Function blocked_tools_for 

fn blocked_tools_for(kind: SessionKind, interactive: bool) -> String

The --disallowedTools value for a session, comma-separated - the form the CLI’s variadic <tools...> parser accepts.

Every session loses the tools forge has replaced, so nothing depends on a distinction a caller cannot see. A worker additionally loses the two worktree-hop tools, because it is pinned to its spawn location, and a session that cannot put a question to the user loses AskUserQuestion - that one is a property of the spawn, not of the kind.