HaisamandXubin Ren bfe5b64022 fix: allow git commands in workspace subdirectories ...

The shell safety guard in _guard_command() checked extracted absolute
paths only against cwd_path (the command's working directory).  When
cwd was a subdirectory like ~/.nanobot/workspace/obsidian_notes, any
absolute path referencing the broader workspace (e.g. a sibling
directory or the workspace root itself) was incorrectly blocked with
"path outside working dir".

Fix: pass the workspace_root from _prepare_command() into
_guard_command() and check absolute paths against it as a fallback
when they are outside cwd_path.  Paths truly outside the workspace
root are still blocked.

Added tests:
- test_exec_allows_workspace_paths_from_subdirectory
- test_exec_blocks_outside_paths_from_subdirectory

2026-06-18 00:02:58 +08:00

..

__init__.py

feat(status): add web search provider usage to /status command

2026-04-06 13:37:55 +08:00

test_apply_patch_tool.py

fix(tools): keep apply_patch additions line-separated

2026-06-10 14:47:01 +08:00

test_edit_advanced.py

test: improve deterministic unit test coverage

2026-06-04 19:41:32 +08:00

test_edit_enhancements.py

feat(tools): optimize coding workflows

2026-05-20 23:08:21 +08:00

test_exec_allow_patterns.py

fix: allow_patterns take priority over deny_patterns in ExecTool (#3594)

2026-05-03 00:27:17 +08:00

test_exec_env.py

feat(exec): add path prepend config

2026-06-10 18:09:57 +08:00

test_exec_platform.py

feat(exec): add path prepend config

2026-06-10 18:09:57 +08:00

test_exec_security.py

fix: allow git commands in workspace subdirectories

2026-06-18 00:02:58 +08:00

test_exec_session_tools.py

feat(transcription): add shared voice input support (#4232)

2026-06-09 01:08:49 +08:00

test_file_edit_coding_enhancements.py

feat(tools): optimize coding workflows

2026-05-20 23:08:21 +08:00

test_filesystem_tools.py

fix(message): share workspace path resolver

2026-05-15 17:19:20 +08:00

test_image_generation_tool.py

test(image-generation): tighten zhipu provider coverage

2026-05-23 17:06:36 +08:00

test_mcp_probe.py

fix(mcp): reject unsafe HTTP URLs before probe

2026-06-08 16:03:57 +08:00

test_mcp_tool.py

test: cover MCP redirect guard wiring

2026-06-08 16:03:57 +08:00

test_message_tool_suppress.py

feat(tools): introduce plugin-based tool discovery and runtime context protocol

2026-05-12 11:28:20 +08:00

test_message_tool.py

fix(heartbeat): skip when HEARTBEAT.md has no tasks and fail closed on delivery (#4111)

2026-05-31 15:15:37 +08:00

test_read_enhancements.py

fix(tools): scope file state by session

2026-05-01 19:15:07 +08:00

test_sandbox.py

fix(sandbox): set HOME inside bwrap

2026-06-10 15:50:53 +08:00

test_search_tools.py

feat(tools): improve coding workflow recovery

2026-05-21 00:58:05 +08:00

test_tool_descriptions.py

docs(tools): clarify coding tool guidance

2026-05-21 14:28:39 +08:00

test_tool_loader.py

Break tool config schema import cycle

2026-06-13 21:59:07 +08:00

test_tool_registry.py

Improve tool call validation strictness (#4190)

2026-06-09 14:50:40 +08:00

test_tool_validation.py

fix(exec): uncap config exec timeout; 0 means no limit (#3595)

2026-05-23 17:32:59 +08:00

test_web_fetch_security.py

feat(desktop): polish desktop shell and shared WebUI surfaces (#4195)

2026-06-06 19:49:33 +08:00

test_web_fetch_url_sanitization.py

fix(tools): tighten web fetch URL cleaning

2026-05-01 19:58:19 +08:00

test_web_search_tool.py

search: add Bocha web search provider

2026-06-10 15:51:15 +08:00