Group chat keeps asking Approve for Group update to a friend's Bot #1113

Environment

FlyBot delivery group FlyBot 交付组 on production Bot Social, with friend's Bot Chief (flybot98b8ecba) in the roster (labeled 好友的 Bot). Owner report 2026-10-25 Asia/Shanghai: "这里总是一直让我审批，紧急修复一下".

Steps to reproduce

1. Open a local group that already includes a friend's Bot (here Chief (flybot98b8ecba)).
2. Let local Bots (Chief / Dev / …) keep working in that group so lines need to reach the friend's home.
3. Watch the chat for the inline card.

Actual

Almost every cross-home group line stops on Waiting for approval:

• Chief → flybot98b8ecba
• Group update for flybot98b8ecba in a group chat
• checkbox Auto-send from now on (unchecked by default)
• Approve / Reject

The owner has to click Approve again and again; the card keeps coming back. Screenshot:

Expected

After the owner has consented once for that pair (or for that group), later ordinary group lines to that friend's Bot do not keep asking. Auto-send from now on (or an equivalent standing grant) must actually stop the next cards. Risk / attachment / policy findings may still hold.

Where it sits (pointers only)

• Card copy Group update for … in a group chat — plugins/social/client.js (pendingTitle / summary fallback).
• FlyBot send middleware returns undefined for via === 'room' | 'room-share' (no pair Auto-send there) — plugins/social/src/social.js ~1555.
• After Bot Social returns pending_approval, room traffic only hits autoSendRoomEnvelope (blanket-only); pair approvalFor(...)==='auto' is used for non-room lines via autoSendRemoteLine — same file ~1746–1835.
• Related closed work: Always approve on a held friend reply turns on a hidden home-wide Auto-send: no way to see or undo it on the approver's home; three names for one setting #417 (pair Auto-send), A friend's Bot added to a local group shows the raw FLYBOT-ROOM-SHARE envelope on its approval cards #847 (room envelope), Auto-send on for a friend: the line never arrives — Bot Social outbound approval stays pending and no card exists #737 / Bot Social: the Auto-send hold guard is pass-through, silent on lag, and partly untested #766 (Auto-send vs Bot Social hold). Not a duplicate of command Always-allow (Approval card has no way to approve permanently (per Bot or per group) #540 / Always allow does not persist: the same permission card comes back after approval #608).

Suggested direction (non-binding)

Treat standing pair Auto-send (and Auto-send from now on on this card) as covering ordinary group-room lines to that person the same way friend DM replies already do, while leaving non-blanket findings on a card. Verify; do not assume this pointer is the whole fix.

Umbrella: #5.