@team-agent/installer 0.5.85 → 0.5.86

package/crates/team-agent/src/model/spec.rs

@@ -6,20 +6,18 @@
 //! serde_json `preserve_order` 保证 child 迭代序 == Python 插入序。
 //!
 //! 本文件先落地 `validate_result_envelope`(自包含,step 7/11 的门)。`validate_spec`
-//! 依赖 `expand_tools`(permissions)+ `find_dependency_cycle`(task_graph)+ yaml Value,
-//! 待那几个叶子模块集成后再加。
+//! 依赖 `find_dependency_cycle`(task_graph)+ yaml Value。
 
 use std::path::Path;
 
 use serde_json::Value;
 
-use crate::model::enums::{Provider, TaskStatus};
+use crate::model::enums::TaskStatus;
 use crate::model::errors::ModelError;
 use crate::model::ids::TaskId;
 use crate::model::task_graph::{find_dependency_cycle, TaskNode};
 use crate::model::yaml::Value as Yaml;
-use crate::model::{permissions, yaml};
-use crate::provider::adapters::pi::first_unsupported_pi_tool_category;
+use crate::model::yaml;
 use crate::provider::wire::{is_claude_family, parse_canonical_provider};
 
 /// result_envelope_v1 顶层 required(= allowed)。
@@ -333,12 +331,13 @@ fn basic_schema_errors(spec: &Yaml) -> Vec<String> {
     if !matches!(mode, Some("supervisor_worker" | "swarm_limited")) {
         e.push("/team/mode: invalid mode".to_string());
     }
-    let leader_keys = &["id", "role", "provider", "model", "tools", "context_policy"];
+    let leader_keys = &["id", "role", "provider", "model", "context_policy"];
+    let leader_allowed = &["id", "role", "provider", "model", "tools", "context_policy"];
     check_keys_y(
         spec.get("leader"),
         "/leader",
         leader_keys,
-        leader_keys,
+        leader_allowed,
         &mut e,
     );
     let cp_keys = &[
@@ -407,7 +406,6 @@ fn check_agent(agent: &Yaml, path: &str, errors: &mut Vec<String>) {
         "model",
         "working_directory",
         "system_prompt",
-        "tools",
         "dangerously_skip_permissions",
         "preferred_for",
         "avoid_for",
@@ -483,7 +481,6 @@ fn check_agent(agent: &Yaml, path: &str, errors: &mut Vec<String>) {
         &["inline", "file"],
         errors,
     );
-    check_list_y(agent.get("tools"), &format!("{path}/tools"), errors);
     check_list_y(
         agent.get("preferred_for"),
         &format!("{path}/preferred_for"),
@@ -787,67 +784,6 @@ fn semantic_errors(spec: &Yaml, base_dir: &Path) -> Vec<String> {
                 ));
             }
         }
-        let tools: Vec<&str> = agent
-            .get("tools")
-            .and_then(Yaml::as_list)
-            .unwrap_or(&[])
-            .iter()
-            .filter_map(Yaml::as_str)
-            .collect();
-        let expanded_tools = permissions::expand_tool_strings(tools);
-        for tool in &expanded_tools {
-            if !permissions::is_canonical_tool(tool) {
-                e.push(format!(
-                    "/agents/{idx}/tools: unknown tool {}",
-                    py_repr_str(tool)
-                ));
-            }
-        }
-        if parse_canonical_provider(provider.and_then(Yaml::as_str).unwrap_or(""))
-            == Some(Provider::Pi)
-        {
-            if let Some(category) = first_unsupported_pi_tool_category(
-                expanded_tools
-                    .iter()
-                    .filter(|tool| permissions::is_canonical_tool(tool))
-                    .map(String::as_str),
-            ) {
-                e.push(format!(
-                    "/agents/{idx}/tools: Pi does not support Team Agent tool category {category:?}; remove it from this agent's tools"
-                ));
-            }
-        }
-    }
-
-    let leader_tools: Vec<&str> = leader
-        .and_then(|l| l.get("tools"))
-        .and_then(Yaml::as_list)
-        .unwrap_or(&[])
-        .iter()
-        .filter_map(Yaml::as_str)
-        .collect();
-    let expanded_leader_tools = permissions::expand_tool_strings(leader_tools);
-    for tool in &expanded_leader_tools {
-        if !permissions::is_canonical_tool(tool) {
-            e.push(format!(
-                "/leader/tools: unknown tool {}",
-                py_repr_str(tool)
-            ));
-        }
-    }
-    if parse_canonical_provider(leader_provider.and_then(Yaml::as_str).unwrap_or(""))
-        == Some(Provider::Pi)
-    {
-        if let Some(category) = first_unsupported_pi_tool_category(
-            expanded_leader_tools
-                .iter()
-                .filter(|tool| permissions::is_canonical_tool(tool))
-                .map(String::as_str),
-        ) {
-            e.push(format!(
-                "/leader/tools: Pi does not support Team Agent tool category {category:?}; remove it from the leader's tools"
-            ));
-        }
     }
 
