@openclaw/qqbot 2026.6.10 → 2026.6.11

package/dist/api.js

@@ -1,8 +1,8 @@
-import { t as qqbotPlugin } from "./channel-jbnSeYkd.js";
-import { a as resolveQQBotAccount, i as resolveDefaultQQBotAccountId, n as applyQQBotAccountConfig, r as listQQBotAccountIds, t as DEFAULT_ACCOUNT_ID } from "./config-ZEfgeoL4.js";
-import { t as qqbotSetupPlugin } from "./channel.setup-CQ_DFfPx.js";
-import { t as getFrameworkCommands } from "./slash-commands-impl-BUH24Ycv.js";
-import { n as registerRemindTool, r as registerChannelTool, t as registerQQBotTools } from "./tools-CV5Y0isN.js";
-import { t as registerQQBotFull } from "./channel-entry-5YxjzTrA.js";
+import { t as qqbotPlugin } from "./channel-DvWrqcZB.js";
+import { a as resolveQQBotAccount, i as resolveDefaultQQBotAccountId, n as applyQQBotAccountConfig, r as listQQBotAccountIds, t as DEFAULT_ACCOUNT_ID } from "./config-C1qZbh0K.js";
+import { t as qqbotSetupPlugin } from "./channel.setup-CldhUlTO.js";
+import { o as getFrameworkCommands } from "./group-CvVXke_k.js";
+import { n as registerRemindTool, r as registerChannelTool, t as registerQQBotTools } from "./tools-CeUI9pG-.js";
+import { t as registerQQBotFull } from "./channel-entry-BGXFRmbg.js";
 import { C as getMessageReplyConfig, D as OUTBOUND_ERROR_CODES, E as DEFAULT_MEDIA_SEND_ERROR, O as setOutboundAudioPort, S as checkMessageReplyLimit, T as recordMessageReply, _ as sendVideoMsg, a as sendText, b as resolveUserFacingMediaError, f as buildMediaTarget, g as sendPhoto, h as sendDocument, i as sendProactiveMessage, m as resolveOutboundMediaPath, n as sendCronMessage, p as parseTarget, r as sendMedia, v as sendVoice, w as getMessageReplyStats, x as MESSAGE_REPLY_LIMIT } from "./outbound-BQcPCo-z.js";
 export { DEFAULT_ACCOUNT_ID, DEFAULT_MEDIA_SEND_ERROR, MESSAGE_REPLY_LIMIT, OUTBOUND_ERROR_CODES, applyQQBotAccountConfig, buildMediaTarget, checkMessageReplyLimit, getFrameworkCommands, getMessageReplyConfig, getMessageReplyStats, listQQBotAccountIds, parseTarget, qqbotPlugin, qqbotSetupPlugin, recordMessageReply, registerChannelTool, registerQQBotFull, registerQQBotTools, registerRemindTool, resolveDefaultQQBotAccountId, resolveOutboundMediaPath, resolveQQBotAccount, resolveUserFacingMediaError, sendCronMessage, sendDocument, sendMedia, sendPhoto, sendProactiveMessage, sendText, sendVideoMsg, sendVoice, setOutboundAudioPort };

package/dist/{channel-jbnSeYkd.js → channel-DvWrqcZB.js}

@@ -1,6 +1,6 @@
 import { t as asOptionalObjectRecord } from "./string-normalize-R_0cKO7Q.js";
-import { a as qqbotSetupAdapterShared, i as qqbotMeta, n as qqbotSetupWizard, o as ensurePlatformAdapter, r as qqbotConfigAdapter, s as getBridgeLogger, t as qqbotChannelConfigSchema } from "./config-schema-BFLNZ8Nf.js";
-import { a as resolveQQBotAccount, n as applyQQBotAccountConfig, r as listQQBotAccountIds, t as DEFAULT_ACCOUNT_ID$1 } from "./config-ZEfgeoL4.js";
+import { a as qqbotSetupAdapterShared, i as qqbotMeta, n as qqbotSetupWizard, o as ensurePlatformAdapter, r as qqbotConfigAdapter, s as getBridgeLogger, t as qqbotChannelConfigSchema } from "./config-schema-gMW9zKvQ.js";
+import { a as resolveQQBotAccount, n as applyQQBotAccountConfig, r as listQQBotAccountIds, t as DEFAULT_ACCOUNT_ID$1 } from "./config-C1qZbh0K.js";
 import { t as getQQBotRuntime } from "./runtime-D1hn91-s.js";
 import { n as normalizeCompatibilityConfig, t as legacyConfigRules } from "./doctor-contract-BYTS8-ia.js";
 import { n as normalizeTarget, s as getQQBotDataPath, t as looksLikeQQBotTarget } from "./target-parser-BdCUmxK7.js";
@@ -370,7 +370,7 @@ function createQQBotApprovalCapability() {
 			},
 			load: async () => {
 				ensurePlatformAdapter();
-				return (await import("./handler-runtime-D0l75JR8.js")).qqbotApprovalNativeRuntime;
+				return (await import("./handler-runtime--OTMkFWa.js")).qqbotApprovalNativeRuntime;
 			}
 		})
 	});
@@ -932,7 +932,7 @@ function isShortTableRowLine(line, table) {
 function isTableSeparatorLine(line) {
 	if (!isTableRowLine(line)) return false;
 	const cells = splitTableCells(line);
-	return cells.length > 0 && cells.every((cell) => /^:?-{3,}:?$/.test(cell.trim()));
+	return cells.length > 0 && cells.every((cell) => /^:?-+:?$/.test(cell.trim()));
 }
 function splitTableCells(line) {
 	return line.trim().slice(1, -1).split("|").map((cell) => cell.trim());
@@ -1066,7 +1066,7 @@ function resolveQQBotGroupToolPolicy(params) {
 //#region extensions/qqbot/src/channel.ts
 let gatewayModulePromise;
 function loadGatewayModule() {
-	gatewayModulePromise ??= import("./gateway-DilADGTY.js");
+	gatewayModulePromise ??= import("./gateway-CCkrdgaK.js");
 	return gatewayModulePromise;
 }
 let outboundMessagingModulePromise;

