@dexto/tools-filesystem 1.5.3 → 1.5.5

package/dist/errors.cjs

@@ -23,6 +23,7 @@ __export(errors_exports, {
 module.exports = __toCommonJS(errors_exports);
 var import_core = require("@dexto/core");
 var import_error_codes = require("./error-codes.js");
+const FILESYSTEM_SCOPE = "filesystem";
 class FileSystemError {
   constructor() {
   }
@@ -32,7 +33,7 @@ class FileSystemError {
   static fileNotFound(path) {
     return new import_core.DextoRuntimeError(
       import_error_codes.FileSystemErrorCode.FILE_NOT_FOUND,
-      import_core.ErrorScope.FILESYSTEM,
+      FILESYSTEM_SCOPE,
       import_core.ErrorType.NOT_FOUND,
       `File not found: ${path}`,
       { path }
@@ -44,7 +45,7 @@ class FileSystemError {
   static directoryNotFound(path) {
     return new import_core.DextoRuntimeError(
       import_error_codes.FileSystemErrorCode.DIRECTORY_NOT_FOUND,
-      import_core.ErrorScope.FILESYSTEM,
+      FILESYSTEM_SCOPE,
       import_core.ErrorType.NOT_FOUND,
       `Directory not found: ${path}`,
       { path }
@@ -56,7 +57,7 @@ class FileSystemError {
   static permissionDenied(path, operation) {
     return new import_core.DextoRuntimeError(
       import_error_codes.FileSystemErrorCode.PERMISSION_DENIED,
-      import_core.ErrorScope.FILESYSTEM,
+      FILESYSTEM_SCOPE,
       import_core.ErrorType.FORBIDDEN,
       `Permission denied: cannot ${operation} ${path}`,
       { path, operation }
@@ -68,7 +69,7 @@ class FileSystemError {
   static pathNotAllowed(path, allowedPaths) {
     return new import_core.DextoRuntimeError(
       import_error_codes.FileSystemErrorCode.PATH_NOT_ALLOWED,
-      import_core.ErrorScope.FILESYSTEM,
+      FILESYSTEM_SCOPE,
       import_core.ErrorType.USER,
       `Path not allowed: ${path}. Must be within allowed paths: ${allowedPaths.join(", ")}`,
       { path, allowedPaths },
@@ -81,7 +82,7 @@ class FileSystemError {
   static pathBlocked(path, reason) {
     return new import_core.DextoRuntimeError(
       import_error_codes.FileSystemErrorCode.PATH_BLOCKED,
-      import_core.ErrorScope.FILESYSTEM,
+      FILESYSTEM_SCOPE,
       import_core.ErrorType.FORBIDDEN,
       `Path is blocked: ${path}. Reason: ${reason}`,
       { path, reason }
@@ -93,7 +94,7 @@ class FileSystemError {
   static invalidPath(path, reason) {
     return new import_core.DextoRuntimeError(
       import_error_codes.FileSystemErrorCode.INVALID_PATH,
-      import_core.ErrorScope.FILESYSTEM,
+      FILESYSTEM_SCOPE,
       import_core.ErrorType.USER,
       `Invalid path: ${path}. ${reason}`,
       { path, reason }
@@ -105,7 +106,7 @@ class FileSystemError {
   static pathTraversal(path) {
     return new import_core.DextoRuntimeError(
       import_error_codes.FileSystemErrorCode.PATH_TRAVERSAL_DETECTED,
-      import_core.ErrorScope.FILESYSTEM,
+      FILESYSTEM_SCOPE,
       import_core.ErrorType.FORBIDDEN,
       `Path traversal detected in: ${path}`,
       { path }
@@ -117,7 +118,7 @@ class FileSystemError {
   static invalidExtension(path, blockedExtensions) {
     return new import_core.DextoRuntimeError(
       import_error_codes.FileSystemErrorCode.INVALID_FILE_EXTENSION,
-      import_core.ErrorScope.FILESYSTEM,
+      FILESYSTEM_SCOPE,
       import_core.ErrorType.USER,
       `Invalid file extension: ${path}. Blocked extensions: ${blockedExtensions.join(", ")}`,
       { path, blockedExtensions }
@@ -129,7 +130,7 @@ class FileSystemError {
   static fileTooLarge(path, size, maxSize) {
     return new import_core.DextoRuntimeError(
       import_error_codes.FileSystemErrorCode.FILE_TOO_LARGE,
-      import_core.ErrorScope.FILESYSTEM,
+      FILESYSTEM_SCOPE,
       import_core.ErrorType.USER,
       `File too large: ${path} (${size} bytes). Maximum allowed: ${maxSize} bytes`,
       { path, size, maxSize }
@@ -141,7 +142,7 @@ class FileSystemError {
   static tooManyResults(operation, count, maxResults) {
     return new import_core.DextoRuntimeError(
       import_error_codes.FileSystemErrorCode.TOO_MANY_RESULTS,
-      import_core.ErrorScope.FILESYSTEM,
+      FILESYSTEM_SCOPE,
       import_core.ErrorType.USER,
       `Too many results from ${operation}: ${count}. Maximum allowed: ${maxResults}`,
       { operation, count, maxResults },
@@ -154,7 +155,7 @@ class FileSystemError {
   static readFailed(path, cause) {
     return new import_core.DextoRuntimeError(
       import_error_codes.FileSystemErrorCode.READ_FAILED,
