acoyfellow/filepath

Implements multiple pluggable agent harnesses (Shelley, Claude Code, Hermes) with fine-grained scope enforcement via path allowlists, forbidden paths, and explicit tool permissions (`inspect`, `search`, `run`, `write`, `commit`, `cross_thread`). Deploys as a Cloudflare Worker using the Alchemy framework, storing state in D1 and executing bounded tasks against sandboxed workspaces that return structured results including diffs, violations, and command history. The runtime authority is deterministic and harness-agnostic—agents switch at conversation-level without re-provisioning, and the programmatic API surfaces both interactive conversations and single-shot task runs with optional proof-system integration.