1.2.5

package.json

@@ -1,6 +1,6 @@
 {
   "name": "@push.rocks/smartagent",
-  "version": "1.1.1",
+  "version": "1.2.5",
   "private": false,
   "description": "an agentic framework built on top of @push.rocks/smartai",
   "main": "dist_ts/index.js",
@@ -26,7 +26,8 @@
     "@push.rocks/smartdeno": "^1.2.0",
     "@push.rocks/smartfs": "^1.2.0",
     "@push.rocks/smartrequest": "^5.0.1",
-    "@push.rocks/smartshell": "^3.3.0"
+    "@push.rocks/smartshell": "^3.3.0",
+    "minimatch": "^10.1.1"
   },
   "packageManager": "pnpm@10.18.1+sha512.77a884a165cbba2d8d1c19e3b4880eee6d2fcabd0d879121e282196b80042351d5eb3ca0935fa599da1dc51265cc68816ad2bddd2a2de5ea9fdf92adbec7cd34",
   "repository": {

pnpm-lock.yaml

@@ -26,6 +26,9 @@ importers:
       '@push.rocks/smartshell':
         specifier: ^3.3.0
         version: 3.3.0
+      minimatch:
+        specifier: ^10.1.1
+        version: 10.1.1
     devDependencies:
       '@git.zone/tsbuild':
         specifier: ^4.0.2

readme.md

@@ -1,21 +1,31 @@
 # @push.rocks/smartagent
-A dual-agent agentic framework with Driver and Guardian agents for safe, policy-controlled AI task execution.
+
+A dual-agent agentic framework with **Driver** and **Guardian** agents for safe, policy-controlled AI task execution. 🤖🛡️
 
 ## Install
+
 ```bash
 npm install @push.rocks/smartagent
 # or
 pnpm install @push.rocks/smartagent
 ```
 
+## Issue Reporting and Security
+
+For reporting bugs, issues, or security vulnerabilities, please visit [community.foss.global/](https://community.foss.global/). This is the central community hub for all issue reporting. Developers who sign and comply with our contribution agreement and go through identification can also get a [code.foss.global/](https://code.foss.global/) account to submit Pull Requests directly.
+
 ## Overview
 
-SmartAgent implements a dual-agent architecture:
+SmartAgent implements a **dual-agent architecture** where AI safety isn't just an afterthought—it's baked into the core design:
 
-- **Driver Agent**: Executes tasks, reasons about goals, and proposes tool calls
-- **Guardian Agent**: Evaluates tool call proposals against a policy prompt, approving or rejecting with feedback
+- **🎯 Driver Agent**: The executor. Reasons about goals, plans steps, and proposes tool calls
+- **🛡️ Guardian Agent**: The gatekeeper. Evaluates every tool call against your policy, approving or rejecting with feedback
 
-This design ensures safe tool use through AI-based policy evaluation rather than rigid programmatic rules.
+This design ensures safe tool use through **AI-based policy evaluation** rather than rigid programmatic rules. The Guardian can understand context, nuance, and intent—catching dangerous operations that simple regex or allowlists would miss.
+
+### Why Dual-Agent?
+
+Traditional AI agents have a fundamental problem: they're given tools and expected to use them responsibly. SmartAgent adds a second AI specifically trained to evaluate whether each action is safe and appropriate. Think of it as separation of concerns, but for AI safety.
 
 ## Architecture
 
@@ -89,8 +99,11 @@ await orchestrator.stop();
 
 ## Standard Tools
 
-### FilesystemTool
-File and directory operations using `@push.rocks/smartfs`.
+SmartAgent comes with five battle-tested tools out of the box:
+
+### 🗂️ FilesystemTool
+
+File and directory operations powered by `@push.rocks/smartfs`.
 
 **Actions**: `read`, `write`, `append`, `list`, `delete`, `exists`, `stat`, `copy`, `move`, `mkdir`
 
@@ -104,7 +117,15 @@ File and directory operations using `@push.rocks/smartfs`.
 </tool_call>
 ```
 
-### HttpTool
+**Scoped Filesystem**: Lock file operations to a specific directory:
+
+```typescript
+// Only allow access within a specific directory
+orchestrator.registerScopedFilesystemTool('/home/user/workspace');
+```
+
+### 🌐 HttpTool
+
 HTTP requests using `@push.rocks/smartrequest`.
 
 **Actions**: `get`, `post`, `put`, `patch`, `delete`
@@ -113,13 +134,14 @@ HTTP requests using `@push.rocks/smartrequest`.
 <tool_call>
   <tool>http</tool>
   <action>get</action>
-  <params>{"url": "https://api.example.com/data"}</params>
+  <params>{"url": "https://api.example.com/data", "headers": {"Authorization": "Bearer token"}}</params>
   <reasoning>Fetching data from the API endpoint</reasoning>
 </tool_call>
 ```
 
-### ShellTool
-Secure shell command execution using `@push.rocks/smartshell` with `execSpawn` (no shell injection).
+### 💻 ShellTool
+
+Secure shell command execution using `@push.rocks/smartshell` with `execSpawn` (no shell injection possible).
 
 **Actions**: `execute`, `which`
 
@@ -132,7 +154,10 @@ Secure shell command execution using `@push.rocks/smartshell` with `execSpawn` (
 </tool_call>
 ```
 
-### BrowserTool
+> 🔒 **Security Note**: The shell tool uses `execSpawn` with `shell: false`, meaning command and arguments are passed separately. This makes shell injection attacks impossible.
+
+### 🌍 BrowserTool
+
 Web page interaction using `@push.rocks/smartbrowser` (Puppeteer-based).
 
 **Actions**: `screenshot`, `pdf`, `evaluate`, `getPageContent`
@@ -146,17 +171,18 @@ Web page interaction using `@push.rocks/smartbrowser` (Puppeteer-based).
 </tool_call>
 ```
 
-### DenoTool
-Execute TypeScript/JavaScript code in a sandboxed Deno environment using `@push.rocks/smartdeno`.
+### 🦕 DenoTool
+
+Execute TypeScript/JavaScript code in a **sandboxed Deno environment** with fine-grained permission control.
 
