@openclaw/qqbot 2026.7.1 → 2026.7.2-beta.2

package/dist/api.js

@@ -1,8 +1,9 @@
-import { t as qqbotPlugin } from "./channel-D1UztsnG.js";
-import { a as resolveQQBotAccount, i as resolveDefaultQQBotAccountId, n as applyQQBotAccountConfig, r as listQQBotAccountIds, t as DEFAULT_ACCOUNT_ID } from "./config-C1qZbh0K.js";
-import { t as qqbotSetupPlugin } from "./channel.setup-2ItDYKhz.js";
-import { o as getFrameworkCommands } from "./group-o0GmovSf.js";
-import { A as OUTBOUND_ERROR_CODES, C as resolveUserFacingMediaError, D as getMessageReplyStats, E as getMessageReplyConfig, O as recordMessageReply, T as checkMessageReplyLimit, _ as sendVideoMsg, a as sendText, f as buildMediaTarget, g as sendPhoto, h as sendDocument, i as sendProactiveMessage, j as setOutboundAudioPort, k as DEFAULT_MEDIA_SEND_ERROR, m as resolveOutboundMediaPath, n as sendCronMessage, p as parseTarget, r as sendMedia, v as sendVoice, w as MESSAGE_REPLY_LIMIT } from "./outbound-BIrfvvFJ.js";
-import { n as registerRemindTool, r as registerChannelTool, t as registerQQBotTools } from "./tools-UJJ-tLHP.js";
-import { t as registerQQBotFull } from "./channel-entry-C5YdhX3Y.js";
+import { C as checkMessageReplyLimit, D as recordMessageReply, E as getMessageReplyStats, S as MESSAGE_REPLY_LIMIT, T as getMessageReplyConfig } from "./sender-BAUHZqDW.js";
+import { t as qqbotPlugin } from "./channel-nz3Mkify.js";
+import { a as resolveQQBotAccount, i as resolveDefaultQQBotAccountId, n as applyQQBotAccountConfig, r as listQQBotAccountIds, t as DEFAULT_ACCOUNT_ID } from "./config-CpOXnoEc.js";
+import { t as qqbotSetupPlugin } from "./channel.setup-CNoBtKXQ.js";
+import { o as getFrameworkCommands } from "./group-BVHG8qUZ.js";
+import { C as resolveUserFacingMediaError, E as setOutboundAudioPort, T as OUTBOUND_ERROR_CODES, _ as sendVideoMsg, a as sendText, f as buildMediaTarget, g as sendPhoto, h as sendDocument, i as sendProactiveMessage, m as resolveOutboundMediaPath, n as sendCronMessage, p as parseTarget, r as sendMedia, v as sendVoice, w as DEFAULT_MEDIA_SEND_ERROR } from "./outbound-FOG4zNLY.js";
+import { n as registerRemindTool, r as registerChannelTool, t as registerQQBotTools } from "./tools-CC5CKQig.js";
+import { t as registerQQBotFull } from "./channel-entry-CA2T2sf8.js";
 export { DEFAULT_ACCOUNT_ID, DEFAULT_MEDIA_SEND_ERROR, MESSAGE_REPLY_LIMIT, OUTBOUND_ERROR_CODES, applyQQBotAccountConfig, buildMediaTarget, checkMessageReplyLimit, getFrameworkCommands, getMessageReplyConfig, getMessageReplyStats, listQQBotAccountIds, parseTarget, qqbotPlugin, qqbotSetupPlugin, recordMessageReply, registerChannelTool, registerQQBotFull, registerQQBotTools, registerRemindTool, resolveDefaultQQBotAccountId, resolveOutboundMediaPath, resolveQQBotAccount, resolveUserFacingMediaError, sendCronMessage, sendDocument, sendMedia, sendPhoto, sendProactiveMessage, sendText, sendVideoMsg, sendVoice, setOutboundAudioPort };

package/dist/{channel-entry-C5YdhX3Y.js → channel-entry-CA2T2sf8.js}

@@ -1,7 +1,7 @@
-import { a as resolveQQBotAccount } from "./config-C1qZbh0K.js";
-import { d as PRIVATE_CHAT_ONLY_TEXT, n as resolveGroupCommandLevelFromAccountConfig, o as getFrameworkCommands } from "./group-o0GmovSf.js";
-import { h as sendDocument } from "./outbound-BIrfvvFJ.js";
-import { t as registerQQBotTools } from "./tools-UJJ-tLHP.js";
+import { a as resolveQQBotAccount } from "./config-CpOXnoEc.js";
+import { d as PRIVATE_CHAT_ONLY_TEXT, n as resolveGroupCommandLevelFromAccountConfig, o as getFrameworkCommands } from "./group-BVHG8qUZ.js";
+import { h as sendDocument } from "./outbound-FOG4zNLY.js";
+import { t as registerQQBotTools } from "./tools-CC5CKQig.js";
 //#region extensions/qqbot/src/bridge/commands/framework-context-adapter.ts
 /**
 * Default queue snapshot used for framework-registered commands.

