justinhuangcode d00d814ad1 fix(gateway): include platform and reason in node command rejection error ...

The generic "node command not allowed" error gives no indication of why the
command was rejected, making it hard to diagnose issues (e.g. running
`nodes notify` against a Linux node that does not declare `system.notify`).

Include the rejection reason and node platform in the error message so
callers can tell whether the command is not supported by the node, not in
the platform allowlist, or the node did not advertise its capabilities.

Fixes #24616

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
(cherry picked from commit e3d74619bc9d2cf6d93bc5cb19e35d318784bf6a)

2026-02-23 18:56:14 +00:00

..

protocol

fix(cron): preserve telegram announce target + delivery truth

2026-02-23 11:45:18 +05:30

server

Gateway: stop repeated unauthorized WS request floods per connection (#24294)

2026-02-23 09:58:47 -05:00

server-methods

fix(gateway): include platform and reason in node command rejection error

2026-02-23 18:56:14 +00:00

agent-event-assistant-text.ts

refactor(gateway): dedupe assistant delta parsing

2026-02-15 19:08:47 +00:00

agent-prompt.test.ts

test: move gateway rpc/local suites out of e2e

2026-02-22 11:31:42 +00:00

agent-prompt.ts

refactor(gateway): share agent prompt builder

2026-02-14 15:39:45 +00:00

assistant-identity.test.ts

chore: Enable "experimentalSortImports" in Oxfmt and reformat all imorts.

2026-02-01 10:03:47 +09:00

assistant-identity.ts

fix(security): harden avatar validation and size limits

2026-02-22 08:35:32 +01:00

auth-rate-limit.test.ts

fix(security): normalize hook auth rate-limit client keys

2026-02-22 08:40:49 +01:00

auth-rate-limit.ts

refactor(security): unify hook rate-limit and hook module loading

2026-02-22 08:57:01 +01:00

auth.test.ts

refactor(gateway): unify credential precedence across entrypoints

2026-02-22 18:55:44 +01:00

auth.ts

refactor(gateway): unify credential precedence across entrypoints

2026-02-22 18:55:44 +01:00

boot.test.ts

test(gateway): dedupe boot workspace setup and cover boot failures

2026-02-21 21:40:38 +00:00

boot.ts

fix: run BOOT.md for each configured agent at startup (#20569)

2026-02-19 00:58:56 -05:00

call.test.ts

test: dedupe fixtures and test harness setup

2026-02-23 05:45:54 +00:00

call.ts

refactor(gateway): unify auth credential resolution

2026-02-22 18:23:13 +01:00

canvas-capability.ts

fix(gateway): harden canvas auth with session capabilities

2026-02-19 15:51:22 +01:00

channel-health-monitor.test.ts

perf(test): reduce channel health monitor check slack

2026-02-18 22:39:57 +00:00

channel-health-monitor.ts

style: align formatting with oxfmt 0.33

2026-02-18 01:34:35 +00:00

chat-abort.test.ts

Gateway/Control UI: preserve partial output on abort (#15026)

2026-02-15 16:55:28 -08:00

chat-abort.ts

Gateway/Control UI: preserve partial output on abort (#15026)