 **Actions**: `execute`, `executeWithResult`
 
 **Permissions**: `all`, `env`, `ffi`, `hrtime`, `net`, `read`, `run`, `sys`, `write`
 
-By default, code runs fully sandboxed with no permissions. Permissions must be explicitly requested.
+By default, code runs **fully sandboxed with no permissions**. Permissions must be explicitly requested and are subject to Guardian approval.
 
 ```typescript
-// Simple code execution
+// Simple code execution (sandboxed, no permissions)
 <tool_call>
   <tool>deno</tool>
   <action>execute</action>
@@ -188,7 +214,10 @@ By default, code runs fully sandboxed with no permissions. Permissions must be e
 
 ## Guardian Policy Examples
 
-### Strict Security Policy
+The Guardian's power comes from your policy. Here are battle-tested examples:
+
+### 🔐 Strict Security Policy
+
 ```typescript
 const securityPolicy = `
 SECURITY POLICY:
@@ -204,7 +233,8 @@ When rejecting, always explain:
 `;
 ```
 
-### Development Environment Policy
+### 🛠️ Development Environment Policy
+
 ```typescript
 const devPolicy = `
 DEVELOPMENT POLICY:
@@ -221,7 +251,8 @@ Always verify:
 `;
 ```
 
-### Deno Code Execution Policy
+### 🦕 Deno Code Execution Policy
+
 ```typescript
 const denoPolicy = `
 DENO CODE EXECUTION POLICY:
@@ -253,6 +284,9 @@ interface IDualAgentOptions {
   groqToken?: string;
   xaiToken?: string;
 
+  // Use existing SmartAi instance (optional - avoids duplicate providers)
+  smartAiInstance?: SmartAi;
+
   // Provider selection
   defaultProvider?: TProvider;      // For both Driver and Guardian
   guardianProvider?: TProvider;     // Optional: separate provider for Guardian
@@ -278,6 +312,14 @@ interface IDualAgentRunResult {
   history: IAgentMessage[];   // Full conversation history
   status: TDualAgentRunStatus; // 'completed' | 'max_iterations_reached' | etc.
 }
+
+type TDualAgentRunStatus =
+  | 'completed'
+  | 'in_progress'
+  | 'max_iterations_reached'
+  | 'max_rejections_reached'
+  | 'clarification_needed'
+  | 'error';
 ```
 
 ## Custom Tools
@@ -306,10 +348,12 @@ class MyCustomTool extends BaseToolWrapper {
   ];
 
   public async initialize(): Promise<void> {
+    // Setup your tool (called when orchestrator.start() runs)
     this.isInitialized = true;
   }
 
   public async cleanup(): Promise<void> {
+    // Cleanup resources (called when orchestrator.stop() runs)
     this.isInitialized = false;
   }
 
@@ -327,6 +371,7 @@ class MyCustomTool extends BaseToolWrapper {
     return { success: false, error: 'Unknown action' };
   }
 
+  // Human-readable summary for Guardian evaluation
   public getCallSummary(action: string, params: Record<string, unknown>): string {
     return `Custom action "${action}" with input "${params.input}"`;
   }
@@ -336,32 +381,111 @@ class MyCustomTool extends BaseToolWrapper {
 orchestrator.registerTool(new MyCustomTool());
 ```
 
+## Reusing SmartAi Instances
+
+If you already have a `@push.rocks/smartai` instance, you can share it:
+
+```typescript
+import { SmartAi } from '@push.rocks/smartai';
+import { DualAgentOrchestrator } from '@push.rocks/smartagent';
+
+const smartai = new SmartAi({ openaiToken: 'sk-...' });
+await smartai.start();
+
+const orchestrator = new DualAgentOrchestrator({
+  smartAiInstance: smartai,  // Reuse existing instance
+  guardianPolicyPrompt: '...',
+});
+
+await orchestrator.start();
+// ... use orchestrator ...
+await orchestrator.stop();
+
+// SmartAi instance lifecycle is managed separately
+await smartai.stop();
+```
+
 ## Supported Providers
 
+SmartAgent supports all providers from `@push.rocks/smartai`:
+
 | Provider | Driver | Guardian |
 |----------|:------:|:--------:|
-| OpenAI | Yes | Yes |
-| Anthropic | Yes | Yes |
-| Perplexity | Yes | Yes |
-| Groq | Yes | Yes |
-| Ollama | Yes | Yes |
-| XAI | Yes | Yes |
+| OpenAI | ✅ | ✅ |
+| Anthropic | ✅ | ✅ |
+| Perplexity | ✅ | ✅ |
+| Groq | ✅ | ✅ |
+| Ollama | ✅ | ✅ |
+| XAI | ✅ | ✅ |
+| Exo | ✅ | ✅ |
+
+**💡 Pro tip**: Use a faster/cheaper model for Guardian (like Groq) and a more capable model for Driver:
+
+```typescript
+const orchestrator = new DualAgentOrchestrator({
+  openaiToken: 'sk-...',
+  groqToken: 'gsk-...',
+  defaultProvider: 'openai',    // Driver uses OpenAI
+  guardianProvider: 'groq',     // Guardian uses Groq (faster, cheaper)
+  guardianPolicyPrompt: '...',
+});
+```
+
+## API Reference
+
+### DualAgentOrchestrator
+
+| Method | Description |
+|--------|-------------|
+| `start()` | Initialize all tools and AI providers |
+| `stop()` | Cleanup all tools and resources |
+| `run(task: string)` | Execute a task and return result |
+| `continueTask(input: string)` | Continue a task with user input |
+| `registerTool(tool)` | Register a custom tool |
+| `registerStandardTools()` | Register all built-in tools |
+| `registerScopedFilesystemTool(basePath)` | Register filesystem tool with path restriction |
+| `setGuardianPolicy(policy)` | Update Guardian policy at runtime |
+| `getHistory()` | Get conversation history |
+| `getToolNames()` | Get list of registered tool names |
+| `isActive()` | Check if orchestrator is running |
+
+### Exports
+
+```typescript
+// Main classes
+export { DualAgentOrchestrator } from '@push.rocks/smartagent';
+export { DriverAgent } from '@push.rocks/smartagent';
+export { GuardianAgent } from '@push.rocks/smartagent';
+
+// Tools
+export { BaseToolWrapper } from '@push.rocks/smartagent';
+export { FilesystemTool } from '@push.rocks/smartagent';
+export { HttpTool } from '@push.rocks/smartagent';
+export { ShellTool } from '@push.rocks/smartagent';
+export { BrowserTool } from '@push.rocks/smartagent';
+export { DenoTool } from '@push.rocks/smartagent';
+
+// Types and interfaces
+export * from '@push.rocks/smartagent'; // All interfaces
+```
 
 ## License and Legal Information
 
-This repository contains open-source code that is licensed under the MIT License. A copy of the MIT License can be found in the [license](license) file within this repository.
+This repository contains open-source code licensed under the MIT License. A copy of the license can be found in the [LICENSE](./LICENSE) file.
 
 **Please note:** The MIT License does not grant permission to use the trade names, trademarks, service marks, or product names of the project, except as required for reasonable and customary use in describing the origin of the work and reproducing the content of the NOTICE file.
 
 ### Trademarks
 
-This project is owned and maintained by Task Venture Capital GmbH. The names and logos associated with Task Venture Capital GmbH and any related products or services are trademarks of Task Venture Capital GmbH and are not included within the scope of the MIT license granted herein. Use of these trademarks must comply with Task Venture Capital GmbH's Trademark Guidelines, and any usage must be approved in writing by Task Venture Capital GmbH.
+This project is owned and maintained by Task Venture Capital GmbH. The names and logos associated with Task Venture Capital GmbH and any related products or services are trademarks of Task Venture Capital GmbH or third parties, and are not included within the scope of the MIT license granted herein.
+
+Use of these trademarks must comply with Task Venture Capital GmbH's Trademark Guidelines or the guidelines of the respective third-party owners, and any usage must be approved in writing. Third-party trademarks used herein are the property of their respective owners and used only in a descriptive manner, e.g. for an implementation of an API or similar.
 
