@neurocode-ai/core 1.18.8

package/test/tool-edit.test.ts

@@ -0,0 +1,434 @@
+import fs from "fs/promises"
+import path from "path"
+import { fileURLToPath } from "url"
+import { describe, expect, test } from "bun:test"
+import { Effect, Layer } from "effect"
+import { AppNodeBuilder } from "@neurocode-ai/core/effect/app-node-builder"
+import { LayerNode } from "@neurocode-ai/core/effect/layer-node"
+import { FileMutation } from "@neurocode-ai/core/file-mutation"
+import { FSUtil } from "@neurocode-ai/core/fs-util"
+import { Location } from "@neurocode-ai/core/location"
+import { LocationMutation } from "@neurocode-ai/core/location-mutation"
+import { PermissionV2 } from "@neurocode-ai/core/permission"
+import { AbsolutePath } from "@neurocode-ai/core/schema"
+import { SessionV2 } from "@neurocode-ai/core/session"
+import { ToolRegistry } from "@neurocode-ai/core/tool/registry"
+import { ToolOutputStore } from "@neurocode-ai/core/tool-output-store"
+import { EditTool } from "@neurocode-ai/core/tool/edit"
+import { location } from "./fixture/location"
+import { tmpdir } from "./fixture/tmpdir"
+import { testEffect } from "./lib/effect"
+import { toolIdentity, executeTool, settleTool, toolDefinitions } from "./lib/tool"
+
+const sessionID = SessionV2.ID.make("ses_edit_tool_test")
+const assertions: PermissionV2.AssertInput[] = []
+const writes: string[] = []
+let reads = 0
+let denyAction: string | undefined
+let afterRead = (_target: string, _content: Uint8Array): Effect.Effect<void> => Effect.void
+
+const permission = Layer.succeed(
+  PermissionV2.Service,
+  PermissionV2.Service.of({
+    assert: (input) =>
+      Effect.sync(() => assertions.push(input)).pipe(
+        Effect.andThen(
+          input.action === denyAction ? Effect.fail(new PermissionV2.BlockedError({ rules: [] })) : Effect.void,
+        ),
+      ),
+    ask: () => Effect.die("unused"),
+    reply: () => Effect.die("unused"),
+    get: () => Effect.die("unused"),
+    forSession: () => Effect.die("unused"),
+    list: () => Effect.die("unused"),
+  }),
+)
+
+const reset = () => {
+  assertions.length = 0
+  writes.length = 0
+  reads = 0
+  denyAction = undefined
+  afterRead = () => Effect.void
+}
+
+const filesystem = Layer.effect(
+  FSUtil.Service,
+  Effect.gen(function* () {
+    const fs = yield* FSUtil.Service
+    return FSUtil.Service.of({
+      ...fs,
+      readFile: (target) =>
+        fs
+          .readFile(target)
+          .pipe(
+            Effect.tap((content) =>
+              Effect.sync(() => reads++).pipe(Effect.andThen(Effect.suspend(() => afterRead(target, content)))),
+            ),
+          ),
+      writeWithDirs: (target, content, mode) =>
+        Effect.sync(() => writes.push(target)).pipe(Effect.andThen(fs.writeWithDirs(target, content, mode))),
+      writeFile: (target, content, options) =>
+        Effect.sync(() => writes.push(target)).pipe(Effect.andThen(fs.writeFile(target, content, options))),
+      writeFileString: (target, content, options) =>
+        Effect.sync(() => writes.push(target)).pipe(Effect.andThen(fs.writeFileString(target, content, options))),
+    })
+  }),
+).pipe(Layer.provide(LayerNode.compile(FSUtil.node)))
+
+const withTool = <A, E, R>(directory: string, body: (registry: ToolRegistry.Interface) => Effect.Effect<A, E, R>) => {
+  const activeLocation = Layer.succeed(
+    Location.Service,
+    Location.Service.of(location({ directory: AbsolutePath.make(directory) })),
+  )
+  return Effect.gen(function* () {
+    return yield* body(yield* ToolRegistry.Service)
+  }).pipe(
+    Effect.provide(
+      AppNodeBuilder.build(
+        LayerNode.group([
+          ToolRegistry.node,
+          ToolRegistry.toolsNode,
+          LocationMutation.node,
+          FileMutation.node,
+          EditTool.node,
+        ]),
+        [
+          [FSUtil.node, filesystem],
+          [Location.node, activeLocation],
+          [PermissionV2.node, permission],
+          [ToolOutputStore.node, ToolOutputStore.nodeWithoutConfig],
