@tencent-connect/openclaw-qqbot 1.6.5-alpha.1 → 1.6.5-alpha.3

package/dist/src/api.js

@@ -2,7 +2,6 @@
  * QQ Bot API 鉴权和请求封装
  * [修复版] 已重构为支持多实例并发，消除全局变量冲突
  */
-import { createRequire } from "node:module";
 import os from "node:os";
 import { computeFileHash, getCachedFileInfo, setCachedFileInfo } from "./utils/upload-cache.js";
 import { sanitizeFileName } from "./utils/platform.js";
@@ -11,12 +10,8 @@ const TOKEN_URL = "https://bots.qq.com/app/getAppAccessToken";
 // ============ Plugin User-Agent ============
 // 格式: QQBotPlugin/{version} (Node/{nodeVersion}; {os})
 // 示例: QQBotPlugin/1.6.0 (Node/22.14.0; darwin)
-const _require = createRequire(import.meta.url);
-let _pluginVersion = "unknown";
-try {
-    _pluginVersion = _require("../package.json").version ?? "unknown";
-}
-catch { /* fallback */ }
+import { getPackageVersion } from "./utils/pkg-version.js";
+const _pluginVersion = getPackageVersion(import.meta.url);
 export const PLUGIN_USER_AGENT = `QQBotPlugin/${_pluginVersion} (Node/${process.versions.node}; ${os.platform()})`;
 // 运行时配置
 let currentMarkdownSupport = false;
@@ -234,21 +229,48 @@ export async function apiRequest(accessToken, method, path, body, timeoutMs) {
     });
     const traceId = res.headers.get("x-tps-trace-id") ?? "";
     console.log(`[qqbot-api] <<< Status: ${res.status} ${res.statusText}${traceId ? ` | TraceId: ${traceId}` : ""}`);
-    let data;
     let rawBody;
     try {
         rawBody = await res.text();
-        console.log(`[qqbot-api] <<< Body:`, rawBody);
-        data = JSON.parse(rawBody);
     }
     catch (err) {
-        throw new Error(`Failed to parse response[${path}]: ${err instanceof Error ? err.message : String(err)}`);
+        throw new Error(`读取响应失败[${path}]: ${err instanceof Error ? err.message : String(err)}`);
     }
+    console.log(`[qqbot-api] <<< Body:`, rawBody);
+    // 检测非 JSON 响应（HTML 网关错误页 / CDN 限流页等）
+    const contentType = res.headers.get("content-type") ?? "";
+    const isHtmlResponse = contentType.includes("text/html") || rawBody.trimStart().startsWith("<");
     if (!res.ok) {
-        const error = data;
-        throw new Error(`API Error [${path}]: ${error.message ?? JSON.stringify(data)}`);
+        if (isHtmlResponse) {
+            // HTML 响应 = 网关/限流层返回的错误页，给出友好提示
+            const statusHint = res.status === 502 || res.status === 503 || res.status === 504
+                ? "调用发生异常，请稍候重试"
+                : res.status === 429
+                    ? "请求过于频繁，已被限流"
+                    : `开放平台返回 HTTP ${res.status}`;
+            throw new Error(`${statusHint}（${path}），请稍后重试`);
+        }
+        // JSON 错误响应
+        try {
+            const error = JSON.parse(rawBody);
+            throw new Error(`API Error [${path}]: ${error.message ?? rawBody}`);
+        }
+        catch (parseErr) {
+            if (parseErr instanceof Error && parseErr.message.startsWith("API Error"))
+                throw parseErr;
+            throw new Error(`API Error [${path}] HTTP ${res.status}: ${rawBody.slice(0, 200)}`);
+        }
+    }
+    // 成功响应但不是 JSON（极端异常情况）
+    if (isHtmlResponse) {
+        throw new Error(`QQ 服务端返回了非 JSON 响应（${path}），可能是临时故障，请稍后重试`);
+    }
+    try {
+        return JSON.parse(rawBody);
+    }
+    catch {
+        throw new Error(`开放平台响应格式异常（${path}），请稍后重试`);
     }
-    return data;
 }
 // ============ 上传重试（指数退避） ============
 const UPLOAD_MAX_RETRIES = 2;

