#status failed: Error: gateway not connected

1 messages · Page 1 of 1 (latest)

supple pollen
trim heraldBOT
#

Short answer: no, there isn’t a separate TUI token cache/config.
openclaw tui reads the normal config via loadConfig().

Given your report, this is most likely one of these:

  1. CLI config vs service config mismatch (different profile/state dir)
  2. TUI is effectively in URL-override path (when --url is used, it won’t auto-pull token)
  3. gateway.mode is remote, so TUI looks at gateway.remote.token, not gateway.auth.token

Can you run these and paste output?

openclaw --version
openclaw gateway status --deep
openclaw config get gateway.mode
openclaw config get gateway.auth.mode
supple pollen
trim heraldBOT
#

Nice report — this is super useful.

Quick answers to your 4 questions (based on current docs/runtime behavior):

  1. Protected config paths (for config.patch)
  • As far as documented/supported: no user-configurable protected-path list yet.
  • Best supported mitigation right now is to deny control-plane tools for that agent/surface:
  • deny gateway (and usually cron) via tool policy.
  • Relevant doc: https://docs.openclaw.ai/gateway/security (Control plane tools risk section)
  1. Batch-change guardrail
  • There is currently no documented “N restart-required fields touched” guard.
  • Existing safeguards are:
  • control-plane write rate limit (3/60s per deviceId+IP),
  • restart coalescing + cooldown.
  • Doc: https://docs.openclaw.ai/gateway/configuration
#
  1. Restart deferral timeout
  • Yes, this is configurable: gateway.reload.deferralTimeoutMs
  • Default is 300000 (5 min).
  • So you can raise it if you want less mid-run forcing.
  1. MEMORY.md truncation

Given this includes feature requests + stability impact, please open a GitHub issue with that exact report text (it’s excellent as-is):
https://github.com/openclaw/openclaw/issues

#

If you want, I can help you turn it into a minimal repro + expected/actual format before you post.

supple pollen
#

Thanks it did work