From 6d0254c7b869c107cb7f810cbbc92f510068d24d Mon Sep 17 00:00:00 2001
From: Colin McDonnell <colinmcd94@gmail.com>
Date: Thu, 16 Apr 2026 23:38:42 +0000
Subject: [PATCH] pass --disallowedTools as a single comma-separated arg

claude-code's commander parser treats --disallowedTools as variadic
<tools...>, which silently absorbs extra tokens but may not enforce
them as reliably as a single comma-separated value. switch to the
form the CLI help documents ("Bash,Agent(Bash)") to make the deny
list unambiguous.
---
 agents/claude.ts | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/agents/claude.ts b/agents/claude.ts
index 5679b61..5e329c4 100644
--- a/agents/claude.ts
+++ b/agents/claude.ts
@@ -591,8 +591,7 @@ export const claude = agent({
       "--effort",
       effort,
       "--disallowedTools",
-      "Bash",
-      "Agent(Bash)",
+      "Bash,Agent(Bash)",
     ];
 
     if (model) {