-      import_core.ErrorScope.FILESYSTEM,
+      FILESYSTEM_SCOPE,
       import_core.ErrorType.SYSTEM,
       `Failed to read file: ${path}. ${cause}`,
       { path, cause }
@@ -166,7 +167,7 @@ class FileSystemError {
   static writeFailed(path, cause) {
     return new import_core.DextoRuntimeError(
       import_error_codes.FileSystemErrorCode.WRITE_FAILED,
-      import_core.ErrorScope.FILESYSTEM,
+      FILESYSTEM_SCOPE,
       import_core.ErrorType.SYSTEM,
       `Failed to write file: ${path}. ${cause}`,
       { path, cause }
@@ -178,7 +179,7 @@ class FileSystemError {
   static backupFailed(path, cause) {
     return new import_core.DextoRuntimeError(
       import_error_codes.FileSystemErrorCode.BACKUP_FAILED,
-      import_core.ErrorScope.FILESYSTEM,
+      FILESYSTEM_SCOPE,
       import_core.ErrorType.SYSTEM,
       `Failed to create backup for: ${path}. ${cause}`,
       { path, cause }
@@ -190,7 +191,7 @@ class FileSystemError {
   static editFailed(path, cause) {
     return new import_core.DextoRuntimeError(
       import_error_codes.FileSystemErrorCode.EDIT_FAILED,
-      import_core.ErrorScope.FILESYSTEM,
+      FILESYSTEM_SCOPE,
       import_core.ErrorType.SYSTEM,
       `Failed to edit file: ${path}. ${cause}`,
       { path, cause }
@@ -202,7 +203,7 @@ class FileSystemError {
   static stringNotUnique(path, searchString, occurrences) {
     return new import_core.DextoRuntimeError(
       import_error_codes.FileSystemErrorCode.STRING_NOT_UNIQUE,
-      import_core.ErrorScope.FILESYSTEM,
+      FILESYSTEM_SCOPE,
       import_core.ErrorType.USER,
       `String is not unique in ${path}: "${searchString}" found ${occurrences} times. Use replaceAll=true or provide a more specific string.`,
       { path, searchString, occurrences },
@@ -215,7 +216,7 @@ class FileSystemError {
   static stringNotFound(path, searchString) {
     return new import_core.DextoRuntimeError(
       import_error_codes.FileSystemErrorCode.STRING_NOT_FOUND,
-      import_core.ErrorScope.FILESYSTEM,
+      FILESYSTEM_SCOPE,
       import_core.ErrorType.USER,
       `String not found in ${path}: "${searchString}"`,
       { path, searchString }
@@ -227,7 +228,7 @@ class FileSystemError {
   static globFailed(pattern, cause) {
     return new import_core.DextoRuntimeError(
       import_error_codes.FileSystemErrorCode.GLOB_FAILED,
-      import_core.ErrorScope.FILESYSTEM,
+      FILESYSTEM_SCOPE,
       import_core.ErrorType.SYSTEM,
       `Glob operation failed for pattern: ${pattern}. ${cause}`,
       { pattern, cause }
@@ -239,7 +240,7 @@ class FileSystemError {
   static searchFailed(pattern, cause) {
     return new import_core.DextoRuntimeError(
       import_error_codes.FileSystemErrorCode.SEARCH_FAILED,
-      import_core.ErrorScope.FILESYSTEM,
+      FILESYSTEM_SCOPE,
       import_core.ErrorType.SYSTEM,
       `Search operation failed for pattern: ${pattern}. ${cause}`,
       { pattern, cause }
@@ -251,7 +252,7 @@ class FileSystemError {
   static invalidPattern(pattern, cause) {
     return new import_core.DextoRuntimeError(
       import_error_codes.FileSystemErrorCode.INVALID_PATTERN,
-      import_core.ErrorScope.FILESYSTEM,
+      FILESYSTEM_SCOPE,
       import_core.ErrorType.USER,
       `Invalid pattern: ${pattern}. ${cause}`,
       { pattern, cause }
@@ -263,7 +264,7 @@ class FileSystemError {
   static regexTimeout(pattern) {
     return new import_core.DextoRuntimeError(
       import_error_codes.FileSystemErrorCode.REGEX_TIMEOUT,
-      import_core.ErrorScope.FILESYSTEM,
+      FILESYSTEM_SCOPE,
       import_core.ErrorType.TIMEOUT,
       `Regex operation timed out for pattern: ${pattern}`,
       { pattern },
@@ -276,7 +277,7 @@ class FileSystemError {
   static invalidConfig(reason) {
     return new import_core.DextoRuntimeError(
       import_error_codes.FileSystemErrorCode.INVALID_CONFIG,
-      import_core.ErrorScope.FILESYSTEM,
+      FILESYSTEM_SCOPE,
       import_core.ErrorType.USER,
       `Invalid FileSystem configuration: ${reason}`,
       { reason }
@@ -288,7 +289,7 @@ class FileSystemError {
   static notInitialized() {
     return new import_core.DextoRuntimeError(
       import_error_codes.FileSystemErrorCode.SERVICE_NOT_INITIALIZED,
-      import_core.ErrorScope.FILESYSTEM,
+      FILESYSTEM_SCOPE,
       import_core.ErrorType.SYSTEM,
       "FileSystemService has not been initialized",
       {},