package/dist/{channel-entry-5YxjzTrA.js → channel-entry-BGXFRmbg.js}

@@ -1,6 +1,6 @@
-import { a as resolveQQBotAccount } from "./config-ZEfgeoL4.js";
-import { t as getFrameworkCommands } from "./slash-commands-impl-BUH24Ycv.js";
-import { t as registerQQBotTools } from "./tools-CV5Y0isN.js";
+import { a as resolveQQBotAccount } from "./config-C1qZbh0K.js";
+import { d as PRIVATE_CHAT_ONLY_TEXT, n as resolveGroupCommandLevelFromAccountConfig, o as getFrameworkCommands } from "./group-CvVXke_k.js";
+import { t as registerQQBotTools } from "./tools-CeUI9pG-.js";
 import { h as sendDocument } from "./outbound-BQcPCo-z.js";
 //#region extensions/qqbot/src/bridge/commands/framework-context-adapter.ts
 /**
@@ -15,7 +15,7 @@ const DEFAULT_QUEUE_SNAPSHOT = {
 	maxConcurrentUsers: 10,
 	senderPending: 0
 };
-function buildFrameworkSlashContext({ ctx, account, from, commandName }) {
+function buildFrameworkSlashContext({ ctx, account, from, commandName, groupCommandLevel }) {
 	const args = ctx.args ?? "";
 	const rawContent = args ? `/${commandName} ${args}` : `/${commandName}`;
 	return {
@@ -30,6 +30,7 @@ function buildFrameworkSlashContext({ ctx, account, from, commandName }) {
 		appId: account.appId,
 		accountConfig: account.config,
 		commandAuthorized: ctx.isAuthorizedSender,
+		groupCommandLevel,
 		queueSnapshot: { ...DEFAULT_QUEUE_SNAPSHOT }
 	};
 }
@@ -97,7 +98,6 @@ async function dispatchFrameworkSlashResult({ result, account, from, logger }) {
 }
 //#endregion
 //#region extensions/qqbot/src/bridge/commands/framework-registration.ts
-const PRIVATE_CHAT_ONLY_TEXT = "💡 请在私聊中使用此指令";
 function isExplicitQQBotC2cFrom(from) {
 	const raw = (from ?? "").trim();
 	const stripped = raw.replace(/^qqbot:/iu, "");
@@ -115,14 +115,16 @@ function registerQQBotFrameworkCommands(api) {
 		requireAuth: true,
 		acceptsArgs: true,
 		handler: async (ctx) => {
-			if (cmd.c2cOnly && !isExplicitQQBotC2cFrom(ctx.from)) return { text: PRIVATE_CHAT_ONLY_TEXT };
 			const from = parseQQBotFrom(ctx.from);
 			const account = resolveQQBotAccount(ctx.config, ctx.accountId ?? void 0);
+			const groupCommandLevel = from.msgType === "group" || from.msgType === "guild" ? resolveGroupCommandLevelFromAccountConfig(account.config, from.targetId) : void 0;
+			if (cmd.c2cOnly && !isExplicitQQBotC2cFrom(ctx.from)) return { text: PRIVATE_CHAT_ONLY_TEXT };
 			const slashCtx = buildFrameworkSlashContext({
 				ctx,
 				account,
 				from,
-				commandName: cmd.name
+				commandName: cmd.name,
+				groupCommandLevel
 			});
 			return await dispatchFrameworkSlashResult({
 				result: await cmd.handler(slashCtx),

package/dist/channel-entry-api.js

@@ -1,2 +1,2 @@
-import { t as registerQQBotFull } from "./channel-entry-5YxjzTrA.js";
+import { t as registerQQBotFull } from "./channel-entry-BGXFRmbg.js";
 export { registerQQBotFull };

package/dist/channel-plugin-api.js

@@ -1,2 +1,2 @@
-import { t as qqbotPlugin } from "./channel-jbnSeYkd.js";
+import { t as qqbotPlugin } from "./channel-DvWrqcZB.js";
 export { qqbotPlugin };

package/dist/{channel.setup-CQ_DFfPx.js → channel.setup-CldhUlTO.js}

@@ -1,4 +1,4 @@
-import { a as qqbotSetupAdapterShared, i as qqbotMeta, n as qqbotSetupWizard, r as qqbotConfigAdapter, t as qqbotChannelConfigSchema } from "./config-schema-BFLNZ8Nf.js";
+import { a as qqbotSetupAdapterShared, i as qqbotMeta, n as qqbotSetupWizard, r as qqbotConfigAdapter, t as qqbotChannelConfigSchema } from "./config-schema-gMW9zKvQ.js";
 //#region extensions/qqbot/src/channel.setup.ts
 /**
 * Setup-only QQBot plugin — lightweight subset used during `openclaw onboard`

package/dist/{config-ZEfgeoL4.js → config-C1qZbh0K.js}

@@ -74,8 +74,11 @@ function resolveAccountBase(cfg, accountId) {
 	let accountConfig;
 	let appId;
 	if (resolvedAccountId === "default") {
-		accountConfig = normalizeAccountConfig(asOptionalObjectRecord(qqbot));
-		appId = normalizeAppId(qqbot?.appId);
+		accountConfig = normalizeAccountConfig({
+			...asOptionalObjectRecord(qqbot),
+			...asOptionalObjectRecord(qqbot?.accounts?.[DEFAULT_ACCOUNT_ID$1])
+		});
+		appId = normalizeAppId(accountConfig.appId);
 	} else {
 		const account = qqbot?.accounts?.[resolvedAccountId];
 		accountConfig = normalizeAccountConfig(asOptionalObjectRecord(account));