+        ],
+      ),
+    ),
+  )
+}
+
+const call = (input: typeof EditTool.Input.Type, id = "call-edit") => ({
+  sessionID,
+  ...toolIdentity,
+  call: { type: "tool-call" as const, id, name: "edit", input },
+})
+
+const it = testEffect(Layer.empty)
+
+describe("EditTool", () => {
+  it.live("registers and replaces relative exact text through FileMutation once", () =>
+    Effect.acquireUseRelease(
+      Effect.promise(() => tmpdir()),
+      (tmp) => {
+        reset()
+        const target = path.join(tmp.path, "hello.txt")
+        return Effect.promise(() => fs.writeFile(target, "before\nrest\n")).pipe(
+          Effect.andThen(
+            withTool(tmp.path, (registry) =>
+              Effect.gen(function* () {
+                expect((yield* toolDefinitions(registry)).map((tool) => tool.name)).toEqual(["edit"])
+                expect(yield* toolDefinitions(registry, [{ action: "edit", resource: "*", effect: "deny" }])).toEqual(
+                  [],
+                )
+                const settled = yield* settleTool(
+                  registry,
+                  call({ path: "hello.txt", oldString: "before", newString: "after" }),
+                )
+                expect(settled.result).toEqual({
+                  type: "text",
+                  value: "Edited file successfully: hello.txt\nReplacements: 1\n```diff\n-before\n+after\n```",
+                })
+                expect(settled.output?.structured).toEqual({
+                  replacements: 1,
+                  files: [
+                    {
+                      file: "hello.txt",
+                      status: "modified",
+                      additions: 1,
+                      deletions: 1,
+                      patch: expect.stringContaining("-before\n+after"),
+                    },
+                  ],
+                })
+                expect(yield* Effect.promise(() => fs.readFile(target, "utf8"))).toBe("after\nrest\n")
+                expect(assertions).toMatchObject([{ sessionID, action: "edit", resources: ["hello.txt"], save: ["*"] }])
+                expect(writes).toEqual([yield* Effect.promise(() => fs.realpath(target))])
+              }),
+            ),
+          ),
+        )
+      },
+      (tmp) => Effect.promise(() => tmp[Symbol.asyncDispose]()),
+    ),
+  )
+
+  it.live("accepts an absolute file path inside the active Location", () =>
+    Effect.acquireUseRelease(
+      Effect.promise(() => tmpdir()),
+      (tmp) => {
+        reset()
+        const target = path.join(tmp.path, "absolute.txt")
+        return Effect.promise(() => fs.writeFile(target, "before")).pipe(
+          Effect.andThen(
+            withTool(tmp.path, (registry) =>
+              executeTool(registry, call({ path: target, oldString: "before", newString: "after" })),
+            ),
+          ),
+          Effect.andThen((result) =>
+            Effect.gen(function* () {
+              expect(result.type).toBe("text")
+              expect(assertions.map((input) => input.action)).toEqual(["edit"])
+              expect(yield* Effect.promise(() => fs.readFile(target, "utf8"))).toBe("after")
+            }),
+          ),
+        )
+      },
+      (tmp) => Effect.promise(() => tmp[Symbol.asyncDispose]()),
+    ),
+  )
+
+  it.live("approves an explicit external absolute path before edit", () =>
+    Effect.acquireUseRelease(
+      Effect.promise(() => Promise.all([tmpdir(), tmpdir()])),
+      ([active, outside]) => {
+        reset()
+        const target = path.join(outside.path, "external.txt")
+        return Effect.promise(() => fs.writeFile(target, "before")).pipe(
+          Effect.andThen(
+            withTool(active.path, (registry) =>
+              executeTool(registry, call({ path: target, oldString: "before", newString: "after" })),
+            ),
+          ),
+          Effect.andThen((result) =>
+            Effect.gen(function* () {
+              expect(result.type).toBe("text")
