From 159ed9f06bce1a0db50503d9a93e440311d63740 Mon Sep 17 00:00:00 2001
From: Ben Brandt <benjamin.j.brandt@gmail.com>
Date: Wed, 27 Aug 2025 13:57:56 -0700
Subject: [PATCH] Disallow the built-in file tools

---
 src/acp-agent.ts | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/acp-agent.ts b/src/acp-agent.ts
index f4e650d7..762b6bd7 100644
--- a/src/acp-agent.ts
+++ b/src/acp-agent.ts
@@ -90,7 +90,7 @@ export class ClaudeAcpAgent implements Agent {
         cwd: params.cwd,
         mcpServers,
         allowedTools: ["mcp__acp__read"],
-        disallowedTools: ["Read"],
+        disallowedTools: ["Read", "Write", "Edit", "MultiEdit"],
         strictMcpConfig: true,
         permissionPromptToolName: "mcp__acp__permission",
         stderr: (err) => console.error(err),