readWorkerFile / gitDiff resolved the client path with a bare resolve() — the only two worker file channels not anchored to ctx.physicRoot. Resolve them relative to the physic root and clamp inward (matching fs.list/write/mutate/upload/download), so the web can address project files by a project-root-relative path; also closes a read-outside-root confinement gap.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_018pPdrhKDT5Wfs28YL57gLZ