fix(gateway): bind node exec approvals to nodeId

src/agents/bash-tools.exec-approval-request.test.ts

@@ -44,6 +44,7 @@ describe("requestExecApprovalDecision", () => {
         id: "approval-id",
         command: "echo hi",
         cwd: "/tmp",
+        nodeId: undefined,
         host: "gateway",
         security: "allowlist",
         ask: "always",
@@ -62,6 +63,7 @@ describe("requestExecApprovalDecision", () => {
         id: "approval-id",
         command: "echo hi",
         cwd: "/tmp",
+        nodeId: "node-1",
         host: "node",
         security: "allowlist",
         ask: "on-miss",
@@ -74,6 +76,7 @@ describe("requestExecApprovalDecision", () => {
         id: "approval-id-2",
         command: "echo hi",
         cwd: "/tmp",
+        nodeId: "node-1",
         host: "node",
         security: "allowlist",
         ask: "on-miss",

src/agents/bash-tools.exec-approval-request.ts

@@ -9,6 +9,7 @@ export type RequestExecApprovalDecisionParams = {
   id: string;
   command: string;
   cwd: string;
+  nodeId?: string;
   host: "gateway" | "node";
   security: ExecSecurity;
   ask: ExecAsk;
@@ -27,6 +28,7 @@ export async function requestExecApprovalDecision(
       id: params.id,
       command: params.command,
       cwd: params.cwd,
+      nodeId: params.nodeId,
       host: params.host,
       security: params.security,
       ask: params.ask,
@@ -48,6 +50,7 @@ export async function requestExecApprovalDecisionForHost(params: {
   command: string;
   workdir: string;
   host: "gateway" | "node";
+  nodeId?: string;
   security: ExecSecurity;
   ask: ExecAsk;
   agentId?: string;
@@ -58,6 +61,7 @@ export async function requestExecApprovalDecisionForHost(params: {
     id: params.approvalId,
     command: params.command,
     cwd: params.workdir,
+    nodeId: params.nodeId,
     host: params.host,
     security: params.security,
     ask: params.ask,

src/agents/bash-tools.exec-host-node.ts

@@ -193,6 +193,7 @@ export async function executeNodeHostCommand(
           command: params.command,
           workdir: params.workdir,
           host: "node",
+          nodeId,
           security: hostSecurity,
           ask: hostAsk,
           agentId: params.agentId,

src/agents/openclaw-tools.camera.test.ts

@@ -165,6 +165,7 @@ describe("nodes run", () => {
         expect(params).toMatchObject({
           id: expect.any(String),
           command: "echo hi",
+          nodeId: NODE_ID,
           host: "node",
           timeoutMs: 120_000,
         });

src/agents/tools/nodes-tool.ts

@@ -482,6 +482,7 @@ export function createNodesTool(options?: {
                 id: approvalId,
                 command: cmdText,
                 cwd,
+                nodeId,
                 host: "node",
                 agentId,
                 sessionKey,