package/dist/errors.js

@@ -1,4 +1,5 @@
-import { DextoRuntimeError, ErrorScope, ErrorType } from "@dexto/core";
+import { DextoRuntimeError, ErrorType } from "@dexto/core";
+const FILESYSTEM_SCOPE = "filesystem";
 import { FileSystemErrorCode } from "./error-codes.js";
 class FileSystemError {
   constructor() {
@@ -9,7 +10,7 @@ class FileSystemError {
   static fileNotFound(path) {
     return new DextoRuntimeError(
       FileSystemErrorCode.FILE_NOT_FOUND,
-      ErrorScope.FILESYSTEM,
+      FILESYSTEM_SCOPE,
       ErrorType.NOT_FOUND,
       `File not found: ${path}`,
       { path }
@@ -21,7 +22,7 @@ class FileSystemError {
   static directoryNotFound(path) {
     return new DextoRuntimeError(
       FileSystemErrorCode.DIRECTORY_NOT_FOUND,
-      ErrorScope.FILESYSTEM,
+      FILESYSTEM_SCOPE,
       ErrorType.NOT_FOUND,
       `Directory not found: ${path}`,
       { path }
@@ -33,7 +34,7 @@ class FileSystemError {
   static permissionDenied(path, operation) {
     return new DextoRuntimeError(
       FileSystemErrorCode.PERMISSION_DENIED,
-      ErrorScope.FILESYSTEM,
+      FILESYSTEM_SCOPE,
       ErrorType.FORBIDDEN,
       `Permission denied: cannot ${operation} ${path}`,
       { path, operation }
@@ -45,7 +46,7 @@ class FileSystemError {
   static pathNotAllowed(path, allowedPaths) {
     return new DextoRuntimeError(
       FileSystemErrorCode.PATH_NOT_ALLOWED,
-      ErrorScope.FILESYSTEM,
+      FILESYSTEM_SCOPE,
       ErrorType.USER,
       `Path not allowed: ${path}. Must be within allowed paths: ${allowedPaths.join(", ")}`,
       { path, allowedPaths },
@@ -58,7 +59,7 @@ class FileSystemError {
   static pathBlocked(path, reason) {
     return new DextoRuntimeError(
       FileSystemErrorCode.PATH_BLOCKED,
-      ErrorScope.FILESYSTEM,
+      FILESYSTEM_SCOPE,
       ErrorType.FORBIDDEN,
       `Path is blocked: ${path}. Reason: ${reason}`,
       { path, reason }
@@ -70,7 +71,7 @@ class FileSystemError {
   static invalidPath(path, reason) {
     return new DextoRuntimeError(
       FileSystemErrorCode.INVALID_PATH,
-      ErrorScope.FILESYSTEM,
+      FILESYSTEM_SCOPE,
       ErrorType.USER,
       `Invalid path: ${path}. ${reason}`,
       { path, reason }
@@ -82,7 +83,7 @@ class FileSystemError {
   static pathTraversal(path) {
     return new DextoRuntimeError(
       FileSystemErrorCode.PATH_TRAVERSAL_DETECTED,
-      ErrorScope.FILESYSTEM,
+      FILESYSTEM_SCOPE,
       ErrorType.FORBIDDEN,
       `Path traversal detected in: ${path}`,
       { path }
@@ -94,7 +95,7 @@ class FileSystemError {
   static invalidExtension(path, blockedExtensions) {
     return new DextoRuntimeError(
       FileSystemErrorCode.INVALID_FILE_EXTENSION,
-      ErrorScope.FILESYSTEM,
+      FILESYSTEM_SCOPE,
       ErrorType.USER,
       `Invalid file extension: ${path}. Blocked extensions: ${blockedExtensions.join(", ")}`,
       { path, blockedExtensions }
@@ -106,7 +107,7 @@ class FileSystemError {
   static fileTooLarge(path, size, maxSize) {
     return new DextoRuntimeError(
       FileSystemErrorCode.FILE_TOO_LARGE,
-      ErrorScope.FILESYSTEM,
+      FILESYSTEM_SCOPE,
       ErrorType.USER,
       `File too large: ${path} (${size} bytes). Maximum allowed: ${maxSize} bytes`,
       { path, size, maxSize }
@@ -118,7 +119,7 @@ class FileSystemError {
   static tooManyResults(operation, count, maxResults) {
     return new DextoRuntimeError(
       FileSystemErrorCode.TOO_MANY_RESULTS,
-      ErrorScope.FILESYSTEM,
+      FILESYSTEM_SCOPE,
       ErrorType.USER,
       `Too many results from ${operation}: ${count}. Maximum allowed: ${maxResults}`,
       { operation, count, maxResults },
@@ -131,7 +132,7 @@ class FileSystemError {
   static readFailed(path, cause) {
     return new DextoRuntimeError(
       FileSystemErrorCode.READ_FAILED,
-      ErrorScope.FILESYSTEM,
+      FILESYSTEM_SCOPE,
       ErrorType.SYSTEM,
       `Failed to read file: ${path}. ${cause}`,
       { path, cause }
@@ -143,7 +144,7 @@ class FileSystemError {
   static writeFailed(path, cause) {
