cascade-ai 0.19.1 → 0.20.0

package/dist/desktop-core.cjs

@@ -222595,7 +222595,7 @@ Anthropic.Models = Models2;
 Anthropic.Beta = Beta;
 
 // src/constants.ts
-var CASCADE_VERSION = "0.19.1";
+var CASCADE_VERSION = "0.20.0";
 var CASCADE_CONFIG_DIR = ".cascade";
 var CASCADE_MD_FILE = "CASCADE.md";
 var CASCADE_IGNORE_FILE = ".cascadeignore";
@@ -283244,29 +283244,32 @@ var ToolRegistry = class extends EventEmitter__default.default {
     return tool.execute(input, options);
   }
   registerDefaults() {
-    const tools = [
-      new ShellTool(this.config.shellAllowlist, this.config.shellBlocklist),
-      new FileReadTool(),
-      new FileWriteTool(),
-      new FileEditTool(),
-      new FileDeleteTool(),
-      new FileListTool(),
-      new GitTool(),
-      new GitHubTool(),
-      new ImageAnalyzeTool(),
-      new PDFCreateTool(),
-      new CodeInterpreterTool(),
-      new PeerCommunicationTool(),
-      new WebSearchTool(this.config.webSearch),
-      new GlobTool(),
-      new GrepTool(),
-      new WebFetchTool()
+    const allowlist = this.config.enabledTools;
+    const enabled = (name) => !allowlist || allowlist.includes(name);
+    const candidates = [
+      enabled("shell") && new ShellTool(this.config.shellAllowlist, this.config.shellBlocklist),
+      enabled("file_read") && new FileReadTool(),
+      enabled("file_write") && new FileWriteTool(),
+      enabled("file_edit") && new FileEditTool(),
+      enabled("file_delete") && new FileDeleteTool(),
+      enabled("file_list") && new FileListTool(),
+      enabled("git") && new GitTool(),
+      enabled("github") && new GitHubTool(),
+      enabled("image_analyze") && new ImageAnalyzeTool(),
+      enabled("pdf_create") && new PDFCreateTool(),
+      enabled("run_code") && new CodeInterpreterTool(),
+      enabled("peer_message") && new PeerCommunicationTool(),
+      enabled("web_search") && new WebSearchTool(this.config.webSearch),
+      enabled("glob") && new GlobTool(),
+      enabled("grep") && new GrepTool(),
+      enabled("web_fetch") && new WebFetchTool()
     ];
+    const tools = candidates.filter((t4) => t4 !== false);
     for (const tool of tools) {
       tool.setWorkspaceRoot(this.workspaceRoot);
       this.register(tool);
     }
-    if (this.config.browserEnabled) {
+    if (this.config.browserEnabled && enabled("browser")) {
       const browser = new BrowserTool();
       browser.setWorkspaceRoot(this.workspaceRoot);
       this.register(browser);
@@ -294901,7 +294904,13 @@ var ToolsConfigSchema = external_exports.object({
    * - 'worker': node:worker_threads (resource/kill limits, but not capability-confined).
    * - 'auto' (default): use the isolate when `isolated-vm` loads, else fall back to worker.
    */
-  dynamicToolSandbox: external_exports.enum(["isolate", "worker", "auto"]).default("auto")
+  dynamicToolSandbox: external_exports.enum(["isolate", "worker", "auto"]).default("auto"),
+  /**
+   * When set, ONLY these tool names are registered — the sole way to omit a
+   * built-in tool (shell/file/git/…) from existing at all, rather than just
+   * gating it behind approval. Omitted = full default set (unchanged).
+   */
+  enabledTools: external_exports.array(external_exports.string()).optional()
 });
 var HookDefinitionSchema = external_exports.object({
   name: external_exports.string().optional(),

package/dist/index.cjs

@@ -236,7 +236,7 @@ var init_audit_logger = __esm({
 });
 
 // src/constants.ts
-var CASCADE_VERSION = "0.19.1";
+var CASCADE_VERSION = "0.20.0";
 var CASCADE_CONFIG_DIR = ".cascade";
 var CASCADE_MD_FILE = "CASCADE.md";
 var CASCADE_IGNORE_FILE = ".cascadeignore";
@@ -8091,29 +8091,32 @@ var ToolRegistry = class extends EventEmitter__default.default {
     return tool.execute(input, options);
   }
   registerDefaults() {
-    const tools = [
-      new ShellTool(this.config.shellAllowlist, this.config.shellBlocklist),
-      new FileReadTool(),
-      new FileWriteTool(),
-      new FileEditTool(),
-      new FileDeleteTool(),
-      new FileListTool(),
-      new GitTool(),
-      new GitHubTool(),
-      new ImageAnalyzeTool(),
-      new PDFCreateTool(),
-      new CodeInterpreterTool(),
-      new PeerCommunicationTool(),
-      new WebSearchTool(this.config.webSearch),
-      new GlobTool(),
-      new GrepTool(),
-      new WebFetchTool()
+    const allowlist = this.config.enabledTools;
+    const enabled = (name) => !allowlist || allowlist.includes(name);
+    const candidates = [
+      enabled("shell") && new ShellTool(this.config.shellAllowlist, this.config.shellBlocklist),
+      enabled("file_read") && new FileReadTool(),
+      enabled("file_write") && new FileWriteTool(),
+      enabled("file_edit") && new FileEditTool(),
+      enabled("file_delete") && new FileDeleteTool(),
+      enabled("file_list") && new FileListTool(),
+      enabled("git") && new GitTool(),
+      enabled("github") && new GitHubTool(),
+      enabled("image_analyze") && new ImageAnalyzeTool(),
+      enabled("pdf_create") && new PDFCreateTool(),
+      enabled("run_code") && new CodeInterpreterTool(),
+      enabled("peer_message") && new PeerCommunicationTool(),
+      enabled("web_search") && new WebSearchTool(this.config.webSearch),
+      enabled("glob") && new GlobTool(),
+      enabled("grep") && new GrepTool(),
+      enabled("web_fetch") && new WebFetchTool()
     ];
+    const tools = candidates.filter((t) => t !== false);
     for (const tool of tools) {
       tool.setWorkspaceRoot(this.workspaceRoot);
       this.register(tool);
     }
-    if (this.config.browserEnabled) {
+    if (this.config.browserEnabled && enabled("browser")) {
       const browser = new BrowserTool();
       browser.setWorkspaceRoot(this.workspaceRoot);
       this.register(browser);
@@ -8463,7 +8466,13 @@ var ToolsConfigSchema = zod.z.object({
    * - 'worker': node:worker_threads (resource/kill limits, but not capability-confined).
    * - 'auto' (default): use the isolate when `isolated-vm` loads, else fall back to worker.
    */
-  dynamicToolSandbox: zod.z.enum(["isolate", "worker", "auto"]).default("auto")
+  dynamicToolSandbox: zod.z.enum(["isolate", "worker", "auto"]).default("auto"),
+  /**
+   * When set, ONLY these tool names are registered — the sole way to omit a
+   * built-in tool (shell/file/git/…) from existing at all, rather than just
+   * gating it behind approval. Omitted = full default set (unchanged).
+   */
+  enabledTools: zod.z.array(zod.z.string()).optional()
 });
 var HookDefinitionSchema = zod.z.object({
   name: zod.z.string().optional(),