docs(turn-loop): mention kill in bash allowed-tools note

The allowed-tools note only named run/status; kill is also always
available since the bash MCP server uses allowedTools = ["*"].
Reword to name all three and explain the wildcard mechanism.
This commit is contained in:
iris 2026-07-02 14:09:51 +02:00 committed by mara
commit 64d60e5cdb

View file

@ -645,9 +645,9 @@ status hint moved to the wake prompt + UI header.
`Bash` is disallowed — shell execution goes through
`mcp__bash__run` (background tasks with structured output +
task-id tracking) instead of an interactive shell. The `run` /
`status` MCP tools (`mcp__bash__run` / `mcp__bash__status`) are always
in the `--allowedTools` list.
task-id tracking) instead of an interactive shell. The bash MCP server
(`run` / `status` / `kill`) uses `allowedTools = ["*"]` so all
`mcp__bash__*` tools are always available regardless of tool groups.
`WebFetch` / `WebSearch` are off by default; enable the `web_tools`
tool group in the P3RM1SS10NS tab and rebuild the agent to enable them.