Best possible solution:

Use #92947 as the canonical landing path for the QQBot cron auto-TTS delivery fix, while keeping the already-merged QQBot error-surfacing behavior from #92823.

Do we have a high-confidence way to reproduce the issue?

Yes, at source level: current main passes durable media roots into channel send contexts while QQBot's local media gates do not accept the cron TTS temp-root file path. I did not run a live QQBot repro for this branch; the replacement PR supplies live after-fix proof.

Is this the best way to solve the issue?

No. This branch is a plausible partial fix, but the newer replacement PR is the better solution because it fixes the QQBot trust boundary consistently across all gates and includes live QQBot proof.

Security review:

Security review cleared: No concrete security or supply-chain concern was found in this branch; the blocker is functional completeness and proof, not malicious or dependency-sensitive change.

AGENTS.md: found and applied where relevant.

What I checked:

• Same remaining bug has a stronger canonical PR: The linked bug is closed by both this PR and fix(qqbot): deliver cron auto-TTS voice by trusting OpenClaw temp root #92947; the latter is open, mergeable, clean, labeled proof-sufficient, and has passing check-test-types on its current head. (56567160ed1d)
• Replacement PR fixes the root trust boundary at all relevant gates: The replacement PR adds resolveTrustedOutboundMediaPath and routes resolveOutboundMediaPath, the voice re-check, and structured payload validation through it, so temp-root TTS media is handled consistently. (extensions/qqbot/src/engine/messaging/trusted-media-path.ts:19, 56567160ed1d)
• This branch still fails test typechecking: CI check-test-types fails because the new test passes an account object missing required GatewayAccount fields markdownSupport and config. (extensions/qqbot/src/engine/messaging/outbound-media-send.test.ts:51, 8d68065e4ee7)
• This branch leaves sibling media gates one-sided: The PR adds extraLocalRoots to the media target and only consumes it in the voice path; image/video/document local-path revalidation still calls resolveOutboundMediaPath without those roots. (extensions/qqbot/src/engine/messaging/outbound-media-send.ts:70, 8d68065e4ee7)
• Adapter error-surfacing part already landed separately: The shared QQBot send-result error and no-platform-id checks were merged by fix(qqbot): surface failed media sends #92823, so this branch no longer has unique value on that part. (extensions/qqbot/src/channel.ts:137, 650c5cac3326)
• Current main still shows the source-level issue path before the replacement lands: Current main builds channel contexts with mediaLocalRoots, while QQBot's current media path resolver still accepts only QQBot media storage roots; that confirms the linked bug remains real but is better owned by the replacement PR. (src/infra/outbound/deliver.ts:588, a0b16f37e835)

Likely related people:

• cxyhhhhh: GitHub path history shows the unified QQBot media send architecture came through the large QQBot group/media PR. (role: original QQBot media architecture contributor; confidence: high; commits: 5ccf179a34a9; files: extensions/qqbot/src/engine/messaging/outbound-media-send.ts, extensions/qqbot/src/channel.ts)
• sliverp: The same QQBot architecture commit credits sliverp as a co-author on the original plugin/media work, and recent QQBot fixes also route through this area. (role: QQBot feature-history contributor; confidence: medium; commits: 5ccf179a34a9, e7ee1c55b433; files: extensions/qqbot/src/engine/messaging/outbound-media-send.ts, extensions/qqbot/src/channel.ts)
• steipete: Recent history includes fs-safe/media-root work and current local blame in the affected QQBot media resolver path. (role: recent media/local-root area contributor; confidence: medium; commits: 538605ff44d2, f1bdc91b64d4; files: extensions/qqbot/src/engine/messaging/outbound-media-send.ts, src/media/local-roots.ts)
• zhangguiping-xydt: Authored the merged QQBot media-send failure surfacing PR that overlaps this branch's adapter error-handling part. (role: recent adjacent QQBot error-propagation contributor; confidence: medium; commits: 650c5cac3326; files: extensions/qqbot/src/channel.ts, extensions/qqbot/src/channel.message-adapter.test.ts)
• ZengWen-DT: Opened the proof-positive replacement PR that now owns the same linked cron auto-TTS delivery bug. (role: replacement PR author; confidence: high; commits: 56567160ed1d; files: extensions/qqbot/src/engine/messaging/trusted-media-path.ts, extensions/qqbot/src/engine/messaging/outbound-media-send.ts)

Codex review notes: model internal, reasoning high; reviewed against a0b16f37e835.