jeo-code 0.4.4 → 0.4.5

package/README.ja.md

@@ -150,11 +150,11 @@ CI は `.github/workflows/npm-publish.yml` で公開します — GitHub リリ
 ## 変更履歴 (Changelog)
 
 <!-- CHANGELOG:START (auto-generated from CHANGELOG.md — run `bun run changelog:sync`) -->
+- **[0.4.5]** (2026-06-14) — First-class filesystem make/remove tools.
 - **[0.4.4]** (2026-06-13) — Live subagent status mirroring, always-useful Ctrl+O activity tail, read lineRange crash guard.
 - **[0.4.3]** (2026-06-13) — Readability pass for autopilot, subagent activity, and worked-history review.
 - **[0.4.2]** (2026-06-13) — Thinking-loop termination guarantees (cycle guard + turn wall-clock budget), unboxed live status without step counters, self-contained `.jeo` namespace, live next-prompt input card, role-targeted model/thinking picker.
 - **[0.4.1]** (2026-06-12) — TUI card parity polish + done-time todo reconciliation.
-- **[0.4.0]** (2026-06-12) — Verified TUI, resilient engine, batch input, multilingual docs.
 
 See [CHANGELOG.md](CHANGELOG.md) for the full history.
 <!-- CHANGELOG:END -->

package/README.ko.md

@@ -150,11 +150,11 @@ CI는 `.github/workflows/npm-publish.yml`로 배포합니다 — GitHub 릴리
 ## 변경 이력 (Changelog)
 
 <!-- CHANGELOG:START (auto-generated from CHANGELOG.md — run `bun run changelog:sync`) -->
+- **[0.4.5]** (2026-06-14) — First-class filesystem make/remove tools.
 - **[0.4.4]** (2026-06-13) — Live subagent status mirroring, always-useful Ctrl+O activity tail, read lineRange crash guard.
 - **[0.4.3]** (2026-06-13) — Readability pass for autopilot, subagent activity, and worked-history review.
 - **[0.4.2]** (2026-06-13) — Thinking-loop termination guarantees (cycle guard + turn wall-clock budget), unboxed live status without step counters, self-contained `.jeo` namespace, live next-prompt input card, role-targeted model/thinking picker.
 - **[0.4.1]** (2026-06-12) — TUI card parity polish + done-time todo reconciliation.
-- **[0.4.0]** (2026-06-12) — Verified TUI, resilient engine, batch input, multilingual docs.
 
 See [CHANGELOG.md](CHANGELOG.md) for the full history.
 <!-- CHANGELOG:END -->

package/README.md

@@ -150,11 +150,11 @@ Required npm token permissions (repository secret `NPM_TOKEN`):
 ## Changelog
 
 <!-- CHANGELOG:START (auto-generated from CHANGELOG.md — run `bun run changelog:sync`) -->
+- **[0.4.5]** (2026-06-14) — First-class filesystem make/remove tools.
 - **[0.4.4]** (2026-06-13) — Live subagent status mirroring, always-useful Ctrl+O activity tail, read lineRange crash guard.
 - **[0.4.3]** (2026-06-13) — Readability pass for autopilot, subagent activity, and worked-history review.
 - **[0.4.2]** (2026-06-13) — Thinking-loop termination guarantees (cycle guard + turn wall-clock budget), unboxed live status without step counters, self-contained `.jeo` namespace, live next-prompt input card, role-targeted model/thinking picker.
 - **[0.4.1]** (2026-06-12) — TUI card parity polish + done-time todo reconciliation.
-- **[0.4.0]** (2026-06-12) — Verified TUI, resilient engine, batch input, multilingual docs.
 
 See [CHANGELOG.md](CHANGELOG.md) for the full history.
 <!-- CHANGELOG:END -->

package/README.zh.md

@@ -150,11 +150,11 @@ CI 通过 `.github/workflows/npm-publish.yml` 发布 — GitHub 发布 release
 ## 更新日志 (Changelog)
 
 <!-- CHANGELOG:START (auto-generated from CHANGELOG.md — run `bun run changelog:sync`) -->
+- **[0.4.5]** (2026-06-14) — First-class filesystem make/remove tools.
 - **[0.4.4]** (2026-06-13) — Live subagent status mirroring, always-useful Ctrl+O activity tail, read lineRange crash guard.
 - **[0.4.3]** (2026-06-13) — Readability pass for autopilot, subagent activity, and worked-history review.
 - **[0.4.2]** (2026-06-13) — Thinking-loop termination guarantees (cycle guard + turn wall-clock budget), unboxed live status without step counters, self-contained `.jeo` namespace, live next-prompt input card, role-targeted model/thinking picker.
 - **[0.4.1]** (2026-06-12) — TUI card parity polish + done-time todo reconciliation.
-- **[0.4.0]** (2026-06-12) — Verified TUI, resilient engine, batch input, multilingual docs.
 
