Tool calls healed from raw <function=...> model text were executed without checking the request's enabled tools, so a model could invoke terminal or python when only web_search was offered. Filter parsed tool calls against the enabled tool names before execution. Also normalize non-dict healed arguments to an empty dict so a malformed <tool_call> payload cannot raise AttributeError and abort the response. |
||
|---|---|---|
| .. | ||
| assets | ||
| auth | ||
| core | ||
| loggers | ||
| models | ||
| plugins | ||
| requirements | ||
| routes | ||
| state | ||
| tests | ||
| utils | ||
| __init__.py | ||
| colab.py | ||
| main.py | ||
| run.py | ||