feat(orchestration): control Paseo tools by provider

[mcowger]

Summary

Add per-provider controls for the Paseo tools exposed to coding agents, while preserving the existing host-level kill switch.

Changes

• Protocol/config: persist provider-specific Paseo-tool policies and a shared core/browser tool manifest with backward-compatible defaults.
• Server: enforce provider master switches and individual disabled-tool lists for native and MCP catalogs, including session snapshots and custom providers.
• App: add a grouped, searchable provider policy sheet with immediate saving, bulk controls, browser gating, and older-daemon capability handling.
• Docs/tests: document policy semantics and add focused protocol, server, app, and provider-settings E2E coverage.

Testing

• npm run build:client
• npm run typecheck
• npm run lint
• npm run format:check
• Focused feature tests: 17 passed

CI note

• The initial post-rebase CI run (30814069282) had Playwright shard 4/4 fail while installing Chromium: Playwright's CDN returned HTTP 403 (service not available in your location). The shard failed before tests ran; this was an environment/download failure, not a product test failure.

[greptile-apps]

Greptile Summary

This PR adds provider-specific controls over the Paseo tools exposed to coding agents.

• Adds protocol schemas, defaults, and a shared core/browser tool manifest.
• Applies provider policy when constructing native and MCP tool catalogs and snapshots the resolved policy for sessions.
• Adds a searchable provider-policy settings sheet with bulk controls, browser gating, compatibility handling, and translations.
• Documents policy semantics and adds protocol, server, application, and E2E coverage.

Confidence Score: 5/5

The PR appears safe to merge.

No blocking failure remains.

Important Files Changed

Filename	Overview
packages/protocol/src/provider-config.ts	Adds the persisted provider-level Paseo tool policy with backward-compatible optional defaults.
packages/protocol/src/paseo-tool-manifest.ts	Defines the shared manifest used to identify and group core and browser tools.
packages/server/src/server/agent/paseo-tool-policy.ts	Centralizes provider-policy resolution and individual tool enablement checks.
packages/server/src/server/agent/agent-manager.ts	Resolves and snapshots the selected provider's policy when creating or restoring sessions.
packages/server/src/server/agent/tools/paseo-tools.ts	Filters native Paseo tool registration according to the resolved session policy.
packages/app/src/screens/settings/paseo-tools-policy-sheet.tsx	Adds the searchable policy editor, master and bulk controls, browser gating, and immediate persistence.
packages/app/src/screens/settings/providers-section.tsx	Integrates provider tool configuration into the provider actions menu with daemon capability handling.
docs/data-model.md	Documents provider policy persistence, defaults, global override behavior, and session snapshot semantics.
docs/providers.md	Documents policy-filtered native and MCP catalog integration for provider implementations.

Flowchart

%%{init: {'theme': 'neutral'}}%%
flowchart LR
  Config[Provider tool policy] --> Resolve[Resolve provider and global policy]
  Global[Host-level injection switch] --> Resolve
  Resolve --> Session[Snapshot policy for session]
  Session --> Native[Native Paseo catalog]
  Session --> MCP[MCP Paseo catalog]
  Browser[Browser tools availability] --> Native
  Browser --> MCP

Loading

_{Reviews (9): Last reviewed commit: "fix(orchestration): avoid policy PR conf..." | Re-trigger Greptile}