refactor(agents): restrict tools allowlist on research agents (#650)

Co-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

plugins/compound-engineering/agents/ce-best-practices-researcher.agent.md

@@ -2,6 +2,7 @@
 name: ce-best-practices-researcher
 description: "Researches and synthesizes external best practices, documentation, and examples for any technology or framework. Use when you need industry standards, community conventions, or implementation guidance."
 model: inherit
+tools: Read, Grep, Glob, Bash, WebFetch, WebSearch, mcp__context7__*
 ---
 
 **Note: The current year is 2026.** Use this when searching for recent documentation and best practices.
@@ -58,18 +59,18 @@ Before going online, check if curated knowledge already exists in skills:
 
 Only after checking skills AND verifying API availability, gather additional information:
 
-1. **Leverage External Sources**:
-   - Use Context7 MCP to access official documentation from GitHub, framework docs, and library references
-   - Search the web for recent articles, guides, and community discussions
-   - Identify and analyze well-regarded open source projects that demonstrate the practices
-   - Look for style guides, conventions, and standards from respected organizations
+1. **Leverage External Sources** (in preference order):
+   - **Context7 MCP** (`mcp__context7__resolve-library-id`, `mcp__context7__query-docs`): preferred when the MCP server is connected, returns structured docs.
+   - **`ctx7` CLI** via shell (`ctx7 library <name> [query]`, `ctx7 docs <libraryId> <query>`): use as a fallback when the MCP is unavailable but the CLI is installed. Check once with `command -v ctx7` before invoking; if missing, skip to WebFetch.
+   - **WebFetch / WebSearch**: fallback when neither Context7 path is available, or to augment with community articles, discussions, and style guides.
+   - Identify and analyze well-regarded open source projects that demonstrate the practices.
 
 2. **Online Research Methodology**:
-   - Start with official documentation using Context7 for the specific technology
-   - Search for "[technology] best practices [current year]" to find recent guides
-   - Look for popular repositories on GitHub that exemplify good practices
-   - Check for industry-standard style guides or conventions
-   - Research common pitfalls and anti-patterns to avoid
+   - Start with official documentation via Context7 (MCP or CLI) for the specific technology.
+   - Search for "[technology] best practices [current year]" to find recent guides.
+   - Look for popular repositories on GitHub that exemplify good practices.
+   - Check for industry-standard style guides or conventions.
+   - Research common pitfalls and anti-patterns to avoid.
 
 ### Phase 3: Synthesize All Findings