justinhuangcode 14baadda2c fix(tools): honor fsPolicy.workspaceOnly in image/pdf tool localRoots ...

PR #28822 fixed the Write/Edit tools to respect `tools.fs.workspaceOnly`,
but the image and PDF tools still unconditionally include default local
roots (`~/.openclaw/media`, `~/.openclaw/agents`, etc.) when computing
the `localRoots` allowlist for non-sandbox mode.

When `fsPolicy.workspaceOnly` is true, restrict `localRoots` to only the
workspace directory so that files outside the workspace are rejected by
`assertLocalMediaAllowed()`.

Relates to #31716

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

2026-03-02 19:24:33 +00:00

..

agent-step.test.ts

…

agent-step.ts

…

agents-list-tool.ts

feat: ACP thread-bound agents (#23580)

2026-02-26 11:00:09 +01:00

browser-tool.actions.ts

refactor: split browser context/actions and unify CDP timeout policy

2026-03-02 16:02:39 +00:00

browser-tool.schema.ts

fix(browser): accept legacy flattened act params (#31359)

2026-03-01 23:21:07 -08:00

browser-tool.test.ts

fix(browser): retry chrome act when target tab is stale

2026-03-02 13:49:33 +00:00

browser-tool.ts

refactor: split browser context/actions and unify CDP timeout policy

2026-03-02 16:02:39 +00:00

canvas-tool.ts

…

common.params.test.ts

…

common.test.ts

…

common.ts

…

cron-tool.flat-params.test.ts

…

cron-tool.test.ts

fix(cron): recover flat patch params for update action and fix schema (openclaw#23221) thanks @charojo

2026-03-01 19:50:51 -06:00

cron-tool.ts

fix(cron): recover flat patch params for update action and fix schema (openclaw#23221) thanks @charojo

2026-03-01 19:50:51 -06:00

discord-actions-guild.ts

…

discord-actions-messaging.ts

fix(discord): support applied_tags parameter for forum thread creation

2026-03-02 02:05:11 +00:00

discord-actions-moderation-shared.ts

…

discord-actions-moderation.authz.test.ts

…

discord-actions-moderation.ts

…

discord-actions-presence.test.ts

…

discord-actions-presence.ts

…

discord-actions.test.ts

…

discord-actions.ts

…

gateway-tool.ts

…

gateway.test.ts

…

gateway.ts

…

image-tool.helpers.ts

…

image-tool.test.ts

fix(tools): honor fsPolicy.workspaceOnly in image/pdf tool localRoots

2026-03-02 19:24:33 +00:00

image-tool.ts

fix(tools): honor fsPolicy.workspaceOnly in image/pdf tool localRoots

2026-03-02 19:24:33 +00:00

memory-tool.citations.test.ts

…

memory-tool.test.ts

…

memory-tool.ts

…

message-tool.test.ts

test(agents): dedupe agent and cron test scaffolds

2026-03-02 07:13:10 +00:00

message-tool.ts

fix(discord): support applied_tags parameter for forum thread creation

2026-03-02 02:05:11 +00:00

model-config.helpers.ts

refactor(agents): extract shared tool model helpers

2026-03-02 07:13:11 +00:00

nodes-tool.test.ts

fix(telegram): scope DM topic thread keys by chat id (#31064)

2026-03-02 02:54:45 +00:00

nodes-tool.ts

fix(nodes): cap screen_record duration to 5 minutes (land #31106 by @BlueBirdBack)

2026-03-02 01:53:20 +00:00

nodes-utils.test.ts

test: fix TS2783 in nodes-utils helper

2026-02-26 21:26:54 +00:00

nodes-utils.ts

refactor(nodes): share default selection and tighten node.list fallback

2026-02-26 22:18:57 +01:00

pdf-native-providers.ts

feat: add PDF analysis tool with native provider support (#31319)

2026-03-01 22:39:12 -08:00

pdf-tool.helpers.ts

feat: add PDF analysis tool with native provider support (#31319)

