4 months ago
ccb1e89Remove bash from targetPath-scoped child toolsets so scoped agents cannot use shell reads outside their assignment while retaining path-scoped read/write/edit/glob/grep tools. Harden Linux sandbox generation by masking existing nested protected metadata directories under explicit writable roots and treating common dotless target files such as Dockerfile and Makefile as file roots. Keep sandbox root canonicalization deterministic for synthetic missing paths and update regression coverage for canonical app-server roots, macOS temp aliases, dotless file targets, nested metadata, and scoped child tool exposure.
Parentb1e98ae
