Omit CLI-only safeoutputs instructions when bash is disabled; make cli-proxy/bash incompatibility explicit

.github/workflows/ai-moderator.md

@@ -37,13 +37,13 @@ imports:
   - shared/reporting.md
 tools:
   bash: false
-  cli-proxy: true
+  cli-proxy: false
   cache-memory:
     key: spam-tracking-${{ github.repository_owner }}
     retention-days: 1
     allowed-extensions: [".json"]
   github:
-    mode: gh-proxy
+    mode: local
     read-only: true
     toolsets: [default]
     min-integrity: none

.github/workflows/smoke-agent-all-none.md

@@ -24,6 +24,7 @@ name: "Smoke Agent: all/none"
 engine: claude
 strict: true
 tools:
+  cli-proxy: false
   bash: false
   github:
     mode: local

.github/workflows/smoke-agent-public-none.md

@@ -24,6 +24,7 @@ name: "Smoke Agent: public/none"
 engine: claude
 strict: true
 tools:
+  cli-proxy: false
   bash: false
   github:
     mode: local

docs/src/content/docs/reference/tools.md

@@ -150,6 +150,18 @@ This reduces token consumption from large MCP tool schemas and can simplify work
 
 Defaults to `false`.
 
+CLI mounting requires shell access: the wrappers are ordinary executables invoked from bash. GitHub `gh-proxy` mode is also shell-backed because GitHub reads are performed with the `gh` CLI. When `tools.bash` is disabled (`bash: false` or `bash: []`), `cli-proxy: true` and `tools.github.mode: gh-proxy` are rejected at compile time, and strict mode requires `cli-proxy: false` to be stated explicitly:
+
+```yaml wrap
+tools:
+  bash: false
+  cli-proxy: false
+  github:
+    mode: local
+```
+
+With `cli-proxy: false` and an MCP-backed GitHub mode (`local` or `remote`), MCP servers (including `safeoutputs`) remain available through the MCP protocol, and the CLI-only instructions are omitted from the generated prompt. Run `gh aw fix` to add the explicit setting to existing workflows.
+
 ## Tool Timeout Configuration
 
 ### Tool Operation Timeout (`tools.timeout`)

pkg/cli/codemod_bash_allowlist_unsupported_engine.go

@@ -105,6 +105,18 @@ func resolveEffectiveBashTools(content string, frontmatter map[string]any, fileP
 		return topTools, nil
 	}
 
+	return resolveEffectiveTools(content, frontmatter, filePath)
+}
+
+// resolveEffectiveTools returns the effective tools map for the workflow, merging in tools from
+// imports and markdown includes when a file path is available.
+func resolveEffectiveTools(content string, frontmatter map[string]any, filePath string) (map[string]any, error) {
+	topTools, _ := frontmatter["tools"].(map[string]any)
+
+	if filePath == "" {
+		return topTools, nil
+	}
+
 	baseDir := filepath.Dir(filePath)
 	importCache := parser.NewImportCache("")