@openclaw/qqbot 2026.5.3 → 2026.5.4-beta.2

package/dist/api.js

@@ -1,9 +1,9 @@
 import { C as recordMessageReply, E as setOutboundAudioPort, S as getMessageReplyStats, T as OUTBOUND_ERROR_CODES, _ as sendVoice, a as sendText, b as checkMessageReplyLimit, d as buildMediaTarget, f as parseTarget, g as sendVideoMsg, h as sendPhoto, i as sendProactiveMessage, m as sendDocument, n as sendCronMessage, p as resolveOutboundMediaPath, r as sendMedia, v as resolveUserFacingMediaError, w as DEFAULT_MEDIA_SEND_ERROR, x as getMessageReplyConfig, y as MESSAGE_REPLY_LIMIT } from "./outbound-BJfhwrPg.js";
 import { a as resolveQQBotAccount, i as resolveDefaultQQBotAccountId, n as applyQQBotAccountConfig, r as listQQBotAccountIds, t as DEFAULT_ACCOUNT_ID } from "./config-D6545NkC.js";
-import { t as qqbotPlugin } from "./channel-N6Y_Rcjp.js";
+import { t as qqbotPlugin } from "./channel-CC2YO9fj.js";
 import { C as debugLog, L as formatErrorMessage, S as debugError, o as getAccessToken } from "./sender-p-B14eLG.js";
 import { t as qqbotSetupPlugin } from "./channel.setup-ByCRAe5H.js";
-import { r as getFrameworkCommands, t as getRequestContext } from "./request-context-DXtpwWui.js";
+import { r as getFrameworkCommands, t as getRequestContext } from "./request-context-Cjwx7OwW.js";
 import { callGatewayTool } from "openclaw/plugin-sdk/agent-harness-runtime";
 //#region extensions/qqbot/src/engine/tools/channel-api.ts
 /**
@@ -544,7 +544,7 @@ function buildFrameworkSlashContext({ ctx, account, from, commandName }) {
 		accountId: account.accountId,
 		appId: account.appId,
 		accountConfig: account.config,
-		commandAuthorized: true,
+		commandAuthorized: ctx.isAuthorizedSender,
 		queueSnapshot: { ...DEFAULT_QUEUE_SNAPSHOT }
 	};
 }
@@ -612,13 +612,25 @@ async function dispatchFrameworkSlashResult({ result, account, from, logger }) {
 }
 //#endregion
 //#region extensions/qqbot/src/bridge/commands/framework-registration.ts
+const PRIVATE_CHAT_ONLY_TEXT = "💡 请在私聊中使用此指令";
+function isExplicitQQBotC2cFrom(from) {
+	const raw = (from ?? "").trim();
+	const stripped = raw.replace(/^qqbot:/iu, "");
+	const colonIdx = stripped.indexOf(":");
+	if (colonIdx === -1) return false;
+	const kind = stripped.slice(0, colonIdx).toLowerCase();
+	const targetId = stripped.slice(colonIdx + 1).trim();
+	return /^qqbot:/iu.test(raw) && kind === "c2c" && targetId.length > 0;
+}
 function registerQQBotFrameworkCommands(api) {
 	for (const cmd of getFrameworkCommands()) api.registerCommand({
 		name: cmd.name,
 		description: cmd.description,
+		channels: ["qqbot"],
 		requireAuth: true,
 		acceptsArgs: true,
 		handler: async (ctx) => {
+			if (cmd.c2cOnly && !isExplicitQQBotC2cFrom(ctx.from)) return { text: PRIVATE_CHAT_ONLY_TEXT };
 			const from = parseQQBotFrom(ctx.from);
 			const account = resolveQQBotAccount(ctx.config, ctx.accountId ?? void 0);
 			const slashCtx = buildFrameworkSlashContext({

package/dist/{channel-N6Y_Rcjp.js → channel-CC2YO9fj.js}

@@ -344,7 +344,7 @@ function clearAccountCredentials(cfg, accountId) {
 //#region extensions/qqbot/src/channel.ts
 let _gatewayModulePromise;
 function loadGatewayModule() {
-	_gatewayModulePromise ??= import("./gateway-CmSUJKSt.js");
+	_gatewayModulePromise ??= import("./gateway-Cs3-_on9.js");
 	return _gatewayModulePromise;
 }
 const EXEC_APPROVAL_COMMAND_RE = /\/approve(?:@[^\s]+)?\s+[A-Za-z0-9][A-Za-z0-9._:-]*\s+(?:allow-once|allow-always|always|deny)\b/i;

