whit3rabbitandClaude Sonnet 4.6 babd0e6ff0 fix(tools): enforce allowed_dirs allowlist in ReadFileTool ...

Adds allowed_dirs config field to BuiltinToolConfig. ReadFileTool now
rejects reads outside the configured base directories after canonicalize(),
blocking both path traversal and symlink attacks. Logs a warning when
allowed_dirs is empty. Threads config through register_all so constructors
receive per-tool settings.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

2026-03-31 06:33:47 -05:00

..

admin-ui

fix: harden builtin tools and remove redundant error classification

2026-03-30 21:38:54 -05:00

src

fix(tools): enforce allowed_dirs allowlist in ReadFileTool

2026-03-31 06:33:47 -05:00

tests

fix(tools): handle Deny policy as error ToolResult instead of silent PassThrough

2026-03-30 22:47:46 -05:00

Cargo.toml

Merge branch 'feat/model-routing-ux'

2026-03-30 18:24:21 -05:00