fix(agents): reject directory provider commands