@cxyhhhhh/openclaw-qqbot 2.0.0-dev.202607091556 → 2.0.0-dev.202607091957

package/dist/index.cjs

@@ -2237,7 +2237,7 @@ var require_websocket = __commonJS({
     var EventEmitter = require("events");
     var https3 = require("https");
     var http2 = require("http");
-    var net = require("net");
+    var net2 = require("net");
     var tls = require("tls");
     var { randomBytes: randomBytes2, createHash: createHash3 } = require("crypto");
     var { Duplex, Readable } = require("stream");
@@ -2971,12 +2971,12 @@ var require_websocket = __commonJS({
     }
     function netConnect(options) {
       options.path = options.socketPath;
-      return net.connect(options);
+      return net2.connect(options);
     }
     function tlsConnect(options) {
       options.path = void 0;
       if (!options.servername && options.servername !== "") {
-        options.servername = net.isIP(options.host) ? "" : options.host;
+        options.servername = net2.isIP(options.host) ? "" : options.host;
       }
       return tls.connect(options);
     }
@@ -5020,11 +5020,11 @@ var fs3 = __toESM(require("fs"), 1);
 var path = __toESM(require("path"), 1);
 
 // node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607081646/node_modules/@cxyhhhhh/qqbot-nodejs/dist/middleware/types.js
-function resolvePolicy(ctx, path21, explicit, defaultValue) {
+function resolvePolicy(ctx, path22, explicit, defaultValue) {
   if (explicit !== void 0 && explicit !== null) {
     return explicit;
   }
-  const keys = path21.split(".");
+  const keys = path22.split(".");
   let value = ctx.state.policy;
   for (const key of keys) {
     if (value === null || value === void 0)
@@ -5102,10 +5102,10 @@ var ApiError = class extends Error {
   bizCode;
   bizMessage;
   name = "ApiError";
-  constructor(message, httpStatus, path21, bizCode, bizMessage) {
+  constructor(message, httpStatus, path22, bizCode, bizMessage) {
     super(message);
     this.httpStatus = httpStatus;
-    this.path = path21;
+    this.path = path22;
     this.bizCode = bizCode;
     this.bizMessage = bizMessage;
   }
@@ -5193,14 +5193,14 @@ var ApiClient = class {
     const ua = config.userAgent ?? "qqbot-nodejs/unknown";
     this.resolveUserAgent = typeof ua === "function" ? ua : () => ua;
   }
-  async request(accessToken, method, path21, body, options) {
-    const url = `${this.baseUrl}${path21}`;
+  async request(accessToken, method, path22, body, options) {
+    const url = `${this.baseUrl}${path22}`;
     const headers = {
       Authorization: `QQBot ${accessToken}`,
       "Content-Type": "application/json",
       "User-Agent": this.resolveUserAgent()
     };
-    const isFileUpload = options?.uploadRequest === true || path21.includes("/files") || path21.includes("/upload_prepare") || path21.includes("/upload_part_finish");
+    const isFileUpload = options?.uploadRequest === true || path22.includes("/files") || path22.includes("/upload_prepare") || path22.includes("/upload_part_finish");
     const timeout = options?.timeoutMs ?? (isFileUpload ? this.fileUploadTimeoutMs : this.defaultTimeoutMs);
     const controller = new AbortController();
     const timeoutId = setTimeout(() => controller.abort(), timeout);
@@ -5225,10 +5225,10 @@ var ApiClient = class {
       clearTimeout(timeoutId);
       if (err instanceof Error && err.name === "AbortError") {
         this.logger?.error?.(`[qqbot:api] <<< Timeout after ${timeout}ms`);
-        throw new ApiError(`Request timeout [${path21}]: exceeded ${timeout}ms`, 0, path21);
+        throw new ApiError(`Request timeout [${path22}]: exceeded ${timeout}ms`, 0, path22);
       }
       this.logger?.error?.(`[qqbot:api] <<< Network error: ${formatErrorMessage(err)}`);
-      throw new ApiError(`Network error [${path21}]: ${formatErrorMessage(err)}`, 0, path21);
+      throw new ApiError(`Network error [${path22}]: ${formatErrorMessage(err)}`, 0, path22);
     } finally {
       clearTimeout(timeoutId);
     }
@@ -5238,7 +5238,7 @@ var ApiClient = class {
     try {
       rawBody = await res.text();
     } catch (err) {
-      throw new ApiError(`Failed to read response [${path21}]: ${formatErrorMessage(err)}`, res.status, path21);
+      throw new ApiError(`Failed to read response [${path22}]: ${formatErrorMessage(err)}`, res.status, path22);
     }
     this.logger?.debug?.(`[qqbot:api] <<< Body: ${rawBody}`);
     const contentType = res.headers.get("content-type") ?? "";
@@ -5246,26 +5246,26 @@ var ApiClient = class {
     if (!res.ok) {
       if (isHtmlResponse) {
         const statusHint = res.status === 502 || res.status === 503 || res.status === 504 ? "\u8C03\u7528\u53D1\u751F\u5F02\u5E38\uFF0C\u8BF7\u7A0D\u5019\u91CD\u8BD5" : res.status === 429 ? "\u8BF7\u6C42\u8FC7\u4E8E\u9891\u7E41\uFF0C\u5DF2\u88AB\u9650\u6D41" : `\u5F00\u653E\u5E73\u53F0\u8FD4\u56DE HTTP ${res.status}`;
-        throw new ApiError(`${statusHint}\uFF08${path21}\uFF09\uFF0C\u8BF7\u7A0D\u540E\u91CD\u8BD5`, res.status, path21);
+        throw new ApiError(`${statusHint}\uFF08${path22}\uFF09\uFF0C\u8BF7\u7A0D\u540E\u91CD\u8BD5`, res.status, path22);
       }
       try {
         const error = JSON.parse(rawBody);
         const bizCode = error.code ?? error.err_code;
-        throw new ApiError(`API Error [${path21}]: ${error.message ?? rawBody}`, res.status, path21, bizCode, error.message);
+        throw new ApiError(`API Error [${path22}]: ${error.message ?? rawBody}`, res.status, path22, bizCode, error.message);
       } catch (parseErr) {
         if (parseErr instanceof ApiError) {
           throw parseErr;
         }
-        throw new ApiError(`API Error [${path21}] HTTP ${res.status}: ${rawBody.slice(0, 200)}`, res.status, path21);
+        throw new ApiError(`API Error [${path22}] HTTP ${res.status}: ${rawBody.slice(0, 200)}`, res.status, path22);
       }
     }
     if (isHtmlResponse) {
-      throw new ApiError(`QQ \u670D\u52A1\u7AEF\u8FD4\u56DE\u4E86\u975E JSON \u54CD\u5E94\uFF08${path21}\uFF09\uFF0C\u53EF\u80FD\u662F\u4E34\u65F6\u6545\u969C\uFF0C\u8BF7\u7A0D\u540E\u91CD\u8BD5`, res.status, path21);
+      throw new ApiError(`QQ \u670D\u52A1\u7AEF\u8FD4\u56DE\u4E86\u975E JSON \u54CD\u5E94\uFF08${path22}\uFF09\uFF0C\u53EF\u80FD\u662F\u4E34\u65F6\u6545\u969C\uFF0C\u8BF7\u7A0D\u540E\u91CD\u8BD5`, res.status, path22);
     }
     try {
       return JSON.parse(rawBody);
     } catch {
-      throw new ApiError(`\u5F00\u653E\u5E73\u53F0\u54CD\u5E94\u683C\u5F0F\u5F02\u5E38\uFF08${path21}\uFF09\uFF0C\u8BF7\u7A0D\u540E\u91CD\u8BD5`, res.status, path21);
+      throw new ApiError(`\u5F00\u653E\u5E73\u53F0\u54CD\u5E94\u683C\u5F0F\u5F02\u5E38\uFF08${path22}\uFF09\uFF0C\u8BF7\u7A0D\u540E\u91CD\u8BD5`, res.status, path22);
     }
   }
 };
@@ -5488,9 +5488,9 @@ var ChunkedMediaApi = class {
   }
   async callUploadPrepare(opts, fileName, fileSize, hashes, pathLabel) {
     const token = await this.tokenManager.getAccessToken(opts.creds.appId, opts.creds.clientSecret);
-    const path21 = uploadPreparePath(opts.scope, opts.targetId);
+    const path22 = uploadPreparePath(opts.scope, opts.targetId);
     try {
-      return await this.client.request(token, "POST", path21, {
+      return await this.client.request(token, "POST", path22, {
         file_type: opts.fileType,
         file_name: fileName,
         file_size: fileSize,
@@ -5507,10 +5507,10 @@ var ChunkedMediaApi = class {
   }
   async callUploadPartFinish(opts, uploadId, partIndex, blockSize, md5, retryTimeoutMs) {
     const persistentPolicy = buildPartFinishPersistentPolicy(retryTimeoutMs);
-    const path21 = uploadPartFinishPath(opts.scope, opts.targetId);
+    const path22 = uploadPartFinishPath(opts.scope, opts.targetId);
     await withRetry(async () => {
       const token = await this.tokenManager.getAccessToken(opts.creds.appId, opts.creds.clientSecret);
-      return this.client.request(token, "POST", path21, {
+      return this.client.request(token, "POST", path22, {
         upload_id: uploadId,
         part_index: partIndex,
         block_size: blockSize,
@@ -5519,10 +5519,10 @@ var ChunkedMediaApi = class {
     }, PART_FINISH_RETRY_POLICY, persistentPolicy, this.logger);
   }
   async callCompleteUpload(opts, uploadId) {
-    const path21 = uploadCompletePath(opts.scope, opts.targetId);
+    const path22 = uploadCompletePath(opts.scope, opts.targetId);
     return withRetry(async () => {
       const token = await this.tokenManager.getAccessToken(opts.creds.appId, opts.creds.clientSecret);
-      return this.client.request(token, "POST", path21, { upload_id: uploadId }, { uploadRequest: true });
