From c62c73e546443988689fea09220f0d6599cc4d92 Mon Sep 17 00:00:00 2001
From: damocles <damocles@hyperhive>
Date: Wed, 27 May 2026 13:47:35 +0200
Subject: [PATCH] harness: anchor 'update allow-list' reminder on both
 #[tool_router] impls (argus nit on #511)

---
 hive-ag3nt/src/mcp.rs | 12 ++++++++++++
 1 file changed, 12 insertions(+)

diff --git a/hive-ag3nt/src/mcp.rs b/hive-ag3nt/src/mcp.rs
index a2548e4d..c77721bc 100644
--- a/hive-ag3nt/src/mcp.rs
+++ b/hive-ag3nt/src/mcp.rs
@@ -467,6 +467,12 @@ impl AgentServer {
     }
 }
 
+// IMPORTANT: when adding a new `#[tool]` fn to this impl, also add
+// its name to `allowed_mcp_tools(Flavor::Agent)` below. Claude
+// Code's permission gate refuses uninlisted MCP tools in
+// non-interactive `--print` mode with "permissions not granted yet"
+// — same failure mode #511 cleaned up on the manager side. Keep the
+// two lists in lockstep.
 #[tool_router]
 impl AgentServer {
     #[tool(
@@ -1058,6 +1064,12 @@ impl ManagerServer {
     }
 }
 
+// IMPORTANT: when adding a new `#[tool]` fn to this impl, also add
+// its name to `allowed_mcp_tools(Flavor::Manager)` below. Claude
+// Code's permission gate refuses uninlisted MCP tools in
+// non-interactive `--print` mode with "permissions not granted yet"
+// — exactly the failure mode PR #511 cleaned up. Keep the two lists
+// in lockstep.
 #[tool_router]
 impl ManagerServer {
     #[tool(