     return new DextoRuntimeError(
       FileSystemErrorCode.WRITE_FAILED,
-      ErrorScope.FILESYSTEM,
+      FILESYSTEM_SCOPE,
       ErrorType.SYSTEM,
       `Failed to write file: ${path}. ${cause}`,
       { path, cause }
@@ -155,7 +156,7 @@ class FileSystemError {
   static backupFailed(path, cause) {
     return new DextoRuntimeError(
       FileSystemErrorCode.BACKUP_FAILED,
-      ErrorScope.FILESYSTEM,
+      FILESYSTEM_SCOPE,
       ErrorType.SYSTEM,
       `Failed to create backup for: ${path}. ${cause}`,
       { path, cause }
@@ -167,7 +168,7 @@ class FileSystemError {
   static editFailed(path, cause) {
     return new DextoRuntimeError(
       FileSystemErrorCode.EDIT_FAILED,
-      ErrorScope.FILESYSTEM,
+      FILESYSTEM_SCOPE,
       ErrorType.SYSTEM,
       `Failed to edit file: ${path}. ${cause}`,
       { path, cause }
@@ -179,7 +180,7 @@ class FileSystemError {
   static stringNotUnique(path, searchString, occurrences) {
     return new DextoRuntimeError(
       FileSystemErrorCode.STRING_NOT_UNIQUE,
-      ErrorScope.FILESYSTEM,
+      FILESYSTEM_SCOPE,
       ErrorType.USER,
       `String is not unique in ${path}: "${searchString}" found ${occurrences} times. Use replaceAll=true or provide a more specific string.`,
       { path, searchString, occurrences },
@@ -192,7 +193,7 @@ class FileSystemError {
   static stringNotFound(path, searchString) {
     return new DextoRuntimeError(
       FileSystemErrorCode.STRING_NOT_FOUND,
-      ErrorScope.FILESYSTEM,
+      FILESYSTEM_SCOPE,
       ErrorType.USER,
       `String not found in ${path}: "${searchString}"`,
       { path, searchString }
@@ -204,7 +205,7 @@ class FileSystemError {
   static globFailed(pattern, cause) {
     return new DextoRuntimeError(
       FileSystemErrorCode.GLOB_FAILED,
-      ErrorScope.FILESYSTEM,
+      FILESYSTEM_SCOPE,
       ErrorType.SYSTEM,
       `Glob operation failed for pattern: ${pattern}. ${cause}`,
       { pattern, cause }
@@ -216,7 +217,7 @@ class FileSystemError {
   static searchFailed(pattern, cause) {
     return new DextoRuntimeError(
       FileSystemErrorCode.SEARCH_FAILED,
-      ErrorScope.FILESYSTEM,
+      FILESYSTEM_SCOPE,
       ErrorType.SYSTEM,
       `Search operation failed for pattern: ${pattern}. ${cause}`,
       { pattern, cause }
@@ -228,7 +229,7 @@ class FileSystemError {
   static invalidPattern(pattern, cause) {
     return new DextoRuntimeError(
       FileSystemErrorCode.INVALID_PATTERN,
-      ErrorScope.FILESYSTEM,
+      FILESYSTEM_SCOPE,
       ErrorType.USER,
       `Invalid pattern: ${pattern}. ${cause}`,
       { pattern, cause }
@@ -240,7 +241,7 @@ class FileSystemError {
   static regexTimeout(pattern) {
     return new DextoRuntimeError(
       FileSystemErrorCode.REGEX_TIMEOUT,
-      ErrorScope.FILESYSTEM,
+      FILESYSTEM_SCOPE,
       ErrorType.TIMEOUT,
       `Regex operation timed out for pattern: ${pattern}`,
       { pattern },
@@ -253,7 +254,7 @@ class FileSystemError {
   static invalidConfig(reason) {
     return new DextoRuntimeError(
       FileSystemErrorCode.INVALID_CONFIG,
-      ErrorScope.FILESYSTEM,
+      FILESYSTEM_SCOPE,
       ErrorType.USER,
       `Invalid FileSystem configuration: ${reason}`,
       { reason }
@@ -265,7 +266,7 @@ class FileSystemError {
   static notInitialized() {
     return new DextoRuntimeError(
       FileSystemErrorCode.SERVICE_NOT_INITIALIZED,
-      ErrorScope.FILESYSTEM,
+      FILESYSTEM_SCOPE,
       ErrorType.SYSTEM,
       "FileSystemService has not been initialized",
       {},

package/dist/filesystem-service.cjs

@@ -66,6 +66,13 @@ class FileSystemService {
   getBackupDir() {
     return this.config.backupPath || (0, import_core.getDextoPath)("backups");
   }
+  /**
+   * Get the effective working directory for file operations.
+   * Falls back to process.cwd() if not configured.
+   */
+  getWorkingDirectory() {
+    return this.config.workingDirectory || process.cwd();
+  }
   /**
    * Initialize the service.
    * Safe to call multiple times - subsequent calls return the same promise.

