Rifqi Akram 5b1e56407b Add SSRF-guarded web fetch agent tool ...

* feat(web-fetch): add web_fetch tool to read a specific URL's content

* test(web-fetch): add SSRF coverage and fail closed on empty DNS resolution

Add explicit SSRF regression tests for the web_fetch path covering
loopback, private LAN ranges, link-local/metadata, IPv6 private/local,
redirect-into-private, and unsupported schemes. Harden _public_http_url
to fail closed when a hostname resolves to no addresses.

2026-06-01 16:57:28 +09:00

..

search

Add SSRF-guarded web fetch agent tool

2026-06-01 16:57:28 +09:00

action_intents.py

Route calendar action requests to tools

2026-06-01 14:32:41 +09:00

agent_loop.py

Add SSRF-guarded web fetch agent tool

2026-06-01 16:57:28 +09:00

agent_runs.py

Handle incomplete detached agent streams

2026-06-01 16:54:11 +09:00

agent_tools.py

Add SSRF-guarded web fetch agent tool

2026-06-01 16:57:28 +09:00

ai_interaction.py

feat(ai): add OpenRouter and Ollama Cloud providers (#231)

2026-06-01 14:26:10 +09:00

api_key_manager.py

Add native Windows compatibility layer

2026-06-01 15:09:47 +09:00

app_helpers.py

Odysseus v1.0

2026-05-31 23:58:26 +09:00

app_initializer.py

Odysseus v1.0

2026-05-31 23:58:26 +09:00

assistant_log.py

Odysseus v1.0

2026-05-31 23:58:26 +09:00

auth_helpers.py

Odysseus v1.0

2026-05-31 23:58:26 +09:00

bg_jobs.py

Add native Windows compatibility layer

2026-06-01 15:09:47 +09:00

bg_monitor.py

Odysseus v1.0

2026-05-31 23:58:26 +09:00

builtin_actions.py

Add native Windows compatibility layer

2026-06-01 15:09:47 +09:00

builtin_mcp.py

Add native Windows compatibility layer

2026-06-01 15:09:47 +09:00

caldav_sync.py

Fix duplicate CalDAV sync UIDs

2026-06-01 02:17:43 +00:00

chat_handler.py

Enforce owner checks for upload attachments

2026-06-01 16:47:48 +09:00

chat_helpers.py

Recognize local vision models so their images aren't dropped (#185)

2026-06-01 13:09:21 +09:00

chat_processor.py

Odysseus v1.0

2026-05-31 23:58:26 +09:00

chroma_client.py

Odysseus v1.0

2026-05-31 23:58:26 +09:00

cleanup_service.py

Odysseus v1.0

2026-05-31 23:58:26 +09:00

config.py

Add native Windows compatibility layer

2026-06-01 15:09:47 +09:00

constants.py

Align SearXNG fallback URL

2026-06-01 10:50:07 +09:00

context_compactor.py

Preserve large pasted messages in context

2026-06-01 12:38:35 +09:00

database.py

Odysseus v1.0

2026-05-31 23:58:26 +09:00

deep_research.py

Add Deep Research extraction controls

2026-06-01 14:55:33 +09:00

document_actions.py

Odysseus v1.0

2026-05-31 23:58:26 +09:00

document_processor.py

Enforce owner checks for upload attachments

2026-06-01 16:47:48 +09:00

email_thread_parser.py

Odysseus v1.0

2026-05-31 23:58:26 +09:00

embeddings.py

Add native Windows compatibility layer

2026-06-01 15:09:47 +09:00

endpoint_resolver.py

feat(ai): add OpenRouter and Ollama Cloud providers (#231)

2026-06-01 14:26:10 +09:00

event_bus.py

Odysseus v1.0

2026-05-31 23:58:26 +09:00

exceptions.py

Odysseus v1.0

2026-05-31 23:58:26 +09:00

goal_based_extractor.py

Odysseus v1.0

2026-05-31 23:58:26 +09:00

integrations.py

Add native Windows compatibility layer

2026-06-01 15:09:47 +09:00

llm_core.py

feat(ai): add OpenRouter and Ollama Cloud providers (#231)

2026-06-01 14:26:10 +09:00

mcp_manager.py

Odysseus v1.0

2026-05-31 23:58:26 +09:00

memory_vector.py

Odysseus v1.0

2026-05-31 23:58:26 +09:00

memory.py

Odysseus v1.0

2026-05-31 23:58:26 +09:00

model_context.py

Odysseus v1.0

2026-05-31 23:58:26 +09:00

model_discovery.py

Improve Ollama setup and model endpoint handling

2026-06-01 10:00:15 +09:00

pdf_form_doc.py

Add native Windows compatibility layer

2026-06-01 15:09:47 +09:00

pdf_forms.py

Odysseus v1.0

2026-05-31 23:58:26 +09:00

personal_docs.py

Add native Windows compatibility layer

2026-06-01 15:09:47 +09:00

preset_manager.py

Add native Windows compatibility layer

2026-06-01 15:09:47 +09:00

prompt_security.py

Odysseus v1.0

2026-05-31 23:58:26 +09:00

rag_manager.py

Odysseus v1.0

2026-05-31 23:58:26 +09:00

rag_singleton.py

Re-enable VectorRAG init with lazy retry

2026-06-01 14:32:13 +09:00

rag_vector.py

Odysseus v1.0

2026-05-31 23:58:26 +09:00

rate_limiter.py

Odysseus v1.0

2026-05-31 23:58:26 +09:00

request_models.py

Odysseus v1.0

2026-05-31 23:58:26 +09:00

research_handler.py

Add native Windows compatibility layer

2026-06-01 15:09:47 +09:00

research_utils.py

Odysseus v1.0

2026-05-31 23:58:26 +09:00

secret_storage.py

Add native Windows compatibility layer

2026-06-01 15:09:47 +09:00

session_actions.py

Odysseus v1.0

2026-05-31 23:58:26 +09:00

settings.py

Add SSRF-guarded web fetch agent tool

2026-06-01 16:57:28 +09:00

task_endpoint.py

Odysseus v1.0

2026-05-31 23:58:26 +09:00

task_scheduler.py

Add SSRF-guarded web fetch agent tool

2026-06-01 16:57:28 +09:00

teacher_escalation.py

harden(teacher): treat escalation trace as untrusted data (#275)

2026-06-01 14:31:39 +09:00

text_helpers.py

Odysseus v1.0

2026-05-31 23:58:26 +09:00

tool_execution.py

Add SSRF-guarded web fetch agent tool

2026-06-01 16:57:28 +09:00

tool_implementations.py

Add native Windows compatibility layer

2026-06-01 15:09:47 +09:00

tool_index.py

Add SSRF-guarded web fetch agent tool

2026-06-01 16:57:28 +09:00

tool_parsing.py

Add SSRF-guarded web fetch agent tool

2026-06-01 16:57:28 +09:00

tool_schemas.py

Add SSRF-guarded web fetch agent tool

2026-06-01 16:57:28 +09:00

tool_security.py

Odysseus v1.0

2026-05-31 23:58:26 +09:00

topic_analyzer.py

Odysseus v1.0

2026-05-31 23:58:26 +09:00

upload_handler.py

Enforce owner checks for upload attachments

2026-06-01 16:47:48 +09:00

visual_report.py

Odysseus v1.0

2026-05-31 23:58:26 +09:00

webhook_manager.py

Odysseus v1.0

2026-05-31 23:58:26 +09:00

youtube_handler.py

Odysseus v1.0

2026-05-31 23:58:26 +09:00