vinzenz/hyperhive
0
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

re-apply TodoWrite removal + deny list (lost in subsequent merge)

Browse source
This commit is contained in:
müde 2026-05-16 19:47:55 +02:00
parent 313121a6e9
commit f2a0dc4107
2 changed files with 10 additions and 4 deletions
Download patch file Download diff file Expand all files Collapse all files

9
hive-ag3nt/src/mcp.rs
View file

@ -601,10 +601,13 @@ pub const SERVER_NAME: &str = "hyperhive";
/// in this list literally doesn't exist in the session (claude won't even
/// try to call it). Web egress (`WebFetch`/`WebSearch`) and nested agents
/// (`Task`) are intentionally omitted for now; `Bash` is allowed pending a
/// finer-grained allow-list system for shell command patterns. Edit later
/// as our trust model evolves.
/// finer-grained allow-list system for shell command patterns. `TodoWrite`
/// is omitted because the todo list lives in claude's in-process session
/// state and silently evaporates on /compact or session reset — agents
/// should plan in /state notes instead. Edit later as our trust model
/// evolves.
pub const ALLOWED_BUILTIN_TOOLS: &[&str] =
&["Bash", "Edit", "Glob", "Grep", "Read", "TodoWrite", "Write"];
&["Bash", "Edit", "Glob", "Grep", "Read", "Write"];
/// Which MCP tool surface to advertise via `--allowedTools`. The agent
/// list is the strict subset of the manager list, so we just thread the