Method ensure_allowed_path

src/tool_system/context.py:313–336

(self, path: str | Path)

        return tuple(roots)

    def ensure_allowed_path(self, path: str | Path) -> Path:
        p = Path(path).expanduser() if isinstance(path, str) else path.expanduser()
        if not p.is_absolute():
            base = self.cwd or self.workspace_root
            p = (base / p).resolve()
        else:
            p = p.resolve()
        # Mirror TS ``shouldBypassPermissions`` at
        # ``typescript/src/utils/permissions/permissions.ts:1268-1281``:
        # bypassPermissions mode (set by --dangerously-skip-permissions),
        # or plan mode when the user started with bypass available,
        # short-circuits the working-directory allowlist so the tool can
        # operate outside ``workspace_root``.
        mode = self.permission_context.mode
        if mode == "bypassPermissions" or (
            mode == "plan"
            and self.permission_context.is_bypass_permissions_mode_available
        ):
            return p
        roots = self.allowed_roots()
        if any(_is_within(p, root) for root in roots):
            return p
        roots_str = ", ".join(str(r) for r in roots)
        raise ToolPermissionError(f"path is outside allowed working directories: {p} (allowed: {roots_str})")

    def ensure_readable_path(self, path: str | Path) -> Path:
        """Like :meth:`ensure_allowed_path` but also permits harness-internal