Skip to content

fix(web): reduce web gateway scope request#96

Open
vedworks wants to merge 1 commit into
mainfrom
fix/webchat-admin-scope
Open

fix(web): reduce web gateway scope request#96
vedworks wants to merge 1 commit into
mainfrom
fix/webchat-admin-scope

Conversation

@vedworks

@vedworks vedworks commented Mar 15, 2026

Copy link
Copy Markdown

Summary

  • request only operator.admin from the web chat gateway client instead of asking for redundant read/write/admin scopes
  • avoid missing scope: operator.write failures on admin-scoped gateway auth while preserving the operator RPC access this path needs
  • add a regression test that locks the web runner to the admin-only scope contract

Test plan

  • pnpm --dir apps/web test -- lib/agent-runner.test.ts
  • pnpm lint (currently fails due unrelated existing curly / no-unused-vars violations in files outside this change, including apps/web/lib/terminal-server.ts, src/cli/web-runtime-command.ts, src/cli/web-runtime-launchd.ts, src/cli/web-runtime.ts, apps/web/lib/active-runs.test.ts, and apps/web/app/components/cron/cron-dashboard.tsx)

Request only operator.admin when the DenchClaw web runner connects to the gateway. This avoids operator.write mismatches on admin-scoped gateway auth while preserving the RPC access this chat path needs.
@vedworks vedworks requested a review from kumarabhirup March 15, 2026 06:22
Fato07 pushed a commit to Fato07/elav that referenced this pull request Mar 26, 2026
Agents were being woken immediately when an issue was created or
reassigned with status "backlog", defeating the purpose of backlog
as "not ready to work on yet" (issue DenchHQ#96).

Added `&& issue.status !== "backlog"` guard to both the CREATE and
PATCH wakeup paths, mirroring the existing done/cancelled suppression
pattern already present in the file.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant