@dexto/tools-filesystem 1.5.3 → 1.5.4

package/dist/filesystem-service.cjs

@@ -66,6 +66,13 @@ class FileSystemService {
   getBackupDir() {
     return this.config.backupPath || (0, import_core.getDextoPath)("backups");
   }
+  /**
+   * Get the effective working directory for file operations.
+   * Falls back to process.cwd() if not configured.
+   */
+  getWorkingDirectory() {
+    return this.config.workingDirectory || process.cwd();
+  }
   /**
    * Initialize the service.
    * Safe to call multiple times - subsequent calls return the same promise.

package/dist/filesystem-service.d.cts

@@ -36,6 +36,11 @@ declare class FileSystemService {
      * TODO: Migrate to explicit configuration via CLI enrichment layer (per-agent paths)
      */
     private getBackupDir;
+    /**
+     * Get the effective working directory for file operations.
+     * Falls back to process.cwd() if not configured.
+     */
+    getWorkingDirectory(): string;
     /**
      * Initialize the service.
      * Safe to call multiple times - subsequent calls return the same promise.

package/dist/filesystem-service.d.ts

@@ -36,6 +36,11 @@ declare class FileSystemService {
      * TODO: Migrate to explicit configuration via CLI enrichment layer (per-agent paths)
      */
     private getBackupDir;
+    /**
+     * Get the effective working directory for file operations.
+     * Falls back to process.cwd() if not configured.
+     */
+    getWorkingDirectory(): string;
     /**
      * Initialize the service.
      * Safe to call multiple times - subsequent calls return the same promise.

package/dist/filesystem-service.js

@@ -33,6 +33,13 @@ class FileSystemService {
   getBackupDir() {
     return this.config.backupPath || getDextoPath("backups");
   }
+  /**
+   * Get the effective working directory for file operations.
+   * Falls back to process.cwd() if not configured.
+   */
+  getWorkingDirectory() {
+    return this.config.workingDirectory || process.cwd();
+  }
   /**
    * Initialize the service.
    * Safe to call multiple times - subsequent calls return the same promise.

package/dist/glob-files-tool.cjs

@@ -1,7 +1,9 @@
 "use strict";
+var __create = Object.create;
 var __defProp = Object.defineProperty;
 var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
 var __getOwnPropNames = Object.getOwnPropertyNames;
+var __getProtoOf = Object.getPrototypeOf;
 var __hasOwnProp = Object.prototype.hasOwnProperty;
 var __export = (target, all) => {
   for (var name in all)
@@ -15,27 +17,78 @@ var __copyProps = (to, from, except, desc) => {
   }
   return to;
 };
+var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(
+  // If the importer is in node compatibility mode or this is not an ESM
+  // file that has been converted to a CommonJS file using a Babel-
+  // compatible transform (i.e. "__esModule" has not been set), then set
+  // "default" to the CommonJS "module.exports" for node compatibility.
+  isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target,
+  mod
+));
 var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
 var glob_files_tool_exports = {};
 __export(glob_files_tool_exports, {
   createGlobFilesTool: () => createGlobFilesTool
 });
 module.exports = __toCommonJS(glob_files_tool_exports);
+var path = __toESM(require("node:path"), 1);
 var import_zod = require("zod");
+var import_core = require("@dexto/core");
 const GlobFilesInputSchema = import_zod.z.object({
   pattern: import_zod.z.string().describe('Glob pattern to match files (e.g., "**/*.ts", "src/**/*.js")'),
   path: import_zod.z.string().optional().describe("Base directory to search from (defaults to working directory)"),
   max_results: import_zod.z.number().int().positive().optional().default(1e3).describe("Maximum number of results to return (default: 1000)")
 }).strict();
-function createGlobFilesTool(fileSystemService) {
+function createGlobFilesTool(options) {
+  const { fileSystemService, directoryApproval } = options;
+  let pendingApprovalSearchDir;
   return {
     id: "glob_files",
     description: "Find files matching a glob pattern. Supports standard glob syntax like **/*.js for recursive matches, *.ts for files in current directory, and src/**/*.tsx for nested paths. Returns array of file paths with metadata (size, modified date). Results are limited to allowed paths only.",
     inputSchema: GlobFilesInputSchema,
+    /**
+     * Check if this glob operation needs directory access approval.
+     * Returns custom approval request if the search directory is outside allowed paths.
+     */
+    getApprovalOverride: async (args) => {
+      const { path: searchPath } = args;
+      const baseDir = fileSystemService.getWorkingDirectory();
+      const searchDir = path.resolve(baseDir, searchPath || ".");
+      const isAllowed = await fileSystemService.isPathWithinConfigAllowed(searchDir);
+      if (isAllowed) {
+        return null;
+      }
+      if (directoryApproval?.isSessionApproved(searchDir)) {
+        return null;
+      }
+      pendingApprovalSearchDir = searchDir;
+      return {
+        type: import_core.ApprovalType.DIRECTORY_ACCESS,
+        metadata: {
+          path: searchDir,
+          parentDir: searchDir,
+          operation: "search",
+          toolName: "glob_files"
+        }
+      };
+    },
+    /**
+     * Handle approved directory access - remember the directory for session
+     */
+    onApprovalGranted: (response) => {
+      if (!directoryApproval || !pendingApprovalSearchDir) return;
+      const data = response.data;
+      const rememberDirectory = data?.rememberDirectory ?? false;
+      directoryApproval.addApproved(
+        pendingApprovalSearchDir,
+        rememberDirectory ? "session" : "once"
+      );
+      pendingApprovalSearchDir = void 0;
+    },
     execute: async (input, _context) => {
-      const { pattern, path, max_results } = input;
+      const { pattern, path: path2, max_results } = input;
       const result = await fileSystemService.globFiles(pattern, {
-        cwd: path,
+        cwd: path2,
         maxResults: max_results,
         includeMetadata: true
       });