     let routing = spec.get("routing");
@@ -1070,7 +1006,7 @@ mod tests {
     }
 
     #[test]
-    fn pi_spec_accepts_native_categories_and_rejects_provider_builtin() {
+    fn tools_are_transparent_for_all_providers() {
         let pi_text = include_str!("testdata/team.spec.yaml")
             .lines()
             .filter(|line| {
@@ -1093,22 +1029,26 @@ mod tests {
             1,
         );
         let bad_agent = yaml::loads(&bad_agent_text).unwrap();
-        let error = validate_spec(&bad_agent, Path::new(TD)).unwrap_err().to_string();
         assert!(
-            error.contains("/agents/0/tools: Pi does not support Team Agent tool category \"provider_builtin\""),
-            "spec validation must reject the Pi agent category: {error}"
+            validate_spec(&bad_agent, Path::new(TD)).is_ok(),
+            "Pi tools metadata must be ignored"
         );
 
-        let bad_leader_text = pi_text.replacen(
-            "    - mcp_team\n",
-            "    - mcp_team\n    - provider_builtin\n",
-            1,
-        );
-        let bad_leader = yaml::loads(&bad_leader_text).unwrap();
-        let error = validate_spec(&bad_leader, Path::new(TD)).unwrap_err().to_string();
+        let missing_tools = pi_text
+            .replacen(
+                "  tools:\n    - fs_read\n    - fs_list\n    - mcp_team\n",
+                "",
+                1,
+            )
+            .replacen(
+                "    tools:\n      - fs_read\n      - fs_write\n      - fs_list\n      - execute_bash\n      - mcp_team\n",
+                "",
+                1,
+            );
+        let missing_tools = yaml::loads(&missing_tools).unwrap();
         assert!(
-            error.contains("/leader/tools: Pi does not support Team Agent tool category \"provider_builtin\""),
-            "spec validation must reject the Pi leader category: {error}"
+            validate_spec(&missing_tools, Path::new(TD)).is_ok(),
+            "omitted tools metadata must be accepted"
         );
     }
 
@@ -1121,7 +1061,6 @@ mod tests {
                 "/version: must equal 1",
                 "/team/mode: invalid mode",
                 "/leader/provider: unknown provider 'badprov'",
-                "/agents/0/tools: unknown tool 'banana'",
             ]
         );
     }

package/crates/team-agent/src/provider/adapter.rs

@@ -54,27 +54,26 @@ pub trait ProviderAdapter {
         model: Option<&str>,
     ) -> Result<Vec<String>, ProviderError>;
 
-    /// Same as [`ProviderAdapter::build_command`], with the agent tool list supplied
-    /// so provider-specific sandbox flags can be computed without guessing.
-    fn build_command_with_tools(
+    /// Same as [`ProviderAdapter::build_command`], with the explicit bypass flag.
+    fn build_command_with_permissions(
         &self,
         auth_mode: AuthMode,
         mcp_config: Option<&McpConfig>,
         system_prompt: Option<&str>,
         model: Option<&str>,
-        tools: &[&str],
+        dangerously_skip_permissions: bool,
     ) -> Result<Vec<String>, ProviderError>;
 
     fn build_command_plan(
         &self,
         ctx: ProviderCommandContext<'_>,
     ) -> Result<CommandPlan, ProviderError> {
-        self.build_command_with_tools(
+        self.build_command_with_permissions(
             ctx.auth_mode,
             ctx.mcp_config,
             ctx.system_prompt,
             ctx.model,
-            ctx.tools,
+            ctx.dangerously_skip_permissions,
         )
         .map(CommandPlan::argv_only)
     }
@@ -139,7 +138,7 @@ pub trait ProviderAdapter {
         mcp_config: Option<&McpConfig>,
         system_prompt: Option<&str>,
         model: Option<&str>,
-        tools: &[&str],
+        dangerously_skip_permissions: bool,
     ) -> Result<Vec<String>, ProviderError>;
 
