magus v0.4.3 is out. See what's new
¶ View markdown source · ✎ Suggest an edit
2 min read

read-paging

A deny rule by default: it refuses a mapped file read window by window, past two windows of it, and names what to run instead.

What it catches

A mapped file read window by window, past two windows of it.

Why

read-navigation refuses a whole read and serves the file's map; paging through the file instead spends the same lines over several calls. Each caller's windows of each Go, Buzz or Markdown file are counted, and the third distinct one is refused with the map. A window inside one declaration or heading is a targeted read and never counts, nor does a repeat of a window already read, a whole read, or a file short enough for read-navigation to pass whole. The refusal names one concrete declaration or heading to read, the one holding the refused window's first line or the next one down, as the sed -n span or the refs command that prints it. Reading that span is a declaration read, so the suggested window never counts as a page; a window one line either side of a declaration (the Read tool's offset and limit land one off) counts as inside it. It cannot tell a walk through the file from reads of three spans that each cross a declaration's edge.

Default and override

By default this rule takes the decision deny. A workspace sets it by name, in its root magusfile, to deny, advise or off:

magus\guard.builtins({"read-paging": "advise"})

A loosening takes effect once it is committed; a tightening applies at once.

Seeing it

A verdict names its rule in brackets, which is how you got here:

deny [read-paging]: ...

A workspace that sets this rule to advise sees advise [read-paging]: ... instead.

magus describe rule read-paging prints the same entry at a terminal, and magus describe rules lists every rule this workspace enforces.

See also

guardrulesread-pagingdeny
Last updated (c6a327d5)
Earlier changes on this page (1)

Full history ↗ · Blame source ↗

Glossary

Workspace

The magus root directory that owns a set of projects and shared config; the unit magus operates over. Workspace in full.

Magusfile

The magusfile.buzz that declares a project's targets (as export funs) and binds its spells. Magusfile in full.

Target

A named operation (build, test, ...) you invoke with magus run <target>; it may compose a spell's tool-native operations and depend on other targets. Target in full.

Buzz

The language magusfiles are written in (the .buzz engine). Buzz in full.

CI

An ordinary target you compose yourself with ctx.needs; magus does not hardcode its stages. It is the anchor magus affected ci keys off, and ci strips the rw charm. CI in full.

Span

OpenTelemetry's name for one unit of work under a trace: a target execution, whose sub-operations are child spans. An output reference points at a span's captured output. Span in full.

Agent

A model working through an agent host such as Claude Code, Codex, Cursor or OpenCode. magus treats an agent as one more caller of its CLI, MCP tools and console, held to the same checks as a person. Agent in full.

Tool

An action a model can call through its host: a name, a description, a typed input and a result. magus serves its tools over MCP, each a read of the workspace model or a run of the CLI it already has. Tool in full.

Window

The terminal a command runs in. It keys fire-once notices for a caller no host gave a session, and is never recorded as a session. Window in full.

Run

One target executing under one magus invocation, such as magus run test web or magus affected ci. A run keeps its captured output behind an output reference. Every magus run is a run whether or not any job asked for it; see Job for how the two relate. Run in full.

Conventions

This page uses none of the site's convention markers. The full set is on the conventions page.