Error: EACCES: permission denied - Models , Whatsapp & Telegram

[dinuduke]

Description

4 Issues Listed below :

1. Error: EACCES: permission denied, open '/sandbox/.openclaw/openclaw.json.6793.9bf4308e-1272-4973-a8b7-c2234a750aa3.tmp'

2. Error: EACCES: permission denied, open '/sandbox/.openclaw/openclaw.json.6725.a127b88a-2b9c-4daa-86ed-505b610cee68.tmp'

3. WhatsApp login failed: Error: EACCES: permission denied, mkdir '/sandbox/.openclaw/credentials'

4. No whatsApp QR code

Reproduction Steps

nemoclaw invoice-assistant connect
sandbox@invoice-assistant:$ cat OPENCLAW_GATEWAY_TOKEN
cat: OPENCLAW_GATEWAY_TOKEN: No such file or directory
sandbox@invoice-assistant:$ openclaw configure
(node:6717) [UNDICI-EHPA] Warning: EnvHttpProxyAgent is experimental, expect them to change at any time.
(Use node --trace-warnings ... to show where the warning was created)
(node:6725) [UNDICI-EHPA] Warning: EnvHttpProxyAgent is experimental, expect them to change at any time.
(Use node --trace-warnings ... to show where the warning was created)

🦞 OpenClaw 2026.3.11 (29dc654) — More integrations than your therapist's intake form.

▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄
██░▄▄▄░██░▄▄░██░▄▄▄██░▀██░██░▄▄▀██░████░▄▄▀██░███░██
██░███░██░▀▀░██░▄▄▄██░█░█░██░█████░████░▀▀░██░█░█░██
██░▀▀▀░██░█████░▀▀▀██░██▄░██░▀▀▄██░▀▀░█░██░██▄▀▄▀▄██
▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀
🦞 OPENCLAW 🦞

┌ OpenClaw configure
│
◇ Existing config detected ───╮
│ │
│ model: openai/gpt-5.4-mini │
│ gateway.mode: local │
│ │
├──────────────────────────────╯
│
◇ Where will the Gateway run?
│ Local (this machine)
│
◇ Select sections to configure
│ Model
│
◇ Model/auth provider
│ OpenAI
│
◇ OpenAI auth method
│ OpenAI API key
│
◇ How do you want to provide this API key?
│ Paste API key now
│
◇ Enter OpenAI API key
│
│
◇ Model configured ──────────────────────────╮
│ │
│ Default model set to openai/gpt-5.1-codex │
│ │
├─────────────────────────────────────────────╯
│
◇ Models in /model picker (multi-select)
│ 5 items selected
Error: EACCES: permission denied, open '/sandbox/.openclaw/openclaw.json.6725.a127b88a-2b9c-4daa-86ed-505b610cee68.tmp'
sandbox@invoice-assistant:$ sudo openclaw configure
bash: sudo: command not found
sandbox@invoice-assistant:$ sudo openclaw configure
bash: sudo: command not found
sandbox@invoice-assistant:~$ openclaw configure
(node:6785) [UNDICI-EHPA] Warning: EnvHttpProxyAgent is experimental, expect them to change at any time.
(Use node --trace-warnings ... to show where the warning was created)
(node:6793) [UNDICI-EHPA] Warning: EnvHttpProxyAgent is experimental, expect them to change at any time.
(Use node --trace-warnings ... to show where the warning was created)

🦞 OpenClaw 2026.3.11 (29dc654) — Your .zshrc wishes it could do what I do.

▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄
██░▄▄▄░██░▄▄░██░▄▄▄██░▀██░██░▄▄▀██░████░▄▄▀██░███░██
██░███░██░▀▀░██░▄▄▄██░█░█░██░█████░████░▀▀░██░█░█░██
██░▀▀▀░██░█████░▀▀▀██░██▄░██░▀▀▄██░▀▀░█░██░██▄▀▄▀▄██
▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀
🦞 OPENCLAW 🦞