package/dist/channel-entry-api.js

@@ -1,2 +1,2 @@
-import { t as registerQQBotFull } from "./channel-entry-C5YdhX3Y.js";
+import { t as registerQQBotFull } from "./channel-entry-CA2T2sf8.js";
 export { registerQQBotFull };

package/dist/{channel-D1UztsnG.js → channel-nz3Mkify.js}

@@ -1,10 +1,10 @@
 import { t as asOptionalObjectRecord } from "./string-normalize-R_0cKO7Q.js";
-import { a as qqbotSetupAdapterShared, i as qqbotMeta, n as qqbotSetupWizard, o as ensurePlatformAdapter, r as qqbotConfigAdapter, s as getBridgeLogger, t as qqbotChannelConfigSchema } from "./config-schema-JZEf1dvB.js";
-import { a as resolveQQBotAccount, n as applyQQBotAccountConfig, r as listQQBotAccountIds, t as DEFAULT_ACCOUNT_ID$1 } from "./config-C1qZbh0K.js";
-import { t as getQQBotRuntime } from "./runtime-DodcT_fQ.js";
-import { n as legacyConfigRules, r as normalizeCompatibilityConfig, t as buildQQBotStateKey } from "./state-keys-CQKlAFyo.js";
+import { a as qqbotSetupAdapterShared, i as qqbotMeta, n as qqbotSetupWizard, o as ensurePlatformAdapter, r as qqbotConfigAdapter, s as getBridgeLogger, t as qqbotChannelConfigSchema } from "./config-schema-D7MaH5X5.js";
+import { a as resolveQQBotAccount, n as applyQQBotAccountConfig, r as listQQBotAccountIds, t as DEFAULT_ACCOUNT_ID$1 } from "./config-CpOXnoEc.js";
+import { t as getQQBotRuntime } from "./runtime-CyjBiGD2.js";
+import { n as legacyConfigRules, r as normalizeCompatibilityConfig, t as buildQQBotStateKey } from "./state-keys-jLJ2SmJA.js";
 import { n as normalizeTarget, r as parseTarget, t as looksLikeQQBotTarget } from "./target-parser-DagYRQkP.js";
-import { getExecApprovalReplyMetadata } from "openclaw/plugin-sdk/approval-runtime";
+import { getExecApprovalReplyMetadata, resolveExecApprovalCommandDisplay } from "openclaw/plugin-sdk/approval-runtime";
 import { buildChannelOutboundSessionRoute } from "openclaw/plugin-sdk/channel-core";
 import { createMessageReceiptFromOutboundResults, defineChannelMessageAdapter } from "openclaw/plugin-sdk/channel-outbound";
 import { createLazyRuntimeModule } from "openclaw/plugin-sdk/lazy-runtime";
@@ -17,34 +17,66 @@ import { truncateUtf16Safe } from "openclaw/plugin-sdk/text-utility-runtime";
 import { markImplicitSameChatApprovalAuthorization, resolveApprovalApprovers } from "openclaw/plugin-sdk/approval-auth-runtime";
 import { createChannelExecApprovalProfile, isChannelExecApprovalClientEnabledFromConfig, matchesApprovalRequestFilters } from "openclaw/plugin-sdk/approval-client-runtime";
 import { normalizeAccountId } from "openclaw/plugin-sdk/routing";
-import { resolveChannelGroupToolsPolicy } from "openclaw/plugin-sdk/channel-policy";
+import { buildChannelGroupsScopeTree, resolveScopeKeyCaseInsensitive, resolveScopeToolsPolicy } from "openclaw/plugin-sdk/channel-policy";
 //#region extensions/qqbot/src/engine/approval/index.ts
-/**
-* Approval helpers — pure functions, zero framework dependencies.
-*
-* - Build approval message text + inline keyboard
-* - Resolve delivery target from session metadata
-* - Parse INTERACTION_CREATE button data
-*/
-function buildExecApprovalText(request) {
-	const expiresIn = Math.max(0, Math.round((request.expiresAtMs - Date.now()) / 1e3));
+const COMMAND_PREVIEW_MAX_LENGTH = 300;
+const COMMAND_PREVIEW_GRAPHEMES_PER_LINE = 24;
+const COMMAND_PREVIEW_WRAP_MARKER = "↩";
+const commandPreviewSegmenter = typeof Intl !== "undefined" && "Segmenter" in Intl ? new Intl.Segmenter(void 0, { granularity: "grapheme" }) : null;
+function splitCommandPreviewGraphemes(commandText) {
+	return commandPreviewSegmenter ? Array.from(commandPreviewSegmenter.segment(commandText), ({ segment }) => segment) : Array.from(commandText);
+}
+function formatCommandPreview(commandText) {
+	const lines = [""];
+	const displayText = commandText.replaceAll(COMMAND_PREVIEW_WRAP_MARKER, "\\u{21A9}");
+	let previewLength = 0;
+	let lineGraphemes = 0;
+	let truncated = false;
+	let wrapped = false;
+	for (const grapheme of splitCommandPreviewGraphemes(displayText)) {
+		if (previewLength + grapheme.length > COMMAND_PREVIEW_MAX_LENGTH) {
+			if (previewLength === 0) lines[0] = truncateUtf16Safe(grapheme, COMMAND_PREVIEW_MAX_LENGTH);
+			truncated = true;
+			break;
+		}
+		previewLength += grapheme.length;
