OpenClaw Live Updater

Keep /Users/steipete/openclaw a read-only-to-the-agent deployment mirror: clean, standalone, full, on main, and fast-forwarded only. Make every repair in the controlling Codex project worktree.

Boundaries

• Report only in the controlling Codex thread. Never send Slack, Discord, email, or other external messages.
• Never release, tag, bump versions, publish npm, create a GitHub Release, rotate credentials, or weaken a gate.
• Escalate only irreversible or materially risky security, privacy, auth, destructive migration/data-loss, protocol-version, credential-rotation, dependency patch/override, or product choices.
• Diagnose ordinary update, runtime, app, CI, test, and release-validation failures; fix them through a focused PR; prove exact head; land with scripts/pr.
• Never edit, stash, reset, clean, or create a branch in the live mirror.

Fast Update And Maintenance

1. Run the deterministic updater and retain its JSON:

   node .agents/skills/openclaw-live-updater/scripts/update-main.mjs