Agent-Native

Files

T

weichen e4c48eb405 Wire search into the native backend and add fetch_url with SSRF guards

Why: tavily_search/web_search existed as tools but were never
registered on the default execution path (parity-matrix #5 leftover),
and the kernel had no URL fetch capability at all.

Evidence: go vet ./... clean; go test ./... all ok. Fetch cases cover
private/loopback/link-local rejection (127/8, 10/8, 192.168/16,
169.254 metadata endpoint, ::1), file:// scheme rejection, DNS
resolution landing on private space, per-hop redirect validation
rejecting a redirect to loopback, allowed-host policy, HTML stripping
(script/style removed, entities decoded), content-type gating, stub
end-to-end fetch, and absence without FetchConfig (IP normalization
fix included: IPv4-mapped ::ffff:0:0/96 must not swallow all IPv4).
Adapter tests assert Options.Search registers both search tools and
passes queries to the provider, and that neither registers when
unconfigured.

Impact: native.Options gains Search and Fetch; both tool families are
opt-in by the composition root (fail-closed), closing parity-matrix
#5 wiring.

Refs: docs/parity-matrix.md #5; product settings tools.tavily.*
injection point.

2026-10-01 05:35:38 +00:00

builtin.go

Add glob, multi_edit, regex grep, and line-range reads to the workspace toolset

2026-10-01 05:29:12 +00:00

code_tools_test.go

Add glob, multi_edit, regex grep, and line-range reads to the workspace toolset

2026-10-01 05:29:12 +00:00

exec_tools_test.go

Add run_command and run_python exec tools with process-group kill and env whitelist

2026-10-01 05:31:43 +00:00

exec.go

Add run_command and run_python exec tools with process-group kill and env whitelist