@openclaw/qqbot 2026.5.12 → 2026.5.14-beta.2

package/dist/{gateway-Bbsd8-ne.js → gateway-Bz_nu9BP.js}

@@ -1,12 +1,9 @@
-import { E as setOutboundAudioPort, _ as sendVoice, c as isMediaPayload, g as sendVideoMsg, h as sendPhoto, l as parseQQBotPayload, m as sendDocument, o as encodePayloadForCron, r as sendMedia, s as isCronReminderPayload, u as normalizeMediaTags, v as resolveUserFacingMediaError, w as DEFAULT_MEDIA_SEND_ERROR } from "./outbound-BLWish89.js";
+import { E as setOutboundAudioPort, _ as sendVoice, c as isMediaPayload, g as sendVideoMsg, h as sendPhoto, l as parseQQBotPayload, m as sendDocument, o as encodePayloadForCron, r as sendMedia, s as isCronReminderPayload, u as normalizeMediaTags, v as resolveUserFacingMediaError, w as DEFAULT_MEDIA_SEND_ERROR } from "./outbound-DTQUASKu.js";
 import { c as getPlatformAdapter, i as normalizeOptionalString, n as normalizeLowercaseStringOrEmpty, o as readStringField, s as sanitizeFileName, t as asOptionalObjectRecord } from "./string-normalize-C46CS-F1.js";
-import { d as setBridgeLogger, l as ensurePlatformAdapter, s as resolveAccountBase } from "./resolve-D3lCbUze.js";
-import { i as parseApprovalButtonData } from "./approval-cg0SVahb.js";
-import { t as toGatewayAccount } from "./narrowing-BoieBTIU.js";
-import { B as StreamInputState, C as debugWarn, D as openLocalFile, I as formatDuration, L as formatErrorMessage, N as getImageMimeType, P as getMaxUploadSize, R as StreamContentType, S as debugLog, T as getNextMsgSeq, a as createRawInputNotifyFn, b as withTokenRetry, c as getMessageApi, d as initSender, f as onMessageSent, g as sendText, h as sendMedia$1, i as clearTokenCache, j as formatFileSize, k as downloadFile, l as getPluginUserAgent, m as sendInputNotify, n as acknowledgeInteraction, o as getAccessToken, p as registerAccount, r as buildDeliveryTarget, s as getGatewayUrl, t as accountToCreds, u as initApiConfig, v as startBackgroundTokenRefresh, x as debugError, y as stopBackgroundTokenRefresh, z as StreamInputMode } from "./sender-BrpzCcXA.js";
-import { n as getQQBotRuntimeForEngine, t as getQQBotRuntime } from "./runtime-CZyFkpnB.js";
-import { a as getHomeDir, c as getQQBotMediaDir, d as isLocalPath, f as isWindows, i as checkSilkWasmAvailable, m as resolveQQBotPayloadLocalFilePath, o as getQQBotDataDir, p as normalizePath$1, s as getQQBotDataPath, u as getTempDir } from "./target-parser-C8HaD-ik.js";
-import { a as getPluginVersion, i as getFrameworkVersion, n as runWithRequestContext, o as initCommands, s as matchSlashCommand } from "./request-context-BwSBFANU.js";
+import { f as resolveAccountBase, h as setBridgeLogger, p as ensurePlatformAdapter } from "./config-schema-BE5YP0NG.js";
+import { C as parseApprovalButtonData, a as getQQBotDataDir, d as isWindows, f as normalizePath$1, h as authorizeQQBotApprovalAction, i as getHomeDir, l as getTempDir, m as toGatewayAccount, o as getQQBotDataPath, p as resolveQQBotPayloadLocalFilePath, r as checkSilkWasmAvailable, s as getQQBotMediaDir, u as isLocalPath } from "./channel-nG7HntSR.js";
+import { B as StreamContentType, C as debugError, D as getNextMsgSeq, F as getImageMimeType, H as StreamInputState, I as getMaxUploadSize, N as formatFileSize, R as formatDuration, S as withTokenRetry, T as debugWarn, V as StreamInputMode, _ as sendInputNotify, a as acknowledgeInteraction, b as startBackgroundTokenRefresh, c as createRawInputNotifyFn, d as getMessageApi, f as getPluginUserAgent, g as registerAccount, h as onMessageSent, i as accountToCreds, j as downloadFile, k as openLocalFile, l as getAccessToken, m as initSender, n as getQQBotRuntimeForEngine, o as buildDeliveryTarget, p as initApiConfig, s as clearTokenCache, t as getQQBotRuntime, u as getGatewayUrl, v as sendMedia$1, w as debugLog, x as stopBackgroundTokenRefresh, y as sendText, z as formatErrorMessage } from "./runtime-BFcYWYuk.js";
