peter/devclaw-gitea
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

feat: add tool restrictions to DevClaw agents in plugin config

Browse Source
This commit is contained in:
Lauren ten Hoor
2026-02-09 23:05:48 +08:00
parent 9bc0513198
commit 4ca35cf57c
1 changed files with 12 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

12
lib/setup.ts
View File

@@ -277,6 +277,7 @@ async function resolveWorkspacePath(agentId: string): Promise<string> {
/** /**
* Write DevClaw model tier config and devClawAgentIds to openclaw.json plugins section. * Write DevClaw model tier config and devClawAgentIds to openclaw.json plugins section.
* Also adds tool restrictions (deny sessions_spawn) to DevClaw agents.
* Read-modify-write to preserve existing config. * Read-modify-write to preserve existing config.
*/ */
async function writePluginConfig( async function writePluginConfig(
@@ -307,6 +308,17 @@ async function writePluginConfig(
if (!existing.includes(agentId)) { if (!existing.includes(agentId)) {
config.plugins.entries.devclaw.config.devClawAgentIds = [...existing, agentId]; config.plugins.entries.devclaw.config.devClawAgentIds = [...existing, agentId];
} }
// Add tool restrictions (deny sessions_spawn) to the agent
const agent = config.agents?.list?.find((a: { id: string }) => a.id === agentId);
if (agent) {
if (!agent.tools) {
agent.tools = {};
}
agent.tools.deny = ["sessions_spawn"];
// Clear any conflicting allow list
delete agent.tools.allow;
}
} }
// Atomic write // Atomic write