2026-02-15 16:55:28 -08:00

chat-attachments.test.ts

test(gateway): extract shared parse warning helper

2026-02-21 23:32:32 +00:00

chat-attachments.ts

refactor(channels): dedupe transport and gateway test scaffolds

2026-02-16 14:59:31 +00:00

chat-sanitize.test.ts

fix: hide synthetic untrusted metadata in chat history

2026-02-21 19:26:04 +01:00

chat-sanitize.ts

fix: hide synthetic untrusted metadata in chat history

2026-02-21 19:26:04 +01:00

client.test.ts

refactor(gateway): unify credential precedence across entrypoints

2026-02-22 18:55:44 +01:00

client.ts

refactor(gateway): unify credential precedence across entrypoints

2026-02-22 18:55:44 +01:00

client.watchdog.test.ts

test: move gateway client watchdog suite out of e2e

2026-02-22 11:34:50 +00:00

config-reload.test.ts

refactor: split config reload flow and test harness

2026-02-22 15:38:23 +01:00

config-reload.ts

refactor: split config reload flow and test harness

2026-02-22 15:38:23 +01:00

control-plane-audit.ts

fix: harden gateway control-plane restart protections

2026-02-19 14:30:15 +01:00

control-plane-rate-limit.ts

fix(security): harden gateway command/audit guardrails

2026-02-22 08:45:48 +01:00

control-ui-contract.ts

refactor(gateway): share Control UI bootstrap contract and CSP

2026-02-16 03:50:39 +01:00

control-ui-csp.test.ts

refactor(gateway): share Control UI bootstrap contract and CSP

2026-02-16 03:50:39 +01:00

control-ui-csp.ts

refactor(gateway): share Control UI bootstrap contract and CSP

2026-02-16 03:50:39 +01:00

control-ui-shared.ts

fix(security): harden avatar validation and size limits

2026-02-22 08:35:32 +01:00

control-ui.http.test.ts

fix(gateway): harden control-ui avatar reads

2026-02-22 22:40:22 +01:00

control-ui.ts

refactor(gateway): share safe avatar file open checks

2026-02-22 23:12:45 +01:00

credential-precedence.parity.test.ts

refactor(test): dedupe gateway and web scaffolding

2026-02-22 20:04:51 +00:00

credentials.test.ts

refactor(test): dedupe gateway and web scaffolding

2026-02-22 20:04:51 +00:00

credentials.ts

refactor(gateway): unify credential precedence across entrypoints

2026-02-22 18:55:44 +01:00

device-auth.ts

refactor(gateway)!: remove legacy v1 device-auth handshake

2026-02-22 09:27:03 +01:00

events.ts

refactor: unify restart gating and update availability sync

2026-02-19 10:00:41 +01:00

exec-approval-manager.ts

fix(gateway): fail fast exec approvals when no approvers are reachable

2026-02-22 22:24:27 +01:00

gateway-cli-backend.live.test.ts

test(gateway): dedupe agent payload and stream fixtures

2026-02-19 09:22:16 +00:00

gateway-config-prompts.shared.ts

refactor(gateway): share tailscale prompt constants

2026-02-15 18:06:48 +00:00

gateway-connection.test-mocks.ts

fix(gateway): annotate connection test mocks

2026-02-23 11:47:27 +05:30

gateway-misc.test.ts

test(gateway): dedupe control-ui fixture setup and cover query asset 404

2026-02-21 21:40:39 +00:00

gateway-models.profiles.live.test.ts

feat: Provider/Mistral full support for Mistral on OpenClaw 🇫🇷 (#23845)

2026-02-23 00:03:56 +00:00

gateway.test.ts

test: reclassify gateway local suites from e2e

2026-02-22 11:48:46 +00:00

hooks-mapping.test.ts

test: dedupe gateway browser discord and channel coverage

2026-02-22 17:11:54 +00:00

hooks-mapping.ts

fix(security): block hook transform symlink escapes

2026-02-22 10:18:05 +01:00

hooks.test.ts

refactor(test): dedupe gateway and web scaffolding

2026-02-22 20:04:51 +00:00

hooks.ts

refactor(channels): dedupe hook and monitor execution paths

2026-02-22 21:19:09 +00:00

http-auth-helpers.test.ts

refactor(test): dedupe gateway and web scaffolding

2026-02-22 20:04:51 +00:00

http-auth-helpers.ts

refactor(gateway): harden proxy client ip resolution

2026-02-21 13:36:23 +01:00

http-common.ts

security: add baseline security headers to gateway HTTP responses (#10526)

2026-02-19 03:28:24 -08:00

http-endpoint-helpers.test.ts

refactor(gateway): dedupe json endpoint prelude

2026-02-15 13:24:37 +00:00

http-endpoint-helpers.ts

refactor(gateway): harden proxy client ip resolution

2026-02-21 13:36:23 +01:00

http-utils.ts

style: align formatting with oxfmt 0.33

2026-02-18 01:34:35 +00:00

live-image-probe.ts

refactor: consolidate PNG encoder and safeParseJson utilities (#12457)