+              expect(assertions.map((input) => input.action)).toEqual(["external_directory", "edit"])
+              expect(yield* Effect.promise(() => fs.readFile(target, "utf8"))).toBe("after")
+              expect(writes).toHaveLength(1)
+            }),
+          ),
+        )
+      },
+      ([active, outside]) =>
+        Effect.promise(() =>
+          Promise.all([active[Symbol.asyncDispose](), outside[Symbol.asyncDispose]()]).then(() => undefined),
+        ),
+    ),
+  )
+
+  it.live("does not write when external_directory or edit approval is denied", () =>
+    Effect.acquireUseRelease(
+      Effect.promise(() => Promise.all([tmpdir(), tmpdir()])),
+      ([active, outside]) =>
+        Effect.gen(function* () {
+          const external = path.join(outside.path, "denied.txt")
+          yield* Effect.promise(() => fs.writeFile(external, "before"))
+          reset()
+          denyAction = "external_directory"
+          expect(
+            yield* withTool(active.path, (registry) =>
+              executeTool(registry, call({ path: external, oldString: "before", newString: "after" })),
+            ),
+          ).toEqual({
+            type: "error",
+            value: `Unable to edit ${external}`,
+          })
+          expect(assertions.map((input) => input.action)).toEqual(["external_directory"])
+          expect(reads).toBe(0)
+          expect(writes).toEqual([])
+
+          reset()
+          denyAction = "edit"
+          expect(
+            yield* withTool(active.path, (registry) =>
+              executeTool(registry, call({ path: external, oldString: "before", newString: "after" })),
+            ),
+          ).toEqual({
+            type: "error",
+            value: `Unable to edit ${external}`,
+          })
+          expect(assertions.map((input) => input.action)).toEqual(["external_directory", "edit"])
+          expect(reads).toBe(0)
+          expect(writes).toEqual([])
+          expect(yield* Effect.promise(() => fs.readFile(external, "utf8"))).toBe("before")
+        }),
+      ([active, outside]) =>
+        Effect.promise(() =>
+          Promise.all([active[Symbol.asyncDispose](), outside[Symbol.asyncDispose]()]).then(() => undefined),
+        ),
+    ),
+  )
+
+  it.live("denied edit reads no target content and does not disclose whether oldString matches", () =>
+    Effect.acquireUseRelease(
+      Effect.promise(() => tmpdir()),
+      (tmp) => {
+        reset()
+        denyAction = "edit"
+        const target = path.join(tmp.path, "secret.txt")
+        return Effect.promise(() => fs.writeFile(target, "secret content")).pipe(
+          Effect.andThen(
+            withTool(tmp.path, (registry) =>
+              Effect.gen(function* () {
+                const matching = yield* executeTool(
+                  registry,
+                  call({ path: "secret.txt", oldString: "secret content", newString: "replacement" }),
+                )
+                const missing = yield* executeTool(
+                  registry,
+                  call({ path: "secret.txt", oldString: "not present", newString: "replacement" }),
+                )
+
+                expect(matching).toEqual({ type: "error", value: "Unable to edit secret.txt" })
+                expect(missing).toEqual(matching)
+                expect(assertions.map((input) => input.action)).toEqual(["edit", "edit"])
+                expect(reads).toBe(0)
+                expect(writes).toEqual([])
+              }),
+            ),
+          ),
+        )
+      },
+      (tmp) => Effect.promise(() => tmp[Symbol.asyncDispose]()),
+    ),
+  )
+
+  it.live("rejects no-op, empty, missing, and ambiguous exact replacements", () =>
+    Effect.acquireUseRelease(
+      Effect.promise(() => tmpdir()),
+      (tmp) => {
+        reset()
+        const target = path.join(tmp.path, "matches.txt")
+        return Effect.promise(() => fs.writeFile(target, "same same")).pipe(
+          Effect.andThen(
+            withTool(tmp.path, (registry) =>
