fix: refine Windows node command coverage

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

CHANGELOG.md

@@ -925,6 +925,7 @@ Docs: https://docs.openclaw.ai
 - Telegram: keep default tool progress messages visible when answer preview streaming is disabled. (#71825) Thanks @VACInc.
 - Configure/models: clear deselected model fallbacks when updating the model picker allowlist, including provider-scoped setup flows. (#71596) Thanks @rubencu.
 - Agents/streaming: strip namespaced `<antml:thinking>` reasoning tags from streamed assistant replies before user-visible text is emitted. (#69288) Thanks @xialonglee.
+- Gateway/nodes: allow Windows companion nodes to use safe declared commands such as canvas, camera list, location, device info, and screen snapshot by default while keeping dangerous media commands opt-in. (#71884) Thanks @shanselman.
 
 ## 2026.4.24
 

src/gateway/gateway-misc.test.ts

@@ -738,9 +738,9 @@ describe("resolveNodeCommandAllowlist", () => {
     expect(allow.has("system.which")).toBe(true);
     expect(allow.has("system.notify")).toBe(true);
 
-    expect(allow.has("camera.snap")).toBe(false);
-    expect(allow.has("camera.clip")).toBe(false);
-    expect(allow.has("screen.record")).toBe(false);
+    for (const cmd of DEFAULT_DANGEROUS_NODE_COMMANDS) {
+      expect(allow.has(cmd)).toBe(false);
+    }
   });
 
   it("can explicitly allow dangerous commands via allowCommands", () => {