Onboarding: default dmScope to per-channel-peer

src/commands/onboard-config.test.ts

@@ -0,0 +1,28 @@
+import { describe, expect, it } from "vitest";
+import type { OpenClawConfig } from "../config/config.js";
+import {
+  applyOnboardingLocalWorkspaceConfig,
+  ONBOARDING_DEFAULT_DM_SCOPE,
+} from "./onboard-config.js";
+
+describe("applyOnboardingLocalWorkspaceConfig", () => {
+  it("sets secure dmScope default when unset", () => {
+    const baseConfig: OpenClawConfig = {};
+    const result = applyOnboardingLocalWorkspaceConfig(baseConfig, "/tmp/workspace");
+
+    expect(result.session?.dmScope).toBe(ONBOARDING_DEFAULT_DM_SCOPE);
+    expect(result.gateway?.mode).toBe("local");
+    expect(result.agents?.defaults?.workspace).toBe("/tmp/workspace");
+  });
+
+  it("preserves existing dmScope when already configured", () => {
+    const baseConfig: OpenClawConfig = {
+      session: {
+        dmScope: "main",
+      },
+    };
+    const result = applyOnboardingLocalWorkspaceConfig(baseConfig, "/tmp/workspace");
+
+    expect(result.session?.dmScope).toBe("main");
+  });
+});

src/commands/onboard-config.ts

@@ -1,5 +1,7 @@
 import type { OpenClawConfig } from "../config/config.js";
 
+export const ONBOARDING_DEFAULT_DM_SCOPE = "per-channel-peer";
+
 export function applyOnboardingLocalWorkspaceConfig(
   baseConfig: OpenClawConfig,
   workspaceDir: string,
@@ -17,5 +19,9 @@ export function applyOnboardingLocalWorkspaceConfig(
       ...baseConfig.gateway,
       mode: "local",
     },
+    session: {
+      ...baseConfig.session,
+      dmScope: baseConfig.session?.dmScope ?? ONBOARDING_DEFAULT_DM_SCOPE,
+    },
   };
 }