mirror of
https://github.com/esengine/DeepSeek-Reasonix.git
synced 2026-11-07 10:45:59 -10:00
Guan09
11b8ceb38d
Enforce workspace read policy before previews, diagnostics, hooks, and file execution. Provide admitted previews to permission approval and Auto Guard, then capture fresh preimages after PreToolUse. Share target access checks across execution, planning, review, and delegated agents. Keep genuinely write-only targets available, report existing-file overwrite refusals with write-specific messages, and avoid hook-write coverage gaps for read-only calls. Preserve network-path protection before filesystem lookup while allowing authorized network roots and registered folder references. Include baseline-compatible disclosure regressions, production target-access wiring checks, and localized tool-card tests.
10 lines
181 B
Go
10 lines
181 B
Go
package agent
|
|
|
|
import (
|
|
"context"
|
|
"encoding/json"
|
|
"reasonix/internal/contract/tool"
|
|
)
|
|
|
|
func allowTestFileAccess(context.Context, tool.Tool, json.RawMessage) error { return nil }
|