Changed: Move permission enforcement into path resolver layer

src/llm-coding-tools-agents/Cargo.toml

@@ -33,6 +33,9 @@ ahash = { version = "0.8", features = ["serde"] }
 # Core library for permissions and tool types
 llm-coding-tools-core = { path = "../llm-coding-tools-core", version = "0.2.0" }
 
+# Canonicalizes paths, resolving symlinks without requiring the full path to exist
+soft-canonicalize = "0.4"
+
 [dev-dependencies]
 tempfile = "3.27"
 criterion = "0.8"

src/llm-coding-tools-agents/src/lib.rs

@@ -4,13 +4,15 @@ mod catalog;
 mod extensions;
 mod loader;
 mod parser;
+mod path;
 mod runtime;
 mod types;
 
 pub use catalog::AgentCatalog;
 pub use extensions::RulesetExt;
 pub use loader::AgentLoader;
 pub use parser::AgentParseError;
+pub use path::{build_resolver_for_tool, FileToolResolver};
 pub use runtime::{
     callable_targets, default_tools, resolve_model_with_catalog, summarize_callable_targets,
     AgentDefaults, AgentRuntime, AgentRuntimeBuilder, ModelResolutionError, ResolvedModel,

src/llm-coding-tools-agents/src/path/mod.rs

@@ -0,0 +1,8 @@
+//! File-tool path resolver construction.
+//!
+//! Re-exports [`FileToolResolver`] and [`build_resolver_for_tool`] from the
+//! `resolver` submodule. See that module for optimisation-tier details.
+
+mod resolver;
+
+pub use resolver::{build_resolver_for_tool, FileToolResolver};