@openclaw/qqbot 2026.5.26 → 2026.5.27-beta.1

package/dist/api.js

@@ -1,9 +1,9 @@
-import { C as recordMessageReply, E as setOutboundAudioPort, S as getMessageReplyStats, T as OUTBOUND_ERROR_CODES, _ as sendVoice, a as sendText, b as checkMessageReplyLimit, d as buildMediaTarget, f as parseTarget, g as sendVideoMsg, h as sendPhoto, i as sendProactiveMessage, m as sendDocument, n as sendCronMessage, p as resolveOutboundMediaPath, r as sendMedia, v as resolveUserFacingMediaError, w as DEFAULT_MEDIA_SEND_ERROR, x as getMessageReplyConfig, y as MESSAGE_REPLY_LIMIT } from "./outbound-Ce2aX078.js";
+import { C as recordMessageReply, E as setOutboundAudioPort, S as getMessageReplyStats, T as OUTBOUND_ERROR_CODES, _ as sendVoice, a as sendText, b as checkMessageReplyLimit, d as buildMediaTarget, f as parseTarget, g as sendVideoMsg, h as sendPhoto, i as sendProactiveMessage, m as sendDocument, n as sendCronMessage, p as resolveOutboundMediaPath, r as sendMedia, v as resolveUserFacingMediaError, w as DEFAULT_MEDIA_SEND_ERROR, x as getMessageReplyConfig, y as MESSAGE_REPLY_LIMIT } from "./outbound-DHc9KJCp.js";
 import { c as listQQBotAccountIds, l as resolveDefaultQQBotAccountId, o as DEFAULT_ACCOUNT_ID, s as applyQQBotAccountConfig, u as resolveQQBotAccount } from "./config-schema-iX2iJzKm.js";
-import { t as qqbotPlugin } from "./channel-DtN9gbLm.js";
+import { t as qqbotPlugin } from "./channel-C_7BS_5A.js";
 import { C as debugError, l as getAccessToken, w as debugLog, z as formatErrorMessage } from "./runtime-TzkQ0YbR.js";
 import { t as qqbotSetupPlugin } from "./channel.setup-BxGpVkdx.js";
-import { r as getFrameworkCommands, t as getRequestContext } from "./request-context-D-rKRREP.js";
+import { r as getFrameworkCommands, t as getRequestContext } from "./request-context-Dge7ttkg.js";
 import { callGatewayTool } from "openclaw/plugin-sdk/agent-harness-runtime";
 //#region extensions/qqbot/src/engine/tools/channel-api.ts
 /**