+import { a as getPluginVersion, i as getFrameworkVersion, n as runWithRequestContext, o as initCommands, s as matchSlashCommand } from "./request-context-DiWgzdpn.js";
 import * as fs$1 from "node:fs";
 import fs from "node:fs";
 import * as os$1 from "node:os";
@@ -3026,18 +3023,6 @@ function resolveQQBotEffectivePolicies(input) {
 //#endregion
 //#region extensions/qqbot/src/engine/gateway/interaction-handler.ts
 /**
-* INTERACTION_CREATE event handler.
-*
-* Handles three interaction branches:
-*
-* 1. **Config query**  (type=2001) — reads config, ACKs with `claw_cfg`.
-* 2. **Config update** (type=2002) — writes config, ACKs with updated snapshot.
-* 3. **Approval button** (other)   — ACKs, resolves approval via PlatformAdapter.
-*
-* Config query/update require `runtime.config`. When unavailable, those
-* branches fall through to a bare ACK (backward-compatible).
-*/
-/**
 * Build the canonical `claw_cfg` snapshot returned in interaction ACKs.
 *
 * Pure function — all resolution helpers live in engine/config/.
@@ -3123,7 +3108,7 @@ function applyRequireMentionUpdate(cfg, accountId, groupOpenid, update) {
 * Returns a fire-and-forget callback that `GatewayConnection` calls
 * on every `action: "interaction"` dispatch result.
 */
-function createInteractionHandler(account, runtime, log) {
+function createInteractionHandler(account, runtime, log, options) {
 	return (event) => {
 		const creds = accountToCreds(account);
 		const type = event.data?.type;
@@ -3137,22 +3122,102 @@ function createInteractionHandler(account, runtime, log) {
 			handleWithAck(creds, event, log, "CONFIG_UPDATE", () => applyConfigUpdate(event, account.accountId, runtime, log));
 			return;
 		}
-		acknowledgeInteraction(creds, event.id).catch((err) => {
-			log?.error(`Interaction ACK failed: ${err instanceof Error ? err.message : String(err)}`);
-		});
 		const parsed = parseApprovalButtonData(event.data?.resolved?.button_data ?? "");
-		if (!parsed) return;
-		const adapter = getPlatformAdapter();
-		if (!adapter.resolveApproval) {
-			log?.error("resolveApproval not available on PlatformAdapter");
+		if (!parsed) {
+			acknowledgeInteraction(creds, event.id).catch((err) => {
+				log?.error(`Interaction ACK failed: ${err instanceof Error ? err.message : String(err)}`);
+			});
 			return;
 		}
-		adapter.resolveApproval(parsed.approvalId, parsed.decision).then((ok) => {
-			if (ok) log?.info(`Approval resolved: id=${parsed.approvalId}, decision=${parsed.decision}`);
-			else log?.error(`Approval resolve failed: id=${parsed.approvalId}`);
+		handleApprovalButtonInteraction({
+			accountId: account.accountId,
+			creds,
+			event,
+			getActiveCfg: options?.getActiveCfg ?? runtime.config?.current,
+			log,
+			parsed
 		});
 	};
 }
+async function handleApprovalButtonInteraction(params) {
+	if (!params.getActiveCfg) {
+		await acknowledgeApprovalInteraction(params.creds, params.event, params.log, { content: "Approval is unavailable." });
+		params.log?.error("Approval button rejected: active config is unavailable");
+		return;
+	}
+	let cfg;
+	try {
+		cfg = params.getActiveCfg();
+	} catch (err) {
+		await acknowledgeApprovalInteraction(params.creds, params.event, params.log, { content: "Approval is unavailable." });
