From 1ba6cd5c1e136df1aacbb52dcbb2c924b0d6d7e9 Mon Sep 17 00:00:00 2001 From: "openclaw-docs-sync[bot]" Date: Wed, 29 Apr 2026 16:28:04 +0000 Subject: [PATCH] chore(sync): mirror docs from openclaw/openclaw@df0074768c97326b582b3431655e047dd65fe9e5 --- .openclaw-sync/source.json | 4 ++-- docs/tools/exec.md | 1 + 2 files changed, 3 insertions(+), 2 deletions(-) diff --git a/.openclaw-sync/source.json b/.openclaw-sync/source.json index b3d0741ee..4fc984d88 100644 --- a/.openclaw-sync/source.json +++ b/.openclaw-sync/source.json @@ -1,5 +1,5 @@ { "repository": "openclaw/openclaw", - "sha": "9a0b43c47e30d33a97b530140d487f52c2696ff2", - "syncedAt": "2026-04-29T16:26:14.782Z" + "sha": "df0074768c97326b582b3431655e047dd65fe9e5", + "syncedAt": "2026-04-29T16:26:47.005Z" } diff --git a/docs/tools/exec.md b/docs/tools/exec.md index d8fcafcd1..6d449f697 100644 --- a/docs/tools/exec.md +++ b/docs/tools/exec.md @@ -63,6 +63,7 @@ Request elevated mode — escape the sandbox onto the configured host path. `sec Notes: - `host` defaults to `auto`: sandbox when sandbox runtime is active for the session, otherwise gateway. +- `host` only accepts `auto`, `sandbox`, `gateway`, or `node`. It is not a hostname selector; hostname-like values are rejected before the command runs. - `auto` is the default routing strategy, not a wildcard. Per-call `host=node` is allowed from `auto`; per-call `host=gateway` is only allowed when no sandbox runtime is active. - With no extra config, `host=auto` still "just works": no sandbox means it resolves to `gateway`; a live sandbox means it stays in the sandbox. - `elevated` escapes the sandbox onto the configured host path: `gateway` by default, or `node` when `tools.exec.host=node` (or the session default is `host=node`). It is only available when elevated access is enabled for the current session/provider.