fix(docs): web_tools is a tool group, not a capability

Remove web_tools from the C4P4B1L1T13S table in dashboard.md and add
it to the T00L GR0UPS section with a note that it gates Claude built-ins
rather than MCP tools. Fix turn-loop.md to say 'tool-group-gated' and
'web_tools tool group' throughout.
This commit is contained in:
iris 2026-06-02 11:34:21 +02:00 committed by mara
commit 0da736f2a1
2 changed files with 9 additions and 7 deletions

View file

@ -574,8 +574,8 @@ status hint moved to the wake prompt + UI header.
### Tool whitelist (`mcp::ALLOWED_BUILTIN_TOOLS`)
- Allowed built-ins: `Edit`, `Glob`, `Grep`, `Read`, `Write`.
- Capability-gated built-ins: `WebFetch`, `WebSearch` (added when the
`web_tools` capability is granted — see P3RM1SS10NS tab).
- Tool-group-gated built-ins: `WebFetch`, `WebSearch` (added when the
`web_tools` tool group is enabled — see P3RM1SS10NS tab).
- Denied by omission or `claude-settings.json` deny list: `Bash`,
`Task`, `NotebookEdit`, `TodoWrite`.
- Allowed MCP tools: as listed above per flavor.
@ -585,6 +585,6 @@ status hint moved to the wake prompt + UI header.
task-id tracking) instead of an interactive shell. The `bash_run` /
`bash_status` MCP tools are always in the `--allowedTools` list.
`WebFetch` / `WebSearch` are off by default; grant the `web_tools`
capability in the P3RM1SS10NS tab and rebuild the agent to enable them.
`WebFetch` / `WebSearch` are off by default; enable the `web_tools`
tool group in the P3RM1SS10NS tab and rebuild the agent to enable them.