Summary

OpenClaw 2026.3.13 has multiple critical regressions:

1. CLI authentication completely broken
2. BlueBubbles webhook route fails to register silently
3. Memory leak in doctor command

Affected Version

2026.3.13

Issue 1: CLI Connection Failure

CLI commands fail to connect to the gateway with error:

Gateway: unreachable (missing scope: operator.read)

Evidence:

• The CLI device (3fd7c77d7b0f98165be9fe79443a869425fab8fc4f550fb1da6bf4b5fc5accb5) has all 5 required scopes:

  • operator.read ✓
  • operator.write ✓
  • operator.admin ✓
  • operator.approvals ✓
  • operator.pairing ✓

• Gateway logs show:

[ws] ⇄ res ✗ status 0ms errorCode=INVALID_REQUEST errorMessage=missing scope: operator.read
[ws] ⇄ res ✗ config.get 0ms errorCode=INVALID_REQUEST errorMessage=missing scope: operator.read

• Control UI (webchat) works fine - it connects and operates normally

Issue 2: BlueBubbles Webhook Route Not Registered

Critical Bug: The BlueBubbles webhook route fails to register, making the entire webhook integration non-functional.

Test Results:

• Gateway /health endpoint: ✅ 200 OK (gateway HTTP layer works)
• BlueBubbles /bluebubbles-webhook endpoint: ❌ 404 Not Found (route missing)
• Tested with Control UI disabled: ❌ Still 404 (not Control UI routing bug)

Evidence:

• Gateway logs claim: "BlueBubbles webhook listening on /bluebubbles-webhook"
• But HTTP requests to the endpoint return 404 Not Found
• Route registration fails silently
• This prevents BlueBubbles from delivering any webhooks

Test Method:

# Test gateway running on port 18889 with BlueBubbles enabled
curl -X POST "http://127.0.0.1:18889/bluebubbles-webhook?password=xyz" -d '{}'
# Response: 404 Not Found

Issue 3: Additional Problems Found

• Memory leak in openclaw doctor command - crashes with "JavaScript heap out of memory"
• 66MB sessions.json file causing memory bloat and slow operations

Workaround

All issues are specific to 2026.3.13. System works fine on 2026.2.26.

Steps to Reproduce

For CLI scope issue:

1. Upgrade OpenClaw to 2026.3.13
2. Run any CLI command (e.g., openclaw status)
3. Gateway shows "unreachable (missing scope: operator.read)"

For BlueBubbles webhook:

1. Upgrade OpenClaw to 2026.3.13 with BlueBubbles enabled
2. Start gateway
3. POST to http://localhost:18789/bluebubbles-webhook
4. Response: 404 Not Found (expected: 400 Bad Request for invalid payload)

Environment

• macOS 26.3.1 (arm64)
• Node 25.6.1
• OpenClaw 2026.3.13