Summary

Describe the problem and fix in 2–5 bullets:

• Problem: macOS Node running in remote mode, can't invoke any system.run command because system.run.prepare is not declared in the node commands
• Why it matters: macOS Node will be useless if system.run is disabled
• What changed: just add system.run.prepare in the node declaration
• What did NOT change (scope boundary): other preset commands

Change Type (select all)

• Bug fix
• Feature
• Refactor
• Docs
• Security hardening
• Chore/infra

Scope (select all touched areas)

• Gateway / orchestration
• Skills / tool execution
• Auth / tokens
• Memory / storage
• Integrations
• API / contracts
• UI / DX
• CI/CD / infra

Linked Issue/PR

• Closes [Bug]: macOS Node Missing system.run.prepare Command openclaw/openclaw#31959
• Related #

User-visible / Behavior Changes

• You can't run any system.run on the Node. If you type 'openclaw nodes describe --node <node-id>', you can't see system.run.prepare under Commands.
• After rebuild the app and connect again, I can system.run.prepare in the list.
• Now, you can send "Open Apple Music in my node." or any other command need to be executed in the Node.

Security Impact (required)

• New permissions/capabilities? (No)
• Secrets/tokens handling changed? (No)
• New/changed network calls? (No)
• Command/tool execution surface changed? (No)
• Data access scope changed? (No)
• If any Yes, explain risk + mitigation:

Repro + Verification

Environment

• OS: 15.6.1
• Runtime/container: OpenClaw 2026.3.2
• Model/provider: Any
• Integration/channel (if any):
• Relevant config (redacted):

Steps

1. Follow https://github.com/openclaw/openclaw/tree/main/apps/macos to build the Mac App, using "scripts/restart-mac.sh --no-sign" specifically in my case
2. Connect Node(Mac App) to cloud gateway. Settings -> General -> Remote(another host) -> Direct (ws/wss)
3. Talk to any agent, "open Apple Music in node-id"

Expected

• The Node (Mac) will open Apple Music

Actual

• Nothing happens, while we can logs:
  errorCode=INVALID_REQUEST errorMessage=node command not allowed: the node (platform: macOS 15.6.1) does not support "system.run.prepare"

Evidence

Attach at least one:

• Failing test/log before + passing after
• Trace/log snippets
• Screenshot/recording
• Perf numbers (if relevant)

Error logs:

Human Verification (required)

What you personally verified (not just CI), and how:

• Verified scenarios: Modify code -> Rebuild the app -> Test system.run
• Edge cases checked:
• What you did not verify:

Compatibility / Migration

• Backward compatible? (Yes)
• Config/env changes? (No)
• Migration needed? (No)
• If yes, exact upgrade steps:

Failure Recovery (if this breaks)

• How to disable/revert this change quickly: delete these two lines of code
• Files/config to restore: N/A
• Known bad symptoms reviewers should watch for:

Risks and Mitigations

List only real risks for this PR. Add/remove entries as needed. If none, write None.

• Risk:
  • Mitigation: None