@openclaw/qqbot 2026.5.7 → 2026.5.10-beta.1

package/dist/{handler-runtime-Bqm6N0WG.js → handler-runtime-C9SrM2gR.js}

@@ -1,8 +1,8 @@
-import { l as ensurePlatformAdapter, u as getBridgeLogger } from "./resolve-D_06fV6-.js";
+import { l as ensurePlatformAdapter, u as getBridgeLogger } from "./resolve-Cm33TWZp.js";
 import { a as resolveApprovalTarget, n as buildExecApprovalText, r as buildPluginApprovalText, t as buildApprovalKeyboard } from "./approval-cg0SVahb.js";
-import { a as resolveQQBotAccount } from "./config-D6545NkC.js";
-import { a as resolveQQBotExecApprovalConfig, i as matchesQQBotApprovalAccount, o as shouldHandleQQBotExecApprovalRequest, r as isQQBotExecApprovalClientEnabled } from "./exec-approvals-COUsM6wZ.js";
-import { c as getMessageApi, t as accountToCreds } from "./sender-p-B14eLG.js";
+import { a as resolveQQBotAccount } from "./config-BNAanXEH.js";
+import { a as resolveQQBotExecApprovalConfig, i as matchesQQBotApprovalAccount, o as shouldHandleQQBotExecApprovalRequest, r as isQQBotExecApprovalClientEnabled } from "./exec-approvals-DgO1msIB.js";
+import { c as getMessageApi, t as accountToCreds } from "./sender-C-TmIFow.js";
 import { resolveApprovalRequestSessionConversation } from "openclaw/plugin-sdk/approval-native-runtime";
 import { createChannelApprovalNativeRuntimeAdapter } from "openclaw/plugin-sdk/approval-handler-runtime";
 //#region extensions/qqbot/src/bridge/approval/handler-runtime.ts

