fix(qqbot): accept dm chat_type in approval authorization

[zhangyu921]

Problem

QQ Bot DM (C2C) sessions build their gateway session key with chat_type="dm" (see build_session_key in gateway/session.py, which uses chat_type="dm" for DMs). But _is_authorized_interaction_for_session in the qqbot adapter only accepted c2c / group / guild.

Result: every approval-button click in a QQ private chat falls through to return False and is logged as:

Rejected unauthorized approval click for session agent:main:qqbot:dm:<openid> (operator=<same openid>)

Command approval via inline keyboard is completely unusable in QQ DMs. Group/guild approvals are unaffected.

Fix

Treat dm like c2c — both are 1:1 user chats where the operator's openid must equal the chat id. Group/guild logic unchanged.

Verification

• dm + owner → authorized (was rejected before)
• dm + attacker → still rejected (no permission loosened)
• c2c + owner → authorized (regression pass)
• group + other user → still rejected (regression pass)
• Live-tested on QQ: with the fix, the approval button resolves the pending command; before it, every click was rejected.

[alt-glitch]

This was generated by AI during triage.

Duplicate of #31593: both patches change the same QQBot approval authorization allow-list to accept chat_type="dm" for DM session keys. #31593 is the earlier open canonical PR and includes focused regression coverage.

[teknium1]

Thanks for the focused QQBot authorization fix. Current main still has the reported mismatch: QQ C2C intake creates chat_type="dm" sources at gateway/platforms/qqbot/adapter.py:1293-1299, and build_session_key() serializes those as ...:dm:<chat_id> at gateway/session.py:1074-1086. The existing authorization branch accepts only c2c at gateway/platforms/qqbot/adapter.py:1105, then rejects other types at line 1115.

Problems

• This PR has no regression test. Existing dispatch coverage tests a C2C owner path at tests/gateway/test_qqbot.py:853 and an unauthorized group path at line 884, but not the DM-shaped key this change enables.

Suggested changes

• Add the focused DM approval-dispatch test already represented by the earlier canonical PR #31593: a matching operator for agent:main:qqbot:dm:u-42 should resolve the approval.

Automated hermes-sweeper review.

[teknium1]

Please add a dispatch-level regression test for a matching C2C operator clicking approve:agent:main:qqbot:dm:<openid>:allow-once; the current tests cover the analogous c2c key but not this newly accepted dm form.