@openclaw/qqbot 2026.5.31-beta.4 → 2026.6.1-beta.2

package/dist/api.js

@@ -1,9 +1,9 @@
-import { C as getMessageReplyStats, D as setOutboundAudioPort, E as OUTBOUND_ERROR_CODES, S as getMessageReplyConfig, T as DEFAULT_MEDIA_SEND_ERROR, _ as sendVideoMsg, a as sendText, b as MESSAGE_REPLY_LIMIT, f as buildMediaTarget, g as sendPhoto, h as sendDocument, i as sendProactiveMessage, m as resolveOutboundMediaPath, n as sendCronMessage, p as parseTarget, r as sendMedia, v as sendVoice, w as recordMessageReply, x as checkMessageReplyLimit, y as resolveUserFacingMediaError } from "./outbound-BNWSEG_7.js";
+import { C as getMessageReplyStats, D as setOutboundAudioPort, E as OUTBOUND_ERROR_CODES, S as getMessageReplyConfig, T as DEFAULT_MEDIA_SEND_ERROR, _ as sendVideoMsg, a as sendText, b as MESSAGE_REPLY_LIMIT, f as buildMediaTarget, g as sendPhoto, h as sendDocument, i as sendProactiveMessage, m as resolveOutboundMediaPath, n as sendCronMessage, p as parseTarget, r as sendMedia, v as sendVoice, w as recordMessageReply, x as checkMessageReplyLimit, y as resolveUserFacingMediaError } from "./outbound-CVVQeQxX.js";
 import { c as listQQBotAccountIds, l as resolveDefaultQQBotAccountId, o as DEFAULT_ACCOUNT_ID, s as applyQQBotAccountConfig, u as resolveQQBotAccount } from "./config-schema-BI7AYP6Q.js";
-import { t as qqbotPlugin } from "./channel-CELcXJfZ.js";
-import { C as debugError, l as getAccessToken, w as debugLog, z as formatErrorMessage } from "./runtime-CwW75z2d.js";
+import { t as qqbotPlugin } from "./channel-BYYYPzrA.js";
+import { C as debugError, l as getAccessToken, w as debugLog, z as formatErrorMessage } from "./runtime-BSgtMZ6G.js";
 import { t as qqbotSetupPlugin } from "./channel.setup-xBlmSU4X.js";
-import { r as getFrameworkCommands, t as getRequestContext } from "./request-context-CDEdBceh.js";
+import { r as getFrameworkCommands, t as getRequestContext } from "./request-context-BL0hymyD.js";
 import { resolveExpiresAtMsFromDurationMs } from "openclaw/plugin-sdk/number-runtime";
 import { callGatewayTool } from "openclaw/plugin-sdk/agent-harness-runtime";
 //#region extensions/qqbot/src/engine/tools/channel-api.ts

