switchroom 0.14.5 → 0.14.6

package/dist/agent-scheduler/index.js

@@ -11240,7 +11240,9 @@ var profileFields = {
   experimental: exports_external.object({
     legacy_pty: exports_external.boolean().optional().describe("Opt out of the default tmux supervisor (#725) and run the agent under " + "the legacy PTY supervisor instead. Default: false (tmux is the default)."),
     legacy_autoaccept_expect: exports_external.boolean().optional().describe("Opt the autoaccept gateway back into the legacy expect-script behaviour " + "instead of the tmux send-keys path. Default: false.")
-  }).optional().describe("Opt-in flags for experimental / legacy behaviours. Cascades through " + "defaults → profile → per-agent.")
+  }).optional().describe("Opt-in flags for experimental / legacy behaviours. Cascades through " + "defaults → profile → per-agent."),
+  allowed_tools: exports_external.array(exports_external.string()).optional().describe("Granular tool allowlist passed verbatim to Claude Code's --allowedTools " + "flag. Cascades defaults → profile → per-agent (union, dedup). Supports " + "patterns like 'Bash(git *)' or 'mcp__perplexity__*' that the coarse " + "`tools.allow` field can't express. See #199."),
+  disallowed_tools: exports_external.array(exports_external.string()).optional().describe("Granular tool denylist passed verbatim to Claude Code's --disallowedTools " + "flag. Cascades defaults → profile → per-agent (union, dedup). Same pattern " + "syntax as allowed_tools (e.g. 'Bash(rm *)'). See #199.")
 };
 var ProfileSchema = exports_external.object(profileFields);
 var { extends: _omitExtends, ...defaultsFields } = profileFields;
@@ -11893,6 +11895,18 @@ function mergeAgentConfig(defaultsIn, agentIn) {
       ...merged.cli_args ?? []
     ];
   }
+  if (defaults.allowed_tools || merged.allowed_tools) {
+    merged.allowed_tools = dedupe([
+      ...defaults.allowed_tools ?? [],
+      ...merged.allowed_tools ?? []
+    ]);
+  }
+  if (defaults.disallowed_tools || merged.disallowed_tools) {
+    merged.disallowed_tools = dedupe([
+      ...defaults.disallowed_tools ?? [],
+      ...merged.disallowed_tools ?? []
+    ]);
+  }
   if (defaults.extra_stable_files || merged.extra_stable_files) {
     const d = defaults.extra_stable_files ?? [];
     const a = merged.extra_stable_files ?? [];

package/dist/auth-broker/index.js

@@ -11240,7 +11240,9 @@ var profileFields = {
   experimental: exports_external.object({
     legacy_pty: exports_external.boolean().optional().describe("Opt out of the default tmux supervisor (#725) and run the agent under " + "the legacy PTY supervisor instead. Default: false (tmux is the default)."),
     legacy_autoaccept_expect: exports_external.boolean().optional().describe("Opt the autoaccept gateway back into the legacy expect-script behaviour " + "instead of the tmux send-keys path. Default: false.")
-  }).optional().describe("Opt-in flags for experimental / legacy behaviours. Cascades through " + "defaults → profile → per-agent.")
+  }).optional().describe("Opt-in flags for experimental / legacy behaviours. Cascades through " + "defaults → profile → per-agent."),
+  allowed_tools: exports_external.array(exports_external.string()).optional().describe("Granular tool allowlist passed verbatim to Claude Code's --allowedTools " + "flag. Cascades defaults → profile → per-agent (union, dedup). Supports " + "patterns like 'Bash(git *)' or 'mcp__perplexity__*' that the coarse " + "`tools.allow` field can't express. See #199."),
+  disallowed_tools: exports_external.array(exports_external.string()).optional().describe("Granular tool denylist passed verbatim to Claude Code's --disallowedTools " + "flag. Cascades defaults → profile → per-agent (union, dedup). Same pattern " + "syntax as allowed_tools (e.g. 'Bash(rm *)'). See #199.")
 };
 var ProfileSchema = exports_external.object(profileFields);
 var { extends: _omitExtends, ...defaultsFields } = profileFields;
@@ -11893,6 +11895,18 @@ function mergeAgentConfig(defaultsIn, agentIn) {
       ...merged.cli_args ?? []
     ];
   }
+  if (defaults.allowed_tools || merged.allowed_tools) {
+    merged.allowed_tools = dedupe([
+      ...defaults.allowed_tools ?? [],
+      ...merged.allowed_tools ?? []
+    ]);
+  }
+  if (defaults.disallowed_tools || merged.disallowed_tools) {
+    merged.disallowed_tools = dedupe([
+      ...defaults.disallowed_tools ?? [],
+      ...merged.disallowed_tools ?? []
+    ]);
+  }
   if (defaults.extra_stable_files || merged.extra_stable_files) {
     const d = defaults.extra_stable_files ?? [];
     const a = merged.extra_stable_files ?? [];

