search')) {
+    tools.searchTool = searchTool(configOptions);
+  }
+  if (isToolAllowed('query')) {
+    tools.queryTool = queryTool(configOptions);
+  }
+  if (isToolAllowed('extract')) {
+    tools.extractTool = extractTool(configOptions);
+  }
+  if (configOptions.enableDelegate && isToolAllowed('delegate')) {
+    tools.delegateTool = delegateTool(configOptions);
+  }
 
   // Add bash tool if enabled
-  if (configOptions.enableBash) {
+  if (configOptions.enableBash && isToolAllowed('bash')) {
     tools.bashTool = bashTool(configOptions);
   }
 
   // Add edit and create tools if enabled
-  if (configOptions.allowEdit) {
+  if (configOptions.allowEdit && isToolAllowed('edit')) {
     tools.editTool = editTool(configOptions);
+  }
+  if (configOptions.allowEdit && isToolAllowed('create')) {
     tools.createTool = createTool(configOptions);
   }
 
@@ -199,4 +217,3 @@ export function parseXmlToolCallWithThinking(xmlString, validTools) {
   // Otherwise, use the original parseXmlToolCall function to parse the cleaned XML string
   return parseXmlToolCall(cleanedXmlString, validTools);
 }
-

package/cjs/agent/ProbeAgent.cjs

@@ -17003,7 +17003,7 @@ var require_package2 = __commonJS({
     module2.exports = {
       name: "@aws-sdk/client-bedrock-runtime",
       description: "AWS SDK for JavaScript Bedrock Runtime Client for Node.js, Browser and React Native",
-      version: "3.936.0",
+      version: "3.938.0",
       scripts: {
         build: "concurrently 'yarn:build:cjs' 'yarn:build:es' 'yarn:build:types'",
         "build:cjs": "node ../../scripts/compilation/inline client-bedrock-runtime",
@@ -23276,6 +23276,7 @@ var require_dist_cjs66 = __commonJS({
     var _A2 = "Accept";
     var _ADE3 = "AccessDeniedException";
     var _AG = "ApplyGuardrail";
+    var _AGD = "AppliedGuardrailDetails";
     var _AGR = "ApplyGuardrailRequest";
     var _AGRp = "ApplyGuardrailResponse";
     var _AIM = "AsyncInvokeMessage";
@@ -23491,6 +23492,7 @@ var require_dist_cjs66 = __commonJS({
     var _XABST = "X-Amzn-Bedrock-Service-Tier";
     var _XABT = "X-Amzn-Bedrock-Trace";
     var _a16 = "action";
+    var _aGD = "appliedGuardrailDetails";
     var _aIS = "asyncInvokeSummaries";
     var _aMRF = "additionalModelRequestFields";
     var _aMRFP = "additionalModelResponseFieldPaths";
@@ -23554,10 +23556,14 @@ var require_dist_cjs66 = __commonJS({
     var _fi = "findings";
     var _fil = "filters";
     var _g = "guardrail";
+    var _gA = "guardrailArn";
     var _gC = "guardrailCoverage";
     var _gCu = "guardrailConfig";
     var _gCua = "guardContent";
-    var _gI = "guardrailIdentifier";
+    var _gI = "guardrailId";
+    var _gIu = "guardrailIdentifier";
+    var _gO = "guardrailOrigin";
+    var _gOu = "guardrailOwnership";
     var _gPL = "guardrailProcessingLatency";
     var _gV = "guardrailVersion";
     var _gu = "guarded";
@@ -23728,12 +23734,20 @@ var require_dist_cjs66 = __commonJS({
     ];
     schema.TypeRegistry.for(n04).registerError(AccessDeniedException5, AccessDeniedException$1);
     var AnyToolChoice = [3, n04, _ATC, 0, [], []];
+    var AppliedGuardrailDetails = [
+      3,
+      n04,
+      _AGD,
+      0,
+      [_gI, _gV, _gA, _gO, _gOu],
+      [0, 0, 0, 64 | 0, 0]
+    ];
     var ApplyGuardrailRequest = [
       3,
       n04,
       _AGR,
       0,
-      [_gI, _gV, _s4, _co3, _oS],
+      [_gIu, _gV, _s4, _co3, _oS],
       [[0, 1], [0, 1], 0, [() => GuardrailContentBlockList, 0], 0]
     ];
     var ApplyGuardrailResponse = [
