docs(cli): replace legacy droid exec tool flags with --only-tools/--add-tools/--remove-tools

docs/cli/configuration/mcp.mdx

@@ -440,7 +440,7 @@ If a referenced variable is unset and no default is provided, droid leaves the p
 
 ### Per-tool filtering
 
-Servers can expose many tools, and not all of them need to be loaded into every session. `enabledTools` and `disabledTools` let you trim the tool surface persistently in `mcp.json`, mirroring the `--restrict-tools` / `--disabled-tools` flags available on `droid exec`.
+Servers can expose many tools, and not all of them need to be loaded into every session. `enabledTools` and `disabledTools` let you trim the tool surface persistently in `mcp.json`, mirroring the `--only-tools` / `--remove-tools` flags available on `droid exec`.
 
 - `disabledTools`: blocklist — every tool the server reports is loaded **except** the listed names.
 - `enabledTools`: allowlist — **only** the listed tools are loaded.

docs/cli/droid-exec/overview.mdx

@@ -63,9 +63,9 @@ Options:
   --spec-model <id>                     Model ID to use for spec mode
   --spec-reasoning-effort <level>       Reasoning effort for spec mode
   --use-spec                            Start in spec mode
-  --restrict-tools <ids>                Restrict the run to only the specified tools (comma or space separated list)
-  --additional-tools <ids>              Enable additional tools beyond the defaults (comma or space separated list)
-  --disabled-tools <ids>                Disable specific tools (comma or space separated list)
+  --only-tools <ids>                    Use only tool IDs or MCP:<server>[/<tool>] selectors
+  --add-tools <ids>                     Add tool IDs or MCP:<server>[/<tool>] selectors
+  --remove-tools <ids>                  Remove tool IDs or MCP:<server>[/<tool>] selectors
   --disable-builtin-skills              Disable Factory-provided builtin skills for this session
   --list-tools                          List available tools for the selected model and exit
   --cwd <path>                          Working directory path
@@ -373,13 +373,13 @@ Enable or disable specific tools:
 
 ```bash
 # Restrict to only specific tools
-droid exec --restrict-tools ApplyPatch "refactor files"
+droid exec --only-tools ApplyPatch "refactor files"
 
 # Enable additional tools
-droid exec --additional-tools ApplyPatch "refactor files"
+droid exec --add-tools ApplyPatch "refactor files"
 
 # Disable specific tools
-droid exec --auto medium --disabled-tools execute-cli "run edits only"
+droid exec --auto medium --remove-tools execute-cli "run edits only"
 ```
 
 ### Skill controls

docs/jp/cli/configuration/mcp.mdx

@@ -440,7 +440,7 @@ Droid は `mcp.json` の読み込み時に、`${VAR}` と `${VAR:-default}` の
 
 ### ツールごとのフィルタリング
 
-サーバーは多数のツールを公開できますが、すべてを毎回のセッションに読み込む必要はありません。`enabledTools` と `disabledTools` を使うと、`mcp.json` でツールの公開範囲を永続的に絞り込めます。これは `droid exec` で使える `--restrict-tools` / `--disabled-tools` フラグに対応しています。
+サーバーは多数のツールを公開できますが、すべてを毎回のセッションに読み込む必要はありません。`enabledTools` と `disabledTools` を使うと、`mcp.json` でツールの公開範囲を永続的に絞り込めます。これは `droid exec` で使える `--only-tools` / `--remove-tools` フラグに対応しています。
 
 - `disabledTools`: ブロックリスト — サーバーが報告したツールのうち、列挙した名前**以外**を読み込みます。
 - `enabledTools`: 許可リスト — 列挙したツール**のみ**を読み込みます。

docs/jp/cli/droid-exec/overview.mdx

@@ -62,9 +62,9 @@ Options:
   --spec-model <id>                     Model ID to use for spec mode
   --spec-reasoning-effort <level>       Reasoning effort for spec mode
   --use-spec                            Start in spec mode
-  --restrict-tools <ids>                Restrict the run to only the specified tools (comma or space separated list)
-  --additional-tools <ids>              Enable additional tools beyond the defaults (comma or space separated list)
-  --disabled-tools <ids>                Disable specific tools (comma or space separated list)
+  --only-tools <ids>                    Use only tool IDs or MCP:<server>[/<tool>] selectors
+  --add-tools <ids>                     Add tool IDs or MCP:<server>[/<tool>] selectors
+  --remove-tools <ids>                  Remove tool IDs or MCP:<server>[/<tool>] selectors
   --list-tools                          List available tools for the selected model and exit
   --cwd <path>                          Working directory path
   -w, --worktree [name]                 Run in a git worktree
@@ -333,13 +333,13 @@ droid exec --model gpt-5-codex --list-tools --output-format json
 特定のツールを有効または無効にする:
 ```bash
 # Restrict to only specific tools
-droid exec --restrict-tools ApplyPatch "refactor files"
+droid exec --only-tools ApplyPatch "refactor files"
 
 # Enable additional tools
-droid exec --additional-tools ApplyPatch "refactor files"
+droid exec --add-tools ApplyPatch "refactor files"
 
 # Disable specific tools
-droid exec --auto medium --disabled-tools execute-cli "run edits only"
+droid exec --auto medium --remove-tools execute-cli "run edits only"
 ```
 ### カスタムモデル
 

