Files
claw-code/rust/crates/runtime
Jobdori 284163be91 feat(file_ops): add edge-case guards — binary detection, size limits, workspace boundary, symlink escape
Addresses PARITY.md file-tool edge cases:

- Binary file detection: read_file rejects files with NUL bytes in first 8KB
- Size limits: read_file rejects files >10MB, write_file rejects content >10MB
- Workspace boundary enforcement: read_file_in_workspace, write_file_in_workspace,
  edit_file_in_workspace validate resolved paths stay within workspace root
- Symlink escape detection: is_symlink_escape checks if a symlink resolves
  outside workspace boundaries
- Path traversal prevention: validate_workspace_boundary catches ../ escapes
  after canonicalization

4 new tests (binary, oversize write, workspace boundary, symlink escape).
Total: 142 runtime tests green.
2026-04-03 17:09:54 +09:00
..