kami 7d7e524756 feat(workspace): WorkspaceResolver trust pipeline + allowed_workspace_roots ...

Resolve a client-supplied workspace dir safely: canonicalize via toRealPath,
reject privileged locations, clamp to [tools] allowed_workspace_roots (permissive
when unset, logged), fall back to the boot default on any rejection. PathJail made
non-internal so the server can reuse its symlink-safe containment. (Axis 2 Phase A, task 4.)

2026-06-02 19:57:03 +04:00

..

src

feat(workspace): WorkspaceResolver trust pipeline + allowed_workspace_roots

2026-06-02 19:57:03 +04:00

build.gradle

epic-13: add cli and tui entry point, finish epic.

2026-05-17 03:20:43 +04:00