c0f16c870f
The deny list takes precedence over --allowedTools, so granting the web_tools group had no effect — both tools were silently blocked. WebFetch/WebSearch are now gated solely via --tools (builtin_tools_arg): agents without the web_tools tool group don't get them in --tools so claude never sees them; agents with the group get them in both --tools and --allowedTools.
8 lines
157 B
JSON
8 lines
157 B
JSON
{
|
|
"autoCompactEnabled": false,
|
|
"autoMemoryEnabled": false,
|
|
"effortLevel": "medium",
|
|
"permissions": {
|
|
"deny": ["Bash", "Task", "TodoWrite"]
|
|
}
|
|
}
|