[ch_sm]

that‘s … not really how it works. Agents get your code into their context via tool calls, not by uploading the entire file to a server „where the weights live and thus the code has to be too“. Small but crucial difference. Aside from that: LLM providers have to be the ones that facilitate your privacy and security by default. That‘s not on the user. They‘re tool providers and they can‘t compromise you and your org by default.

[fwlr]

What do you think a tool call is? What is this small but crucial difference between a `read_file` tool call and `scp`?

If your contention is just that this should upload files one by one instead of all at once, what you want is for providers to facilitate the illusion of privacy.