@cxyhhhhh/openclaw-qqbot 2.0.0-dev.202607092101 → 2.0.0-dev.202607101541

package/dist/index.cjs

@@ -4826,6 +4826,7 @@ __export(index_exports, {
   resolveHistoryLimit: () => resolveHistoryLimit,
   resolveIgnoreOtherMentions: () => resolveIgnoreOtherMentions,
   resolveMentionPatterns: () => resolveMentionPatterns,
+  resolveProcessingTimeoutMs: () => resolveProcessingTimeoutMs,
   resolveQQBotAccount: () => resolveQQBotAccount,
   resolveRequireMention: () => resolveRequireMention,
   resolveToolPolicy: () => resolveToolPolicy,
@@ -4878,6 +4879,7 @@ function evaluateMatchedGroupAccessForPolicy(params) {
 }
 var DEFAULT_GROUP_POLICY = "open";
 var DEFAULT_GROUP_HISTORY_LIMIT = 20;
+var DEFAULT_PROCESSING_TIMEOUT_MS = 0;
 var DEFAULT_GROUP_CONFIG = {
   requireMention: true,
   ignoreOtherMentions: false,
@@ -4982,6 +4984,17 @@ function resolveUserAgentSuffix(cfg) {
   const qqbot = cfg.channels?.qqbot;
   return qqbot?.userAgentSuffix ? String(qqbot.userAgentSuffix).trim() : "";
 }
+function resolveProcessingTimeoutMs(accountConfig) {
+  if (accountConfig?.processingTimeoutMs !== void 0) {
+    return accountConfig.processingTimeoutMs;
+  }
+  const env = process.env.OPENCLAW_PROCESSING_TIMEOUT_MS;
+  if (env) {
+    const v = Number(env);
+    if (!Number.isNaN(v) && v >= 0) return v;
+  }
+  return DEFAULT_PROCESSING_TIMEOUT_MS;
+}
 function resolveQQBotAccount(cfg, accountId) {
   const resolvedAccountId = accountId ?? resolveDefaultQQBotAccountId(cfg);
   const qqbot = cfg.channels?.qqbot;
@@ -5023,6 +5036,7 @@ function resolveQQBotAccount(cfg, accountId) {
     systemPrompt: accountConfig.systemPrompt,
     markdownSupport: accountConfig.markdownSupport !== false,
     userAgentSuffix: resolveUserAgentSuffix(cfg),
+    processingTimeoutMs: resolveProcessingTimeoutMs(accountConfig),
     config: accountConfig
   };
 }
@@ -5073,11 +5087,11 @@ var import_node_os = __toESM(require("os"), 1);
 // src/outbound/outbound-service.ts
 var path3 = __toESM(require("path"), 1);
 
-// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607092059/node_modules/@cxyhhhhh/qqbot-nodejs/dist/QQBot.js
+// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607101530/node_modules/@cxyhhhhh/qqbot-nodejs/dist/QQBot.js
 var fs3 = __toESM(require("fs"), 1);
 var path = __toESM(require("path"), 1);
 
-// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607092059/node_modules/@cxyhhhhh/qqbot-nodejs/dist/middleware/types.js
+// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607101530/node_modules/@cxyhhhhh/qqbot-nodejs/dist/middleware/types.js
 function resolvePolicy(ctx, path22, explicit, defaultValue) {
   if (explicit !== void 0 && explicit !== null) {
     return explicit;
@@ -5153,7 +5167,7 @@ function createMiddlewareContext(params) {
   return ctx;
 }
 
-// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607092059/node_modules/@cxyhhhhh/qqbot-nodejs/dist/protocol/types.js
+// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607101530/node_modules/@cxyhhhhh/qqbot-nodejs/dist/protocol/types.js
 var ApiError = class extends Error {
   httpStatus;
   path;
@@ -5186,7 +5200,7 @@ var StreamContentType = {
   MARKDOWN: "markdown"
 };
 
-// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607092059/node_modules/@cxyhhhhh/qqbot-nodejs/dist/protocol/utils/format.js
+// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607101530/node_modules/@cxyhhhhh/qqbot-nodejs/dist/protocol/utils/format.js
 function formatErrorMessage(err) {
   if (err instanceof Error) {
     let formatted = err.message || err.name || "Error";
@@ -5233,7 +5247,7 @@ function formatFileSize(bytes) {
   return `${(bytes / 1024 / 1024 / 1024).toFixed(2)} GB`;
 }
 
-// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607092059/node_modules/@cxyhhhhh/qqbot-nodejs/dist/protocol/api/api-client.js
+// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607101530/node_modules/@cxyhhhhh/qqbot-nodejs/dist/protocol/api/api-client.js
 var DEFAULT_BASE_URL = "https://api.sgroup.qq.com";
 var DEFAULT_TIMEOUT_MS = 3e4;
 var FILE_UPLOAD_TIMEOUT_MS = 12e4;
@@ -5328,12 +5342,12 @@ var ApiClient = class {
   }
 };
 
-// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607092059/node_modules/@cxyhhhhh/qqbot-nodejs/dist/protocol/api/media-chunked.js
+// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607101530/node_modules/@cxyhhhhh/qqbot-nodejs/dist/protocol/api/media-chunked.js
 var crypto = __toESM(require("crypto"), 1);
 var fs = __toESM(require("fs"), 1);
 var https = __toESM(require("https"), 1);
 
-// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607092059/node_modules/@cxyhhhhh/qqbot-nodejs/dist/protocol/api/retry.js
+// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607101530/node_modules/@cxyhhhhh/qqbot-nodejs/dist/protocol/api/retry.js
 async function withRetry(fn, policy, persistentPolicy, logger) {
   let lastError = null;
   for (let attempt = 0; attempt <= policy.maxRetries; attempt++) {
@@ -5425,7 +5439,7 @@ function buildPartFinishPersistentPolicy(retryTimeoutMs, retryableCodes = PART_F
 var PART_FINISH_RETRYABLE_CODES = /* @__PURE__ */ new Set([40093001]);
 var UPLOAD_PREPARE_FALLBACK_CODE = 40093002;
 
-// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607092059/node_modules/@cxyhhhhh/qqbot-nodejs/dist/protocol/api/routes.js
+// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607101530/node_modules/@cxyhhhhh/qqbot-nodejs/dist/protocol/api/routes.js
 function messagePath(scope, targetId) {
   return scope === "c2c" ? `/v2/users/${targetId}/messages` : `/v2/groups/${targetId}/messages`;
 }
@@ -5462,7 +5476,7 @@ function getNextMsgSeq(_msgId) {
   return (timePart ^ random) % 65536;
 }
 
-// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607092059/node_modules/@cxyhhhhh/qqbot-nodejs/dist/protocol/api/media-chunked.js
+// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607101530/node_modules/@cxyhhhhh/qqbot-nodejs/dist/protocol/api/media-chunked.js
 var UploadDailyLimitExceededError = class extends Error {
   filePath;
   fileSize;
@@ -5694,7 +5708,10 @@ async function putToPresignedUrl(presignedUrl, data, partIndex, totalParts, logg
     } catch (err) {
       lastError = err instanceof Error ? err : new Error(String(err));
       const code = err.code ?? "none";
-      const causeMsg = err?.cause?.message ?? "none";
+      const causeMsg = (() => {
+        const c = err instanceof Error ? err.cause : void 0;
+        return c instanceof Error ? c.message : "none";
+      })();
       if (lastError.name === "AbortError") {
         lastError = new Error(`Part ${partIndex}/${totalParts} upload timeout after ${PART_UPLOAD_TIMEOUT_MS}ms`);
       }
@@ -5721,8 +5738,32 @@ function sleep2(ms) {
   return new Promise((resolve2) => setTimeout(resolve2, ms));
 }
 
-// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607092059/node_modules/@cxyhhhhh/qqbot-nodejs/dist/protocol/api/media.js
+// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607101530/node_modules/@cxyhhhhh/qqbot-nodejs/dist/protocol/api/media.js
 var fs2 = __toESM(require("fs"), 1);
+
+// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607101530/node_modules/@cxyhhhhh/qqbot-nodejs/dist/protocol/utils/file-utils.js
+var MAX_UPLOAD_SIZE = 20 * 1024 * 1024;
+var CHUNKED_UPLOAD_MAX_SIZE = 100 * 1024 * 1024;
+var LARGE_FILE_THRESHOLD = 5 * 1024 * 1024;
+var MEDIA_FILE_TYPE_INFO = {
+  [MediaFileType.IMAGE]: { maxSize: 30 * 1024 * 1024, name: "image" },
+  [MediaFileType.VIDEO]: { maxSize: 100 * 1024 * 1024, name: "video" },
+  [MediaFileType.VOICE]: { maxSize: 20 * 1024 * 1024, name: "voice" },
+  [MediaFileType.FILE]: { maxSize: 100 * 1024 * 1024, name: "file" }
+};
+function sanitizeFileName(name) {
+  if (!name) {
+    return "file";
+  }
+  const cleaned = name.replace(/[\\/:*?"<>|]/g, "_").replace(/[\u0000-\u001f\u007f]/g, "").replace(/\s+/g, " ").trim();
+  return cleaned || "file";
+}
+
+// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607101530/node_modules/@cxyhhhhh/qqbot-nodejs/dist/protocol/api/media.js
+var MAX_BASE64_CHECK_SIZE = Math.ceil(MAX_UPLOAD_SIZE * 1.4);
+function formatUploadSize() {
+  return formatFileSize(MAX_UPLOAD_SIZE);
+}
 var MediaApi = class {
   client;
   tokenManager;
@@ -5754,6 +5795,10 @@ var MediaApi = class {
       const buf = await fs2.promises.readFile(opts.localPath);
       fileData = buf.toString("base64");
     }
+    if (fileData && fileData.length > MAX_BASE64_CHECK_SIZE) {
+      const sizeMB = (fileData.length / (1024 * 1024)).toFixed(1);
+      throw new Error(`fileData too large (${sizeMB}MB decoded); QQ Bot single upload limit is ${formatUploadSize()}`);
+    }
     if (fileData && this.cache) {
       const hash = this.cache.computeHash(fileData);
       const cached = this.cache.get(hash, scope, targetId, fileType);
@@ -5802,7 +5847,7 @@ var MediaApi = class {
   }
 };
 
-// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607092059/node_modules/@cxyhhhhh/qqbot-nodejs/dist/protocol/api/messages.js
+// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607101530/node_modules/@cxyhhhhh/qqbot-nodejs/dist/protocol/api/messages.js
 var MessageApi = class {
   client;
   tokenManager;
@@ -5990,7 +6035,7 @@ var MessageApi = class {
   }
 };
 
-// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607092059/node_modules/@cxyhhhhh/qqbot-nodejs/dist/protocol/api/token.js
+// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607101530/node_modules/@cxyhhhhh/qqbot-nodejs/dist/protocol/api/token.js
 var DEFAULT_TOKEN_BASE_URL = "https://bots.qq.com";
 var TOKEN_PATH = "/app/getAppAccessToken";
 var TokenManager = class {
@@ -6177,7 +6222,7 @@ var import_websocket = __toESM(require_websocket(), 1);
 var import_websocket_server = __toESM(require_websocket_server(), 1);
 var wrapper_default = import_websocket.default;
 
-// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607092059/node_modules/@cxyhhhhh/qqbot-nodejs/dist/protocol/gateway/codec.js
+// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607101530/node_modules/@cxyhhhhh/qqbot-nodejs/dist/protocol/gateway/codec.js
 function decodeGatewayMessageData(data) {
   if (typeof data === "string") {
     return data;
@@ -6204,7 +6249,7 @@ function readOptionalMessageSceneExt(event) {
   return scene?.ext;
 }
 
-// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607092059/node_modules/@cxyhhhhh/qqbot-nodejs/dist/protocol/gateway/constants.js
+// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607101530/node_modules/@cxyhhhhh/qqbot-nodejs/dist/protocol/gateway/constants.js
 var INTENTS = {
   GUILDS: 1 << 0,
   GUILD_MEMBERS: 1 << 1,
@@ -6277,7 +6322,7 @@ var GatewayEvent = {
   MESSAGE_REACTION_REMOVE: "MESSAGE_REACTION_REMOVE"
 };
 
-// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607092059/node_modules/@cxyhhhhh/qqbot-nodejs/dist/protocol/gateway/event-dispatcher.js
+// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607101530/node_modules/@cxyhhhhh/qqbot-nodejs/dist/protocol/gateway/event-dispatcher.js
 var REF_INDEX_KEY = "msg_idx";
 function parseRefIndices(ext, msgType, msgElements) {
   let refMsgIdx;
@@ -6418,7 +6463,7 @@ function dispatchEvent(eventType, data, _accountId, _log) {
   return { action: "raw", type: eventType, data };
 }
 
-// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607092059/node_modules/@cxyhhhhh/qqbot-nodejs/dist/protocol/gateway/reconnect.js
+// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607101530/node_modules/@cxyhhhhh/qqbot-nodejs/dist/protocol/gateway/reconnect.js
 var ReconnectState = class {
   accountId;
   log;
@@ -6529,7 +6574,7 @@ var ReconnectState = class {
   }
 };
 
-// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607092059/node_modules/@cxyhhhhh/qqbot-nodejs/dist/protocol/gateway/gateway-connection.js
+// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607101530/node_modules/@cxyhhhhh/qqbot-nodejs/dist/protocol/gateway/gateway-connection.js
 var GatewayConnection = class {
   isAborted = false;
   currentWs = null;
@@ -6787,7 +6832,7 @@ function previewPayload(data) {
   }
 }
 
-// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607092059/node_modules/@cxyhhhhh/qqbot-nodejs/dist/protocol/transport/webhook-verify.js
+// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607101530/node_modules/@cxyhhhhh/qqbot-nodejs/dist/protocol/transport/webhook-verify.js
 var crypto2 = __toESM(require("crypto"), 1);
 function deriveSeed(botSecret) {
   let seed = botSecret;
@@ -6839,7 +6884,7 @@ function signValidationResponse(params) {
   };
 }
 
-// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607092059/node_modules/@cxyhhhhh/qqbot-nodejs/dist/protocol/transport/webhook-server-node.js
+// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607101530/node_modules/@cxyhhhhh/qqbot-nodejs/dist/protocol/transport/webhook-server-node.js
 var http = __toESM(require("http"), 1);
 var NodeHttpWebhookServer = class {
   server = null;
@@ -6887,7 +6932,7 @@ var NodeHttpWebhookServer = class {
   }
 };
 
-// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607092059/node_modules/@cxyhhhhh/qqbot-nodejs/dist/protocol/transport/webhook.js
+// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607101530/node_modules/@cxyhhhhh/qqbot-nodejs/dist/protocol/transport/webhook.js
 var OP_DISPATCH = 0;
 var OP_HTTP_CALLBACK_ACK = 12;
 var OP_VALIDATION = 13;
@@ -7031,25 +7076,7 @@ function getHeader(headers, key) {
   return val;
 }
 
-// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607092059/node_modules/@cxyhhhhh/qqbot-nodejs/dist/protocol/utils/file-utils.js
-var MAX_UPLOAD_SIZE = 20 * 1024 * 1024;
-var CHUNKED_UPLOAD_MAX_SIZE = 100 * 1024 * 1024;
-var LARGE_FILE_THRESHOLD = 5 * 1024 * 1024;
-var MEDIA_FILE_TYPE_INFO = {
-  [MediaFileType.IMAGE]: { maxSize: 30 * 1024 * 1024, name: "image" },
-  [MediaFileType.VIDEO]: { maxSize: 100 * 1024 * 1024, name: "video" },
-  [MediaFileType.VOICE]: { maxSize: 20 * 1024 * 1024, name: "voice" },
-  [MediaFileType.FILE]: { maxSize: 100 * 1024 * 1024, name: "file" }
-};
-function sanitizeFileName(name) {
-  if (!name) {
-    return "file";
-  }
-  const cleaned = name.replace(/[\\/:*?"<>|]/g, "_").replace(/[\u0000-\u001f\u007f]/g, "").replace(/\s+/g, " ").trim();
-  return cleaned || "file";
-}
-
-// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607092059/node_modules/@cxyhhhhh/qqbot-nodejs/dist/protocol/utils/upload-cache.js
+// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607101530/node_modules/@cxyhhhhh/qqbot-nodejs/dist/protocol/utils/upload-cache.js
 var crypto3 = __toESM(require("crypto"), 1);
 var MAX_CACHE_SIZE = 500;
 function computeFileHash(data) {
@@ -7114,7 +7141,7 @@ var UploadCache = class {
   }
 };
 
-// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607092059/node_modules/@cxyhhhhh/qqbot-nodejs/dist/streaming.js
+// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607101530/node_modules/@cxyhhhhh/qqbot-nodejs/dist/streaming.js
 var DEFAULT_THROTTLE_MS = 500;
 var MIN_THROTTLE_MS = 300;
 var MAX_FLUSH_RETRIES = 3;
@@ -7282,7 +7309,7 @@ var StreamSession = class {
   }
 };
 
-// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607092059/node_modules/@cxyhhhhh/qqbot-nodejs/dist/QQBot.js
+// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607101530/node_modules/@cxyhhhhh/qqbot-nodejs/dist/QQBot.js
 var MsgType = {
   /** Plain text. */
   TEXT: 0,
@@ -7970,7 +7997,7 @@ var QQBot = class {
   }
 };
 
-// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607092059/node_modules/@cxyhhhhh/qqbot-nodejs/dist/middleware/message-filter.js
+// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607101530/node_modules/@cxyhhhhh/qqbot-nodejs/dist/middleware/message-filter.js
 function messageFilter(options = {}) {
   const skipSelfEcho = options.skipSelfEcho ?? true;
   const dedupOpts = options.dedup !== false ? { windowMs: 5e3, maxSize: 1e3, ...options.dedup ?? {} } : null;
@@ -8008,7 +8035,7 @@ function messageFilter(options = {}) {
   };
 }
 
-// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607092059/node_modules/@cxyhhhhh/qqbot-nodejs/dist/middleware/content-sanitizer.js
+// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607101530/node_modules/@cxyhhhhh/qqbot-nodejs/dist/middleware/content-sanitizer.js
 function contentSanitizer(options = {}) {
   const { stripBotMention = true, stripAllMentions = false, collapseWhitespace = false, parseFaceTags: parseFaceTags2 = false, transform } = options;
   return async (ctx, next) => {
@@ -8103,7 +8130,7 @@ function faceToEmoji(id) {
   return map[id];
 }
 
-// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607092059/node_modules/@cxyhhhhh/qqbot-nodejs/dist/middleware/rate-limiter.js
+// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607101530/node_modules/@cxyhhhhh/qqbot-nodejs/dist/middleware/rate-limiter.js
 var SlidingWindow = class {
   buckets = /* @__PURE__ */ new Map();
   max;
@@ -8157,11 +8184,11 @@ function rateLimiter(options = {}) {
   };
 }
 
-// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607092059/node_modules/@cxyhhhhh/qqbot-nodejs/dist/middleware/concurrency-guard.js
+// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607101530/node_modules/@cxyhhhhh/qqbot-nodejs/dist/middleware/concurrency-guard.js
 function concurrencyGuard(options = {}) {
   const strategy = options.strategy ?? "queue";
   const maxQueue = options.maxQueue ?? 3;
-  const { onDrop, onMerge, onDispatch, urgentPredicate } = options;
+  const { onDrop, onMerge, onDispatch, urgentPredicate, maxProcessingMs } = options;
   const locks = /* @__PURE__ */ new Map();
   function getState(key) {
     let s = locks.get(key);
@@ -8191,9 +8218,31 @@ function concurrencyGuard(options = {}) {
         state.mergeBuffer = [];
         state.mergeWaiters = [];
       }
+      let timedOut = false;
+      let timeoutId;
+      if (maxProcessingMs && maxProcessingMs > 0) {
+        timeoutId = setTimeout(() => {
+          timedOut = true;
+          ctx.log.warn?.(`[concurrency] aborting active chain ${key} after ${maxProcessingMs}ms`);
+          ctx.abort("concurrency:processing-timeout");
+          state.busy = false;
+          state.activeCtx = void 0;
+          if (strategy === "merge") {
+            drainMergeBuffer(key, state, ctx).catch(() => {
+            });
+          } else {
+            drainQueue(key);
+          }
+          cleanupState(key);
+        }, maxProcessingMs);
+      }
       try {
         await next();
       } finally {
+        if (timeoutId)
+          clearTimeout(timeoutId);
+        if (timedOut)
+          return;
         state.activeCtx = void 0;
         if (strategy === "merge") {
           await drainMergeBuffer(key, state, ctx);
@@ -8370,7 +8419,7 @@ function concurrencyGuard(options = {}) {
   return guard;
 }
 
-// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607092059/node_modules/@cxyhhhhh/qqbot-nodejs/dist/middleware/mention-gate.js
+// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607101530/node_modules/@cxyhhhhh/qqbot-nodejs/dist/middleware/mention-gate.js
 function detectMentionInContent(content, appId) {
   if (!content || !appId)
     return false;
@@ -8426,7 +8475,7 @@ function mentionGate(options = {}) {
   };
 }
 
-// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607092059/node_modules/@cxyhhhhh/qqbot-nodejs/dist/middleware/quote-ref.js
+// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607101530/node_modules/@cxyhhhhh/qqbot-nodejs/dist/middleware/quote-ref.js
 var MemoryRefIndexStore = class {
   map = /* @__PURE__ */ new Map();
   maxSize;
@@ -8544,7 +8593,7 @@ function buildText(content, attachments) {
   return parts.join("\n") || "[empty message]";
 }
 
-// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607092059/node_modules/@cxyhhhhh/qqbot-nodejs/dist/middleware/envelope-formatter.js
+// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607101530/node_modules/@cxyhhhhh/qqbot-nodejs/dist/middleware/envelope-formatter.js
 function envelopeFormatter(options = {}) {
   const { historyLimit = 5, includeQuote = true, includeSender = true, format } = options;
   return async (ctx, next) => {
@@ -8616,7 +8665,7 @@ ${parts.join("\n")}
   return sections.join("\n\n");
 }
 
-// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607092059/node_modules/@cxyhhhhh/qqbot-nodejs/dist/middleware/slash-command.js
+// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607101530/node_modules/@cxyhhhhh/qqbot-nodejs/dist/middleware/slash-command.js
 function slashCommand(options = {}) {
   const prefixes = options.prefixes ?? ["/"];
   const catchErrors = options.catchErrors ?? true;
@@ -8679,8 +8728,9 @@ function slashCommand(options = {}) {
     }
     const cleaned = content.replace(/<@!?[^>]+>\s*/g, "").trim();
     if (ctx.message.kind === "group") {
-      const mentions = ctx.message.mentions;
-      if (!mentions?.some((m3) => m3.is_you)) {
+      const msg = ctx.message;
+      const wasMentioned = msg.rawEventType === "GROUP_AT_MESSAGE_CREATE" || msg.mentions?.some((m3) => m3.is_you);
+      if (!wasMentioned) {
         await next();
         return;
       }
@@ -8768,7 +8818,7 @@ async function sendCommandResult(ctx, result) {
   }
 }
 
-// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607092059/node_modules/@cxyhhhhh/qqbot-nodejs/dist/middleware/history-buffer.js
+// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607101530/node_modules/@cxyhhhhh/qqbot-nodejs/dist/middleware/history-buffer.js
 var MemoryHistoryStore = class {
   buffers = /* @__PURE__ */ new Map();
   append(groupKey, entry, limit) {
@@ -8833,7 +8883,7 @@ function historyBuffer(options = {}) {
   return m3;
 }
 
-// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607092059/node_modules/@cxyhhhhh/qqbot-nodejs/dist/middleware/typing-indicator.js
+// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607101530/node_modules/@cxyhhhhh/qqbot-nodejs/dist/middleware/typing-indicator.js
 var DEFAULT_DURATION_SEC = 60;
 var DEFAULT_KEEPALIVE_INTERVAL_MS = 5e4;
 function typingIndicator(options = {}) {
@@ -8870,7 +8920,7 @@ function typingIndicator(options = {}) {
   };
 }
 
-// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607092059/node_modules/@cxyhhhhh/qqbot-nodejs/dist/middleware/error-handler.js
+// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607101530/node_modules/@cxyhhhhh/qqbot-nodejs/dist/middleware/error-handler.js
 var DEFAULT_FORMAT = (err) => {
   if (err instanceof ApiError) {
     if (err.bizMessage)
@@ -8908,7 +8958,7 @@ function errorHandler(options = {}) {
   };
 }
 
-// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607092059/node_modules/@cxyhhhhh/qqbot-nodejs/dist/storage/kv-store.js
+// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607101530/node_modules/@cxyhhhhh/qqbot-nodejs/dist/storage/kv-store.js
 var import_node_fs = __toESM(require("fs"), 1);
 var import_node_path = __toESM(require("path"), 1);
 var FileKVStore = class {
@@ -9018,7 +9068,7 @@ var FileKVStore = class {
   }
 };
 
-// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607092059/node_modules/@cxyhhhhh/qqbot-nodejs/dist/storage/session-adapter.js
+// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607101530/node_modules/@cxyhhhhh/qqbot-nodejs/dist/storage/session-adapter.js
 function kvSessionPersistence(opts) {
   const prefix = opts.prefix ?? "qqbot:session:";
   const key = `${prefix}${opts.accountId}`;
@@ -9245,7 +9295,7 @@ var import_node_path2 = __toESM(require("path"), 1);
 var import_node_fs2 = __toESM(require("fs"), 1);
 var _cachedOpenclawVersion;
 function getPackageVersion() {
-  return true ? "2.0.0-dev.202607092101" : "unknown";
+  return true ? "2.0.0-dev.202607101541" : "unknown";
 }
 function getOpenclawVersion(runtimeVersion) {
   if (_cachedOpenclawVersion) return _cachedOpenclawVersion;
@@ -9854,6 +9904,27 @@ function isReservedAddr(ip) {
   return false;
 }
 var ALLOWED_SCHEMES = /* @__PURE__ */ new Set(["http:", "https:"]);
+var QQ_TRUSTED_DOMAINS = /* @__PURE__ */ new Set([
+  // QQ Bot API
+  "api.sgroup.qq.com",
+  "sandbox.api.sgroup.qq.com",
+  // QQ Bot Token
+  "bots.qq.com",
+  // QQ 多媒体上传/下载
+  "multimedia.nt.qq.com.cn",
+  "multimedia.nt.qq.com",
+  // QQ 群文件
+  "grouppro.grouppro.qq.com"
+]);
+function isQQTrustedDomain(hostname) {
+  if (QQ_TRUSTED_DOMAINS.has(hostname)) return true;
+  const dot = hostname.indexOf(".");
+  if (dot > 0) {
+    const parent = hostname.slice(dot + 1);
+    return QQ_TRUSTED_DOMAINS.has(parent);
+  }
+  return false;
+}
 async function validateRemoteUrl(raw) {
   const url = new URL(raw);
   if (!ALLOWED_SCHEMES.has(url.protocol)) {
@@ -9862,6 +9933,7 @@ async function validateRemoteUrl(raw) {
     );
   }
   const host = url.hostname.replace(/^\[|\]$/g, "");
+  if (isQQTrustedDomain(host)) return;
   if (import_node_net.default.isIP(host)) {
     assertPublicAddr(host, raw);
     return;
@@ -11444,10 +11516,10 @@ function buildCommandList(account, opts) {
 // src/middleware/attachment.ts
 var path17 = __toESM(require("path"), 1);
 
-// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607092059/node_modules/@cxyhhhhh/qqbot-nodejs/dist/protocol/utils/reply-limiter.js
+// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607101530/node_modules/@cxyhhhhh/qqbot-nodejs/dist/protocol/utils/reply-limiter.js
 var DEFAULT_TTL_MS = 60 * 60 * 1e3;
 
-// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607092059/node_modules/@cxyhhhhh/qqbot-nodejs/dist/protocol/utils/media-tags.js
+// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607101530/node_modules/@cxyhhhhh/qqbot-nodejs/dist/protocol/utils/media-tags.js
 var VALID_TAGS = ["qqimg", "qqvoice", "qqvideo", "qqfile", "qqmedia"];
 var TAG_ALIASES = {
   qq_img: "qqimg",
@@ -11496,30 +11568,30 @@ var SELF_CLOSING_TAG_REGEX = new RegExp("`?" + LEFT_BRACKET + "\\s*(" + TAG_NAME
 var FUZZY_MEDIA_TAG_REGEX = new RegExp("`?" + LEFT_BRACKET + "\\s*(" + TAG_NAME_PATTERN + ")\\s*" + RIGHT_BRACKET + `["']?\\s*([^<\uFF1C<\uFF1E>"'\`]+?)\\s*["']?` + LEFT_BRACKET + "\\s*/?\\s*(?:" + TAG_NAME_PATTERN + ")\\s*" + RIGHT_BRACKET + "`?", "gi");
 var MULTILINE_TAG_CLEANUP = new RegExp("(" + LEFT_BRACKET + "\\s*(?:" + TAG_NAME_PATTERN + ")\\s*" + RIGHT_BRACKET + ")([\\s\\S]*?)(" + LEFT_BRACKET + "\\s*/?\\s*(?:" + TAG_NAME_PATTERN + ")\\s*" + RIGHT_BRACKET + ")", "gi");
 
-// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607092059/node_modules/@cxyhhhhh/qqbot-nodejs/dist/protocol/utils/ref-index-store.js
+// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607101530/node_modules/@cxyhhhhh/qqbot-nodejs/dist/protocol/utils/ref-index-store.js
 var import_node_fs6 = __toESM(require("fs"), 1);
 var DEFAULT_TTL_MS2 = 7 * 24 * 60 * 60 * 1e3;
 
-// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607092059/node_modules/@cxyhhhhh/qqbot-nodejs/dist/protocol/utils/session-store.js
+// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607101530/node_modules/@cxyhhhhh/qqbot-nodejs/dist/protocol/utils/session-store.js
 var import_node_fs7 = __toESM(require("fs"), 1);
 var import_node_path7 = __toESM(require("path"), 1);
 var DEFAULT_EXPIRE_MS = 5 * 60 * 1e3;
 
-// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607092059/node_modules/@cxyhhhhh/qqbot-nodejs/dist/protocol/utils/text-parsing.js
+// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607101530/node_modules/@cxyhhhhh/qqbot-nodejs/dist/protocol/utils/text-parsing.js
 var MAX_FACE_EXT_BYTES = 64 * 1024;
 
-// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607092059/node_modules/@cxyhhhhh/qqbot-nodejs/dist/protocol/utils/media-source.js
+// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607101530/node_modules/@cxyhhhhh/qqbot-nodejs/dist/protocol/utils/media-source.js
 var fs14 = __toESM(require("fs"), 1);
 
-// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607092059/node_modules/@cxyhhhhh/qqbot-nodejs/dist/protocol/utils/image-size.js
+// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607101530/node_modules/@cxyhhhhh/qqbot-nodejs/dist/protocol/utils/image-size.js
 var import_node_buffer = require("buffer");
 
-// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607092059/node_modules/@cxyhhhhh/qqbot-nodejs/dist/protocol/utils/ffmpeg.js
+// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607101530/node_modules/@cxyhhhhh/qqbot-nodejs/dist/protocol/utils/ffmpeg.js
 var import_node_child_process = require("child_process");
 var fs15 = __toESM(require("fs"), 1);
 var path13 = __toESM(require("path"), 1);
 
-// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607092059/node_modules/@cxyhhhhh/qqbot-nodejs/dist/protocol/utils/audio.js
+// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607101530/node_modules/@cxyhhhhh/qqbot-nodejs/dist/protocol/utils/audio.js
 var import_node_child_process2 = require("child_process");
 var fs16 = __toESM(require("fs"), 1);
 var path14 = __toESM(require("path"), 1);
@@ -12158,7 +12230,7 @@ function isNonEmpty(x) {
 }
 function buildAgentBody(input) {
   const { userContent, base, isGroup, wasMentioned, history } = input;
-  if (userContent.startsWith("/")) {
+  if (userContent.trim().startsWith("/")) {
     return userContent;
   }
   if (isGroup && wasMentioned && history && history.length > 0) {
@@ -12325,6 +12397,25 @@ async function checkPairingMode(ctx, next, opts) {
   }
 }
 