package/dist/src/slash-commands.js

@@ -18,16 +18,9 @@ import { getUpdateInfo, checkVersionExists } from "./update-checker.js";
 import { getHomeDir, getQQBotDataDir, isWindows } from "./utils/platform.js";
 import { saveCredentialBackup } from "./credential-backup.js";
 import { fileURLToPath } from "node:url";
+import { getPackageVersion } from "./utils/pkg-version.js";
 const require = createRequire(import.meta.url);
-// 读取 package.json 中的版本号
-let PLUGIN_VERSION = "unknown";
-try {
-    const pkg = require("../package.json");
-    PLUGIN_VERSION = pkg.version ?? "unknown";
-}
-catch {
-    // fallback
-}
+let PLUGIN_VERSION = getPackageVersion(import.meta.url);
 // 获取 openclaw 框架版本（缓存结果，只执行一次）
 let _frameworkVersion = null;
 function getFrameworkVersion() {

package/dist/src/update-checker.js

@@ -9,6 +9,7 @@
  */
 import { createRequire } from "node:module";
 import https from "node:https";
+import { getPackageVersion } from "./utils/pkg-version.js";
 const require = createRequire(import.meta.url);
 const PKG_NAME = "@tencent-connect/openclaw-qqbot";
 const ENCODED_PKG = encodeURIComponent(PKG_NAME);
@@ -16,14 +17,7 @@ const REGISTRIES = [
     `https://registry.npmjs.org/${ENCODED_PKG}`,
     `https://registry.npmmirror.com/${ENCODED_PKG}`,
 ];
-let CURRENT_VERSION = "unknown";
-try {
-    const pkg = require("../package.json");
-    CURRENT_VERSION = pkg.version ?? "unknown";
-}
-catch {
-    // fallback
-}
+let CURRENT_VERSION = getPackageVersion(import.meta.url);
 let _log;
 function fetchJson(url, timeoutMs) {
     return new Promise((resolve, reject) => {

package/dist/src/utils/pkg-version.d.ts

@@ -0,0 +1,5 @@
+/**
+ * 从 import.meta.url 向上遍历目录树查找 package.json 并读取 version。
+ * 不依赖硬编码的 "../" 层级，无论编译输出结构如何变化都能可靠找到。
+ */
+export declare function getPackageVersion(metaUrl?: string): string;

package/dist/src/utils/pkg-version.js

@@ -0,0 +1,51 @@
+/**
+ * 从 import.meta.url 向上遍历目录树查找 package.json 并读取 version。
+ * 不依赖硬编码的 "../" 层级，无论编译输出结构如何变化都能可靠找到。
+ */
+import { fileURLToPath } from "node:url";
+import { createRequire } from "node:module";
+import path from "node:path";
+import fs from "node:fs";
+let _cached = null;
+export function getPackageVersion(metaUrl) {
+    if (_cached !== null)
+        return _cached;
+    // Strategy 1: 从调用者的 import.meta.url（或本模块）向上遍历找 package.json
+    const startFile = metaUrl ? fileURLToPath(metaUrl) : fileURLToPath(import.meta.url);
+    let dir = path.dirname(startFile);
+    const root = path.parse(dir).root;
+    while (dir !== root) {
+        const candidate = path.join(dir, "package.json");
+        try {
+            if (fs.existsSync(candidate)) {
+                const pkg = JSON.parse(fs.readFileSync(candidate, "utf8"));
+                // 确认是我们自己的包（避免找到其他 package.json）
+                if (pkg.name === "@tencent-connect/openclaw-qqbot" && pkg.version) {
+                    _cached = pkg.version;
+                    return _cached;
+                }
+            }
+        }
+        catch {
+            // ignore and try parent
+        }
+        dir = path.dirname(dir);
+    }
+    // Strategy 2: fallback 用 createRequire 尝试常见相对路径
+    try {
+        const require = createRequire(metaUrl ?? import.meta.url);
+        for (const rel of ["../../package.json", "../package.json", "./package.json"]) {
+            try {
+                const pkg = require(rel);
+                if (pkg?.version) {
+                    _cached = pkg.version;
+                    return _cached;
+                }
+            }
+            catch { /* next */ }
+        }
+    }
+    catch { /* fallback */ }
+    _cached = "unknown";
+    return _cached;
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tencent-connect/openclaw-qqbot",
-  "version": "1.6.5-alpha.1",
+  "version": "1.6.5-alpha.3",
   "type": "module",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",

package/scripts/postinstall-link-sdk.js

@@ -10,7 +10,7 @@
 // globally installed openclaw package, allowing Node's native ESM resolver
 // (used by jiti with tryNative:true for .js files) to find `openclaw/plugin-sdk`.
 
