the sun gif man d4b4660026 config: stop automatic writes and guard Nix mutators (#78047) ...

Keep startup-derived plugin enablement, gateway auth tokens, control UI origins, and owner-display secrets runtime-only instead of persisting them into openclaw.json.

Refuse config writers, mutating update/plugin lifecycle commands, and doctor repair/token generation in Nix mode with agent-first nix-openclaw guidance.

Verification:
- pnpm check
- pnpm build
- pnpm test -- src/config/io.write-config.test.ts src/config/mutate.test.ts src/config/io.owner-display-secret.test.ts src/gateway/server-startup-config.recovery.test.ts src/gateway/startup-auth.test.ts src/gateway/startup-control-ui-origins.test.ts src/cli/plugins-cli.install.test.ts src/cli/plugins-cli.policy.test.ts src/cli/plugins-cli.uninstall.test.ts src/cli/plugins-cli.update.test.ts src/cli/update-cli.test.ts src/auto-reply/reply/commands-plugins.install.test.ts src/auto-reply/reply/commands-plugins.test.ts src/commands/onboarding-plugin-install.test.ts src/commands/doctor.runs-legacy-state-migrations-yes-mode-without.e2e.test.ts src/commands/doctor/shared/codex-route-warnings.test.ts src/commands/doctor/repair-sequencing.test.ts src/agents/auth-profile-runtime-contract.test.ts src/auto-reply/reply/agent-runner-execution.test.ts
- GitHub CI green on 05a2c71b90

Co-authored-by: Codex <noreply@openai.com>

2026-05-06 14:43:32 +02:00

..

acp-agents-setup.md

build(plugins): externalize acpx release packages

2026-05-02 08:48:28 +01:00

acp-agents.md

docs: typography hygiene + 2 in-body H1 removals across 5 pages

2026-05-05 19:34:52 -07:00

agent-send.md

docs: tighten architecture, btw, agent-send hygiene

2026-05-05 18:13:16 -07:00

apply-patch.md

docs: typography hygiene + Related CardGroups across 4 pages

2026-05-05 18:36:06 -07:00

brave-search.md

docs(tools/brave-search): remove duplicate H1

2026-05-06 00:03:33 -07:00

browser-control.md

docs: typography hygiene + 1 in-body H1 removal across 6 pages

2026-05-05 20:26:16 -07:00

browser-linux-troubleshooting.md

docs: sentence-case sweep across 10 more pages

2026-04-27 00:03:18 -07:00

browser-login.md

docs: drop in-body H1s and typography hygiene across 4 pages

2026-05-05 18:46:03 -07:00

browser-wsl2-windows-remote-cdp-troubleshooting.md

docs: batch fix filler openings across providers, platforms, install, tools, and pi

2026-04-26 22:07:47 -07:00

browser.md

config: stop automatic writes and guard Nix mutators (#78047)

2026-05-06 14:43:32 +02:00

btw.md

docs: tighten architecture, btw, agent-send hygiene

2026-05-05 18:13:16 -07:00

capability-cookbook.md

docs: consolidate moved docs pages

2026-05-05 17:38:21 +01:00

clawhub.md

docs: typography hygiene across 4 large pages

2026-05-05 19:19:15 -07:00

code-execution.md

docs(tools): rewrite loop detection, code execution, and tighten elevated/skills

2026-05-05 16:49:29 -07:00

creating-skills.md

docs: fix custom skill naming example

2026-04-28 20:15:36 -07:00

diffs.md

refactor: simplify plugin dependency handling

2026-05-01 21:32:22 +01:00

duckduckgo-search.md

docs: drop in-body H1s and typography hygiene across 4 pages

2026-05-05 18:46:03 -07:00

elevated.md

docs(tools): rewrite loop detection, code execution, and tighten elevated/skills

2026-05-05 16:49:29 -07:00

exa-search.md

fix(web-search): support Exa baseUrl

2026-05-02 06:06:40 +01:00

exec-approvals-advanced.md

fix(exec): enforce allowlist argument patterns (#75143)

