{
  // Install the packaged plugin on the Gateway host first:
  //   openclaw plugins add @gloves/openclaw
  plugins: {
    entries: {
      gloves: {
        enabled: true,
        config: {
          root: "/var/lib/openclaw/gloves",
          glovesBin: "gloves",
          operatorAgentId: "main",
          timeoutMs: 10000
        }
      }
    }
  },
  agents: {
    relationships: {
      tools: {
        alsoAllow: ["gloves"]
      },
      sandbox: {
        docker: {
          network: "none",
          readOnlyRoot: true,
          capDrop: ["ALL"],
          securityOpt: ["no-new-privileges:true"]
        }
      }
    }
  }
}