+		params.log?.error(`Approval button rejected: active config failed to load: ${err instanceof Error ? err.message : String(err)}`);
+		return;
+	}
+	const authorization = authorizeApprovalButtonActor({
+		cfg,
+		accountId: params.accountId,
+		event: params.event,
+		approvalKind: resolveApprovalKind(params.parsed.approvalId)
+	});
+	if (!authorization.authorized) {
+		await acknowledgeApprovalInteraction(params.creds, params.event, params.log, { content: authorization.reason ?? "You are not authorized to approve this request." });
+		params.log?.info(`Approval button rejected: id=${params.parsed.approvalId}`);
+		return;
+	}
+	await acknowledgeApprovalInteraction(params.creds, params.event, params.log);
+	const adapter = getPlatformAdapter();
+	if (!adapter.resolveApproval) {
+		params.log?.error("resolveApproval not available on PlatformAdapter");
+		return;
+	}
+	try {
+		if (await adapter.resolveApproval(params.parsed.approvalId, params.parsed.decision)) params.log?.info(`Approval resolved: id=${params.parsed.approvalId}, decision=${params.parsed.decision}`);
+		else params.log?.error(`Approval resolve failed: id=${params.parsed.approvalId}`);
+	} catch (err) {
+		params.log?.error(`Approval resolve failed: id=${params.parsed.approvalId}: ${err instanceof Error ? err.message : String(err)}`);
+	}
+}
+async function acknowledgeApprovalInteraction(creds, event, log, data) {
+	try {
+		await acknowledgeInteraction(creds, event.id, 0, data);
+	} catch (err) {
+		log?.error(`Interaction ACK failed: ${err instanceof Error ? err.message : String(err)}`);
+	}
+}
+function authorizeApprovalButtonActor(params) {
+	const senderIds = resolveApprovalActorSenderIds(params.event);
+	if (senderIds.length === 0) return authorizeQQBotApprovalAction({
+		cfg: params.cfg,
+		accountId: params.accountId,
+		senderId: null,
+		approvalKind: params.approvalKind
+	});
+	let denial;
+	for (const senderId of senderIds) {
+		const result = authorizeQQBotApprovalAction({
+			cfg: params.cfg,
+			accountId: params.accountId,
+			senderId,
+			approvalKind: params.approvalKind
+		});
+		if (result.authorized) return result;
+		denial ??= result;
+	}
+	return denial ?? {
+		authorized: false,
+		reason: "You are not authorized to approve this request."
+	};
+}
+function resolveApprovalActorSenderIds(event) {
+	const ids = [event.group_member_openid, event.user_openid].flatMap((value) => {
+		const normalized = typeof value === "string" ? value.trim() : "";
+		return normalized ? [normalized] : [];
+	});
+	return Array.from(new Set(ids));
+}
+function resolveApprovalKind(approvalId) {
+	return approvalId.toLowerCase().startsWith("plugin:") ? "plugin" : "exec";
+}
 /** Execute an async handler, ACK with the result, and handle errors. */
 async function handleWithAck(creds, event, log, label, handler) {
 	try {
@@ -3267,7 +3332,7 @@ const IMAGE_PROBE_SSRF_POLICY = {};
 /**
 * Fetch image dimensions from a public URL using only the first 64 KB.
 *
-* Uses {@link fetchRemoteMedia} with SSRF guard to block probes against
+* Uses {@link readRemoteMediaBuffer} with SSRF guard to block probes against
 * private/reserved/loopback/link-local/metadata destinations.
 */
 async function getImageSizeFromUrl(url, timeoutMs = 5e3) {
@@ -6069,7 +6134,7 @@ async function startGateway$1(ctx) {
 			});
 		}
 	};
-	const handleInteraction = createInteractionHandler(account, ctx.runtime, log);
+	const handleInteraction = createInteractionHandler(account, ctx.runtime, log, { getActiveCfg: () => activeCfgProvider.getActiveCfg() });
 	await new GatewayConnection({
 		account,
 		abortSignal: ctx.abortSignal,