2026-02-09 00:21:54 -08:00

live-tool-probe-utils.test.ts

test: tighten mistral media and onboarding coverage

2026-02-23 00:19:05 +00:00

live-tool-probe-utils.ts

feat: Provider/Mistral full support for Mistral on OpenClaw 🇫🇷 (#23845)

2026-02-23 00:03:56 +00:00

method-scopes.test.ts

fix(security): centralize owner-only tool gating and scope maps

2026-02-19 15:29:23 +01:00

method-scopes.ts

Gateway/UI: data-driven agents tools catalog with provenance (openclaw#24199) thanks @Takhoffman

2026-02-22 23:55:59 -06:00

net.test.ts

refactor(security): unify local-host and tailnet CIDR checks

2026-02-22 17:20:27 +01:00

net.ts

refactor(security): unify local-host and tailnet CIDR checks

2026-02-22 17:20:27 +01:00

node-command-policy.ts

fix(gateway): block node.invoke exec approvals

2026-02-14 19:22:37 +01:00

node-invoke-sanitize.ts

style: align formatting with oxfmt 0.33

2026-02-18 01:34:35 +00:00

node-invoke-system-run-approval.test.ts

fix(security): harden and refactor system.run command resolution

2026-02-21 11:49:38 +01:00

node-invoke-system-run-approval.ts

fix(security): harden and refactor system.run command resolution

2026-02-21 11:49:38 +01:00

node-registry.ts

chore: Enable "experimentalSortImports" in Oxfmt and reformat all imorts.

2026-02-01 10:03:47 +09:00

open-responses.schema.ts

feat(gateway): implement OpenResponses /v1/responses endpoint phase 2

2026-01-20 07:37:01 +00:00

openai-http.test.ts

chore: merge origin/main into main

2026-02-22 13:42:52 +00:00

openai-http.ts

fix(gateway): tighten openai-http edge handling

2026-02-22 11:29:31 +00:00

openresponses-http.test.ts

test: reclassify gateway local suites from e2e

2026-02-22 11:48:46 +00:00

openresponses-http.ts

test: optimize redundant suites for faster runtime

2026-02-23 13:57:34 +00:00

openresponses-parity.test.ts

test: optimize redundant suites for faster runtime

2026-02-23 13:57:34 +00:00

openresponses-prompt.ts

test: optimize redundant suites for faster runtime

2026-02-23 13:57:34 +00:00

origin-check.test.ts

fix: harden control ui framing + ws origin

2026-02-03 16:00:57 -08:00

origin-check.ts

refactor(gateway): share host header parsing

2026-02-15 16:15:53 +00:00

probe-auth.ts

refactor(gateway): unify credential precedence across entrypoints

2026-02-22 18:55:44 +01:00

probe.test.ts

Gateway: align pairing scope checks for read access

2026-02-20 05:12:05 +00:00

probe.ts

Gateway: align pairing scope checks for read access

2026-02-20 05:12:05 +00:00

role-policy.test.ts

refactor(gateway): extract connect and role policy logic

2026-02-21 19:47:22 +01:00

role-policy.ts

refactor(gateway): extract connect and role policy logic

2026-02-21 19:47:22 +01:00

server-broadcast.ts

style: align formatting with oxfmt 0.33

2026-02-18 01:34:35 +00:00

server-browser.ts

chore: Enable "curly" rule to avoid single-statement if confusion/errors.