+              Effect.gen(function* () {
+                expect(
+                  yield* executeTool(registry, call({ path: "matches.txt", oldString: "same", newString: "same" })),
+                ).toEqual({
+                  type: "error",
+                  value: "No changes to apply: oldString and newString are identical.",
+                })
+                expect(
+                  yield* executeTool(registry, call({ path: "matches.txt", oldString: "", newString: "after" })),
+                ).toEqual({
+                  type: "error",
+                  value: "oldString must not be empty. Use write to create or overwrite a file.",
+                })
+                expect(
+                  yield* executeTool(registry, call({ path: "matches.txt", oldString: "missing", newString: "after" })),
+                ).toEqual({
+                  type: "error",
+                  value:
+                    "Could not find oldString in the file. It must match exactly, including whitespace and indentation.",
+                })
+                expect(
+                  yield* executeTool(registry, call({ path: "matches.txt", oldString: "same", newString: "after" })),
+                ).toEqual({
+                  type: "error",
+                  value:
+                    "Found multiple exact matches for oldString. Provide more surrounding context or set replaceAll to true.",
+                })
+                expect(writes).toEqual([])
+              }),
+            ),
+          ),
+        )
+      },
+      (tmp) => Effect.promise(() => tmp[Symbol.asyncDispose]()),
+    ),
+  )
+
+  it.live("replaces every exact occurrence when replaceAll is true", () =>
+    Effect.acquireUseRelease(
+      Effect.promise(() => tmpdir()),
+      (tmp) => {
+        reset()
+        const target = path.join(tmp.path, "all.txt")
+        return Effect.promise(() => fs.writeFile(target, "same same same")).pipe(
+          Effect.andThen(
+            withTool(tmp.path, (registry) =>
+              settleTool(registry, call({ path: "all.txt", oldString: "same", newString: "after", replaceAll: true })),
+            ),
+          ),
+          Effect.andThen((settled) =>
+            Effect.gen(function* () {
+              expect(settled.output?.structured).toMatchObject({ replacements: 3 })
+              expect(yield* Effect.promise(() => fs.readFile(target, "utf8"))).toBe("after after after")
+              expect(writes).toHaveLength(1)
+            }),
+          ),
+        )
+      },
+      (tmp) => Effect.promise(() => tmp[Symbol.asyncDispose]()),
+    ),
+  )
+
+  it.live("preserves BOM and CRLF line endings", () =>
+    Effect.acquireUseRelease(
+      Effect.promise(() => tmpdir()),
+      (tmp) => {
+        reset()
+        const target = path.join(tmp.path, "windows.txt")
+        return Effect.promise(() => fs.writeFile(target, "\uFEFFbefore\r\nrest\r\n")).pipe(
+          Effect.andThen(
+            withTool(tmp.path, (registry) =>
+              executeTool(registry, call({ path: "windows.txt", oldString: "before\nrest", newString: "after\nrest" })),
+            ),
+          ),
+          Effect.andThen(() => Effect.promise(() => fs.readFile(target, "utf8"))),
+          Effect.tap((content) => Effect.sync(() => expect(content).toBe("\uFEFFafter\r\nrest\r\n"))),
+        )
+      },
+      (tmp) => Effect.promise(() => tmp[Symbol.asyncDispose]()),
+    ),
+  )
+
+  it.live("rejects an in-place content change after matching but before conditional commit", () =>
+    Effect.acquireUseRelease(
+      Effect.promise(() => tmpdir()),
+      (tmp) => {
+        reset()
+        const target = path.join(tmp.path, "concurrent.txt")
+        afterRead = () => (reads === 1 ? Effect.promise(() => fs.writeFile(target, "newer\n")) : Effect.void)
+        return Effect.promise(() => fs.writeFile(target, "before\n")).pipe(
+          Effect.andThen(
+            withTool(tmp.path, (registry) =>