-import { existsSync, symlinkSync, mkdirSync, readlinkSync } from "node:fs";
+import { existsSync, symlinkSync, mkdirSync, realpathSync } from "node:fs";
 import { dirname, join, resolve } from "node:path";
 import { fileURLToPath } from "node:url";
 import { execSync } from "node:child_process";
@@ -18,8 +18,9 @@ import { execSync } from "node:child_process";
 const __dirname = dirname(fileURLToPath(import.meta.url));
 const pluginRoot = resolve(__dirname, "..");
 
-// Only run when installed under .openclaw/extensions/
-if (!pluginRoot.includes(".openclaw") && !pluginRoot.includes("extensions")) {
+// Only run when installed under an openclaw-like extensions directory
+// (supports openclaw, clawdbot, moltbot, etc.)
+if (!pluginRoot.includes("extensions")) {
   process.exit(0);
 }
 
@@ -30,37 +31,83 @@ if (existsSync(linkTarget)) {
   process.exit(0);
 }
 
+// CLI names to try (openclaw and its aliases)
+const CLI_NAMES = ["openclaw", "clawdbot", "moltbot"];
+
 // Find the global openclaw installation
 let openclawRoot = null;
-try {
-  // Try require.resolve from global context
-  const globalRoot = execSync("npm root -g", { encoding: "utf-8" }).trim();
-  const candidate = join(globalRoot, "openclaw");
-  if (existsSync(join(candidate, "package.json"))) {
-    openclawRoot = candidate;
-  }
-} catch {}
 
+// Strategy 1: npm root -g → look for any known CLI package name
 if (!openclawRoot) {
   try {
-    // Try resolving from the openclaw CLI binary
-    const bin = execSync("which openclaw", { encoding: "utf-8" }).trim();
-    // bin is typically <prefix>/bin/openclaw -> ../lib/node_modules/openclaw/...
-    const candidate = resolve(dirname(bin), "..", "lib", "node_modules", "openclaw");
-    if (existsSync(join(candidate, "package.json"))) {
-      openclawRoot = candidate;
+    const globalRoot = execSync("npm root -g", { encoding: "utf-8" }).trim();
+    for (const name of CLI_NAMES) {
+      const candidate = join(globalRoot, name);
+      if (existsSync(join(candidate, "package.json"))) {
+        openclawRoot = candidate;
+        break;
+      }
     }
   } catch {}
 }
 
+// Strategy 2: resolve from the CLI binary (which openclaw / clawdbot / moltbot)
+if (!openclawRoot) {
+  const whichCmd = process.platform === "win32" ? "where" : "which";
+  for (const name of CLI_NAMES) {
+    try {
+      const bin = execSync(`${whichCmd} ${name}`, { encoding: "utf-8" }).trim().split("\n")[0];
+      if (!bin) continue;
+      // Resolve symlinks to get actual binary location
+      const realBin = realpathSync(bin);
+      // bin is typically <prefix>/bin/<name> -> ../lib/node_modules/<name>/...
+      const candidate = resolve(dirname(realBin), "..", "lib", "node_modules", name);
+      if (existsSync(join(candidate, "package.json"))) {
+        openclawRoot = candidate;
+        break;
+      }
+      // Also try: binary might be inside the package itself (e.g. .../node_modules/<name>/bin/<name>)
+      const candidate2 = resolve(dirname(realBin), "..");
+      if (existsSync(join(candidate2, "package.json")) && existsSync(join(candidate2, "plugin-sdk"))) {
+        openclawRoot = candidate2;
+        break;
+      }
+    } catch {}
+  }
+}
+
+// Strategy 3: walk up from the extensions directory to find the CLI's data root,
+// then look for a global node_modules sibling
+if (!openclawRoot) {
+  // pluginRoot is like /home/user/.openclaw/extensions/openclaw-qqbot
+  // The CLI data dir is /home/user/.openclaw (or .clawdbot, .moltbot)
+  const extensionsDir = dirname(pluginRoot);
+  const dataDir = dirname(extensionsDir);
+  const dataDirName = dataDir.split("/").pop() || dataDir.split("\\").pop() || "";
+  // dataDirName is like ".openclaw" → strip the dot to get "openclaw"
+  const cliName = dataDirName.replace(/^\./, "");
+  if (cliName) {
+    try {
+      const globalRoot = execSync("npm root -g", { encoding: "utf-8" }).trim();
+      const candidate = join(globalRoot, cliName);
+      if (existsSync(join(candidate, "package.json"))) {
+        openclawRoot = candidate;
+      }
+    } catch {}
+  }
+}
+
 if (!openclawRoot) {
   // Not fatal — plugin may work if openclaw loads it with proper alias resolution
+  // But log a warning so upgrade scripts can detect the failure
+  console.error("[postinstall-link-sdk] WARNING: could not find openclaw/clawdbot/moltbot global installation, symlink not created");
   process.exit(0);
 }
 