2026-01-31 16:19:20 +09:00

server-channels.test.ts

perf(test): tighten fake timer windows in channel restart tests

2026-02-18 22:11:56 +00:00

server-channels.ts

style: align formatting with oxfmt 0.33

2026-02-18 01:34:35 +00:00

server-chat.agent-events.test.ts

test: dedupe gateway browser discord and channel coverage

2026-02-22 17:11:54 +00:00

server-chat.ts

fix(gateway): strip inline directive tags from displayed text

2026-02-21 20:08:55 +01:00

server-close.ts

feat(update): add core auto-updater and dry-run preview

2026-02-22 17:11:36 +01:00

server-constants.ts

fix(canvas): port remaining iOS branch stability fixes (#18228)

2026-02-16 16:42:28 +00:00

server-cron.test.ts

fix(ssrf): centralize host/ip block checks

2026-02-22 15:41:41 +01:00

server-cron.ts

fix(cron): split run and delivery status tracking

2026-02-22 20:19:23 +01:00

server-discovery-runtime.ts

refactor: rename to openclaw

2026-01-30 03:16:21 +01:00

server-discovery.test.ts

test(core): continue mock reset reductions in auth, gateway, npm install

2026-02-22 08:28:50 +00:00

server-discovery.ts

chore: Enable "curly" rule to avoid single-statement if confusion/errors.

2026-01-31 16:19:20 +09:00

server-http.hooks-request-timeout.test.ts

test: dedupe fixtures and test harness setup

2026-02-23 05:45:54 +00:00

server-http.ts

refactor(channels): dedupe hook and monitor execution paths

2026-02-22 21:19:09 +00:00

server-lanes.ts

style: align formatting with oxfmt 0.33

2026-02-18 01:34:35 +00:00

server-maintenance.ts

style: align formatting with oxfmt 0.33

2026-02-18 01:34:35 +00:00

server-methods-list.ts

Gateway/UI: data-driven agents tools catalog with provenance (openclaw#24199) thanks @Takhoffman

2026-02-22 23:55:59 -06:00

server-methods.control-plane-rate-limit.test.ts

refactor(test): dedupe gateway and web scaffolding

2026-02-22 20:04:51 +00:00

server-methods.ts

Gateway/UI: data-driven agents tools catalog with provenance (openclaw#24199) thanks @Takhoffman

2026-02-22 23:55:59 -06:00

server-mobile-nodes.ts

chore: Enable "curly" rule to avoid single-statement if confusion/errors.

2026-01-31 16:19:20 +09:00

server-model-catalog.ts

refactor(gateway): split server runtime

2026-01-14 09:11:21 +00:00

server-node-events-types.ts

refactor: remove bridge protocol

2026-01-19 10:08:29 +00:00

server-node-events.test.ts

chore(gateway): cover denied notifyOnExit path and clarify help

2026-02-22 13:14:08 +01:00

server-node-events.ts

refactor: extract shared dedupe helpers for runtime paths

2026-02-23 05:43:43 +00:00

server-node-subscriptions.ts

chore: Enable "curly" rule to avoid single-statement if confusion/errors.

2026-01-31 16:19:20 +09:00

server-plugins.test.ts

chore: Fix types in tests 38/N.

2026-02-17 15:50:07 +09:00

server-plugins.ts

style: align formatting with oxfmt 0.33

2026-02-18 01:34:35 +00:00

server-reload-handlers.ts

refactor: unify restart gating and update availability sync

2026-02-19 10:00:41 +01:00

server-restart-deferral.test.ts

perf(test): cut gateway unit suite overhead

2026-02-16 00:18:26 +00:00

server-restart-sentinel.ts

fix(types): align restart sentinel and typing test mocks

2026-02-18 18:25:25 +00:00

server-runtime-config.test.ts

test: fix flaky auth tests when OPENCLAW_GATEWAY_TOKEN is present

2026-02-22 15:17:37 +01:00

server-runtime-config.ts

fix(gateway): require loopback proxy IP for trusted-proxy + bind=loopback (#22082)

2026-02-20 18:03:53 +00:00

server-runtime-state.ts

style: align formatting with oxfmt 0.33

2026-02-18 01:34:35 +00:00

server-session-key.ts

chore: Enable "curly" rule to avoid single-statement if confusion/errors.

