@rowan-agent/agent 0.9.0 → 0.9.1

package/dist/index.d.ts

@@ -590,6 +590,10 @@ type AgentContext = {
     phases?: PhaseRegistry;
 };
 
+/**
+ * `root` anchors relative paths and the Bash working directory. It is not a
+ * filesystem sandbox: core Tools use the permissions of the host process.
+ */
 type CoreToolContext = {
     root?: string;
     maxReadBytes?: number;

package/dist/index.js

@@ -1,6 +1,6 @@
 // src/harness/tools/index.ts
 import { mkdir, readFile as readFile2, stat, writeFile } from "fs/promises";
-import { basename as basename2, dirname as dirname2, isAbsolute as isAbsolute2, relative as relative2, resolve as resolve2, sep as sep2 } from "path";
+import { basename as basename2, dirname as dirname2, relative as relative2, resolve as resolve2 } from "path";
 import Type2 from "typebox";
 import Schema from "typebox/schema";
 
@@ -308,9 +308,6 @@ function resolveCoreToolPath(context, path = ".") {
   const inputPath = normalizeCoreToolInputPath(path);
   const absolutePath = resolve2(root, inputPath);
   const relativePath = relative2(root, absolutePath);
-  if (relativePath === ".." || relativePath.startsWith(`..${sep2}`) || isAbsolute2(relativePath)) {
-    throw new Error(`Path escapes workspace root: ${path}`);
-  }
   return {
     root,
     inputPath,
@@ -465,7 +462,7 @@ async function captureStream(stream, maxBytes) {
 function createReadTool(context) {
   return {
     name: "read",
-    description: "Read a file in the workspace.",
+    description: "Read a file using the host process filesystem permissions.",
     parameters: ReadArgsSchema,
     promptSnippet: "Read file contents.",
     promptGuidelines: ["Read files before editing them."],
@@ -536,7 +533,7 @@ function createReadTool(context) {
 function createWriteTool(context) {
   return {
     name: "write",
-    description: "Create or overwrite a file in the workspace.",
+    description: "Create or overwrite a file using the host process filesystem permissions.",
     parameters: WriteArgsSchema,
     promptSnippet: "Create or overwrite files.",
     promptGuidelines: ["Use edit for partial changes."],
@@ -588,7 +585,7 @@ function applyEditReplacements(current, edits) {
 function createEditTool(context) {
   return {
     name: "edit",
-    description: "Apply exact text replacements to a workspace file.",
+    description: "Apply exact text replacements using the host process filesystem permissions.",
     parameters: EditArgsSchema,
     promptSnippet: "Apply exact text replacements.",
     promptGuidelines: ["Read the file first; each oldText must match exactly once."],
@@ -624,7 +621,7 @@ function createEditTool(context) {
 function createBashTool(context) {
   return {
     name: "bash",
-    description: "Run a bash command in the workspace.",
+    description: "Run a bash command with the host process filesystem permissions; root is the working directory.",
     parameters: BashArgsSchema,
     promptSnippet: "Run shell commands.",
     promptGuidelines: ["Use read/write/edit for file operations."],
@@ -1540,7 +1537,7 @@ function buildSystemPrompt(options) {
   }
   const guidelines = guidelinesList.map((g) => `- ${g}`).join("\n");
   const skillsSection = skillsBlock ? `The following skills provide specialized instructions for specific tasks.
-Read the full skill file when the task matches its description.
+Use the read tool to load a skill's file when the task matches its description.
 When a skill file references a relative path, resolve it against the skill directory (parent of SKILL.md) and use that absolute path in tool commands.
 
 ${skillsBlock}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@rowan-agent/agent",
-  "version": "0.9.0",
+  "version": "0.9.1",
   "license": "MIT",
   "repository": {
     "type": "git",