fix(s03,s04,s20): remove dead safe_path, sync READMEs

- Delete safe_path entirely (following PR #483 approach) — no dead code
- Update all 3 READMEs per module to reflect read_file in Gate 2
- s04: also update permission_hook snippet in READMEs
- s20: remove safe_path (already replaced with inline resolution)

Closes #482
This commit is contained in:
root
2026-07-28 19:29:01 +08:00
parent 97b8541b36
commit 581241cdc7
8 changed files with 7 additions and 25 deletions

View File

@@ -61,7 +61,7 @@ PERMISSION_RULES = [
{
"tools": ["read_file", "write_file", "edit_file"],
"check": lambda args: not (WORKDIR / args.get("path", "")).resolve().is_relative_to(WORKDIR),
"message": "Writing outside workspace",
"message": "Access outside workspace",
},
{
"tools": ["bash"],

View File

@@ -61,7 +61,7 @@ PERMISSION_RULES = [
{
"tools": ["read_file", "write_file", "edit_file"],
"check": lambda args: not (WORKDIR / args.get("path", "")).resolve().is_relative_to(WORKDIR),
"message": "Writing outside workspace",
"message": "Access outside workspace",
},
{
"tools": ["bash"],

View File

@@ -61,7 +61,7 @@ PERMISSION_RULES = [
{
"tools": ["read_file", "write_file", "edit_file"],
"check": lambda args: not (WORKDIR / args.get("path", "")).resolve().is_relative_to(WORKDIR),
"message": "Writing outside workspace",
"message": "Access outside workspace",
},
{
"tools": ["bash"],