+              executeTool(registry, call({ path: "concurrent.txt", oldString: "before", newString: "after" })),
+            ),
+          ),
+          Effect.andThen((result) =>
+            Effect.gen(function* () {
+              expect(result).toEqual({
+                type: "error",
+                value: "File changed after permission approval. Read it again before editing.",
+              })
+              expect(yield* Effect.promise(() => fs.readFile(target, "utf8"))).toBe("newer\n")
+              expect(writes).toEqual([])
+            }),
+          ),
+        )
+      },
+      (tmp) => Effect.promise(() => tmp[Symbol.asyncDispose]()),
+    ),
+  )
+})
+
+test("keeps the locked edit schema, semantics docstring, and deferred TODOs visible", async () => {
+  const source = (await fs.readFile(new URL("../src/tool/edit.ts", import.meta.url), "utf8")).replaceAll("\r\n", "\n")
+  const definition = await Effect.runPromise(
+    withTool(path.dirname(fileURLToPath(import.meta.url)), (registry) => toolDefinitions(registry)),
+  )
+  const schema = definition[0]?.inputSchema as { readonly properties?: Record<string, unknown> }
+
+  expect(Object.keys(schema.properties ?? {}).sort()).toEqual(["newString", "oldString", "path", "replaceAll"])
+  expect(source).toContain(
+    "absolute external paths retain mutation capability through a separate\n * external_directory approval before edit approval.",
+  )
+  for (const todo of [
+    "Port V1 fuzzy correction strategies only after exact-edit behavior is established: line-trimmed matching, block-anchor fallback, indentation correction, and similarity-threshold review.",
+    "Add formatter integration after V2 formatter runtime exists.",
+    "Publish watcher/file-edit events after V2 watcher integration exists.",
+    "Add snapshots / undo after design exists.",
+    "Add LSP notification and diagnostics after V2 LSP runtime exists.",
+  ]) {
+    expect(source).toContain(`TODO: ${todo}`)
+  }
+})

package/test/tool-output-store.test.ts

@@ -0,0 +1,247 @@
+import { describe, expect } from "bun:test"
+import path from "path"
+import { Cause, Effect, Exit, Fiber, Layer, Option } from "effect"
+import { AppNodeBuilder } from "@neurocode-ai/core/effect/app-node-builder"
+import { LayerNode } from "@neurocode-ai/core/effect/layer-node"
+import { FSUtil } from "@neurocode-ai/core/fs-util"
+import { Global } from "@neurocode-ai/core/global"
+import { Config } from "@neurocode-ai/core/config"
+import { ConfigToolOutput } from "@neurocode-ai/core/config/tool-output"
+import { SessionV2 } from "@neurocode-ai/core/session"
+import { ToolOutputStore } from "@neurocode-ai/core/tool-output-store"
+import { testEffect } from "./lib/effect"
+import { tmpdir } from "./fixture/tmpdir"
+
+const sessionID = SessionV2.ID.make("ses_tool_output_store")
+
+const withStore = <A, E, R>(
+  body: (input: { root: string; store: ToolOutputStore.Interface; fs: FSUtil.Interface }) => Effect.Effect<A, E, R>,
+  config?: Config.Info,
+) =>
+  Effect.acquireUseRelease(
+    Effect.promise(() => tmpdir()),
+    (tmp) => {
+      const global = Global.layerWith({ data: tmp.path })
+      const configured = config
+        ? Layer.succeed(
+            Config.Service,
+            Config.Service.of({
+              entries: () => Effect.succeed([new Config.Document({ type: "document", info: config })]),
+            }),
+          )
+        : Layer.empty
+
+      const store = AppNodeBuilder.build(LayerNode.group([ToolOutputStore.node, FSUtil.node]), [
+        [Global.node, global],
+        [Config.node, configured],
+      ])
+      return Effect.gen(function* () {
+        return yield* body({ root: tmp.path, store: yield* ToolOutputStore.Service, fs: yield* FSUtil.Service })
+      }).pipe(Effect.provide(store))
+    },
+    (tmp) => Effect.promise(() => tmp[Symbol.asyncDispose]()),
+  )
+
+const it = testEffect(Layer.empty)
+
+describe("ToolOutputStore", () => {
+  it.live("bounds the provider-facing text channel with one managed file", () =>
