Remote sandbox file tools refuse read-only folders and absolute glob patterns

Claude Code's file tools, as used in a remote sandbox (an isolated environment where commands run), behave more strictly:

• write and edit: refuse any path inside a read-only folder, saying it "is inside read-only directory".
• read: accepts view_range for files over the size limit, instead of only telling you to use Bash to read a slice.
• glob: always rejects absolute patterns and asks for a relative one, even where they were allowed before, and caps how many files it scans.