@cxyhhhhh/openclaw-qqbot 2.0.0-dev.202607081648 → 2.0.0-dev.202607082155

package/dist/index.cjs

@@ -2239,7 +2239,7 @@ var require_websocket = __commonJS({
     var http2 = require("http");
     var net = require("net");
     var tls = require("tls");
-    var { randomBytes, createHash: createHash3 } = require("crypto");
+    var { randomBytes: randomBytes2, createHash: createHash3 } = require("crypto");
     var { Duplex, Readable } = require("stream");
     var { URL: URL2 } = require("url");
     var PerMessageDeflate2 = require_permessage_deflate();
@@ -2769,7 +2769,7 @@ var require_websocket = __commonJS({
         }
       }
       const defaultPort = isSecure ? 443 : 80;
-      const key = randomBytes(16).toString("base64");
+      const key = randomBytes2(16).toString("base64");
       const request2 = isSecure ? https3.request : http2.request;
       const protocolSet = /* @__PURE__ */ new Set();
       let perMessageDeflate;
@@ -2822,7 +2822,7 @@ var require_websocket = __commonJS({
         opts.socketPath = parts[0];
         opts.path = parts[1];
       }
-      let req;
+      let req4;
       if (opts.followRedirects) {
         if (websocket._redirects === 0) {
           websocket._originalIpc = isIpcUrl;
@@ -2847,32 +2847,32 @@ var require_websocket = __commonJS({
         if (opts.auth && !options.headers.authorization) {
           options.headers.authorization = "Basic " + Buffer.from(opts.auth).toString("base64");
         }
-        req = websocket._req = request2(opts);
+        req4 = websocket._req = request2(opts);
         if (websocket._redirects) {
-          websocket.emit("redirect", websocket.url, req);
+          websocket.emit("redirect", websocket.url, req4);
         }
       } else {
-        req = websocket._req = request2(opts);
+        req4 = websocket._req = request2(opts);
       }
       if (opts.timeout) {
-        req.on("timeout", () => {
-          abortHandshake(websocket, req, "Opening handshake has timed out");
+        req4.on("timeout", () => {
+          abortHandshake(websocket, req4, "Opening handshake has timed out");
         });
       }
-      req.on("error", (err) => {
-        if (req === null || req[kAborted]) return;
-        req = websocket._req = null;
+      req4.on("error", (err) => {
+        if (req4 === null || req4[kAborted]) return;
+        req4 = websocket._req = null;
         emitErrorAndClose(websocket, err);
       });
-      req.on("response", (res) => {
+      req4.on("response", (res) => {
         const location = res.headers.location;
         const statusCode = res.statusCode;
         if (location && opts.followRedirects && statusCode >= 300 && statusCode < 400) {
           if (++websocket._redirects > opts.maxRedirects) {
-            abortHandshake(websocket, req, "Maximum redirects exceeded");
+            abortHandshake(websocket, req4, "Maximum redirects exceeded");
             return;
           }
-          req.abort();
+          req4.abort();
           let addr;
           try {
             addr = new URL2(location, address);
@@ -2882,18 +2882,18 @@ var require_websocket = __commonJS({
             return;
           }
           initAsClient(websocket, addr, protocols, options);
-        } else if (!websocket.emit("unexpected-response", req, res)) {
+        } else if (!websocket.emit("unexpected-response", req4, res)) {
           abortHandshake(
             websocket,
-            req,
+            req4,
             `Unexpected server response: ${res.statusCode}`
           );
         }
       });
-      req.on("upgrade", (res, socket, head) => {
+      req4.on("upgrade", (res, socket, head) => {
         websocket.emit("upgrade", res);
         if (websocket.readyState !== WebSocket2.CONNECTING) return;
-        req = websocket._req = null;
+        req4 = websocket._req = null;
         const upgrade = res.headers.upgrade;
         if (upgrade === void 0 || upgrade.toLowerCase() !== "websocket") {
           abortHandshake(websocket, socket, "Invalid Upgrade header");
@@ -2958,9 +2958,9 @@ var require_websocket = __commonJS({
         });
       });
       if (opts.finishRequest) {
-        opts.finishRequest(req, websocket);
+        opts.finishRequest(req4, websocket);
       } else {
-        req.end();
+        req4.end();
       }
     }
     function emitErrorAndClose(websocket, err) {
@@ -3339,7 +3339,7 @@ var require_websocket_server = __commonJS({
           );
         }
         if (options.port != null) {
-          this._server = http2.createServer((req, res) => {
+          this._server = http2.createServer((req4, res) => {
             const body = http2.STATUS_CODES[426];
             res.writeHead(426, {
               "Content-Length": body.length,
@@ -3361,8 +3361,8 @@ var require_websocket_server = __commonJS({
           this._removeListeners = addListeners(this._server, {
             listening: this.emit.bind(this, "listening"),
             error: this.emit.bind(this, "error"),
-            upgrade: (req, socket, head) => {
-              this.handleUpgrade(req, socket, head, emitConnection);
+            upgrade: (req4, socket, head) => {
+              this.handleUpgrade(req4, socket, head, emitConnection);
             }
           });
         }
@@ -3440,10 +3440,10 @@ var require_websocket_server = __commonJS({
        * @return {Boolean} `true` if the request is valid, else `false`
        * @public
        */
-      shouldHandle(req) {
+      shouldHandle(req4) {
         if (this.options.path) {
-          const index = req.url.indexOf("?");
-          const pathname = index !== -1 ? req.url.slice(0, index) : req.url;
+          const index = req4.url.indexOf("?");
+          const pathname = index !== -1 ? req4.url.slice(0, index) : req4.url;
           if (pathname !== this.options.path) return false;
         }
         return true;
@@ -3457,49 +3457,49 @@ var require_websocket_server = __commonJS({
        * @param {Function} cb Callback
        * @public
        */
-      handleUpgrade(req, socket, head, cb) {
+      handleUpgrade(req4, socket, head, cb) {
         socket.on("error", socketOnError);
-        const key = req.headers["sec-websocket-key"];
-        const upgrade = req.headers.upgrade;
-        const version = +req.headers["sec-websocket-version"];
-        if (req.method !== "GET") {
+        const key = req4.headers["sec-websocket-key"];
+        const upgrade = req4.headers.upgrade;
+        const version = +req4.headers["sec-websocket-version"];
+        if (req4.method !== "GET") {
           const message = "Invalid HTTP method";
-          abortHandshakeOrEmitwsClientError(this, req, socket, 405, message);
+          abortHandshakeOrEmitwsClientError(this, req4, socket, 405, message);
           return;
         }
         if (upgrade === void 0 || upgrade.toLowerCase() !== "websocket") {
           const message = "Invalid Upgrade header";
-          abortHandshakeOrEmitwsClientError(this, req, socket, 400, message);
+          abortHandshakeOrEmitwsClientError(this, req4, socket, 400, message);
           return;
         }
         if (key === void 0 || !keyRegex.test(key)) {
           const message = "Missing or invalid Sec-WebSocket-Key header";
-          abortHandshakeOrEmitwsClientError(this, req, socket, 400, message);
+          abortHandshakeOrEmitwsClientError(this, req4, socket, 400, message);
           return;
         }
         if (version !== 13 && version !== 8) {
           const message = "Missing or invalid Sec-WebSocket-Version header";
-          abortHandshakeOrEmitwsClientError(this, req, socket, 400, message, {
+          abortHandshakeOrEmitwsClientError(this, req4, socket, 400, message, {
             "Sec-WebSocket-Version": "13, 8"
           });
           return;
         }
-        if (!this.shouldHandle(req)) {
+        if (!this.shouldHandle(req4)) {
           abortHandshake(socket, 400);
           return;
         }
-        const secWebSocketProtocol = req.headers["sec-websocket-protocol"];
+        const secWebSocketProtocol = req4.headers["sec-websocket-protocol"];
         let protocols = /* @__PURE__ */ new Set();
         if (secWebSocketProtocol !== void 0) {
           try {
             protocols = subprotocol2.parse(secWebSocketProtocol);
           } catch (err) {
             const message = "Invalid Sec-WebSocket-Protocol header";
-            abortHandshakeOrEmitwsClientError(this, req, socket, 400, message);
+            abortHandshakeOrEmitwsClientError(this, req4, socket, 400, message);
             return;
           }
         }
-        const secWebSocketExtensions = req.headers["sec-websocket-extensions"];
+        const secWebSocketExtensions = req4.headers["sec-websocket-extensions"];
         const extensions = {};
         if (this.options.perMessageDeflate && secWebSocketExtensions !== void 0) {
           const perMessageDeflate = new PerMessageDeflate2({
@@ -3515,15 +3515,15 @@ var require_websocket_server = __commonJS({
             }
           } catch (err) {
             const message = "Invalid or unacceptable Sec-WebSocket-Extensions header";
-            abortHandshakeOrEmitwsClientError(this, req, socket, 400, message);
+            abortHandshakeOrEmitwsClientError(this, req4, socket, 400, message);
             return;
           }
         }
         if (this.options.verifyClient) {
           const info = {
-            origin: req.headers[`${version === 8 ? "sec-websocket-origin" : "origin"}`],
-            secure: !!(req.socket.authorized || req.socket.encrypted),
-            req
+            origin: req4.headers[`${version === 8 ? "sec-websocket-origin" : "origin"}`],
+            secure: !!(req4.socket.authorized || req4.socket.encrypted),
+            req: req4
           };
           if (this.options.verifyClient.length === 2) {
             this.options.verifyClient(info, (verified, code, message, headers) => {
@@ -3534,7 +3534,7 @@ var require_websocket_server = __commonJS({
                 extensions,
                 key,
                 protocols,
-                req,
+                req4,
                 socket,
                 head,
                 cb
@@ -3544,7 +3544,7 @@ var require_websocket_server = __commonJS({
           }
           if (!this.options.verifyClient(info)) return abortHandshake(socket, 401);
         }
-        this.completeUpgrade(extensions, key, protocols, req, socket, head, cb);
+        this.completeUpgrade(extensions, key, protocols, req4, socket, head, cb);
       }
       /**
        * Upgrade the connection to WebSocket.
@@ -3559,7 +3559,7 @@ var require_websocket_server = __commonJS({
        * @throws {Error} If called more than once with the same socket
        * @private
        */
-      completeUpgrade(extensions, key, protocols, req, socket, head, cb) {
+      completeUpgrade(extensions, key, protocols, req4, socket, head, cb) {
         if (!socket.readable || !socket.writable) return socket.destroy();
         if (socket[kWebSocket]) {
           throw new Error(
@@ -3576,7 +3576,7 @@ var require_websocket_server = __commonJS({
         ];
         const ws = new this.options.WebSocket(null, void 0, this.options);
         if (protocols.size) {
-          const protocol = this.options.handleProtocols ? this.options.handleProtocols(protocols, req) : protocols.values().next().value;
+          const protocol = this.options.handleProtocols ? this.options.handleProtocols(protocols, req4) : protocols.values().next().value;
           if (protocol) {
             headers.push(`Sec-WebSocket-Protocol: ${protocol}`);
             ws._protocol = protocol;
@@ -3590,7 +3590,7 @@ var require_websocket_server = __commonJS({
           headers.push(`Sec-WebSocket-Extensions: ${value}`);
           ws._extensions = extensions;
         }
-        this.emit("headers", headers, req);
+        this.emit("headers", headers, req4);
         socket.write(headers.concat("\r\n").join("\r\n"));
         socket.removeListener("error", socketOnError);
         ws.setSocket(socket, head, {
@@ -3607,7 +3607,7 @@ var require_websocket_server = __commonJS({
             }
           });
         }
-        cb(ws, req);
+        cb(ws, req4);
       }
     };
     module2.exports = WebSocketServer2;
@@ -3640,11 +3640,11 @@ var require_websocket_server = __commonJS({
 ` + Object.keys(headers).map((h2) => `${h2}: ${headers[h2]}`).join("\r\n") + "\r\n\r\n" + message
       );
     }
-    function abortHandshakeOrEmitwsClientError(server, req, socket, code, message, headers) {
+    function abortHandshakeOrEmitwsClientError(server, req4, socket, code, message, headers) {
       if (server.listenerCount("wsClientError")) {
         const err = new Error(message);
         Error.captureStackTrace(err, abortHandshakeOrEmitwsClientError);
-        server.emit("wsClientError", err, socket, req);
+        server.emit("wsClientError", err, socket, req4);
       } else {
         abortHandshake(socket, code, message, headers);
       }
@@ -5020,11 +5020,11 @@ var fs3 = __toESM(require("fs"), 1);
 var path = __toESM(require("path"), 1);
 
