@arnilo/prism-coding-agent 0.0.19 → 0.0.22

package/dist/index.d.ts

@@ -3,6 +3,8 @@ export type { AskUserDecisionAnswer, AskUserDecisionHandler, AskUserDecisionOpti
 export { ASK_USER_DECISION_RATIONALE_COUNT, ASK_USER_DECISION_SUSPEND_REASON, ASK_USER_DECISION_TOOL_NAME, askUserDecisionResumeSchema, createAskUserDecisionResumeValidator, createAskUserDecisionTool, DEFAULT_MAX_ASK_USER_DECISION_BULLET_BYTES, DEFAULT_MAX_ASK_USER_DECISION_CUSTOM_BYTES, DEFAULT_MAX_ASK_USER_DECISION_LABEL_BYTES, DEFAULT_MAX_ASK_USER_DECISION_OPTIONS, DEFAULT_MAX_ASK_USER_DECISION_QUESTION_BYTES, HARD_MAX_ASK_USER_DECISION_BULLET_BYTES, HARD_MAX_ASK_USER_DECISION_CUSTOM_BYTES, HARD_MAX_ASK_USER_DECISION_LABEL_BYTES, HARD_MAX_ASK_USER_DECISION_OPTIONS, HARD_MAX_ASK_USER_DECISION_QUESTION_BYTES, parseAskUserDecisionArgs, resolveAskUserDecisionAnswer, resolveAskUserDecisionLimits, suspendAskUserDecision, toAskUserDecisionSuspendData, validateAskUserDecisionAgentResume, validateAskUserDecisionResume, } from "./ask-user-decision.js";
 export type { CodingCheckToolOptions, NamedCheckDefinition } from "./checks.js";
 export { createCodingCheckTool } from "./checks.js";
+export type { DeleteOperations, DeleteToolOptions, MutationStat } from "./delete.js";
+export { createDeleteTool } from "./delete.js";
 export type { CodingArtifactKind, CodingArtifactRef, CodingCheckpointLimitOptions, CodingCheckpointMetadata, CodingCheckSummary, CodingFingerprints, CodingHandoffSummary, CodingTaskStatus, CodingTodoItem, ResolvedCodingCheckpointLimits, } from "./coding-checkpoint.js";
 export { assertCodingResumeAllowed, buildCodingCheckpointMetadata, CODING_CHECKPOINT_SCHEMA_VERSION, CODING_STATE_KEY, CodingCheckpointError, codingCheckpointStatePatch, codingPlanPathForTask, createCodingArtifactRef, createCodingPlanMarkdown, fingerprintJson, parseCodingPlanTodos, readCodingCheckpointFromState, readCodingPlanFile, resolveCodingCheckpointLimits, validateCodingCheckpointMetadata, verifyCodingArtifactBytes, writeCodingPlanFile, } from "./coding-checkpoint.js";
 export type { Edit, EditOperations, EditToolDetails, EditToolOptions } from "./edit.js";
@@ -13,11 +15,18 @@ export type { GitToolsOptions } from "./git-tools.js";
 export { createGitApplyTool, createGitBranchTool, createGitCommitTool, createGitDiffTool, createGitPrHandoffTool, createGitStatusTool, createGitTools, createGitWorktreeTool, } from "./git-tools.js";
 export type { CodingGoalVerifyApproval, RunCodingGoalVerifyOptions, } from "./goal-verify.js";
 export { CODING_GOAL_VERIFY_REVISION, CODING_GOAL_VERIFY_SUSPEND_REASON, CODING_GOAL_VERIFY_WORKFLOW_ID, CodingGoalVerifyError, createCodingGoalVerifyWorkflow, runCodingGoalVerify, } from "./goal-verify.js";
+export type { GlobToolOptions } from "./glob.js";
+export { createGlobTool } from "./glob.js";
+export { matchGlobPattern, validateGlobPattern } from "./glob-match.js";
 export type { ListToolOptions } from "./list.js";
 export { createRepoListTool } from "./list.js";
+export type { MoveOperations, MoveToolOptions } from "./move.js";
+export { createMoveTool } from "./move.js";
 export type { ReadOperations, ReadTextOptions, ReadTextResult, ReadToolOptions, TransformImage, TransformImageInput, } from "./read.js";
 export { createReadTool, DEFAULT_MAX_IMAGE_BYTES, detectSupportedImageMimeType, detectSupportedImageMimeTypeFromFile, } from "./read.js";
-export type { RepoEntryKind, RepoListEntry, RepositoryLimitOptions, RepositoryListRequest, RepositoryListResult, RepositoryOperations, RepositorySearchMatch, RepositorySearchRequest, RepositorySearchResult, ResolvedRepositoryLimits, } from "./repository.js";
+export type { ReadPathSet } from "./read-path-set.js";
+export { createReadPathSet } from "./read-path-set.js";
+export type { RepoEntryKind, RepoListEntry, RepositoryGlobRequest, RepositoryGlobResult, RepositoryLimitOptions, RepositoryListRequest, RepositoryListResult, RepositoryOperations, RepoSearchOutputMode, RepositorySearchMatch, RepositorySearchRequest, RepositorySearchResult, ResolvedRepositoryLimits, } from "./repository.js";
 export { compileSearchPattern, createLocalRepositoryOperations, DEFAULT_REPO_EXCLUDE, isBinaryBuffer, RepositoryError, resolveRepoPath, resolveRepositoryLimits, toRepoRelative, } from "./repository.js";
 export type { SearchToolOptions } from "./search.js";
 export { createRepoSearchTool } from "./search.js";
@@ -29,8 +38,11 @@ export { enforceExecutionPolicy } from "./execution-policy.js";