package/dist/cli/notion-write-pretool.mjs

@@ -11987,7 +11987,9 @@ var profileFields = {
   experimental: exports_external.object({
     legacy_pty: exports_external.boolean().optional().describe("Opt out of the default tmux supervisor (#725) and run the agent under " + "the legacy PTY supervisor instead. Default: false (tmux is the default)."),
     legacy_autoaccept_expect: exports_external.boolean().optional().describe("Opt the autoaccept gateway back into the legacy expect-script behaviour " + "instead of the tmux send-keys path. Default: false.")
-  }).optional().describe("Opt-in flags for experimental / legacy behaviours. Cascades through " + "defaults \u2192 profile \u2192 per-agent.")
+  }).optional().describe("Opt-in flags for experimental / legacy behaviours. Cascades through " + "defaults \u2192 profile \u2192 per-agent."),
+  allowed_tools: exports_external.array(exports_external.string()).optional().describe("Granular tool allowlist passed verbatim to Claude Code's --allowedTools " + "flag. Cascades defaults \u2192 profile \u2192 per-agent (union, dedup). Supports " + "patterns like 'Bash(git *)' or 'mcp__perplexity__*' that the coarse " + "`tools.allow` field can't express. See #199."),
+  disallowed_tools: exports_external.array(exports_external.string()).optional().describe("Granular tool denylist passed verbatim to Claude Code's --disallowedTools " + "flag. Cascades defaults \u2192 profile \u2192 per-agent (union, dedup). Same pattern " + "syntax as allowed_tools (e.g. 'Bash(rm *)'). See #199.")
 };
 var ProfileSchema = exports_external.object(profileFields);
 var { extends: _omitExtends, ...defaultsFields } = profileFields;
@@ -12642,6 +12644,18 @@ function mergeAgentConfig(defaultsIn, agentIn) {
       ...merged.cli_args ?? []
     ];
   }
+  if (defaults.allowed_tools || merged.allowed_tools) {
+    merged.allowed_tools = dedupe([
+      ...defaults.allowed_tools ?? [],
+      ...merged.allowed_tools ?? []
+    ]);
+  }
+  if (defaults.disallowed_tools || merged.disallowed_tools) {
+    merged.disallowed_tools = dedupe([
+      ...defaults.disallowed_tools ?? [],
+      ...merged.disallowed_tools ?? []
+    ]);
+  }
   if (defaults.extra_stable_files || merged.extra_stable_files) {
     const d = defaults.extra_stable_files ?? [];
     const a = merged.extra_stable_files ?? [];

package/dist/cli/switchroom.js

@@ -13804,7 +13804,9 @@ var init_schema = __esm(() => {
     experimental: exports_external.object({
       legacy_pty: exports_external.boolean().optional().describe("Opt out of the default tmux supervisor (#725) and run the agent under " + "the legacy PTY supervisor instead. Default: false (tmux is the default)."),
       legacy_autoaccept_expect: exports_external.boolean().optional().describe("Opt the autoaccept gateway back into the legacy expect-script behaviour " + "instead of the tmux send-keys path. Default: false.")
-    }).optional().describe("Opt-in flags for experimental / legacy behaviours. Cascades through " + "defaults \u2192 profile \u2192 per-agent.")
+    }).optional().describe("Opt-in flags for experimental / legacy behaviours. Cascades through " + "defaults \u2192 profile \u2192 per-agent."),
+    allowed_tools: exports_external.array(exports_external.string()).optional().describe("Granular tool allowlist passed verbatim to Claude Code's --allowedTools " + "flag. Cascades defaults \u2192 profile \u2192 per-agent (union, dedup). Supports " + "patterns like 'Bash(git *)' or 'mcp__perplexity__*' that the coarse " + "`tools.allow` field can't express. See #199."),
+    disallowed_tools: exports_external.array(exports_external.string()).optional().describe("Granular tool denylist passed verbatim to Claude Code's --disallowedTools " + "flag. Cascades defaults \u2192 profile \u2192 per-agent (union, dedup). Same pattern " + "syntax as allowed_tools (e.g. 'Bash(rm *)'). See #199.")
   };
   ProfileSchema = exports_external.object(profileFields);
   ({ extends: _omitExtends, ...defaultsFields } = profileFields);
@@ -14509,6 +14511,18 @@ function mergeAgentConfig(defaultsIn, agentIn) {
       ...merged.cli_args ?? []
     ];
   }
+  if (defaults.allowed_tools || merged.allowed_tools) {
+    merged.allowed_tools = dedupe([
+      ...defaults.allowed_tools ?? [],
+      ...merged.allowed_tools ?? []
+    ]);
+  }
+  if (defaults.disallowed_tools || merged.disallowed_tools) {
+    merged.disallowed_tools = dedupe([
+      ...defaults.disallowed_tools ?? [],
+      ...merged.disallowed_tools ?? []
+    ]);
+  }
   if (defaults.extra_stable_files || merged.extra_stable_files) {
     const d = defaults.extra_stable_files ?? [];
     const a = merged.extra_stable_files ?? [];
@@ -49352,8 +49366,8 @@ var {
 } = import__.default;
 