docs/jp/reference/cli-reference.mdx

@@ -59,9 +59,9 @@ CLIは2つのモードで動作します：
 | `-m, --model <id>`                   | 特定の[モデルID](/jp/models)を選択                                                                       | `droid exec -m claude-opus-4-7`                            |
 | `-s, --session-id <id>`              | 既存セッションを継続                                                                                 | `droid exec -s session-abc123`                             |
 | `--auto <level>`                     | [自律レベル](#autonomy-levels)を設定（`low`、`medium`、`high`）                                             | `droid exec --auto medium "run tests"`                     |
-| `--restrict-tools <ids>`             | 指定したツールのみに制限（カンマまたはスペース区切り）                                                       | `droid exec --restrict-tools ApplyPatch,Bash`             |
-| `--additional-tools <ids>`           | 既定に加えて追加のツールを強制有効化（カンマまたはスペース区切り）                                                 | `droid exec --additional-tools ApplyPatch,Bash`           |
-| `--disabled-tools <ids>`             | この実行で特定のツールを無効化                                                                          | `droid exec --disabled-tools execute-cli`                  |
+| `--only-tools <ids>`                 | 指定したツールのみに制限（カンマまたはスペース区切り）                                                       | `droid exec --only-tools ApplyPatch,Execute`              |
+| `--add-tools <ids>`                  | 選択されたツールセットにツールを追加（カンマまたはスペース区切り）                                                 | `droid exec --add-tools ApplyPatch,Execute`               |
+| `--remove-tools <ids>`               | この実行で特定のツールを無効化                                                                          | `droid exec --remove-tools execute-cli`                    |
 | `--list-tools`                       | 利用可能なツールを表示して終了                                                                               | `droid exec --list-tools`                                  |
 | `-o, --output-format <format>`       | 出力形式（`text`、`json`、`stream-json`、`stream-jsonrpc`）                                              | `droid exec -o json "document API"`                        |
 | `--input-format <format>`            | 入力形式（マルチターン用の`stream-jsonrpc`）                                                               | `droid exec --input-format stream-jsonrpc -o stream-jsonrpc` |

docs/reference/cli-reference.mdx

@@ -127,9 +127,9 @@ Customize droid's behavior with command-line flags:
 | `-m, --model <id>`                | Select a specific [model ID](/models)                              | `droid exec -m claude-opus-4-7`                              |
 | `-s, --session-id <id>`           | Continue an existing session                                       | `droid exec -s session-abc123`                               |
 | `--auto <level>`                  | Set [autonomy level](#autonomy-levels) (`low`, `medium`, `high`)   | `droid exec --auto medium "run tests"`                       |
-| `--restrict-tools <ids>`          | Restrict the run to only the specified tools (comma or space separated) | `droid exec --restrict-tools ApplyPatch,Bash`           |
-| `--additional-tools <ids>`        | Force-enable additional tools beyond the defaults (comma or space separated) | `droid exec --additional-tools ApplyPatch,Bash`    |
-| `--disabled-tools <ids>`          | Disable specific tools for this run                                | `droid exec --disabled-tools execute-cli`                    |
+| `--only-tools <ids>`              | Restrict the run to only the specified tools (comma or space separated) | `droid exec --only-tools ApplyPatch,Execute`            |
+| `--add-tools <ids>`               | Add tools to the selected set (comma or space separated)           | `droid exec --add-tools ApplyPatch,Execute`                  |
+| `--remove-tools <ids>`            | Disable specific tools for this run                                | `droid exec --remove-tools execute-cli`                      |
 | `--disable-builtin-skills`        | Disable Factory-provided builtin skills in interactive or exec sessions while preserving other skill sources | `droid --disable-builtin-skills` |
 | `--list-tools`                    | Print available tools and exit                                     | `droid exec --list-tools`                                    |
 | `-o, --output-format <format>`    | Output format (`text`, `json`, `stream-json`, `stream-jsonrpc`)    | `droid exec -o json "document API"`                          |