Alex Newman ce13c887fd fix(security): plan-05 observer tool enforcement — make 'no tools' guarantee real ...

- src/sdk/hardened-options.ts: single buildHardenedSdkOptions() — tools:[],
  allowedTools:[], full disallowedTools deny-list, permissionMode:'dontAsk',
  denying+audit-logging canUseTool, additionalDirectories:[], cwd jailed to
  OBSERVER_SESSIONS_DIR. Both Observer (ClaudeProvider) and KnowledgeAgent route
  through it so they can't drift. (#2332)
- src/utils/observer-audit.ts: append-only NDJSON audit log of denied tool attempts.
- Verified SDK options exist in @anthropic-ai/claude-agent-sdk v0.2.141; documented
  per-token cap as unavailable (Phase 4).

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

2026-05-28 18:05:23 -07:00

..

observer-tool-enforcement.test.ts

fix(security): plan-05 observer tool enforcement — make 'no tools' guarantee real

2026-05-28 18:05:23 -07:00