package/dist/{channel-CELcXJfZ.js → channel-BYYYPzrA.js}

@@ -1,6 +1,6 @@
 import { c as getPlatformAdapter, t as asOptionalObjectRecord } from "./string-normalize-R_0cKO7Q.js";
 import { a as qqbotSetupAdapterShared, c as listQQBotAccountIds, i as qqbotMeta, m as getBridgeLogger, n as qqbotSetupWizard, o as DEFAULT_ACCOUNT_ID$1, p as ensurePlatformAdapter, r as qqbotConfigAdapter, s as applyQQBotAccountConfig, t as qqbotChannelConfigSchema, u as resolveQQBotAccount } from "./config-schema-BI7AYP6Q.js";
-import { T as debugWarn, t as getQQBotRuntime, w as debugLog, z as formatErrorMessage } from "./runtime-CwW75z2d.js";
+import { T as debugWarn, t as getQQBotRuntime, w as debugLog, z as formatErrorMessage } from "./runtime-BSgtMZ6G.js";
 import { getExecApprovalReplyMetadata } from "openclaw/plugin-sdk/approval-runtime";
 import { createMessageReceiptFromOutboundResults, defineChannelMessageAdapter } from "openclaw/plugin-sdk/channel-outbound";
 import { createChannelApprovalCapability } from "openclaw/plugin-sdk/approval-delivery-runtime";
@@ -13,10 +13,11 @@ import { normalizeAccountId } from "openclaw/plugin-sdk/routing";
 import * as fs$1 from "node:fs";
 import fs from "node:fs";
 import * as os$1 from "node:os";
-import { replaceFileAtomicSync } from "openclaw/plugin-sdk/security-runtime";
+import crypto from "node:crypto";
 import * as path$1 from "node:path";
 import path from "node:path";
 import { loadJsonFile } from "openclaw/plugin-sdk/json-store";
+import { resolveStateDir } from "openclaw/plugin-sdk/state-paths";
 //#region extensions/qqbot/src/engine/approval/index.ts
 function buildExecApprovalText(request) {
 	const expiresIn = Math.max(0, Math.round((request.expiresAtMs - Date.now()) / 1e3));
@@ -374,7 +375,7 @@ function createQQBotApprovalCapability() {
 			},
 			load: async () => {
 				ensurePlatformAdapter();
-				return (await import("./handler-runtime-Blcp6PTS.js")).qqbotApprovalNativeRuntime;
+				return (await import("./handler-runtime-DEXmNJcJ.js")).qqbotApprovalNativeRuntime;
 			}
 		})
 	});
@@ -410,6 +411,41 @@ async function writeOpenClawConfigThroughRuntime(runtime, cfg) {
 	});
 }
 //#endregion
+//#region extensions/qqbot/src/engine/utils/data-paths.ts
+/**
+* Centralised filename helpers for persisted QQBot state.
+*
+* Every persistence module routes file paths through these helpers so the
+* naming convention stays in sync and legacy migrations are handled
+* consistently.
+*
+* Key design decisions:
+* - Credential backup is keyed only by `accountId` because recovery runs
+*   exactly when the appId is missing from config.
+*/
+/**
+* Normalise an identifier so it is safe to embed in a filename.
+* Keeps alphanumerics, dot, underscore, dash; everything else becomes `_`.
+*/
+function safeName$1(id) {
+	return id.replace(/[^a-zA-Z0-9._-]/g, "_");
+}
+function getCredentialBackupRoot() {
+	return path.join(resolveStateDir(process.env), "qqbot", "data");
+}
+/**
+* Per-accountId credential backup file. Not keyed by appId because the
+* whole point of this file is to recover credentials when appId is
+* missing from the live config.
+*/
+function getCredentialBackupFile(accountId) {
+	return path.join(getCredentialBackupRoot(), `credential-backup-${safeName$1(accountId)}.json`);
+}
+/** Legacy single-file credential backup (pre-multi-account-isolation). */
+function getLegacyCredentialBackupFile() {
+	return path.join(getCredentialBackupRoot(), "credential-backup.json");
+}
+//#endregion
 //#region extensions/qqbot/src/engine/utils/platform.ts
 /**
 * Cross-platform path and detection helpers for core/ modules.
@@ -427,9 +463,8 @@ async function writeOpenClawConfigThroughRuntime(runtime, cfg) {
 * 3. PlatformAdapter.getTempDir() as a last resort
 *
 * This is the *operating-system* home and intentionally ignores
-* `OPENCLAW_HOME`. Persistent QQ Bot data (sessions, known users, refs) is
-* keyed on this value to keep upgrades from hiding existing state when an
-* operator later sets `OPENCLAW_HOME`.
+* `OPENCLAW_HOME`. QQ Bot still checks this tree for legacy state imports and
+* media-path remaps from older releases.
 */
 function getHomeDir() {
 	try {
@@ -467,11 +502,10 @@ function resolveOpenClawHome() {
 	return raw;
 }
 /**
-* Return a path under `~/.openclaw/qqbot` without creating it.
+* Return a legacy path under `~/.openclaw/qqbot` without creating it.
 *
-* Anchored on the OS home (not `OPENCLAW_HOME`) so persisted QQ Bot data
-* (sessions, known users, ref index, credential backups) does not silently
-* disappear when an operator adds `OPENCLAW_HOME` after the fact.
+* Current QQ Bot runtime state lives in plugin SQLite KV. This path remains for
+* legacy imports and media-path remaps from older releases.
 */
 function getQQBotDataPath(...subPaths) {
 	return path$1.join(getHomeDir(), ".openclaw", "qqbot", ...subPaths);
@@ -621,36 +655,24 @@ function resolveQQBotPayloadLocalFilePath(p) {
 	return null;
 }
 //#endregion
-//#region extensions/qqbot/src/engine/utils/data-paths.ts
-/**
-* Centralised filename helpers for persisted QQBot state.
-*
-* Every persistence module routes file paths through these helpers so the
-* naming convention stays in sync and legacy migrations are handled
-* consistently.
-*
-* Key design decisions:
-* - Credential backup is keyed only by `accountId` because recovery runs
-*   exactly when the appId is missing from config.
-*/
-/**
-* Normalise an identifier so it is safe to embed in a filename.
-* Keeps alphanumerics, dot, underscore, dash; everything else becomes `_`.
-*/
-function safeName(id) {
-	return id.replace(/[^a-zA-Z0-9._-]/g, "_");
+//#region extensions/qqbot/src/engine/utils/sqlite-state.ts
+function resolveStoreEnv(options) {
+	if (!options.stateDir) return options.env;
+	return {
+		...options.env ?? process.env,
+		OPENCLAW_STATE_DIR: options.stateDir
+	};
 }
-/**
-* Per-accountId credential backup file. Not keyed by appId because the
-* whole point of this file is to recover credentials when appId is
-* missing from the live config.
-*/
-function getCredentialBackupFile(accountId) {
-	return path.join(getQQBotDataPath("data"), `credential-backup-${safeName(accountId)}.json`);
+function openQQBotSyncKeyedStore(options) {
+	return getQQBotRuntime().state.openSyncKeyedStore({
+		namespace: options.namespace,
+		maxEntries: options.maxEntries,
+		...options.defaultTtlMs != null ? { defaultTtlMs: options.defaultTtlMs } : {},
+		...resolveStoreEnv(options) ? { env: resolveStoreEnv(options) } : {}
+	});
 }
-/** Legacy single-file credential backup (pre-multi-account-isolation). */
-function getLegacyCredentialBackupFile() {
-	return path.join(getQQBotDataPath("data"), "credential-backup.json");
+function buildQQBotStateKey(...parts) {
+	return crypto.createHash("sha256").update(JSON.stringify(parts)).digest("hex");
 }
 //#endregion
 //#region extensions/qqbot/src/engine/config/credential-backup.ts
@@ -663,23 +685,69 @@ function getLegacyCredentialBackupFile() {
 *
 * Mechanics:
 *   - After each successful gateway start we snapshot the currently
-*     resolved `appId` / `clientSecret` to a per-account backup file.
+*     resolved `appId` / `clientSecret` to a per-account SQLite KV entry.
 *   - During plugin startup, if the live config has an empty appId or
 *     secret, the gateway consults the backup and restores the values
 *     via the config mutation API.
-*   - Backups live under `~/.openclaw/qqbot/data/` so they survive
-*     plugin directory replacement.
+*   - Legacy JSON backups are imported on first read, then removed after
+*     SQLite has the canonical copy.
 *
 * Safety notes:
 *   - Only restore when credentials are **actually empty** — never
 *     overwrite a user's intentional config change.
-*   - Atomic write (temp file + rename) to avoid torn files.
-*   - Per-account file: `credential-backup-<accountId>.json`. We do
-*     **not** also key by appId because recovery happens precisely
-*     when appId is unknown.
-*   - Legacy single `credential-backup.json` is migrated automatically
-*     when the stored accountId matches the caller.
+*   - Per-account key only; not keyed by appId because recovery happens
+*     precisely when appId is unknown.
 */
+const CREDENTIAL_BACKUPS_NAMESPACE = "credential-backups";
+const MAX_CREDENTIAL_BACKUPS = 1e3;
+function createCredentialBackupStore() {
+	return openQQBotSyncKeyedStore({
+		namespace: CREDENTIAL_BACKUPS_NAMESPACE,
+		maxEntries: MAX_CREDENTIAL_BACKUPS
+	});
+}
+function safeName(id) {
+	return id.replace(/[^a-zA-Z0-9._-]/g, "_");
+}
+function getLegacyOsHomeCredentialBackupFile(accountId) {
+	return path.join(getQQBotDataPath("data"), `credential-backup-${safeName(accountId)}.json`);
+}
+function getLegacyOsHomeCredentialBackupFileWithoutAccount() {
+	return path.join(getQQBotDataPath("data"), "credential-backup.json");
+}
+function credentialBackupKey(accountId) {
+	return buildQQBotStateKey("credential-backup", accountId);
+}
+function isUsableBackup(data) {
+	return Boolean(data?.accountId && data.appId && data.clientSecret);
+}
+function loadUsableBackupFromFile(filePath) {
+	const data = loadJsonFile(filePath);
+	return isUsableBackup(data) ? data : null;
+}
+function removeFileQuietly(filePath) {
+	try {
+		fs.unlinkSync(filePath);
+	} catch {}
+}
+function findLegacyBackup(accountId) {
+	const candidates = accountId ? [
+		getCredentialBackupFile(accountId),
+		getLegacyCredentialBackupFile(),
+		getLegacyOsHomeCredentialBackupFile(accountId),
+		getLegacyOsHomeCredentialBackupFileWithoutAccount()
+	] : [getLegacyCredentialBackupFile(), getLegacyOsHomeCredentialBackupFileWithoutAccount()];
+	for (const filePath of candidates) {
+		const data = loadUsableBackupFromFile(filePath);
+		if (!data) continue;
+		if (accountId && data.accountId !== accountId) continue;
+		return {
+			data,
+			filePath
+		};
+	}
+	return null;
+}
 /** Persist a credential snapshot (called once gateway reaches READY). */
 function saveCredentialBackup(accountId, appId, clientSecret) {
 	if (!appId || !clientSecret) return;
@@ -691,40 +759,27 @@ function saveCredentialBackup(accountId, appId, clientSecret) {
 			clientSecret,
 			savedAt: (/* @__PURE__ */ new Date()).toISOString()
 		};
-		replaceFileAtomicSync({
-			filePath: backupPath,
-			content: `${JSON.stringify(data, null, 2)}\n`,
-			tempPrefix: ".qqbot-credential-backup"
-		});
+		createCredentialBackupStore().register(credentialBackupKey(accountId), data);
+		removeFileQuietly(backupPath);
 	} catch {}
 }
 /**
 * Load a credential snapshot for `accountId`.
 *
-* Consults the new per-account file first; falls back to the legacy
-* global backup file and migrates it when the embedded `accountId`
-* matches the request. Returns `null` when no usable backup exists.
+* Consults SQLite first; falls back to shipped JSON backups and imports
+* them when the embedded `accountId` matches the request.
 */
 function loadCredentialBackup(accountId) {
 	try {
 		if (accountId) {
-			const data = loadJsonFile(getCredentialBackupFile(accountId));
-			if (data?.appId && data.clientSecret) return data;
+			const data = createCredentialBackupStore().lookup(credentialBackupKey(accountId));
+			if (isUsableBackup(data)) return data;
 		}
-		const legacy = getLegacyCredentialBackupFile();
-		const data = loadJsonFile(legacy);
-		if (data) {
-			if (!data?.appId || !data?.clientSecret) return null;
-			if (accountId && data.accountId !== accountId) return null;
-			if (data.accountId) try {
-				replaceFileAtomicSync({
-					filePath: getCredentialBackupFile(data.accountId),
-					content: `${JSON.stringify(data, null, 2)}\n`,
-					tempPrefix: ".qqbot-credential-backup"
-				});
-				fs.unlinkSync(legacy);
-			} catch {}
-			return data;
+		const legacy = findLegacyBackup(accountId);
+		if (legacy) {
+			createCredentialBackupStore().register(credentialBackupKey(legacy.data.accountId), legacy.data);
+			removeFileQuietly(legacy.filePath);
+			return legacy.data;
 		}
 	} catch {}
 	return null;
@@ -868,12 +923,12 @@ function looksLikeQQBotTarget(id) {
 //#region extensions/qqbot/src/channel.ts
 let gatewayModulePromise;
 function loadGatewayModule() {
-	gatewayModulePromise ??= import("./gateway-Do-IrU8a.js");
+	gatewayModulePromise ??= import("./gateway-DNHe6a8p.js");
 	return gatewayModulePromise;
 }
 let outboundMessagingModulePromise;
 function loadOutboundMessagingModule() {
-	outboundMessagingModulePromise ??= import("./outbound-BNWSEG_7.js").then((n) => n.t);
+	outboundMessagingModulePromise ??= import("./outbound-CVVQeQxX.js").then((n) => n.t);
 	return outboundMessagingModulePromise;
 }
 function createQQBotSendReceipt(params) {
@@ -1146,4 +1201,4 @@ const qqbotPlugin = {
 	}
 };
 //#endregion
-export { parseApprovalButtonData as C, buildPluginApprovalText as S, matchesQQBotApprovalAccount as _, getQQBotDataDir as a, buildApprovalKeyboard as b, getQQBotMediaPath as c, isWindows as d, normalizePath as f, isQQBotExecApprovalClientEnabled as g, authorizeQQBotApprovalAction as h, getHomeDir as i, getTempDir as l, toGatewayAccount as m, parseTarget as n, getQQBotDataPath as o, resolveQQBotPayloadLocalFilePath as p, checkSilkWasmAvailable as r, getQQBotMediaDir as s, qqbotPlugin as t, isLocalPath as u, resolveQQBotExecApprovalConfig as v, resolveApprovalTarget as w, buildExecApprovalText as x, shouldHandleQQBotExecApprovalRequest as y };
+export { buildExecApprovalText as C, resolveApprovalTarget as E, buildApprovalKeyboard as S, parseApprovalButtonData as T, authorizeQQBotApprovalAction as _, checkSilkWasmAvailable as a, resolveQQBotExecApprovalConfig as b, getQQBotDataPath as c, getTempDir as d, isLocalPath as f, toGatewayAccount as g, resolveQQBotPayloadLocalFilePath as h, openQQBotSyncKeyedStore as i, getQQBotMediaDir as l, normalizePath as m, parseTarget as n, getHomeDir as o, isWindows as p, buildQQBotStateKey as r, getQQBotDataDir as s, qqbotPlugin as t, getQQBotMediaPath as u, isQQBotExecApprovalClientEnabled as v, buildPluginApprovalText as w, shouldHandleQQBotExecApprovalRequest as x, matchesQQBotApprovalAccount as y };

