From 18f4a85097b7874491cf780251214fccc7dcb0cf Mon Sep 17 00:00:00 2001 From: cloudsigma Date: Mon, 25 May 2026 15:57:41 +0000 Subject: [PATCH] fix: register taas.autorouter.lastRoute under operator.read scope Without an explicit scope, the gateway auth path defaults plugin RPC methods to operator.admin (see method-scopes.ts:authorizeOperatorScopesForMethod). That blocked the Studio (which connects with operator.read+write but not admin) and CLI calls from invoking the method. Setting opts.scope=operator.read makes the read-only autorouter lookup available to any Studio operator. --- index.ts | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/index.ts b/index.ts index 626b37a..a8efd14 100644 --- a/index.ts +++ b/index.ts @@ -872,7 +872,8 @@ export default { directSessionId ?? resolveSessionId(workspaceDir).sessionId const captured = getLastRouteForSession(resolvedSessionId) respond(true, { sessionId: resolvedSessionId, capture: captured }) - } + }, + { scope: "operator.read" } ) }, }