From febffeebb11a26211f790c7f5e4c9139a8abb083 Mon Sep 17 00:00:00 2001
From: ismeth <ufukaltinok@gmail.com>
Date: Tue, 3 Mar 2026 16:44:14 +0100
Subject: [PATCH] fix(tools): deny council tools globally via permission system
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

The config.tools boolean false wasn't blocking plugin-registered tools.
Add prepare_council_prompt, council_finalize, athena_council to global
permission deny — same pattern as task: deny. Per-agent allow on
athena/athena-junior overrides the global deny.
---
 src/plugin-handlers/tool-config-handler.ts | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/src/plugin-handlers/tool-config-handler.ts b/src/plugin-handlers/tool-config-handler.ts
index 4344e39d3..54e5f61c7 100644
--- a/src/plugin-handlers/tool-config-handler.ts
+++ b/src/plugin-handlers/tool-config-handler.ts
@@ -152,5 +152,8 @@ export function applyToolConfig(params: {
     external_directory: "allow",
     ...(params.config.permission as Record<string, unknown>),
     task: "deny",
+    prepare_council_prompt: "deny",
+    council_finalize: "deny",
+    athena_council: "deny",
   };
 }