Python: [Feature]: Better FileAccessProvider for python harness #6770

from agent_framework import (
    Agent,
    FileReadAccessProvider,
    FileEditAccessProvider # subclasses Read
)


# Editing agent: read + write/patch tools, workdir-scoped, delete gated.
editor = Agent(
    client=client,
    instructions=...,
    context_providers=[
        FileEditToolsProvider(
            default_workdir="/work/project-a",
            require_delete_approval=True,   # delete_file -> always_require
            require_edit_approval=False,    # edit/apply_patch auto-run
        ),
    ],
)

# Read-only sub-agent: gets read/list_files/grep/glob ONLY — safe to delegate.
investigator = Agent(
    client=client,
    instructions=...,
    context_providers=[FileReadToolsProvider(default_workdir="/work/project-a")],
)




session_a.state["workdir"] = "/work/task-a"
session_b.state["workdir"] = "/work/task-b"

await asyncio.gather(
    editor.run("refactor module X", session=session_a),
    editor.run("fix failing test", session=session_b),
)  # each run's file tools are scoped to its own directory


**Surgical edits instead of whole-file rewrites:**


# exact-string edit
edit(file_name="src/app.py", old_string="DEBUG = True", new_string="DEBUG = False", replace_all=True)

# unified-diff patch (add/modify/delete/rename), the format models produce best
apply_patch(file_name="src/app.py", patch="--- a/src/app.py\n+++ b/src/app.py\n@@ ...")


**Search the tree without reading every file:**


grep(pattern=r"def create_agent", include="*.py")   # recursive, like grep -rn
glob(pattern="**/*.sysml")                          # recursive path match


**Approval loop for gated destructive ops** (when `require_delete_approval=True`):


result = await editor.run("remove the obsolete config", session=session_a)
for req in result.user_input_requests:   # delete_file surfaces here for approval
    ...