     fn build_resume_command_plan(
@@ -153,7 +152,7 @@ pub trait ProviderAdapter {
             ctx.mcp_config,
             ctx.system_prompt,
             ctx.model,
-            ctx.tools,
+            ctx.dangerously_skip_permissions,
         )
         .map(CommandPlan::argv_only)
     }
@@ -174,7 +173,7 @@ pub trait ProviderAdapter {
         mcp_config: Option<&McpConfig>,
         system_prompt: Option<&str>,
         model: Option<&str>,
-        tools: &[&str],
+        dangerously_skip_permissions: bool,
     ) -> Result<Vec<String>, ProviderError>;
 
     fn fork_plan(
@@ -188,7 +187,7 @@ pub trait ProviderAdapter {
             ctx.mcp_config,
             ctx.system_prompt,
             ctx.model,
-            ctx.tools,
+            ctx.dangerously_skip_permissions,
         )
         .map(CommandPlan::argv_only)
     }
@@ -429,16 +428,16 @@ impl ProviderAdapter for BasicProviderAdapter {
         system_prompt: Option<&str>,
         model: Option<&str>,
     ) -> Result<Vec<String>, ProviderError> {
-        self.build_command_with_tools(auth_mode, mcp_config, system_prompt, model, &[])
+        self.build_command_with_permissions(auth_mode, mcp_config, system_prompt, model, false)
     }
 
-    fn build_command_with_tools(
+    fn build_command_with_permissions(
         &self,
         auth_mode: AuthMode,
         mcp_config: Option<&McpConfig>,
         system_prompt: Option<&str>,
         model: Option<&str>,
-        tools: &[&str],
+        dangerously_skip_permissions: bool,
     ) -> Result<Vec<String>, ProviderError> {
         match self.provider {
             Provider::Claude | Provider::ClaudeCode => Ok(claude_launch_command(
@@ -447,7 +446,7 @@ impl ProviderAdapter for BasicProviderAdapter {
                 mcp_config,
                 system_prompt,
                 model,
-                tools,
+                dangerously_skip_permissions,
             )?),
             Provider::Codex => Ok(codex_base_command(
                 None,
@@ -455,7 +454,7 @@ impl ProviderAdapter for BasicProviderAdapter {
                 mcp_config,
                 system_prompt,
                 model,
-                tools,
+                dangerously_skip_permissions,
                 None,
                 None,
             )),
@@ -470,7 +469,7 @@ impl ProviderAdapter for BasicProviderAdapter {
                 mcp_config,
                 system_prompt,
                 model,
-                tools,
+                dangerously_skip_permissions,
             )),
             Provider::GeminiCli => {
                 let mut argv = vec!["gemini".to_string()];
@@ -486,7 +485,7 @@ impl ProviderAdapter for BasicProviderAdapter {
                 mcp_config,
                 system_prompt,
                 model,
-                tools,
+                dangerously_skip_permissions,
             )?),
             Provider::CursorAgent => Ok(cursor_agent_base_command(
                 self,
@@ -494,7 +493,7 @@ impl ProviderAdapter for BasicProviderAdapter {
                 mcp_config,
                 system_prompt,
                 model,
-                tools,
+                dangerously_skip_permissions,
                 false,
                 None,
             )?),
@@ -542,7 +541,7 @@ impl ProviderAdapter for BasicProviderAdapter {
                     ctx.mcp_config,
                     ctx.system_prompt,
                     model,
-                    ctx.tools,
+                    ctx.dangerously_skip_permissions,
                     managed,
                     ctx.effort,
                 )?;
@@ -581,7 +580,7 @@ impl ProviderAdapter for BasicProviderAdapter {
                 ctx.mcp_config,
                 ctx.system_prompt,
                 ctx.model,
-                ctx.tools,
+                ctx.dangerously_skip_permissions,
                 ctx.profile_launch.map(|profile| &profile.command_overrides),
                 ctx.effort,
             ))),
@@ -602,7 +601,7 @@ impl ProviderAdapter for BasicProviderAdapter {
                     ctx.mcp_config,
                     ctx.system_prompt,
                     ctx.model,
-                    ctx.tools,
+                    ctx.dangerously_skip_permissions,
                     ctx.profile_launch
                         .is_some_and(|profile| profile.managed_mcp_config),
                     ctx.effort,
@@ -623,7 +622,7 @@ impl ProviderAdapter for BasicProviderAdapter {
                     ctx.mcp_config,
                     ctx.system_prompt,
                     ctx.model,
-                    ctx.tools,
+                    ctx.dangerously_skip_permissions,
                 );
                 argv.push("--session-id".to_string());
                 argv.push(expected.clone());
@@ -643,7 +642,7 @@ impl ProviderAdapter for BasicProviderAdapter {
                     ctx.mcp_config,
                     ctx.system_prompt,
                     ctx.model,
-                    ctx.tools,
+                    ctx.dangerously_skip_permissions,
                     ctx.profile_launch
                         .is_some_and(|profile| profile.managed_mcp_config),
                     ctx.effort,
@@ -659,12 +658,12 @@ impl ProviderAdapter for BasicProviderAdapter {
                 "Pi commands require the shared lifecycle materializer".to_string(),
             )),
             _ => self
-                .build_command_with_tools(
+                .build_command_with_permissions(
                     ctx.auth_mode,
                     ctx.mcp_config,
                     ctx.system_prompt,
                     ctx.model,
-                    ctx.tools,
+                    ctx.dangerously_skip_permissions,
                 )
                 .map(CommandPlan::argv_only),
         }
@@ -760,7 +759,7 @@ impl ProviderAdapter for BasicProviderAdapter {
         auth_mode: AuthMode,
         mcp_config: Option<&McpConfig>,
     ) -> Result<Vec<String>, ProviderError> {
-        self.build_resume_command_with_context(session_id, auth_mode, mcp_config, None, None, &[])
+        self.build_resume_command_with_context(session_id, auth_mode, mcp_config, None, None, false)
     }
 