package/dist/channel-plugin-api.js

@@ -1,2 +1,2 @@
-import { t as qqbotPlugin } from "./channel-CELcXJfZ.js";
+import { t as qqbotPlugin } from "./channel-BYYYPzrA.js";
 export { qqbotPlugin };

package/dist/{gateway-Do-IrU8a.js → gateway-DNHe6a8p.js}

@@ -1,9 +1,9 @@
-import { D as setOutboundAudioPort, T as DEFAULT_MEDIA_SEND_ERROR, _ as sendVideoMsg, c as isCronReminderPayload, d as normalizeMediaTags, g as sendPhoto, h as sendDocument, l as isMediaPayload, o as decodeMediaPath, r as sendMedia, s as encodePayloadForCron, u as parseQQBotPayload, v as sendVoice, y as resolveUserFacingMediaError } from "./outbound-BNWSEG_7.js";
+import { D as setOutboundAudioPort, T as DEFAULT_MEDIA_SEND_ERROR, _ as sendVideoMsg, c as isCronReminderPayload, d as normalizeMediaTags, g as sendPhoto, h as sendDocument, l as isMediaPayload, o as decodeMediaPath, r as sendMedia, s as encodePayloadForCron, u as parseQQBotPayload, v as sendVoice, y as resolveUserFacingMediaError } from "./outbound-CVVQeQxX.js";
 import { c as getPlatformAdapter, i as normalizeOptionalString$1, n as normalizeLowercaseStringOrEmpty$1, o as readStringField, s as sanitizeFileName, t as asOptionalObjectRecord } from "./string-normalize-R_0cKO7Q.js";
 import { f as resolveAccountBase, h as setBridgeLogger, p as ensurePlatformAdapter } from "./config-schema-BI7AYP6Q.js";
-import { C as parseApprovalButtonData, a as getQQBotDataDir, d as isWindows, f as normalizePath, h as authorizeQQBotApprovalAction, i as getHomeDir, l as getTempDir, m as toGatewayAccount, o as getQQBotDataPath, p as resolveQQBotPayloadLocalFilePath, r as checkSilkWasmAvailable, s as getQQBotMediaDir, u as isLocalPath } from "./channel-CELcXJfZ.js";
-import { B as StreamContentType, C as debugError, D as getNextMsgSeq, F as getImageMimeType, H as StreamInputState, I as getMaxUploadSize, N as formatFileSize, R as formatDuration, S as withTokenRetry, T as debugWarn, V as StreamInputMode, _ as sendInputNotify, a as acknowledgeInteraction, b as startBackgroundTokenRefresh, c as createRawInputNotifyFn, d as getMessageApi, f as getPluginUserAgent, g as registerAccount, h as onMessageSent, i as accountToCreds, j as downloadFile, k as openLocalFile, l as getAccessToken, m as initSender, n as getQQBotRuntimeForEngine, o as buildDeliveryTarget, p as initApiConfig, s as clearTokenCache, t as getQQBotRuntime, u as getGatewayUrl, v as sendMedia$1, w as debugLog, x as stopBackgroundTokenRefresh, y as sendText, z as formatErrorMessage } from "./runtime-CwW75z2d.js";
-import { a as getPluginVersion, i as getFrameworkVersion, n as runWithRequestContext, o as initCommands, s as matchSlashCommand } from "./request-context-CDEdBceh.js";
+import { T as parseApprovalButtonData, _ as authorizeQQBotApprovalAction, a as checkSilkWasmAvailable, c as getQQBotDataPath, d as getTempDir, f as isLocalPath, g as toGatewayAccount, h as resolveQQBotPayloadLocalFilePath, i as openQQBotSyncKeyedStore, l as getQQBotMediaDir, m as normalizePath, o as getHomeDir, p as isWindows, r as buildQQBotStateKey, s as getQQBotDataDir } from "./channel-BYYYPzrA.js";
+import { B as StreamContentType, C as debugError, D as getNextMsgSeq, F as getImageMimeType, H as StreamInputState, I as getMaxUploadSize, N as formatFileSize, R as formatDuration, S as withTokenRetry, T as debugWarn, V as StreamInputMode, _ as sendInputNotify, a as acknowledgeInteraction, b as startBackgroundTokenRefresh, c as createRawInputNotifyFn, d as getMessageApi, f as getPluginUserAgent, g as registerAccount, h as onMessageSent, i as accountToCreds, j as downloadFile, k as openLocalFile, l as getAccessToken, m as initSender, n as getQQBotRuntimeForEngine, o as buildDeliveryTarget, p as initApiConfig, s as clearTokenCache, t as getQQBotRuntime, u as getGatewayUrl, v as sendMedia$1, w as debugLog, x as stopBackgroundTokenRefresh, y as sendText, z as formatErrorMessage } from "./runtime-BSgtMZ6G.js";
+import { a as getPluginVersion, i as getFrameworkVersion, n as runWithRequestContext, o as initCommands, s as matchSlashCommand } from "./request-context-BL0hymyD.js";
 import { asBoolean, uniqueStrings } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { isImplicitSameChatApprovalAuthorization } from "openclaw/plugin-sdk/approval-auth-runtime";
 import * as fs$1 from "node:fs";
@@ -11,7 +11,7 @@ import fs from "node:fs";
 import * as os$1 from "node:os";
 import crypto from "node:crypto";
 import { fetchWithSsrFGuard } from "openclaw/plugin-sdk/ssrf-runtime";
-import { appendRegularFileSync, privateFileStoreSync, readRegularFileSync, replaceFileAtomicSync } from "openclaw/plugin-sdk/security-runtime";
+import { privateFileStoreSync, readRegularFileSync } from "openclaw/plugin-sdk/security-runtime";
 import * as path$1 from "node:path";
 import path from "node:path";
 import { mimeTypeFromFilePath } from "openclaw/plugin-sdk/media-mime";
@@ -171,33 +171,90 @@ function formatRefEntryForAgent(entry) {
 //#endregion
 //#region extensions/qqbot/src/engine/ref/store.ts
 /**
-* Ref-index store — JSONL file-based store for message reference index.
+* Ref-index store — SQLite KV-backed store for message reference index.
 *
-* Migrated from src/ref-index-store.ts. Dependencies are only Node.js
-* built-ins + log + platform (both zero plugin-sdk).
+* Legacy JSONL entries are imported once, then deleted after SQLite has the
+* canonical ref-index rows.
 */
 const MAX_ENTRIES = 5e4;
 const TTL_MS = 10080 * 60 * 1e3;
-const COMPACT_THRESHOLD_RATIO = 2;
-let cache = null;
-let totalLinesOnDisk = 0;
+const REF_INDEX_NAMESPACE = "ref-index";
+const REF_INDEX_MIGRATIONS_NAMESPACE = "ref-index-migrations";
+const LEGACY_REF_INDEX_MIGRATION_KEY = "ref-index-jsonl-v1";
+let legacyImported$1 = false;
 function getRefIndexFile() {
 	return path.join(getQQBotDataPath("data"), "ref-index.jsonl");
 }
-function loadFromFile() {
-	if (cache !== null) return cache;
-	cache = /* @__PURE__ */ new Map();
-	totalLinesOnDisk = 0;
+function createRefIndexStore() {
+	return openQQBotSyncKeyedStore({
+		namespace: REF_INDEX_NAMESPACE,
+		maxEntries: MAX_ENTRIES,
+		defaultTtlMs: TTL_MS
+	});
+}
+function createRefIndexMigrationStore() {
+	return openQQBotSyncKeyedStore({
+		namespace: REF_INDEX_MIGRATIONS_NAMESPACE,
+		maxEntries: 100
+	});
+}
+function refIndexStateKey(refIdx) {
+	return buildQQBotStateKey("ref-index", refIdx);
+}
