Tool calls healed from raw <function=...> model text were executed without checking the request's enabled tools, so a model could invoke terminal or python when only web_search was offered. Filter parsed tool calls against the enabled tool names before execution. Also normalize non-dict healed arguments to an empty dict so a malformed <tool_call> payload cannot raise AttributeError and abort the response. |
||
|---|---|---|
| .. | ||
| data_recipe | ||
| export | ||
| inference | ||
| training | ||
| __init__.py | ||