 // node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607081646/node_modules/@cxyhhhhh/qqbot-nodejs/dist/middleware/types.js
-function resolvePolicy(ctx, path20, explicit, defaultValue) {
+function resolvePolicy(ctx, path21, explicit, defaultValue) {
   if (explicit !== void 0 && explicit !== null) {
     return explicit;
   }
-  const keys = path20.split(".");
+  const keys = path21.split(".");
   let value = ctx.state.policy;
   for (const key of keys) {
     if (value === null || value === void 0)
@@ -5102,10 +5102,10 @@ var ApiError = class extends Error {
   bizCode;
   bizMessage;
   name = "ApiError";
-  constructor(message, httpStatus, path20, bizCode, bizMessage) {
+  constructor(message, httpStatus, path21, bizCode, bizMessage) {
     super(message);
     this.httpStatus = httpStatus;
-    this.path = path20;
+    this.path = path21;
     this.bizCode = bizCode;
     this.bizMessage = bizMessage;
   }
@@ -5193,14 +5193,14 @@ var ApiClient = class {
     const ua = config.userAgent ?? "qqbot-nodejs/unknown";
     this.resolveUserAgent = typeof ua === "function" ? ua : () => ua;
   }
-  async request(accessToken, method, path20, body, options) {
-    const url = `${this.baseUrl}${path20}`;
+  async request(accessToken, method, path21, body, options) {
+    const url = `${this.baseUrl}${path21}`;
     const headers = {
       Authorization: `QQBot ${accessToken}`,
       "Content-Type": "application/json",
       "User-Agent": this.resolveUserAgent()
     };
-    const isFileUpload = options?.uploadRequest === true || path20.includes("/files") || path20.includes("/upload_prepare") || path20.includes("/upload_part_finish");
+    const isFileUpload = options?.uploadRequest === true || path21.includes("/files") || path21.includes("/upload_prepare") || path21.includes("/upload_part_finish");
     const timeout = options?.timeoutMs ?? (isFileUpload ? this.fileUploadTimeoutMs : this.defaultTimeoutMs);
     const controller = new AbortController();
     const timeoutId = setTimeout(() => controller.abort(), timeout);
@@ -5225,10 +5225,10 @@ var ApiClient = class {
       clearTimeout(timeoutId);
       if (err instanceof Error && err.name === "AbortError") {
         this.logger?.error?.(`[qqbot:api] <<< Timeout after ${timeout}ms`);
-        throw new ApiError(`Request timeout [${path20}]: exceeded ${timeout}ms`, 0, path20);
+        throw new ApiError(`Request timeout [${path21}]: exceeded ${timeout}ms`, 0, path21);
       }
       this.logger?.error?.(`[qqbot:api] <<< Network error: ${formatErrorMessage(err)}`);
-      throw new ApiError(`Network error [${path20}]: ${formatErrorMessage(err)}`, 0, path20);
+      throw new ApiError(`Network error [${path21}]: ${formatErrorMessage(err)}`, 0, path21);
     } finally {
       clearTimeout(timeoutId);
     }
@@ -5238,7 +5238,7 @@ var ApiClient = class {
     try {
       rawBody = await res.text();
     } catch (err) {
-      throw new ApiError(`Failed to read response [${path20}]: ${formatErrorMessage(err)}`, res.status, path20);
+      throw new ApiError(`Failed to read response [${path21}]: ${formatErrorMessage(err)}`, res.status, path21);
     }
     this.logger?.debug?.(`[qqbot:api] <<< Body: ${rawBody}`);
     const contentType = res.headers.get("content-type") ?? "";
@@ -5246,26 +5246,26 @@ var ApiClient = class {
     if (!res.ok) {
       if (isHtmlResponse) {
         const statusHint = res.status === 502 || res.status === 503 || res.status === 504 ? "\u8C03\u7528\u53D1\u751F\u5F02\u5E38\uFF0C\u8BF7\u7A0D\u5019\u91CD\u8BD5" : res.status === 429 ? "\u8BF7\u6C42\u8FC7\u4E8E\u9891\u7E41\uFF0C\u5DF2\u88AB\u9650\u6D41" : `\u5F00\u653E\u5E73\u53F0\u8FD4\u56DE HTTP ${res.status}`;
-        throw new ApiError(`${statusHint}\uFF08${path20}\uFF09\uFF0C\u8BF7\u7A0D\u540E\u91CD\u8BD5`, res.status, path20);
+        throw new ApiError(`${statusHint}\uFF08${path21}\uFF09\uFF0C\u8BF7\u7A0D\u540E\u91CD\u8BD5`, res.status, path21);
       }
       try {
         const error = JSON.parse(rawBody);
         const bizCode = error.code ?? error.err_code;
-        throw new ApiError(`API Error [${path20}]: ${error.message ?? rawBody}`, res.status, path20, bizCode, error.message);
+        throw new ApiError(`API Error [${path21}]: ${error.message ?? rawBody}`, res.status, path21, bizCode, error.message);
       } catch (parseErr) {
         if (parseErr instanceof ApiError) {
           throw parseErr;
         }
-        throw new ApiError(`API Error [${path20}] HTTP ${res.status}: ${rawBody.slice(0, 200)}`, res.status, path20);
+        throw new ApiError(`API Error [${path21}] HTTP ${res.status}: ${rawBody.slice(0, 200)}`, res.status, path21);
       }
     }
     if (isHtmlResponse) {
-      throw new ApiError(`QQ \u670D\u52A1\u7AEF\u8FD4\u56DE\u4E86\u975E JSON \u54CD\u5E94\uFF08${path20}\uFF09\uFF0C\u53EF\u80FD\u662F\u4E34\u65F6\u6545\u969C\uFF0C\u8BF7\u7A0D\u540E\u91CD\u8BD5`, res.status, path20);
+      throw new ApiError(`QQ \u670D\u52A1\u7AEF\u8FD4\u56DE\u4E86\u975E JSON \u54CD\u5E94\uFF08${path21}\uFF09\uFF0C\u53EF\u80FD\u662F\u4E34\u65F6\u6545\u969C\uFF0C\u8BF7\u7A0D\u540E\u91CD\u8BD5`, res.status, path21);
     }
     try {
       return JSON.parse(rawBody);
     } catch {
-      throw new ApiError(`\u5F00\u653E\u5E73\u53F0\u54CD\u5E94\u683C\u5F0F\u5F02\u5E38\uFF08${path20}\uFF09\uFF0C\u8BF7\u7A0D\u540E\u91CD\u8BD5`, res.status, path20);
+      throw new ApiError(`\u5F00\u653E\u5E73\u53F0\u54CD\u5E94\u683C\u5F0F\u5F02\u5E38\uFF08${path21}\uFF09\uFF0C\u8BF7\u7A0D\u540E\u91CD\u8BD5`, res.status, path21);
     }
   }
 };
@@ -5488,9 +5488,9 @@ var ChunkedMediaApi = class {
   }
   async callUploadPrepare(opts, fileName, fileSize, hashes, pathLabel) {
     const token = await this.tokenManager.getAccessToken(opts.creds.appId, opts.creds.clientSecret);
-    const path20 = uploadPreparePath(opts.scope, opts.targetId);
+    const path21 = uploadPreparePath(opts.scope, opts.targetId);
     try {
-      return await this.client.request(token, "POST", path20, {
+      return await this.client.request(token, "POST", path21, {
         file_type: opts.fileType,
         file_name: fileName,
         file_size: fileSize,
@@ -5507,10 +5507,10 @@ var ChunkedMediaApi = class {
   }
   async callUploadPartFinish(opts, uploadId, partIndex, blockSize, md5, retryTimeoutMs) {
     const persistentPolicy = buildPartFinishPersistentPolicy(retryTimeoutMs);
-    const path20 = uploadPartFinishPath(opts.scope, opts.targetId);
+    const path21 = uploadPartFinishPath(opts.scope, opts.targetId);
     await withRetry(async () => {
       const token = await this.tokenManager.getAccessToken(opts.creds.appId, opts.creds.clientSecret);
-      return this.client.request(token, "POST", path20, {
+      return this.client.request(token, "POST", path21, {
         upload_id: uploadId,
         part_index: partIndex,
         block_size: blockSize,
@@ -5519,10 +5519,10 @@ var ChunkedMediaApi = class {
     }, PART_FINISH_RETRY_POLICY, persistentPolicy, this.logger);
   }
   async callCompleteUpload(opts, uploadId) {
-    const path20 = uploadCompletePath(opts.scope, opts.targetId);
+    const path21 = uploadCompletePath(opts.scope, opts.targetId);
     return withRetry(async () => {
       const token = await this.tokenManager.getAccessToken(opts.creds.appId, opts.creds.clientSecret);
-      return this.client.request(token, "POST", path20, { upload_id: uploadId }, { uploadRequest: true });
+      return this.client.request(token, "POST", path21, { upload_id: uploadId }, { uploadRequest: true });
     }, COMPLETE_UPLOAD_RETRY_POLICY, void 0, this.logger);
   }
 };
@@ -5598,7 +5598,7 @@ var PART_UPLOAD_MAX_RETRIES = 2;
 function putToCOS(presignedUrl, data, signal) {
   return new Promise((resolve2, reject) => {
     const parsed = new URL(presignedUrl);
-    const req = https.request(parsed, {
+    const req4 = https.request(parsed, {
       method: "PUT",
       headers: { "Content-Length": String(data.length) },
       signal
@@ -5616,10 +5616,10 @@ function putToCOS(presignedUrl, data, signal) {
       });
       res.on("error", reject);
     });
-    req.on("error", (err) => {
+    req4.on("error", (err) => {
       reject(err);
     });
-    req.end(data);
+    req4.end(data);
   });
 }
 async function putToPresignedUrl(presignedUrl, data, partIndex, totalParts, logger, prefix) {
@@ -5716,8 +5716,8 @@ var MediaApi = class {
       body.file_name = this.sanitize(opts.fileName);
     }
     const token = await this.tokenManager.getAccessToken(creds.appId, creds.clientSecret);
-    const path20 = mediaUploadPath(scope, targetId);
-    const result = await withRetry(() => this.client.request(token, "POST", path20, body, {
+    const path21 = mediaUploadPath(scope, targetId);
+    const result = await withRetry(() => this.client.request(token, "POST", path21, body, {
       redactBodyKeys: ["file_data"],
       uploadRequest: true
     }), UPLOAD_RETRY_POLICY, void 0, this.logger);
@@ -5733,8 +5733,8 @@ var MediaApi = class {
   async sendMediaMessage(scope, targetId, fileInfo, creds, opts) {
     const token = await this.tokenManager.getAccessToken(creds.appId, creds.clientSecret);
     const msgSeq = opts?.msgId ? getNextMsgSeq(opts.msgId) : 1;
-    const path20 = messagePath(scope, targetId);
-    return this.client.request(token, "POST", path20, {
+    const path21 = messagePath(scope, targetId);
+    return this.client.request(token, "POST", path21, {
       msg_type: 7,
       media: { file_info: fileInfo },
       msg_seq: msgSeq,
@@ -5773,8 +5773,8 @@ var MessageApi = class {
     const token = await this.tokenManager.getAccessToken(creds.appId, creds.clientSecret);
     const msgSeq = opts?.msgId ? getNextMsgSeq(opts.msgId) : 1;
     const body = this.buildMessageBody(content, opts?.msgId, msgSeq, opts?.messageReference, opts?.inlineKeyboard);
-    const path20 = messagePath(scope, targetId);
-    return this.sendAndNotify(creds.appId, token, "POST", path20, body, { text: content });
+    const path21 = messagePath(scope, targetId);
+    return this.sendAndNotify(creds.appId, token, "POST", path21, body, { text: content });
   }
   async sendProactiveMessage(scope, targetId, content, creds) {
     if (!content?.trim()) {
@@ -5782,8 +5782,8 @@ var MessageApi = class {
     }
     const token = await this.tokenManager.getAccessToken(creds.appId, creds.clientSecret);
     const body = this.buildProactiveBody(content);
-    const path20 = messagePath(scope, targetId);
-    return this.sendAndNotify(creds.appId, token, "POST", path20, body, { text: content });
+    const path21 = messagePath(scope, targetId);
+    return this.sendAndNotify(creds.appId, token, "POST", path21, body, { text: content });
   }
   async sendChannelMessage(opts) {
     const token = await this.tokenManager.getAccessToken(opts.creds.appId, opts.creds.clientSecret);
@@ -5829,23 +5829,23 @@ var MessageApi = class {
    * Send a C2C stream message chunk (`/v2/users/{openid}/stream_messages`).
    * Only supported for one-to-one chats.
    */
-  async sendC2CStreamMessage(creds, openid, req) {
+  async sendC2CStreamMessage(creds, openid, req4) {
     const token = await this.tokenManager.getAccessToken(creds.appId, creds.clientSecret);
-    const path20 = streamMessagePath(openid);
+    const path21 = streamMessagePath(openid);
     const body = {
-      input_mode: req.input_mode,
-      input_state: req.input_state,
-      content_type: req.content_type,
-      content_raw: req.content_raw,
-      event_id: req.event_id,
-      msg_id: req.msg_id,
-      msg_seq: req.msg_seq,
-      index: req.index
+      input_mode: req4.input_mode,
+      input_state: req4.input_state,
+      content_type: req4.content_type,
+      content_raw: req4.content_raw,
+      event_id: req4.event_id,
+      msg_id: req4.msg_id,
+      msg_seq: req4.msg_seq,
+      index: req4.index
     };
-    if (req.stream_msg_id) {
-      body.stream_msg_id = req.stream_msg_id;
+    if (req4.stream_msg_id) {
+      body.stream_msg_id = req4.stream_msg_id;
     }
-    return this.client.request(token, "POST", path20, body);
+    return this.client.request(token, "POST", path21, body);
   }
   /**
    * Raw message send — transparently forwards all fields to the QQ Open Platform API.
@@ -5859,7 +5859,7 @@ var MessageApi = class {
    */
   async sendRaw(scope, targetId, creds, body) {
     const token = await this.tokenManager.getAccessToken(creds.appId, creds.clientSecret);
-    const path20 = messagePath(scope, targetId);
+    const path21 = messagePath(scope, targetId);
     if (body.msg_seq === void 0) {
       body.msg_seq = body.msg_id ? getNextMsgSeq(body.msg_id) : 1;
     }
@@ -5876,7 +5876,7 @@ var MessageApi = class {
         body.msg_type = 0;
     }
     const cleaned = Object.fromEntries(Object.entries(body).filter(([, v]) => v !== void 0));
-    return this.sendAndNotify(creds.appId, token, "POST", path20, cleaned, { text: cleaned.content ?? cleaned.markdown?.content });
+    return this.sendAndNotify(creds.appId, token, "POST", path21, cleaned, { text: cleaned.content ?? cleaned.markdown?.content });
   }
   /**
    * Send a message to a guild text channel.
@@ -5900,11 +5900,11 @@ var MessageApi = class {
    */
   async recallMessage(scope, targetId, messageId, creds) {
     const token = await this.tokenManager.getAccessToken(creds.appId, creds.clientSecret);
-    const path20 = `${messagePath(scope, targetId)}/${messageId}`;
-    await this.client.request(token, "DELETE", path20);
+    const path21 = `${messagePath(scope, targetId)}/${messageId}`;
+    await this.client.request(token, "DELETE", path21);
   }
-  async sendAndNotify(_appId, accessToken, method, path20, body, meta) {
-    const result = await this.client.request(accessToken, method, path20, body);
+  async sendAndNotify(_appId, accessToken, method, path21, body, meta) {
+    const result = await this.client.request(accessToken, method, path21, body);
     if (result.ext_info?.ref_idx && this.messageSentHook) {
       try {
         this.messageSentHook(result.ext_info.ref_idx, meta);
@@ -6785,21 +6785,21 @@ function signValidationResponse(params) {
 var http = __toESM(require("http"), 1);
 var NodeHttpWebhookServer = class {
   server = null;
-  async listen(port, path20, handler) {
+  async listen(port, path21, handler) {
     return new Promise((resolve2, reject) => {
-      const server = http.createServer(async (req, res) => {
-        if (req.method !== "POST" || req.url !== path20) {
+      const server = http.createServer(async (req4, res) => {
+        if (req4.method !== "POST" || req4.url !== path21) {
           res.writeHead(404, { "Content-Type": "text/plain" });
           res.end("Not Found");
           return;
         }
         const chunks = [];
-        req.on("data", (chunk) => chunks.push(chunk));
-        req.on("end", async () => {
+        req4.on("data", (chunk) => chunks.push(chunk));
+        req4.on("end", async () => {
           try {
             const body = Buffer.concat(chunks);
             const headers = {};
-            for (const [key, value] of Object.entries(req.headers)) {
+            for (const [key, value] of Object.entries(req4.headers)) {
               headers[key.toLowerCase()] = value;
             }
             const response = await handler({ body, headers });
@@ -6850,11 +6850,11 @@ var WebhookTransport = class {
   }
   async start() {
     const port = this.opts.port ?? 8080;
-    const path20 = this.opts.path ?? "/";
-    this.log?.info?.(`[webhook] starting on port ${port}, path ${path20}`);
-    await this.server.listen(port, path20, (req) => this.handleRequest(req));
-    this.log?.info?.(`[webhook] listening on :${port}${path20}`);
-    this.callbacks.onReady?.({ transport: "webhook", port, path: path20 });
+    const path21 = this.opts.path ?? "/";
+    this.log?.info?.(`[webhook] starting on port ${port}, path ${path21}`);
+    await this.server.listen(port, path21, (req4) => this.handleRequest(req4));
+    this.log?.info?.(`[webhook] listening on :${port}${path21}`);
+    this.callbacks.onReady?.({ transport: "webhook", port, path: path21 });
     if (this.opts.abortSignal) {
       await new Promise((resolve2) => {
         if (this.opts.abortSignal.aborted) {
@@ -6879,10 +6879,10 @@ var WebhookTransport = class {
     this.stopResolve?.();
   }
   // ============ Request handler ============
-  async handleRequest(req) {
+  async handleRequest(req4) {
     let payload;
     try {
-      payload = JSON.parse(req.body.toString("utf-8"));
+      payload = JSON.parse(req4.body.toString("utf-8"));
     } catch {
       this.log?.warn?.(`[webhook] invalid JSON body`);
       return { status: 400, body: JSON.stringify({ error: "invalid json" }) };
@@ -6890,14 +6890,14 @@ var WebhookTransport = class {
     if (payload.op === OP_VALIDATION) {
       return this.handleValidation(payload);
     }
-    const timestamp = getHeader(req.headers, "x-signature-timestamp") ?? "";
-    const signature = getHeader(req.headers, "x-signature-ed25519") ?? "";
+    const timestamp = getHeader(req4.headers, "x-signature-timestamp") ?? "";
+    const signature = getHeader(req4.headers, "x-signature-ed25519") ?? "";
     if (!timestamp || !signature) {
       this.log?.warn?.(`[webhook] missing signature headers`);
       return { status: 401, body: JSON.stringify({ error: "missing signature" }) };
     }
     const valid = verifyWebhookSignature({
-      body: req.body,
+      body: req4.body,
       timestamp,
       signature,
       botSecret: this.opts.appSecret
@@ -7161,7 +7161,7 @@ var StreamSession = class {
         this.msgSeq = getNextMsgSeq(this.opts.msgId);
       }
       const currentIndex = this.index++;
-      const req = {
+      const req4 = {
         input_mode: StreamInputMode.REPLACE,
         input_state: state,
         content_type: StreamContentType.MARKDOWN,
@@ -7172,9 +7172,9 @@ var StreamSession = class {
         index: currentIndex
       };
       if (this.streamMsgId) {
-        req.stream_msg_id = this.streamMsgId;
+        req4.stream_msg_id = this.streamMsgId;
       }
-      const resp = await this.sendWithRetry(req);
+      const resp = await this.sendWithRetry(req4);
       if (resp?.id && !this.streamMsgId) {
         this.streamMsgId = resp.id;
       }
@@ -7196,10 +7196,10 @@ var StreamSession = class {
    * Send a stream message with exponential backoff on rate-limit errors.
    * QQ returns err_code 50002 or HTTP 429 when rate-limited.
    */
-  async sendWithRetry(req) {
+  async sendWithRetry(req4) {
     for (let attempt = 0; attempt <= MAX_FLUSH_RETRIES; attempt++) {
       try {
-        return await this.api.sendC2CStreamMessage(this.opts.creds, this.opts.openid, req);
+        return await this.api.sendC2CStreamMessage(this.opts.creds, this.opts.openid, req4);
       } catch (err) {
         if (!this.isRateLimitError(err) || attempt >= MAX_FLUSH_RETRIES) {
           throw err;
@@ -7207,7 +7207,7 @@ var StreamSession = class {
         const delay = RATE_LIMIT_BASE_DELAY_MS * Math.pow(2, attempt);
         this.opts.logger?.debug?.(`[qqbot:stream] rate limited, retry ${attempt + 1}/${MAX_FLUSH_RETRIES} after ${delay}ms`);
         await new Promise((r) => setTimeout(r, delay));
-        req.index = this.index++;
+        req4.index = this.index++;
       }
     }
     return void 0;
@@ -7744,25 +7744,25 @@ var QQBot = class {
     if (this._apiGateway)
       return this._apiGateway;
     this._apiGateway = {
-      get: (path20, query) => this.apiRequest("GET", path20, void 0, query),
-      post: (path20, body) => this.apiRequest("POST", path20, body),
-      put: (path20, body) => this.apiRequest("PUT", path20, body),
-      patch: (path20, body) => this.apiRequest("PATCH", path20, body),
-      delete: (path20) => this.apiRequest("DELETE", path20),
+      get: (path21, query) => this.apiRequest("GET", path21, void 0, query),
+      post: (path21, body) => this.apiRequest("POST", path21, body),
+      put: (path21, body) => this.apiRequest("PUT", path21, body),
+      patch: (path21, body) => this.apiRequest("PATCH", path21, body),
+      delete: (path21) => this.apiRequest("DELETE", path21),
       getToken: () => this.tokenManager.getAccessToken(this.creds.appId, this.creds.clientSecret)
     };
     return this._apiGateway;
   }
-  async apiRequest(method, path20, body, query) {
+  async apiRequest(method, path21, body, query) {
     const token = await this.tokenManager.getAccessToken(this.creds.appId, this.creds.clientSecret);
-    let fullPath = path20;
+    let fullPath = path21;
     if (query && Object.keys(query).length > 0) {
       const params = new URLSearchParams();
       for (const [k, v] of Object.entries(query)) {
         if (v !== void 0 && v !== null)
           params.set(k, String(v));
       }
-      fullPath = `${path20}?${params.toString()}`;
+      fullPath = `${path21}?${params.toString()}`;
     }
     return this.apiClient.request(token, method, fullPath, body ?? void 0);
   }
@@ -9089,21 +9089,11 @@ function formatError(err) {
 }
 
