@openclaw/qqbot 2026.5.7 → 2026.5.9-beta.1

package/dist/api.js

@@ -1,9 +1,9 @@
-import { C as recordMessageReply, E as setOutboundAudioPort, S as getMessageReplyStats, T as OUTBOUND_ERROR_CODES, _ as sendVoice, a as sendText, b as checkMessageReplyLimit, d as buildMediaTarget, f as parseTarget, g as sendVideoMsg, h as sendPhoto, i as sendProactiveMessage, m as sendDocument, n as sendCronMessage, p as resolveOutboundMediaPath, r as sendMedia, v as resolveUserFacingMediaError, w as DEFAULT_MEDIA_SEND_ERROR, x as getMessageReplyConfig, y as MESSAGE_REPLY_LIMIT } from "./outbound-BJfhwrPg.js";
+import { C as recordMessageReply, E as setOutboundAudioPort, S as getMessageReplyStats, T as OUTBOUND_ERROR_CODES, _ as sendVoice, a as sendText, b as checkMessageReplyLimit, d as buildMediaTarget, f as parseTarget, g as sendVideoMsg, h as sendPhoto, i as sendProactiveMessage, m as sendDocument, n as sendCronMessage, p as resolveOutboundMediaPath, r as sendMedia, v as resolveUserFacingMediaError, w as DEFAULT_MEDIA_SEND_ERROR, x as getMessageReplyConfig, y as MESSAGE_REPLY_LIMIT } from "./outbound-CqRmSFJZ.js";
 import { a as resolveQQBotAccount, i as resolveDefaultQQBotAccountId, n as applyQQBotAccountConfig, r as listQQBotAccountIds, t as DEFAULT_ACCOUNT_ID } from "./config-D6545NkC.js";
-import { t as qqbotPlugin } from "./channel-CC2YO9fj.js";
-import { C as debugLog, L as formatErrorMessage, S as debugError, o as getAccessToken } from "./sender-p-B14eLG.js";
-import { t as qqbotSetupPlugin } from "./channel.setup-ByCRAe5H.js";
-import { r as getFrameworkCommands, t as getRequestContext } from "./request-context-Cjwx7OwW.js";
+import { t as qqbotPlugin } from "./channel-nsJeL4qp.js";
+import { L as formatErrorMessage, S as debugLog, o as getAccessToken, x as debugError } from "./sender-CgdXGY2H.js";
+import { t as qqbotSetupPlugin } from "./channel.setup-DS8qSqfn.js";
+import { r as getFrameworkCommands, t as getRequestContext } from "./request-context-DVsN666m.js";
 import { callGatewayTool } from "openclaw/plugin-sdk/agent-harness-runtime";
 //#region extensions/qqbot/src/engine/tools/channel-api.ts
 /**