 try {
   mkdirSync(join(pluginRoot, "node_modules"), { recursive: true });
   symlinkSync(openclawRoot, linkTarget, "junction");
-} catch {
-  // Silently ignore — symlink creation may fail on some systems
+  console.log(`[postinstall-link-sdk] symlink created: node_modules/openclaw -> ${openclawRoot}`);
+} catch (e) {
+  console.error(`[postinstall-link-sdk] WARNING: symlink creation failed: ${e.message}`);
 }

package/scripts/upgrade-via-npm.ps1

@@ -242,7 +242,7 @@ if ($MissingModules.Count -gt 0) {
 $nmDir = Join-Path $STAGING_DIR "node_modules"
 if (Test-Path $nmDir) {
     $BundledOK = $true
-    foreach ($dep in @("ws", "undici")) {
+    foreach ($dep in @("ws", "silk-wasm")) {
         if (-not (Test-Path (Join-Path $nmDir $dep))) {
             Write-Host "  [WARN] Bundled dependency missing: $dep" -ForegroundColor Yellow
             $BundledOK = $false
@@ -273,6 +273,7 @@ Write-Host "  [OK] All preflight checks passed"
 # [3/5] Replace plugin directory (in-place overwrite to avoid file-lock issues)
 Write-Host ""
 Write-Host "[3/5] Replacing plugin directory..."
+if (-not (Test-Path $EXTENSIONS_DIR)) { New-Item -ItemType Directory -Path $EXTENSIONS_DIR -Force | Out-Null }
 $TARGET_DIR = Join-Path $EXTENSIONS_DIR "openclaw-qqbot"
 
 if (-not (Test-Path $TARGET_DIR)) {
@@ -315,6 +316,47 @@ foreach ($legacyName in @("qqbot", "openclaw-qq")) {
 }
 Write-Host "  Installed to: $TARGET_DIR"
 
