[BunsDev]

Summary

Tests-first correction for #433. This draft starts with authority regressions against the unmodified WebFetch backend. It is not ready to merge.

Context

• Related issue/user request: WebFetch: stale cache returned after a live fetch, UTF-8 slicing panics, and missing fetch restrictions #433; coordinate retrieval provenance with Research feat(tui): read-only Next Research page over session search and fetch (#414) #434.
• Base: bf8616651f4d043829ce6f5bada2eb1090e62be0.
• Scope: WebFetch permissions, destination/redirect enforcement, bounded responses, cache freshness, Unicode-safe truncation and truthful retrieval/extraction provenance.
• Non-goals: changing the canonical permission manager, adding a private-network bypass, changing other agents' branches, merging or releasing.

Changes

• Add tests proving that WebFetch must not advertise itself as an unrestricted read or pass is_read_only=true to legacy permission handlers.
• Preserve coverage of the existing manager-backed network permission rules and deny precedence.
• Planned next increments: independently enforced public HTTP(S) transport; bounded response processing and fresh extraction cache; structured provenance and Research consumer contract.

Validation

• git diff --check
• cargo fmt --all
• cargo check --workspace
• cargo clippy --workspace --all-targets -- -D warnings
• cargo test --workspace
• Targeted regression command: cargo test --package claurst-tools --locked --test web_fetch_authority.
• Not run locally: this environment has no cargo or rustc, and direct checkout fails DNS resolution. GitHub connector reads and branch writes work. Existing PR CI will be inspected for actual failures before backend corrections; no successful Rust execution is claimed.

PR Readiness

• Initial diff is limited to the new authority regression test file.
• Generated files were not edited by hand.
• User-facing docs/help updated with the final producer contract.
• No credentials, private data or unrelated logs are included.
• Remaining risk: implementation and qualification are still in progress. Keep draft until completed and independently reviewed.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated
docs	Ready	Preview	Nov 1, 2026 8:58pm UTC