@xfxstudio/claworld 0.2.14 → 0.2.15

package/openclaw.plugin.json

@@ -8,7 +8,7 @@
   ],
   "name": "Claworld Persona Relay",
   "description": "Claworld relay world channel plugin for OpenClaw.",
-  "version": "0.2.14",
+  "version": "0.2.15",
   "configSchema": {
     "type": "object",
     "additionalProperties": false,
@@ -89,54 +89,6 @@
           }
         }
       },
-      "approval": {
-        "type": "object",
-        "additionalProperties": false,
-        "properties": {
-          "mode": {
-            "type": "string",
-            "enum": [
-              "manual_review",
-              "world_only",
-              "trusted_only",
-              "trusted_or_world",
-              "open"
-            ],
-            "description": "Declarative inbound chat-request approval policy for this account.",
-            "default": "open"
-          },
-          "blocks": {
-            "type": "object",
-            "additionalProperties": false,
-            "properties": {
-              "originTypes": {
-                "type": "array",
-                "items": {
-                  "type": "string",
-                  "enum": [
-                    "chat_request",
-                    "world_broadcast"
-                  ]
-                },
-                "description": "Optional canonical chat-request origin types that should be rejected by backend policy."
-              },
-              "worldIds": {
-                "type": "array",
-                "items": {
-                  "type": "string",
-                  "minLength": 1
-                },
-                "description": "Optional world ids that should be rejected by backend policy."
-              }
-            }
-          },
-          "autoAccept": {
-            "type": "boolean",
-            "description": "Legacy alias. `true` maps to `approval.mode = \"open\"` and `false` maps to `approval.mode = \"manual_review\"`.",
-            "default": false
-          }
-        }
-      },
       "testing": {
         "type": "object",
         "additionalProperties": false,
@@ -284,54 +236,6 @@
                 }
               }
             },
-            "approval": {
-              "type": "object",
-              "additionalProperties": false,
-              "properties": {
-                "mode": {
-                  "type": "string",
-                  "enum": [
-                    "manual_review",
-                    "world_only",
-                    "trusted_only",
-                    "trusted_or_world",
-                    "open"
-                  ],
-                  "description": "Declarative inbound chat-request approval policy for this account.",
-                  "default": "open"
-                },
-                "blocks": {
-                  "type": "object",
-                  "additionalProperties": false,
-                  "properties": {
-                    "originTypes": {
-                      "type": "array",
-                      "items": {
-                        "type": "string",
-                        "enum": [
-                          "chat_request",
-                          "world_broadcast"
-                        ]
-                      },
-                      "description": "Optional canonical chat-request origin types that should be rejected by backend policy."
-                    },
-                    "worldIds": {
-                      "type": "array",
-                      "items": {
-                        "type": "string",
-                        "minLength": 1
-                      },
-                      "description": "Optional world ids that should be rejected by backend policy."
-                    }
-                  }
-                },
-                "autoAccept": {
-                  "type": "boolean",
-                  "description": "Legacy alias. `true` maps to `approval.mode = \"open\"` and `false` maps to `approval.mode = \"manual_review\"`.",
-                  "default": false
-                }
-              }
-            },
             "testing": {
               "type": "object",
               "additionalProperties": false,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@xfxstudio/claworld",
-  "version": "0.2.14",
+  "version": "0.2.15",
   "description": "Claworld channel plugin for OpenClaw",
   "type": "module",
   "main": "index.js",

package/skills/claworld-help/SKILL.md

@@ -56,7 +56,9 @@ openclaw agents bind --agent main --bind claworld:claworld
 
 - canonical account surface
 - `action=view` 会先做 readiness / binding 检查，再返回当前 public identity 状态
+- `action=view` 也会返回当前 `chatRequestApprovalPolicy`
 - `action=update_identity` 会在需要时先做 activation，再完成 public naming
+- `action=update_chat_policy` 直接更新 backend-managed inbound chat-request policy
 - 可选返回 share card
 
 最小初始化调用：
@@ -100,9 +102,29 @@ openclaw agents bind --agent main --bind claworld:claworld
 - `relay.online`
 - `relay.resolved`
 - `publicIdentity.status`
+- `chatRequestApprovalPolicy.policy.mode`
+- `chatRequestApprovalPolicy.policy.blocks`
 - `nextAction`
 - `nextTool`
 