package/dist/{handler-runtime-ZgvjnyoH.js → handler-runtime-DMMHU4NC.js}

@@ -1,8 +1,6 @@
-import { l as ensurePlatformAdapter, u as getBridgeLogger } from "./resolve-D3lCbUze.js";
-import { a as resolveApprovalTarget, n as buildExecApprovalText, r as buildPluginApprovalText, t as buildApprovalKeyboard } from "./approval-cg0SVahb.js";
-import { a as resolveQQBotAccount } from "./config-BT8KP_H1.js";
-import { a as resolveQQBotExecApprovalConfig, i as matchesQQBotApprovalAccount, o as shouldHandleQQBotExecApprovalRequest, r as isQQBotExecApprovalClientEnabled } from "./exec-approvals-W4oL9R6C.js";
-import { c as getMessageApi, t as accountToCreds } from "./sender-BrpzCcXA.js";
+import { m as getBridgeLogger, p as ensurePlatformAdapter, u as resolveQQBotAccount } from "./config-schema-BE5YP0NG.js";
+import { S as buildPluginApprovalText, _ as matchesQQBotApprovalAccount, b as buildApprovalKeyboard, g as isQQBotExecApprovalClientEnabled, v as resolveQQBotExecApprovalConfig, w as resolveApprovalTarget, x as buildExecApprovalText, y as shouldHandleQQBotExecApprovalRequest } from "./channel-nG7HntSR.js";
+import { d as getMessageApi, i as accountToCreds } from "./runtime-BFcYWYuk.js";
 import { resolveApprovalRequestSessionConversation } from "openclaw/plugin-sdk/approval-native-runtime";
 import { createChannelApprovalNativeRuntimeAdapter } from "openclaw/plugin-sdk/approval-handler-runtime";
 //#region extensions/qqbot/src/bridge/approval/handler-runtime.ts

package/dist/{outbound-BLWish89.js → outbound-DTQUASKu.js}

@@ -1,6 +1,6 @@
 import { i as normalizeOptionalString, n as normalizeLowercaseStringOrEmpty, s as sanitizeFileName } from "./string-normalize-C46CS-F1.js";
-import { A as fileExistsAsync, C as debugWarn, E as UPLOAD_PREPARE_FALLBACK_CODE, F as readFileAsync, L as formatErrorMessage, M as getFileTypeName, N as getImageMimeType, O as checkFileSize, P as getMaxUploadSize, S as debugLog, g as sendText$1, h as sendMedia$1, j as formatFileSize, k as downloadFile, t as accountToCreds, u as initApiConfig, w as UploadDailyLimitExceededError, x as debugError } from "./sender-BrpzCcXA.js";
-import { c as getQQBotMediaDir, d as isLocalPath, m as resolveQQBotPayloadLocalFilePath, o as getQQBotDataDir, p as normalizePath, r as parseTarget$1 } from "./target-parser-C8HaD-ik.js";
+import { a as getQQBotDataDir, f as normalizePath, n as parseTarget$1, p as resolveQQBotPayloadLocalFilePath, s as getQQBotMediaDir, u as isLocalPath } from "./channel-nG7HntSR.js";
+import { A as checkFileSize, C as debugError, E as UploadDailyLimitExceededError, F as getImageMimeType, I as getMaxUploadSize, L as readFileAsync, M as fileExistsAsync, N as formatFileSize, O as UPLOAD_PREPARE_FALLBACK_CODE, P as getFileTypeName, T as debugWarn, i as accountToCreds, j as downloadFile, p as initApiConfig, v as sendMedia$1, w as debugLog, y as sendText$1, z as formatErrorMessage } from "./runtime-BFcYWYuk.js";
 import { pathExistsSync, resolveLocalPathFromRootsSync } from "openclaw/plugin-sdk/security-runtime";
 import path from "node:path";
 import { getFileExtension } from "openclaw/plugin-sdk/media-mime";
@@ -878,6 +878,14 @@ const CRON_PREFIX = "QQBOT_CRON:";
 function formatErr(e) {
 	return e instanceof Error ? e.message : String(e);
 }
+function normalizeBase64ForCompare(value) {
+	return value.replace(/=+$/u, "").replace(/-/gu, "+").replace(/_/gu, "/");
+}
+function decodeStrictBase64Utf8(value) {
+	const buffer = Buffer.from(value, "base64");
+	if (normalizeBase64ForCompare(buffer.toString("base64")) !== normalizeBase64ForCompare(value)) throw new Error("Cron payload body is not valid base64");
+	return buffer.toString("utf-8");
+}
 /** Parse model output that may start with the QQ Bot structured payload prefix. */
 function parseQQBotPayload(text) {
 	const trimmedText = text.trim();
@@ -933,7 +941,7 @@ function decodeCronPayload(message) {
 		error: "Cron payload body is empty"
 	};
 	try {
-		const jsonString = Buffer.from(base64Content, "base64").toString("utf-8");
+		const jsonString = decodeStrictBase64Utf8(base64Content);
 		const payload = JSON.parse(jsonString);
 		if (payload.type !== "cron_reminder") return {
 			isCronPayload: true,

