# v1.3.10 Release Notes

> v1.3.9 -> v1.3.10

## Summary

File tools can now read system and package directories outside the home folder without prompting, while shell commands that read other paths outside home no longer pass automatic approval. Secret-leak refusals now tell users how to view the value themselves.

<details>
<summary>翻譯</summary>

檔案工具讀取家目錄外的系統與套件目錄不再需要確認，同時讀取家目錄外其他路徑的 shell 指令不再自動放行。敏感資訊拒絕回覆時，改為告知使用者自行查看的方式。

</details>

## Changes

### FEAT
- Allow `read_files` and `find_files` to read system and package directories outside `$HOME` without confirmation; extend the built-in list with `readable_path` in `config.json` (@pardnchiu) [c5b4a7b4]
- Include a command the user can run in their own terminal in `secret-exfil` refusals, using a per-rule refusal template (@pardnchiu) [c5b4a7b4]

<details>
<summary>翻譯</summary>

- `read_files` 與 `find_files` 讀取 `$HOME` 外的系統與套件目錄免確認；可用 `config.json` 的 `readable_path` 追加路徑
- `secret-exfil` 拒絕訊息附上使用者可在自己終端機執行的查看指令，拒絕訊息改為依規則套用模板

</details>

### UPDATE
- Stop auto-approving read-only `run_command` calls whose argv names an existing path outside `$HOME` that is not on the readable list, and raise a confirmation for such paths in always-allow mode (@pardnchiu) [c5b4a7b4]

<details>
<summary>翻譯</summary>

- 唯讀 `run_command` 的 argv 含 `$HOME` 外、不在可讀清單內的既有路徑時不再自動放行；always-allow 模式下改為跳確認

</details>

### REFACTOR
- Move the built-in sensitive path list to go-pkg `filesystem.IsSensitive`; `sensitive_path` in `config.json` still extends it (@pardnchiu) [c5b4a7b4]

<details>
<summary>翻譯</summary>

- 內建敏感路徑清單改由 go-pkg `filesystem.IsSensitive` 提供，`config.json` 的 `sensitive_path` 仍可追加

</details>

## Scope

- `internal/tools/file/` — FEAT, UPDATE (multiple files)
- `internal/filesystem/` — FEAT, UPDATE, REFACTOR (`pathRule.go`, `runtime.go`, `replyLang.go`)
- `internal/agents/exec/` — FEAT, UPDATE (`response.go`, `readonly/argv.go`, `readonly/shell.go`)
- `configs/` — FEAT, REFACTOR (multiple files)
- `go.mod`, `go.sum` — CHORE

***

Generated by [SKILL](https://github.com/pardnchiu/skill-version-generate)