792639d813
Implemented a unified path validation helper to ensure filesystem operations stay within the designated workspace. This now supports a 'restrict_to_workspace' option in config.json (enabled by default) to allow flexibility for specific environments while maintaining a secure default posture. I've updated read_file, write_file, list_dir, append_file, edit_file, and exec tools to respect this setting and included tests for both restricted and unrestricted modes. |
||
|---|---|---|
| .. | ||
| base.go | ||
| edit.go | ||
| filesystem.go | ||
| filesystem_test.go | ||
| message.go | ||
| registry.go | ||
| shell.go | ||
| spawn.go | ||
| subagent.go | ||
| types.go | ||
| web.go | ||