package/dist/{config-schema-BFLNZ8Nf.js → config-schema-gMW9zKvQ.js}

@@ -1,5 +1,5 @@
 import { d as registerPlatformAdapterFactory, l as hasPlatformAdapter, n as normalizeLowercaseStringOrEmpty, u as registerPlatformAdapter } from "./string-normalize-R_0cKO7Q.js";
-import { a as resolveQQBotAccount, c as describeAccount, i as resolveDefaultQQBotAccountId, l as formatAllowFrom, n as applyQQBotAccountConfig, r as listQQBotAccountIds, s as applyAccountConfig, u as isAccountConfigured } from "./config-ZEfgeoL4.js";
+import { a as resolveQQBotAccount, c as describeAccount, i as resolveDefaultQQBotAccountId, l as formatAllowFrom, n as applyQQBotAccountConfig, r as listQQBotAccountIds, s as applyAccountConfig, u as isAccountConfigured } from "./config-C1qZbh0K.js";
 import { buildSecretInputSchema, hasConfiguredSecretInput, normalizeResolvedSecretInputString, normalizeSecretInputString } from "openclaw/plugin-sdk/secret-input";
 import { resolvePreferredOpenClawTmpDir } from "openclaw/plugin-sdk/temp-path";
 import { applyAccountNameToChannelSection, deleteAccountFromConfigSection, setAccountEnabledInConfigSection } from "openclaw/plugin-sdk/core";
@@ -401,8 +401,14 @@ const QQBotGroupPolicySchema = z.enum([
 	"allowlist",
 	"disabled"
 ]).optional();
+const QQBotGroupCommandLevelSchema = z.enum([
+	"all",
+	"safety",
+	"strict"
+]).optional();
 const QQBotGroupSchema = z.object({
 	requireMention: z.boolean().optional(),
+	commandLevel: QQBotGroupCommandLevelSchema,
 	ignoreOtherMentions: z.boolean().optional(),
 	historyLimit: z.number().optional(),
 	name: z.string().optional(),

