refactor: unify tools.fs workspaceOnly resolution

src/agents/tool-fs-policy.ts

@@ -1,3 +1,6 @@
+import type { OpenClawConfig } from "../config/config.js";
+import { resolveAgentConfig } from "./agent-scope.js";
+
 export type ToolFsPolicy = {
   workspaceOnly: boolean;
 };
@@ -7,3 +10,22 @@ export function createToolFsPolicy(params: { workspaceOnly?: boolean }): ToolFsP
     workspaceOnly: params.workspaceOnly === true,
   };
 }
+
+export function resolveToolFsConfig(params: { cfg?: OpenClawConfig; agentId?: string }): {
+  workspaceOnly?: boolean;
+} {
+  const cfg = params.cfg;
+  const globalFs = cfg?.tools?.fs;
+  const agentFs =
+    cfg && params.agentId ? resolveAgentConfig(cfg, params.agentId)?.tools?.fs : undefined;
+  return {
+    workspaceOnly: agentFs?.workspaceOnly ?? globalFs?.workspaceOnly,
+  };
+}
+
+export function resolveEffectiveToolFsWorkspaceOnly(params: {
+  cfg?: OpenClawConfig;
+  agentId?: string;
+}): boolean {
+  return resolveToolFsConfig(params).workspaceOnly === true;
+}