+# Execute postinstall script to create openclaw SDK symlink
+# (upgrade-via-npm is pure file operation, npm install is not run, so postinstall won't trigger automatically)
+$PostinstallScript = Join-Path $TARGET_DIR "scripts" "postinstall-link-sdk.js"
+if (Test-Path $PostinstallScript) {
+    Write-Host "  Running postinstall: creating openclaw SDK symlink..."
+    try {
+        Push-Location $TARGET_DIR
+        $postOutput = & node $PostinstallScript 2>&1
+        Pop-Location
+        if ($postOutput) { Write-Host "  $postOutput" }
+    } catch {
+        Write-Host "  [WARN] postinstall script failed (non-fatal)" -ForegroundColor Yellow
+        try { Pop-Location } catch {}
+    }
+    # Verify symlink creation
+    $symlinkPath = Join-Path $TARGET_DIR "node_modules" "openclaw"
+    if (Test-Path $symlinkPath) {
+        Write-Host "  [OK] openclaw SDK symlink ready"
+    } else {
+        Write-Host "  [WARN] openclaw SDK symlink not created, attempting manual fallback..." -ForegroundColor Yellow
+        $cliDataDir = Split-Path $EXTENSIONS_DIR -Parent
+        $cliName = (Split-Path $cliDataDir -Leaf) -replace '^\.',''
+        try {
+            $globalRoot = (& npm root -g 2>$null).Trim()
+            $globalPkg = Join-Path $globalRoot $cliName
+            if ($globalRoot -and (Test-Path $globalPkg)) {
+                $nmDir = Join-Path $TARGET_DIR "node_modules"
+                if (-not (Test-Path $nmDir)) { New-Item -ItemType Directory -Path $nmDir -Force | Out-Null }
+                New-Item -ItemType Junction -Path $symlinkPath -Target $globalPkg -Force | Out-Null
+                Write-Host "  [OK] Manual symlink created: -> $globalPkg"
+            } else {
+                Write-Host "  [ERROR] Cannot locate global $cliName installation (npm root -g: $globalRoot)" -ForegroundColor Red
+            }
+        } catch {
+            Write-Host "  [ERROR] Manual symlink creation also failed: $($_.Exception.Message)" -ForegroundColor Red
+        }
+    }
+} else {
+    Write-Host "  [WARN] postinstall script not found, skipping symlink creation" -ForegroundColor Yellow
+}
+
 # [4/5] Verify installation
 Write-Host ""
 Write-Host "[4/5] Verifying installation..."

package/scripts/upgrade-via-npm.sh

@@ -236,7 +236,7 @@ fi
 # (e) bundled node_modules 健康检查
 if [ -d "$STAGING_DIR/node_modules" ]; then
     BUNDLED_OK=true
-    for dep in "ws" "undici"; do
+    for dep in "ws" "silk-wasm"; do
         if [ ! -d "$STAGING_DIR/node_modules/$dep" ]; then
             echo "  ⚠️  bundled 依赖缺失: $dep"
             BUNDLED_OK=false
@@ -268,6 +268,7 @@ echo "  ✅ Preflight 检查全部通过"
 # 策略：先把 staging 放到 extensions/ 同级的临时名，再做单次 mv 替换
 echo ""
 echo "[3/5] 原子替换插件目录..."
+mkdir -p "$EXTENSIONS_DIR"
 TARGET_DIR="$EXTENSIONS_DIR/openclaw-qqbot"
 OLD_DIR="$(dirname "$EXTENSIONS_DIR")/.qqbot-upgrade-old"
 
@@ -297,6 +298,36 @@ for dir_name in qqbot openclaw-qq; do
 done
 echo "  已安装到: $TARGET_DIR"
 
+# 执行 postinstall 脚本创建 openclaw SDK symlink
+# （upgrade-via-npm 是纯文件操作，不走 npm install，所以 postinstall 不会自动触发）
+POSTINSTALL_SCRIPT="$TARGET_DIR/scripts/postinstall-link-sdk.js"
+if [ -f "$POSTINSTALL_SCRIPT" ]; then
+    echo "  执行 postinstall: 创建 openclaw SDK symlink..."
+    POSTINSTALL_OUTPUT="$(cd "$TARGET_DIR" && node "$POSTINSTALL_SCRIPT" 2>&1)" || true
+    [ -n "$POSTINSTALL_OUTPUT" ] && echo "  $POSTINSTALL_OUTPUT"
+    # 验证 symlink 是否创建成功
+    if [ -d "$TARGET_DIR/node_modules/openclaw" ]; then
+        echo "  ✅ openclaw SDK symlink 已就绪"
+    else
+        echo "  ⚠️  openclaw SDK symlink 未创建，插件可能无法加载"
+        echo "  尝试手动创建 symlink..."
+        # 手动 fallback：尝试从 CLI 数据目录名推断全局包名
+        _CLI_DATA_DIR="$(dirname "$EXTENSIONS_DIR")"
+        _CLI_NAME="$(basename "$_CLI_DATA_DIR" | sed 's/^\.//')"
+        _GLOBAL_ROOT="$(npm root -g 2>/dev/null || true)"
+        if [ -n "$_GLOBAL_ROOT" ] && [ -n "$_CLI_NAME" ] && [ -d "$_GLOBAL_ROOT/$_CLI_NAME" ]; then
+            mkdir -p "$TARGET_DIR/node_modules"
+            ln -sf "$_GLOBAL_ROOT/$_CLI_NAME" "$TARGET_DIR/node_modules/openclaw" 2>/dev/null && \
+                echo "  ✅ 手动 symlink 创建成功: -> $_GLOBAL_ROOT/$_CLI_NAME" || \
+                echo "  ❌ 手动 symlink 创建也失败了"
+        else
+            echo "  ❌ 无法定位全局 $_CLI_NAME 安装路径（npm root -g: $_GLOBAL_ROOT）"
+        fi
+    fi
+else
+    echo "  ⚠️  未找到 postinstall 脚本，跳过 symlink 创建"
+fi
+
 # [4/5] 输出新版本号和升级报告（供调用方解析）
 echo ""
 echo "[4/5] 验证安装..."

