agent_disk_usage
Path-scoped folder-tree disk usage report from a Netmon agent — the 'D: drive is at 95%, what's eating it?' question. Wraps POST /api/getFolderUsageFromPath which RPCs into the agent's GETFOLDERUSAGEPATH command and returns the immediate-children size breakdown for the given path.
Required parameters: device_id (the agent-enrolled device) and path (a Windows path on that device, e.g. "D:\" or "C:\Users"). Backslashes must be escaped in JSON strings — the LLM should pass "D:\" not "D:".
Drill-down pattern: start at the drive root, identify the largest child, recurse with that child as the new path. The agent does not produce a recursive tree in one shot — that's a deliberate latency cap.
Read-only by design. The agent's write paths (DELETEFILE, DELETEFOLDER, EXECUTEPS) are on the permanent deny-list at the top of tool_handler.cpp and not wrapped — even a future operator with the broadest possible PAT must not be able to drive deletions or shell exec from an LLM.
Latency: BLOCKING; the upstream endpoint has a 120s timeout. Large folders may take real wall-clock time.
Permission: devices. Windows-only — depends on agent enrollment (see CLAUDE.md agent enrollment section). Linux/macOS hosts have no agent-side equivalent of GETFOLDERUSAGEPATH.
Example: agent_disk_usage({device_id: 42, path: "D:\Users"})
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| path | Yes | Windows path on the device, e.g. "D:\\" or "C:\\Users". Backslashes must be JSON-escaped. | |
| device_id | Yes | Agent-enrolled device id. |