792639d813
Implemented a unified path validation helper to ensure filesystem operations stay within the designated workspace. This now supports a 'restrict_to_workspace' option in config.json (enabled by default) to allow flexibility for specific environments while maintaining a secure default posture. I've updated read_file, write_file, list_dir, append_file, edit_file, and exec tools to respect this setting and included tests for both restricted and unrestricted modes. |
||
|---|---|---|
| .. | ||
| agent | ||
| bus | ||
| channels | ||
| config | ||
| cron | ||
| heartbeat | ||
| logger | ||
| providers | ||
| session | ||
| skills | ||
| tools | ||
| voice | ||