package/src/api.ts

@@ -3,7 +3,6 @@
  * [修复版] 已重构为支持多实例并发，消除全局变量冲突
  */
 
-import { createRequire } from "node:module";
 import os from "node:os";
 import { computeFileHash, getCachedFileInfo, setCachedFileInfo } from "./utils/upload-cache.js";
 import { sanitizeFileName } from "./utils/platform.js";
@@ -14,9 +13,8 @@ const TOKEN_URL = "https://bots.qq.com/app/getAppAccessToken";
 // ============ Plugin User-Agent ============
 // 格式: QQBotPlugin/{version} (Node/{nodeVersion}; {os})
 // 示例: QQBotPlugin/1.6.0 (Node/22.14.0; darwin)
-const _require = createRequire(import.meta.url);
-let _pluginVersion = "unknown";
-try { _pluginVersion = _require("../package.json").version ?? "unknown"; } catch { /* fallback */ }
+import { getPackageVersion } from "./utils/pkg-version.js";
+const _pluginVersion = getPackageVersion(import.meta.url);
 export const PLUGIN_USER_AGENT = `QQBotPlugin/${_pluginVersion} (Node/${process.versions.node}; ${os.platform()})`;
 
 // 运行时配置
@@ -285,22 +283,48 @@ export async function apiRequest<T = unknown>(
   const traceId = res.headers.get("x-tps-trace-id") ?? "";
   console.log(`[qqbot-api] <<< Status: ${res.status} ${res.statusText}${traceId ? ` | TraceId: ${traceId}` : ""}`);
 
-  let data: T;
   let rawBody: string;
   try {
     rawBody = await res.text();
-    console.log(`[qqbot-api] <<< Body:`, rawBody);
-    data = JSON.parse(rawBody) as T;
   } catch (err) {
-    throw new Error(`Failed to parse response[${path}]: ${err instanceof Error ? err.message : String(err)}`);
+    throw new Error(`读取响应失败[${path}]: ${err instanceof Error ? err.message : String(err)}`);
   }
+  console.log(`[qqbot-api] <<< Body:`, rawBody);
+
+  // 检测非 JSON 响应（HTML 网关错误页 / CDN 限流页等）
+  const contentType = res.headers.get("content-type") ?? "";
+  const isHtmlResponse = contentType.includes("text/html") || rawBody.trimStart().startsWith("<");
 
   if (!res.ok) {
-    const error = data as { message?: string; code?: number };
-    throw new Error(`API Error [${path}]: ${error.message ?? JSON.stringify(data)}`);
+    if (isHtmlResponse) {
+      // HTML 响应 = 网关/限流层返回的错误页，给出友好提示
+      const statusHint = res.status === 502 || res.status === 503 || res.status === 504
+        ? "调用发生异常，请稍候重试"
+        : res.status === 429
+          ? "请求过于频繁，已被限流"
+          : `开放平台返回 HTTP ${res.status}`;
+      throw new Error(`${statusHint}（${path}），请稍后重试`);
+    }
+    // JSON 错误响应
+    try {
+      const error = JSON.parse(rawBody) as { message?: string; code?: number };
+      throw new Error(`API Error [${path}]: ${error.message ?? rawBody}`);
+    } catch (parseErr) {
+      if (parseErr instanceof Error && parseErr.message.startsWith("API Error")) throw parseErr;
+      throw new Error(`API Error [${path}] HTTP ${res.status}: ${rawBody.slice(0, 200)}`);
+    }
   }
 
