GenarrativeAI/Genarrative
12
0
Fork 0
Code Issues 35 Pull Requests 10 Actions Packages Projects 1 Releases Wiki Activity

修复策划工作区删除保护并允许链接路径删除
Project CI / AI game creator shell Rust crates (pull_request) Successful in 1m26s
Details
Project CI / AI game creator shell Rust smoke (pull_request) Successful in 1m46s
Details
Project CI / Backend tests (pull_request) Successful in 3m55s
Details
Project CI / Frontend tests (pull_request) Successful in 2m13s
Details
Project CI / Native shell tests (pull_request) Successful in 6m6s
Details
Project CI / Repository checks (pull_request) Failing after 51s
Details
Project CI / AI game creator shell Rust lane 2/2 (pull_request) Successful in 8m41s
Details
Project CI / AI game creator shell Rust lane 1/2 (pull_request) Successful in 8m50s
Details
Project CI / AI game creator shell web tests (pull_request) Successful in 1m38s
Details

Browse Source 
按真实路径保护工作区根目录及其上级目录
允许删除路径经过祖先链接，删除链接本身不影响目标
补充两项删除边界回归测试并同步工具说明与文档
This commit is contained in:
孔令弘
2026-09-29 09:46:55 +01:00
parent aaf43ec421
commit 541fe07a7e
4 changed files with 90 additions and 33 deletions
Download Patch File Download Diff File Expand all files Collapse all files
docs/technical/【技术方案】策划Agent生产迁移与工作区浏览-2026-09-10.md
+1 -1
View File
@@ -68,7 +68,7 @@
- 旧的“批准 / 修改 / 退回重做”审批语义；
- 多 Agent、Wiki、知识库、外部搜索和自动任务编排。
2026-09-29：策划文件工具可以读取和写入绝对路径，以及 `design_artifacts` 之外的路径。相对路径仍以策划工作区为基准，`..` 可以离开工作区。用户工作区浏览和附件导入仍只使用 `design_artifacts`。删除不跟随符号链接，也不删除工作区根目录本身。凭据不写入提示词或日志。
2026-09-29：策划文件工具可以读取和写入绝对路径，以及 `design_artifacts` 之外的路径。相对路径仍以策划工作区为基准，`..` 可以离开工作区。用户工作区浏览和附件导入仍只使用 `design_artifacts`。删除允许路径经过祖先链接；删除目标本身是链接时只移除链接（包括悬空链接），递归删除目录不跟随其中的目录链接。删除普通目录前以真实路径检查目标，拒绝工作区根目录及其上级目录，绝对路径中的 `..`、大小写或祖先链接别名均不得绕过；检查必须在删除任何内容前完成。相对删除路径保留 `..`，按文件系统实际链接目标解析，不提前做字符串折叠。凭据不写入提示词或日志。
当前实现入口如下：