- Shipped
- October 19, 2026 at 3:56 AM UTC
- Author
- Kamo
- Commit
- 3db9346
TP11 deferred sms_read_attachment because VOIPService kept no inbound MMS media; it does now (voipservice@8eda899). So: - sms_read_thread lists each inbound part of a message as attachments [{attachmentId, mimeType, fileName, sizeBytes, status, reason}] (hasAttachment covers them); the provider's link and the serving URL are never handed over. - **************** attachmentId): GET **************** with the caller's ***; VOIPService checks ACCESS_VOIP and that the thread is the caller's own (404 otherwise). Text and contact cards are read as text, PDFs and pictures through OCR, sound and video are named, not read. READ, untrusted, PHI-sensitive, ACCESS_VOIP; its content item is the SMS_THREAD, pre-checked on conversationId like sms_read_thread (ContentReadTools). Guards and golden tool lists regenerated for exactly this tool (catalogue 164).