From 64d60e5cdb1de085d8af13d896e385acaa1fb287 Mon Sep 17 00:00:00 2001 From: iris Date: Thu, 2 Jul 2026 14:09:51 +0200 Subject: [PATCH] docs(turn-loop): mention kill in bash allowed-tools note The allowed-tools note only named run/status; kill is also always available since the bash MCP server uses allowedTools = ["*"]. Reword to name all three and explain the wildcard mechanism. --- docs/turn-loop.md | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/docs/turn-loop.md b/docs/turn-loop.md index 9c03d80b..92678187 100644 --- a/docs/turn-loop.md +++ b/docs/turn-loop.md @@ -645,9 +645,9 @@ status hint moved to the wake prompt + UI header. `Bash` is disallowed — shell execution goes through `mcp__bash__run` (background tasks with structured output + -task-id tracking) instead of an interactive shell. The `run` / -`status` MCP tools (`mcp__bash__run` / `mcp__bash__status`) are always -in the `--allowedTools` list. +task-id tracking) instead of an interactive shell. The bash MCP server +(`run` / `status` / `kill`) uses `allowedTools = ["*"]` so all +`mcp__bash__*` tools are always available regardless of tool groups. `WebFetch` / `WebSearch` are off by default; enable the `web_tools` tool group in the P3RM1SS10NS tab and rebuild the agent to enable them.