package/dist/filesystem-service.d.cts

@@ -36,6 +36,11 @@ declare class FileSystemService {
      * TODO: Migrate to explicit configuration via CLI enrichment layer (per-agent paths)
      */
     private getBackupDir;
+    /**
+     * Get the effective working directory for file operations.
+     * Falls back to process.cwd() if not configured.
+     */
+    getWorkingDirectory(): string;
     /**
      * Initialize the service.
      * Safe to call multiple times - subsequent calls return the same promise.

package/dist/filesystem-service.d.ts

@@ -36,6 +36,11 @@ declare class FileSystemService {
      * TODO: Migrate to explicit configuration via CLI enrichment layer (per-agent paths)
      */
     private getBackupDir;
+    /**
+     * Get the effective working directory for file operations.
+     * Falls back to process.cwd() if not configured.
+     */
+    getWorkingDirectory(): string;
     /**
      * Initialize the service.
      * Safe to call multiple times - subsequent calls return the same promise.

package/dist/filesystem-service.js

@@ -33,6 +33,13 @@ class FileSystemService {
   getBackupDir() {
     return this.config.backupPath || getDextoPath("backups");
   }
+  /**
+   * Get the effective working directory for file operations.
+   * Falls back to process.cwd() if not configured.
+   */
+  getWorkingDirectory() {
+    return this.config.workingDirectory || process.cwd();
+  }
   /**
    * Initialize the service.
    * Safe to call multiple times - subsequent calls return the same promise.

package/dist/glob-files-tool.cjs

@@ -1,7 +1,9 @@
 "use strict";
+var __create = Object.create;
 var __defProp = Object.defineProperty;
 var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
 var __getOwnPropNames = Object.getOwnPropertyNames;
+var __getProtoOf = Object.getPrototypeOf;
 var __hasOwnProp = Object.prototype.hasOwnProperty;
 var __export = (target, all) => {
   for (var name in all)
@@ -15,27 +17,78 @@ var __copyProps = (to, from, except, desc) => {
   }
   return to;
 };
+var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(
+  // If the importer is in node compatibility mode or this is not an ESM
+  // file that has been converted to a CommonJS file using a Babel-
+  // compatible transform (i.e. "__esModule" has not been set), then set
+  // "default" to the CommonJS "module.exports" for node compatibility.
+  isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target,
+  mod
+));
 var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
 var glob_files_tool_exports = {};
 __export(glob_files_tool_exports, {
   createGlobFilesTool: () => createGlobFilesTool
 });
 module.exports = __toCommonJS(glob_files_tool_exports);
+var path = __toESM(require("node:path"), 1);
 var import_zod = require("zod");
+var import_core = require("@dexto/core");
 const GlobFilesInputSchema = import_zod.z.object({
   pattern: import_zod.z.string().describe('Glob pattern to match files (e.g., "**/*.ts", "src/**/*.js")'),
   path: import_zod.z.string().optional().describe("Base directory to search from (defaults to working directory)"),
   max_results: import_zod.z.number().int().positive().optional().default(1e3).describe("Maximum number of results to return (default: 1000)")
 }).strict();
-function createGlobFilesTool(fileSystemService) {
+function createGlobFilesTool(options) {
+  const { fileSystemService, directoryApproval } = options;
+  let pendingApprovalSearchDir;
   return {
     id: "glob_files",
     description: "Find files matching a glob pattern. Supports standard glob syntax like **/*.js for recursive matches, *.ts for files in current directory, and src/**/*.tsx for nested paths. Returns array of file paths with metadata (size, modified date). Results are limited to allowed paths only.",
     inputSchema: GlobFilesInputSchema,
+    /**
+     * Check if this glob operation needs directory access approval.
+     * Returns custom approval request if the search directory is outside allowed paths.
+     */
+    getApprovalOverride: async (args) => {
+      const { path: searchPath } = args;
+      const baseDir = fileSystemService.getWorkingDirectory();
+      const searchDir = path.resolve(baseDir, searchPath || ".");
+      const isAllowed = await fileSystemService.isPathWithinConfigAllowed(searchDir);
+      if (isAllowed) {
+        return null;
+      }
+      if (directoryApproval?.isSessionApproved(searchDir)) {
+        return null;
+      }
+      pendingApprovalSearchDir = searchDir;
+      return {
+        type: import_core.ApprovalType.DIRECTORY_ACCESS,
+        metadata: {
+          path: searchDir,
+          parentDir: searchDir,
+          operation: "search",
+          toolName: "glob_files"
+        }
+      };
+    },
+    /**
+     * Handle approved directory access - remember the directory for session
+     */
+    onApprovalGranted: (response) => {
+      if (!directoryApproval || !pendingApprovalSearchDir) return;
+      const data = response.data;
+      const rememberDirectory = data?.rememberDirectory ?? false;
+      directoryApproval.addApproved(
+        pendingApprovalSearchDir,
+        rememberDirectory ? "session" : "once"
+      );
+      pendingApprovalSearchDir = void 0;
+    },
     execute: async (input, _context) => {
-      const { pattern, path, max_results } = input;
+      const { pattern, path: path2, max_results } = input;
       const result = await fileSystemService.globFiles(pattern, {
-        cwd: path,
+        cwd: path2,
         maxResults: max_results,
         includeMetadata: true
       });