package/dist/{channel-DtN9gbLm.js → channel-C_7BS_5A.js}

@@ -2,12 +2,12 @@ import { c as getPlatformAdapter, t as asOptionalObjectRecord } from "./string-n
 import { a as qqbotSetupAdapterShared, c as listQQBotAccountIds, i as qqbotMeta, m as getBridgeLogger, n as qqbotSetupWizard, o as DEFAULT_ACCOUNT_ID$1, p as ensurePlatformAdapter, r as qqbotConfigAdapter, s as applyQQBotAccountConfig, t as qqbotChannelConfigSchema, u as resolveQQBotAccount } from "./config-schema-iX2iJzKm.js";
 import { T as debugWarn, t as getQQBotRuntime, w as debugLog, z as formatErrorMessage } from "./runtime-TzkQ0YbR.js";
 import { getExecApprovalReplyMetadata } from "openclaw/plugin-sdk/approval-runtime";
-import { createMessageReceiptFromOutboundResults, defineChannelMessageAdapter } from "openclaw/plugin-sdk/channel-message";
+import { createMessageReceiptFromOutboundResults, defineChannelMessageAdapter } from "openclaw/plugin-sdk/channel-outbound";
 import { createChannelApprovalCapability } from "openclaw/plugin-sdk/approval-delivery-runtime";
 import { createLazyChannelApprovalNativeRuntimeAdapter } from "openclaw/plugin-sdk/approval-handler-adapter-runtime";
 import { resolveApprovalRequestChannelAccountId, resolveApprovalRequestSessionConversation } from "openclaw/plugin-sdk/approval-native-runtime";
 import { normalizeLowercaseStringOrEmpty, normalizeOptionalString } from "openclaw/plugin-sdk/string-coerce-runtime";
-import { resolveApprovalApprovers } from "openclaw/plugin-sdk/approval-auth-runtime";
+import { markImplicitSameChatApprovalAuthorization, resolveApprovalApprovers } from "openclaw/plugin-sdk/approval-auth-runtime";
 import { createChannelExecApprovalProfile, isChannelExecApprovalClientEnabledFromConfig, matchesApprovalRequestFilters } from "openclaw/plugin-sdk/approval-client-runtime";
 import { normalizeAccountId } from "openclaw/plugin-sdk/routing";
 import * as fs$1 from "node:fs";
@@ -28,7 +28,13 @@ function buildExecApprovalText(request) {
 	lines.push("", `\u23f1\ufe0f \u8d85\u65f6: ${expiresIn} \u79d2`);
 	return lines.join("\n");
 }
-function buildPluginApprovalText(request) {
+function appendCommandActionLines(lines, actions) {
+	const commandActions = actions.filter((action) => (action.kind === "command" || action.decision == null) && typeof action.command === "string" && action.command.trim().length > 0);
+	if (commandActions.length === 0) return;
+	lines.push("", "🗨️ 命令:");
+	for (const action of commandActions) lines.push(`- ${action.label}: ${action.command.trim()}`);
+}
+function buildPluginApprovalText(request, actions = []) {
 	const timeoutSec = Math.round((request.request.timeoutMs ?? 12e4) / 1e3);
 	const lines = [`${request.request.severity === "critical" ? "🔴" : request.request.severity === "info" ? "🔵" : "🟡"} \u5ba1\u6279\u8bf7\u6c42`, ""];
 	lines.push(`\u{1f4cb} ${request.request.title}`);
@@ -36,6 +42,7 @@ function buildPluginApprovalText(request) {
 	if (request.request.toolName) lines.push(`\u{1f527} \u5de5\u5177: ${request.request.toolName}`);
 	if (request.request.pluginId) lines.push(`\u{1f50c} \u63d2\u4ef6: ${request.request.pluginId}`);
 	if (request.request.agentId) lines.push(`\u{1f916} Agent: ${request.request.agentId}`);
+	appendCommandActionLines(lines, actions);
 	lines.push("", `\u23f1\ufe0f \u8d85\u65f6: ${timeoutSec} \u79d2`);
 	return lines.join("\n");
 }
@@ -241,7 +248,7 @@ const isQQBotExecApprovalApprover = qqbotExecApprovalProfile.isApprover;
 const isQQBotExecApprovalAuthorizedSender = qqbotExecApprovalProfile.isAuthorizedSender;
 const shouldHandleQQBotExecApprovalRequest = qqbotExecApprovalProfile.shouldHandleRequest;
 function authorizeQQBotApprovalAction(params) {
-	if (resolveQQBotExecApprovalConfig(params) === void 0) return { authorized: true };
+	if (resolveQQBotExecApprovalConfig(params) === void 0) return markImplicitSameChatApprovalAuthorization({ authorized: true });
 	return (params.approvalKind === "plugin" ? isQQBotExecApprovalApprover(params) : isQQBotExecApprovalAuthorizedSender(params)) ? { authorized: true } : {
 		authorized: false,
 		reason: "You are not authorized to approve this request."
@@ -374,7 +381,7 @@ function createQQBotApprovalCapability() {
 			},
 			load: async () => {
 				ensurePlatformAdapter();
-				return (await import("./handler-runtime-I6vCvj2m.js")).qqbotApprovalNativeRuntime;
+				return (await import("./handler-runtime-CSVOet7I.js")).qqbotApprovalNativeRuntime;
 			}
 		})
 	});
@@ -868,7 +875,7 @@ function looksLikeQQBotTarget(id) {
 //#region extensions/qqbot/src/channel.ts
 let gatewayModulePromise;
 function loadGatewayModule() {
-	gatewayModulePromise ??= import("./gateway-DuIz6XAh.js");
+	gatewayModulePromise ??= import("./gateway-BdWwKDtj.js");
 	return gatewayModulePromise;
 }
 function createQQBotSendReceipt(params) {
@@ -886,7 +893,7 @@ function createQQBotSendReceipt(params) {
 async function sendQQBotText(params) {
 	await loadGatewayModule();
 	const account = resolveQQBotAccount(params.cfg, params.accountId);
-	const { sendText } = await import("./outbound-Ce2aX078.js").then((n) => n.t);
+	const { sendText } = await import("./outbound-DHc9KJCp.js").then((n) => n.t);
 	const result = await sendText({
 		to: params.to,
 		text: params.text,
@@ -908,7 +915,7 @@ async function sendQQBotText(params) {
 async function sendQQBotMedia(params) {
 	await loadGatewayModule();
 	const account = resolveQQBotAccount(params.cfg, params.accountId);
-	const { sendMedia } = await import("./outbound-Ce2aX078.js").then((n) => n.t);
+	const { sendMedia } = await import("./outbound-DHc9KJCp.js").then((n) => n.t);
 	const result = await sendMedia({
 		to: params.to,
 		text: params.text ?? "",

