From 0bf40faf95934e99c4d0500538b832a797222fec Mon Sep 17 00:00:00 2001
From: Dax Raad <d@ironbay.co>
Date: Wed, 26 Nov 2025 22:08:45 -0500
Subject: [PATCH] core: prevent codesearch and websearch tools when webfetch
 permission is denied

---
 packages/opencode/src/tool/registry.ts | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/packages/opencode/src/tool/registry.ts b/packages/opencode/src/tool/registry.ts
index 9c8dab17b..26b6ea9fc 100644
--- a/packages/opencode/src/tool/registry.ts
+++ b/packages/opencode/src/tool/registry.ts
@@ -140,6 +140,8 @@ export namespace ToolRegistry {
     }
     if (agent.permission.webfetch === "deny") {
       result["webfetch"] = false
+      result["codesearch"] = false
+      result["websearch"] = false
     }
 
     return result