 export { withFileMutationQueue } from "./file-mutation-queue.js";
 export { DEFAULT_CHECK_TIMEOUT_MS, DEFAULT_GIT_TIMEOUT_MS, DEFAULT_MAX_BYTES, DEFAULT_MAX_CHECK_CONCURRENCY, DEFAULT_MAX_CHECK_DIAGNOSTIC_LINES, DEFAULT_MAX_CHECK_NAMES, DEFAULT_MAX_CHECK_OUTPUT_BYTES, DEFAULT_MAX_CHECK_SUMMARY_BYTES, DEFAULT_MAX_CODING_ARTIFACT_BYTES, DEFAULT_MAX_CODING_ARTIFACTS, DEFAULT_MAX_CODING_CHECKPOINT_BYTES, DEFAULT_MAX_EDIT_FILE_BYTES, DEFAULT_MAX_EDIT_INPUT_BYTES, DEFAULT_MAX_EDITS, DEFAULT_MAX_GIT_CHANGED_FILES, DEFAULT_MAX_GIT_DIFF_LINES, DEFAULT_MAX_GIT_MESSAGE_BYTES, DEFAULT_MAX_GIT_OUTPUT_BYTES, DEFAULT_MAX_GIT_PATCH_BYTES, DEFAULT_MAX_GIT_PATHS, DEFAULT_MAX_GIT_REF_BYTES, DEFAULT_MAX_GIT_WORKTREES, DEFAULT_MAX_LINES, DEFAULT_MAX_PLAN_BYTES, DEFAULT_MAX_PR_COMMITS, DEFAULT_MAX_PR_HANDOFF_BYTES, DEFAULT_MAX_REPO_CONCURRENCY, DEFAULT_MAX_REPO_DEPTH, DEFAULT_MAX_REPO_ENTRIES, DEFAULT_MAX_REPO_FILES, DEFAULT_MAX_REPO_RESULTS, DEFAULT_MAX_SEARCH_CONTEXT_LINES, DEFAULT_MAX_SEARCH_FILE_BYTES, DEFAULT_MAX_SEARCH_LINE_BYTES, DEFAULT_MAX_SEARCH_MATCHES, DEFAULT_MAX_SEARCH_PATTERN_BYTES, DEFAULT_MAX_SEARCH_SCAN_BYTES, DEFAULT_MAX_SEARCH_TIME_MS, DEFAULT_MAX_TEXT_SCAN_BYTES, DEFAULT_MAX_TODO_TEXT_BYTES, DEFAULT_MAX_TODOS, DEFAULT_MAX_TOTAL_OUTPUT_BYTES, DEFAULT_MAX_WRITE_BYTES, DEFAULT_SHELL_TIMEOUT_SECONDS, HARD_CHECK_TIMEOUT_MS, HARD_GIT_TIMEOUT_MS, HARD_MAX_BYTES, HARD_MAX_CHECK_CONCURRENCY, HARD_MAX_CHECK_DIAGNOSTIC_LINES, HARD_MAX_CHECK_NAMES, HARD_MAX_CHECK_OUTPUT_BYTES, HARD_MAX_CHECK_SUMMARY_BYTES, HARD_MAX_CODING_ARTIFACT_BYTES, HARD_MAX_CODING_ARTIFACTS, HARD_MAX_CODING_CHECKPOINT_BYTES, HARD_MAX_EDIT_FILE_BYTES, HARD_MAX_EDIT_INPUT_BYTES, HARD_MAX_EDITS, HARD_MAX_GIT_CHANGED_FILES, HARD_MAX_GIT_DIFF_LINES, HARD_MAX_GIT_MESSAGE_BYTES, HARD_MAX_GIT_OUTPUT_BYTES, HARD_MAX_GIT_PATCH_BYTES, HARD_MAX_GIT_PATHS, HARD_MAX_GIT_REF_BYTES, HARD_MAX_GIT_WORKTREES, HARD_MAX_IMAGE_BYTES, HARD_MAX_LINES, HARD_MAX_PLAN_BYTES, HARD_MAX_PR_COMMITS, HARD_MAX_PR_HANDOFF_BYTES, HARD_MAX_REPO_CONCURRENCY, HARD_MAX_REPO_DEPTH, HARD_MAX_REPO_ENTRIES, HARD_MAX_REPO_FILES, HARD_MAX_REPO_RESULTS, HARD_MAX_SEARCH_CONTEXT_LINES, HARD_MAX_SEARCH_FILE_BYTES, HARD_MAX_SEARCH_LINE_BYTES, HARD_MAX_SEARCH_MATCHES, HARD_MAX_SEARCH_PATTERN_BYTES, HARD_MAX_SEARCH_SCAN_BYTES, HARD_MAX_SEARCH_TIME_MS, HARD_MAX_TEXT_SCAN_BYTES, HARD_MAX_TODO_TEXT_BYTES, HARD_MAX_TODOS, HARD_MAX_TOTAL_OUTPUT_BYTES, HARD_MAX_WRITE_BYTES, HARD_SHELL_TIMEOUT_SECONDS, } from "./limits.js";
 import type { ExecutionPolicy, ToolDefinition } from "@arnilo/prism";
+import type { DeleteToolOptions } from "./delete.js";
 import type { EditToolOptions } from "./edit.js";
+import type { GlobToolOptions } from "./glob.js";
 import type { ListToolOptions } from "./list.js";
+import type { MoveToolOptions } from "./move.js";
 import type { ReadToolOptions } from "./read.js";
 import type { RepositoryLimitOptions, RepositoryOperations } from "./repository.js";
 import type { SearchToolOptions } from "./search.js";
@@ -44,24 +56,27 @@ export interface ToolsOptions {
     read?: ReadToolOptions;
     write?: WriteToolOptions;
     edit?: EditToolOptions;
+    delete?: DeleteToolOptions;
+    move?: MoveToolOptions;
     list?: ListToolOptions;
     search?: SearchToolOptions;
+    glob?: GlobToolOptions;
     /**
-     * Shared repository limits/backends for `repo_list` / `repo_search`.
-     * Per-tool `list` / `search` options override these when both are set.
+     * Shared repository limits/backends for `repo_list` / `repo_search` / `glob`.
+     * Per-tool `list` / `search` / `glob` options override these when both are set.
      */
     repository?: RepositoryLimitOptions & {
         operations?: RepositoryOperations;
     };
 }
 /**
- * Full coding tool set: `shell`, `read`, `write`, `edit`, `repo_list`, `repo_search`.
+ * Full coding tool set: `shell`, `read`, `write`, `edit`, `repo_list`, `repo_search`, `glob`, `delete`, `move`.
  * Opt-in tools (`createGitTools`, `createAskUserDecisionTool`, `createCodingCheckTool`)
  * stay out — hosts register them explicitly.
  */
 export declare function createCodingTools(cwd: string, options?: ToolsOptions): readonly ToolDefinition[];
 /**
- * Read-only subset: `read`, `repo_list`, `repo_search`.
+ * Read-only subset: `read`, `repo_list`, `repo_search`, `glob`.
  * Deliberate 0.0.9 expansion from the previous `read`-only set.
  */
 export declare function createReadOnlyTools(cwd: string, options?: ToolsOptions): readonly ToolDefinition[];