+		if (lineGraphemes === COMMAND_PREVIEW_GRAPHEMES_PER_LINE) {
+			lines[lines.length - 1] += COMMAND_PREVIEW_WRAP_MARKER;
+			lines.push("");
+			lineGraphemes = 0;
+			wrapped = true;
+		}
+		lines[lines.length - 1] += grapheme;
+		lineGraphemes += 1;
+	}
+	const preview = `${lines.join("\n")}${truncated ? "\n…[truncated]" : ""}`;
+	const longestBacktickRun = Math.max(0, ...preview.match(/`+/g)?.map((run) => run.length) ?? []);
+	const fence = "`".repeat(Math.max(3, longestBacktickRun + 1));
+	const block = `${fence}\n${preview}\n${fence}`;
+	return wrapped ? `${COMMAND_PREVIEW_WRAP_MARKER} = display wrap only; not command text\n${block}` : block;
+}
+function formatApprovalMetadata(value) {
+	const sanitized = resolveExecApprovalCommandDisplay({ command: value }).commandText;
+	return formatCommandPreview(sanitized);
+}
+function buildExecApprovalText(view, nowMs = Date.now()) {
+	const expiresIn = Math.max(0, Math.round((view.expiresAtMs - nowMs) / 1e3));
 	const lines = ["🔐 命令执行审批", ""];
-	const cmd = request.request.commandPreview ?? request.request.command ?? "";
-	if (cmd) lines.push(`\`\`\`\n${truncateUtf16Safe(cmd, 300)}\n\`\`\``);
-	if (request.request.cwd) lines.push(`\u{1f4c1} \u76ee\u5f55: ${request.request.cwd}`);
-	if (request.request.agentId) lines.push(`\u{1f916} Agent: ${request.request.agentId}`);
+	if (view.commandText) lines.push(formatCommandPreview(view.commandText));
+	if (view.cwd) lines.push(`\u{1f4c1} \u76ee\u5f55:\n${formatApprovalMetadata(view.cwd)}`);
+	if (view.agentId) lines.push(`\u{1f916} Agent:\n${formatApprovalMetadata(view.agentId)}`);
 	lines.push("", `\u23f1\ufe0f \u8d85\u65f6: ${expiresIn} \u79d2`);
 	return lines.join("\n");
 }
-function buildPluginApprovalText(request) {
-	const timeoutSec = Math.round((request.request.timeoutMs ?? 12e4) / 1e3);
-	const lines = [`${request.request.severity === "critical" ? "🔴" : request.request.severity === "info" ? "🔵" : "🟡"} \u5ba1\u6279\u8bf7\u6c42`, ""];
-	lines.push(`\u{1f4cb} ${request.request.title}`);
-	if (request.request.description) lines.push(`\u{1f4dd} ${request.request.description}`);
-	if (request.request.toolName) lines.push(`\u{1f527} \u5de5\u5177: ${request.request.toolName}`);
-	if (request.request.pluginId) lines.push(`\u{1f50c} \u63d2\u4ef6: ${request.request.pluginId}`);
-	if (request.request.agentId) lines.push(`\u{1f916} Agent: ${request.request.agentId}`);
-	lines.push("", `\u23f1\ufe0f \u8d85\u65f6: ${timeoutSec} \u79d2`);
+function buildPluginApprovalText(view, nowMs = Date.now()) {
+	const expiresIn = Math.max(0, Math.round((view.expiresAtMs - nowMs) / 1e3));
+	const lines = [`${view.severity === "critical" ? "🔴" : view.severity === "info" ? "🔵" : "🟡"} \u5ba1\u6279\u8bf7\u6c42`, ""];
+	lines.push(`\u{1f4cb} ${view.title}`);
+	if (view.description) lines.push(`\u{1f4dd} ${view.description}`);
+	if (view.toolName) lines.push(`\u{1f527} \u5de5\u5177: ${view.toolName}`);
+	if (view.pluginId) lines.push(`\u{1f50c} \u63d2\u4ef6: ${view.pluginId}`);
+	if (view.agentId) lines.push(`\u{1f916} Agent: ${view.agentId}`);
+	lines.push("", `\u23f1\ufe0f \u8d85\u65f6: ${expiresIn} \u79d2`);
 	return lines.join("\n");
 }
 /**
@@ -55,11 +87,12 @@ function buildPluginApprovalText(request) {
 * click_limit=1: each user can only click once.
 * permission.type=2: all users can interact.
 */
-function buildApprovalKeyboard(approvalId, allowedDecisions = [
+function buildApprovalKeyboard(approvalId, approvalKind, allowedDecisions = [
 	"allow-once",
 	"allow-always",
 	"deny"
 ]) {
+	const actionPrefix = `approve:v2:${approvalKind}:${encodeURIComponent(approvalId)}`;
 	const makeBtn = (id, label, visitedLabel, data, style) => ({
 		id,
 		render_data: {
@@ -76,9 +109,9 @@ function buildApprovalKeyboard(approvalId, allowedDecisions = [
 		group_id: "approval"
 	});
 	const buttons = [];
-	if (allowedDecisions.includes("allow-once")) buttons.push(makeBtn("allow", "✅ 允许一次", "已允许", `approve:${approvalId}:allow-once`, 1));
-	if (allowedDecisions.includes("allow-always")) buttons.push(makeBtn("always", "⭐ 始终允许", "已始终允许", `approve:${approvalId}:allow-always`, 1));
-	if (allowedDecisions.includes("deny")) buttons.push(makeBtn("deny", "❌ 拒绝", "已拒绝", `approve:${approvalId}:deny`, 0));
