fix(pi): allow rm of files inside the working directory#834

Merged

gewenyu99 merged 13 commits into

mainfrom

posthog-code/pi-tool-use-parity

Jul 9, 2026

Commits on Jul 8, 2026

fix(pi): enforce read-before-write at the tool layer and allow scoped rm — claude-agent-sdk parity
gewenyu99
authored
slim to rm-only: revert read-before-write enforcement and commandment change
gewenyu99
authored
move scoped rm carve-out into the pi fence; shared policy untouched
gewenyu99
authored
trim comments to one line each
gewenyu99
authored
rewrite rm carve-out for readability — named predicates, no condition chains
gewenyu99
authored
match anthropic: gate plain rm on shared YARA, reject shell operators (closes injection)
gewenyu99
authored
confine rm to files resolving inside the working directory
gewenyu99
authored