package/dist/index.js

@@ -7,13 +7,18 @@
 export { createDirectoryArtifactWriter, createTempArtifactWriter, sha256Hex } from "./artifacts.js";
 export { ASK_USER_DECISION_RATIONALE_COUNT, ASK_USER_DECISION_SUSPEND_REASON, ASK_USER_DECISION_TOOL_NAME, askUserDecisionResumeSchema, createAskUserDecisionResumeValidator, createAskUserDecisionTool, DEFAULT_MAX_ASK_USER_DECISION_BULLET_BYTES, DEFAULT_MAX_ASK_USER_DECISION_CUSTOM_BYTES, DEFAULT_MAX_ASK_USER_DECISION_LABEL_BYTES, DEFAULT_MAX_ASK_USER_DECISION_OPTIONS, DEFAULT_MAX_ASK_USER_DECISION_QUESTION_BYTES, HARD_MAX_ASK_USER_DECISION_BULLET_BYTES, HARD_MAX_ASK_USER_DECISION_CUSTOM_BYTES, HARD_MAX_ASK_USER_DECISION_LABEL_BYTES, HARD_MAX_ASK_USER_DECISION_OPTIONS, HARD_MAX_ASK_USER_DECISION_QUESTION_BYTES, parseAskUserDecisionArgs, resolveAskUserDecisionAnswer, resolveAskUserDecisionLimits, suspendAskUserDecision, toAskUserDecisionSuspendData, validateAskUserDecisionAgentResume, validateAskUserDecisionResume, } from "./ask-user-decision.js";
 export { createCodingCheckTool } from "./checks.js";
+export { createDeleteTool } from "./delete.js";
 export { assertCodingResumeAllowed, buildCodingCheckpointMetadata, CODING_CHECKPOINT_SCHEMA_VERSION, CODING_STATE_KEY, CodingCheckpointError, codingCheckpointStatePatch, codingPlanPathForTask, createCodingArtifactRef, createCodingPlanMarkdown, fingerprintJson, parseCodingPlanTodos, readCodingCheckpointFromState, readCodingPlanFile, resolveCodingCheckpointLimits, validateCodingCheckpointMetadata, verifyCodingArtifactBytes, writeCodingPlanFile, } from "./coding-checkpoint.js";
 export { createEditTool } from "./edit.js";
 export { createBoundGitRunner, createGitOperations, GitError, parsePorcelainV2, resolveGitLimits, runGitCli, SAFE_GIT_CONFIG_ARGS, SAFE_GIT_ENV, } from "./git.js";
 export { createGitApplyTool, createGitBranchTool, createGitCommitTool, createGitDiffTool, createGitPrHandoffTool, createGitStatusTool, createGitTools, createGitWorktreeTool, } from "./git-tools.js";
 export { CODING_GOAL_VERIFY_REVISION, CODING_GOAL_VERIFY_SUSPEND_REASON, CODING_GOAL_VERIFY_WORKFLOW_ID, CodingGoalVerifyError, createCodingGoalVerifyWorkflow, runCodingGoalVerify, } from "./goal-verify.js";
+export { createGlobTool } from "./glob.js";
+export { matchGlobPattern, validateGlobPattern } from "./glob-match.js";
 export { createRepoListTool } from "./list.js";
+export { createMoveTool } from "./move.js";
 export { createReadTool, DEFAULT_MAX_IMAGE_BYTES, detectSupportedImageMimeType, detectSupportedImageMimeTypeFromFile, } from "./read.js";
+export { createReadPathSet } from "./read-path-set.js";
 export { compileSearchPattern, createLocalRepositoryOperations, DEFAULT_REPO_EXCLUDE, isBinaryBuffer, RepositoryError, resolveRepoPath, resolveRepositoryLimits, toRepoRelative, } from "./repository.js";
 export { createRepoSearchTool } from "./search.js";
 export { createLocalBashOperations, createShellTool, getShellConfig, killProcessTree, waitForChildProcess, } from "./shell.js";
@@ -22,8 +27,11 @@ export { createWriteTool } from "./write.js";
 export { enforceExecutionPolicy } from "./execution-policy.js";
 export { withFileMutationQueue } from "./file-mutation-queue.js";
 export { DEFAULT_CHECK_TIMEOUT_MS, DEFAULT_GIT_TIMEOUT_MS, DEFAULT_MAX_BYTES, DEFAULT_MAX_CHECK_CONCURRENCY, DEFAULT_MAX_CHECK_DIAGNOSTIC_LINES, DEFAULT_MAX_CHECK_NAMES, DEFAULT_MAX_CHECK_OUTPUT_BYTES, DEFAULT_MAX_CHECK_SUMMARY_BYTES, DEFAULT_MAX_CODING_ARTIFACT_BYTES, DEFAULT_MAX_CODING_ARTIFACTS, DEFAULT_MAX_CODING_CHECKPOINT_BYTES, DEFAULT_MAX_EDIT_FILE_BYTES, DEFAULT_MAX_EDIT_INPUT_BYTES, DEFAULT_MAX_EDITS, DEFAULT_MAX_GIT_CHANGED_FILES, DEFAULT_MAX_GIT_DIFF_LINES, DEFAULT_MAX_GIT_MESSAGE_BYTES, DEFAULT_MAX_GIT_OUTPUT_BYTES, DEFAULT_MAX_GIT_PATCH_BYTES, DEFAULT_MAX_GIT_PATHS, DEFAULT_MAX_GIT_REF_BYTES, DEFAULT_MAX_GIT_WORKTREES, DEFAULT_MAX_LINES, DEFAULT_MAX_PLAN_BYTES, DEFAULT_MAX_PR_COMMITS, DEFAULT_MAX_PR_HANDOFF_BYTES, DEFAULT_MAX_REPO_CONCURRENCY, DEFAULT_MAX_REPO_DEPTH, DEFAULT_MAX_REPO_ENTRIES, DEFAULT_MAX_REPO_FILES, DEFAULT_MAX_REPO_RESULTS, DEFAULT_MAX_SEARCH_CONTEXT_LINES, DEFAULT_MAX_SEARCH_FILE_BYTES, DEFAULT_MAX_SEARCH_LINE_BYTES, DEFAULT_MAX_SEARCH_MATCHES, DEFAULT_MAX_SEARCH_PATTERN_BYTES, DEFAULT_MAX_SEARCH_SCAN_BYTES, DEFAULT_MAX_SEARCH_TIME_MS, DEFAULT_MAX_TEXT_SCAN_BYTES, DEFAULT_MAX_TODO_TEXT_BYTES, DEFAULT_MAX_TODOS, DEFAULT_MAX_TOTAL_OUTPUT_BYTES, DEFAULT_MAX_WRITE_BYTES, DEFAULT_SHELL_TIMEOUT_SECONDS, HARD_CHECK_TIMEOUT_MS, HARD_GIT_TIMEOUT_MS, HARD_MAX_BYTES, HARD_MAX_CHECK_CONCURRENCY, HARD_MAX_CHECK_DIAGNOSTIC_LINES, HARD_MAX_CHECK_NAMES, HARD_MAX_CHECK_OUTPUT_BYTES, HARD_MAX_CHECK_SUMMARY_BYTES, HARD_MAX_CODING_ARTIFACT_BYTES, HARD_MAX_CODING_ARTIFACTS, HARD_MAX_CODING_CHECKPOINT_BYTES, HARD_MAX_EDIT_FILE_BYTES, HARD_MAX_EDIT_INPUT_BYTES, HARD_MAX_EDITS, HARD_MAX_GIT_CHANGED_FILES, HARD_MAX_GIT_DIFF_LINES, HARD_MAX_GIT_MESSAGE_BYTES, HARD_MAX_GIT_OUTPUT_BYTES, HARD_MAX_GIT_PATCH_BYTES, HARD_MAX_GIT_PATHS, HARD_MAX_GIT_REF_BYTES, HARD_MAX_GIT_WORKTREES, HARD_MAX_IMAGE_BYTES, HARD_MAX_LINES, HARD_MAX_PLAN_BYTES, HARD_MAX_PR_COMMITS, HARD_MAX_PR_HANDOFF_BYTES, HARD_MAX_REPO_CONCURRENCY, HARD_MAX_REPO_DEPTH, HARD_MAX_REPO_ENTRIES, HARD_MAX_REPO_FILES, HARD_MAX_REPO_RESULTS, HARD_MAX_SEARCH_CONTEXT_LINES, HARD_MAX_SEARCH_FILE_BYTES, HARD_MAX_SEARCH_LINE_BYTES, HARD_MAX_SEARCH_MATCHES, HARD_MAX_SEARCH_PATTERN_BYTES, HARD_MAX_SEARCH_SCAN_BYTES, HARD_MAX_SEARCH_TIME_MS, HARD_MAX_TEXT_SCAN_BYTES, HARD_MAX_TODO_TEXT_BYTES, HARD_MAX_TODOS, HARD_MAX_TOTAL_OUTPUT_BYTES, HARD_MAX_WRITE_BYTES, HARD_SHELL_TIMEOUT_SECONDS, } from "./limits.js";
+import { createDeleteTool } from "./delete.js";
 import { createEditTool } from "./edit.js";
+import { createGlobTool } from "./glob.js";
 import { createRepoListTool } from "./list.js";
+import { createMoveTool } from "./move.js";
 import { createReadTool } from "./read.js";
 import { createRepoSearchTool } from "./search.js";
 import { createShellTool } from "./shell.js";
@@ -44,7 +52,7 @@ function withRepositoryDefaults(toolOptions, shared) {
     };
 }
 /**
- * Full coding tool set: `shell`, `read`, `write`, `edit`, `repo_list`, `repo_search`.
+ * Full coding tool set: `shell`, `read`, `write`, `edit`, `repo_list`, `repo_search`, `glob`, `delete`, `move`.
  * Opt-in tools (`createGitTools`, `createAskUserDecisionTool`, `createCodingCheckTool`)
  * stay out — hosts register them explicitly.
  */
@@ -52,6 +60,7 @@ export function createCodingTools(cwd, options) {
     const policy = options?.executionPolicy;
     const listOpts = withRepositoryDefaults(options?.list, options?.repository);
     const searchOpts = withRepositoryDefaults(options?.search, options?.repository);
+    const globOpts = withRepositoryDefaults(options?.glob, options?.repository);
     return [
         createShellTool(cwd, withSharedExecutionPolicy(options?.shell, policy)),
         createReadTool(cwd, withSharedExecutionPolicy(options?.read, policy)),
@@ -59,20 +68,25 @@ export function createCodingTools(cwd, options) {
         createEditTool(cwd, withSharedExecutionPolicy(options?.edit, policy)),
         createRepoListTool(cwd, withSharedExecutionPolicy(listOpts, policy)),
         createRepoSearchTool(cwd, withSharedExecutionPolicy(searchOpts, policy)),
+        createGlobTool(cwd, withSharedExecutionPolicy(globOpts, policy)),
+        createDeleteTool(cwd, withSharedExecutionPolicy(options?.delete, policy)),
+        createMoveTool(cwd, withSharedExecutionPolicy(options?.move, policy)),
     ];
 }
 /**
- * Read-only subset: `read`, `repo_list`, `repo_search`.
+ * Read-only subset: `read`, `repo_list`, `repo_search`, `glob`.
  * Deliberate 0.0.9 expansion from the previous `read`-only set.
  */
 export function createReadOnlyTools(cwd, options) {
     const policy = options?.executionPolicy;
     const listOpts = withRepositoryDefaults(options?.list, options?.repository);
     const searchOpts = withRepositoryDefaults(options?.search, options?.repository);
+    const globOpts = withRepositoryDefaults(options?.glob, options?.repository);
     return [
         createReadTool(cwd, withSharedExecutionPolicy(options?.read, policy)),
         createRepoListTool(cwd, withSharedExecutionPolicy(listOpts, policy)),
         createRepoSearchTool(cwd, withSharedExecutionPolicy(searchOpts, policy)),
+        createGlobTool(cwd, withSharedExecutionPolicy(globOpts, policy)),
     ];
 }
 /** Every tool this package provides — identical to {@link createCodingTools}. */

