cascade-ai 0.19.1 → 0.20.0

package/dist/index.d.cts

@@ -499,6 +499,16 @@ interface ToolsConfig {
      * 'auto' (default) = isolate when available else worker.
      */
     dynamicToolSandbox?: 'isolate' | 'worker' | 'auto';
+    /**
+     * When set, ONLY these tool names are registered — every other built-in tool
+     * (including shell/file/git, which have no other off-switch) is omitted
+     * entirely rather than merely approval-gated. Built for embedding Cascade in
+     * an untrusted/multi-tenant context (e.g. a hosted chat server) where the
+     * full tool surface must never exist for a run, not just require a click to
+     * use. `undefined`/omitted registers the full default set (unchanged
+     * behavior). An empty array registers no tools at all.
+     */
+    enabledTools?: string[];
 }
 interface HooksConfig {
     preToolUse?: HookDefinition[];

package/dist/index.d.ts

@@ -499,6 +499,16 @@ interface ToolsConfig {
      * 'auto' (default) = isolate when available else worker.
      */
     dynamicToolSandbox?: 'isolate' | 'worker' | 'auto';
+    /**
+     * When set, ONLY these tool names are registered — every other built-in tool
+     * (including shell/file/git, which have no other off-switch) is omitted
+     * entirely rather than merely approval-gated. Built for embedding Cascade in
+     * an untrusted/multi-tenant context (e.g. a hosted chat server) where the
+     * full tool surface must never exist for a run, not just require a click to
+     * use. `undefined`/omitted registers the full default set (unchanged
+     * behavior). An empty array registers no tools at all.
+     */
+    enabledTools?: string[];
 }
 interface HooksConfig {
     preToolUse?: HookDefinition[];

package/dist/index.js

@@ -190,7 +190,7 @@ var init_audit_logger = __esm({
 });
 
 // src/constants.ts
-var CASCADE_VERSION = "0.19.1";
+var CASCADE_VERSION = "0.20.0";
 var CASCADE_CONFIG_DIR = ".cascade";
 var CASCADE_MD_FILE = "CASCADE.md";
 var CASCADE_IGNORE_FILE = ".cascadeignore";
@@ -8045,29 +8045,32 @@ var ToolRegistry = class extends EventEmitter {
     return tool.execute(input, options);
   }
   registerDefaults() {
-    const tools = [
-      new ShellTool(this.config.shellAllowlist, this.config.shellBlocklist),
-      new FileReadTool(),
-      new FileWriteTool(),
-      new FileEditTool(),
-      new FileDeleteTool(),
-      new FileListTool(),
-      new GitTool(),
-      new GitHubTool(),
-      new ImageAnalyzeTool(),
-      new PDFCreateTool(),
-      new CodeInterpreterTool(),
-      new PeerCommunicationTool(),
-      new WebSearchTool(this.config.webSearch),
-      new GlobTool(),
-      new GrepTool(),
-      new WebFetchTool()
+    const allowlist = this.config.enabledTools;
+    const enabled = (name) => !allowlist || allowlist.includes(name);
+    const candidates = [
+      enabled("shell") && new ShellTool(this.config.shellAllowlist, this.config.shellBlocklist),
+      enabled("file_read") && new FileReadTool(),
+      enabled("file_write") && new FileWriteTool(),
+      enabled("file_edit") && new FileEditTool(),
+      enabled("file_delete") && new FileDeleteTool(),
+      enabled("file_list") && new FileListTool(),
+      enabled("git") && new GitTool(),
+      enabled("github") && new GitHubTool(),
+      enabled("image_analyze") && new ImageAnalyzeTool(),
+      enabled("pdf_create") && new PDFCreateTool(),
+      enabled("run_code") && new CodeInterpreterTool(),
+      enabled("peer_message") && new PeerCommunicationTool(),
+      enabled("web_search") && new WebSearchTool(this.config.webSearch),
+      enabled("glob") && new GlobTool(),
+      enabled("grep") && new GrepTool(),
+      enabled("web_fetch") && new WebFetchTool()
     ];
+    const tools = candidates.filter((t) => t !== false);
     for (const tool of tools) {
       tool.setWorkspaceRoot(this.workspaceRoot);
       this.register(tool);
     }
-    if (this.config.browserEnabled) {
+    if (this.config.browserEnabled && enabled("browser")) {
       const browser = new BrowserTool();
       browser.setWorkspaceRoot(this.workspaceRoot);
       this.register(browser);
@@ -8417,7 +8420,13 @@ var ToolsConfigSchema = z.object({
    * - 'worker': node:worker_threads (resource/kill limits, but not capability-confined).
    * - 'auto' (default): use the isolate when `isolated-vm` loads, else fall back to worker.
    */
-  dynamicToolSandbox: z.enum(["isolate", "worker", "auto"]).default("auto")
+  dynamicToolSandbox: z.enum(["isolate", "worker", "auto"]).default("auto"),
+  /**
+   * When set, ONLY these tool names are registered — the sole way to omit a
+   * built-in tool (shell/file/git/…) from existing at all, rather than just
+   * gating it behind approval. Omitted = full default set (unchanged).
+   */
+  enabledTools: z.array(z.string()).optional()
 });
 var HookDefinitionSchema = z.object({
   name: z.string().optional(),