@anthropic-ai/sdk 0.123.0 → 0.124.0

package/src/resources/skills/index.ts

@@ -6,7 +6,9 @@ export {
   type Skill,
   type SkillSource,
   type SkillCreateParams,
+  type SkillRetrieveParams,
   type SkillListParams,
+  type SkillDeleteParams,
   type SkillsPageCursor,
 } from './skills';
 export {

package/src/resources/skills/skills.ts

@@ -15,6 +15,7 @@ import {
 import { APIPromise } from '../../core/api-promise';
 import { PageCursor, type PageCursorParams, PagePromise } from '../../core/pagination';
 import { type Uploadable } from '../../core/uploads';
+import { buildHeaders } from '../../internal/headers';
 import { RequestOptions } from '../../internal/request-options';
 import { multipartFormRequestOptions } from '../../internal/uploads';
 import { path } from '../../internal/utils/path';
@@ -24,36 +25,103 @@ export class Skills extends APIResource {
 
   /**
    * Create Skill
+   *
+   * @example
+   * ```ts
+   * const skill = await client.skills.create({
+   *   files: [fs.createReadStream('path/to/file')],
+   * });
+   * ```
    */
-  create(body: SkillCreateParams, options?: RequestOptions): APIPromise<Skill> {
+  create(params: SkillCreateParams, options?: RequestOptions): APIPromise<Skill> {
+    const { workspace_id, ...body } = params;
     return this._client.post(
       '/v1/skills',
-      multipartFormRequestOptions({ body, ...options }, this._client, false),
+      multipartFormRequestOptions(
+        {
+          body,
+          ...options,
+          headers: buildHeaders([
+            { ...(workspace_id != null ? { 'anthropic-workspace-id': workspace_id } : undefined) },
+            options?.headers,
+          ]),
+        },
+        this._client,
+        false,
+      ),
     );
   }
 
   /**
    * Get Skill
+   *
+   * @example
+   * ```ts
+   * const skill = await client.skills.retrieve('skill_id');
+   * ```
    */
-  retrieve(skillID: string, options?: RequestOptions): APIPromise<Skill> {
-    return this._client.get(path`/v1/skills/${skillID}`, options);
+  retrieve(
+    skillID: string,
+    params: SkillRetrieveParams | null | undefined = {},
+    options?: RequestOptions,
+  ): APIPromise<Skill> {
+    const { workspace_id } = params ?? {};
+    return this._client.get(path`/v1/skills/${skillID}`, {
+      ...options,
+      headers: buildHeaders([
+        { ...(workspace_id != null ? { 'anthropic-workspace-id': workspace_id } : undefined) },
+        options?.headers,
+      ]),
+    });
   }
 
   /**
    * List Skills
+   *
+   * @example
+   * ```ts
+   * // Automatically fetches more pages as needed.
+   * for await (const skill of client.skills.list()) {
+   *   // ...
+   * }
+   * ```
    */
   list(
-    query: SkillListParams | null | undefined = {},
+    params: SkillListParams | null | undefined = {},
     options?: RequestOptions,
   ): PagePromise<SkillsPageCursor, Skill> {
-    return this._client.getAPIList('/v1/skills', PageCursor<Skill>, { query, ...options });
+    const { workspace_id, ...query } = params ?? {};
+    return this._client.getAPIList('/v1/skills', PageCursor<Skill>, {
+      query,
+      ...options,
+      headers: buildHeaders([
+        { ...(workspace_id != null ? { 'anthropic-workspace-id': workspace_id } : undefined) },
+        options?.headers,
+      ]),
+    });
   }
 
   /**
    * Delete Skill
+   *
+   * @example
+   * ```ts
+   * const deletedSkill = await client.skills.delete('skill_id');
+   * ```
    */
-  delete(skillID: string, options?: RequestOptions): APIPromise<DeletedSkill> {
-    return this._client.delete(path`/v1/skills/${skillID}`, options);
+  delete(
+    skillID: string,
+    params: SkillDeleteParams | null | undefined = {},
+    options?: RequestOptions,
+  ): APIPromise<DeletedSkill> {
+    const { workspace_id } = params ?? {};
+    return this._client.delete(path`/v1/skills/${skillID}`, {
+      ...options,
+      headers: buildHeaders([
+        { ...(workspace_id != null ? { 'anthropic-workspace-id': workspace_id } : undefined) },
+        options?.headers,
+      ]),
+    });
   }
 }
 
@@ -142,7 +210,7 @@ export interface SkillSource {
 
 export interface SkillCreateParams {
   /**
-   * Files to upload for the skill.
+   * Body param: Files to upload for the skill.
    *
    * All files must be in the same top-level directory and must include a SKILL.md
    * file at the root of that directory.
@@ -150,16 +218,38 @@ export interface SkillCreateParams {
   files: Array<Uploadable>;
 