package/dist/{channel-CC2YO9fj.js → channel-nsJeL4qp.js}

@@ -3,17 +3,20 @@ import { l as ensurePlatformAdapter, u as getBridgeLogger } from "./resolve-D_06
 import { a as resolveApprovalTarget } from "./approval-cg0SVahb.js";
 import { a as resolveQQBotAccount, n as applyQQBotAccountConfig, t as DEFAULT_ACCOUNT_ID$1 } from "./config-D6545NkC.js";
 import { a as resolveQQBotExecApprovalConfig, i as matchesQQBotApprovalAccount, n as isQQBotExecApprovalAuthorizedSender, o as shouldHandleQQBotExecApprovalRequest, r as isQQBotExecApprovalClientEnabled, t as isQQBotExecApprovalApprover } from "./exec-approvals-COUsM6wZ.js";
-import { a as qqbotSetupAdapterShared, i as qqbotMeta, n as qqbotSetupWizard, r as qqbotConfigAdapter, t as qqbotChannelConfigSchema } from "./config-schema-DFcjQw73.js";
+import { a as qqbotSetupAdapterShared, i as qqbotMeta, n as qqbotSetupWizard, r as qqbotConfigAdapter, t as qqbotChannelConfigSchema } from "./config-schema-BUrvFkQH.js";
 import { n as writeOpenClawConfigThroughRuntime, t as toGatewayAccount } from "./narrowing-BoieBTIU.js";
-import { t as getQQBotRuntime } from "./runtime-BJAS3eXW.js";
-import { n as normalizeTarget, s as getQQBotDataPath, t as looksLikeQQBotTarget } from "./target-parser-Y0prnrXD.js";
+import { t as getQQBotRuntime } from "./runtime-C3Qpr4Ph.js";
+import { n as normalizeTarget, s as getQQBotDataPath, t as looksLikeQQBotTarget } from "./target-parser-DQ6J3Qe-.js";
 import { getExecApprovalReplyMetadata } from "openclaw/plugin-sdk/approval-runtime";
+import { createMessageReceiptFromOutboundResults, defineChannelMessageAdapter } from "openclaw/plugin-sdk/channel-message";
 import { createChannelApprovalCapability } from "openclaw/plugin-sdk/approval-delivery-runtime";
 import { createLazyChannelApprovalNativeRuntimeAdapter } from "openclaw/plugin-sdk/approval-handler-adapter-runtime";
 import { resolveApprovalRequestSessionConversation } from "openclaw/plugin-sdk/approval-native-runtime";
 import { normalizeOptionalString } from "openclaw/plugin-sdk/text-runtime";
 import fs from "node:fs";
+import { replaceFileAtomicSync } from "openclaw/plugin-sdk/security-runtime";
 import path from "node:path";
+import { loadJsonFile } from "openclaw/plugin-sdk/json-store";
 //#region extensions/qqbot/src/bridge/approval/capability.ts
 /**
 * QQ Bot Approval Capability — entry point.
@@ -153,7 +156,7 @@ function createQQBotApprovalCapability() {
 			},
 			load: async () => {
 				ensurePlatformAdapter();
-				return (await import("./handler-runtime-Bqm6N0WG.js")).qqbotApprovalNativeRuntime;
+				return (await import("./handler-runtime-DraqODp_.js")).qqbotApprovalNativeRuntime;
 			}
 		})
 	});
@@ -229,16 +232,17 @@ function saveCredentialBackup(accountId, appId, clientSecret) {
 	if (!appId || !clientSecret) return;
 	try {
 		const backupPath = getCredentialBackupFile(accountId);
-		fs.mkdirSync(path.dirname(backupPath), { recursive: true });
 		const data = {
 			accountId,
 			appId,
 			clientSecret,
 			savedAt: (/* @__PURE__ */ new Date()).toISOString()
 		};
-		const tmpPath = `${backupPath}.tmp`;
-		fs.writeFileSync(tmpPath, `${JSON.stringify(data, null, 2)}\n`, "utf8");
-		fs.renameSync(tmpPath, backupPath);
+		replaceFileAtomicSync({
+			filePath: backupPath,
+			content: `${JSON.stringify(data, null, 2)}\n`,
+			tempPrefix: ".qqbot-credential-backup"
+		});
 	} catch {}
 }
 /**
@@ -251,23 +255,20 @@ function saveCredentialBackup(accountId, appId, clientSecret) {
 function loadCredentialBackup(accountId) {
 	try {
 		if (accountId) {
-			const newPath = getCredentialBackupFile(accountId);
-			if (fs.existsSync(newPath)) {
-				const data = JSON.parse(fs.readFileSync(newPath, "utf8"));
-				if (data?.appId && data.clientSecret) return data;
-			}
+			const data = loadJsonFile(getCredentialBackupFile(accountId));
+			if (data?.appId && data.clientSecret) return data;
 		}
 		const legacy = getLegacyCredentialBackupFile();
-		if (fs.existsSync(legacy)) {
-			const data = JSON.parse(fs.readFileSync(legacy, "utf8"));
+		const data = loadJsonFile(legacy);
+		if (data) {
 			if (!data?.appId || !data?.clientSecret) return null;
 			if (accountId && data.accountId !== accountId) return null;
 			if (data.accountId) try {
-				const backupPath = getCredentialBackupFile(data.accountId);
-				fs.mkdirSync(path.dirname(backupPath), { recursive: true });
-				const tmpPath = `${backupPath}.tmp`;
-				fs.writeFileSync(tmpPath, `${JSON.stringify(data, null, 2)}\n`, "utf8");
-				fs.renameSync(tmpPath, backupPath);
+				replaceFileAtomicSync({
+					filePath: getCredentialBackupFile(data.accountId),
+					content: `${JSON.stringify(data, null, 2)}\n`,
+					tempPrefix: ".qqbot-credential-backup"
+				});
 				fs.unlinkSync(legacy);
 			} catch {}
 			return data;
@@ -342,11 +343,99 @@ function clearAccountCredentials(cfg, accountId) {
 }