 // src/utils/pkg-version.ts
-var import_node_url = require("url");
-var import_node_module = require("module");
 var import_node_path2 = __toESM(require("path"), 1);
 var import_node_fs2 = __toESM(require("fs"), 1);
 var _resolvedPkgPath = null;
-function getCurrentFilename(metaUrl) {
-  if (metaUrl) {
-    return (0, import_node_url.fileURLToPath)(metaUrl);
-  }
-  if (typeof __filename !== "undefined") {
-    return __filename;
-  }
-  return process.cwd();
-}
-function getPackageVersion(metaUrl) {
+var _cachedOpenclawVersion;
+function getPackageVersion() {
   if (_resolvedPkgPath) {
     try {
       const pkg = JSON.parse(import_node_fs2.default.readFileSync(_resolvedPkgPath, "utf8"));
@@ -9114,44 +9104,87 @@ function getPackageVersion(metaUrl) {
       _resolvedPkgPath = null;
     }
   }
-  const startFile = getCurrentFilename(metaUrl);
-  let dir = import_node_path2.default.dirname(startFile);
-  const root = import_node_path2.default.parse(dir).root;
-  while (dir !== root) {
-    const candidate = import_node_path2.default.join(dir, "package.json");
-    try {
-      if (import_node_fs2.default.existsSync(candidate)) {
-        const pkg = JSON.parse(import_node_fs2.default.readFileSync(candidate, "utf8"));
-        if (pkg.name === "@tencent-connect/openclaw-qqbot" && pkg.version) {
-          _resolvedPkgPath = candidate;
-          return pkg.version;
+  if (typeof __filename === "string") {
+    let dir = import_node_path2.default.dirname(__filename);
+    const root = import_node_path2.default.parse(dir).root;
+    while (dir !== root) {
+      const candidate = import_node_path2.default.join(dir, "package.json");
+      try {
+        if (import_node_fs2.default.existsSync(candidate)) {
+          const pkg = JSON.parse(import_node_fs2.default.readFileSync(candidate, "utf8"));
+          if (pkg.name === "@tencent-connect/openclaw-qqbot" && pkg.version) {
+            _resolvedPkgPath = candidate;
+            return pkg.version;
+          }
         }
+      } catch {
       }
-    } catch {
+      dir = import_node_path2.default.dirname(dir);
     }
-    dir = import_node_path2.default.dirname(dir);
   }
+  return "unknown";
+}
+function getOpenclawVersion(runtimeVersion) {
+  if (_cachedOpenclawVersion) return _cachedOpenclawVersion;
+  if (runtimeVersion && runtimeVersion !== "unknown") {
+    return _cachedOpenclawVersion = runtimeVersion;
+  }
+  if (process.env.OPENCLAW_VERSION) {
+    return _cachedOpenclawVersion = process.env.OPENCLAW_VERSION;
+  }
+  if (process.env.OPENCLAW_SERVICE_VERSION) {
+    return _cachedOpenclawVersion = process.env.OPENCLAW_SERVICE_VERSION;
+  }
+  const pkgVer = readOpenclawPackageVersion();
+  if (pkgVer) return _cachedOpenclawVersion = pkgVer;
+  return "unknown";
+}
+function readOpenclawPackageVersion() {
   try {
-    const req = (0, import_node_module.createRequire)(__filename);
-    for (const rel of ["../../package.json", "../package.json", "./package.json"]) {
+    const dirs = searchRoots();
+    for (const dir of dirs) {
+      const pkgPath = import_node_path2.default.join(dir, "package.json");
       try {
-        const pkg = req(rel);
-        if (pkg?.version) {
-          return pkg.version;
-        }
+        const pkg = JSON.parse(import_node_fs2.default.readFileSync(pkgPath, "utf8"));
+        if (pkg.name === "openclaw" && pkg.version) return pkg.version;
       } catch {
       }
     }
   } catch {
   }
-  return "unknown";
+  return void 0;
+}
+function searchRoots() {
+  const roots = [];
+  if (typeof __filename === "string") {
+    let dir = import_node_path2.default.dirname(__filename);
+    for (let i = 0; i < 10; i++) {
+      roots.push(dir);
+      const parent = import_node_path2.default.dirname(dir);
+      if (parent === dir) break;
+      dir = parent;
+    }
+  }
+  for (const key of ["OPENCLAW_STATE_DIR", "CLAWDBOT_STATE_DIR", "MOLTBOT_STATE_DIR"]) {
+    const v = process.env[key];
+    if (v) {
+      roots.push(import_node_path2.default.dirname(v));
+      roots.push(import_node_path2.default.resolve(v, ".."));
+    }
+  }
+  const home = process.env.HOME || process.env.USERPROFILE || "/tmp";
+  for (const name of ["openclaw", "clawdbot", "moltbot"]) {
+    roots.push(import_node_path2.default.join(home, `.${name}`));
+  }
+  roots.push(process.cwd());
+  return [...new Set(roots.filter((r) => typeof r === "string" && r.length > 0))];
 }
 
