main.rs still called read_to_string, leaving read_system_file dead. Binary-level
tests cover a FIFO, /dev/zero, 64KiB+1 and exactly 64KiB.
Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
Key file: nonblocking open, regular file only, 1024-byte bound, refuse
group/world-readable. --system-file capped at 64 KiB. Tests drive a forced
tools request through the real serve loop and the real claude backend.
Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
Prompt on stdin, answer on stdout; no tools, cwd or endpoint options, key read
from a file, one-line stderr cause on every failure.
Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>