mirror of
https://github.com/openclaw/openclaw.git
synced 2026-08-02 22:01:36 +00:00
b61619e03c
Channel plugins declare package env triggers in manifests, and ambient environment variables count as "channel configured". A dev gateway (gateway run --dev) inherits the operator's shell, so real channel credentials silently configured channels and could connect development instances to live services (observed with reef and a Telegram-range connection during isolated stress testing). Dev mode now drops presence signals whose only sources are env or manifest-env across activation planning, auto-enable, autostart, health recovery, readiness, reloads, and startup warnings. Explicit channels.<id> config still works, --dev-ambient-channels restores the old behavior, and startup logs the suppressed channel ids once. Non-dev gateways are unchanged.