 See [CHANGELOG.md](CHANGELOG.md) for the full history.
 <!-- CHANGELOG:END -->

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "jeo-code",
-  "version": "0.4.4",
+  "version": "0.4.5",
   "description": "Clean, highly optimized AI coding agent using spec-first loop",
   "type": "module",
   "main": "src/cli.ts",

package/src/agent/engine.ts

@@ -11,7 +11,7 @@ import * as fs from "node:fs/promises";
 import * as path from "node:path";
 import type { Message } from "./loop";
 import { extractJsonObject } from "./json";
-import { readTool, writeTool, editTool, bashTool, findTool, searchTool, lsTool, type ToolResult } from "./tools";
+import { readTool, writeTool, editTool, bashTool, findTool, searchTool, lsTool, mkdirTool, deleteTool, type ToolResult } from "./tools";
 import { webSearchTool, setWebSearchActiveModel } from "./web-search";
 import { friendlyProviderError, isContextOverflowError, isRefusalError } from "../util/provider-error";
 import { isRateLimitError } from "../util/retry";
@@ -50,6 +50,8 @@ export const DEFAULT_TOOLS: Record<string, ToolHandler> = {
   find: (a, cwd) => findTool(a.globPattern ?? a.pattern, cwd),
   search: (a, cwd) => searchTool(a.pattern, a.globPattern ?? "*", cwd, !!(a.ignoreCase ?? a.i), { before: a.before, after: a.after, context: a.context, maxMatches: a.maxMatches }),
   ls: (a, cwd) => lsTool(a.dirPath ?? a.path ?? a.dir ?? ".", cwd),
+  mkdir: (a, cwd) => mkdirTool(a.dirPath ?? a.path ?? a.dir, cwd),
+  delete: (a, cwd) => deleteTool(a.path ?? a.filePath ?? a.targetPath ?? a.dirPath, cwd, !!(a.recursive ?? a.r)),
   web_search: (a, cwd) => webSearchTool(a, cwd),
 };
 
@@ -63,8 +65,10 @@ export const TOOL_PROTOCOL = [
   "5. find   {globPattern}               — find files by name",
   "6. search {pattern, globPattern?, ignoreCase?, context?, maxMatches?} — grep (context: N lines around each match)",
   "7. ls     {dirPath}                   — list a directory's entries (dirs first)",
-  "8. web_search {query, recency?, limit?} — search the web (Anthropic-native: synthesized answer + sources + citations)",
-  "9. done   {reason?}                   — call when the task is fully implemented AND verified",
+  "8. mkdir  {dirPath}                   — create a directory (parents included; idempotent)",
+  "9. delete {path, recursive?}          — remove a file (or directory with recursive:true)",
+  "10. web_search {query, recency?, limit?} — search the web (Anthropic-native: synthesized answer + sources + citations)",
+  "11. done   {reason?}                  — call when the task is fully implemented AND verified",
   "",
   "Reply with STRICT JSON only — no code fences. You MAY include an optional leading",
   '"reasoning" string (one short sentence on your plan) before "tool":',

package/src/agent/subagents.ts

@@ -233,7 +233,7 @@ export function bashCommandAllowed(command: string, prefixes: string[]): boolean
  */
 export function subagentToolset(role: SubagentRole): Record<string, ToolHandler> {
   if (role.readOnly) {
-    const MUTATING = new Set(["write", "edit", "bash"]);
+    const MUTATING = new Set(["write", "edit", "bash", "mkdir", "delete"]);
     const ro: Record<string, ToolHandler> = {};
     for (const [name, handler] of Object.entries(DEFAULT_TOOLS)) {
       if (MUTATING.has(name)) continue;

package/src/agent/tools.ts

@@ -812,3 +812,65 @@ export async function lsTool(
     return { success: false, output: "", error: err.message };
   }
 }
+
+/**
+ * Create a directory (and any missing parents). Idempotent: an already-existing
+ * directory is a success, not an error — the model should not need to branch on
+ * existence. Respects the deep-interview mutation lock like write/edit.
+ */
+export async function mkdirTool(
+  dirPath: string,
+  cwd: string = process.cwd()
+): Promise<ToolResult> {
+  try {
+    if (typeof dirPath !== "string" || dirPath.trim() === "") {
+      return { success: false, output: "", error: 'mkdir requires a non-empty "dirPath".' };
+    }
+    await assertMutationAllowed(dirPath, cwd);
+    const abs = path.resolve(cwd, dirPath);
+    const existing = await fs.stat(abs).catch(() => null);
+    if (existing && !existing.isDirectory()) {
+      return { success: false, output: "", error: `Path exists and is not a directory: ${dirPath}` };
+    }
+    await fs.mkdir(abs, { recursive: true });
+    return { success: true, output: `Directory ready: ${dirPath}` };
+  } catch (err: any) {
+    return { success: false, output: "", error: err.message };
+  }
+}
+
+/**
+ * Delete a file or directory. A directory requires `recursive: true` so a stray
+ * call cannot wipe a populated tree by accident. Missing paths are a soft error
+ * (nothing to delete) rather than a crash. Respects the mutation lock like
+ * write/edit; the file-freshness snapshot is cleared so a later write to the
+ * same path is not rejected as stale.
+ */
+export async function deleteTool(
+  targetPath: string,
+  cwd: string = process.cwd(),
+  recursive: boolean = false
+): Promise<ToolResult> {
+  try {
+    if (typeof targetPath !== "string" || targetPath.trim() === "") {
+      return { success: false, output: "", error: 'delete requires a non-empty "path".' };
+    }
+    await assertMutationAllowed(targetPath, cwd);
+    const abs = path.resolve(cwd, targetPath);
+    if (abs === path.resolve(cwd)) {
+      return { success: false, output: "", error: "Refusing to delete the working directory itself." };
+    }
+    const st = await fs.stat(abs).catch(() => null);
+    if (!st) {
+      return { success: false, output: "", error: `Nothing to delete: ${targetPath} (does not exist).` };
+    }
+    if (st.isDirectory() && !recursive) {
+      return { success: false, output: "", error: `${targetPath} is a directory — pass recursive:true to remove it and its contents.` };
+    }
+    await fs.rm(abs, { recursive, force: false });
+    lastReadSnapshots.delete(abs); // a future write to this path must not be flagged stale
+    return { success: true, output: `Deleted ${st.isDirectory() ? "directory" : "file"}: ${targetPath}` };
+  } catch (err: any) {
+    return { success: false, output: "", error: err.message };
+  }
+}