@@ -23963,7 +23977,7 @@ var require_dist_cjs66 = __commonJS({
       n04,
       _GA,
       0,
-      [_tP, _cP, _wP, _sIP, _cGP, _aRP, _iM],
+      [_tP, _cP, _wP, _sIP, _cGP, _aRP, _iM, _aGD],
       [
         () => GuardrailTopicPolicyAssessment,
         () => GuardrailContentPolicyAssessment,
@@ -23971,7 +23985,8 @@ var require_dist_cjs66 = __commonJS({
         () => GuardrailSensitiveInformationPolicyAssessment,
         () => GuardrailContextualGroundingPolicyAssessment,
         [() => GuardrailAutomatedReasoningPolicyAssessment, 0],
-        () => GuardrailInvocationMetrics
+        () => GuardrailInvocationMetrics,
+        () => AppliedGuardrailDetails
       ]
     ];
     var GuardrailAutomatedReasoningImpossibleFinding = [
@@ -24103,7 +24118,7 @@ var require_dist_cjs66 = __commonJS({
         [() => GuardrailAutomatedReasoningLogicWarning, 0]
       ]
     ];
-    var GuardrailConfiguration = [3, n04, _GC, 0, [_gI, _gV, _tr], [0, 0, 0]];
+    var GuardrailConfiguration = [3, n04, _GC, 0, [_gIu, _gV, _tr], [0, 0, 0]];
     var GuardrailContentFilter = [3, n04, _GCF, 0, [_t, _conf, _fS, _a16, _de], [0, 0, 0, 0, 2]];
     var GuardrailContentPolicyAssessment = [
       3,
@@ -24176,7 +24191,7 @@ var require_dist_cjs66 = __commonJS({
       [_pE, _re],
       [() => GuardrailPiiEntityFilterList, () => GuardrailRegexFilterList]
     ];
-    var GuardrailStreamConfiguration = [3, n04, _GSC, 0, [_gI, _gV, _tr, _sPM], [0, 0, 0, 0]];
+    var GuardrailStreamConfiguration = [3, n04, _GSC, 0, [_gIu, _gV, _tr, _sPM], [0, 0, 0, 0]];
     var GuardrailTextBlock = [3, n04, _GTB, 0, [_te, _q], [0, 64 | 0]];
     var GuardrailTextCharactersCoverage = [3, n04, _GTCC, 0, [_gu, _to], [1, 1]];
     var GuardrailTopic = [3, n04, _GT, 0, [_n, _t, _a16, _de], [0, 0, 0, 2]];
@@ -24231,7 +24246,7 @@ var require_dist_cjs66 = __commonJS({
       n04,
       _IMR,
       0,
-      [_bo, _cT, _ac, _mI, _tr, _gI, _gV, _pCL, _sTe],
+      [_bo, _cT, _ac, _mI, _tr, _gIu, _gV, _pCL, _sTe],
       [
         [() => Body, 16],
         [
@@ -24332,7 +24347,7 @@ var require_dist_cjs66 = __commonJS({
       n04,
       _IMWRSR,
       0,
-      [_bo, _cT, _ac, _mI, _tr, _gI, _gV, _pCL, _sTe],
+      [_bo, _cT, _ac, _mI, _tr, _gIu, _gV, _pCL, _sTe],
       [
         [() => Body, 16],
         [
@@ -25151,6 +25166,15 @@ var require_dist_cjs66 = __commonJS({
       GUARDRAIL_INTERVENED: "GUARDRAIL_INTERVENED",
       NONE: "NONE"
     };
+    var GuardrailOrigin = {
+      ACCOUNT_ENFORCED: "ACCOUNT_ENFORCED",
+      ORGANIZATION_ENFORCED: "ORGANIZATION_ENFORCED",
+      REQUEST: "REQUEST"
+    };
+    var GuardrailOwnership = {
+      CROSS_ACCOUNT: "CROSS_ACCOUNT",
+      SELF: "SELF"
+    };
     var GuardrailAutomatedReasoningLogicWarningType = {
       ALWAYS_FALSE: "ALWAYS_FALSE",
       ALWAYS_TRUE: "ALWAYS_TRUE"
@@ -25362,7 +25386,9 @@ var require_dist_cjs66 = __commonJS({
     exports2.GuardrailConverseImageFormat = GuardrailConverseImageFormat;
     exports2.GuardrailImageFormat = GuardrailImageFormat;
     exports2.GuardrailManagedWordType = GuardrailManagedWordType;
+    exports2.GuardrailOrigin = GuardrailOrigin;
     exports2.GuardrailOutputScope = GuardrailOutputScope;
+    exports2.GuardrailOwnership = GuardrailOwnership;
     exports2.GuardrailPiiEntityType = GuardrailPiiEntityType;
     exports2.GuardrailSensitiveInformationPolicyAction = GuardrailSensitiveInformationPolicyAction;
     exports2.GuardrailStreamProcessingMode = GuardrailStreamProcessingMode;
@@ -43363,17 +43389,30 @@ var init_xmlParsingUtils = __esm({
 
