v0.19.4 -> v0.19.5

Summary

Extends read_file with CSV/TSV dispatch, disables its alreadyCall cache to stop stale post-edit reads, and splits the file / error-memory toolset into dedicated fileReader / fileWriter / errorMemory packages under internal/filesystem/.

Changes

UPDATE

• Extend read_file with CSV/TSV dispatch in readFileHandler (.csv/.tsv → readCSVHandler). Uses encoding/csv with LazyQuotes=true + FieldsPerRecord=-1 for dirty input, strips UTF-8 BOM, emits a JSON 2D array ([][]string) so column order survives (map-based marshaling would sort keys alphabetically). offset/limit apply to data rows; header is always returned. No new tool — dispatch keeps LLM tool count unchanged since only tool name is visible on the first stub call.
• Harden read_file/read_image/patch_edit/write_file handlers: resolve path defaults via the shared AbsPath contract, detect binary headers before text reads, cap text reads at maxReadSize=1MB, and redirect image extensions to read_image with an explicit error message instead of silently falling through.

FIX

• Disable alreadyCall cache for read_file in internal/agents/exec/toolCall.go (Pass 1 lookup and Pass 3 store both skip toolName == "read_file"). Previously, post-patch_edit verification reads with identical args hit cached pre-edit content and skipped runToolExec entirely, which suppressed the EventToolCall event and looked like the model hallucinating "verify read is still old content." read_file semantics are "current disk state" — it must never cache.
• Correct needExclude flag plumbing in file-write tools so .doc/vX.Y.Z.md writes are not blocked by .gitignore membership; exclusion is a listing/walking filter, not a write gate (write denials stay with isDenied + denied_map.json).

REFACTOR

• Extract file reading helpers into internal/filesystem/fileReader/ (file.go, csv.go, pdf.go, image.go, listFiles.go, globFiles.go, searchFiles.go) and file writing into internal/filesystem/fileWriter/ (write.go, patch.go). internal/tools/file/* tools collapse to thin registration/handler wrappers that delegate to these helpers; shared read/write logic is no longer duplicated between tool entry points and the filesystem layer.
• Split error-memory out of internal/tools/file/errorMemory.go into internal/filesystem/errorMemory/ (save.go, search.go) and a dedicated internal/tools/errorMemory/ tool package (register.go, rememberError.go, searchErrorMemory.go, readToolError.go). Move toolError package from internal/tools/ into internal/filesystem/errorMemory/toolError/ so storage-layer ownership matches the file-system module.
• Rename internal/filesystem/store/ → internal/filesystem/torii/ to reflect the ToriiDB wrapper role.
• Rename registry entries search_history → search_conversation_history and search_content → search_file_content. Stub tool first-call short-circuit means LLM sees only the name on round one — search_history collided semantically with git/shell history, so the tool name now carries the disambiguation instead of leaning on description.
• Unify tool registration for file tools in internal/tools/file/register.go and align APIs across read_file, read_image, list_files, glob_files, search_files, search_file_content, write_file, patch_edit.

Files Changed

Generated by SKILL