 // src/build-info.ts
-var VERSION = "0.14.5";
-var COMMIT_SHA = "c12d4240";
+var VERSION = "0.14.6";
+var COMMIT_SHA = "ff204bcf";
 
 // src/cli/agent.ts
 init_source();

package/dist/host-control/main.js

@@ -13975,7 +13975,9 @@ var profileFields = {
   experimental: exports_external.object({
     legacy_pty: exports_external.boolean().optional().describe("Opt out of the default tmux supervisor (#725) and run the agent under " + "the legacy PTY supervisor instead. Default: false (tmux is the default)."),
     legacy_autoaccept_expect: exports_external.boolean().optional().describe("Opt the autoaccept gateway back into the legacy expect-script behaviour " + "instead of the tmux send-keys path. Default: false.")
-  }).optional().describe("Opt-in flags for experimental / legacy behaviours. Cascades through " + "defaults → profile → per-agent.")
+  }).optional().describe("Opt-in flags for experimental / legacy behaviours. Cascades through " + "defaults → profile → per-agent."),
+  allowed_tools: exports_external.array(exports_external.string()).optional().describe("Granular tool allowlist passed verbatim to Claude Code's --allowedTools " + "flag. Cascades defaults → profile → per-agent (union, dedup). Supports " + "patterns like 'Bash(git *)' or 'mcp__perplexity__*' that the coarse " + "`tools.allow` field can't express. See #199."),
+  disallowed_tools: exports_external.array(exports_external.string()).optional().describe("Granular tool denylist passed verbatim to Claude Code's --disallowedTools " + "flag. Cascades defaults → profile → per-agent (union, dedup). Same pattern " + "syntax as allowed_tools (e.g. 'Bash(rm *)'). See #199.")
 };
 var ProfileSchema = exports_external.object(profileFields);
 var { extends: _omitExtends, ...defaultsFields } = profileFields;
@@ -14638,6 +14640,18 @@ function mergeAgentConfig(defaultsIn, agentIn) {
       ...merged.cli_args ?? []
     ];
   }
+  if (defaults.allowed_tools || merged.allowed_tools) {
+    merged.allowed_tools = dedupe([
+      ...defaults.allowed_tools ?? [],
+      ...merged.allowed_tools ?? []
+    ]);
+  }
+  if (defaults.disallowed_tools || merged.disallowed_tools) {
+    merged.disallowed_tools = dedupe([
+      ...defaults.disallowed_tools ?? [],
+      ...merged.disallowed_tools ?? []
+    ]);
+  }
   if (defaults.extra_stable_files || merged.extra_stable_files) {
     const d = defaults.extra_stable_files ?? [];
     const a = merged.extra_stable_files ?? [];

