@occum-net/occumclaw 0.4.0 → 0.4.1

package/index.ts

@@ -154,9 +154,9 @@ interface OpenClawPluginApi {
 //   4. Wildcard tool policy             (groups.*.tools)
 //   5. undefined → fall back to global  (tools.allow / tools.profile)
 //
-// Config path:
+// Config path (either works; plugin-style avoids config validation issues):
 //   channels.occum.accounts.<accountId>.groups.<channelId>.tools
-//   channels.occum.accounts.<accountId>.groups.<channelId>.toolsBySender
+//   plugins.entries.occumclaw.config.groups.<channelId>.tools
 //
 // Per-sender key format:
 //   "id:<senderId>"       — match by user/agent ID
@@ -263,15 +263,20 @@ function resolveToolsBySender(
 /**
  * Resolve the effective tool policy for an inbound occum.net message.
  *
- * Looks up config at: channels.occum.accounts.<accountId>.groups.<groupId>
- * with fallback to wildcard "*" group, then per-sender overrides.
+ * Looks up groups config from (in order):
+ *   1. channels.occum.accounts.<accountId>.groups   (channel-style, if OpenClaw validates it)
+ *   2. plugins.entries.occumclaw.config.groups       (plugin-style, always safe)
+ *
+ * Then resolves per-channel and per-sender overrides with wildcard fallback.
  */
 function resolveOccumToolPolicy(params: ChannelGroupContext): GroupToolPolicyConfig | undefined {
   const { cfg, groupId, accountId, senderId, senderName, senderUsername, senderE164 } = params;
 
+  // Try channel-style config first, then fall back to plugin config
   const acctId = accountId ?? "default";
   const groups: Record<string, OccumGroupConfig> | undefined =
-    cfg?.channels?.occum?.accounts?.[acctId]?.groups;
+    cfg?.channels?.occum?.accounts?.[acctId]?.groups
+    ?? cfg?.plugins?.entries?.occumclaw?.config?.groups;
 
   if (!groups || typeof groups !== "object") return undefined;
 

package/openclaw.plugin.json

@@ -9,7 +9,39 @@
     "additionalProperties": false,
     "properties": {
       "agentToken": { "type": "string" },
-      "apiUrl": { "type": "string", "default": "https://api.occum.net" }
+      "apiUrl": { "type": "string", "default": "https://api.occum.net" },
+      "groups": {
+        "type": "object",
+        "description": "Per-channel and per-sender tool policy overrides. Keys are channel IDs or \"*\" for wildcard.",
+        "additionalProperties": {
+          "type": "object",
+          "properties": {
+            "tools": {
+              "type": "object",
+              "properties": {
+                "allow": { "type": "array", "items": { "type": "string" } },
+                "alsoAllow": { "type": "array", "items": { "type": "string" } },
+                "deny": { "type": "array", "items": { "type": "string" } }
+              },
+              "additionalProperties": false
+            },
+            "toolsBySender": {
+              "type": "object",
+              "description": "Per-sender overrides keyed by id:<val>, username:<val>, name:<val>, or *",
+              "additionalProperties": {
+                "type": "object",
+                "properties": {
+                  "allow": { "type": "array", "items": { "type": "string" } },
+                  "alsoAllow": { "type": "array", "items": { "type": "string" } },
+                  "deny": { "type": "array", "items": { "type": "string" } }
+                },
+                "additionalProperties": false
+              }
+            }
+          },
+          "additionalProperties": false
+        }
+      }
     },
     "required": []
   },

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@occum-net/occumclaw",
-  "version": "0.4.0",
+  "version": "0.4.1",
   "publishConfig": {
     "access": "public"
   },