From 179461d44482c6cb43a4e0e9b64829a1298d6490 Mon Sep 17 00:00:00 2001
From: damocles <damocles@hyperhive.local>
Date: Fri, 11 Sep 2026 18:19:29 +0200
Subject: [PATCH] hive-sh4re: ToolGroup::Execution grants nothing under
 mcp__hyperhive__, say so

fixes #4232
---
 hive-sh4re/src/permissions.rs | 12 ++++++++++--
 1 file changed, 10 insertions(+), 2 deletions(-)

diff --git a/hive-sh4re/src/permissions.rs b/hive-sh4re/src/permissions.rs
index a79d944a..2c3b296d 100644
--- a/hive-sh4re/src/permissions.rs
+++ b/hive-sh4re/src/permissions.rs
@@ -65,8 +65,16 @@ impl ToolGroup {
             ],
             Self::Diagnostics => &["get_logs"],
             Self::Forge => &["create_repo"],
-            Self::Execution => &["run", "status"],
-            Self::WebTools => &[],
+            // Both empty, for different reasons — see each variant's own
+            // doc comment above. `Execution` grants the out-of-process
+            // `bash` MCP server (`mcp__bash__run`/`status`/`kill`), gated
+            // at config-render time by `extra_server_required_group` in
+            // `hive-agent/src/mcp_config.rs`, not by this list — an
+            // out-of-process server has no later enforcement point, so
+            // that gate is the actual security boundary. `WebTools`
+            // grants Claude built-in tools, not MCP ones; see
+            // `builtin_tools()`.
+            Self::Execution | Self::WebTools => &[],
         }
     }