 //#endregion
 //#region extensions/qqbot/src/channel.ts
-let _gatewayModulePromise;
+let gatewayModulePromise;
 function loadGatewayModule() {
-	_gatewayModulePromise ??= import("./gateway-Cs3-_on9.js");
-	return _gatewayModulePromise;
+	gatewayModulePromise ??= import("./gateway-Dcs6Ip8b.js");
+	return gatewayModulePromise;
+}
+function createQQBotSendReceipt(params) {
+	const messageId = params.messageId?.trim();
+	return createMessageReceiptFromOutboundResults({
+		results: messageId ? [{
+			channel: "qqbot",
+			messageId,
+			conversationId: params.target
+		}] : [],
+		threadId: params.target,
+		kind: params.kind
+	});
+}
+async function sendQQBotText(params) {
+	await loadGatewayModule();
+	const account = resolveQQBotAccount(params.cfg, params.accountId);
+	const { sendText } = await import("./outbound-CqRmSFJZ.js").then((n) => n.t);
+	const result = await sendText({
+		to: params.to,
+		text: params.text,
+		accountId: params.accountId,
+		replyToId: params.replyToId,
+		account: toGatewayAccount(account)
+	});
+	return {
+		channel: "qqbot",
+		messageId: result.messageId ?? "",
+		receipt: createQQBotSendReceipt({
+			messageId: result.messageId,
+			target: params.to,
+			kind: "text"
+		}),
+		meta: result.error ? { error: result.error } : void 0
+	};
+}
+async function sendQQBotMedia(params) {
+	await loadGatewayModule();
+	const account = resolveQQBotAccount(params.cfg, params.accountId);
+	const { sendMedia } = await import("./outbound-CqRmSFJZ.js").then((n) => n.t);
+	const result = await sendMedia({
+		to: params.to,
+		text: params.text ?? "",
+		mediaUrl: params.mediaUrl ?? "",
+		accountId: params.accountId,
+		replyToId: params.replyToId,
+		account: toGatewayAccount(account)
+	});
+	return {
+		channel: "qqbot",
+		messageId: result.messageId ?? "",
+		receipt: createQQBotSendReceipt({
+			messageId: result.messageId,
+			target: params.to,
+			kind: "media"
+		}),
+		meta: result.error ? { error: result.error } : void 0
+	};
+}
+function toQQBotMessageSendResult(result) {
+	return {
+		messageId: result.messageId,
+		receipt: result.receipt
+	};
 }
+const qqbotMessageAdapter = defineChannelMessageAdapter({
+	id: "qqbot",
+	durableFinal: { capabilities: {
+		text: true,
+		media: true,
+		replyTo: true
+	} },
+	send: {
+		text: async (ctx) => toQQBotMessageSendResult(await sendQQBotText({
+			cfg: ctx.cfg,
+			to: ctx.to,
+			text: ctx.text,
+			accountId: ctx.accountId,
+			replyToId: ctx.replyToId
+		})),
+		media: async (ctx) => toQQBotMessageSendResult(await sendQQBotMedia({
+			cfg: ctx.cfg,
+			to: ctx.to,
+			text: ctx.text,
+			mediaUrl: ctx.mediaUrl,
+			accountId: ctx.accountId,
+			replyToId: ctx.replyToId
+		}))
+	}
+});
 const EXEC_APPROVAL_COMMAND_RE = /\/approve(?:@[^\s]+)?\s+[A-Za-z0-9][A-Za-z0-9._:-]*\s+(?:allow-once|allow-always|always|deny)\b/i;
 function persistAccountCredentialSnapshot(account) {
 	if (account.appId && account.clientSecret) saveCredentialBackup(account.accountId, account.appId, account.clientSecret);
@@ -389,6 +478,7 @@ const qqbotPlugin = {
 	},
 	setup: { ...qqbotSetupAdapterShared },
 	approvalCapability: getQQBotApprovalCapability(),
+	message: qqbotMessageAdapter,
 	messaging: {
 		targetPrefixes: ["qqbot"],
 		/** Normalize common QQ Bot target formats into the canonical qqbot:... form. */
@@ -410,41 +500,21 @@ const qqbotPlugin = {
 			payload,
 			hint
 		}),
-		sendText: async ({ to, text, accountId, replyToId, cfg }) => {
-			await loadGatewayModule();
-			const account = resolveQQBotAccount(cfg, accountId);
-			const { sendText } = await import("./outbound-BJfhwrPg.js").then((n) => n.t);
-			const result = await sendText({
-				to,
-				text,
-				accountId,
-				replyToId,
-				account: toGatewayAccount(account)
-			});
-			return {
-				channel: "qqbot",
-				messageId: result.messageId ?? "",
-				meta: result.error ? { error: result.error } : void 0
-			};
-		},
-		sendMedia: async ({ to, text, mediaUrl, accountId, replyToId, cfg }) => {
-			await loadGatewayModule();
-			const account = resolveQQBotAccount(cfg, accountId);
-			const { sendMedia } = await import("./outbound-BJfhwrPg.js").then((n) => n.t);
-			const result = await sendMedia({
-				to,
-				text: text ?? "",
-				mediaUrl: mediaUrl ?? "",
-				accountId,
-				replyToId,
-				account: toGatewayAccount(account)
-			});
-			return {
-				channel: "qqbot",
-				messageId: result.messageId ?? "",
-				meta: result.error ? { error: result.error } : void 0
-			};
-		}
+		sendText: async ({ to, text, accountId, replyToId, cfg }) => await sendQQBotText({
+			cfg,
+			to,
+			text,
+			accountId,
+			replyToId
+		}),
+		sendMedia: async ({ to, text, mediaUrl, accountId, replyToId, cfg }) => await sendQQBotMedia({
+			cfg,
+			to,
+			text,
+			mediaUrl,
+			accountId,
+			replyToId
+		})
 	},
 	gateway: {
 		startAccount: async (ctx) => {

