Native Windows Gateway: browser control blocked by listener-owner verification

Open
#1,975 2 comments 1 reaction 0 assignees View on GitHub

Maintainers usually reply within 1 day

Nobody has claimed this yet.

Assessment

Difficulty
4/5
Estimated time
3-5 days
Newbie friendliness
18/100
Issue type
Bug
Clarity
Mostly clear
Activity status
Active
Tech stack
csharp

Research direction

The failing check is the non-SSH browser authorization callback, which reportedly calls ResolveManagedDistroName and gets null for native-package Gateways; the issue cites related reports #1333 and #1691 for context. Start by reading the listener-owner verification path and the code that produces the 'could not be verified' message, then reproduce with a native Gateway setup. Done means native Gateways pass ownership verification without disabling the check, with existing settings preserved.

Written by the indexing model from the issue text.

Description

clawsweeper:needs-product-decision clawsweeper:needs-security-review clawsweeper:no-new-fix-pr clawsweeper:source-repro impact:security impact:ux-release-blocker issue-rating: 🦞 diamond lobster P0

Windows Companion 2026.9.8-1; Gateway MSIX 2026.10.900.0; CLI 2026.10.9. Native isolated-session-v1 setup, without SSH or a managed WSL Gateway.

Agent chat works and browser.proxy is approved. However, requesting tabs with the user browser profile fails: “Browser control authentication was blocked because the local listener owner could not be verified.”

Restarting the Gateway restored basic connectivity. Changing the security preset from Locked Down to Recommended did not resolve the browser error.

Source review suggests that the non-SSH browser authorization callback requires ResolveManagedDistroName, while that method returns null for native-package Gateways. Could this reject a valid native Gateway? This is our analysis, not a maintainer-confirmed diagnosis.

Please confirm a supported fix or compatible version combination that preserves existing conversations and settings without disabling ownership verification. Related reports: #1333 and #1691.

Dominant language
C#
Stars
2.2k
Forks
336
Avg merge
3d 20h
Merged PRs (30d)
163

Getting set up

  • No Dockerfile or Docker Compose file
  • Has a pull request template
  • No contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

More from openclaw/openclaw-windows-node

All issues in openclaw/openclaw-windows-node

Similar issues

More C# issues

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.