+	if (allowedDecisions.includes("allow-once")) buttons.push(makeBtn("allow", "✅ 允许一次", "已处理", `${actionPrefix}:allow-once`, 1));
+	if (allowedDecisions.includes("allow-always")) buttons.push(makeBtn("always", "⭐ 始终允许", "已处理", `${actionPrefix}:allow-always`, 1));
+	if (allowedDecisions.includes("deny")) buttons.push(makeBtn("deny", "❌ 拒绝", "已处理", `${actionPrefix}:deny`, 0));
 	return { content: { rows: [{ buttons }] } };
 }
 /**
@@ -96,25 +129,39 @@ function resolveApprovalTarget(sessionKey, turnSourceTo) {
 	if (!sk) return null;
 	const m = sk.match(/qqbot:(c2c|direct|group):([A-F0-9]+)/i);
 	if (!m) return null;
+	const scope = m[1];
+	const id = m[2];
+	if (scope === void 0 || id === void 0) return null;
 	return {
-		type: m[1].toLowerCase() === "group" ? "group" : "c2c",
-		id: m[2]
+		type: scope.toLowerCase() === "group" ? "group" : "c2c",
+		id
 	};
 }
 /**
 * Parse the button_data string from an INTERACTION_CREATE event.
 *
-* Expected format: `approve:<approvalId>:<decision>`
-* where approvalId may be prefixed with "exec:" or "plugin:".
+* Expected format: `approve:v2:<approvalKind>:<encodedApprovalId>:<decision>`.
 *
 * Returns null if the data does not match the approval button format.
 */
 function parseApprovalButtonData(buttonData) {
-	const m = buttonData.match(/^approve:((?:(?:exec|plugin):)?[0-9a-f-]+):(allow-once|allow-always|deny)$/i);
-	if (!m) return null;
+	const m = buttonData.match(/^approve:v2:(exec|plugin):([^:]+):(allow-once|allow-always|deny)$/);
+	if (!m || m[0] !== buttonData) return null;
+	let approvalId;
+	const kind = m[1];
+	const encodedId = m[2];
+	const decision = m[3];
+	if (kind !== "exec" && kind !== "plugin" || encodedId === void 0 || decision !== "allow-once" && decision !== "allow-always" && decision !== "deny") return null;
+	try {
+		approvalId = decodeURIComponent(encodedId);
+	} catch {
+		return null;
+	}
+	if (!approvalId) return null;
 	return {
-		approvalId: m[1],
-		decision: m[2]
+		approvalId,
+		approvalKind: kind,
+		decision
 	};
 }
 //#endregion
@@ -375,7 +422,7 @@ function createQQBotApprovalCapability() {
 			},
 			load: async () => {
 				ensurePlatformAdapter();
-				return (await import("./handler-runtime-zQvT6SrI.js")).qqbotApprovalNativeRuntime;
+				return (await import("./handler-runtime-S1_XF8on.js")).qqbotApprovalNativeRuntime;
 			}
 		})
 	});
@@ -746,7 +793,8 @@ var QQBotMarkdownChunkingState = class {
 		const bodyLines = pendingFenceOpenLine ? [...this.textLines] : this.textLines.slice(1);
 		this.textLines = [];
 		this.pendingTextFenceOpenLine = null;
-		if (bodyLines.length > 0 && isClosingFenceLine(bodyLines[bodyLines.length - 1], fence)) bodyLines.pop();
+		const lastBodyLine = bodyLines.at(-1);
+		if (lastBodyLine !== void 0 && isClosingFenceLine(lastBodyLine, fence)) bodyLines.pop();
 		if (this.activeFence && bodyLines.length === 0) return true;
 		pushFenceLineChunks({
 			chunks,
@@ -994,22 +1042,19 @@ function isClosingFenceLine(line, fence) {
 //#endregion
 //#region extensions/qqbot/src/group-policy.ts
 function resolveQQBotGroupToolPolicy(params) {
-	return resolveChannelGroupToolsPolicy({
-		cfg: params.cfg,
-		channel: "qqbot",
-		groupId: params.groupId,
-		groupIdCaseInsensitive: true,
-		accountId: params.accountId,
-		senderId: params.senderId,
-		senderName: params.senderName,
-		senderUsername: params.senderUsername,
-		senderE164: params.senderE164
+	const tree = buildChannelGroupsScopeTree(params.cfg, "qqbot", params.accountId);
+	const scopeKey = resolveScopeKeyCaseInsensitive(tree, params.groupId);
+	return resolveScopeToolsPolicy({
+		...params,
+		tree,
+		path: scopeKey ? [scopeKey] : [],
+		messageProvider: "qqbot"
 	});
 }
 //#endregion
 //#region extensions/qqbot/src/channel.ts
-const loadGatewayModule = createLazyRuntimeModule(() => import("./gateway-pJQppxe4.js"));
-const loadOutboundMessagingModule = createLazyRuntimeModule(() => import("./outbound-BIrfvvFJ.js").then((n) => n.t));
+const loadGatewayModule = createLazyRuntimeModule(() => import("./gateway-D8uYPtoy.js"));
+const loadOutboundMessagingModule = createLazyRuntimeModule(() => import("./outbound-FOG4zNLY.js").then((n) => n.t));
 function createQQBotSendReceipt(params) {
 	const messageId = params.messageId?.trim();
 	return createMessageReceiptFromOutboundResults({