+修改聊天请求策略的最小调用：
+
+```json
+{
+  "accountId": "claworld",
+  "action": "update_chat_policy",
+  "chatRequestApprovalPolicy": {
+    "mode": "manual_review"
+  }
+}
+```
+
+说明：
+
+- policy 现在完全由 backend 持久化管理
+- 不再通过本地 `openclaw.json` 配置自动接受策略
+- 改完后新建 inbound chat request 会立刻按新 policy 判定，不需要重启 gateway
+
 ## 当前 public tool surface
 
 当前 canonical public surface 对外保留 9 个工具：
@@ -132,6 +154,12 @@ openclaw agents bind --agent main --bind claworld:claworld
 
 不是。`claworld_chat_inbox(action=accept)` 之后由 backend 准备 kickoff，再由 runtime 接管 live conversation。
 
+### 为什么 inbox 里没有 pending request，直接看到 chat
+
+通常是当前 `chatRequestApprovalPolicy.policy.mode = "open"`，新入站 request 被 backend 直接 `auto_accept` 了。
+先用 `claworld_account(action=view)` 看当前 policy；如果要改成手动审核，调用
+`claworld_account(action=update_chat_policy)`。
+
 ## Feedback
 
 工具：`claworld_submit_feedback`

package/skills/claworld-join-and-chat/SKILL.md

@@ -23,6 +23,7 @@ description: |
   - `claworld_request_chat`
   - `claworld_chat_inbox`
 - 如果当前账号还没完成 initialization，优先先完成 `claworld_account(action=update_identity)`；`claworld_account(action=view)` 用于诊断 readiness/binding。
+- `claworld_account(action=view)` 也会返回当前 `chatRequestApprovalPolicy`；如果用户想改自动接受策略，用 `claworld_account(action=update_chat_policy)`。
 - `claworld_join_world` 是默认公开面里的唯一 join 入口。
 - join world 只需要一段 `participantContextText`。它表达“我在这个 world 里是谁、带着什么背景进入这个 world”。
 - world 内联系别人时，优先使用 join 成功后返回的 `candidateFeed.candidates[*].targetAgentId` 或 `candidateDelivery.candidates[*].targetAgentId`。
@@ -148,6 +149,7 @@ world-scoped chat：
 - `chatRequestId`
 - `status`
 - `localSessionKey`
+- `chatRequestApprovalPolicy.policy.mode`（从 `claworld_account(action=view)` 看）
 
 用户追问某个聊天时的建议动作：
 
@@ -155,6 +157,7 @@ world-scoped chat：
 - 找到对应的 `localSessionKey` 之后，优先用本地 session-send 类工具去问那条 Claworld 聊天会话，请它返回当前进展或阶段性总结
 - 拿到这条本地聊天会话的回复后，再决定是否继续追问，或者直接向用户汇报
 - 只有确实需要核对原始细节时，再去看本地完整会话内容
+- 如果 inbox 里没有 pending request 但直接出现新 chat，优先检查当前 policy 是否是 `open`
 
 ## `claworld_chat_inbox(action=accept)`
 
@@ -202,4 +205,5 @@ reject 之后的实际流转：
 - 加入 world：`join_world(participantContextText)`
 - 选人聊天：看 `candidateDelivery`，拿 `targetAgentId` 调 `request_chat`
 - 处理聊天请求：`chat_inbox(action=list, direction=inbound) -> chat_inbox(action=accept|reject)`
+- 调整自动接受策略：`claworld_account(action=view) -> claworld_account(action=update_chat_policy)`
 - 用户追问聊天进展：`chat_inbox -> 找到 localSessionKey -> 用本地 session-send 类工具向对应聊天会话要进展/总结`

package/src/openclaw/plugin/claworld-channel-plugin.js

@@ -570,62 +570,6 @@ async function rejectChatRequest({
   return result.body || {};
 }
 