package/dist/{request-context-BwSBFANU.js → request-context-DiWgzdpn.js}

@@ -1,5 +1,5 @@
-import { S as debugLog } from "./sender-BrpzCcXA.js";
-import { a as getHomeDir, f as isWindows, l as getQQBotMediaPath, o as getQQBotDataDir } from "./target-parser-C8HaD-ik.js";
+import { a as getQQBotDataDir, c as getQQBotMediaPath, d as isWindows, i as getHomeDir } from "./channel-nG7HntSR.js";
+import { w as debugLog } from "./runtime-BFcYWYuk.js";
 import fs from "node:fs";
 import path from "node:path";
 import { loadJsonFile } from "openclaw/plugin-sdk/json-store";

package/dist/{sender-BrpzCcXA.js → runtime-BFcYWYuk.js}

@@ -1,5 +1,6 @@
 import { c as getPlatformAdapter, i as normalizeOptionalString, s as sanitizeFileName } from "./string-normalize-C46CS-F1.js";
 import * as fs$1 from "node:fs";
+import { createPluginRuntimeStore } from "openclaw/plugin-sdk/runtime-store";
 import os from "node:os";
 import * as crypto$1 from "node:crypto";
 import crypto from "node:crypto";
@@ -1386,14 +1387,19 @@ var TokenManager = class {
 		}
 		const traceId = response.headers.get("x-tps-trace-id") ?? "";
 		this.logger?.debug?.(`[qqbot:token:${appId}] <<< ${response.status}${traceId ? ` | TraceId: ${traceId}` : ""}`);
+		let rawBody;
+		try {
+			rawBody = await response.text();
+		} catch (err) {
+			throw new Error(`Failed to read access_token response: ${formatErrorMessage(err)}`, { cause: err });
+		}
+		const logBody = rawBody.replace(/"access_token"\s*:\s*"[^"]+"/g, "\"access_token\": \"***\"");
+		this.logger?.debug?.(`[qqbot:token:${appId}] <<< Body: ${logBody}`);
 		let data;
 		try {
-			const rawBody = await response.text();
-			const logBody = rawBody.replace(/"access_token"\s*:\s*"[^"]+"/g, "\"access_token\": \"***\"");
-			this.logger?.debug?.(`[qqbot:token:${appId}] <<< Body: ${logBody}`);
 			data = JSON.parse(rawBody);
-		} catch (err) {
-			throw new Error(`Failed to parse access_token response: ${formatErrorMessage(err)}`, { cause: err });
+		} catch {
+			throw new Error("QQBot access_token response was malformed JSON");
 		}
 		if (!data.access_token) throw new Error(`Failed to get access_token: ${JSON.stringify(data)}`);
 		const expiresAt = Date.now() + (data.expires_in ?? 7200) * 1e3;
@@ -1957,4 +1963,19 @@ function supportsRichMedia(targetType) {
 	return targetType === "c2c" || targetType === "group";
 }
 //#endregion
-export { fileExistsAsync as A, StreamInputState as B, debugWarn as C, openLocalFile as D, UPLOAD_PREPARE_FALLBACK_CODE as E, readFileAsync as F, formatDuration as I, formatErrorMessage as L, getFileTypeName as M, getImageMimeType as N, checkFileSize as O, getMaxUploadSize as P, StreamContentType as R, debugLog as S, getNextMsgSeq as T, setOpenClawVersion as _, createRawInputNotifyFn as a, withTokenRetry as b, getMessageApi as c, initSender as d, onMessageSent as f, sendText as g, sendMedia as h, clearTokenCache as i, formatFileSize as j, downloadFile as k, getPluginUserAgent as l, sendInputNotify as m, acknowledgeInteraction as n, getAccessToken as o, registerAccount as p, buildDeliveryTarget as r, getGatewayUrl as s, accountToCreds as t, initApiConfig as u, startBackgroundTokenRefresh as v, UploadDailyLimitExceededError as w, debugError as x, stopBackgroundTokenRefresh as y, StreamInputMode as z };
+//#region extensions/qqbot/src/bridge/runtime.ts
+const { setRuntime: _setRuntime, getRuntime: getQQBotRuntime } = createPluginRuntimeStore({
+	pluginId: "qqbot",
+	errorMessage: "QQBot runtime not initialized"
+});
+/** Set the QQBot runtime and inject the framework version into the User-Agent. */
+function setQQBotRuntime(runtime) {
+	_setRuntime(runtime);
+	setOpenClawVersion(runtime.version);
+}
+/** Type-narrowed getter for engine/ modules that need GatewayPluginRuntime. */
+function getQQBotRuntimeForEngine() {
+	return getQQBotRuntime();
+}
+//#endregion
+export { checkFileSize as A, StreamContentType as B, debugError as C, getNextMsgSeq as D, UploadDailyLimitExceededError as E, getImageMimeType as F, StreamInputState as H, getMaxUploadSize as I, readFileAsync as L, fileExistsAsync as M, formatFileSize as N, UPLOAD_PREPARE_FALLBACK_CODE as O, getFileTypeName as P, formatDuration as R, withTokenRetry as S, debugWarn as T, StreamInputMode as V, sendInputNotify as _, acknowledgeInteraction as a, startBackgroundTokenRefresh as b, createRawInputNotifyFn as c, getMessageApi as d, getPluginUserAgent as f, registerAccount as g, onMessageSent as h, accountToCreds as i, downloadFile as j, openLocalFile as k, getAccessToken as l, initSender as m, getQQBotRuntimeForEngine as n, buildDeliveryTarget as o, initApiConfig as p, setQQBotRuntime as r, clearTokenCache as s, getQQBotRuntime as t, getGatewayUrl as u, sendMedia as v, debugLog as w, stopBackgroundTokenRefresh as x, sendText as y, formatErrorMessage as z };

