@openclaw/qqbot 2026.5.12-beta.8 → 2026.5.14-beta.1

package/dist/api.js

@@ -1,9 +1,9 @@
-import { C as recordMessageReply, E as setOutboundAudioPort, S as getMessageReplyStats, T as OUTBOUND_ERROR_CODES, _ as sendVoice, a as sendText, b as checkMessageReplyLimit, d as buildMediaTarget, f as parseTarget, g as sendVideoMsg, h as sendPhoto, i as sendProactiveMessage, m as sendDocument, n as sendCronMessage, p as resolveOutboundMediaPath, r as sendMedia, v as resolveUserFacingMediaError, w as DEFAULT_MEDIA_SEND_ERROR, x as getMessageReplyConfig, y as MESSAGE_REPLY_LIMIT } from "./outbound-BLWish89.js";
-import { a as resolveQQBotAccount, i as resolveDefaultQQBotAccountId, n as applyQQBotAccountConfig, r as listQQBotAccountIds, t as DEFAULT_ACCOUNT_ID } from "./config-BT8KP_H1.js";
-import { t as qqbotPlugin } from "./channel-CmK-n3Oz.js";
-import { L as formatErrorMessage, S as debugLog, o as getAccessToken, x as debugError } from "./sender-BrpzCcXA.js";
-import { t as qqbotSetupPlugin } from "./channel.setup-D_GS95Pk.js";
-import { r as getFrameworkCommands, t as getRequestContext } from "./request-context-BwSBFANU.js";
+import { C as recordMessageReply, E as setOutboundAudioPort, S as getMessageReplyStats, T as OUTBOUND_ERROR_CODES, _ as sendVoice, a as sendText, b as checkMessageReplyLimit, d as buildMediaTarget, f as parseTarget, g as sendVideoMsg, h as sendPhoto, i as sendProactiveMessage, m as sendDocument, n as sendCronMessage, p as resolveOutboundMediaPath, r as sendMedia, v as resolveUserFacingMediaError, w as DEFAULT_MEDIA_SEND_ERROR, x as getMessageReplyConfig, y as MESSAGE_REPLY_LIMIT } from "./outbound-BdQEr78b.js";
+import { a as resolveQQBotAccount, i as resolveDefaultQQBotAccountId, n as applyQQBotAccountConfig, r as listQQBotAccountIds, t as DEFAULT_ACCOUNT_ID } from "./config-DiBiPtf4.js";
+import { t as qqbotPlugin } from "./channel-BYNY5Nwb.js";
+import { L as formatErrorMessage, S as debugLog, o as getAccessToken, x as debugError } from "./sender-BeE_CBbN.js";
+import { t as qqbotSetupPlugin } from "./channel.setup-DWWV_GAa.js";
+import { r as getFrameworkCommands, t as getRequestContext } from "./request-context-Betw4nJr.js";
 import { callGatewayTool } from "openclaw/plugin-sdk/agent-harness-runtime";
 //#region extensions/qqbot/src/engine/tools/channel-api.ts
 /**

package/dist/{channel-CmK-n3Oz.js → channel-BYNY5Nwb.js}

@@ -1,12 +1,10 @@
 import { t as asOptionalObjectRecord } from "./string-normalize-C46CS-F1.js";
-import { l as ensurePlatformAdapter, u as getBridgeLogger } from "./resolve-D3lCbUze.js";
-import { a as resolveApprovalTarget } from "./approval-cg0SVahb.js";
-import { a as resolveQQBotAccount, n as applyQQBotAccountConfig, t as DEFAULT_ACCOUNT_ID$1 } from "./config-BT8KP_H1.js";
-import { a as resolveQQBotExecApprovalConfig, i as matchesQQBotApprovalAccount, n as isQQBotExecApprovalAuthorizedSender, o as shouldHandleQQBotExecApprovalRequest, r as isQQBotExecApprovalClientEnabled, t as isQQBotExecApprovalApprover } from "./exec-approvals-W4oL9R6C.js";
-import { a as qqbotSetupAdapterShared, i as qqbotMeta, n as qqbotSetupWizard, r as qqbotConfigAdapter, t as qqbotChannelConfigSchema } from "./config-schema-BCxobX3l.js";
-import { n as writeOpenClawConfigThroughRuntime, t as toGatewayAccount } from "./narrowing-BoieBTIU.js";
-import { t as getQQBotRuntime } from "./runtime-CZyFkpnB.js";
-import { n as normalizeTarget, s as getQQBotDataPath, t as looksLikeQQBotTarget } from "./target-parser-C8HaD-ik.js";
+import { a as resolveQQBotAccount, f as ensurePlatformAdapter, n as applyQQBotAccountConfig, p as getBridgeLogger, t as DEFAULT_ACCOUNT_ID$1 } from "./config-DiBiPtf4.js";
+import { a as shouldHandleQQBotExecApprovalRequest, i as resolveQQBotExecApprovalConfig, n as isQQBotExecApprovalClientEnabled, r as matchesQQBotApprovalAccount, t as authorizeQQBotApprovalAction, u as resolveApprovalTarget } from "./exec-approvals-Deww_EGt.js";
+import { a as qqbotSetupAdapterShared, i as qqbotMeta, n as qqbotSetupWizard, r as qqbotConfigAdapter, t as qqbotChannelConfigSchema } from "./config-schema-BeJQUheK.js";
+import { n as writeOpenClawConfigThroughRuntime, t as toGatewayAccount } from "./narrowing-Bj4eMufj.js";
+import { t as getQQBotRuntime } from "./runtime-B-cqLImu.js";
+import { n as normalizeTarget, s as getQQBotDataPath, t as looksLikeQQBotTarget } from "./target-parser-ByU3srDK.js";
 import { getExecApprovalReplyMetadata } from "openclaw/plugin-sdk/approval-runtime";
 import { createMessageReceiptFromOutboundResults, defineChannelMessageAdapter } from "openclaw/plugin-sdk/channel-message";
 import { createChannelApprovalCapability } from "openclaw/plugin-sdk/approval-delivery-runtime";
@@ -21,10 +19,9 @@ import { loadJsonFile } from "openclaw/plugin-sdk/json-store";
 /**
 * QQ Bot Approval Capability — entry point.
 *
-* QQBot uses a simpler approval model than Telegram/Slack: any user who
-* can see the inline-keyboard buttons can approve. No explicit approver
-* list is required — the bot simply sends the approval message to the
-* originating conversation and whoever clicks the button resolves it.
+* QQBot uses a simpler approval model than Telegram/Slack: when no
+* approver list is configured, the bot sends the approval message to the
+* originating conversation and any participant can approve from there.
 *
 * When `execApprovals` IS configured, it gates which requests are
 * handled natively and who is authorized.  When it is NOT configured,
@@ -65,24 +62,12 @@ function canResolveTarget(request) {
 }
 function createQQBotApprovalCapability() {
 	return createChannelApprovalCapability({
-		authorizeActorAction: ({ cfg, accountId, senderId, approvalKind }) => {
-			if (hasExecApprovalConfig({
-				cfg,
-				accountId
-			})) return (approvalKind === "plugin" ? isQQBotExecApprovalApprover({
-				cfg,
-				accountId,
-				senderId
-			}) : isQQBotExecApprovalAuthorizedSender({
-				cfg,
-				accountId,
-				senderId
-			})) ? { authorized: true } : {
-				authorized: false,
-				reason: "You are not authorized to approve this request."
-			};
-			return { authorized: true };
-		},
+		authorizeActorAction: ({ cfg, accountId, senderId, approvalKind }) => authorizeQQBotApprovalAction({
+			cfg,
+			accountId,
+			senderId,
+			approvalKind
+		}),
 		getActionAvailabilityState: ({ cfg, accountId }) => {
 			return isNativeDeliveryEnabled({
 				cfg,
@@ -156,7 +141,7 @@ function createQQBotApprovalCapability() {
 			},
 			load: async () => {
 				ensurePlatformAdapter();
-				return (await import("./handler-runtime-ZgvjnyoH.js")).qqbotApprovalNativeRuntime;
+				return (await import("./handler-runtime-COWL4RMq.js")).qqbotApprovalNativeRuntime;
 			}
 		})
 	});
@@ -345,7 +330,7 @@ function clearAccountCredentials(cfg, accountId) {
 //#region extensions/qqbot/src/channel.ts
 let gatewayModulePromise;
 function loadGatewayModule() {
-	gatewayModulePromise ??= import("./gateway-Bbsd8-ne.js");
+	gatewayModulePromise ??= import("./gateway-DEJhmN-p.js");
 	return gatewayModulePromise;
 }
 function createQQBotSendReceipt(params) {
@@ -363,7 +348,7 @@ function createQQBotSendReceipt(params) {
 async function sendQQBotText(params) {
 	await loadGatewayModule();
 	const account = resolveQQBotAccount(params.cfg, params.accountId);
-	const { sendText } = await import("./outbound-BLWish89.js").then((n) => n.t);
+	const { sendText } = await import("./outbound-BdQEr78b.js").then((n) => n.t);
 	const result = await sendText({
 		to: params.to,
 		text: params.text,
@@ -385,7 +370,7 @@ async function sendQQBotText(params) {
 async function sendQQBotMedia(params) {
 	await loadGatewayModule();
 	const account = resolveQQBotAccount(params.cfg, params.accountId);
-	const { sendMedia } = await import("./outbound-BLWish89.js").then((n) => n.t);
+	const { sendMedia } = await import("./outbound-BdQEr78b.js").then((n) => n.t);
 	const result = await sendMedia({
 		to: params.to,
 		text: params.text ?? "",

