fix(security): enforce workspaceOnly for sandbox image tool

2026-05-08 19:18:26 +00:00 · 2026-02-24 02:17:06 +00:00
parent 0026255def
commit dd9d9c1c60
5 changed files with 129 additions and 2 deletions
--- a/src/agents/pi-tools.ts
+++ b/src/agents/pi-tools.ts
@@ -458,6 +458,7 @@ export function createOpenClawCodingTools(options?: {
      agentDir: options?.agentDir,
      sandboxRoot,
      sandboxFsBridge,
+      workspaceOnly,
      workspaceDir: workspaceRoot,
      sandboxed: !!sandbox,
      config: options?.config,