 // src/agent/tools.js
 function createTools(configOptions) {
-  const tools2 = {
-    searchTool: searchTool(configOptions),
-    queryTool: queryTool(configOptions),
-    extractTool: extractTool(configOptions),
-    delegateTool: delegateTool(configOptions)
-  };
-  if (configOptions.enableBash) {
+  const tools2 = {};
+  const isToolAllowed = configOptions.isToolAllowed || ((toolName) => {
+    if (!configOptions.allowedTools) return true;
+    return configOptions.allowedTools.isEnabled(toolName);
+  });
+  if (isToolAllowed("search")) {
+    tools2.searchTool = searchTool(configOptions);
+  }
+  if (isToolAllowed("query")) {
+    tools2.queryTool = queryTool(configOptions);
+  }
+  if (isToolAllowed("extract")) {
+    tools2.extractTool = extractTool(configOptions);
+  }
+  if (configOptions.enableDelegate && isToolAllowed("delegate")) {
+    tools2.delegateTool = delegateTool(configOptions);
+  }
+  if (configOptions.enableBash && isToolAllowed("bash")) {
     tools2.bashTool = bashTool(configOptions);
   }
-  if (configOptions.allowEdit) {
+  if (configOptions.allowEdit && isToolAllowed("edit")) {
     tools2.editTool = editTool(configOptions);
+  }
+  if (configOptions.allowEdit && isToolAllowed("create")) {
     tools2.createTool = createTool(configOptions);
   }
   return tools2;
@@ -85077,25 +85116,43 @@ var init_ProbeAgent = __esm({
        * Initialize tools with configuration
        */
       initializeTools() {
+        const isToolAllowed = (toolName) => this.allowedTools.isEnabled(toolName);
         const configOptions = {
           sessionId: this.sessionId,
           debug: this.debug,
           defaultPath: this.allowedFolders.length > 0 ? this.allowedFolders[0] : process.cwd(),
           allowedFolders: this.allowedFolders,
           outline: this.outline,
+          allowEdit: this.allowEdit,
+          enableDelegate: this.enableDelegate,
           enableBash: this.enableBash,
-          bashConfig: this.bashConfig
+          bashConfig: this.bashConfig,
+          allowedTools: this.allowedTools,
+          isToolAllowed
         };
         const baseTools = createTools(configOptions);
         const wrappedTools = createWrappedTools(baseTools);
-        this.toolImplementations = {
-          search: wrappedTools.searchToolInstance,
-          query: wrappedTools.queryToolInstance,
-          extract: wrappedTools.extractToolInstance,
-          delegate: wrappedTools.delegateToolInstance,
-          listFiles: listFilesToolInstance,
-          searchFiles: searchFilesToolInstance,
-          readImage: {
+        this.toolImplementations = {};
+        if (wrappedTools.searchToolInstance && isToolAllowed("search")) {
+          this.toolImplementations.search = wrappedTools.searchToolInstance;
+        }
+        if (wrappedTools.queryToolInstance && isToolAllowed("query")) {
+          this.toolImplementations.query = wrappedTools.queryToolInstance;
+        }
+        if (wrappedTools.extractToolInstance && isToolAllowed("extract")) {
+          this.toolImplementations.extract = wrappedTools.extractToolInstance;
+        }
+        if (this.enableDelegate && wrappedTools.delegateToolInstance && isToolAllowed("delegate")) {
+          this.toolImplementations.delegate = wrappedTools.delegateToolInstance;
+        }
+        if (isToolAllowed("listFiles")) {
+          this.toolImplementations.listFiles = listFilesToolInstance;
+        }
+        if (isToolAllowed("searchFiles")) {
+          this.toolImplementations.searchFiles = searchFilesToolInstance;
+        }
+        if (isToolAllowed("readImage")) {
+          this.toolImplementations.readImage = {
             execute: async (params) => {
               const imagePath = params.path;
               if (!imagePath) {
@@ -85107,16 +85164,16 @@ var init_ProbeAgent = __esm({
               }
               return `Image loaded successfully: ${imagePath}. The image is now available for analysis in the conversation.`;
             }
-          }
-        };
-        if (this.enableBash && wrappedTools.bashToolInstance) {
+          };
+        }
+        if (this.enableBash && wrappedTools.bashToolInstance && isToolAllowed("bash")) {
           this.toolImplementations.bash = wrappedTools.bashToolInstance;
         }
         if (this.allowEdit) {
-          if (wrappedTools.editToolInstance) {
+          if (wrappedTools.editToolInstance && isToolAllowed("edit")) {
             this.toolImplementations.edit = wrappedTools.editToolInstance;
           }
-          if (wrappedTools.createToolInstance) {
+          if (wrappedTools.createToolInstance && isToolAllowed("create")) {
             this.toolImplementations.create = wrappedTools.createToolInstance;
           }
         }

