Revamp config page editor

Polish the WinUI config editor with permission-aware state, live validation, persistent JSON diff preview, full-width layout, safer read-only/no-read handling, and maintainer fixes for stale-base retry and sensitive field detection.\n\nCo-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

Author: ranjeshj

scripts/Test-Localization.ps1

@@ -59,12 +59,24 @@ function Test-IsLocalizableValue {
     return $true
 }
 
+function Test-IsSourceXaml {
+    param([System.IO.FileInfo]$File)
+
+    $relativePath = Get-RelativePath $winUiRoot $File.FullName
+    $segments = $relativePath -split '[\\/]'
+    # Build output can contain generated/copied XAML; only source XAML should drive localization findings.
+    return $segments -notcontains 'bin' -and $segments -notcontains 'obj'
+}
+
 function Get-XamlLocalizationFindings {
     $resourceKeys = Get-ResourceKeys
     $missingResources = [System.Collections.Generic.List[string]]::new()
     $hardcodedValues = [System.Collections.Generic.List[string]]::new()
 
-    Get-ChildItem -LiteralPath $winUiRoot -Recurse -Filter *.xaml | Sort-Object FullName | ForEach-Object {
+    Get-ChildItem -LiteralPath $winUiRoot -Recurse -Filter *.xaml -File |
+        Where-Object { Test-IsSourceXaml $_ } |
+        Sort-Object FullName |
+        ForEach-Object {
         $xamlPath = $_.FullName
         $relativePath = Get-RelativePath $repoRoot $xamlPath
         [xml]$xml = Get-Content -LiteralPath $xamlPath -Raw -Encoding UTF8

src/OpenClaw.Connection/OperatorScopeHelper.cs

@@ -6,4 +6,15 @@ public static bool CanApproveDevices(IReadOnlyList<string> grantedScopes) =>
         grantedScopes.Any(s =>
             s.Equals("operator.admin", StringComparison.OrdinalIgnoreCase) ||
             s.Equals("operator.pairing", StringComparison.OrdinalIgnoreCase));
+
+    public static bool CanReadConfig(IReadOnlyList<string> grantedScopes) =>
+        HasScope(grantedScopes, "operator.admin") ||
+        HasScope(grantedScopes, "operator.read");
+
+    public static bool CanWriteConfig(IReadOnlyList<string> grantedScopes) =>
+        HasScope(grantedScopes, "operator.admin") ||
+        HasScope(grantedScopes, "operator.write");
+
+    private static bool HasScope(IReadOnlyList<string> grantedScopes, string scope) =>
+        grantedScopes.Any(s => s.Equals(scope, StringComparison.OrdinalIgnoreCase));
 }