Remove TodoWrite from allowed permissions in Claude subprocess

[xliry]

Problem

Agents use TodoWrite 7+ times per task despite prompt saying "at most twice". Prompt-based bans don't work — the agent reads "you can use TodoWrite twice" instead of "don't use it".

What to do

In src/daemon.ts, in the runClaude() function where the Claude subprocess is spawned, add TodoWrite to the denied permissions list.

Find where settings.json is written for the workspace (around line 1039-1069). Add TodoWrite to the deny list so Claude physically cannot call it.

Alternatively, if Claude's --print mode supports --disallowedTools, use that flag.

Acceptance

• Agent cannot call TodoWrite at all
• No prompt changes needed — tool is simply unavailable
• Verify by checking agent logs after a task completes: zero TodoWrite calls

[xliry]

Plan

• Add TodoWrite to the deny list in the permissions object of the settings.json written for the Claude subprocess
• In src/daemon.ts around line 1060-1066, add a deny array alongside allow containing "TodoWrite"
• This physically prevents the agent from calling TodoWrite — no prompt changes needed

[xliry]

Completion Report

Added TodoWrite to the deny list in the permissions object written to ~/.claude/settings.json for each Claude subprocess. The agent now physically cannot call TodoWrite — no prompt changes needed. Build passed, changes pushed, PR opened at xliry/lota#1.

Modified: src/daemon.ts