2026-01-31 16:19:20 +09:00

server-shared.ts

refactor(gateway): split server helpers

2026-01-03 19:37:09 +01:00

server-startup-log.test.ts

fix(gateway): unify listen startup log across bind hosts

2026-02-22 13:17:25 +01:00

server-startup-log.ts

fix(gateway): unify listen startup log across bind hosts

2026-02-22 13:17:25 +01:00

server-startup-memory.test.ts

test(core): trim reset usage in gateway and install source specs

2026-02-22 08:25:09 +00:00

server-startup-memory.ts

Memory/QMD: harden multi-collection search and embed scheduling

2026-02-20 19:41:51 -08:00

server-startup.ts

refactor(gateway): share gmail watcher startup flow

2026-02-18 17:48:02 +00:00

server-tailscale.ts

chore: migrate to oxlint and oxfmt

2026-01-14 15:02:19 +00:00

server-utils.ts

chore: Enable "curly" rule to avoid single-statement if confusion/errors.

2026-01-31 16:19:20 +09:00

server-wizard-sessions.ts

chore: Enable "curly" rule to avoid single-statement if confusion/errors.

2026-01-31 16:19:20 +09:00

server-ws-runtime.ts

style: align formatting with oxfmt 0.33

2026-02-18 01:34:35 +00:00

server.agent.gateway-server-agent-a.test.ts

refactor(test): dedupe gateway and web scaffolding

2026-02-22 20:04:51 +00:00

server.agent.gateway-server-agent-b.test.ts

refactor(test): dedupe gateway and web scaffolding

2026-02-22 20:04:51 +00:00

server.agent.gateway-server-agent.mocks.ts

refactor: extract shared dedupe helpers for runtime paths

2026-02-23 05:43:43 +00:00

server.auth.test.ts

fix(gateway): auto-approve loopback scope upgrades

2026-02-22 22:11:50 +01:00

server.canvas-auth.test.ts

refactor(test): dedupe gateway and web scaffolding

2026-02-22 20:04:51 +00:00

server.channels.test.ts

refactor(test): dedupe gateway and web scaffolding

2026-02-22 20:04:51 +00:00

server.chat.gateway-server-chat-b.test.ts

test: trim gateway fixture sizes and preload message command

2026-02-22 17:06:34 +00:00

server.chat.gateway-server-chat.test.ts

refactor: extract gateway transcript append helper

2026-02-22 14:44:19 +00:00

server.config-apply.test.ts

test: reclassify gateway local suites from e2e

2026-02-22 11:48:46 +00:00

server.config-patch.test.ts

test: dedupe fixtures and test harness setup

2026-02-23 05:45:54 +00:00

server.cron.test.ts

test: dedupe fixtures and test harness setup

2026-02-23 05:45:54 +00:00

server.e2e-registry-helpers.ts

refactor(channels): dedupe transport and gateway test scaffolds

2026-02-16 14:59:31 +00:00

server.e2e-ws-harness.ts

test: reclassify gateway local suites from e2e

2026-02-22 11:48:46 +00:00

server.health.test.ts

test: reclassify gateway local suites from e2e

2026-02-22 11:48:46 +00:00

server.hooks.test.ts

test: move gateway server integration suites out of e2e

2026-02-22 11:33:27 +00:00

server.impl.ts

fix(gateway): fail fast exec approvals when no approvers are reachable

2026-02-22 22:24:27 +01:00

server.ios-client-id.test.ts

test: move gateway server integration suites out of e2e

2026-02-22 11:33:27 +00:00

server.models-voicewake-misc.test.ts

refactor(test): dedupe gateway and web scaffolding

2026-02-22 20:04:51 +00:00

server.node-invoke-approval-bypass.test.ts

test: close bootstrap ws in approval bypass suite

2026-02-22 12:55:22 +00:00

server.plugin-http-auth.test.ts

refactor(channels): dedupe transport and gateway test scaffolds

2026-02-16 14:59:31 +00:00

server.reload.test.ts

test: move gateway rpc/local suites out of e2e

2026-02-22 11:31:42 +00:00

server.roles-allowlist-update.test.ts

test: move gateway server integration suites out of e2e

2026-02-22 11:33:27 +00:00

server.sessions-send.test.ts

test: dedupe gateway browser discord and channel coverage

2026-02-22 17:11:54 +00:00

server.sessions.gateway-server-sessions-a.test.ts

test: reclassify gateway local suites from e2e

2026-02-22 11:48:46 +00:00

server.skills-status.test.ts

test: move gateway rpc/local suites out of e2e

2026-02-22 11:31:42 +00:00

server.talk-config.test.ts

test: dedupe gateway browser discord and channel coverage

2026-02-22 17:11:54 +00:00

server.tools-catalog.test.ts

Gateway/UI: data-driven agents tools catalog with provenance (openclaw#24199) thanks @Takhoffman

