@khalilgharbaoui/opencode-claude-code-plugin 0.13.0 → 0.13.1

package/README.md

@@ -182,6 +182,7 @@ The account model IDs are internally suffixed, for example `claude-sonnet-4-6@wo
 | `skipPermissions` | boolean | `true` | Pass `--dangerously-skip-permissions` to `claude`. Ignored when `proxyTools` is set — the proxy handles permissions through opencode instead. |
 | `permissionMode` | `acceptEdits` \| `auto` \| `bypassPermissions` \| `default` \| `dontAsk` \| `plan` | – | Forwarded to `claude --permission-mode`. |
 | `proxyTools` | string[] | `["Bash", "Edit", "Write", "WebFetch", "Task"]` | Claude built-in tools to route through opencode's executor + permission UI. Opt-in extras: `"Question"`, `"Compress"`. See [Selective tool proxy](#selective-tool-proxy). |
+| `extraDisallowedTools` | string[] | – | Extra Claude built-ins to switch off with `--disallowedTools`, on top of what `proxyTools` implies. Claude's names, e.g. `["NotebookEdit"]`. See [Closing a tool with no proxy](#closing-a-tool-with-no-proxy). |
 | `proxyToolTimeoutMs` | `Record<string, number>` | – | Per-tool proxy call deadline in ms, keyed by proxy tool name (`bash`, `task`, …). Defaults: 10 min flat, `task` → 60 min. For `bash`, the call's own `input.timeout` is honoured on top (`max(resolved, input.timeout)`). See [Selective tool proxy](#selective-tool-proxy). |
 | `planModeQuestion` | boolean | `false` | Route `ExitPlanMode` approval through opencode's native `question` tool instead of a text "(yes/no)" prompt. Off because opencode's question form is currently broken upstream. See [Plan mode](#plan-mode). |
 | `controlRequestBehavior` | `allow` \| `deny` | `allow` | Default response when `skipPermissions: false` and Claude sends a `can_use_tool` control request. |
@@ -298,6 +299,20 @@ recovery step for harnesses that defer MCP tool schemas. Both apply per Claude
 process at spawn, and provider options are read once at opencode startup, so
 `proxyTools` changes need a full opencode restart.
 
+### Closing a tool with no proxy
+
+`proxyTools` only reaches built-ins the plugin can replace. A built-in with no opencode equivalent, `NotebookEdit` today and whatever Claude Code ships next, stays enabled and unmediated no matter what you put in that list. `extraDisallowedTools` names them directly:
+
+```json
+"options": {
+  "extraDisallowedTools": ["NotebookEdit"]
+}
+```
+
+These go straight to `claude --disallowedTools`, so use Claude's tool names rather than opencode's. There is no replacement: the capability goes away rather than being routed through opencode, which is the point, but the model then has to work without it.
+
+Unknown entries in `proxyTools` are logged as a warning at spawn rather than passing silently, so a typo shows up as "ignoring unknown proxyTools entries" in the plugin log instead of quietly leaving the matching built-in unmediated.
+
 ### Context compression
 
 `"Compress"` is off by default. Add it when you run a harness that expects the model to manage its own context (opencode-dcp injects exactly those instructions), and the plugin exposes `mcp__opencode_proxy__compress`:

package/dist/index.d.ts

@@ -161,6 +161,7 @@ interface ClaudeCodeConfig {
     controlRequestToolBehaviors?: Record<string, ControlRequestBehavior>;
     controlRequestDenyMessage?: string;
     proxyTools?: string[];
+    extraDisallowedTools?: string[];
     proxyToolTimeoutMs?: Record<string, number>;
     /**
      * Route `ExitPlanMode` through opencode's native `question` tool so plan
@@ -283,6 +284,20 @@ interface ClaudeCodeProviderSettings {
       * entry, in which case the deny/markdown fallback applies.
       */
     proxyTools?: string[];
+    /**
+     * Extra Claude Code built-ins to switch off with `--disallowedTools`,
+     * on top of the ones implied by `proxyTools`.
+     *
+     * `proxyTools` can only disable built-ins the plugin knows how to
+     * replace, so a built-in with no proxy equivalent (`NotebookEdit`, and
+     * anything Claude Code adds after this release) has no off switch
+     * otherwise. Names are Claude's, not opencode's: `["NotebookEdit"]`.
+     *
+     * Disabling a tool with no replacement removes the capability rather
+     * than routing it through opencode — that is the point, but it does mean
+     * the model has to work without it.
+     */
+    extraDisallowedTools?: string[];
     /**
      * Per-tool proxy call timeouts in milliseconds, keyed by the proxy tool
      * name (`bash`, `edit`, `write`, `webfetch`, `task`, `question` —