package/dist/list.js

@@ -33,7 +33,7 @@ export function createRepoListTool(cwd, options) {
     const ops = options?.operations ?? createLocalRepositoryOperations(limits);
     return {
         name: "repo_list",
-        description: `List repository entries under the workspace with deterministic relative paths. Skips hidden names and excluded basenames (default: ${limits.exclude.join(", ")}) unless overridden. Does not follow symlinks. Results paginate with offset/maxResults (default ${limits.maxResults}). Depth default ${limits.maxDepth}.`,
+        description: `List repository entries under the workspace with deterministic relative paths. Prefer glob when you already know a filename pattern (*.ts, **/src/**). Prefer repo_search to find text inside files. Skips hidden names and excluded basenames (default: ${limits.exclude.join(", ")}) unless overridden. Does not follow symlinks. Results paginate with offset/maxResults (default ${limits.maxResults}). Depth default ${limits.maxDepth}.`,
         parameters: {
             type: "object",
             properties: {

package/dist/move.d.ts

@@ -0,0 +1,21 @@
+import type { ExecutionPolicy, ToolDefinition } from "@arnilo/prism";
+import type { MutationStat } from "./delete.js";
+export interface MoveOperations {
+    lstat: (absolutePath: string, options?: {
+        signal?: AbortSignal;
+    }) => Promise<MutationStat>;
+    rename: (from: string, to: string, options?: {
+        signal?: AbortSignal;
+    }) => Promise<void>;
+    unlink: (absolutePath: string, options?: {
+        signal?: AbortSignal;
+    }) => Promise<void>;
+    access: (absolutePath: string, options?: {
+        signal?: AbortSignal;
+    }) => Promise<void>;
+}
+export interface MoveToolOptions {
+    executionPolicy?: ExecutionPolicy;
+    operations?: MoveOperations;
+}
+export declare function createMoveTool(cwd: string, options?: MoveToolOptions): ToolDefinition;

package/dist/move.js

@@ -0,0 +1,147 @@
+import { access, constants } from "node:fs";
+import { dirname } from "node:path";
+import { lstat, rename, unlink } from "node:fs/promises";
+import { promisify } from "node:util";
+import { enforceExecutionPolicy } from "./execution-policy.js";
+import { withFileMutationQueue } from "./file-mutation-queue.js";
+import { resolveContainedMutationPath } from "./mutation-path.js";
+const accessAsync = promisify(access);
+const defaultMoveOperations = {
+    lstat: async (path) => {
+        const st = await lstat(path);
+        return {
+            isFile: () => st.isFile(),
+            isDirectory: () => st.isDirectory(),
+            isSymbolicLink: () => st.isSymbolicLink(),
+            size: st.size,
+        };
+    },
+    rename: (from, to) => rename(from, to).then(() => { }),
+    unlink: (path) => unlink(path).then(() => { }),
+    access: (path) => accessAsync(path, constants.F_OK),
+};
+function errorResult(toolCallId, message) {
+    return {
+        toolCallId,
+        name: "move",
+        content: [{ type: "text", text: message }],
+        error: { message },
+    };
+}
+async function withDualFileMutationQueue(pathA, pathB, fn) {
+    const [first, second] = pathA <= pathB ? [pathA, pathB] : [pathB, pathA];
+    return withFileMutationQueue(first, () => withFileMutationQueue(second, fn));
+}
+export function createMoveTool(cwd, options) {
+    const ops = options?.operations ?? defaultMoveOperations;
+    return {
+        name: "move",
+        description: "High-risk: move or rename a file within the workspace. Set overwrite=true to replace an existing destination file only (directories/non-empty dest rejected). Does not create parent directories. No trash — host undo is not automatic.",
+        parameters: {
+            type: "object",
+            properties: {
+                from: { type: "string", description: "Source path (relative or absolute)" },
+                to: { type: "string", description: "Destination path (relative or absolute)" },
+                overwrite: {
+                    type: "boolean",
+                    description: "Replace an existing destination file when true (default false).",
+                },
+            },
+            required: ["from", "to"],
+            additionalProperties: false,
+        },
+        async execute(args, context) {
+            const toolCallId = context.toolCallId;
+            const from = typeof args.from === "string" ? args.from : "";
+            const to = typeof args.to === "string" ? args.to : "";
+            const overwrite = args.overwrite === true;
+            if (from.length === 0)
+                return errorResult(toolCallId, "from is required and must be a non-empty string.");
+            if (to.length === 0)
+                return errorResult(toolCallId, "to is required and must be a non-empty string.");
+            try {
+                let fromPath;
+                try {
+                    fromPath = await resolveContainedMutationPath(cwd, from);
+                }
+                catch (error) {
+                    const err = error;
+                    if (err.code === "ENOENT")
+                        return errorResult(toolCallId, `Source does not exist: ${from}`);
+                    throw error;
+                }
+                const toPath = await resolveContainedMutationPath(cwd, to, { allowMissing: true });
+                const policyCheck = await enforceExecutionPolicy(options?.executionPolicy, {
+                    kind: "move",
+                    operation: "move",
+                    paths: [fromPath, toPath],
+                    risk: "high",
+                    metadata: { overwrite, sessionId: context.sessionId, runId: context.runId, signal: context.signal },
+                }, toolCallId, "move");
+                if (!policyCheck.allowed)
+                    return policyCheck.result;
+                const allowedFrom = policyCheck.action.paths?.[0] ?? fromPath;
+                const allowedTo = policyCheck.action.paths?.[1] ?? toPath;
+                return await withDualFileMutationQueue(allowedFrom, allowedTo, async () => {
+                    if (context.signal?.aborted)
+                        return errorResult(toolCallId, "Operation aborted");
+                    let fromStat;
+                    try {
+                        fromStat = await ops.lstat(allowedFrom, { signal: context.signal });
+                    }
+                    catch (error) {
+                        const err = error;
+                        if (err.code === "ENOENT")
+                            return errorResult(toolCallId, `Source does not exist: ${from}`);
+                        const message = error instanceof Error ? error.message : String(error);
+                        return errorResult(toolCallId, message);
+                    }
+                    const destParent = dirname(allowedTo);
+                    try {
+                        await ops.access(destParent, { signal: context.signal });
+                    }
+                    catch {
+                        return errorResult(toolCallId, `Destination parent directory does not exist: ${destParent}`);
+                    }
+                    let destStat;
+                    try {
+                        destStat = await ops.lstat(allowedTo, { signal: context.signal });
+                    }
+                    catch (error) {
+                        const err = error;
+                        if (err.code !== "ENOENT") {
+                            const message = error instanceof Error ? error.message : String(error);
+                            return errorResult(toolCallId, message);
+                        }
+                    }
+                    if (destStat) {
+                        if (!overwrite)
+                            return errorResult(toolCallId, `Destination already exists: ${to}. Pass overwrite=true to replace.`);
+                        if (destStat.isDirectory())
+                            return errorResult(toolCallId, `Destination is a directory: ${to}`);
+                        await ops.unlink(allowedTo, { signal: context.signal });
+                    }
+                    if (context.signal?.aborted)
+                        return errorResult(toolCallId, "Operation aborted");
+                    await ops.rename(allowedFrom, allowedTo, { signal: context.signal });
+                    return {
+                        toolCallId,
+                        name: "move",
+                        content: [{ type: "text", text: `Successfully moved ${from} to ${allowedTo}` }],
+                        metadata: {
+                            from: allowedFrom,
+                            to: allowedTo,
+                            bytes: fromStat.isFile() ? fromStat.size : undefined,
+                            overwrite,
+                        },
+                    };
+                });
+            }
+            catch (error) {
+                const message = error instanceof Error ? error.message : String(error);
+                return errorResult(toolCallId, message);
+            }
+        },
+    };
+}
+//# sourceMappingURL=move.js.map

