Capability

FileSystem

Bug Description

list_directory, search_files and find_files use protected_patterns to filter out matching paths:

This seems unintended, given that these operations are all read-only and the documentation for protected_patterns states: "Matching paths are read-only -- reads succeed, writes are rejected."

If this behavior is indeed incorrect, I can open a patch addressing it.

Minimal Reproduction

from pydantic_ai_harness import FileSystem
import asyncio
print(
    asyncio.run(FileSystem(protected_patterns=["*"]).get_toolset().list_directory())
)
# prints '(empty directory)'

pydantic-ai-harness version

0.4.0

pydantic-ai version

2.4.0