@cxyhhhhh/openclaw-qqbot 2.0.0-dev.202607091556 → 2.0.0-dev.202607092101

package/dist/index.cjs

@@ -31,9 +31,9 @@ var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__ge
 ));
 var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
 
-// node_modules/.pnpm/ws@8.20.1/node_modules/ws/lib/constants.js
+// node_modules/.pnpm/ws@8.21.0/node_modules/ws/lib/constants.js
 var require_constants = __commonJS({
-  "node_modules/.pnpm/ws@8.20.1/node_modules/ws/lib/constants.js"(exports2, module2) {
+  "node_modules/.pnpm/ws@8.21.0/node_modules/ws/lib/constants.js"(exports2, module2) {
     "use strict";
     var BINARY_TYPES = ["nodebuffer", "arraybuffer", "fragments"];
     var hasBlob = typeof Blob !== "undefined";
@@ -54,9 +54,9 @@ var require_constants = __commonJS({
   }
 });
 
-// node_modules/.pnpm/ws@8.20.1/node_modules/ws/lib/buffer-util.js
+// node_modules/.pnpm/ws@8.21.0/node_modules/ws/lib/buffer-util.js
 var require_buffer_util = __commonJS({
-  "node_modules/.pnpm/ws@8.20.1/node_modules/ws/lib/buffer-util.js"(exports2, module2) {
+  "node_modules/.pnpm/ws@8.21.0/node_modules/ws/lib/buffer-util.js"(exports2, module2) {
     "use strict";
     var { EMPTY_BUFFER } = require_constants();
     var FastBuffer = Buffer[Symbol.species];
@@ -129,9 +129,9 @@ var require_buffer_util = __commonJS({
   }
 });
 
-// node_modules/.pnpm/ws@8.20.1/node_modules/ws/lib/limiter.js
+// node_modules/.pnpm/ws@8.21.0/node_modules/ws/lib/limiter.js
 var require_limiter = __commonJS({
-  "node_modules/.pnpm/ws@8.20.1/node_modules/ws/lib/limiter.js"(exports2, module2) {
+  "node_modules/.pnpm/ws@8.21.0/node_modules/ws/lib/limiter.js"(exports2, module2) {
     "use strict";
     var kDone = /* @__PURE__ */ Symbol("kDone");
     var kRun = /* @__PURE__ */ Symbol("kRun");
@@ -179,9 +179,9 @@ var require_limiter = __commonJS({
   }
 });
 
-// node_modules/.pnpm/ws@8.20.1/node_modules/ws/lib/permessage-deflate.js
+// node_modules/.pnpm/ws@8.21.0/node_modules/ws/lib/permessage-deflate.js
 var require_permessage_deflate = __commonJS({
-  "node_modules/.pnpm/ws@8.20.1/node_modules/ws/lib/permessage-deflate.js"(exports2, module2) {
+  "node_modules/.pnpm/ws@8.21.0/node_modules/ws/lib/permessage-deflate.js"(exports2, module2) {
     "use strict";
     var zlib = require("zlib");
     var bufferUtil = require_buffer_util();
@@ -562,9 +562,9 @@ var require_permessage_deflate = __commonJS({
   }
 });
 
-// node_modules/.pnpm/ws@8.20.1/node_modules/ws/lib/validation.js
+// node_modules/.pnpm/ws@8.21.0/node_modules/ws/lib/validation.js
 var require_validation = __commonJS({
-  "node_modules/.pnpm/ws@8.20.1/node_modules/ws/lib/validation.js"(exports2, module2) {
+  "node_modules/.pnpm/ws@8.21.0/node_modules/ws/lib/validation.js"(exports2, module2) {
     "use strict";
     var { isUtf8 } = require("buffer");
     var { hasBlob } = require_constants();
@@ -763,9 +763,9 @@ var require_validation = __commonJS({
   }
 });
 
-// node_modules/.pnpm/ws@8.20.1/node_modules/ws/lib/receiver.js
+// node_modules/.pnpm/ws@8.21.0/node_modules/ws/lib/receiver.js
 var require_receiver = __commonJS({
-  "node_modules/.pnpm/ws@8.20.1/node_modules/ws/lib/receiver.js"(exports2, module2) {
+  "node_modules/.pnpm/ws@8.21.0/node_modules/ws/lib/receiver.js"(exports2, module2) {
     "use strict";
     var { Writable } = require("stream");
     var PerMessageDeflate2 = require_permessage_deflate();
@@ -798,6 +798,10 @@ var require_receiver = __commonJS({
        *     extensions
        * @param {Boolean} [options.isServer=false] Specifies whether to operate in
        *     client or server mode
+       * @param {Number} [options.maxBufferedChunks=0] The maximum number of
+       *     buffered data chunks
+       * @param {Number} [options.maxFragments=0] The maximum number of message
+       *     fragments
        * @param {Number} [options.maxPayload=0] The maximum allowed message length
        * @param {Boolean} [options.skipUTF8Validation=false] Specifies whether or
        *     not to skip UTF-8 validation for text and close messages
@@ -808,6 +812,8 @@ var require_receiver = __commonJS({
         this._binaryType = options.binaryType || BINARY_TYPES[0];
         this._extensions = options.extensions || {};
         this._isServer = !!options.isServer;
+        this._maxBufferedChunks = options.maxBufferedChunks | 0;
+        this._maxFragments = options.maxFragments | 0;
         this._maxPayload = options.maxPayload | 0;
         this._skipUTF8Validation = !!options.skipUTF8Validation;
         this[kWebSocket] = void 0;
@@ -837,6 +843,18 @@ var require_receiver = __commonJS({
        */
       _write(chunk, encoding, cb) {
         if (this._opcode === 8 && this._state == GET_INFO) return cb();
+        if (this._maxBufferedChunks > 0 && this._buffers.length >= this._maxBufferedChunks) {
+          cb(
+            this.createError(
+              RangeError,
+              "Too many buffered chunks",
+              false,
+              1008,
+              "WS_ERR_TOO_MANY_BUFFERED_PARTS"
+            )
+          );
+          return;
+        }
         this._bufferedBytes += chunk.length;
         this._buffers.push(chunk);
         this.startLoop(cb);
@@ -1166,6 +1184,17 @@ var require_receiver = __commonJS({
           return;
         }
         if (data.length) {
+          if (this._maxFragments > 0 && this._fragments.length >= this._maxFragments) {
+            const error = this.createError(
+              RangeError,
+              "Too many message fragments",
+              false,
+              1008,
+              "WS_ERR_TOO_MANY_BUFFERED_PARTS"
+            );
+            cb(error);
+            return;
+          }
           this._messageLength = this._totalPayloadLength;
           this._fragments.push(data);
         }
@@ -1195,6 +1224,17 @@ var require_receiver = __commonJS({
               cb(error);
               return;
             }
+            if (this._maxFragments > 0 && this._fragments.length >= this._maxFragments) {
+              const error = this.createError(
+                RangeError,
+                "Too many message fragments",
+                false,
+                1008,
+                "WS_ERR_TOO_MANY_BUFFERED_PARTS"
+              );
+              cb(error);
+              return;
+            }
             this._fragments.push(buf);
           }
           this.dataMessage(cb);
@@ -1355,9 +1395,9 @@ var require_receiver = __commonJS({
   }
 });
 
-// node_modules/.pnpm/ws@8.20.1/node_modules/ws/lib/sender.js
+// node_modules/.pnpm/ws@8.21.0/node_modules/ws/lib/sender.js
 var require_sender = __commonJS({
-  "node_modules/.pnpm/ws@8.20.1/node_modules/ws/lib/sender.js"(exports2, module2) {
+  "node_modules/.pnpm/ws@8.21.0/node_modules/ws/lib/sender.js"(exports2, module2) {
     "use strict";
     var { Duplex } = require("stream");
     var { randomFillSync } = require("crypto");
@@ -1848,9 +1888,9 @@ var require_sender = __commonJS({
   }
 });
 
-// node_modules/.pnpm/ws@8.20.1/node_modules/ws/lib/event-target.js
+// node_modules/.pnpm/ws@8.21.0/node_modules/ws/lib/event-target.js
 var require_event_target = __commonJS({
-  "node_modules/.pnpm/ws@8.20.1/node_modules/ws/lib/event-target.js"(exports2, module2) {
+  "node_modules/.pnpm/ws@8.21.0/node_modules/ws/lib/event-target.js"(exports2, module2) {
     "use strict";
     var { kForOnEventAttribute, kListener } = require_constants();
     var kCode = /* @__PURE__ */ Symbol("kCode");
@@ -2077,9 +2117,9 @@ var require_event_target = __commonJS({
   }
 });
 
-// node_modules/.pnpm/ws@8.20.1/node_modules/ws/lib/extension.js
+// node_modules/.pnpm/ws@8.21.0/node_modules/ws/lib/extension.js
 var require_extension = __commonJS({
-  "node_modules/.pnpm/ws@8.20.1/node_modules/ws/lib/extension.js"(exports2, module2) {
+  "node_modules/.pnpm/ws@8.21.0/node_modules/ws/lib/extension.js"(exports2, module2) {
     "use strict";
     var { tokenChars } = require_validation();
     function push(dest, name, elem) {
@@ -2230,14 +2270,14 @@ var require_extension = __commonJS({
   }
 });
 
-// node_modules/.pnpm/ws@8.20.1/node_modules/ws/lib/websocket.js
+// node_modules/.pnpm/ws@8.21.0/node_modules/ws/lib/websocket.js
 var require_websocket = __commonJS({
-  "node_modules/.pnpm/ws@8.20.1/node_modules/ws/lib/websocket.js"(exports2, module2) {
+  "node_modules/.pnpm/ws@8.21.0/node_modules/ws/lib/websocket.js"(exports2, module2) {
     "use strict";
     var EventEmitter = require("events");
     var https3 = require("https");
     var http2 = require("http");
-    var net = require("net");
+    var net2 = require("net");
     var tls = require("tls");
     var { randomBytes: randomBytes2, createHash: createHash3 } = require("crypto");
     var { Duplex, Readable } = require("stream");
@@ -2401,6 +2441,10 @@ var require_websocket = __commonJS({
        *     multiple times in the same tick
        * @param {Function} [options.generateMask] The function used to generate the
        *     masking key
+       * @param {Number} [options.maxBufferedChunks=0] The maximum number of
+       *     buffered data chunks
+       * @param {Number} [options.maxFragments=0] The maximum number of message
+       *     fragments
        * @param {Number} [options.maxPayload=0] The maximum allowed message size
        * @param {Boolean} [options.skipUTF8Validation=false] Specifies whether or
        *     not to skip UTF-8 validation for text and close messages
@@ -2412,6 +2456,8 @@ var require_websocket = __commonJS({
           binaryType: this.binaryType,
           extensions: this._extensions,
           isServer: this._isServer,
+          maxBufferedChunks: options.maxBufferedChunks,
+          maxFragments: options.maxFragments,
           maxPayload: options.maxPayload,
           skipUTF8Validation: options.skipUTF8Validation
         });
@@ -2711,6 +2757,8 @@ var require_websocket = __commonJS({
         autoPong: true,
         closeTimeout: CLOSE_TIMEOUT,
         protocolVersion: protocolVersions[1],
+        maxBufferedChunks: 1024 * 1024,
+        maxFragments: 128 * 1024,
         maxPayload: 100 * 1024 * 1024,
         skipUTF8Validation: false,
         perMessageDeflate: true,
@@ -2953,6 +3001,8 @@ var require_websocket = __commonJS({
         websocket.setSocket(socket, head, {
           allowSynchronousEvents: opts.allowSynchronousEvents,
           generateMask: opts.generateMask,
+          maxBufferedChunks: opts.maxBufferedChunks,
+          maxFragments: opts.maxFragments,
           maxPayload: opts.maxPayload,
           skipUTF8Validation: opts.skipUTF8Validation
         });
@@ -2971,12 +3021,12 @@ var require_websocket = __commonJS({
     }
     function netConnect(options) {
       options.path = options.socketPath;
-      return net.connect(options);
+      return net2.connect(options);
     }
     function tlsConnect(options) {
       options.path = void 0;
       if (!options.servername && options.servername !== "") {
-        options.servername = net.isIP(options.host) ? "" : options.host;
+        options.servername = net2.isIP(options.host) ? "" : options.host;
       }
       return tls.connect(options);
     }
@@ -3116,9 +3166,9 @@ var require_websocket = __commonJS({
   }
 });
 