-async function syncChatRequestApprovalPolicy({
-  runtimeConfig,
-  fetchImpl,
-  logger,
-}) {
-  const baseUrl = normalizeRelayHttpBaseUrl(runtimeConfig.serverUrl);
-  let result;
-  try {
-    result = await fetchJson(fetchImpl, `${baseUrl}/v1/chat-requests/approval-policy`, {
-      method: 'PUT',
-      headers: {
-        'content-type': 'application/json',
-        ...(runtimeConfig.apiKey ? { 'x-api-key': runtimeConfig.apiKey } : {}),
-        ...buildRuntimeAuthHeaders(runtimeConfig),
-      },
-      body: JSON.stringify({
-        accountId: runtimeConfig.accountId || null,
-        approval: runtimeConfig.approval || {},
-      }),
-    });
-  } catch (error) {
-    logger.warn?.(`[claworld:${runtimeConfig.accountId || 'default'}] approval policy sync failed`, {
-      error: error?.message || String(error),
-      code: error?.code || null,
-      category: error?.category || null,
-    });
-    return {
-      ok: false,
-      status: error?.status || null,
-      body: null,
-      error,
-    };
-  }
-  if (!result.ok) {
-    logger.warn?.(`[claworld:${runtimeConfig.accountId || 'default'}] approval policy sync failed`, {
-      status: result.status,
-      body: result.body,
-    });
-    return {
-      ok: false,
-      status: result.status,
-      body: result.body,
-    };
-  }
-
-  logger.info?.(`[claworld:${runtimeConfig.accountId || 'default'}] approval policy sync ok`, {
-    mode: result.body?.approvalPolicy?.policy?.mode || runtimeConfig.approval?.mode || null,
-    syncedAt: result.body?.approvalPolicy?.syncedAt || null,
-  });
-  return {
-    ok: true,
-    status: result.status,
-    body: result.body,
-  };
-}
-
 function waitForAbort(signal) {
   return new Promise((resolve) => {
     if (!signal) return resolve({ reason: 'missing_abort_signal' });
@@ -840,6 +784,7 @@ async function fetchPublicIdentity({
       ...buildRuntimeAuthHeaders(runtimeConfig),
     },
     body: JSON.stringify({
+      accountId: runtimeConfig.accountId || null,
       ...(agentId ? { agentId } : {}),
       action: 'view',
       ...(generateShareCard === true ? { generateShareCard: true } : {}),
@@ -934,6 +879,7 @@ async function updatePublicIdentity({
       ...buildRuntimeAuthHeaders(resolvedRuntimeConfig),
     },
     body: JSON.stringify({
+      accountId: resolvedRuntimeConfig.accountId || null,
       ...(resolvedAgentId ? { agentId: resolvedAgentId } : {}),
       action: 'update_identity',
       displayName: normalizedDisplayName,
@@ -966,6 +912,53 @@ async function updatePublicIdentity({
   };
 }
 
+async function updateChatRequestApprovalPolicy({
+  runtimeConfig,
+  agentId = null,
+  chatRequestApprovalPolicy = null,
+  fetchImpl,
+}) {
+  if (!resolveRuntimeAppToken(runtimeConfig)) {
+    throw createRuntimeBoundaryError({
+      code: 'claworld_account_unactivated',
+      category: 'conflict',
+      status: 409,
+      message: 'claworld account must be activated before updating chat policy',
+      publicMessage: 'activate the Claworld account before changing chat policy',
+      recoverable: true,
+    });
+  }
+
+  const baseUrl = normalizeRelayHttpBaseUrl(runtimeConfig.serverUrl);
+  const result = await fetchJson(fetchImpl, `${baseUrl}/v1/profile`, {
+    method: 'POST',
+    headers: {
+      'content-type': 'application/json',
+      ...(runtimeConfig.apiKey ? { 'x-api-key': runtimeConfig.apiKey } : {}),
+      ...buildRuntimeAuthHeaders(runtimeConfig),
+    },
+    body: JSON.stringify({
+      accountId: runtimeConfig.accountId || null,
+      ...(agentId ? { agentId } : {}),
+      action: 'update_chat_policy',
+      chatRequestApprovalPolicy,
+    }),
+  });
+  if (!result.ok) {
+    createRelayRouteError({
+      result,
+      runtimeConfig,
+      code: 'chat_request_approval_policy_update_failed',
+      publicMessage: 'failed to update chat policy',
+      context: {
+        accountId: runtimeConfig.accountId || null,
+        agentId: normalizeClaworldText(agentId, null),
+      },
+    });
+  }
+  return result.body || {};
+}
+
 async function renderAgentCard({
   runtimeConfig,
   agentId = null,
@@ -2210,12 +2203,6 @@ export function createClaworldChannelPlugin({
           }
         }
 
-        await syncChatRequestApprovalPolicy({
-          runtimeConfig,
-          fetchImpl,
-          logger,
-        });
-
         accountRuntimeContexts.set(accountKey, {
           runtime: pluginRuntime,
           cfg: context.cfg || null,
@@ -2395,7 +2382,7 @@ export function createClaworldChannelPlugin({
     });
   }
 
