diff --git a/CHANGELOG.md b/CHANGELOG.md index 624d682bd78..4af0ccf8c9c 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -925,6 +925,7 @@ Docs: https://docs.openclaw.ai - Telegram: keep default tool progress messages visible when answer preview streaming is disabled. (#71825) Thanks @VACInc. - Configure/models: clear deselected model fallbacks when updating the model picker allowlist, including provider-scoped setup flows. (#71596) Thanks @rubencu. - Agents/streaming: strip namespaced `` reasoning tags from streamed assistant replies before user-visible text is emitted. (#69288) Thanks @xialonglee. +- Gateway/nodes: allow Windows companion nodes to use safe declared commands such as canvas, camera list, location, device info, and screen snapshot by default while keeping dangerous media commands opt-in. (#71884) Thanks @shanselman. ## 2026.4.24 diff --git a/src/gateway/gateway-misc.test.ts b/src/gateway/gateway-misc.test.ts index 4b132896149..cd33b0a7476 100644 --- a/src/gateway/gateway-misc.test.ts +++ b/src/gateway/gateway-misc.test.ts @@ -738,9 +738,9 @@ describe("resolveNodeCommandAllowlist", () => { expect(allow.has("system.which")).toBe(true); expect(allow.has("system.notify")).toBe(true); - expect(allow.has("camera.snap")).toBe(false); - expect(allow.has("camera.clip")).toBe(false); - expect(allow.has("screen.record")).toBe(false); + for (const cmd of DEFAULT_DANGEROUS_NODE_COMMANDS) { + expect(allow.has(cmd)).toBe(false); + } }); it("can explicitly allow dangerous commands via allowCommands", () => {