+    withStore(({ store, fs }) =>
+      Effect.gen(function* () {
+        const first = "HEAD-" + "x".repeat(30_000)
+        const second = "y".repeat(30_000) + "-TAIL"
+        const result = yield* store.bound({
+          sessionID,
+          toolCallID: "call-aggregate",
+          output: {
+            structured: { kind: "report" },
+            content: [
+              { type: "text", text: first },
+              { type: "text", text: second },
+            ],
+          },
+        })
+        expect(result.output.structured).toEqual({ kind: "report" })
+        expect(result.outputPaths).toHaveLength(1)
+        expect(yield* fs.readFileString(result.outputPaths[0])).toBe(first + second)
+        if (result.output.content[0]?.type !== "text") throw new Error("expected text preview")
+        expect(Buffer.byteLength(result.output.content[0].text)).toBeLessThanOrEqual(ToolOutputStore.MAX_BYTES)
+      }),
+    ),
+  )
+
+  it.live("uses bounded text for oversized structured-only output", () =>
+    withStore(({ store, fs }) =>
+      Effect.gen(function* () {
+        const structured = { text: "x".repeat(ToolOutputStore.MAX_BYTES) }
+        const result = yield* store.bound({ sessionID, toolCallID: "call-json", output: { structured, content: [] } })
+        expect(result.output.structured).toEqual(structured)
+        expect(result.outputPaths).toHaveLength(1)
+        expect(JSON.parse(yield* fs.readFileString(result.outputPaths[0]))).toEqual(structured)
+        expect(result.output.content).toHaveLength(1)
+      }),
+    ),
+  )
+
+  it.live("preserves native media and structured metadata without applying a settlement media limit", () =>
+    withStore(({ store }) =>
+      Effect.gen(function* () {
+        const data = "a".repeat(6 * 1024 * 1024)
+        const result = yield* store.bound({
+          sessionID,
+          toolCallID: "call-file",
+          output: {
+            structured: { caption: "pixel" },
+            content: [{ type: "file", uri: `data:image/png;base64,${data}`, mime: "image/png", name: "pixel.png" }],
+          },
+        })
+        expect(result.outputPaths).toEqual([])
+        expect(result.output.structured).toEqual({ caption: "pixel" })
+        expect(result.output.content).toHaveLength(1)
+        expect(result.output.content[0]).toEqual({
+          type: "file",
+          uri: `data:image/png;base64,${data}`,
+          mime: "image/png",
+          name: "pixel.png",
+        })
+      }),
+    ),
+  )
+
+  it.live("preserves structured metadata and native media when bounding text", () =>
+    withStore(({ store, fs }) =>
+      Effect.gen(function* () {
+        const text = "x".repeat(ToolOutputStore.MAX_BYTES + 1)
+        const media = {
+          type: "file" as const,
+          uri: "data:image/png;base64,aGVsbG8=",
+          mime: "image/png",
+          name: "pixel.png",
+        }
+        const result = yield* store.bound({
+          sessionID,
+          toolCallID: "call-text-and-media",
+          output: { structured: { caption: "pixel" }, content: [{ type: "text", text }, media] },
+        })
+
+        expect(result.output.structured).toEqual({ caption: "pixel" })
+        expect(result.output.content[1]).toEqual(media)
+        expect(yield* fs.readFileString(result.outputPaths[0])).toBe(text)
+      }),
+    ),
+  )
+
+  it.live("does not double-count structured data duplicated in projected text", () =>
+    withStore(({ store }) =>
+      Effect.gen(function* () {
+        const text = "x".repeat(30_000)
+        const output = { structured: { output: text }, content: [{ type: "text" as const, text }] }
+        expect(yield* store.bound({ sessionID, toolCallID: "call-duplicated", output })).toEqual({
+          output,
+          outputPaths: [],
+        })
+      }),
+    ),
+  )
+
+  it.live("fails oversized settlement when complete retention cannot be written", () =>
+    withStore(({ root, store, fs }) =>
+      Effect.gen(function* () {