+function toStoredAttachment(attachment) {
+	return {
+		type: attachment.type,
+		...attachment.filename !== void 0 ? { filename: attachment.filename } : {},
+		...attachment.contentType !== void 0 ? { contentType: attachment.contentType } : {},
+		...attachment.transcript !== void 0 ? { transcript: attachment.transcript } : {},
+		...attachment.transcriptSource !== void 0 ? { transcriptSource: attachment.transcriptSource } : {},
+		...attachment.localPath !== void 0 ? { localPath: attachment.localPath } : {},
+		...attachment.url !== void 0 ? { url: attachment.url } : {}
+	};
+}
+function toStoredRefIndexEntry(entry, createdAt) {
+	return {
+		content: entry.content,
+		senderId: entry.senderId,
+		...entry.senderName !== void 0 ? { senderName: entry.senderName } : {},
+		timestamp: entry.timestamp,
+		...entry.isBot !== void 0 ? { isBot: entry.isBot } : {},
+		...entry.attachments ? { attachments: entry.attachments.map(toStoredAttachment) } : {},
+		createdAt
+	};
+}
+function toRefIndexEntry(entry) {
+	return {
+		content: entry.content,
+		senderId: entry.senderId,
+		...entry.senderName !== void 0 ? { senderName: entry.senderName } : {},
+		timestamp: entry.timestamp,
+		...entry.isBot !== void 0 ? { isBot: entry.isBot } : {},
+		...entry.attachments ? { attachments: entry.attachments.map(toStoredAttachment) } : {}
+	};
+}
+function ensureLegacyRefIndexImported() {
+	if (legacyImported$1) return;
+	const migrationStore = createRefIndexMigrationStore();
+	if (migrationStore.lookup(LEGACY_REF_INDEX_MIGRATION_KEY)) {
+		legacyImported$1 = true;
+		return;
+	}
 	try {
 		const refIndexFile = getRefIndexFile();
-		if (!fs.existsSync(refIndexFile)) return cache;
+		if (!fs.existsSync(refIndexFile)) {
+			migrationStore.register(LEGACY_REF_INDEX_MIGRATION_KEY, { importedAt: (/* @__PURE__ */ new Date()).toISOString() });
+			legacyImported$1 = true;
+			return;
+		}
 		const lines = fs.readFileSync(refIndexFile, "utf-8").split("\n");
 		const now = Date.now();
 		let expired = 0;
+		let imported = 0;
+		const store = createRefIndexStore();
 		for (const line of lines) {
 			const trimmed = line.trim();
 			if (!trimmed) continue;
-			totalLinesOnDisk++;
 			try {
 				const entry = JSON.parse(trimmed);
 				if (!entry.k || !entry.v || !entry.t) continue;
@@ -205,122 +262,45 @@ function loadFromFile() {
 					expired++;
 					continue;
 				}
-				cache.set(entry.k, {
-					...entry.v,
-					createdAt: entry.t
-				});
+				store.register(refIndexStateKey(entry.k), toStoredRefIndexEntry(entry.v, entry.t), { ttlMs: Math.max(1, TTL_MS - (now - entry.t)) });
+				imported++;
 			} catch {}
 		}
-		debugLog(`[ref-index-store] Loaded ${cache.size} entries from ${totalLinesOnDisk} lines (${expired} expired)`);
-		if (shouldCompact()) compactFile();
+		migrationStore.register(LEGACY_REF_INDEX_MIGRATION_KEY, { importedAt: (/* @__PURE__ */ new Date()).toISOString() });
+		legacyImported$1 = true;
+		fs.rmSync(refIndexFile, { force: true });
+		debugLog(`[ref-index-store] Migrated ${imported} entries to SQLite (${expired} expired)`);
 	} catch (err) {
-		debugError(`[ref-index-store] Failed to load: ${formatErrorMessage(err)}`);
-		cache = /* @__PURE__ */ new Map();
+		debugError(`[ref-index-store] Failed to import legacy JSONL: ${formatErrorMessage(err)}`);
 	}
-	return cache;
 }
-function ensureDir$2() {
-	getQQBotDataDir("data");
-}
-function appendLine(line) {
-	try {
-		ensureDir$2();
-		appendRegularFileSync({
-			filePath: getRefIndexFile(),
-			content: JSON.stringify(line) + "\n"
-		});
-		totalLinesOnDisk++;
-	} catch (err) {
-		debugError(`[ref-index-store] Failed to append: ${formatErrorMessage(err)}`);
-	}
-}
-function shouldCompact() {
-	return cache !== null && totalLinesOnDisk > cache.size * COMPACT_THRESHOLD_RATIO && totalLinesOnDisk > 1e3;
-}
-function compactFile() {
-	if (!cache) return;
-	const before = totalLinesOnDisk;
+/** Persist a refIdx mapping for one message. */
+function setRefIndex(refIdx, entry) {
 	try {
-		ensureDir$2();
-		const refIndexFile = getRefIndexFile();
-		const lines = [];
-		for (const [key, entry] of cache) lines.push(JSON.stringify({
-			k: key,
-			v: {
-				content: entry.content,
-				senderId: entry.senderId,
-				senderName: entry.senderName,
-				timestamp: entry.timestamp,
-				isBot: entry.isBot,
-				attachments: entry.attachments
-			},
-			t: entry.createdAt
-		}));
-		replaceFileAtomicSync({
-			filePath: refIndexFile,
-			content: `${lines.join("\n")}\n`,
-			tempPrefix: ".qqbot-ref-index"
-		});
-		totalLinesOnDisk = cache.size;
-		debugLog(`[ref-index-store] Compacted: ${before} lines → ${totalLinesOnDisk} lines`);
+		ensureLegacyRefIndexImported();
+		const now = Date.now();
+		createRefIndexStore().register(refIndexStateKey(refIdx), toStoredRefIndexEntry(entry, now), { ttlMs: TTL_MS });
 	} catch (err) {
-		debugError(`[ref-index-store] Compact failed: ${formatErrorMessage(err)}`);
-	}
-}
-function evictIfNeeded() {
-	if (!cache || cache.size < MAX_ENTRIES) return;
-	const now = Date.now();
-	for (const [key, entry] of cache) if (now - entry.createdAt > TTL_MS) cache.delete(key);
-	if (cache.size >= MAX_ENTRIES) {
-		const toRemove = [...cache.entries()].toSorted((a, b) => a[1].createdAt - b[1].createdAt).slice(0, cache.size - MAX_ENTRIES + 1e3);
-		for (const [key] of toRemove) cache.delete(key);
-		debugLog(`[ref-index-store] Evicted ${toRemove.length} oldest entries`);
+		debugError(`[ref-index-store] Failed to persist ref index: ${formatErrorMessage(err)}`);
 	}
 }
-/** Persist a refIdx mapping for one message. */
-function setRefIndex(refIdx, entry) {
-	const store = loadFromFile();
-	evictIfNeeded();
-	const now = Date.now();
-	store.set(refIdx, {
-		...entry,
-		createdAt: now
-	});
-	appendLine({
-		k: refIdx,
-		v: {
-			content: entry.content,
-			senderId: entry.senderId,
-			senderName: entry.senderName,
-			timestamp: entry.timestamp,
-			isBot: entry.isBot,
-			attachments: entry.attachments
-		},
-		t: now
-	});
-	if (shouldCompact()) compactFile();
-}
 /** Look up one quoted message by refIdx. */
 function getRefIndex(refIdx) {
-	const store = loadFromFile();
-	const entry = store.get(refIdx);
-	if (!entry) return null;
-	if (Date.now() - entry.createdAt > TTL_MS) {
-		store.delete(refIdx);
+	try {
+		ensureLegacyRefIndexImported();
+		const store = createRefIndexStore();
+		const key = refIndexStateKey(refIdx);
