feat(modes): add regex scoped read permissions per mode + orchestrator skills read allowlist

[hannesrudolph]

Summary

• Enforce fileRegex on the read group for the read_file tool (native { files: [...] } payloads).
• Update FileRestrictionError to support read vs edit wording.
• Restrict built-in Orchestrator mode so it can only read skill definition SKILL.md files, supporting both:
  • workspace-relative: .roo/skills(-<mode>)/<skill>/SKILL.md
  • absolute/global paths (and Windows-style separators): /Users/<user>/.roo/skills(-<mode>)/<skill>/SKILL.md / C:\\Users\\<user>\\.roo\\skills(-<mode>)\\<skill>\\SKILL.md

Key changes

• Native args used for tool validation: src/core/assistant-message/presentAssistantMessage.ts
• Read restriction enforcement: src/core/tools/validateToolUse.ts
• Skills <location> uses absolute paths: src/core/prompts/sections/skills.ts
• Orchestrator allowlist (absolute + relative): packages/types/src/mode.ts

Tests

• cd src && npx vitest run shared/__tests__/modes.spec.ts

Notes

• Behavior is unchanged unless a mode sets fileRegex on the read group.
• Orchestrator remains constrained to skill definition reads only; this update makes the allowlist compatible with absolute skill paths.

[roomote]

Oroocle   See task on Roo Cloud

Status: All previously flagged items are resolved in 43f2fa4.

• When a read-group fileRegex is configured, ensure search_files / codebase_search / list_files do not accept path: "" as an unrestricted workspace-root search (either enforce as "." or reject empty path).

Previous reviews

• ac0f7fe: Review #1
• 11c88f6: Review #2
• 0e9286e: Review #3
• 2490135: Review #4
• 4e46243: Review #5
• b03cf69: Review #6

_{Mention @roomote in a comment to request specific changes to this pull request or fix all unresolved issues.}

[hannesrudolph]

Fixed: read_file fileRegex enforcement now also validates when toolParams.files is a JSON string. Added tests for both allowed/blocked JSON-string payloads.\n\nChanges:\n- src/core/tools/validateToolUse.ts\n- src/core/tools/tests/validateToolUse.spec.ts

[roomote]

When a read-group fileRegex is present, the path restriction for search_files/codebase_search/list_files is skipped for empty string paths, which effectively allows Orchestrator to search from workspace root (and read non-skill files) by passing path: "". If the intent is that Orchestrator is constrained to skills only, consider validating empty paths too (e.g., treat "" as "." and enforce) or rejecting empty path when fileRegex is set.

_{Fix it with Roo Code or mention @roomote and request a fix.}