fix: allow file access within registered project paths in web mode

Previously, web API handlers restricted file access to $HOME only,
blocking legitimate workspace paths on servers (e.g. /scratch/work/).
Now paths within registered project directories are also allowed.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Author: RealZST

crates/hk-web/src/handlers/agents.rs

@@ -10,7 +10,10 @@ use crate::state::WebState;
 type Result<T> = std::result::Result<Json<T>, ApiError>;
 
 /// Resolve `~` and validate custom config paths (mirrors desktop logic).
-fn resolve_and_validate_config_path(path: &str) -> std::result::Result<String, hk_core::HkError> {
+fn resolve_and_validate_config_path(
+    path: &str,
+    store: &hk_core::store::Store,
+) -> std::result::Result<String, hk_core::HkError> {
     let resolved = if path.starts_with("~/") {
         dirs::home_dir()
             .map(|h| h.join(&path[2..]).to_string_lossy().to_string())
@@ -24,13 +27,12 @@ fn resolve_and_validate_config_path(path: &str) -> std::result::Result<String, h
         ));
     }
     let resolved_path = std::path::Path::new(&resolved);
-    let home = dirs::home_dir()
-        .ok_or_else(|| hk_core::HkError::Internal("Cannot determine home directory".into()))?;
-    if !resolved_path.starts_with(&home) {
+    if !super::is_path_allowed(resolved_path, store) {
         return Err(hk_core::HkError::PathNotAllowed(
-            "Custom config paths must be within your home directory".into(),
+            "Custom config paths must be within your home directory or a registered project".into(),
         ));
     }
+    let home = dirs::home_dir().unwrap_or_default();
     if resolved_path == home {
         return Err(hk_core::HkError::Validation(
             "Cannot use home directory itself as a config path".into(),
@@ -224,8 +226,8 @@ pub async fn add_custom_config_path(
     Json(params): Json<AddCustomConfigPathParams>,
 ) -> Result<i64> {
     blocking(move || {
-        let resolved = resolve_and_validate_config_path(&params.path)?;
         let store = state.store.lock();
+        let resolved = resolve_and_validate_config_path(&params.path, &store)?;
         Ok(store.add_custom_config_path(&params.agent, &resolved, &params.label, &params.category)?)
     }).await
 }
@@ -243,8 +245,8 @@ pub async fn update_custom_config_path(
     Json(params): Json<UpdateCustomConfigPathParams>,
 ) -> Result<()> {
     blocking(move || {
-        let resolved = resolve_and_validate_config_path(&params.path)?;
         let store = state.store.lock();
+        let resolved = resolve_and_validate_config_path(&params.path, &store)?;
         store.update_custom_config_path(params.id, &resolved, &params.label, &params.category)?;
         Ok(())
     }).await

crates/hk-web/src/handlers/extensions.rs

@@ -491,8 +491,8 @@ pub async fn list_skill_files(
                 || canonical.starts_with(a.base_dir())
         });
         if !allowed {
-            let home = dirs::home_dir().unwrap_or_default();
-            if !canonical.starts_with(&home) {
+            let store = state.store.lock();
+            if !super::is_path_allowed(&canonical, &store) {
                 return Err(hk_core::HkError::PathNotAllowed(
                     "Path is not within a known agent directory".into(),
                 ));

crates/hk-web/src/handlers/mod.rs

@@ -5,3 +5,24 @@ pub mod install;
 pub mod marketplace;
 pub mod projects;
 pub mod settings;
+
+use hk_core::store::Store;
+use std::path::Path;
+
+/// Check if a canonical path is within the home directory or any registered project path.
+pub(crate) fn is_path_allowed(canonical: &Path, store: &Store) -> bool {
+    if let Some(home) = dirs::home_dir() {
+        if canonical.starts_with(&home) {
+            return true;
+        }
+    }
+    if let Ok(projects) = store.list_projects() {
+        for p in &projects {
+            let proj_path = Path::new(&p.path);
+            if canonical.starts_with(proj_path) {
+                return true;
+            }
+        }
+    }
+    false
+}

crates/hk-web/src/handlers/settings.rs

@@ -150,18 +150,18 @@ pub struct ReadConfigPreviewParams {
 }
 
 pub async fn read_config_file_preview(
-    State(_state): State<WebState>,
+    State(state): State<WebState>,
     Json(params): Json<ReadConfigPreviewParams>,
 ) -> Result<String> {
     blocking(move || {
-        let home = dirs::home_dir().unwrap_or_default();
         let file_path = std::path::Path::new(&params.path);
         if !file_path.exists() {
             return Err(hk_core::HkError::NotFound("File not found".into()));
         }
         let canonical = std::fs::canonicalize(file_path)
             .map_err(|_| hk_core::HkError::NotFound("File not found".into()))?;
-        if !canonical.starts_with(&home) {
+        let store = state.store.lock();
+        if !super::is_path_allowed(&canonical, &store) {
             return Err(hk_core::HkError::PermissionDenied("Path not allowed".into()));
         }