wolfpack-mcp 1.0.109 → 1.0.110

package/dist/agentBuilderTools.js

@@ -162,6 +162,21 @@ export const AGENT_BUILDER_TOOLS = [
                     type: 'object',
                     description: 'The agent\'s own Ghost runtime settings, merged into every session\'s generated config. Two keys are honoured: "options" (e.g. {"max_turn_requests": 150} — the per-turn model request cap, default 200) and "agents" (per-agent overrides, e.g. {"coder": {"disabled_tools": ["agent"]}} to switch the sub-agent tool off). Other keys are ignored. Replaces the stored config as a whole; set to null to clear. Ghost runtime only — Claude Code agents ignore it.',
                 },
+                disabled_tools: {
+                    type: 'array',
+                    items: { type: 'string' },
+                    description: 'Tools the agent never gets, whatever starts the session (a task, a chat, a work-item pickup). Ghost names ("agent", "fetch"); Claude Code agents use Claude Code\'s own ("Task", "WebFetch") and "mcp__<server>__<tool>" for an MCP tool. Replaces the stored list; an empty array clears it. A task\'s own disabled_tools are added to these — a task narrows further, never widens.',
+                },
+                disabled_mcp_servers: {
+                    type: 'array',
+                    items: { type: 'string' },
+                    description: 'MCP servers the agent never gets, by name (e.g. ["wolfpack"]). The server is left out of the session config altogether rather than started and denied per tool. Replaces the stored list; an empty array clears it.',
+                },
+                disabled_skills: {
+                    type: 'array',
+                    items: { type: 'string' },
+                    description: 'Skills the agent never loads, by name (e.g. ["respond-to-notification"]). Replaces the stored list; an empty array clears it.',
+                },
                 ...ORG_SLUG_PROP,
             },
             required: ['agent_id'],
@@ -1060,6 +1075,9 @@ export async function handleAgentBuilderTool(name, args, client) {
                 llm_family: z.string().nullable().optional(),
                 api_key_permissions: z.array(z.string()).optional(),
                 config: z.record(z.unknown()).nullable().optional(),
+                disabled_tools: z.array(z.string()).optional(),
+                disabled_mcp_servers: z.array(z.string()).optional(),
+                disabled_skills: z.array(z.string()).optional(),
                 org_slug: orgSlugField,
             })
                 .parse(args);
@@ -1085,6 +1103,12 @@ export async function handleAgentBuilderTool(name, args, client) {
                 fields.apiKeyPermissions = rest.api_key_permissions;
             if (rest.config !== undefined)
                 fields.config = rest.config;
+            if (rest.disabled_tools !== undefined)
+                fields.disabledTools = rest.disabled_tools;
+            if (rest.disabled_mcp_servers !== undefined)
+                fields.disabledMcpServers = rest.disabled_mcp_servers;
+            if (rest.disabled_skills !== undefined)
+                fields.disabledSkills = rest.disabled_skills;
             const agent = await client.updateAgent(agent_id, fields, resolveOrg(parsed));
             return { content: [{ type: 'text', text: `Updated agent\n\n${text(agent)}` }] };
         }

package/dist/agentBuilderTools.test.js

@@ -192,3 +192,40 @@ describe('personal agents over MCP (#2273)', () => {
         expect(fn.mock.calls[0][1]).toBe(true);
     });
 });
+// #2525 — the three opt-out lists a profile carries, reachable over MCP so an
+// agent can be narrowed without hand-writing its config JSON.
+describe('profile-level disabled tools, MCP servers and skills (#2525)', () => {
+    const DISABLED_FIELDS = ['disabled_tools', 'disabled_mcp_servers', 'disabled_skills'];
+    function fakeUpdate() {
+        const updateAgent = vi.fn().mockResolvedValue({ id: 'agent-1' });
+        return { client: { updateAgent }, updateAgent };
+    }
+    it('update_agent advertises all three lists', () => {
+        const properties = toolNamed('update_agent').inputSchema.properties;
+        expect(Object.keys(properties)).toEqual(expect.arrayContaining(DISABLED_FIELDS));
+    });
+    it('sends the three lists under their stored names', async () => {
+        const { client, updateAgent } = fakeUpdate();
+        await handleAgentBuilderTool('update_agent', {
+            agent_id: 'agent-1',
+            disabled_tools: ['agent', 'mcp__wolfpack__create_issue'],
+            disabled_mcp_servers: ['wolfpack'],
+            disabled_skills: ['respond-to-notification'],
+        }, client);
+        expect(updateAgent.mock.calls[0][1]).toEqual({
+            disabledTools: ['agent', 'mcp__wolfpack__create_issue'],
+            disabledMcpServers: ['wolfpack'],
+            disabledSkills: ['respond-to-notification'],
+        });
+    });
+    it('an empty array is sent, so a list can be cleared', async () => {
+        const { client, updateAgent } = fakeUpdate();
+        await handleAgentBuilderTool('update_agent', { agent_id: 'agent-1', disabled_tools: [] }, client);
+        expect(updateAgent.mock.calls[0][1]).toEqual({ disabledTools: [] });
+    });
+    it('a field nobody named is left out, so it stays as stored', async () => {
+        const { client, updateAgent } = fakeUpdate();
+        await handleAgentBuilderTool('update_agent', { agent_id: 'agent-1', name: 'Scout' }, client);
+        expect(updateAgent.mock.calls[0][1]).toEqual({ name: 'Scout' });
+    });
+});

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "wolfpack-mcp",
-  "version": "1.0.109",
+  "version": "1.0.110",
   "description": "MCP server for Wolfpack AI-enhanced software delivery tools",
   "main": "dist/index.js",
   "type": "module",