feat: add web search and fetch tools

crates/pod/src/controller.rs

@@ -498,6 +498,7 @@ where
     let session_id_for_usage = pod.segment_id().to_string();
     let scope_change_sink = pod.scope_change_sink();
     let memory_config = pod.manifest().memory.clone();
+    let web_config = pod.manifest().web.clone();
     let spawner_name = pod.manifest().pod.name.clone();
     let spawner_model = pod.manifest().model.clone();
     let pod_store = pod.store().clone();
@@ -521,6 +522,7 @@ where
         tracker.clone(),
         task_store,
         bash_output_dir,
+        web_config,
     ));
 
     // Memory subsystem opt-in. When `[memory]` is present in the

crates/pod/src/permission.rs

@@ -80,7 +80,7 @@ fn permission_ask_unsupported(input: &ToolCallSummary) -> ToolResult {
 
 fn permission_target(arguments: &Value) -> String {
     if let Value::Object(map) = arguments {
-        for key in ["command", "file_path", "path", "pattern"] {
+        for key in ["command", "file_path", "path", "pattern", "query", "url"] {
             if let Some(value) = map.get(key).and_then(Value::as_str) {
                 return value.to_string();
             }