 // src/bot-instance.ts
 var PLUGIN_VERSION = getPackageVersion();
 var _openclawVersion = "unknown";
 function setOpenClawVersion(version) {
-  _openclawVersion = version;
+  if (version) _openclawVersion = version;
 }
 function getOpenClawVersion() {
   return _openclawVersion;
@@ -9471,7 +9504,8 @@ var runtime = null;
 var exitHooksInstalled = false;
 function setQQBotRuntime(next) {
   runtime = next;
-  setOpenClawVersion(next.version);
+  const version = getOpenclawVersion(next.version);
+  setOpenClawVersion(version);
   installExitHooksOnce();
 }
 function installExitHooksOnce() {
@@ -9501,14 +9535,14 @@ function tryGetQQBotRuntime() {
   return runtime;
 }
 
-// src/runtime-adapter/resolve.ts
+// src/adapter/resolve.ts
 function probeFunction(rt, paths) {
-  for (const path20 of paths) {
+  for (const path21 of paths) {
     let target = rt;
     let parent = rt;
-    for (let i = 0; i < path20.length; i++) {
+    for (let i = 0; i < path21.length; i++) {
       parent = target;
-      target = target?.[path20[i]];
+      target = target?.[path21[i]];
       if (target === void 0 || target === null) break;
     }
     if (typeof target === "function") {
@@ -9578,7 +9612,7 @@ function resolveRuntimeAdapters(rt, log4) {
   const chunkMarkdownText = probeFunction(rt, [
     ["channel", "text", "chunkMarkdownText"]
   ]);
-  const saveRemoteMedia2 = probeFunction(rt, [
+  const saveRemoteMedia = probeFunction(rt, [
     ["channel", "media", "saveRemoteMedia"]
   ]);
   const getConfig = probeFunction(rt, [
@@ -9607,7 +9641,7 @@ function resolveRuntimeAdapters(rt, log4) {
     recordInboundSession && "recordInboundSession",
     formatEnvelope && "formatEnvelope",
     chunkMarkdownText && "chunkMarkdownText",
-    saveRemoteMedia2 && "saveRemoteMedia",
+    saveRemoteMedia && "saveRemoteMedia",
     getConfig && "getConfig",
     persistConfig && `persistConfig(${rawMutateConfig ? "mutate" : "write"})`
   ].filter(Boolean);
@@ -9624,7 +9658,7 @@ function resolveRuntimeAdapters(rt, log4) {
     formatEnvelope,
     resolveEnvelopeFormatOptions,
     chunkMarkdownText,
-    saveRemoteMedia: saveRemoteMedia2,
+    saveRemoteMedia,
     getConfig,
     persistConfig,
     version
@@ -9646,7 +9680,24 @@ function getAdapters(rt, log4) {
 var path8 = __toESM(require("path"), 1);
 var fs9 = __toESM(require("fs"), 1);
 var os4 = __toESM(require("os"), 1);
-var import_health = require("openclaw/plugin-sdk/health");
+
+// src/adapter/workspace.ts
+var import_node_module = require("module");
+var req = (0, import_node_module.createRequire)(__filename);
+var health = null;
+function resolveAgentWorkspace(cfg, agentId) {
+  if (!health) {
+    try {
+      health = req("openclaw/plugin-sdk/health");
+    } catch {
+      health = null;
+    }
+  }
+  if (health) {
+    return health.resolveAgentWorkspaceDir(cfg, agentId ?? health.resolveDefaultAgentId(cfg));
+  }
+  return getQQBotMediaDir();
+}
 
