Adds four new tool groups to agent sessions:
- fs_read_file, fs_write_file, fs_list_directory — sandboxed to configurable base dir
- git_status, git_log, git_diff — read-only git operations
- shell_exec — sandboxed command execution with 30s timeout, 100KB output cap, and blocked command list
- web_get, web_post — HTTP fetch with 15s timeout, 512KB response cap, and private IP blocking
Tool factories are registered in AgentService constructor and exported from the tools index.
Base directory and working directories are configurable via AGENT_FILE_SANDBOX_DIR, AGENT_GIT_CWD,
and AGENT_SHELL_CWD environment variables.
Co-Authored-By: Claude Sonnet 4.6 <[email protected]>
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
Adds file ops (read/write/list), git status/log/diff, sandboxed shell exec, and HTTP fetch tools to agent sessions.