-// node_modules/.pnpm/ws@8.20.1/node_modules/ws/lib/stream.js
+// node_modules/.pnpm/ws@8.21.0/node_modules/ws/lib/stream.js
 var require_stream = __commonJS({
-  "node_modules/.pnpm/ws@8.20.1/node_modules/ws/lib/stream.js"(exports2, module2) {
+  "node_modules/.pnpm/ws@8.21.0/node_modules/ws/lib/stream.js"(exports2, module2) {
     "use strict";
     var WebSocket2 = require_websocket();
     var { Duplex } = require("stream");
@@ -3214,9 +3264,9 @@ var require_stream = __commonJS({
   }
 });
 
-// node_modules/.pnpm/ws@8.20.1/node_modules/ws/lib/subprotocol.js
+// node_modules/.pnpm/ws@8.21.0/node_modules/ws/lib/subprotocol.js
 var require_subprotocol = __commonJS({
-  "node_modules/.pnpm/ws@8.20.1/node_modules/ws/lib/subprotocol.js"(exports2, module2) {
+  "node_modules/.pnpm/ws@8.21.0/node_modules/ws/lib/subprotocol.js"(exports2, module2) {
     "use strict";
     var { tokenChars } = require_validation();
     function parse(header) {
@@ -3259,9 +3309,9 @@ var require_subprotocol = __commonJS({
   }
 });
 
-// node_modules/.pnpm/ws@8.20.1/node_modules/ws/lib/websocket-server.js
+// node_modules/.pnpm/ws@8.21.0/node_modules/ws/lib/websocket-server.js
 var require_websocket_server = __commonJS({
-  "node_modules/.pnpm/ws@8.20.1/node_modules/ws/lib/websocket-server.js"(exports2, module2) {
+  "node_modules/.pnpm/ws@8.21.0/node_modules/ws/lib/websocket-server.js"(exports2, module2) {
     "use strict";
     var EventEmitter = require("events");
     var http2 = require("http");
@@ -3295,6 +3345,10 @@ var require_websocket_server = __commonJS({
        *     called
        * @param {Function} [options.handleProtocols] A hook to handle protocols
        * @param {String} [options.host] The hostname where to bind the server
+       * @param {Number} [options.maxBufferedChunks=1048576] The maximum number of
+       *     buffered data chunks
+       * @param {Number} [options.maxFragments=131072] The maximum number of message
+       *     fragments
        * @param {Number} [options.maxPayload=104857600] The maximum allowed message
        *     size
        * @param {Boolean} [options.noServer=false] Enable no server mode
@@ -3316,6 +3370,8 @@ var require_websocket_server = __commonJS({
         options = {
           allowSynchronousEvents: true,
           autoPong: true,
+          maxBufferedChunks: 1024 * 1024,
+          maxFragments: 128 * 1024,
           maxPayload: 100 * 1024 * 1024,
           skipUTF8Validation: false,
           perMessageDeflate: false,
@@ -3595,6 +3651,8 @@ var require_websocket_server = __commonJS({
         socket.removeListener("error", socketOnError);
         ws.setSocket(socket, head, {
           allowSynchronousEvents: this.options.allowSynchronousEvents,
+          maxBufferedChunks: this.options.maxBufferedChunks,
+          maxFragments: this.options.maxFragments,
           maxPayload: this.options.maxPayload,
           skipUTF8Validation: this.options.skipUTF8Validation
         });
@@ -5015,16 +5073,16 @@ var import_node_os = __toESM(require("os"), 1);
 // src/outbound/outbound-service.ts
 var path3 = __toESM(require("path"), 1);
 
-// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607081646/node_modules/@cxyhhhhh/qqbot-nodejs/dist/QQBot.js
+// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607092059/node_modules/@cxyhhhhh/qqbot-nodejs/dist/QQBot.js
 var fs3 = __toESM(require("fs"), 1);
 var path = __toESM(require("path"), 1);
 
-// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607081646/node_modules/@cxyhhhhh/qqbot-nodejs/dist/middleware/types.js
-function resolvePolicy(ctx, path21, explicit, defaultValue) {
+// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607092059/node_modules/@cxyhhhhh/qqbot-nodejs/dist/middleware/types.js
+function resolvePolicy(ctx, path22, explicit, defaultValue) {
   if (explicit !== void 0 && explicit !== null) {
     return explicit;
   }
-  const keys = path21.split(".");
+  const keys = path22.split(".");
   let value = ctx.state.policy;
   for (const key of keys) {
     if (value === null || value === void 0)
@@ -5095,17 +5153,17 @@ function createMiddlewareContext(params) {
   return ctx;
 }
 
-// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607081646/node_modules/@cxyhhhhh/qqbot-nodejs/dist/protocol/types.js
+// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607092059/node_modules/@cxyhhhhh/qqbot-nodejs/dist/protocol/types.js
 var ApiError = class extends Error {
   httpStatus;
   path;
   bizCode;
   bizMessage;
   name = "ApiError";
-  constructor(message, httpStatus, path21, bizCode, bizMessage) {
+  constructor(message, httpStatus, path22, bizCode, bizMessage) {
     super(message);
     this.httpStatus = httpStatus;
-    this.path = path21;
+    this.path = path22;
     this.bizCode = bizCode;
     this.bizMessage = bizMessage;
   }
@@ -5128,7 +5186,7 @@ var StreamContentType = {
   MARKDOWN: "markdown"
 };
 
-// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607081646/node_modules/@cxyhhhhh/qqbot-nodejs/dist/protocol/utils/format.js
+// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607092059/node_modules/@cxyhhhhh/qqbot-nodejs/dist/protocol/utils/format.js
 function formatErrorMessage(err) {
   if (err instanceof Error) {
     let formatted = err.message || err.name || "Error";
@@ -5175,7 +5233,7 @@ function formatFileSize(bytes) {
   return `${(bytes / 1024 / 1024 / 1024).toFixed(2)} GB`;
 }
 
-// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607081646/node_modules/@cxyhhhhh/qqbot-nodejs/dist/protocol/api/api-client.js
+// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607092059/node_modules/@cxyhhhhh/qqbot-nodejs/dist/protocol/api/api-client.js
 var DEFAULT_BASE_URL = "https://api.sgroup.qq.com";
 var DEFAULT_TIMEOUT_MS = 3e4;
 var FILE_UPLOAD_TIMEOUT_MS = 12e4;
@@ -5193,14 +5251,14 @@ var ApiClient = class {
     const ua = config.userAgent ?? "qqbot-nodejs/unknown";
     this.resolveUserAgent = typeof ua === "function" ? ua : () => ua;
   }
-  async request(accessToken, method, path21, body, options) {
-    const url = `${this.baseUrl}${path21}`;
+  async request(accessToken, method, path22, body, options) {
+    const url = `${this.baseUrl}${path22}`;
     const headers = {
       Authorization: `QQBot ${accessToken}`,
       "Content-Type": "application/json",
       "User-Agent": this.resolveUserAgent()
     };
-    const isFileUpload = options?.uploadRequest === true || path21.includes("/files") || path21.includes("/upload_prepare") || path21.includes("/upload_part_finish");
+    const isFileUpload = options?.uploadRequest === true || path22.includes("/files") || path22.includes("/upload_prepare") || path22.includes("/upload_part_finish");
     const timeout = options?.timeoutMs ?? (isFileUpload ? this.fileUploadTimeoutMs : this.defaultTimeoutMs);
     const controller = new AbortController();
     const timeoutId = setTimeout(() => controller.abort(), timeout);
@@ -5225,10 +5283,10 @@ var ApiClient = class {
       clearTimeout(timeoutId);
       if (err instanceof Error && err.name === "AbortError") {
         this.logger?.error?.(`[qqbot:api] <<< Timeout after ${timeout}ms`);
-        throw new ApiError(`Request timeout [${path21}]: exceeded ${timeout}ms`, 0, path21);
+        throw new ApiError(`Request timeout [${path22}]: exceeded ${timeout}ms`, 0, path22);
       }
       this.logger?.error?.(`[qqbot:api] <<< Network error: ${formatErrorMessage(err)}`);
-      throw new ApiError(`Network error [${path21}]: ${formatErrorMessage(err)}`, 0, path21);
+      throw new ApiError(`Network error [${path22}]: ${formatErrorMessage(err)}`, 0, path22);
     } finally {
       clearTimeout(timeoutId);
     }
@@ -5238,7 +5296,7 @@ var ApiClient = class {
     try {
       rawBody = await res.text();
     } catch (err) {
-      throw new ApiError(`Failed to read response [${path21}]: ${formatErrorMessage(err)}`, res.status, path21);
+      throw new ApiError(`Failed to read response [${path22}]: ${formatErrorMessage(err)}`, res.status, path22);
     }
     this.logger?.debug?.(`[qqbot:api] <<< Body: ${rawBody}`);
     const contentType = res.headers.get("content-type") ?? "";
@@ -5246,36 +5304,36 @@ var ApiClient = class {
     if (!res.ok) {
       if (isHtmlResponse) {
         const statusHint = res.status === 502 || res.status === 503 || res.status === 504 ? "\u8C03\u7528\u53D1\u751F\u5F02\u5E38\uFF0C\u8BF7\u7A0D\u5019\u91CD\u8BD5" : res.status === 429 ? "\u8BF7\u6C42\u8FC7\u4E8E\u9891\u7E41\uFF0C\u5DF2\u88AB\u9650\u6D41" : `\u5F00\u653E\u5E73\u53F0\u8FD4\u56DE HTTP ${res.status}`;
-        throw new ApiError(`${statusHint}\uFF08${path21}\uFF09\uFF0C\u8BF7\u7A0D\u540E\u91CD\u8BD5`, res.status, path21);
+        throw new ApiError(`${statusHint}\uFF08${path22}\uFF09\uFF0C\u8BF7\u7A0D\u540E\u91CD\u8BD5`, res.status, path22);
       }
       try {
         const error = JSON.parse(rawBody);
         const bizCode = error.code ?? error.err_code;
-        throw new ApiError(`API Error [${path21}]: ${error.message ?? rawBody}`, res.status, path21, bizCode, error.message);
+        throw new ApiError(`API Error [${path22}]: ${error.message ?? rawBody}`, res.status, path22, bizCode, error.message);
       } catch (parseErr) {
         if (parseErr instanceof ApiError) {
           throw parseErr;
         }
-        throw new ApiError(`API Error [${path21}] HTTP ${res.status}: ${rawBody.slice(0, 200)}`, res.status, path21);
+        throw new ApiError(`API Error [${path22}] HTTP ${res.status}: ${rawBody.slice(0, 200)}`, res.status, path22);
       }
     }
     if (isHtmlResponse) {
-      throw new ApiError(`QQ \u670D\u52A1\u7AEF\u8FD4\u56DE\u4E86\u975E JSON \u54CD\u5E94\uFF08${path21}\uFF09\uFF0C\u53EF\u80FD\u662F\u4E34\u65F6\u6545\u969C\uFF0C\u8BF7\u7A0D\u540E\u91CD\u8BD5`, res.status, path21);
+      throw new ApiError(`QQ \u670D\u52A1\u7AEF\u8FD4\u56DE\u4E86\u975E JSON \u54CD\u5E94\uFF08${path22}\uFF09\uFF0C\u53EF\u80FD\u662F\u4E34\u65F6\u6545\u969C\uFF0C\u8BF7\u7A0D\u540E\u91CD\u8BD5`, res.status, path22);
     }
     try {
       return JSON.parse(rawBody);
     } catch {
-      throw new ApiError(`\u5F00\u653E\u5E73\u53F0\u54CD\u5E94\u683C\u5F0F\u5F02\u5E38\uFF08${path21}\uFF09\uFF0C\u8BF7\u7A0D\u540E\u91CD\u8BD5`, res.status, path21);
+      throw new ApiError(`\u5F00\u653E\u5E73\u53F0\u54CD\u5E94\u683C\u5F0F\u5F02\u5E38\uFF08${path22}\uFF09\uFF0C\u8BF7\u7A0D\u540E\u91CD\u8BD5`, res.status, path22);
     }
   }
 };
 
-// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607081646/node_modules/@cxyhhhhh/qqbot-nodejs/dist/protocol/api/media-chunked.js
+// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607092059/node_modules/@cxyhhhhh/qqbot-nodejs/dist/protocol/api/media-chunked.js
 var crypto = __toESM(require("crypto"), 1);
 var fs = __toESM(require("fs"), 1);
 var https = __toESM(require("https"), 1);
 
-// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607081646/node_modules/@cxyhhhhh/qqbot-nodejs/dist/protocol/api/retry.js
+// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607092059/node_modules/@cxyhhhhh/qqbot-nodejs/dist/protocol/api/retry.js
 async function withRetry(fn, policy, persistentPolicy, logger) {
   let lastError = null;
   for (let attempt = 0; attempt <= policy.maxRetries; attempt++) {
@@ -5367,7 +5425,7 @@ function buildPartFinishPersistentPolicy(retryTimeoutMs, retryableCodes = PART_F
 var PART_FINISH_RETRYABLE_CODES = /* @__PURE__ */ new Set([40093001]);
 var UPLOAD_PREPARE_FALLBACK_CODE = 40093002;
 
-// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607081646/node_modules/@cxyhhhhh/qqbot-nodejs/dist/protocol/api/routes.js
+// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607092059/node_modules/@cxyhhhhh/qqbot-nodejs/dist/protocol/api/routes.js
 function messagePath(scope, targetId) {
   return scope === "c2c" ? `/v2/users/${targetId}/messages` : `/v2/groups/${targetId}/messages`;
 }
@@ -5404,7 +5462,7 @@ function getNextMsgSeq(_msgId) {
   return (timePart ^ random) % 65536;
 }
 
-// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607081646/node_modules/@cxyhhhhh/qqbot-nodejs/dist/protocol/api/media-chunked.js
+// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607092059/node_modules/@cxyhhhhh/qqbot-nodejs/dist/protocol/api/media-chunked.js
 var UploadDailyLimitExceededError = class extends Error {
   filePath;
   fileSize;
@@ -5488,9 +5546,9 @@ var ChunkedMediaApi = class {
   }
   async callUploadPrepare(opts, fileName, fileSize, hashes, pathLabel) {
     const token = await this.tokenManager.getAccessToken(opts.creds.appId, opts.creds.clientSecret);
-    const path21 = uploadPreparePath(opts.scope, opts.targetId);
+    const path22 = uploadPreparePath(opts.scope, opts.targetId);
     try {
-      return await this.client.request(token, "POST", path21, {
+      return await this.client.request(token, "POST", path22, {
         file_type: opts.fileType,
         file_name: fileName,
         file_size: fileSize,
@@ -5507,10 +5565,10 @@ var ChunkedMediaApi = class {
   }
   async callUploadPartFinish(opts, uploadId, partIndex, blockSize, md5, retryTimeoutMs) {
     const persistentPolicy = buildPartFinishPersistentPolicy(retryTimeoutMs);
-    const path21 = uploadPartFinishPath(opts.scope, opts.targetId);
+    const path22 = uploadPartFinishPath(opts.scope, opts.targetId);
     await withRetry(async () => {
       const token = await this.tokenManager.getAccessToken(opts.creds.appId, opts.creds.clientSecret);
-      return this.client.request(token, "POST", path21, {
+      return this.client.request(token, "POST", path22, {
         upload_id: uploadId,
         part_index: partIndex,
         block_size: blockSize,
@@ -5519,10 +5577,10 @@ var ChunkedMediaApi = class {
     }, PART_FINISH_RETRY_POLICY, persistentPolicy, this.logger);
   }
   async callCompleteUpload(opts, uploadId) {
-    const path21 = uploadCompletePath(opts.scope, opts.targetId);
+    const path22 = uploadCompletePath(opts.scope, opts.targetId);
     return withRetry(async () => {
       const token = await this.tokenManager.getAccessToken(opts.creds.appId, opts.creds.clientSecret);
-      return this.client.request(token, "POST", path21, { upload_id: uploadId }, { uploadRequest: true });
+      return this.client.request(token, "POST", path22, { upload_id: uploadId }, { uploadRequest: true });
     }, COMPLETE_UPLOAD_RETRY_POLICY, void 0, this.logger);
   }
 };
@@ -5663,7 +5721,7 @@ function sleep2(ms) {
   return new Promise((resolve2) => setTimeout(resolve2, ms));
 }
 
-// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607081646/node_modules/@cxyhhhhh/qqbot-nodejs/dist/protocol/api/media.js
+// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607092059/node_modules/@cxyhhhhh/qqbot-nodejs/dist/protocol/api/media.js
 var fs2 = __toESM(require("fs"), 1);
 var MediaApi = class {
   client;
@@ -5716,8 +5774,8 @@ var MediaApi = class {
       body.file_name = this.sanitize(opts.fileName);
     }
     const token = await this.tokenManager.getAccessToken(creds.appId, creds.clientSecret);
-    const path21 = mediaUploadPath(scope, targetId);
-    const result = await withRetry(() => this.client.request(token, "POST", path21, body, {
+    const path22 = mediaUploadPath(scope, targetId);
+    const result = await withRetry(() => this.client.request(token, "POST", path22, body, {
       redactBodyKeys: ["file_data"],
       uploadRequest: true
     }), UPLOAD_RETRY_POLICY, void 0, this.logger);
@@ -5733,8 +5791,8 @@ var MediaApi = class {
   async sendMediaMessage(scope, targetId, fileInfo, creds, opts) {
     const token = await this.tokenManager.getAccessToken(creds.appId, creds.clientSecret);
     const msgSeq = opts?.msgId ? getNextMsgSeq(opts.msgId) : 1;
-    const path21 = messagePath(scope, targetId);
-    return this.client.request(token, "POST", path21, {
+    const path22 = messagePath(scope, targetId);
+    return this.client.request(token, "POST", path22, {
       msg_type: 7,
       media: { file_info: fileInfo },
       msg_seq: msgSeq,
@@ -5744,7 +5802,7 @@ var MediaApi = class {
   }
 };
 
-// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607081646/node_modules/@cxyhhhhh/qqbot-nodejs/dist/protocol/api/messages.js
+// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607092059/node_modules/@cxyhhhhh/qqbot-nodejs/dist/protocol/api/messages.js
 var MessageApi = class {
   client;
   tokenManager;
@@ -5773,8 +5831,8 @@ var MessageApi = class {
     const token = await this.tokenManager.getAccessToken(creds.appId, creds.clientSecret);
     const msgSeq = opts?.msgId ? getNextMsgSeq(opts.msgId) : 1;
     const body = this.buildMessageBody(content, opts?.msgId, msgSeq, opts?.messageReference, opts?.inlineKeyboard);
-    const path21 = messagePath(scope, targetId);
-    return this.sendAndNotify(creds.appId, token, "POST", path21, body, { text: content });
+    const path22 = messagePath(scope, targetId);
+    return this.sendAndNotify(creds.appId, token, "POST", path22, body, { text: content });
   }
   async sendProactiveMessage(scope, targetId, content, creds) {
     if (!content?.trim()) {
@@ -5782,8 +5840,8 @@ var MessageApi = class {
     }
     const token = await this.tokenManager.getAccessToken(creds.appId, creds.clientSecret);
     const body = this.buildProactiveBody(content);
-    const path21 = messagePath(scope, targetId);
-    return this.sendAndNotify(creds.appId, token, "POST", path21, body, { text: content });
+    const path22 = messagePath(scope, targetId);
+    return this.sendAndNotify(creds.appId, token, "POST", path22, body, { text: content });
   }
   async sendChannelMessage(opts) {
     const token = await this.tokenManager.getAccessToken(opts.creds.appId, opts.creds.clientSecret);
@@ -5831,7 +5889,7 @@ var MessageApi = class {
    */
   async sendC2CStreamMessage(creds, openid, req4) {
     const token = await this.tokenManager.getAccessToken(creds.appId, creds.clientSecret);
-    const path21 = streamMessagePath(openid);
+    const path22 = streamMessagePath(openid);
     const body = {
       input_mode: req4.input_mode,
       input_state: req4.input_state,
@@ -5845,7 +5903,7 @@ var MessageApi = class {
     if (req4.stream_msg_id) {
       body.stream_msg_id = req4.stream_msg_id;
     }
-    return this.client.request(token, "POST", path21, body);
+    return this.client.request(token, "POST", path22, body);
   }
   /**
    * Raw message send — transparently forwards all fields to the QQ Open Platform API.
@@ -5859,7 +5917,7 @@ var MessageApi = class {
    */
   async sendRaw(scope, targetId, creds, body) {
     const token = await this.tokenManager.getAccessToken(creds.appId, creds.clientSecret);
-    const path21 = messagePath(scope, targetId);
+    const path22 = messagePath(scope, targetId);
     if (body.msg_seq === void 0) {
       body.msg_seq = body.msg_id ? getNextMsgSeq(body.msg_id) : 1;
     }
@@ -5876,7 +5934,7 @@ var MessageApi = class {
         body.msg_type = 0;
     }
     const cleaned = Object.fromEntries(Object.entries(body).filter(([, v]) => v !== void 0));
-    return this.sendAndNotify(creds.appId, token, "POST", path21, cleaned, { text: cleaned.content ?? cleaned.markdown?.content });
+    return this.sendAndNotify(creds.appId, token, "POST", path22, cleaned, { text: cleaned.content ?? cleaned.markdown?.content });
   }
   /**
    * Send a message to a guild text channel.
@@ -5900,11 +5958,11 @@ var MessageApi = class {
    */
   async recallMessage(scope, targetId, messageId, creds) {
     const token = await this.tokenManager.getAccessToken(creds.appId, creds.clientSecret);
-    const path21 = `${messagePath(scope, targetId)}/${messageId}`;
-    await this.client.request(token, "DELETE", path21);
+    const path22 = `${messagePath(scope, targetId)}/${messageId}`;
+    await this.client.request(token, "DELETE", path22);
   }
-  async sendAndNotify(_appId, accessToken, method, path21, body, meta) {
-    const result = await this.client.request(accessToken, method, path21, body);
+  async sendAndNotify(_appId, accessToken, method, path22, body, meta) {
+    const result = await this.client.request(accessToken, method, path22, body);
     if (result.ext_info?.ref_idx && this.messageSentHook) {
       try {
         this.messageSentHook(result.ext_info.ref_idx, meta);
@@ -5932,7 +5990,7 @@ var MessageApi = class {
   }
 };
 
-// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607081646/node_modules/@cxyhhhhh/qqbot-nodejs/dist/protocol/api/token.js
+// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607092059/node_modules/@cxyhhhhh/qqbot-nodejs/dist/protocol/api/token.js
 var DEFAULT_TOKEN_BASE_URL = "https://bots.qq.com";
 var TOKEN_PATH = "/app/getAppAccessToken";
 var TokenManager = class {
@@ -6108,7 +6166,7 @@ var TokenManager = class {
   }
 };
 
-// node_modules/.pnpm/ws@8.20.1/node_modules/ws/wrapper.mjs
+// node_modules/.pnpm/ws@8.21.0/node_modules/ws/wrapper.mjs
 var import_stream = __toESM(require_stream(), 1);
 var import_extension = __toESM(require_extension(), 1);
 var import_permessage_deflate = __toESM(require_permessage_deflate(), 1);
@@ -6119,7 +6177,7 @@ var import_websocket = __toESM(require_websocket(), 1);
 var import_websocket_server = __toESM(require_websocket_server(), 1);
 var wrapper_default = import_websocket.default;
 
-// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607081646/node_modules/@cxyhhhhh/qqbot-nodejs/dist/protocol/gateway/codec.js
+// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607092059/node_modules/@cxyhhhhh/qqbot-nodejs/dist/protocol/gateway/codec.js
 function decodeGatewayMessageData(data) {
   if (typeof data === "string") {
     return data;
@@ -6146,7 +6204,7 @@ function readOptionalMessageSceneExt(event) {
   return scene?.ext;
 }
 
-// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607081646/node_modules/@cxyhhhhh/qqbot-nodejs/dist/protocol/gateway/constants.js
+// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607092059/node_modules/@cxyhhhhh/qqbot-nodejs/dist/protocol/gateway/constants.js
 var INTENTS = {
   GUILDS: 1 << 0,
   GUILD_MEMBERS: 1 << 1,
@@ -6219,7 +6277,7 @@ var GatewayEvent = {
   MESSAGE_REACTION_REMOVE: "MESSAGE_REACTION_REMOVE"
 };
 
-// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607081646/node_modules/@cxyhhhhh/qqbot-nodejs/dist/protocol/gateway/event-dispatcher.js
+// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607092059/node_modules/@cxyhhhhh/qqbot-nodejs/dist/protocol/gateway/event-dispatcher.js
 var REF_INDEX_KEY = "msg_idx";
 function parseRefIndices(ext, msgType, msgElements) {
   let refMsgIdx;
@@ -6360,7 +6418,7 @@ function dispatchEvent(eventType, data, _accountId, _log) {
   return { action: "raw", type: eventType, data };
 }
 
-// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607081646/node_modules/@cxyhhhhh/qqbot-nodejs/dist/protocol/gateway/reconnect.js
+// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607092059/node_modules/@cxyhhhhh/qqbot-nodejs/dist/protocol/gateway/reconnect.js
 var ReconnectState = class {
   accountId;
   log;
@@ -6471,7 +6529,7 @@ var ReconnectState = class {
   }
 };
 
-// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607081646/node_modules/@cxyhhhhh/qqbot-nodejs/dist/protocol/gateway/gateway-connection.js
+// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607092059/node_modules/@cxyhhhhh/qqbot-nodejs/dist/protocol/gateway/gateway-connection.js
 var GatewayConnection = class {
   isAborted = false;
   currentWs = null;
@@ -6729,7 +6787,7 @@ function previewPayload(data) {
   }
 }
 
-// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607081646/node_modules/@cxyhhhhh/qqbot-nodejs/dist/protocol/transport/webhook-verify.js
+// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607092059/node_modules/@cxyhhhhh/qqbot-nodejs/dist/protocol/transport/webhook-verify.js
 var crypto2 = __toESM(require("crypto"), 1);
 function deriveSeed(botSecret) {
   let seed = botSecret;
@@ -6781,14 +6839,14 @@ function signValidationResponse(params) {
   };
 }
 
-// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607081646/node_modules/@cxyhhhhh/qqbot-nodejs/dist/protocol/transport/webhook-server-node.js
+// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607092059/node_modules/@cxyhhhhh/qqbot-nodejs/dist/protocol/transport/webhook-server-node.js
 var http = __toESM(require("http"), 1);
 var NodeHttpWebhookServer = class {
   server = null;
-  async listen(port, path21, handler) {
+  async listen(port, path22, handler) {
     return new Promise((resolve2, reject) => {
       const server = http.createServer(async (req4, res) => {
-        if (req4.method !== "POST" || req4.url !== path21) {
+        if (req4.method !== "POST" || req4.url !== path22) {
           res.writeHead(404, { "Content-Type": "text/plain" });
           res.end("Not Found");
           return;
@@ -6829,7 +6887,7 @@ var NodeHttpWebhookServer = class {
   }
 };
 
-// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607081646/node_modules/@cxyhhhhh/qqbot-nodejs/dist/protocol/transport/webhook.js
+// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607092059/node_modules/@cxyhhhhh/qqbot-nodejs/dist/protocol/transport/webhook.js
 var OP_DISPATCH = 0;
 var OP_HTTP_CALLBACK_ACK = 12;
 var OP_VALIDATION = 13;
@@ -6850,11 +6908,11 @@ var WebhookTransport = class {
   }
   async start() {
     const port = this.opts.port ?? 8080;
-    const path21 = this.opts.path ?? "/";
-    this.log?.info?.(`[webhook] starting on port ${port}, path ${path21}`);
-    await this.server.listen(port, path21, (req4) => this.handleRequest(req4));
-    this.log?.info?.(`[webhook] listening on :${port}${path21}`);
-    this.callbacks.onReady?.({ transport: "webhook", port, path: path21 });
+    const path22 = this.opts.path ?? "/";
+    this.log?.info?.(`[webhook] starting on port ${port}, path ${path22}`);
+    await this.server.listen(port, path22, (req4) => this.handleRequest(req4));
+    this.log?.info?.(`[webhook] listening on :${port}${path22}`);
+    this.callbacks.onReady?.({ transport: "webhook", port, path: path22 });
     if (this.opts.abortSignal) {
       await new Promise((resolve2) => {
         if (this.opts.abortSignal.aborted) {
@@ -6973,7 +7031,7 @@ function getHeader(headers, key) {
   return val;
 }
 
-// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607081646/node_modules/@cxyhhhhh/qqbot-nodejs/dist/protocol/utils/file-utils.js
+// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607092059/node_modules/@cxyhhhhh/qqbot-nodejs/dist/protocol/utils/file-utils.js
 var MAX_UPLOAD_SIZE = 20 * 1024 * 1024;
 var CHUNKED_UPLOAD_MAX_SIZE = 100 * 1024 * 1024;
 var LARGE_FILE_THRESHOLD = 5 * 1024 * 1024;
@@ -6991,7 +7049,7 @@ function sanitizeFileName(name) {
   return cleaned || "file";
 }
 
-// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607081646/node_modules/@cxyhhhhh/qqbot-nodejs/dist/protocol/utils/upload-cache.js
+// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607092059/node_modules/@cxyhhhhh/qqbot-nodejs/dist/protocol/utils/upload-cache.js
 var crypto3 = __toESM(require("crypto"), 1);
 var MAX_CACHE_SIZE = 500;
 function computeFileHash(data) {
@@ -7056,7 +7114,7 @@ var UploadCache = class {
   }
 };
 
-// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607081646/node_modules/@cxyhhhhh/qqbot-nodejs/dist/streaming.js
+// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607092059/node_modules/@cxyhhhhh/qqbot-nodejs/dist/streaming.js
 var DEFAULT_THROTTLE_MS = 500;
 var MIN_THROTTLE_MS = 300;
 var MAX_FLUSH_RETRIES = 3;
@@ -7224,7 +7282,7 @@ var StreamSession = class {
   }
 };
 
-// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607081646/node_modules/@cxyhhhhh/qqbot-nodejs/dist/QQBot.js
+// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607092059/node_modules/@cxyhhhhh/qqbot-nodejs/dist/QQBot.js
 var MsgType = {
   /** Plain text. */
   TEXT: 0,
@@ -7744,25 +7802,25 @@ var QQBot = class {
     if (this._apiGateway)
       return this._apiGateway;
     this._apiGateway = {
-      get: (path21, query) => this.apiRequest("GET", path21, void 0, query),
-      post: (path21, body) => this.apiRequest("POST", path21, body),
-      put: (path21, body) => this.apiRequest("PUT", path21, body),
-      patch: (path21, body) => this.apiRequest("PATCH", path21, body),
-      delete: (path21) => this.apiRequest("DELETE", path21),
+      get: (path22, query) => this.apiRequest("GET", path22, void 0, query),
+      post: (path22, body) => this.apiRequest("POST", path22, body),
+      put: (path22, body) => this.apiRequest("PUT", path22, body),
+      patch: (path22, body) => this.apiRequest("PATCH", path22, body),
+      delete: (path22) => this.apiRequest("DELETE", path22),
       getToken: () => this.tokenManager.getAccessToken(this.creds.appId, this.creds.clientSecret)
     };
     return this._apiGateway;
   }
-  async apiRequest(method, path21, body, query) {
+  async apiRequest(method, path22, body, query) {
     const token = await this.tokenManager.getAccessToken(this.creds.appId, this.creds.clientSecret);
-    let fullPath = path21;
+    let fullPath = path22;
     if (query && Object.keys(query).length > 0) {
       const params = new URLSearchParams();
       for (const [k, v] of Object.entries(query)) {
         if (v !== void 0 && v !== null)
           params.set(k, String(v));
       }
-      fullPath = `${path21}?${params.toString()}`;
+      fullPath = `${path22}?${params.toString()}`;
     }
     return this.apiClient.request(token, method, fullPath, body ?? void 0);
   }
@@ -7912,7 +7970,7 @@ var QQBot = class {
   }
 };
 
-// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607081646/node_modules/@cxyhhhhh/qqbot-nodejs/dist/middleware/message-filter.js
+// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607092059/node_modules/@cxyhhhhh/qqbot-nodejs/dist/middleware/message-filter.js
 function messageFilter(options = {}) {
   const skipSelfEcho = options.skipSelfEcho ?? true;
   const dedupOpts = options.dedup !== false ? { windowMs: 5e3, maxSize: 1e3, ...options.dedup ?? {} } : null;
@@ -7950,7 +8008,7 @@ function messageFilter(options = {}) {
   };
 }
 
-// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607081646/node_modules/@cxyhhhhh/qqbot-nodejs/dist/middleware/content-sanitizer.js
+// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607092059/node_modules/@cxyhhhhh/qqbot-nodejs/dist/middleware/content-sanitizer.js
 function contentSanitizer(options = {}) {
   const { stripBotMention = true, stripAllMentions = false, collapseWhitespace = false, parseFaceTags: parseFaceTags2 = false, transform } = options;
   return async (ctx, next) => {
@@ -8045,7 +8103,7 @@ function faceToEmoji(id) {
   return map[id];
 }
 
-// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607081646/node_modules/@cxyhhhhh/qqbot-nodejs/dist/middleware/rate-limiter.js
+// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607092059/node_modules/@cxyhhhhh/qqbot-nodejs/dist/middleware/rate-limiter.js
 var SlidingWindow = class {
   buckets = /* @__PURE__ */ new Map();
   max;
@@ -8099,11 +8157,11 @@ function rateLimiter(options = {}) {
   };
 }
 
-// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607081646/node_modules/@cxyhhhhh/qqbot-nodejs/dist/middleware/concurrency-guard.js
+// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607092059/node_modules/@cxyhhhhh/qqbot-nodejs/dist/middleware/concurrency-guard.js
 function concurrencyGuard(options = {}) {
   const strategy = options.strategy ?? "queue";
   const maxQueue = options.maxQueue ?? 3;
-  const { onDrop, onMerge, onDispatch } = options;
+  const { onDrop, onMerge, onDispatch, urgentPredicate } = options;
   const locks = /* @__PURE__ */ new Map();
   function getState(key) {
     let s = locks.get(key);
@@ -8156,6 +8214,15 @@ function concurrencyGuard(options = {}) {
           state.mergeBuffer = [];
           state.mergeWaiters = [];
         }
+        if (urgentPredicate?.(ctx)) {
+          ctx.log.debug?.(`[concurrency:merge] urgent for ${key}`);
+          for (const w2 of state.mergeWaiters)
+            w2.resolve();
+          state.mergeBuffer.length = 0;
+          state.mergeWaiters.length = 0;
+          await next();
+          return;
+        }
         if (state.mergeBuffer.length >= maxQueue) {
           ctx.log.debug?.(`[concurrency:merge] buffer full (${maxQueue}), drop for ${key}`);
           await onDrop?.(ctx);
@@ -8303,7 +8370,7 @@ function concurrencyGuard(options = {}) {
   return guard;
 }
 
-// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607081646/node_modules/@cxyhhhhh/qqbot-nodejs/dist/middleware/mention-gate.js
+// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607092059/node_modules/@cxyhhhhh/qqbot-nodejs/dist/middleware/mention-gate.js
 function detectMentionInContent(content, appId) {
   if (!content || !appId)
     return false;
@@ -8359,7 +8426,7 @@ function mentionGate(options = {}) {
   };
 }
 
-// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607081646/node_modules/@cxyhhhhh/qqbot-nodejs/dist/middleware/quote-ref.js
+// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607092059/node_modules/@cxyhhhhh/qqbot-nodejs/dist/middleware/quote-ref.js
 var MemoryRefIndexStore = class {
   map = /* @__PURE__ */ new Map();
   maxSize;
@@ -8477,7 +8544,7 @@ function buildText(content, attachments) {
   return parts.join("\n") || "[empty message]";
 }
 
-// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607081646/node_modules/@cxyhhhhh/qqbot-nodejs/dist/middleware/envelope-formatter.js
+// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607092059/node_modules/@cxyhhhhh/qqbot-nodejs/dist/middleware/envelope-formatter.js
 function envelopeFormatter(options = {}) {
   const { historyLimit = 5, includeQuote = true, includeSender = true, format } = options;
   return async (ctx, next) => {
@@ -8549,7 +8616,7 @@ ${parts.join("\n")}
   return sections.join("\n\n");
 }
 
-// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607081646/node_modules/@cxyhhhhh/qqbot-nodejs/dist/middleware/slash-command.js
+// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607092059/node_modules/@cxyhhhhh/qqbot-nodejs/dist/middleware/slash-command.js
 function slashCommand(options = {}) {
   const prefixes = options.prefixes ?? ["/"];
   const catchErrors = options.catchErrors ?? true;
@@ -8701,7 +8768,7 @@ async function sendCommandResult(ctx, result) {
   }
 }
 
-// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607081646/node_modules/@cxyhhhhh/qqbot-nodejs/dist/middleware/history-buffer.js
+// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607092059/node_modules/@cxyhhhhh/qqbot-nodejs/dist/middleware/history-buffer.js
 var MemoryHistoryStore = class {
   buffers = /* @__PURE__ */ new Map();
   append(groupKey, entry, limit) {
@@ -8766,7 +8833,7 @@ function historyBuffer(options = {}) {
   return m3;
 }
 
-// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607081646/node_modules/@cxyhhhhh/qqbot-nodejs/dist/middleware/typing-indicator.js
+// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607092059/node_modules/@cxyhhhhh/qqbot-nodejs/dist/middleware/typing-indicator.js
 var DEFAULT_DURATION_SEC = 60;
 var DEFAULT_KEEPALIVE_INTERVAL_MS = 5e4;
 function typingIndicator(options = {}) {
@@ -8803,7 +8870,7 @@ function typingIndicator(options = {}) {
   };
 }
 
-// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607081646/node_modules/@cxyhhhhh/qqbot-nodejs/dist/middleware/error-handler.js
+// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607092059/node_modules/@cxyhhhhh/qqbot-nodejs/dist/middleware/error-handler.js
 var DEFAULT_FORMAT = (err) => {
   if (err instanceof ApiError) {
     if (err.bizMessage)
@@ -8841,7 +8908,7 @@ function errorHandler(options = {}) {
   };
 }
 
-// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607081646/node_modules/@cxyhhhhh/qqbot-nodejs/dist/storage/kv-store.js
+// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607092059/node_modules/@cxyhhhhh/qqbot-nodejs/dist/storage/kv-store.js
 var import_node_fs = __toESM(require("fs"), 1);
 var import_node_path = __toESM(require("path"), 1);
 var FileKVStore = class {
@@ -8951,7 +9018,7 @@ var FileKVStore = class {
   }
 };
 
-// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607081646/node_modules/@cxyhhhhh/qqbot-nodejs/dist/storage/session-adapter.js
+// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607092059/node_modules/@cxyhhhhh/qqbot-nodejs/dist/storage/session-adapter.js
 function kvSessionPersistence(opts) {
   const prefix = opts.prefix ?? "qqbot:session:";
   const key = `${prefix}${opts.accountId}`;
@@ -9004,13 +9071,105 @@ function parseTarget(to) {
   return { scope: "c2c", targetId: id };
 }
 
+// src/outbound/reply-limiter.ts
+var ReplyLimiter = class {
+  limit;
+  ttlMs;
+  maxTracked;
+  messages = /* @__PURE__ */ new Map();
+  constructor(config) {
+    this.limit = config?.limit ?? 4;
+    this.ttlMs = config?.ttlMs ?? 36e5;
+    this.maxTracked = config?.maxTrackedMessages ?? 1e4;
+  }
+  /**
+   * 检查是否允许对指定消息继续被动回复
+   */
+  checkLimit(messageId) {
+    const now = Date.now();
+    const tracked = this.messages.get(messageId);
+    if (!tracked) {
+      return { allowed: true, remaining: this.limit, shouldFallbackToProactive: false };
+    }
+    if (now - tracked.firstSeenAt > this.ttlMs) {
+      this.messages.delete(messageId);
+      return {
+        allowed: false,
+        remaining: 0,
+        shouldFallbackToProactive: true,
+        fallbackReason: "expired"
+      };
+    }
+    const remaining = Math.max(0, this.limit - tracked.count);
+    if (remaining <= 0) {
+      return {
+        allowed: false,
+        remaining: 0,
+        shouldFallbackToProactive: true,
+        fallbackReason: "limit_exceeded"
+      };
+    }
+    return { allowed: true, remaining, shouldFallbackToProactive: false };
+  }
+  /**
+   * 记录一次被动回复
+   */
+  record(messageId) {
+    const now = Date.now();
+    const tracked = this.messages.get(messageId);
+    if (tracked) {
+      tracked.count++;
+    } else {
+      if (this.messages.size >= this.maxTracked) {
+        const firstKey = this.messages.keys().next().value;
+        if (firstKey) this.messages.delete(firstKey);
+      }
+      this.messages.set(messageId, { count: 1, firstSeenAt: now });
+    }
+  }
+  /**
+   * 获取统计信息
+   */
+  getStats() {
+    let totalReplies = 0;
+    for (const [, v] of this.messages) {
+      totalReplies += v.count;
+    }
+    return { trackedMessages: this.messages.size, totalReplies };
+  }
+  /**
+   * 清除所有跟踪数据
+   */
+  clear() {
+    this.messages.clear();
+  }
+};
+
 // src/outbound/outbound-service.ts
 var gateways = /* @__PURE__ */ new Map();
+var limiters = /* @__PURE__ */ new Map();
+function getLimiter(accountId) {
+  let l3 = limiters.get(accountId);
+  if (!l3) {
+    l3 = new ReplyLimiter();
+    limiters.set(accountId, l3);
+  }
+  return l3;
+}
+function resolveMsgId(replyToId, accountId) {
+  if (!replyToId) return void 0;
+  const limiter = getLimiter(accountId);
+  const result = limiter.checkLimit(replyToId);
+  if (!result.allowed) return void 0;
+  limiter.record(replyToId);
+  return replyToId;
+}
 function registerGateway(accountId, gw) {
   gateways.set(accountId, gw);
 }
 function unregisterGateway(accountId) {
   gateways.delete(accountId);
+  limiters.delete(accountId);
 }
 function getGateway(accountId) {
   return gateways.get(accountId);
@@ -9022,62 +9181,55 @@ var MEDIA_KIND_TO_FILE_TYPE = {
   file: MediaFileType.FILE
 };
 async function sendText(params) {
-  const gw = gateways.get(params.account.accountId);
-  if (!gw) {
-    return { error: `Bot "${params.account.accountId}" not running` };
-  }
+  const accountId = params.account.accountId;
+  const gw = gateways.get(accountId);
+  if (!gw) return { error: `Bot "${accountId}" not running` };
   try {
     const target = parseTarget(params.to);
-    const result = await gw.sendText(target, params.text, { msgId: params.replyToId });
+    const msgId = resolveMsgId(params.replyToId, accountId);
+    const result = await gw.sendText(target, params.text, { msgId });
     return { messageId: result.id };
   } catch (err) {
     return formatError(err);
   }
 }
 async function sendMedia(params) {
-  const gw = gateways.get(params.account.accountId);
-  if (!gw) {
-    return { error: `Bot "${params.account.accountId}" not running` };
-  }
+  const accountId = params.account.accountId;
+  const gw = gateways.get(accountId);
+  if (!gw) return { error: `Bot "${accountId}" not running` };
   try {
     const target = parseTarget(params.to);
     const kind = params.mediaKind ?? "image";
+    const msgId = resolveMsgId(params.replyToId, accountId);
     if (kind === "voice") {
-      const isLocalPath = params.mediaUrl.startsWith("/") || params.mediaUrl.startsWith("./") || params.mediaUrl.startsWith("../");
-      const isUrl = params.mediaUrl.startsWith("http://") || params.mediaUrl.startsWith("https://");
-      const source = isLocalPath ? { localPath: params.mediaUrl } : isUrl ? { url: params.mediaUrl } : { base64: params.mediaUrl };
-      const result2 = await gw.sendVoice(
-        target,
-        source,
-        { text: params.text, msgId: params.replyToId }
-      );
+      const source = resolveVoiceSource(params.mediaUrl);
+      const result2 = await gw.sendVoice(target, source, { text: params.text, msgId });
       return { messageId: result2.id };
     }
     if (kind === "video") {
-      const result2 = await gw.sendVideo(target, params.mediaUrl, {
-        text: params.text,
-        msgId: params.replyToId
-      });
+      const result2 = await gw.sendVideo(target, params.mediaUrl, { text: params.text, msgId });
       return { messageId: result2.id };
     }
     if (kind === "file") {
-      const result2 = await gw.sendFile(target, params.mediaUrl, {
-        text: params.text,
-        msgId: params.replyToId
-      });
+      const result2 = await gw.sendFile(target, params.mediaUrl, { text: params.text, msgId });
       return { messageId: result2.id };
     }
     const fileType = MEDIA_KIND_TO_FILE_TYPE[kind];
-    const result = await gw.sendMedia(target, params.mediaUrl, {
-      text: params.text,
-      msgId: params.replyToId,
-      fileType
-    });
+    const result = await gw.sendMedia(target, params.mediaUrl, { text: params.text, msgId, fileType });
     return { messageId: result.id };
   } catch (err) {
     return formatError(err);
   }
 }
+function resolveVoiceSource(source) {
+  if (source.startsWith("http://") || source.startsWith("https://")) return { url: source };
+  if (source.startsWith("/") || source.startsWith("./") || source.startsWith("../")) return { localPath: source };
+  if (source.startsWith("data:")) {
+    const i = source.indexOf(",");
+    return { base64: i > 0 ? source.slice(i + 1) : source };
+  }
+  return { base64: source };
+}
 function formatError(err) {
   if (err instanceof Error) {
     const result = { error: err.message };
@@ -9093,7 +9245,7 @@ var import_node_path2 = __toESM(require("path"), 1);
 var import_node_fs2 = __toESM(require("fs"), 1);
 var _cachedOpenclawVersion;
 function getPackageVersion() {
-  return true ? "2.0.0-dev.202607091556" : "unknown";
+  return true ? "2.0.0-dev.202607092101" : "unknown";
 }
 function getOpenclawVersion(runtimeVersion) {
   if (_cachedOpenclawVersion) return _cachedOpenclawVersion;
@@ -9508,12 +9660,12 @@ function tryGetQQBotRuntime() {
 
 // src/adapter/resolve.ts
 function probeFunction(rt, paths) {
-  for (const path21 of paths) {
+  for (const path22 of paths) {
     let target = rt;
     let parent = rt;
-    for (let i = 0; i < path21.length; i++) {
+    for (let i = 0; i < path22.length; i++) {
       parent = target;
-      target = target?.[path21[i]];
+      target = target?.[path22[i]];
       if (target === void 0 || target === null) break;
     }
     if (typeof target === "function") {
@@ -9675,6 +9827,63 @@ function resolveAgentWorkspace(cfg, agentId) {
   return getQQBotMediaDir();
 }
 
