Alex Kira 6d8f311b00 Render untrusted additional context as named tool outputs (#57279) ...

## What changed

When `features.untrusted_as_tool_output` is enabled, emit untrusted additional context as `function_call_output` items in the `agent` namespace before user input. Use the explicit context name when supplied; otherwise derive a bounded name from the source key, falling back to `untrusted_content`.

Deduplicate these outputs by name and truncated value so name changes are emitted while changes confined to truncated content are ignored. Application context remains in developer messages, and disabling the feature preserves the existing message format.

## Testing

Extend core and app-server tests and add request-history snapshots covering both formats, turn start and steering, derived names, truncation, and deduplication.

GitOrigin-RevId: cd5e2f4b3121714acb7f4baf5607f3c27d408cae

2026-10-26 21:55:00 +00:00

..

src

Render untrusted additional context as named tool outputs (#57279)

2026-10-26 21:55:00 +00:00

BUILD.bazel

chore: extract context fragments into dedicated crate (#26122)

2026-06-03 12:25:21 +02:00

Cargo.toml

Support typed content in contextual prompt fragments (#54776)

2026-10-17 04:02:21 +00:00