fix: patch paired device scopes for OpenClaw 2026.2.19+ compatibility

- Add operator.write and operator.read to paired devices on startup
- Fixes 'missing scope: operator.write' A2A dispatch error
- Known OpenClaw bug: auto-pair doesn't grant new scopes (issue #23006)
- Force rebuild (v3.8)

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Dockerfile

@@ -1,4 +1,4 @@
-# OpenClaw on Hugging Face Spaces — Pre-built image (v3.7)
+# OpenClaw on Hugging Face Spaces — Pre-built image (v3.8)
 # Uses official pre-built image to avoid 30+ minute builds on cpu-basic
 
 # ── Stage 1: Pull pre-built OpenClaw ─────────────────────────────────────────

scripts/sync_hf.py

@@ -562,6 +562,28 @@ class OpenClawFullSync:
                 json.dump(data, f, indent=2)
             print("[SYNC] Config patched and saved.")
 
+            # Fix paired devices scopes (OpenClaw 2026.2.19+ requires operator.write/read)
+            paired_path = Path(OPENCLAW_DIR) / "devices" / "paired.json"
+            required_scopes = {"operator.admin", "operator.approvals", "operator.pairing", "operator.write", "operator.read"}
+            if paired_path.exists():
+                try:
+                    with open(paired_path, "r") as f:
+                        devices = json.load(f)
+                    changed = False
+                    if isinstance(devices, list):
+                        for dev in devices:
+                            if isinstance(dev, dict) and "scopes" in dev:
+                                existing = set(dev["scopes"])
+                                if not required_scopes.issubset(existing):
+                                    dev["scopes"] = list(required_scopes | existing)
+                                    changed = True
+                    if changed:
+                        with open(paired_path, "w") as f:
+                            json.dump(devices, f, indent=2)
+                        print(f"[SYNC] Fixed paired device scopes: added operator.write/read")
+                except Exception as e:
+                    print(f"[SYNC] Warning: could not fix paired devices: {e}")
+
             # Verify write
             with open(config_path, "r") as f:
                 verify_data = json.load(f)