Migrate ordinary I/O from confined file helpers

internal/config/party_resolution.go

@@ -24,7 +24,7 @@ func resolvePartyInput(input ResolvedInputFile) (ResolvedParty, error) {
 		path = filepath.Join(filepath.Dir(configPath), path)
 	}
 	path = filepath.Clean(path)
-	raw, err := fileops.ReadRegularFile(path, maxPartyDocumentBytes)
+	raw, err := fileops.ReadFileBounded(path, maxPartyDocumentBytes)
 	if err != nil {
 		return ResolvedParty{}, fmt.Errorf("read party input %q: %w", path, err)
 	}

internal/config/pipeline_composition.go

@@ -7,7 +7,6 @@ import (
 	"strings"
 	"unicode"
 
-	"gitea.maximumdirect.net/eric/narratio/internal/fileops"
 	"gitea.maximumdirect.net/eric/narratio/internal/pathsafe"
 	"gopkg.in/yaml.v3"
 )
@@ -386,7 +385,7 @@ func loadPipelineProfileOverlays(
 		}
 		seenPaths[normalized] = profile.name
 		resolved := filepath.Join(rootDir, filepath.FromSlash(normalized))
-		file, err := fileops.OpenConfinedRegularFile(rootDir, normalized)
+		file, err := os.Open(resolved)
 		if err != nil {
 			return nil, fmt.Errorf("open %s path %q beneath root pipeline directory: %w", label, raw, err)
 		}
@@ -473,7 +472,7 @@ func loadPipelineImports(rootPath string, declared []string) ([]loadedPipelineIm
 			return nil, fmt.Errorf("composition.imports[%d] path %q imports the root pipeline itself", index, raw)
 		}
 
-		file, err := fileops.OpenConfinedRegularFile(rootDir, normalized)
+		file, err := os.Open(resolved)
 		if err != nil {
 			return nil, fmt.Errorf("open composition.imports[%d] path %q beneath root pipeline directory: %w", index, raw, err)
 		}

internal/config/pipeline_composition_test.go

@@ -181,19 +181,7 @@ func TestLoadPipelineCompositionRejectsUnsafeOrInvalidImports(t *testing.T) {
 			if err := os.Mkdir(filepath.Join(dir, "directory.yml"), 0o755); err != nil {
 				t.Fatal(err)
 			}
-		}, want: "regular file"},
-		{name: "symlink file", imports: []string{"link.yml"}, setup: func(t *testing.T, dir string) {
-			writePipelineSource(t, dir, "target.yml", "workspace:\n  root: /work\n")
-			if err := os.Symlink("target.yml", filepath.Join(dir, "link.yml")); err != nil {
-				t.Skipf("symlink unavailable: %v", err)
-			}
-		}, want: "not a regular file"},
-		{name: "symlink directory", imports: []string{"linked/one.yml"}, setup: func(t *testing.T, dir string) {
-			writePipelineSource(t, dir, "actual/one.yml", "workspace:\n  root: /work\n")
-			if err := os.Symlink("actual", filepath.Join(dir, "linked")); err != nil {
-				t.Skipf("symlink unavailable: %v", err)
-			}
-		}, want: "not a regular directory"},
+		}, want: "is a directory"},
 	}
 	for _, tt := range tests {
 		t.Run(tt.name, func(t *testing.T) {

internal/config/pipeline_profiles_test.go

@@ -148,7 +148,7 @@ func TestLoadPipelineProfilesValidateEveryDeclaredOverlay(t *testing.T) {
 			if err := os.MkdirAll(filepath.Join(dir, "profiles/testing.yml"), 0o755); err != nil {
 				t.Fatal(err)
 			}
-		}, want: "regular file"},
+		}, want: "is a directory"},
 	} {
 		t.Run(test.name, func(t *testing.T) {
 			dir := t.TempDir()