Vendor OpenClaw source as Adolf fork baseline

Adolf is a fork/vendored clone of github.com/openclaw/openclaw (v2026.6.11),
free to diverge. Tree copied sans upstream .git; upstream remote added for
future syncs. Node pinned to 24 (.nvmrc); engines already require >=22.19.
Preserves docs/ARCHITECTURE.md.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01LeqyaxJF2nbRXJtae2kNB2

extensions/device-pair/pair-command-approve.ts

@@ -0,0 +1,84 @@
+// Device Pair plugin module implements pair command approve behavior.
+import {
+  normalizeLowercaseStringOrEmpty,
+  normalizeOptionalString,
+} from "openclaw/plugin-sdk/string-coerce-runtime";
+import { approveDevicePairing, listDevicePairing } from "./api.js";
+import { formatPendingRequests } from "./notify.js";
+
+type PendingPairingEntry = Awaited<ReturnType<typeof listDevicePairing>>["pending"][number];
+type ApprovePairingResult = Awaited<ReturnType<typeof approveDevicePairing>>;
+type ApprovedPairingEntry = Exclude<ApprovePairingResult, null | { status: "forbidden" }>;
+type ForbiddenPairingEntry = Extract<ApprovePairingResult, { status: "forbidden" }>;
+
+function buildMultiplePendingApprovalReply(pending: PendingPairingEntry[]): { text: string } {
+  return {
+    text:
+      `${formatPendingRequests(pending)}\n\n` +
+      "Multiple pending requests found. Approve one explicitly:\n" +
+      "/pair approve <requestId>\n" +
+      "Or approve the most recent:\n" +
+      "/pair approve latest",
+  };
+}
+
+export function selectPendingApprovalRequest(params: {
+  pending: PendingPairingEntry[];
+  requested?: string;
+}): { pending?: PendingPairingEntry; reply?: { text: string } } {
+  if (params.pending.length === 0) {
+    return { reply: { text: "No pending device pairing requests." } };
+  }
+
+  if (!params.requested) {
+    return params.pending.length === 1
+      ? { pending: params.pending[0] }
+      : { reply: buildMultiplePendingApprovalReply(params.pending) };
+  }
+
+  if (normalizeLowercaseStringOrEmpty(params.requested) === "latest") {
+    let latest = params.pending[0];
+    for (let index = 1; index < params.pending.length; index += 1) {
+      const pending = params.pending[index];
+      if ((pending.ts ?? 0) > (latest.ts ?? 0)) {
+        latest = pending;
+      }
+    }
+    return { pending: latest };
+  }
+
+  return {
+    pending: params.pending.find((entry) => entry.requestId === params.requested),
+    reply: undefined,
+  };
+}
+
+function formatApprovedPairingReply(approved: ApprovedPairingEntry): { text: string } {
+  const label = normalizeOptionalString(approved.device.displayName) || approved.device.deviceId;
+  const platform = normalizeOptionalString(approved.device.platform);
+  const platformLabel = platform ? ` (${platform})` : "";
+  return { text: `✅ Paired ${label}${platformLabel}.` };
+}
+
+function formatForbiddenPairingRequirement(approved: ForbiddenPairingEntry): string {
+  return approved.scope ?? approved.role ?? "additional approval";
+}
+
+export async function approvePendingPairingRequest(params: {
+  requestId: string;
+  callerScopes?: readonly string[];
+}): Promise<{ text: string }> {
+  const approved =
+    params.callerScopes === undefined
+      ? await approveDevicePairing(params.requestId)
+      : await approveDevicePairing(params.requestId, { callerScopes: params.callerScopes });
+  if (!approved) {
+    return { text: "Pairing request not found." };
+  }
+  if (approved.status === "forbidden") {
+    return {
+      text: `⚠️ This command requires ${formatForbiddenPairingRequirement(approved)} to approve this pairing request.`,
+    };
+  }
+  return formatApprovedPairingReply(approved);
+}