package/dist/channel-plugin-api.js

@@ -1,2 +1,2 @@
-import { t as qqbotPlugin } from "./channel-CmK-n3Oz.js";
+import { t as qqbotPlugin } from "./channel-BYNY5Nwb.js";
 export { qqbotPlugin };

package/dist/{channel.setup-D_GS95Pk.js → channel.setup-DWWV_GAa.js}

@@ -1,5 +1,5 @@
-import "./resolve-D3lCbUze.js";
-import { a as qqbotSetupAdapterShared, i as qqbotMeta, n as qqbotSetupWizard, r as qqbotConfigAdapter, t as qqbotChannelConfigSchema } from "./config-schema-BCxobX3l.js";
+import "./config-DiBiPtf4.js";
+import { a as qqbotSetupAdapterShared, i as qqbotMeta, n as qqbotSetupWizard, r as qqbotConfigAdapter, t as qqbotChannelConfigSchema } from "./config-schema-BeJQUheK.js";
 //#region extensions/qqbot/src/channel.setup.ts
 /**
 * Setup-only QQBot plugin — lightweight subset used during `openclaw onboard`

package/dist/{resolve-D3lCbUze.js → config-DiBiPtf4.js}

@@ -1,6 +1,8 @@
 import { a as normalizeStringifiedOptionalString, c as getPlatformAdapter, d as registerPlatformAdapterFactory, l as hasPlatformAdapter, o as readStringField, r as normalizeOptionalLowercaseString, t as asOptionalObjectRecord, u as registerPlatformAdapter } from "./string-normalize-C46CS-F1.js";
-import { hasConfiguredSecretInput, normalizeResolvedSecretInputString, normalizeSecretInputString } from "openclaw/plugin-sdk/secret-input";
+import { coerceSecretRef, hasConfiguredSecretInput, normalizeResolvedSecretInputString, normalizeSecretInputString } from "openclaw/plugin-sdk/secret-input";
 import { resolvePreferredOpenClawTmpDir } from "openclaw/plugin-sdk/temp-path";
+import fs from "node:fs";
+import { resolveDefaultSecretProviderAlias } from "openclaw/plugin-sdk/provider-auth";
 //#region extensions/qqbot/src/bridge/logger.ts
 let _logger = null;
 /** Register the framework logger. Called once in startGateway(). */
@@ -48,8 +50,8 @@ function createBuiltinAdapter() {
 			if (typeof value === "string") return value || void 0;
 		},
 		async downloadFile(url, destDir, filename) {
-			const { fetchRemoteMedia } = await import("openclaw/plugin-sdk/media-runtime");
-			const result = await fetchRemoteMedia({
+			const { readRemoteMediaBuffer } = await import("openclaw/plugin-sdk/media-runtime");
+			const result = await readRemoteMediaBuffer({
 				url,
 				filePathHint: filename
 			});
@@ -61,8 +63,8 @@ function createBuiltinAdapter() {
 			return destPath;
 		},
 		async fetchMedia(options) {
-			const { fetchRemoteMedia } = await import("openclaw/plugin-sdk/media-runtime");
-			const result = await fetchRemoteMedia({
+			const { readRemoteMediaBuffer } = await import("openclaw/plugin-sdk/media-runtime");
+			const result = await readRemoteMediaBuffer({
 				url: options.url,
 				filePathHint: options.filePathHint,
 				maxBytes: options.maxBytes,
@@ -131,7 +133,7 @@ ensurePlatformAdapter();
 * Default account ID, used for the unnamed top-level account.
 * 默认账号 ID，用于顶层配置中未命名的账号。
 */
-const DEFAULT_ACCOUNT_ID = "default";
+const DEFAULT_ACCOUNT_ID$1 = "default";
 function normalizeAppId(raw) {
 	if (typeof raw === "string") return raw.trim();
 	if (typeof raw === "number") return String(raw);
@@ -155,7 +157,7 @@ function readQQBotSection(cfg) {
 function listAccountIds(cfg) {
 	const ids = /* @__PURE__ */ new Set();
 	const qqbot = readQQBotSection(cfg);
-	if (qqbot?.appId || process.env.QQBOT_APP_ID) ids.add(DEFAULT_ACCOUNT_ID);
+	if (qqbot?.appId || process.env.QQBOT_APP_ID) ids.add(DEFAULT_ACCOUNT_ID$1);
 	if (qqbot?.accounts) {
 		for (const accountId of Object.keys(qqbot.accounts)) if (qqbot.accounts[accountId]?.appId) ids.add(accountId);
 	}
@@ -169,12 +171,12 @@ function resolveDefaultAccountId(cfg) {
 	const qqbot = readQQBotSection(cfg);
 	const configuredDefaultAccountId = normalizeOptionalLowercaseString(qqbot?.defaultAccount);
 	if (configuredDefaultAccountId && (configuredDefaultAccountId === "default" || Boolean(qqbot?.accounts?.[configuredDefaultAccountId]?.appId))) return configuredDefaultAccountId;
-	if (qqbot?.appId || process.env.QQBOT_APP_ID) return DEFAULT_ACCOUNT_ID;
+	if (qqbot?.appId || process.env.QQBOT_APP_ID) return DEFAULT_ACCOUNT_ID$1;
 	if (qqbot?.accounts) {
 		const ids = Object.keys(qqbot.accounts);
 		if (ids.length > 0) return ids[0];
 	}
-	return DEFAULT_ACCOUNT_ID;
+	return DEFAULT_ACCOUNT_ID$1;
 }
 /**
 * Resolve base account info (without credentials).
@@ -281,4 +283,92 @@ function formatAllowFrom(allowFrom) {
 	return (allowFrom ?? []).map((entry) => normalizeStringifiedOptionalString(entry)).filter((entry) => Boolean(entry)).map((entry) => entry.replace(/^qqbot:/i, "")).map((entry) => entry.toUpperCase());
 }
 //#endregion
-export { isAccountConfigured as a, resolveDefaultAccountId as c, setBridgeLogger as d, formatAllowFrom as i, ensurePlatformAdapter as l, applyAccountConfig as n, listAccountIds as o, describeAccount as r, resolveAccountBase as s, DEFAULT_ACCOUNT_ID as t, getBridgeLogger as u };
+//#region extensions/qqbot/src/bridge/config.ts
+const DEFAULT_ACCOUNT_ID = DEFAULT_ACCOUNT_ID$1;
+function assertNotLegacySecretRefMarker(value, path) {
+	const normalized = normalizeSecretInputString(value);
