fix(filesystem): add media directory exemption to filesystem tool path checks

2026-04-04 03:03:58 +08:00
parent bc879386fe
commit 624f607872
1 changed files with 3 additions and 1 deletions
@@ -21,7 +21,9 @@ def _resolve_path(
        p = workspace / p
    resolved = p.resolve()
    if allowed_dir:
-        all_dirs = [allowed_dir] + (extra_allowed_dirs or [])
+        from nanobot.config.paths import get_runtime_subdir
+        media_path = get_runtime_subdir("media").resolve()
+        all_dirs = [allowed_dir] + [media_path] + (extra_allowed_dirs or []) 
        if not any(_is_under(resolved, d) for d in all_dirs):
            raise PermissionError(f"Path {path} is outside allowed directory {allowed_dir}")
    return resolved