package/dist/mutation-path.d.ts

@@ -0,0 +1,7 @@
+/**
+ * Resolve a mutation target under `root`. Symlink paths are kept as the link
+ * location (not followed). Non-symlink existing paths are realpath'd.
+ */
+export declare function resolveContainedMutationPath(root: string, inputPath: string, options?: {
+    allowMissing?: boolean;
+}): Promise<string>;

package/dist/mutation-path.js

@@ -0,0 +1,51 @@
+import { lstat, realpath } from "node:fs/promises";
+import { isAbsolute, relative, resolve } from "node:path";
+import { resolveToCwd } from "./path-utils.js";
+function isPathInsideRoot(root, target) {
+    const from = resolve(root);
+    const to = resolve(target);
+    if (to === from)
+        return true;
+    const rel = relative(from, to);
+    return rel !== "" && !rel.startsWith("..") && !isAbsolute(rel);
+}
+function isMissingPathError(error) {
+    return (typeof error === "object" &&
+        error !== null &&
+        "code" in error &&
+        (error.code === "ENOENT" || error.code === "ENOTDIR"));
+}
+/**
+ * Resolve a mutation target under `root`. Symlink paths are kept as the link
+ * location (not followed). Non-symlink existing paths are realpath'd.
+ */
+export async function resolveContainedMutationPath(root, inputPath, options) {
+    const rootResolved = resolve(root);
+    let rootReal;
+    try {
+        rootReal = await realpath(rootResolved);
+    }
+    catch {
+        throw new Error(`workspace root is missing or unreadable: ${rootResolved}`);
+    }
+    const candidate = resolveToCwd(inputPath, rootReal);
+    if (!isPathInsideRoot(rootReal, candidate)) {
+        throw new Error(`path escapes workspace root: ${inputPath}`);
+    }
+    try {
+        const st = await lstat(candidate);
+        if (st.isSymbolicLink())
+            return candidate;
+        const real = await realpath(candidate);
+        if (!isPathInsideRoot(rootReal, real)) {
+            throw new Error(`path resolves outside workspace root: ${inputPath}`);
+        }
+        return real;
+    }
+    catch (error) {
+        if (options?.allowMissing && isMissingPathError(error))
+            return candidate;
+        throw error;
+    }
+}
+//# sourceMappingURL=mutation-path.js.map

package/dist/read-path-set.d.ts

@@ -0,0 +1,14 @@
+/** Session-scoped paths successfully read via the read tool (host-owned, not checkpointed). */
+export interface ReadPathSet {
+    has(path: string): boolean;
+    add(path: string): void;
+    list(): readonly string[];
+    clear(): void;
+}
+export declare function createReadPathSet(): ReadPathSet;
+export interface ReadBeforeWriteOptions {
+    requireReadBeforeWrite?: boolean;
+    readPathSet?: ReadPathSet;
+}
+/** Returns refusal message, or null when the mutation may proceed. */
+export declare function refuseReadBeforeWrite(operation: "write" | "edit", displayPath: string, absolutePath: string, options: ReadBeforeWriteOptions | undefined, force: boolean): string | null;