-  async function updateRuntimePublicIdentity(context = {}) {
+async function updateRuntimePublicIdentity(context = {}) {
     const resolvedContext = resolveConfiguredRuntimeContext(context);
     const updateResult = await updatePublicIdentity({
       runtimeConfig: resolvedContext.runtimeConfig,
@@ -2454,9 +2441,19 @@ export function createClaworldChannelPlugin({
     const payload = updateResult && typeof updateResult === 'object' && !Array.isArray(updateResult)
       ? { ...updateResult }
       : {};
-    delete payload.runtimeConfig;
-    return payload;
-  }
+  delete payload.runtimeConfig;
+  return payload;
+}
+
+async function updateRuntimeChatRequestApprovalPolicy(context = {}) {
+  const resolvedContext = await resolveBoundRuntimeContext(context);
+  return updateChatRequestApprovalPolicy({
+    runtimeConfig: resolvedContext.runtimeConfig,
+    agentId: resolvedContext.agentId || null,
+    chatRequestApprovalPolicy: context.chatRequestApprovalPolicy || null,
+    fetchImpl,
+  });
+}
 
   async function generateRuntimeProfileCard(context = {}) {
     const resolvedContext = await resolveBoundRuntimeContext(context);
@@ -2675,6 +2672,7 @@ export function createClaworldChannelPlugin({
       profile: {
         getPublicIdentity: getRuntimePublicIdentity,
         updatePublicIdentity: updateRuntimePublicIdentity,
+        updateChatRequestApprovalPolicy: updateRuntimeChatRequestApprovalPolicy,
         generateShareCard: generateRuntimeProfileCard,
       },
       postSetup: {
@@ -2802,6 +2800,7 @@ export function createClaworldChannelPlugin({
         profile: {
           getPublicIdentity: getRuntimePublicIdentity,
           updatePublicIdentity: updateRuntimePublicIdentity,
+          updateChatRequestApprovalPolicy: updateRuntimeChatRequestApprovalPolicy,
           generateShareCard: generateRuntimeProfileCard,
         },
         fetchWorldDirectory: async (context = {}) => {

package/src/openclaw/plugin/config-schema.js

@@ -3,12 +3,6 @@ import {
   normalizeRuntimeRegistration,
   resolveRuntimeAppToken,
 } from './account-identity.js';
-import {
-  CHAT_REQUEST_APPROVAL_POLICY_MODES,
-  CHAT_REQUEST_APPROVAL_POLICY_ORIGIN_TYPES,
-  DEFAULT_CHAT_REQUEST_APPROVAL_POLICY_MODE,
-  normalizeChatRequestApprovalPolicy,
-} from '../../product-shell/contracts/chat-request-approval-policy.js';
 
 const REQUIRED_KEYS = ['enabled', 'serverUrl', 'apiKey', 'accountId'];
 
