Peter Steinberger a97bdfb687 feat(agents): narrow gateway tool to read-only config ...

Phase 3 of #107237. Removes config.apply/config.patch/restart from the
regular-agent gateway tool (mirroring Phase 2's update.run removal); only
config.get and config.schema.lookup reads remain. Persistent config changes
and restarts now go exclusively through the human-approved openclaw
delegation path — closing the last unmediated agent config-write surface.
gateway stays owner-only/control-plane gated (config reads expose secrets and
host topology). Legacy setups can re-enable writes via the existing per-agent
tool allowlist; no new config key. Net -2271 LOC.

Refs #107237

2026-07-15 01:56:31 -07:00

..

Sources

feat(agents): narrow gateway tool to read-only config

2026-07-15 01:56:31 -07:00

Tests/OpenClawKitTests

fix: connect resumed native terminals reliably (#107688)

2026-07-14 19:18:19 -07:00

Package.swift

refactor(apple): share chat gateway payload mapping (#106154)

2026-07-13 02:39:01 -07:00