\u5728\u5de5\u4f5c\u533a\u4e2d\u8fd0\u884c shell \u547d\u4ee4\u3002\u901a\u8fc7 \u6ce8\u610f\u4e8b\u9879\uff1a<\/p>\n \u793a\u4f8b\uff1a<\/p>\n “`json5 theme={“theme”:{“light”:”min-light”,”dark”:”min-dark”}} \u63a7\u5236 UI\uff1aNodes \u6807\u7b7e\u9875\u5305\u542b\u4e00\u4e2a\u5c0f\u7684”Exec \u8282\u70b9\u7ed1\u5b9a”\u9762\u677f\u7528\u4e8e\u76f8\u540c\u7684\u8bbe\u7f6e\u3002<\/p>\n \u4f7f\u7528 \u793a\u4f8b\uff1a<\/p>\nprocess<\/code> \u652f\u6301\u524d\u53f0\u548c\u540e\u53f0\u6267\u884c\u3002
\n\u5982\u679c process<\/code> \u88ab\u7981\u7528\uff0cexec<\/code> \u5c06\u540c\u6b65\u8fd0\u884c\u5e76\u5ffd\u7565 yieldMs<\/code>\/background<\/code>\u3002
\n\u540e\u53f0\u4f1a\u8bdd\u6309\u667a\u80fd\u4f53\u9694\u79bb\uff1bprocess<\/code> \u53ea\u80fd\u770b\u5230\u540c\u4e00\u667a\u80fd\u4f53\u7684\u4f1a\u8bdd\u3002<\/p>\n\u53c2\u6570<\/h2>\n
\n
command<\/code>\uff08\u5fc5\u586b\uff09<\/li>\nworkdir<\/code>\uff08\u9ed8\u8ba4\u4e3a\u5f53\u524d\u5de5\u4f5c\u76ee\u5f55\uff09<\/li>\nenv<\/code>\uff08\u952e\u503c\u5bf9\u8986\u76d6\uff09<\/li>\nyieldMs<\/code>\uff08\u9ed8\u8ba4 10000\uff09\uff1a\u5ef6\u8fdf\u540e\u81ea\u52a8\u8f6c\u5165\u540e\u53f0<\/li>\nbackground<\/code>\uff08\u5e03\u5c14\u503c\uff09\uff1a\u7acb\u5373\u8f6c\u5165\u540e\u53f0<\/li>\ntimeout<\/code>\uff08\u79d2\uff0c\u9ed8\u8ba4 1800\uff09\uff1a\u8d85\u65f6\u540e\u7ec8\u6b62<\/li>\npty<\/code>\uff08\u5e03\u5c14\u503c\uff09\uff1a\u5728\u53ef\u7528\u65f6\u4f7f\u7528\u4f2a\u7ec8\u7aef\u8fd0\u884c\uff08\u4ec5\u9650 TTY \u7684 CLI\u3001\u7f16\u7a0b\u667a\u80fd\u4f53\u3001\u7ec8\u7aef UI\uff09<\/li>\nhost<\/code>\uff08sandbox | gateway | node<\/code>\uff09\uff1a\u6267\u884c\u4f4d\u7f6e<\/li>\nsecurity<\/code>\uff08deny | allowlist | full<\/code>\uff09\uff1agateway<\/code>\/node<\/code> \u7684\u6267\u884c\u7b56\u7565<\/li>\nask<\/code>\uff08off | on-miss | always<\/code>\uff09\uff1agateway<\/code>\/node<\/code> \u7684\u5ba1\u6279\u63d0\u793a<\/li>\nnode<\/code>\uff08\u5b57\u7b26\u4e32\uff09\uff1ahost=node<\/code> \u65f6\u7684\u8282\u70b9 id\/\u540d\u79f0<\/li>\nelevated<\/code>\uff08\u5e03\u5c14\u503c\uff09\uff1a\u8bf7\u6c42\u63d0\u5347\u6a21\u5f0f\uff08gateway \u4e3b\u673a\uff09\uff1b\u4ec5\u5f53 elevated \u89e3\u6790\u4e3a full<\/code> \u65f6\u624d\u5f3a\u5236 security=full<\/code><\/li>\n<\/ul>\n\n