     fn build_resume_command_with_context(
@@ -770,7 +769,7 @@ impl ProviderAdapter for BasicProviderAdapter {
         mcp_config: Option<&McpConfig>,
         system_prompt: Option<&str>,
         model: Option<&str>,
-        tools: &[&str],
+        dangerously_skip_permissions: bool,
     ) -> Result<Vec<String>, ProviderError> {
         if !self.session_is_resumable(session_id, auth_mode)? {
             return Err(ProviderError::ResumeUnavailable(format!(
@@ -791,7 +790,7 @@ impl ProviderAdapter for BasicProviderAdapter {
                     mcp_config,
                     system_prompt,
                     model,
-                    tools,
+                    dangerously_skip_permissions,
                     None,
                     None,
                 );
@@ -805,7 +804,7 @@ impl ProviderAdapter for BasicProviderAdapter {
                     mcp_config,
                     system_prompt,
                     model,
-                    tools,
+                    dangerously_skip_permissions,
                     false,
                     None,
                 )?;
@@ -817,7 +816,7 @@ impl ProviderAdapter for BasicProviderAdapter {
             // copilot --resume 接受 id|name)。
             Provider::Copilot => {
                 let mut argv =
-                    copilot_base_command_resume(auth_mode, mcp_config, system_prompt, model, tools);
+                    copilot_base_command_resume(auth_mode, mcp_config, system_prompt, model, dangerously_skip_permissions);
                 argv.push("--resume".to_string());
                 argv.push(session_id.as_str().to_string());
                 Ok(argv)
@@ -830,7 +829,7 @@ impl ProviderAdapter for BasicProviderAdapter {
                     mcp_config,
                     system_prompt,
                     model,
-                    tools,
+                    dangerously_skip_permissions,
                     false,
                     None,
                 )?;
@@ -846,7 +845,7 @@ impl ProviderAdapter for BasicProviderAdapter {
                     mcp_config,
                     system_prompt,
                     model,
-                    tools,
+                    dangerously_skip_permissions,
                     false,
                     None,
                 )?;
@@ -888,7 +887,7 @@ impl ProviderAdapter for BasicProviderAdapter {
                     ctx.mcp_config,
                     ctx.system_prompt,
                     model,
-                    ctx.tools,
+                    ctx.dangerously_skip_permissions,
                     managed,
                     ctx.effort,
                 )?;
@@ -928,7 +927,7 @@ impl ProviderAdapter for BasicProviderAdapter {
                     ctx.mcp_config,
                     ctx.system_prompt,
                     ctx.model,
-                    ctx.tools,
+                    ctx.dangerously_skip_permissions,
                     ctx.profile_launch.map(|profile| &profile.command_overrides),
                     ctx.effort,
                 );
@@ -947,7 +946,7 @@ impl ProviderAdapter for BasicProviderAdapter {
                     ctx.mcp_config,
                     ctx.system_prompt,
                     ctx.model,
-                    ctx.tools,
+                    ctx.dangerously_skip_permissions,
                     ctx.profile_launch
                         .is_some_and(|profile| profile.managed_mcp_config),
                     ctx.effort,
@@ -974,7 +973,7 @@ impl ProviderAdapter for BasicProviderAdapter {
                     ctx.mcp_config,
                     ctx.system_prompt,
                     ctx.model,
-                    ctx.tools,
+                    ctx.dangerously_skip_permissions,
                     ctx.profile_launch
                         .is_some_and(|profile| profile.managed_mcp_config),
                     ctx.effort,
@@ -990,7 +989,7 @@ impl ProviderAdapter for BasicProviderAdapter {
                     ctx.mcp_config,
                     ctx.system_prompt,
                     ctx.model,
-                    ctx.tools,
+                    ctx.dangerously_skip_permissions,
                 )
                 .map(CommandPlan::argv_only),
         }
@@ -1002,7 +1001,7 @@ impl ProviderAdapter for BasicProviderAdapter {
         auth_mode: AuthMode,
         mcp_config: Option<&McpConfig>,
     ) -> Result<Vec<String>, ProviderError> {
-        self.fork_with_context(session_id, auth_mode, mcp_config, None, None, &[])
+        self.fork_with_context(session_id, auth_mode, mcp_config, None, None, false)
     }
 
