coder

The coder worker is a path-jailed surface for filesystem work. Every coder::* call is scoped to one or more operator-configured allowed roots. Call coder::info first to discover the canonical allowed roots, size caps, response budgets (max_output_bytes, batch_read_budget_bytes, search_response_budget_bytes), the default_exclude_globs noise filter, and non-accessible globs. Relative paths resolve against the primary root (index 0); absolute paths are accepted when they canonicalize inside any allowed root — outside every root returns C215. .. segments and escaping symlinks are also rejected. A glob-based non_accessible_globs list keeps sensitive files (.env, *.pem, anything under secrets/) visible to directory listings but unreadable, unwritable, and unsearchable.