host<\/code> \u9ed8\u8ba4\u4e3a sandbox<\/code>\u3002<\/li>\nelevated<\/code> \u4f1a\u88ab\u5ffd\u7565\uff08exec \u5df2\u5728\u4e3b\u673a\u4e0a\u8fd0\u884c\uff09\u3002<\/li>\ngateway<\/code>\/node<\/code> \u5ba1\u6279\u7531 ~\/.openclaw\/exec-approvals.json<\/code> \u63a7\u5236\u3002<\/li>\nnode<\/code> \u9700\u8981\u5df2\u914d\u5bf9\u7684\u8282\u70b9\uff08\u914d\u5957\u5e94\u7528\u6216\u65e0\u5934\u8282\u70b9\u4e3b\u673a\uff09\u3002<\/li>\nexec.node<\/code> \u6216 tools.exec.node<\/code> \u6765\u9009\u62e9\u4e00\u4e2a\u3002<\/li>\nSHELL<\/code>\uff1b\u5982\u679c SHELL<\/code> \u662f fish<\/code>\uff0c\u5b83\u4f1a\u4f18\u5148\u4ece PATH<\/code> \u4e2d\u9009\u62e9 bash<\/code>\uff08\u6216 sh<\/code>\uff09\u4ee5\u907f\u514d fish \u4e0d\u517c\u5bb9\u7684\u811a\u672c\uff0c\u5982\u679c\u4e24\u8005\u90fd\u4e0d\u5b58\u5728\u5219\u56de\u9000\u5230 SHELL<\/code>\u3002<\/li>\ngateway<\/code>\/node<\/code>\uff09\u4f1a\u62d2\u7edd env.PATH<\/code> \u548c\u52a0\u8f7d\u5668\u8986\u76d6\uff08LD_*<\/code>\/DYLD_*<\/code>\uff09\uff0c\u4ee5\u9632\u6b62\u4e8c\u8fdb\u5236\u52ab\u6301\u6216\u4ee3\u7801\u6ce8\u5165\u3002<\/li>\nhost=sandbox<\/code> \u5c06\u76f4\u63a5\u5728 Gateway \u7f51\u5173\u4e3b\u673a\u4e0a\u8fd0\u884c\uff08\u65e0\u5bb9\u5668\uff09\u4e14\u4e0d\u9700\u8981\u5ba1\u6279<\/strong>\u3002\u5982\u9700\u5ba1\u6279\uff0c\u8bf7\u4f7f\u7528 host=gateway<\/code> \u8fd0\u884c\u5e76\u914d\u7f6e exec \u5ba1\u6279\uff08\u6216\u542f\u7528\u6c99\u7bb1\u9694\u79bb\uff09\u3002<\/li>\n<\/ul>\n\u914d\u7f6e<\/h2>\n
\n
tools.exec.notifyOnExit<\/code>\uff08\u9ed8\u8ba4\uff1atrue\uff09\uff1a\u4e3a true \u65f6\uff0c\u540e\u53f0 exec \u4f1a\u8bdd\u5728\u9000\u51fa\u65f6\u4f1a\u5165\u961f\u7cfb\u7edf\u4e8b\u4ef6\u5e76\u8bf7\u6c42\u5fc3\u8df3\u3002<\/li>\ntools.exec.approvalRunningNoticeMs<\/code>\uff08\u9ed8\u8ba4\uff1a10000\uff09\uff1a\u5f53\u9700\u8981\u5ba1\u6279\u7684 exec \u8fd0\u884c\u65f6\u95f4\u8d85\u8fc7\u6b64\u503c\u65f6\u53d1\u51fa\u5355\u6b21”\u8fd0\u884c\u4e2d”\u901a\u77e5\uff080 \u8868\u793a\u7981\u7528\uff09\u3002<\/li>\ntools.exec.host<\/code>\uff08\u9ed8\u8ba4\uff1asandbox<\/code>\uff09<\/li>\ntools.exec.security<\/code>\uff08\u9ed8\u8ba4\uff1asandbox \u4e3a deny<\/code>\uff0cgateway + node \u672a\u8bbe\u7f6e\u65f6\u4e3a allowlist<\/code>\uff09<\/li>\ntools.exec.ask<\/code>\uff08\u9ed8\u8ba4\uff1aon-miss<\/code>\uff09<\/li>\ntools.exec.node<\/code>\uff08\u9ed8\u8ba4\uff1a\u672a\u8bbe\u7f6e\uff09<\/li>\ntools.exec.pathPrepend<\/code>\uff1aexec \u8fd0\u884c\u65f6\u6dfb\u52a0\u5230 PATH<\/code> \u524d\u9762\u7684\u76ee\u5f55\u5217\u8868\u3002<\/li>\ntools.exec.safeBins<\/code>\uff1a\u4ec5\u9650 stdin \u7684\u5b89\u5168\u4e8c\u8fdb\u5236\u6587\u4ef6\uff0c\u65e0\u9700\u663e\u5f0f\u767d\u540d\u5355\u6761\u76ee\u5373\u53ef\u8fd0\u884c\u3002<\/li>\n<\/ul>\n
\n{
\n tools: {
\n exec: {
\n pathPrepend: [“~\/bin”, “\/opt\/oss\/bin”],
\n },
\n },
