Merge branch 'llm' into dependabot/github_actions/actions/checkout-6.0.2

Author: kriskowal

.changeset/add-endo-hex.md

@@ -0,0 +1,5 @@
+---
+'@endo/tar': minor
+---
+
+Add `@endo/tar`, a minimal, portable read-only tar archive parser. Mirrors `@endo/zip` as the tar-side counterpart, extracted from the daemon's Git-tree archiving path, and reads the entries `git archive --format=tar` emits (regular files, directories, symlinks, and pax extended headers).

.changeset/add-endo-tar.md

@@ -0,0 +1,5 @@
+---
+'@endo/agent-tools': minor
+---
+
+Name each git tool's parameters from its method instead of the generic `arg0`/`arg1` convention. `gitToolSchemas` now declares real, declarative property names that read as an LLM-facing signature (`commit` → `message`, `show` → `ref`, `createBranch` → `name`/`options`, `switchBranch` → `branch`, `log`/`diff` → `options`), and `makeTool` marshals the named-args record into positionals by each schema's declared `parameters.properties` order and `required` set rather than the hardcoded `argN` keys. Arity, required-key validation, and the schema-to-guard parity are preserved.

.changeset/agent-tools-named-tool-params.md

@@ -0,0 +1,9 @@
+---
+'@endo/daemon': major
+---
+
+Specialize `EndoMount` as a directory, separate the file kind, and reshape mount entries as pure values.
+
+- `EndoMountEntry` is now a pure value with no observational or handle-minting authority. Its surface is `segments()`, `displayPath()`, and `child(name)`; the prior entry methods `openDirectory`, `openFile`, `createDirectory`, and `createFile` are removed. Consumers that want a live handle on a child go through the parent mount: `mount.lookup(name)` returns the child `EndoMount` (for directories) or `EndoMountFile` (for files). `has`, `stat`, and `lookup` accept either a path string or an entry value.
+- `EndoMount.makeDirectory(path)` returns `Promise<EndoMount>` instead of `Promise<void>`; the new directory is the resolved value. `EndoMount.makeFile(path, content?)` is added and returns `Promise<void>`; `content` is `string | undefined` (binary content is supplied through `write(path, readableBlob)` rather than `makeFile`, because mutable typed arrays do not cross CapTP). Callers that relied on `makeDirectory` resolving to `undefined` and then re-looked-up the child should now use the resolved mount directly.
+- `EndoMount.readOnly()` returns a structural `ReadableTree` view rather than another `EndoMount`; `EndoMountFile.readOnly()` returns a structural `ReadableBlob` view.

.changeset/amaro.md

@@ -0,0 +1,22 @@
+---
+'@endo/daemon': patch
+---
+
+Fix three filesystem bugs in `EndoMount`.
+
+- `EndoMount.write()` (and therefore `copy()`) opened the destination
+  writer directly on the target, truncating it before the source was
+  read. When the source resolved to the same file as the target — a
+  `copy(name, name)` or `write(name, lookup(name))` — the file was
+  emptied and the now-empty content streamed back, destroying the
+  source. The write now streams into a sibling scratch file and renames
+  it onto the target only after the full source has been read.
+- `EndoMount.copy()` into a destination strictly below the source (e.g.
+  `copy(['dir'], ['dir', 'copy'])`) recursed unboundedly because the
+  destination was created before the live source listing was read. Such
+  a copy is now rejected up front with a descendant-path guard.
+- The XS-backed `makeXsFilePowers()` omitted `appendFileText`,
+  `statPath`, `pathIdentity`, and `readFileBytes`, so
+  `EndoMountFile.append()` and the `stat()` methods threw under the XS
+  supervisor. The methods are now implemented across all three layers
+  (the JS factory, the XS host aliases, and the Rust host functions).