12.0.0 (2026-06-12)
⚠ BREAKING CHANGES
- extension and MCP tools that expose a filesystem path (input.path, or input.arguments.path for MCP) are now subject to the path and external_directory permission gates. Tools previously ungated may now prompt or be denied under existing path rules.
Features
- add extensible tool input path extraction (#352) (3a54ea1)
- add tool access extractor registry (#352) (7a34f01)
- expose registerToolAccessExtractor via permissions service (#352) (5e02c16)
- gate extension and MCP path tools by default (#352) (1d53f4f)