openclaw - 💡(How to fix) Fix [Bug]: Control UI sends null client.id/client.mode through Cloudflare tunnel [1 comments, 2 participants]

Bug type: Bug

Summary: Control UI sends null client.id and client.mode in WebSocket connect frame when loaded through a Cloudflare tunnel, causing a schema validation error. Manual WebSocket with identical params succeeds.

Steps to reproduce:

1. Install OpenClaw 2026.5.4 via npm on Windows 10
2. Configure Cloudflare tunnel: agent.noahiberman.com → http://localhost:18789
3. Add https://agent.noahiberman.com to gateway.controlUi.allowedOrigins
4. Open https://agent.noahiberman.com in browser
5. Enter auth token and click Connect
6. Observe "invalid connect params: at /client/id: must be equal to one of the allowed values; at /client/mode: must be equal to one of the allowed values"

Expected behavior: Control UI connects successfully, as it does at http://127.0.0.1:18789

Actual behavior: Connection fails with schema validation error. Gateway logs show origin=https://www.noahiberman.com but connect frame has no client fields populated.

Version: 2026.5.4

Operating system: Windows 10.0.19045

Install method: npm global

Logs and evidence:

Local success (127.0.0.1):

"client":"openclaw-control-ui","mode":"webchat","version":"2026.5.4","platform":"Win32"

Remote failure (agent.noahiberman.com):

"origin":"https://www.noahiberman.com" ... "handshakeError":"invalid connect params: at /client/id: must be equal to one of the allowed values; at /client/mode: must be equal to one of the allowed values"

Manual WebSocket test through tunnel succeeds with identical params.

Impact:

• Severity: High (blocks all remote Control UI access through tunnels/proxies)
• Frequency: Always
• Consequence: Cannot access Control UI from any device except localhost

Additional info:

• Also tested with openclaw.noahiberman.com — same error
• Clearing browser cache, localStorage, service workers does not fix
• Gateway auth token is correct
• dangerouslyDisableDeviceAuth: true is set