@qqbrowser/openclaw-qbot 0.10.8 → 0.10.10

package/node_modules/@opentelemetry/sdk-trace-node/node_modules/@opentelemetry/core/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@opentelemetry/core",
-  "version": "2.7.0",
+  "version": "2.7.1",
   "description": "OpenTelemetry Core provides constants and utilities shared by all OpenTelemetry SDK packages.",
   "main": "build/src/index.js",
   "module": "build/esm/index.js",
@@ -90,5 +90,5 @@
   },
   "homepage": "https://github.com/open-telemetry/opentelemetry-js/tree/main/packages/opentelemetry-core",
   "sideEffects": false,
-  "gitHead": "a0476eef3cb973bfcc0c2e41f868dd7b484c2ed8"
+  "gitHead": "2400d8389a4469f7a81ccd3be2f0b2c2dd6faaf7"
 }

package/node_modules/@opentelemetry/sdk-trace-node/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@opentelemetry/sdk-trace-node",
-  "version": "2.7.0",
+  "version": "2.7.1",
   "description": "OpenTelemetry Node SDK provides automatic telemetry (tracing, metrics, etc) for Node.js applications",
   "main": "build/src/index.js",
   "types": "build/src/index.d.ts",
@@ -45,7 +45,7 @@
   },
   "devDependencies": {
     "@opentelemetry/api": ">=1.0.0 <1.10.0",
-    "@opentelemetry/resources": "2.7.0",
+    "@opentelemetry/resources": "2.7.1",
     "@opentelemetry/semantic-conventions": "^1.29.0",
     "@types/mocha": "10.0.10",
     "@types/node": "18.19.130",
@@ -59,11 +59,11 @@
     "@opentelemetry/api": ">=1.0.0 <1.10.0"
   },
   "dependencies": {
-    "@opentelemetry/context-async-hooks": "2.7.0",
-    "@opentelemetry/core": "2.7.0",
-    "@opentelemetry/sdk-trace-base": "2.7.0"
+    "@opentelemetry/context-async-hooks": "2.7.1",
+    "@opentelemetry/core": "2.7.1",
+    "@opentelemetry/sdk-trace-base": "2.7.1"
   },
   "homepage": "https://github.com/open-telemetry/opentelemetry-js/tree/main/packages/opentelemetry-sdk-trace-node",
   "sideEffects": false,
-  "gitHead": "a0476eef3cb973bfcc0c2e41f868dd7b484c2ed8"
+  "gitHead": "2400d8389a4469f7a81ccd3be2f0b2c2dd6faaf7"
 }

package/node_modules/@protobufjs/codegen/index.js

@@ -1,6 +1,8 @@
 "use strict";
 module.exports = codegen;
 
+var reservedRe = /^(?:do|if|in|for|let|new|try|var|case|else|enum|eval|false|null|this|true|void|with|break|catch|class|const|super|throw|while|yield|delete|export|import|public|return|static|switch|typeof|default|extends|finally|package|private|continue|debugger|function|arguments|interface|protected|implements|instanceof)$/;
+
 /**
  * Begins generating a function.
  * @memberof util
@@ -75,7 +77,7 @@ function codegen(functionParams, functionName) {
     }
 
     function toString(functionNameOverride) {
-        return "function " + (functionNameOverride || functionName || "") + "(" + (functionParams && functionParams.join(",") || "") + "){\n  " + body.join("\n  ") + "\n}";
+        return "function " + safeFunctionName(functionNameOverride || functionName) + "(" + (functionParams && functionParams.join(",") || "") + "){\n  " + body.join("\n  ") + "\n}";
     }
 