package/dist/channel-plugin-api.js

@@ -1,2 +1,2 @@
-import { t as qqbotPlugin } from "./channel-CC2YO9fj.js";
+import { t as qqbotPlugin } from "./channel-nsJeL4qp.js";
 export { qqbotPlugin };

package/dist/{channel.setup-ByCRAe5H.js → channel.setup-DS8qSqfn.js}

@@ -1,5 +1,5 @@
 import "./resolve-D_06fV6-.js";
-import { a as qqbotSetupAdapterShared, i as qqbotMeta, n as qqbotSetupWizard, r as qqbotConfigAdapter, t as qqbotChannelConfigSchema } from "./config-schema-DFcjQw73.js";
+import { a as qqbotSetupAdapterShared, i as qqbotMeta, n as qqbotSetupWizard, r as qqbotConfigAdapter, t as qqbotChannelConfigSchema } from "./config-schema-BUrvFkQH.js";
 //#region extensions/qqbot/src/channel.setup.ts
 /**
 * Setup-only QQBot plugin — lightweight subset used during `openclaw onboard`

package/dist/{config-schema-DFcjQw73.js → config-schema-BUrvFkQH.js}

@@ -6,7 +6,7 @@ import { applyAccountNameToChannelSection, deleteAccountFromConfigSection, setAc
 import { DEFAULT_ACCOUNT_ID, createStandardChannelSetupStatus, setSetupChannelEnabled } from "openclaw/plugin-sdk/setup";
 import { formatDocsLink } from "openclaw/plugin-sdk/setup-tools";
 import { AllowFromListSchema, buildChannelConfigSchema } from "openclaw/plugin-sdk/channel-config-schema";
-import { z } from "zod";
+import { z } from "openclaw/plugin-sdk/zod";
 //#region extensions/qqbot/src/engine/config/setup-logic.ts
 /**
 * QQBot setup business logic (pure layer).

