Skip to content

🚥 feat: Gate Synchronous Tool Results Before Release #597

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
lia-by-librechat wants to merge 14 commits into
base: main
Choose a base branch
from
Open

🚥 feat: Gate Synchronous Tool Results Before Release #597

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
14 commits
Select commit Hold shift + click to select a range
68df78e
🚥 feat: Gate Synchronous Tool Results Before Release
lia-librechat Oct 5, 2026
3f3c3a8
🔐 fix: Close Nested and Eager Tool Release Gaps
lia-librechat Oct 5, 2026
3eabdc4
Merge commit '265d97f3ab818e9ef942bd9bdcc00a6098c781fa' into lia/pii-…
lia-librechat Oct 5, 2026
c0e10d2
🛑 fix: Preserve Protected Native Tool Error Lifecycles
lia-librechat Oct 5, 2026
3d39e2f
🧾 fix: Revalidate Canonical Tool References on Replay
lia-librechat Oct 5, 2026
0333d5f
🛡️ fix: Close Tool Release and Shutdown Boundaries
lia-librechat Oct 5, 2026
61dad14
🪪 fix: Bind Tool Release to Request Identity
lia-librechat Oct 5, 2026
d1ec9ff
🏷️ fix: Verify Tool Reference Provenance on Resume
lia-librechat Oct 5, 2026
99da8a3
🔒 fix: Bind Required Releases to Dispatched Identities
lia-librechat Oct 5, 2026
ae4213e
🧷 fix: Rebind Restored Tool References to Current Policy
lia-librechat Oct 5, 2026
386dd9b
📸 fix: Snapshot Protected Tool Message Envelopes
lia-librechat Oct 5, 2026
0781d19
🛑 fix: Fail Closed on Local Bridge Cancellation
lia-librechat Oct 5, 2026
8112d9a
🧿 fix: Validate Reference Collections and Hidden Metadata
lia-librechat Oct 5, 2026
b2319ce
🔏 fix: Revalidate Tool Releases Across Callback Boundaries
lia-librechat Oct 5, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
9 changes: 9 additions & 0 deletions src/graphs/Graph.ts
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -184,6 +184,7 @@ import { SUBAGENT_REPLAY_CONTROLLER } from '@/tools/subagent/SubagentReplay';
import { applyGraphRuntimeConfig } from '@/graphs/applyGraphRuntimeConfig';
import { isFadingTier, isInformativeFadingTier } from '@/messages/fading';
import { createContextPressureMeter } from '@/llm/contextPressureMeter';
import { validateToolResultProtection } from '@/protection/toolResult';
import { safeDispatchCustomEvent, emitAgentLog } from '@/utils/events';
import { createCloudflareCodingToolBundle } from '@/tools/cloudflare';
import { calculateMaxToolCallInputChars } from '@/utils/truncation';
Expand Down Expand Up @@ -1386,6 +1387,8 @@ export class StandardGraph extends Graph<t.BaseGraphState, t.GraphNode> {
* these on every streamed chunk event.
*/
streamLimits: ResolvedStreamLimits;
/** Default-off mandatory tool-result release. */
toolResultProtection?: t.StandardGraphInput['toolResultProtection'];
/** Default-off mandatory provider prose release. */
providerTextProtection?: t.StandardGraphInput['providerTextProtection'];
/**
Expand Down Expand Up @@ -1568,6 +1571,7 @@ export class StandardGraph extends Graph<t.BaseGraphState, t.GraphNode> {
preemption,
streamLimits,
providerTextProtection,
toolResultProtection,
toolExecution,
clientDelegatedToolNames,
}: t.StandardGraphInput,
Expand Down Expand Up @@ -1600,6 +1604,8 @@ export class StandardGraph extends Graph<t.BaseGraphState, t.GraphNode> {
if (providerTextProtection != null)
validateProviderTextProtection(providerTextProtection);
this.providerTextProtection = providerTextProtection;
if (toolResultProtection != null) validateToolResultProtection(toolResultProtection);
this.toolResultProtection = toolResultProtection;
Comment on lines +1607 to +1608

@chatgpt-codex-connector chatgpt-codex-connector Bot Oct 5, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P1 Badge Reject protected tools delegated to the client

When a tool name appears in both toolResultProtection.toolNames and clientDelegatedToolNames, this accepts the protection policy even though the delegated-call route ends the graph without passing the call through ToolNode. The client-supplied ToolMessage on the subsequent turn is then treated as conversation history and projected into the next provider request without inspect, so a result explicitly selected for mandatory protection can reach the model and generation tracing raw; reject this overlap or protect delegated-result ingestion.

AGENTS.md reference: AGENTS.md:L147-L147

Useful? React with 👍 / 👎.

this.toolExecution = toolExecution;
if (
clientDelegatedToolNames != null &&
Expand Down Expand Up @@ -2975,6 +2981,7 @@ export class StandardGraph extends Graph<t.BaseGraphState, t.GraphNode> {
maxContextTokens: agentContext?.maxContextTokens,
maxToolResultChars: agentContext?.maxToolResultChars,
toolOutputRegistry: this.getOrCreateToolOutputRegistry(),
toolResultProtection: this.toolResultProtection,
fileCheckpointer: this.getOrCreateFileCheckpointer(),
getBreakerSignal: (): AbortSignal => this.breakerAbort.signal,
getRunScope: (): RunBreakerScope => this.runScope,
Expand Down Expand Up @@ -3058,6 +3065,7 @@ export class StandardGraph extends Graph<t.BaseGraphState, t.GraphNode> {
maxContextTokens: agentContext?.maxContextTokens,
maxToolResultChars: agentContext?.maxToolResultChars,
toolOutputRegistry: this.getOrCreateToolOutputRegistry(),
toolResultProtection: this.toolResultProtection,
fileCheckpointer: this.getOrCreateFileCheckpointer(),
getBreakerSignal: (): AbortSignal => this.breakerAbort.signal,
getRunScope: (): RunBreakerScope => this.runScope,
Expand Down Expand Up @@ -5381,6 +5389,7 @@ export class StandardGraph extends Graph<t.BaseGraphState, t.GraphNode> {
onResolutionFailure: this.onSubagentResolutionFailure,
streamLimits: this.streamLimits,
providerTextProtection: this.providerTextProtection,
toolResultProtection: this.toolResultProtection,
humanInTheLoop: this.humanInTheLoop,
checkpointer: this.compileOptions?.checkpointer,
maxDepth: effectiveSubagentDepth,
Expand Down
3 changes: 3 additions & 0 deletions src/index.ts
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -128,3 +128,6 @@ export type {
ProviderTextProtectionResult,
ProviderTextProtectionErrorCode,
} from './protection/providerText';

export { TOOL_RESULT_PROTECTION_VERSION, ToolResultProtectionError } from './protection/toolResult';
export type { ToolResultProtection, ToolResultProtectionResult } from './protection/toolResult';
Loading
Loading