FN-8466: allow reads of advertised plugin skills
Allow isolated worktree sessions to read only host-advertised plugin skill roots.
- Normalize additional skill paths once for resource loading and boundary checks
- Permit read, glob, and grep while keeping write, edit, and Bash worktree-bound
- Document the boundary and cover root normalization and access restrictions
Files changed:
.changeset/fn-8466-skill-path-read-boundary.md | 7 ++
docs/agents.md | 4 +
.../src/__tests__/pi-create-fn-agent.test.ts | 108 +++++++++++++++++++++
packages/engine/src/pi.ts | 75 +++++++++++---
4 files changed, 183 insertions(+), 11 deletions(-)
Fusion-Task-Id: FN-8466
Fusion-Task-Lineage: ff6566be-803d-48b8-8550-aa1bfe080fed
Co-authored-by: Fusion (runfusion.ai) <noreply@runfusion.ai>
c94920d885