package/dist/channel-plugin-api.js

@@ -1,2 +1,2 @@
-import { t as qqbotPlugin } from "./channel-DtN9gbLm.js";
+import { t as qqbotPlugin } from "./channel-C_7BS_5A.js";
 export { qqbotPlugin };

package/dist/{gateway-DuIz6XAh.js → gateway-BdWwKDtj.js}

@@ -1,10 +1,11 @@
-import { E as setOutboundAudioPort, _ as sendVoice, c as isMediaPayload, g as sendVideoMsg, h as sendPhoto, l as parseQQBotPayload, m as sendDocument, o as encodePayloadForCron, r as sendMedia, s as isCronReminderPayload, u as normalizeMediaTags, v as resolveUserFacingMediaError, w as DEFAULT_MEDIA_SEND_ERROR } from "./outbound-Ce2aX078.js";
+import { E as setOutboundAudioPort, _ as sendVoice, c as isMediaPayload, g as sendVideoMsg, h as sendPhoto, l as parseQQBotPayload, m as sendDocument, o as encodePayloadForCron, r as sendMedia, s as isCronReminderPayload, u as normalizeMediaTags, v as resolveUserFacingMediaError, w as DEFAULT_MEDIA_SEND_ERROR } from "./outbound-DHc9KJCp.js";
 import { c as getPlatformAdapter, i as normalizeOptionalString$1, n as normalizeLowercaseStringOrEmpty$1, o as readStringField, s as sanitizeFileName, t as asOptionalObjectRecord } from "./string-normalize-R_0cKO7Q.js";
 import { f as resolveAccountBase, h as setBridgeLogger, p as ensurePlatformAdapter } from "./config-schema-iX2iJzKm.js";
-import { C as parseApprovalButtonData, a as getQQBotDataDir, d as isWindows, f as normalizePath$1, h as authorizeQQBotApprovalAction, i as getHomeDir, l as getTempDir, m as toGatewayAccount, o as getQQBotDataPath, p as resolveQQBotPayloadLocalFilePath, r as checkSilkWasmAvailable, s as getQQBotMediaDir, u as isLocalPath } from "./channel-DtN9gbLm.js";
+import { C as parseApprovalButtonData, a as getQQBotDataDir, d as isWindows, f as normalizePath$1, h as authorizeQQBotApprovalAction, i as getHomeDir, l as getTempDir, m as toGatewayAccount, o as getQQBotDataPath, p as resolveQQBotPayloadLocalFilePath, r as checkSilkWasmAvailable, s as getQQBotMediaDir, u as isLocalPath } from "./channel-C_7BS_5A.js";
 import { B as StreamContentType, C as debugError, D as getNextMsgSeq, F as getImageMimeType, H as StreamInputState, I as getMaxUploadSize, N as formatFileSize, R as formatDuration, S as withTokenRetry, T as debugWarn, V as StreamInputMode, _ as sendInputNotify, a as acknowledgeInteraction, b as startBackgroundTokenRefresh, c as createRawInputNotifyFn, d as getMessageApi, f as getPluginUserAgent, g as registerAccount, h as onMessageSent, i as accountToCreds, j as downloadFile, k as openLocalFile, l as getAccessToken, m as initSender, n as getQQBotRuntimeForEngine, o as buildDeliveryTarget, p as initApiConfig, s as clearTokenCache, t as getQQBotRuntime, u as getGatewayUrl, v as sendMedia$1, w as debugLog, x as stopBackgroundTokenRefresh, y as sendText, z as formatErrorMessage } from "./runtime-TzkQ0YbR.js";
-import { a as getPluginVersion, i as getFrameworkVersion, n as runWithRequestContext, o as initCommands, s as matchSlashCommand } from "./request-context-D-rKRREP.js";
+import { a as getPluginVersion, i as getFrameworkVersion, n as runWithRequestContext, o as initCommands, s as matchSlashCommand } from "./request-context-Dge7ttkg.js";
 import { asBoolean, uniqueStrings } from "openclaw/plugin-sdk/string-coerce-runtime";
+import { isImplicitSameChatApprovalAuthorization } from "openclaw/plugin-sdk/approval-auth-runtime";
 import * as fs$1 from "node:fs";
 import fs from "node:fs";
 import * as os$1 from "node:os";
@@ -18,8 +19,10 @@ import { resolveRuntimeServiceVersion } from "openclaw/plugin-sdk/cli-runtime";
 import { getRuntimeConfig } from "openclaw/plugin-sdk/runtime-config-snapshot";
 import WebSocket from "ws";
 import { resolveAmbientNodeProxyAgent } from "openclaw/plugin-sdk/extension-shared";
+import { buildChannelInboundEventContext } from "openclaw/plugin-sdk/channel-inbound";
 import { Buffer as Buffer$1 } from "node:buffer";
 import { fileURLToPath } from "node:url";
+import { parseAccessGroupAllowFromEntry } from "openclaw/plugin-sdk/access-groups";
 import { createChannelIngressResolver, defineStableChannelIngressIdentity } from "openclaw/plugin-sdk/channel-ingress-runtime";
 import { resolveInboundMentionDecision } from "openclaw/plugin-sdk/channel-mention-gating";
 import { createChannelHistoryWindow } from "openclaw/plugin-sdk/reply-history";
@@ -3031,6 +3034,18 @@ function resolveQQBotEffectivePolicies(input) {
 //#endregion