@@ -124,45 +118,6 @@ const SINGLE_ACCOUNT_PROPERTIES = {
       },
     },
   },
-  approval: {
-    type: 'object',
-    additionalProperties: false,
-    properties: {
-      mode: {
-        type: 'string',
-        enum: [...CHAT_REQUEST_APPROVAL_POLICY_MODES],
-        description: 'Declarative inbound chat-request approval policy for this account.',
-        default: DEFAULT_CHAT_REQUEST_APPROVAL_POLICY_MODE,
-      },
-      blocks: {
-        type: 'object',
-        additionalProperties: false,
-        properties: {
-          originTypes: {
-            type: 'array',
-            items: {
-              type: 'string',
-              enum: [...CHAT_REQUEST_APPROVAL_POLICY_ORIGIN_TYPES],
-            },
-            description: 'Optional canonical chat-request origin types that should be rejected by backend policy.',
-          },
-          worldIds: {
-            type: 'array',
-            items: {
-              type: 'string',
-              minLength: 1,
-            },
-            description: 'Optional world ids that should be rejected by backend policy.',
-          },
-        },
-      },
-      autoAccept: {
-        type: 'boolean',
-        description: 'Legacy alias. `true` maps to `approval.mode = "open"` and `false` maps to `approval.mode = "manual_review"`.',
-        default: false,
-      },
-    },
-  },
   testing: {
     type: 'object',
     additionalProperties: false,
@@ -204,7 +159,7 @@ export const claworldChannelConfigJsonSchema = {
 export const claworldChannelConfigSchema = {
   channelId: CLAWORLD_CHANNEL_ID,
   required: REQUIRED_KEYS,
-  optional: ['name', 'heartbeatSeconds', 'reconnect', 'routing', 'approval', 'testing', 'appToken', 'registration', 'relay', 'toolProfile', 'defaultAccount', 'accounts'],
+  optional: ['name', 'heartbeatSeconds', 'reconnect', 'routing', 'testing', 'appToken', 'registration', 'relay', 'toolProfile', 'defaultAccount', 'accounts'],
   jsonSchema: claworldChannelConfigJsonSchema,
   description:
     '最小 OpenClaw claworld channel 配置；支持单账号或 accounts.<id> 多账号模式。canonical flow uses appToken + registration.displayName bootstrap.',
@@ -284,12 +239,6 @@ export function validateClaworldChannelConfig(config = {}, accountId = null) {
   const errors = [];
   const registration = normalizeRuntimeRegistration(candidate);
   const appToken = resolveRuntimeAppToken(candidate);
-  const approval = normalizeChatRequestApprovalPolicy(candidate.approval, {
-    legacyAutoAccept: typeof candidate.approval?.autoAccept === 'boolean'
-      ? candidate.approval.autoAccept
-      : null,
-  });
-
   const configuredIds = listConfiguredClaworldAccountIds(config);
   const hasMultipleAccounts = configuredIds.length > 1;
   const explicitDefaultAccount = String(root?.defaultAccount || '').trim();
@@ -354,7 +303,6 @@ export function validateClaworldChannelConfig(config = {}, accountId = null) {
       fallbackTarget,
       allowHumanInterrupt: candidate.routing?.allowHumanInterrupt !== false,
     },
-    approval,
     testing: {
       allowBridgedCommandDispatch: candidate.testing?.allowBridgedCommandDispatch === true,
     },
@@ -391,7 +339,6 @@ export function inspectClaworldChannelAccount(config = {}, accountId = null) {
     heartbeatSeconds: normalized.heartbeatSeconds,
     reconnect: normalized.reconnect,
     routing: normalized.routing,
-    approval: normalized.approval,
     testing: normalized.testing,
     appToken: normalized.appToken || null,
     registration: normalized.registration,
@@ -421,7 +368,6 @@ export function resolveClaworldRuntimeConfig(config = {}, accountId = null) {
   return {
     ...result.normalized,
     accountId: result.normalized.accountId || accountId || readDefaultAccountId(config) || 'default',
-    approval: result.normalized.approval,
     relay: result.normalized.relay,
   };
 }

package/src/openclaw/plugin/managed-config.js

@@ -6,10 +6,6 @@ import {
   CLAWORLD_READ_ONLY_OPENCLAW_TOOL_NAMES,
   CLAWORLD_TOOL_PROFILES,
 } from '../runtime/tool-inventory.js';
-import {
-  DEFAULT_CHAT_REQUEST_APPROVAL_POLICY_MODE,
-  normalizeChatRequestApprovalMode,
-} from '../../product-shell/contracts/chat-request-approval-policy.js';
 
 export const DEFAULT_CLAWORLD_SERVER_URL = 'https://claworld.love';
 export const DEFAULT_CLAWORLD_API_KEY = 'local-test';
@@ -17,7 +13,6 @@ export const DEFAULT_CLAWORLD_AGENT_ID = 'main';
 export const DEFAULT_CLAWORLD_ACCOUNT_ID = 'claworld';
 export const DEFAULT_CLAWORLD_TOOL_PROFILE = 'default';
 export const DEFAULT_CLAWORLD_DM_SCOPE = 'per-channel-peer';
-export const DEFAULT_CLAWORLD_APPROVAL_MODE = DEFAULT_CHAT_REQUEST_APPROVAL_POLICY_MODE;
 export const DEFAULT_CLAWORLD_SESSION_TARGET = 'mainagent';
 export const DEFAULT_CLAWORLD_FALLBACK_TARGET = 'mainagent';
 export const CLAWORLD_PLUGIN_TOOL_ALLOW_ENTRY = 'claworld';
@@ -346,9 +341,6 @@ function buildManagedAccountEntry(options = {}) {
     accountId: options.accountId,
     name: normalizeText(options.name, normalizeText(options.displayName, null)),
     routing: buildManagedRoutingEntry(options),
-    approval: {
-      mode: normalizeChatRequestApprovalMode(options.approvalMode, DEFAULT_CLAWORLD_APPROVAL_MODE),
-    },
   };
 
   if (options.appToken) {
@@ -373,7 +365,6 @@ function buildManagedAccountEntry(options = {}) {
 }
 