+	if (!normalized || !/^secretref(?:-env)?:/i.test(normalized)) return;
+	throw new Error(`${path}: legacy SecretRef marker strings are not valid QQ Bot clientSecret values; use a structured SecretRef object instead.`);
+}
+function resolveEnvSecretRefValue(params) {
+	const ref = coerceSecretRef(params.value, params.cfg.secrets?.defaults);
+	if (!ref || ref.source !== "env") return;
+	const providerConfig = params.cfg.secrets?.providers?.[ref.provider];
+	if (providerConfig) {
+		if (providerConfig.source !== "env") throw new Error(`Secret provider "${ref.provider}" has source "${providerConfig.source}" but ref requests "env".`);
+		if (providerConfig.allowlist && !providerConfig.allowlist.includes(ref.id)) throw new Error(`Environment variable "${ref.id}" is not allowlisted in secrets.providers.${ref.provider}.allowlist.`);
+	} else if (ref.provider !== resolveDefaultSecretProviderAlias(params.cfg, "env")) throw new Error(`Secret provider "${ref.provider}" is not configured (ref: env:${ref.provider}:${ref.id}).`);
+	return normalizeSecretInputString((params.env ?? process.env)[ref.id]);
+}
+function resolveQQBotClientSecretInput(params) {
+	assertNotLegacySecretRefMarker(params.value, params.path);
+	const envSecret = resolveEnvSecretRefValue({
+		cfg: params.cfg,
+		value: params.value
+	});
+	if (envSecret) return envSecret;
+	return getPlatformAdapter().resolveSecretInputString({
+		value: params.value,
+		path: params.path
+	});
+}
+/** List all configured QQBot account IDs. */
+function listQQBotAccountIds(cfg) {
+	return listAccountIds(cfg);
+}
+/** Resolve the default QQBot account ID. */
+function resolveDefaultQQBotAccountId(cfg) {
+	return resolveDefaultAccountId(cfg);
+}
+/** Resolve QQBot account config for runtime or setup flows. */
+function resolveQQBotAccount(cfg, accountId, opts) {
+	const base = resolveAccountBase(cfg, accountId);
+	const qqbot = cfg.channels?.qqbot;
+	/**
+	* Legacy top-level account uses `channels.qqbot` as the base, but per-account
+	* fields (allowFrom, streaming, …) often live under `accounts.default`.
+	* Merge that slice so runtime sees `config.streaming` etc.
+	*/
+	const accountConfig = base.accountId === DEFAULT_ACCOUNT_ID ? {
+		...qqbot,
+		...qqbot?.accounts?.[DEFAULT_ACCOUNT_ID]
+	} : qqbot?.accounts?.[base.accountId] ?? {};
+	let clientSecret = "";
+	let secretSource = "none";
+	const clientSecretPath = base.accountId === DEFAULT_ACCOUNT_ID ? "channels.qqbot.clientSecret" : `channels.qqbot.accounts.${base.accountId}.clientSecret`;
+	const adapter = getPlatformAdapter();
+	if (adapter.hasConfiguredSecret(accountConfig.clientSecret)) {
+		clientSecret = opts?.allowUnresolvedSecretRef ? adapter.normalizeSecretInputString(accountConfig.clientSecret) ?? "" : resolveQQBotClientSecretInput({
+			cfg,
+			value: accountConfig.clientSecret,
+			path: clientSecretPath
+		}) ?? "";
+		secretSource = "config";
+	} else if (accountConfig.clientSecretFile) try {
+		clientSecret = fs.readFileSync(accountConfig.clientSecretFile, "utf8").trim();
+		secretSource = "file";
+	} catch {
+		secretSource = "none";
+	}
+	else if (process.env.QQBOT_CLIENT_SECRET && base.accountId === DEFAULT_ACCOUNT_ID) {
+		clientSecret = process.env.QQBOT_CLIENT_SECRET;
+		secretSource = "env";
+	}
+	return {
+		accountId: base.accountId,
+		name: accountConfig.name,
+		enabled: base.enabled,
+		appId: base.appId,
+		clientSecret,
+		secretSource,
+		systemPrompt: base.systemPrompt,
+		markdownSupport: base.markdownSupport,
+		config: accountConfig
+	};
+}
+/** Apply account config updates back into the OpenClaw config object. */
+function applyQQBotAccountConfig(cfg, accountId, input) {
+	return applyAccountConfig(cfg, accountId, input);
+}
+//#endregion
+export { resolveQQBotAccount as a, describeAccount as c, resolveAccountBase as d, ensurePlatformAdapter as f, resolveDefaultQQBotAccountId as i, formatAllowFrom as l, setBridgeLogger as m, applyQQBotAccountConfig as n, DEFAULT_ACCOUNT_ID$1 as o, getBridgeLogger as p, listQQBotAccountIds as r, applyAccountConfig as s, DEFAULT_ACCOUNT_ID as t, isAccountConfigured as u };

package/dist/{config-schema-BCxobX3l.js → config-schema-BeJQUheK.js}

@@ -1,6 +1,5 @@
 import { n as normalizeLowercaseStringOrEmpty } from "./string-normalize-C46CS-F1.js";
-import { a as isAccountConfigured, i as formatAllowFrom, n as applyAccountConfig, r as describeAccount } from "./resolve-D3lCbUze.js";
-import { a as resolveQQBotAccount, i as resolveDefaultQQBotAccountId, n as applyQQBotAccountConfig, r as listQQBotAccountIds } from "./config-BT8KP_H1.js";
+import { a as resolveQQBotAccount, c as describeAccount, i as resolveDefaultQQBotAccountId, l as formatAllowFrom, n as applyQQBotAccountConfig, r as listQQBotAccountIds, s as applyAccountConfig, u as isAccountConfigured } from "./config-DiBiPtf4.js";
 import { buildSecretInputSchema } from "openclaw/plugin-sdk/secret-input";
 import { applyAccountNameToChannelSection, deleteAccountFromConfigSection, setAccountEnabledInConfigSection } from "openclaw/plugin-sdk/core";
 import { DEFAULT_ACCOUNT_ID, createStandardChannelSetupStatus, setSetupChannelEnabled } from "openclaw/plugin-sdk/setup";