     Codegen.toString = toString;
@@ -97,3 +99,14 @@ function codegen(functionParams, functionName) {
  * @type {boolean}
  */
 codegen.verbose = false;
+
+function safeFunctionName(name) {
+    if (!name)
+        return "";
+    name = String(name).replace(/[^\w$]/g, "");
+    if (!name)
+        return "";
+    if (/^\d/.test(name))
+        name = "_" + name;
+    return reservedRe.test(name) ? name + "_" : name;
+}

package/node_modules/@protobufjs/codegen/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@protobufjs/codegen",
   "description": "A minimalistic code generation utility.",
-  "version": "2.0.4",
+  "version": "2.0.5",
   "author": "Daniel Wirtz <dcode+protobufjs@dcode.io>",
   "repository": {
     "type": "git",

package/node_modules/@protobufjs/inquire/index.js

@@ -8,10 +8,30 @@ module.exports = inquire;
  * @returns {?Object} Required module if available and not empty, otherwise `null`
  */
 function inquire(moduleName) {
-    try {
-        var mod = eval("quire".replace(/^/,"re"))(moduleName); // eslint-disable-line no-eval
-        if (mod && (mod.length || Object.keys(mod).length))
-            return mod;
-    } catch (e) {} // eslint-disable-line no-empty
+  try {
+    if (typeof require !== "function") {
+      return null;
+    }
+    var mod = require(moduleName);
+    if (mod && (mod.length || Object.keys(mod).length)) return mod;
     return null;
+  } catch (err) {
+    // ignore
+    return null;
+  }
 }
+
+/*
+// maybe worth a shot to prevent renaming issues:
+// see: https://github.com/webpack/webpack/blob/master/lib/dependencies/CommonJsRequireDependencyParserPlugin.js
+// triggers on:
+// - expression require.cache
+// - expression require (???)
+// - call require
+// - call require:commonjs:item
+// - call require:commonjs:context
+
+Object.defineProperty(Function.prototype, "__self", { get: function() { return this; } });
+var r = require.__self;
+delete Function.prototype.__self;
+*/

package/node_modules/@protobufjs/inquire/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@protobufjs/inquire",
   "description": "Requires a module only if available and hides the require call from bundlers.",
-  "version": "1.1.0",
+  "version": "1.1.1",
   "author": "Daniel Wirtz <dcode+protobufjs@dcode.io>",
   "repository": {
     "type": "git",
@@ -12,7 +12,7 @@
   "types": "index.d.ts",
   "devDependencies": {
     "istanbul": "^0.4.5",
-    "tape": "^4.6.3"
+    "tape": "^5.0.0"
   },
   "scripts": {
     "test": "tape tests/*.js",

package/node_modules/@protobufjs/utf8/index.js

@@ -5,7 +5,8 @@
  * @memberof util
  * @namespace
  */
-var utf8 = exports;
+var utf8 = exports,
+    replacementChar = "\ufffd";
 