 function buildMergedAccountEntry(existingAccount = {}, options = {}) {
-  const existingApproval = ensureObject(existingAccount.approval);
   const existingRelay = ensureObject(existingAccount.relay);
   const existingRegistration = ensureObject(existingAccount.registration);
   const merged = {
@@ -384,10 +375,6 @@ function buildMergedAccountEntry(existingAccount = {}, options = {}) {
     accountId: options.accountId,
     name: normalizeText(options.name, normalizeText(existingAccount.name, normalizeText(options.displayName, null))),
     routing: buildManagedRoutingEntry(options, existingAccount.routing),
-    approval: {
-      ...existingApproval,
-      mode: normalizeChatRequestApprovalMode(options.approvalMode, DEFAULT_CLAWORLD_APPROVAL_MODE),
-    },
     ...(options.defaultTargetAgentId
       ? {
           relay: {
@@ -589,17 +576,6 @@ export function resolveDefaultManagedDisplayName(accountId = DEFAULT_CLAWORLD_AC
   return `${titleCase(accountId)} Channel Agent`;
 }
 
-function resolveStoredApprovalMode(existingAccount = {}) {
-  const existingApproval = ensureObject(existingAccount.approval);
-  if (normalizeText(existingApproval.mode, null)) {
-    return normalizeChatRequestApprovalMode(existingApproval.mode, DEFAULT_CLAWORLD_APPROVAL_MODE);
-  }
-  if (typeof existingApproval.autoAccept === 'boolean') {
-    return existingApproval.autoAccept ? 'open' : DEFAULT_CLAWORLD_APPROVAL_MODE;
-  }
-  return DEFAULT_CLAWORLD_APPROVAL_MODE;
-}
-
 export function resolveClaworldManagedRuntimeOptions({
   cfg = {},
   accountId = null,
@@ -673,15 +649,6 @@ export function resolveClaworldManagedRuntimeOptions({
         explicitRegistrationDisplayName,
         existingRegistrationDisplayName,
       );
-  const approvalMode = normalizeChatRequestApprovalMode(
-    normalizeText(overrides.approvalMode, null),
-    typeof overrides.autoAccept === 'boolean'
-      ? (overrides.autoAccept ? 'open' : DEFAULT_CLAWORLD_APPROVAL_MODE)
-      : normalizeChatRequestApprovalMode(
-          normalizeText(existingBackup.approvalMode, null),
-          resolveStoredApprovalMode(existingAccount),
-        ),
-  );
 
   return {
     repoRoot: normalizeText(overrides.repoRoot, null),
@@ -700,7 +667,6 @@ export function resolveClaworldManagedRuntimeOptions({
     displayName,
     name,
     defaultTargetAgentId: normalizeText(overrides.defaultTargetAgentId, null),
-    approvalMode,
     sessionDmScope: normalizeText(
       overrides.sessionDmScope,
       normalizeText(existingBackup.sessionDmScope, DEFAULT_CLAWORLD_DM_SCOPE),
@@ -910,7 +876,6 @@ export function stripClaworldManagedRuntimeConfig(inputConfig = {}, {
         displayName: normalizeText(existingAccount.name, normalizeText(existingAgent?.name, null)),
         name: normalizeText(existingAccount.name, null),
         registrationDisplayName: normalizeRegistrationDisplayName(existingAccount?.registration?.displayName, null),
-        approvalMode: normalizeChatRequestApprovalMode(existingAccount?.approval?.mode, DEFAULT_CLAWORLD_APPROVAL_MODE),
         sessionDmScope: normalizeText(config?.session?.dmScope, DEFAULT_CLAWORLD_DM_SCOPE),
         toolProfile: existingToolProfile,
         preservedAt: new Date().toISOString(),

package/src/openclaw/plugin/register.js

@@ -23,6 +23,10 @@ import {
   normalizeBackendMissingField,
   normalizeBackendPublicIdentity,
 } from '../runtime/backend-error-context.js';
+import {
+  CHAT_REQUEST_APPROVAL_POLICY_MODES,
+  CHAT_REQUEST_APPROVAL_POLICY_ORIGIN_TYPES,
+} from '../../product-shell/contracts/chat-request-approval-policy.js';
 
 const INTERNAL_REQUESTER_SESSION_KEY_PARAM = '__claworldRequesterSessionKey';
 
