dguiducci
9dafc4bfaa
Nightly Build / build (push) Successful in 6m49s
rewrite_to_host overwrote args["path"] with the resolved absolute host path, which then leaked into every message the on-disk execute returned to the agent (e.g. edit_file's "Text not found in /home/.../SKALD.md"). The agent must only ever see its virtual namespace. rewrite_to_host now stashes the agent-visible path under a private key while keeping the host path in args["path"] for I/O; each execute renders messages from the stashed path. The key is never persisted (tool args are logged from call.arguments before run_with rewrites them) nor sent to the LLM. Fixed across edit_file, write_file, insert_at_line, replace_lines, search_file and grep_files. read_file and list_files were already correct. Added a regression test asserting no host path component appears in the output of a physical-path write/edit/grep.