May 24, 2026

File Write Refactor: LLM Action & Abilities DB Rebuilt

The file_write ability was refactored so the action is now a real LLM-set parameter (default 'tmp'), with native policy dispatch in the dispatcher, including as

The file_write ability was refactored so the action is now a real LLM-set parameter (default ‘tmp’), with native policy dispatch in the dispatcher, including ask→_request_permission. The path parameter is optional for ‘tmp’ mode (generates UUID path), while ‘system’ requires an explicit path. A read guard is scoped to ‘system’ only. The ability now uses the public FileMapperService.get_chalie_root method for root determination, and the guardrail text was updated to match the new semantics.

During the merge of web_download and file_write worktrees into rc-0.8.0, abilities.sqlite conflicted and was rebuilt with all 29 abilities from both branches. Additionally, the file_write import was corrected from the removed paths module to FileMapperService.

A minor test fix updated test_read_skill imports after the SSRF validation logic was extracted to a separate _ssrf.py module.

  • File write action is now an LLM-set parameter with built-in policy handling

  • FileMapperService.get_chalie_root used for root path resolution

  • Rebuilt abilities.sqlite after merge conflict, preserving all 29 abilities

  • Success response returns structured JSON: {status, path, permission, size}

  • Fixed test imports after SSRF extraction to _ssrf.py