Security: restrict canvas jsonlPath file reads

This commit is contained in:
Shadow
2026-02-20 13:20:40 -06:00
parent 0692927ccd
commit 39816e61b0
3 changed files with 96 additions and 4 deletions

View File

@@ -107,7 +107,10 @@ export function createOpenClawTools(options?: {
sandboxBridgeUrl: options?.sandboxBrowserBridgeUrl,
allowHostControl: options?.allowHostBrowserControl,
}),
createCanvasTool({ config: options?.config }),
createCanvasTool({
config: options?.config,
agentSessionKey: options?.agentSessionKey,
}),
createNodesTool({
agentSessionKey: options?.agentSessionKey,
config: options?.config,