The 2026.2.19-2 release tightened scope enforcement on the gateway
handshake, but the default CLI operator scopes only included admin,
approvals, and pairing. Cron announce delivery and sub-agent result
delivery use methods gated behind operator.write (e.g. "send", "poll"),
causing a scope-upgrade rejection: `gateway closed (1008): pairing
required`.
Add operator.read and operator.write to the default scope set across all
runtime bundles (Node.js, browser Control UI, macOS CLI, OpenClawKit).
Fixes#21787
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>