Summary

• add gateway method device.pair.remove to delete stale paired device rows
• add CLI commands:
  • openclaw devices remove <deviceId>
  • openclaw devices clear --yes [--pending]
• wire protocol schemas/validators/allowlists for the new method
• add infra + CLI tests for remove/clear behavior

Testing

• pnpm vitest src/infra/device-pairing.test.ts src/cli/devices-cli.test.ts
• pnpm check
• pnpm build

Greptile Summary

Adds a device.pair.remove gateway method and two CLI commands (openclaw devices remove <deviceId> and openclaw devices clear --yes [--pending]) for managing paired device entries. The change spans the full vertical: Typebox schema + type, AJV validator, protocol schema registry, method allowlist, PAIRING_METHODS authorization set, server handler, infra layer (removePairedDevice), CLI wiring, and tests for both infra and CLI layers.

• New removePairedDevice infra function deletes a device from the paired-devices state file under lock, consistent with existing rejectDevicePairing pattern
• device.pair.remove server handler validates params, calls infra, returns the removed entry (or error for unknown deviceId)
• CLI remove subcommand sends a single RPC call; clear lists all entries then sequentially removes paired devices (and optionally rejects pending requests)
• Authorization is correctly gated behind operator.pairing scope via PAIRING_METHODS
• Tests cover: single remove, clear with --yes guard, and clear with --pending flag

Confidence Score: 5/5

• This PR is safe to merge — it follows existing patterns consistently across all layers with no logical errors.
• Score reflects that all changes are well-structured, follow existing codebase conventions (schema, validator, handler, allowlist, CLI, tests), have correct authorization gating, and include comprehensive test coverage. No bugs or security issues found.
• No files require special attention.

_{Last reviewed commit: df53236}