package/dist/vault/approvals/kernel-server.js

@@ -4258,6 +4258,18 @@ function mergeAgentConfig(defaultsIn, agentIn) {
       ...merged.cli_args ?? []
     ];
   }
+  if (defaults.allowed_tools || merged.allowed_tools) {
+    merged.allowed_tools = dedupe([
+      ...defaults.allowed_tools ?? [],
+      ...merged.allowed_tools ?? []
+    ]);
+  }
+  if (defaults.disallowed_tools || merged.disallowed_tools) {
+    merged.disallowed_tools = dedupe([
+      ...defaults.disallowed_tools ?? [],
+      ...merged.disallowed_tools ?? []
+    ]);
+  }
   if (defaults.extra_stable_files || merged.extra_stable_files) {
     const d = defaults.extra_stable_files ?? [];
     const a = merged.extra_stable_files ?? [];
@@ -11543,7 +11555,9 @@ var init_schema = __esm(() => {
     experimental: exports_external.object({
       legacy_pty: exports_external.boolean().optional().describe("Opt out of the default tmux supervisor (#725) and run the agent under " + "the legacy PTY supervisor instead. Default: false (tmux is the default)."),
       legacy_autoaccept_expect: exports_external.boolean().optional().describe("Opt the autoaccept gateway back into the legacy expect-script behaviour " + "instead of the tmux send-keys path. Default: false.")
-    }).optional().describe("Opt-in flags for experimental / legacy behaviours. Cascades through " + "defaults → profile → per-agent.")
+    }).optional().describe("Opt-in flags for experimental / legacy behaviours. Cascades through " + "defaults → profile → per-agent."),
+    allowed_tools: exports_external.array(exports_external.string()).optional().describe("Granular tool allowlist passed verbatim to Claude Code's --allowedTools " + "flag. Cascades defaults → profile → per-agent (union, dedup). Supports " + "patterns like 'Bash(git *)' or 'mcp__perplexity__*' that the coarse " + "`tools.allow` field can't express. See #199."),
+    disallowed_tools: exports_external.array(exports_external.string()).optional().describe("Granular tool denylist passed verbatim to Claude Code's --disallowedTools " + "flag. Cascades defaults → profile → per-agent (union, dedup). Same pattern " + "syntax as allowed_tools (e.g. 'Bash(rm *)'). See #199.")
   };
   ProfileSchema = exports_external.object(profileFields);
   ({ extends: _omitExtends, ...defaultsFields } = profileFields);

package/dist/vault/broker/server.js

@@ -292,6 +292,18 @@ function mergeAgentConfig(defaultsIn, agentIn) {
       ...merged.cli_args ?? []
     ];
   }
+  if (defaults.allowed_tools || merged.allowed_tools) {
+    merged.allowed_tools = dedupe([
+      ...defaults.allowed_tools ?? [],
+      ...merged.allowed_tools ?? []
+    ]);
+  }
+  if (defaults.disallowed_tools || merged.disallowed_tools) {
+    merged.disallowed_tools = dedupe([
+      ...defaults.disallowed_tools ?? [],
+      ...merged.disallowed_tools ?? []
+    ]);
+  }
   if (defaults.extra_stable_files || merged.extra_stable_files) {
     const d = defaults.extra_stable_files ?? [];
     const a = merged.extra_stable_files ?? [];
@@ -11543,7 +11555,9 @@ var init_schema = __esm(() => {
     experimental: exports_external.object({
       legacy_pty: exports_external.boolean().optional().describe("Opt out of the default tmux supervisor (#725) and run the agent under " + "the legacy PTY supervisor instead. Default: false (tmux is the default)."),
       legacy_autoaccept_expect: exports_external.boolean().optional().describe("Opt the autoaccept gateway back into the legacy expect-script behaviour " + "instead of the tmux send-keys path. Default: false.")
-    }).optional().describe("Opt-in flags for experimental / legacy behaviours. Cascades through " + "defaults → profile → per-agent.")
+    }).optional().describe("Opt-in flags for experimental / legacy behaviours. Cascades through " + "defaults → profile → per-agent."),
+    allowed_tools: exports_external.array(exports_external.string()).optional().describe("Granular tool allowlist passed verbatim to Claude Code's --allowedTools " + "flag. Cascades defaults → profile → per-agent (union, dedup). Supports " + "patterns like 'Bash(git *)' or 'mcp__perplexity__*' that the coarse " + "`tools.allow` field can't express. See #199."),
+    disallowed_tools: exports_external.array(exports_external.string()).optional().describe("Granular tool denylist passed verbatim to Claude Code's --disallowedTools " + "flag. Cascades defaults → profile → per-agent (union, dedup). Same pattern " + "syntax as allowed_tools (e.g. 'Bash(rm *)'). See #199.")
   };
   ProfileSchema = exports_external.object(profileFields);
   ({ extends: _omitExtends, ...defaultsFields } = profileFields);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "switchroom",
-  "version": "0.14.5",
+  "version": "0.14.6",
   "description": "Run Claude Code 24/7 on your Claude Pro/Max subscription over Telegram. Open-source alternative to OpenClaw and NanoClaw — no API keys.",
   "type": "module",
   "bin": {