package/dist/{outbound-BJfhwrPg.js → outbound-DL154TS6.js}

@@ -1,8 +1,9 @@
-import { i as normalizeOptionalString, n as normalizeLowercaseStringOrEmpty, s as sanitizeFileName } from "./string-normalize-Ci6NM5DE.js";
-import { A as fileExistsAsync, C as debugLog, D as UPLOAD_PREPARE_FALLBACK_CODE, F as readFileAsync, L as formatErrorMessage, M as getFileTypeName, N as getImageMimeType, O as checkFileSize, P as getMaxUploadSize, S as debugError, T as UploadDailyLimitExceededError, g as sendText$1, h as sendMedia$1, j as formatFileSize, k as downloadFile, t as accountToCreds, u as initApiConfig, w as debugWarn } from "./sender-p-B14eLG.js";
-import { c as getQQBotMediaDir, d as isLocalPath, m as resolveQQBotPayloadLocalFilePath, o as getQQBotDataDir, p as normalizePath, r as parseTarget$1 } from "./target-parser-Y0prnrXD.js";
-import fs from "node:fs";
+import { i as normalizeOptionalString, n as normalizeLowercaseStringOrEmpty, s as sanitizeFileName } from "./string-normalize-BzzzPOeb.js";
+import { A as fileExistsAsync, C as debugWarn, E as UPLOAD_PREPARE_FALLBACK_CODE, F as readFileAsync, L as formatErrorMessage, M as getFileTypeName, N as getImageMimeType, O as checkFileSize, P as getMaxUploadSize, S as debugLog, g as sendText$1, h as sendMedia$1, j as formatFileSize, k as downloadFile, t as accountToCreds, u as initApiConfig, w as UploadDailyLimitExceededError, x as debugError } from "./sender-C-TmIFow.js";
+import { c as getQQBotMediaDir, d as isLocalPath, m as resolveQQBotPayloadLocalFilePath, o as getQQBotDataDir, p as normalizePath, r as parseTarget$1 } from "./target-parser-CTNFSKb1.js";
+import { pathExistsSync, resolveLocalPathFromRootsSync } from "openclaw/plugin-sdk/security-runtime";
 import path from "node:path";
+import { getFileExtension } from "openclaw/plugin-sdk/media-mime";
 //#region \0rolldown/runtime.js
 var __defProp = Object.defineProperty;
 var __exportAll = (all, no_symbols) => {
@@ -239,53 +240,22 @@ const qqBotMediaKindLabel = {
 function isHttpOrDataSource(pathValue) {
 	return pathValue.startsWith("http://") || pathValue.startsWith("https://") || pathValue.startsWith("data:");
 }
-function isPathWithinRoot(candidate, root) {
-	const relative = path.relative(root, candidate);
-	return relative === "" || !relative.startsWith("..") && !path.isAbsolute(relative);
-}
 function resolveMissingPathWithinMediaRoot(normalizedPath) {
 	const resolvedCandidate = path.resolve(normalizedPath);
-	if (fs.existsSync(resolvedCandidate)) return null;
-	const allowedRoot = path.resolve(getQQBotMediaDir());
-	let canonicalAllowedRoot;
-	try {
-		canonicalAllowedRoot = fs.realpathSync(allowedRoot);
-	} catch {
-		return null;
-	}
-	const missingSegments = [];
-	let cursor = resolvedCandidate;
-	while (!fs.existsSync(cursor)) {
-		const parent = path.dirname(cursor);
-		if (parent === cursor) break;
-		missingSegments.unshift(path.basename(cursor));
-		cursor = parent;
-	}
-	if (!fs.existsSync(cursor)) return null;
-	let canonicalCursor;
-	try {
-		canonicalCursor = fs.realpathSync(cursor);
-	} catch {
-		return null;
-	}
-	const canonicalCandidate = missingSegments.length > 0 ? path.join(canonicalCursor, ...missingSegments) : canonicalCursor;
-	return isPathWithinRoot(canonicalCandidate, canonicalAllowedRoot) ? canonicalCandidate : null;
+	if (pathExistsSync(resolvedCandidate)) return null;
+	return resolveLocalPathFromRootsSync({
+		filePath: resolvedCandidate,
+		roots: [getQQBotMediaDir()],
+		label: "QQ Bot media storage",
+		allowMissing: true
+	})?.path ?? null;
 }
 function resolveExistingPathWithinRoots(normalizedPath, allowedRoots) {
-	const resolvedCandidate = path.resolve(normalizedPath);
-	if (!fs.existsSync(resolvedCandidate)) return null;
-	let canonicalCandidate;
-	try {
-		canonicalCandidate = fs.realpathSync(resolvedCandidate);
-	} catch {
-		return null;
-	}
-	for (const root of allowedRoots) {
-		const resolvedRoot = path.resolve(root);
-		const canonicalRoot = fs.existsSync(resolvedRoot) ? fs.realpathSync(resolvedRoot) : resolvedRoot;
-		if (isPathWithinRoot(canonicalCandidate, canonicalRoot)) return canonicalCandidate;
-	}
-	return null;
+	return resolveLocalPathFromRootsSync({
+		filePath: normalizedPath,
+		roots: allowedRoots,
+		label: "QQ Bot local roots"
+	})?.path ?? null;
 }
 function resolveOutboundMediaPath(rawPath, mediaKind, options = {}) {
 	const normalizedPath = normalizePath(rawPath);
@@ -1017,24 +987,15 @@ const VIDEO_EXTENSIONS = new Set([
 	".flv",
 	".wmv"
 ]);
-/**
-* Extract a lowercase file extension from a path or URL, ignoring query and hash.
-*/
-function getCleanExtension(filePath) {
-	const cleanPath = filePath.split("?")[0].split("#")[0];
-	const lastDot = cleanPath.lastIndexOf(".");
-	if (lastDot < 0) return "";
-	return cleanPath.slice(lastDot).toLowerCase();
-}
 /** Check whether a file is an image using MIME first and extension as fallback. */
 function isImageFile$1(filePath, mimeType) {
 	if (mimeType?.startsWith("image/")) return true;
-	return IMAGE_EXTENSIONS.has(getCleanExtension(filePath));
+	return IMAGE_EXTENSIONS.has(getFileExtension(filePath) ?? "");
 }
 /** Check whether a file is a video using MIME first and extension as fallback. */
 function isVideoFile$1(filePath, mimeType) {
 	if (mimeType?.startsWith("video/")) return true;
-	return VIDEO_EXTENSIONS.has(getCleanExtension(filePath));
+	return VIDEO_EXTENSIONS.has(getFileExtension(filePath) ?? "");
 }
 //#endregion
 //#region extensions/qqbot/src/engine/messaging/outbound.ts

