What I made
I just published oc-config-gate. It is an OpenClaw plugin. It lets a trusted agent propose an edit to the OpenClaw config file without touching the file or restarting the gateway itself. The code is at https://github.com/kleinpanic/oc-config-gate.
It replaces my older openclaw-oc-restart repo.
How it works
The agent stages a change as an RFC 7396 merge patch. The plugin posts an approval card on Discord. Approve applies the patch. Deny discards it.
There are two tools, oc_config_stage and oc_config_apply. A before_tool_call hook called oc-config-gate-tool-guard blocks direct config edits, config RPCs and raw restarts. So the agent has no side door.
The apply step does a lot of checking before it writes. It re-checks the base hash, validates the patch, runs safety checks, writes, blesses the result and audits it. A restart is optional. When it runs, it uses openclaw gateway restart --safe --wait 5m.
Install
It needs Node 22 or newer and OpenClaw 2026.5.7 or newer.
git clone https://github.com/kleinpanic/oc-config-gate
cd oc-config-gate
npm install
npm test
openclaw plugins install --link "$PWD"
openclaw plugins inspect oc-config-gate --runtime --json
The README says 13 tests pass. The docs are at https://kleinpanic.github.io/oc-config-gate/ and there is a wiki mirror too.
What is next
This is the first release, and all four commits landed in about 15 minutes. If it blocks something it should not, tell me.
P.S Thanks for reading. Consider subbing to the RSS feed.
Klein Panic