Interactive file reads reach as far as shell does (#1724) - #1770

Open

Aaronontheweb wants to merge 14 commits into

devfrom

feat/1724-file-read-shell-reach

Commits on Aug 5, 2026

feat: interactive Personal file reads reach as far as shell does (#1724)
Aaronontheweb
committed
1c703e2
Merge branch 'dev' into feat/1724-file-read-shell-reach
Aaronontheweb
authored
9dfe31f
fix: keep set_working_directory roots-scoped; deny control-plane attaches (#1724)
Aaronontheweb
committed
6642a04

Commits on Aug 6, 2026

fix: close symlinked-dir and sqlite-sidecar read-deny gaps; clamp set_working_directory in Mode.All (#1724)
Aaronontheweb
committed
bd2ca09
chore: remove stray commit-message scratch file
Aaronontheweb
committed
657807f
fix: update session-cwd spec for working-dir clamp; deny sqlite sidecars on write (#1724)
Aaronontheweb
committed
2c37270
fix: preserve Windows drive root in symlink path walk (windows CI #1770)
Aaronontheweb
committed
7f3b0a9
test(security): dump compared paths when symlink deny fails
Aaronontheweb
committed
04af199
test(security): trace symlink walk step by step for Windows diagnosis
Aaronontheweb
committed
2cc074b
fix(security): stop doubling the drive root in the symlink deny walk
Aaronontheweb
committed
665dd62
Merge branch 'dev' into feat/1724-file-read-shell-reach
Aaronontheweb
authored
4f01a78
fix(security): fail closed when symlink deny resolution throws
Aaronontheweb
committed
5382aff
fix(security): replace empty construction catch to satisfy slopwatch SW003
Aaronontheweb
committed
d7e5e96
Merge branch 'dev' into feat/1724-file-read-shell-reach
Aaronontheweb
authored
754eab6