   /**
-   * Human-readable, single-line label for the Skill. Maximum 255 characters. Always
-   * set: derived from the SKILL.md frontmatter `name` when omitted at creation. Not
-   * unique.
+   * Body param: Human-readable, single-line label for the Skill. Maximum 255
+   * characters. Always set: derived from the SKILL.md frontmatter `name` when
+   * omitted at creation. Not unique.
    */
   display_name?: string | null;
+
+  /**
+   * Header param: Optional header to select the Workspace for this request. The
+   * value is a Workspace ID (for example, `wrkspc_011CZkZaBF1tNoB5wlCeusgy`).
+   *
+   * Only needed for credentials that can act on more than one Workspace. A
+   * credential that belongs to a specific Workspace may omit it; if sent, it must
+   * match that Workspace.
+   */
+  workspace_id?: string;
+}
+
+export interface SkillRetrieveParams {
+  /**
+   * Optional header to select the Workspace for this request. The value is a
+   * Workspace ID (for example, `wrkspc_011CZkZaBF1tNoB5wlCeusgy`).
+   *
+   * Only needed for credentials that can act on more than one Workspace. A
+   * credential that belongs to a specific Workspace may omit it; if sent, it must
+   * match that Workspace.
+   */
+  workspace_id?: string;
 }
 
 export interface SkillListParams extends PageCursorParams {
   /**
-   * Filter skills by source.
+   * Query param: Filter skills by source.
    *
    * If provided, only skills from the specified source will be returned:
    *
@@ -167,6 +257,28 @@ export interface SkillListParams extends PageCursorParams {
    * - `"anthropic"`: only return Anthropic-created skills
    */
   source?: string | null;
+
+  /**
+   * Header param: Optional header to select the Workspace for this request. The
+   * value is a Workspace ID (for example, `wrkspc_011CZkZaBF1tNoB5wlCeusgy`).
+   *
+   * Only needed for credentials that can act on more than one Workspace. A
+   * credential that belongs to a specific Workspace may omit it; if sent, it must
+   * match that Workspace.
+   */
+  workspace_id?: string;
+}
+
+export interface SkillDeleteParams {
+  /**
+   * Optional header to select the Workspace for this request. The value is a
+   * Workspace ID (for example, `wrkspc_011CZkZaBF1tNoB5wlCeusgy`).
+   *
+   * Only needed for credentials that can act on more than one Workspace. A
+   * credential that belongs to a specific Workspace may omit it; if sent, it must
+   * match that Workspace.
+   */
+  workspace_id?: string;
 }
 
 Skills.Versions = Versions;
@@ -178,7 +290,9 @@ export declare namespace Skills {
     type SkillSource as SkillSource,
     type SkillsPageCursor as SkillsPageCursor,
     type SkillCreateParams as SkillCreateParams,
+    type SkillRetrieveParams as SkillRetrieveParams,
     type SkillListParams as SkillListParams,
+    type SkillDeleteParams as SkillDeleteParams,
   };
 
   export {

package/src/resources/skills/versions.ts

@@ -4,6 +4,7 @@ import { APIResource } from '../../core/resource';
 import { APIPromise } from '../../core/api-promise';
 import { PageCursor, type PageCursorParams, PagePromise } from '../../core/pagination';
 import { type Uploadable } from '../../core/uploads';
+import { buildHeaders } from '../../internal/headers';
 import { RequestOptions } from '../../internal/request-options';
 import { multipartFormRequestOptions } from '../../internal/uploads';
 import { path } from '../../internal/utils/path';
@@ -11,50 +12,113 @@ import { path } from '../../internal/utils/path';
 export class Versions extends APIResource {
   /**
    * Create Skill Version
+   *
+   * @example
+   * ```ts
+   * const skillVersion = await client.skills.versions.create(
+   *   'skill_id',
+   *   { files: [fs.createReadStream('path/to/file')] },
+   * );
+   * ```
    */
-  create(skillID: string, body: VersionCreateParams, options?: RequestOptions): APIPromise<SkillVersion> {
+  create(skillID: string, params: VersionCreateParams, options?: RequestOptions): APIPromise<SkillVersion> {
+    const { workspace_id, ...body } = params;
     return this._client.post(
       path`/v1/skills/${skillID}/versions`,
-      multipartFormRequestOptions({ body, ...options }, this._client, false),
+      multipartFormRequestOptions(
+        {
+          body,
+          ...options,
+          headers: buildHeaders([
+            { ...(workspace_id != null ? { 'anthropic-workspace-id': workspace_id } : undefined) },
+            options?.headers,
+          ]),
+        },
+        this._client,
+        false,
+      ),
     );
   }
 
   /**
    * Get Skill Version
+   *
+   * @example
+   * ```ts
+   * const skillVersion = await client.skills.versions.retrieve(
+   *   'version',
+   *   { skill_id: 'skill_id' },
+   * );
+   * ```
    */
   retrieve(
     version: string,
     params: VersionRetrieveParams,
     options?: RequestOptions,
   ): APIPromise<SkillVersion> {
-    const { skill_id } = params;
-    return this._client.get(path`/v1/skills/${skill_id}/versions/${version}`, options);
+    const { skill_id, workspace_id } = params;
+    return this._client.get(path`/v1/skills/${skill_id}/versions/${version}`, {
+      ...options,
+      headers: buildHeaders([
+        { ...(workspace_id != null ? { 'anthropic-workspace-id': workspace_id } : undefined) },
+        options?.headers,
+      ]),
+    });
   }
 
   /**
    * List Skill Versions
+   *
+   * @example
+   * ```ts
+   * // Automatically fetches more pages as needed.
+   * for await (const skillVersion of client.skills.versions.list(
+   *   'skill_id',
+   * )) {
+   *   // ...
+   * }
+   * ```
    */
   list(
     skillID: string,
-    query: VersionListParams | null | undefined = {},
+    params: VersionListParams | null | undefined = {},
     options?: RequestOptions,
   ): PagePromise<SkillVersionsPageCursor, SkillVersion> {
+    const { workspace_id, ...query } = params ?? {};
     return this._client.getAPIList(path`/v1/skills/${skillID}/versions`, PageCursor<SkillVersion>, {
       query,
       ...options,
+      headers: buildHeaders([
+        { ...(workspace_id != null ? { 'anthropic-workspace-id': workspace_id } : undefined) },
+        options?.headers,
+      ]),
     });
   }
 
