feat(backends,storage,core,markdown,infra): claude agent sdk backend, session store, transcript seeding, runner isolation

src/beaver_gateway/backends/raycast.py

@@ -26,11 +26,12 @@ tools we route it back to the underlying MCP in-process, append the
 result as a ``tool`` message, and re-issue the stream — all inside one
 Anthropic envelope (one ``message_start`` … one ``message_stop``). The
 tool_use blocks DO surface to the caller (mirrors what
-``ClaudeCodeBackendAdapter`` does), but tool_results stay internal.
+``ClaudeSdkBackend`` does), but tool_results stay internal.
 """
 
 from __future__ import annotations
 
+import fnmatch
 import json
 import logging
 import uuid
@@ -297,6 +298,8 @@ def _build_agent_catalog(
         for mt in mcp_tools.get(em.name, []):
             if em.tools is not None and mt.name not in em.tools:
                 continue
+            if any(fnmatch.fnmatchcase(mt.name, pat) for pat in em.deny):
+                continue
             wire_name = f"{em.name}__{mt.name}"
             routing[wire_name] = (em.name, mt.name)
             local_tools.append(