goatchain 0.0.26 → 0.0.28

package/README.md

@@ -563,11 +563,11 @@ tools.register(
 | Tool | What it does | How `cwd` is applied | Per-call override | Extra sandbox options |
 | --- | --- | --- | --- | --- |
 | `ReadTool` | Reads files (and some converted formats) | Relative `file_path` resolves from `cwd` | `file_path` can be absolute | `allowedDirectory`, `fileBlacklist`, `disableBlacklist` |
-| `WriteTool` | Writes/overwrites files | Relative `file_path` resolves from `cwd` | `file_path` can be absolute | `allowedDirectory`, `readOnlyPaths`, `fileBlacklist`, `disableBlacklist` |
-| `EditTool` | Replaces `old_string` with `new_string` in a file | Relative `file_path` resolves from `cwd` | `file_path` can be absolute | `readOnlyPaths`, `fileBlacklist`, `disableBlacklist` |
+| `WriteTool` | Writes/overwrites files | Relative `file_path` resolves from `cwd` | `file_path` can be absolute | `allowedDirectory`, `fileBlacklist`, `disableBlacklist` |
+| `EditTool` | Replaces `old_string` with `new_string` in a file | Relative `file_path` resolves from `cwd` | `file_path` can be absolute | `fileBlacklist`, `disableBlacklist` |
 | `GlobTool` | Finds files by pattern | Search root defaults to `cwd` | `path` argument can change search root | `fileBlacklist`, `disableBlacklist` |
 | `GrepTool` | Searches text content in files | Search runs under `cwd` | `path` argument narrows search scope | `fileBlacklist`, `disableBlacklist` |
-| `BashTool` | Runs shell commands | Commands execute in `cwd` | `workdir` argument overrides per call | `readOnlyPaths` |
+| `BashTool` | Runs shell commands | Commands execute in `cwd` | `workdir` argument overrides per call | None |
 
 **Directory & Protection Options:**
 
@@ -575,24 +575,6 @@ tools.register(
 | ------------------ | ------------------------------------------------------------------- | ------------------------------------- |
 | `cwd`              | Working directory for resolving relative paths                      | `{ cwd: '/app/output' }`              |
 | `allowedDirectory` | Restrict file access to this directory only (blocks path traversal) | `{ allowedDirectory: '/app/output' }` |
-| `readOnlyPaths`    | Mark paths/directories as read-only for write-like operations       | `{ readOnlyPaths: ['docs', { path: '.env', reason: 'secrets' }] }` |
-
-`readOnlyPaths` is supported by `WriteTool`, `EditTool`, and `BashTool`.
-Use it to protect specific directories/files from modifications while still allowing reads/searches.
-
-```typescript
-const tools = new ToolRegistry()
-
-const readOnlyPaths = [
-  'docs', // relative to cwd
-  { path: '.env', reason: 'Secrets file must not be modified' },
-  { path: '/absolute/path/to/protected-dir', reason: 'Managed by another system' },
-]
-
-tools.register(new WriteTool({ cwd: OUTPUT_DIR, readOnlyPaths }))
-tools.register(new EditTool({ cwd: OUTPUT_DIR, readOnlyPaths }))
-tools.register(new BashTool({ cwd: OUTPUT_DIR, readOnlyPaths }))
-```
 
 **When to use `allowedDirectory`:**