package/dist/{gateway-DilADGTY.js → gateway-CCkrdgaK.js}

@@ -1,15 +1,15 @@
 import { C as getNextMsgSeq, D as downloadFile, F as StreamInputMode, I as StreamInputState, M as getMaxUploadSize, P as StreamContentType, T as openLocalFile, a as createRawInputNotifyFn, b as stopBackgroundTokenRefresh, c as getMessageApi, d as initSender, f as onMessageSent, g as sendText, h as sendMedia, i as clearTokenCache, j as getImageMimeType, k as formatFileSize, l as getPluginUserAgent, m as sendInputNotify, n as acknowledgeInteraction, o as getAccessToken, p as registerAccount, r as buildDeliveryTarget, s as getGatewayUrl, t as accountToCreds, u as initApiConfig, x as withTokenRetry, y as startBackgroundTokenRefresh } from "./sender-CRZ2af7P.js";
 import { c as getPlatformAdapter, i as normalizeOptionalString$1, n as normalizeLowercaseStringOrEmpty$1, o as readStringField, s as sanitizeFileName, t as asOptionalObjectRecord } from "./string-normalize-R_0cKO7Q.js";
-import { c as setBridgeLogger, o as ensurePlatformAdapter } from "./config-schema-BFLNZ8Nf.js";
-import { a as toGatewayAccount, i as openQQBotSyncKeyedStore, m as parseApprovalButtonData, n as createQQBotMarkdownChunker, o as authorizeQQBotApprovalAction, r as buildQQBotStateKey } from "./channel-jbnSeYkd.js";
-import { d as resolveAccountBase } from "./config-ZEfgeoL4.js";
+import { c as setBridgeLogger, o as ensurePlatformAdapter } from "./config-schema-gMW9zKvQ.js";
+import { a as toGatewayAccount, i as openQQBotSyncKeyedStore, m as parseApprovalButtonData, n as createQQBotMarkdownChunker, o as authorizeQQBotApprovalAction, r as buildQQBotStateKey } from "./channel-DvWrqcZB.js";
+import { d as resolveAccountBase } from "./config-C1qZbh0K.js";
 import { a as formatErrorMessage, i as formatDuration, n as debugLog, r as debugWarn, t as debugError } from "./log-SDfMMBWe.js";
 import { n as getQQBotRuntimeForEngine, t as getQQBotRuntime } from "./runtime-D1hn91-s.js";
 import { a as getHomeDir, c as getQQBotMediaDir, d as isLocalPath, f as isWindows, i as checkSilkWasmAvailable, o as getQQBotDataDir, p as normalizePath, s as getQQBotDataPath, u as getTempDir } from "./target-parser-BdCUmxK7.js";
-import { a as matchSlashCommand, i as initCommands, n as getFrameworkVersion, r as getPluginVersion } from "./slash-commands-impl-BUH24Ycv.js";
+import { a as resolveMentionPatterns, c as getPluginVersion, d as PRIVATE_CHAT_ONLY_TEXT, f as classifyCoreCommandForGroup, i as resolveGroupSettings, l as initCommands, n as resolveGroupCommandLevelFromAccountConfig, r as resolveGroupConfig, s as getFrameworkVersion, u as matchSlashCommand } from "./group-CvVXke_k.js";
 import { n as runWithRequestContext } from "./request-context-Bm7PTBD1.js";
 import { E as DEFAULT_MEDIA_SEND_ERROR, O as setOutboundAudioPort, _ as sendVideoMsg, b as resolveUserFacingMediaError, c as isCronReminderPayload, d as normalizeMediaTags, g as sendPhoto, h as sendDocument, l as isMediaPayload, o as decodeMediaPath, r as sendMedia$1, s as encodePayloadForCron, u as parseQQBotPayload, v as sendVoice, y as resolveTrustedOutboundMediaPath } from "./outbound-BQcPCo-z.js";
-import { asBoolean, uniqueStrings } from "openclaw/plugin-sdk/string-coerce-runtime";
+import { uniqueStrings } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { isImplicitSameChatApprovalAuthorization } from "openclaw/plugin-sdk/approval-auth-runtime";
 import * as fs$1 from "node:fs";
 import fs from "node:fs";
@@ -479,6 +479,12 @@ function resolveSlashCommandAuth(params) {
 }
 //#endregion
 //#region extensions/qqbot/src/engine/commands/slash-command-handler.ts
+/**
+* Slash command handler — intercept slash commands before message queue.
+*
+* Extracted from gateway.ts to keep the gateway connection logic thin.
+* Handles urgent commands, normal slash commands, and file delivery.
+*/
 const URGENT_COMMANDS = ["/stop"];
 /**
 * Check if the message is a slash command and handle it.
@@ -490,14 +496,8 @@ async function trySlashCommand(msg, ctx) {
 	const { account, log } = ctx;
 	const content = (msg.content ?? "").trim();
 	if (!content.startsWith("/")) return "enqueue";
-	const contentLower = content.toLowerCase();
-	if (URGENT_COMMANDS.some((cmd) => contentLower === cmd.toLowerCase() || contentLower.startsWith(cmd.toLowerCase() + " "))) {
-		log?.info(`Urgent command detected: ${content.slice(0, 20)}`);
-		return "urgent";
-	}
-	const receivedAt = Date.now();
-	const peerId = ctx.getMessagePeerId(msg);
 	const isGroup = msg.type === "group" || msg.type === "guild";
+	const groupCommandLevel = isGroup ? resolveGroupCommandLevelFromAccountConfig(account.config, msg.groupOpenid ?? msg.channelId ?? null) : void 0;
 	const commandsAllowFrom = resolveQQBotCommandsAllowFrom(ctx.cfg);
 	const commandAuthorized = ctx.resolveCommandAuthorized ? await ctx.resolveCommandAuthorized({
 		isGroup,
@@ -513,6 +513,14 @@ async function trySlashCommand(msg, ctx) {
 		groupAllowFrom: account.config?.groupAllowFrom,
 		commandsAllowFrom
 	});
+	const contentLower = content.toLowerCase();
+	if (URGENT_COMMANDS.some((cmd) => contentLower === cmd.toLowerCase() || contentLower.startsWith(cmd.toLowerCase() + " "))) {
+		if (isGroup && !commandAuthorized) return "enqueue";
+		log?.info(`Urgent command detected: ${content.slice(0, 20)}`);
+		return "urgent";
+	}
+	const receivedAt = Date.now();
+	const peerId = ctx.getMessagePeerId(msg);
 	const cmdCtx = {
 		type: msg.type,
 		senderId: msg.senderId,
@@ -528,6 +536,7 @@ async function trySlashCommand(msg, ctx) {
 		appId: account.appId,
 		accountConfig: account.config,
 		commandAuthorized,
+		groupCommandLevel,
 		queueSnapshot: ctx.getQueueSnapshot(peerId)
 	};
 	try {
@@ -2569,72 +2578,6 @@ function classifyMedia(processed) {