+		const entry = store.lookup(key);
+		if (!entry) return null;
+		if (Date.now() - entry.createdAt > TTL_MS) {
+			store.delete(key);
+			return null;
+		}
+		return toRefIndexEntry(entry);
+	} catch (err) {
+		debugError(`[ref-index-store] Failed to read ref index: ${formatErrorMessage(err)}`);
 		return null;
 	}
-	return {
-		content: entry.content,
-		senderId: entry.senderId,
-		senderName: entry.senderName,
-		timestamp: entry.timestamp,
-		isBot: entry.isBot,
-		attachments: entry.attachments
-	};
-}
-/** Compact the store before process exit when needed. */
-function flushRefIndex() {
-	if (cache && shouldCompact()) compactFile();
 }
 //#endregion
 //#region extensions/qqbot/src/engine/utils/diagnostics.ts
@@ -570,18 +550,11 @@ async function trySlashCommand(msg, ctx) {
 //#endregion
 //#region extensions/qqbot/src/engine/session/known-users.ts
 /**
-* Known user tracking — JSON file-based store.
+* Known user tracking — SQLite KV-backed store.
 *
-* Migrated from src/known-users.ts. Dependencies are only Node.js
-* built-ins + log + platform (both zero plugin-sdk).
+* Legacy `known-users.json` data is imported once, then deleted after SQLite
+* has the canonical copy.
 */
-let usersCache = null;
-const SAVE_THROTTLE_MS$1 = 5e3;
-let saveTimer = null;
-let isDirty = false;
-function ensureDir$1() {
-	getQQBotDataDir("data");
-}
 function getKnownUsersFile() {
 	return path.join(getQQBotDataPath("data"), "known-users.json");
 }
@@ -589,88 +562,106 @@ function makeUserKey(user) {
 	const base = `${user.accountId}:${user.type}:${user.openid}`;
 	return user.type === "group" && user.groupOpenid ? `${base}:${user.groupOpenid}` : base;
 }
-function loadUsersFromFile() {
-	if (usersCache !== null) return usersCache;
-	usersCache = /* @__PURE__ */ new Map();
-	try {
-		const knownUsersFile = getKnownUsersFile();
-		const users = privateFileStoreSync(path.dirname(knownUsersFile)).readJsonIfExists(path.basename(knownUsersFile));
-		if (users) {
-			for (const user of users) usersCache.set(makeUserKey(user), user);
-			debugLog(`[known-users] Loaded ${usersCache.size} users`);
-		}
-	} catch (err) {
-		debugError(`[known-users] Failed to load users: ${formatErrorMessage(err)}`);
-		usersCache = /* @__PURE__ */ new Map();
-	}
-	return usersCache;
+const KNOWN_USERS_NAMESPACE = "known-users";
+const KNOWN_USERS_MIGRATIONS_NAMESPACE = "known-users-migrations";
+const LEGACY_KNOWN_USERS_MIGRATION_KEY = "known-users-json-v1";
+const MAX_KNOWN_USERS = 1e5;
+let legacyImported = false;
+function createKnownUsersStore() {
+	return openQQBotSyncKeyedStore({
+		namespace: KNOWN_USERS_NAMESPACE,
+		maxEntries: MAX_KNOWN_USERS
+	});
+}
+function createKnownUsersMigrationStore() {
+	return openQQBotSyncKeyedStore({
+		namespace: KNOWN_USERS_MIGRATIONS_NAMESPACE,
+		maxEntries: 100
+	});
 }
-function saveUsersToFile() {
-	if (!isDirty || saveTimer) return;
-	saveTimer = setTimeout(() => {
-		saveTimer = null;
-		doSaveUsersToFile();
-	}, SAVE_THROTTLE_MS$1);
+function knownUserStateKey(key) {
+	return crypto.createHash("sha256").update(key).digest("hex");
 }
-function doSaveUsersToFile() {
-	if (!usersCache || !isDirty) return;
+function toStoredKnownUser(user) {
+	return {
+		openid: user.openid,
+		type: user.type,
+		...user.nickname ? { nickname: user.nickname } : {},
+		...user.groupOpenid ? { groupOpenid: user.groupOpenid } : {},
+		accountId: user.accountId,
+		firstSeenAt: user.firstSeenAt,
+		lastSeenAt: user.lastSeenAt,
+		interactionCount: user.interactionCount
+	};
+}
+function ensureLegacyKnownUsersImported() {
+	if (legacyImported) return;
+	const migrationStore = createKnownUsersMigrationStore();
+	if (migrationStore.lookup(LEGACY_KNOWN_USERS_MIGRATION_KEY)) {
+		legacyImported = true;
+		return;
+	}
 	try {
-		ensureDir$1();
-		const filePath = getKnownUsersFile();
-		privateFileStoreSync(path.dirname(filePath)).writeJson(path.basename(filePath), Array.from(usersCache.values()));
-		isDirty = false;
+		const knownUsersFile = getKnownUsersFile();
+		const users = privateFileStoreSync(path.dirname(knownUsersFile)).readJsonIfExists(path.basename(knownUsersFile));
+		if (Array.isArray(users)) {
+			const store = createKnownUsersStore();
+			for (const user of users) store.registerIfAbsent(knownUserStateKey(makeUserKey(user)), toStoredKnownUser(user));
+			debugLog(`[known-users] Migrated ${users.length} users to SQLite`);
+			fs.rmSync(knownUsersFile, { force: true });
+		}
+		migrationStore.register(LEGACY_KNOWN_USERS_MIGRATION_KEY, { importedAt: (/* @__PURE__ */ new Date()).toISOString() });
+		legacyImported = true;
 	} catch (err) {
-		debugError(`[known-users] Failed to save users: ${formatErrorMessage(err)}`);
+		debugError(`[known-users] Failed to import legacy users: ${formatErrorMessage(err)}`);
 	}
 }
-/** Flush pending writes immediately, typically during shutdown. */
-function flushKnownUsers() {
-	if (saveTimer) {
-		clearTimeout(saveTimer);
-		saveTimer = null;
-	}
-	doSaveUsersToFile();
-}
 /** Record a known user whenever a message is received. */
 function recordKnownUser(user) {
-	const cache = loadUsersFromFile();
-	const key = makeUserKey(user);
-	const now = Date.now();
-	const existing = cache.get(key);
-	if (existing) {
-		existing.lastSeenAt = now;
-		existing.interactionCount++;
-		if (user.nickname && user.nickname !== existing.nickname) existing.nickname = user.nickname;
-	} else {
-		cache.set(key, {
-			openid: user.openid,
-			type: user.type,
-			nickname: user.nickname,
-			groupOpenid: user.groupOpenid,
-			accountId: user.accountId,
-			firstSeenAt: now,
-			lastSeenAt: now,
-			interactionCount: 1
-		});
-		debugLog(`[known-users] New user: ${user.openid} (${user.type})`);
+	try {
+		ensureLegacyKnownUsersImported();
+		const store = createKnownUsersStore();
+		const stateKey = knownUserStateKey(makeUserKey(user));
+		const now = Date.now();
+		const existing = store.lookup(stateKey);
+		if (existing) {
+			const next = {
+				...existing,
+				lastSeenAt: now,
+				interactionCount: existing.interactionCount + 1
+			};
+			if (user.nickname && user.nickname !== existing.nickname) next.nickname = user.nickname;
+			store.register(stateKey, toStoredKnownUser(next));
+		} else {
+			store.register(stateKey, toStoredKnownUser({
+				openid: user.openid,
+				type: user.type,
+				nickname: user.nickname,
