openclaw

mirror of https://github.com/openclaw/openclaw.git synced 2026-03-18 13:30:48 +00:00

Files

Robin Waslander a1520d70ff fix(gateway): propagate real gateway client into plugin subagent runtime

Plugin subagent dispatch used a hardcoded synthetic client carrying
operator.admin, operator.approvals, and operator.pairing for all
runtime.subagent.* calls. Plugin HTTP routes with auth:"plugin" require
no gateway auth by design, so an unauthenticated external request could
drive admin-only gateway methods (sessions.delete, agent.run) through
the subagent runtime.

Propagate the real gateway client into the plugin runtime request scope
when one is available. Plugin HTTP routes now run inside a scoped
runtime client: auth:"plugin" routes receive a non-admin synthetic
operator.write client; gateway-authenticated routes retain admin-capable
scopes. The security boundary is enforced at the HTTP handler level.

Fixes GHSA-xw77-45gv-p728

2026-03-11 14:17:01 +01:00

gateway-request-scope.test.ts

feature(context): extend plugin system to support custom context management (#22201 )

2026-03-06 05:31:59 -08:00

gateway-request-scope.ts

fix(gateway): propagate real gateway client into plugin subagent runtime

2026-03-11 14:17:01 +01:00

index.test.ts

fix(plugins): expose model auth API to context-engine plugins (#41090 )

2026-03-09 16:07:26 -07:00

index.ts

fix(plugins): expose model auth API to context-engine plugins (#41090 )