refactor: 清理未使用代码并添加未来功能标记

style: 统一代码格式和注释风格

docs: 更新多个功能文档的完整度和状态

feat(runtime): 添加路径验证工具支持

fix(pipeline): 改进条件判断和变量解析逻辑

test(types): 为ID类型添加全面测试用例

chore: 更新依赖项和Cargo.lock文件

perf(mcp): 优化MCP协议传输和错误处理

crates/zclaw-runtime/src/loop_runner.rs

@@ -8,6 +8,7 @@ use zclaw_types::{AgentId, SessionId, Message, Result};
 use crate::driver::{LlmDriver, CompletionRequest, ContentBlock};
 use crate::stream::StreamChunk;
 use crate::tool::{ToolRegistry, ToolContext, SkillExecutor};
+use crate::tool::builtin::PathValidator;
 use crate::loop_guard::LoopGuard;
 use zclaw_memory::MemoryStore;
 
@@ -17,12 +18,14 @@ pub struct AgentLoop {
     driver: Arc<dyn LlmDriver>,
     tools: ToolRegistry,
     memory: Arc<MemoryStore>,
+    #[allow(dead_code)] // Reserved for future rate limiting
     loop_guard: LoopGuard,
     model: String,
     system_prompt: Option<String>,
     max_tokens: u32,
     temperature: f32,
     skill_executor: Option<Arc<dyn SkillExecutor>>,
+    path_validator: Option<PathValidator>,
 }
 
 impl AgentLoop {
@@ -43,6 +46,7 @@ impl AgentLoop {
             max_tokens: 4096,
             temperature: 0.7,
             skill_executor: None,
+            path_validator: None,
         }
     }
 
@@ -52,6 +56,12 @@ impl AgentLoop {
         self
     }
 
+    /// Set the path validator for file system operations
+    pub fn with_path_validator(mut self, validator: PathValidator) -> Self {
+        self.path_validator = Some(validator);
+        self
+    }
+
     /// Set the model to use
     pub fn with_model(mut self, model: impl Into<String>) -> Self {
         self.model = model.into();
@@ -83,6 +93,7 @@ impl AgentLoop {
             working_directory: None,
             session_id: Some(session_id.to_string()),
             skill_executor: self.skill_executor.clone(),
+            path_validator: self.path_validator.clone(),
         }
     }
 
@@ -218,6 +229,7 @@ impl AgentLoop {
         let driver = self.driver.clone();
         let tools = self.tools.clone();
         let skill_executor = self.skill_executor.clone();
+        let path_validator = self.path_validator.clone();
         let agent_id = self.agent_id.clone();
         let system_prompt = self.system_prompt.clone();
         let model = self.model.clone();
@@ -346,6 +358,7 @@ impl AgentLoop {
                         working_directory: None,
                         session_id: Some(session_id_clone.to_string()),
                         skill_executor: skill_executor.clone(),
+                        path_validator: path_validator.clone(),
                     };
 
                     let (result, is_error) = if let Some(tool) = tools.get(&name) {