From 2978878d8235b1fd618f885253c90ad625f4880b Mon Sep 17 00:00:00 2001 From: Vlad Mocanu Date: Fri, 27 Feb 2026 12:58:09 +0200 Subject: [PATCH] fix: pass allowed_tools to SDK in agent mode MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Agent mode never passed ALLOWED_TOOLS_INPUT to the Claude SDK — only tag mode did (via --allowedTools in claudeArgs). This meant the allowed_tools action input was silently ignored in agent mode, causing all Bash commands to require interactive approval in CI. Pass ALLOWED_TOOLS_INPUT directly as options.allowedTools, which the SDK merges with any tools from claudeArgs. Co-Authored-By: Claude Opus 4.6 --- src/entrypoints/run.ts | 1 + 1 file changed, 1 insertion(+) diff --git a/src/entrypoints/run.ts b/src/entrypoints/run.ts index ba2ed1d..7da0b6c 100644 --- a/src/entrypoints/run.ts +++ b/src/entrypoints/run.ts @@ -253,6 +253,7 @@ async function run() { promptConfig.path, { claudeArgs: prepareResult.claudeArgs, + allowedTools: process.env.ALLOWED_TOOLS_INPUT || undefined, disallowedTools: process.env.DISALLOWED_TOOLS || undefined, appendSystemPrompt: process.env.APPEND_SYSTEM_PROMPT, model: process.env.ANTHROPIC_MODEL,