 //#region extensions/qqbot/src/engine/gateway/interaction-handler.ts
 /**
+* INTERACTION_CREATE event handler.
+*
+* Handles three interaction branches:
+*
+* 1. **Config query**  (type=2001) — reads config, ACKs with `claw_cfg`.
+* 2. **Config update** (type=2002) — writes config, ACKs with updated snapshot.
+* 3. **Approval button** (other)   — ACKs, resolves authorized approval actions.
+*
+* Config query/update require `runtime.config`. When unavailable, those
+* branches fall through to a bare ACK (backward-compatible).
+*/
+/**
 * Build the canonical `claw_cfg` snapshot returned in interaction ACKs.
 *
 * Pure function — all resolution helpers live in engine/config/.
@@ -3138,12 +3153,13 @@ function createInteractionHandler(account, runtime, log, options) {
 			return;
 		}
 		handleApprovalButtonInteraction({
-			accountId: account.accountId,
+			account,
 			creds,
 			event,
 			getActiveCfg: options?.getActiveCfg ?? runtime.config?.current,
 			log,
-			parsed
+			parsed,
+			resolveCommandAuthorized: options?.resolveCommandAuthorized
 		});
 	};
 }
@@ -3161,11 +3177,12 @@ async function handleApprovalButtonInteraction(params) {
 		params.log?.error(`Approval button rejected: active config failed to load: ${err instanceof Error ? err.message : String(err)}`);
 		return;
 	}
-	const authorization = authorizeApprovalButtonActor({
+	const authorization = await authorizeApprovalButtonActor({
 		cfg,
-		accountId: params.accountId,
+		account: params.account,
 		event: params.event,
-		approvalKind: resolveApprovalKind(params.parsed.approvalId)
+		approvalKind: resolveApprovalKind(params.parsed.approvalId),
+		resolveCommandAuthorized: params.resolveCommandAuthorized
 	});
 	if (!authorization.authorized) {
 		await acknowledgeApprovalInteraction(params.creds, params.event, params.log, { content: authorization.reason ?? "You are not authorized to approve this request." });
@@ -3192,23 +3209,42 @@ async function acknowledgeApprovalInteraction(creds, event, log, data) {
 		log?.error(`Interaction ACK failed: ${err instanceof Error ? err.message : String(err)}`);
 	}
 }
-function authorizeApprovalButtonActor(params) {
+async function authorizeApprovalButtonActor(params) {
 	const senderIds = resolveApprovalActorSenderIds(params.event);
-	if (senderIds.length === 0) return authorizeQQBotApprovalAction({
-		cfg: params.cfg,
-		accountId: params.accountId,
-		senderId: null,
-		approvalKind: params.approvalKind
-	});
+	if (senderIds.length === 0) {
+		const result = authorizeQQBotApprovalAction({
+			cfg: params.cfg,
+			accountId: params.account.accountId,
+			senderId: null,
+			approvalKind: params.approvalKind
+		});
+		return result.authorized && isImplicitSameChatApprovalAuthorization(result) ? {
+			authorized: false,
+			reason: "You are not authorized to approve this request."
+		} : result;
+	}
 	let denial;
 	for (const senderId of senderIds) {
 		const result = authorizeQQBotApprovalAction({
 			cfg: params.cfg,
-			accountId: params.accountId,
+			accountId: params.account.accountId,
 			senderId,
 			approvalKind: params.approvalKind
 		});
-		if (result.authorized) return result;
+		if (result.authorized) {
+			if (!isImplicitSameChatApprovalAuthorization(result) || await isImplicitApprovalButtonActorAuthorized({
+				cfg: params.cfg,
+				account: params.account,
+				event: params.event,
+				senderId,
+				resolveCommandAuthorized: params.resolveCommandAuthorized
+			})) return result;
+			denial ??= {
+				authorized: false,
+				reason: "You are not authorized to approve this request."
+			};
+			continue;
+		}
 		denial ??= result;
 	}
 	return denial ?? {
@@ -3216,6 +3252,32 @@ function authorizeApprovalButtonActor(params) {
 		reason: "You are not authorized to approve this request."
 	};
 }
+async function isImplicitApprovalButtonActorAuthorized(params) {
+	const accountConfig = resolveApprovalButtonAccountConfig(params.cfg, params.account.accountId);
+	const authInput = {
+		cfg: params.cfg,
+		accountId: params.account.accountId,
+		senderId: params.senderId,
+		isGroup: Boolean(params.event.group_openid),
+		conversationId: params.event.group_openid ?? params.event.user_openid ?? params.senderId,
+		allowFrom: accountConfig.allowFrom,
+		groupAllowFrom: accountConfig.groupAllowFrom,
+		commandsAllowFrom: resolveQQBotCommandsAllowFrom(params.cfg)
+	};
+	return params.resolveCommandAuthorized ? await params.resolveCommandAuthorized(authInput) : resolveSlashCommandAuth(authInput);
