File Tools

OpenSyntax performs real workspace file and folder operations through typed tools. The model never directly manipulates files.

Permission Modes

Mode	Allowed	Approval Required
`read-only`	Read, list, search, git status, git diff.	None.
`workspace-write`	Create, edit, patch, copy, move, rename inside the workspace.	Overwrites, deletes, recursive operations, lockfiles, `.env`, secrets.
`shell-safe`	Workspace tools plus safe shell commands.	Package installs, destructive shell commands, side-effectful builds.
`full-access`	Broadest workspace and shell capability.	All destructive actions still require approval.

Tools

File tools include read_file, read_many_files, create_file, write_file, patch_file, apply_patch, replace_in_file, insert_into_file, append_to_file, delete_file, rename_file, copy_file, move_file, stat_path, file_exists, and generate_diff.

Folder tools include list_folder, create_folder, delete_folder, copy_folder, move_folder, and rename_folder.

Safety Checks

Normalize and resolve every path inside the current workspace.
Block path traversal, .git, workspace root, home, and OS folders.
Respect .gitignore, .opensyntaxignore, OPENSYNTAX.md, and AGENTS.md restrictions.
Generate diffs before writes and warn on dirty git files.
Write audit records to ~/.opensyntax/audit/file-operations.jsonl.

Folder Delete Confirmation

OpenSyntax wants to delete folder:

docs/old

Files: 18
Folders: 2
Size: 124 KB

Type exactly:
delete docs/old