package/dist/{gateway-Cs3-_on9.js → gateway-Dcs6Ip8b.js}

@@ -1,20 +1,24 @@
-import { E as setOutboundAudioPort, _ as sendVoice, c as isMediaPayload, g as sendVideoMsg, h as sendPhoto, l as parseQQBotPayload, m as sendDocument, o as encodePayloadForCron, r as sendMedia, s as isCronReminderPayload, u as normalizeMediaTags, v as resolveUserFacingMediaError, w as DEFAULT_MEDIA_SEND_ERROR } from "./outbound-BJfhwrPg.js";
+import { E as setOutboundAudioPort, _ as sendVoice, c as isMediaPayload, g as sendVideoMsg, h as sendPhoto, l as parseQQBotPayload, m as sendDocument, o as encodePayloadForCron, r as sendMedia, s as isCronReminderPayload, u as normalizeMediaTags, v as resolveUserFacingMediaError, w as DEFAULT_MEDIA_SEND_ERROR } from "./outbound-CqRmSFJZ.js";
 import { c as getPlatformAdapter, i as normalizeOptionalString, n as normalizeLowercaseStringOrEmpty, o as readStringField, s as sanitizeFileName, t as asOptionalObjectRecord } from "./string-normalize-Ci6NM5DE.js";
 import { d as setBridgeLogger, l as ensurePlatformAdapter, s as resolveAccountBase } from "./resolve-D_06fV6-.js";
 import { i as parseApprovalButtonData } from "./approval-cg0SVahb.js";
 import { t as toGatewayAccount } from "./narrowing-BoieBTIU.js";
-import { B as StreamInputState, C as debugLog, E as getNextMsgSeq, I as formatDuration, L as formatErrorMessage, N as getImageMimeType, P as getMaxUploadSize, R as StreamContentType, S as debugError, a as createRawInputNotifyFn, b as withTokenRetry, c as getMessageApi, d as initSender, f as onMessageSent, g as sendText, h as sendMedia$1, i as clearTokenCache, j as formatFileSize, k as downloadFile, l as getPluginUserAgent, m as sendInputNotify, n as acknowledgeInteraction, o as getAccessToken, p as registerAccount, r as buildDeliveryTarget, s as getGatewayUrl, t as accountToCreds, u as initApiConfig, v as startBackgroundTokenRefresh, w as debugWarn, x as openLocalFile, y as stopBackgroundTokenRefresh, z as StreamInputMode } from "./sender-p-B14eLG.js";
-import { n as getQQBotRuntimeForEngine, t as getQQBotRuntime } from "./runtime-BJAS3eXW.js";
-import { a as getHomeDir, c as getQQBotMediaDir, d as isLocalPath, f as isWindows, i as checkSilkWasmAvailable, m as resolveQQBotPayloadLocalFilePath, o as getQQBotDataDir, p as normalizePath$1, s as getQQBotDataPath, u as getTempDir } from "./target-parser-Y0prnrXD.js";
-import { a as getPluginVersion, i as getFrameworkVersion, n as runWithRequestContext, o as initCommands, s as matchSlashCommand } from "./request-context-Cjwx7OwW.js";
+import { B as StreamInputState, C as debugWarn, D as openLocalFile, I as formatDuration, L as formatErrorMessage, N as getImageMimeType, P as getMaxUploadSize, R as StreamContentType, S as debugLog, T as getNextMsgSeq, a as createRawInputNotifyFn, b as withTokenRetry, c as getMessageApi, d as initSender, f as onMessageSent, g as sendText, h as sendMedia$1, i as clearTokenCache, j as formatFileSize, k as downloadFile, l as getPluginUserAgent, m as sendInputNotify, n as acknowledgeInteraction, o as getAccessToken, p as registerAccount, r as buildDeliveryTarget, s as getGatewayUrl, t as accountToCreds, u as initApiConfig, v as startBackgroundTokenRefresh, x as debugError, y as stopBackgroundTokenRefresh, z as StreamInputMode } from "./sender-CgdXGY2H.js";
+import { n as getQQBotRuntimeForEngine, t as getQQBotRuntime } from "./runtime-C3Qpr4Ph.js";
+import { a as getHomeDir, c as getQQBotMediaDir, d as isLocalPath, f as isWindows, i as checkSilkWasmAvailable, m as resolveQQBotPayloadLocalFilePath, o as getQQBotDataDir, p as normalizePath$1, s as getQQBotDataPath, u as getTempDir } from "./target-parser-DQ6J3Qe-.js";
+import { a as getPluginVersion, i as getFrameworkVersion, n as runWithRequestContext, o as initCommands, s as matchSlashCommand } from "./request-context-DVsN666m.js";
 import * as fs$1 from "node:fs";
 import fs from "node:fs";
 import * as os$1 from "node:os";
 import crypto from "node:crypto";
+import { fetchWithSsrFGuard } from "openclaw/plugin-sdk/ssrf-runtime";
