Summary

Implement the three highest-priority tool categories for agent use. Consolidates #212 (web tools), #213 (database tools), and #214 (terminal/shell tools).

Tool categories

Web tools (formerly #212)

• HTTP GET/POST/PUT/DELETE requests with configurable headers, auth, timeouts
• Web search integration (abstracted provider)
• HTML parsing and content extraction
• URL validation and SSRF prevention (leverage existing allowlist infrastructure)

Database tools (formerly #213)

• SQL query execution (read-only by default, write with explicit approval)
• Schema inspection (list tables, describe columns)
• Query result formatting
• Connection pooling and timeout management

Terminal/shell tools (formerly #214)

• Command execution in sandboxed environment
• Working directory management
• Output capture and streaming
• Exit code and error handling
• Integration with existing sandbox infrastructure

Design Reference

• Tools design page: docs/design/operations.md (tool execution model)
• Sandbox infrastructure: src/synthorg/tools/sandbox_factory.py
• Tool registry: src/synthorg/tools/registry.py

Dependencies

• feat: implement granular tool access sub-constraints #220 (granular tool access sub-constraints) should land first or in parallel for proper permission gating