 ### Company Information
 
-Task Venture Capital GmbH
-Registered at District court Bremen HRB 35230 HB, Germany
+Task Venture Capital GmbH  
+Registered at District Court Bremen HRB 35230 HB, Germany
 
-For any legal inquiries or if you require further information, please contact us via email at hello@task.vc.
+For any legal inquiries or further information, please contact us via email at hello@task.vc.
 
 By using this repository, you acknowledge that you have read this section, agree to comply with its terms, and understand that the licensing of the code does not imply endorsement by Task Venture Capital GmbH of any derivative works.

ts/index.ts

@@ -11,7 +11,7 @@ export { GuardianAgent } from './smartagent.classes.guardianagent.js';
 export { BaseToolWrapper } from './smartagent.tools.base.js';
 
 // Export standard tools
-export { FilesystemTool } from './smartagent.tools.filesystem.js';
+export { FilesystemTool, type IFilesystemToolOptions } from './smartagent.tools.filesystem.js';
 export { HttpTool } from './smartagent.tools.http.js';
 export { ShellTool } from './smartagent.tools.shell.js';
 export { BrowserTool } from './smartagent.tools.browser.js';

ts/plugins.ts

@@ -1,3 +1,13 @@
+// node native
+import * as path from 'path';
+
+export { path };
+
+// third party
+import { minimatch } from 'minimatch';
+
+export { minimatch };
+
 // @push.rocks scope
 import * as smartai from '@push.rocks/smartai';
 import * as smartdeno from '@push.rocks/smartdeno';

ts/smartagent.classes.driveragent.ts

@@ -2,6 +2,16 @@ import * as plugins from './plugins.js';
 import * as interfaces from './smartagent.interfaces.js';
 import type { BaseToolWrapper } from './smartagent.tools.base.js';
 
+/**
+ * Options for configuring the DriverAgent
+ */
+export interface IDriverAgentOptions {
+  /** Custom system message for the driver */
+  systemMessage?: string;
+  /** Maximum history messages to pass to API (default: 20). Set to 0 for unlimited. */
+  maxHistoryMessages?: number;
+}
+
 /**
  * DriverAgent - Executes tasks by reasoning and proposing tool calls
  * Works in conjunction with GuardianAgent for approval
@@ -9,15 +19,24 @@ import type { BaseToolWrapper } from './smartagent.tools.base.js';
 export class DriverAgent {
   private provider: plugins.smartai.MultiModalModel;
   private systemMessage: string;
+  private maxHistoryMessages: number;
   private messageHistory: plugins.smartai.ChatMessage[] = [];
   private tools: Map<string, BaseToolWrapper> = new Map();
 
   constructor(
     provider: plugins.smartai.MultiModalModel,
-    systemMessage?: string
+    options?: IDriverAgentOptions | string
   ) {
     this.provider = provider;
-    this.systemMessage = systemMessage || this.getDefaultSystemMessage();
+
+    // Support both legacy string systemMessage and new options object
+    if (typeof options === 'string') {
+      this.systemMessage = options || this.getDefaultSystemMessage();
+      this.maxHistoryMessages = 20;
+    } else {
+      this.systemMessage = options?.systemMessage || this.getDefaultSystemMessage();
+      this.maxHistoryMessages = options?.maxHistoryMessages ?? 20;
+    }
   }
 
   /**
@@ -41,8 +60,14 @@ export class DriverAgent {
     // Reset message history
     this.messageHistory = [];
 
-    // Build the user message
-    const userMessage = `TASK: ${task}\n\nAnalyze this task and determine what actions are needed. If you need to use a tool, provide a tool call proposal.`;
+    // Build the user message based on available tools
+    const hasTools = this.tools.size > 0;
+    let userMessage: string;
+    if (hasTools) {
+      userMessage = `TASK: ${task}\n\nAnalyze this task and determine what actions are needed. If you need to use a tool, provide a tool call proposal.`;
+    } else {
+      userMessage = `TASK: ${task}\n\nComplete this task directly. When done, wrap your final output in <task_complete>your output here</task_complete> tags.`;
+    }
 
     // Add to history
     this.messageHistory.push({
@@ -50,9 +75,15 @@ export class DriverAgent {
       content: userMessage,
     });
 
-    // Build tool descriptions for the system message
-    const toolDescriptions = this.buildToolDescriptions();
-    const fullSystemMessage = `${this.systemMessage}\n\n## Available Tools\n${toolDescriptions}`;
+    // Build the system message - adapt based on available tools
+    let fullSystemMessage: string;
+    if (hasTools) {
+      const toolDescriptions = this.buildToolDescriptions();
+      fullSystemMessage = `${this.systemMessage}\n\n## Available Tools\n${toolDescriptions}`;
+    } else {
+      // Use a simpler system message when no tools are available
+      fullSystemMessage = this.getNoToolsSystemMessage();
+    }
 
     // Get response from provider
     const response = await this.provider.chat({
@@ -83,12 +114,30 @@ export class DriverAgent {
       content: message,
     });
 
-    // Build tool descriptions for the system message
-    const toolDescriptions = this.buildToolDescriptions();
-    const fullSystemMessage = `${this.systemMessage}\n\n## Available Tools\n${toolDescriptions}`;
+    // Build the system message - adapt based on available tools
+    const hasTools = this.tools.size > 0;
+    let fullSystemMessage: string;
+    if (hasTools) {
+      const toolDescriptions = this.buildToolDescriptions();
+      fullSystemMessage = `${this.systemMessage}\n\n## Available Tools\n${toolDescriptions}`;
+    } else {
+      fullSystemMessage = this.getNoToolsSystemMessage();
+    }
 
-    // Get response from provider (pass all but last user message as history)
-    const historyForChat = this.messageHistory.slice(0, -1);
+    // Get response from provider with history windowing
+    // Keep original task and most recent messages to avoid token explosion
+    let historyForChat: plugins.smartai.ChatMessage[];
+    const fullHistory = this.messageHistory.slice(0, -1); // Exclude the just-added message
+
+    if (this.maxHistoryMessages > 0 && fullHistory.length > this.maxHistoryMessages) {
+      // Keep the original task (first message) and most recent messages
+      historyForChat = [
+        fullHistory[0], // Original task
+        ...fullHistory.slice(-(this.maxHistoryMessages - 1)), // Recent messages
+      ];
+    } else {
+      historyForChat = fullHistory;
+    }
 
     const response = await this.provider.chat({
       systemMessage: fullSystemMessage,
@@ -312,6 +361,35 @@ When you need to use a tool, output a tool call proposal in this format:
 - If you need clarification, ask using <needs_clarification>your question</needs_clarification>`;
   }
 