package/telegram-plugin/dist/gateway/gateway.js

@@ -23891,7 +23891,9 @@ var init_schema = __esm(() => {
     experimental: exports_external.object({
       legacy_pty: exports_external.boolean().optional().describe("Opt out of the default tmux supervisor (#725) and run the agent under " + "the legacy PTY supervisor instead. Default: false (tmux is the default)."),
       legacy_autoaccept_expect: exports_external.boolean().optional().describe("Opt the autoaccept gateway back into the legacy expect-script behaviour " + "instead of the tmux send-keys path. Default: false.")
-    }).optional().describe("Opt-in flags for experimental / legacy behaviours. Cascades through " + "defaults \u2192 profile \u2192 per-agent.")
+    }).optional().describe("Opt-in flags for experimental / legacy behaviours. Cascades through " + "defaults \u2192 profile \u2192 per-agent."),
+    allowed_tools: exports_external.array(exports_external.string()).optional().describe("Granular tool allowlist passed verbatim to Claude Code's --allowedTools " + "flag. Cascades defaults \u2192 profile \u2192 per-agent (union, dedup). Supports " + "patterns like 'Bash(git *)' or 'mcp__perplexity__*' that the coarse " + "`tools.allow` field can't express. See #199."),
+    disallowed_tools: exports_external.array(exports_external.string()).optional().describe("Granular tool denylist passed verbatim to Claude Code's --disallowedTools " + "flag. Cascades defaults \u2192 profile \u2192 per-agent (union, dedup). Same pattern " + "syntax as allowed_tools (e.g. 'Bash(rm *)'). See #199.")
   };
   ProfileSchema = exports_external.object(profileFields);
   ({ extends: _omitExtends, ...defaultsFields } = profileFields);
@@ -24554,6 +24556,18 @@ function mergeAgentConfig(defaultsIn, agentIn) {
       ...merged.cli_args ?? []
     ];
   }
+  if (defaults.allowed_tools || merged.allowed_tools) {
+    merged.allowed_tools = dedupe([
+      ...defaults.allowed_tools ?? [],
+      ...merged.allowed_tools ?? []
+    ]);
+  }
+  if (defaults.disallowed_tools || merged.disallowed_tools) {
+    merged.disallowed_tools = dedupe([
+      ...defaults.disallowed_tools ?? [],
+      ...merged.disallowed_tools ?? []
+    ]);
+  }
   if (defaults.extra_stable_files || merged.extra_stable_files) {
     const d = defaults.extra_stable_files ?? [];
     const a = merged.extra_stable_files ?? [];
@@ -44048,6 +44062,18 @@ function mergeAgentConfig2(defaultsIn, agentIn) {
       ...merged.cli_args ?? []
     ];
   }
+  if (defaults.allowed_tools || merged.allowed_tools) {
+    merged.allowed_tools = dedupe2([
+      ...defaults.allowed_tools ?? [],
+      ...merged.allowed_tools ?? []
+    ]);
+  }
+  if (defaults.disallowed_tools || merged.disallowed_tools) {
+    merged.disallowed_tools = dedupe2([
+      ...defaults.disallowed_tools ?? [],
+      ...merged.disallowed_tools ?? []
+    ]);
+  }
   if (defaults.extra_stable_files || merged.extra_stable_files) {
     const d = defaults.extra_stable_files ?? [];
     const a = merged.extra_stable_files ?? [];
@@ -50068,11 +50094,11 @@ function sweepStaleTurnActiveMarker(stateDir, opts) {
 }
 
 // ../src/build-info.ts
-var VERSION = "0.14.5";
-var COMMIT_SHA = "c12d4240";
-var COMMIT_DATE = "2026-05-28T21:57:39+10:00";
-var LATEST_PR = null;
-var COMMITS_AHEAD_OF_TAG = 2;
+var VERSION = "0.14.6";
+var COMMIT_SHA = "ff204bcf";
+var COMMIT_DATE = "2026-05-28T21:21:23Z";
+var LATEST_PR = 1974;
+var COMMITS_AHEAD_OF_TAG = 0;
 
 // gateway/boot-version.ts
 function formatRelativeAgo(iso) {