fix(sandbox): reuse bind parser for allowedPaths in pi-tools

Rain · Rain · commit f35b9095f4c6 · 2026-02-16T18:04:00.000+08:00
diff --git a/src/agents/pi-tools.ts b/src/agents/pi-tools.ts
@@ -9,6 +9,7 @@ import type { OpenClawConfig } from "../config/config.js";
 import type { ModelAuthMode } from "./model-auth.js";
 import type { AnyAgentTool } from "./pi-tools.types.js";
 import type { SandboxContext } from "./sandbox.js";
+import { parseBindMountHostPaths } from "./sandbox/fs-bridge.js";
 import { logWarn } from "../logger.js";
 import { getPluginToolMeta } from "../plugins/tools.js";
 import { isSubagentSessionKey } from "../routing/session-key.js";
@@ -238,9 +239,7 @@ export function createOpenClawCodingTools(options?: {
   const execConfig = resolveExecConfig({ cfg: options?.config, agentId });
   const sandboxRoot = sandbox?.workspaceDir;
   const sandboxFsBridge = sandbox?.fsBridge;
-  const sandboxAllowedPaths = sandbox?.docker.binds
-    ?.map((b) => b.split(":")[0])
-    .filter(Boolean);
+  const sandboxAllowedPaths = parseBindMountHostPaths(sandbox?.docker.binds);
   const allowWorkspaceWrites = sandbox?.workspaceAccess !== "ro";
   const workspaceRoot = options?.workspaceDir ?? process.cwd();
   const applyPatchConfig = options?.config?.tools?.exec?.applyPatch;