+  /**
+   * Get the system message when no tools are available
+   * Used for direct task completion without tool usage
+   */
+  private getNoToolsSystemMessage(): string {
+    // Use custom system message if provided, otherwise use a simple default
+    if (this.systemMessage && this.systemMessage !== this.getDefaultSystemMessage()) {
+      return this.systemMessage;
+    }
+
+    return `You are an AI assistant that completes tasks directly.
+
+## Your Role
+You analyze tasks and provide complete, high-quality outputs.
+
+## Output Format
+When you have completed the task, wrap your final output in task_complete tags:
+
+<task_complete>
+Your complete output here
+</task_complete>
+
+## Guidelines
+1. Analyze the task requirements carefully
+2. Provide a complete and accurate response
+3. Always wrap your final output in <task_complete></task_complete> tags
+4. If you need clarification, ask using <needs_clarification>your question</needs_clarification>`;
+  }
+
   /**
    * Reset the conversation state
    */

ts/smartagent.classes.dualagent.ts

@@ -23,27 +23,27 @@ export class DualAgentOrchestrator {
   private tools: Map<string, BaseToolWrapper> = new Map();
   private isRunning = false;
   private conversationHistory: interfaces.IAgentMessage[] = [];
+  private ownsSmartAi = true; // true if we created the SmartAi instance, false if it was provided
 
   constructor(options: interfaces.IDualAgentOptions) {
     this.options = {
       maxIterations: 20,
       maxConsecutiveRejections: 3,
       defaultProvider: 'openai',
+      maxResultChars: 15000,
+      maxHistoryMessages: 20,
       ...options,
     };
 
-    // Create SmartAi instance
-    this.smartai = new plugins.smartai.SmartAi(options);
-
-    // Get providers
-    this.driverProvider = this.getProviderByName(this.options.defaultProvider!);
-    this.guardianProvider = this.options.guardianProvider
-      ? this.getProviderByName(this.options.guardianProvider)
-      : this.driverProvider;
-
-    // Create agents
-    this.driver = new DriverAgent(this.driverProvider, options.driverSystemMessage);
-    this.guardian = new GuardianAgent(this.guardianProvider, options.guardianPolicyPrompt);
+    // Use existing SmartAi instance if provided, otherwise create a new one
+    if (options.smartAiInstance) {
+      this.smartai = options.smartAiInstance;
+      this.ownsSmartAi = false; // Don't manage lifecycle of provided instance
+    } else {
+      this.smartai = new plugins.smartai.SmartAi(options);
+      this.ownsSmartAi = true;
+    }
+    // Note: Don't access providers here - they don't exist until start() is called
   }
 
   /**
@@ -70,13 +70,72 @@ export class DualAgentOrchestrator {
     }
   }
 
+  /**
+   * Emit a progress event if callback is configured
+   */
+  private emitProgress(event: Omit<interfaces.IProgressEvent, 'timestamp' | 'logLevel' | 'logMessage'>): void {
+    if (this.options.onProgress) {
+      const prefix = this.options.logPrefix ? `${this.options.logPrefix} ` : '';
+      const { logLevel, logMessage } = this.formatProgressEvent(event, prefix);
+
+      this.options.onProgress({
+        ...event,
+        timestamp: new Date(),
+        logLevel,
+        logMessage,
+      });
+    }
+  }
+
+  /**
+   * Format a progress event into a log level and message
+   */
+  private formatProgressEvent(
+    event: Omit<interfaces.IProgressEvent, 'timestamp' | 'logLevel' | 'logMessage'>,
+    prefix: string
+  ): { logLevel: interfaces.TLogLevel; logMessage: string } {
+    switch (event.type) {
+      case 'task_started':
+        return { logLevel: 'info', logMessage: `${prefix}Task started` };
+      case 'iteration_started':
+        return { logLevel: 'info', logMessage: `${prefix}Iteration ${event.iteration}/${event.maxIterations}` };
+      case 'tool_proposed':
+        return { logLevel: 'info', logMessage: `${prefix}  → Proposing: ${event.toolName}.${event.action}` };
+      case 'guardian_evaluating':
+        return { logLevel: 'info', logMessage: `${prefix}  ⏳ Guardian evaluating...` };
+      case 'tool_approved':
+        return { logLevel: 'info', logMessage: `${prefix}  ✓ Approved: ${event.toolName}.${event.action}` };
+      case 'tool_rejected':
+        return { logLevel: 'warn', logMessage: `${prefix}  ✗ Rejected: ${event.toolName}.${event.action} - ${event.reason}` };
+      case 'tool_executing':
+        return { logLevel: 'info', logMessage: `${prefix}  ⚡ Executing: ${event.toolName}.${event.action}...` };
+      case 'tool_completed':
+        return { logLevel: 'info', logMessage: `${prefix}  ✓ Completed: ${event.message}` };
+      case 'task_completed':
+        return { logLevel: 'success', logMessage: `${prefix}Task completed in ${event.iteration} iterations` };
+      case 'clarification_needed':
+        return { logLevel: 'warn', logMessage: `${prefix}Clarification needed from user` };
+      case 'max_iterations':
+        return { logLevel: 'error', logMessage: `${prefix}${event.message}` };
+      case 'max_rejections':
+        return { logLevel: 'error', logMessage: `${prefix}${event.message}` };
+      default:
+        return { logLevel: 'info', logMessage: `${prefix}${event.type}` };
+    }
+  }
+
   /**
    * Register a custom tool
    */
   public registerTool(tool: BaseToolWrapper): void {
     this.tools.set(tool.name, tool);
-    this.driver.registerTool(tool);
-    this.guardian.registerTool(tool);
+    // Register with agents if they exist (they're created in start())
+    if (this.driver) {
+      this.driver.registerTool(tool);
+    }
+    if (this.guardian) {
+      this.guardian.registerTool(tool);
+    }
   }
 
   /**
@@ -96,12 +155,43 @@ export class DualAgentOrchestrator {
     }
   }
 
+  /**
+   * Register a scoped filesystem tool that can only access files within the specified directory
+   * @param basePath The directory to scope filesystem operations to
+   * @param excludePatterns Optional glob patterns to exclude from listings (e.g., ['.nogit/**', 'node_modules/**'])
+   */
+  public registerScopedFilesystemTool(basePath: string, excludePatterns?: string[]): void {
+    const scopedTool = new FilesystemTool({ basePath, excludePatterns });
+    this.registerTool(scopedTool);
+  }
+
   /**
    * Initialize all tools (eager loading)
    */
   public async start(): Promise<void> {
-    // Start smartai
-    await this.smartai.start();
+    // Start smartai only if we created it (external instances should already be started)
+    if (this.ownsSmartAi) {
+      await this.smartai.start();
+    }
+
+    // NOW get providers (after they've been initialized by smartai.start())
+    this.driverProvider = this.getProviderByName(this.options.defaultProvider!);
+    this.guardianProvider = this.options.guardianProvider
+      ? this.getProviderByName(this.options.guardianProvider)
+      : this.driverProvider;
+
+    // NOW create agents with initialized providers
+    this.driver = new DriverAgent(this.driverProvider, {
+      systemMessage: this.options.driverSystemMessage,
+      maxHistoryMessages: this.options.maxHistoryMessages,
+    });
+    this.guardian = new GuardianAgent(this.guardianProvider, this.options.guardianPolicyPrompt);
+
+    // Register any tools that were added before start() with the agents
+    for (const tool of this.tools.values()) {
+      this.driver.registerTool(tool);
+      this.guardian.registerTool(tool);
+    }
 
