openclaw
diff --git a/‎CHANGELOG.md‎
Lines changed: 1 addition & 0 deletions b/‎CHANGELOG.md‎
Lines changed: 1 addition & 0 deletions
diff --git a/‎extensions/qqbot/index.ts‎
Lines changed: 17 additions & 4 deletions b/‎extensions/qqbot/index.ts‎
Lines changed: 17 additions & 4 deletions
@@ -10,6 +10,7 @@ Docs: https://docs.openclaw.ai
 
 ### Fixes
 
+- fix(qqbot): enforce media storage boundary for all outbound local file paths [AI]. (#63271) Thanks @pgondhi987.
 - iMessage/self-chat: distinguish normal DM outbound rows from true self-chat using `destination_caller_id` plus chat participants, while preserving multi-handle self-chat aliases so outbound DM replies stop looping back as inbound messages. (#61619) Thanks @neeravmakwana.
 - fix(browser): auto-generate browser control auth token for none/trusted-proxy modes [AI]. (#63280) Thanks @pgondhi987.
 - fix(exec): replace TOCTOU check-then-read with atomic pinned-fd open in script preflight [AI]. (#62333) Thanks @pgondhi987.
 
@@ -17,6 +17,9 @@ type MediaTargetContext = {
   account: QQBotAccount;
   logPrefix: string;
 };
+type SendDocumentOptions = {
+  allowQQBotDataDownloads?: boolean;
+};
 
 type QQBotFrameworkCommandResult =
   | string
@@ -44,14 +47,22 @@ function resolveQQBotAccount(config: unknown, accountId?: string): QQBotAccount
   return resolve(config, accountId);
 }
 
-function sendDocument(context: MediaTargetContext, filePath: string) {
+function sendDocument(
+  context: MediaTargetContext,
+  filePath: string,
+  options?: SendDocumentOptions,
+) {
   const send = loadBundledEntryExportSync<
-    (context: MediaTargetContext, filePath: string) => Promise<unknown>
+    (
+      context: MediaTargetContext,
+      filePath: string,
+      options?: SendDocumentOptions,
+    ) => Promise<unknown>
   >(import.meta.url, {
     specifier: "./api.js",
     exportName: "sendDocument",
   });
-  return send(context, filePath);
+  return send(context, filePath, options);
 }
 
 function getFrameworkCommands(): QQBotFrameworkCommand[] {
@@ -173,7 +184,9 @@ export default defineBundledChannelEntry({
                 account,
                 logPrefix: `[qqbot:${account.accountId}]`,
               };
-              await sendDocument(mediaCtx, String(result.filePath));
+              await sendDocument(mediaCtx, String(result.filePath), {
+                allowQQBotDataDownloads: true,
+              });
             } catch {
               // File send failed; the text summary is still returned below.
             }