 // src/outbound/local-file-router.ts
 var path7 = __toESM(require("path"), 1);
@@ -9774,11 +9825,7 @@ function resolveMediaPath(source, log4, workspaceDir) {
 function resolveWorkspaceFromAgent(agentId) {
   const cfg = resolveConfigViaAdapter();
   if (!cfg) return void 0;
-  try {
-    return (0, import_health.resolveAgentWorkspaceDir)(cfg, agentId ?? (0, import_health.resolveDefaultAgentId)(cfg));
-  } catch {
-    return void 0;
-  }
+  return resolveAgentWorkspace(cfg, agentId);
 }
 function resolveConfigViaAdapter() {
   try {
@@ -9867,12 +9914,48 @@ function formatErr(err) {
   return String(err);
 }
 
-// src/setup/surface.ts
-var import_setup2 = require("openclaw/plugin-sdk/setup");
-
-// src/setup/finalize.ts
-var import_setup = require("openclaw/plugin-sdk/setup");
-var import_setup_tools = require("openclaw/plugin-sdk/setup-tools");
+// src/adapter/setup.ts
+var import_node_module2 = require("module");
+var req2 = (0, import_node_module2.createRequire)(__filename);
+var _setup;
+var _tools;
+function loadSetup() {
+  if (_setup !== void 0) return _setup;
+  try {
+    _setup = req2("openclaw/plugin-sdk/setup");
+  } catch {
+    _setup = null;
+  }
+  return _setup;
+}
+function loadTools() {
+  if (_tools !== void 0) return _tools;
+  try {
+    _tools = req2("openclaw/plugin-sdk/setup-tools");
+  } catch {
+    _tools = null;
+  }
+  return _tools;
+}
+var DEFAULT_ACCOUNT_ID2 = "default";
+function createStandardChannelSetupStatus(...args) {
+  const mod = loadSetup();
+  if (mod) return mod.createStandardChannelSetupStatus(...args);
+  return {
+    channelLabel: args[0]?.channelLabel ?? "QQ Bot",
+    configuredLabel: "Configured",
+    unconfiguredLabel: "Not configured",
+    resolveConfigured: () => false
+  };
+}
+function setSetupChannelEnabled(...args) {
+  loadSetup()?.setSetupChannelEnabled?.(...args);
+}
+function formatDocsLink(...args) {
+  const mod = loadTools();
+  if (mod) return mod.formatDocsLink(...args);
+  return args[1] ? `${args[1]}: ${args[0]}` : args[0];
+}
 
 // node_modules/.pnpm/@tencent-connect+qqbot-connector@1.2.0/node_modules/@tencent-connect/qqbot-connector/dist/esm/qr-connect.js
 var import_qrcode_terminal = __toESM(require_main(), 1);
@@ -10039,7 +10122,7 @@ async function linkViaQrCode(cfg, accountId, prompter, rt) {
   } catch (err) {
     rt.error(`QQ Bot \u7ED1\u5B9A\u5931\u8D25: ${String(err)}`);
     await prompter.note(`\u7ED1\u5B9A\u5931\u8D25\uFF0C\u60A8\u53EF\u4EE5\u7A0D\u540E\u624B\u52A8\u914D\u7F6E\u3002
-\u6587\u6863: ${(0, import_setup_tools.formatDocsLink)("/channels/qqbot", "qqbot")}`, "QQ Bot");
+\u6587\u6863: ${formatDocsLink("/channels/qqbot", "qqbot")}`, "QQ Bot");
     return cfg;
   }
 }
@@ -10052,7 +10135,7 @@ async function linkViaManual(cfg, prompter) {
   return next;
 }
 async function finalizeQQBotSetup(params) {
-  const accountId = params.accountId.trim() || import_setup.DEFAULT_ACCOUNT_ID;
+  const accountId = params.accountId.trim() || DEFAULT_ACCOUNT_ID2;
   const configured = isConfigured(params.cfg, accountId);
   const mode = await params.prompter.select({
     message: configured ? "QQ \u5DF2\u7ED1\u5B9A\uFF0C\u9009\u62E9\u64CD\u4F5C" : "\u9009\u62E9 QQ \u7ED1\u5B9A\u65B9\u5F0F",
@@ -10077,7 +10160,7 @@ function applyAccountDefaults(cfg, accountId, userOpenid) {
   const qqbot = { ...next.channels?.qqbot ?? {} };
   const defaults = { streaming: true, dmPolicy: "allowlist" };
   if (userOpenid) defaults.allowFrom = [userOpenid];
-  if (accountId === import_setup.DEFAULT_ACCOUNT_ID) {
+  if (accountId === DEFAULT_ACCOUNT_ID2) {
     Object.assign(qqbot, defaults);
   } else {
     const accounts = { ...qqbot.accounts ?? {} };
@@ -10089,11 +10172,10 @@ function applyAccountDefaults(cfg, accountId, userOpenid) {
 }
 
 // src/setup/surface.ts
-var import_setup3 = require("openclaw/plugin-sdk/setup");
 var CHANNEL = "qqbot";
 var qqbotSetupWizard = {
   channel: CHANNEL,
-  status: (0, import_setup2.createStandardChannelSetupStatus)({
+  status: createStandardChannelSetupStatus({
     channelLabel: "QQ Bot",
     configuredLabel: "configured",
     unconfiguredLabel: "needs AppID + AppSecret",
@@ -10109,7 +10191,10 @@ var qqbotSetupWizard = {
   credentials: [],
   // eslint-disable-next-line @typescript-eslint/no-explicit-any
   finalize: (async ({ cfg, accountId, prompter, runtime: runtime2 }) => finalizeQQBotSetup({ cfg, accountId, prompter, runtime: runtime2 })),
-  disable: (cfg) => (0, import_setup3.setSetupChannelEnabled)(cfg, CHANNEL, false)
+  disable: (cfg) => {
+    setSetupChannelEnabled(cfg, CHANNEL, false);
+    return cfg;
+  }
 };
 
 // src/gateway/qqbot-gateway.ts
@@ -10196,7 +10281,7 @@ var REGISTRIES = [
 var CURRENT_VERSION = getPackageVersion();
 function fetchJson(url, timeoutMs) {
   return new Promise((resolve2, reject) => {
-    const req = import_node_https2.default.get(url, { timeout: timeoutMs, headers: { Accept: "application/json" } }, (res) => {
+    const req4 = import_node_https2.default.get(url, { timeout: timeoutMs, headers: { Accept: "application/json" } }, (res) => {
       if (res.statusCode !== 200) {
         res.resume();
         reject(new Error(`HTTP ${res.statusCode} from ${url}`));
@@ -10214,9 +10299,9 @@ function fetchJson(url, timeoutMs) {
         }
       });
     });
-    req.on("error", reject);
-    req.on("timeout", () => {
-      req.destroy();
+    req4.on("error", reject);
+    req4.on("timeout", () => {
+      req4.destroy();
       reject(new Error(`timeout fetching ${url}`));
     });
   });
@@ -10640,10 +10725,10 @@ function collectCandidateLogDirs(runtime2) {
     pushDir(import_node_path5.default.join(homeDir, name));
     pushDir(import_node_path5.default.join(homeDir, name, "logs"));
   }
-  const searchRoots = /* @__PURE__ */ new Set([homeDir, process.cwd(), import_node_path5.default.dirname(process.cwd())]);
-  if (process.env.APPDATA) searchRoots.add(process.env.APPDATA);
-  if (process.env.LOCALAPPDATA) searchRoots.add(process.env.LOCALAPPDATA);
-  for (const root of searchRoots) {
+  const searchRoots2 = /* @__PURE__ */ new Set([homeDir, process.cwd(), import_node_path5.default.dirname(process.cwd())]);
+  if (process.env.APPDATA) searchRoots2.add(process.env.APPDATA);
+  if (process.env.LOCALAPPDATA) searchRoots2.add(process.env.LOCALAPPDATA);
+  for (const root of searchRoots2) {
     try {
       const entries = import_node_fs5.default.readdirSync(root, { withFileTypes: true });
       for (const entry of entries) {
@@ -10955,8 +11040,8 @@ function botGroupAlways(account, getRuntime) {
   };
 }
 
-// src/runtime-adapter/pairing-runtime.ts
-var import_node_module2 = require("module");
+// src/adapter/pairing.ts
+var import_node_module3 = require("module");
 var import_node_path6 = __toESM(require("path"), 1);
 var _api;
 function getPairingApi() {
@@ -10966,14 +11051,14 @@ function getPairingApi() {
 }
 function loadPairingApi() {
   const currentFile = __filename;
-  const req = (0, import_node_module2.createRequire)(currentFile);
+  const req4 = (0, import_node_module3.createRequire)(currentFile);
   const pluginRoot = import_node_path6.default.resolve(import_node_path6.default.dirname(currentFile), "..", "..");
-  const fs20 = req("node:fs");
+  const fs21 = req4("node:fs");
   const tryLoad = (root) => {
     for (const rel of ["dist/plugin-sdk/conversation-runtime.js", "plugin-sdk/conversation-runtime.js"]) {
       const p2 = import_node_path6.default.join(root, rel);
       try {
-        if (fs20.existsSync(p2)) return req(p2);
+        if (fs21.existsSync(p2)) return req4(p2);
       } catch {
       }
     }
@@ -10981,7 +11066,7 @@ function loadPairingApi() {
   };
   let mod = null;
   try {
-    const { findOpenclawRoot } = req(import_node_path6.default.join(pluginRoot, "scripts", "link-sdk-core.cjs"));
+    const { findOpenclawRoot } = req4(import_node_path6.default.join(pluginRoot, "scripts", "link-sdk-core.cjs"));
     const root = findOpenclawRoot(pluginRoot);
     if (root) mod = tryLoad(root);
   } catch {
@@ -10990,7 +11075,7 @@ function loadPairingApi() {
     try {
       const entry = process.argv[1];
       if (entry) {
-        const realEntry = fs20.realpathSync(entry);
+        const realEntry = fs21.realpathSync(entry);
         let dir = import_node_path6.default.dirname(realEntry);
         for (let i = 0; i < 6; i++) {
           mod = tryLoad(dir);
@@ -11098,7 +11183,7 @@ function buildCommandList(account, opts) {
 }
 
