opencode/picoclaw
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

fix(k3s): move allowed paths to tools section and fix subagent workspace persistence

Browse source
This commit is contained in:
stevef 2026-04-21 06:23:23 +02:00
parent 22ffb831e7
commit f1dc078110
2 changed files with 9 additions and 11 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

18
k3s/configmap.yaml
View file

@ -14,14 +14,6 @@ data:
"defaults": { "defaults": {
"workspace": "/home/picoclaw/.picoclaw", "workspace": "/home/picoclaw/.picoclaw",
"restrict_to_workspace": true, "restrict_to_workspace": true,
"allow_read_paths": [
"/home/picoclaw/.picoclaw",
"/tmp"
],
"allow_write_paths": [
"/home/picoclaw/.picoclaw",
"/tmp"
],
"provider": "nvidia", "provider": "nvidia",
"model_name": "nemotron-120b", "model_name": "nemotron-120b",
"model_fallbacks": [ "model_fallbacks": [
@ -729,8 +721,14 @@ data:
} }
}, },
"tools": { "tools": {
"allow_read_paths": null, "allow_read_paths": [
"allow_write_paths": null, "/home/picoclaw/.picoclaw",
"/tmp"
],
"allow_write_paths": [
"/home/picoclaw/.picoclaw",
"/tmp"
],
"deny_read_paths": [ "deny_read_paths": [
"^skills(/.*)?$" "^skills(/.*)?$"
], ],

2
pkg/agent/instance.go
View file

@ -307,7 +307,7 @@ func resolveAgentWorkspace(agentCfg *config.AgentConfig, defaults *config.AgentD
} }
// For named agents without explicit workspace, use default workspace with agent ID suffix // For named agents without explicit workspace, use default workspace with agent ID suffix
id := routing.NormalizeAgentID(agentCfg.ID) id := routing.NormalizeAgentID(agentCfg.ID)
return filepath.Join(expandHome(defaults.Workspace), "..", "workspace-"+id) return filepath.Join(expandHome(defaults.Workspace), "workspaces", id)
} }
// resolveAgentModel resolves the primary model for an agent. // resolveAgentModel resolves the primary model for an agent.