+// src/utils/ssrf-guard.ts
+var import_node_net = __toESM(require("net"), 1);
+var import_promises = __toESM(require("dns/promises"), 1);
+var RESERVED_V4_PREFIXES = [
+  "127.",
+  // loopback
+  "10.",
+  // class-A private
+  "192.168.",
+  // class-C private
+  "169.254."
+  // link-local / cloud metadata
+];
+var PRIVATE_172_RE = /^172\.(1[6-9]|2\d|3[01])\./;
+function isReservedAddr(ip) {
+  if (ip === "0.0.0.0") return true;
+  for (const pfx of RESERVED_V4_PREFIXES) {
+    if (ip.startsWith(pfx)) return true;
+  }
+  if (PRIVATE_172_RE.test(ip)) return true;
+  const lower = ip.toLowerCase();
+  if (lower === "::1" || lower === "::") return true;
+  if (lower.startsWith("fe80:")) return true;
+  if (lower.startsWith("fc") || lower.startsWith("fd")) return true;
+  return false;
+}
+var ALLOWED_SCHEMES = /* @__PURE__ */ new Set(["http:", "https:"]);
+async function validateRemoteUrl(raw) {
+  const url = new URL(raw);
+  if (!ALLOWED_SCHEMES.has(url.protocol)) {
+    throw new Error(
+      `\u4E0D\u652F\u6301\u7684\u534F\u8BAE "${url.protocol}"\uFF0C\u4EC5\u5141\u8BB8 http/https\uFF08URL: ${raw}\uFF09`
+    );
+  }
+  const host = url.hostname.replace(/^\[|\]$/g, "");
+  if (import_node_net.default.isIP(host)) {
+    assertPublicAddr(host, raw);
+    return;
+  }
+  try {
+    const ips = await import_promises.default.resolve(host);
+    for (const ip of ips) {
+      assertPublicAddr(ip, raw, host);
+    }
+  } catch (err) {
+    if (err instanceof Error && err.message.includes("\u5185\u7F51")) throw err;
+    console.warn(`[url-check] DNS \u89E3\u6790 "${host}" \u5931\u8D25: ${err}`);
+  }
+}
+function assertPublicAddr(ip, originalUrl, domain) {
+  if (!isReservedAddr(ip)) return;
+  const target = domain ? `\u57DF\u540D "${domain}" \u89E3\u6790\u5230\u5185\u7F51\u5730\u5740 "${ip}"` : `\u5185\u7F51\u5730\u5740 "${ip}"`;
+  throw new Error(
+    `\u7981\u6B62\u8BBF\u95EE${target}\uFF0C\u5DF2\u62E6\u622A\u6F5C\u5728\u7684 SSRF \u8BF7\u6C42\uFF08URL: ${originalUrl}\uFF09`
+  );
+}
+
 // src/outbound/local-file-router.ts
 var path7 = __toESM(require("path"), 1);
 var fs8 = __toESM(require("fs"), 1);
@@ -9709,6 +9918,9 @@ function isLocalFilePath(source) {
   if (source.startsWith(".\\") || source.startsWith("..\\")) return true;
   return false;
 }
+function isDataUrl(source) {
+  return source.startsWith("data:");
+}
 var IMAGE_EXTS = /* @__PURE__ */ new Set([".jpg", ".jpeg", ".png", ".gif", ".webp", ".bmp", ".svg", ".ico"]);
 var VOICE_EXTS = /* @__PURE__ */ new Set([".wav", ".mp3", ".silk", ".amr", ".ogg", ".flac", ".aac", ".m4a"]);
 var VIDEO_EXTS = /* @__PURE__ */ new Set([".mp4", ".avi", ".mov", ".mkv", ".webm", ".flv", ".wmv"]);
@@ -9726,14 +9938,48 @@ function inferMediaKindFromMime(mime) {
   if (lower.startsWith("video/")) return "video";
   return "file";
 }
+function isPathInAllowedRoots(absPath, allowedRoots) {
+  if (!allowedRoots.length) return false;
+  try {
+    const real = fs8.realpathSync(absPath);
+    return allowedRoots.some((root) => {
+      try {
+        const rootReal = fs8.existsSync(root) ? fs8.realpathSync(root) : root;
+        return real.startsWith(rootReal + path7.sep) || real === rootReal;
+      } catch {
+        return false;
+      }
+    });
+  } catch {
+    return false;
+  }
+}
 
 // src/outbound/media-send.ts
+function resolveTempRoots() {
+  const roots = /* @__PURE__ */ new Set();
+  try {
+    const tmp = os4.tmpdir();
+    roots.add(fs9.existsSync(tmp) ? fs9.realpathSync(tmp) : tmp);
+  } catch {
+  }
+  if (process.platform !== "win32") {
+    try {
+      roots.add(fs9.realpathSync("/tmp"));
+    } catch {
+    }
+  }
+  return [...roots];
+}
 var ALLOWED_MEDIA_ROOTS = [
   path8.join(os4.homedir(), ".openclaw", "media"),
   path8.join(os4.homedir(), ".openclaw", "workspace"),
   // 框架 outbound 目录（saveMediaBuffer 写入）
-  path8.join(os4.homedir(), ".openclaw", "outbound")
+  path8.join(os4.homedir(), ".openclaw", "outbound"),
+  // TTS 语音临时目录（deliver-pipeline 已通过 isTtsPathSafe 预检）
+  ...resolveTempRoots()
 ];
+var MAX_DATA_URL_BYTES = 10 * 1024 * 1024;
 async function sendMedia2(params) {
   const { source, accountId, log: log4 } = params;
   const mlog = log4?.child("media");
@@ -9743,7 +9989,7 @@ async function sendMedia2(params) {
   }
   const wsDir = resolveWorkspaceFromAgent(params.agentId);
   mlog?.debug(`resolveMediaPath source=${source} agentId=${params.agentId ?? "none"} workspaceDir=${wsDir ?? "none"}`);
-  const resolved = resolveMediaPath(source, mlog, wsDir);
+  const resolved = await resolveMediaPath(source, mlog, wsDir);
   if (!resolved.ok) {
     mlog?.error(`resolveMediaPath failed: ${resolved.error}`);
     return { error: resolved.error };
@@ -9766,8 +10012,24 @@ async function sendMedia2(params) {
       return sendImageMedia(gw, target, resolved.path, params);
   }
 }
-function resolveMediaPath(source, log4, workspaceDir) {
+async function resolveMediaPath(source, log4, workspaceDir) {
   const normalized = normalizePath(source);
+  if (isDataUrl(normalized)) {
+    if (normalized.length > MAX_DATA_URL_BYTES) {
+      const sizeMB = (normalized.length / (1024 * 1024)).toFixed(1);
+      return { ok: false, error: `Data URL \u8FC7\u5927\uFF08${sizeMB}MB\uFF0C\u6700\u5927 10MB\uFF09` };
+    }
+    return { ok: true, path: normalized, isLocal: false };
+  }
+  if (normalized.startsWith("http://") || normalized.startsWith("https://")) {
+    try {
+      await validateRemoteUrl(normalized);
+    } catch (err) {
+      log4?.warn(`SSRF blocked for media URL: ${normalized}`);
+      return { ok: false, error: `\u5A92\u4F53 URL \u88AB SSRF \u9632\u62A4\u62E6\u622A: ${err instanceof Error ? err.message : String(err)}` };
+    }
+    return { ok: true, path: normalized, isLocal: false };
+  }
   if (!isLocalFilePath(normalized)) {
     const resolved2 = resolveWorkingFile(normalized, workspaceDir);
     if (resolved2) {
@@ -9785,16 +10047,10 @@ function resolveMediaPath(source, log4, workspaceDir) {
   } catch {
     return { ok: false, error: `Cannot resolve path: ${resolved}` };
   }
-  const allowed = ALLOWED_MEDIA_ROOTS.some((root) => {
-    try {
-      const resolvedRoot = fs9.existsSync(root) ? fs9.realpathSync(root) : root;
-      return real.startsWith(resolvedRoot + path8.sep) || real === resolvedRoot;
-    } catch {
-      return false;
-    }
-  });
+  const allowed = isPathInAllowedRoots(real, ALLOWED_MEDIA_ROOTS);
   if (!allowed) {
-    log4?.warn(`path not in allowed directory: ${real}`);
+    log4?.warn(`path blocked \u2014 not in allowed directory: ${real}`);
+    return { ok: false, error: `\u6587\u4EF6\u8DEF\u5F84\u4E0D\u5728\u5141\u8BB8\u7684\u76EE\u5F55\u4E2D` };
   }
   return { ok: true, path: real, isLocal: true };
 }
@@ -9830,7 +10086,7 @@ async function sendImageMedia(gw, target, source, params) {
   }
 }
 async function sendVoiceMedia(gw, target, source, params) {
-  const voiceSource = resolveVoiceSource(source);
+  const voiceSource = resolveVoiceSource2(source);
   try {
     const result = await gw.sendVoice(target, voiceSource, {
       msgId: params.replyToId
@@ -9875,7 +10131,7 @@ async function sendFileMedia(gw, target, source, params) {
     return { error: formatErr(err) };
   }
 }
-function resolveVoiceSource(source) {
+function resolveVoiceSource2(source) {
   if (source.startsWith("http://") || source.startsWith("https://")) {
     return { url: source };
   }
@@ -10173,6 +10429,31 @@ var qqbotSetupWizard = {
   }
 };
 
+// src/outbound/sanitize.ts
+var INTERNAL_TAGS = [
+  // 框架脚手架标签
+  /<system-reminder\b[^>]*>[\s\S]*?<\/system-reminder>/gi,
+  /<previous_response\b[^>]*>[\s\S]*?<\/previous_response>/gi,
+  /<\s*\/?\s*(?:system-reminder|previous_response)\b[^>]*\/?\s*>/gi,
+  // 模型推理/思考内容
+  // deepseek: `think`...`/think` — 匹配完整标签块，标签名 think 必须完整
+  // 格式说明：deepseek 用 `` ` `` (反引号) 替代 XML 的 `<` `>` 作为标签定界符
+  //   `think`  ≡ <think>  开标签
+  //   `/think` ≡ </think> 闭标签
+  /`think`[\s\S]*?`\/think`/gi,
+  /<\s*\/?\s*think\b[^>]*\/?\s*>/gi,
+  // claude: <thinking>...</thinking>
+  /<thinking\b[^>]*>[\s\S]*?<\/thinking>/gi,
+  /<\s*\/?\s*thinking\b[^>]*\/?\s*>/gi
+];
+function sanitizeQQBotText(text) {
+  let result = text;
+  for (const re of INTERNAL_TAGS) {
+    result = result.replace(re, "");
+  }
+  return result.trim();
+}
+
 // src/gateway/qqbot-gateway.ts
 var import_node_os4 = __toESM(require("os"), 1);
 
@@ -10655,6 +10936,7 @@ function botClearStorage(_account) {
 var import_node_fs5 = __toESM(require("fs"), 1);
 var import_node_path5 = __toESM(require("path"), 1);
 var import_node_os3 = __toESM(require("os"), 1);
+var import_node_crypto2 = __toESM(require("crypto"), 1);
 var MAX_LINES_PER_FILE = 1e3;
 var MAX_FILES = 4;
 var LOG_KEYWORDS = ["gateway", "openclaw", "clawdbot", "moltbot"];
@@ -10834,7 +11116,8 @@ function botLogs(runtime2) {
       const tmpDir = getQQBotMediaDir("exports");
       if (!import_node_fs5.default.existsSync(tmpDir)) import_node_fs5.default.mkdirSync(tmpDir, { recursive: true });
       const timestamp = (/* @__PURE__ */ new Date()).toISOString().replace(/[:.]/g, "-").slice(0, 19);
-      const tmpFile = import_node_path5.default.join(tmpDir, `bot-logs-${timestamp}.txt`);
+      const suffix = import_node_crypto2.default.randomBytes(4).toString("hex");
+      const tmpFile = import_node_path5.default.join(tmpDir, `bot-logs-${timestamp}-${suffix}.txt`);
       import_node_fs5.default.writeFileSync(tmpFile, lines.join("\n"), "utf8");
       let summary = `${recentFiles.length} \u4E2A\u65E5\u5FD7\u6587\u4EF6\uFF0C\u5171 ${totalIncluded} \u884C`;
       if (truncatedCount > 0) summary += `\uFF08${truncatedCount} \u4E2A\u622A\u65AD\uFF0C\u539F\u59CB ${totalOriginal} \u884C\uFF09`;
@@ -10844,7 +11127,7 @@ function botLogs(runtime2) {
           await ctx.bot.sendFile(
             { scope: "c2c", targetId: senderId, msgId: ctx.message.messageId },
             { localPath: tmpFile },
-            { fileName: `bot-logs-${timestamp}.txt` }
+            { fileName: `bot-logs-${timestamp}-${suffix}.txt` }
           );
         }
       } catch (err) {
@@ -11161,10 +11444,10 @@ function buildCommandList(account, opts) {
 // src/middleware/attachment.ts
 var path17 = __toESM(require("path"), 1);
 
-// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607081646/node_modules/@cxyhhhhh/qqbot-nodejs/dist/protocol/utils/reply-limiter.js
+// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607092059/node_modules/@cxyhhhhh/qqbot-nodejs/dist/protocol/utils/reply-limiter.js
 var DEFAULT_TTL_MS = 60 * 60 * 1e3;
 
-// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607081646/node_modules/@cxyhhhhh/qqbot-nodejs/dist/protocol/utils/media-tags.js
+// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607092059/node_modules/@cxyhhhhh/qqbot-nodejs/dist/protocol/utils/media-tags.js
 var VALID_TAGS = ["qqimg", "qqvoice", "qqvideo", "qqfile", "qqmedia"];
 var TAG_ALIASES = {
   qq_img: "qqimg",
@@ -11213,30 +11496,30 @@ var SELF_CLOSING_TAG_REGEX = new RegExp("`?" + LEFT_BRACKET + "\\s*(" + TAG_NAME
 var FUZZY_MEDIA_TAG_REGEX = new RegExp("`?" + LEFT_BRACKET + "\\s*(" + TAG_NAME_PATTERN + ")\\s*" + RIGHT_BRACKET + `["']?\\s*([^<\uFF1C<\uFF1E>"'\`]+?)\\s*["']?` + LEFT_BRACKET + "\\s*/?\\s*(?:" + TAG_NAME_PATTERN + ")\\s*" + RIGHT_BRACKET + "`?", "gi");
 var MULTILINE_TAG_CLEANUP = new RegExp("(" + LEFT_BRACKET + "\\s*(?:" + TAG_NAME_PATTERN + ")\\s*" + RIGHT_BRACKET + ")([\\s\\S]*?)(" + LEFT_BRACKET + "\\s*/?\\s*(?:" + TAG_NAME_PATTERN + ")\\s*" + RIGHT_BRACKET + ")", "gi");
 
-// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607081646/node_modules/@cxyhhhhh/qqbot-nodejs/dist/protocol/utils/ref-index-store.js
+// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607092059/node_modules/@cxyhhhhh/qqbot-nodejs/dist/protocol/utils/ref-index-store.js
 var import_node_fs6 = __toESM(require("fs"), 1);
 var DEFAULT_TTL_MS2 = 7 * 24 * 60 * 60 * 1e3;
 
-// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607081646/node_modules/@cxyhhhhh/qqbot-nodejs/dist/protocol/utils/session-store.js
+// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607092059/node_modules/@cxyhhhhh/qqbot-nodejs/dist/protocol/utils/session-store.js
 var import_node_fs7 = __toESM(require("fs"), 1);
 var import_node_path7 = __toESM(require("path"), 1);
 var DEFAULT_EXPIRE_MS = 5 * 60 * 1e3;
 
-// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607081646/node_modules/@cxyhhhhh/qqbot-nodejs/dist/protocol/utils/text-parsing.js
+// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607092059/node_modules/@cxyhhhhh/qqbot-nodejs/dist/protocol/utils/text-parsing.js
 var MAX_FACE_EXT_BYTES = 64 * 1024;
 
-// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607081646/node_modules/@cxyhhhhh/qqbot-nodejs/dist/protocol/utils/media-source.js
+// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607092059/node_modules/@cxyhhhhh/qqbot-nodejs/dist/protocol/utils/media-source.js
 var fs14 = __toESM(require("fs"), 1);
 
-// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607081646/node_modules/@cxyhhhhh/qqbot-nodejs/dist/protocol/utils/image-size.js
+// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607092059/node_modules/@cxyhhhhh/qqbot-nodejs/dist/protocol/utils/image-size.js
 var import_node_buffer = require("buffer");
 
-// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607081646/node_modules/@cxyhhhhh/qqbot-nodejs/dist/protocol/utils/ffmpeg.js
+// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607092059/node_modules/@cxyhhhhh/qqbot-nodejs/dist/protocol/utils/ffmpeg.js
 var import_node_child_process = require("child_process");
 var fs15 = __toESM(require("fs"), 1);
 var path13 = __toESM(require("path"), 1);
 
-// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607081646/node_modules/@cxyhhhhh/qqbot-nodejs/dist/protocol/utils/audio.js
+// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607092059/node_modules/@cxyhhhhh/qqbot-nodejs/dist/protocol/utils/audio.js
 var import_node_child_process2 = require("child_process");
 var fs16 = __toESM(require("fs"), 1);
 var path14 = __toESM(require("path"), 1);
@@ -11439,10 +11722,10 @@ function formatDuration2(seconds) {
 
 // src/adapter/media.ts
 var import_node_module4 = require("module");
-var dns = __toESM(require("dns"), 1);
+var dns2 = __toESM(require("dns"), 1);
 var path16 = __toESM(require("path"), 1);
 var fs18 = __toESM(require("fs"), 1);
-var crypto4 = __toESM(require("crypto"), 1);
+var crypto5 = __toESM(require("crypto"), 1);
 var req3 = (0, import_node_module4.createRequire)(__filename);
 var _save;
 function downloadRemoteMedia(opts) {
@@ -11478,7 +11761,7 @@ function isPrivateIP(ip) {
   return PRIVATE_RANGES.some(([mask, prefix]) => val >> 32n - BigInt(prefix) === mask >> 32n - BigInt(prefix));
 }
 async function assertSafeHostname(hostname) {
-  const addresses = await dns.promises.resolve4(hostname).catch(() => []);
+  const addresses = await dns2.promises.resolve4(hostname).catch(() => []);
   if (addresses.length === 0) throw new Error(`DNS resolution failed: ${hostname}`);
   for (const addr of addresses) {
     if (isPrivateIP(addr)) {
@@ -11503,7 +11786,7 @@ async function downloadViaFetch(opts) {
   if (buf.length > maxBytes) throw new Error(`Download exceeds ${(maxBytes / 1024 / 1024).toFixed(0)}MB`);
   const ext = opts.originalFilename ? path16.extname(opts.originalFilename) || ".bin" : ".bin";
   const name = opts.originalFilename ? path16.basename(opts.originalFilename, path16.extname(opts.originalFilename)) : "download";
-  const rand = crypto4.randomBytes(4).toString("hex");
+  const rand = crypto5.randomBytes(4).toString("hex");
   const filePath = path16.join(dir, `${name}_${Date.now()}_${rand}${ext}`);
   fs18.writeFileSync(filePath, buf);
   return { path: filePath };
@@ -12065,6 +12348,10 @@ function setupMiddlewares(bot, account, opts) {
   bot.use(concurrencyGuard({
     strategy: "merge",
     maxQueue: 50,
+    /** 紧急指令（/stop）跳过排队，立即处理 */
+    urgentPredicate: (ctx) => {
+      return (ctx.message.content ?? "").trim() === "/stop";
+    },
     onMerge: (buffered) => {
       const last = buffered[buffered.length - 1];
       if (buffered.length === 1) return last;
@@ -12149,6 +12436,8 @@ function buildEnvelope2(ctx, msg, account) {
 }
 
 // src/outbound/deliver-pipeline.ts
+var path18 = __toESM(require("path"), 1);
+var os7 = __toESM(require("os"), 1);
 function resolveMediaUrls(payload) {
   if (payload.mediaUrls?.length) {
     return payload.mediaUrls.filter(Boolean);
@@ -12197,6 +12486,7 @@ async function deliverReply(payload, _info, ctx) {
   }
 }
 async function sendMediaUrls(ctx, urls) {
+  const failedUrls = [];
   for (const url of urls) {
     const result = await sendMedia2({
       to: ctx.qualifiedTarget,
@@ -12208,6 +12498,16 @@ async function sendMediaUrls(ctx, urls) {
     });
     if (result.error) {
       ctx.log?.error(`[media] ${result.error}`);
+      failedUrls.push(url);
+    }
+  }
+  if (failedUrls.length > 0) {
+    const count = failedUrls.length;
+    const total = urls.length;
+    const failMsg = count === total ? `\u26A0\uFE0F \u5A92\u4F53\u53D1\u9001\u5931\u8D25\uFF08${count} \u4E2A\uFF09\uFF0C\u8BF7\u91CD\u8BD5` : `\u26A0\uFE0F ${count}/${total} \u4E2A\u5A92\u4F53\u53D1\u9001\u5931\u8D25`;
+    const textResult = await ctx.sendText(ctx.qualifiedTarget, failMsg);
+    if (textResult.error) {
+      ctx.log?.error(`[media] failed to send failure notification: ${textResult.error}`);
     }
   }
 }
@@ -12227,6 +12527,10 @@ async function handleVoiceIntent(text, ctx) {
       ctx.log?.error(`[tts] TTS failed: ${ttsResult.error ?? "no audio path returned"}`);
       return false;
     }
+    if (!isTtsPathSafe(ttsResult.audioPath)) {
+      ctx.log?.error(`[tts] TTS audio path blocked: ${ttsResult.audioPath}`);
+      return false;
+    }
     if (ctx.audioFileToSilkBase64) {
       const silkBase64 = await ctx.audioFileToSilkBase64(ttsResult.audioPath);
       if (silkBase64) {
@@ -12247,6 +12551,15 @@ async function handleVoiceIntent(text, ctx) {
     return false;
   }
 }
+var TTS_ALLOWED_ROOTS = [
+  path18.join(os7.homedir(), ".openclaw"),
+  os7.tmpdir(),
+  "/tmp"
+];
+function isTtsPathSafe(audioPath) {
+  if (!path18.isAbsolute(audioPath)) return false;
+  return isPathInAllowedRoots(audioPath, TTS_ALLOWED_ROOTS);
+}
 
 // src/dispatch/ctx-builder.ts
 function buildCtxPayload(params) {
@@ -13091,10 +13404,10 @@ function getApprovalHandler(accountId) {
 
 // src/features/proactive.ts
 var fs19 = __toESM(require("fs"), 1);
-var path19 = __toESM(require("path"), 1);
+var path20 = __toESM(require("path"), 1);
 var log2 = createPluginLogger({ prefix: "[proactive]" });
 var STORAGE_DIR = getQQBotDataDir("data");
-var KNOWN_USERS_FILE = path19.join(STORAGE_DIR, "known-users.json");
+var KNOWN_USERS_FILE = path20.join(STORAGE_DIR, "known-users.json");
 var knownUsersCache = null;
 var cacheLastModified = 0;
 function ensureStorageDir() {
@@ -13298,6 +13611,11 @@ async function handleApproval(event, account, log4, ack) {
   }
   const buttonData = event.data?.resolved?.button_data;
   if (!buttonData?.startsWith("approve:")) return;
+  const operatorId = resolveOperatorId(event);
+  if (!isApprovalAuthorized(account, operatorId)) {
+    log4.warn(`[approval] unauthorized operator=${operatorId ?? "unknown"} account=${account.accountId}`);
+    return;
+  }
   const parts = buttonData.split(":");
   if (parts.length < 3) return;
   const handler = getApprovalHandler(account.accountId);
@@ -13307,10 +13625,20 @@ async function handleApproval(event, account, log4, ack) {
   try {
     await handler.resolveApproval(approvalId, decision);
   } catch (err) {
-    log4.error(`interaction approve error: ${err}`);
+    log4.error(`interaction approve error: ${err instanceof Error ? err.message : String(err)}`);
   }
 }
 var CHANNEL_VER = getPackageVersion();
+function resolveOperatorId(event) {
+  const evt = event;
+  return evt.user_openid ?? evt.data?.resolved?.user_id ?? evt.data?.resolved?.user_openid ?? evt.openid;
+}
+function isApprovalAuthorized(account, operatorId) {
+  if (!operatorId) return false;
+  const allowFrom = account.config?.allowFrom ?? [];
+  if (!allowFrom.length || allowFrom.includes("*")) return true;
+  return allowFrom.includes(operatorId);
+}
 function buildClawCfg(requireMention, mentionPatterns, groupPolicy) {
   return {
     channel_type: "qqbot",
@@ -13340,13 +13668,13 @@ function createPluginWebhookAdapter(params) {
   let storedPath = "";
   const accountId = params.account.accountId;
   return {
-    async listen(_port, path21, handler) {
+    async listen(_port, path22, handler) {
       const ingress = await import("openclaw/plugin-sdk/webhook-ingress").catch(() => null);
       if (!ingress?.registerWebhookTargetWithPluginRoute) {
         params.log.error("Webhook ingress not available");
         return;
       }
-      const webhookPath = storedPath = path21 && path21 !== "/" ? path21 : params.account.config.webhook?.path ?? "/qqbot/webhook";
+      const webhookPath = storedPath = path22 && path22 !== "/" ? path22 : params.account.config.webhook?.path ?? "/qqbot/webhook";
       const existing = sharedTargets.get(webhookPath);
       if (existing) {
         const dupIdx = existing.findIndex((t) => t.accountId === accountId);
@@ -13393,12 +13721,12 @@ function createPluginWebhookAdapter(params) {
     }
   };
 }
-function createSharedHandler(path21, log4) {
+function createSharedHandler(path22, log4) {
   return async (req4, res) => {
     try {
       const ingress = await import("openclaw/plugin-sdk/webhook-ingress").catch(() => null);
       if (!ingress?.withResolvedWebhookRequestPipeline) {
-        await handleSimple(req4, res, path21, log4);
+        await handleSimple(req4, res, path22, log4);
         return;
       }
       await ingress.withResolvedWebhookRequestPipeline({
@@ -13439,12 +13767,12 @@ function createSharedHandler(path21, log4) {
           if (payload.op === 13) {
             const t = targets[0];
             if (!t) {
-              log4.warn?.(`[webhook] op:13 no target on ${path21}`);
+              log4.warn?.(`[webhook] op:13 no target on ${path22}`);
               res.statusCode = 500;
               res.end(JSON.stringify({ error: "no target" }));
               return;
             }
-            const h3 = resolveTargetHandler(path21, t.accountId);
+            const h3 = resolveTargetHandler(path22, t.accountId);
             if (!h3) {
               log4.warn?.(`[webhook] op:13 no handler for ${t.accountId}`);
               res.statusCode = 500;
@@ -13475,10 +13803,10 @@ function createSharedHandler(path21, log4) {
             unauthorizedMessage: JSON.stringify({ error: "invalid signature" })
           });
           if (!matched) {
-            log4.warn?.(`[webhook] signature mismatch on ${path21} (${targets.length} target(s))`);
+            log4.warn?.(`[webhook] signature mismatch on ${path22} (${targets.length} target(s))`);
             return;
           }
-          const h2 = resolveTargetHandler(path21, matched.accountId);
+          const h2 = resolveTargetHandler(path22, matched.accountId);
           if (!h2) {
             log4.error?.(`[webhook] no handler for matched target ${matched.accountId}`);
             res.statusCode = 500;
@@ -13498,8 +13826,8 @@ function createSharedHandler(path21, log4) {
     }
   };
 }
-function resolveTargetHandler(path21, accountId) {
-  return sharedTargets.get(path21)?.find((t) => t.accountId === accountId)?.handler;
+function resolveTargetHandler(path22, accountId) {
+  return sharedTargets.get(path22)?.find((t) => t.accountId === accountId)?.handler;
 }
 async function delegateToHandler(handler, req4, res, rawBody) {
   const headers = {};
@@ -13513,7 +13841,7 @@ async function delegateToHandler(handler, req4, res, rawBody) {
   }
   res.end(resp.body);
 }
-async function handleSimple(req4, res, path21, log4) {
+async function handleSimple(req4, res, path22, log4) {
   try {
     const ct = String(req4.headers["content-type"] ?? "");
     if (!ct.includes("application/json")) {
@@ -13534,7 +13862,7 @@ async function handleSimple(req4, res, path21, log4) {
       chunks.push(buf);
     }
     const rawBody = Buffer.concat(chunks);
-    const entries = sharedTargets.get(path21) ?? [];
+    const entries = sharedTargets.get(path22) ?? [];
     for (const entry of entries) {
       const resp = await entry.handler({ body: rawBody, headers: mapHeaders(req4) });
       if (resp.status < 400) {
@@ -13565,12 +13893,35 @@ function getHeader2(req4, key) {
 }
 