+				groupOpenid: user.groupOpenid,
+				accountId: user.accountId,
+				firstSeenAt: now,
+				lastSeenAt: now,
+				interactionCount: 1
+			}));
+			debugLog(`[known-users] New user: ${user.openid} (${user.type})`);
+		}
+	} catch (err) {
+		debugError(`[known-users] Failed to record user: ${formatErrorMessage(err)}`);
 	}
-	isDirty = true;
-	saveUsersToFile();
 }
 //#endregion
 //#region extensions/qqbot/src/engine/session/session-store.ts
 /**
-* Gateway session persistence — JSONL file-based store.
+* Gateway session persistence — SQLite KV-backed store.
 *
-* Migrated from src/session-store.ts. Dependencies are only Node.js
-* built-ins + log + platform (both zero plugin-sdk).
+* Legacy JSON session files are imported on first account access, then
+* removed after SQLite has the canonical short-lived session entry.
 */
 const SESSION_EXPIRE_TIME = 300 * 1e3;
 const SAVE_THROTTLE_MS = 1e3;
+const SESSION_NAMESPACE = "gateway-sessions";
+const MAX_SESSIONS = 1e3;
 const throttleState = /* @__PURE__ */ new Map();
-function ensureDir() {
-	getQQBotDataDir("sessions");
-}
 function getSessionDir() {
 	return getQQBotDataPath("sessions");
 }
@@ -690,36 +681,74 @@ function getCandidateSessionPaths(accountId) {
 	const legacyPath = getLegacySessionPath(accountId);
 	return primaryPath === legacyPath ? [primaryPath] : [primaryPath, legacyPath];
 }
+function createSessionStore() {
+	return openQQBotSyncKeyedStore({
+		namespace: SESSION_NAMESPACE,
+		maxEntries: MAX_SESSIONS,
+		defaultTtlMs: SESSION_EXPIRE_TIME
+	});
+}
+function sessionKey(accountId) {
+	return buildQQBotStateKey("gateway-session", accountId);
+}
+function remainingSessionTtlMs(state, now = Date.now()) {
+	return Math.max(1, SESSION_EXPIRE_TIME - (now - state.savedAt));
+}
+function toStoredSessionState(state) {
+	return {
+		sessionId: state.sessionId,
+		lastSeq: state.lastSeq,
+		lastConnectedAt: state.lastConnectedAt,
+		intentLevelIndex: state.intentLevelIndex,
+		accountId: state.accountId,
+		savedAt: state.savedAt,
+		...state.appId ? { appId: state.appId } : {}
+	};
+}
+function removeFileQuietly(filePath) {
+	try {
+		fs.unlinkSync(filePath);
+	} catch {}
+}
+function loadLegacySession(accountId) {
+	for (const candidatePath of getCandidateSessionPaths(accountId)) {
+		const state = privateFileStoreSync(path.dirname(candidatePath)).readJsonIfExists(path.basename(candidatePath));
+		if (state) return {
+			state,
+			filePath: candidatePath
+		};
+	}
+	return null;
+}
+function migrateLegacySession(accountId) {
+	const legacy = loadLegacySession(accountId);
+	if (!legacy) return null;
+	const now = Date.now();
+	if (now - legacy.state.savedAt <= SESSION_EXPIRE_TIME) createSessionStore().register(sessionKey(accountId), toStoredSessionState(legacy.state), { ttlMs: remainingSessionTtlMs(legacy.state, now) });
+	for (const filePath of getCandidateSessionPaths(accountId)) removeFileQuietly(filePath);
+	return legacy.state;
+}
 /** Load a saved session, rejecting expired or mismatched appId entries. */
 function loadSession(accountId, expectedAppId) {
 	try {
-		let filePath = null;
-		let state = null;
-		for (const candidatePath of getCandidateSessionPaths(accountId)) {
-			state = privateFileStoreSync(path.dirname(candidatePath)).readJsonIfExists(path.basename(candidatePath));
-			if (state) {
-				filePath = candidatePath;
-				break;
-			}
-		}
-		if (!filePath || !state) return null;
+		const store = createSessionStore();
+		let state = store.lookup(sessionKey(accountId));
+		if (!state) state = migrateLegacySession(accountId) ?? void 0;
+		if (!state) return null;
 		const now = Date.now();
 		if (now - state.savedAt > SESSION_EXPIRE_TIME) {
 			debugLog(`[session-store] Session expired for ${accountId}, age: ${Math.round((now - state.savedAt) / 1e3)}s`);
-			try {
-				fs.unlinkSync(filePath);
-			} catch {}
+			store.delete(sessionKey(accountId));
 			return null;
 		}
 		if (expectedAppId && state.appId && state.appId !== expectedAppId) {
 			debugLog(`[session-store] appId mismatch for ${accountId}: saved=${state.appId}, current=${expectedAppId}. Discarding stale session.`);
-			try {
-				fs.unlinkSync(filePath);
-			} catch {}
+			store.delete(sessionKey(accountId));
 			return null;
 		}
 		if (!state.sessionId || state.lastSeq === null || state.lastSeq === void 0) {
 			debugLog(`[session-store] Invalid session data for ${accountId}`);
+			store.delete(sessionKey(accountId));
 			return null;
 		}
 		debugLog(`[session-store] Loaded session for ${accountId}: sessionId=${state.sessionId}, lastSeq=${state.lastSeq}, appId=${state.appId ?? "unknown"}, age=${Math.round((now - state.savedAt) / 1e3)}s`);
@@ -771,13 +800,13 @@ function doSaveSession(state) {
 	const filePath = getSessionPath(state.accountId);
 	const legacyPath = getLegacySessionPath(state.accountId);
 	try {
-		ensureDir();
 		const stateToSave = {
 			...state,
 			savedAt: Date.now()
 		};
-		privateFileStoreSync(path.dirname(filePath)).writeJson(path.basename(filePath), stateToSave);
-		if (legacyPath !== filePath && fs.existsSync(legacyPath)) fs.unlinkSync(legacyPath);
+		createSessionStore().register(sessionKey(state.accountId), toStoredSessionState(stateToSave), { ttlMs: SESSION_EXPIRE_TIME });
+		removeFileQuietly(filePath);
+		removeFileQuietly(legacyPath);
 		debugLog(`[session-store] Saved session for ${state.accountId}: sessionId=${state.sessionId}, lastSeq=${state.lastSeq}`);
 	} catch (err) {
 		debugError(`[session-store] Failed to save session for ${state.accountId}: ${formatErrorMessage(err)}`);
@@ -791,11 +820,8 @@ function clearSession(accountId) {
 		throttleState.delete(accountId);
 	}
 	try {
-		let cleared = false;
-		for (const filePath of getCandidateSessionPaths(accountId)) if (fs.existsSync(filePath)) {
-			fs.unlinkSync(filePath);
-			cleared = true;
-		}
+		const cleared = createSessionStore().delete(sessionKey(accountId));
+		for (const filePath of getCandidateSessionPaths(accountId)) removeFileQuietly(filePath);
 		if (cleared) debugLog(`[session-store] Cleared session for ${accountId}`);
 	} catch (err) {
 		debugError(`[session-store] Failed to clear session for ${accountId}: ${formatErrorMessage(err)}`);
@@ -1582,8 +1608,6 @@ var GatewayConnection = class {
 			}
 			this.cleanup();
 			stopBackgroundTokenRefresh(account.appId);
-			flushKnownUsers();
-			flushRefIndex();
 		});
 	}
 	cleanup() {