 		voiceTranscriptSources: processed.voiceTranscriptSources
 	};
 }
-const DEFAULT_GROUP_CONFIG = {
-	requireMention: true,
-	ignoreOtherMentions: false,
-	name: "",
-	historyLimit: 50
-};
-function readGroupsMap(cfg, accountId) {
-	const groups = asOptionalObjectRecord(resolveAccountBase(cfg, accountId).config.groups);
-	if (!groups) return {};
-	const normalized = {};
-	for (const [key, value] of Object.entries(groups)) {
-		const sub = asOptionalObjectRecord(value);
-		if (sub) normalized[key] = sub;
-	}
-	return normalized;
-}
-function readBoolean(obj, key) {
-	return asBoolean(obj[key]);
-}
-function readString(obj, key) {
-	const v = obj[key];
-	return typeof v === "string" && v.length > 0 ? v : void 0;
-}
-function readHistoryLimit(obj, key) {
-	const v = obj[key];
-	if (typeof v !== "number" || !Number.isFinite(v)) return;
-	return Math.max(0, Math.floor(v));
-}
-function resolveGroupConfig(cfg, groupOpenid, accountId) {
-	const account = resolveAccountBase(cfg, accountId);
-	const groups = readGroupsMap(cfg, accountId);
-	const wildcard = groups["*"] ?? {};
-	const specific = groupOpenid ? groups[groupOpenid] ?? {} : {};
-	const accountDefaultRequireMention = asBoolean(account.config.defaultRequireMention) ?? DEFAULT_GROUP_CONFIG.requireMention;
-	return {
-		requireMention: readBoolean(specific, "requireMention") ?? readBoolean(wildcard, "requireMention") ?? accountDefaultRequireMention,
-		ignoreOtherMentions: readBoolean(specific, "ignoreOtherMentions") ?? readBoolean(wildcard, "ignoreOtherMentions") ?? DEFAULT_GROUP_CONFIG.ignoreOtherMentions,
-		name: readString(specific, "name") ?? readString(wildcard, "name") ?? DEFAULT_GROUP_CONFIG.name,
-		prompt: readString(specific, "prompt") ?? readString(wildcard, "prompt"),
-		historyLimit: readHistoryLimit(specific, "historyLimit") ?? readHistoryLimit(wildcard, "historyLimit") ?? DEFAULT_GROUP_CONFIG.historyLimit
-	};
-}
-function resolveGroupSettings(params) {
-	const config = resolveGroupConfig(params.cfg, params.groupOpenid, params.accountId);
-	return {
-		config,
-		name: config.name || params.groupOpenid.slice(0, 8),
-		mentionPatterns: resolveMentionPatterns(params.cfg, params.agentId)
-	};
-}
-function resolveMentionPatterns(cfg, agentId) {
-	if (agentId) {
-		const agents = asOptionalObjectRecord(cfg.agents);
-		const agentGroupChat = (Array.isArray(agents?.list) ? agents?.list : []).find((a) => typeof a.id === "string" && a.id.trim().toLowerCase() === agentId.trim().toLowerCase())?.groupChat;
-		if (agentGroupChat && Object.hasOwn(agentGroupChat, "mentionPatterns")) {
-			const patterns = agentGroupChat.mentionPatterns;
-			return Array.isArray(patterns) ? patterns.filter((p) => typeof p === "string") : [];
-		}
-	}
-	const globalGroupChat = asOptionalObjectRecord(asOptionalObjectRecord(cfg.messages)?.groupChat);
-	if (globalGroupChat && Object.hasOwn(globalGroupChat, "mentionPatterns")) {
-		const patterns = globalGroupChat.mentionPatterns;
-		return Array.isArray(patterns) ? patterns.filter((p) => typeof p === "string") : [];
-	}
-	return [];
-}
 //#endregion
 //#region extensions/qqbot/src/engine/gateway/stages/group-gate-stage.ts
 function runGroupGateStage(input) {
@@ -2694,6 +2637,7 @@ function runGroupGateStage(input) {
 	const groupInfo = {
 		gate,
 		activation,
+		commandLevel: settings.config.commandLevel,
 		historyLimit,
 		isMerged: isMergedTurn(event),
 		mergedMessages: event.merge?.messages,
@@ -2704,6 +2648,12 @@ function runGroupGateStage(input) {
 			behaviorPrompt
 		}
 	};
+	const commandVisibility = classifyCoreCommandForGroup(userContent, settings.config.commandLevel);
+	if (commandAuthorized && commandVisibility.visibility === "private" && gate.action !== "drop_other_mention") return {
+		kind: "skip",
+		groupInfo,
+		skipReason: "private_command_only"
+	};
 	if (gate.action === "pass") return {
 		kind: "pass",
 		groupInfo
@@ -6412,6 +6362,18 @@ async function startGateway$1(ctx) {
 			return;
 		}
 		if (inbound.skipped) {
+			if (inbound.skipReason === "private_command_only") {
+				log?.info("Rejected private-only command in qqbot group before mention gate", {
+					accountId: account.accountId,
+					messageId: event.messageId,
+					senderId: event.senderId,
+					type: event.type,
+					groupOpenid: event.groupOpenid
+				});
+				await sendText(buildDeliveryTarget(event), PRIVATE_CHAT_ONLY_TEXT, accountToCreds(account), { msgId: event.messageId });
+				inbound.typing.keepAlive?.stop();
+				return;
+			}
 			log?.info(`Skipped group inbound: reason=${inbound.skipReason ?? "unknown"} group=${event.groupOpenid ?? ""}`, {
 				accountId: account.accountId,
 				messageId: event.messageId,
@@ -6421,6 +6383,20 @@ async function startGateway$1(ctx) {
 			inbound.typing.keepAlive?.stop();
 			return;
 		}
+		const groupCommandLevel = event.type === "group" || event.type === "guild" ? inbound.group?.commandLevel ?? resolveGroupCommandLevelFromAccountConfig(account.config, event.groupOpenid ?? event.channelId ?? null) : void 0;
+		const groupCommandVisibility = event.type === "group" || event.type === "guild" ? classifyCoreCommandForGroup(inbound.agentBody, groupCommandLevel) : { visibility: "unknown" };
+		if (groupCommandVisibility.visibility === "private") {
+			log?.info(`Rejected private-only command in qqbot group: /${groupCommandVisibility.commandName}`, {
+				accountId: account.accountId,
+				messageId: event.messageId,
+				senderId: event.senderId,
+				type: event.type,
+				groupOpenid: event.groupOpenid
+			});
+			await sendText(buildDeliveryTarget(event), PRIVATE_CHAT_ONLY_TEXT, accountToCreds(account), { msgId: event.messageId });
+			inbound.typing.keepAlive?.stop();
+			return;
+		}
 		try {
 			await runWithRequestContext({
 				accountId: account.accountId,

