mirror of
https://github.com/abhinavxd/libredesk.git
synced 2026-10-13 16:41:58 +00:00
85a38699da
Custom tools are HTTP calls with no read-only guarantee, so a mutating tool could fire from copilot chat or while drafting a reply. Copilot and generate-reply now get only the built-in knowledge search, and custom tools stay exclusive to assistants where admins pick them explicitly. This matches Intercom, Chatwoot, and Freshdesk. The contact identity headers now flow only on the assistant path. Also: - new "Offer handoff to a human" switch on assistants (default on). When off, the hand_off_to_human tool is not registered and the prompt tells the assistant to say it cannot help instead of offering a human. Safety exits (error, max turns, other participant) still unassign as before. - workspace admin instructions from the AI config no longer leak into the customer-facing assistant prompt. - copilot and reply-draft prompts now treat conversation text and tool outputs as untrusted data.