package/dist/{handler-runtime-Blcp6PTS.js → handler-runtime-DEXmNJcJ.js}

@@ -1,6 +1,6 @@
 import { m as getBridgeLogger, p as ensurePlatformAdapter, u as resolveQQBotAccount } from "./config-schema-BI7AYP6Q.js";
-import { S as buildPluginApprovalText, _ as matchesQQBotApprovalAccount, b as buildApprovalKeyboard, g as isQQBotExecApprovalClientEnabled, v as resolveQQBotExecApprovalConfig, w as resolveApprovalTarget, x as buildExecApprovalText, y as shouldHandleQQBotExecApprovalRequest } from "./channel-CELcXJfZ.js";
-import { d as getMessageApi, i as accountToCreds } from "./runtime-CwW75z2d.js";
+import { C as buildExecApprovalText, E as resolveApprovalTarget, S as buildApprovalKeyboard, b as resolveQQBotExecApprovalConfig, v as isQQBotExecApprovalClientEnabled, w as buildPluginApprovalText, x as shouldHandleQQBotExecApprovalRequest, y as matchesQQBotApprovalAccount } from "./channel-BYYYPzrA.js";
+import { d as getMessageApi, i as accountToCreds } from "./runtime-BSgtMZ6G.js";
 import { resolveApprovalRequestSessionConversation } from "openclaw/plugin-sdk/approval-native-runtime";
 import { createChannelApprovalNativeRuntimeAdapter } from "openclaw/plugin-sdk/approval-handler-runtime";
 //#region extensions/qqbot/src/bridge/approval/handler-runtime.ts