package/dist/channel-plugin-api.js

@@ -1,2 +1,2 @@
-import { t as qqbotPlugin } from "./channel-D1UztsnG.js";
+import { t as qqbotPlugin } from "./channel-nz3Mkify.js";
 export { qqbotPlugin };

package/dist/{channel.setup-2ItDYKhz.js → channel.setup-CNoBtKXQ.js}

@@ -1,4 +1,4 @@
-import { a as qqbotSetupAdapterShared, i as qqbotMeta, n as qqbotSetupWizard, r as qqbotConfigAdapter, t as qqbotChannelConfigSchema } from "./config-schema-JZEf1dvB.js";
+import { a as qqbotSetupAdapterShared, i as qqbotMeta, n as qqbotSetupWizard, r as qqbotConfigAdapter, t as qqbotChannelConfigSchema } from "./config-schema-D7MaH5X5.js";
 //#region extensions/qqbot/src/channel.setup.ts
 /**
 * Setup-only QQBot plugin — lightweight subset used during `openclaw onboard`

package/dist/{config-C1qZbh0K.js → config-CpOXnoEc.js}

@@ -56,8 +56,8 @@ function resolveDefaultAccountId(cfg) {
 	if (configuredDefaultAccountId && (configuredDefaultAccountId === "default" || Boolean(qqbot?.accounts?.[configuredDefaultAccountId]?.appId))) return configuredDefaultAccountId;
 	if (qqbot?.appId || process.env.QQBOT_APP_ID) return DEFAULT_ACCOUNT_ID$1;
 	if (qqbot?.accounts) {
-		const ids = Object.keys(qqbot.accounts);
-		if (ids.length > 0) return ids[0];
+		const firstId = Object.keys(qqbot.accounts).at(0);
+		if (firstId !== void 0) return firstId;
 	}
 	return DEFAULT_ACCOUNT_ID$1;
 }