     // Initialize all tools
     const initPromises: Promise<void>[] = [];
@@ -124,9 +214,16 @@ export class DualAgentOrchestrator {
     }
 
     await Promise.all(cleanupPromises);
-    await this.smartai.stop();
+
+    // Only stop smartai if we created it (don't stop external instances)
+    if (this.ownsSmartAi) {
+      await this.smartai.stop();
+    }
+
     this.isRunning = false;
-    this.driver.reset();
+    if (this.driver) {
+      this.driver.reset();
+    }
   }
 
   /**
@@ -153,6 +250,12 @@ export class DualAgentOrchestrator {
     let driverResponse = await this.driver.startTask(task);
     this.conversationHistory.push(driverResponse);
 
+    // Emit task started event
+    this.emitProgress({
+      type: 'task_started',
+      message: task.length > 100 ? task.substring(0, 100) + '...' : task,
+    });
+
     while (
       iterations < this.options.maxIterations! &&
       consecutiveRejections < this.options.maxConsecutiveRejections! &&
@@ -160,15 +263,36 @@ export class DualAgentOrchestrator {
     ) {
       iterations++;
 
+      // Emit iteration started event
+      this.emitProgress({
+        type: 'iteration_started',
+        iteration: iterations,
+        maxIterations: this.options.maxIterations,
+      });
+
       // Check if task is complete
       if (this.driver.isTaskComplete(driverResponse.content)) {
         completed = true;
         finalResult = this.driver.extractTaskResult(driverResponse.content) || driverResponse.content;
+
+        // Emit task completed event
+        this.emitProgress({
+          type: 'task_completed',
+          iteration: iterations,
+          message: 'Task completed successfully',
+        });
         break;
       }
 
       // Check if driver needs clarification
       if (this.driver.needsClarification(driverResponse.content)) {
+        // Emit clarification needed event
+        this.emitProgress({
+          type: 'clarification_needed',
+          iteration: iterations,
+          message: 'Driver needs clarification from user',
+        });
+
         // Return with clarification needed status
         return {
           success: false,
@@ -195,6 +319,15 @@ export class DualAgentOrchestrator {
       // Process the first proposal (one at a time)
       const proposal = proposals[0];
 
+      // Emit tool proposed event
+      this.emitProgress({
+        type: 'tool_proposed',
+        iteration: iterations,
+        toolName: proposal.toolName,
+        action: proposal.action,
+        message: `${proposal.toolName}.${proposal.action}`,
+      });
+
       // Quick validation first
       const quickDecision = this.guardian.quickValidate(proposal);
       let decision: interfaces.IGuardianDecision;
@@ -202,6 +335,14 @@ export class DualAgentOrchestrator {
       if (quickDecision) {
         decision = quickDecision;
       } else {
+        // Emit guardian evaluating event
+        this.emitProgress({
+          type: 'guardian_evaluating',
+          iteration: iterations,
+          toolName: proposal.toolName,
+          action: proposal.action,
+        });
+
         // Full AI evaluation
         decision = await this.guardian.evaluate(proposal, task);
       }
@@ -209,6 +350,14 @@ export class DualAgentOrchestrator {
       if (decision.decision === 'approve') {
         consecutiveRejections = 0;
 
+        // Emit tool approved event
+        this.emitProgress({
+          type: 'tool_approved',
+          iteration: iterations,
+          toolName: proposal.toolName,
+          action: proposal.action,
+        });
+
         // Execute the tool
         const tool = this.tools.get(proposal.toolName);
         if (!tool) {
@@ -221,12 +370,48 @@ export class DualAgentOrchestrator {
         }
 
         try {
+          // Emit tool executing event
+          this.emitProgress({
+            type: 'tool_executing',
+            iteration: iterations,
+            toolName: proposal.toolName,
+            action: proposal.action,
+          });
+
           const result = await tool.execute(proposal.action, proposal.params);
 
-          // Send result to driver
-          const resultMessage = result.success
-            ? `TOOL RESULT (${proposal.toolName}.${proposal.action}):\n${JSON.stringify(result.result, null, 2)}`
-            : `TOOL ERROR (${proposal.toolName}.${proposal.action}):\n${result.error}`;
+          // Emit tool completed event
+          this.emitProgress({
+            type: 'tool_completed',
+            iteration: iterations,
+            toolName: proposal.toolName,
+            action: proposal.action,
+            message: result.success ? 'success' : result.error,
+          });
+
+          // Build result message (prefer summary if provided, otherwise stringify result)
+          let resultMessage: string;
+          if (result.success) {
+            if (result.summary) {
+              // Use tool-provided summary
+              resultMessage = `TOOL RESULT (${proposal.toolName}.${proposal.action}):\n${result.summary}`;
+            } else {
+              // Stringify and potentially truncate
+              const resultStr = JSON.stringify(result.result, null, 2);
+              const maxChars = this.options.maxResultChars ?? 15000;
+
+              if (maxChars > 0 && resultStr.length > maxChars) {
+                // Truncate the result
+                const truncated = resultStr.substring(0, maxChars);
+                const omittedTokens = Math.round((resultStr.length - maxChars) / 4);
+                resultMessage = `TOOL RESULT (${proposal.toolName}.${proposal.action}):\n${truncated}\n\n[... output truncated, ~${omittedTokens} tokens omitted. Use more specific parameters to reduce output size.]`;
+              } else {
+                resultMessage = `TOOL RESULT (${proposal.toolName}.${proposal.action}):\n${resultStr}`;
+              }
+            }
+          } else {
+            resultMessage = `TOOL ERROR (${proposal.toolName}.${proposal.action}):\n${result.error}`;
+          }
 
           this.conversationHistory.push({
             role: 'system',
@@ -248,6 +433,15 @@ export class DualAgentOrchestrator {
         // Rejected
         consecutiveRejections++;
 