┌ OpenClaw configure
│
◇ Existing config detected ───╮
│ │
│ model: openai/gpt-5.4-mini │
│ gateway.mode: local │
│ │
├──────────────────────────────╯
│
◇ Where will the Gateway run?
│ Local (this machine)
│
◇ Select sections to configure
│ Channels
│
◇ Channel status ────────────────────────────╮
│ │
│ Telegram: needs token │
│ WhatsApp (default): not linked │
│ Discord: needs token │
│ Slack: needs tokens │
│ Signal: needs setup │
│ signal-cli: missing (signal-cli) │
│ iMessage: needs setup │
│ imsg: missing (imsg) │
│ IRC: not configured │
│ Google Chat: not configured │
│ LINE: not configured │
│ Feishu: install plugin to enable │
│ Google Chat: install plugin to enable │
│ Nostr: install plugin to enable │
│ Microsoft Teams: install plugin to enable │
│ Mattermost: install plugin to enable │
│ Nextcloud Talk: install plugin to enable │
│ Matrix: install plugin to enable │
│ BlueBubbles: install plugin to enable │
│ LINE: install plugin to enable │
│ Zalo: install plugin to enable │
│ Zalo Personal: install plugin to enable │
│ Synology Chat: install plugin to enable │
│ Tlon: install plugin to enable │
│ │
├─────────────────────────────────────────────╯
│
◇ Channels
│ Configure/link
│
◇ How channels work ───────────────────────────────────────────────────────────────────────╮
│ │
│ DM security: default is pairing; unknown DMs get a pairing code. │
│ Approve with: openclaw pairing approve │
│ Public DMs require dmPolicy="open" + allowFrom=[""]. │
│ Multi-user DMs: run: openclaw config set session.dmScope "per-channel-peer" (or │
│ "per-account-channel-peer" for multi-account channels) to isolate sessions. │
│ Docs: channels/pairing │
│ │
│ Telegram: simplest way to get started — register a bot with @BotFather and get going. │
│ WhatsApp: works with your own number; recommend a separate phone + eSIM. │
│ Discord: very well supported right now. │
│ IRC: classic IRC networks with DM/channel routing and pairing controls. │
│ Google Chat: Google Workspace Chat app with HTTP webhook. │
│ Slack: supported (Socket Mode). │
│ Signal: signal-cli linked device; more setup (David Reagans: "Hop on Discord."). │
│ iMessage: this is still a work in progress. │
│ LINE: LINE Messaging API webhook bot. │
│ Feishu: 飞书/Lark enterprise messaging with doc/wiki/drive tools. │
│ Nostr: Decentralized protocol; encrypted DMs via NIP-04. │
│ Microsoft Teams: Bot Framework; enterprise support. │
│ Mattermost: self-hosted Slack-style chat; install the plugin to enable. │
│ Nextcloud Talk: Self-hosted chat via Nextcloud Talk webhook bots. │
│ Matrix: open protocol; install the plugin to enable. │
│ BlueBubbles: iMessage via the BlueBubbles mac app + REST API. │
│ Zalo: Vietnam-focused messaging platform with Bot API. │
│ Zalo Personal: Zalo personal account via QR code login. │
│ Synology Chat: Connect your Synology NAS Chat to OpenClaw with full agent capabilities. │
│ Tlon: decentralized messaging on Urbit; install the plugin to enable. │
│ │
├───────────────────────────────────────────────────────────────────────────────────────────╯
│
◇ Select a channel
│ WhatsApp (QR link)
│
◇ WhatsApp linking ─────────────────────────────────────────────────────────────────────────╮
│ │
│ Scan the QR with WhatsApp on your phone. <--- Issue │
│ Credentials are stored under /sandbox/.openclaw/credentials/whatsapp/default/ for future │
│ runs. │
│ Docs: whatsapp │
│ │
├────────────────────────────────────────────────────────────────────────────────────────────╯
│
◇ Link WhatsApp now (QR)?
│ Yes
WhatsApp login failed: Error: EACCES: permission denied, mkdir '/sandbox/.openclaw/credentials'
│
◇ WhatsApp help ───────────────────────────────────────────────╮
│ │
│ Docs: whatsapp │
│ │
├───────────────────────────────────────────────────────────────╯
│
◇ WhatsApp DM access ──────────────────────────────────────────────────────╮
│ │
│ WhatsApp direct chats are gated by channels.whatsapp.dmPolicy + │
│ channels.whatsapp.allowFrom. │
│ - pairing (default): unknown senders get a pairing code; owner approves │
│ - allowlist: unknown senders are blocked │
│ - open: public inbound DMs (requires allowFrom to include "") │
│ - disabled: ignore WhatsApp DMs │
│ │
│ Current: dmPolicy=pairing, allowFrom=unset │
│ Docs: whatsapp │
│ │
├───────────────────────────────────────────────────────────────────────────╯
│
◇ WhatsApp phone setup
│ This is my personal phone number
│
◇ WhatsApp number ────────────────────────────────────────────────╮
│ │
│ We need the sender/owner number so OpenClaw can allowlist you. │
│ │
├──────────────────────────────────────────────────────────────────╯
│
◇ Your personal WhatsApp number (the phone you will message from)
│ +91XXXXXXXXXX
│
◇ WhatsApp personal phone ───────────────────────╮
│ │
│ Personal phone mode enabled. │
│ - dmPolicy set to allowlist (pairing skipped) │
│ - allowFrom includes +9XXXXXXXXXX │
│ │
├─────────────────────────────────────────────────╯
│
◇ Select a channel
│ Finished
│
◇ Selected channels ───────────────────────────────────────────────────────────────╮
│ │
│ WhatsApp — works with your own number; recommend a separate phone + eSIM. Docs: │
│ whatsapp │
│ │
├───────────────────────────────────────────────────────────────────────────────────╯
Error: EACCES: permission denied, open '/sandbox/.openclaw/openclaw.json.6793.9bf4308e-1272-4973-a8b7-c2234a750aa3.tmp'

Environment

Mac OS : 26.3.1 (a) (25D771280a)

nemoclaw-debug.tar.gz

sandbox@invoice-assistant:$ node -v
v22.22.1
sandbox@invoice-assistant:$ npm -v
(node:6872) [UNDICI-EHPA] Warning: EnvHttpProxyAgent is experimental, expect them to change at any time.
(Use node --trace-warnings ... to show where the warning was created)
10.9.4

Debug Output

Attached above
[nemoclaw-debug.tar.gz](https://github.com/user-attachments/files/26358140/nemoclaw-debug.tar.gz)

Logs

Attached Above
[nemoclaw-debug.tar.gz](https://github.com/user-attachments/files/26358140/nemoclaw-debug.tar.gz)

Checklist

• I confirmed this bug is reproducible
• I searched existing issues and this is not a duplicate