+}
+function resolveApprovalButtonAccountConfig(cfg, accountId) {
+	const qqbot = readRecord(readRecord(cfg.channels)?.qqbot);
+	const accounts = readRecord(qqbot?.accounts);
+	if (accountId === "default") return {
+		...qqbot,
+		...readRecord(accounts?.default)
+	};
+	return readRecord(accounts?.[accountId]) ?? {};
+}
+function readRecord(value) {
+	return value && typeof value === "object" && !Array.isArray(value) ? value : void 0;
+}
 function resolveApprovalActorSenderIds(event) {
 	return uniqueStrings([event.group_member_openid, event.user_openid].flatMap((value) => {
 		const normalized = typeof value === "string" ? value.trim() : "";
@@ -5662,6 +5724,17 @@ function resolveResponseTimeoutMs(cfg) {
 }
 //#endregion
 //#region extensions/qqbot/src/engine/gateway/outbound-dispatch.ts
+/**
+* Outbound dispatcher — manage AI reply delivery, tool fallback, and timeouts.
+*
+* Responsibilities:
+* 1. Build ctxPayload and call runtime.dispatchReply
+* 2. Tool deliver collection + fallback timeout
+* 3. Block deliver pipeline (consumeQuoteRef → media tags → structured payload → plain text)
+* 4. Timeout / error handling
+*
+* Separated from gateway.ts for testability and to keep handleMessage thin.
+*/
 const TOOL_ONLY_TIMEOUT = 6e4;
 const MAX_TOOL_RENEWALS = 3;
 const TOOL_MEDIA_SEND_TIMEOUT = 45e3;
@@ -5689,7 +5762,7 @@ async function dispatchOutbound(inbound, deps) {
 	};
 	const sendWithRetry = (sendFn) => sendWithTokenRetry(account.appId, account.clientSecret, sendFn, log, account.accountId);
 	const sendErrorMessage = (errorText) => sendErrorToTarget(replyCtx, errorText);
-	const ctxPayload = buildCtxPayload(inbound, runtime, cfg);
+	const ctxPayload = await buildCtxPayload(inbound, runtime, cfg);
 	let hasResponse = false;
 	let hasBlockResponse = false;
 	let toolDeliverCount = 0;
@@ -5783,7 +5856,7 @@ async function dispatchOutbound(inbound, deps) {
 	const cfgWithSession = cfg;
 	const agentId = inbound.route.agentId ?? "default";
 	const storePath = runtime.channel.session.resolveStorePath(cfgWithSession.session?.store, { agentId });
-	const dispatchPromise = runtime.channel.turn.run({
+	const dispatchPromise = runtime.channel.inbound.run({
 		channel: "qqbot",
 		accountId: inbound.route.accountId,
 		raw: inbound,
@@ -5979,59 +6052,75 @@ function resolveCommandSource(inbound, runtime, cfg) {
 	if (!runtime.channel.commands?.isControlCommandMessage?.(commandBody, cfg)) return;
 	return "text";
 }
-function buildCtxPayload(inbound, runtime, cfg) {
+async function buildCtxPayload(inbound, runtime, cfg) {
 	const { event } = inbound;
 	const commandSource = resolveCommandSource(inbound, runtime, cfg);
-	return runtime.channel.reply.finalizeInboundContext({
-		Body: inbound.body,
-		BodyForAgent: inbound.agentBody,
-		RawBody: event.content,
-		CommandBody: event.content,
-		From: inbound.fromAddress,
-		To: inbound.fromAddress,
-		SessionKey: inbound.route.sessionKey,
-		AccountId: inbound.route.accountId,
-		ChatType: inbound.isGroupChat ? "group" : "direct",
-		GroupSystemPrompt: inbound.groupSystemPrompt,
-		SenderId: event.senderId,
-		SenderName: event.senderName,
-		Provider: "qqbot",
-		Surface: "qqbot",
-		MessageSid: event.messageId,
-		Timestamp: new Date(event.timestamp).getTime(),
-		OriginatingChannel: "qqbot",
-		OriginatingTo: inbound.fromAddress,
-		QQChannelId: event.channelId,
-		QQGuildId: event.guildId,
-		QQGroupOpenid: event.groupOpenid,
-		QQVoiceAsrReferAvailable: inbound.hasAsrReferFallback,
-		QQVoiceTranscriptSources: inbound.voiceTranscriptSources,
-		QQVoiceAttachmentPaths: inbound.uniqueVoicePaths,
-		QQVoiceAttachmentUrls: inbound.uniqueVoiceUrls,
-		QQVoiceAsrReferTexts: inbound.uniqueVoiceAsrReferTexts,
-		QQVoiceInputStrategy: "prefer_audio_stt_then_asr_fallback",
-		CommandAuthorized: inbound.commandAuthorized,
-		...commandSource ? { CommandSource: commandSource } : {},
-		...inbound.voiceMediaTypes.length > 0 ? {
-			MediaTypes: inbound.voiceMediaTypes,
-			MediaType: inbound.voiceMediaTypes[0]
-		} : {},
-		...inbound.localMediaPaths.length > 0 ? {
-			MediaPaths: inbound.localMediaPaths,
-			MediaPath: inbound.localMediaPaths[0],
-			MediaTypes: inbound.localMediaTypes,
-			MediaType: inbound.localMediaTypes[0]
-		} : {},
-		...inbound.remoteMediaUrls.length > 0 ? {
-			MediaUrls: inbound.remoteMediaUrls,
-			MediaUrl: inbound.remoteMediaUrls[0]
-		} : {},
-		...inbound.replyTo ? {