+        // Emit tool rejected event
+        this.emitProgress({
+          type: 'tool_rejected',
+          iteration: iterations,
+          toolName: proposal.toolName,
+          action: proposal.action,
+          reason: decision.reason,
+        });
+
         // Build rejection feedback
         let feedback = `TOOL CALL REJECTED by Guardian:\n`;
         feedback += `- Reason: ${decision.reason}\n`;
@@ -279,8 +473,21 @@ export class DualAgentOrchestrator {
     if (!completed) {
       if (iterations >= this.options.maxIterations!) {
         status = 'max_iterations_reached';
+        // Emit max iterations event
+        this.emitProgress({
+          type: 'max_iterations',
+          iteration: iterations,
+          maxIterations: this.options.maxIterations,
+          message: `Maximum iterations (${this.options.maxIterations}) reached`,
+        });
       } else if (consecutiveRejections >= this.options.maxConsecutiveRejections!) {
         status = 'max_rejections_reached';
+        // Emit max rejections event
+        this.emitProgress({
+          type: 'max_rejections',
+          iteration: iterations,
+          message: `Maximum consecutive rejections (${this.options.maxConsecutiveRejections}) reached`,
+        });
       }
     }
 

ts/smartagent.interfaces.ts

@@ -8,6 +8,8 @@ import * as plugins from './plugins.js';
  * Configuration options for the DualAgentOrchestrator
  */
 export interface IDualAgentOptions extends plugins.smartai.ISmartAiOptions {
+  /** Existing SmartAi instance to reuse (avoids creating duplicate providers) */
+  smartAiInstance?: plugins.smartai.SmartAi;
   /** Name of the agent system */
   name?: string;
   /** Default AI provider for both Driver and Guardian */
@@ -24,6 +26,14 @@ export interface IDualAgentOptions extends plugins.smartai.ISmartAiOptions {
   maxConsecutiveRejections?: number;
   /** Enable verbose logging */
   verbose?: boolean;
+  /** Maximum characters for tool result output before truncation (default: 15000). Set to 0 to disable. */
+  maxResultChars?: number;
+  /** Maximum history messages to pass to API (default: 20). Set to 0 for unlimited. */
+  maxHistoryMessages?: number;
+  /** Optional callback for live progress updates during execution */
+  onProgress?: (event: IProgressEvent) => void;
+  /** Prefix for log messages (e.g., "[README]", "[Commit]"). Default: empty */
+  logPrefix?: string;
 }
 
 // ================================
@@ -82,6 +92,8 @@ export interface IToolExecutionResult {
   success: boolean;
   result?: unknown;
   error?: string;
+  /** Optional human-readable summary for history (if provided, used instead of full result) */
+  summary?: string;
 }
 
 /**
@@ -193,6 +205,58 @@ export interface IDualAgentRunResult {
   error?: string;
 }
 
+// ================================
+// Progress Event Interfaces
+// ================================
+
+/**
+ * Progress event types for live feedback during agent execution
+ */
+export type TProgressEventType =
+  | 'task_started'
+  | 'iteration_started'
+  | 'tool_proposed'
+  | 'guardian_evaluating'
+  | 'tool_approved'
+  | 'tool_rejected'
+  | 'tool_executing'
+  | 'tool_completed'
+  | 'task_completed'
+  | 'clarification_needed'
+  | 'max_iterations'
+  | 'max_rejections';
+
+/**
+ * Log level for progress events
+ */
+export type TLogLevel = 'info' | 'warn' | 'error' | 'success';
+
+/**
+ * Progress event for live feedback during agent execution
+ */
+export interface IProgressEvent {
+  /** Type of progress event */
+  type: TProgressEventType;
+  /** Current iteration number */
+  iteration?: number;
+  /** Maximum iterations configured */
+  maxIterations?: number;
+  /** Name of the tool being used */
+  toolName?: string;
+  /** Action being performed */
+  action?: string;
+  /** Reason for rejection or other explanation */
+  reason?: string;
+  /** Human-readable message about the event */
+  message?: string;
+  /** Timestamp of the event */
+  timestamp: Date;
+  /** Log level for this event (info, warn, error, success) */
+  logLevel: TLogLevel;
+  /** Pre-formatted log message ready for output */
+  logMessage: string;
+}
+
 // ================================
 // Utility Types
 // ================================

ts/smartagent.tools.filesystem.ts

@@ -2,6 +2,16 @@ import * as plugins from './plugins.js';
 import * as interfaces from './smartagent.interfaces.js';
 import { BaseToolWrapper } from './smartagent.tools.base.js';
 
+/**
+ * Options for FilesystemTool
+ */
+export interface IFilesystemToolOptions {
+  /** Base path to scope all operations to. If set, all paths must be within this directory. */
+  basePath?: string;
+  /** Glob patterns to exclude from listings (e.g., ['.nogit/**', 'node_modules/**']) */
+  excludePatterns?: string[];
+}
+
 /**
  * Filesystem tool for file and directory operations
  * Wraps @push.rocks/smartfs
@@ -10,20 +20,66 @@ export class FilesystemTool extends BaseToolWrapper {
   public name = 'filesystem';
   public description = 'Read, write, list, and delete files and directories';
 
+  /** Base path to scope all operations to */
+  private basePath?: string;
+  /** Glob patterns to exclude from listings */
+  private excludePatterns: string[];
+
+  constructor(options?: IFilesystemToolOptions) {
+    super();
+    if (options?.basePath) {
+      this.basePath = plugins.path.resolve(options.basePath);
+    }
+    this.excludePatterns = options?.excludePatterns || [];
+  }
+
+  /**
+   * Check if a relative path should be excluded based on exclude patterns
+   */
+  private isExcluded(relativePath: string): boolean {
+    if (this.excludePatterns.length === 0) return false;
+    return this.excludePatterns.some(pattern =>
+      plugins.minimatch(relativePath, pattern, { dot: true })
+    );
+  }
+
+  /**
+   * Validate that a path is within the allowed base path
+   * @throws Error if path is outside allowed directory
+   */
+  private validatePath(pathArg: string): string {
+    const resolved = plugins.path.resolve(pathArg);
+    if (this.basePath) {
+      // Ensure the resolved path starts with the base path
+      if (!resolved.startsWith(this.basePath + plugins.path.sep) && resolved !== this.basePath) {
+        throw new Error(`Access denied: path "${pathArg}" is outside allowed directory "${this.basePath}"`);
+      }
+    }
+    return resolved;
+  }
+
   public actions: interfaces.IToolAction[] = [
     {
       name: 'read',
-      description: 'Read the contents of a file',
+      description: 'Read file contents (full or specific line range)',
       parameters: {
         type: 'object',
         properties: {
-          path: { type: 'string', description: 'Absolute path to the file' },
+          path: { type: 'string', description: 'Path to the file' },
           encoding: {
             type: 'string',
             enum: ['utf8', 'binary', 'base64'],
             default: 'utf8',
             description: 'File encoding',
           },
+          startLine: {
+            type: 'number',
+            description: 'First line to read (1-indexed, inclusive). If omitted, reads from beginning.',
+          },
+          endLine: {
+            type: 'number',
+            description: 'Last line to read (1-indexed, inclusive). If omitted, reads to end.',
+          },
         },
         required: ['path'],
       },
@@ -149,6 +205,55 @@ export class FilesystemTool extends BaseToolWrapper {
         required: ['path'],
       },
     },
+    {
+      name: 'tree',
+      description: 'Show directory structure as a tree (no file contents)',
+      parameters: {
+        type: 'object',
+        properties: {
+          path: { type: 'string', description: 'Root directory path' },
+          maxDepth: {
+            type: 'number',
+            default: 3,
+            description: 'Maximum depth to traverse (default: 3)',
+          },
+          filter: {
+            type: 'string',
+            description: 'Glob pattern to filter files (e.g., "*.ts")',
+          },
+          showSizes: {
+            type: 'boolean',
+            default: false,
+            description: 'Include file sizes in output',
+          },
+          format: {
+            type: 'string',
+            enum: ['string', 'json'],
+            default: 'string',
+            description: 'Output format: "string" for human-readable tree, "json" for structured array',
+          },
+        },
+        required: ['path'],
+      },
+    },
+    {
+      name: 'glob',
+      description: 'Find files matching a glob pattern',
+      parameters: {
+        type: 'object',
+        properties: {
+          pattern: {
+            type: 'string',
+            description: 'Glob pattern (e.g., "**/*.ts", "src/**/*.js")',
+          },
+          path: {
+            type: 'string',
+            description: 'Base path to search from (defaults to current directory)',
+          },
+        },
+        required: ['pattern'],
+      },
+    },
   ];
 
