jif 2fdcdeaf0e Add startup tool allowlists for threads (#45711) ...

## What changed

- Add `AllowedTools` to the extension API, captured once at thread startup to restrict which tools can be advertised or executed. An empty list disables all tools; an absent value preserves ordinary tool setup. Callers must supply the list again when resuming a thread.
- Filter tool registration and hosted tool specifications before Code Mode and discovery. Match names with their namespaces and require generated tools such as `exec` and `wait` to be explicitly allowed.
- Move Guardian reviewer tool selection into the allowlist while retaining feature and sandbox restrictions, with a fallback for older reviewer sessions.

## Testing

Add coverage for selected, empty, and absent allowlists across tool sources and Code Mode. Add managed-thread tests verifying advertised tools, rejection of excluded calls, and that replacing extension state after startup cannot change the captured allowlist.

GitOrigin-RevId: 33c1722c4241f368963d8385fa0415112e16a72d

2026-09-15 14:45:35 +00:00

..

examples

Require content kinds for extension prompt fragments (#40177)

2026-08-23 03:12:58 +00:00

src

Add startup tool allowlists for threads (#45711)

2026-09-15 14:45:35 +00:00

tests

Retire the unused Guardian extension prototype API (#45679)

2026-09-15 11:39:20 +00:00

BUILD.bazel

extension: add initial typed extension API (#21736)

2026-05-11 11:06:24 +02:00

Cargo.toml

Preserve verified answers across history compaction (#42293)

2026-09-02 15:07:11 +00:00

notes.md

extension: add initial typed extension API (#21736)

2026-05-11 11:06:24 +02:00