Node Connect

Codex adaptation of the pinned OpenClaw source. Explicit operator selection is required for live update/connection actions.

Lock the client and Gateway

Read the selected deployment owner and record client type, host/profile/state root, binary, Gateway URL/listener and service. Distinguish Control UI/browser from a native mobile/node using the actual request/logs; a phone can be either. Read the packaged source for routing/auth/pairing branches and evidence conditions.

Observe a fresh failing attempt and correlate exact timestamps, client/account/device identity and logs. Inspect actual Tailscale/Serve routes when authorized; gateway.tailscale.mode=off does not prove an externally managed route is absent. Do not reset pairing or change auth because a connectivity probe passed.

For browsers, establish route and intended authentication before expecting pairing. For native clients, resolve the exact node setup route and never put password-equivalent setup codes, signed handoff URLs or permanent credentials into chat/tool output. Let the operator handle credential entry through the established trusted surface. No account/auth-policy change is authorized by installation of this skill.

Approve a device only when the task/confirmation authorizes that exact access change, and correlate the current request ID immediately before acting. devices approve --latest is a preview, not approval; a verified Tailscale browser can legitimately have no pairing row. Preserve permissions and the existing route after reconnect errors and investigate current evidence.

After an authorized repair, require a new client attempt proving intended route/auth and initial browser requests or native node presence, with no immediate reconnect/auth failure. Report each transition separately. QR creation, ping, approval or a paired-device count alone is not a working connection.

Selective installation

No mandatory installed companion from this pack is required. Checkout/runtime prerequisites and the conditional source references still apply.