config: disable built-in tools

README.md

@@ -16,7 +16,7 @@ The launcher is relocatable and can be called while working in another project:
 /path/to/kimiko-agent/launch
 ```
 
-Pi keeps that project's working directory while storing this instance's credentials, settings, sessions, packages, and global resources here.
+Pi keeps that project's working directory while storing this instance's credentials, settings, sessions, packages, and global resources here. The launcher also passes `--no-builtin-tools`, so Pi starts without the built-in `read`, `bash`, `edit`, or `write` tools while retaining tools registered by extensions.
 
 To use the environment variable directly instead:
 

launch

@@ -4,4 +4,12 @@ set -euo pipefail
 instance_dir="$(cd -- "$(dirname -- "${BASH_SOURCE[0]}")" && pwd -P)"
 export PI_CODING_AGENT_DIR="$instance_dir"
 
-exec "${PI_BIN:-pi}" "$@"
+# Package-management commands must remain the first argument for Pi's CLI dispatcher.
+case "${1:-}" in
+  install | remove | uninstall | update | list | config)
+    exec "${PI_BIN:-pi}" "$@"
+    ;;
+  *)
+    exec "${PI_BIN:-pi}" --no-builtin-tools "$@"
+    ;;
+esac

settings.json

@@ -1,5 +1,9 @@
 {
   "defaultProjectTrust": "ask",
   "enableInstallTelemetry": false,
-  "packages": []
+  "packages": [],
+  "lastChangelogVersion": "0.81.1",
+  "theme": "dark",
+  "defaultProvider": "omlx",
+  "defaultModel": "Ternary-Bonsai-27B-mlx-2bit"
 }