 /**
  * Calculates the UTF8 byte length of a string.
@@ -38,36 +39,34 @@ utf8.length = function utf8_length(string) {
  * @returns {string} String read
  */
 utf8.read = function utf8_read(buffer, start, end) {
-    var len = end - start;
-    if (len < 1)
+    if (end - start < 1) {
         return "";
-    var parts = null,
-        chunk = [],
-        i = 0, // char offset
-        t;     // temporary
-    while (start < end) {
-        t = buffer[start++];
-        if (t < 128)
-            chunk[i++] = t;
-        else if (t > 191 && t < 224)
-            chunk[i++] = (t & 31) << 6 | buffer[start++] & 63;
-        else if (t > 239 && t < 365) {
-            t = ((t & 7) << 18 | (buffer[start++] & 63) << 12 | (buffer[start++] & 63) << 6 | buffer[start++] & 63) - 0x10000;
-            chunk[i++] = 0xD800 + (t >> 10);
-            chunk[i++] = 0xDC00 + (t & 1023);
-        } else
-            chunk[i++] = (t & 15) << 12 | (buffer[start++] & 63) << 6 | buffer[start++] & 63;
-        if (i > 8191) {
-            (parts || (parts = [])).push(String.fromCharCode.apply(String, chunk));
-            i = 0;
-        }
     }
-    if (parts) {
-        if (i)
-            parts.push(String.fromCharCode.apply(String, chunk.slice(0, i)));
-        return parts.join("");
+
+    var str = "";
+    for (var i = start; i < end;) {
+        var t = buffer[i++];
+        if (t <= 0x7F) {
+            str += String.fromCharCode(t);
+        } else if (t >= 0xC0 && t < 0xE0) {
+            var c2 = (t & 0x1F) << 6 | buffer[i++] & 0x3F;
+            str += c2 >= 0x80 ? String.fromCharCode(c2) : replacementChar;
+        } else if (t >= 0xE0 && t < 0xF0) {
+            var c3 = (t & 0xF) << 12 | (buffer[i++] & 0x3F) << 6 | buffer[i++] & 0x3F;
+            str += c3 >= 0x800 ? String.fromCharCode(c3) : replacementChar;
+        } else if (t >= 0xF0) {
+            var t2 = (t & 7) << 18 | (buffer[i++] & 0x3F) << 12 | (buffer[i++] & 0x3F) << 6 | buffer[i++] & 0x3F;
+            if (t2 < 0x10000 || t2 > 0x10FFFF)
+                str += replacementChar;
+            else {
+                t2 -= 0x10000;
+                str += String.fromCharCode(0xD800 + (t2 >> 10));
+                str += String.fromCharCode(0xDC00 + (t2 & 0x3FF));
+            }
+        }
     }
-    return String.fromCharCode.apply(String, chunk.slice(0, i));
+
+    return str;
 };
 
 /**

package/node_modules/@protobufjs/utf8/package.json

@@ -1,21 +1,21 @@
-{
-  "name": "@protobufjs/utf8",
-  "description": "A minimal UTF8 implementation for number arrays.",
-  "version": "1.1.0",
-  "author": "Daniel Wirtz <dcode+protobufjs@dcode.io>",
-  "repository": {
-    "type": "git",
-    "url": "https://github.com/dcodeIO/protobuf.js.git"
-  },
-  "license": "BSD-3-Clause",
-  "main": "index.js",
-  "types": "index.d.ts",
-  "devDependencies": {
-    "istanbul": "^0.4.5",
-    "tape": "^4.6.3"
-  },
-  "scripts": {
-    "test": "tape tests/*.js",
-    "coverage": "istanbul cover node_modules/tape/bin/tape tests/*.js"
-  }
-}
+{
+  "name": "@protobufjs/utf8",
+  "description": "A minimal UTF8 implementation for number arrays.",
+  "version": "1.1.1",
+  "author": "Daniel Wirtz <dcode+protobufjs@dcode.io>",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/dcodeIO/protobuf.js.git"
+  },
+  "license": "BSD-3-Clause",
+  "main": "index.js",
+  "types": "index.d.ts",
+  "devDependencies": {
+    "istanbul": "^0.4.5",
+    "tape": "^5.0.0"
+  },
+  "scripts": {
+    "test": "tape tests/*.js",
+    "coverage": "istanbul cover node_modules/tape/bin/tape tests/*.js"
+  }
+}

package/node_modules/@slack/bolt/dist/conversation-store.js

@@ -25,8 +25,10 @@ class MemoryStore {
                     // release the memory
                     this.state.delete(conversationId);
                     reject(new Error('Conversation expired'));
+                    return;
                 }
                 resolve(entry.value);
+                return;
             }
             reject(new Error('Conversation not found'));
         });

package/node_modules/@slack/bolt/dist/errors.js

@@ -78,7 +78,7 @@ class ContextMissingPropertyError extends Error {
 }
 exports.ContextMissingPropertyError = ContextMissingPropertyError;
 class InvalidCustomPropertyError extends Error {
-    code = ErrorCode.AppInitializationError;
+    code = ErrorCode.InvalidCustomPropertyError;
 }
 exports.InvalidCustomPropertyError = InvalidCustomPropertyError;
 class CustomRouteInitializationError extends Error {