+        yield* fs.writeFileString(path.join(root, "tool-output"), "not a directory")
+        const exit = yield* store
+          .bound({
+            sessionID,
+            toolCallID: "call-lossy",
+            output: { structured: {}, content: [{ type: "text", text: "x".repeat(ToolOutputStore.MAX_BYTES + 1) }] },
+          })
+          .pipe(Effect.exit)
+        expect(Exit.isFailure(exit)).toBe(true)
+        if (Exit.isFailure(exit))
+          expect(Option.getOrUndefined(Cause.findErrorOption(exit.cause))?._tag).toBe("ToolOutputStore.StorageError")
+      }),
+    ),
+  )
+
+  it.live("does not encode ignored structured metadata when projected content exists", () =>
+    withStore(({ store }) =>
+      Effect.gen(function* () {
+        const output = { structured: { value: 1n }, content: [{ type: "text" as const, text: "readable text" }] }
+        expect(yield* store.bound({ sessionID, toolCallID: "call-unencodable", output })).toEqual({
+          output,
+          outputPaths: [],
+        })
+      }),
+    ),
+  )
+
+  it.live("preserves interruption while retaining complete output", () =>
+    Effect.gen(function* () {
+      const root = yield* Effect.promise(() => tmpdir())
+      const blockedFilesystem = Layer.effect(
+        FSUtil.Service,
+        Effect.gen(function* () {
+          const fs = yield* FSUtil.Service
+          return FSUtil.Service.of({
+            ...fs,
+            ensureDir: () => Effect.void,
+            writeFileString: () => Effect.never,
+          })
+        }),
+      ).pipe(Layer.provide(LayerNode.compile(FSUtil.node)))
+      const store = AppNodeBuilder.build(ToolOutputStore.nodeWithoutConfig, [
+        [Global.node, Global.layerWith({ data: root.path })],
+        [FSUtil.node, blockedFilesystem],
+      ])
+      const exit = yield* Effect.gen(function* () {
+        const service = yield* ToolOutputStore.Service
+        const fiber = yield* service
+          .bound({
+            sessionID,
+            toolCallID: "call-interrupted",
+            output: { structured: {}, content: [{ type: "text", text: "x".repeat(ToolOutputStore.MAX_BYTES + 1) }] },
+          })
+          .pipe(Effect.forkChild)
+        yield* Fiber.interrupt(fiber)
+        return yield* Fiber.await(fiber)
+      }).pipe(Effect.provide(store))
+      expect(Exit.isFailure(exit) && Cause.hasInterrupts(exit.cause)).toBe(true)
+      yield* Effect.promise(() => root[Symbol.asyncDispose]())
+    }),
+  )
+
+  it.live("honors configured limits", () =>
+    withStore(
+      ({ store }) =>
+        Effect.gen(function* () {
+          expect(yield* store.limits()).toEqual({ maxLines: 2, maxBytes: 1_000 })
+          const result = yield* store.bound({
+            sessionID,
+            toolCallID: "call-config",
+            output: { structured: {}, content: [{ type: "text", text: "one\ntwo\nthree" }] },
+          })
+          expect(result.outputPaths).toHaveLength(1)
+        }),
+      new Config.Info({ tool_output: new ConfigToolOutput.Info({ max_lines: 2, max_bytes: 1_000 }) }),
+    ),
+  )
+
+  it.live("cleans expired managed files and preserves unrelated files", () =>
+    withStore(({ root, store, fs }) =>
+      Effect.gen(function* () {
+        const old = path.join(root, "tool-output", "tool_old")
+        const recent = path.join(root, "tool-output", "tool_recent")
+        const unrelated = path.join(root, "tool-output", "keep.txt")
+        yield* fs.ensureDir(path.join(root, "tool-output"))
+        yield* fs.writeFileString(old, "old")
+        yield* fs.writeFileString(recent, "recent")
+        yield* fs.writeFileString(unrelated, "keep")
+        const expired = new Date(Date.now() - 8 * 24 * 60 * 60 * 1_000)
+        yield* fs.utimes(old, expired, expired)
+        yield* store.cleanup()
+        expect(yield* fs.exists(old)).toBe(false)
+        expect(yield* fs.exists(recent)).toBe(true)
+        expect(yield* fs.exists(unrelated)).toBe(true)
+      }),
+    ),
+  )
+})