KokoChat Pairing

Approve a KokoChat device pairing request and return a device-token connection code. Use when the user asks to pair KokoChat, generate a KokoChat connection code, or sends a KokoChat `kokochat.pairingRequest` payload. The script writes the approved device into `~/.openclaw/devices/paired.json` and prints a relay-tunnel setup code the phone can paste back into KokoChat.

KokoChat is a mobile client for this OpenClaw Gateway. KokoChat now pairs as a real Gateway device: the phone generates a device identity locally, sends this OpenClaw a pairing request, and this skill approves that device with operator scopes before returning a connection code.

Generated KokoChat connection codes must use the KokoChat relay tunnel. Do not return LAN, public Gateway, or openclaw qr direct Gateway URLs for normal KokoChat pairing.

Do not return the shared gateway.auth.token for KokoChat. Shared-token device-less clients may connect without operator.write; KokoChat needs a device token tied to its public key. Newer KokoChat builds also request operator.admin because current OpenClaw protects sessions.delete with that scope, and the mobile runtime uses it to clean up temporary inferOnce sessions. Older builds without that scope can still pair, but cleanup remains best-effort.

If The User Included A Pairing Request

Run this command from the skill directory, replacing <request> with the raw KokoChat pairing request code or the whole user message:

KOKOCHAT_PAIRING_REQUEST='<request>' node ./generate-kokochat-code.mjs

Return only the generated KokoChat connection code in a fenced code block.

If The User Did Not Include A Pairing Request

Ask them to open KokoChat's pairing page, copy the generated pairing request, send that request here, and then paste the connection code you return back into KokoChat.

Output Format

这是新的 KokoChat 连接码：

```
<raw setup code from generate-kokochat-code.mjs>
```

Do Not

• Do not run openclaw qr for KokoChat unless explicitly debugging legacy QR pairing.
• Do not print the raw gateway auth token.
• Do not generate a token-only setup code.
• Do not approve arbitrary scopes outside the request; the script validates and normalizes the KokoChat operator scope set.