Give the SDK JSON-RPC server a per-root tool filter and let deployments mark the configured persona as the complete system prompt. The checked-in minimal overlay now names only bash and str_replace_editor, so later global tools and unrelated guidance from dsh-base cannot appear implicitly. Keep the shared SDK host services and packaged Web capability intact. Only workspace instructions, compaction, and the conflicting one-shot Bash row remain disabled. Unit coverage pins the configuration paths, and a real dsh profile smoke proves the assembled prompt and exact two-tool request. |
||
|---|---|---|
| .. | ||
| fixtures/subagent/subagent-dsh-sdk | ||
| snapshots | ||
| keyless-smoke.e2e.ts | ||
| keyless.patch.yml | ||
| sdk.snapshot.ts | ||