From 23269221e0fdc6704d2e8b4c693e93ffbad89437 Mon Sep 17 00:00:00 2001 From: stevenrick Date: Sat, 4 Apr 2026 19:28:16 -0700 Subject: [PATCH] fix(scripts): allow CLI clients in auto-pair watcher Add 'cli' to ALLOWED_MODES so sandbox-internal CLI commands can connect to the gateway. Related: #1310 Signed-off-by: Steven Rick --- scripts/nemoclaw-start.sh | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/scripts/nemoclaw-start.sh b/scripts/nemoclaw-start.sh index f80c4a272..d2626b783 100755 --- a/scripts/nemoclaw-start.sh +++ b/scripts/nemoclaw-start.sh @@ -190,7 +190,7 @@ HANDLED = set() # Track rejected/approved requestIds to avoid reprocessing # is defense-in-depth, not a trust boundary. PR #690 adds one-shot exit, # timeout reduction, and token cleanup for a more comprehensive fix. ALLOWED_CLIENTS = {'openclaw-control-ui'} -ALLOWED_MODES = {'webchat'} +ALLOWED_MODES = {'webchat', 'cli'} def run(*args): proc = subprocess.run(args, capture_output=True, text=True)