package/dist/glob-files-tool.d.cts

@@ -1,5 +1,6 @@
 import { InternalTool } from '@dexto/core';
-import { FileSystemService } from './filesystem-service.cjs';
+import { FileToolOptions } from './file-tool-types.cjs';
+import './filesystem-service.cjs';
 import './types.cjs';
 
 /**
@@ -9,8 +10,8 @@ import './types.cjs';
  */
 
 /**
- * Create the glob_files internal tool
+ * Create the glob_files internal tool with directory approval support
  */
-declare function createGlobFilesTool(fileSystemService: FileSystemService): InternalTool;
+declare function createGlobFilesTool(options: FileToolOptions): InternalTool;
 
 export { createGlobFilesTool };

package/dist/glob-files-tool.d.ts

@@ -1,5 +1,6 @@
 import { InternalTool } from '@dexto/core';
-import { FileSystemService } from './filesystem-service.js';
+import { FileToolOptions } from './file-tool-types.js';
+import './filesystem-service.js';
 import './types.js';
 
 /**
@@ -9,8 +10,8 @@ import './types.js';
  */
 
 /**
- * Create the glob_files internal tool
+ * Create the glob_files internal tool with directory approval support
  */
-declare function createGlobFilesTool(fileSystemService: FileSystemService): InternalTool;
+declare function createGlobFilesTool(options: FileToolOptions): InternalTool;
 
 export { createGlobFilesTool };

package/dist/glob-files-tool.js

@@ -1,18 +1,61 @@
+import * as path from "node:path";
 import { z } from "zod";
+import { ApprovalType } from "@dexto/core";
 const GlobFilesInputSchema = z.object({
   pattern: z.string().describe('Glob pattern to match files (e.g., "**/*.ts", "src/**/*.js")'),
   path: z.string().optional().describe("Base directory to search from (defaults to working directory)"),
   max_results: z.number().int().positive().optional().default(1e3).describe("Maximum number of results to return (default: 1000)")
 }).strict();
-function createGlobFilesTool(fileSystemService) {
+function createGlobFilesTool(options) {
+  const { fileSystemService, directoryApproval } = options;
+  let pendingApprovalSearchDir;
   return {
     id: "glob_files",
     description: "Find files matching a glob pattern. Supports standard glob syntax like **/*.js for recursive matches, *.ts for files in current directory, and src/**/*.tsx for nested paths. Returns array of file paths with metadata (size, modified date). Results are limited to allowed paths only.",
     inputSchema: GlobFilesInputSchema,
+    /**
+     * Check if this glob operation needs directory access approval.
+     * Returns custom approval request if the search directory is outside allowed paths.
+     */
+    getApprovalOverride: async (args) => {
+      const { path: searchPath } = args;
+      const baseDir = fileSystemService.getWorkingDirectory();
+      const searchDir = path.resolve(baseDir, searchPath || ".");
+      const isAllowed = await fileSystemService.isPathWithinConfigAllowed(searchDir);
+      if (isAllowed) {
+        return null;
+      }
+      if (directoryApproval?.isSessionApproved(searchDir)) {
+        return null;
+      }
+      pendingApprovalSearchDir = searchDir;
+      return {
+        type: ApprovalType.DIRECTORY_ACCESS,
+        metadata: {
+          path: searchDir,
+          parentDir: searchDir,
+          operation: "search",
+          toolName: "glob_files"
+        }
+      };
+    },
+    /**
+     * Handle approved directory access - remember the directory for session
+     */
+    onApprovalGranted: (response) => {
+      if (!directoryApproval || !pendingApprovalSearchDir) return;
+      const data = response.data;
+      const rememberDirectory = data?.rememberDirectory ?? false;
+      directoryApproval.addApproved(
+        pendingApprovalSearchDir,
+        rememberDirectory ? "session" : "once"
+      );
+      pendingApprovalSearchDir = void 0;
+    },
     execute: async (input, _context) => {
-      const { pattern, path, max_results } = input;
+      const { pattern, path: path2, max_results } = input;
       const result = await fileSystemService.globFiles(pattern, {
-        cwd: path,
+        cwd: path2,
         maxResults: max_results,
         includeMetadata: true
       });

