r026: add dynamic agent toolbox integration

src/security.test.ts

@@ -23,6 +23,16 @@ describe("secure tool configuration", () => {
     expect(cfg.enabledTools).toEqual([]);
   });
 
+  test("toolbox integration is opt-in and parsed independently", () => {
+    const off = parseConfig("MUA_API_KEY=test\nMUA_ENABLED_TOOLS=none\n");
+    const on = parseConfig(
+      "MUA_API_KEY=test\nMUA_ENABLED_TOOLS=none\nMUA_TOOLBOX_ENABLED=true\n",
+    );
+    expect(off.toolboxEnabled).toBe(false);
+    expect(on.toolboxEnabled).toBe(true);
+    expect(on.enabledTools).toEqual([]);
+  });
+
   test("an enabled legacy update also exposes the safer batch update", () => {
     const cfg = parseConfig(
       "MUA_API_KEY=test\nMUA_ENABLED_TOOLS=unraid_docker_update\n",