   private smartfs!: plugins.smartfs.SmartFs;
@@ -172,25 +277,72 @@ export class FilesystemTool extends BaseToolWrapper {
     try {
       switch (action) {
         case 'read': {
+          const validatedPath = this.validatePath(params.path as string);
           const encoding = (params.encoding as string) || 'utf8';
-          const content = await this.smartfs
-            .file(params.path as string)
+          const startLine = params.startLine as number | undefined;
+          const endLine = params.endLine as number | undefined;
+
+          const fullContent = await this.smartfs
+            .file(validatedPath)
             .encoding(encoding as 'utf8' | 'binary' | 'base64')
             .read();
+
+          const contentStr = fullContent.toString();
+          const lines = contentStr.split('\n');
+          const totalLines = lines.length;
+
+          // Apply line range if specified
+          let resultContent: string;
+          let resultStartLine = 1;
+          let resultEndLine = totalLines;
+
+          if (startLine !== undefined || endLine !== undefined) {
+            const start = Math.max(1, startLine ?? 1);
+            const end = Math.min(totalLines, endLine ?? totalLines);
+            resultStartLine = start;
+            resultEndLine = end;
+
+            // Convert to 0-indexed for array slicing
+            const selectedLines = lines.slice(start - 1, end);
+
+            // Add line numbers to output for context
+            resultContent = selectedLines
+              .map((line, idx) => `${String(start + idx).padStart(5)}│ ${line}`)
+              .join('\n');
+          } else {
+            // No range specified - return full content but warn if large
+            const MAX_LINES_WITHOUT_RANGE = 500;
+            if (totalLines > MAX_LINES_WITHOUT_RANGE) {
+              // Return first portion with warning
+              const selectedLines = lines.slice(0, MAX_LINES_WITHOUT_RANGE);
+              resultContent = selectedLines
+                .map((line, idx) => `${String(idx + 1).padStart(5)}│ ${line}`)
+                .join('\n');
+              resultContent += `\n\n[... ${totalLines - MAX_LINES_WITHOUT_RANGE} more lines. Use startLine/endLine to read specific ranges.]`;
+              resultEndLine = MAX_LINES_WITHOUT_RANGE;
+            } else {
+              resultContent = contentStr;
+            }
+          }
+
           return {
             success: true,
             result: {
               path: params.path,
-              content: content.toString(),
+              content: resultContent,
               encoding,
+              totalLines,
+              startLine: resultStartLine,
+              endLine: resultEndLine,
             },
           };
         }
 
         case 'write': {
+          const validatedPath = this.validatePath(params.path as string);
           const encoding = (params.encoding as string) || 'utf8';
           await this.smartfs
-            .file(params.path as string)
+            .file(validatedPath)
             .encoding(encoding as 'utf8' | 'binary' | 'base64')
             .write(params.content as string);
           return {
@@ -204,7 +356,8 @@ export class FilesystemTool extends BaseToolWrapper {
         }
 
         case 'append': {
-          await this.smartfs.file(params.path as string).append(params.content as string);
+          const validatedPath = this.validatePath(params.path as string);
+          await this.smartfs.file(validatedPath).append(params.content as string);
           return {
             success: true,
             result: {
@@ -215,14 +368,24 @@ export class FilesystemTool extends BaseToolWrapper {
         }
 
         case 'list': {
-          let dir = this.smartfs.directory(params.path as string);
+          const validatedPath = this.validatePath(params.path as string);
+          let dir = this.smartfs.directory(validatedPath);
           if (params.recursive) {
             dir = dir.recursive();
           }
           if (params.filter) {
             dir = dir.filter(params.filter as string);
           }
-          const entries = await dir.list();
+          let entries = await dir.list();
+
+          // Filter out excluded paths
+          if (this.excludePatterns.length > 0) {
+            entries = entries.filter(entry => {
+              const relativePath = plugins.path.relative(validatedPath, entry.path);
+              return !this.isExcluded(relativePath) && !this.isExcluded(entry.name);
+            });
+          }
+
           return {
             success: true,
             result: {
@@ -234,33 +397,34 @@ export class FilesystemTool extends BaseToolWrapper {
         }
 
         case 'delete': {
-          const path = params.path as string;
+          const validatedPath = this.validatePath(params.path as string);
           // Check if it's a directory or file
-          const exists = await this.smartfs.file(path).exists();
+          const exists = await this.smartfs.file(validatedPath).exists();
           if (exists) {
             // Try to get stats to check if it's a directory
             try {
-              const stats = await this.smartfs.file(path).stat();
+              const stats = await this.smartfs.file(validatedPath).stat();
               if (stats.isDirectory && params.recursive) {
-                await this.smartfs.directory(path).recursive().delete();
+                await this.smartfs.directory(validatedPath).recursive().delete();
               } else {
-                await this.smartfs.file(path).delete();
+                await this.smartfs.file(validatedPath).delete();
               }
             } catch {
-              await this.smartfs.file(path).delete();
+              await this.smartfs.file(validatedPath).delete();
             }
           }
           return {
             success: true,
             result: {
-              path,
+              path: params.path,
               deleted: true,
             },
           };
         }
 
         case 'exists': {
-          const exists = await this.smartfs.file(params.path as string).exists();
+          const validatedPath = this.validatePath(params.path as string);
+          const exists = await this.smartfs.file(validatedPath).exists();
           return {
             success: true,
             result: {
@@ -271,7 +435,8 @@ export class FilesystemTool extends BaseToolWrapper {
         }
 
         case 'stat': {
-          const stats = await this.smartfs.file(params.path as string).stat();
+          const validatedPath = this.validatePath(params.path as string);
+          const stats = await this.smartfs.file(validatedPath).stat();
           return {
             success: true,
             result: {
@@ -282,7 +447,9 @@ export class FilesystemTool extends BaseToolWrapper {
         }
 
         case 'copy': {
-          await this.smartfs.file(params.source as string).copy(params.destination as string);
+          const validatedSource = this.validatePath(params.source as string);
+          const validatedDest = this.validatePath(params.destination as string);
+          await this.smartfs.file(validatedSource).copy(validatedDest);
           return {
             success: true,
             result: {
@@ -294,7 +461,9 @@ export class FilesystemTool extends BaseToolWrapper {
         }
 
         case 'move': {
-          await this.smartfs.file(params.source as string).move(params.destination as string);
+          const validatedSource = this.validatePath(params.source as string);
+          const validatedDest = this.validatePath(params.destination as string);
+          await this.smartfs.file(validatedSource).move(validatedDest);
           return {
             success: true,
             result: {
@@ -306,7 +475,8 @@ export class FilesystemTool extends BaseToolWrapper {
         }
 
         case 'mkdir': {
-          let dir = this.smartfs.directory(params.path as string);
+          const validatedPath = this.validatePath(params.path as string);
+          let dir = this.smartfs.directory(validatedPath);
           if (params.recursive !== false) {
             dir = dir.recursive();
           }
@@ -320,6 +490,168 @@ export class FilesystemTool extends BaseToolWrapper {
           };
         }
 