package/dist/runtime-api.js

@@ -1,2 +1,2 @@
-import { r as setQQBotRuntime, t as getQQBotRuntime } from "./runtime-CZyFkpnB.js";
+import { r as setQQBotRuntime, t as getQQBotRuntime } from "./runtime-BFcYWYuk.js";
 export { getQQBotRuntime, setQQBotRuntime };

package/dist/setup-plugin-api.js

@@ -1,2 +1,2 @@
-import { t as qqbotSetupPlugin } from "./channel.setup-D_GS95Pk.js";
+import { t as qqbotSetupPlugin } from "./channel.setup-D_8Ryfln.js";
 export { qqbotSetupPlugin };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@openclaw/qqbot",
-  "version": "2026.5.12",
+  "version": "2026.5.14-beta.2",
   "private": false,
   "description": "OpenClaw QQ Bot channel plugin",
   "repository": {
@@ -12,7 +12,7 @@
     "@tencent-connect/qqbot-connector": "1.1.0",
     "mpg123-decoder": "1.0.3",
     "silk-wasm": "3.7.1",
-    "ws": "8.20.0",
+    "ws": "8.20.1",
     "zod": "4.4.3"
   },
   "devDependencies": {
@@ -21,7 +21,7 @@
     "openclaw": "workspace:*"
   },
   "peerDependencies": {
-    "openclaw": ">=2026.5.12"
+    "openclaw": ">=2026.5.14-beta.2"
   },
   "peerDependenciesMeta": {
     "openclaw": {
@@ -50,10 +50,10 @@
       "minHostVersion": ">=2026.4.10"
     },
     "compat": {
-      "pluginApi": ">=2026.5.12"
+      "pluginApi": ">=2026.5.14-beta.2"
     },
     "build": {
-      "openclawVersion": "2026.5.12"
+      "openclawVersion": "2026.5.14-beta.2"
     },
     "release": {
       "publishToClawHub": true,