package/dist/{exec-approvals-W4oL9R6C.js → exec-approvals-Deww_EGt.js}

@@ -1,9 +1,102 @@
-import { a as resolveQQBotAccount, r as listQQBotAccountIds } from "./config-BT8KP_H1.js";
+import { a as resolveQQBotAccount, r as listQQBotAccountIds } from "./config-DiBiPtf4.js";
 import { resolveApprovalRequestChannelAccountId } from "openclaw/plugin-sdk/approval-native-runtime";
 import { normalizeLowercaseStringOrEmpty, normalizeOptionalString } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { resolveApprovalApprovers } from "openclaw/plugin-sdk/approval-auth-runtime";
 import { createChannelExecApprovalProfile, isChannelExecApprovalClientEnabledFromConfig, matchesApprovalRequestFilters } from "openclaw/plugin-sdk/approval-client-runtime";
 import { normalizeAccountId } from "openclaw/plugin-sdk/routing";
+//#region extensions/qqbot/src/engine/approval/index.ts
+function buildExecApprovalText(request) {
+	const expiresIn = Math.max(0, Math.round((request.expiresAtMs - Date.now()) / 1e3));
+	const lines = ["🔐 命令执行审批", ""];
+	const cmd = request.request.commandPreview ?? request.request.command ?? "";
+	if (cmd) lines.push(`\`\`\`\n${cmd.slice(0, 300)}\n\`\`\``);
+	if (request.request.cwd) lines.push(`\u{1f4c1} \u76ee\u5f55: ${request.request.cwd}`);
+	if (request.request.agentId) lines.push(`\u{1f916} Agent: ${request.request.agentId}`);
+	lines.push("", `\u23f1\ufe0f \u8d85\u65f6: ${expiresIn} \u79d2`);
+	return lines.join("\n");
+}
+function buildPluginApprovalText(request) {
+	const timeoutSec = Math.round((request.request.timeoutMs ?? 12e4) / 1e3);
+	const lines = [`${request.request.severity === "critical" ? "🔴" : request.request.severity === "info" ? "🔵" : "🟡"} \u5ba1\u6279\u8bf7\u6c42`, ""];
+	lines.push(`\u{1f4cb} ${request.request.title}`);
+	if (request.request.description) lines.push(`\u{1f4dd} ${request.request.description}`);
+	if (request.request.toolName) lines.push(`\u{1f527} \u5de5\u5177: ${request.request.toolName}`);
+	if (request.request.pluginId) lines.push(`\u{1f50c} \u63d2\u4ef6: ${request.request.pluginId}`);
+	if (request.request.agentId) lines.push(`\u{1f916} Agent: ${request.request.agentId}`);
+	lines.push("", `\u23f1\ufe0f \u8d85\u65f6: ${timeoutSec} \u79d2`);
+	return lines.join("\n");
+}
+/**
+* Build the three-button inline keyboard for approval messages.
+*
+* type=1 (Callback): click triggers INTERACTION_CREATE, button_data = data field.
+* group_id "approval": clicking one button grays out the others (mutual exclusion).
+* click_limit=1: each user can only click once.
+* permission.type=2: all users can interact.
+*/
+function buildApprovalKeyboard(approvalId, allowedDecisions = [
+	"allow-once",
+	"allow-always",
+	"deny"
+]) {
+	const makeBtn = (id, label, visitedLabel, data, style) => ({
+		id,
+		render_data: {
+			label,
+			visited_label: visitedLabel,
+			style
+		},
+		action: {
+			type: 1,
+			data,
+			permission: { type: 2 },
+			click_limit: 1
+		},
+		group_id: "approval"
+	});
+	const buttons = [];
+	if (allowedDecisions.includes("allow-once")) buttons.push(makeBtn("allow", "✅ 允许一次", "已允许", `approve:${approvalId}:allow-once`, 1));
+	if (allowedDecisions.includes("allow-always")) buttons.push(makeBtn("always", "⭐ 始终允许", "已始终允许", `approve:${approvalId}:allow-always`, 1));
+	if (allowedDecisions.includes("deny")) buttons.push(makeBtn("deny", "❌ 拒绝", "已拒绝", `approve:${approvalId}:deny`, 0));
+	return { content: { rows: [{ buttons }] } };
+}
+/**
+* Extract the delivery target from a sessionKey or turnSourceTo string.
+*
+* Expected formats:
+*   agent:main:qqbot:direct:OPENID  -> { type: "c2c", id: "OPENID" }
+*   agent:main:qqbot:c2c:OPENID     -> { type: "c2c", id: "OPENID" }
+*   agent:main:qqbot:group:GROUPID  -> { type: "group", id: "GROUPID" }
+*
+* Returns null if neither field matches the expected pattern.
+*/
+function resolveApprovalTarget(sessionKey, turnSourceTo) {
+	const sk = sessionKey ?? turnSourceTo;
+	if (!sk) return null;
+	const m = sk.match(/qqbot:(c2c|direct|group):([A-F0-9]+)/i);
+	if (!m) return null;
+	return {
+		type: m[1].toLowerCase() === "group" ? "group" : "c2c",
+		id: m[2]
+	};
+}
+/**
+* Parse the button_data string from an INTERACTION_CREATE event.
+*
+* Expected format: `approve:<approvalId>:<decision>`
+* where approvalId may be prefixed with "exec:" or "plugin:".
+*
+* Returns null if the data does not match the approval button format.
+*/
+function parseApprovalButtonData(buttonData) {
+	const m = buttonData.match(/^approve:((?:(?:exec|plugin):)?[0-9a-f-]+):(allow-once|allow-always|deny)$/i);
+	if (!m) return null;
+	return {
+		approvalId: m[1],
+		decision: m[2]
+	};
+}
+//#endregion
 //#region extensions/qqbot/src/exec-approvals.ts
 function normalizeApproverId(value) {
 	return normalizeOptionalString(String(value)) || void 0;
@@ -134,5 +227,12 @@ const isQQBotExecApprovalClientEnabled = qqbotExecApprovalProfile.isClientEnable
 const isQQBotExecApprovalApprover = qqbotExecApprovalProfile.isApprover;
 const isQQBotExecApprovalAuthorizedSender = qqbotExecApprovalProfile.isAuthorizedSender;
 const shouldHandleQQBotExecApprovalRequest = qqbotExecApprovalProfile.shouldHandleRequest;
+function authorizeQQBotApprovalAction(params) {
+	if (resolveQQBotExecApprovalConfig(params) === void 0) return { authorized: true };
+	return (params.approvalKind === "plugin" ? isQQBotExecApprovalApprover(params) : isQQBotExecApprovalAuthorizedSender(params)) ? { authorized: true } : {
+		authorized: false,
+		reason: "You are not authorized to approve this request."
+	};
+}
 //#endregion
-export { resolveQQBotExecApprovalConfig as a, matchesQQBotApprovalAccount as i, isQQBotExecApprovalAuthorizedSender as n, shouldHandleQQBotExecApprovalRequest as o, isQQBotExecApprovalClientEnabled as r, isQQBotExecApprovalApprover as t };
+export { shouldHandleQQBotExecApprovalRequest as a, buildPluginApprovalText as c, resolveQQBotExecApprovalConfig as i, parseApprovalButtonData as l, isQQBotExecApprovalClientEnabled as n, buildApprovalKeyboard as o, matchesQQBotApprovalAccount as r, buildExecApprovalText as s, authorizeQQBotApprovalAction as t, resolveApprovalTarget as u };