-  return data;
+  // 成功响应但不是 JSON（极端异常情况）
+  if (isHtmlResponse) {
+    throw new Error(`QQ 服务端返回了非 JSON 响应（${path}），可能是临时故障，请稍后重试`);
+  }
+
+  try {
+    return JSON.parse(rawBody) as T;
+  } catch {
+    throw new Error(`开放平台响应格式异常（${path}），请稍后重试`);
+  }
 }
 
 // ============ 上传重试（指数退避） ============

package/src/slash-commands.ts

@@ -20,16 +20,10 @@ import { getUpdateInfo, checkVersionExists } from "./update-checker.js";
 import { getHomeDir, getQQBotDataDir, isWindows } from "./utils/platform.js";
 import { saveCredentialBackup } from "./credential-backup.js";
 import { fileURLToPath } from "node:url";
+import { getPackageVersion } from "./utils/pkg-version.js";
 const require = createRequire(import.meta.url);
 
-// 读取 package.json 中的版本号
-let PLUGIN_VERSION = "unknown";
-try {
-  const pkg = require("../package.json");
-  PLUGIN_VERSION = pkg.version ?? "unknown";
-} catch {
-  // fallback
-}
+let PLUGIN_VERSION = getPackageVersion(import.meta.url);
 
 // 获取 openclaw 框架版本（缓存结果，只执行一次）
 let _frameworkVersion: string | null = null;

package/src/update-checker.ts

@@ -10,6 +10,7 @@
 
 import { createRequire } from "node:module";
 import https from "node:https";
+import { getPackageVersion } from "./utils/pkg-version.js";
 
 const require = createRequire(import.meta.url);
 
@@ -21,13 +22,7 @@ const REGISTRIES = [
   `https://registry.npmmirror.com/${ENCODED_PKG}`,
 ];
 
-let CURRENT_VERSION = "unknown";
-try {
-  const pkg = require("../package.json");
-  CURRENT_VERSION = pkg.version ?? "unknown";
-} catch {
-  // fallback
-}
+let CURRENT_VERSION = getPackageVersion(import.meta.url);
 
 export interface UpdateInfo {
   current: string;

package/src/utils/pkg-version.ts

@@ -0,0 +1,54 @@
+/**
+ * 从 import.meta.url 向上遍历目录树查找 package.json 并读取 version。
+ * 不依赖硬编码的 "../" 层级，无论编译输出结构如何变化都能可靠找到。
+ */
+
+import { fileURLToPath } from "node:url";
+import { createRequire } from "node:module";
+import path from "node:path";
+import fs from "node:fs";
+
+let _cached: string | null = null;
+
+export function getPackageVersion(metaUrl?: string): string {
+  if (_cached !== null) return _cached;
+
+  // Strategy 1: 从调用者的 import.meta.url（或本模块）向上遍历找 package.json
+  const startFile = metaUrl ? fileURLToPath(metaUrl) : fileURLToPath(import.meta.url);
+  let dir = path.dirname(startFile);
+  const root = path.parse(dir).root;
+
+  while (dir !== root) {
+    const candidate = path.join(dir, "package.json");
+    try {
+      if (fs.existsSync(candidate)) {
+        const pkg = JSON.parse(fs.readFileSync(candidate, "utf8"));
+        // 确认是我们自己的包（避免找到其他 package.json）
+        if (pkg.name === "@tencent-connect/openclaw-qqbot" && pkg.version) {
+          _cached = pkg.version as string;
+          return _cached;
+        }
+      }
+    } catch {
+      // ignore and try parent
+    }
+    dir = path.dirname(dir);
+  }
+
+  // Strategy 2: fallback 用 createRequire 尝试常见相对路径
+  try {
+    const require = createRequire(metaUrl ?? import.meta.url);
+    for (const rel of ["../../package.json", "../package.json", "./package.json"]) {
+      try {
+        const pkg = require(rel);
+        if (pkg?.version) {
+          _cached = pkg.version as string;
+          return _cached;
+        }
+      } catch { /* next */ }
+    }
+  } catch { /* fallback */ }
+
+  _cached = "unknown";
+  return _cached;
+}