@sweny-ai/core 0.1.141 → 0.1.143

package/dist/schema.d.ts

@@ -42,12 +42,12 @@ export declare const toolZ: z.ZodObject<{
     description: string;
     name: string;
     input_schema: Record<string, unknown>;
-    access?: "read" | "write" | undefined;
+    access?: "write" | "read" | undefined;
 }, {
     description: string;
     name: string;
     input_schema: Record<string, unknown>;
-    access?: "read" | "write" | undefined;
+    access?: "write" | "read" | undefined;
 }>;
 export declare const skillCategoryZ: z.ZodEnum<["general", "git", "tasks", "notification", "observability", "data"]>;
 export declare const mcpServerConfigZ: z.ZodEffects<z.ZodObject<{
@@ -202,12 +202,12 @@ export declare const skillZ: z.ZodEffects<z.ZodObject<{
         description: string;
         name: string;
         input_schema: Record<string, unknown>;
-        access?: "read" | "write" | undefined;
+        access?: "write" | "read" | undefined;
     }, {
         description: string;
         name: string;
         input_schema: Record<string, unknown>;
-        access?: "read" | "write" | undefined;
+        access?: "write" | "read" | undefined;
     }>, "many">>;
     instruction: z.ZodOptional<z.ZodString>;
     mcp: z.ZodOptional<z.ZodEffects<z.ZodObject<{
@@ -261,7 +261,7 @@ export declare const skillZ: z.ZodEffects<z.ZodObject<{
         description: string;
         name: string;
         input_schema: Record<string, unknown>;
-        access?: "read" | "write" | undefined;
+        access?: "write" | "read" | undefined;
     }[];
     instruction?: string | undefined;
     mcp?: {
@@ -296,7 +296,7 @@ export declare const skillZ: z.ZodEffects<z.ZodObject<{
         description: string;
         name: string;
         input_schema: Record<string, unknown>;
-        access?: "read" | "write" | undefined;
+        access?: "write" | "read" | undefined;
     }[] | undefined;
     mcpAliases?: Record<string, string[]> | undefined;
 }>, {
@@ -313,7 +313,7 @@ export declare const skillZ: z.ZodEffects<z.ZodObject<{
         description: string;
         name: string;
         input_schema: Record<string, unknown>;
-        access?: "read" | "write" | undefined;
+        access?: "write" | "read" | undefined;
     }[];
     instruction?: string | undefined;
     mcp?: {
@@ -348,7 +348,7 @@ export declare const skillZ: z.ZodEffects<z.ZodObject<{
         description: string;
         name: string;
         input_schema: Record<string, unknown>;
-        access?: "read" | "write" | undefined;
+        access?: "write" | "read" | undefined;
     }[] | undefined;
     mcpAliases?: Record<string, string[]> | undefined;
 }>;
@@ -3199,11 +3199,11 @@ export declare const workflowJsonSchema: {
                             readonly type: "string";
                             readonly minLength: 1;
                         };
-                        readonly description: "Built-in tool names the agent cannot use at this node (e.g. ['Bash']). Forwarded to the Claude Agent SDK's disallowedTools, which removes the tools from the model context entirely.";
+                        readonly description: "Built-in tool names the agent cannot use at this node, in the harness's own names (Claude Code: ['Bash']). Passed through to the harness: Claude Code removes them from the model context; Codex maps known names to tool classes and reports what it cannot deny as degraded. For portable workflows prefer tool classes in tools.deny.";
                     };
                     readonly tools: {
                         readonly type: "object";
-                        readonly description: "Per-node filter over skill-provided tools. 'allow' keeps only the listed skill tools; 'deny' removes the listed skill tools (applied after 'allow'). Filtered tools are never registered for the node's run. Absent field = all skill tools exposed. Complements disallowed_tools, which covers built-in agent tools only.";
+                        readonly description: "Per-node filter over skill-provided tools. 'allow' keeps only the listed skill tools; 'deny' removes the listed skill tools (applied after 'allow'). Filtered tools are never registered for the node's run. Absent field = all skill tools exposed. A 'deny' entry that names a portable tool class (shell, write, edit, net, subagent) also denies that class of built-in agent tools on every harness.";
                         readonly additionalProperties: false;
                         readonly anyOf: readonly [{
                             readonly required: readonly ["allow"];
@@ -3226,6 +3226,7 @@ export declare const workflowJsonSchema: {
                                     readonly minLength: 1;
                                 };
                                 readonly minItems: 1;
+                                readonly description: "Skill tool names to remove, and/or portable tool classes (shell, write, edit, net, subagent) to deny for built-in agent tools. Each harness enforces a class natively or reports it as degraded; under strict harness policy an unenforceable class refuses the node.";
                             };
                         };
                     };
@@ -3358,7 +3359,7 @@ export declare const workflowJsonSchema: {
                     };
                     readonly when: {
                         readonly type: "string";
-                        readonly description: "Natural language condition. Claude evaluates at runtime.";
+                        readonly description: "Natural language condition, evaluated at runtime by the workflow's harness.";
                     };
                     readonly max_iterations: {
                         readonly type: "integer";

package/dist/schema.js

@@ -860,11 +860,11 @@ export const workflowJsonSchema = {
                     disallowed_tools: {
                         type: "array",
                         items: { type: "string", minLength: 1 },
-                        description: "Built-in tool names the agent cannot use at this node (e.g. ['Bash']). Forwarded to the Claude Agent SDK's disallowedTools, which removes the tools from the model context entirely.",
+                        description: "Built-in tool names the agent cannot use at this node, in the harness's own names (Claude Code: ['Bash']). Passed through to the harness: Claude Code removes them from the model context; Codex maps known names to tool classes and reports what it cannot deny as degraded. For portable workflows prefer tool classes in tools.deny.",
                     },
                     tools: {
                         type: "object",
-                        description: "Per-node filter over skill-provided tools. 'allow' keeps only the listed skill tools; 'deny' removes the listed skill tools (applied after 'allow'). Filtered tools are never registered for the node's run. Absent field = all skill tools exposed. Complements disallowed_tools, which covers built-in agent tools only.",
+                        description: "Per-node filter over skill-provided tools. 'allow' keeps only the listed skill tools; 'deny' removes the listed skill tools (applied after 'allow'). Filtered tools are never registered for the node's run. Absent field = all skill tools exposed. A 'deny' entry that names a portable tool class (shell, write, edit, net, subagent) also denies that class of built-in agent tools on every harness.",
                         additionalProperties: false,
                         anyOf: [{ required: ["allow"] }, { required: ["deny"] }],
                         properties: {
@@ -877,6 +877,7 @@ export const workflowJsonSchema = {
                                 type: "array",
                                 items: { type: "string", minLength: 1 },
                                 minItems: 1,
+                                description: "Skill tool names to remove, and/or portable tool classes (shell, write, edit, net, subagent) to deny for built-in agent tools. Each harness enforces a class natively or reports it as degraded; under strict harness policy an unenforceable class refuses the node.",
                             },
                         },
                     },
@@ -981,7 +982,10 @@ export const workflowJsonSchema = {
                 properties: {
                     from: { type: "string", minLength: 1 },
                     to: { type: "string", minLength: 1 },
-                    when: { type: "string", description: "Natural language condition. Claude evaluates at runtime." },
+                    when: {
+                        type: "string",
+                        description: "Natural language condition, evaluated at runtime by the workflow's harness.",
+                    },
                     max_iterations: {
                         type: "integer",
                         minimum: 1,

package/dist/types.d.ts

@@ -2,6 +2,7 @@ export type { Source, ResolvedSource, SourceKind, SourceResolutionMap } from "./
 export type { WorkflowInputs, WorkflowInputField, WorkflowInputType, InputValidationError, InputValidationResult, } from "./inputs.js";
 export { WORKFLOW_INPUT_TYPES } from "./inputs.js";
 import type { Source as _Source, ResolvedSource as _ResolvedSource } from "./sources.js";
+import type { ToolClass } from "./harness/types.js";
 export type JSONSchema = Record<string, unknown>;
 /** Context passed to tool handlers at execution time */
 export interface ToolContext {
@@ -376,7 +377,7 @@ export interface NodeToolFilter {
 export interface Edge {
     from: string;
     to: string;
-    /** Natural language condition. Claude evaluates at runtime. */
+    /** Natural language condition, evaluated at runtime by the workflow's harness. */
     when?: string;
     /** Max times this edge can be followed (enables retry loops). Default: unlimited. */
     max_iterations?: number;
@@ -624,6 +625,12 @@ export interface Claude {
         maxTurns?: number;
         /** Built-in SDK tool names to disallow for this node (e.g. ["Bash"]). */
         disallowedTools?: string[];
+        /**
+         * Portable built-in tool classes denied at this node (`tools.deny` entries
+         * that name a class: shell, write, edit, net, subagent). Each harness
+         * compiles them to its native form, or reports them in `degraded`.
+         */
+        deny?: ToolClass[];
         /** Per-node execution model. Overrides the client default when set. Absent = no SDK model option emitted. */
         model?: string;
         /** Abort the query after this many ms. Default: no timeout (back-compat). */

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sweny-ai/core",
-  "version": "0.1.141",
+  "version": "0.1.143",
   "type": "module",
   "bin": {
     "sweny": "./dist/cli/main.js"