package/dist/{gateway-Bbsd8-ne.js → gateway-DEJhmN-p.js}

@@ -1,12 +1,12 @@
-import { E as setOutboundAudioPort, _ as sendVoice, c as isMediaPayload, g as sendVideoMsg, h as sendPhoto, l as parseQQBotPayload, m as sendDocument, o as encodePayloadForCron, r as sendMedia, s as isCronReminderPayload, u as normalizeMediaTags, v as resolveUserFacingMediaError, w as DEFAULT_MEDIA_SEND_ERROR } from "./outbound-BLWish89.js";
+import { E as setOutboundAudioPort, _ as sendVoice, c as isMediaPayload, g as sendVideoMsg, h as sendPhoto, l as parseQQBotPayload, m as sendDocument, o as encodePayloadForCron, r as sendMedia, s as isCronReminderPayload, u as normalizeMediaTags, v as resolveUserFacingMediaError, w as DEFAULT_MEDIA_SEND_ERROR } from "./outbound-BdQEr78b.js";
 import { c as getPlatformAdapter, i as normalizeOptionalString, n as normalizeLowercaseStringOrEmpty, o as readStringField, s as sanitizeFileName, t as asOptionalObjectRecord } from "./string-normalize-C46CS-F1.js";
-import { d as setBridgeLogger, l as ensurePlatformAdapter, s as resolveAccountBase } from "./resolve-D3lCbUze.js";
-import { i as parseApprovalButtonData } from "./approval-cg0SVahb.js";
-import { t as toGatewayAccount } from "./narrowing-BoieBTIU.js";
-import { B as StreamInputState, C as debugWarn, D as openLocalFile, I as formatDuration, L as formatErrorMessage, N as getImageMimeType, P as getMaxUploadSize, R as StreamContentType, S as debugLog, T as getNextMsgSeq, a as createRawInputNotifyFn, b as withTokenRetry, c as getMessageApi, d as initSender, f as onMessageSent, g as sendText, h as sendMedia$1, i as clearTokenCache, j as formatFileSize, k as downloadFile, l as getPluginUserAgent, m as sendInputNotify, n as acknowledgeInteraction, o as getAccessToken, p as registerAccount, r as buildDeliveryTarget, s as getGatewayUrl, t as accountToCreds, u as initApiConfig, v as startBackgroundTokenRefresh, x as debugError, y as stopBackgroundTokenRefresh, z as StreamInputMode } from "./sender-BrpzCcXA.js";
-import { n as getQQBotRuntimeForEngine, t as getQQBotRuntime } from "./runtime-CZyFkpnB.js";
-import { a as getHomeDir, c as getQQBotMediaDir, d as isLocalPath, f as isWindows, i as checkSilkWasmAvailable, m as resolveQQBotPayloadLocalFilePath, o as getQQBotDataDir, p as normalizePath$1, s as getQQBotDataPath, u as getTempDir } from "./target-parser-C8HaD-ik.js";
-import { a as getPluginVersion, i as getFrameworkVersion, n as runWithRequestContext, o as initCommands, s as matchSlashCommand } from "./request-context-BwSBFANU.js";
+import { d as resolveAccountBase, f as ensurePlatformAdapter, m as setBridgeLogger } from "./config-DiBiPtf4.js";
+import { l as parseApprovalButtonData, t as authorizeQQBotApprovalAction } from "./exec-approvals-Deww_EGt.js";
+import { t as toGatewayAccount } from "./narrowing-Bj4eMufj.js";
+import { B as StreamInputState, C as debugWarn, D as openLocalFile, I as formatDuration, L as formatErrorMessage, N as getImageMimeType, P as getMaxUploadSize, R as StreamContentType, S as debugLog, T as getNextMsgSeq, a as createRawInputNotifyFn, b as withTokenRetry, c as getMessageApi, d as initSender, f as onMessageSent, g as sendText, h as sendMedia$1, i as clearTokenCache, j as formatFileSize, k as downloadFile, l as getPluginUserAgent, m as sendInputNotify, n as acknowledgeInteraction, o as getAccessToken, p as registerAccount, r as buildDeliveryTarget, s as getGatewayUrl, t as accountToCreds, u as initApiConfig, v as startBackgroundTokenRefresh, x as debugError, y as stopBackgroundTokenRefresh, z as StreamInputMode } from "./sender-BeE_CBbN.js";
+import { n as getQQBotRuntimeForEngine, t as getQQBotRuntime } from "./runtime-B-cqLImu.js";
+import { a as getHomeDir, c as getQQBotMediaDir, d as isLocalPath, f as isWindows, i as checkSilkWasmAvailable, m as resolveQQBotPayloadLocalFilePath, o as getQQBotDataDir, p as normalizePath$1, s as getQQBotDataPath, u as getTempDir } from "./target-parser-ByU3srDK.js";
+import { a as getPluginVersion, i as getFrameworkVersion, n as runWithRequestContext, o as initCommands, s as matchSlashCommand } from "./request-context-Betw4nJr.js";
 import * as fs$1 from "node:fs";
 import fs from "node:fs";
 import * as os$1 from "node:os";
@@ -3026,18 +3026,6 @@ function resolveQQBotEffectivePolicies(input) {
 //#endregion
 //#region extensions/qqbot/src/engine/gateway/interaction-handler.ts
 /**
-* INTERACTION_CREATE event handler.
-*
-* Handles three interaction branches:
-*
-* 1. **Config query**  (type=2001) — reads config, ACKs with `claw_cfg`.
-* 2. **Config update** (type=2002) — writes config, ACKs with updated snapshot.
-* 3. **Approval button** (other)   — ACKs, resolves approval via PlatformAdapter.
-*
-* Config query/update require `runtime.config`. When unavailable, those
-* branches fall through to a bare ACK (backward-compatible).
-*/
-/**
 * Build the canonical `claw_cfg` snapshot returned in interaction ACKs.
 *
 * Pure function — all resolution helpers live in engine/config/.
@@ -3123,7 +3111,7 @@ function applyRequireMentionUpdate(cfg, accountId, groupOpenid, update) {
 * Returns a fire-and-forget callback that `GatewayConnection` calls
 * on every `action: "interaction"` dispatch result.
 */
-function createInteractionHandler(account, runtime, log) {
+function createInteractionHandler(account, runtime, log, options) {
 	return (event) => {
 		const creds = accountToCreds(account);
 		const type = event.data?.type;
@@ -3137,22 +3125,102 @@ function createInteractionHandler(account, runtime, log) {
 			handleWithAck(creds, event, log, "CONFIG_UPDATE", () => applyConfigUpdate(event, account.accountId, runtime, log));
 			return;
 		}
-		acknowledgeInteraction(creds, event.id).catch((err) => {
-			log?.error(`Interaction ACK failed: ${err instanceof Error ? err.message : String(err)}`);
-		});
 		const parsed = parseApprovalButtonData(event.data?.resolved?.button_data ?? "");
-		if (!parsed) return;
-		const adapter = getPlatformAdapter();
-		if (!adapter.resolveApproval) {
-			log?.error("resolveApproval not available on PlatformAdapter");
+		if (!parsed) {
+			acknowledgeInteraction(creds, event.id).catch((err) => {
+				log?.error(`Interaction ACK failed: ${err instanceof Error ? err.message : String(err)}`);
+			});
 			return;
 		}
-		adapter.resolveApproval(parsed.approvalId, parsed.decision).then((ok) => {
-			if (ok) log?.info(`Approval resolved: id=${parsed.approvalId}, decision=${parsed.decision}`);
-			else log?.error(`Approval resolve failed: id=${parsed.approvalId}`);
+		handleApprovalButtonInteraction({
+			accountId: account.accountId,
+			creds,
+			event,
+			getActiveCfg: options?.getActiveCfg ?? runtime.config?.current,
+			log,
+			parsed
 		});
 	};
 }
+async function handleApprovalButtonInteraction(params) {
+	if (!params.getActiveCfg) {
+		await acknowledgeApprovalInteraction(params.creds, params.event, params.log, { content: "Approval is unavailable." });
+		params.log?.error("Approval button rejected: active config is unavailable");
+		return;
+	}
+	let cfg;
+	try {
+		cfg = params.getActiveCfg();
+	} catch (err) {
+		await acknowledgeApprovalInteraction(params.creds, params.event, params.log, { content: "Approval is unavailable." });
+		params.log?.error(`Approval button rejected: active config failed to load: ${err instanceof Error ? err.message : String(err)}`);
+		return;
+	}
+	const authorization = authorizeApprovalButtonActor({
+		cfg,
+		accountId: params.accountId,
+		event: params.event,
+		approvalKind: resolveApprovalKind(params.parsed.approvalId)
+	});
+	if (!authorization.authorized) {
+		await acknowledgeApprovalInteraction(params.creds, params.event, params.log, { content: authorization.reason ?? "You are not authorized to approve this request." });
+		params.log?.info(`Approval button rejected: id=${params.parsed.approvalId}`);
+		return;
+	}
+	await acknowledgeApprovalInteraction(params.creds, params.event, params.log);
+	const adapter = getPlatformAdapter();
+	if (!adapter.resolveApproval) {
+		params.log?.error("resolveApproval not available on PlatformAdapter");
+		return;
+	}
+	try {
+		if (await adapter.resolveApproval(params.parsed.approvalId, params.parsed.decision)) params.log?.info(`Approval resolved: id=${params.parsed.approvalId}, decision=${params.parsed.decision}`);
+		else params.log?.error(`Approval resolve failed: id=${params.parsed.approvalId}`);
+	} catch (err) {
+		params.log?.error(`Approval resolve failed: id=${params.parsed.approvalId}: ${err instanceof Error ? err.message : String(err)}`);
+	}
+}
+async function acknowledgeApprovalInteraction(creds, event, log, data) {
+	try {
+		await acknowledgeInteraction(creds, event.id, 0, data);
+	} catch (err) {
+		log?.error(`Interaction ACK failed: ${err instanceof Error ? err.message : String(err)}`);
+	}
+}
+function authorizeApprovalButtonActor(params) {
+	const senderIds = resolveApprovalActorSenderIds(params.event);
+	if (senderIds.length === 0) return authorizeQQBotApprovalAction({
+		cfg: params.cfg,
+		accountId: params.accountId,
+		senderId: null,
+		approvalKind: params.approvalKind
+	});
+	let denial;
+	for (const senderId of senderIds) {
+		const result = authorizeQQBotApprovalAction({
+			cfg: params.cfg,
+			accountId: params.accountId,
+			senderId,
+			approvalKind: params.approvalKind
+		});
+		if (result.authorized) return result;
+		denial ??= result;
+	}
+	return denial ?? {
+		authorized: false,
+		reason: "You are not authorized to approve this request."
+	};
+}
+function resolveApprovalActorSenderIds(event) {
+	const ids = [event.group_member_openid, event.user_openid].flatMap((value) => {
+		const normalized = typeof value === "string" ? value.trim() : "";
+		return normalized ? [normalized] : [];
+	});
+	return Array.from(new Set(ids));
+}
+function resolveApprovalKind(approvalId) {
+	return approvalId.toLowerCase().startsWith("plugin:") ? "plugin" : "exec";
+}
 /** Execute an async handler, ACK with the result, and handle errors. */
 async function handleWithAck(creds, event, log, label, handler) {
 	try {
@@ -3267,7 +3335,7 @@ const IMAGE_PROBE_SSRF_POLICY = {};
 /**
 * Fetch image dimensions from a public URL using only the first 64 KB.
 *
-* Uses {@link fetchRemoteMedia} with SSRF guard to block probes against
+* Uses {@link readRemoteMediaBuffer} with SSRF guard to block probes against
 * private/reserved/loopback/link-local/metadata destinations.
 */
 async function getImageSizeFromUrl(url, timeoutMs = 5e3) {
@@ -6069,7 +6137,7 @@ async function startGateway$1(ctx) {
 			});
 		}
 	};
-	const handleInteraction = createInteractionHandler(account, ctx.runtime, log);
+	const handleInteraction = createInteractionHandler(account, ctx.runtime, log, { getActiveCfg: () => activeCfgProvider.getActiveCfg() });
 	await new GatewayConnection({
 		account,
 		abortSignal: ctx.abortSignal,