package/cjs/index.cjs

@@ -18445,7 +18445,7 @@ var require_package2 = __commonJS({
     module2.exports = {
       name: "@aws-sdk/client-bedrock-runtime",
       description: "AWS SDK for JavaScript Bedrock Runtime Client for Node.js, Browser and React Native",
-      version: "3.936.0",
+      version: "3.938.0",
       scripts: {
         build: "concurrently 'yarn:build:cjs' 'yarn:build:es' 'yarn:build:types'",
         "build:cjs": "node ../../scripts/compilation/inline client-bedrock-runtime",
@@ -24718,6 +24718,7 @@ var require_dist_cjs66 = __commonJS({
     var _A2 = "Accept";
     var _ADE3 = "AccessDeniedException";
     var _AG = "ApplyGuardrail";
+    var _AGD = "AppliedGuardrailDetails";
     var _AGR = "ApplyGuardrailRequest";
     var _AGRp = "ApplyGuardrailResponse";
     var _AIM = "AsyncInvokeMessage";
@@ -24933,6 +24934,7 @@ var require_dist_cjs66 = __commonJS({
     var _XABST = "X-Amzn-Bedrock-Service-Tier";
     var _XABT = "X-Amzn-Bedrock-Trace";
     var _a16 = "action";
+    var _aGD = "appliedGuardrailDetails";
     var _aIS = "asyncInvokeSummaries";
     var _aMRF = "additionalModelRequestFields";
     var _aMRFP = "additionalModelResponseFieldPaths";
@@ -24996,10 +24998,14 @@ var require_dist_cjs66 = __commonJS({
     var _fi = "findings";
     var _fil = "filters";
     var _g = "guardrail";
+    var _gA = "guardrailArn";
     var _gC = "guardrailCoverage";
     var _gCu = "guardrailConfig";
     var _gCua = "guardContent";
-    var _gI = "guardrailIdentifier";
+    var _gI = "guardrailId";
+    var _gIu = "guardrailIdentifier";
+    var _gO = "guardrailOrigin";
+    var _gOu = "guardrailOwnership";
     var _gPL = "guardrailProcessingLatency";
     var _gV = "guardrailVersion";
     var _gu = "guarded";
@@ -25170,12 +25176,20 @@ var require_dist_cjs66 = __commonJS({
     ];
     schema.TypeRegistry.for(n04).registerError(AccessDeniedException5, AccessDeniedException$1);
     var AnyToolChoice = [3, n04, _ATC, 0, [], []];
+    var AppliedGuardrailDetails = [
+      3,
+      n04,
+      _AGD,
+      0,
+      [_gI, _gV, _gA, _gO, _gOu],
+      [0, 0, 0, 64 | 0, 0]
+    ];
     var ApplyGuardrailRequest = [
       3,
       n04,
       _AGR,
       0,
-      [_gI, _gV, _s4, _co3, _oS],
+      [_gIu, _gV, _s4, _co3, _oS],
       [[0, 1], [0, 1], 0, [() => GuardrailContentBlockList, 0], 0]
     ];
     var ApplyGuardrailResponse = [
@@ -25405,7 +25419,7 @@ var require_dist_cjs66 = __commonJS({
       n04,
       _GA,
       0,
-      [_tP, _cP, _wP, _sIP, _cGP, _aRP, _iM],
+      [_tP, _cP, _wP, _sIP, _cGP, _aRP, _iM, _aGD],
       [
         () => GuardrailTopicPolicyAssessment,
         () => GuardrailContentPolicyAssessment,
@@ -25413,7 +25427,8 @@ var require_dist_cjs66 = __commonJS({
         () => GuardrailSensitiveInformationPolicyAssessment,
         () => GuardrailContextualGroundingPolicyAssessment,
         [() => GuardrailAutomatedReasoningPolicyAssessment, 0],
-        () => GuardrailInvocationMetrics