2026-05-05 18:23:40 -06:00

exec-approvals.md

docs: typography hygiene across 5 pages

2026-05-05 20:04:12 -07:00

exec.md

docs: typography hygiene across 6 pages

2026-05-05 21:04:19 -07:00

firecrawl.md

fix(firecrawl): block unsafe scrape targets

2026-05-02 07:24:40 +01:00

gemini-search.md

fix(gemini): reuse google provider config for web search

2026-05-02 05:15:02 +01:00

grok-search.md

fix(web-search): support provider base url overrides

2026-05-02 03:44:46 +01:00

image-generation.md

docs: typography hygiene + drop one in-body H1 across 5 pages

2026-05-05 19:25:16 -07:00

index.md

docs: consolidate moved docs pages

2026-05-05 17:38:21 +01:00

kimi-search.md

fix(kimi): reject ungrounded web search answers

2026-05-02 07:03:29 +01:00

llm-task.md

fix(plugins): discover alsoAllow plugin tools

2026-05-03 23:46:14 +01:00

lobster.md

docs: typography hygiene across 5 pages

2026-05-05 20:04:12 -07:00

loop-detection.md

docs(tools): rewrite loop detection, code execution, and tighten elevated/skills

2026-05-05 16:49:29 -07:00

media-overview.md

docs: outline unified talk API

2026-05-06 02:39:15 +01:00

minimax-search.md

fix(web-search): include MiniMax in setup detection

2026-05-02 05:59:25 +01:00

multi-agent-sandbox-tools.md

fix(agents): keep OAuth auth read-through

2026-04-29 11:54:28 +01:00

music-generation.md

fix: harden async media completion delivery

2026-05-05 06:13:33 +01:00

ollama-search.md

fix(ollama): honor baseURL provider aliases

2026-04-27 03:28:23 +01:00

pdf.md

docs: Related CardGroups + typography hygiene across 4 pages

2026-05-05 18:56:25 -07:00

perplexity-search.md

docs: typography hygiene + Related CardGroups across 4 pages

2026-05-05 18:36:06 -07:00

plugin.md

config: stop automatic writes and guard Nix mutators (#78047)

2026-05-06 14:43:32 +02:00

reactions.md

Add opt-in reaction tool tracking

2026-05-03 17:44:13 +01:00

searxng-search.md

fix(searxng): retry empty category searches

2026-05-02 08:15:30 +01:00

skills-config.md

docs: typography hygiene across 6 pages (start/tools/nodes/mac/platforms)

2026-05-05 23:14:49 -07:00

skills.md

docs: typography hygiene across 6 pages

2026-05-05 20:34:37 -07:00

slash-commands.md

feat(status): show uptime in chat status

2026-05-04 22:52:00 -07:00

steer.md

docs: add steer command guide

2026-05-03 23:16:37 +01:00

subagents.md

fix(agents): preserve full subagent announce output

2026-05-03 22:33:00 -07:00

tavily.md

docs: remove duplicate H1 where frontmatter title already sets it

2026-04-23 13:11:14 -07:00

thinking.md

docs: typography hygiene + 2 in-body H1 removals across 6 pages

2026-05-05 20:58:10 -07:00

tokenjuice.md

feat(plugins): add harness tool result middleware (#71021)

2026-04-24 12:39:13 -07:00

trajectory.md

fix: bound trajectory runtime flush (#77154)

2026-05-04 09:48:03 +01:00

tts.md

docs: outline unified talk API

2026-05-06 02:39:15 +01:00

video-generation.md

docs: typography hygiene + drop one in-body H1 across 5 pages

2026-05-05 19:25:16 -07:00

web-fetch.md

fix: add trusted env proxy opt-in for web fetch

2026-05-03 22:35:30 +01:00

web.md

fix(network): scope fake-ip SSRF policy to provider hosts

2026-05-03 20:27:39 +01:00