+import { appendRegularFileSync, privateFileStoreSync, readRegularFileSync, replaceFileAtomicSync } from "openclaw/plugin-sdk/security-runtime";
 import * as path$1 from "node:path";
 import path from "node:path";
+import { mimeTypeFromFilePath } from "openclaw/plugin-sdk/media-mime";
 import { resolveRuntimeServiceVersion } from "openclaw/plugin-sdk/cli-runtime";
 import WebSocket from "ws";
+import { resolveAmbientNodeProxyAgent } from "openclaw/plugin-sdk/extension-shared";
 import { Buffer as Buffer$1 } from "node:buffer";
 import { fileURLToPath } from "node:url";
 import { implicitMentionKindWhen, resolveInboundMentionDecision } from "openclaw/plugin-sdk/channel-mention-gating";
@@ -258,7 +262,10 @@ function ensureDir$2() {
 function appendLine(line) {
 	try {
 		ensureDir$2();
-		fs.appendFileSync(getRefIndexFile(), JSON.stringify(line) + "\n", "utf-8");
+		appendRegularFileSync({
+			filePath: getRefIndexFile(),
+			content: JSON.stringify(line) + "\n"
+		});
 		totalLinesOnDisk++;
 	} catch (err) {
 		debugError(`[ref-index-store] Failed to append: ${formatErrorMessage(err)}`);
@@ -273,7 +280,6 @@ function compactFile() {
 	try {
 		ensureDir$2();
 		const refIndexFile = getRefIndexFile();
-		const tmpPath = refIndexFile + ".tmp";
 		const lines = [];
 		for (const [key, entry] of cache) lines.push(JSON.stringify({
 			k: key,
@@ -287,8 +293,11 @@ function compactFile() {
 			},
 			t: entry._createdAt
 		}));
-		fs.writeFileSync(tmpPath, lines.join("\n") + "\n", "utf-8");
-		fs.renameSync(tmpPath, refIndexFile);
+		replaceFileAtomicSync({
+			filePath: refIndexFile,
+			content: `${lines.join("\n")}\n`,
+			tempPrefix: ".qqbot-ref-index"
+		});
 		totalLinesOnDisk = cache.size;
 		debugLog(`[ref-index-store] Compacted: ${before} lines → ${totalLinesOnDisk} lines`);
 	} catch (err) {
@@ -778,9 +787,8 @@ function loadUsersFromFile() {
 	usersCache = /* @__PURE__ */ new Map();
 	try {
 		const knownUsersFile = getKnownUsersFile();
-		if (fs.existsSync(knownUsersFile)) {
-			const data = fs.readFileSync(knownUsersFile, "utf-8");
-			const users = JSON.parse(data);
+		const users = privateFileStoreSync(path.dirname(knownUsersFile)).readJsonIfExists(path.basename(knownUsersFile));
+		if (users) {
 			for (const user of users) usersCache.set(makeUserKey(user), user);
 			debugLog(`[known-users] Loaded ${usersCache.size} users`);
 		}
@@ -801,7 +809,8 @@ function doSaveUsersToFile() {
 	if (!usersCache || !isDirty) return;
 	try {
 		ensureDir$1();
-		fs.writeFileSync(getKnownUsersFile(), JSON.stringify(Array.from(usersCache.values()), null, 2), "utf-8");
+		const filePath = getKnownUsersFile();
+		privateFileStoreSync(path.dirname(filePath)).writeJson(path.basename(filePath), Array.from(usersCache.values()));
 		isDirty = false;
 	} catch (err) {
 		debugError(`[known-users] Failed to save users: ${formatErrorMessage(err)}`);
@@ -878,13 +887,15 @@ function getCandidateSessionPaths(accountId) {
 function loadSession(accountId, expectedAppId) {
 	try {
 		let filePath = null;
-		for (const candidatePath of getCandidateSessionPaths(accountId)) if (fs.existsSync(candidatePath)) {
-			filePath = candidatePath;
-			break;
+		let state = null;
+		for (const candidatePath of getCandidateSessionPaths(accountId)) {
+			state = privateFileStoreSync(path.dirname(candidatePath)).readJsonIfExists(path.basename(candidatePath));
+			if (state) {
+				filePath = candidatePath;
+				break;
+			}
 		}
-		if (!filePath) return null;
-		const data = fs.readFileSync(filePath, "utf-8");
-		const state = JSON.parse(data);
+		if (!filePath || !state) return null;
 		const now = Date.now();
 		if (now - state.savedAt > SESSION_EXPIRE_TIME) {
 			debugLog(`[session-store] Session expired for ${accountId}, age: ${Math.round((now - state.savedAt) / 1e3)}s`);
@@ -958,7 +969,7 @@ function doSaveSession(state) {
 			...state,
 			savedAt: Date.now()
 		};
-		fs.writeFileSync(filePath, JSON.stringify(stateToSave, null, 2), "utf-8");
+		privateFileStoreSync(path.dirname(filePath)).writeJson(path.basename(filePath), stateToSave);
