Issue: Agent has host file access but no real host exec (Windows + WhatsApp)*
What I’m trying to do
I want my local OpenClaw agent (talking to me over WhatsApp) to be able to run real commands on my Windows PC (PowerShell/cmd via
What actually happens
- The agent can write real files on my host, e.g. it successfully created:
- But any
- Commands like
- return no stdout/stderr to the user, and
- have no effect on the actual Windows session (Explorer never closes, desktop never changes).
From the agent’s point of view, it looks like
Setup
- OS: Windows 10.0.26100 (x64)
- Node: v24.13.1
- OpenClaw: 2026.2.15 (
- Shell: PowerShell
- Gateway: local on
-
Relevant
No explicit
Question
What exact config / CLI steps do I need so that this same agent (over WhatsApp, on this local gateway) can:
- run
- actually affect running apps / processes,
- and use the normal exec approvals model,
instead of being locked to sandbox-only behavior?
Right now the agent has real host file access but no real host exec access.
---
I want my local OpenClaw agent (talking to me over WhatsApp) to be able to run real commands on my Windows PC (PowerShell/cmd via
execwhoamiGet-ProcessWhat actually happens
- The agent can write real files on my host, e.g. it successfully created:
C:\Users\Faisal\OneDrive\Desktop\سلام.txt- But any
exec- Commands like
whoamidir C:\Users\Faisal\OneDrive\DesktopStop-Process -Name explorer -Force- return no stdout/stderr to the user, and
- have no effect on the actual Windows session (Explorer never closes, desktop never changes).
From the agent’s point of view, it looks like
execSetup
- OS: Windows 10.0.26100 (x64)
- Node: v24.13.1
- OpenClaw: 2026.2.15 (
npm install- Shell: PowerShell
- Gateway: local on
ws://127.0.0.1:18789-
openclaw statusopenai-codex/gpt-5.1Relevant
openclaw.jsonNo explicit
agents.defaults.sandbox.modeQuestion
What exact config / CLI steps do I need so that this same agent (over WhatsApp, on this local gateway) can:
- run
exec- actually affect running apps / processes,
- and use the normal exec approvals model,
instead of being locked to sandbox-only behavior?
Right now the agent has real host file access but no real host exec access.
---
The AI that actually does things. Emails, calendar, home automation - all from your favorite chat app. New shell, ready to help. The lobster way.
131,281Members
Resources
Similar Threads
Was this page helpful?
