Tools are a boundary you supply
StateWeave owns the graph. Models and tools are explicit boundaries you pass toAgent.
Tool contract
A tool is a small object with a name, a description, a Zod schema, and an executor.Default workspace tools
Omittools and Agent creates four workspace-scoped tools:
read_filewrite_fileedit_file- read-only
bash_command
tools: [] for no tools. Pass your own array to replace the defaults.
Boundaries built in
The file tools reject absolute paths, traversal, and symlink components. The shell tool is a fixed-PATH, read-only allowlist. It rejects pipes, redirects, command substitution, arbitrary interpreters, and network commands.
These checks reduce scope. They are not a process sandbox.
Security boundary.
For untrusted coding work, run the whole agent inside an isolated
filesystem and process boundary. StateWeave’s path checks are defense in
depth, not tenant isolation.