-			ReplyToId: inbound.replyTo.id,
-			ReplyToBody: inbound.replyTo.body,
-			ReplyToSender: inbound.replyTo.sender,
-			ReplyToIsQuote: inbound.replyTo.isQuote
-		} : {}
+	const hasImageMedia = inbound.localMediaPaths.length > 0 || inbound.remoteMediaUrls.length > 0;
+	return buildChannelInboundEventContext({
+		finalize: runtime.channel.reply.finalizeInboundContext,
+		channel: "qqbot",
+		accountId: inbound.route.accountId,
+		messageId: event.messageId,
+		timestamp: new Date(event.timestamp).getTime(),
+		from: inbound.fromAddress,
+		sender: {
+			id: event.senderId,
+			name: event.senderName
+		},
+		conversation: {
+			kind: inbound.isGroupChat ? "group" : "direct",
+			id: inbound.peerId
+		},
+		route: {
+			agentId: inbound.route.agentId ?? "main",
+			routeSessionKey: inbound.route.sessionKey,
+			accountId: inbound.route.accountId
+		},
+		reply: { to: inbound.fromAddress },
+		message: {
+			body: inbound.body,
+			bodyForAgent: inbound.agentBody,
+			rawBody: event.content,
+			commandBody: event.content
+		},
+		access: { commands: { authorized: inbound.commandAuthorized } },
+		command: commandSource ? {
+			kind: "text-slash",
+			body: event.content,
+			authorized: inbound.commandAuthorized
+		} : void 0,
+		media: hasImageMedia ? void 0 : inbound.voiceMediaTypes.map((contentType) => ({ contentType })),
+		supplemental: {
+			quote: inbound.replyTo ? {
+				id: inbound.replyTo.id,
+				body: inbound.replyTo.body,
+				sender: inbound.replyTo.sender,
+				isQuote: inbound.replyTo.isQuote
+			} : void 0,
+			groupSystemPrompt: inbound.groupSystemPrompt
+		},
+		extra: {
+			QQChannelId: event.channelId,
+			QQGuildId: event.guildId,
+			QQGroupOpenid: event.groupOpenid,
+			QQVoiceAsrReferAvailable: inbound.hasAsrReferFallback,
+			QQVoiceTranscriptSources: inbound.voiceTranscriptSources,
+			QQVoiceAttachmentPaths: inbound.uniqueVoicePaths,
+			QQVoiceAttachmentUrls: inbound.uniqueVoiceUrls,
+			QQVoiceAsrReferTexts: inbound.uniqueVoiceAsrReferTexts,
+			QQVoiceInputStrategy: "prefer_audio_stt_then_asr_fallback",
+			...commandSource ? { CommandSource: commandSource } : {},
+			...inbound.localMediaPaths.length > 0 ? {
+				MediaPaths: inbound.localMediaPaths,
+				MediaPath: inbound.localMediaPaths[0],
+				MediaTypes: inbound.localMediaTypes,
+				MediaType: inbound.localMediaTypes[0]
+			} : {},
+			...inbound.remoteMediaUrls.length > 0 ? {
+				MediaUrls: inbound.remoteMediaUrls,
+				MediaUrl: inbound.remoteMediaUrls[0]
+			} : {}
+		}
 	});
 }
 //#endregion
@@ -6225,7 +6314,10 @@ async function startGateway$1(ctx) {
 			});
 		}
 	};
-	const handleInteraction = createInteractionHandler(account, ctx.runtime, log, { getActiveCfg: () => activeCfgProvider.getActiveCfg() });
+	const handleInteraction = createInteractionHandler(account, ctx.runtime, log, {
+		getActiveCfg: () => activeCfgProvider.getActiveCfg(),
+		resolveCommandAuthorized: (params) => adapters.access.resolveSlashCommandAuthorization(params)
+	});
 	await new GatewayConnection({
 		account,
 		abortSignal: ctx.abortSignal,
@@ -6443,7 +6535,7 @@ function createSdkAccessAdapter() {
 	};
 }
 async function resolveQQBotSlashCommandAuthorized(params) {
-	const explicitAllowFrom = normalizeQQBotAllowFrom(params.commandsAllowFrom ?? (params.isGroup && params.groupAllowFrom && params.groupAllowFrom.length > 0 ? params.groupAllowFrom : params.allowFrom)).filter((entry) => entry !== "*");
+	const explicitAllowFrom = normalizeQQBotCommandAllowFrom(params.commandsAllowFrom ?? (params.isGroup && params.groupAllowFrom && params.groupAllowFrom.length > 0 ? params.groupAllowFrom : params.allowFrom));
 	if (explicitAllowFrom.length === 0) return false;
 	return (await createChannelIngressResolver({
 		channelId: "qqbot",
@@ -6467,6 +6559,20 @@ async function resolveQQBotSlashCommandAuthorized(params) {
 		command: { modeWhenAccessGroupsOff: "configured" }
 	})).commandAccess.authorized;
 }
+function normalizeQQBotCommandAllowFrom(rawAllowFrom) {
+	const entries = [];
+	for (const rawEntry of rawAllowFrom ?? []) {
+		const entry = String(rawEntry).trim();
+		if (!entry) continue;
+		if (parseAccessGroupAllowFromEntry(entry)) {
+			entries.push(entry);
+			continue;
+		}
+		const normalized = normalizeQQBotSenderId(entry);
+		if (normalized && normalized !== "*") entries.push(normalized);
+	}
+	return entries;
+}
 //#endregion
 //#region extensions/qqbot/src/bridge/gateway.ts
 /**