package/dist/{request-context-Cjwx7OwW.js → request-context-Bn63CUkr.js}

@@ -1,7 +1,8 @@
-import { C as debugLog } from "./sender-p-B14eLG.js";
-import { a as getHomeDir, f as isWindows, l as getQQBotMediaPath, o as getQQBotDataDir } from "./target-parser-Y0prnrXD.js";
+import { S as debugLog } from "./sender-C-TmIFow.js";
+import { a as getHomeDir, f as isWindows, l as getQQBotMediaPath, o as getQQBotDataDir } from "./target-parser-CTNFSKb1.js";
 import fs from "node:fs";
 import path from "node:path";
+import { loadJsonFile } from "openclaw/plugin-sdk/json-store";
 import { AsyncLocalStorage } from "node:async_hooks";
 //#region extensions/qqbot/src/engine/commands/builtin/state.ts
 let _resolveVersion = () => "unknown";
@@ -427,9 +428,7 @@ function getConfiguredLogFiles() {
 		"clawdbot",
 		"moltbot"
 	]) try {
-		const cfgPath = path.join(homeDir, `.${cli}`, `${cli}.json`);
-		if (!fs.existsSync(cfgPath)) continue;
-		const logFile = JSON.parse(fs.readFileSync(cfgPath, "utf8"))?.logging?.file;
+		const logFile = loadJsonFile(path.join(homeDir, `.${cli}`, `${cli}.json`))?.logging?.file;
 		if (logFile && typeof logFile === "string") files.push(path.resolve(logFile));
 		break;
 	} catch {}
@@ -501,6 +500,27 @@ function collectCandidateLogDirs() {
 	]) pushDir(path.join(tmpRoot, name));
 	return Array.from(dirs);
 }
+function addCollisionSuffix(filePath, suffix) {
+	const ext = path.extname(filePath);
+	const baseName = path.basename(filePath, ext);
+	return path.join(path.dirname(filePath), `${baseName}-${suffix}${ext}`);
+}
+function writeNewTextFileSync(filePath, contents) {
+	for (let suffix = 1; suffix <= 100; suffix++) {
+		const candidate = suffix === 1 ? filePath : addCollisionSuffix(filePath, suffix);
+		try {
+			fs.writeFileSync(candidate, contents, {
+				encoding: "utf8",
+				flag: "wx"
+			});
+			return candidate;
+		} catch (error) {
+			if (typeof error === "object" && error && "code" in error && error.code === "EEXIST") continue;
+			throw error;
+		}
+	}
+	throw new Error(`Could not find an unused log export filename near ${filePath}`);
+}
 function collectRecentLogFiles(logDirs) {
 	const candidates = [];
 	const dedupe = /* @__PURE__ */ new Set();
@@ -626,8 +646,7 @@ function buildBotLogsResult() {
 	if (lines.length === 0) return `⚠️ 找到了日志文件，但无法读取。请检查文件权限。`;
 	const tmpDir = getQQBotDataDir("downloads");
 	const timestamp = (/* @__PURE__ */ new Date()).toISOString().replace(/[:.]/g, "-").slice(0, 19);
-	const tmpFile = path.join(tmpDir, `bot-logs-${timestamp}.txt`);
-	fs.writeFileSync(tmpFile, lines.join("\n"), "utf8");
+	const tmpFile = writeNewTextFileSync(path.join(tmpDir, `bot-logs-${timestamp}.txt`), lines.join("\n"));
 	const fileCount = recentFiles.length;
 	const topSources = Array.from(new Set(recentFiles.map((item) => item.sourceDir))).slice(0, 3);
 	let summaryText = `共 ${fileCount} 个日志文件，包含 ${totalIncluded} 行内容`;

package/dist/{resolve-D_06fV6-.js → resolve-Cm33TWZp.js}

@@ -1,4 +1,4 @@
-import { a as normalizeStringifiedOptionalString, c as getPlatformAdapter, d as registerPlatformAdapterFactory, l as hasPlatformAdapter, o as readStringField, r as normalizeOptionalLowercaseString, t as asOptionalObjectRecord, u as registerPlatformAdapter } from "./string-normalize-Ci6NM5DE.js";
+import { a as normalizeStringifiedOptionalString, c as getPlatformAdapter, d as registerPlatformAdapterFactory, l as hasPlatformAdapter, o as readStringField, r as normalizeOptionalLowercaseString, t as asOptionalObjectRecord, u as registerPlatformAdapter } from "./string-normalize-BzzzPOeb.js";
 import { hasConfiguredSecretInput, normalizeResolvedSecretInputString, normalizeSecretInputString } from "openclaw/plugin-sdk/secret-input";
 import { resolvePreferredOpenClawTmpDir } from "openclaw/plugin-sdk/temp-path";
 //#region extensions/qqbot/src/bridge/logger.ts

package/dist/{runtime-BJAS3eXW.js → runtime-CHGblcVc.js}

@@ -1,4 +1,4 @@
-import { _ as setOpenClawVersion } from "./sender-p-B14eLG.js";
+import { _ as setOpenClawVersion } from "./sender-C-TmIFow.js";
 import { createPluginRuntimeStore } from "openclaw/plugin-sdk/runtime-store";
 //#region extensions/qqbot/src/bridge/runtime.ts
 const { setRuntime: _setRuntime, getRuntime: getQQBotRuntime } = createPluginRuntimeStore({

package/dist/runtime-api.js

@@ -1,2 +1,2 @@
-import { r as setQQBotRuntime, t as getQQBotRuntime } from "./runtime-BJAS3eXW.js";
+import { r as setQQBotRuntime, t as getQQBotRuntime } from "./runtime-CHGblcVc.js";
 export { getQQBotRuntime, setQQBotRuntime };