package/dist/grep-content-tool.cjs

@@ -1,7 +1,9 @@
 "use strict";
+var __create = Object.create;
 var __defProp = Object.defineProperty;
 var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
 var __getOwnPropNames = Object.getOwnPropertyNames;
+var __getProtoOf = Object.getPrototypeOf;
 var __hasOwnProp = Object.prototype.hasOwnProperty;
 var __export = (target, all) => {
   for (var name in all)
@@ -15,13 +17,23 @@ var __copyProps = (to, from, except, desc) => {
   }
   return to;
 };
+var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(
+  // If the importer is in node compatibility mode or this is not an ESM
+  // file that has been converted to a CommonJS file using a Babel-
+  // compatible transform (i.e. "__esModule" has not been set), then set
+  // "default" to the CommonJS "module.exports" for node compatibility.
+  isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target,
+  mod
+));
 var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
 var grep_content_tool_exports = {};
 __export(grep_content_tool_exports, {
   createGrepContentTool: () => createGrepContentTool
 });
 module.exports = __toCommonJS(grep_content_tool_exports);
+var path = __toESM(require("node:path"), 1);
 var import_zod = require("zod");
+var import_core = require("@dexto/core");
 const GrepContentInputSchema = import_zod.z.object({
   pattern: import_zod.z.string().describe("Regular expression pattern to search for"),
   path: import_zod.z.string().optional().describe("Directory to search in (defaults to working directory)"),
@@ -32,15 +44,55 @@ const GrepContentInputSchema = import_zod.z.object({
   case_insensitive: import_zod.z.boolean().optional().default(false).describe("Perform case-insensitive search (default: false)"),
   max_results: import_zod.z.number().int().positive().optional().default(100).describe("Maximum number of results to return (default: 100)")
 }).strict();
-function createGrepContentTool(fileSystemService) {
+function createGrepContentTool(options) {
+  const { fileSystemService, directoryApproval } = options;
+  let pendingApprovalSearchDir;
   return {
     id: "grep_content",
     description: 'Search for text patterns in files using regular expressions. Returns matching lines with file path, line number, and optional context lines. Use glob parameter to filter specific file types (e.g., "*.ts"). Supports case-insensitive search. Great for finding code patterns, function definitions, or specific text across multiple files.',
     inputSchema: GrepContentInputSchema,
+    /**
+     * Check if this grep operation needs directory access approval.
+     * Returns custom approval request if the search directory is outside allowed paths.
+     */
+    getApprovalOverride: async (args) => {
+      const { path: searchPath } = args;
+      const searchDir = path.resolve(searchPath || process.cwd());
+      const isAllowed = await fileSystemService.isPathWithinConfigAllowed(searchDir);
+      if (isAllowed) {
+        return null;
+      }
+      if (directoryApproval?.isSessionApproved(searchDir)) {
+        return null;
+      }
+      pendingApprovalSearchDir = searchDir;
+      return {
+        type: import_core.ApprovalType.DIRECTORY_ACCESS,
+        metadata: {
+          path: searchDir,
+          parentDir: searchDir,
+          operation: "search",
+          toolName: "grep_content"
+        }
+      };
+    },
+    /**
+     * Handle approved directory access - remember the directory for session
+     */
+    onApprovalGranted: (response) => {
+      if (!directoryApproval || !pendingApprovalSearchDir) return;
+      const data = response.data;
+      const rememberDirectory = data?.rememberDirectory ?? false;
+      directoryApproval.addApproved(
+        pendingApprovalSearchDir,
+        rememberDirectory ? "session" : "once"
+      );
+      pendingApprovalSearchDir = void 0;
+    },
     execute: async (input, _context) => {
-      const { pattern, path, glob, context_lines, case_insensitive, max_results } = input;
+      const { pattern, path: path2, glob, context_lines, case_insensitive, max_results } = input;
       const result = await fileSystemService.searchContent(pattern, {
-        path,
+        path: path2,
         glob,
         contextLines: context_lines,
         caseInsensitive: case_insensitive,

package/dist/grep-content-tool.d.cts

@@ -1,5 +1,6 @@
 import { InternalTool } from '@dexto/core';
-import { FileSystemService } from './filesystem-service.cjs';
+import { FileToolOptions } from './file-tool-types.cjs';
+import './filesystem-service.cjs';
 import './types.cjs';
 
 /**
@@ -9,8 +10,8 @@ import './types.cjs';
  */
 
 /**
- * Create the grep_content internal tool
+ * Create the grep_content internal tool with directory approval support
  */
-declare function createGrepContentTool(fileSystemService: FileSystemService): InternalTool;
+declare function createGrepContentTool(options: FileToolOptions): InternalTool;
 
 export { createGrepContentTool };

package/dist/grep-content-tool.d.ts

@@ -1,5 +1,6 @@
 import { InternalTool } from '@dexto/core';
-import { FileSystemService } from './filesystem-service.js';
+import { FileToolOptions } from './file-tool-types.js';
+import './filesystem-service.js';
 import './types.js';
 
