openclaw - 💡(How to fix) Fix Sandboxed agents cannot reliably consume downloaded files because host workspace paths are returned instead of /workspace paths [1 participants]

• Sandbox FS error (ENOENT)

TL;DR

The issue can be resolved by ensuring that the paths returned by the sandboxed agent are directly usable by later sandboxed tool calls, potentially by normalizing all tool file outputs to the current agent workspace view.

Guidance

• Verify that the issue is indeed caused by the inconsistency between host paths and sandbox paths by checking the file paths returned by the sandboxed agent and the paths expected by the subsequent tool calls.
• Consider modifying the sandboxed agent to return sandbox-visible paths, such as /workspace/..., instead of host paths.
• Investigate the possibility of including both host path and sandbox path in the output, to allow for flexibility in handling file paths.
• Review the error messages, such as Path escapes sandbox root and Sandbox FS error (ENOENT), to understand the specific points of failure and adjust the path handling accordingly.

Example

No specific code snippet can be provided without more context, but an example of normalizing paths to the current agent workspace view might involve using a function to translate host paths to sandbox paths.

Notes

The solution may require changes to the sandboxed agent's file handling logic, and careful consideration of the security implications of allowing sandboxed tool calls to access files outside the sandbox root.

Recommendation

Apply a workaround to normalize all tool file outputs for sandboxed agents into the current agent workspace view, as this approach seems to address the root cause of the issue and provides a consistent solution across different agents.