\n}<\/p>\n\n### PATH \u5904\u7406\n\n* `host=gateway`\uff1a\u5c06\u4f60\u7684\u767b\u5f55 shell `PATH` \u5408\u5e76\u5230 exec \u73af\u5883\u4e2d\u3002\u4e3b\u673a\u6267\u884c\u65f6\u4f1a\u62d2\u7edd `env.PATH` \u8986\u76d6\u3002\u5b88\u62a4\u8fdb\u7a0b\u672c\u8eab\u4ecd\u4f7f\u7528\u6700\u5c0f `PATH` \u8fd0\u884c\uff1a\n * macOS\uff1a`\/opt\/homebrew\/bin`\u3001`\/usr\/local\/bin`\u3001`\/usr\/bin`\u3001`\/bin`\n * Linux\uff1a`\/usr\/local\/bin`\u3001`\/usr\/bin`\u3001`\/bin`\n* `host=sandbox`\uff1a\u5728\u5bb9\u5668\u5185\u8fd0\u884c `sh -lc`\uff08\u767b\u5f55 shell\uff09\uff0c\u56e0\u6b64 `\/etc\/profile` \u53ef\u80fd\u4f1a\u91cd\u7f6e `PATH`\u3002OpenClaw \u5728 profile \u52a0\u8f7d\u540e\u901a\u8fc7\u5185\u90e8\u73af\u5883\u53d8\u91cf\u5c06 `env.PATH` \u6dfb\u52a0\u5230\u524d\u9762\uff08\u65e0 shell \u63d2\u503c\uff09\uff1b`tools.exec.pathPrepend` \u5728\u6b64\u4e5f\u9002\u7528\u3002\n* `host=node`\uff1a\u53ea\u6709\u4f60\u4f20\u9012\u7684\u672a\u88ab\u963b\u6b62\u7684 env \u8986\u76d6\u4f1a\u53d1\u9001\u5230\u8282\u70b9\u3002\u4e3b\u673a\u6267\u884c\u65f6\u4f1a\u62d2\u7edd `env.PATH` \u8986\u76d6\u3002\u65e0\u5934\u8282\u70b9\u4e3b\u673a\u4ec5\u5728 `PATH` \u6dfb\u52a0\u5230\u8282\u70b9\u4e3b\u673a PATH \u524d\u9762\u65f6\u624d\u63a5\u53d7\uff08\u4e0d\u5141\u8bb8\u66ff\u6362\uff09\u3002macOS \u8282\u70b9\u5b8c\u5168\u4e22\u5f03 `PATH` \u8986\u76d6\u3002\n\n\u6309\u667a\u80fd\u4f53\u7ed1\u5b9a\u8282\u70b9\uff08\u5728\u914d\u7f6e\u4e2d\u4f7f\u7528\u667a\u80fd\u4f53\u5217\u8868\u7d22\u5f15\uff09\uff1a\n\n```bash theme={"theme":{"light":"min-light","dark":"min-dark"}}\nopenclaw config get agents.list\nopenclaw config set agents.list[0].tools.exec.node "node-id-or-name"\n<\/code><\/pre>\n\u4f1a\u8bdd\u8986\u76d6\uff08
\/exec<\/code>\uff09<\/h2>\n\/exec<\/code> \u4e3a host<\/code>\u3001security<\/code>\u3001ask<\/code> \u548c node<\/code> \u8bbe\u7f6e\u6bcf\u4f1a\u8bdd<\/strong>\u9ed8\u8ba4\u503c\u3002
\n\u4e0d\u5e26\u53c2\u6570\u53d1\u9001 \/exec<\/code> \u53ef\u663e\u793a\u5f53\u524d\u503c\u3002<\/p>\n\/exec host=gateway security=allowlist ask=on-miss node=mac-1\n<\/code><\/pre>\n\u6388\u6743\u6a21\u578b<\/h2>\n
\/exec<\/code> \u4ec5\u5bf9\u5df2\u6388\u6743\u53d1\u9001\u8005<\/strong>\uff08\u6e20\u9053\u767d\u540d\u5355\/\u914d\u5bf9\u52a0 commands.useAccessGroups<\/code>\uff09\u751f\u6548\u3002
\n\u5b83\u4ec5\u66f4\u65b0\u4f1a\u8bdd\u72b6\u6001<\/strong>\uff0c\u4e0d\u5199\u5165\u914d\u7f6e\u3002\u8981\u5f7b\u5e95\u7981\u7528 exec\uff0c\u8bf7\u901a\u8fc7\u5de5\u5177\u7b56\u7565\u62d2\u7edd\u5b83\uff08tools.deny: [\"exec\"]<\/code> \u6216\u6309\u667a\u80fd\u4f53\u914d\u7f6e\uff09\u3002\u9664\u975e\u4f60\u663e\u5f0f\u8bbe\u7f6e security=full<\/code> \u548c ask=off<\/code>\uff0c\u5426\u5219\u4e3b\u673a\u5ba1\u6279\u4ecd\u7136\u9002\u7528\u3002<\/p>\nExec \u5ba1\u6279\uff08\u914d\u5957\u5e94\u7528\/\u8282\u70b9\u4e3b\u673a\uff09<\/h2>\n