package/dist/approval-cg0SVahb.js

@@ -1,94 +0,0 @@
-//#region extensions/qqbot/src/engine/approval/index.ts
-function buildExecApprovalText(request) {
-	const expiresIn = Math.max(0, Math.round((request.expiresAtMs - Date.now()) / 1e3));
-	const lines = ["🔐 命令执行审批", ""];
-	const cmd = request.request.commandPreview ?? request.request.command ?? "";
-	if (cmd) lines.push(`\`\`\`\n${cmd.slice(0, 300)}\n\`\`\``);
-	if (request.request.cwd) lines.push(`\u{1f4c1} \u76ee\u5f55: ${request.request.cwd}`);
-	if (request.request.agentId) lines.push(`\u{1f916} Agent: ${request.request.agentId}`);
-	lines.push("", `\u23f1\ufe0f \u8d85\u65f6: ${expiresIn} \u79d2`);
-	return lines.join("\n");
-}
-function buildPluginApprovalText(request) {
-	const timeoutSec = Math.round((request.request.timeoutMs ?? 12e4) / 1e3);
-	const lines = [`${request.request.severity === "critical" ? "🔴" : request.request.severity === "info" ? "🔵" : "🟡"} \u5ba1\u6279\u8bf7\u6c42`, ""];
-	lines.push(`\u{1f4cb} ${request.request.title}`);
-	if (request.request.description) lines.push(`\u{1f4dd} ${request.request.description}`);
-	if (request.request.toolName) lines.push(`\u{1f527} \u5de5\u5177: ${request.request.toolName}`);
-	if (request.request.pluginId) lines.push(`\u{1f50c} \u63d2\u4ef6: ${request.request.pluginId}`);
-	if (request.request.agentId) lines.push(`\u{1f916} Agent: ${request.request.agentId}`);
-	lines.push("", `\u23f1\ufe0f \u8d85\u65f6: ${timeoutSec} \u79d2`);
-	return lines.join("\n");
-}
-/**
-* Build the three-button inline keyboard for approval messages.
-*
-* type=1 (Callback): click triggers INTERACTION_CREATE, button_data = data field.
-* group_id "approval": clicking one button grays out the others (mutual exclusion).
-* click_limit=1: each user can only click once.
-* permission.type=2: all users can interact.
-*/
-function buildApprovalKeyboard(approvalId, allowedDecisions = [
-	"allow-once",
-	"allow-always",
-	"deny"
-]) {
-	const makeBtn = (id, label, visitedLabel, data, style) => ({
-		id,
-		render_data: {
-			label,
-			visited_label: visitedLabel,
-			style
-		},
-		action: {
-			type: 1,
-			data,
-			permission: { type: 2 },
-			click_limit: 1
-		},
-		group_id: "approval"
-	});
-	const buttons = [];
-	if (allowedDecisions.includes("allow-once")) buttons.push(makeBtn("allow", "✅ 允许一次", "已允许", `approve:${approvalId}:allow-once`, 1));
-	if (allowedDecisions.includes("allow-always")) buttons.push(makeBtn("always", "⭐ 始终允许", "已始终允许", `approve:${approvalId}:allow-always`, 1));
-	if (allowedDecisions.includes("deny")) buttons.push(makeBtn("deny", "❌ 拒绝", "已拒绝", `approve:${approvalId}:deny`, 0));
-	return { content: { rows: [{ buttons }] } };
-}
-/**
-* Extract the delivery target from a sessionKey or turnSourceTo string.
-*
-* Expected formats:
-*   agent:main:qqbot:direct:OPENID  -> { type: "c2c", id: "OPENID" }
-*   agent:main:qqbot:c2c:OPENID     -> { type: "c2c", id: "OPENID" }
-*   agent:main:qqbot:group:GROUPID  -> { type: "group", id: "GROUPID" }
-*
-* Returns null if neither field matches the expected pattern.
-*/
-function resolveApprovalTarget(sessionKey, turnSourceTo) {
-	const sk = sessionKey ?? turnSourceTo;
-	if (!sk) return null;
-	const m = sk.match(/qqbot:(c2c|direct|group):([A-F0-9]+)/i);
-	if (!m) return null;
-	return {
-		type: m[1].toLowerCase() === "group" ? "group" : "c2c",
-		id: m[2]
-	};
-}
-/**
-* Parse the button_data string from an INTERACTION_CREATE event.
-*
-* Expected format: `approve:<approvalId>:<decision>`
-* where approvalId may be prefixed with "exec:" or "plugin:".
-*
-* Returns null if the data does not match the approval button format.
-*/
-function parseApprovalButtonData(buttonData) {
-	const m = buttonData.match(/^approve:((?:(?:exec|plugin):)?[0-9a-f-]+):(allow-once|allow-always|deny)$/i);
-	if (!m) return null;
-	return {
-		approvalId: m[1],
-		decision: m[2]
-	};
-}
-//#endregion
-export { resolveApprovalTarget as a, parseApprovalButtonData as i, buildExecApprovalText as n, buildPluginApprovalText as r, buildApprovalKeyboard as t };