   /**
    * Delete Skill Version
+   *
+   * @example
+   * ```ts
+   * const deletedSkillVersion =
+   *   await client.skills.versions.delete('version', {
+   *     skill_id: 'skill_id',
+   *   });
+   * ```
    */
   delete(
     version: string,
     params: VersionDeleteParams,
     options?: RequestOptions,
   ): APIPromise<DeletedSkillVersion> {
-    const { skill_id } = params;
-    return this._client.delete(path`/v1/skills/${skill_id}/versions/${version}`, options);
+    const { skill_id, workspace_id } = params;
+    return this._client.delete(path`/v1/skills/${skill_id}/versions/${version}`, {
+      ...options,
+      headers: buildHeaders([
+        { ...(workspace_id != null ? { 'anthropic-workspace-id': workspace_id } : undefined) },
+        options?.headers,
+      ]),
+    });
   }
 }
 
@@ -119,32 +183,72 @@ export interface SkillVersion {
 
 export interface VersionCreateParams {
   /**
-   * Files to upload for the skill.
+   * Body param: Files to upload for the skill.
    *
    * All files must be in the same top-level directory and must include a SKILL.md
    * file at the root of that directory.
    */
   files: Array<Uploadable>;
+
+  /**
+   * Header param: Optional header to select the Workspace for this request. The
+   * value is a Workspace ID (for example, `wrkspc_011CZkZaBF1tNoB5wlCeusgy`).
+   *
+   * Only needed for credentials that can act on more than one Workspace. A
+   * credential that belongs to a specific Workspace may omit it; if sent, it must
+   * match that Workspace.
+   */
+  workspace_id?: string;
 }
 
 export interface VersionRetrieveParams {
   /**
-   * Unique identifier for the skill.
+   * Path param: Unique identifier for the skill.
    *
    * The format and length of IDs may change over time.
    */
   skill_id: string;
+
+  /**
+   * Header param: Optional header to select the Workspace for this request. The
+   * value is a Workspace ID (for example, `wrkspc_011CZkZaBF1tNoB5wlCeusgy`).
+   *
+   * Only needed for credentials that can act on more than one Workspace. A
+   * credential that belongs to a specific Workspace may omit it; if sent, it must
+   * match that Workspace.
+   */
+  workspace_id?: string;
 }
 
-export interface VersionListParams extends PageCursorParams {}
+export interface VersionListParams extends PageCursorParams {
+  /**
+   * Header param: Optional header to select the Workspace for this request. The
+   * value is a Workspace ID (for example, `wrkspc_011CZkZaBF1tNoB5wlCeusgy`).
+   *
+   * Only needed for credentials that can act on more than one Workspace. A
+   * credential that belongs to a specific Workspace may omit it; if sent, it must
+   * match that Workspace.
+   */
+  workspace_id?: string;
+}
 
 export interface VersionDeleteParams {
   /**
-   * Unique identifier for the skill.
+   * Path param: Unique identifier for the skill.
    *
    * The format and length of IDs may change over time.
    */
   skill_id: string;
+
+  /**
+   * Header param: Optional header to select the Workspace for this request. The
+   * value is a Workspace ID (for example, `wrkspc_011CZkZaBF1tNoB5wlCeusgy`).
+   *
+   * Only needed for credentials that can act on more than one Workspace. A
+   * credential that belongs to a specific Workspace may omit it; if sent, it must
+   * match that Workspace.
+   */
+  workspace_id?: string;
 }
 
 export declare namespace Versions {

package/src/tools/agent-toolset/fs-util.ts

@@ -11,10 +11,13 @@ import { ToolError } from '../../lib/tools/ToolError';
 
 const fs = nodefs.promises;
 
-/** Mode for directories the file tools create — not world-writable under a 0 umask. */
-export const DIR_CREATE_MODE = 0o755;
-/** Mode for files the file tools create. */
-export const FILE_CREATE_MODE = 0o644;
+/** Mode for directories the file tools create: owner-only under any umask, like the memory tool. */
+export const DIR_CREATE_MODE = 0o700;
+/**
+ * Mode for files the file tools create: owner-only, so other local users can't
+ * read what an agent wrote. A file that already exists keeps its own mode.
+ */
+export const FILE_CREATE_MODE = 0o600;
 
