diff --git a/.openclaw-sync/source.json b/.openclaw-sync/source.json
index b3d0741ee..4fc984d88 100644
--- a/.openclaw-sync/source.json
+++ b/.openclaw-sync/source.json
@@ -1,5 +1,5 @@
 {
   "repository": "openclaw/openclaw",
-  "sha": "9a0b43c47e30d33a97b530140d487f52c2696ff2",
-  "syncedAt": "2026-04-29T16:26:14.782Z"
+  "sha": "df0074768c97326b582b3431655e047dd65fe9e5",
+  "syncedAt": "2026-04-29T16:26:47.005Z"
 }
diff --git a/docs/tools/exec.md b/docs/tools/exec.md
index d8fcafcd1..6d449f697 100644
--- a/docs/tools/exec.md
+++ b/docs/tools/exec.md
@@ -63,6 +63,7 @@ Request elevated mode — escape the sandbox onto the configured host path. `sec
 Notes:
 
 - `host` defaults to `auto`: sandbox when sandbox runtime is active for the session, otherwise gateway.
+- `host` only accepts `auto`, `sandbox`, `gateway`, or `node`. It is not a hostname selector; hostname-like values are rejected before the command runs.
 - `auto` is the default routing strategy, not a wildcard. Per-call `host=node` is allowed from `auto`; per-call `host=gateway` is only allowed when no sandbox runtime is active.
 - With no extra config, `host=auto` still "just works": no sandbox means it resolves to `gateway`; a live sandbox means it stays in the sandbox.
 - `elevated` escapes the sandbox onto the configured host path: `gateway` by default, or `node` when `tools.exec.host=node` (or the session default is `host=node`). It is only available when elevated access is enabled for the current session/provider.