package/dist/{config-schema-JZEf1dvB.js → config-schema-D7MaH5X5.js}

@@ -1,12 +1,13 @@
 import { d as registerPlatformAdapterFactory, l as hasPlatformAdapter, n as normalizeLowercaseStringOrEmpty, u as registerPlatformAdapter } from "./string-normalize-R_0cKO7Q.js";
-import { a as resolveQQBotAccount, c as describeAccount, i as resolveDefaultQQBotAccountId, l as formatAllowFrom, n as applyQQBotAccountConfig, r as listQQBotAccountIds, s as applyAccountConfig, u as isAccountConfigured } from "./config-C1qZbh0K.js";
-import { createLazyRuntimeModule } from "openclaw/plugin-sdk/lazy-runtime";
+import { a as resolveQQBotAccount, c as describeAccount, i as resolveDefaultQQBotAccountId, l as formatAllowFrom, n as applyQQBotAccountConfig, r as listQQBotAccountIds, s as applyAccountConfig, u as isAccountConfigured } from "./config-CpOXnoEc.js";
+import { createLazyRuntimeNamedExport } from "openclaw/plugin-sdk/lazy-runtime";
 import { buildSecretInputSchema, hasConfiguredSecretInput, normalizeResolvedSecretInputString, normalizeSecretInputString } from "openclaw/plugin-sdk/secret-input";
 import { resolvePreferredOpenClawTmpDir } from "openclaw/plugin-sdk/temp-path";
 import { applyAccountNameToChannelSection, deleteAccountFromConfigSection, setAccountEnabledInConfigSection } from "openclaw/plugin-sdk/core";
 import { DEFAULT_ACCOUNT_ID, createStandardChannelSetupStatus, setSetupChannelEnabled } from "openclaw/plugin-sdk/setup";
+import { expectDefined } from "openclaw/plugin-sdk/expect-runtime";
 import { formatDocsLink } from "openclaw/plugin-sdk/setup-tools";
-import { AllowFromListSchema, ToolPolicySchema, buildChannelConfigSchema } from "openclaw/plugin-sdk/channel-config-schema";
+import { AllowFromListSchema, GroupPolicySchema, buildChannelConfigSchema, buildGroupEntrySchema, buildMultiAccountChannelSchema } from "openclaw/plugin-sdk/channel-config-schema";
 import { z } from "zod";
 //#region extensions/qqbot/src/bridge/logger.ts
 let loggerInstance = null;
@@ -24,31 +25,7 @@ function getBridgeLogger() {
 }
 //#endregion
 //#region extensions/qqbot/src/bridge/bootstrap.ts
-/**
-* Bootstrap the PlatformAdapter for the built-in version.
-*
-* ## Design
-*
-* The adapter is registered via two complementary mechanisms:
-*
-* 1. **Factory registration** (`registerPlatformAdapterFactory`) — a lightweight
-*    callback stored in `adapter/index.ts` that is invoked lazily by
-*    `getPlatformAdapter()` on first access. This guarantees the adapter is
-*    available regardless of module evaluation order or bundler chunk splitting.
-*
-* 2. **Eager side-effect** (`ensurePlatformAdapter()`) — called at module
-*    evaluation time when `channel.ts` imports this file. Provides the adapter
-*    immediately for code that runs synchronously during startup.
-*
-* Heavy async-only dependencies (`media-runtime`, `config-runtime`,
-* `approval-gateway-runtime`) are lazy-imported inside each async method body
-* so that this module evaluates with minimal overhead.
-*
-* Synchronous dependencies (`secret-input`, `temp-path`) are imported
-* statically at the top level so they work reliably in both production and
-* vitest (which resolves bare specifiers via `resolve.alias`, not Node CJS).
-*/
-const loadMediaRuntimeModule = createLazyRuntimeModule(() => import("openclaw/plugin-sdk/media-runtime"));
+const loadReadRemoteMediaBuffer = createLazyRuntimeNamedExport(() => import("openclaw/plugin-sdk/media-runtime"), "readRemoteMediaBuffer");
 function createBuiltinAdapter() {
 	return {
 		async validateRemoteUrl(_url, _options) {},
@@ -56,8 +33,7 @@ function createBuiltinAdapter() {
 			if (typeof value === "string") return value || void 0;
 		},
 		async downloadFile(url, destDir, filename) {
-			const { readRemoteMediaBuffer } = await loadMediaRuntimeModule();
-			const result = await readRemoteMediaBuffer({
+			const result = await (await loadReadRemoteMediaBuffer())({
 				url,
 				filePathHint: filename
 			});
@@ -69,12 +45,13 @@ function createBuiltinAdapter() {
 			return destPath;
 		},
 		async fetchMedia(options) {
-			const { readRemoteMediaBuffer } = await loadMediaRuntimeModule();
-			const result = await readRemoteMediaBuffer({
+			const result = await (await loadReadRemoteMediaBuffer())({
 				url: options.url,
 				filePathHint: options.filePathHint,
 				maxBytes: options.maxBytes,
 				maxRedirects: options.maxRedirects,
+				timeoutMs: options.timeoutMs,
+				responseHeaderTimeoutMs: options.responseHeaderTimeoutMs,
 				ssrfPolicy: options.ssrfPolicy,
 				requestInit: options.requestInit
 			});
@@ -95,20 +72,20 @@ function createBuiltinAdapter() {
 		resolveSecretInputString(params) {
 			return normalizeResolvedSecretInputString(params) ?? void 0;
 		},
-		async resolveApproval(approvalId, decision) {
+		async resolveApproval(params) {
 			try {
 				const { getRuntimeConfig } = await import("openclaw/plugin-sdk/runtime-config-snapshot");
 				const { resolveApprovalOverGateway } = await import("openclaw/plugin-sdk/approval-gateway-runtime");
-				await resolveApprovalOverGateway({
+				return await resolveApprovalOverGateway({
 					cfg: getRuntimeConfig(),
-					approvalId,
-					decision,
+					approvalId: params.approvalId,
+					approvalKind: params.approvalKind,
+					decision: params.decision,
 					clientDisplayName: "QQBot Approval Handler"
 				});
-				return true;
 			} catch (err) {
 				getBridgeLogger().error(`[qqbot] resolveApproval failed: ${String(err)}`);
-				return false;
+				throw err;
 			}
 		}
 	};
@@ -247,32 +224,43 @@ function isQQBotAccountConfigured(cfg, accountId) {
 	const account = resolveQQBotAccount(cfg, accountId, { allowUnresolvedSecretRef: true });