 /** True when `p` is `root` itself or lexically contained within it. */
 export function isWithin(root: string, p: string): boolean {
@@ -138,13 +141,22 @@ export async function confineToRoot(
  * Atomically write `content` to `targetPath`: write a sibling temp file, fsync
  * it, then rename over the target. The rename is atomic on most filesystems, so
  * a crash mid-write never leaves the target half-written.
+ *
+ * A new file is created {@link FILE_CREATE_MODE}; an existing one keeps its
+ * permission bits (the rename replaces the inode, so they are copied onto the
+ * temp file first) — an edit must not strip `+x` or sharing the owner chose.
  */
 export async function atomicWriteFile(targetPath: string, content: string): Promise<void> {
   const dir = path.dirname(targetPath);
   const tempPath = path.join(dir, `.tmp-${process.pid}-${crypto.randomUUID()}`);
+  const existingMode = await fs.stat(targetPath).then(
+    (st) => st.mode & 0o777,
+    () => undefined,
+  );
   let handle: FileHandle | undefined;
   try {
     handle = await fs.open(tempPath, 'wx', FILE_CREATE_MODE);
+    if (existingMode !== undefined) await handle.chmod(existingMode);
     await handle.writeFile(content, 'utf-8');
     await handle.sync();
     await handle.close();

package/src/version.ts

@@ -1 +1 @@
-export const VERSION = '0.123.0'; // x-release-please-version
+export const VERSION = '0.124.0'; // x-release-please-version

package/tools/agent-toolset/fs-util.d.mts

@@ -4,10 +4,13 @@
  * error messages. Kept out of `node.ts` so the tool implementations stay focused
  * and these helpers can be reused by every file tool.
  */
-/** Mode for directories the file tools create — not world-writable under a 0 umask. */
-export declare const DIR_CREATE_MODE = 493;
-/** Mode for files the file tools create. */
-export declare const FILE_CREATE_MODE = 420;
+/** Mode for directories the file tools create: owner-only under any umask, like the memory tool. */
+export declare const DIR_CREATE_MODE = 448;
+/**
+ * Mode for files the file tools create: owner-only, so other local users can't
+ * read what an agent wrote. A file that already exists keeps its own mode.
+ */
+export declare const FILE_CREATE_MODE = 384;
 /** True when `p` is `root` itself or lexically contained within it. */
 export declare function isWithin(root: string, p: string): boolean;
 /**
@@ -62,6 +65,10 @@ export declare function confineToRoot(root: string, p: string, opts?: {
  * Atomically write `content` to `targetPath`: write a sibling temp file, fsync
  * it, then rename over the target. The rename is atomic on most filesystems, so
  * a crash mid-write never leaves the target half-written.
+ *
+ * A new file is created {@link FILE_CREATE_MODE}; an existing one keeps its
+ * permission bits (the rename replaces the inode, so they are copied onto the
+ * temp file first) — an edit must not strip `+x` or sharing the owner chose.
  */
 export declare function atomicWriteFile(targetPath: string, content: string): Promise<void>;
 /**

package/tools/agent-toolset/fs-util.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"fs-util.d.mts","sourceRoot":"","sources":["../../src/tools/agent-toolset/fs-util.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAQH,uFAAuF;AACvF,eAAO,MAAM,eAAe,MAAQ,CAAC;AACrC,4CAA4C;AAC5C,eAAO,MAAM,gBAAgB,MAAQ,CAAC;AAEtC,uEAAuE;AACvE,wBAAgB,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,GAAG,OAAO,CAGzD;AAED;;;;;;;GAOG;AACH,wBAAsB,cAAc,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAK1G;AAKD,2EAA2E;AAC3E,wBAAgB,SAAS,CAAC,GAAG,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAG1D;AAED;;;;;;;;;;;;GAYG;AACH,wBAAsB,YAAY,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CA8B/D;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAsB,aAAa,CACjC,IAAI,EAAE,MAAM,EACZ,CAAC,EAAE,MAAM,EACT,IAAI,CAAC,EAAE;IAAE,YAAY,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;CAAE,GAC1C,OAAO,CAAC,MAAM,CAAC,CAiBjB;AAED;;;;GAIG;AACH,wBAAsB,eAAe,CAAC,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAgBxF;AAED;;;;;;GAMG;AACH,wBAAgB,cAAc,CAAC,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAwBjE"}
+{"version":3,"file":"fs-util.d.mts","sourceRoot":"","sources":["../../src/tools/agent-toolset/fs-util.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAQH,oGAAoG;AACpG,eAAO,MAAM,eAAe,MAAQ,CAAC;AACrC;;;GAGG;AACH,eAAO,MAAM,gBAAgB,MAAQ,CAAC;AAEtC,uEAAuE;AACvE,wBAAgB,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,GAAG,OAAO,CAGzD;AAED;;;;;;;GAOG;AACH,wBAAsB,cAAc,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAK1G;AAKD,2EAA2E;AAC3E,wBAAgB,SAAS,CAAC,GAAG,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAG1D;AAED;;;;;;;;;;;;GAYG;AACH,wBAAsB,YAAY,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CA8B/D;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAsB,aAAa,CACjC,IAAI,EAAE,MAAM,EACZ,CAAC,EAAE,MAAM,EACT,IAAI,CAAC,EAAE;IAAE,YAAY,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;CAAE,GAC1C,OAAO,CAAC,MAAM,CAAC,CAiBjB;AAED;;;;;;;;GAQG;AACH,wBAAsB,eAAe,CAAC,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAqBxF;AAED;;;;;;GAMG;AACH,wBAAgB,cAAc,CAAC,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAwBjE"}