 /**
@@ -9,8 +10,8 @@ import './types.js';
  */
 
 /**
- * Create the grep_content internal tool
+ * Create the grep_content internal tool with directory approval support
  */
-declare function createGrepContentTool(fileSystemService: FileSystemService): InternalTool;
+declare function createGrepContentTool(options: FileToolOptions): InternalTool;
 
 export { createGrepContentTool };

package/dist/grep-content-tool.js

@@ -1,4 +1,6 @@
+import * as path from "node:path";
 import { z } from "zod";
+import { ApprovalType } from "@dexto/core";
 const GrepContentInputSchema = z.object({
   pattern: z.string().describe("Regular expression pattern to search for"),
   path: z.string().optional().describe("Directory to search in (defaults to working directory)"),
@@ -9,15 +11,55 @@ const GrepContentInputSchema = z.object({
   case_insensitive: z.boolean().optional().default(false).describe("Perform case-insensitive search (default: false)"),
   max_results: z.number().int().positive().optional().default(100).describe("Maximum number of results to return (default: 100)")
 }).strict();
-function createGrepContentTool(fileSystemService) {
+function createGrepContentTool(options) {
+  const { fileSystemService, directoryApproval } = options;
+  let pendingApprovalSearchDir;
   return {
     id: "grep_content",
     description: 'Search for text patterns in files using regular expressions. Returns matching lines with file path, line number, and optional context lines. Use glob parameter to filter specific file types (e.g., "*.ts"). Supports case-insensitive search. Great for finding code patterns, function definitions, or specific text across multiple files.',
     inputSchema: GrepContentInputSchema,
+    /**
+     * Check if this grep operation needs directory access approval.
+     * Returns custom approval request if the search directory is outside allowed paths.
+     */
+    getApprovalOverride: async (args) => {
+      const { path: searchPath } = args;
+      const searchDir = path.resolve(searchPath || process.cwd());
+      const isAllowed = await fileSystemService.isPathWithinConfigAllowed(searchDir);
+      if (isAllowed) {
+        return null;
+      }
+      if (directoryApproval?.isSessionApproved(searchDir)) {
+        return null;
+      }
+      pendingApprovalSearchDir = searchDir;
+      return {
+        type: ApprovalType.DIRECTORY_ACCESS,
+        metadata: {
+          path: searchDir,
+          parentDir: searchDir,
+          operation: "search",
+          toolName: "grep_content"
+        }
+      };
+    },
+    /**
+     * Handle approved directory access - remember the directory for session
+     */
+    onApprovalGranted: (response) => {
+      if (!directoryApproval || !pendingApprovalSearchDir) return;
+      const data = response.data;
+      const rememberDirectory = data?.rememberDirectory ?? false;
+      directoryApproval.addApproved(
+        pendingApprovalSearchDir,
+        rememberDirectory ? "session" : "once"
+      );
+      pendingApprovalSearchDir = void 0;
+    },
     execute: async (input, _context) => {
-      const { pattern, path, glob, context_lines, case_insensitive, max_results } = input;
+      const { pattern, path: path2, glob, context_lines, case_insensitive, max_results } = input;
       const result = await fileSystemService.searchContent(pattern, {
-        path,
+        path: path2,
         glob,
         contextLines: context_lines,
         caseInsensitive: case_insensitive,

package/dist/tool-provider.cjs

@@ -102,8 +102,8 @@ const fileSystemToolsProvider = {
       read_file: () => (0, import_read_file_tool.createReadFileTool)(fileToolOptions),
       write_file: () => (0, import_write_file_tool.createWriteFileTool)(fileToolOptions),
       edit_file: () => (0, import_edit_file_tool.createEditFileTool)(fileToolOptions),
-      glob_files: () => (0, import_glob_files_tool.createGlobFilesTool)(fileSystemService),
-      grep_content: () => (0, import_grep_content_tool.createGrepContentTool)(fileSystemService)
+      glob_files: () => (0, import_glob_files_tool.createGlobFilesTool)(fileToolOptions),
+      grep_content: () => (0, import_grep_content_tool.createGrepContentTool)(fileToolOptions)
     };
     const toolsToCreate = config.enabledTools ?? FILESYSTEM_TOOL_NAMES;
     if (config.enabledTools) {

package/dist/tool-provider.js

@@ -79,8 +79,8 @@ const fileSystemToolsProvider = {
       read_file: () => createReadFileTool(fileToolOptions),
       write_file: () => createWriteFileTool(fileToolOptions),
       edit_file: () => createEditFileTool(fileToolOptions),
-      glob_files: () => createGlobFilesTool(fileSystemService),
-      grep_content: () => createGrepContentTool(fileSystemService)
+      glob_files: () => createGlobFilesTool(fileToolOptions),
+      grep_content: () => createGrepContentTool(fileToolOptions)
     };
     const toolsToCreate = config.enabledTools ?? FILESYSTEM_TOOL_NAMES;
     if (config.enabledTools) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@dexto/tools-filesystem",
-  "version": "1.5.3",
+  "version": "1.5.5",
   "description": "FileSystem tools provider for Dexto agents",
   "type": "module",
   "main": "./dist/index.js",
@@ -22,7 +22,7 @@
     "glob": "^11.1.0",
     "safe-regex": "^2.1.1",
     "zod": "^3.25.0",
-    "@dexto/core": "1.5.3"
+    "@dexto/core": "1.5.5"
   },
   "devDependencies": {
     "@types/diff": "^5.2.3",