+      return this.client.request(token, "POST", path22, { upload_id: uploadId }, { uploadRequest: true });
     }, COMPLETE_UPLOAD_RETRY_POLICY, void 0, this.logger);
   }
 };
@@ -5716,8 +5716,8 @@ var MediaApi = class {
       body.file_name = this.sanitize(opts.fileName);
     }
     const token = await this.tokenManager.getAccessToken(creds.appId, creds.clientSecret);
-    const path21 = mediaUploadPath(scope, targetId);
-    const result = await withRetry(() => this.client.request(token, "POST", path21, body, {
+    const path22 = mediaUploadPath(scope, targetId);
+    const result = await withRetry(() => this.client.request(token, "POST", path22, body, {
       redactBodyKeys: ["file_data"],
       uploadRequest: true
     }), UPLOAD_RETRY_POLICY, void 0, this.logger);
@@ -5733,8 +5733,8 @@ var MediaApi = class {
   async sendMediaMessage(scope, targetId, fileInfo, creds, opts) {
     const token = await this.tokenManager.getAccessToken(creds.appId, creds.clientSecret);
     const msgSeq = opts?.msgId ? getNextMsgSeq(opts.msgId) : 1;
-    const path21 = messagePath(scope, targetId);
-    return this.client.request(token, "POST", path21, {
+    const path22 = messagePath(scope, targetId);
+    return this.client.request(token, "POST", path22, {
       msg_type: 7,
       media: { file_info: fileInfo },
       msg_seq: msgSeq,
@@ -5773,8 +5773,8 @@ var MessageApi = class {
     const token = await this.tokenManager.getAccessToken(creds.appId, creds.clientSecret);
     const msgSeq = opts?.msgId ? getNextMsgSeq(opts.msgId) : 1;
     const body = this.buildMessageBody(content, opts?.msgId, msgSeq, opts?.messageReference, opts?.inlineKeyboard);
-    const path21 = messagePath(scope, targetId);
-    return this.sendAndNotify(creds.appId, token, "POST", path21, body, { text: content });
+    const path22 = messagePath(scope, targetId);
+    return this.sendAndNotify(creds.appId, token, "POST", path22, body, { text: content });
   }
   async sendProactiveMessage(scope, targetId, content, creds) {
     if (!content?.trim()) {
@@ -5782,8 +5782,8 @@ var MessageApi = class {
     }
     const token = await this.tokenManager.getAccessToken(creds.appId, creds.clientSecret);
     const body = this.buildProactiveBody(content);
-    const path21 = messagePath(scope, targetId);
-    return this.sendAndNotify(creds.appId, token, "POST", path21, body, { text: content });
+    const path22 = messagePath(scope, targetId);
+    return this.sendAndNotify(creds.appId, token, "POST", path22, body, { text: content });
   }
   async sendChannelMessage(opts) {
     const token = await this.tokenManager.getAccessToken(opts.creds.appId, opts.creds.clientSecret);
@@ -5831,7 +5831,7 @@ var MessageApi = class {
    */
   async sendC2CStreamMessage(creds, openid, req4) {
     const token = await this.tokenManager.getAccessToken(creds.appId, creds.clientSecret);
-    const path21 = streamMessagePath(openid);
+    const path22 = streamMessagePath(openid);
     const body = {
       input_mode: req4.input_mode,
       input_state: req4.input_state,
@@ -5845,7 +5845,7 @@ var MessageApi = class {
     if (req4.stream_msg_id) {
       body.stream_msg_id = req4.stream_msg_id;
     }
-    return this.client.request(token, "POST", path21, body);
+    return this.client.request(token, "POST", path22, body);
   }
   /**
    * Raw message send — transparently forwards all fields to the QQ Open Platform API.
@@ -5859,7 +5859,7 @@ var MessageApi = class {
    */
   async sendRaw(scope, targetId, creds, body) {
     const token = await this.tokenManager.getAccessToken(creds.appId, creds.clientSecret);
-    const path21 = messagePath(scope, targetId);
+    const path22 = messagePath(scope, targetId);
     if (body.msg_seq === void 0) {
       body.msg_seq = body.msg_id ? getNextMsgSeq(body.msg_id) : 1;
     }
@@ -5876,7 +5876,7 @@ var MessageApi = class {
         body.msg_type = 0;
     }
     const cleaned = Object.fromEntries(Object.entries(body).filter(([, v]) => v !== void 0));
-    return this.sendAndNotify(creds.appId, token, "POST", path21, cleaned, { text: cleaned.content ?? cleaned.markdown?.content });
+    return this.sendAndNotify(creds.appId, token, "POST", path22, cleaned, { text: cleaned.content ?? cleaned.markdown?.content });
   }
   /**
    * Send a message to a guild text channel.
@@ -5900,11 +5900,11 @@ var MessageApi = class {
    */
   async recallMessage(scope, targetId, messageId, creds) {
     const token = await this.tokenManager.getAccessToken(creds.appId, creds.clientSecret);
-    const path21 = `${messagePath(scope, targetId)}/${messageId}`;
-    await this.client.request(token, "DELETE", path21);
+    const path22 = `${messagePath(scope, targetId)}/${messageId}`;
+    await this.client.request(token, "DELETE", path22);
   }
-  async sendAndNotify(_appId, accessToken, method, path21, body, meta) {
-    const result = await this.client.request(accessToken, method, path21, body);
+  async sendAndNotify(_appId, accessToken, method, path22, body, meta) {
+    const result = await this.client.request(accessToken, method, path22, body);
     if (result.ext_info?.ref_idx && this.messageSentHook) {
       try {
         this.messageSentHook(result.ext_info.ref_idx, meta);
@@ -6785,10 +6785,10 @@ function signValidationResponse(params) {
 var http = __toESM(require("http"), 1);
 var NodeHttpWebhookServer = class {
   server = null;
-  async listen(port, path21, handler) {
+  async listen(port, path22, handler) {
     return new Promise((resolve2, reject) => {
       const server = http.createServer(async (req4, res) => {
-        if (req4.method !== "POST" || req4.url !== path21) {
+        if (req4.method !== "POST" || req4.url !== path22) {
           res.writeHead(404, { "Content-Type": "text/plain" });
           res.end("Not Found");
           return;
@@ -6850,11 +6850,11 @@ var WebhookTransport = class {
   }
   async start() {
     const port = this.opts.port ?? 8080;
-    const path21 = this.opts.path ?? "/";
-    this.log?.info?.(`[webhook] starting on port ${port}, path ${path21}`);
-    await this.server.listen(port, path21, (req4) => this.handleRequest(req4));
-    this.log?.info?.(`[webhook] listening on :${port}${path21}`);
-    this.callbacks.onReady?.({ transport: "webhook", port, path: path21 });
+    const path22 = this.opts.path ?? "/";
+    this.log?.info?.(`[webhook] starting on port ${port}, path ${path22}`);
+    await this.server.listen(port, path22, (req4) => this.handleRequest(req4));
+    this.log?.info?.(`[webhook] listening on :${port}${path22}`);
+    this.callbacks.onReady?.({ transport: "webhook", port, path: path22 });
     if (this.opts.abortSignal) {
       await new Promise((resolve2) => {
         if (this.opts.abortSignal.aborted) {
@@ -7744,25 +7744,25 @@ var QQBot = class {
     if (this._apiGateway)
       return this._apiGateway;
     this._apiGateway = {
-      get: (path21, query) => this.apiRequest("GET", path21, void 0, query),
-      post: (path21, body) => this.apiRequest("POST", path21, body),
-      put: (path21, body) => this.apiRequest("PUT", path21, body),
-      patch: (path21, body) => this.apiRequest("PATCH", path21, body),
-      delete: (path21) => this.apiRequest("DELETE", path21),
+      get: (path22, query) => this.apiRequest("GET", path22, void 0, query),
+      post: (path22, body) => this.apiRequest("POST", path22, body),
+      put: (path22, body) => this.apiRequest("PUT", path22, body),
+      patch: (path22, body) => this.apiRequest("PATCH", path22, body),
+      delete: (path22) => this.apiRequest("DELETE", path22),
       getToken: () => this.tokenManager.getAccessToken(this.creds.appId, this.creds.clientSecret)
     };
     return this._apiGateway;
   }
-  async apiRequest(method, path21, body, query) {
+  async apiRequest(method, path22, body, query) {
     const token = await this.tokenManager.getAccessToken(this.creds.appId, this.creds.clientSecret);
-    let fullPath = path21;
+    let fullPath = path22;
     if (query && Object.keys(query).length > 0) {
       const params = new URLSearchParams();
       for (const [k, v] of Object.entries(query)) {
         if (v !== void 0 && v !== null)
           params.set(k, String(v));
       }
-      fullPath = `${path21}?${params.toString()}`;
+      fullPath = `${path22}?${params.toString()}`;
     }
     return this.apiClient.request(token, method, fullPath, body ?? void 0);
   }
@@ -9004,13 +9004,105 @@ function parseTarget(to) {
   return { scope: "c2c", targetId: id };
 }
 
+// src/outbound/reply-limiter.ts
+var ReplyLimiter = class {
+  limit;
+  ttlMs;
+  maxTracked;
+  messages = /* @__PURE__ */ new Map();
+  constructor(config) {
+    this.limit = config?.limit ?? 4;
+    this.ttlMs = config?.ttlMs ?? 36e5;
+    this.maxTracked = config?.maxTrackedMessages ?? 1e4;
+  }
+  /**
+   * 检查是否允许对指定消息继续被动回复
+   */
+  checkLimit(messageId) {
+    const now = Date.now();
+    const tracked = this.messages.get(messageId);
+    if (!tracked) {
+      return { allowed: true, remaining: this.limit, shouldFallbackToProactive: false };
+    }
+    if (now - tracked.firstSeenAt > this.ttlMs) {
+      this.messages.delete(messageId);
+      return {
+        allowed: false,
+        remaining: 0,
+        shouldFallbackToProactive: true,
+        fallbackReason: "expired"
+      };
+    }
+    const remaining = Math.max(0, this.limit - tracked.count);
+    if (remaining <= 0) {
+      return {
+        allowed: false,
+        remaining: 0,
+        shouldFallbackToProactive: true,
+        fallbackReason: "limit_exceeded"
+      };
+    }
+    return { allowed: true, remaining, shouldFallbackToProactive: false };
+  }
+  /**
+   * 记录一次被动回复
+   */
+  record(messageId) {
+    const now = Date.now();
+    const tracked = this.messages.get(messageId);
+    if (tracked) {
+      tracked.count++;
+    } else {
+      if (this.messages.size >= this.maxTracked) {
+        const firstKey = this.messages.keys().next().value;
+        if (firstKey) this.messages.delete(firstKey);
+      }
+      this.messages.set(messageId, { count: 1, firstSeenAt: now });
+    }
+  }
+  /**
+   * 获取统计信息
+   */
+  getStats() {
+    let totalReplies = 0;
+    for (const [, v] of this.messages) {
+      totalReplies += v.count;
+    }
+    return { trackedMessages: this.messages.size, totalReplies };
+  }
+  /**
+   * 清除所有跟踪数据
+   */
+  clear() {
+    this.messages.clear();
+  }
+};
+
 // src/outbound/outbound-service.ts
 var gateways = /* @__PURE__ */ new Map();
+var limiters = /* @__PURE__ */ new Map();
+function getLimiter(accountId) {
+  let l3 = limiters.get(accountId);
+  if (!l3) {
+    l3 = new ReplyLimiter();
+    limiters.set(accountId, l3);
+  }
+  return l3;
+}
+function resolveMsgId(replyToId, accountId) {
+  if (!replyToId) return void 0;
+  const limiter = getLimiter(accountId);
+  const result = limiter.checkLimit(replyToId);
+  if (!result.allowed) return void 0;
+  limiter.record(replyToId);
+  return replyToId;
+}
 function registerGateway(accountId, gw) {
   gateways.set(accountId, gw);
 }
 function unregisterGateway(accountId) {
   gateways.delete(accountId);
+  limiters.delete(accountId);
 }
 function getGateway(accountId) {
   return gateways.get(accountId);
@@ -9022,62 +9114,55 @@ var MEDIA_KIND_TO_FILE_TYPE = {
   file: MediaFileType.FILE
 };
 async function sendText(params) {
-  const gw = gateways.get(params.account.accountId);
-  if (!gw) {
-    return { error: `Bot "${params.account.accountId}" not running` };
-  }
+  const accountId = params.account.accountId;
+  const gw = gateways.get(accountId);
+  if (!gw) return { error: `Bot "${accountId}" not running` };
   try {
     const target = parseTarget(params.to);
-    const result = await gw.sendText(target, params.text, { msgId: params.replyToId });
+    const msgId = resolveMsgId(params.replyToId, accountId);
+    const result = await gw.sendText(target, params.text, { msgId });
     return { messageId: result.id };
   } catch (err) {
     return formatError(err);
   }
 }
 async function sendMedia(params) {
-  const gw = gateways.get(params.account.accountId);
-  if (!gw) {
-    return { error: `Bot "${params.account.accountId}" not running` };
-  }
+  const accountId = params.account.accountId;
+  const gw = gateways.get(accountId);
+  if (!gw) return { error: `Bot "${accountId}" not running` };
   try {
     const target = parseTarget(params.to);
     const kind = params.mediaKind ?? "image";
+    const msgId = resolveMsgId(params.replyToId, accountId);
     if (kind === "voice") {
-      const isLocalPath = params.mediaUrl.startsWith("/") || params.mediaUrl.startsWith("./") || params.mediaUrl.startsWith("../");
-      const isUrl = params.mediaUrl.startsWith("http://") || params.mediaUrl.startsWith("https://");
-      const source = isLocalPath ? { localPath: params.mediaUrl } : isUrl ? { url: params.mediaUrl } : { base64: params.mediaUrl };
-      const result2 = await gw.sendVoice(
-        target,
-        source,
-        { text: params.text, msgId: params.replyToId }
-      );
+      const source = resolveVoiceSource(params.mediaUrl);
+      const result2 = await gw.sendVoice(target, source, { text: params.text, msgId });
       return { messageId: result2.id };
     }
     if (kind === "video") {
-      const result2 = await gw.sendVideo(target, params.mediaUrl, {
-        text: params.text,
-        msgId: params.replyToId
-      });
+      const result2 = await gw.sendVideo(target, params.mediaUrl, { text: params.text, msgId });
       return { messageId: result2.id };
     }
     if (kind === "file") {
-      const result2 = await gw.sendFile(target, params.mediaUrl, {
-        text: params.text,
-        msgId: params.replyToId
-      });
+      const result2 = await gw.sendFile(target, params.mediaUrl, { text: params.text, msgId });
       return { messageId: result2.id };
     }
     const fileType = MEDIA_KIND_TO_FILE_TYPE[kind];
-    const result = await gw.sendMedia(target, params.mediaUrl, {
-      text: params.text,
-      msgId: params.replyToId,
-      fileType
-    });
+    const result = await gw.sendMedia(target, params.mediaUrl, { text: params.text, msgId, fileType });
     return { messageId: result.id };
   } catch (err) {
     return formatError(err);
   }
 }
+function resolveVoiceSource(source) {
+  if (source.startsWith("http://") || source.startsWith("https://")) return { url: source };
+  if (source.startsWith("/") || source.startsWith("./") || source.startsWith("../")) return { localPath: source };
+  if (source.startsWith("data:")) {
+    const i = source.indexOf(",");
+    return { base64: i > 0 ? source.slice(i + 1) : source };
+  }
+  return { base64: source };
+}
 function formatError(err) {
   if (err instanceof Error) {
     const result = { error: err.message };
@@ -9093,7 +9178,7 @@ var import_node_path2 = __toESM(require("path"), 1);
 var import_node_fs2 = __toESM(require("fs"), 1);
 var _cachedOpenclawVersion;
 function getPackageVersion() {
-  return true ? "2.0.0-dev.202607091556" : "unknown";
+  return true ? "2.0.0-dev.202607091957" : "unknown";
 }
 function getOpenclawVersion(runtimeVersion) {
   if (_cachedOpenclawVersion) return _cachedOpenclawVersion;
@@ -9508,12 +9593,12 @@ function tryGetQQBotRuntime() {
 
 // src/adapter/resolve.ts
 function probeFunction(rt, paths) {
-  for (const path21 of paths) {
+  for (const path22 of paths) {
     let target = rt;
     let parent = rt;
-    for (let i = 0; i < path21.length; i++) {
+    for (let i = 0; i < path22.length; i++) {
       parent = target;
-      target = target?.[path21[i]];
+      target = target?.[path22[i]];
       if (target === void 0 || target === null) break;
     }
     if (typeof target === "function") {
@@ -9675,6 +9760,63 @@ function resolveAgentWorkspace(cfg, agentId) {
   return getQQBotMediaDir();
 }
 
+// src/utils/ssrf-guard.ts
+var import_node_net = __toESM(require("net"), 1);
+var import_promises = __toESM(require("dns/promises"), 1);
+var RESERVED_V4_PREFIXES = [
+  "127.",
+  // loopback
+  "10.",
+  // class-A private
+  "192.168.",
+  // class-C private
+  "169.254."
+  // link-local / cloud metadata
+];
+var PRIVATE_172_RE = /^172\.(1[6-9]|2\d|3[01])\./;
+function isReservedAddr(ip) {
+  if (ip === "0.0.0.0") return true;
+  for (const pfx of RESERVED_V4_PREFIXES) {
+    if (ip.startsWith(pfx)) return true;
+  }
+  if (PRIVATE_172_RE.test(ip)) return true;
+  const lower = ip.toLowerCase();
+  if (lower === "::1" || lower === "::") return true;
+  if (lower.startsWith("fe80:")) return true;
+  if (lower.startsWith("fc") || lower.startsWith("fd")) return true;
+  return false;
+}
+var ALLOWED_SCHEMES = /* @__PURE__ */ new Set(["http:", "https:"]);
+async function validateRemoteUrl(raw) {
+  const url = new URL(raw);
+  if (!ALLOWED_SCHEMES.has(url.protocol)) {
+    throw new Error(
+      `\u4E0D\u652F\u6301\u7684\u534F\u8BAE "${url.protocol}"\uFF0C\u4EC5\u5141\u8BB8 http/https\uFF08URL: ${raw}\uFF09`
+    );
+  }
+  const host = url.hostname.replace(/^\[|\]$/g, "");
+  if (import_node_net.default.isIP(host)) {
+    assertPublicAddr(host, raw);
+    return;
+  }
+  try {
+    const ips = await import_promises.default.resolve(host);
+    for (const ip of ips) {
+      assertPublicAddr(ip, raw, host);
+    }
+  } catch (err) {
+    if (err instanceof Error && err.message.includes("\u5185\u7F51")) throw err;
+    console.warn(`[url-check] DNS \u89E3\u6790 "${host}" \u5931\u8D25: ${err}`);
+  }
+}
+function assertPublicAddr(ip, originalUrl, domain) {
+  if (!isReservedAddr(ip)) return;
+  const target = domain ? `\u57DF\u540D "${domain}" \u89E3\u6790\u5230\u5185\u7F51\u5730\u5740 "${ip}"` : `\u5185\u7F51\u5730\u5740 "${ip}"`;
+  throw new Error(
+    `\u7981\u6B62\u8BBF\u95EE${target}\uFF0C\u5DF2\u62E6\u622A\u6F5C\u5728\u7684 SSRF \u8BF7\u6C42\uFF08URL: ${originalUrl}\uFF09`
+  );
+}
+
 // src/outbound/local-file-router.ts
 var path7 = __toESM(require("path"), 1);
 var fs8 = __toESM(require("fs"), 1);
@@ -9709,6 +9851,9 @@ function isLocalFilePath(source) {
   if (source.startsWith(".\\") || source.startsWith("..\\")) return true;
   return false;
 }
+function isDataUrl(source) {
+  return source.startsWith("data:");
+}
 var IMAGE_EXTS = /* @__PURE__ */ new Set([".jpg", ".jpeg", ".png", ".gif", ".webp", ".bmp", ".svg", ".ico"]);
 var VOICE_EXTS = /* @__PURE__ */ new Set([".wav", ".mp3", ".silk", ".amr", ".ogg", ".flac", ".aac", ".m4a"]);
 var VIDEO_EXTS = /* @__PURE__ */ new Set([".mp4", ".avi", ".mov", ".mkv", ".webm", ".flv", ".wmv"]);
@@ -9726,14 +9871,48 @@ function inferMediaKindFromMime(mime) {
   if (lower.startsWith("video/")) return "video";
   return "file";
 }
+function isPathInAllowedRoots(absPath, allowedRoots) {
+  if (!allowedRoots.length) return false;
+  try {
+    const real = fs8.realpathSync(absPath);
+    return allowedRoots.some((root) => {
+      try {
+        const rootReal = fs8.existsSync(root) ? fs8.realpathSync(root) : root;
+        return real.startsWith(rootReal + path7.sep) || real === rootReal;
+      } catch {
+        return false;
+      }
+    });
+  } catch {
+    return false;
+  }
+}
 
 // src/outbound/media-send.ts
+function resolveTempRoots() {
+  const roots = /* @__PURE__ */ new Set();
+  try {
+    const tmp = os4.tmpdir();
+    roots.add(fs9.existsSync(tmp) ? fs9.realpathSync(tmp) : tmp);
+  } catch {
+  }
+  if (process.platform !== "win32") {
+    try {
+      roots.add(fs9.realpathSync("/tmp"));
+    } catch {
+    }
+  }
+  return [...roots];
+}
 var ALLOWED_MEDIA_ROOTS = [
   path8.join(os4.homedir(), ".openclaw", "media"),
   path8.join(os4.homedir(), ".openclaw", "workspace"),
   // 框架 outbound 目录（saveMediaBuffer 写入）
-  path8.join(os4.homedir(), ".openclaw", "outbound")
+  path8.join(os4.homedir(), ".openclaw", "outbound"),
+  // TTS 语音临时目录（deliver-pipeline 已通过 isTtsPathSafe 预检）
+  ...resolveTempRoots()
 ];
+var MAX_DATA_URL_BYTES = 10 * 1024 * 1024;
 async function sendMedia2(params) {
   const { source, accountId, log: log4 } = params;
   const mlog = log4?.child("media");
@@ -9743,7 +9922,7 @@ async function sendMedia2(params) {
   }
   const wsDir = resolveWorkspaceFromAgent(params.agentId);
   mlog?.debug(`resolveMediaPath source=${source} agentId=${params.agentId ?? "none"} workspaceDir=${wsDir ?? "none"}`);
-  const resolved = resolveMediaPath(source, mlog, wsDir);
+  const resolved = await resolveMediaPath(source, mlog, wsDir);
   if (!resolved.ok) {
     mlog?.error(`resolveMediaPath failed: ${resolved.error}`);
     return { error: resolved.error };
@@ -9766,8 +9945,24 @@ async function sendMedia2(params) {
       return sendImageMedia(gw, target, resolved.path, params);
   }
 }
-function resolveMediaPath(source, log4, workspaceDir) {
+async function resolveMediaPath(source, log4, workspaceDir) {
   const normalized = normalizePath(source);
+  if (isDataUrl(normalized)) {
+    if (normalized.length > MAX_DATA_URL_BYTES) {
+      const sizeMB = (normalized.length / (1024 * 1024)).toFixed(1);
+      return { ok: false, error: `Data URL \u8FC7\u5927\uFF08${sizeMB}MB\uFF0C\u6700\u5927 10MB\uFF09` };
+    }
+    return { ok: true, path: normalized, isLocal: false };
+  }
+  if (normalized.startsWith("http://") || normalized.startsWith("https://")) {
+    try {
+      await validateRemoteUrl(normalized);
+    } catch (err) {
+      log4?.warn(`SSRF blocked for media URL: ${normalized}`);
+      return { ok: false, error: `\u5A92\u4F53 URL \u88AB SSRF \u9632\u62A4\u62E6\u622A: ${err instanceof Error ? err.message : String(err)}` };
+    }
+    return { ok: true, path: normalized, isLocal: false };
+  }
   if (!isLocalFilePath(normalized)) {
     const resolved2 = resolveWorkingFile(normalized, workspaceDir);
     if (resolved2) {
@@ -9785,16 +9980,10 @@ function resolveMediaPath(source, log4, workspaceDir) {
   } catch {
     return { ok: false, error: `Cannot resolve path: ${resolved}` };
   }
-  const allowed = ALLOWED_MEDIA_ROOTS.some((root) => {
-    try {
-      const resolvedRoot = fs9.existsSync(root) ? fs9.realpathSync(root) : root;
-      return real.startsWith(resolvedRoot + path8.sep) || real === resolvedRoot;
-    } catch {
-      return false;
-    }
-  });
+  const allowed = isPathInAllowedRoots(real, ALLOWED_MEDIA_ROOTS);
   if (!allowed) {
-    log4?.warn(`path not in allowed directory: ${real}`);
+    log4?.warn(`path blocked \u2014 not in allowed directory: ${real}`);
+    return { ok: false, error: `\u6587\u4EF6\u8DEF\u5F84\u4E0D\u5728\u5141\u8BB8\u7684\u76EE\u5F55\u4E2D` };
   }
   return { ok: true, path: real, isLocal: true };
 }
@@ -9830,7 +10019,7 @@ async function sendImageMedia(gw, target, source, params) {
   }
 }
 async function sendVoiceMedia(gw, target, source, params) {
-  const voiceSource = resolveVoiceSource(source);
+  const voiceSource = resolveVoiceSource2(source);
   try {
     const result = await gw.sendVoice(target, voiceSource, {
       msgId: params.replyToId
@@ -9875,7 +10064,7 @@ async function sendFileMedia(gw, target, source, params) {
     return { error: formatErr(err) };
   }
 }
-function resolveVoiceSource(source) {
+function resolveVoiceSource2(source) {
   if (source.startsWith("http://") || source.startsWith("https://")) {
     return { url: source };
   }
@@ -10173,6 +10362,31 @@ var qqbotSetupWizard = {
   }
 };
 
+// src/outbound/sanitize.ts
+var INTERNAL_TAGS = [
+  // 框架脚手架标签
+  /<system-reminder\b[^>]*>[\s\S]*?<\/system-reminder>/gi,
+  /<previous_response\b[^>]*>[\s\S]*?<\/previous_response>/gi,
+  /<\s*\/?\s*(?:system-reminder|previous_response)\b[^>]*\/?\s*>/gi,
+  // 模型推理/思考内容
+  // deepseek: `think`...`/think` — 匹配完整标签块，标签名 think 必须完整
+  // 格式说明：deepseek 用 `` ` `` (反引号) 替代 XML 的 `<` `>` 作为标签定界符
+  //   `think`  ≡ <think>  开标签
+  //   `/think` ≡ </think> 闭标签
+  /`think`[\s\S]*?`\/think`/gi,
+  /<\s*\/?\s*think\b[^>]*\/?\s*>/gi,
+  // claude: <thinking>...</thinking>
+  /<thinking\b[^>]*>[\s\S]*?<\/thinking>/gi,
+  /<\s*\/?\s*thinking\b[^>]*\/?\s*>/gi
+];
+function sanitizeQQBotText(text) {
+  let result = text;
+  for (const re of INTERNAL_TAGS) {
+    result = result.replace(re, "");
+  }
+  return result.trim();
+}
+
 // src/gateway/qqbot-gateway.ts
 var import_node_os4 = __toESM(require("os"), 1);
 
@@ -10655,6 +10869,7 @@ function botClearStorage(_account) {
 var import_node_fs5 = __toESM(require("fs"), 1);
 var import_node_path5 = __toESM(require("path"), 1);
 var import_node_os3 = __toESM(require("os"), 1);
+var import_node_crypto2 = __toESM(require("crypto"), 1);
 var MAX_LINES_PER_FILE = 1e3;
 var MAX_FILES = 4;
 var LOG_KEYWORDS = ["gateway", "openclaw", "clawdbot", "moltbot"];
@@ -10834,7 +11049,8 @@ function botLogs(runtime2) {
       const tmpDir = getQQBotMediaDir("exports");
       if (!import_node_fs5.default.existsSync(tmpDir)) import_node_fs5.default.mkdirSync(tmpDir, { recursive: true });
       const timestamp = (/* @__PURE__ */ new Date()).toISOString().replace(/[:.]/g, "-").slice(0, 19);
-      const tmpFile = import_node_path5.default.join(tmpDir, `bot-logs-${timestamp}.txt`);
+      const suffix = import_node_crypto2.default.randomBytes(4).toString("hex");
+      const tmpFile = import_node_path5.default.join(tmpDir, `bot-logs-${timestamp}-${suffix}.txt`);
       import_node_fs5.default.writeFileSync(tmpFile, lines.join("\n"), "utf8");
       let summary = `${recentFiles.length} \u4E2A\u65E5\u5FD7\u6587\u4EF6\uFF0C\u5171 ${totalIncluded} \u884C`;
       if (truncatedCount > 0) summary += `\uFF08${truncatedCount} \u4E2A\u622A\u65AD\uFF0C\u539F\u59CB ${totalOriginal} \u884C\uFF09`;
@@ -10844,7 +11060,7 @@ function botLogs(runtime2) {
           await ctx.bot.sendFile(
             { scope: "c2c", targetId: senderId, msgId: ctx.message.messageId },
             { localPath: tmpFile },
-            { fileName: `bot-logs-${timestamp}.txt` }
+            { fileName: `bot-logs-${timestamp}-${suffix}.txt` }
           );
         }
       } catch (err) {
@@ -11439,10 +11655,10 @@ function formatDuration2(seconds) {
 
 // src/adapter/media.ts
 var import_node_module4 = require("module");
-var dns = __toESM(require("dns"), 1);
+var dns2 = __toESM(require("dns"), 1);
 var path16 = __toESM(require("path"), 1);
 var fs18 = __toESM(require("fs"), 1);
-var crypto4 = __toESM(require("crypto"), 1);
+var crypto5 = __toESM(require("crypto"), 1);
 var req3 = (0, import_node_module4.createRequire)(__filename);
 var _save;
 function downloadRemoteMedia(opts) {
@@ -11478,7 +11694,7 @@ function isPrivateIP(ip) {
   return PRIVATE_RANGES.some(([mask, prefix]) => val >> 32n - BigInt(prefix) === mask >> 32n - BigInt(prefix));
 }
 async function assertSafeHostname(hostname) {
-  const addresses = await dns.promises.resolve4(hostname).catch(() => []);
+  const addresses = await dns2.promises.resolve4(hostname).catch(() => []);
   if (addresses.length === 0) throw new Error(`DNS resolution failed: ${hostname}`);
   for (const addr of addresses) {
     if (isPrivateIP(addr)) {
@@ -11503,7 +11719,7 @@ async function downloadViaFetch(opts) {
   if (buf.length > maxBytes) throw new Error(`Download exceeds ${(maxBytes / 1024 / 1024).toFixed(0)}MB`);
   const ext = opts.originalFilename ? path16.extname(opts.originalFilename) || ".bin" : ".bin";
   const name = opts.originalFilename ? path16.basename(opts.originalFilename, path16.extname(opts.originalFilename)) : "download";
-  const rand = crypto4.randomBytes(4).toString("hex");
+  const rand = crypto5.randomBytes(4).toString("hex");
   const filePath = path16.join(dir, `${name}_${Date.now()}_${rand}${ext}`);
   fs18.writeFileSync(filePath, buf);
   return { path: filePath };
@@ -12149,6 +12365,8 @@ function buildEnvelope2(ctx, msg, account) {
 }
 
 // src/outbound/deliver-pipeline.ts
+var path18 = __toESM(require("path"), 1);
+var os7 = __toESM(require("os"), 1);
 function resolveMediaUrls(payload) {
   if (payload.mediaUrls?.length) {
     return payload.mediaUrls.filter(Boolean);
@@ -12197,6 +12415,7 @@ async function deliverReply(payload, _info, ctx) {
   }
 }
 async function sendMediaUrls(ctx, urls) {
+  const failedUrls = [];
   for (const url of urls) {
     const result = await sendMedia2({
       to: ctx.qualifiedTarget,
@@ -12208,6 +12427,16 @@ async function sendMediaUrls(ctx, urls) {
     });
     if (result.error) {
       ctx.log?.error(`[media] ${result.error}`);
+      failedUrls.push(url);
+    }
+  }
+  if (failedUrls.length > 0) {
+    const count = failedUrls.length;
+    const total = urls.length;
+    const failMsg = count === total ? `\u26A0\uFE0F \u5A92\u4F53\u53D1\u9001\u5931\u8D25\uFF08${count} \u4E2A\uFF09\uFF0C\u8BF7\u91CD\u8BD5` : `\u26A0\uFE0F ${count}/${total} \u4E2A\u5A92\u4F53\u53D1\u9001\u5931\u8D25`;
+    const textResult = await ctx.sendText(ctx.qualifiedTarget, failMsg);
+    if (textResult.error) {
+      ctx.log?.error(`[media] failed to send failure notification: ${textResult.error}`);
     }
   }
 }
@@ -12227,6 +12456,10 @@ async function handleVoiceIntent(text, ctx) {
       ctx.log?.error(`[tts] TTS failed: ${ttsResult.error ?? "no audio path returned"}`);
       return false;
     }
+    if (!isTtsPathSafe(ttsResult.audioPath)) {
+      ctx.log?.error(`[tts] TTS audio path blocked: ${ttsResult.audioPath}`);
+      return false;
+    }
     if (ctx.audioFileToSilkBase64) {
       const silkBase64 = await ctx.audioFileToSilkBase64(ttsResult.audioPath);
       if (silkBase64) {
@@ -12247,6 +12480,15 @@ async function handleVoiceIntent(text, ctx) {
     return false;
   }
 }
+var TTS_ALLOWED_ROOTS = [
+  path18.join(os7.homedir(), ".openclaw"),
+  os7.tmpdir(),
+  "/tmp"
+];
+function isTtsPathSafe(audioPath) {
+  if (!path18.isAbsolute(audioPath)) return false;
+  return isPathInAllowedRoots(audioPath, TTS_ALLOWED_ROOTS);
+}
 
 // src/dispatch/ctx-builder.ts
 function buildCtxPayload(params) {
@@ -13091,10 +13333,10 @@ function getApprovalHandler(accountId) {
 
