Tool Isolation for Generation-Only Claude Agent SDK Queries
A directly merged fix in the independent ADHD project that replaced ineffective allowedTools configuration with tools: [], removed bypassPermissions, and added executable regression coverage.
#26
merged PR
3
files changed
31
lines added
4
checks passed
01 · Engineering problem
The failure mode
The project described divergence requests as pure generation, yet allowedTools: [] did not remove built-in Claude Code tools; it only controlled automatic approval. Combined with bypassPermissions, the runtime configuration did not match the intended no-tools safety boundary.
02 · Technical response
What changed
- 01Replaced allowedTools: [] with the Claude Agent SDK’s actual tools: [] availability control.
- 02Removed bypassPermissions from generation-only sessions.
- 03Extracted query-option construction into a testable helper.
- 04Added a regression proving no tools, allowedTools, or permissionMode escape into divergence queries.
03 · Verified outcome
Evidence, not implication
- ✓The maintainer merged PR #26 directly into the project’s main branch.
- ✓Tests, type checking, the production build, and npm package dry-run all passed.
- ✓Generation-only sessions now enforce the architecture’s intended no-tools boundary.
- ✓This was an independent project using Anthropic’s Claude Agent SDK, not an Anthropic repository contribution.
04 · Public record
Source evidence
Independent engineering and open-source work by Patrick Ribbsaeter / Ribbsaeter Systems. References to maintainers, repositories, or companies identify the public technical context only. No employment, client, vendor, or partnership relationship is implied unless explicitly stated.