package/dist/channel-plugin-api.js

@@ -1,2 +1,2 @@
-import { t as qqbotPlugin } from "./channel-N6Y_Rcjp.js";
+import { t as qqbotPlugin } from "./channel-CC2YO9fj.js";
 export { qqbotPlugin };

package/dist/{gateway-CmSUJKSt.js → gateway-Cs3-_on9.js}

@@ -6,7 +6,7 @@ import { t as toGatewayAccount } from "./narrowing-BoieBTIU.js";
 import { B as StreamInputState, C as debugLog, E as getNextMsgSeq, I as formatDuration, L as formatErrorMessage, N as getImageMimeType, P as getMaxUploadSize, R as StreamContentType, S as debugError, a as createRawInputNotifyFn, b as withTokenRetry, c as getMessageApi, d as initSender, f as onMessageSent, g as sendText, h as sendMedia$1, i as clearTokenCache, j as formatFileSize, k as downloadFile, l as getPluginUserAgent, m as sendInputNotify, n as acknowledgeInteraction, o as getAccessToken, p as registerAccount, r as buildDeliveryTarget, s as getGatewayUrl, t as accountToCreds, u as initApiConfig, v as startBackgroundTokenRefresh, w as debugWarn, x as openLocalFile, y as stopBackgroundTokenRefresh, z as StreamInputMode } from "./sender-p-B14eLG.js";
 import { n as getQQBotRuntimeForEngine, t as getQQBotRuntime } from "./runtime-BJAS3eXW.js";
 import { a as getHomeDir, c as getQQBotMediaDir, d as isLocalPath, f as isWindows, i as checkSilkWasmAvailable, m as resolveQQBotPayloadLocalFilePath, o as getQQBotDataDir, p as normalizePath$1, s as getQQBotDataPath, u as getTempDir } from "./target-parser-Y0prnrXD.js";
-import { a as getPluginVersion, i as getFrameworkVersion, n as runWithRequestContext, o as initCommands, s as matchSlashCommand } from "./request-context-DXtpwWui.js";
+import { a as getPluginVersion, i as getFrameworkVersion, n as runWithRequestContext, o as initCommands, s as matchSlashCommand } from "./request-context-Cjwx7OwW.js";
 import * as fs$1 from "node:fs";
 import fs from "node:fs";
 import * as os$1 from "node:os";
@@ -642,22 +642,47 @@ function buildResultBase(ctx) {
 * A wide-open DM policy means "anyone can chat", not "anyone can run
 * admin commands".
 */
+function isSlashCommandAuthEntry(value) {
+	return typeof value === "string" || typeof value === "number";
+}
+function readSlashCommandAuthList(value) {
+	if (!Array.isArray(value)) return;
+	return value.filter(isSlashCommandAuthEntry);
+}
+/**
+* Resolve the command-specific QQBot allowlist from the root OpenClaw config.
+*
+* `commands.allowFrom.qqbot` takes precedence over the global
+* `commands.allowFrom["*"]`, matching the framework command authorization
+* contract used by registered plugin commands.
+*/
+function resolveQQBotCommandsAllowFrom(cfg) {
+	if (!cfg || typeof cfg !== "object") return;
+	const commands = cfg.commands;
+	if (!commands || typeof commands !== "object") return;
+	const allowFrom = commands.allowFrom;
+	if (!allowFrom || typeof allowFrom !== "object" || Array.isArray(allowFrom)) return;
+	const byProvider = allowFrom;
+	return readSlashCommandAuthList(byProvider.qqbot) ?? readSlashCommandAuthList(byProvider["*"]);
+}
 /**
 * Determine whether `senderId` is authorized to execute `requireAuth`
 * slash commands for the given account configuration.
 *
 * Authorization rules:
+* - `commands.allowFrom.qqbot` / `commands.allowFrom["*"]` configured →
+*   use that command-specific list instead of channel allowFrom
 * - `allowFrom` not configured / empty / only `["*"]` → **false**
 *   (wildcard means "open to everyone", not explicit authorization)
 * - `allowFrom` contains at least one concrete entry AND sender
-*   matches → **true**
+*   matches a concrete entry → **true**
 * - Group messages use `groupAllowFrom` when present, falling back
 *   to `allowFrom`.
 */
 function resolveSlashCommandAuth(params) {
-	const normalized = normalizeQQBotAllowFrom(params.isGroup && params.groupAllowFrom && params.groupAllowFrom.length > 0 ? params.groupAllowFrom : params.allowFrom);
-	if (!normalized.some((entry) => entry !== "*")) return false;
-	return createQQBotSenderMatcher(params.senderId)(normalized);
+	const explicitEntries = normalizeQQBotAllowFrom(params.commandsAllowFrom ?? (params.isGroup && params.groupAllowFrom && params.groupAllowFrom.length > 0 ? params.groupAllowFrom : params.allowFrom)).filter((entry) => entry !== "*");
+	if (explicitEntries.length === 0) return false;
+	return createQQBotSenderMatcher(params.senderId)(explicitEntries);
 }
 //#endregion
 //#region extensions/qqbot/src/engine/commands/slash-command-handler.ts
@@ -697,7 +722,8 @@ async function trySlashCommand(msg, ctx) {
 			senderId: msg.senderId,
 			isGroup: msg.type === "group" || msg.type === "guild",
 			allowFrom: account.config?.allowFrom,
-			groupAllowFrom: account.config?.groupAllowFrom
+			groupAllowFrom: account.config?.groupAllowFrom,
+			commandsAllowFrom: resolveQQBotCommandsAllowFrom(ctx.cfg)
 		}),
 		queueSnapshot: ctx.getQueueSnapshot(peerId)
 	};
@@ -1830,6 +1856,7 @@ var GatewayConnection = class {
 			this.currentWs = ws;
 			const slashCtx = {
 				account,
+				cfg: this.ctx.cfg,
 				log,
 				getMessagePeerId: (msg) => this.msgQueue.getMessagePeerId(msg),
 				getQueueSnapshot: (peerId) => this.msgQueue.getSnapshot(peerId)