package/dist/{outbound-BNWSEG_7.js → outbound-CVVQeQxX.js}

@@ -1,6 +1,6 @@
 import { i as normalizeOptionalString, n as normalizeLowercaseStringOrEmpty, s as sanitizeFileName } from "./string-normalize-R_0cKO7Q.js";
-import { a as getQQBotDataDir, f as normalizePath$1, n as parseTarget$1, p as resolveQQBotPayloadLocalFilePath, s as getQQBotMediaDir, u as isLocalPath } from "./channel-CELcXJfZ.js";
-import { A as checkFileSize, C as debugError, E as UploadDailyLimitExceededError, F as getImageMimeType, I as getMaxUploadSize, L as readFileAsync, M as fileExistsAsync, N as formatFileSize, O as UPLOAD_PREPARE_FALLBACK_CODE, P as getFileTypeName, T as debugWarn, i as accountToCreds, j as downloadFile, p as initApiConfig, v as sendMedia$1, w as debugLog, y as sendText$1, z as formatErrorMessage } from "./runtime-CwW75z2d.js";
+import { f as isLocalPath, h as resolveQQBotPayloadLocalFilePath, l as getQQBotMediaDir, m as normalizePath$1, n as parseTarget$1, s as getQQBotDataDir } from "./channel-BYYYPzrA.js";
+import { A as checkFileSize, C as debugError, E as UploadDailyLimitExceededError, F as getImageMimeType, I as getMaxUploadSize, L as readFileAsync, M as fileExistsAsync, N as formatFileSize, O as UPLOAD_PREPARE_FALLBACK_CODE, P as getFileTypeName, T as debugWarn, i as accountToCreds, j as downloadFile, p as initApiConfig, v as sendMedia$1, w as debugLog, y as sendText$1, z as formatErrorMessage } from "./runtime-BSgtMZ6G.js";
 import { pathExistsSync, resolveLocalPathFromRootsSync } from "openclaw/plugin-sdk/security-runtime";
 import path from "node:path";
 import { getFileExtension } from "openclaw/plugin-sdk/media-mime";

package/dist/{request-context-CDEdBceh.js → request-context-BL0hymyD.js}

@@ -1,5 +1,5 @@
-import { a as getQQBotDataDir, c as getQQBotMediaPath, d as isWindows, i as getHomeDir } from "./channel-CELcXJfZ.js";
-import { w as debugLog } from "./runtime-CwW75z2d.js";
+import { o as getHomeDir, p as isWindows, s as getQQBotDataDir, u as getQQBotMediaPath } from "./channel-BYYYPzrA.js";
+import { w as debugLog } from "./runtime-BSgtMZ6G.js";
 import { uniqueStrings } from "openclaw/plugin-sdk/string-coerce-runtime";
 import fs from "node:fs";
 import path from "node:path";

package/dist/{runtime-CwW75z2d.js → runtime-BSgtMZ6G.js}

@@ -1002,6 +1002,23 @@ function sleep(ms) {
 */
 const TOKEN_URL = "https://bots.qq.com/app/getAppAccessToken";
 const DEFAULT_TOKEN_EXPIRES_IN_SECONDS = 7200;
+/**
+* Host-scoped SSRF policy for the QQ Bot token endpoint.
+*
+* `TOKEN_URL` is a hard-coded `https://bots.qq.com/...` constant, so this
+* relaxation only ever applies to that single host. Fake-IP proxy stacks
+* (sing-box, Clash, Surge, WSL2 DNS, etc.) routinely map `bots.qq.com` into
+* the RFC 2544 benchmark range `198.18.0.0/15`, which the default SSRF
+* guard blocks. We mirror the existing media-path pattern
+* (`QQBOT_MEDIA_SSRF_POLICY` in `../utils/file-utils.ts`) so the relaxation
+* stays narrowly host-scoped instead of weakening the global default.
+*
+* See https://github.com/openclaw/openclaw/issues/88984.
+*/
+const QQBOT_TOKEN_SSRF_POLICY = {
+	hostnameAllowlist: ["bots.qq.com"],
+	allowRfc2544BenchmarkRange: true
+};
 function resolveTokenExpiresInSeconds(value) {
 	const parsed = parseStrictPositiveInteger(value);
 	if (parsed !== void 0) return parsed;
@@ -1141,6 +1158,7 @@ var TokenManager = class {
 				url: TOKEN_URL,
 				auditContext: "qqbot-token",
 				capture: false,
+				policy: QQBOT_TOKEN_SSRF_POLICY,
 				init: {
 					method: "POST",
 					headers: {
@@ -2112,7 +2130,7 @@ function supportsRichMedia(targetType) {
 }
 //#endregion
 //#region extensions/qqbot/src/bridge/runtime.ts
-const { setRuntime: _setRuntime, getRuntime: getQQBotRuntime } = createPluginRuntimeStore({
+const { setRuntime: _setRuntime, clearRuntime: resetQQBotRuntimeForTest, getRuntime: getQQBotRuntime } = createPluginRuntimeStore({
 	pluginId: "qqbot",
 	errorMessage: "QQBot runtime not initialized"
 });

package/dist/runtime-api.js

@@ -1,2 +1,2 @@
-import { r as setQQBotRuntime, t as getQQBotRuntime } from "./runtime-CwW75z2d.js";
+import { r as setQQBotRuntime, t as getQQBotRuntime } from "./runtime-BSgtMZ6G.js";
 export { getQQBotRuntime, setQQBotRuntime };

package/npm-shrinkwrap.json

@@ -1,12 +1,12 @@
 {
   "name": "@openclaw/qqbot",
-  "version": "2026.5.31-beta.4",
+  "version": "2026.6.1-beta.2",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@openclaw/qqbot",
-      "version": "2026.5.31-beta.4",
+      "version": "2026.6.1-beta.2",
       "dependencies": {
         "@tencent-connect/qqbot-connector": "1.1.0",
         "mpg123-decoder": "1.0.3",
@@ -15,7 +15,7 @@
         "zod": "4.4.3"
       },
       "peerDependencies": {
-        "openclaw": ">=2026.5.31-beta.4"
+        "openclaw": ">=2026.6.1-beta.2"
       },
       "peerDependenciesMeta": {
         "openclaw": {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@openclaw/qqbot",
-  "version": "2026.5.31-beta.4",
+  "version": "2026.6.1-beta.2",
   "private": false,
   "description": "OpenClaw QQ Bot channel plugin for group and direct-message workflows.",
   "repository": {
@@ -16,7 +16,7 @@
     "zod": "4.4.3"
   },
   "peerDependencies": {
-    "openclaw": ">=2026.5.31-beta.4"
+    "openclaw": ">=2026.6.1-beta.2"
   },
   "peerDependenciesMeta": {
     "openclaw": {
@@ -45,10 +45,10 @@
       "minHostVersion": ">=2026.4.10"
     },
     "compat": {
-      "pluginApi": ">=2026.5.31-beta.4"
+      "pluginApi": ">=2026.6.1-beta.2"
     },
     "build": {
-      "openclawVersion": "2026.5.31-beta.4"
+      "openclawVersion": "2026.6.1-beta.2"
     },
     "release": {
       "publishToClawHub": true,