package/tools/agent-toolset/fs-util.d.ts

@@ -4,10 +4,13 @@
  * error messages. Kept out of `node.ts` so the tool implementations stay focused
  * and these helpers can be reused by every file tool.
  */
-/** Mode for directories the file tools create — not world-writable under a 0 umask. */
-export declare const DIR_CREATE_MODE = 493;
-/** Mode for files the file tools create. */
-export declare const FILE_CREATE_MODE = 420;
+/** Mode for directories the file tools create: owner-only under any umask, like the memory tool. */
+export declare const DIR_CREATE_MODE = 448;
+/**
+ * Mode for files the file tools create: owner-only, so other local users can't
+ * read what an agent wrote. A file that already exists keeps its own mode.
+ */
+export declare const FILE_CREATE_MODE = 384;
 /** True when `p` is `root` itself or lexically contained within it. */
 export declare function isWithin(root: string, p: string): boolean;
 /**
@@ -62,6 +65,10 @@ export declare function confineToRoot(root: string, p: string, opts?: {
  * Atomically write `content` to `targetPath`: write a sibling temp file, fsync
  * it, then rename over the target. The rename is atomic on most filesystems, so
  * a crash mid-write never leaves the target half-written.
+ *
+ * A new file is created {@link FILE_CREATE_MODE}; an existing one keeps its
+ * permission bits (the rename replaces the inode, so they are copied onto the
+ * temp file first) — an edit must not strip `+x` or sharing the owner chose.
  */
 export declare function atomicWriteFile(targetPath: string, content: string): Promise<void>;
 /**

package/tools/agent-toolset/fs-util.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"fs-util.d.ts","sourceRoot":"","sources":["../../src/tools/agent-toolset/fs-util.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAQH,uFAAuF;AACvF,eAAO,MAAM,eAAe,MAAQ,CAAC;AACrC,4CAA4C;AAC5C,eAAO,MAAM,gBAAgB,MAAQ,CAAC;AAEtC,uEAAuE;AACvE,wBAAgB,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,GAAG,OAAO,CAGzD;AAED;;;;;;;GAOG;AACH,wBAAsB,cAAc,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAK1G;AAKD,2EAA2E;AAC3E,wBAAgB,SAAS,CAAC,GAAG,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAG1D;AAED;;;;;;;;;;;;GAYG;AACH,wBAAsB,YAAY,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CA8B/D;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAsB,aAAa,CACjC,IAAI,EAAE,MAAM,EACZ,CAAC,EAAE,MAAM,EACT,IAAI,CAAC,EAAE;IAAE,YAAY,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;CAAE,GAC1C,OAAO,CAAC,MAAM,CAAC,CAiBjB;AAED;;;;GAIG;AACH,wBAAsB,eAAe,CAAC,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAgBxF;AAED;;;;;;GAMG;AACH,wBAAgB,cAAc,CAAC,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAwBjE"}
+{"version":3,"file":"fs-util.d.ts","sourceRoot":"","sources":["../../src/tools/agent-toolset/fs-util.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAQH,oGAAoG;AACpG,eAAO,MAAM,eAAe,MAAQ,CAAC;AACrC;;;GAGG;AACH,eAAO,MAAM,gBAAgB,MAAQ,CAAC;AAEtC,uEAAuE;AACvE,wBAAgB,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,GAAG,OAAO,CAGzD;AAED;;;;;;;GAOG;AACH,wBAAsB,cAAc,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAK1G;AAKD,2EAA2E;AAC3E,wBAAgB,SAAS,CAAC,GAAG,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAG1D;AAED;;;;;;;;;;;;GAYG;AACH,wBAAsB,YAAY,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CA8B/D;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAsB,aAAa,CACjC,IAAI,EAAE,MAAM,EACZ,CAAC,EAAE,MAAM,EACT,IAAI,CAAC,EAAE;IAAE,YAAY,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;CAAE,GAC1C,OAAO,CAAC,MAAM,CAAC,CAiBjB;AAED;;;;;;;;GAQG;AACH,wBAAsB,eAAe,CAAC,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAqBxF;AAED;;;;;;GAMG;AACH,wBAAgB,cAAc,CAAC,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAwBjE"}

package/tools/agent-toolset/fs-util.js

@@ -17,10 +17,13 @@ exports.fsErrorMessage = fsErrorMessage;
 const node_1 = require("../../internal/node.js");
 const ToolError_1 = require("../../lib/tools/ToolError.js");
 const fs = node_1.fs.promises;
-/** Mode for directories the file tools create — not world-writable under a 0 umask. */
-exports.DIR_CREATE_MODE = 0o755;
-/** Mode for files the file tools create. */
-exports.FILE_CREATE_MODE = 0o644;
+/** Mode for directories the file tools create: owner-only under any umask, like the memory tool. */
+exports.DIR_CREATE_MODE = 0o700;
+/**
+ * Mode for files the file tools create: owner-only, so other local users can't
+ * read what an agent wrote. A file that already exists keeps its own mode.
+ */
+exports.FILE_CREATE_MODE = 0o600;
 /** True when `p` is `root` itself or lexically contained within it. */
 function isWithin(root, p) {
     const rel = node_1.path.relative(root, p);
@@ -139,13 +142,20 @@ async function confineToRoot(root, p, opts) {
  * Atomically write `content` to `targetPath`: write a sibling temp file, fsync
  * it, then rename over the target. The rename is atomic on most filesystems, so
  * a crash mid-write never leaves the target half-written.
+ *
+ * A new file is created {@link FILE_CREATE_MODE}; an existing one keeps its
+ * permission bits (the rename replaces the inode, so they are copied onto the
+ * temp file first) — an edit must not strip `+x` or sharing the owner chose.
  */
 async function atomicWriteFile(targetPath, content) {
     const dir = node_1.path.dirname(targetPath);
     const tempPath = node_1.path.join(dir, `.tmp-${process.pid}-${node_1.crypto.randomUUID()}`);
+    const existingMode = await fs.stat(targetPath).then((st) => st.mode & 0o777, () => undefined);
     let handle;
     try {
         handle = await fs.open(tempPath, 'wx', exports.FILE_CREATE_MODE);
+        if (existingMode !== undefined)
+            await handle.chmod(existingMode);
         await handle.writeFile(content, 'utf-8');
         await handle.sync();
         await handle.close();

