fix(file-transfer): name file-transfer tool in invoke redirect

clawsweeper-repair · clawsweeper-repair · commit 3d9ff00b520d · 2026-04-30T03:25:06.000Z
diff --git a/src/agents/tools/nodes-tool-commands.ts b/src/agents/tools/nodes-tool-commands.ts
@@ -132,7 +132,7 @@ export async function executeNodeCommandAction(params: {
       // file-transfer.
       if (dedicatedAction && POLICY_REDIRECT_INVOKE_COMMANDS.has(invokeCommandNormalized)) {
         throw new Error(
-          `invokeCommand "${invokeCommand}" enforces a path-allowlist policy and cannot be invoked via the generic nodes.invoke surface; use action="${dedicatedAction}"`,
+          `invokeCommand "${invokeCommand}" enforces a path-allowlist policy and cannot be invoked via the generic nodes.invoke surface; use the dedicated file-transfer tool "${dedicatedAction}"`,
         );
       }
       if (dedicatedAction && !params.allowMediaInvokeCommands) {
diff --git a/src/agents/tools/nodes-tool.test.ts b/src/agents/tools/nodes-tool.test.ts
@@ -321,6 +321,20 @@ describe("createNodesTool screen_record duration guardrails", () => {
     ).rejects.toThrow('invokeCommand "system.run" is reserved for shell execution');
   });
 
+  it("redirects file-transfer invoke commands to the dedicated file-transfer tool", async () => {
+    const tool = createNodesTool({ allowMediaInvokeCommands: true });
+
+    await expect(
+      tool.execute("call-1", {
+        action: "invoke",
+        node: "macbook",
+        invokeCommand: "file.fetch",
+      }),
+    ).rejects.toThrow(
+      'invokeCommand "file.fetch" enforces a path-allowlist policy and cannot be invoked via the generic nodes.invoke surface; use the dedicated file-transfer tool "file_fetch"',
+    );
+  });
+
   it("keeps invoke pairing guidance for scope upgrade rejections", async () => {
     gatewayMocks.callGatewayTool.mockRejectedValueOnce(
       new Error("scope upgrade pending approval (requestId: req-123)"),

Original file line number	Diff line number	Diff line change
`@@ -132,7 +132,7 @@ export async function executeNodeCommandAction(params: {`
`132`	`132`	`// file-transfer.`
`133`	`133`	`if (dedicatedAction && POLICY_REDIRECT_INVOKE_COMMANDS.has(invokeCommandNormalized)) {`
`134`	`134`	`throw new Error(`
`135`		- `invokeCommand "${invokeCommand}" enforces a path-allowlist policy and cannot be invoked via the generic nodes.invoke surface; use action="${dedicatedAction}"`,
	`135`	+ `invokeCommand "${invokeCommand}" enforces a path-allowlist policy and cannot be invoked via the generic nodes.invoke surface; use the dedicated file-transfer tool "${dedicatedAction}"`,
`136`	`136`	`);`
`137`	`137`	`}`
`138`	`138`	`if (dedicatedAction && !params.allowMediaInvokeCommands) {`