package/dist/glob-files-tool.d.cts

@@ -1,5 +1,6 @@
 import { InternalTool } from '@dexto/core';
-import { FileSystemService } from './filesystem-service.cjs';
+import { FileToolOptions } from './file-tool-types.cjs';
+import './filesystem-service.cjs';
 import './types.cjs';
 
 /**
@@ -9,8 +10,8 @@ import './types.cjs';
  */
 
 /**
- * Create the glob_files internal tool
+ * Create the glob_files internal tool with directory approval support
  */
-declare function createGlobFilesTool(fileSystemService: FileSystemService): InternalTool;
+declare function createGlobFilesTool(options: FileToolOptions): InternalTool;
 
 export { createGlobFilesTool };

package/dist/glob-files-tool.d.ts

@@ -1,5 +1,6 @@
 import { InternalTool } from '@dexto/core';
-import { FileSystemService } from './filesystem-service.js';
+import { FileToolOptions } from './file-tool-types.js';
+import './filesystem-service.js';
 import './types.js';
 
 /**
@@ -9,8 +10,8 @@ import './types.js';
  */
 
 /**
- * Create the glob_files internal tool
+ * Create the glob_files internal tool with directory approval support
  */
-declare function createGlobFilesTool(fileSystemService: FileSystemService): InternalTool;
+declare function createGlobFilesTool(options: FileToolOptions): InternalTool;
 
 export { createGlobFilesTool };

