[TheGreatAxios]

Summary

• tool_search returns name + description cards only and does not grow the advertised tool set.
• A call to a registered-but-unadvertised tool declares that one name, then dispatches, so strict providers see the schema before the call runs.
• Fold drops execute-promoted schemas back to the frozen core prefix (pruneIdlePromotions).

Verification

• bun test src/agent/tool-search.test.ts src/tui/dynamic-tool-runner.test.ts src/exec/runner.test.ts src/session/assemble-runtime.test.ts src/tui/mcp-view.test.ts — 139 pass, 0 fail
• bun run typecheck — exit 0
• pre-commit typecheck + build passed on commit

Fixes CL-9488

[linear-code]

CL-9488

[TheGreatAxios]

Review

Contracts hold: tool_search is cards-only, promote-on-execute declares a single called name, optional limit defaults to 5 (cap 20), core/pinned prefix stays frozen. No blocking defects.

Should-fix

list_dir is in UNADVERTISED_MOUNTED_BUILTINS (search still hides it; “use glob”). The new intercept promotes any registered unadvertised name, so a model that emits list_dir flushes that schema onto the wire until fold. Fix in the intercept/promoter (refuse or dispatch without flushPromotions), not in search.

Nits

• src/tui/runner/mcp.ts still says MCP tools stay blind until tool_search promotes them.
• Numeric-string limit: "8" silently falls back to 5 (arktype fail → default).

[TheGreatAxios]

Review (32bedf8a)

Shippable. list_dir stays off computeAdvertised on execute and still dispatches. MCP promote-on-execute remains single-name. No blocking defects.

Intercept, exec promoter, and flushPromotions all refuse UNADVERTISED_MOUNTED_BUILTINS. Targeted tests 128 pass.

File-for-later (pre-existing, not this commit): closed exec overlays that pass BUILD_TOOLS as builtInPrefix can still project list_dir onto the wire without execute.