package/dist/{slash-commands-impl-BUH24Ycv.js → group-CvVXke_k.js}

@@ -1,6 +1,8 @@
+import { t as asOptionalObjectRecord } from "./string-normalize-R_0cKO7Q.js";
+import { d as resolveAccountBase } from "./config-C1qZbh0K.js";
 import { n as debugLog } from "./log-SDfMMBWe.js";
 import { a as getHomeDir, f as isWindows, l as getQQBotMediaPath, o as getQQBotDataDir } from "./target-parser-BdCUmxK7.js";
-import { uniqueStrings } from "openclaw/plugin-sdk/string-coerce-runtime";
+import { asBoolean, uniqueStrings } from "openclaw/plugin-sdk/string-coerce-runtime";
 import fs from "node:fs";
 import path from "node:path";
 import { loadJsonFile } from "openclaw/plugin-sdk/json-store";
@@ -876,6 +878,118 @@ function registerBuiltinSlashCommands(registry) {
 	registerGroupAllwaysCommand(registry);
 }
 //#endregion
+//#region extensions/qqbot/src/engine/commands/command-visibility.ts
+const PRIVATE_CHAT_ONLY_TEXT = "该命令仅限私聊使用，请在私聊中发送。";
+const GROUP_VISIBLE_CORE_COMMANDS = new Set([
+	"help",
+	"btw",
+	"side",
+	"stop"
+]);
+const STRICT_CORE_COMMANDS = new Set(["new", "reset"]);
+const GROUP_HIDDEN_CORE_COMMANDS = new Set([
+	"goal",
+	"usage",
+	"activation",
+	"send",
+	"reset",
+	"new",
+	"name",
+	"compact",
+	"think",
+	"thinking",
+	"t",
+	"fast",
+	"reasoning",
+	"reason",
+	"queue"
+]);
+const PRIVATE_ONLY_CORE_COMMANDS = new Set([
+	"commands",
+	"tools",
+	"skill",
+	"diagnostics",
+	"crestodian",
+	"tasks",
+	"allowlist",
+	"approve",
+	"context",
+	"export-session",
+	"export",
+	"export-trajectory",
+	"trajectory",
+	"tts",
+	"whoami",
+	"id",
+	"session",
+	"subagents",
+	"acp",
+	"focus",
+	"unfocus",
+	"agents",
+	"steer",
+	"tell",
+	"config",
+	"mcp",
+	"plugins",
+	"plugin",
+	"debug",
+	"status",
+	"restart",
+	"trace",
+	"verbose",
+	"v",
+	"elevated",
+	"elev",
+	"exec",
+	"model",
+	"models",
+	"bash"
+]);
+function parseSlashCommandName(content) {
+	const trimmed = (content ?? "").trim();
+	if (!trimmed.startsWith("/")) return;
+	return ((trimmed.slice(1).split(/\s+/, 1)[0]?.trim().toLowerCase() ?? "").split(/[@:：]/u, 1)[0] ?? "") || void 0;
+}
+function classifyCoreCommandForGroup(content, commandLevel = "all") {
+	const commandName = parseSlashCommandName(content);
+	if (!commandName) return { visibility: "unknown" };
+	if (commandLevel === "all") return {
+		commandName,
+		visibility: GROUP_VISIBLE_CORE_COMMANDS.has(commandName) ? "group" : "hidden"
+	};
+	if (commandLevel === "strict") {
+		if (commandName === "stop") return {
+			commandName,
+			visibility: "group"
+		};
+		if (STRICT_CORE_COMMANDS.has(commandName)) return {
+			commandName,
+			visibility: "hidden"
+		};
+		return {
+			commandName,
+			visibility: "private"
+		};
+	}
+	if (GROUP_VISIBLE_CORE_COMMANDS.has(commandName)) return {
+		commandName,
+		visibility: "group"
+	};
+	if (GROUP_HIDDEN_CORE_COMMANDS.has(commandName)) return {
+		commandName,
+		visibility: "hidden"
+	};
+	if (PRIVATE_ONLY_CORE_COMMANDS.has(commandName)) return {
+		commandName,
+		visibility: "private"
+	};
+	return {
+		commandName,
+		visibility: "unknown"
+	};
+}
+//#endregion
 //#region extensions/qqbot/src/engine/commands/slash-commands.ts
 /** Lowercase and trim a string. */
 function lc(s) {
@@ -930,10 +1044,13 @@ var SlashCommandRegistry = class {
 		const args = spaceIdx === -1 ? "" : content.slice(spaceIdx + 1).trim();
 		const cmd = this.commands.get(cmdName);
 		if (!cmd) return null;
-		if (cmd.c2cOnly && ctx.type !== "c2c") return `💡 请在私聊中使用此指令`;
+		const isGroup = ctx.type === "group" || ctx.type === "guild";
+		const groupCommandLevel = ctx.groupCommandLevel ?? "all";
+		if (isGroup && groupCommandLevel === "strict") return PRIVATE_CHAT_ONLY_TEXT;
+		if (cmd.c2cOnly && ctx.type !== "c2c") return PRIVATE_CHAT_ONLY_TEXT;
 		if (cmd.requireAuth && !ctx.commandAuthorized) {
 			log?.info?.(`[qqbot] Slash command /${cmd.name} rejected: sender ${ctx.senderId} is not authorized`);
-			return `⛔ 权限不足：请先在 channels.qqbot.${ctx.type === "group" || ctx.type === "guild" ? "groupAllowFrom" : "allowFrom"} 中配置明确的发送者列表后再使用 /${cmd.name}。`;
+			return `⛔ 权限不足：请先在 channels.qqbot.${isGroup ? "groupAllowFrom" : "allowFrom"} 中配置明确的发送者列表后再使用 /${cmd.name}。`;
 		}
 		if (args === "?") {
 			if (cmd.usage) return `📖 /${cmd.name} 用法：\n\n${cmd.usage}`;
@@ -977,5 +1094,83 @@ function getPluginVersion() {
 function getFrameworkVersion() {
 	return getFrameworkVersionString();
 }
+const DEFAULT_GROUP_PROMPT = "If the sender is a bot, respond only when they explicitly @mention you to ask a question or request assistance with a specific task; keep your replies concise and clear, avoiding the urge to race other bots to answer or engage in lengthy, unproductive exchanges. In group chats, prioritize responding to messages from human users; bots should maintain a collaborative rather than competitive dynamic to ensure the conversation remains orderly and does not result in message flooding.";
+const DEFAULT_GROUP_CONFIG = {
+	requireMention: true,
+	ignoreOtherMentions: false,
+	commandLevel: "all",
+	name: "",
+	historyLimit: 50
+};
+function readGroupsMap(cfg, accountId) {
+	const groups = asOptionalObjectRecord(resolveAccountBase(cfg, accountId).config.groups);
+	if (!groups) return {};
+	const normalized = {};
+	for (const [key, value] of Object.entries(groups)) {
+		const sub = asOptionalObjectRecord(value);
+		if (sub) normalized[key] = sub;
+	}
+	return normalized;
+}
+function readBoolean(obj, key) {
+	return asBoolean(obj[key]);
+}
+function readString(obj, key) {
+	const v = obj[key];
+	return typeof v === "string" && v.length > 0 ? v : void 0;
+}
+function readCommandLevel(obj, key) {
+	const v = readString(obj, key);
+	return v === "all" || v === "safety" || v === "strict" ? v : void 0;
+}
+function readHistoryLimit(obj, key) {
+	const v = obj[key];
+	if (typeof v !== "number" || !Number.isFinite(v)) return;
+	return Math.max(0, Math.floor(v));
+}
+function resolveGroupConfig(cfg, groupOpenid, accountId) {
+	const account = resolveAccountBase(cfg, accountId);
+	const groups = readGroupsMap(cfg, accountId);
+	const wildcard = groups["*"] ?? {};
+	const specific = groupOpenid ? groups[groupOpenid] ?? {} : {};
+	const accountDefaultRequireMention = asBoolean(account.config.defaultRequireMention) ?? DEFAULT_GROUP_CONFIG.requireMention;
+	return {
+		requireMention: readBoolean(specific, "requireMention") ?? readBoolean(wildcard, "requireMention") ?? accountDefaultRequireMention,
+		ignoreOtherMentions: readBoolean(specific, "ignoreOtherMentions") ?? readBoolean(wildcard, "ignoreOtherMentions") ?? DEFAULT_GROUP_CONFIG.ignoreOtherMentions,
+		commandLevel: readCommandLevel(specific, "commandLevel") ?? readCommandLevel(wildcard, "commandLevel") ?? DEFAULT_GROUP_CONFIG.commandLevel,
+		name: readString(specific, "name") ?? readString(wildcard, "name") ?? DEFAULT_GROUP_CONFIG.name,
+		prompt: readString(specific, "prompt") ?? readString(wildcard, "prompt"),
+		historyLimit: readHistoryLimit(specific, "historyLimit") ?? readHistoryLimit(wildcard, "historyLimit") ?? DEFAULT_GROUP_CONFIG.historyLimit
+	};
+}
+function resolveGroupCommandLevelFromAccountConfig(accountConfig, groupOpenid) {
+	const groups = asOptionalObjectRecord(accountConfig?.groups);
+	const wildcard = asOptionalObjectRecord(groups?.["*"]) ?? {};
+	return readCommandLevel(groupOpenid ? asOptionalObjectRecord(groups?.[groupOpenid]) ?? {} : {}, "commandLevel") ?? readCommandLevel(wildcard, "commandLevel") ?? DEFAULT_GROUP_CONFIG.commandLevel;
+}
+function resolveGroupSettings(params) {
+	const config = resolveGroupConfig(params.cfg, params.groupOpenid, params.accountId);
+	return {
+		config,
+		name: config.name || params.groupOpenid.slice(0, 8),
+		mentionPatterns: resolveMentionPatterns(params.cfg, params.agentId)
+	};
+}
+function resolveMentionPatterns(cfg, agentId) {
+	if (agentId) {
+		const agents = asOptionalObjectRecord(cfg.agents);
+		const agentGroupChat = (Array.isArray(agents?.list) ? agents?.list : []).find((a) => typeof a.id === "string" && a.id.trim().toLowerCase() === agentId.trim().toLowerCase())?.groupChat;
+		if (agentGroupChat && Object.hasOwn(agentGroupChat, "mentionPatterns")) {
+			const patterns = agentGroupChat.mentionPatterns;
+			return Array.isArray(patterns) ? patterns.filter((p) => typeof p === "string") : [];
+		}
+	}
+	const globalGroupChat = asOptionalObjectRecord(asOptionalObjectRecord(cfg.messages)?.groupChat);
+	if (globalGroupChat && Object.hasOwn(globalGroupChat, "mentionPatterns")) {
+		const patterns = globalGroupChat.mentionPatterns;
+		return Array.isArray(patterns) ? patterns.filter((p) => typeof p === "string") : [];
+	}
+	return [];
+}
 //#endregion
-export { matchSlashCommand as a, initCommands as i, getFrameworkVersion as n, getPluginVersion as r, getFrameworkCommands as t };
+export { resolveMentionPatterns as a, getPluginVersion as c, PRIVATE_CHAT_ONLY_TEXT as d, classifyCoreCommandForGroup as f, resolveGroupSettings as i, initCommands as l, resolveGroupCommandLevelFromAccountConfig as n, getFrameworkCommands as o, resolveGroupConfig as r, getFrameworkVersion as s, DEFAULT_GROUP_PROMPT as t, matchSlashCommand as u };