     fn fork_with_context(
@@ -1012,7 +1011,7 @@ impl ProviderAdapter for BasicProviderAdapter {
         mcp_config: Option<&McpConfig>,
         system_prompt: Option<&str>,
         model: Option<&str>,
-        tools: &[&str],
+        dangerously_skip_permissions: bool,
     ) -> Result<Vec<String>, ProviderError> {
         if !self.caps().fork || auth_mode == AuthMode::CompatibleApi {
             return Err(ProviderError::CapabilityUnsupported(format!(
@@ -1033,7 +1032,7 @@ impl ProviderAdapter for BasicProviderAdapter {
                     mcp_config,
                     system_prompt,
                     model,
-                    tools,
+                    dangerously_skip_permissions,
                     None,
                     None,
                 );
@@ -1047,7 +1046,7 @@ impl ProviderAdapter for BasicProviderAdapter {
                     mcp_config,
                     system_prompt,
                     model,
-                    tools,
+                    dangerously_skip_permissions,
                     false,
                     None,
                 )?;
@@ -1073,7 +1072,7 @@ impl ProviderAdapter for BasicProviderAdapter {
                     mcp_config,
                     system_prompt,
                     model,
-                    tools,
+                    dangerously_skip_permissions,
                     false,
                     None,
                 )?;
@@ -1125,7 +1124,7 @@ impl ProviderAdapter for BasicProviderAdapter {
                     ctx.mcp_config,
                     ctx.system_prompt,
                     model,
-                    ctx.tools,
+                    ctx.dangerously_skip_permissions,
                     managed,
                     ctx.effort,
                 )?;
@@ -1156,7 +1155,7 @@ impl ProviderAdapter for BasicProviderAdapter {
                     ctx.mcp_config,
                     ctx.system_prompt,
                     ctx.model,
-                    ctx.tools,
+                    ctx.dangerously_skip_permissions,
                     ctx.profile_launch.map(|profile| &profile.command_overrides),
                     ctx.effort,
                 );
@@ -1197,7 +1196,7 @@ impl ProviderAdapter for BasicProviderAdapter {
                     ctx.mcp_config,
                     ctx.system_prompt,
                     ctx.model,
-                    ctx.tools,
+                    ctx.dangerously_skip_permissions,
                 );
                 argv.push("--resume".to_string());
                 argv.push(expected.as_str().to_string());
@@ -1220,7 +1219,7 @@ impl ProviderAdapter for BasicProviderAdapter {
                     ctx.mcp_config,
                     ctx.system_prompt,
                     ctx.model,
-                    ctx.tools,
+                    ctx.dangerously_skip_permissions,
                     ctx.profile_launch
                         .is_some_and(|profile| profile.managed_mcp_config),
                     ctx.effort,
@@ -1239,7 +1238,7 @@ impl ProviderAdapter for BasicProviderAdapter {
                     ctx.mcp_config,
                     ctx.system_prompt,
                     ctx.model,
-                    ctx.tools,
+                    ctx.dangerously_skip_permissions,
                 )
                 .map(CommandPlan::argv_only),
         }
@@ -1402,9 +1401,8 @@ pub(crate) fn json_inline(value: &serde_json::Value) -> String {
 
