@kody-ade/kody-engine 0.4.552 → 0.4.553

package/dist/bin/kody.js

@@ -15,7 +15,7 @@ var init_package = __esm({
   "package.json"() {
     package_default = {
       name: "@kody-ade/kody-engine",
-      version: "0.4.552",
+      version: "0.4.553",
       description: "kody \u2014 autonomous development engine. Single-session Claude Code agent behind a generic executor + declarative implementation profiles.",
       license: "MIT",
       type: "module",
@@ -3837,6 +3837,7 @@ async function runAgent(opts) {
         // Fresh array (never mutate the shared DEFAULT_ALLOWED_TOOLS const) so
         // opt-in tools like fetch_repo can be appended below.
         allowedTools: [...opts.allowedToolsOverride ?? DEFAULT_ALLOWED_TOOLS],
+        ...opts.disallowedToolsOverride?.length ? { disallowedTools: [...opts.disallowedToolsOverride] } : {},
         permissionMode: opts.permissionModeOverride ?? "acceptEdits",
         env,
         hooks: {
@@ -5866,10 +5867,12 @@ function parseClaudeCode(p, raw) {
     throw new ProfileError(p, `claudeCode.permissionMode must be one of default|acceptEdits|plan|bypassPermissions`);
   }
   const tools = Array.isArray(r.tools) ? r.tools : [];
+  const disallowedTools = Array.isArray(r.disallowedTools) ? r.disallowedTools : [];
   return {
     model: typeof r.model === "string" ? r.model : "inherit",
     permissionMode,
     maxTurns: typeof r.maxTurns === "number" ? r.maxTurns : null,
+    disallowedTools,
     maxThinkingTokens: typeof r.maxThinkingTokens === "number" ? r.maxThinkingTokens : null,
     reasoningEffort: typeof r.reasoningEffort === "string" ? parseReasoningEffort(r.reasoningEffort) : null,
     maxTurnTimeoutSec: typeof r.maxTurnTimeoutSec === "number" ? r.maxTurnTimeoutSec : null,
@@ -18014,8 +18017,21 @@ function configureBrowser(ctx, profile, requirements) {
   const server = browserRuntime(ctx, requirements);
   if (requirements.browserOnly) {
     profile.claudeCode.tools = ["Write"];
+    profile.claudeCode.disallowedTools = [
+      "Agent",
+      "Bash",
+      "Edit",
+      "Glob",
+      "Grep",
+      "NotebookEdit",
+      "Read",
+      "Task",
+      "TodoWrite",
+      "WebFetch",
+      "WebSearch"
+    ];
     profile.claudeCode.permissionMode = "default";
-    profile.claudeCode.maxTurns = Math.min(profile.claudeCode.maxTurns ?? 50, 50);
+    profile.claudeCode.maxTurns = Math.min(profile.claudeCode.maxTurns ?? 100, 100);
   }
   if (!profile.claudeCode.tools.includes("mcp__playwright")) {
     profile.claudeCode.tools = [...profile.claudeCode.tools, "mcp__playwright"];
@@ -21870,6 +21886,7 @@ async function runImplementation(profileName, input) {
       ndjsonDir,
       additionalDirectories: agentTaskArtifacts ? [agentTaskArtifacts.absDir] : void 0,
       allowedToolsOverride: profile.claudeCode.tools,
+      disallowedToolsOverride: profile.claudeCode.disallowedTools,
       permissionModeOverride: profile.claudeCode.permissionMode,
       mcpServers: profile.claudeCode.mcpServers.length > 0 ? profile.claudeCode.mcpServers : void 0,
       pluginPaths: pluginPaths.length > 0 ? pluginPaths : void 0,

package/dist/implementations/types.ts

@@ -297,6 +297,8 @@ export interface ClaudeCodeSpec {
   permissionMode: "default" | "acceptEdits" | "plan" | "bypassPermissions"
   /** null = unbounded. */
   maxTurns: number | null
+  /** Tools the SDK must reject even when the model requests them. */
+  disallowedTools?: string[]
   /** Extended-thinking token budget. null = SDK default. */
   maxThinkingTokens: number | null
   /** User-facing effort level. When set, preferred over maxThinkingTokens. */

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kody-ade/kody-engine",
-  "version": "0.4.552",
+  "version": "0.4.553",
   "description": "kody — autonomous development engine. Single-session Claude Code agent behind a generic executor + declarative implementation profiles.",
   "license": "MIT",
   "type": "module",