package/dist/glob-files-tool.js

@@ -1,18 +1,61 @@
+import * as path from "node:path";
 import { z } from "zod";
+import { ApprovalType } from "@dexto/core";
 const GlobFilesInputSchema = z.object({
   pattern: z.string().describe('Glob pattern to match files (e.g., "**/*.ts", "src/**/*.js")'),
   path: z.string().optional().describe("Base directory to search from (defaults to working directory)"),
   max_results: z.number().int().positive().optional().default(1e3).describe("Maximum number of results to return (default: 1000)")
 }).strict();
-function createGlobFilesTool(fileSystemService) {
+function createGlobFilesTool(options) {
+  const { fileSystemService, directoryApproval } = options;
+  let pendingApprovalSearchDir;
   return {
     id: "glob_files",
     description: "Find files matching a glob pattern. Supports standard glob syntax like **/*.js for recursive matches, *.ts for files in current directory, and src/**/*.tsx for nested paths. Returns array of file paths with metadata (size, modified date). Results are limited to allowed paths only.",
     inputSchema: GlobFilesInputSchema,
+    /**
+     * Check if this glob operation needs directory access approval.
+     * Returns custom approval request if the search directory is outside allowed paths.
+     */
+    getApprovalOverride: async (args) => {
+      const { path: searchPath } = args;
+      const baseDir = fileSystemService.getWorkingDirectory();
+      const searchDir = path.resolve(baseDir, searchPath || ".");
+      const isAllowed = await fileSystemService.isPathWithinConfigAllowed(searchDir);
+      if (isAllowed) {
+        return null;
+      }
+      if (directoryApproval?.isSessionApproved(searchDir)) {
+        return null;
+      }
+      pendingApprovalSearchDir = searchDir;
+      return {
+        type: ApprovalType.DIRECTORY_ACCESS,
+        metadata: {
+          path: searchDir,
+          parentDir: searchDir,
+          operation: "search",
+          toolName: "glob_files"
+        }
+      };
+    },
+    /**
+     * Handle approved directory access - remember the directory for session
+     */
+    onApprovalGranted: (response) => {
+      if (!directoryApproval || !pendingApprovalSearchDir) return;
+      const data = response.data;
+      const rememberDirectory = data?.rememberDirectory ?? false;
+      directoryApproval.addApproved(
+        pendingApprovalSearchDir,
+        rememberDirectory ? "session" : "once"
+      );
+      pendingApprovalSearchDir = void 0;
+    },
     execute: async (input, _context) => {
-      const { pattern, path, max_results } = input;
+      const { pattern, path: path2, max_results } = input;
       const result = await fileSystemService.globFiles(pattern, {
-        cwd: path,
+        cwd: path2,
         maxResults: max_results,
         includeMetadata: true
       });

package/dist/grep-content-tool.cjs

@@ -1,7 +1,9 @@
 "use strict";
+var __create = Object.create;
 var __defProp = Object.defineProperty;
 var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
 var __getOwnPropNames = Object.getOwnPropertyNames;
+var __getProtoOf = Object.getPrototypeOf;
 var __hasOwnProp = Object.prototype.hasOwnProperty;
 var __export = (target, all) => {
   for (var name in all)
@@ -15,13 +17,23 @@ var __copyProps = (to, from, except, desc) => {
   }
   return to;
 };
+var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(
+  // If the importer is in node compatibility mode or this is not an ESM
+  // file that has been converted to a CommonJS file using a Babel-
+  // compatible transform (i.e. "__esModule" has not been set), then set
+  // "default" to the CommonJS "module.exports" for node compatibility.
+  isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target,
+  mod
+));
 var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
 var grep_content_tool_exports = {};
 __export(grep_content_tool_exports, {
   createGrepContentTool: () => createGrepContentTool
 });
 module.exports = __toCommonJS(grep_content_tool_exports);
+var path = __toESM(require("node:path"), 1);
 var import_zod = require("zod");
+var import_core = require("@dexto/core");
 const GrepContentInputSchema = import_zod.z.object({
   pattern: import_zod.z.string().describe("Regular expression pattern to search for"),
   path: import_zod.z.string().optional().describe("Directory to search in (defaults to working directory)"),
@@ -32,15 +44,55 @@ const GrepContentInputSchema = import_zod.z.object({
   case_insensitive: import_zod.z.boolean().optional().default(false).describe("Perform case-insensitive search (default: false)"),
   max_results: import_zod.z.number().int().positive().optional().default(100).describe("Maximum number of results to return (default: 100)")
 }).strict();
-function createGrepContentTool(fileSystemService) {
+function createGrepContentTool(options) {
+  const { fileSystemService, directoryApproval } = options;
+  let pendingApprovalSearchDir;
   return {
     id: "grep_content",
     description: 'Search for text patterns in files using regular expressions. Returns matching lines with file path, line number, and optional context lines. Use glob parameter to filter specific file types (e.g., "*.ts"). Supports case-insensitive search. Great for finding code patterns, function definitions, or specific text across multiple files.',
     inputSchema: GrepContentInputSchema,
+    /**
+     * Check if this grep operation needs directory access approval.
+     * Returns custom approval request if the search directory is outside allowed paths.
+     */
+    getApprovalOverride: async (args) => {
+      const { path: searchPath } = args;
+      const searchDir = path.resolve(searchPath || process.cwd());
+      const isAllowed = await fileSystemService.isPathWithinConfigAllowed(searchDir);
+      if (isAllowed) {
+        return null;
+      }
+      if (directoryApproval?.isSessionApproved(searchDir)) {
+        return null;
+      }
+      pendingApprovalSearchDir = searchDir;
+      return {
+        type: import_core.ApprovalType.DIRECTORY_ACCESS,
+        metadata: {
+          path: searchDir,
+          parentDir: searchDir,
+          operation: "search",
+          toolName: "grep_content"
+        }
+      };
+    },
+    /**
+     * Handle approved directory access - remember the directory for session
+     */
+    onApprovalGranted: (response) => {
+      if (!directoryApproval || !pendingApprovalSearchDir) return;
+      const data = response.data;
+      const rememberDirectory = data?.rememberDirectory ?? false;
+      directoryApproval.addApproved(
+        pendingApprovalSearchDir,
+        rememberDirectory ? "session" : "once"
+      );
+      pendingApprovalSearchDir = void 0;
+    },
     execute: async (input, _context) => {
-      const { pattern, path, glob, context_lines, case_insensitive, max_results } = input;
+      const { pattern, path: path2, glob, context_lines, case_insensitive, max_results } = input;
       const result = await fileSystemService.searchContent(pattern, {
-        path,
+        path: path2,
         glob,
         contextLines: context_lines,
         caseInsensitive: case_insensitive,