2026-02-22 23:55:59 -06:00

server.ts

chore: migrate to oxlint and oxfmt

2026-01-14 15:02:19 +00:00

session-preview.test-helpers.ts

refactor(gateway-test): share preview transcript fixture

2026-02-18 17:01:22 +00:00

session-utils.fs.test.ts

test(gateway): dedupe transcript seed fixtures in fs session tests

2026-02-22 07:44:57 +00:00

session-utils.fs.ts

fix(gateway): strip inline directive tags from displayed text

2026-02-21 20:08:55 +01:00

session-utils.test.ts

refactor(test): dedupe gateway and web scaffolding

2026-02-22 20:04:51 +00:00

session-utils.ts

refactor(gateway): share safe avatar file open checks

2026-02-22 23:12:45 +01:00

session-utils.types.ts

fix: /status shows incorrect context percentage — totalTokens clamped to contextTokens (#15114) (#15133)

2026-02-12 23:52:19 -05:00

sessions-patch.test.ts

test: dedupe gateway auth and sessions patch coverage

2026-02-18 05:30:59 +00:00

sessions-patch.ts

fix(cli): display correct model for sub-agents in sessions list (#18660)

2026-02-17 23:59:20 -05:00

sessions-resolve.ts

fix(gateway): normalize session key casing to prevent ghost sessions (#12846)

2026-02-13 20:42:24 +01:00

startup-auth.test.ts

test: dedupe gateway browser discord and channel coverage

2026-02-22 17:11:54 +00:00

startup-auth.ts

fix: enforce hooks token separation from gateway auth (#20813)

2026-02-19 02:48:08 -08:00

test-helpers.agent-results.ts

test(gateway): dedupe agent payload and stream fixtures

2026-02-19 09:22:16 +00:00

test-helpers.e2e.ts

refactor(gateway)!: remove legacy v1 device-auth handshake

2026-02-22 09:27:03 +01:00

test-helpers.mocks.ts

fix: remove hardcoded disableBlockStreaming to honor agent config for TUI (#19693)

2026-02-18 16:25:59 -05:00

test-helpers.openai-mock.ts

test(gateway): reuse shared openai timeout e2e helpers

2026-02-22 07:44:57 +00:00

test-helpers.server.ts

refactor(test): dedupe gateway and web scaffolding

2026-02-22 20:04:51 +00:00

test-helpers.ts

refactor(src): split oversized modules

2026-01-14 01:17:56 +00:00

test-http-response.ts

refactor(channels): dedupe transport and gateway test scaffolds

2026-02-16 14:59:31 +00:00

test-openai-responses-model.ts

refactor(channels): dedupe transport and gateway test scaffolds

2026-02-16 14:59:31 +00:00

test-temp-config.ts

refactor(channels): dedupe transport and gateway test scaffolds

2026-02-16 14:59:31 +00:00

test-with-server.ts

refactor(channels): dedupe transport and gateway test scaffolds

2026-02-16 14:59:31 +00:00

tools-invoke-http.test.ts

refactor(core): dedupe gateway runtime and config tests

2026-02-22 07:44:57 +00:00

tools-invoke-http.ts

fix(security): centralize WhatsApp outbound auth and return 403 tool auth errors

2026-02-21 14:31:01 +01:00

ws-log.test.ts

fix: add agent context to ws logs

2026-01-17 20:37:36 +00:00

ws-log.ts

refactor(channels): dedupe transport and gateway test scaffolds

2026-02-16 14:59:31 +00:00

ws-logging.ts

Gateway: optimize ws logs in normal mode

2025-12-18 13:27:52 +00:00