package/dist/read-path-set.js

@@ -0,0 +1,26 @@
+export function createReadPathSet() {
+    const paths = new Set();
+    return {
+        has(path) {
+            return paths.has(path);
+        },
+        add(path) {
+            paths.add(path);
+        },
+        list() {
+            return [...paths];
+        },
+        clear() {
+            paths.clear();
+        },
+    };
+}
+/** Returns refusal message, or null when the mutation may proceed. */
+export function refuseReadBeforeWrite(operation, displayPath, absolutePath, options, force) {
+    if (!options?.requireReadBeforeWrite || force)
+        return null;
+    if (options.readPathSet?.has(absolutePath))
+        return null;
+    return `Refusing ${operation} to ${displayPath}: not read in this session. Read first or pass force=true.`;
+}
+//# sourceMappingURL=read-path-set.js.map

package/dist/read.d.ts

@@ -21,6 +21,7 @@
  */
 import { Buffer } from "node:buffer";
 import type { ExecutionPolicy, ToolDefinition } from "@arnilo/prism";
+import type { ReadPathSet } from "./read-path-set.js";
 import { type TruncationResult } from "./truncate.js";
 /** Detect a supported image MIME type from a buffer's leading bytes. Returns null for non-images. */
 export declare function detectSupportedImageMimeType(buffer: Buffer): string | null;
@@ -100,6 +101,8 @@ export interface ReadToolOptions {
     maxLines?: number;
     /** Max bytes kept from the head (default 50KB). */
     maxBytes?: number;
+    /** When set, successful reads record the resolved absolute path for read-before-write guards. */
+    readPathSet?: ReadPathSet;
 }
 export declare function createReadTool(cwd: string, options?: ReadToolOptions): ToolDefinition;
 /** Re-exported for hosts building custom read tools or analyzing truncation metadata. */

package/dist/read.js

@@ -307,7 +307,7 @@ export function createReadTool(cwd, options) {
     const maxScanBytes = validateCodingLimit("maxScanBytes", options?.maxScanBytes ?? DEFAULT_MAX_TEXT_SCAN_BYTES, HARD_MAX_TEXT_SCAN_BYTES);
     return {
         name: "read",
-        description: `Read the contents of a file. Supports text files and images (jpg, png, gif, webp, bmp); images are returned as image content. For text files, output is truncated to ${maxLines} lines or ${maxBytes / 1024}KB (whichever is hit first). Use offset/limit for large files. When you need the full file, continue with offset until complete.`,
+        description: `Read the contents of a file. Supports text files and images (jpg, png, gif, webp, bmp); images are returned as image content. For text files, output is truncated to ${maxLines} lines or ${maxBytes / 1024}KB (whichever is hit first). When truncated, continue with the suggested offset until complete. Prefer repo_search to find text across many files.`,
         parameters: {
             type: "object",
             properties: {
@@ -352,6 +352,7 @@ export function createReadTool(cwd, options) {
                         autoResizeImages: options?.autoResizeImages,
                         signal: context.signal,
                     });
+                    options?.readPathSet?.add(allowedPath);
                     return {
                         toolCallId,
                         name: "read",
@@ -406,6 +407,7 @@ export function createReadTool(cwd, options) {
                         outputText += `\n\n[Showing lines ${page.startLine}-${endLine}${page.truncatedBy === "bytes" ? ` (${formatSize(maxBytes)} limit)` : ""}. Use offset=${page.nextOffset} to continue.]`;
                     }
                 }
+                options?.readPathSet?.add(allowedPath);
                 return {
                     toolCallId,
                     name: "read",

package/dist/repository.d.ts

@@ -20,6 +20,16 @@ export interface RepositoryListResult {
     readonly nextOffset?: number;
     readonly offset: number;
 }
+export interface RepositoryGlobResult {
+    readonly paths: readonly string[];
+    readonly truncated: boolean;
+    readonly truncatedBy: RepositoryListResult["truncatedBy"];
+    readonly scannedEntries: number;
+    readonly scannedFiles: number;
+    readonly nextOffset?: number;
+    readonly offset: number;
+}
+export type RepoSearchOutputMode = "content" | "files_with_matches" | "count";
 export interface RepositorySearchMatch {
     readonly path: string;
     readonly line: number;
@@ -86,6 +96,7 @@ export interface RepositorySearchRequest {
     readonly query: string;
     readonly path?: string;
     readonly mode?: "literal";
+    readonly outputMode?: RepoSearchOutputMode;
     readonly caseSensitive?: boolean;
     readonly includeHidden?: boolean;
     readonly exclude?: readonly string[];
@@ -94,9 +105,22 @@ export interface RepositorySearchRequest {
     readonly signal?: AbortSignal;
     readonly deadlineMs?: number;
 }
+export interface RepositoryGlobRequest {
+    readonly root: string;
+    readonly pattern: string;
+    readonly path?: string;
+    readonly includeHidden?: boolean;
+    readonly exclude?: readonly string[];
+    readonly maxDepth?: number;
+    readonly maxResults?: number;
+    readonly offset?: number;
+    readonly signal?: AbortSignal;
+    readonly deadlineMs?: number;
+}
 export interface RepositoryOperations {
     list(request: RepositoryListRequest): Promise<RepositoryListResult>;
     search(request: RepositorySearchRequest): Promise<RepositorySearchResult>;
+    glob(request: RepositoryGlobRequest): Promise<RepositoryGlobResult>;
 }
 export declare const DEFAULT_REPO_EXCLUDE: readonly string[];
 export declare class RepositoryError extends Error {