6 Commits

Author	SHA1	Message	Date
NCBM	ddca6e23d3	core/tools: add READ_ONLY tool attribute ... New ToolTag.READ_ONLY marks tools that never mutate host state, plus ToolRegistry.clone(read_only_only=True) to select just those (for safe side turns / planning). Builtin read-only set: read_file, get_truncated, glob_paths, grep_files, listdir, tree, todo_list, wait, ask_user_*, vcs_* and fetch. fetch is tagged READ_ONLY but can mutate via method; a new read_only_context ContextVar makes it accept GET only while set.	2026-08-15 16:46:27 +08:00
NCBM	26472776fb	core/tools: token-ify per-stream caps and resume memory remainders	2026-08-11 19:41:54 +08:00
NCBM	00db7cdc7f	core/tools: add get_truncated tool for chained resume	2026-08-11 14:59:39 +08:00
NCBM	c96f669bcb	core/tools: embed truncate tokens in fetch (offset param)	2026-08-11 14:55:55 +08:00
NCBM	0ca92dfd7e	core/config: networking ssrf_assume_public_cidrs for fetch Fake-IP	2026-07-24 20:20:30 +08:00
NCBM	f5a667567d	test/tools: cover fetch SSRF, methods, and user-agent	2026-07-24 19:08:10 +08:00