+// src/utils/mention.ts
+function stripMentionText(text, mentions) {
+  if (!text || !mentions?.length) return text;
+  let cleaned = text;
+  for (const m3 of mentions) {
+    const openid = m3.member_openid ?? m3.id ?? m3.user_openid;
+    if (!openid) continue;
+    if (m3.is_you) {
+      cleaned = cleaned.replace(new RegExp(`<@!?${openid}>`, "g"), "").trim();
+    } else {
+      const displayName = m3.nickname ?? m3.username;
+      if (displayName) {
+        cleaned = cleaned.replace(new RegExp(`<@!?${openid}>`, "g"), `@${displayName}`);
+      }
+    }
+  }
+  return cleaned;
+}
+
 // src/gateway/middleware-setup.ts
 function setupMiddlewares(bot, account, opts) {
   bot.use(errorHandler());
@@ -12343,11 +12434,17 @@ function setupMiddlewares(bot, account, opts) {
     getRuntime: opts.getRuntime
   }));
   bot.use(mentionGate());
-  bot.use(contentSanitizer({ parseFaceTags: true }));
+  bot.use(contentSanitizer({
+    parseFaceTags: true,
+    transform: (content, ctx) => stripMentionText(content, ctx.message.mentions)
+  }));
   bot.use(rateLimiter());
+  const slash = slashCommand({ commands: buildCommandList(account, { getRuntime: opts.getRuntime }) });
+  bot.use(slash.middleware);
   bot.use(concurrencyGuard({
     strategy: "merge",
     maxQueue: 50,
+    maxProcessingMs: account.processingTimeoutMs,
     /** 紧急指令（/stop）跳过排队，立即处理 */
     urgentPredicate: (ctx) => {
       return (ctx.message.content ?? "").trim() === "/stop";
@@ -12376,8 +12473,6 @@ function setupMiddlewares(bot, account, opts) {
       return assembled.agentBody;
     }
   }));
-  const slash = slashCommand({ commands: buildCommandList(account, { getRuntime: opts.getRuntime }) });
-  bot.use(slash.middleware);
 }
 
 // src/dispatch/envelope-builder.ts
@@ -12926,13 +13021,14 @@ async function dispatchToOpenClaw(ctx, msg, account, runtime2, log4) {
           await deliverReply(payload, info, deliverCtx);
         }
       },
-      ...streamingController ? {
-        replyOptions: {
+      replyOptions: {
+        abortSignal: ctx.signal,
+        ...streamingController ? {
           onPartialReply: async (p2) => {
             if (p2.text) await streamingController.onPartialReply(p2.text);
           }
-        }
-      } : {}
+        } : {}
+      }
     });
     if (streamingController && !streamingController.isTerminal) {
       await streamingController.finalize();
@@ -13048,6 +13144,7 @@ async function dispatchToOpenClaw(ctx, msg, account, runtime2, log4) {
                 }
               },
               replyOptions: {
+                abortSignal: ctx.signal,
                 runId: envelope.messageId,
                 ...streamingController ? {
                   onPartialReply: async (p2) => {
@@ -14391,25 +14488,6 @@ var qqbotOnboardingAdapter = {
   }
 };
 
-// src/utils/mention.ts
-function stripMentionText(text, mentions) {
-  if (!text || !mentions?.length) return text;
-  let cleaned = text;
-  for (const m3 of mentions) {
-    const openid = m3.member_openid ?? m3.id ?? m3.user_openid;
-    if (!openid) continue;
-    if (m3.is_you) {
-      cleaned = cleaned.replace(new RegExp(`<@!?${openid}>`, "g"), "").trim();
-    } else {
-      const displayName = m3.nickname ?? m3.username;
-      if (displayName) {
-        cleaned = cleaned.replace(new RegExp(`<@!?${openid}>`, "g"), `@${displayName}`);
-      }
-    }
-  }
-  return cleaned;
-}
-
 // src/channel.ts
 var TEXT_CHUNK_LIMIT2 = 5e3;
 var GFM_TABLE_DATA_RE = /^\|.+\|.*\|/;
@@ -15022,7 +15100,7 @@ function verifyRuntimeContract(rt) {
     log3.error(`BROKEN \u2014 missing: ${missing.join(", ")}`);
   }
   if (degraded.length) {
-    log3.warn(`degraded: ${degraded.join(", ")}`);
+    log3.debug(`degraded: ${degraded.join(", ")}`);
   }
   return { ok: missing.length === 0, version, missing, degraded };
 }
@@ -15101,6 +15179,7 @@ var index_default = plugin;
   resolveHistoryLimit,
   resolveIgnoreOtherMentions,
   resolveMentionPatterns,
+  resolveProcessingTimeoutMs,
   resolveQQBotAccount,
   resolveRequireMention,
   resolveToolPolicy,