 		if (legacyPath !== filePath && fs.existsSync(legacyPath)) fs.unlinkSync(legacyPath);
 		debugLog(`[session-store] Saved session for ${state.accountId}: sessionId=${state.sessionId}, lastSeq=${state.lastSeq}`);
 	} catch (err) {
@@ -1740,6 +1751,15 @@ var ReconnectState = class {
 	}
 };
 //#endregion
+//#region extensions/qqbot/src/engine/gateway/ws-client.ts
+async function createQQWSClient(options) {
+	const wsAgent = await resolveAmbientNodeProxyAgent();
+	return new WebSocket(options.gatewayUrl, {
+		headers: { "User-Agent": options.userAgent },
+		...wsAgent ? { agent: wsAgent } : {}
+	});
+}
+//#endregion
 //#region extensions/qqbot/src/engine/gateway/gateway-connection.ts
 /**
 * GatewayConnection — WebSocket lifecycle, heartbeat, reconnect, and session persistence.
@@ -1852,7 +1872,10 @@ var GatewayConnection = class {
 			log?.info(`✅ Access token obtained successfully`);
 			const gatewayUrl = await getGatewayUrl(accessToken, account.appId);
 			log?.info(`Connecting to ${gatewayUrl}`);
-			const ws = new WebSocket(gatewayUrl, { headers: { "User-Agent": getPluginUserAgent() } });
+			const ws = await createQQWSClient({
+				gatewayUrl,
+				userAgent: getPluginUserAgent()
+			});
 			this.currentWs = ws;
 			const slashCtx = {
 				account,
@@ -2026,20 +2049,28 @@ async function transcribeAudio(audioPath, cfg) {
 	if (!sttCfg) return null;
 	const fileBuffer = fs$1.readFileSync(audioPath);
 	const fileName = sanitizeFileName(path.basename(audioPath));
-	const mime = fileName.endsWith(".wav") ? "audio/wav" : fileName.endsWith(".mp3") ? "audio/mpeg" : fileName.endsWith(".ogg") ? "audio/ogg" : "application/octet-stream";
+	const mime = mimeTypeFromFilePath(fileName) ?? "application/octet-stream";
 	const form = new FormData();
 	form.append("file", new Blob([fileBuffer], { type: mime }), fileName);
 	form.append("model", sttCfg.model);
-	const resp = await fetch(`${sttCfg.baseUrl}/audio/transcriptions`, {
-		method: "POST",
-		headers: { Authorization: `Bearer ${sttCfg.apiKey}` },
-		body: form
+	const { response: resp, release } = await fetchWithSsrFGuard({
+		url: `${sttCfg.baseUrl}/audio/transcriptions`,
+		auditContext: "qqbot-stt",
+		init: {
+			method: "POST",
+			headers: { Authorization: `Bearer ${sttCfg.apiKey}` },
+			body: form
+		}
 	});
-	if (!resp.ok) {
-		const detail = await resp.text().catch(() => "");
-		throw new Error(`STT failed (HTTP ${resp.status}): ${detail.slice(0, 300)}`);
+	try {
+		if (!resp.ok) {
+			const detail = await resp.text().catch(() => "");
+			throw new Error(`STT failed (HTTP ${resp.status}): ${detail.slice(0, 300)}`);
+		}
+		return normalizeOptionalString((await resp.json()).text) ?? null;
+	} finally {
+		await release();
 	}
-	return normalizeOptionalString((await resp.json()).text) ?? null;
 }
 //#endregion
 //#region extensions/qqbot/src/engine/gateway/inbound-attachments.ts
@@ -5552,8 +5583,13 @@ function stripAmrHeader(buf) {
 }
 /** Convert a SILK or AMR voice file to WAV format. */
 async function convertSilkToWav(inputPath, outputDir) {
-	if (!fs$1.existsSync(inputPath)) return null;
-	const strippedBuf = stripAmrHeader(fs$1.readFileSync(inputPath));
+	let fileBuf;
+	try {
+		fileBuf = readRegularFileSync({ filePath: inputPath }).buffer;
+	} catch {
+		return null;
+	}
+	const strippedBuf = stripAmrHeader(fileBuf);
 	const rawData = new Uint8Array(strippedBuf.buffer, strippedBuf.byteOffset, strippedBuf.byteLength);
 	const silk = await loadSilkWasm();
 	if (!silk || !silk.isSilk(rawData)) return null;
@@ -5642,8 +5678,12 @@ function normalizeFormats(formats) {
 * Attempts conversion via direct QQ-native upload → WASM decoders → null fallback chain.
 */
 async function audioFileToSilkBase64(filePath, directUploadFormats) {
-	if (!fs$1.existsSync(filePath)) return null;
-	const buf = fs$1.readFileSync(filePath);
+	let buf;
+	try {
+		buf = readRegularFileSync({ filePath }).buffer;
+	} catch {
+		return null;
+	}
 	if (buf.length === 0) {
 		debugError(`[audio-convert] file is empty: ${filePath}`);
 		return null;

