Skip to main content

Overview

The filesystem tools provide sandboxed file access within the agent’s workspace. All paths are validated against the workspace root to prevent directory traversal.

Tools

read_file

Reads a file with line numbers (cat -n style). Supports pagination via offset and limit.
Output format:
Size guard: Files larger than 256 KB require explicit offset and limit parameters. Without them, the tool returns an error message directing the agent to use pagination.

grep

Search file contents with context lines, case-insensitive matching, and result limits.
Parameters:

edit_file

Replaces text and shows a unified diff:

glob

Find files matching a pattern. Capped at 100 results.

ls, write_file, mkdir

Standard file operations, all workspace-scoped.

Workspace Isolation

All paths are resolved relative to the workspace root (set via $AGENT_WORKSPACE or the CLI’s --workspace flag). Path traversal attempts (../../../etc/passwd) are blocked.

YAML Configuration