openclaw/src
wangchunyue b40ef364b7
fix: pin admin-only subagent gateway scopes (#59555) (thanks @openperf)
* fix(agents): pin subagent gateway calls to admin scope to prevent scope-upgrade pairing failures

callSubagentGateway forwards params to callGateway without explicit scopes,
so callGatewayLeastPrivilege negotiates the minimum scope per method
independently.  The first connection pairs the device at a lower tier and
every subsequent higher-tier call triggers a scope-upgrade handshake that
headless gateway-client connections cannot complete interactively
(close 1008 "pairing required").

Pin callSubagentGateway to operator.admin so the device is paired at the
ceiling scope on the very first (silent, local-loopback) handshake, avoiding
any subsequent scope-upgrade negotiation entirely.

Fixes #59428

* fix: pin admin-only subagent gateway scopes (#59555) (thanks @openperf)

---------

Co-authored-by: Ayaan Zaidi <hi@obviy.us>
2026-04-02 19:40:03 +05:30
..
acp refactor(tasks): update plugin and acp task-flow consumers 2026-04-02 20:43:03 +09:00
agents fix: pin admin-only subagent gateway scopes (#59555) (thanks @openperf) 2026-04-02 19:40:03 +05:30
auto-reply feat(plugins): surface imported runtime state in status tooling (#59659) 2026-04-02 22:50:17 +09:00
bindings
bootstrap
canvas-host
channels fix(config): tolerate missing facade boundary config 2026-04-02 23:04:53 +09:00
chat
cli refactor(plugins): drop generic status report alias (#59700) 2026-04-02 22:59:25 +09:00
commands feat(exec): default host exec to yolo 2026-04-02 14:52:51 +01:00
compat
config fix(config): tolerate missing facade boundary config 2026-04-02 23:04:53 +09:00
context-engine
cron fix(cron-tool): add typed properties to job/patch schemas (#55043) 2026-04-01 23:41:19 +03:00
daemon
docs
flows !refactor(xai): move x_search config behind plugin boundary (#59674) 2026-04-02 22:08:59 +09:00
gateway fix(gateway): enforce session kill HTTP scopes (#59128) 2026-04-02 05:56:17 -07:00
generated
hooks
i18n
image-generation
infra Refine JSONL socket EOF regression test 2026-04-02 23:03:36 +09:00
interactive
link-understanding
logging
markdown
mcp
media fix(whatsapp): add HTML/XML/CSS to MIME map + fallback for unknown media types (#51562) 2026-04-02 00:25:12 -03:00
media-understanding refactor(providers): normalize transport policy wiring (#59682) 2026-04-02 22:54:34 +09:00
node-host fix(browser): keep static helper seams cold (#59471) 2026-04-02 17:12:32 +09:00
pairing
plugin-sdk fix(config): tolerate missing facade boundary config 2026-04-02 23:04:53 +09:00
plugins fix: use JSON5 parser for plugin manifest loading (#57734) [AI-assisted] (#59084) 2026-04-02 22:02:04 +08:00
process test(ci): deflake windows npm exec coverage 2026-03-31 19:28:11 +01:00
routing routing: support wildcard peer bindings (peer.id="*") for multi-agent routing (#58609) 2026-03-31 21:10:18 -04:00
scripts build: bump version to 2026.4.1 2026-03-31 22:53:17 +01:00
secrets chore: refresh deps and backfill changelog 2026-04-02 14:49:47 +01:00
security fix(browser): keep static helper seams cold (#59471) 2026-04-02 17:12:32 +09:00
sessions Fix: move bootstrap session grammar into plugin-owned session-key surfaces (#58400) 2026-03-31 19:41:01 -04:00
shared fix: strip antml thinking tags 2026-04-02 14:28:54 +05:30
tasks fix(tasks): reset agent events in executor tests 2026-04-02 22:25:59 +09:00
terminal
test-helpers
test-utils !feat(plugins): add web fetch provider boundary (#59465) 2026-04-02 20:25:19 +09:00
tts fix(plugins): guard runtime facade activation (#59412) 2026-04-02 14:37:12 +09:00
tui
types
utils Matrix: restore ordered progress delivery with explicit streaming modes (#59266) 2026-04-01 19:35:03 -04:00
web-fetch test: make web fetch runtime env handling hermetic 2026-04-02 15:02:40 +01:00
web-search !refactor(xai): move x_search config behind plugin boundary (#59674) 2026-04-02 22:08:59 +09:00
wizard CLI: suppress Codex native search summary when web search is off 2026-04-01 03:30:06 +09:00
channel-web.ts
docker-build-cache.test.ts
docker-image-digests.test.ts
docker-setup.e2e.test.ts
dockerfile.test.ts
entry.respawn.test.ts
entry.respawn.ts
entry.test.ts
entry.ts
entry.version-fast-path.test.ts
extensionAPI.ts
global-state.ts
globals.ts
index.test.ts
index.ts
install-sh-version.test.ts
library.test.ts
library.ts
logger.test.ts
logger.ts
logging.ts
param-key.ts
plugin-activation-boundary.test.ts fix(browser): keep static helper seams cold (#59471) 2026-04-02 17:12:32 +09:00
poll-params.test.ts
poll-params.ts
polls.test.ts
polls.ts
runtime.ts
ui-app-settings.agents-files-refresh.test.ts
utils.test.ts
utils.ts
version.test.ts
version.ts