package/dist/{handler-runtime-Bqm6N0WG.js → handler-runtime-DraqODp_.js}

@@ -2,7 +2,7 @@ import { l as ensurePlatformAdapter, u as getBridgeLogger } from "./resolve-D_06
 import { a as resolveApprovalTarget, n as buildExecApprovalText, r as buildPluginApprovalText, t as buildApprovalKeyboard } from "./approval-cg0SVahb.js";
 import { a as resolveQQBotAccount } from "./config-D6545NkC.js";
 import { a as resolveQQBotExecApprovalConfig, i as matchesQQBotApprovalAccount, o as shouldHandleQQBotExecApprovalRequest, r as isQQBotExecApprovalClientEnabled } from "./exec-approvals-COUsM6wZ.js";
-import { c as getMessageApi, t as accountToCreds } from "./sender-p-B14eLG.js";
+import { c as getMessageApi, t as accountToCreds } from "./sender-CgdXGY2H.js";
 import { resolveApprovalRequestSessionConversation } from "openclaw/plugin-sdk/approval-native-runtime";
 import { createChannelApprovalNativeRuntimeAdapter } from "openclaw/plugin-sdk/approval-handler-runtime";
 //#region extensions/qqbot/src/bridge/approval/handler-runtime.ts

package/dist/{outbound-BJfhwrPg.js → outbound-CqRmSFJZ.js}

@@ -1,8 +1,9 @@
 import { i as normalizeOptionalString, n as normalizeLowercaseStringOrEmpty, s as sanitizeFileName } from "./string-normalize-Ci6NM5DE.js";
-import { A as fileExistsAsync, C as debugLog, D as UPLOAD_PREPARE_FALLBACK_CODE, F as readFileAsync, L as formatErrorMessage, M as getFileTypeName, N as getImageMimeType, O as checkFileSize, P as getMaxUploadSize, S as debugError, T as UploadDailyLimitExceededError, g as sendText$1, h as sendMedia$1, j as formatFileSize, k as downloadFile, t as accountToCreds, u as initApiConfig, w as debugWarn } from "./sender-p-B14eLG.js";
-import { c as getQQBotMediaDir, d as isLocalPath, m as resolveQQBotPayloadLocalFilePath, o as getQQBotDataDir, p as normalizePath, r as parseTarget$1 } from "./target-parser-Y0prnrXD.js";
-import fs from "node:fs";
+import { A as fileExistsAsync, C as debugWarn, E as UPLOAD_PREPARE_FALLBACK_CODE, F as readFileAsync, L as formatErrorMessage, M as getFileTypeName, N as getImageMimeType, O as checkFileSize, P as getMaxUploadSize, S as debugLog, g as sendText$1, h as sendMedia$1, j as formatFileSize, k as downloadFile, t as accountToCreds, u as initApiConfig, w as UploadDailyLimitExceededError, x as debugError } from "./sender-CgdXGY2H.js";
+import { c as getQQBotMediaDir, d as isLocalPath, m as resolveQQBotPayloadLocalFilePath, o as getQQBotDataDir, p as normalizePath, r as parseTarget$1 } from "./target-parser-DQ6J3Qe-.js";
+import { pathExistsSync, resolveLocalPathFromRootsSync } from "openclaw/plugin-sdk/security-runtime";
 import path from "node:path";
+import { getFileExtension } from "openclaw/plugin-sdk/media-mime";
 //#region \0rolldown/runtime.js
 var __defProp = Object.defineProperty;
 var __exportAll = (all, no_symbols) => {
@@ -239,53 +240,22 @@ const qqBotMediaKindLabel = {
 function isHttpOrDataSource(pathValue) {
 	return pathValue.startsWith("http://") || pathValue.startsWith("https://") || pathValue.startsWith("data:");
 }
-function isPathWithinRoot(candidate, root) {
-	const relative = path.relative(root, candidate);
-	return relative === "" || !relative.startsWith("..") && !path.isAbsolute(relative);
-}
 function resolveMissingPathWithinMediaRoot(normalizedPath) {
 	const resolvedCandidate = path.resolve(normalizedPath);
-	if (fs.existsSync(resolvedCandidate)) return null;
-	const allowedRoot = path.resolve(getQQBotMediaDir());
-	let canonicalAllowedRoot;
-	try {
-		canonicalAllowedRoot = fs.realpathSync(allowedRoot);
-	} catch {
-		return null;
-	}
-	const missingSegments = [];
-	let cursor = resolvedCandidate;
-	while (!fs.existsSync(cursor)) {
-		const parent = path.dirname(cursor);
-		if (parent === cursor) break;
-		missingSegments.unshift(path.basename(cursor));
-		cursor = parent;
-	}
-	if (!fs.existsSync(cursor)) return null;
-	let canonicalCursor;
-	try {
-		canonicalCursor = fs.realpathSync(cursor);
-	} catch {
-		return null;
-	}
-	const canonicalCandidate = missingSegments.length > 0 ? path.join(canonicalCursor, ...missingSegments) : canonicalCursor;
-	return isPathWithinRoot(canonicalCandidate, canonicalAllowedRoot) ? canonicalCandidate : null;
+	if (pathExistsSync(resolvedCandidate)) return null;
+	return resolveLocalPathFromRootsSync({
+		filePath: resolvedCandidate,
+		roots: [getQQBotMediaDir()],
+		label: "QQ Bot media storage",
+		allowMissing: true
+	})?.path ?? null;
 }
 function resolveExistingPathWithinRoots(normalizedPath, allowedRoots) {
-	const resolvedCandidate = path.resolve(normalizedPath);
-	if (!fs.existsSync(resolvedCandidate)) return null;
-	let canonicalCandidate;
-	try {
-		canonicalCandidate = fs.realpathSync(resolvedCandidate);
-	} catch {
-		return null;
-	}
-	for (const root of allowedRoots) {
-		const resolvedRoot = path.resolve(root);
-		const canonicalRoot = fs.existsSync(resolvedRoot) ? fs.realpathSync(resolvedRoot) : resolvedRoot;
-		if (isPathWithinRoot(canonicalCandidate, canonicalRoot)) return canonicalCandidate;
-	}
-	return null;
+	return resolveLocalPathFromRootsSync({
+		filePath: normalizedPath,
+		roots: allowedRoots,
+		label: "QQ Bot local roots"
+	})?.path ?? null;
 }
 function resolveOutboundMediaPath(rawPath, mediaKind, options = {}) {
 	const normalizedPath = normalizePath(rawPath);
@@ -1017,24 +987,15 @@ const VIDEO_EXTENSIONS = new Set([
 	".flv",
 	".wmv"
 ]);
-/**
-* Extract a lowercase file extension from a path or URL, ignoring query and hash.
-*/
-function getCleanExtension(filePath) {
-	const cleanPath = filePath.split("?")[0].split("#")[0];
-	const lastDot = cleanPath.lastIndexOf(".");
-	if (lastDot < 0) return "";
-	return cleanPath.slice(lastDot).toLowerCase();
-}
 /** Check whether a file is an image using MIME first and extension as fallback. */
 function isImageFile$1(filePath, mimeType) {
 	if (mimeType?.startsWith("image/")) return true;
-	return IMAGE_EXTENSIONS.has(getCleanExtension(filePath));
+	return IMAGE_EXTENSIONS.has(getFileExtension(filePath) ?? "");
 }
 /** Check whether a file is a video using MIME first and extension as fallback. */
 function isVideoFile$1(filePath, mimeType) {
 	if (mimeType?.startsWith("video/")) return true;
-	return VIDEO_EXTENSIONS.has(getCleanExtension(filePath));
+	return VIDEO_EXTENSIONS.has(getFileExtension(filePath) ?? "");
 }
 //#endregion
 //#region extensions/qqbot/src/engine/messaging/outbound.ts