diff --git a/.forgejo/kcl-ci/kcl.mod b/.forgejo/kcl-ci/kcl.mod
index a00de7e..c830904 100644
--- a/.forgejo/kcl-ci/kcl.mod
+++ b/.forgejo/kcl-ci/kcl.mod
@@ -4,4 +4,4 @@ edition = "v0.12.3"
 version = "0.0.1"
 
 [dependencies]
-kcl-ci = { git = "https://git.wxs.ro/actions/kcl-ci", tag = "v1.34.3" }
+kcl-ci = { git = "https://git.wxs.ro/actions/kcl-ci", tag = "v1.37.0" }
diff --git a/.forgejo/kcl-ci/kcl.mod.lock b/.forgejo/kcl-ci/kcl.mod.lock
index 8c41ae0..469d2e7 100644
--- a/.forgejo/kcl-ci/kcl.mod.lock
+++ b/.forgejo/kcl-ci/kcl.mod.lock
@@ -4,4 +4,4 @@
     full_name = "kcl-ci_0.0.1"
     version = "0.0.1"
     url = "https://git.wxs.ro/actions/kcl-ci"
-    git_tag = "v1.34.3"
+    git_tag = "v1.37.0"
diff --git a/.forgejo/kcl-ci/main.k b/.forgejo/kcl-ci/main.k
index 71d6b39..d55064e 100644
--- a/.forgejo/kcl-ci/main.k
+++ b/.forgejo/kcl-ci/main.k
@@ -540,6 +540,8 @@ fi"""
                         claude_code_oauth_token = h.gha_secret("CLAUDE_CODE_OAUTH_TOKEN")
                         github_token = h.gha_secret("CLAUDE_BOT_TOKEN")
                         platform = "forgejo"
+                        show_full_output = "true"
+                        allowed_tools = "Bash,Read,Write,Edit,MultiEdit,Glob,Grep,WebFetch,WebSearch"
                     }
                     env = {
                         GITHUB_TOKEN = h.gha_secret("CLAUDE_BOT_TOKEN")
diff --git a/.forgejo/workflows/claude.yml b/.forgejo/workflows/claude.yml
index bb50305..578a831 100644
--- a/.forgejo/workflows/claude.yml
+++ b/.forgejo/workflows/claude.yml
@@ -1,4 +1,4 @@
-# Generated by KCL v1.34.3 - DO NOT EDIT
+# Generated by KCL v1.37.0 - DO NOT EDIT
 # Source: .forgejo/kcl-ci/main.k
 # kcl-ci local: ~/stuff/gitrepos/wxs/actions/kcl-ci
 # kcl-ci remote: https://git.wxs.ro/actions/kcl-ci
@@ -39,6 +39,8 @@ jobs:
         bot_email: claude@wxs.ro
         platform: forgejo
         assignee_trigger: claude
+        show_full_output: 'true'
+        allowed_tools: Bash,Read,Write,Edit,MultiEdit,Glob,Grep,WebFetch,WebSearch
     - name: Debug on failure
       if: failure()
       run: |
diff --git a/.forgejo/workflows/upstream-sync.yml b/.forgejo/workflows/upstream-sync.yml
index 357934c..1c82f7e 100644
--- a/.forgejo/workflows/upstream-sync.yml
+++ b/.forgejo/workflows/upstream-sync.yml
@@ -1,4 +1,4 @@
-# Generated by KCL v1.34.3 - DO NOT EDIT
+# Generated by KCL v1.37.0 - DO NOT EDIT
 # Source: .forgejo/kcl-ci/main.k
 # kcl-ci local: ~/stuff/gitrepos/wxs/actions/kcl-ci
 # kcl-ci remote: https://git.wxs.ro/actions/kcl-ci
@@ -281,6 +281,8 @@ jobs:
         claude_code_oauth_token: ${{ secrets.CLAUDE_CODE_OAUTH_TOKEN }}
         github_token: ${{ secrets.CLAUDE_BOT_TOKEN }}
         platform: forgejo
+        show_full_output: 'true'
+        allowed_tools: Bash,Read,Write,Edit,MultiEdit,Glob,Grep,WebFetch,WebSearch
       env:
         GITHUB_TOKEN: ${{ secrets.CLAUDE_BOT_TOKEN }}
         FORK_MODIFIED_FILES: ${{ steps.prepare.outputs.fork_files }}