v0.1.3

radian 0.1.3

This release lets the file tools read a skill's own files and, in the full
tier, any file outside the workspace except a fixed deny set. It also adds the
/trust and radian trust commands that the startup hint already named.

File tools read more

• Skill directories, both tiers. Each discovered skill's directory (the
  one that holds its SKILL.md) is a read-only root for read, grep and
  glob. A skill that tells the model to read references/… next to its
  SKILL.md now works. Project skills count only when the project is
  trusted.
• Any path in the full tier. In the full tier (no sandbox, the
  default), read, grep and glob read any absolute or ~ path, except
  the sandbox's deny set: .ssh, .aws, .gnupg, .netrc, .npmrc,
  .config/gcloud, .docker/config.json and the browser profile and cookie
  directories under $HOME, and the sessions directory, memory/,
  credentials/, trust/ and access/ under ~/.radian. The check follows
  symbolic links. Before, the file tools refused every path outside the
  workspace in every tier, while the full tier's shell read everything.
• write and patch still change only the workspace, in every tier.
• The workspace tier refuses other outside paths as before; the refusal
  lists the readable roots, now including skill directories.
• ~/.radian/access/ (which projects run without a sandbox) is now denied to
  the radian exec sandbox as well; the full-screen interface already denied
  it.

docs/user/permissions.md lists every rule.

Trust commands

• /trust in the full-screen interface: /trust or /trust status shows
  this directory's decision and where it comes from; /trust on,
  /trust off and /trust forget save or remove it. A change takes effect
  at the next start.
• radian trust status|on|off|forget|list does the same from the command
  line; list prints every saved decision.
• Before, the startup hint said /trust to trust it, but the command did not
  exist, so a project with nothing to load had no way to save trust.

Smaller changes

• The untrusted project hint under the wordmark is drawn in its own theme
  role, trust_hint (yellow by default), so it stands out. A project you
  distrusted says distrusted project · /trust on to trust it.
• The startup tip about ! no longer says the command runs in the sandbox:
  it runs in the sandbox only in the workspace tier.

Install

brew upgrade radian (or brew install hisea/tap/radian), a release
tarball (check it against its .sha256), or cargo install from source.
The manual is at https://getrad.dev/docs/.