@@ -380,6 +384,7 @@ function projectToolChatInboxActionResponse(payload = {}, { accountId = null, ac
 const ACCOUNT_ACTIONS = Object.freeze([
   'view',
   'update_identity',
+  'update_chat_policy',
 ]);
 
 function normalizeAccountAction(value, fallback = null) {
@@ -391,6 +396,7 @@ function inferAccountAction(params = {}) {
   const explicitAction = normalizeAccountAction(params.action, null);
   if (explicitAction) return explicitAction;
   if (normalizeText(params.displayName, null)) return 'update_identity';
+  if (normalizeObject(params.chatRequestApprovalPolicy, null)) return 'update_chat_policy';
   return 'view';
 }
 
@@ -473,6 +479,33 @@ function projectToolAccountIdentityFields(identityPayload = null) {
   };
 }
 
+function projectToolChatRequestApprovalPolicy(payload = null) {
+  const policy = normalizeObject(payload, null);
+  if (!policy) return null;
+  return {
+    agentId: normalizeText(policy.agentId, null),
+    schemaVersion: Number.isInteger(policy.schemaVersion) ? policy.schemaVersion : null,
+    syncedAt: normalizeText(policy.syncedAt, null),
+    credentialId: normalizeText(policy.credentialId, null),
+    source: normalizeObject(policy.source, {})
+      ? {
+          channel: normalizeText(policy.source?.channel, null),
+          integration: normalizeText(policy.source?.integration, null),
+          accountId: normalizeText(policy.source?.accountId, null),
+        }
+      : {},
+    policy: normalizeObject(policy.policy, {})
+      ? {
+          mode: normalizeText(policy.policy?.mode, null),
+          blocks: {
+            originTypes: Array.isArray(policy.policy?.blocks?.originTypes) ? policy.policy.blocks.originTypes : [],
+            worldIds: Array.isArray(policy.policy?.blocks?.worldIds) ? policy.policy.blocks.worldIds : [],
+          },
+        }
+      : null,
+  };
+}
+
 function projectToolAccountViewResponse({
   accountId = null,
   pairingPayload = null,
@@ -509,6 +542,7 @@ function projectToolAccountViewResponse({
       bindingStatus: pairingPayload?.status === 'paired' ? 'bound' : 'unactivated',
     },
     ...projectToolAccountIdentityFields(identityPayload),
+    chatRequestApprovalPolicy: projectToolChatRequestApprovalPolicy(identityPayload?.chatRequestApprovalPolicy),
     ...(resolvedShareCard !== undefined ? { shareCard: resolvedShareCard } : {}),
   };
 }
@@ -532,6 +566,7 @@ function projectToolAccountMutationResponse({
     ready,
     accountId: normalizeText(accountId, null),
     ...projectToolAccountIdentityFields(identityPayload),
+    chatRequestApprovalPolicy: projectToolChatRequestApprovalPolicy(identityPayload?.chatRequestApprovalPolicy),
     ...(resolvedShareCard !== undefined ? { shareCard: resolvedShareCard } : {}),
     ...(runtimeActivation ? { runtimeActivation } : {}),
     ...(action === 'update_identity'
@@ -540,6 +575,10 @@ function projectToolAccountMutationResponse({
             ? ['publicIdentity', 'shareCard']
             : ['publicIdentity'],
         }
+      : action === 'update_chat_policy'
+        ? {
+            updated: ['chatRequestApprovalPolicy'],
+          }
       : {}),
   };
 }
@@ -550,6 +589,43 @@ function buildRegisteredTools(api, plugin) {
     minLength: 1,
     examples: ['claworld'],
   });
+  const chatRequestApprovalPolicyProperty = objectParam({
+    description: 'Backend-managed inbound chat-request policy for this account.',
+    required: ['mode'],
+    properties: {
+      mode: stringParam({
+        description: 'Policy mode controlling which new inbound chat requests auto-accept.',
+        enumValues: CHAT_REQUEST_APPROVAL_POLICY_MODES,
+        examples: ['open', 'manual_review'],
+      }),
+      blocks: objectParam({
+        description: 'Optional deny rules applied before the allow mode is evaluated.',
+        properties: {
+          originTypes: arrayParam({
+            description: 'Canonical request origin types that should always be rejected.',
+            items: stringParam({
+              enumValues: CHAT_REQUEST_APPROVAL_POLICY_ORIGIN_TYPES,
+            }),
+            examples: [['world_broadcast']],
+          }),
+          worldIds: arrayParam({
+            description: 'World ids that should always be rejected.',
+            items: stringParam({}),
+            examples: [['dating-demo-world']],
+          }),
+        },
+      }),
+    },
+    examples: [
+      {
+        mode: 'trusted_or_world',
+        blocks: {
+          originTypes: ['world_broadcast'],
+          worldIds: [],
+        },
+      },
+    ],
+  });
   const worldIdProperty = stringParam({
     description: 'Canonical world id returned by claworld_list_worlds or claworld_get_world_detail.',
     minLength: 1,
@@ -1277,6 +1353,20 @@ function buildRegisteredTools(api, plugin) {
             },
             outcome: 'Persists the display name, keeps the stable code, and returns a temporary share-card URL.',
           },
+          {
+            title: 'Update the inbound chat policy',
+            input: {
+              accountId: 'claworld',
+              action: 'update_chat_policy',
+              chatRequestApprovalPolicy: {
+                mode: 'trusted_or_world',
+                blocks: {
+                  originTypes: ['world_broadcast'],
+                },
+              },
+            },
+            outcome: 'Stores the account-level chat-request policy in the backend and returns the updated policy snapshot.',
+          },
         ],
       }),
       parameters: objectParam({
@@ -1285,15 +1375,16 @@ function buildRegisteredTools(api, plugin) {
         properties: {
           accountId: accountIdProperty,
           action: stringParam({
-            description: 'Account action. Defaults to view; inferred as update_identity when displayName is present.',
+            description: 'Account action. Defaults to view; inferred from displayName or chatRequestApprovalPolicy when omitted.',
             enumValues: ACCOUNT_ACTIONS,
-            examples: ['view', 'update_identity'],
+            examples: ['view', 'update_identity', 'update_chat_policy'],
           }),
           displayName: stringParam({
             description: 'Public-facing display name. Required for action=update_identity. # is reserved and must not appear here.',
             minLength: 1,
             examples: ['Moza', '小发发'],
           }),
+          chatRequestApprovalPolicy: chatRequestApprovalPolicyProperty,
           generateShareCard: booleanParam({
             description: 'When true, return a temporary public identity card URL. Defaults to false for view and true for update_identity.',
           }),
@@ -1314,6 +1405,13 @@ function buildRegisteredTools(api, plugin) {
             displayName: '小发发',
             generateShareCard: true,
           },
+          {
+            accountId: 'claworld',
+            action: 'update_chat_policy',
+            chatRequestApprovalPolicy: {
+              mode: 'manual_review',
+            },
+          },
         ],
       }),
       async execute(_toolCallId, params = {}) {
@@ -1342,6 +1440,26 @@ function buildRegisteredTools(api, plugin) {
           }));
         }
 
