Repository navigation

fix(analyst): keep write tools denied under config grants and allow reading global skill files - #1597

Merged

hkaltai merged 25 commits into

mainfrom

fix/analyst-config-write-denies

Oct 28, 2026

Merged

fix(analyst): keep write tools denied under config grants and allow reading global skill files#1597
hkaltai merged 25 commits into
mainfrom
fix/analyst-config-write-denies

Commits on Oct 26, 2026
- fix(analyst): keep write denies after config grants and allow reading global skill files
  
  hkaltai
  and
  claude
  committed
  af28cf3
- refactor(analyst): describe the post-config write denies in the marker comment
  
  hkaltai
  and
  claude
  committed
  7ae5a88
- fix(analyst): deny every built-in write tool after config, not just file and memory writes
  
  hkaltai
  and
  claude
  committed
  3a6f72d
- fix(analyst): drop the task tool when config denies all delegation
  
  hkaltai
  and
  claude
  committed
  5857f49
- docs(analyst): state exactly what the permission examples deny
  
  hkaltai
  and
  claude
  committed
  45f6da7
- fix(permission): check the symlink-resolved directory for external_directory access
  
  hkaltai
  and
  claude
  committed
  a86cb90
- docs(security): note that external_directory checks follow symlinks
  
  hkaltai
  and
  claude
  committed
  4555a8b
- fix(permission): resolve symlinks for glob and ls, new write targets and wildcard rules
  
  hkaltai
  and
  claude
  committed
  6d5378f
- fix(permission): follow dangling links and decide containment on the real location
  
  hkaltai
  and
  claude
  committed
  a16d5db
- fix(permission): bound dangling-link resolution by one shared link budget
  
  hkaltai
  and
  claude
  committed
  698012c
- test(filesystem): leave headroom in the link-chain time bound
  
  hkaltai
  and
  claude
  committed
  6cbc8c4
- docs(permission): put wildcard rules first in examples and describe outside symlinks accurately
  
  hkaltai
  and
  claude
  committed
  e5beb92
- docs(analyst): name what analyst keeps instead of calling it read-only
  
  hkaltai
  and
  claude
  committed
  93685b3
- fix(llm): preserve internal fallback for denied tool calls
  hkaltai
  committed
  5c883ad
- fix(permission): protect authored external paths
  hkaltai
  committed
  05de6a3
- fix(permission): close resolved-path bypasses
  hkaltai
  committed
  c048b7d
- fix(permission): preserve path and fallback identity
  hkaltai
  committed
  35d03fe
- docs(analyst): document scratch table exception
  hkaltai
  committed
  f48cac9
- chore(upstream): guard wildcard path changes
  hkaltai
  committed
  803511c
- fix(permission): harden tool name repair
  hkaltai
  committed
  5a4baca
- fix(llm): reject inherited tool names
  hkaltai
  committed
  6b14216
Commits on Oct 27, 2026
- fix(permission): let resolved twins only tighten, and keep project files spelled through a link inside
  
  hkaltai
  and
  claude
  committed
  a0b1eea
- chore(analyst): close one marker block around the permission log, and end run-on doc sentences
  
  hkaltai
  and
  claude
  committed
  8eedd7e
- fix(permission): check a symlink-resolved path without rewriting configured rules
  
  hkaltai
  and
  claude
  committed
  e433449
- fix(permission): resolve path rules under a wildcard permission too
  
  hkaltai
  and
  claude
  committed
  489d22c

Commits

Commits on Oct 26, 2026

Commits on Oct 27, 2026