+        () => GuardrailInvocationMetrics,
+        () => AppliedGuardrailDetails
       ]
     ];
     var GuardrailAutomatedReasoningImpossibleFinding = [
@@ -25545,7 +25560,7 @@ var require_dist_cjs66 = __commonJS({
         [() => GuardrailAutomatedReasoningLogicWarning, 0]
       ]
     ];
-    var GuardrailConfiguration = [3, n04, _GC, 0, [_gI, _gV, _tr], [0, 0, 0]];
+    var GuardrailConfiguration = [3, n04, _GC, 0, [_gIu, _gV, _tr], [0, 0, 0]];
     var GuardrailContentFilter = [3, n04, _GCF, 0, [_t, _conf, _fS, _a16, _de], [0, 0, 0, 0, 2]];
     var GuardrailContentPolicyAssessment = [
       3,
@@ -25618,7 +25633,7 @@ var require_dist_cjs66 = __commonJS({
       [_pE, _re],
       [() => GuardrailPiiEntityFilterList, () => GuardrailRegexFilterList]
     ];
-    var GuardrailStreamConfiguration = [3, n04, _GSC, 0, [_gI, _gV, _tr, _sPM], [0, 0, 0, 0]];
+    var GuardrailStreamConfiguration = [3, n04, _GSC, 0, [_gIu, _gV, _tr, _sPM], [0, 0, 0, 0]];
     var GuardrailTextBlock = [3, n04, _GTB, 0, [_te, _q], [0, 64 | 0]];
     var GuardrailTextCharactersCoverage = [3, n04, _GTCC, 0, [_gu, _to], [1, 1]];
     var GuardrailTopic = [3, n04, _GT, 0, [_n, _t, _a16, _de], [0, 0, 0, 2]];
@@ -25673,7 +25688,7 @@ var require_dist_cjs66 = __commonJS({
       n04,
       _IMR,
       0,
-      [_bo, _cT, _ac, _mI, _tr, _gI, _gV, _pCL, _sTe],
+      [_bo, _cT, _ac, _mI, _tr, _gIu, _gV, _pCL, _sTe],
       [
         [() => Body, 16],
         [
@@ -25774,7 +25789,7 @@ var require_dist_cjs66 = __commonJS({
       n04,
       _IMWRSR,
       0,
-      [_bo, _cT, _ac, _mI, _tr, _gI, _gV, _pCL, _sTe],
+      [_bo, _cT, _ac, _mI, _tr, _gIu, _gV, _pCL, _sTe],
       [
         [() => Body, 16],
         [
@@ -26593,6 +26608,15 @@ var require_dist_cjs66 = __commonJS({
       GUARDRAIL_INTERVENED: "GUARDRAIL_INTERVENED",
       NONE: "NONE"
     };
+    var GuardrailOrigin = {
+      ACCOUNT_ENFORCED: "ACCOUNT_ENFORCED",
+      ORGANIZATION_ENFORCED: "ORGANIZATION_ENFORCED",
+      REQUEST: "REQUEST"
+    };
+    var GuardrailOwnership = {
+      CROSS_ACCOUNT: "CROSS_ACCOUNT",
+      SELF: "SELF"
+    };
     var GuardrailAutomatedReasoningLogicWarningType = {
       ALWAYS_FALSE: "ALWAYS_FALSE",
       ALWAYS_TRUE: "ALWAYS_TRUE"
@@ -26804,7 +26828,9 @@ var require_dist_cjs66 = __commonJS({
     exports2.GuardrailConverseImageFormat = GuardrailConverseImageFormat;
     exports2.GuardrailImageFormat = GuardrailImageFormat;
     exports2.GuardrailManagedWordType = GuardrailManagedWordType;
+    exports2.GuardrailOrigin = GuardrailOrigin;
     exports2.GuardrailOutputScope = GuardrailOutputScope;
+    exports2.GuardrailOwnership = GuardrailOwnership;
     exports2.GuardrailPiiEntityType = GuardrailPiiEntityType;
     exports2.GuardrailSensitiveInformationPolicyAction = GuardrailSensitiveInformationPolicyAction;
     exports2.GuardrailStreamProcessingMode = GuardrailStreamProcessingMode;
@@ -29596,17 +29622,30 @@ var init_xmlParsingUtils = __esm({
 
