

























@@ -157,6 +157,7 @@ import {
157157collectExplicitToolAllowlistSources,
158158} from "../../tool-allowlist-guard.js";
159159import { UNKNOWN_TOOL_THRESHOLD } from "../../tool-loop-detection.js";
160+import { normalizeToolName } from "../../tool-policy.js";
160161import { shouldAllowProviderOwnedThinkingReplay } from "../../transcript-policy.js";
161162import { normalizeUsage, type NormalizedUsage } from "../../usage.js";
162163import { DEFAULT_BOOTSTRAP_FILENAME } from "../../workspace.js";
@@ -480,8 +481,8 @@ export function applyEmbeddedAttemptToolsAllow<T extends { name: string }>(
480481if (!toolsAllow || toolsAllow.length === 0) {
481482return tools;
482483}
483-const allowSet = new Set(toolsAllow);
484-return tools.filter((tool) => allowSet.has(tool.name));
484+const allowSet = new Set(toolsAllow.map((name) => normalizeToolName(name)));
485+return tools.filter((tool) => allowSet.has(normalizeToolName(tool.name)));
485486}
486487487488export function normalizeMessagesForLlmBoundary(messages: AgentMessage[]): AgentMessage[] {
@@ -718,6 +719,7 @@ export async function runEmbeddedAttempt(
718719senderUsername: params.senderUsername,
719720senderE164: params.senderE164,
720721senderIsOwner: params.senderIsOwner,
722+ownerOnlyToolAllowlist: params.ownerOnlyToolAllowlist,
721723allowGatewaySubagentBinding: params.allowGatewaySubagentBinding,
722724sessionKey: sandboxSessionKey,
723725sessionId: params.sessionId,
@@ -929,6 +931,7 @@ export async function runEmbeddedAttempt(
929931senderUsername: params.senderUsername,
930932senderE164: params.senderE164,
931933senderIsOwner: params.senderIsOwner,
934+ownerOnlyToolAllowlist: params.ownerOnlyToolAllowlist,
932935warn: (message) => log.warn(message),
933936});
934937const effectiveTools = [...tools, ...filteredBundledTools];
此内容由惯性聚合(RSS阅读器)自动聚合整理,仅供阅读参考。 原文来自 — 版权归原作者所有。