feat(core): expose deferred tools through execute (#35361)

This commit is contained in:
Aiden Cline 2026-07-04 16:20:56 -05:00 committed by GitHub
commit d65ecd4a90
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
10 changed files with 367 additions and 89 deletions

View file

@ -1132,6 +1132,12 @@ Post-MVP (logged, not blocking an experimental flag):
- [ ] Reviewer observation worth keeping: MCP server instructions (`sys.mcp`,
`session/system.ts:110-126`) still inject prose referencing server-native tool
names that are no longer directly callable under code mode.
- [ ] Tool-tree path segments named `__proto__`, `constructor`, or `prototype` are included
in discovery but rejected by `ToolRuntime` resolution even when supplied as safe own
properties on null-prototype host records. Hosts should preserve registered names rather
than invent incompatible aliases. CodeMode should own a consistent policy: safely admit
these names as own tool-tree members, reject them before catalog generation with a clear
diagnostic, or define one canonical escaping contract.
### Backlog / loose ends (non-blocking, any order)