 // src/middleware/attachment.ts
-var path16 = __toESM(require("path"), 1);
+var path17 = __toESM(require("path"), 1);
 
 // node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607081646/node_modules/@cxyhhhhh/qqbot-nodejs/dist/protocol/utils/reply-limiter.js
 var DEFAULT_TTL_MS = 60 * 60 * 1e3;
@@ -11258,9 +11343,6 @@ function isVoiceAttachment(att) {
   return [".amr", ".silk", ".slk", ".slac"].includes(ext);
 }
 
-// src/middleware/attachment.ts
-var import_media_runtime = require("openclaw/plugin-sdk/media-runtime");
-
 // src/utils/stt.ts
 var fs17 = __toESM(require("fs"), 1);
 var path15 = __toESM(require("path"), 1);
@@ -11379,6 +11461,78 @@ function formatDuration2(seconds) {
   return `${mins}:${secs.toString().padStart(2, "0")}`;
 }
 
+// src/adapter/media.ts
+var import_node_module4 = require("module");
+var dns = __toESM(require("dns"), 1);
+var path16 = __toESM(require("path"), 1);
+var fs18 = __toESM(require("fs"), 1);
+var crypto4 = __toESM(require("crypto"), 1);
+var req3 = (0, import_node_module4.createRequire)(__filename);
+var _save;
+function downloadRemoteMedia(opts) {
+  if (_save === void 0) {
+    try {
+      const mod = req3("openclaw/plugin-sdk/media-runtime");
+      _save = mod.saveRemoteMedia;
+    } catch {
+      _save = null;
+    }
+  }
+  return _save ? _save(opts) : downloadViaFetch(opts);
+}
+var PRIVATE_RANGES = [
+  [0x0A000000n, 8],
+  // 10.0.0.0/8
+  [0xAC100000n, 12],
+  // 172.16.0.0/12
+  [0xC0A80000n, 16],
+  // 192.168.0.0/16
+  [0x7F000000n, 8],
+  // 127.0.0.0/8
+  [0xA9FE0000n, 16],
+  // 169.254.0.0/16
+  [0xE0000000n, 4]
+  // 224.0.0.0/4 (multicast)
+];
+function ipToBigInt(ip) {
+  return ip.split(".").reduce((acc, octet) => acc << 8n | BigInt(Number(octet)), 0n);
+}
+function isPrivateIP(ip) {
+  const val = ipToBigInt(ip);
+  return PRIVATE_RANGES.some(([mask, prefix]) => val >> 32n - BigInt(prefix) === mask >> 32n - BigInt(prefix));
+}
+async function assertSafeHostname(hostname) {
+  const addresses = await dns.promises.resolve4(hostname).catch(() => []);
+  if (addresses.length === 0) throw new Error(`DNS resolution failed: ${hostname}`);
+  for (const addr of addresses) {
+    if (isPrivateIP(addr)) {
+      throw new Error(`SSRF blocked: ${hostname} resolves to private IP ${addr}`);
+    }
+  }
+}
+async function downloadViaFetch(opts) {
+  const parsed = new URL(opts.url);
+  if (parsed.protocol !== "https:") {
+    throw new Error(`Only HTTPS allowed: ${parsed.protocol}`);
+  }
+  await assertSafeHostname(parsed.hostname);
+  const dir = getQQBotMediaDir(opts.subdir ?? "downloads");
+  if (!fs18.existsSync(dir)) fs18.mkdirSync(dir, { recursive: true });
+  const resp = await fetch(opts.url, {
+    signal: AbortSignal.timeout(opts.timeoutMs ?? 12e4)
+  });
+  if (!resp.ok) throw new Error(`Download HTTP ${resp.status}`);
+  const maxBytes = opts.maxBytes ?? 500 * 1024 * 1024;
+  const buf = Buffer.from(await resp.arrayBuffer());
+  if (buf.length > maxBytes) throw new Error(`Download exceeds ${(maxBytes / 1024 / 1024).toFixed(0)}MB`);
+  const ext = opts.originalFilename ? path16.extname(opts.originalFilename) || ".bin" : ".bin";
+  const name = opts.originalFilename ? path16.basename(opts.originalFilename, path16.extname(opts.originalFilename)) : "download";
+  const rand = crypto4.randomBytes(4).toString("hex");
+  const filePath = path16.join(dir, `${name}_${Date.now()}_${rand}${ext}`);
+  fs18.writeFileSync(filePath, buf);
+  return { path: filePath };
+}
+
 // src/middleware/attachment.ts
 function attachmentProcessor(opts) {
   return async (ctx, next) => {
@@ -11494,7 +11648,7 @@ async function processVoiceAttachment(att, sttCfg, audioPolicy, log4) {
       if (silkUrl) {
         const silkPath = await downloadMediaFile(silkUrl, att.filename, log4);
         if (silkPath) {
-          const ext = path16.extname(silkPath).toLowerCase();
+          const ext = path17.extname(silkPath).toLowerCase();
           if (audioPolicy.sttDirectFormats.includes(ext)) {
             localPath = silkPath;
           } else {
@@ -11567,12 +11721,12 @@ async function downloadMediaFile(url, filename, log4) {
     return null;
   }
   try {
-    const result = await (0, import_media_runtime.saveRemoteMedia)({
+    const result = await downloadRemoteMedia({
       url,
       subdir: "qqbot/downloads",
       originalFilename: filename,
       maxBytes: 500 * 1024 * 1024,
-      timeoutMs: 6e4
+      timeoutMs: 12e4
     });
     log4?.debug?.(`Downloaded: ${result.path}`);
     return result.path;
@@ -12301,10 +12455,6 @@ async function dispatchToOpenClaw(ctx, msg, account, runtime2, log4) {
   const adapters = getAdapters(runtime2, dlog);
   const envelope = buildEnvelope2(ctx, msg, account);
   dlog?.debug(`received sender=${envelope.senderId} scope=${envelope.chatScope} msgId=${envelope.messageId}`);
-  if (!adapters.inboundRun) {
-    dlog?.error(`runtime adapter inboundRun not available (openclaw=${adapters.version})`);
-    return;
-  }
   if (!adapters.dispatchReply) {
     dlog?.error(`runtime adapter dispatchReply not available (openclaw=${adapters.version})`);
     return;
@@ -12400,127 +12550,160 @@ async function dispatchToOpenClaw(ctx, msg, account, runtime2, log4) {
   if (streamingController) {
     dlog?.debug(`streaming enabled for ${envelope.senderId}`);
   }
-  await adapters.inboundRun({
-    channel: "qqbot",
-    accountId: route.accountId,
-    raw: envelope,
-    adapter: {
-      ingest: (raw) => ({
-        id: envelope.messageId,
-        rawText: assembled.rawBody,
-        textForAgent: assembled.agentBody,
-        textForCommands: assembled.rawBody,
-        raw
-      }),
-      resolveTurn: (_input, _eventClass, _preflight) => ({
-        channel: "qqbot",
-        accountId: route.accountId,
-        routeSessionKey: route.sessionKey,
-        storePath,
-        ctxPayload,
-        recordInboundSession: adapters.recordInboundSession,
-        record: {
-          onRecordError: (err) => {
-            dlog?.error(`Session record error: ${err}`);
+  if (!adapters.inboundRun) {
+    if (adapters.recordInboundSession) {
+      try {
+        await adapters.recordInboundSession({
+          storePath,
+          sessionKey: route.sessionKey,
+          ctx: ctxPayload
+        });
+      } catch {
+      }
+    }
+    await adapters.dispatchReply({
+      ctx: ctxPayload,
+      cfg,
+      dispatcherOptions: {
+        deliver: async (payload, info) => {
+          await deliverReply(payload, info, deliverCtx);
+        }
+      },
+      ...streamingController ? {
+        replyOptions: {
+          onPartialReply: async (p2) => {
+            if (p2.text) await streamingController.onPartialReply(p2.text);
           }
-        },
-        runDispatch: () => {
-          let blockDelivered = false;
-          const deliveredMediaUrls = /* @__PURE__ */ new Set();
-          return adapters.dispatchReply({
-            ctx: ctxPayload,
-            cfg,
-            dispatcherOptions: {
-              deliver: async (payload, info) => {
-                try {
-                  const kind = info?.kind;
-                  dlog?.debug(`deliver kind=${kind ?? "none"} textLen=${payload.text?.length ?? 0} audioAsVoice=${payload.audioAsVoice ?? false} mediaUrl=${payload.mediaUrl?.slice(0, 60) ?? "none"} mediaUrls=${payload.mediaUrls?.length ?? 0}`);
-                  if (kind === "block") {
-                    if (payload.audioAsVoice) {
-                      await deliverReply(payload, info, deliverCtx);
-                    } else {
-                      const urls = payload.mediaUrls?.length ? payload.mediaUrls : payload.mediaUrl ? [payload.mediaUrl] : [];
-                      for (const url of urls) {
+        }
+      } : {}
+    });
+    if (streamingController && !streamingController.isTerminal) {
+      await streamingController.finalize();
+    }
+    if (debouncer) await debouncer.flushAll();
+  } else {
+    await adapters.inboundRun({
+      channel: "qqbot",
+      accountId: route.accountId,
+      raw: envelope,
+      adapter: {
+        ingest: (raw) => ({
+          id: envelope.messageId,
+          rawText: assembled.rawBody,
+          textForAgent: assembled.agentBody,
+          textForCommands: assembled.rawBody,
+          raw
+        }),
+        resolveTurn: (_input, _eventClass, _preflight) => ({
+          channel: "qqbot",
+          accountId: route.accountId,
+          routeSessionKey: route.sessionKey,
+          storePath,
+          ctxPayload,
+          recordInboundSession: adapters.recordInboundSession,
+          record: {
+            onRecordError: (err) => {
+              dlog?.error(`Session record error: ${err}`);
+            }
+          },
+          runDispatch: () => {
+            let blockDelivered = false;
+            const deliveredMediaUrls = /* @__PURE__ */ new Set();
+            return adapters.dispatchReply({
+              ctx: ctxPayload,
+              cfg,
+              dispatcherOptions: {
+                deliver: async (payload, info) => {
+                  try {
+                    const kind = info?.kind;
+                    dlog?.debug(`deliver kind=${kind ?? "none"} textLen=${payload.text?.length ?? 0} audioAsVoice=${payload.audioAsVoice ?? false} mediaUrl=${payload.mediaUrl?.slice(0, 60) ?? "none"} mediaUrls=${payload.mediaUrls?.length ?? 0}`);
+                    if (kind === "block") {
+                      if (payload.audioAsVoice) {
+                        await deliverReply(payload, info, deliverCtx);
+                      } else {
+                        const urls = payload.mediaUrls?.length ? payload.mediaUrls : payload.mediaUrl ? [payload.mediaUrl] : [];
+                        for (const url of urls) {
+                          try {
+                            await sendMedia2({
+                              to: deliverCtx.qualifiedTarget,
+                              source: url,
+                              text: "",
+                              replyToId: deliverCtx.replyToId,
+                              accountId: deliverCtx.accountId,
+                              log: deliverCtx.log,
+                              agentId: deliverCtx.agentId
+                            });
+                            deliveredMediaUrls.add(url);
+                          } catch (err) {
+                            dlog?.error(`block media failed: ${err instanceof Error ? err.message : String(err)}`);
+                          }
+                        }
+                      }
+                    }
+                    if (streamingController && !streamingController.shouldFallbackToStatic) {
+                      if (kind !== "block") {
+                        await streamingController.finalize();
+                      }
+                      if (!streamingController.shouldFallbackToStatic) {
+                        if (kind === "block") return;
+                        return;
+                      }
+                      dlog?.warn(`streaming fallback to static`);
+                    }
+                    if (kind === "block") {
+                      blockDelivered = true;
+                    } else if (kind === "final" && blockDelivered) {
+                      return;
+                    }
+                    if (kind === "tool") {
+                      const toolMediaUrls = [];
+                      if (payload.mediaUrls?.length) toolMediaUrls.push(...payload.mediaUrls);
+                      if (payload.mediaUrl && !toolMediaUrls.includes(payload.mediaUrl)) toolMediaUrls.push(payload.mediaUrl);
+                      const newUrls = toolMediaUrls.filter((u2) => !deliveredMediaUrls.has(u2));
+                      for (const mediaUrl of newUrls) {
                         try {
                           await sendMedia2({
                             to: deliverCtx.qualifiedTarget,
-                            source: url,
+                            source: mediaUrl,
                             text: "",
                             replyToId: deliverCtx.replyToId,
                             accountId: deliverCtx.accountId,
                             log: deliverCtx.log,
                             agentId: deliverCtx.agentId
                           });
-                          deliveredMediaUrls.add(url);
+                          deliveredMediaUrls.add(mediaUrl);
+                          dlog?.info(`tool media forwarded url=${mediaUrl.slice(0, 60)}`);
                         } catch (err) {
-                          dlog?.error(`block media failed: ${err instanceof Error ? err.message : String(err)}`);
+                          dlog?.error(`tool media forward failed: ${err instanceof Error ? err.message : String(err)}`);
                         }
                       }
-                    }
-                  }
-                  if (streamingController && !streamingController.shouldFallbackToStatic) {
-                    if (kind !== "block") {
-                      await streamingController.finalize();
-                    }
-                    if (!streamingController.shouldFallbackToStatic) {
-                      if (kind === "block") return;
                       return;
                     }
-                    dlog?.warn(`streaming fallback to static`);
-                  }
-                  if (kind === "block") {
-                    blockDelivered = true;
-                  } else if (kind === "final" && blockDelivered) {
-                    return;
-                  }
-                  if (kind === "tool") {
-                    const toolMediaUrls = [];
-                    if (payload.mediaUrls?.length) toolMediaUrls.push(...payload.mediaUrls);
-                    if (payload.mediaUrl && !toolMediaUrls.includes(payload.mediaUrl)) toolMediaUrls.push(payload.mediaUrl);
-                    const newUrls = toolMediaUrls.filter((u2) => !deliveredMediaUrls.has(u2));
-                    for (const mediaUrl of newUrls) {
-                      try {
-                        await sendMedia2({
-                          to: deliverCtx.qualifiedTarget,
-                          source: mediaUrl,
-                          text: "",
-                          replyToId: deliverCtx.replyToId,
-                          accountId: deliverCtx.accountId,
-                          log: deliverCtx.log,
-                          agentId: deliverCtx.agentId
-                        });
-                        deliveredMediaUrls.add(mediaUrl);
-                        dlog?.info(`tool media forwarded url=${mediaUrl.slice(0, 60)}`);
-                      } catch (err) {
-                        dlog?.error(`tool media forward failed: ${err instanceof Error ? err.message : String(err)}`);
-                      }
-                    }
-                    return;
+                    const filteredPayload = deliveredMediaUrls.size > 0 ? {
+                      ...payload,
+                      mediaUrl: payload.mediaUrl && !deliveredMediaUrls.has(payload.mediaUrl) ? payload.mediaUrl : void 0,
+                      mediaUrls: payload.mediaUrls?.filter((u2) => !deliveredMediaUrls.has(u2))
+                    } : payload;
+                    await deliverReply(filteredPayload, info, deliverCtx);
+                  } catch (err) {
+                    dlog?.error(`error: ${err instanceof Error ? err.message : String(err)}`);
                   }
-                  const filteredPayload = deliveredMediaUrls.size > 0 ? {
-                    ...payload,
-                    mediaUrl: payload.mediaUrl && !deliveredMediaUrls.has(payload.mediaUrl) ? payload.mediaUrl : void 0,
-                    mediaUrls: payload.mediaUrls?.filter((u2) => !deliveredMediaUrls.has(u2))
-                  } : payload;
-                  await deliverReply(filteredPayload, info, deliverCtx);
-                } catch (err) {
-                  dlog?.error(`error: ${err instanceof Error ? err.message : String(err)}`);
                 }
+              },
+              replyOptions: {
+                runId: envelope.messageId,
+                ...streamingController ? {
+                  onPartialReply: async (p2) => {
+                    if (p2.text) await streamingController.onPartialReply(p2.text);
+                  }
+                } : {}
               }
-            },
-            replyOptions: {
-              runId: envelope.messageId,
-              ...streamingController ? {
-                onPartialReply: async (p2) => {
-                  if (p2.text) await streamingController.onPartialReply(p2.text);
-                }
-              } : {}
-            }
-          });
-        }
-      })
-    }
-  });
+            });
+          }
+        })
+      }
+    });
+  }
   dlog?.debug(`inboundRun completed sessionKey=${route.sessionKey}`);
   if (envelope.chatScope === "group") {
     clearGroupHistory(envelope.groupId ?? envelope.senderId);
@@ -12551,26 +12734,25 @@ function createStreamingController(envelope, account, log4) {
   });
 }
 
