[Bug]: Windows: allowFrom + security: standard does not enable auto-approval for remote commands #59617
Description
Bug type
Behavior bug (incorrect output/state without crash)
Beta release blocker
No
Summary
Environment
| Component | Value |
|---|---|
| OS | Windows 10/11 |
| OpenClaw Version | 2026.4.1 |
| Node.js | v25.7.0 |
| Platform | win32 (x64) |
───
Description
On Windows, even with security: standard and allowFrom configured, OpenClaw requires explicit approval for every command executed via Telegram. This makes remote management impractical.
───
Configuration
{
"security": "standard",
"channels": {
"telegram": {
"enabled": true,
"dmPolicy": "allowlist",
"allowFrom": ["<telegram_user_id>"]
}
}
}
───
Error Message
Warning: allowlist auto-execution is unavailable on win32; explicit approval is required.
Root Cause
The restriction appears to be hardcoded:
allowlist auto-execution is unavailable on win32; explicit approval is required
───
Impact
• Remote management is impractical on Windows
• Every command requires explicit approval
• Telegram bot utility is severely limited
───
Suggested Fix
Steps to reproduce
No info
Expected behavior
Allow security: standard to enable auto-approval on Windows when allowFrom is configured, or document this limitation clearly.
Actual behavior
Error Message
Warning: allowlist auto-execution is unavailable on win32; explicit approval is required.
OpenClaw version
openclaw 2026.4.1
Operating system
Windows 11
Install method
npm global
Model
Ollama glm-5 cloud
Provider / routing chain
No info
Additional provider/model setup details
No response
Logs, screenshots, and evidence
Impact and severity
No response
Additional information
No response