query_<id> tool. The tool routes through a read-only sub-agent with the Workspace toolkit scoped to root: list files, search content, and read files with line numbers. Common dependency directories, build outputs, caches, and virtualenvs are excluded by default.
cookbook/12_context/13_workspace.py
Workspace vs Filesystem provider
Configuration
Tools Exposed
The provider is read-only by design. No save, edit, delete, move, or shell tools are exposed. For write access to a working directory, use the
Workspace toolkit directly with confirmation gates.
Example queries
Resources
Workspace Toolkit
The underlying read/write toolkit
Cookbook Example
Project-aware workspace example