package/dist/{handler-runtime-ZgvjnyoH.js → handler-runtime-COWL4RMq.js}

@@ -1,8 +1,6 @@
-import { l as ensurePlatformAdapter, u as getBridgeLogger } from "./resolve-D3lCbUze.js";
-import { a as resolveApprovalTarget, n as buildExecApprovalText, r as buildPluginApprovalText, t as buildApprovalKeyboard } from "./approval-cg0SVahb.js";
-import { a as resolveQQBotAccount } from "./config-BT8KP_H1.js";
-import { a as resolveQQBotExecApprovalConfig, i as matchesQQBotApprovalAccount, o as shouldHandleQQBotExecApprovalRequest, r as isQQBotExecApprovalClientEnabled } from "./exec-approvals-W4oL9R6C.js";
-import { c as getMessageApi, t as accountToCreds } from "./sender-BrpzCcXA.js";
+import { a as resolveQQBotAccount, f as ensurePlatformAdapter, p as getBridgeLogger } from "./config-DiBiPtf4.js";
+import { a as shouldHandleQQBotExecApprovalRequest, c as buildPluginApprovalText, i as resolveQQBotExecApprovalConfig, n as isQQBotExecApprovalClientEnabled, o as buildApprovalKeyboard, r as matchesQQBotApprovalAccount, s as buildExecApprovalText, u as resolveApprovalTarget } from "./exec-approvals-Deww_EGt.js";
+import { c as getMessageApi, t as accountToCreds } from "./sender-BeE_CBbN.js";
 import { resolveApprovalRequestSessionConversation } from "openclaw/plugin-sdk/approval-native-runtime";
 import { createChannelApprovalNativeRuntimeAdapter } from "openclaw/plugin-sdk/approval-handler-runtime";
 //#region extensions/qqbot/src/bridge/approval/handler-runtime.ts

package/dist/{outbound-BLWish89.js → outbound-BdQEr78b.js}

@@ -1,6 +1,6 @@
 import { i as normalizeOptionalString, n as normalizeLowercaseStringOrEmpty, s as sanitizeFileName } from "./string-normalize-C46CS-F1.js";
-import { A as fileExistsAsync, C as debugWarn, E as UPLOAD_PREPARE_FALLBACK_CODE, F as readFileAsync, L as formatErrorMessage, M as getFileTypeName, N as getImageMimeType, O as checkFileSize, P as getMaxUploadSize, S as debugLog, g as sendText$1, h as sendMedia$1, j as formatFileSize, k as downloadFile, t as accountToCreds, u as initApiConfig, w as UploadDailyLimitExceededError, x as debugError } from "./sender-BrpzCcXA.js";
-import { c as getQQBotMediaDir, d as isLocalPath, m as resolveQQBotPayloadLocalFilePath, o as getQQBotDataDir, p as normalizePath, r as parseTarget$1 } from "./target-parser-C8HaD-ik.js";
+import { A as fileExistsAsync, C as debugWarn, E as UPLOAD_PREPARE_FALLBACK_CODE, F as readFileAsync, L as formatErrorMessage, M as getFileTypeName, N as getImageMimeType, O as checkFileSize, P as getMaxUploadSize, S as debugLog, g as sendText$1, h as sendMedia$1, j as formatFileSize, k as downloadFile, t as accountToCreds, u as initApiConfig, w as UploadDailyLimitExceededError, x as debugError } from "./sender-BeE_CBbN.js";
+import { c as getQQBotMediaDir, d as isLocalPath, m as resolveQQBotPayloadLocalFilePath, o as getQQBotDataDir, p as normalizePath, r as parseTarget$1 } from "./target-parser-ByU3srDK.js";
 import { pathExistsSync, resolveLocalPathFromRootsSync } from "openclaw/plugin-sdk/security-runtime";
 import path from "node:path";
 import { getFileExtension } from "openclaw/plugin-sdk/media-mime";
@@ -878,6 +878,14 @@ const CRON_PREFIX = "QQBOT_CRON:";
 function formatErr(e) {
 	return e instanceof Error ? e.message : String(e);
 }
+function normalizeBase64ForCompare(value) {
+	return value.replace(/=+$/u, "").replace(/-/gu, "+").replace(/_/gu, "/");
+}
+function decodeStrictBase64Utf8(value) {
+	const buffer = Buffer.from(value, "base64");
+	if (normalizeBase64ForCompare(buffer.toString("base64")) !== normalizeBase64ForCompare(value)) throw new Error("Cron payload body is not valid base64");
+	return buffer.toString("utf-8");
+}
 /** Parse model output that may start with the QQ Bot structured payload prefix. */
 function parseQQBotPayload(text) {
 	const trimmedText = text.trim();
@@ -933,7 +941,7 @@ function decodeCronPayload(message) {
 		error: "Cron payload body is empty"
 	};
 	try {
-		const jsonString = Buffer.from(base64Content, "base64").toString("utf-8");
+		const jsonString = decodeStrictBase64Utf8(base64Content);
 		const payload = JSON.parse(jsonString);
 		if (payload.type !== "cron_reminder") return {
 			isCronPayload: true,