package/tools/agent-toolset/fs-util.js.map

@@ -1 +1 @@
-{"version":3,"file":"fs-util.js","sourceRoot":"","sources":["../../src/tools/agent-toolset/fs-util.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAcH,4BAGC;AAUD,wCAKC;AAMD,8BAGC;AAeD,oCA8BC;AAsBD,sCAqBC;AAOD,0CAgBC;AASD,wCAwBC;AAtLD,iDAAiE;AACjE,4DAAsD;AAEtD,MAAM,EAAE,GAAG,SAAM,CAAC,QAAQ,CAAC;AAE3B,uFAAuF;AAC1E,QAAA,eAAe,GAAG,KAAK,CAAC;AACrC,4CAA4C;AAC/B,QAAA,gBAAgB,GAAG,KAAK,CAAC;AAEtC,uEAAuE;AACvE,SAAgB,QAAQ,CAAC,IAAY,EAAE,CAAS;IAC9C,MAAM,GAAG,GAAG,WAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IACnC,OAAO,GAAG,KAAK,EAAE,IAAI,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,GAAG,WAAI,CAAC,GAAG,CAAC,IAAI,GAAG,KAAK,IAAI,IAAI,CAAC,WAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;AACnG,CAAC;AAED;;;;;;;GAOG;AACI,KAAK,UAAU,cAAc,CAAC,KAAwB,EAAE,MAAc;IAC3E,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,QAAQ,CAAC,MAAM,YAAY,CAAC,WAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,EAAE,MAAM,CAAC;YAAE,OAAO,IAAI,CAAC;IAC5E,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,yFAAyF;AACzF,MAAM,gBAAgB,GAAG,EAAE,CAAC;AAE5B,2EAA2E;AAC3E,SAAgB,SAAS,CAAC,GAAY;IACpC,MAAM,IAAI,GAAI,GAAiC,EAAE,IAAI,CAAC;IACtD,OAAO,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;AACrD,CAAC;AAED;;;;;;;;;;;;GAYG;AACI,KAAK,UAAU,YAAY,CAAC,GAAW;IAC5C,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,IAAI,MAAM,GAAG,GAAG,CAAC;IACjB,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,SAAS,CAAC;QACR,IAAI,IAAY,CAAC;QACjB,IAAI,CAAC;YACH,IAAI,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACnC,CAAC;QAAC,OAAO,WAAW,EAAE,CAAC;YACrB,IAAI,MAAe,CAAC;YACpB,IAAI,CAAC;gBACH,MAAM,GAAG,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,cAAc,EAAE,CAAC;YACrD,CAAC;YAAC,OAAO,QAAQ,EAAE,CAAC;gBAClB,MAAM,IAAI,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;gBACjC,IAAI,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,SAAS;oBAAE,MAAM,QAAQ,CAAC;gBAC5D,MAAM,MAAM,GAAG,WAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;gBACpC,IAAI,MAAM,KAAK,MAAM;oBAAE,MAAM,QAAQ,CAAC;gBACtC,IAAI,CAAC,IAAI,CAAC,WAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;gBACjC,MAAM,GAAG,MAAM,CAAC;gBAChB,SAAS;YACX,CAAC;YACD,IAAI,CAAC,MAAM;gBAAE,MAAM,WAAW,CAAC;YAC/B,IAAI,EAAE,IAAI,GAAG,gBAAgB,EAAE,CAAC;gBAC9B,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,mCAAmC,CAAC,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;YACzF,CAAC;YACD,MAAM,GAAG,WAAI,CAAC,OAAO,CAAC,WAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;YACvE,SAAS;QACX,CAAC;QACD,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,WAAI,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACjE,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACI,KAAK,UAAU,aAAa,CACjC,IAAY,EACZ,CAAS,EACT,IAA2C;IAE3C,MAAM,YAAY,GAAG,IAAI,EAAE,YAAY,IAAI,EAAE,CAAC;IAC9C,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,WAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;IACxD,IAAI,IAAY,CAAC;IACjB,IAAI,CAAC;QACH,IAAI,GAAG,MAAM,YAAY,CAAC,WAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC;IACvD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,qBAAS,CAAC,cAAc,CAAC,GAAG,EAAE,QAAQ,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACxE,CAAC;IACD,IAAI,QAAQ,CAAC,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,cAAc,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC,KAAK,SAAS,EAAE,CAAC;QACzF,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,SAAS,GACb,YAAY,CAAC,MAAM,CAAC,CAAC;QACnB,qEAAqE;QACvE,CAAC,CAAC,iCAAiC,CAAC;IACtC,MAAM,IAAI,qBAAS,CAAC,QAAQ,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,eAAe,SAAS,EAAE,CAAC,CAAC;AAC3E,CAAC;AAED;;;;GAIG;AACI,KAAK,UAAU,eAAe,CAAC,UAAkB,EAAE,OAAe;IACvE,MAAM,GAAG,GAAG,WAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IACrC,MAAM,QAAQ,GAAG,WAAI,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,OAAO,CAAC,GAAG,IAAI,aAAM,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;IAC9E,IAAI,MAA8B,CAAC;IACnC,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,EAAE,wBAAgB,CAAC,CAAC;QACzD,MAAM,MAAM,CAAC,SAAS,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACzC,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;QACpB,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;QACrB,MAAM,GAAG,SAAS,CAAC;QACnB,MAAM,EAAE,CAAC,MAAM,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;IACxC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,MAAM;YAAE,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QACjD,MAAM,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QAC1C,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,SAAgB,cAAc,CAAC,GAAY,EAAE,IAAY;IACvD,MAAM,IAAI,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;IAC5B,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,QAAQ;YACX,OAAO,GAAG,IAAI,6BAA6B,CAAC;QAC9C,KAAK,QAAQ,CAAC;QACd,KAAK,OAAO;YACV,OAAO,GAAG,IAAI,qBAAqB,CAAC;QACtC,KAAK,SAAS;YACZ,OAAO,GAAG,IAAI,mBAAmB,CAAC;QACpC,KAAK,QAAQ;YACX,OAAO,GAAG,IAAI,kBAAkB,CAAC;QACnC,KAAK,OAAO;YACV,OAAO,GAAG,IAAI,qCAAqC,CAAC;QACtD,KAAK,cAAc;YACjB,OAAO,GAAG,IAAI,sBAAsB,CAAC;QACvC,KAAK,QAAQ;YACX,OAAO,GAAG,IAAI,2BAA2B,CAAC;QAC5C,KAAK,QAAQ,CAAC;QACd,KAAK,QAAQ;YACX,OAAO,GAAG,IAAI,uBAAuB,CAAC;QACxC;YACE,OAAO,GAAG,IAAI,KAAK,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,cAAc,IAAI,GAAG,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;IAClF,CAAC;AACH,CAAC"}