package/dist/{handler-runtime-I6vCvj2m.js → handler-runtime-CSVOet7I.js}

@@ -1,11 +1,14 @@
 import { m as getBridgeLogger, p as ensurePlatformAdapter, u as resolveQQBotAccount } from "./config-schema-iX2iJzKm.js";
-import { S as buildPluginApprovalText, _ as matchesQQBotApprovalAccount, b as buildApprovalKeyboard, g as isQQBotExecApprovalClientEnabled, v as resolveQQBotExecApprovalConfig, w as resolveApprovalTarget, x as buildExecApprovalText, y as shouldHandleQQBotExecApprovalRequest } from "./channel-DtN9gbLm.js";
+import { S as buildPluginApprovalText, _ as matchesQQBotApprovalAccount, b as buildApprovalKeyboard, g as isQQBotExecApprovalClientEnabled, v as resolveQQBotExecApprovalConfig, w as resolveApprovalTarget, x as buildExecApprovalText, y as shouldHandleQQBotExecApprovalRequest } from "./channel-C_7BS_5A.js";
 import { d as getMessageApi, i as accountToCreds } from "./runtime-TzkQ0YbR.js";
 import { resolveApprovalRequestSessionConversation } from "openclaw/plugin-sdk/approval-native-runtime";
 import { createChannelApprovalNativeRuntimeAdapter } from "openclaw/plugin-sdk/approval-handler-runtime";
 //#region extensions/qqbot/src/bridge/approval/handler-runtime.ts
 function isExecRequest(request) {
-	return "expiresAtMs" in request;
+	return "command" in request.request;
+}
+function listDecisionActions(actions) {
+	return actions.flatMap((action) => action.kind === "decision" && action.decision ? [action.decision] : []);
 }
 function resolveQQTarget(request) {
 	const sessionConversation = resolveApprovalRequestSessionConversation({
@@ -71,8 +74,9 @@ const qqbotApprovalNativeRuntime = createChannelApprovalNativeRuntimeAdapter({
 	presentation: {
 		buildPendingPayload: ({ request, view }) => {
 			const req = request;
-			const text = isExecRequest(req) ? buildExecApprovalText(req) : buildPluginApprovalText(req);
-			const keyboard = buildApprovalKeyboard(req.id, view.actions.map((action) => action.decision));
+			const text = isExecRequest(req) ? buildExecApprovalText(req) : buildPluginApprovalText(req, view.actions);
+			const decisionActions = listDecisionActions(view.actions);
+			const keyboard = decisionActions.length > 0 ? buildApprovalKeyboard(req.id, decisionActions) : void 0;
 			getBridgeLogger().debug?.(`[qqbot:approval-runtime] buildPendingPayload requestId=${req.id} kind=${isExecRequest(req) ? "exec" : "plugin"}`);
 			return {
 				text,

