limited-student-10747
03/12/2026, 12:46 PMabundant-pillow-85439
03/12/2026, 3:52 PMmodern-fireman-99755
03/12/2026, 5:50 PMbusy-branch-28834
03/12/2026, 5:56 PMmodern-fireman-99755
03/12/2026, 6:19 PMOr is it for the LLM/user to ensure that the tools are thread-safe?We are currently following this path (as discussed in the issue). Theoretically, LLMs are already trained to perform independent tool calls when they can emit them. But there is always a stochastic risk. If we find through testing and experimenting that parallel calls frequently fail due to dependencies, we will develop a dedicated solution to handle it. We chose this approach because managing tool calls independence is a significant challenge; trying to tackle everything at once was not optimal.
I assume terminal tool isn't read-only in principle so is that disabled?By nature, the terminal is not read-only. However, we can enforce read-only constraints on specific sub-agents (this is a feature we plan to implement). For example, an "explorer" sub-agent that uses the terminal only to navigate a codebase would be restricted to read-only actions, making parallel calls safe. Regarding web search and browser tools: The safety of parallel calls generally only applies if you are using the terminal for basic web searches. If you use the
web_browser tool (which utilizes a Chrome instance), you may encounter interdependent tool calls. For instance, clicking a button and then needing to visualize the resulting content before the next action.busy-branch-28834
03/12/2026, 6:20 PM