+{"version":3,"file":"fs-util.js","sourceRoot":"","sources":["../../src/tools/agent-toolset/fs-util.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAiBH,4BAGC;AAUD,wCAKC;AAMD,8BAGC;AAeD,oCA8BC;AAsBD,sCAqBC;AAWD,0CAqBC;AASD,wCAwBC;AAlMD,iDAAiE;AACjE,4DAAsD;AAEtD,MAAM,EAAE,GAAG,SAAM,CAAC,QAAQ,CAAC;AAE3B,oGAAoG;AACvF,QAAA,eAAe,GAAG,KAAK,CAAC;AACrC;;;GAGG;AACU,QAAA,gBAAgB,GAAG,KAAK,CAAC;AAEtC,uEAAuE;AACvE,SAAgB,QAAQ,CAAC,IAAY,EAAE,CAAS;IAC9C,MAAM,GAAG,GAAG,WAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IACnC,OAAO,GAAG,KAAK,EAAE,IAAI,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,GAAG,WAAI,CAAC,GAAG,CAAC,IAAI,GAAG,KAAK,IAAI,IAAI,CAAC,WAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;AACnG,CAAC;AAED;;;;;;;GAOG;AACI,KAAK,UAAU,cAAc,CAAC,KAAwB,EAAE,MAAc;IAC3E,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,QAAQ,CAAC,MAAM,YAAY,CAAC,WAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,EAAE,MAAM,CAAC;YAAE,OAAO,IAAI,CAAC;IAC5E,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,yFAAyF;AACzF,MAAM,gBAAgB,GAAG,EAAE,CAAC;AAE5B,2EAA2E;AAC3E,SAAgB,SAAS,CAAC,GAAY;IACpC,MAAM,IAAI,GAAI,GAAiC,EAAE,IAAI,CAAC;IACtD,OAAO,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;AACrD,CAAC;AAED;;;;;;;;;;;;GAYG;AACI,KAAK,UAAU,YAAY,CAAC,GAAW;IAC5C,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,IAAI,MAAM,GAAG,GAAG,CAAC;IACjB,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,SAAS,CAAC;QACR,IAAI,IAAY,CAAC;QACjB,IAAI,CAAC;YACH,IAAI,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACnC,CAAC;QAAC,OAAO,WAAW,EAAE,CAAC;YACrB,IAAI,MAAe,CAAC;YACpB,IAAI,CAAC;gBACH,MAAM,GAAG,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,cAAc,EAAE,CAAC;YACrD,CAAC;YAAC,OAAO,QAAQ,EAAE,CAAC;gBAClB,MAAM,IAAI,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;gBACjC,IAAI,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,SAAS;oBAAE,MAAM,QAAQ,CAAC;gBAC5D,MAAM,MAAM,GAAG,WAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;gBACpC,IAAI,MAAM,KAAK,MAAM;oBAAE,MAAM,QAAQ,CAAC;gBACtC,IAAI,CAAC,IAAI,CAAC,WAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;gBACjC,MAAM,GAAG,MAAM,CAAC;gBAChB,SAAS;YACX,CAAC;YACD,IAAI,CAAC,MAAM;gBAAE,MAAM,WAAW,CAAC;YAC/B,IAAI,EAAE,IAAI,GAAG,gBAAgB,EAAE,CAAC;gBAC9B,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,mCAAmC,CAAC,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;YACzF,CAAC;YACD,MAAM,GAAG,WAAI,CAAC,OAAO,CAAC,WAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;YACvE,SAAS;QACX,CAAC;QACD,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,WAAI,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACjE,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACI,KAAK,UAAU,aAAa,CACjC,IAAY,EACZ,CAAS,EACT,IAA2C;IAE3C,MAAM,YAAY,GAAG,IAAI,EAAE,YAAY,IAAI,EAAE,CAAC;IAC9C,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,WAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;IACxD,IAAI,IAAY,CAAC;IACjB,IAAI,CAAC;QACH,IAAI,GAAG,MAAM,YAAY,CAAC,WAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC;IACvD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,qBAAS,CAAC,cAAc,CAAC,GAAG,EAAE,QAAQ,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACxE,CAAC;IACD,IAAI,QAAQ,CAAC,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,cAAc,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC,KAAK,SAAS,EAAE,CAAC;QACzF,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,SAAS,GACb,YAAY,CAAC,MAAM,CAAC,CAAC;QACnB,qEAAqE;QACvE,CAAC,CAAC,iCAAiC,CAAC;IACtC,MAAM,IAAI,qBAAS,CAAC,QAAQ,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,eAAe,SAAS,EAAE,CAAC,CAAC;AAC3E,CAAC;AAED;;;;;;;;GAQG;AACI,KAAK,UAAU,eAAe,CAAC,UAAkB,EAAE,OAAe;IACvE,MAAM,GAAG,GAAG,WAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IACrC,MAAM,QAAQ,GAAG,WAAI,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,OAAO,CAAC,GAAG,IAAI,aAAM,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;IAC9E,MAAM,YAAY,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,IAAI,CACjD,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,GAAG,KAAK,EACvB,GAAG,EAAE,CAAC,SAAS,CAChB,CAAC;IACF,IAAI,MAA8B,CAAC;IACnC,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,EAAE,wBAAgB,CAAC,CAAC;QACzD,IAAI,YAAY,KAAK,SAAS;YAAE,MAAM,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;QACjE,MAAM,MAAM,CAAC,SAAS,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACzC,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;QACpB,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;QACrB,MAAM,GAAG,SAAS,CAAC;QACnB,MAAM,EAAE,CAAC,MAAM,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;IACxC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,MAAM;YAAE,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QACjD,MAAM,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QAC1C,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,SAAgB,cAAc,CAAC,GAAY,EAAE,IAAY;IACvD,MAAM,IAAI,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;IAC5B,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,QAAQ;YACX,OAAO,GAAG,IAAI,6BAA6B,CAAC;QAC9C,KAAK,QAAQ,CAAC;QACd,KAAK,OAAO;YACV,OAAO,GAAG,IAAI,qBAAqB,CAAC;QACtC,KAAK,SAAS;YACZ,OAAO,GAAG,IAAI,mBAAmB,CAAC;QACpC,KAAK,QAAQ;YACX,OAAO,GAAG,IAAI,kBAAkB,CAAC;QACnC,KAAK,OAAO;YACV,OAAO,GAAG,IAAI,qCAAqC,CAAC;QACtD,KAAK,cAAc;YACjB,OAAO,GAAG,IAAI,sBAAsB,CAAC;QACvC,KAAK,QAAQ;YACX,OAAO,GAAG,IAAI,2BAA2B,CAAC;QAC5C,KAAK,QAAQ,CAAC;QACd,KAAK,QAAQ;YACX,OAAO,GAAG,IAAI,uBAAuB,CAAC;QACxC;YACE,OAAO,GAAG,IAAI,KAAK,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,cAAc,IAAI,GAAG,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;IAClF,CAAC;AACH,CAAC"}

