Peter Steinberger
797bcd5bdb
fix: propagate ClickClack toolsAllow through replies
Propagate ClickClack account-level runtime tool allowlists through inbound reply dispatch so restricted ClickClack accounts keep their tool policy when model/agent replies are generated.
This threads `toolsAllow` through shared dispatch, provider wrappers, embedded agent execution, and ACP hook events. ACP-bound sessions now fail closed for restrictive runtime allowlists because ACPX cannot enforce per-turn tool allowlists on reused persistent sessions.
Verification:
- Live ClickClack E2E on Crabbox AWS `run_6a0472ed7e71`, provider `aws`, id `cbx_dace25addcaa`.
- `node scripts/run-vitest.mjs run src/auto-reply/reply/dispatch-acp.test.ts src/plugin-sdk/acp-runtime.test.ts src/auto-reply/reply/dispatch-from-config.reply-dispatch.test.ts src/auto-reply/dispatch.test.ts src/auto-reply/reply/agent-runner-execution.test.ts src/auto-reply/reply/provider-dispatcher.test.ts extensions/clickclack/src/inbound.test.ts --reporter=verbose`
- Crabbox changed gate `run_d32af37fb265`, provider `aws`, id `cbx_8236876017c9`: `corepack pnpm check:changed`
- Autoreview clean: `.agents/skills/autoreview/scripts/autoreview --mode branch --base origin/main`
Supersedes #89500.
Co-authored-by: Michael Appel <mappel@nvidia.com>
2026-06-05 08:40:35 -07:00
..
2026-06-05 08:40:35 -07:00
2026-06-04 01:58:27 -04:00
2026-06-04 02:16:34 -04:00
2026-05-31 22:40:48 +01:00
2026-06-04 02:16:34 -04:00
2026-06-04 02:16:34 -04:00
2026-06-04 02:16:34 -04:00
2026-06-04 01:58:27 -04:00
2026-06-04 02:01:00 -04:00
2026-06-04 02:01:00 -04:00
2026-06-04 02:18:51 -04:00
2026-06-04 01:58:27 -04:00
2026-06-04 01:58:27 -04:00
2026-06-04 02:18:51 -04:00
2026-06-04 02:01:00 -04:00
2026-06-03 19:14:43 -04:00
2026-06-04 01:58:27 -04:00
2026-06-04 02:01:00 -04:00
2026-06-04 01:58:27 -04:00
2026-06-04 01:58:27 -04:00
2026-06-04 01:58:27 -04:00
2026-06-04 02:01:00 -04:00
2026-06-04 02:18:51 -04:00
2026-06-04 01:58:27 -04:00
2026-06-04 02:01:00 -04:00
2026-06-04 01:58:27 -04:00
2026-06-03 19:14:43 -04:00
2026-06-04 02:16:34 -04:00
2026-06-05 08:40:35 -07:00
2026-06-05 08:40:35 -07:00
2026-06-04 02:18:51 -04:00
2026-06-04 02:01:00 -04:00
2026-06-04 02:18:51 -04:00
2026-06-04 01:58:27 -04:00
2026-06-05 08:40:35 -07:00
2026-06-03 19:16:37 -04:00
2026-06-04 02:01:00 -04:00
2026-06-04 02:18:51 -04:00
2026-06-04 02:16:34 -04:00
2026-06-03 19:14:43 -04:00
2026-06-03 19:14:43 -04:00
2026-06-03 19:14:43 -04:00
2026-06-04 19:10:02 -07:00
2026-06-04 19:10:02 -07:00
2026-06-03 19:14:43 -04:00
2026-06-04 01:58:27 -04:00
2026-06-04 02:16:34 -04:00
2026-06-04 02:16:34 -04:00
2026-06-04 02:01:00 -04:00
2026-06-03 19:16:37 -04:00
2026-06-03 19:14:43 -04:00
2026-06-04 02:16:34 -04:00
2026-06-03 19:14:43 -04:00
2026-06-04 02:01:00 -04:00
2026-06-04 02:16:34 -04:00
2026-06-04 02:16:34 -04:00
2026-06-04 01:58:27 -04:00
2026-06-04 02:16:34 -04:00
2026-06-04 02:16:34 -04:00
2026-06-04 02:16:34 -04:00
2026-06-04 02:18:51 -04:00
2026-06-04 02:16:34 -04:00
2026-06-03 19:16:37 -04:00
2026-06-04 02:18:51 -04:00
2026-06-05 00:38:27 +01:00
2026-06-04 01:58:27 -04:00
2026-06-04 02:16:34 -04:00
2026-06-04 02:16:34 -04:00
2026-06-04 02:16:34 -04:00
2026-06-03 19:14:43 -04:00
2026-06-04 01:58:27 -04:00
2026-06-04 02:18:51 -04:00
2026-06-03 19:14:43 -04:00
2026-06-04 02:16:34 -04:00
2026-06-04 02:16:34 -04:00
2026-06-04 01:58:27 -04:00
2026-06-04 02:01:00 -04:00
2026-06-04 02:01:00 -04:00
2026-06-04 02:16:34 -04:00
2026-06-03 19:16:37 -04:00
2026-06-04 02:18:51 -04:00
2026-06-04 02:01:00 -04:00
2026-06-05 00:38:27 +01:00
2026-06-04 02:01:00 -04:00
2026-06-03 19:16:37 -04:00