 // src/agent/tools.js
 function createTools(configOptions) {
-  const tools2 = {
-    searchTool: searchTool(configOptions),
-    queryTool: queryTool(configOptions),
-    extractTool: extractTool(configOptions),
-    delegateTool: delegateTool(configOptions)
-  };
-  if (configOptions.enableBash) {
+  const tools2 = {};
+  const isToolAllowed = configOptions.isToolAllowed || ((toolName) => {
+    if (!configOptions.allowedTools) return true;
+    return configOptions.allowedTools.isEnabled(toolName);
+  });
+  if (isToolAllowed("search")) {
+    tools2.searchTool = searchTool(configOptions);
+  }
+  if (isToolAllowed("query")) {
+    tools2.queryTool = queryTool(configOptions);
+  }
+  if (isToolAllowed("extract")) {
+    tools2.extractTool = extractTool(configOptions);
+  }
+  if (configOptions.enableDelegate && isToolAllowed("delegate")) {
+    tools2.delegateTool = delegateTool(configOptions);
+  }
+  if (configOptions.enableBash && isToolAllowed("bash")) {
     tools2.bashTool = bashTool(configOptions);
   }
-  if (configOptions.allowEdit) {
+  if (configOptions.allowEdit && isToolAllowed("edit")) {
     tools2.editTool = editTool(configOptions);
+  }
+  if (configOptions.allowEdit && isToolAllowed("create")) {
     tools2.createTool = createTool(configOptions);
   }
   return tools2;
@@ -82819,25 +82858,43 @@ var init_ProbeAgent = __esm({
        * Initialize tools with configuration
        */
       initializeTools() {
+        const isToolAllowed = (toolName) => this.allowedTools.isEnabled(toolName);
         const configOptions = {
           sessionId: this.sessionId,
           debug: this.debug,
           defaultPath: this.allowedFolders.length > 0 ? this.allowedFolders[0] : process.cwd(),
           allowedFolders: this.allowedFolders,
           outline: this.outline,
+          allowEdit: this.allowEdit,
+          enableDelegate: this.enableDelegate,
           enableBash: this.enableBash,
-          bashConfig: this.bashConfig
+          bashConfig: this.bashConfig,
+          allowedTools: this.allowedTools,
+          isToolAllowed
         };
         const baseTools = createTools(configOptions);
         const wrappedTools = createWrappedTools(baseTools);
-        this.toolImplementations = {
-          search: wrappedTools.searchToolInstance,
-          query: wrappedTools.queryToolInstance,
-          extract: wrappedTools.extractToolInstance,
-          delegate: wrappedTools.delegateToolInstance,
-          listFiles: listFilesToolInstance,
-          searchFiles: searchFilesToolInstance,
-          readImage: {
+        this.toolImplementations = {};
+        if (wrappedTools.searchToolInstance && isToolAllowed("search")) {
+          this.toolImplementations.search = wrappedTools.searchToolInstance;
+        }
+        if (wrappedTools.queryToolInstance && isToolAllowed("query")) {
+          this.toolImplementations.query = wrappedTools.queryToolInstance;
+        }
+        if (wrappedTools.extractToolInstance && isToolAllowed("extract")) {
+          this.toolImplementations.extract = wrappedTools.extractToolInstance;
+        }
+        if (this.enableDelegate && wrappedTools.delegateToolInstance && isToolAllowed("delegate")) {
+          this.toolImplementations.delegate = wrappedTools.delegateToolInstance;
+        }
+        if (isToolAllowed("listFiles")) {
+          this.toolImplementations.listFiles = listFilesToolInstance;
+        }
+        if (isToolAllowed("searchFiles")) {
+          this.toolImplementations.searchFiles = searchFilesToolInstance;
+        }
+        if (isToolAllowed("readImage")) {
+          this.toolImplementations.readImage = {
             execute: async (params) => {
               const imagePath = params.path;
               if (!imagePath) {
@@ -82849,16 +82906,16 @@ var init_ProbeAgent = __esm({
               }
               return `Image loaded successfully: ${imagePath}. The image is now available for analysis in the conversation.`;
             }
-          }
-        };
-        if (this.enableBash && wrappedTools.bashToolInstance) {
+          };
+        }
+        if (this.enableBash && wrappedTools.bashToolInstance && isToolAllowed("bash")) {
           this.toolImplementations.bash = wrappedTools.bashToolInstance;
         }
         if (this.allowEdit) {
-          if (wrappedTools.editToolInstance) {
+          if (wrappedTools.editToolInstance && isToolAllowed("edit")) {
             this.toolImplementations.edit = wrappedTools.editToolInstance;
           }
-          if (wrappedTools.createToolInstance) {
+          if (wrappedTools.createToolInstance && isToolAllowed("create")) {
             this.toolImplementations.create = wrappedTools.createToolInstance;
           }
         }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@probelabs/probe",
-  "version": "0.6.0-rc168",
+  "version": "0.6.0-rc169",
   "description": "Node.js wrapper for the probe code search tool",
   "main": "src/index.js",
   "module": "src/index.js",