package/node_modules/@slack/bolt/dist/receivers/HTTPModuleFunctions.js

@@ -68,9 +68,14 @@ const parseAndVerifyHTTPRequest = async (options, req, _res) => {
     const textBody = bufferedReq.rawBody.toString();
     const contentType = req.headers['content-type'];
     if (contentType === 'application/x-www-form-urlencoded') {
-        // `ssl_check=1` requests do not require x-slack-signature verification
+        // Slack sends `ssl_check=1` to verify SSL connectivity, these requests do not require x-slack-signature verification
+        // https://docs.slack.dev/interactivity/implementing-slash-commands/#responding_basic_receipt
         const parsedQs = (0, node_querystring_1.parse)(textBody);
-        if (parsedQs?.ssl_check) {
+        if (parsedQs?.ssl_check === '1') {
+            // ssl_check requests don't require signature verification, but we must
+            // strip any smuggled payload to prevent unauthenticated event injection
+            const sanitized = `ssl_check=${parsedQs.ssl_check}`;
+            bufferedReq.rawBody = Buffer.from(sanitized);
             return bufferedReq;
         }
     }

package/node_modules/@slack/bolt/dist/receivers/HTTPReceiver.js

@@ -328,9 +328,10 @@ class HTTPReceiver {
                 httpFunc.buildNoBodyResponse(res, 400);
                 return;
             }
-            // Handle SSL checks
-            if (body.ssl_check) {
-                httpFunc.buildNoBodyResponse(res, 200);
+            // Slack sends `ssl_check=1` to verify SSL connectivity
+            // https://docs.slack.dev/interactivity/implementing-slash-commands/#responding_basic_receipt
+            if (body.ssl_check === '1') {
+                httpFunc.buildSSLCheckResponse(res);
                 return;
             }
             // Handle URL verification

package/node_modules/@slack/bolt/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@slack/bolt",
-  "version": "4.7.0",
+  "version": "4.7.2",
   "description": "A framework for building Slack apps, fast.",
   "author": "Slack Technologies, LLC",
   "license": "MIT",
@@ -25,18 +25,23 @@
     "npm": ">=8.6.0"
   },
   "scripts": {
-    "prepare": "npm run build",
     "build": "npm run build:clean && tsc",
     "build:clean": "shx rm -rf ./dist ./coverage",
+    "changeset": "npx @changesets/cli",
     "lint": "npx @biomejs/biome check docs src test examples",
     "lint:fix": "npx @biomejs/biome check --write docs src test examples",
+    "prepare": "npm run build",
     "test": "npm run build && npm run lint && npm run test:types && npm run test:coverage",
-    "test:unit": "TS_NODE_PROJECT=tsconfig.json mocha --config test/unit/.mocharc.json",
     "test:coverage": "c8 npm run test:unit",
     "test:types": "tsd --files test/types",
+    "test:unit": "TS_NODE_PROJECT=tsconfig.json mocha --config test/unit/.mocharc.json",
+    "version": "npm run changeset version && npm install",
     "watch": "npx nodemon --watch 'src' --ext 'ts' --exec npm run build"
   },
-  "repository": "slackapi/bolt-js",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/slackapi/bolt-js.git"
+  },
   "homepage": "https://docs.slack.dev/tools/bolt-js",
   "bugs": {
     "url": "https://github.com/slackapi/bolt-js/issues"
@@ -44,9 +49,9 @@
   "dependencies": {
     "@slack/logger": "^4.0.1",
     "@slack/oauth": "^3.0.5",
-    "@slack/socket-mode": "^2.0.6",
+    "@slack/socket-mode": "^2.0.7",
     "@slack/types": "^2.20.1",
-    "@slack/web-api": "^7.15.0",
+    "@slack/web-api": "^7.15.1",
     "axios": "^1.12.0",
     "express": "^5.0.0",
     "path-to-regexp": "^8.1.0",
@@ -55,6 +60,7 @@
   },
   "devDependencies": {
     "@biomejs/biome": "^1.9.0",
+    "@changesets/cli": "^2.29.8",
     "@tsconfig/node18": "^18.2.4",
     "@types/chai": "^4.1.7",
     "@types/mocha": "^10.0.1",