package/dist/grep-content-tool.d.cts

@@ -1,5 +1,6 @@
 import { InternalTool } from '@dexto/core';
-import { FileSystemService } from './filesystem-service.cjs';
+import { FileToolOptions } from './file-tool-types.cjs';
+import './filesystem-service.cjs';
 import './types.cjs';
 
 /**
@@ -9,8 +10,8 @@ import './types.cjs';
  */
 
 /**
- * Create the grep_content internal tool
+ * Create the grep_content internal tool with directory approval support
  */
-declare function createGrepContentTool(fileSystemService: FileSystemService): InternalTool;
+declare function createGrepContentTool(options: FileToolOptions): InternalTool;
 
 export { createGrepContentTool };

package/dist/grep-content-tool.d.ts

@@ -1,5 +1,6 @@
 import { InternalTool } from '@dexto/core';
-import { FileSystemService } from './filesystem-service.js';
+import { FileToolOptions } from './file-tool-types.js';
+import './filesystem-service.js';
 import './types.js';
 
 /**
@@ -9,8 +10,8 @@ import './types.js';
  */
 
 /**
- * Create the grep_content internal tool
+ * Create the grep_content internal tool with directory approval support
  */
-declare function createGrepContentTool(fileSystemService: FileSystemService): InternalTool;
+declare function createGrepContentTool(options: FileToolOptions): InternalTool;
 
 export { createGrepContentTool };