 // src/gateway/qqbot-gateway.ts
+var TEXT_TIMEOUT_MS = 3e4;
+var MEDIA_TIMEOUT_MS = 3e5;
+function resolveMs(envKey, defaultMs) {
+  const env = process.env[envKey];
+  if (env) {
+    const v = Number(env);
+    if (!Number.isNaN(v) && v > 0) return v;
+  }
+  return defaultMs;
+}
+function withTimeout(promise, ms, label) {
+  if (ms <= 0) return promise;
+  return Promise.race([
+    promise,
+    new Promise(
+      (_2, reject) => setTimeout(() => reject(new Error(`\u51FA\u7AD9\u8D85\u65F6: ${label} (${ms}ms)`)), ms)
+    )
+  ]);
+}
 var QQBotGateway = class {
   bot;
   account;
   runtime;
   log;
+  textTimeout;
+  mediaTimeout;
   constructor(account, runtime2, log4) {
+    this.textTimeout = resolveMs("OPENCLAW_OUTBOUND_TIMEOUT_MS", TEXT_TIMEOUT_MS);
+    this.mediaTimeout = resolveMs("OPENCLAW_OUTBOUND_MEDIA_TIMEOUT_MS", MEDIA_TIMEOUT_MS);
     this.account = account;
     this.runtime = runtime2;
     this.log = log4 ?? createPluginLogger({ prefix: `[qqbot:${account.accountId}]` });
@@ -13635,69 +13986,66 @@ var QQBotGateway = class {
     await this.bot.stop();
   }
   async sendText(target, text, opts) {
-    return this.bot.sendText(attachMsgId(target, opts), text);
+    return withTimeout(
+      this.bot.sendText(attachMsgId(target, opts), text),
+      this.textTimeout,
+      "sendText"
+    );
   }
   async sendMedia(target, source, opts) {
     const resolvedTarget = attachMsgId(target, opts);
     const fileType = opts?.fileType ?? MediaFileType.IMAGE;
     const sourceOpts = resolveMediaSource(source);
-    const result = await this.bot.sendMedia({
-      target: resolvedTarget,
-      fileType,
-      ...sourceOpts,
-      content: opts?.text
-    });
+    const result = await withTimeout(
+      this.bot.sendMedia({ target: resolvedTarget, fileType, ...sourceOpts, content: opts?.text }),
+      this.mediaTimeout,
+      "sendMedia"
+    );
     return result.message ?? { id: "", timestamp: Date.now() };
   }
   async sendVoice(target, source, opts) {
     const resolvedTarget = attachMsgId(target, opts);
     if (source.base64) {
-      const result2 = await this.bot.sendMedia({
-        target: resolvedTarget,
-        fileType: MediaFileType.VOICE,
-        fileData: source.base64,
-        content: opts?.text
-      });
+      const result2 = await withTimeout(
+        this.bot.sendMedia({ target: resolvedTarget, fileType: MediaFileType.VOICE, fileData: source.base64, content: opts?.text }),
+        this.mediaTimeout,
+        "sendVoice(base64)"
+      );
       return result2.message ?? { id: "", timestamp: Date.now() };
     }
     if (source.localPath) {
-      const result2 = await this.bot.sendMedia({
-        target: resolvedTarget,
-        fileType: MediaFileType.VOICE,
-        localPath: source.localPath,
-        content: opts?.text
-      });
+      const result2 = await withTimeout(
+        this.bot.sendMedia({ target: resolvedTarget, fileType: MediaFileType.VOICE, localPath: source.localPath, content: opts?.text }),
+        this.mediaTimeout,
+        "sendVoice(path)"
+      );
       return result2.message ?? { id: "", timestamp: Date.now() };
     }
-    const result = await this.bot.sendMedia({
-      target: resolvedTarget,
-      fileType: MediaFileType.VOICE,
-      url: source.url,
-      content: opts?.text
-    });
+    const result = await withTimeout(
+      this.bot.sendMedia({ target: resolvedTarget, fileType: MediaFileType.VOICE, url: source.url, content: opts?.text }),
+      this.mediaTimeout,
+      "sendVoice(url)"
+    );
     return result.message ?? { id: "", timestamp: Date.now() };
   }
   async sendVideo(target, source, opts) {
     const resolvedTarget = attachMsgId(target, opts);
     const sourceOpts = resolveMediaSource(source);
-    const result = await this.bot.sendMedia({
-      target: resolvedTarget,
-      fileType: MediaFileType.VIDEO,
-      ...sourceOpts,
-      content: opts?.text
-    });
+    const result = await withTimeout(
+      this.bot.sendMedia({ target: resolvedTarget, fileType: MediaFileType.VIDEO, ...sourceOpts, content: opts?.text }),
+      this.mediaTimeout,
+      "sendVideo"
+    );
     return result.message ?? { id: "", timestamp: Date.now() };
   }
   async sendFile(target, source, opts) {
     const resolvedTarget = attachMsgId(target, opts);
     const sourceOpts = resolveMediaSource(source);
-    const result = await this.bot.sendMedia({
-      target: resolvedTarget,
-      fileType: MediaFileType.FILE,
-      ...sourceOpts,
-      fileName: opts?.fileName,
-      content: opts?.text
-    });
+    const result = await withTimeout(
+      this.bot.sendMedia({ target: resolvedTarget, fileType: MediaFileType.FILE, ...sourceOpts, fileName: opts?.fileName, content: opts?.text }),
+      this.mediaTimeout,
+      "sendFile"
+    );
     return result.message ?? { id: "", timestamp: Date.now() };
   }
   openStream(target, msgId) {
@@ -14064,6 +14412,11 @@ function stripMentionText(text, mentions) {
 
 // src/channel.ts
 var TEXT_CHUNK_LIMIT2 = 5e3;
+var GFM_TABLE_DATA_RE = /^\|.+\|.*\|/;
+var GFM_TABLE_SEP_RE = /^\|[\s:-]+\|/;
+function isGfmTableLine(line) {
+  return GFM_TABLE_DATA_RE.test(line) || GFM_TABLE_SEP_RE.test(line);
+}
 var qqbotPlugin = {
   id: "qqbot",
   meta: {
@@ -14179,13 +14532,33 @@ var qqbotPlugin = {
   // ── 出站 ──
   outbound: {
     deliveryMode: "direct",
+    sanitizeText: ({ text }) => sanitizeQQBotText(text),
     chunker: (text, limit) => {
       const adapters = getAdapters(getQQBotRuntime());
       if (adapters.chunkMarkdownText) return adapters.chunkMarkdownText(text, limit);
       const lines = text.split("\n");
       const chunks = [];
       let current = "";
+      let tableBuffer = [];
+      const flushTable = () => {
+        if (tableBuffer.length === 0) return;
+        const tableBlock = tableBuffer.join("\n");
+        const candidate = current ? `${current}
+${tableBlock}` : tableBlock;
+        if (candidate.length > limit && current) {
+          chunks.push(current);
+          current = tableBlock;
+        } else {
+          current = candidate;
+        }
+        tableBuffer = [];
+      };
       for (const line of lines) {
+        if (isGfmTableLine(line)) {
+          tableBuffer.push(line);
+          continue;
+        }
+        flushTable();
         const candidate = current ? `${current}
 ${line}` : line;
         if (candidate.length > limit && current) {
@@ -14195,6 +14568,7 @@ ${line}` : line;
           current = candidate;
         }
       }
+      flushTable();
       if (current) chunks.push(current);
       return chunks.length > 0 ? chunks : [text];
     },
@@ -14332,10 +14706,10 @@ function json(data) {
     details: data
   };
 }
-function validatePath(path21) {
-  if (!path21.startsWith("/")) return "path \u5FC5\u987B\u4EE5 / \u5F00\u5934";
-  if (path21.includes("..") || path21.includes("//")) return "path \u4E0D\u5141\u8BB8\u5305\u542B .. \u6216 //";
-  if (!/^\/[a-zA-Z0-9\-._~:@!$&'()*+,;=/%]+$/.test(path21) && path21 !== "/") {
+function validatePath(path22) {
+  if (!path22.startsWith("/")) return "path \u5FC5\u987B\u4EE5 / \u5F00\u5934";
+  if (path22.includes("..") || path22.includes("//")) return "path \u4E0D\u5141\u8BB8\u5305\u542B .. \u6216 //";
+  if (!/^\/[a-zA-Z0-9\-._~:@!$&'()*+,;=/%]+$/.test(path22) && path22 !== "/") {
     return "path \u5305\u542B\u975E\u6CD5\u5B57\u7B26";
   }
   return null;
@@ -14643,7 +15017,7 @@ function verifyRuntimeContract(rt) {
   for (const r of OPTIONAL) {
     if (!r.probe(rt)) degraded.push(r.name);
   }
-  log3.info(`openclaw=${version} required=${REQUIRED.length - missing.length}/${REQUIRED.length} degraded=${degraded.length}/${OPTIONAL.length}`);
+  log3.debug(`openclaw=${version} required=${REQUIRED.length - missing.length}/${REQUIRED.length} degraded=${degraded.length}/${OPTIONAL.length}`);
   if (missing.length) {
     log3.error(`BROKEN \u2014 missing: ${missing.join(", ")}`);
   }