cascade-ai 0.19.1 → 0.20.0

package/dist/cli.js

@@ -59,7 +59,7 @@ var __export = (target, all) => {
 var CASCADE_VERSION, CASCADE_CONFIG_FILE, CASCADE_DB_FILE, CASCADE_DASHBOARD_SECRET_FILE, GLOBAL_CONFIG_DIR, GLOBAL_DB_FILE, GLOBAL_KEYSTORE_FILE, GLOBAL_CREDENTIALS_FILE, GLOBAL_RUNTIME_DB_FILE, DEFAULT_DASHBOARD_PORT, DEFAULT_CONTEXT_LIMIT, DEFAULT_AUTO_SUMMARIZE_AT, MODELS, T1_MODEL_PRIORITY, T2_MODEL_PRIORITY, T3_MODEL_PRIORITY, VISION_MODEL_PRIORITY, COMPLEXITY_T2_COUNT, THEME_NAMES, DEFAULT_THEME, OLLAMA_BASE_URL, LM_STUDIO_BASE_URL, AZURE_BASE_URL_TEMPLATE, TOOL_NAMES, DEFAULT_APPROVAL_REQUIRED;
 var init_constants = __esm({
   "src/constants.ts"() {
-    CASCADE_VERSION = "0.19.1";
+    CASCADE_VERSION = "0.20.0";
     CASCADE_CONFIG_FILE = ".cascade/config.json";
     CASCADE_DB_FILE = ".cascade/memory.db";
     CASCADE_DASHBOARD_SECRET_FILE = ".cascade/dashboard-secret";
@@ -2948,7 +2948,13 @@ var ToolsConfigSchema = z.object({
    * - 'worker': node:worker_threads (resource/kill limits, but not capability-confined).
    * - 'auto' (default): use the isolate when `isolated-vm` loads, else fall back to worker.
    */
-  dynamicToolSandbox: z.enum(["isolate", "worker", "auto"]).default("auto")
+  dynamicToolSandbox: z.enum(["isolate", "worker", "auto"]).default("auto"),
+  /**
+   * When set, ONLY these tool names are registered — the sole way to omit a
+   * built-in tool (shell/file/git/…) from existing at all, rather than just
+   * gating it behind approval. Omitted = full default set (unchanged).
+   */
+  enabledTools: z.array(z.string()).optional()
 });
 var HookDefinitionSchema = z.object({
   name: z.string().optional(),
@@ -10089,29 +10095,32 @@ var ToolRegistry = class extends EventEmitter {
     return tool.execute(input, options);
   }
   registerDefaults() {
-    const tools = [
-      new ShellTool(this.config.shellAllowlist, this.config.shellBlocklist),
-      new FileReadTool(),
-      new FileWriteTool(),
-      new FileEditTool(),
-      new FileDeleteTool(),
-      new FileListTool(),
-      new GitTool(),
-      new GitHubTool(),
-      new ImageAnalyzeTool(),
-      new PDFCreateTool(),
-      new CodeInterpreterTool(),
-      new PeerCommunicationTool(),
-      new WebSearchTool(this.config.webSearch),
-      new GlobTool(),
-      new GrepTool(),
-      new WebFetchTool()
+    const allowlist = this.config.enabledTools;
+    const enabled = (name) => !allowlist || allowlist.includes(name);
+    const candidates2 = [
+      enabled("shell") && new ShellTool(this.config.shellAllowlist, this.config.shellBlocklist),
+      enabled("file_read") && new FileReadTool(),
+      enabled("file_write") && new FileWriteTool(),
+      enabled("file_edit") && new FileEditTool(),
+      enabled("file_delete") && new FileDeleteTool(),
+      enabled("file_list") && new FileListTool(),
+      enabled("git") && new GitTool(),
+      enabled("github") && new GitHubTool(),
+      enabled("image_analyze") && new ImageAnalyzeTool(),
+      enabled("pdf_create") && new PDFCreateTool(),
+      enabled("run_code") && new CodeInterpreterTool(),
+      enabled("peer_message") && new PeerCommunicationTool(),
+      enabled("web_search") && new WebSearchTool(this.config.webSearch),
+      enabled("glob") && new GlobTool(),
+      enabled("grep") && new GrepTool(),
+      enabled("web_fetch") && new WebFetchTool()
     ];
+    const tools = candidates2.filter((t) => t !== false);
     for (const tool of tools) {
       tool.setWorkspaceRoot(this.workspaceRoot);
       this.register(tool);
     }
-    if (this.config.browserEnabled) {
+    if (this.config.browserEnabled && enabled("browser")) {
       const browser = new BrowserTool();
       browser.setWorkspaceRoot(this.workspaceRoot);
       this.register(browser);