 	return Boolean(account.appId && account.clientSecret);
 }
+async function reportQQBotLinkFailure(params, error) {
+	params.runtime.error(`QQ Bot 绑定失败: ${String(error)}`);
+	await params.prompter.note(["绑定失败，您可以稍后手动配置。", `文档: ${formatDocsLink("/channels/qqbot", "qqbot")}`].join("\n"), "QQ Bot");
+}
 async function linkViaQrCode(params) {
+	let connector;
 	try {
-		const { qrConnect } = await import("@tencent-connect/qqbot-connector");
-		const accounts = await qrConnect({ source: "openclaw" });
+		connector = await import("@tencent-connect/qqbot-connector");
+	} catch (error) {
+		await reportQQBotLinkFailure(params, error);
+		return params.cfg;
+	}
+	await params.beforePersistentEffect?.();
+	try {
+		const accounts = await connector.qrConnect({ source: "openclaw" });
 		if (accounts.length === 0) {
 			await params.prompter.note("未获取到任何 QQ Bot 账号信息。", "QQ Bot");
 			return params.cfg;
 		}
 		let next = params.cfg;
-		for (let i = 0; i < accounts.length; i++) {
-			const { appId, appSecret } = accounts[i];
+		for (const [i, { appId, appSecret }] of accounts.entries()) {
 			const targetAccountId = i === 0 ? params.accountId : appId;
 			next = applyQQBotAccountConfig(next, targetAccountId, {
 				appId,
 				clientSecret: appSecret
 			});
 		}
-		if (accounts.length === 1) params.runtime.log(`✔ QQ Bot 绑定成功！(AppID: ${accounts[0].appId})`);
-		else {
+		if (accounts.length === 1) {
+			const account = expectDefined(accounts.at(0), "single linked QQ Bot account");
+			params.runtime.log(`✔ QQ Bot 绑定成功！(AppID: ${account.appId})`);
+		} else {
 			const idList = accounts.map((a) => a.appId).join(", ");
 			params.runtime.log(`✔ ${accounts.length} 个 QQ Bot 绑定成功！(AppID: ${idList})`);
 		}
 		return next;
 	} catch (error) {
-		params.runtime.error(`QQ Bot 绑定失败: ${String(error)}`);
-		await params.prompter.note(["绑定失败，您可以稍后手动配置。", `文档: ${formatDocsLink("/channels/qqbot", "qqbot")}`].join("\n"), "QQ Bot");
+		await reportQQBotLinkFailure(params, error);
 		return params.cfg;
 	}
 }
@@ -319,7 +307,8 @@ async function finalizeQQBotSetup(params) {
 		cfg: next,
 		accountId,
 		prompter: params.prompter,
-		runtime: params.runtime
+		runtime: params.runtime,
+		beforePersistentEffect: params.options?.beforePersistentEffect
 	});
 	else if (mode === "manual") next = await linkViaManualInput({
 		cfg: next,
@@ -347,12 +336,13 @@ const qqbotSetupWizard = {
 		})
 	}),
 	credentials: [],
-	finalize: async ({ cfg, accountId, forceAllowFrom, prompter, runtime }) => await finalizeQQBotSetup({
+	finalize: async ({ cfg, accountId, forceAllowFrom, prompter, runtime, options }) => await finalizeQQBotSetup({
 		cfg,
 		accountId,
 		forceAllowFrom,
 		prompter,
-		runtime
+		runtime,
+		options
 	}),
 	disable: (cfg) => setSetupChannelEnabled(cfg, channel, false)
 };
@@ -370,13 +360,12 @@ const QQBotSttSchema = z.object({
 	apiKey: z.string().optional(),
 	model: z.string().optional()
 }).strict().optional();
-/** When `true`, same as `mode: "partial"` and `c2cStreamApi: true` for C2C. Object form kept for legacy configs. */
-const QQBotStreamingSchema = z.union([z.boolean(), z.object({
+const QQBotStreamingSchema = z.object({
 	/** "partial" (default) enables block streaming; "off" disables it. */
 	mode: z.enum(["off", "partial"]).default("partial"),
-	/** @deprecated Prefer `streaming: true`. */
-	c2cStreamApi: z.boolean().optional()
-}).passthrough()]).optional();
+	/** Use QQ's official C2C `stream_messages` API for DM replies. */
+	nativeTransport: z.boolean().optional()
+}).strict().optional();
 const QQBotExecApprovalsSchema = z.object({
 	enabled: z.union([z.boolean(), z.literal("auto")]).optional(),
 	approvers: z.array(z.string()).optional(),
@@ -393,26 +382,23 @@ const QQBotDmPolicySchema = z.enum([
 	"allowlist",
 	"disabled"
 ]).optional();
-const QQBotGroupPolicySchema = z.enum([
-	"open",
-	"allowlist",
-	"disabled"
-]).optional();
-const QQBotGroupCommandLevelSchema = z.enum([
-	"all",
-	"safety",
-	"strict"
-]).optional();
-const QQBotGroupSchema = z.object({
-	requireMention: z.boolean().optional(),
-	commandLevel: QQBotGroupCommandLevelSchema,
+const QQBotGroupPolicySchema = GroupPolicySchema.optional();
+const QQBotGroupSchema = buildGroupEntrySchema({
+	commandLevel: z.enum([
+		"all",
+		"safety",
+		"strict"
+	]).optional(),
 	ignoreOtherMentions: z.boolean().optional(),
 	historyLimit: z.number().optional(),
 	name: z.string().optional(),
-	prompt: z.string().optional(),
-	tools: ToolPolicySchema,
-	toolsBySender: z.record(z.string(), ToolPolicySchema).optional()
-}).strict();
+	prompt: z.string().optional()
+}).omit({
+	skills: true,
+	enabled: true,
+	allowFrom: true,
+	systemPrompt: true
+});
 const QQBotGroupsSchema = z.record(z.string(), QQBotGroupSchema).optional();
 const QQBotAccountSchema = z.object({
 	enabled: z.boolean().optional(),
@@ -435,10 +421,9 @@ const QQBotAccountSchema = z.object({
 	execApprovals: QQBotExecApprovalsSchema,
 	groups: QQBotGroupsSchema
 }).passthrough();
-const qqbotChannelConfigSchema = buildChannelConfigSchema(QQBotAccountSchema.extend({
-	stt: QQBotSttSchema,
-	accounts: z.object({}).catchall(QQBotAccountSchema.passthrough()).optional(),
-	defaultAccount: z.string().optional()
-}).passthrough());
+const qqbotChannelConfigSchema = buildChannelConfigSchema(buildMultiAccountChannelSchema(QQBotAccountSchema.extend({ stt: QQBotSttSchema }).passthrough(), {
+	accountSchema: QQBotAccountSchema,
+	accountsMode: "catchall"
+}));
 //#endregion
 export { qqbotSetupAdapterShared as a, setBridgeLogger as c, qqbotMeta as i, qqbotSetupWizard as n, ensurePlatformAdapter as o, qqbotConfigAdapter as r, getBridgeLogger as s, qqbotChannelConfigSchema as t };

