Bug type

Crash (process/app exits or hangs)

Summary

When using OpenClaw with a Linux gateway and macOS node, remote execution via host=node fails with:

exec INVALID_REQUEST: SYSTEM_RUN_DENIED: approval requires canonical cwd (no symlink cwd)

This happens even though the working directory on the macOS node is not a symlink and resolves to a canonical path.

Steps to reproduce

Reproduction Steps

1. Setup

Gateway runs on Linux

Node connects from macOS

Node is healthy and connected

2. Run command
   openclaw nodes run --node -- /usr/bin/pwd
3. Result

Fails with:

exec INVALID_REQUEST: SYSTEM_RUN_DENIED: approval requires canonical cwd (no symlink cwd

Expected behavior

Expected Behavior

The command should execute successfully on the macOS node and return:

/Users/

Actual behavior

Execution is denied during approval phase with:

approval requires canonical cwd (no symlink cwd)

OpenClaw version

2026.3.13

Operating system

macos

Install method

npm

Model

deepseek

Provider / routing chain

Feishu → Gateway (Linux) → Node (macOS)

Additional provider/model setup details

This issue occurs in a multi-user setup:

Each Feishu user maps to a dedicated agent

Each agent maps to a dedicated node (user's device)

Architecture:

Feishu → Gateway (Linux) → Node (macOS)

Logs, screenshots, and evidence

Impact and severity

No response

Additional information

This issue blocks multi-user setups where each user controls their own remote node via a central gateway.