RepositoryBounds

Absolute path that bounds repository reads.

Return whether an explicit repository path is absolute and contained.

Return whether a relative or absolute glob pattern cannot traverse.

Return whether the backend resolves a path below the repository root.

For sandbox and local-filesystem backends this performs a canonical (symlink-resolving) containment check. For any other backend there is no canonical check available and this returns True, so callers must still apply safe_path for the lexical guard.

Asynchronously check canonical backend repository containment.

For sandbox and local-filesystem backends this performs a canonical (symlink-resolving) containment check. For any other backend there is no canonical check available and this returns True, so callers must still apply safe_path for the lexical guard.

Return the reported byte size of a backend entry, if present.

Malformed entries (not a mapping, or missing/non-string path) are skipped rather than raising, so a single bad entry cannot fail an otherwise valid preflight.

Reject malformed paths and backend entries that exceed hard limits.

Rejects any tool name outside the read-only inspection set so the read-only guarantee fails closed rather than depending on callers to wire only read-only tools.

Asynchronously enforce repository path and metadata limits.

Rejects any tool name outside the read-only inspection set so the read-only guarantee fails closed rather than depending on callers to wire only read-only tools.

Clamp repository-tool arguments that directly control result size.

Limit a filesystem glob's rendered path count when it is parseable.

Return a size-bounded repository tool result body.