package/node_modules/@slack/socket-mode/dist/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@slack/socket-mode",
-    "version": "2.0.6",
+    "version": "2.0.7",
     "description": "Official library for using the Slack Platform's Socket Mode API",
     "author": "Slack Technologies, LLC",
     "license": "MIT",

package/node_modules/@slack/socket-mode/dist/src/SlackWebSocket.js

@@ -118,11 +118,17 @@ class SlackWebSocket {
                 this.logger.debug('Terminating WebSocket (close frame received).');
                 this.terminate();
             }
+            else if (this.websocket.readyState === ws_1.WebSocket.CLOSING) {
+                // A close frame was already sent but the peer hasn't responded. Force-terminate rather than
+                // waiting for the ws library's closeTimeout (~30s) while the ping monitor logs repeated warnings.
+                this.logger.debug('Terminating WebSocket (close frame sent but no response, force-terminating).');
+                this.terminate();
+            }
             else {
                 // If we haven't received a close frame yet, then we send one to the peer, expecting to receive a close frame
                 // in response.
                 this.logger.debug('Sending close frame (status=1000).');
-                this.websocket.close(1000); // send a close frame, 1000=Normal Closure
+                this.websocket.close(1000); // 1000 = Normal Closure
             }
         }
         else {

package/node_modules/@slack/socket-mode/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@slack/socket-mode",
-  "version": "2.0.6",
+  "version": "2.0.7",
   "description": "Official library for using the Slack Platform's Socket Mode API",
   "author": "Slack Technologies, LLC",
   "license": "MIT",

package/node_modules/@slack/types/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@slack/types",
-  "version": "2.20.1",
+  "version": "2.21.1",
   "description": "Shared type definitions for the Node Slack SDK",
   "author": "Slack Technologies, LLC",
   "license": "MIT",

package/node_modules/@slack/web-api/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@slack/web-api",
-  "version": "7.15.1",
+  "version": "7.15.2",
   "description": "Official library for using the Slack Platform's Web API",
   "author": "Slack Technologies, LLC",
   "license": "MIT",
@@ -40,17 +40,16 @@
     "build:clean": "shx rm -rf ./dist",
     "docs": "npx typedoc --plugin typedoc-plugin-markdown",
     "prepack": "npm run build",
-    "test": "npm run test:unit",
-    "test:node18": "npm run build && bash -c 'node --test --test-reporter=spec --import tsx src/*.test.ts'",
+    "test": "npm run build && bash -c 'node --test-reporter=spec --test-reporter-destination=stdout --test-reporter=junit --test-reporter-destination=test-results.xml --import tsx --test src/*.test.ts'",
+    "test:coverage": "npm run build && node --experimental-test-coverage --test-reporter=spec --test-reporter-destination=stdout --test-reporter=lcov --test-reporter-destination=lcov.info --test-reporter=junit --test-reporter-destination=test-results.xml --import tsx --test src/*.test.ts",
     "test:integration": "npm run build && node test/integration/commonjs-project/index.js && node test/integration/esm-project/index.mjs && npm run test:integration:ts",
     "test:integration:ts": "cd test/integration/ts-4.7-project && npm i && npm run build",
     "test:types": "tsd",
-    "test:unit": "npm run build && node --experimental-test-coverage --test-reporter=spec --test-reporter-destination=stdout --test-reporter=lcov --test-reporter-destination=lcov.info --test-reporter=junit --test-reporter-destination=test-results.xml --import tsx --test src/*.test.ts",
     "watch": "npx nodemon --watch 'src' --ext 'ts' --exec npm run build"
   },
   "dependencies": {
     "@slack/logger": "^4.0.1",
-    "@slack/types": "^2.20.1",
+    "@slack/types": "^2.21.0",
     "@types/node": ">=18",
     "@types/retry": "0.12.0",
     "axios": "^1.15.0",