package/tools/agent-toolset/fs-util.mjs

@@ -7,10 +7,13 @@
 import { crypto, fs as nodefs, path } from "../../internal/node.mjs";
 import { ToolError } from "../../lib/tools/ToolError.mjs";
 const fs = nodefs.promises;
-/** Mode for directories the file tools create — not world-writable under a 0 umask. */
-export const DIR_CREATE_MODE = 0o755;
-/** Mode for files the file tools create. */
-export const FILE_CREATE_MODE = 0o644;
+/** Mode for directories the file tools create: owner-only under any umask, like the memory tool. */
+export const DIR_CREATE_MODE = 0o700;
+/**
+ * Mode for files the file tools create: owner-only, so other local users can't
+ * read what an agent wrote. A file that already exists keeps its own mode.
+ */
+export const FILE_CREATE_MODE = 0o600;
 /** True when `p` is `root` itself or lexically contained within it. */
 export function isWithin(root, p) {
     const rel = path.relative(root, p);
@@ -129,13 +132,20 @@ export async function confineToRoot(root, p, opts) {
  * Atomically write `content` to `targetPath`: write a sibling temp file, fsync
  * it, then rename over the target. The rename is atomic on most filesystems, so
  * a crash mid-write never leaves the target half-written.
+ *
+ * A new file is created {@link FILE_CREATE_MODE}; an existing one keeps its
+ * permission bits (the rename replaces the inode, so they are copied onto the
+ * temp file first) — an edit must not strip `+x` or sharing the owner chose.
  */
 export async function atomicWriteFile(targetPath, content) {
     const dir = path.dirname(targetPath);
     const tempPath = path.join(dir, `.tmp-${process.pid}-${crypto.randomUUID()}`);
+    const existingMode = await fs.stat(targetPath).then((st) => st.mode & 0o777, () => undefined);
     let handle;
     try {
         handle = await fs.open(tempPath, 'wx', FILE_CREATE_MODE);
+        if (existingMode !== undefined)
+            await handle.chmod(existingMode);
         await handle.writeFile(content, 'utf-8');
         await handle.sync();
         await handle.close();