Function check_readable_internal_path

src/permissions/filesystem.py:356–374

True when ``file_path`` resolves inside a harness-internal readable dir. Compares fully resolved paths on both sides so the macOS ``/tmp`` → ``/private/tmp`` symlink (and any other symlinked prefix) matches.

(file_path: str, context: Any)

def check_readable_internal_path(file_path: str, context: Any) -> bool:
    """True when ``file_path`` resolves inside a harness-internal readable dir.

    Compares fully resolved paths on both sides so the macOS ``/tmp`` →
    ``/private/tmp`` symlink (and any other symlinked prefix) matches.
    """
    if not file_path:
        return False
    try:
        target = Path(resolve_path(file_path))
    except Exception:
        return False
    for d in _readable_internal_dirs(context):
        try:
            if _is_within(target, Path(resolve_path(str(d)))):
                return True
        except Exception:
            continue
    return False


def _path_in_allowed_roots(file_path: str, context: Any) -> bool: