PR #58647: fix(agents): include browser in coding profile

• Repository: openclaw/openclaw
• Author: neeravmakwana
• State: open | merged: False
• Link: https://github.com/openclaw/openclaw/pull/58647

Description (problem / solution / changelog)

Summary

• Problem: sessions using tools.profile: "coding" could still miss the browser tool even when browser support was configured and auto-enabled.
• Why it matters: browser-enabled coding sessions lost an expected tool surface, which made the browser integration look broken.
• What changed: added browser to the coding profile allowlist and added focused regression coverage for the coding-profile + browser-configured path.
• What did NOT change (scope boundary): browser plugin loading, browser service startup, and explicit plugin/tool disable behavior.

Change Type (select all)

• Bug fix
• Feature
• Refactor required for the fix
• Docs
• Security hardening
• Chore/infra

Scope (select all touched areas)

• Gateway / orchestration
• Skills / tool execution
• Auth / tokens
• Memory / storage
• Integrations
• API / contracts
• UI / DX
• CI/CD / infra

Linked Issue/PR

• Closes #58628
• Related #58628
• This PR fixes a bug or regression

Root Cause / Regression History (if applicable)

• Root cause: browser config already auto-enabled the bundled browser plugin, but the coding tool profile still omitted browser, so profile filtering removed it from the effective tool list.
• Missing detection / guardrail: there was no regression test covering a browser-configured session running with tools.profile: "coding".
• Prior context (git blame, prior PR, issue, or refactor if known): issue #58628 reported the mismatch between healthy browser runtime status and the missing runtime tool.
• Why this regressed now: the browser tool sits behind the bundled plugin surface, but the coding profile definition did not include it when the effective tool list was filtered.
• If unknown, what was ruled out: plugin auto-enable and bundled browser plugin resolution were both verified separately and still worked.

Regression Test Plan (if applicable)

• Coverage level that should have caught this:
  • Unit test
  • Seam / integration test
  • End-to-end test
  • Existing coverage already sufficient
• Target test or file: src/agents/openclaw-tools.browser-plugin.integration.test.ts
• Scenario the test should lock in: when browser is configured and the coding profile is active, the effective coding tools should still include browser.
• Why this is the smallest reliable guardrail: it exercises the real bundled browser plugin path plus the profile filtering path without requiring a full browser runtime.
• Existing test that already covers this (if any): src/agents/tool-catalog.test.ts now also asserts the coding profile includes browser.
• If no new test is added, why not: N/A

User-visible / Behavior Changes

• Browser-enabled sessions using the coding profile now keep the browser tool available.

Diagram (if applicable)

Before:
[browser configured] -> [coding profile filtering] -> [browser tool dropped]

After:
[browser configured] -> [coding profile filtering includes browser] -> [browser tool available]

Security Impact (required)

• New permissions/capabilities? (Yes/No): No
• Secrets/tokens handling changed? (Yes/No): No
• New/changed network calls? (Yes/No): No
• Command/tool execution surface changed? (Yes/No): Yes
• Data access scope changed? (Yes/No): No
• If any Yes, explain risk + mitigation: this restores the intended browser tool exposure only for browser-configured coding sessions; explicit plugins.entries.browser.enabled = false, plugins.deny, and tool deny policies still block it.

Repro + Verification

Environment

• OS: macOS 15 / darwin 25.3.0
• Runtime/container: local repo checkout via pnpm
• Model/provider: N/A
• Integration/channel (if any): N/A
• Relevant config (redacted): browser.enabled: true, browser.defaultProfile: "openclaw", tools.profile: "coding"

Steps

1. Configure browser support and set tools.profile to coding.
2. Build the effective coding tool list.
3. Check whether browser is present.

Expected

• browser is present in the effective coding tool list.

Actual

• browser was filtered out even though browser support was configured.

Evidence

Attach at least one:

• Failing test/log before + passing after
• Trace/log snippets
• Screenshot/recording
• Perf numbers (if relevant)

Human Verification (required)

• Verified scenarios:
  • Reproduced the missing browser tool with a coding-profile config before the fix.
  • Verified src/agents/tool-catalog.test.ts and src/agents/openclaw-tools.browser-plugin.integration.test.ts pass after the fix.
  • Verified pnpm build passes after the change.
• Edge cases checked:
  • Browser remains omitted when the bundled browser plugin is explicitly disabled.
  • Messaging profile behavior remains unchanged.
• What you did not verify:
  • A live browser roundtrip through a running OpenClaw browser service.
  • Full-repo pnpm check / pnpm test green state, because unrelated existing failures outside this change still block them.

Review Conversations

• I replied to or resolved every bot review conversation I addressed in this PR.
• I left unresolved only the conversations that still need reviewer or maintainer judgment.

If a bot review conversation is addressed by this PR, resolve that conversation yourself. Do not leave bot review conversation cleanup for maintainers.

Compatibility / Migration

• Backward compatible? (Yes/No): Yes
• Config/env changes? (Yes/No): No
• Migration needed? (Yes/No): No
• If yes, exact upgrade steps:

Risks and Mitigations

• Risk: broadening the coding profile could expose browser where maintainers did not intend it.
  • Mitigation: the change is limited to the declared coding profile; browser still requires the plugin/config path to be enabled, and explicit deny/disable settings still take precedence.

Additional Notes

• Broader repo verification is currently blocked by unrelated existing failures in extensions/diffs/src/language-hints.test.ts during pnpm check and src/config/schema.base.generated.test.ts during pnpm test.
• AI-assisted: yes.
• Testing degree: pnpm build, pnpm test -- src/agents/tool-catalog.test.ts src/agents/openclaw-tools.browser-plugin.integration.test.ts, plus direct local repro of the missing-tool behavior before the fix.

Made with Cursor

Changed files

• src/agents/pi-tools.browser-plugin.integration.test.ts (added, +51/-0)
• src/agents/tool-catalog.test.ts (modified, +2/-1)
• src/agents/tool-catalog.ts (modified, +1/-1)