Steer agents toward file tools for known file work

[Aaronontheweb]

Summary

• prefer first-party file tools for known reads, listings, and edits
• distinguish local repository search via shell_execute from external discovery via web_search and web_fetch
• add deterministic tool-selection evals and synchronize the active OpenSpec plan

This does not change shell authorization, grants, or safe-verb policy.

Validation

• full Release suite: 7,444 passed; 15 expected skips
• post-rebase focused: Configuration 21/21; Actors 39 passed with 1 expected Windows-only skip
• evals: known read 5/5, directory list 5/5, file edit 5/5, local repository search 5/5, web search 4/5 at the 0.80 threshold
• strict OpenSpec, header verification, Bash syntax, targeted format, diff check, and changed-file Slopwatch passed

Live verification

The exact rebased commit b45bf8d is running on the local Netclaw instance and reports healthy runtime, SQLite, Slack, TUI, and MCP connector status.