package/dist/{handler-runtime-D0l75JR8.js → handler-runtime--OTMkFWa.js}

@@ -1,7 +1,7 @@
 import { c as getMessageApi, t as accountToCreds } from "./sender-CRZ2af7P.js";
-import { o as ensurePlatformAdapter, s as getBridgeLogger } from "./config-schema-BFLNZ8Nf.js";
-import { c as matchesQQBotApprovalAccount, d as buildApprovalKeyboard, f as buildExecApprovalText, h as resolveApprovalTarget, l as resolveQQBotExecApprovalConfig, p as buildPluginApprovalText, s as isQQBotExecApprovalClientEnabled, u as shouldHandleQQBotExecApprovalRequest } from "./channel-jbnSeYkd.js";
-import { a as resolveQQBotAccount } from "./config-ZEfgeoL4.js";
+import { o as ensurePlatformAdapter, s as getBridgeLogger } from "./config-schema-gMW9zKvQ.js";
+import { c as matchesQQBotApprovalAccount, d as buildApprovalKeyboard, f as buildExecApprovalText, h as resolveApprovalTarget, l as resolveQQBotExecApprovalConfig, p as buildPluginApprovalText, s as isQQBotExecApprovalClientEnabled, u as shouldHandleQQBotExecApprovalRequest } from "./channel-DvWrqcZB.js";
+import { a as resolveQQBotAccount } from "./config-C1qZbh0K.js";
 import { resolveApprovalRequestSessionConversation } from "openclaw/plugin-sdk/approval-native-runtime";
 import { createChannelApprovalNativeRuntimeAdapter } from "openclaw/plugin-sdk/approval-handler-runtime";
 //#region extensions/qqbot/src/bridge/approval/handler-runtime.ts

