fix(agents): hide grep glob for frontier agents

Ultraworked with [Sisyphus](https://github.com/code-yeongyu/oh-my-openagent)

Co-authored-by: Sisyphus <clio-agent@sisyphuslabs.ai>

src/agents/frontier-tool-schema-guard.ts

@@ -0,0 +1,12 @@
+import { isGpt5_5Model } from "./types"
+
+function isOpus47Model(model: string): boolean {
+  const modelName = model.includes("/") ? (model.split("/").pop() ?? model) : model
+  return modelName.toLowerCase().includes("claude-opus-4-7")
+}
+
+export function getFrontierToolSchemaPermission(model: string): Record<string, "deny"> {
+  return isOpus47Model(model) || isGpt5_5Model(model)
+    ? { grep: "deny" as const, glob: "deny" as const }
+    : {}
+}