-// src/runtime-adapter/gateway-runtime.ts
-var import_node_module3 = require("module");
+// src/adapter/gateway.ts
+var import_node_module5 = require("module");
 var import_node_path8 = __toESM(require("path"), 1);
 function loadApprovalGatewayRuntime() {
-  const currentFile = __filename;
-  const req = (0, import_node_module3.createRequire)(currentFile);
-  const pluginRoot = import_node_path8.default.resolve(import_node_path8.default.dirname(currentFile), "..", "..");
-  const fs20 = req("node:fs");
+  const req4 = (0, import_node_module5.createRequire)(__filename);
+  const pluginRoot = import_node_path8.default.resolve(import_node_path8.default.dirname(__filename), "..", "..");
+  const fs21 = req4("node:fs");
   const tryLoadFromRoot = (root) => {
     for (const rel of ["dist/plugin-sdk/gateway-runtime.js", "plugin-sdk/gateway-runtime.js"]) {
       const p2 = import_node_path8.default.join(root, rel);
       try {
-        if (fs20.existsSync(p2)) return req(p2);
+        if (fs21.existsSync(p2)) return req4(p2);
       } catch {
       }
     }
     return null;
   };
   try {
-    const { findOpenclawRoot } = req(import_node_path8.default.join(pluginRoot, "scripts", "link-sdk-core.cjs"));
+    const { findOpenclawRoot } = req4(import_node_path8.default.join(pluginRoot, "scripts", "link-sdk-core.cjs"));
     const root = findOpenclawRoot(pluginRoot);
     if (root) {
       const mod = tryLoadFromRoot(root);
@@ -12581,7 +12763,7 @@ function loadApprovalGatewayRuntime() {
   try {
     const entry = process.argv[1];
     if (entry) {
-      const realEntry = fs20.realpathSync(entry);
+      const realEntry = fs21.realpathSync(entry);
       let dir = import_node_path8.default.dirname(realEntry);
       for (let i = 0; i < 6; i++) {
         const mod = tryLoadFromRoot(dir);
@@ -12864,16 +13046,16 @@ function getApprovalHandler(accountId) {
 }
 
 // src/features/proactive.ts
-var fs18 = __toESM(require("fs"), 1);
-var path18 = __toESM(require("path"), 1);
+var fs19 = __toESM(require("fs"), 1);
+var path19 = __toESM(require("path"), 1);
 var log2 = createPluginLogger({ prefix: "[proactive]" });
 var STORAGE_DIR = getQQBotDataDir("data");
-var KNOWN_USERS_FILE = path18.join(STORAGE_DIR, "known-users.json");
+var KNOWN_USERS_FILE = path19.join(STORAGE_DIR, "known-users.json");
 var knownUsersCache = null;
 var cacheLastModified = 0;
 function ensureStorageDir() {
-  if (!fs18.existsSync(STORAGE_DIR)) {
-    fs18.mkdirSync(STORAGE_DIR, { recursive: true });
+  if (!fs19.existsSync(STORAGE_DIR)) {
+    fs19.mkdirSync(STORAGE_DIR, { recursive: true });
   }
 }
 function getUserKey(type, openid, accountId) {
@@ -12882,7 +13064,7 @@ function getUserKey(type, openid, accountId) {
 function loadKnownUsers() {
   if (knownUsersCache !== null) {
     try {
-      const stat = fs18.statSync(KNOWN_USERS_FILE);
+      const stat = fs19.statSync(KNOWN_USERS_FILE);
       if (stat.mtimeMs <= cacheLastModified) {
         return knownUsersCache;
       }
@@ -12892,14 +13074,14 @@ function loadKnownUsers() {
   }
   const users = /* @__PURE__ */ new Map();
   try {
-    if (fs18.existsSync(KNOWN_USERS_FILE)) {
-      const data = fs18.readFileSync(KNOWN_USERS_FILE, "utf-8");
+    if (fs19.existsSync(KNOWN_USERS_FILE)) {
+      const data = fs19.readFileSync(KNOWN_USERS_FILE, "utf-8");
       const parsed = JSON.parse(data);
       for (const user of parsed) {
         const key = getUserKey(user.type, user.openid, user.accountId);
         users.set(key, user);
       }
-      cacheLastModified = fs18.statSync(KNOWN_USERS_FILE).mtimeMs;
+      cacheLastModified = fs19.statSync(KNOWN_USERS_FILE).mtimeMs;
     }
   } catch (err) {
     log2.error(`Failed to load known users: ${err}`);
@@ -12911,7 +13093,7 @@ function saveKnownUsers(users) {
   try {
     ensureStorageDir();
     const data = Array.from(users.values());
-    fs18.writeFileSync(KNOWN_USERS_FILE, JSON.stringify(data, null, 2), "utf-8");
+    fs19.writeFileSync(KNOWN_USERS_FILE, JSON.stringify(data, null, 2), "utf-8");
     cacheLastModified = Date.now();
     knownUsersCache = users;
   } catch (err) {
@@ -13106,7 +13288,7 @@ function setGroupRequireMention(runtime2, accountId, groupOpenid, requireMention
   }) ?? Promise.resolve();
 }
 