package/dist/doctor-contract-api.js

@@ -1,4 +1,5 @@
-import { n as legacyConfigRules, r as normalizeCompatibilityConfig, t as buildQQBotStateKey } from "./state-keys-CQKlAFyo.js";
+import { n as legacyConfigRules, r as normalizeCompatibilityConfig, t as buildQQBotStateKey } from "./state-keys-jLJ2SmJA.js";
+import { fileExists } from "openclaw/plugin-sdk/security-runtime";
 import path from "node:path";
 import fs from "node:fs/promises";
 //#region extensions/qqbot/src/state-migrations.ts
@@ -7,13 +8,6 @@ const MAX_CREDENTIAL_BACKUPS = 1e3;
 function safeName(id) {
 	return id.replace(/[^a-zA-Z0-9._-]/g, "_");
 }
-async function fileExists(filePath) {
-	try {
-		return (await fs.lstat(filePath)).isFile();
-	} catch {
-		return false;
-	}
-}
 async function readCredentialBackup(filePath) {
 	try {
 		const parsed = JSON.parse(await fs.readFile(filePath, "utf8"));
@@ -42,7 +36,7 @@ async function credentialBackupCandidates(stateDir) {
 	} catch {}
 	accountFiles.sort((left, right) => left.sourcePath.localeCompare(right.sourcePath));
 	const singlePath = path.join(dataDir, "credential-backup.json");
-	return await fileExists(singlePath) ? [...accountFiles, { sourcePath: singlePath }] : accountFiles;
+	return fileExists(singlePath) ? [...accountFiles, { sourcePath: singlePath }] : accountFiles;
 }
 async function readLegacyCredentialBackups(stateDir) {
 	const backups = [];
@@ -59,7 +53,7 @@ async function readLegacyCredentialBackups(stateDir) {
 }
 async function archiveLegacySource(params) {
 	const archivedPath = `${params.sourcePath}.migrated`;
-	if (await fileExists(archivedPath)) {
+	if (fileExists(archivedPath)) {
 		params.warnings.push(`Left QQBot credential backup in place because ${archivedPath} already exists`);
 		return;
 	}