[WRONG BRANCH] fix(xai): constrain hosted search tool names

[luvs01]

Motivation

• A provider-executed exemption for xAI x_search previously authorized any custom_tool_call whose call_id started with xs_call- (plus the declaration/destination checks), which allowed a malicious upstream to present an undeclared client tool name (for example apply_patch) and bypass the undeclared-tool guard.

Description

• Add a names field to ProviderExecutedCallType and populate the PROVIDER_EXECUTED_DECLARATION_CALL_TYPES entry for x_search with the measured hosted names x_keyword_search, x_semantic_search, and x_user_search.
• Tighten isAuthorizedProviderExecutedCall to require item.name and to check that the returned name is one of the measured names in addition to matching item.type and call_id prefix.
• Update the undeclared-tool guard test coverage so hosted x_search names remain accepted while an apply_patch with a spoofed xs_call-... id is still refused; adjust the relevant test vectors and expectations accordingly.

Testing

• ✅ node_modules/bun/bin/bun.exe test tests/responses-undeclared-tool-guard.test.ts — unit file passed (64 tests, 0 failures).
• ✅ bun run typecheck — typecheck completed successfully.
• ✅ bun run privacy:scan — privacy scan passed.
• ⚠️ bun run test — full repo test run was not completed to green due to unrelated environment/baseline failures and a Bun runtime mismatch in this environment (an older Bun lacked node:zlib.zstdDecompressSync); the focused unit test for the changed subsystem and typecheck/privacy checks above succeeded using the repository's Bun where applicable.

---

Codex Task

[github-actions]

✅ Deterministic PR hygiene checks passed.

[github-actions]

⏳ DRAFT

• wrong target branch (main); retarget to dev.

What to do

• Retarget this PR to dev — all contributions go to dev.

Its title has been prefixed with [WRONG BRANCH].
This pull request was already a draft. Its draft status will be preserved after every issue above is resolved.

[coderabbitai]

Important

Draft PR not reviewed

Draft PRs are not automatically reviewed by default.

• Trigger a manual review

To automatically review draft PRs, update your CodeRabbit configuration:

reviews:
  auto_review:
    drafts: true

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}