 // src/features/proactive.ts
 var fs19 = __toESM(require("fs"), 1);
-var path19 = __toESM(require("path"), 1);
+var path20 = __toESM(require("path"), 1);
 var log2 = createPluginLogger({ prefix: "[proactive]" });
 var STORAGE_DIR = getQQBotDataDir("data");
-var KNOWN_USERS_FILE = path19.join(STORAGE_DIR, "known-users.json");
+var KNOWN_USERS_FILE = path20.join(STORAGE_DIR, "known-users.json");
 var knownUsersCache = null;
 var cacheLastModified = 0;
 function ensureStorageDir() {
@@ -13298,6 +13540,11 @@ async function handleApproval(event, account, log4, ack) {
   }
   const buttonData = event.data?.resolved?.button_data;
   if (!buttonData?.startsWith("approve:")) return;
+  const operatorId = resolveOperatorId(event);
+  if (!isApprovalAuthorized(account, operatorId)) {
+    log4.warn(`[approval] unauthorized operator=${operatorId ?? "unknown"} account=${account.accountId}`);
+    return;
+  }
   const parts = buttonData.split(":");
   if (parts.length < 3) return;
   const handler = getApprovalHandler(account.accountId);
@@ -13307,10 +13554,20 @@ async function handleApproval(event, account, log4, ack) {
   try {
     await handler.resolveApproval(approvalId, decision);
   } catch (err) {
-    log4.error(`interaction approve error: ${err}`);
+    log4.error(`interaction approve error: ${err instanceof Error ? err.message : String(err)}`);
   }
 }
 var CHANNEL_VER = getPackageVersion();
+function resolveOperatorId(event) {
+  const evt = event;
+  return evt.user_openid ?? evt.data?.resolved?.user_id ?? evt.data?.resolved?.user_openid ?? evt.openid;
+}
+function isApprovalAuthorized(account, operatorId) {
+  if (!operatorId) return false;
+  const allowFrom = account.config?.allowFrom ?? [];
+  if (!allowFrom.length || allowFrom.includes("*")) return true;
+  return allowFrom.includes(operatorId);
+}
 function buildClawCfg(requireMention, mentionPatterns, groupPolicy) {
   return {
     channel_type: "qqbot",
@@ -13340,13 +13597,13 @@ function createPluginWebhookAdapter(params) {
   let storedPath = "";
   const accountId = params.account.accountId;
   return {
-    async listen(_port, path21, handler) {
+    async listen(_port, path22, handler) {
       const ingress = await import("openclaw/plugin-sdk/webhook-ingress").catch(() => null);
       if (!ingress?.registerWebhookTargetWithPluginRoute) {
         params.log.error("Webhook ingress not available");
         return;
       }
-      const webhookPath = storedPath = path21 && path21 !== "/" ? path21 : params.account.config.webhook?.path ?? "/qqbot/webhook";
+      const webhookPath = storedPath = path22 && path22 !== "/" ? path22 : params.account.config.webhook?.path ?? "/qqbot/webhook";
       const existing = sharedTargets.get(webhookPath);
       if (existing) {
         const dupIdx = existing.findIndex((t) => t.accountId === accountId);
@@ -13393,12 +13650,12 @@ function createPluginWebhookAdapter(params) {
     }
   };
 }
-function createSharedHandler(path21, log4) {
+function createSharedHandler(path22, log4) {
   return async (req4, res) => {
     try {
       const ingress = await import("openclaw/plugin-sdk/webhook-ingress").catch(() => null);
       if (!ingress?.withResolvedWebhookRequestPipeline) {
-        await handleSimple(req4, res, path21, log4);
+        await handleSimple(req4, res, path22, log4);
         return;
       }
       await ingress.withResolvedWebhookRequestPipeline({
@@ -13439,12 +13696,12 @@ function createSharedHandler(path21, log4) {
           if (payload.op === 13) {
             const t = targets[0];
             if (!t) {
-              log4.warn?.(`[webhook] op:13 no target on ${path21}`);
+              log4.warn?.(`[webhook] op:13 no target on ${path22}`);
               res.statusCode = 500;
               res.end(JSON.stringify({ error: "no target" }));
               return;
             }
-            const h3 = resolveTargetHandler(path21, t.accountId);
+            const h3 = resolveTargetHandler(path22, t.accountId);
             if (!h3) {
               log4.warn?.(`[webhook] op:13 no handler for ${t.accountId}`);
               res.statusCode = 500;
@@ -13475,10 +13732,10 @@ function createSharedHandler(path21, log4) {
             unauthorizedMessage: JSON.stringify({ error: "invalid signature" })
           });
           if (!matched) {
-            log4.warn?.(`[webhook] signature mismatch on ${path21} (${targets.length} target(s))`);
+            log4.warn?.(`[webhook] signature mismatch on ${path22} (${targets.length} target(s))`);
             return;
           }
-          const h2 = resolveTargetHandler(path21, matched.accountId);
+          const h2 = resolveTargetHandler(path22, matched.accountId);
           if (!h2) {
             log4.error?.(`[webhook] no handler for matched target ${matched.accountId}`);
             res.statusCode = 500;
@@ -13498,8 +13755,8 @@ function createSharedHandler(path21, log4) {
     }
   };
 }
-function resolveTargetHandler(path21, accountId) {
-  return sharedTargets.get(path21)?.find((t) => t.accountId === accountId)?.handler;
+function resolveTargetHandler(path22, accountId) {
+  return sharedTargets.get(path22)?.find((t) => t.accountId === accountId)?.handler;
 }
 async function delegateToHandler(handler, req4, res, rawBody) {
   const headers = {};
@@ -13513,7 +13770,7 @@ async function delegateToHandler(handler, req4, res, rawBody) {
   }
   res.end(resp.body);
 }
-async function handleSimple(req4, res, path21, log4) {
+async function handleSimple(req4, res, path22, log4) {
   try {
     const ct = String(req4.headers["content-type"] ?? "");
     if (!ct.includes("application/json")) {
@@ -13534,7 +13791,7 @@ async function handleSimple(req4, res, path21, log4) {
       chunks.push(buf);
     }
     const rawBody = Buffer.concat(chunks);
-    const entries = sharedTargets.get(path21) ?? [];
+    const entries = sharedTargets.get(path22) ?? [];
     for (const entry of entries) {
       const resp = await entry.handler({ body: rawBody, headers: mapHeaders(req4) });
       if (resp.status < 400) {
@@ -13565,12 +13822,35 @@ function getHeader2(req4, key) {
 }
 
