I will enhance Tom a bit the coming days. I intentionally built him to be pretty locked initially, but I'm seeing people wanting more from him.
I will be allowing him web fetch, search GH, and maybe mentions. But I will not allow him things like updating the knowledge base, etc. Why?
Because allowing him to do things like web fetches and *also* writes to the knowledge base would open him up to persisted context poisoning: if a user tells him to read a website and to update the knowledge knowledge base, they could intentionally point him to incorrect information. It's difficult to guard against that in a deterministic fashion.
That being said, what are you missing from Tom?
commit 97e5bff
Per-user memory. I would love if Tom could remember me throughout my conversations with him. :)
I like Tom as it is.
I think allowing it to fetch content from the web can be risky, as it might retrieve and repeat false or misleading information.