@inline-openclaw/inline 0.0.44 → 0.0.46

package/dist/setup-plugin-api.js

@@ -14590,6 +14590,8 @@ var InlineExecApprovalsSchema = exports_external.object({
 var InlineReactionNotificationsSchema = exports_external.enum(["off", "own", "all", "allowlist"]);
 var InlineStreamingModeSchema = exports_external.enum(["off", "partial", "block", "progress"]);
 var InlineStreamingCommandTextSchema = exports_external.enum(["raw", "status"]);
+var INLINE_DEFAULT_GROUP_POLICY = "open";
+var INLINE_DEFAULT_REQUIRE_MENTION = true;
 var InlineStreamingChunkSchema = exports_external.object({
   minChars: exports_external.number().int().positive().optional(),
   maxChars: exports_external.number().int().positive().optional(),
@@ -14661,7 +14663,7 @@ var InlineAccountSchemaBase = exports_external.object({
   defaultTo: InlineTargetSchema.optional(),
   systemPrompt: exports_external.string().optional(),
   groupAllowFrom: exports_external.array(InlineAllowEntrySchema).optional(),
-  groupPolicy: GroupPolicySchema.optional().default("allowlist"),
+  groupPolicy: GroupPolicySchema.optional().default(INLINE_DEFAULT_GROUP_POLICY),
   groups: exports_external.record(exports_external.string(), InlineGroupSchema.optional()).optional(),
   requireMention: exports_external.boolean().optional(),
   replyThreadMode: InlineReplyThreadModeSchema.optional(),
@@ -15069,7 +15071,8 @@ var INLINE_USER_ID_HELP_LINES = [
   "Docs: https://inline.chat/docs/openclaw"
 ];
 var INLINE_GROUP_HELP_LINES = [
-  "Allowlist Inline group chats by numeric chat id.",
+  "Inline groups are open by default and require a bot mention by default.",
+  "Optionally allowlist Inline group chats by numeric chat id.",
   "Accepted forms: 123456789, chat:123456789, inline:123456789, *.",
   "Use * for every group chat; the setup keeps requireMention=true for broad group access.",
   "Use /whoami in a group and copy the Chat line to get the Inline chat id.",
@@ -15216,7 +15219,7 @@ function buildInlineDmAccessWarningLines(accountId) {
 function buildInlineGroupAccessWarningLines(params) {
   const resolved = resolveInlineAccount({ cfg: params.cfg, accountId: params.accountId });
   const configBase = formatInlineConfigBase(params.accountId);
-  const policy = resolved.config.groupPolicy ?? "allowlist";
+  const policy = resolved.config.groupPolicy ?? INLINE_DEFAULT_GROUP_POLICY;
   const groups = resolved.config.groups ?? {};
   const hasGroups = Object.keys(groups).length > 0;
   const hasGroupAllowFrom = (resolved.config.groupAllowFrom ?? []).some((entry) => String(entry).trim());
@@ -15229,7 +15232,8 @@ function buildInlineGroupAccessWarningLines(params) {
     ];
   }
   const wildcard = groups["*"];
-  if (policy === "open" && wildcard?.requireMention !== true) {
+  const requireMention = wildcard?.requireMention ?? resolved.config.requireMention ?? INLINE_DEFAULT_REQUIRE_MENTION;
+  if (policy === "open" && requireMention !== true) {
     return [
       "Inline groups are open to every group chat without a default mention requirement.",
       "For safer broad group access, require bot mentions or switch to an explicit group allowlist:",
@@ -15373,7 +15377,7 @@ function hasGroupSenders(account, parent) {
   return hasEntries(readInherited(account, parent, "groupAllowFrom")) || hasGroupScopedSenders(readInherited(account, parent, "groups"));
 }
 function getGroupPolicy(account, parent) {
-  return String(readInherited(account, parent, "groupPolicy") ?? "allowlist");