package/dist/{request-context-BwSBFANU.js → request-context-Betw4nJr.js}

@@ -1,5 +1,5 @@
-import { S as debugLog } from "./sender-BrpzCcXA.js";
-import { a as getHomeDir, f as isWindows, l as getQQBotMediaPath, o as getQQBotDataDir } from "./target-parser-C8HaD-ik.js";
+import { S as debugLog } from "./sender-BeE_CBbN.js";
+import { a as getHomeDir, f as isWindows, l as getQQBotMediaPath, o as getQQBotDataDir } from "./target-parser-ByU3srDK.js";
 import fs from "node:fs";
 import path from "node:path";
 import { loadJsonFile } from "openclaw/plugin-sdk/json-store";

package/dist/{runtime-CZyFkpnB.js → runtime-B-cqLImu.js}

@@ -1,4 +1,4 @@
-import { _ as setOpenClawVersion } from "./sender-BrpzCcXA.js";
+import { _ as setOpenClawVersion } from "./sender-BeE_CBbN.js";
 import { createPluginRuntimeStore } from "openclaw/plugin-sdk/runtime-store";
 //#region extensions/qqbot/src/bridge/runtime.ts
 const { setRuntime: _setRuntime, getRuntime: getQQBotRuntime } = createPluginRuntimeStore({

package/dist/runtime-api.js

@@ -1,2 +1,2 @@
-import { r as setQQBotRuntime, t as getQQBotRuntime } from "./runtime-CZyFkpnB.js";
+import { r as setQQBotRuntime, t as getQQBotRuntime } from "./runtime-B-cqLImu.js";
 export { getQQBotRuntime, setQQBotRuntime };

package/dist/{sender-BrpzCcXA.js → sender-BeE_CBbN.js}

@@ -1386,14 +1386,19 @@ var TokenManager = class {
 		}
 		const traceId = response.headers.get("x-tps-trace-id") ?? "";
 		this.logger?.debug?.(`[qqbot:token:${appId}] <<< ${response.status}${traceId ? ` | TraceId: ${traceId}` : ""}`);
+		let rawBody;
+		try {
+			rawBody = await response.text();
+		} catch (err) {
+			throw new Error(`Failed to read access_token response: ${formatErrorMessage(err)}`, { cause: err });
+		}
+		const logBody = rawBody.replace(/"access_token"\s*:\s*"[^"]+"/g, "\"access_token\": \"***\"");
+		this.logger?.debug?.(`[qqbot:token:${appId}] <<< Body: ${logBody}`);
 		let data;
 		try {
-			const rawBody = await response.text();
-			const logBody = rawBody.replace(/"access_token"\s*:\s*"[^"]+"/g, "\"access_token\": \"***\"");
-			this.logger?.debug?.(`[qqbot:token:${appId}] <<< Body: ${logBody}`);
 			data = JSON.parse(rawBody);
-		} catch (err) {
-			throw new Error(`Failed to parse access_token response: ${formatErrorMessage(err)}`, { cause: err });
+		} catch {
+			throw new Error("QQBot access_token response was malformed JSON");
 		}
 		if (!data.access_token) throw new Error(`Failed to get access_token: ${JSON.stringify(data)}`);
 		const expiresAt = Date.now() + (data.expires_in ?? 7200) * 1e3;

package/dist/setup-plugin-api.js

@@ -1,2 +1,2 @@
-import { t as qqbotSetupPlugin } from "./channel.setup-D_GS95Pk.js";
+import { t as qqbotSetupPlugin } from "./channel.setup-DWWV_GAa.js";
 export { qqbotSetupPlugin };

package/dist/{target-parser-C8HaD-ik.js → target-parser-ByU3srDK.js}

@@ -1,5 +1,5 @@
 import { c as getPlatformAdapter } from "./string-normalize-C46CS-F1.js";
-import { C as debugWarn, L as formatErrorMessage, S as debugLog } from "./sender-BrpzCcXA.js";
+import { C as debugWarn, L as formatErrorMessage, S as debugLog } from "./sender-BeE_CBbN.js";
 import * as fs$1 from "node:fs";
 import * as os$1 from "node:os";
 import * as path$1 from "node:path";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@openclaw/qqbot",
-  "version": "2026.5.12-beta.8",
+  "version": "2026.5.14-beta.1",
   "private": false,
   "description": "OpenClaw QQ Bot channel plugin",
   "repository": {
@@ -21,7 +21,7 @@
     "openclaw": "workspace:*"
   },
   "peerDependencies": {
-    "openclaw": ">=2026.5.12-beta.8"
+    "openclaw": ">=2026.5.14-beta.1"
   },
   "peerDependenciesMeta": {
     "openclaw": {
@@ -50,10 +50,10 @@
       "minHostVersion": ">=2026.4.10"
     },
     "compat": {
-      "pluginApi": ">=2026.5.12-beta.8"
+      "pluginApi": ">=2026.5.14-beta.1"
     },
     "build": {
-      "openclawVersion": "2026.5.12-beta.8"
+      "openclawVersion": "2026.5.14-beta.1"
     },
     "release": {
       "publishToClawHub": true,

package/dist/approval-cg0SVahb.js

@@ -1,94 +0,0 @@
-//#region extensions/qqbot/src/engine/approval/index.ts
-function buildExecApprovalText(request) {
-	const expiresIn = Math.max(0, Math.round((request.expiresAtMs - Date.now()) / 1e3));
-	const lines = ["🔐 命令执行审批", ""];
-	const cmd = request.request.commandPreview ?? request.request.command ?? "";
-	if (cmd) lines.push(`\`\`\`\n${cmd.slice(0, 300)}\n\`\`\``);
-	if (request.request.cwd) lines.push(`\u{1f4c1} \u76ee\u5f55: ${request.request.cwd}`);
-	if (request.request.agentId) lines.push(`\u{1f916} Agent: ${request.request.agentId}`);
-	lines.push("", `\u23f1\ufe0f \u8d85\u65f6: ${expiresIn} \u79d2`);
-	return lines.join("\n");
-}
-function buildPluginApprovalText(request) {
-	const timeoutSec = Math.round((request.request.timeoutMs ?? 12e4) / 1e3);
-	const lines = [`${request.request.severity === "critical" ? "🔴" : request.request.severity === "info" ? "🔵" : "🟡"} \u5ba1\u6279\u8bf7\u6c42`, ""];
-	lines.push(`\u{1f4cb} ${request.request.title}`);
-	if (request.request.description) lines.push(`\u{1f4dd} ${request.request.description}`);
-	if (request.request.toolName) lines.push(`\u{1f527} \u5de5\u5177: ${request.request.toolName}`);
-	if (request.request.pluginId) lines.push(`\u{1f50c} \u63d2\u4ef6: ${request.request.pluginId}`);
-	if (request.request.agentId) lines.push(`\u{1f916} Agent: ${request.request.agentId}`);
-	lines.push("", `\u23f1\ufe0f \u8d85\u65f6: ${timeoutSec} \u79d2`);
-	return lines.join("\n");
-}
-/**
-* Build the three-button inline keyboard for approval messages.
-*
-* type=1 (Callback): click triggers INTERACTION_CREATE, button_data = data field.
-* group_id "approval": clicking one button grays out the others (mutual exclusion).
-* click_limit=1: each user can only click once.
-* permission.type=2: all users can interact.
-*/
-function buildApprovalKeyboard(approvalId, allowedDecisions = [
-	"allow-once",
-	"allow-always",
-	"deny"
-]) {
-	const makeBtn = (id, label, visitedLabel, data, style) => ({
-		id,
-		render_data: {
-			label,
-			visited_label: visitedLabel,
-			style
-		},
-		action: {
-			type: 1,
-			data,
-			permission: { type: 2 },
-			click_limit: 1
-		},
-		group_id: "approval"
-	});
-	const buttons = [];
-	if (allowedDecisions.includes("allow-once")) buttons.push(makeBtn("allow", "✅ 允许一次", "已允许", `approve:${approvalId}:allow-once`, 1));
-	if (allowedDecisions.includes("allow-always")) buttons.push(makeBtn("always", "⭐ 始终允许", "已始终允许", `approve:${approvalId}:allow-always`, 1));
-	if (allowedDecisions.includes("deny")) buttons.push(makeBtn("deny", "❌ 拒绝", "已拒绝", `approve:${approvalId}:deny`, 0));
-	return { content: { rows: [{ buttons }] } };
-}
-/**
-* Extract the delivery target from a sessionKey or turnSourceTo string.
-*
-* Expected formats:
-*   agent:main:qqbot:direct:OPENID  -> { type: "c2c", id: "OPENID" }
-*   agent:main:qqbot:c2c:OPENID     -> { type: "c2c", id: "OPENID" }
-*   agent:main:qqbot:group:GROUPID  -> { type: "group", id: "GROUPID" }
-*
-* Returns null if neither field matches the expected pattern.
-*/
-function resolveApprovalTarget(sessionKey, turnSourceTo) {
-	const sk = sessionKey ?? turnSourceTo;
-	if (!sk) return null;
-	const m = sk.match(/qqbot:(c2c|direct|group):([A-F0-9]+)/i);
-	if (!m) return null;
-	return {
-		type: m[1].toLowerCase() === "group" ? "group" : "c2c",
-		id: m[2]
-	};
-}
-/**
-* Parse the button_data string from an INTERACTION_CREATE event.
-*
-* Expected format: `approve:<approvalId>:<decision>`
-* where approvalId may be prefixed with "exec:" or "plugin:".
-*
-* Returns null if the data does not match the approval button format.
-*/
-function parseApprovalButtonData(buttonData) {
-	const m = buttonData.match(/^approve:((?:(?:exec|plugin):)?[0-9a-f-]+):(allow-once|allow-always|deny)$/i);
-	if (!m) return null;
-	return {
-		approvalId: m[1],
-		decision: m[2]
-	};
-}
-//#endregion
-export { resolveApprovalTarget as a, parseApprovalButtonData as i, buildExecApprovalText as n, buildPluginApprovalText as r, buildApprovalKeyboard as t };