+        case 'tree': {
+          const validatedPath = this.validatePath(params.path as string);
+          const maxDepth = (params.maxDepth as number) ?? 3;
+          const filter = params.filter as string | undefined;
+          const showSizes = (params.showSizes as boolean) ?? false;
+          const format = (params.format as 'string' | 'json') ?? 'string';
+
+          // Collect all entries recursively up to maxDepth
+          interface ITreeEntry {
+            path: string;
+            relativePath: string;
+            isDir: boolean;
+            depth: number;
+            size?: number;
+          }
+
+          const entries: ITreeEntry[] = [];
+
+          const collectEntries = async (dirPath: string, depth: number, relativePath: string) => {
+            if (depth > maxDepth) return;
+
+            let dir = this.smartfs.directory(dirPath);
+            if (filter) {
+              dir = dir.filter(filter);
+            }
+            const items = await dir.list();
+
+            for (const item of items) {
+              // item is IDirectoryEntry with name, path, isFile, isDirectory properties
+              const itemPath = item.path;
+              const itemRelPath = relativePath ? `${relativePath}/${item.name}` : item.name;
+              const isDir = item.isDirectory;
+
+              // Skip excluded paths
+              if (this.isExcluded(itemRelPath) || this.isExcluded(item.name)) {
+                continue;
+              }
+
+              const entry: ITreeEntry = {
+                path: itemPath,
+                relativePath: itemRelPath,
+                isDir,
+                depth,
+              };
+
+              if (showSizes && !isDir && item.stats) {
+                entry.size = item.stats.size;
+              }
+
+              entries.push(entry);
+
+              // Recurse into directories
+              if (isDir && depth < maxDepth) {
+                await collectEntries(itemPath, depth + 1, itemRelPath);
+              }
+            }
+          };
+
+          await collectEntries(validatedPath, 0, '');
+
+          // Sort entries by path for consistent output
+          entries.sort((a, b) => a.relativePath.localeCompare(b.relativePath));
+
+          if (format === 'json') {
+            return {
+              success: true,
+              result: {
+                path: params.path,
+                entries: entries.map((e) => ({
+                  path: e.relativePath,
+                  isDir: e.isDir,
+                  depth: e.depth,
+                  ...(e.size !== undefined ? { size: e.size } : {}),
+                })),
+                count: entries.length,
+              },
+            };
+          }
+
+          // Format as string tree
+          const formatSize = (bytes: number): string => {
+            if (bytes < 1024) return `${bytes}B`;
+            if (bytes < 1024 * 1024) return `${(bytes / 1024).toFixed(1)}KB`;
+            return `${(bytes / (1024 * 1024)).toFixed(1)}MB`;
+          };
+
+          // Build tree string with proper indentation
+          let treeStr = `${params.path}/\n`;
+          const pathParts = new Map<string, number>(); // Track which paths are last in their parent
+
+          // Group by parent to determine last child
+          const parentChildCount = new Map<string, number>();
+          const parentCurrentChild = new Map<string, number>();
+
+          for (const entry of entries) {
+            const parentPath = entry.relativePath.includes('/')
+              ? entry.relativePath.substring(0, entry.relativePath.lastIndexOf('/'))
+              : '';
+            parentChildCount.set(parentPath, (parentChildCount.get(parentPath) || 0) + 1);
+          }
+
+          for (const entry of entries) {
+            const parentPath = entry.relativePath.includes('/')
+              ? entry.relativePath.substring(0, entry.relativePath.lastIndexOf('/'))
+              : '';
+            parentCurrentChild.set(parentPath, (parentCurrentChild.get(parentPath) || 0) + 1);
+            const isLast = parentCurrentChild.get(parentPath) === parentChildCount.get(parentPath);
+
+            // Build prefix based on depth
+            let prefix = '';
+            const parts = entry.relativePath.split('/');
+            for (let i = 0; i < parts.length - 1; i++) {
+              prefix += '│   ';
+            }
+            prefix += isLast ? '└── ' : '├── ';
+
+            const name = parts[parts.length - 1];
+            const suffix = entry.isDir ? '/' : '';
+            const sizeStr = showSizes && entry.size !== undefined ? ` (${formatSize(entry.size)})` : '';
+
+            treeStr += `${prefix}${name}${suffix}${sizeStr}\n`;
+          }
+
+          return {
+            success: true,
+            result: {
+              path: params.path,
+              tree: treeStr,
+              count: entries.length,
+            },
+          };
+        }
+
+        case 'glob': {
+          const pattern = params.pattern as string;
+          const basePath = params.path ? this.validatePath(params.path as string) : (this.basePath || process.cwd());
+
+          // Use smartfs to list with filter
+          const dir = this.smartfs.directory(basePath).recursive().filter(pattern);
+          const matches = await dir.list();
+
+          // Return file paths relative to base path for readability
+          // Filter out excluded paths
+          const files = matches
+            .map((entry) => ({
+              path: entry.path,
+              relativePath: plugins.path.relative(basePath, entry.path),
+              isDirectory: entry.isDirectory,
+            }))
+            .filter((file) => !this.isExcluded(file.relativePath));
+
+          return {
+            success: true,
+            result: {
+              pattern,
+              basePath,
+              files,
+              count: files.length,
+            },
+          };
+        }
+
         default:
           return {
             success: false,
@@ -336,8 +668,12 @@ export class FilesystemTool extends BaseToolWrapper {
 
   public getCallSummary(action: string, params: Record<string, unknown>): string {
     switch (action) {
-      case 'read':
-        return `Read file "${params.path}" with encoding ${params.encoding || 'utf8'}`;
+      case 'read': {
+        const lineRange = params.startLine || params.endLine
+          ? ` lines ${params.startLine || 1}-${params.endLine || 'end'}`
+          : '';
+        return `Read file "${params.path}"${lineRange}`;
+      }
 
       case 'write': {
         const content = params.content as string;
@@ -372,6 +708,12 @@ export class FilesystemTool extends BaseToolWrapper {
       case 'mkdir':
         return `Create directory "${params.path}"${params.recursive !== false ? ' (with parents)' : ''}`;
 
+      case 'tree':
+        return `Show tree of "${params.path}" (depth: ${params.maxDepth ?? 3}, format: ${params.format ?? 'string'})`;
+
+      case 'glob':
+        return `Find files matching "${params.pattern}"${params.path ? ` in "${params.path}"` : ''}`;
+
       default:
         return `Unknown action: ${action}`;
     }