Treat explicitly supplied proofreading text as data not tool authority

src/clean_agent_preview.py

@@ -31,7 +31,7 @@ from src.tool_schemas import (
 from src.tool_types import ToolBlock
 from src.turn_contract import (
     FAMILY_TOOLS, broad_web_briefing_request, required_read_operation_for_request,
-    targets_bound_editor_request,
+    targets_bound_editor_request, inline_text_transformation,
 )
 from src.prompt_security import untrusted_context_message
 from src.model_profiles import (
@@ -1436,6 +1436,8 @@ def tool_family(name):
 def authorized_write_families(user_text):
     """Conservative action authority; never controls which schemas are offered."""
     text = str(user_text or '').casefold()
+    if inline_text_transformation(text):
+        return frozenset()
     families = set()
     patterns = {
         'email': r'\b(?:e.?mail|emil|inbox|mail)\b',
@@ -3783,7 +3785,7 @@ async def stream_preview(*, endpoint_url, model, messages, headers, turn_contrac
             suggestion_only=suggestion_target,
         )
     offered = compact_schemas(turn_contract.schemas())
-    if standalone_social_turn(direct_user_text):
+    if standalone_social_turn(direct_user_text) or inline_text_transformation(direct_user_text):
         offered = []
     external_schema_by_name = {
         str((schema.get('function') or {}).get('name') or ''): copy.deepcopy(schema)

src/turn_contract.py

@@ -642,6 +642,23 @@ def _explicit_email_attachment_read(message: str) -> tuple[str, int] | None:
     return None
 
 
+def inline_text_transformation(message: str) -> bool:
+    """An explicit text-editing prefix makes the colon payload data, not a tool request.
+
+    Do not match edits *in* an account/editor or compound instructions before
+    the delimiter. Names of tools or personal objects inside supplied text do
+    not grant authority to operate on those objects.
+    """
+    return bool(re.fullmatch(
+        r'\s*(?:please\s+)?(?:'
+        r'(?:fix|correct)\s+(?:the\s+)?(?:spelling|grammar|typos)'
+        r'|proofread(?:\s+(?:this|the following)(?:\s+text)?)?'
+        r'|translate\s+(?:this\s+)?(?:to|into)\s+[A-Za-z]+(?:\s+[A-Za-z]+)?'
+        r')\s*:\s*\S[\s\S]*',
+        str(message or ''), re.I,
+    ))
+
+
 def selected_tools_for_request(message: str) -> frozenset[str] | None:
     """Narrow only a complete, explicit operation; None retains family scope.
 
@@ -649,6 +666,8 @@ def selected_tools_for_request(message: str) -> frozenset[str] | None:
     mailbox-content requests. Account discovery needs only local metadata.
     """
     raw_text = str(message or "").strip()
+    if inline_text_transformation(raw_text):
+        return frozenset()
     text = _normalize_request_lead(message)
     explicitly_named = {
         name