Adds four new tool groups to agent sessions:
- fs_read_file, fs_write_file, fs_list_directory — sandboxed to configurable base dir
- git_status, git_log, git_diff — read-only git operations
- shell_exec — sandboxed command execution with 30s timeout, 100KB output cap, and blocked command list
- web_get, web_post — HTTP fetch with 15s timeout, 512KB response cap, and private IP blocking
Tool factories are registered in AgentService constructor and exported from the tools index.
Base directory and working directories are configurable via AGENT_FILE_SANDBOX_DIR, AGENT_GIT_CWD,
and AGENT_SHELL_CWD environment variables.
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