+        if (action === 'update_chat_policy') {
+          const context = await resolveToolContext(api, plugin, params);
+          const chatRequestApprovalPolicy = normalizeObject(params.chatRequestApprovalPolicy, null);
+          if (!chatRequestApprovalPolicy) {
+            requireManageWorldField(
+              'chatRequestApprovalPolicy',
+              'chatRequestApprovalPolicy is required for action=update_chat_policy',
+            );
+          }
+          const payload = await plugin.runtime.productShell.profile.updateChatRequestApprovalPolicy({
+            ...context,
+            chatRequestApprovalPolicy,
+          });
+          return buildToolResult(projectToolAccountMutationResponse({
+            action,
+            accountId: context.accountId,
+            identityPayload: payload,
+          }));
+        }
+
         const cfg = await loadCurrentConfig(api);
         const accountId = normalizeText(params.accountId, plugin.config.defaultAccountId(cfg) || null);
         const runtimeConfig = plugin.config.resolveRuntimeConfig(cfg, accountId);

package/src/openclaw/plugin/relay-client.js

@@ -587,7 +587,7 @@ export class ClaworldRelayClient extends EventEmitter {
     config,
     agentId,
     credential = null,
-    clientVersion = 'claworld-plugin/0.2.14',
+    clientVersion = 'claworld-plugin/0.2.15',
     sessionTarget,
     fallbackTarget,
   } = {}) {
@@ -1442,7 +1442,7 @@ export class ClaworldRelayClient extends EventEmitter {
     if (requestResult.status !== 201) {
       throw new Error(`failed to create chat request: ${JSON.stringify(requestResult.body)}`);
     }
-    const requestId = requestResult.body.requestId;
+    const requestId = requestResult.body?.chatRequest?.chatRequestId || requestResult.body?.requestId || null;
     return {
       requestId,
       sessionKey: null,