package/src/agent/ProbeAgent.js

@@ -420,14 +420,20 @@ export class ProbeAgent {
    * Initialize tools with configuration
    */
   initializeTools() {
+    const isToolAllowed = (toolName) => this.allowedTools.isEnabled(toolName);
+
     const configOptions = {
       sessionId: this.sessionId,
       debug: this.debug,
       defaultPath: this.allowedFolders.length > 0 ? this.allowedFolders[0] : process.cwd(),
       allowedFolders: this.allowedFolders,
       outline: this.outline,
+      allowEdit: this.allowEdit,
+      enableDelegate: this.enableDelegate,
       enableBash: this.enableBash,
-      bashConfig: this.bashConfig
+      bashConfig: this.bashConfig,
+      allowedTools: this.allowedTools,
+      isToolAllowed
     };
 
     // Create base tools
@@ -436,15 +442,33 @@ export class ProbeAgent {
     // Create wrapped tools with event emission
     const wrappedTools = createWrappedTools(baseTools);
 
-    // Store tool instances for execution
-    this.toolImplementations = {
-      search: wrappedTools.searchToolInstance,
-      query: wrappedTools.queryToolInstance,
-      extract: wrappedTools.extractToolInstance,
-      delegate: wrappedTools.delegateToolInstance,
-      listFiles: listFilesToolInstance,
-      searchFiles: searchFilesToolInstance,
-      readImage: {
+    // Store tool instances for execution (respect allowedTools + feature flags)
+    this.toolImplementations = {};
+
+    if (wrappedTools.searchToolInstance && isToolAllowed('search')) {
+      this.toolImplementations.search = wrappedTools.searchToolInstance;
+    }
+    if (wrappedTools.queryToolInstance && isToolAllowed('query')) {
+      this.toolImplementations.query = wrappedTools.queryToolInstance;
+    }
+    if (wrappedTools.extractToolInstance && isToolAllowed('extract')) {
+      this.toolImplementations.extract = wrappedTools.extractToolInstance;
+    }
+    if (this.enableDelegate && wrappedTools.delegateToolInstance && isToolAllowed('delegate')) {
+      this.toolImplementations.delegate = wrappedTools.delegateToolInstance;
+    }
+
+    // File browsing tools
+    if (isToolAllowed('listFiles')) {
+      this.toolImplementations.listFiles = listFilesToolInstance;
+    }
+    if (isToolAllowed('searchFiles')) {
+      this.toolImplementations.searchFiles = searchFilesToolInstance;
+    }
+
+    // Image loading tool
+    if (isToolAllowed('readImage')) {
+      this.toolImplementations.readImage = {
         execute: async (params) => {
           const imagePath = params.path;
           if (!imagePath) {
@@ -460,20 +484,20 @@ export class ProbeAgent {
 
           return `Image loaded successfully: ${imagePath}. The image is now available for analysis in the conversation.`;
