- correlate permission requests to tool names via ToolCallId when the
workflow request stream exposes matching CallId values
- keep the url-to-web_fetch alias only as a narrow fallback when a
matching tool call cannot be recovered
- cover generic permission-category lookup for url, shell, and read in
sidecar tests
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Rename the product, runtime surfaces, sidecar projects, docs, tests, and packaging outputs from Kopaya to Eryx across the repository.
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>