+  return String(readInherited(account, parent, "groupPolicy") ?? INLINE_DEFAULT_GROUP_POLICY);
 }
 function collectInlineEmptyAllowlistWarnings(params) {
   if (params.channelName !== "inline")
@@ -15572,6 +15576,14 @@ function hasInlineCommandAllowFrom(cfg) {
   const byProvider = allowFrom;
   return hasEntries2(byProvider.inline) || hasEntries2(byProvider["*"]);
 }
+function groupDefaultRequiresMention(account) {
+  const groups = account.config.groups;
+  const wildcard = groups && typeof groups === "object" && !Array.isArray(groups) ? groups["*"] : undefined;
+  const wildcardRequireMention = wildcard && typeof wildcard === "object" && !Array.isArray(wildcard) ? wildcard.requireMention : undefined;
+  if (typeof wildcardRequireMention === "boolean")
+    return wildcardRequireMention;
+  return account.config.requireMention ?? INLINE_DEFAULT_REQUIRE_MENTION;
+}
 function collectInvalidAllowFromEntries(params) {
   if (!Array.isArray(params.entries))
     return;
@@ -15628,7 +15640,7 @@ var inlineSecurityAdapter = {
   },
   collectWarnings: ({ account, cfg }) => {
     const defaultGroupPolicy = cfg.channels?.defaults?.groupPolicy;
-    const groupPolicy = account.config.groupPolicy ?? defaultGroupPolicy ?? "allowlist";
+    const groupPolicy = account.config.groupPolicy ?? defaultGroupPolicy ?? INLINE_DEFAULT_GROUP_POLICY;
     const groupRulesConfigured = Boolean(account.config.groups) && Object.keys(account.config.groups ?? {}).length > 0;
     const groupSendersConfigured = hasGroupSenderEntries(account);
     if (groupPolicy === "allowlist" && !groupRulesConfigured && !groupSendersConfigured) {
@@ -15639,14 +15651,12 @@ var inlineSecurityAdapter = {
     if (groupPolicy !== "open") {
       return [];
     }
-    if (groupRulesConfigured) {
+    if (!groupDefaultRequiresMention(account)) {
       return [
-        '- Inline groups: groupPolicy="open" allows any group message to reach the agent (subject to mention policy). Set channels.inline.groupPolicy="allowlist" for stricter routing.'
+        '- Inline groups: groupPolicy="open" allows every group message to trigger replies because requireMention is disabled. Set channels.inline.requireMention=true or channels.inline.groups."*".requireMention=true.'
       ];
     }
-    return [
-      '- Inline groups: groupPolicy="open" with no group rules means every group can trigger replies. Consider channels.inline.groupPolicy="allowlist".'
-    ];
+    return [];
   },
   collectAuditFindings: ({ account, cfg }) => {
     const findings = [];
@@ -15671,7 +15681,7 @@ var inlineSecurityAdapter = {
     });
     appendInvalidReactionAllowlistFinding(findings, invalidReactionAllowlistEntries);
     const defaultGroupPolicy = cfg.channels?.defaults?.groupPolicy;
-    const groupPolicy = account.config.groupPolicy ?? defaultGroupPolicy ?? "allowlist";
+    const groupPolicy = account.config.groupPolicy ?? defaultGroupPolicy ?? INLINE_DEFAULT_GROUP_POLICY;
     const groupsConfigured = Boolean(account.config.groups) && Object.keys(account.config.groups ?? {}).length > 0;
     const groupSendersConfigured = hasGroupSenderEntries(account);
     const groupAccessEnabled = groupPolicy === "open" || groupPolicy === "allowlist" && (groupsConfigured || groupSendersConfigured);
@@ -15755,5 +15765,5 @@ export {
   inlineSetupPlugin
 };
 
-//# debugId=B2FCAFCFD2D22A3F64756E2164756E21
+//# debugId=7D21619ED847F66664756E2164756E21
 //# sourceMappingURL=setup-plugin-api.js.map