         }
-      }
-    };
+      };
+    }
 
-    // Add bash tool if enabled
-    if (this.enableBash && wrappedTools.bashToolInstance) {
+    // Add bash tool if enabled and allowed
+    if (this.enableBash && wrappedTools.bashToolInstance && isToolAllowed('bash')) {
       this.toolImplementations.bash = wrappedTools.bashToolInstance;
     }
 
-    // Add edit and create tools if enabled
+    // Add edit and create tools if enabled and allowed
     if (this.allowEdit) {
-      if (wrappedTools.editToolInstance) {
+      if (wrappedTools.editToolInstance && isToolAllowed('edit')) {
         this.toolImplementations.edit = wrappedTools.editToolInstance;
       }
-      if (wrappedTools.createToolInstance) {
+      if (wrappedTools.createToolInstance && isToolAllowed('create')) {
         this.toolImplementations.create = wrappedTools.createToolInstance;
       }
     }

package/src/agent/tools.js

@@ -31,21 +31,39 @@ import { processXmlWithThinkingAndRecovery } from './xmlParsingUtils.js';
 
 // Create configured tool instances
 export function createTools(configOptions) {
-  const tools = {
-    searchTool: searchTool(configOptions),
-    queryTool: queryTool(configOptions),
-    extractTool: extractTool(configOptions),
-    delegateTool: delegateTool(configOptions)
-  };
+  const tools = {};
+
+  const isToolAllowed =
+    configOptions.isToolAllowed ||
+    ((toolName) => {
+      if (!configOptions.allowedTools) return true;
+      return configOptions.allowedTools.isEnabled(toolName);
+    });
+
+  // Core tools
+  if (isToolAllowed('search')) {
+    tools.searchTool = searchTool(configOptions);
+  }
+  if (isToolAllowed('query')) {
+    tools.queryTool = queryTool(configOptions);
+  }
+  if (isToolAllowed('extract')) {
+    tools.extractTool = extractTool(configOptions);
+  }
+  if (configOptions.enableDelegate && isToolAllowed('delegate')) {
+    tools.delegateTool = delegateTool(configOptions);
+  }
 
   // Add bash tool if enabled
-  if (configOptions.enableBash) {
+  if (configOptions.enableBash && isToolAllowed('bash')) {
     tools.bashTool = bashTool(configOptions);
   }
 
   // Add edit and create tools if enabled
-  if (configOptions.allowEdit) {
+  if (configOptions.allowEdit && isToolAllowed('edit')) {
     tools.editTool = editTool(configOptions);
+  }
+  if (configOptions.allowEdit && isToolAllowed('create')) {
     tools.createTool = createTool(configOptions);
   }
 
@@ -199,4 +217,3 @@ export function parseXmlToolCallWithThinking(xmlString, validTools) {
   // Otherwise, use the original parseXmlToolCall function to parse the cleaned XML string
   return parseXmlToolCall(cleanedXmlString, validTools);
 }
-