@spotpatch/agent 1.2.3 → 1.2.4

package/dist/index.js

@@ -1848,7 +1848,7 @@ var AGENT_TOOL_DEFINITIONS = Object.freeze([
   }),
   Object.freeze({
     name: AGENT_TOOL_NAMES.readFile,
-    description: "Read a bounded inclusive line range from one allowed UTF-8 text file.",
+    description: "Read a bounded inclusive line range from one allowed UTF-8 text file. Choose paths returned by list_files or search_text. A retryable TOOL_PATH_DENIED result means no file was read or changed: do not retry that path; discover an allowed path instead.",
     parameters: Object.freeze({
       type: "object",
       properties: Object.freeze({
@@ -1994,6 +1994,14 @@ function retryableArgumentsRejection() {
     guidance: "No files changed. Retry once with a new tool call ID and only the declared fields and value types."
   });
 }
+function retryableReadRejection() {
+  return Object.freeze({
+    errorCode: ERROR_CODES15.TOOL_PATH_DENIED,
+    retryable: true,
+    reason: "PATH_UNAVAILABLE",
+    guidance: "No file was read or changed. Do not retry the same path. Use list_files or search_text, then read only an allowed path returned by that tool. Protected, external, missing, symlinked, directory, binary, and non-UTF-8 paths are unavailable."
+  });
+}
 function createAgentToolExecutor(options) {
   const cacheByTurn = /* @__PURE__ */ new Map();
   const fileCatalog = createAgentFileCatalog(options.worktreeRoot);
@@ -2093,7 +2101,15 @@ function createAgentToolExecutor(options) {
       }
       case AGENT_TOOL_NAMES.readFile: {
         const input = parseArguments(readFileSchema, call.arguments);
-        const file = await readTextFile(input.path);
+        let file;
+        try {
+          file = await readTextFile(input.path);
+        } catch (error) {
+          if (error instanceof SpotPatchError15 && error.code === ERROR_CODES15.TOOL_PATH_DENIED) {
+            return retryableReadRejection();
+          }
+          throw error;
+        }
         const lines = file.content.split(/\r?\n/u);
         const startLine = input.startLine ?? 1;
         const endLine = input.endLine ?? Math.min(lines.length, startLine + 199);
@@ -2853,6 +2869,7 @@ Follow these rules exactly:
 - Every patch must begin with 'diff --git a/<path> b/<path>', include matching '--- a/<path>' and '+++ b/<path>' headers and valid '@@' hunks. Send only the raw diff: no Markdown fences, prose, shell commands, or '*** Begin Patch' markers.
 - If a write tool returns a retryable PATCH_REJECTED result, no file changed. Follow its guidance, re-read the current file, and retry once with a new tool call ID.
 - If any tool returns a retryable TOOL_ARGUMENTS_INVALID result, no file changed. Retry once with a new tool call ID using only the declared fields and value types.
+- If read_file returns a retryable TOOL_PATH_DENIED result, no file was read or changed. Do not retry that path. Use list_files or search_text and choose an allowed path returned by the tool; never probe protected, external, generated, credential, environment, or lock files.
 - Never modify credentials, environment files, lockfiles, generated output, Git metadata, or dependencies.
 - Run each relevant configured check after the final write so failures can be corrected. Do not rerun an unchanged check, and do not claim a check passed unless run_check returned a passed status.
 - Finish with a concise factual summary after all needed tool calls. Do not include secrets or absolute paths.`;
@@ -3085,7 +3102,7 @@ function isRetryableToolFailure(result) {
     return false;
   }
   const candidate = output;
-  return candidate.retryable === true && (candidate.errorCode === ERROR_CODES19.PATCH_REJECTED || candidate.errorCode === ERROR_CODES19.TOOL_ARGUMENTS_INVALID);
+  return candidate.retryable === true && (candidate.errorCode === ERROR_CODES19.PATCH_REJECTED || candidate.errorCode === ERROR_CODES19.TOOL_ARGUMENTS_INVALID || candidate.errorCode === ERROR_CODES19.TOOL_PATH_DENIED);
 }
 function throwIfCancelled(signal) {
   if (signal.aborted) {