Bug type

Regression (worked before 2026.5.2, now fails)

Summary

Browser is configured (browser.enabled: true), plugin is enabled, headless Chromium is running and healthy (openclaw browser status shows running), but the agent session does not receive a browser tool in its available tools list even with tools.profile: "full".

Environment

• OpenClaw version: 2026.5.2 (8b2a6e5)
• OS: Linux 6.12.73+deb13-amd64 (x64)
• Gateway mode: local
• Channel: Telegram direct chat
• Config: tools.profile: "full", browser.enabled: true, browser.defaultProfile: "openclaw"

Steps to reproduce

1. Configure tools.profile: "full" and browser.enabled: true
2. Confirm browser is running: openclaw browser status → healthy
3. Start an agent session
4. Agent does not have browser in its tool list

Root cause analysis

The regression was introduced by the plugin tool filtering refactor on May 1-2, 2026. Specifically:

1. 7641783d6b "fix: enforce plugin tool manifest contracts" — added contracts.tools to browser plugin manifest
2. 3cf1dd982b "fix: gate plugin tools from manifest availability" — changed resolvePluginTools to filter by scopedPluginIds, removed addToolPluginIdsFromRegistry
3. 1466878c36 "refactor: cache plugin tool descriptors" — added descriptor caching path with isOptionalToolAllowed filter

The core issue: CORE_TOOL_PROFILES["full"] = {} (empty allow/deny) → resolveCoreToolProfilePolicy("full") returns undefined → no explicit allow list → pluginToolAllowlist is empty. The new filtering chain (manifest availability + descriptor caching) incorrectly excludes the browser plugin tool when the allowlist is empty, even though full profile should grant all tools.

For comparison, tools.profile: "coding" documented exclusion of browser is expected behavior, but full should include everything.

Expected behavior

With tools.profile: "full", the browser tool should be available to the agent when browser is configured and running.

Actual behavior

Browser tool is missing from agent tool list. Agent tools are: read, write, edit, exec, process, message, sessions_list, sessions_history, sessions_send, sessions_spawn, sessions_yield, subagents, session_status, web_search, web_fetch, image, image_generate, music_generate, video_generate, pdf, tts, agents_list.

Config snippet

{
  "browser": { "enabled": true, "defaultProfile": "openclaw" },
  "tools": { "profile": "full" },
  "plugins": { "allow": ["browser", ...], "entries": { "browser": { "enabled": true } } }
}

Related

• [Bug]: Browser enabled and running, but browser tool is missing from agent tool list #58628 — same symptom with tools.profile: "coding" (but that is documented behavior; this is about full)
• [Bug]: Agent tool profile restrictions not enforced - exec available despite not in alsoAllow list #47487 — related tool profile filtering regression