Files & structured data

Filesystem and structured-data tools share workspace jails, bounded output, and stale-state protection.

Read families

read routes text selectors, binary files, images, archives, documents, notebooks, SQLite rows, artifacts, MCP resources, and HTTP(S) content. Narrow operations remain available as read_file, read_image, read_archive, read_document, and read_sqlite.

Discovery and search

Discover paths before reading unknown files. Prefer bounded selectors and native search over shell traversal.

Mutations

write, write_file, archive and SQLite writers, patches, anchored edits, moves, and deletes require write exposure. Existing state is guarded by a digest or snapshot tag so concurrent changes fail instead of being overwritten.

Addressing

src/lib.rs:40-90
src/lib.rs:raw
archive.zip:path/in/archive
state.sqlite:jobs:42
artifact://large-output:1-120