goatchain 0.0.25 → 0.0.26

package/README.md

@@ -569,12 +569,30 @@ tools.register(
 | `GrepTool` | Searches text content in files | Search runs under `cwd` | `path` argument narrows search scope | `fileBlacklist`, `disableBlacklist` |
 | `BashTool` | Runs shell commands | Commands execute in `cwd` | `workdir` argument overrides per call | `readOnlyPaths` |
 
-**Directory Configuration Options:**
+**Directory & Protection Options:**
 
 | Option             | Description                                                         | Example                               |
 | ------------------ | ------------------------------------------------------------------- | ------------------------------------- |
 | `cwd`              | Working directory for resolving relative paths                      | `{ cwd: '/app/output' }`              |
 | `allowedDirectory` | Restrict file access to this directory only (blocks path traversal) | `{ allowedDirectory: '/app/output' }` |
+| `readOnlyPaths`    | Mark paths/directories as read-only for write-like operations       | `{ readOnlyPaths: ['docs', { path: '.env', reason: 'secrets' }] }` |
+
+`readOnlyPaths` is supported by `WriteTool`, `EditTool`, and `BashTool`.
+Use it to protect specific directories/files from modifications while still allowing reads/searches.
+
+```typescript
+const tools = new ToolRegistry()
+
+const readOnlyPaths = [
+  'docs', // relative to cwd
+  { path: '.env', reason: 'Secrets file must not be modified' },
+  { path: '/absolute/path/to/protected-dir', reason: 'Managed by another system' },
+]
+
+tools.register(new WriteTool({ cwd: OUTPUT_DIR, readOnlyPaths }))
+tools.register(new EditTool({ cwd: OUTPUT_DIR, readOnlyPaths }))
+tools.register(new BashTool({ cwd: OUTPUT_DIR, readOnlyPaths }))
+```
 
 **When to use `allowedDirectory`:**
 

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "goatchain",
   "type": "module",
-  "version": "0.0.25",
+  "version": "0.0.26",
   "workspaces": [
     "packages/*"
   ],