 // 0.4.x decoupling step 2: provider-local command builders moved to provider/adapters/.
 // Only the entry points the trait impl actually calls are re-imported here;
-// the per-provider helper fns (dangerous_auto_approve, permission flags,
-// disallowed_tools, sandbox_mode, mcp_overrides) are called from within the
-// extracted base_command fns, not directly by this file.
+// The per-provider command helpers and MCP renderers are called from within
+// the extracted base-command functions, not directly by this file.
 use super::adapters::claude::{claude_base_command, claude_launch_command};
 use super::adapters::codex::codex_base_command;
 use super::adapters::copilot::{copilot_base_command, copilot_base_command_resume};

package/crates/team-agent/src/provider/adapters/claude.rs

@@ -3,7 +3,7 @@
 //!
 //! Extracted from `provider/adapter.rs` (0.4.x decoupling step 2). Pure
 //! extraction — byte-identical to the original inline forms. Scope kept
-//! small on purpose: base command + permission/disallowed-tool mapping +
+//! small on purpose: base command + launch wrapper +
 //! launch wrapper. Auth hints (`claude_auth_hint`) and the context-aware model
 //! resolver (`claude_context_model`) stay in `adapter.rs`; capture scanning
 //! helpers now live under `provider/session_scan/claude.rs`.
@@ -18,7 +18,7 @@ pub(crate) fn claude_launch_command(
     mcp_config: Option<&McpConfig>,
     system_prompt: Option<&str>,
     model: Option<&str>,
-    tools: &[&str],
+    dangerously_skip_permissions: bool,
 ) -> Result<Vec<String>, ProviderError> {
     let mut argv = claude_base_command(
         adapter,
@@ -26,7 +26,7 @@ pub(crate) fn claude_launch_command(
         mcp_config,
         system_prompt,
         model,
-        tools,
+        dangerously_skip_permissions,
         false,
         None,
     )?;
@@ -41,14 +41,14 @@ pub(crate) fn claude_base_command(
     mcp_config: Option<&McpConfig>,
     system_prompt: Option<&str>,
     model: Option<&str>,
-    tools: &[&str],
+    dangerously_skip_permissions: bool,
     managed_mcp_config: bool,
     // 0.4.x provider effort MVP step 5: when Some, inject `--effort <level>`
     // immediately after the model (before prompt/MCP).
     effort: Option<crate::model::enums::ProviderEffort>,
 ) -> Result<Vec<String>, ProviderError> {
     let mut argv = vec!["claude".to_string()];
-    if claude_dangerous_auto_approve(tools) {
+    if dangerously_skip_permissions {
         // 0.5.66 bypass 单源:flag 由 provider_bypass_flag 表供给(单源)。
         let flag = crate::provider::bypass_flags::provider_bypass_flag(Provider::Claude)
             .expect("claude provider must define a bypass flag");
@@ -82,30 +82,5 @@ pub(crate) fn claude_base_command(
         argv.push("--mcp-config".to_string());
         argv.push(raw.to_string());
     }
-    for tool in claude_disallowed_tools(tools) {
-        argv.push("--disallowedTools".to_string());
-        argv.push(tool.to_string());
-    }
     Ok(argv)
 }
-
-pub(crate) fn claude_dangerous_auto_approve(tools: &[&str]) -> bool {
-    tools.contains(&"dangerous_auto_approve")
-}
-
-pub(crate) fn claude_disallowed_tools(tools: &[&str]) -> Vec<&'static str> {
-    let mut disallowed = Vec::new();
-    if !tools.contains(&"execute_bash") {
-        disallowed.push("Bash");
-    }
-    if !tools.contains(&"fs_read") {
-        disallowed.push("Read");
-    }
-    if !tools.contains(&"fs_write") {
-        disallowed.extend(["Edit", "Write", "MultiEdit", "NotebookEdit"]);
-    }
-    if !tools.contains(&"fs_list") {
-        disallowed.extend(["Glob", "Grep"]);
-    }
-    disallowed
-}