gateway configs

AGENTS.md

@@ -418,6 +418,24 @@ docker exec CONTAINER_NAME sh -c 'echo {} > /home/node/.openclaw/devices/pending
 - Localhost (`127.0.0.1`) auto-approves.
 - Config edits trigger Gateway reload/restart automatically; container restart is usually unnecessary.
 
+### Keep Web UI Working Across Rebuilds
+
+To avoid repeated reconnect/pairing friction after redeploys:
+
+1. Keep a stable Tailscale hostname so the browser origin does not change:
+
+```bash
+TAILSCALE_HOSTNAME=openclaw-gateway
+```
+
+2. Keep the same `OPENCLAW_GATEWAY_TOKEN` between deployments.
+3. Persist and reuse the same `openclaw-config` volume (contains `devices/paired.json`).
+4. If UI shows `token_missing`, open a tokenized URL and re-save settings:
+
+```bash
+docker exec CONTAINER_NAME node dist/index.js dashboard --no-open
+```
+
 ### Permission Denied Errors
 
 **Problem**: `EACCES: permission denied, open '/home/node/.openclaw/workspace/...'`