My Emacs configuration https://git.cjennings.net/dotemacs/atom?h=main 2026-05-16T16:30:04+00:00 2026-05-16T16:30:04+00:00 Craig Jennings c@cjennings.net 2026-05-16T16:30:04+00:00 urn:sha1:244d4c56768fcc60bd1b23fe45df7a57c7b293ec Resolves PATH through file-truename before applying home-directory and read/write checks across the path-handling tools (git_status, git_log, git_diff, move_to_trash, read_text_file, update_text_file, write_text_file, list_directory_files, read_buffer, web_fetch). Without the resolve step, a symlink under HOME pointing outside HOME would pass the prefix check but the tool would act on the real target -- a symlink-escape. move_to_trash also tightens the trash-bin construction (treats empty file extensions correctly) and switches the "critical directories" list to truename-resolved canonical forms so a symlinked ~/.config can't be trashed via an aliased path. update_text_file fixes an off-by-one in the line-count derivation when the source content is empty. Each source change pairs with tests in tests/test-gptel-tools-*.el and tests/test-update-text-file.el covering the realpath escape paths, the empty-extension trash case, and the empty-content line- count edge. Combined coverage is now 100% across all ten gptel-tools source files: 516 / 516 executable lines, 217 tests. 2025-10-12T16:47:26+00:00 Craig Jennings c@cjennings.net 2025-10-12T16:47:26+00:00 urn:sha1:092304d9e0ccc37cc0ddaa9b136457e56a1cac20