 // src/gateway/qqbot-gateway.ts
+var TEXT_TIMEOUT_MS = 3e4;
+var MEDIA_TIMEOUT_MS = 3e5;
+function resolveMs(envKey, defaultMs) {
+  const env = process.env[envKey];
+  if (env) {
+    const v = Number(env);
+    if (!Number.isNaN(v) && v > 0) return v;
+  }
+  return defaultMs;
+}
+function withTimeout(promise, ms, label) {
+  if (ms <= 0) return promise;
+  return Promise.race([
+    promise,
+    new Promise(
+      (_2, reject) => setTimeout(() => reject(new Error(`\u51FA\u7AD9\u8D85\u65F6: ${label} (${ms}ms)`)), ms)
+    )
+  ]);
+}
 var QQBotGateway = class {
   bot;
   account;
   runtime;
   log;
+  textTimeout;
+  mediaTimeout;
   constructor(account, runtime2, log4) {
+    this.textTimeout = resolveMs("OPENCLAW_OUTBOUND_TIMEOUT_MS", TEXT_TIMEOUT_MS);
+    this.mediaTimeout = resolveMs("OPENCLAW_OUTBOUND_MEDIA_TIMEOUT_MS", MEDIA_TIMEOUT_MS);
     this.account = account;
     this.runtime = runtime2;
     this.log = log4 ?? createPluginLogger({ prefix: `[qqbot:${account.accountId}]` });
@@ -13635,69 +13915,66 @@ var QQBotGateway = class {
     await this.bot.stop();
   }
   async sendText(target, text, opts) {
-    return this.bot.sendText(attachMsgId(target, opts), text);
+    return withTimeout(
+      this.bot.sendText(attachMsgId(target, opts), text),
+      this.textTimeout,
+      "sendText"
+    );
   }
   async sendMedia(target, source, opts) {
     const resolvedTarget = attachMsgId(target, opts);
     const fileType = opts?.fileType ?? MediaFileType.IMAGE;
     const sourceOpts = resolveMediaSource(source);
-    const result = await this.bot.sendMedia({
-      target: resolvedTarget,
-      fileType,
-      ...sourceOpts,
-      content: opts?.text
-    });
+    const result = await withTimeout(
+      this.bot.sendMedia({ target: resolvedTarget, fileType, ...sourceOpts, content: opts?.text }),
+      this.mediaTimeout,
+      "sendMedia"
+    );
     return result.message ?? { id: "", timestamp: Date.now() };
   }
   async sendVoice(target, source, opts) {
     const resolvedTarget = attachMsgId(target, opts);
     if (source.base64) {
-      const result2 = await this.bot.sendMedia({
-        target: resolvedTarget,
-        fileType: MediaFileType.VOICE,
-        fileData: source.base64,
-        content: opts?.text
-      });
+      const result2 = await withTimeout(
+        this.bot.sendMedia({ target: resolvedTarget, fileType: MediaFileType.VOICE, fileData: source.base64, content: opts?.text }),
+        this.mediaTimeout,
+        "sendVoice(base64)"
+      );
       return result2.message ?? { id: "", timestamp: Date.now() };
     }
     if (source.localPath) {
-      const result2 = await this.bot.sendMedia({
-        target: resolvedTarget,
-        fileType: MediaFileType.VOICE,
-        localPath: source.localPath,
-        content: opts?.text
-      });
+      const result2 = await withTimeout(
+        this.bot.sendMedia({ target: resolvedTarget, fileType: MediaFileType.VOICE, localPath: source.localPath, content: opts?.text }),
+        this.mediaTimeout,
+        "sendVoice(path)"
+      );
       return result2.message ?? { id: "", timestamp: Date.now() };
     }
-    const result = await this.bot.sendMedia({
-      target: resolvedTarget,
-      fileType: MediaFileType.VOICE,
-      url: source.url,
-      content: opts?.text
-    });
+    const result = await withTimeout(
+      this.bot.sendMedia({ target: resolvedTarget, fileType: MediaFileType.VOICE, url: source.url, content: opts?.text }),
+      this.mediaTimeout,
+      "sendVoice(url)"
+    );
     return result.message ?? { id: "", timestamp: Date.now() };
   }
   async sendVideo(target, source, opts) {
     const resolvedTarget = attachMsgId(target, opts);
     const sourceOpts = resolveMediaSource(source);
-    const result = await this.bot.sendMedia({
-      target: resolvedTarget,
-      fileType: MediaFileType.VIDEO,
-      ...sourceOpts,
-      content: opts?.text
-    });
+    const result = await withTimeout(
+      this.bot.sendMedia({ target: resolvedTarget, fileType: MediaFileType.VIDEO, ...sourceOpts, content: opts?.text }),
+      this.mediaTimeout,
+      "sendVideo"
+    );
     return result.message ?? { id: "", timestamp: Date.now() };
   }
   async sendFile(target, source, opts) {
     const resolvedTarget = attachMsgId(target, opts);
     const sourceOpts = resolveMediaSource(source);
-    const result = await this.bot.sendMedia({
-      target: resolvedTarget,
-      fileType: MediaFileType.FILE,
-      ...sourceOpts,
-      fileName: opts?.fileName,
-      content: opts?.text
-    });
+    const result = await withTimeout(
+      this.bot.sendMedia({ target: resolvedTarget, fileType: MediaFileType.FILE, ...sourceOpts, fileName: opts?.fileName, content: opts?.text }),
+      this.mediaTimeout,
+      "sendFile"
+    );
     return result.message ?? { id: "", timestamp: Date.now() };
   }
   openStream(target, msgId) {
@@ -14064,6 +14341,11 @@ function stripMentionText(text, mentions) {
 
 // src/channel.ts
 var TEXT_CHUNK_LIMIT2 = 5e3;
+var GFM_TABLE_DATA_RE = /^\|.+\|.*\|/;
+var GFM_TABLE_SEP_RE = /^\|[\s:-]+\|/;
+function isGfmTableLine(line) {
+  return GFM_TABLE_DATA_RE.test(line) || GFM_TABLE_SEP_RE.test(line);
+}
 var qqbotPlugin = {
   id: "qqbot",
   meta: {
@@ -14179,13 +14461,33 @@ var qqbotPlugin = {
   // ── 出站 ──
   outbound: {
     deliveryMode: "direct",
+    sanitizeText: ({ text }) => sanitizeQQBotText(text),
     chunker: (text, limit) => {
       const adapters = getAdapters(getQQBotRuntime());
       if (adapters.chunkMarkdownText) return adapters.chunkMarkdownText(text, limit);
       const lines = text.split("\n");
       const chunks = [];
       let current = "";
+      let tableBuffer = [];
+      const flushTable = () => {
+        if (tableBuffer.length === 0) return;
+        const tableBlock = tableBuffer.join("\n");
+        const candidate = current ? `${current}
+${tableBlock}` : tableBlock;
+        if (candidate.length > limit && current) {
+          chunks.push(current);
+          current = tableBlock;
+        } else {
+          current = candidate;
+        }
+        tableBuffer = [];
+      };
       for (const line of lines) {
+        if (isGfmTableLine(line)) {
+          tableBuffer.push(line);
+          continue;
+        }
+        flushTable();
         const candidate = current ? `${current}
 ${line}` : line;
         if (candidate.length > limit && current) {
@@ -14195,6 +14497,7 @@ ${line}` : line;
           current = candidate;
         }
       }
+      flushTable();
       if (current) chunks.push(current);
       return chunks.length > 0 ? chunks : [text];
     },
@@ -14332,10 +14635,10 @@ function json(data) {
     details: data
   };
 }
-function validatePath(path21) {
-  if (!path21.startsWith("/")) return "path \u5FC5\u987B\u4EE5 / \u5F00\u5934";
-  if (path21.includes("..") || path21.includes("//")) return "path \u4E0D\u5141\u8BB8\u5305\u542B .. \u6216 //";
-  if (!/^\/[a-zA-Z0-9\-._~:@!$&'()*+,;=/%]+$/.test(path21) && path21 !== "/") {
+function validatePath(path22) {
+  if (!path22.startsWith("/")) return "path \u5FC5\u987B\u4EE5 / \u5F00\u5934";
+  if (path22.includes("..") || path22.includes("//")) return "path \u4E0D\u5141\u8BB8\u5305\u542B .. \u6216 //";
+  if (!/^\/[a-zA-Z0-9\-._~:@!$&'()*+,;=/%]+$/.test(path22) && path22 !== "/") {
     return "path \u5305\u542B\u975E\u6CD5\u5B57\u7B26";
   }
   return null;
@@ -14643,7 +14946,7 @@ function verifyRuntimeContract(rt) {
   for (const r of OPTIONAL) {
     if (!r.probe(rt)) degraded.push(r.name);
   }
-  log3.info(`openclaw=${version} required=${REQUIRED.length - missing.length}/${REQUIRED.length} degraded=${degraded.length}/${OPTIONAL.length}`);
+  log3.debug(`openclaw=${version} required=${REQUIRED.length - missing.length}/${REQUIRED.length} degraded=${degraded.length}/${OPTIONAL.length}`);
   if (missing.length) {
     log3.error(`BROKEN \u2014 missing: ${missing.join(", ")}`);
   }