Blocked bash and raised unit test turns

Author: VitjanZ

render_machine/agent/tool_executor.py

@@ -11,6 +11,13 @@
 
 ToolFunction = Callable[[dict, RenderContext], str]
 
+# Mirrors the server's TEMPORARILY_DISABLED_TOOLS (agent/agent_llm.py in codeplain-api).
+# The model can emit calls to tools that were never declared to it (Gemini does not
+# hard-constrain function-call names), and servers without the corresponding fix forward
+# such calls verbatim — so the block must also be enforced here, at the point of
+# execution. Empty this set to re-enable.
+TEMPORARILY_DISABLED_TOOLS = {"run_command"}
+
 DEFAULT_TOOLS: dict[str, ToolFunction] = {
     "run_unit_tests": tools.run_unit_tests,
     "run_command": tools.run_command,
@@ -44,6 +51,14 @@ def _execute_single(self, call: dict, render_context: RenderContext) -> str:
         name = call["name"]
         args = call.get("args", {})
 
+        if name in TEMPORARILY_DISABLED_TOOLS:
+            trace("tool", name=name, error="temporarily disabled")
+            return (
+                f"Error: the tool '{name}' is temporarily disabled and was NOT executed. "
+                f"Do not call it again — further calls will also be refused. Use run_unit_tests "
+                f"to run the unit test suite, and read_file / grep / ls_files to investigate instead."
+            )
+
         tool_fn = self._tools.get(name)
         if tool_fn is None:
             trace("tool", name=name, error="unknown tool")

tests/test_agent_tools.py

@@ -612,3 +612,34 @@ def test_edit_file_fuzzy_tolerates_indentation_differences(project_dir):
 
     assert "Successfully edited" in result
     assert "return 2" in Path(file_path).read_text(encoding="utf-8")
+
+
+def test_tool_executor_refuses_temporarily_disabled_tool(monkeypatch):
+    """A call to a disabled tool must be refused without executing it, even though the
+    tool is present in DEFAULT_TOOLS (the model can emit calls the server never
+    declared to it, and unpatched servers forward them verbatim)."""
+    import render_machine.agent.tool_executor as tool_executor_module
+    from render_machine.agent.tool_executor import ToolExecutor
+
+    monkeypatch.setattr(tool_executor_module, "TEMPORARILY_DISABLED_TOOLS", {"run_command"})
+
+    executed = []
+    executor = ToolExecutor({"run_command": lambda args, ctx: executed.append(args) or "ran"})
+    results = executor.execute_calls([{"id": "c1", "name": "run_command", "args": {"command": "ls"}}], None)
+
+    assert executed == []
+    assert results[0]["call_id"] == "c1"
+    assert "temporarily disabled" in results[0]["output"]
+    assert "run_command" in results[0]["output"]
+
+
+def test_tool_executor_runs_tools_not_in_disabled_set(monkeypatch):
+    import render_machine.agent.tool_executor as tool_executor_module
+    from render_machine.agent.tool_executor import ToolExecutor
+
+    monkeypatch.setattr(tool_executor_module, "TEMPORARILY_DISABLED_TOOLS", set())
+
+    executor = ToolExecutor({"run_command": lambda args, ctx: "ran: " + args["command"]})
+    results = executor.execute_calls([{"id": "c1", "name": "run_command", "args": {"command": "ls"}}], None)
+
+    assert results[0]["output"] == "ran: ls"