package/dist/index.js

@@ -294,6 +294,9 @@ var CLAUDE_INTERNAL_TOOLS = /* @__PURE__ */ new Set([
   "TaskGet",
   "TaskStop"
 ]);
+function singleQuoteForShell(value) {
+  return `'${value.replace(/'/g, `'\\''`)}'`;
+}
 function emitTodoWrite(todos) {
   return {
     name: "todowrite",
@@ -348,7 +351,7 @@ function mapTool(name, input, opts) {
     return {
       name: "bash",
       input: {
-        command: `echo "TASK OUTPUT: ${String(output).replace(/"/g, '\\"')}"`,
+        command: `printf '%s\\n' ${singleQuoteForShell(`TASK OUTPUT: ${String(output)}`)}`,
         description: "Displaying task output"
       },
       executed: false
@@ -2810,6 +2813,20 @@ function disallowedToolFlags(tools) {
   }
   return out;
 }
+function resolveDisallowedTools(options) {
+  const out = [];
+  const seen = /* @__PURE__ */ new Set();
+  const push = (name) => {
+    const trimmed = name.trim();
+    if (!trimmed || seen.has(trimmed)) return;
+    seen.add(trimmed);
+    out.push(trimmed);
+  };
+  for (const name of disallowedToolFlags(options.proxyTools ?? [])) push(name);
+  for (const name of options.extraDisallowedTools ?? []) push(String(name));
+  if (options.disableWebSearch) push("WebSearch");
+  return out;
+}
 function readBody(req) {
   return new Promise((resolve4, reject) => {
     const chunks = [];
@@ -3353,9 +3370,22 @@ var ClaudeCodeLanguageModel = class {
       DEFAULT_PROXY_TOOLS.map((t) => [t.name.toLowerCase(), t])
     );
     const picked = [];
+    const unknown = [];
     for (const n of names) {
       const def = defsByName.get(String(n).toLowerCase());
       if (def) picked.push(def);
+      else unknown.push(String(n));
+    }
+    if (unknown.length > 0) {
+      const known = [...defsByName.keys()].join(", ");
+      if (picked.length === 0) {
+        log.warn(
+          "no proxyTools entry was recognised; nothing will be proxied this turn",
+          { unknown, known }
+        );
+      } else {
+        log.warn("ignoring unknown proxyTools entries", { unknown, known });
+      }
     }
     return picked.length > 0 ? picked : null;
   }
@@ -4453,10 +4483,11 @@ ${plan}
                 proxyServer = await self.ensureProxyServer(combinedProxyTools, sk);
               }
               const questionProxyActive = enrichedProxy?.some((t) => t.name === "question") ?? false;
-              const proxyDisallowed = enrichedProxy ? disallowedToolFlags(enrichedProxy) : [];
-              const extraDisallowed = [];
-              if (self.config.webSearch === "disabled") extraDisallowed.push("WebSearch");
-              const allDisallowed = [...proxyDisallowed, ...extraDisallowed];
+              const allDisallowed = resolveDisallowedTools({
+                proxyTools: enrichedProxy,
+                extraDisallowedTools: self.config.extraDisallowedTools,
+                disableWebSearch: self.config.webSearch === "disabled"
+              });
               const mcp = self.effectiveMcpConfig(
                 cwd,
                 proxyServer?.configPath(),
@@ -5707,11 +5738,11 @@ function defineModel(opts) {
     variants: opts.reasoning ? reasoningVariants : void 0
   };
 }
-var haikuCost = { input: 1e-6, output: 5e-6, cacheRead: 1e-7, cacheWrite: 125e-8 };
-var sonnetCost = { input: 3e-6, output: 15e-6, cacheRead: 3e-7, cacheWrite: 375e-8 };
-var sonnet5Cost = { input: 2e-6, output: 1e-5, cacheRead: 2e-7, cacheWrite: 25e-7 };
-var opusCost = { input: 5e-6, output: 25e-6, cacheRead: 5e-7, cacheWrite: 625e-8 };
-var fableCost = { input: 1e-5, output: 5e-5, cacheRead: 1e-6, cacheWrite: 125e-7 };
+var haikuCost = { input: 1, output: 5, cacheRead: 0.1, cacheWrite: 1.25 };
+var sonnetCost = { input: 3, output: 15, cacheRead: 0.3, cacheWrite: 3.75 };
+var sonnet5Cost = { input: 2, output: 10, cacheRead: 0.2, cacheWrite: 2.5 };
+var opusCost = { input: 5, output: 25, cacheRead: 0.5, cacheWrite: 6.25 };
+var fableCost = { input: 10, output: 50, cacheRead: 1, cacheWrite: 12.5 };
 function toConfigModel(model) {
   const inputMods = [];
   const outputMods = [];
@@ -6310,6 +6341,7 @@ function createClaudeCode(settings = {}) {
       controlRequestToolBehaviors: settings.controlRequestToolBehaviors,
       controlRequestDenyMessage: settings.controlRequestDenyMessage,
       proxyTools,
+      extraDisallowedTools: settings.extraDisallowedTools,
       proxyToolTimeoutMs: settings.proxyToolTimeoutMs,
       planModeQuestion: settings.planModeQuestion ?? false,
       webSearch: settings.webSearch,