package/dist/grep-content-tool.js

@@ -1,4 +1,6 @@
+import * as path from "node:path";
 import { z } from "zod";
+import { ApprovalType } from "@dexto/core";
 const GrepContentInputSchema = z.object({
   pattern: z.string().describe("Regular expression pattern to search for"),
   path: z.string().optional().describe("Directory to search in (defaults to working directory)"),
@@ -9,15 +11,55 @@ const GrepContentInputSchema = z.object({
   case_insensitive: z.boolean().optional().default(false).describe("Perform case-insensitive search (default: false)"),
   max_results: z.number().int().positive().optional().default(100).describe("Maximum number of results to return (default: 100)")
 }).strict();
-function createGrepContentTool(fileSystemService) {
+function createGrepContentTool(options) {
+  const { fileSystemService, directoryApproval } = options;
+  let pendingApprovalSearchDir;
   return {
     id: "grep_content",
     description: 'Search for text patterns in files using regular expressions. Returns matching lines with file path, line number, and optional context lines. Use glob parameter to filter specific file types (e.g., "*.ts"). Supports case-insensitive search. Great for finding code patterns, function definitions, or specific text across multiple files.',
     inputSchema: GrepContentInputSchema,
+    /**
+     * Check if this grep operation needs directory access approval.
+     * Returns custom approval request if the search directory is outside allowed paths.
+     */
+    getApprovalOverride: async (args) => {
+      const { path: searchPath } = args;
+      const searchDir = path.resolve(searchPath || process.cwd());
+      const isAllowed = await fileSystemService.isPathWithinConfigAllowed(searchDir);
+      if (isAllowed) {
+        return null;
+      }
+      if (directoryApproval?.isSessionApproved(searchDir)) {
+        return null;
+      }
+      pendingApprovalSearchDir = searchDir;
+      return {
+        type: ApprovalType.DIRECTORY_ACCESS,
+        metadata: {
+          path: searchDir,
+          parentDir: searchDir,
+          operation: "search",
+          toolName: "grep_content"
+        }
+      };
+    },
+    /**
+     * Handle approved directory access - remember the directory for session
+     */
+    onApprovalGranted: (response) => {
+      if (!directoryApproval || !pendingApprovalSearchDir) return;
+      const data = response.data;
+      const rememberDirectory = data?.rememberDirectory ?? false;
+      directoryApproval.addApproved(
+        pendingApprovalSearchDir,
+        rememberDirectory ? "session" : "once"
+      );
+      pendingApprovalSearchDir = void 0;
+    },
     execute: async (input, _context) => {
-      const { pattern, path, glob, context_lines, case_insensitive, max_results } = input;
+      const { pattern, path: path2, glob, context_lines, case_insensitive, max_results } = input;
       const result = await fileSystemService.searchContent(pattern, {
-        path,
+        path: path2,
         glob,
         contextLines: context_lines,
         caseInsensitive: case_insensitive,

package/dist/tool-provider.cjs

@@ -102,8 +102,8 @@ const fileSystemToolsProvider = {
       read_file: () => (0, import_read_file_tool.createReadFileTool)(fileToolOptions),
       write_file: () => (0, import_write_file_tool.createWriteFileTool)(fileToolOptions),
       edit_file: () => (0, import_edit_file_tool.createEditFileTool)(fileToolOptions),
-      glob_files: () => (0, import_glob_files_tool.createGlobFilesTool)(fileSystemService),
-      grep_content: () => (0, import_grep_content_tool.createGrepContentTool)(fileSystemService)
+      glob_files: () => (0, import_glob_files_tool.createGlobFilesTool)(fileToolOptions),
+      grep_content: () => (0, import_grep_content_tool.createGrepContentTool)(fileToolOptions)
     };
     const toolsToCreate = config.enabledTools ?? FILESYSTEM_TOOL_NAMES;
     if (config.enabledTools) {

package/dist/tool-provider.js

@@ -79,8 +79,8 @@ const fileSystemToolsProvider = {
       read_file: () => createReadFileTool(fileToolOptions),
       write_file: () => createWriteFileTool(fileToolOptions),
       edit_file: () => createEditFileTool(fileToolOptions),
-      glob_files: () => createGlobFilesTool(fileSystemService),
-      grep_content: () => createGrepContentTool(fileSystemService)
+      glob_files: () => createGlobFilesTool(fileToolOptions),
+      grep_content: () => createGrepContentTool(fileToolOptions)
     };
     const toolsToCreate = config.enabledTools ?? FILESYSTEM_TOOL_NAMES;
     if (config.enabledTools) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@dexto/tools-filesystem",
-  "version": "1.5.3",
+  "version": "1.5.4",
   "description": "FileSystem tools provider for Dexto agents",
   "type": "module",
   "main": "./dist/index.js",
@@ -22,7 +22,7 @@
     "glob": "^11.1.0",
     "safe-regex": "^2.1.1",
     "zod": "^3.25.0",
-    "@dexto/core": "1.5.3"
+    "@dexto/core": "1.5.4"
   },
   "devDependencies": {
     "@types/diff": "^5.2.3",