package/dist/{request-context-DXtpwWui.js → request-context-Cjwx7OwW.js}

@@ -673,6 +673,7 @@ function registerStreamingCommands(registry) {
 	registry.register({
 		name: "bot-streaming",
 		description: "一键开关流式消息",
+		requireAuth: true,
 		c2cOnly: true,
 		usage: [
 			`/bot-streaming on     开启流式消息`,
@@ -781,8 +782,8 @@ function lc(s) {
 * Slash command registry.
 *
 * Maintains two maps:
-* - `commands` — pre-dispatch commands (requireAuth: false)
-* - `frameworkCommands` — auth-gated commands (requireAuth: true)
+* - `commands` — QQBot message-flow commands
+* - `frameworkCommands` — auth-gated commands that are safe on the framework surface
 */
 var SlashCommandRegistry = class {
 	constructor() {
@@ -795,12 +796,13 @@ var SlashCommandRegistry = class {
 		this.commands.set(key, cmd);
 		if (cmd.requireAuth) this.frameworkCommands.set(key, cmd);
 	}
-	/** Return all auth-gated commands for framework registration. */
+	/** Return all commands that may be registered on the framework surface. */
 	getFrameworkCommands() {
 		return Array.from(this.frameworkCommands.values()).map((cmd) => ({
 			name: cmd.name,
 			description: cmd.description,
 			usage: cmd.usage,
+			c2cOnly: cmd.c2cOnly,
 			handler: cmd.handler
 		}));
 	}
@@ -854,8 +856,8 @@ function initCommands(port) {
 	initSlashCommandDeps(port);
 }
 /**
-* Return all commands that require authorization, for registration with the
-* framework via api.registerCommand() in registerFull().
+* Return commands that may be registered with the framework via
+* api.registerCommand() in registerFull().
 */
 function getFrameworkCommands() {
 	return registry.getFrameworkCommands();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@openclaw/qqbot",
-  "version": "2026.5.3",
+  "version": "2026.5.4-beta.2",
   "private": false,
   "description": "OpenClaw QQ Bot channel plugin",
   "repository": {
@@ -13,7 +13,7 @@
     "mpg123-decoder": "^1.0.3",
     "silk-wasm": "^3.7.1",
     "ws": "^8.20.0",
-    "zod": "^4.4.1"
+    "zod": "^4.4.3"
   },
   "devDependencies": {
     "@openclaw/plugin-sdk": "workspace:*",
@@ -21,7 +21,7 @@
     "openclaw": "workspace:*"
   },
   "peerDependencies": {
-    "openclaw": ">=2026.5.3"
+    "openclaw": ">=2026.5.4-beta.2"
   },
   "peerDependenciesMeta": {
     "openclaw": {
@@ -50,10 +50,10 @@
       "minHostVersion": ">=2026.4.10"
     },
     "compat": {
-      "pluginApi": ">=2026.5.3"
+      "pluginApi": ">=2026.5.4-beta.2"
     },
     "build": {
-      "openclawVersion": "2026.5.3"
+      "openclawVersion": "2026.5.4-beta.2"
     },
     "release": {
       "publishToClawHub": true,