After a node changes its declared command list, reject the old device pairing

and approve the new request so the gateway stores the updated command snapshot.

## Config (`openclaw.json`)

Node-related settings live under `gateway.nodes` and `tools.exec`:

```json5

{

gateway: {

nodes: {

// Auto-approve first-time node pairing from trusted networks (CIDR list).

// Disabled when unset. Only applies to first-time role:node requests

// with no requested scopes; does not auto-approve upgrades.

pairing: {

autoApproveCidrs: ["192.168.1.0/24"],

},

// Opt into dangerous/privacy-heavy node commands (camera.snap, etc.).

allowCommands: ["camera.snap", "screen.record"],

// Block exact command names even if defaults or allowCommands include them.

denyCommands: ["camera.clip"],

},

},

tools: {

exec: {

// Default exec host: "node" routes all exec calls to a paired node.

host: "node",

// Security mode for node exec: allow only approved/allowlisted commands.

security: "allowlist",

// Pin exec to a specific node (id or name). Omit to allow any node.

node: "build-node",

},

},

}

```

Use exact node command names. `denyCommands` removes a command even when a

platform default or `allowCommands` entry would otherwise allow it. See

[Gateway configuration reference](/gateway/configuration-reference#gateway-field-details)

for gateway node pairing and command-policy field details.

Per-agent exec node override:

```json5

{

agents: {

list: [

{

id: "main",

tools: { exec: { node: "build-node" } },

},

],

},

}

```

## Screenshots (canvas snapshots)

If the node is showing the Canvas (WebView), `canvas.snapshot` returns `{ format, base64 }`.