2026-03-01 22:39:12 -08:00

pdf-tool.test.ts

fix(tools): honor fsPolicy.workspaceOnly in image/pdf tool localRoots

2026-03-02 19:24:33 +00:00

pdf-tool.ts

fix(tools): honor fsPolicy.workspaceOnly in image/pdf tool localRoots

2026-03-02 19:24:33 +00:00

session-status-tool.ts

…

sessions-access.test.ts

…

sessions-access.ts

…

sessions-announce-target.ts

…

sessions-helpers.ts

…

sessions-history-tool.ts

refactor(core): share JSON utf8 byte counting helper

2026-03-02 05:20:19 +00:00

sessions-list-tool.ts

fix(sessions): set transcriptPath to agent sessions directory (openclaw#24775) thanks @martinfrancois

2026-03-01 09:41:06 -06:00

sessions-resolution.test.ts

[AI-assisted] test: fix typing and test fixture issues (#31444)

2026-03-02 00:41:21 -08:00

sessions-resolution.ts

…

sessions-send-helpers.ts

…

sessions-send-tool.a2a.ts

…

sessions-send-tool.ts

…

sessions-spawn-tool.test.ts

sessions_spawn: inline attachments with redaction, lifecycle cleanup, and docs (#16761)

2026-03-01 21:33:51 -08:00

sessions-spawn-tool.ts

sessions_spawn: inline attachments with redaction, lifecycle cleanup, and docs (#16761)

2026-03-01 21:33:51 -08:00

sessions.test.ts

test(agents): dedupe agent and cron test scaffolds

2026-03-02 07:13:10 +00:00

slack-actions.test.ts

fix(slack): scope download-file to channel and thread context

2026-03-02 02:23:22 +00:00

slack-actions.ts

fix(slack): scope download-file to channel and thread context

2026-03-02 02:23:22 +00:00

subagents-tool.ts

fix: agent-only announce path, BB message IDs, sender identity, SSRF allowlist (#23970)

2026-03-01 22:52:11 -08:00

telegram-actions.test.ts

…

telegram-actions.ts

…

tool-runtime.helpers.ts

refactor(agents): extract shared tool model helpers

2026-03-02 07:13:11 +00:00

tts-tool.test.ts

…

tts-tool.ts

…

web-fetch-utils.ts

…

web-fetch-visibility.test.ts

…

web-fetch-visibility.ts

…

web-fetch.cf-markdown.test.ts

…

web-fetch.ssrf.test.ts

…

web-fetch.test-harness.ts

…

web-fetch.test-mocks.ts

…

web-fetch.ts

refactor(web): unify proxy-guarded fetch path for web tools

2026-02-26 12:44:18 +01:00

web-guarded-fetch.test.ts

refactor(net): unify proxy env checks and guarded fetch modes

2026-03-02 16:24:26 +00:00

web-guarded-fetch.ts

refactor(net): unify proxy env checks and guarded fetch modes

2026-03-02 16:24:26 +00:00

web-search-citation-redirect.ts

refactor(web): split trusted and strict web tool fetch paths

2026-03-02 01:14:06 +00:00

web-search.redirect.test.ts

fix: preserve dns pinning for strict web SSRF fetches

2026-03-02 15:54:46 +00:00

web-search.test.ts

…

web-search.ts

refactor(web): split trusted and strict web tool fetch paths

2026-03-02 01:14:06 +00:00

web-shared.ts

…

web-tools.enabled-defaults.test.ts

refactor(web): unify proxy-guarded fetch path for web tools

2026-02-26 12:44:18 +01:00

web-tools.fetch.test.ts

fix: preserve dns pinning for strict web SSRF fetches

2026-03-02 15:54:46 +00:00

web-tools.readability.test.ts

…

web-tools.ts

…

whatsapp-actions.test.ts

…

whatsapp-actions.ts

…

whatsapp-target-auth.ts

…