@clawos-dev/clawd 0.2.261 → 0.2.262
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/cli.cjs +2 -2
- package/package.json +1 -1
package/dist/cli.cjs
CHANGED
|
@@ -41712,7 +41712,7 @@ function buildGuestSettingsV1() {
|
|
|
41712
41712
|
denyWrite: [],
|
|
41713
41713
|
// **不放 '~/'**（写是白名单制，home 自动不可写）；persona(cwd) 由 compose 强制 deny
|
|
41714
41714
|
allowRead: [],
|
|
41715
|
-
//
|
|
41715
|
+
// userWorkDir + persona cwd 由 compose 强制注入，profile 加工具链精确路径
|
|
41716
41716
|
allowWrite: []
|
|
41717
41717
|
}
|
|
41718
41718
|
}
|
|
@@ -41750,7 +41750,7 @@ function composeGuestSandbox(base, userWorkDir, spawnCwd) {
|
|
|
41750
41750
|
s.sandbox.allowUnsandboxedCommands = false;
|
|
41751
41751
|
fsv.denyRead = unionArr(fsv.denyRead, FORCED_DENY_READ);
|
|
41752
41752
|
fsv.denyWrite = unionArr((fsv.denyWrite ?? []).filter((p2) => p2 !== "~/"), [spawnCwd]);
|
|
41753
|
-
fsv.allowRead = unionArr(fsv.allowRead, [userWorkDir]);
|
|
41753
|
+
fsv.allowRead = unionArr(fsv.allowRead, [userWorkDir, spawnCwd]);
|
|
41754
41754
|
fsv.allowWrite = unionArr(fsv.allowWrite, [userWorkDir]);
|
|
41755
41755
|
return s;
|
|
41756
41756
|
}
|