Remove non-MCP activation gates without expanding legacy grants. Bind resource resolution, background Job attenuation, protected prompt provenance and repeated model supply to current Host authority. Align generated contracts and regression fixtures.
tools
tools implements file and command operations through Host-owned WorkdirSessions, plus Web fetching and image output. Owns input schemas, output formatting, and change detection after reads, but not Workdir creation or connection lifetimes, Manifest permission definitions, or the Engine execution loop.
Main entry points
- [
core_builtin_tools] / [routed_builtin_tools]: registration by provider capability and connection resolution. - [
checkout]: shared handling for route-bound native operations and regular Tools. - [
tracker]: read hashes and change tracking per connection generation. - [
view_image]: bounded byte retrieval and image detection.