Tidebreak is a Rust-based agent platform with MCP server capabilities, code execution sandboxes, and integrated model routing. It provides tool registration, provider adapters, and a complete agent loop with storage and authentication.
Tidebreak defines 4 tools with basic schemas and descriptions, but falls short of production quality. All tools have descriptions (10-60 chars, below the 50-200 char baseline for LLM optimization) and input schemas with typed parameters. However, descriptions lack actionable context, they state WHAT but not WHEN or WHY. The exec tool is particularly risky: no error guidance, no dry-run pattern, no permission checks documented. Parameters lack constraints (enums, ranges, format hints). Output schemas are not documented. No recovery guidance for failures. Naming is verb-first (good), but descriptions are too terse to guide LLM selection or parameter usage.
Execute a command in the sandbox environment
List the contents of a directory
Read the contents of a file from the filesystem
Write contents to a file on the filesystem
Descriptions are too terse (10-60 chars vs 50-200 baseline). They state WHAT but lack WHEN/WHY context. LLMs cannot determine when to select read_file vs list_dir, or when exec is appropriate.
exec tool has no error guidance, no dry-run/confirmation pattern, and no documented permission requirements. Irreversible operations must support confirmation and recovery guidance.
No output schemas documented for any tool. LLMs cannot plan downstream calls or extract required fields without knowing return structure.
Parameters lack constraints. 'path' accepts any string; 'command' and 'args' have no format hints, length limits, or validation rules. No enums, patterns, or ranges.
| Scored | Grade | Overall | Spec posture | Rubric |
|---|---|---|---|---|
| 2026-09-23 | F | 46 | 2026-07-28+ | v2 |
write_file and exec are destructive/irreversible but lack explicit state-change warnings in descriptions. Agents need to know which calls are safe to retry.