package/dist/{outbound-Ce2aX078.js → outbound-DHc9KJCp.js}

@@ -1,5 +1,5 @@
 import { i as normalizeOptionalString, n as normalizeLowercaseStringOrEmpty, s as sanitizeFileName } from "./string-normalize-R_0cKO7Q.js";
-import { a as getQQBotDataDir, f as normalizePath, n as parseTarget$1, p as resolveQQBotPayloadLocalFilePath, s as getQQBotMediaDir, u as isLocalPath } from "./channel-DtN9gbLm.js";
+import { a as getQQBotDataDir, f as normalizePath, n as parseTarget$1, p as resolveQQBotPayloadLocalFilePath, s as getQQBotMediaDir, u as isLocalPath } from "./channel-C_7BS_5A.js";
 import { A as checkFileSize, C as debugError, E as UploadDailyLimitExceededError, F as getImageMimeType, I as getMaxUploadSize, L as readFileAsync, M as fileExistsAsync, N as formatFileSize, O as UPLOAD_PREPARE_FALLBACK_CODE, P as getFileTypeName, T as debugWarn, i as accountToCreds, j as downloadFile, p as initApiConfig, v as sendMedia$1, w as debugLog, y as sendText$1, z as formatErrorMessage } from "./runtime-TzkQ0YbR.js";
 import { pathExistsSync, resolveLocalPathFromRootsSync } from "openclaw/plugin-sdk/security-runtime";
 import path from "node:path";

package/dist/{request-context-D-rKRREP.js → request-context-Dge7ttkg.js}

@@ -1,4 +1,4 @@
-import { a as getQQBotDataDir, c as getQQBotMediaPath, d as isWindows, i as getHomeDir } from "./channel-DtN9gbLm.js";
+import { a as getQQBotDataDir, c as getQQBotMediaPath, d as isWindows, i as getHomeDir } from "./channel-C_7BS_5A.js";
 import { w as debugLog } from "./runtime-TzkQ0YbR.js";
 import { uniqueStrings } from "openclaw/plugin-sdk/string-coerce-runtime";
 import fs from "node:fs";

package/npm-shrinkwrap.json

@@ -1,12 +1,12 @@
 {
   "name": "@openclaw/qqbot",
-  "version": "2026.5.26",
+  "version": "2026.5.27-beta.1",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@openclaw/qqbot",
-      "version": "2026.5.26",
+      "version": "2026.5.27-beta.1",
       "dependencies": {
         "@tencent-connect/qqbot-connector": "1.1.0",
         "mpg123-decoder": "1.0.3",
@@ -15,7 +15,7 @@
         "zod": "4.4.3"
       },
       "peerDependencies": {
-        "openclaw": ">=2026.5.26"
+        "openclaw": ">=2026.5.27-beta.1"
       },
       "peerDependenciesMeta": {
         "openclaw": {

package/openclaw.plugin.json

@@ -1,5 +1,7 @@
 {
   "id": "qqbot",
+  "name": "QQ Bot",
+  "description": "OpenClaw QQ Bot channel plugin for group and direct-message workflows.",
   "activation": {
     "onStartup": false
   },

package/package.json

@@ -1,8 +1,8 @@
 {
   "name": "@openclaw/qqbot",
-  "version": "2026.5.26",
+  "version": "2026.5.27-beta.1",
   "private": false,
-  "description": "OpenClaw QQ Bot channel plugin",
+  "description": "OpenClaw QQ Bot channel plugin for group and direct-message workflows.",
   "repository": {
     "type": "git",
     "url": "https://github.com/openclaw/openclaw"
@@ -16,7 +16,7 @@
     "zod": "4.4.3"
   },
   "peerDependencies": {
-    "openclaw": ">=2026.5.26"
+    "openclaw": ">=2026.5.27-beta.1"
   },
   "peerDependenciesMeta": {
     "openclaw": {
@@ -45,10 +45,10 @@
       "minHostVersion": ">=2026.4.10"
     },
     "compat": {
-      "pluginApi": ">=2026.5.26"
+      "pluginApi": ">=2026.5.27-beta.1"
     },
     "build": {
-      "openclawVersion": "2026.5.26"
+      "openclawVersion": "2026.5.27-beta.1"
     },
     "release": {
       "publishToClawHub": true,