package/dist/config-BT8KP_H1.js

@@ -1,94 +0,0 @@
-import { c as getPlatformAdapter } from "./string-normalize-C46CS-F1.js";
-import { c as resolveDefaultAccountId, n as applyAccountConfig, o as listAccountIds, s as resolveAccountBase, t as DEFAULT_ACCOUNT_ID$1 } from "./resolve-D3lCbUze.js";
-import { coerceSecretRef, normalizeSecretInputString } from "openclaw/plugin-sdk/secret-input";
-import fs from "node:fs";
-import { resolveDefaultSecretProviderAlias } from "openclaw/plugin-sdk/provider-auth";
-//#region extensions/qqbot/src/bridge/config.ts
-const DEFAULT_ACCOUNT_ID = DEFAULT_ACCOUNT_ID$1;
-function assertNotLegacySecretRefMarker(value, path) {
-	const normalized = normalizeSecretInputString(value);
-	if (!normalized || !/^secretref(?:-env)?:/i.test(normalized)) return;
-	throw new Error(`${path}: legacy SecretRef marker strings are not valid QQ Bot clientSecret values; use a structured SecretRef object instead.`);
-}
-function resolveEnvSecretRefValue(params) {
-	const ref = coerceSecretRef(params.value, params.cfg.secrets?.defaults);
-	if (!ref || ref.source !== "env") return;
-	const providerConfig = params.cfg.secrets?.providers?.[ref.provider];
-	if (providerConfig) {
-		if (providerConfig.source !== "env") throw new Error(`Secret provider "${ref.provider}" has source "${providerConfig.source}" but ref requests "env".`);
-		if (providerConfig.allowlist && !providerConfig.allowlist.includes(ref.id)) throw new Error(`Environment variable "${ref.id}" is not allowlisted in secrets.providers.${ref.provider}.allowlist.`);
-	} else if (ref.provider !== resolveDefaultSecretProviderAlias(params.cfg, "env")) throw new Error(`Secret provider "${ref.provider}" is not configured (ref: env:${ref.provider}:${ref.id}).`);
-	return normalizeSecretInputString((params.env ?? process.env)[ref.id]);
-}
-function resolveQQBotClientSecretInput(params) {
-	assertNotLegacySecretRefMarker(params.value, params.path);
-	const envSecret = resolveEnvSecretRefValue({
-		cfg: params.cfg,
-		value: params.value
-	});
-	if (envSecret) return envSecret;
-	return getPlatformAdapter().resolveSecretInputString({
-		value: params.value,
-		path: params.path
-	});
-}
-/** List all configured QQBot account IDs. */
-function listQQBotAccountIds(cfg) {
-	return listAccountIds(cfg);
-}
-/** Resolve the default QQBot account ID. */
-function resolveDefaultQQBotAccountId(cfg) {
-	return resolveDefaultAccountId(cfg);
-}
-/** Resolve QQBot account config for runtime or setup flows. */
-function resolveQQBotAccount(cfg, accountId, opts) {
-	const base = resolveAccountBase(cfg, accountId);
-	const qqbot = cfg.channels?.qqbot;
-	/**
-	* Legacy top-level account uses `channels.qqbot` as the base, but per-account
-	* fields (allowFrom, streaming, …) often live under `accounts.default`.
-	* Merge that slice so runtime sees `config.streaming` etc.
-	*/
-	const accountConfig = base.accountId === DEFAULT_ACCOUNT_ID ? {
-		...qqbot,
-		...qqbot?.accounts?.[DEFAULT_ACCOUNT_ID]
-	} : qqbot?.accounts?.[base.accountId] ?? {};
-	let clientSecret = "";
-	let secretSource = "none";
-	const clientSecretPath = base.accountId === DEFAULT_ACCOUNT_ID ? "channels.qqbot.clientSecret" : `channels.qqbot.accounts.${base.accountId}.clientSecret`;
-	const adapter = getPlatformAdapter();
-	if (adapter.hasConfiguredSecret(accountConfig.clientSecret)) {
-		clientSecret = opts?.allowUnresolvedSecretRef ? adapter.normalizeSecretInputString(accountConfig.clientSecret) ?? "" : resolveQQBotClientSecretInput({
-			cfg,
-			value: accountConfig.clientSecret,
-			path: clientSecretPath
-		}) ?? "";
-		secretSource = "config";
-	} else if (accountConfig.clientSecretFile) try {
-		clientSecret = fs.readFileSync(accountConfig.clientSecretFile, "utf8").trim();
-		secretSource = "file";
-	} catch {
-		secretSource = "none";
-	}
-	else if (process.env.QQBOT_CLIENT_SECRET && base.accountId === DEFAULT_ACCOUNT_ID) {
-		clientSecret = process.env.QQBOT_CLIENT_SECRET;
-		secretSource = "env";
-	}
-	return {
-		accountId: base.accountId,
-		name: accountConfig.name,
-		enabled: base.enabled,
-		appId: base.appId,
-		clientSecret,
-		secretSource,
-		systemPrompt: base.systemPrompt,
-		markdownSupport: base.markdownSupport,
-		config: accountConfig
-	};
-}
-/** Apply account config updates back into the OpenClaw config object. */
-function applyQQBotAccountConfig(cfg, accountId, input) {
-	return applyAccountConfig(cfg, accountId, input);
-}
-//#endregion
-export { resolveQQBotAccount as a, resolveDefaultQQBotAccountId as i, applyQQBotAccountConfig as n, listQQBotAccountIds as r, DEFAULT_ACCOUNT_ID as t };