-// src/runtime-adapter/webhook-adapter.ts
+// src/adapter/webhook.ts
 var sharedTargets = /* @__PURE__ */ new Map();
 var _routeUnregisters = /* @__PURE__ */ new Map();
 function createPluginWebhookAdapter(params) {
@@ -13114,13 +13296,13 @@ function createPluginWebhookAdapter(params) {
   let storedPath = "";
   const accountId = params.account.accountId;
   return {
-    async listen(_port, path20, handler) {
+    async listen(_port, path21, handler) {
       const ingress = await import("openclaw/plugin-sdk/webhook-ingress").catch(() => null);
       if (!ingress?.registerWebhookTargetWithPluginRoute) {
         params.log.error("Webhook ingress not available");
         return;
       }
-      const webhookPath = storedPath = path20 && path20 !== "/" ? path20 : params.account.config.webhook?.path ?? "/qqbot/webhook";
+      const webhookPath = storedPath = path21 && path21 !== "/" ? path21 : params.account.config.webhook?.path ?? "/qqbot/webhook";
       const existing = sharedTargets.get(webhookPath);
       if (existing) {
         const dupIdx = existing.findIndex((t) => t.accountId === accountId);
@@ -13167,16 +13349,16 @@ function createPluginWebhookAdapter(params) {
     }
   };
 }
-function createSharedHandler(path20, log4) {
-  return async (req, res) => {
+function createSharedHandler(path21, log4) {
+  return async (req4, res) => {
     try {
       const ingress = await import("openclaw/plugin-sdk/webhook-ingress").catch(() => null);
       if (!ingress?.withResolvedWebhookRequestPipeline) {
-        await handleSimple(req, res, path20, log4);
+        await handleSimple(req4, res, path21, log4);
         return;
       }
       await ingress.withResolvedWebhookRequestPipeline({
-        req,
+        req: req4,
         res,
         targetsByPath: sharedTargets,
         rateLimiter: ingress.createFixedWindowRateLimiter?.({
@@ -13191,7 +13373,7 @@ function createSharedHandler(path20, log4) {
         requireJsonContentType: true,
         handle: async ({ targets }) => {
           const bodyResult = await ingress.readWebhookBodyOrReject({
-            req,
+            req: req4,
             res,
             maxBytes: 1048576,
             timeoutMs: 3e4
@@ -13213,25 +13395,25 @@ function createSharedHandler(path20, log4) {
           if (payload.op === 13) {
             const t = targets[0];
             if (!t) {
-              log4.warn?.(`[webhook] op:13 no target on ${path20}`);
+              log4.warn?.(`[webhook] op:13 no target on ${path21}`);
               res.statusCode = 500;
               res.end(JSON.stringify({ error: "no target" }));
               return;
             }
-            const h3 = resolveTargetHandler(path20, t.accountId);
+            const h3 = resolveTargetHandler(path21, t.accountId);
             if (!h3) {
               log4.warn?.(`[webhook] op:13 no handler for ${t.accountId}`);
               res.statusCode = 500;
               res.end(JSON.stringify({ error: "no handler" }));
               return;
             }
-            await delegateToHandler(h3, req, res, rawBody);
+            await delegateToHandler(h3, req4, res, rawBody);
             return;
           }
-          const timestamp = getHeader2(req, "x-signature-timestamp") ?? "";
-          const signature = getHeader2(req, "x-signature-ed25519") ?? "";
+          const timestamp = getHeader2(req4, "x-signature-timestamp") ?? "";
+          const signature = getHeader2(req4, "x-signature-ed25519") ?? "";
           if (!timestamp || !signature) {
-            log4.warn?.(`[webhook] missing signature headers on ${req.url}`);
+            log4.warn?.(`[webhook] missing signature headers on ${req4.url}`);
             res.statusCode = 401;
             res.end(JSON.stringify({ error: "missing signature" }));
             return;
@@ -13249,17 +13431,17 @@ function createSharedHandler(path20, log4) {
             unauthorizedMessage: JSON.stringify({ error: "invalid signature" })
           });
           if (!matched) {
-            log4.warn?.(`[webhook] signature mismatch on ${path20} (${targets.length} target(s))`);
+            log4.warn?.(`[webhook] signature mismatch on ${path21} (${targets.length} target(s))`);
             return;
           }
-          const h2 = resolveTargetHandler(path20, matched.accountId);
+          const h2 = resolveTargetHandler(path21, matched.accountId);
           if (!h2) {
             log4.error?.(`[webhook] no handler for matched target ${matched.accountId}`);
             res.statusCode = 500;
             res.end(JSON.stringify({ error: "no handler" }));
             return;
           }
-          await delegateToHandler(h2, req, res, rawBody);
+          await delegateToHandler(h2, req4, res, rawBody);
         }
       });
     } catch (err) {
@@ -13272,12 +13454,12 @@ function createSharedHandler(path20, log4) {
     }
   };
 }
-function resolveTargetHandler(path20, accountId) {
-  return sharedTargets.get(path20)?.find((t) => t.accountId === accountId)?.handler;
+function resolveTargetHandler(path21, accountId) {
+  return sharedTargets.get(path21)?.find((t) => t.accountId === accountId)?.handler;
 }
-async function delegateToHandler(handler, req, res, rawBody) {
+async function delegateToHandler(handler, req4, res, rawBody) {
   const headers = {};
-  for (const [k, v] of Object.entries(req.headers)) {
+  for (const [k, v] of Object.entries(req4.headers)) {
     headers[k.toLowerCase()] = v;
   }
   const resp = await handler({ body: rawBody, headers });
@@ -13287,9 +13469,9 @@ async function delegateToHandler(handler, req, res, rawBody) {
   }
   res.end(resp.body);
 }
-async function handleSimple(req, res, path20, log4) {
+async function handleSimple(req4, res, path21, log4) {
   try {
-    const ct = String(req.headers["content-type"] ?? "");
+    const ct = String(req4.headers["content-type"] ?? "");
     if (!ct.includes("application/json")) {
       res.statusCode = 400;
       res.end(JSON.stringify({ error: "unsupported content type" }));
@@ -13297,7 +13479,7 @@ async function handleSimple(req, res, path20, log4) {
     }
     const chunks = [];
     let total = 0;
-    for await (const chunk of req) {
+    for await (const chunk of req4) {
       const buf = Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk);
       total += buf.length;
       if (total > 1048576) {
@@ -13308,9 +13490,9 @@ async function handleSimple(req, res, path20, log4) {
       chunks.push(buf);
     }
     const rawBody = Buffer.concat(chunks);
-    const entries = sharedTargets.get(path20) ?? [];
+    const entries = sharedTargets.get(path21) ?? [];
     for (const entry of entries) {
-      const resp = await entry.handler({ body: rawBody, headers: mapHeaders(req) });
+      const resp = await entry.handler({ body: rawBody, headers: mapHeaders(req4) });
       if (resp.status < 400) {
         res.statusCode = resp.status;
         if (resp.headers) for (const [k, v] of Object.entries(resp.headers)) res.setHeader(k, v);
@@ -13328,13 +13510,13 @@ async function handleSimple(req, res, path20, log4) {
     }
   }
 }
-function mapHeaders(req) {
+function mapHeaders(req4) {
   const h2 = {};
-  for (const [k, v] of Object.entries(req.headers ?? {})) h2[k.toLowerCase()] = v;
+  for (const [k, v] of Object.entries(req4.headers ?? {})) h2[k.toLowerCase()] = v;
   return h2;
 }
-function getHeader2(req, key) {
-  const val = req.headers[key];
+function getHeader2(req4, key) {
+  const val = req4.headers[key];
   return Array.isArray(val) ? val[0] : val;
 }
 
@@ -14106,10 +14288,10 @@ function json(data) {
     details: data
   };
 }
-function validatePath(path20) {
-  if (!path20.startsWith("/")) return "path \u5FC5\u987B\u4EE5 / \u5F00\u5934";
-  if (path20.includes("..") || path20.includes("//")) return "path \u4E0D\u5141\u8BB8\u5305\u542B .. \u6216 //";
-  if (!/^\/[a-zA-Z0-9\-._~:@!$&'()*+,;=/%]+$/.test(path20) && path20 !== "/") {
+function validatePath(path21) {
+  if (!path21.startsWith("/")) return "path \u5FC5\u987B\u4EE5 / \u5F00\u5934";
+  if (path21.includes("..") || path21.includes("//")) return "path \u4E0D\u5141\u8BB8\u5305\u542B .. \u6216 //";
+  if (!/^\/[a-zA-Z0-9\-._~:@!$&'()*+,;=/%]+$/.test(path21) && path21 !== "/") {
     return "path \u5305\u542B\u975E\u6CD5\u5B57\u7B26";
   }
   return null;
@@ -14384,22 +14566,19 @@ function registerRemindTool(api) {
   );
 }
 
-// src/runtime-adapter/contract-check.ts
+// src/adapter/contract.ts
 var log3 = createPluginLogger({ prefix: "[contract]", forceConsole: true });
 var REQUIRED = [
-  {
-    name: "channel.inbound.run",
-    probe: (rt) => {
-      const c = rt.channel;
-      return typeof c?.inbound?.run === "function" || typeof c?.turn?.run === "function";
-    }
-  },
   {
     name: "channel.reply.dispatchReplyWithBufferedBlockDispatcher",
     probe: (rt) => typeof rt.channel?.reply?.dispatchReplyWithBufferedBlockDispatcher === "function"
   }
 ];
 var OPTIONAL = [
+  { name: "channel.inbound.run (degraded)", probe: (rt) => {
+    const c = rt.channel;
+    return typeof c?.inbound?.run === "function" || typeof c?.turn?.run === "function";
+  } },
   { name: "channel.inbound.buildContext", probe: (rt) => typeof rt.channel?.inbound?.buildContext === "function" },
   { name: "channel.reply.formatAgentEnvelope", probe: (rt) => typeof rt.channel?.reply?.formatAgentEnvelope === "function" },
   { name: "channel.text.chunkMarkdownText", probe: (rt) => typeof rt.channel?.text?.chunkMarkdownText === "function" },