package/dist/setup-plugin-api.js

@@ -1,2 +1,2 @@
-import { t as qqbotSetupPlugin } from "./channel.setup-CQ_DFfPx.js";
+import { t as qqbotSetupPlugin } from "./channel.setup-CldhUlTO.js";
 export { qqbotSetupPlugin };

package/dist/{tools-CV5Y0isN.js → tools-CeUI9pG-.js}

@@ -1,4 +1,4 @@
-import { a as resolveQQBotAccount, r as listQQBotAccountIds } from "./config-ZEfgeoL4.js";
+import { a as resolveQQBotAccount, r as listQQBotAccountIds } from "./config-C1qZbh0K.js";
 import { a as formatErrorMessage, n as debugLog, t as debugError } from "./log-SDfMMBWe.js";
 import { t as getRequestContext } from "./request-context-Bm7PTBD1.js";
 import { readResponseTextLimited } from "openclaw/plugin-sdk/provider-http";

package/dist/tools-api.js

@@ -1,2 +1,2 @@
-import { t as registerQQBotTools } from "./tools-CV5Y0isN.js";
+import { t as registerQQBotTools } from "./tools-CeUI9pG-.js";
 export { registerQQBotTools };

package/npm-shrinkwrap.json

@@ -1,12 +1,12 @@
 {
   "name": "@openclaw/qqbot",
-  "version": "2026.6.10",
+  "version": "2026.6.11",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@openclaw/qqbot",
-      "version": "2026.6.10",
+      "version": "2026.6.11",
       "dependencies": {
         "@tencent-connect/qqbot-connector": "1.1.0",
         "mpg123-decoder": "1.0.3",
@@ -15,7 +15,7 @@
         "zod": "4.4.3"
       },
       "peerDependencies": {
-        "openclaw": ">=2026.6.10"
+        "openclaw": ">=2026.6.11"
       },
       "peerDependenciesMeta": {
         "openclaw": {

package/openclaw.plugin.json

@@ -2,6 +2,7 @@
   "id": "qqbot",
   "name": "QQ Bot",
   "description": "OpenClaw QQ Bot channel plugin for group and direct-message workflows.",
+  "icon": "https://cdn.simpleicons.org/qq",
   "activation": {
     "onStartup": false
   },
@@ -106,6 +107,41 @@
           }
         ]
       },
+      "group": {
+        "type": "object",
+        "additionalProperties": true,
+        "properties": {
+          "requireMention": {
+            "type": "boolean"
+          },
+          "commandLevel": {
+            "type": "string",
+            "enum": [
+              "all",
+              "safety",
+              "strict"
+            ]
+          },
+          "ignoreOtherMentions": {
+            "type": "boolean"
+          },
+          "historyLimit": {
+            "type": "number"
+          },
+          "name": {
+            "type": "string"
+          },
+          "prompt": {
+            "type": "string"
+          }
+        }
+      },
+      "groups": {
+        "type": "object",
+        "additionalProperties": {
+          "$ref": "#/$defs/group"
+        }
+      },
       "account": {
         "type": "object",
         "additionalProperties": true,
@@ -183,6 +219,9 @@
                 }
               }
             ]
+          },
+          "groups": {
+            "$ref": "#/$defs/groups"
           }
         }
       }
@@ -273,6 +312,9 @@
       },
       "defaultAccount": {
         "type": "string"
+      },
+      "groups": {
+        "$ref": "#/$defs/groups"
       }
     }
   },
@@ -541,6 +583,14 @@
                 "requireMention": {
                   "type": "boolean"
                 },
+                "commandLevel": {
+                  "type": "string",
+                  "enum": [
+                    "all",
+                    "safety",
+                    "strict"
+                  ]
+                },
                 "ignoreOtherMentions": {
                   "type": "boolean"
                 },
@@ -897,6 +947,14 @@
                       "requireMention": {
                         "type": "boolean"
                       },
+                      "commandLevel": {
+                        "type": "string",
+                        "enum": [
+                          "all",
+                          "safety",
+                          "strict"
+                        ]
+                      },
                       "ignoreOtherMentions": {
                         "type": "boolean"
                       },

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@openclaw/qqbot",
-  "version": "2026.6.10",
+  "version": "2026.6.11",
   "private": false,
   "description": "OpenClaw QQ Bot channel plugin for group and direct-message workflows.",
   "repository": {
@@ -16,7 +16,7 @@
     "zod": "4.4.3"
   },
   "peerDependencies": {
-    "openclaw": ">=2026.6.10"
+    "openclaw": ">=2026.6.11"
   },
   "peerDependenciesMeta": {
     "openclaw": {
@@ -45,10 +45,10 @@
       "minHostVersion": ">=2026.4.10"
     },
     "compat": {
-      "pluginApi": ">=2026.6.10"
+      "pluginApi": ">=2026.6.11"
     },
     "build": {
-      "openclawVersion": "2026.6.10"
+      "openclawVersion": "2026.6.11"
     },
     "release": {
       "publishToClawHub": true,