@cxyhhhhh/openclaw-qqbot 2.0.0-dev.202607101321 → 2.0.0-dev.202607101541

package/dist/index.cjs

@@ -5087,11 +5087,11 @@ var import_node_os = __toESM(require("os"), 1);
 // src/outbound/outbound-service.ts
 var path3 = __toESM(require("path"), 1);
 
-// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607101142/node_modules/@cxyhhhhh/qqbot-nodejs/dist/QQBot.js
+// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607101530/node_modules/@cxyhhhhh/qqbot-nodejs/dist/QQBot.js
 var fs3 = __toESM(require("fs"), 1);
 var path = __toESM(require("path"), 1);
 
-// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607101142/node_modules/@cxyhhhhh/qqbot-nodejs/dist/middleware/types.js
+// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607101530/node_modules/@cxyhhhhh/qqbot-nodejs/dist/middleware/types.js
 function resolvePolicy(ctx, path22, explicit, defaultValue) {
   if (explicit !== void 0 && explicit !== null) {
     return explicit;
@@ -5167,7 +5167,7 @@ function createMiddlewareContext(params) {
   return ctx;
 }
 
-// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607101142/node_modules/@cxyhhhhh/qqbot-nodejs/dist/protocol/types.js
+// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607101530/node_modules/@cxyhhhhh/qqbot-nodejs/dist/protocol/types.js
 var ApiError = class extends Error {
   httpStatus;
   path;
@@ -5200,7 +5200,7 @@ var StreamContentType = {
   MARKDOWN: "markdown"
 };
 
-// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607101142/node_modules/@cxyhhhhh/qqbot-nodejs/dist/protocol/utils/format.js
+// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607101530/node_modules/@cxyhhhhh/qqbot-nodejs/dist/protocol/utils/format.js
 function formatErrorMessage(err) {
   if (err instanceof Error) {
     let formatted = err.message || err.name || "Error";
@@ -5247,7 +5247,7 @@ function formatFileSize(bytes) {
   return `${(bytes / 1024 / 1024 / 1024).toFixed(2)} GB`;
 }
 
-// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607101142/node_modules/@cxyhhhhh/qqbot-nodejs/dist/protocol/api/api-client.js
+// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607101530/node_modules/@cxyhhhhh/qqbot-nodejs/dist/protocol/api/api-client.js
 var DEFAULT_BASE_URL = "https://api.sgroup.qq.com";
 var DEFAULT_TIMEOUT_MS = 3e4;
 var FILE_UPLOAD_TIMEOUT_MS = 12e4;
@@ -5342,12 +5342,12 @@ var ApiClient = class {
   }
 };
 
-// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607101142/node_modules/@cxyhhhhh/qqbot-nodejs/dist/protocol/api/media-chunked.js
+// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607101530/node_modules/@cxyhhhhh/qqbot-nodejs/dist/protocol/api/media-chunked.js
 var crypto = __toESM(require("crypto"), 1);
 var fs = __toESM(require("fs"), 1);
 var https = __toESM(require("https"), 1);
 
-// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607101142/node_modules/@cxyhhhhh/qqbot-nodejs/dist/protocol/api/retry.js
+// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607101530/node_modules/@cxyhhhhh/qqbot-nodejs/dist/protocol/api/retry.js
 async function withRetry(fn, policy, persistentPolicy, logger) {
   let lastError = null;
   for (let attempt = 0; attempt <= policy.maxRetries; attempt++) {
@@ -5439,7 +5439,7 @@ function buildPartFinishPersistentPolicy(retryTimeoutMs, retryableCodes = PART_F
 var PART_FINISH_RETRYABLE_CODES = /* @__PURE__ */ new Set([40093001]);
 var UPLOAD_PREPARE_FALLBACK_CODE = 40093002;
 
-// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607101142/node_modules/@cxyhhhhh/qqbot-nodejs/dist/protocol/api/routes.js
+// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607101530/node_modules/@cxyhhhhh/qqbot-nodejs/dist/protocol/api/routes.js
 function messagePath(scope, targetId) {
   return scope === "c2c" ? `/v2/users/${targetId}/messages` : `/v2/groups/${targetId}/messages`;
 }
@@ -5476,7 +5476,7 @@ function getNextMsgSeq(_msgId) {
   return (timePart ^ random) % 65536;
 }
 
-// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607101142/node_modules/@cxyhhhhh/qqbot-nodejs/dist/protocol/api/media-chunked.js
+// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607101530/node_modules/@cxyhhhhh/qqbot-nodejs/dist/protocol/api/media-chunked.js
 var UploadDailyLimitExceededError = class extends Error {
   filePath;
   fileSize;
@@ -5738,8 +5738,32 @@ function sleep2(ms) {
   return new Promise((resolve2) => setTimeout(resolve2, ms));
 }
 
-// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607101142/node_modules/@cxyhhhhh/qqbot-nodejs/dist/protocol/api/media.js
+// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607101530/node_modules/@cxyhhhhh/qqbot-nodejs/dist/protocol/api/media.js
 var fs2 = __toESM(require("fs"), 1);
+
+// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607101530/node_modules/@cxyhhhhh/qqbot-nodejs/dist/protocol/utils/file-utils.js
+var MAX_UPLOAD_SIZE = 20 * 1024 * 1024;
+var CHUNKED_UPLOAD_MAX_SIZE = 100 * 1024 * 1024;
+var LARGE_FILE_THRESHOLD = 5 * 1024 * 1024;
+var MEDIA_FILE_TYPE_INFO = {
+  [MediaFileType.IMAGE]: { maxSize: 30 * 1024 * 1024, name: "image" },
+  [MediaFileType.VIDEO]: { maxSize: 100 * 1024 * 1024, name: "video" },
+  [MediaFileType.VOICE]: { maxSize: 20 * 1024 * 1024, name: "voice" },
+  [MediaFileType.FILE]: { maxSize: 100 * 1024 * 1024, name: "file" }
+};
+function sanitizeFileName(name) {
+  if (!name) {
+    return "file";
+  }
+  const cleaned = name.replace(/[\\/:*?"<>|]/g, "_").replace(/[\u0000-\u001f\u007f]/g, "").replace(/\s+/g, " ").trim();
+  return cleaned || "file";
+}
+
+// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607101530/node_modules/@cxyhhhhh/qqbot-nodejs/dist/protocol/api/media.js
+var MAX_BASE64_CHECK_SIZE = Math.ceil(MAX_UPLOAD_SIZE * 1.4);
+function formatUploadSize() {
+  return formatFileSize(MAX_UPLOAD_SIZE);
+}
 var MediaApi = class {
   client;
   tokenManager;
@@ -5771,6 +5795,10 @@ var MediaApi = class {
       const buf = await fs2.promises.readFile(opts.localPath);
       fileData = buf.toString("base64");
     }
+    if (fileData && fileData.length > MAX_BASE64_CHECK_SIZE) {
+      const sizeMB = (fileData.length / (1024 * 1024)).toFixed(1);
+      throw new Error(`fileData too large (${sizeMB}MB decoded); QQ Bot single upload limit is ${formatUploadSize()}`);
+    }
     if (fileData && this.cache) {
       const hash = this.cache.computeHash(fileData);
       const cached = this.cache.get(hash, scope, targetId, fileType);
@@ -5819,7 +5847,7 @@ var MediaApi = class {
   }
 };
 
-// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607101142/node_modules/@cxyhhhhh/qqbot-nodejs/dist/protocol/api/messages.js
+// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607101530/node_modules/@cxyhhhhh/qqbot-nodejs/dist/protocol/api/messages.js
 var MessageApi = class {
   client;
   tokenManager;
@@ -6007,7 +6035,7 @@ var MessageApi = class {
   }
 };
 
-// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607101142/node_modules/@cxyhhhhh/qqbot-nodejs/dist/protocol/api/token.js
+// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607101530/node_modules/@cxyhhhhh/qqbot-nodejs/dist/protocol/api/token.js
 var DEFAULT_TOKEN_BASE_URL = "https://bots.qq.com";
 var TOKEN_PATH = "/app/getAppAccessToken";
 var TokenManager = class {
@@ -6194,7 +6222,7 @@ var import_websocket = __toESM(require_websocket(), 1);
 var import_websocket_server = __toESM(require_websocket_server(), 1);
 var wrapper_default = import_websocket.default;
 
-// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607101142/node_modules/@cxyhhhhh/qqbot-nodejs/dist/protocol/gateway/codec.js
+// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607101530/node_modules/@cxyhhhhh/qqbot-nodejs/dist/protocol/gateway/codec.js
 function decodeGatewayMessageData(data) {
   if (typeof data === "string") {
     return data;
@@ -6221,7 +6249,7 @@ function readOptionalMessageSceneExt(event) {
   return scene?.ext;
 }
 
-// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607101142/node_modules/@cxyhhhhh/qqbot-nodejs/dist/protocol/gateway/constants.js
+// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607101530/node_modules/@cxyhhhhh/qqbot-nodejs/dist/protocol/gateway/constants.js
 var INTENTS = {
   GUILDS: 1 << 0,
   GUILD_MEMBERS: 1 << 1,
@@ -6294,7 +6322,7 @@ var GatewayEvent = {
   MESSAGE_REACTION_REMOVE: "MESSAGE_REACTION_REMOVE"
 };
 
-// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607101142/node_modules/@cxyhhhhh/qqbot-nodejs/dist/protocol/gateway/event-dispatcher.js
+// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607101530/node_modules/@cxyhhhhh/qqbot-nodejs/dist/protocol/gateway/event-dispatcher.js
 var REF_INDEX_KEY = "msg_idx";
 function parseRefIndices(ext, msgType, msgElements) {
   let refMsgIdx;
@@ -6435,7 +6463,7 @@ function dispatchEvent(eventType, data, _accountId, _log) {
   return { action: "raw", type: eventType, data };
 }
 
-// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607101142/node_modules/@cxyhhhhh/qqbot-nodejs/dist/protocol/gateway/reconnect.js
+// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607101530/node_modules/@cxyhhhhh/qqbot-nodejs/dist/protocol/gateway/reconnect.js
 var ReconnectState = class {
   accountId;
   log;
@@ -6546,7 +6574,7 @@ var ReconnectState = class {
   }
 };
 
-// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607101142/node_modules/@cxyhhhhh/qqbot-nodejs/dist/protocol/gateway/gateway-connection.js
+// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607101530/node_modules/@cxyhhhhh/qqbot-nodejs/dist/protocol/gateway/gateway-connection.js
 var GatewayConnection = class {
   isAborted = false;
   currentWs = null;
@@ -6804,7 +6832,7 @@ function previewPayload(data) {
   }
 }
 
-// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607101142/node_modules/@cxyhhhhh/qqbot-nodejs/dist/protocol/transport/webhook-verify.js
+// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607101530/node_modules/@cxyhhhhh/qqbot-nodejs/dist/protocol/transport/webhook-verify.js
 var crypto2 = __toESM(require("crypto"), 1);
 function deriveSeed(botSecret) {
   let seed = botSecret;
@@ -6856,7 +6884,7 @@ function signValidationResponse(params) {
   };
 }
 
-// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607101142/node_modules/@cxyhhhhh/qqbot-nodejs/dist/protocol/transport/webhook-server-node.js
+// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607101530/node_modules/@cxyhhhhh/qqbot-nodejs/dist/protocol/transport/webhook-server-node.js
 var http = __toESM(require("http"), 1);
 var NodeHttpWebhookServer = class {
   server = null;
@@ -6904,7 +6932,7 @@ var NodeHttpWebhookServer = class {
   }
 };
 
-// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607101142/node_modules/@cxyhhhhh/qqbot-nodejs/dist/protocol/transport/webhook.js
+// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607101530/node_modules/@cxyhhhhh/qqbot-nodejs/dist/protocol/transport/webhook.js
 var OP_DISPATCH = 0;
 var OP_HTTP_CALLBACK_ACK = 12;
 var OP_VALIDATION = 13;
@@ -7048,25 +7076,7 @@ function getHeader(headers, key) {
   return val;
 }
 
-// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607101142/node_modules/@cxyhhhhh/qqbot-nodejs/dist/protocol/utils/file-utils.js
-var MAX_UPLOAD_SIZE = 20 * 1024 * 1024;
-var CHUNKED_UPLOAD_MAX_SIZE = 100 * 1024 * 1024;
-var LARGE_FILE_THRESHOLD = 5 * 1024 * 1024;
-var MEDIA_FILE_TYPE_INFO = {
-  [MediaFileType.IMAGE]: { maxSize: 30 * 1024 * 1024, name: "image" },
-  [MediaFileType.VIDEO]: { maxSize: 100 * 1024 * 1024, name: "video" },
-  [MediaFileType.VOICE]: { maxSize: 20 * 1024 * 1024, name: "voice" },
-  [MediaFileType.FILE]: { maxSize: 100 * 1024 * 1024, name: "file" }
-};
-function sanitizeFileName(name) {
-  if (!name) {
-    return "file";
-  }
-  const cleaned = name.replace(/[\\/:*?"<>|]/g, "_").replace(/[\u0000-\u001f\u007f]/g, "").replace(/\s+/g, " ").trim();
-  return cleaned || "file";
-}
-
-// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607101142/node_modules/@cxyhhhhh/qqbot-nodejs/dist/protocol/utils/upload-cache.js
+// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607101530/node_modules/@cxyhhhhh/qqbot-nodejs/dist/protocol/utils/upload-cache.js
 var crypto3 = __toESM(require("crypto"), 1);
 var MAX_CACHE_SIZE = 500;
 function computeFileHash(data) {
@@ -7131,7 +7141,7 @@ var UploadCache = class {
   }
 };
 
-// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607101142/node_modules/@cxyhhhhh/qqbot-nodejs/dist/streaming.js
+// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607101530/node_modules/@cxyhhhhh/qqbot-nodejs/dist/streaming.js
 var DEFAULT_THROTTLE_MS = 500;
 var MIN_THROTTLE_MS = 300;
 var MAX_FLUSH_RETRIES = 3;
@@ -7299,7 +7309,7 @@ var StreamSession = class {
   }
 };
 
-// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607101142/node_modules/@cxyhhhhh/qqbot-nodejs/dist/QQBot.js
+// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607101530/node_modules/@cxyhhhhh/qqbot-nodejs/dist/QQBot.js
 var MsgType = {
   /** Plain text. */
   TEXT: 0,
@@ -7987,7 +7997,7 @@ var QQBot = class {
   }
 };
 
-// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607101142/node_modules/@cxyhhhhh/qqbot-nodejs/dist/middleware/message-filter.js
+// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607101530/node_modules/@cxyhhhhh/qqbot-nodejs/dist/middleware/message-filter.js
 function messageFilter(options = {}) {
   const skipSelfEcho = options.skipSelfEcho ?? true;
   const dedupOpts = options.dedup !== false ? { windowMs: 5e3, maxSize: 1e3, ...options.dedup ?? {} } : null;
@@ -8025,7 +8035,7 @@ function messageFilter(options = {}) {
   };
 }
 
-// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607101142/node_modules/@cxyhhhhh/qqbot-nodejs/dist/middleware/content-sanitizer.js
+// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607101530/node_modules/@cxyhhhhh/qqbot-nodejs/dist/middleware/content-sanitizer.js
 function contentSanitizer(options = {}) {
   const { stripBotMention = true, stripAllMentions = false, collapseWhitespace = false, parseFaceTags: parseFaceTags2 = false, transform } = options;
   return async (ctx, next) => {
@@ -8120,7 +8130,7 @@ function faceToEmoji(id) {
   return map[id];
 }
 
-// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607101142/node_modules/@cxyhhhhh/qqbot-nodejs/dist/middleware/rate-limiter.js
+// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607101530/node_modules/@cxyhhhhh/qqbot-nodejs/dist/middleware/rate-limiter.js
 var SlidingWindow = class {
   buckets = /* @__PURE__ */ new Map();
   max;
@@ -8174,7 +8184,7 @@ function rateLimiter(options = {}) {
   };
 }
 
-// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607101142/node_modules/@cxyhhhhh/qqbot-nodejs/dist/middleware/concurrency-guard.js
+// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607101530/node_modules/@cxyhhhhh/qqbot-nodejs/dist/middleware/concurrency-guard.js
 function concurrencyGuard(options = {}) {
   const strategy = options.strategy ?? "queue";
   const maxQueue = options.maxQueue ?? 3;
@@ -8409,7 +8419,7 @@ function concurrencyGuard(options = {}) {
   return guard;
 }
 
-// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607101142/node_modules/@cxyhhhhh/qqbot-nodejs/dist/middleware/mention-gate.js
+// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607101530/node_modules/@cxyhhhhh/qqbot-nodejs/dist/middleware/mention-gate.js
 function detectMentionInContent(content, appId) {
   if (!content || !appId)
     return false;
@@ -8465,7 +8475,7 @@ function mentionGate(options = {}) {
   };
 }
 
-// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607101142/node_modules/@cxyhhhhh/qqbot-nodejs/dist/middleware/quote-ref.js
+// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607101530/node_modules/@cxyhhhhh/qqbot-nodejs/dist/middleware/quote-ref.js
 var MemoryRefIndexStore = class {
   map = /* @__PURE__ */ new Map();
   maxSize;
@@ -8583,7 +8593,7 @@ function buildText(content, attachments) {
   return parts.join("\n") || "[empty message]";
 }
 
-// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607101142/node_modules/@cxyhhhhh/qqbot-nodejs/dist/middleware/envelope-formatter.js
+// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607101530/node_modules/@cxyhhhhh/qqbot-nodejs/dist/middleware/envelope-formatter.js
 function envelopeFormatter(options = {}) {
   const { historyLimit = 5, includeQuote = true, includeSender = true, format } = options;
   return async (ctx, next) => {
@@ -8655,7 +8665,7 @@ ${parts.join("\n")}
   return sections.join("\n\n");
 }
 
-// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607101142/node_modules/@cxyhhhhh/qqbot-nodejs/dist/middleware/slash-command.js
+// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607101530/node_modules/@cxyhhhhh/qqbot-nodejs/dist/middleware/slash-command.js
 function slashCommand(options = {}) {
   const prefixes = options.prefixes ?? ["/"];
   const catchErrors = options.catchErrors ?? true;
@@ -8718,8 +8728,9 @@ function slashCommand(options = {}) {
     }
     const cleaned = content.replace(/<@!?[^>]+>\s*/g, "").trim();
     if (ctx.message.kind === "group") {
-      const mentions = ctx.message.mentions;
-      if (!mentions?.some((m3) => m3.is_you)) {
+      const msg = ctx.message;
+      const wasMentioned = msg.rawEventType === "GROUP_AT_MESSAGE_CREATE" || msg.mentions?.some((m3) => m3.is_you);
+      if (!wasMentioned) {
         await next();
         return;
       }
@@ -8807,7 +8818,7 @@ async function sendCommandResult(ctx, result) {
   }
 }
 
-// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607101142/node_modules/@cxyhhhhh/qqbot-nodejs/dist/middleware/history-buffer.js
+// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607101530/node_modules/@cxyhhhhh/qqbot-nodejs/dist/middleware/history-buffer.js
 var MemoryHistoryStore = class {
   buffers = /* @__PURE__ */ new Map();
   append(groupKey, entry, limit) {
@@ -8872,7 +8883,7 @@ function historyBuffer(options = {}) {
   return m3;
 }
 
-// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607101142/node_modules/@cxyhhhhh/qqbot-nodejs/dist/middleware/typing-indicator.js
+// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607101530/node_modules/@cxyhhhhh/qqbot-nodejs/dist/middleware/typing-indicator.js
 var DEFAULT_DURATION_SEC = 60;
 var DEFAULT_KEEPALIVE_INTERVAL_MS = 5e4;
 function typingIndicator(options = {}) {
@@ -8909,7 +8920,7 @@ function typingIndicator(options = {}) {
   };
 }
 
-// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607101142/node_modules/@cxyhhhhh/qqbot-nodejs/dist/middleware/error-handler.js
+// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607101530/node_modules/@cxyhhhhh/qqbot-nodejs/dist/middleware/error-handler.js
 var DEFAULT_FORMAT = (err) => {
   if (err instanceof ApiError) {
     if (err.bizMessage)
@@ -8947,7 +8958,7 @@ function errorHandler(options = {}) {
   };
 }
 
-// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607101142/node_modules/@cxyhhhhh/qqbot-nodejs/dist/storage/kv-store.js
+// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607101530/node_modules/@cxyhhhhh/qqbot-nodejs/dist/storage/kv-store.js
 var import_node_fs = __toESM(require("fs"), 1);
 var import_node_path = __toESM(require("path"), 1);
 var FileKVStore = class {
@@ -9057,7 +9068,7 @@ var FileKVStore = class {
   }
 };
 
-// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607101142/node_modules/@cxyhhhhh/qqbot-nodejs/dist/storage/session-adapter.js
+// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607101530/node_modules/@cxyhhhhh/qqbot-nodejs/dist/storage/session-adapter.js
 function kvSessionPersistence(opts) {
   const prefix = opts.prefix ?? "qqbot:session:";
   const key = `${prefix}${opts.accountId}`;
@@ -9284,7 +9295,7 @@ var import_node_path2 = __toESM(require("path"), 1);
 var import_node_fs2 = __toESM(require("fs"), 1);
 var _cachedOpenclawVersion;
 function getPackageVersion() {
-  return true ? "2.0.0-dev.202607101321" : "unknown";
+  return true ? "2.0.0-dev.202607101541" : "unknown";
 }
 function getOpenclawVersion(runtimeVersion) {
   if (_cachedOpenclawVersion) return _cachedOpenclawVersion;
@@ -11505,10 +11516,10 @@ function buildCommandList(account, opts) {
 // src/middleware/attachment.ts
 var path17 = __toESM(require("path"), 1);
 
-// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607101142/node_modules/@cxyhhhhh/qqbot-nodejs/dist/protocol/utils/reply-limiter.js
+// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607101530/node_modules/@cxyhhhhh/qqbot-nodejs/dist/protocol/utils/reply-limiter.js
 var DEFAULT_TTL_MS = 60 * 60 * 1e3;
 
-// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607101142/node_modules/@cxyhhhhh/qqbot-nodejs/dist/protocol/utils/media-tags.js
+// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607101530/node_modules/@cxyhhhhh/qqbot-nodejs/dist/protocol/utils/media-tags.js
 var VALID_TAGS = ["qqimg", "qqvoice", "qqvideo", "qqfile", "qqmedia"];
 var TAG_ALIASES = {
   qq_img: "qqimg",
@@ -11557,30 +11568,30 @@ var SELF_CLOSING_TAG_REGEX = new RegExp("`?" + LEFT_BRACKET + "\\s*(" + TAG_NAME
 var FUZZY_MEDIA_TAG_REGEX = new RegExp("`?" + LEFT_BRACKET + "\\s*(" + TAG_NAME_PATTERN + ")\\s*" + RIGHT_BRACKET + `["']?\\s*([^<\uFF1C<\uFF1E>"'\`]+?)\\s*["']?` + LEFT_BRACKET + "\\s*/?\\s*(?:" + TAG_NAME_PATTERN + ")\\s*" + RIGHT_BRACKET + "`?", "gi");
 var MULTILINE_TAG_CLEANUP = new RegExp("(" + LEFT_BRACKET + "\\s*(?:" + TAG_NAME_PATTERN + ")\\s*" + RIGHT_BRACKET + ")([\\s\\S]*?)(" + LEFT_BRACKET + "\\s*/?\\s*(?:" + TAG_NAME_PATTERN + ")\\s*" + RIGHT_BRACKET + ")", "gi");
 
-// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607101142/node_modules/@cxyhhhhh/qqbot-nodejs/dist/protocol/utils/ref-index-store.js
+// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607101530/node_modules/@cxyhhhhh/qqbot-nodejs/dist/protocol/utils/ref-index-store.js
 var import_node_fs6 = __toESM(require("fs"), 1);
 var DEFAULT_TTL_MS2 = 7 * 24 * 60 * 60 * 1e3;
 
-// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607101142/node_modules/@cxyhhhhh/qqbot-nodejs/dist/protocol/utils/session-store.js
+// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607101530/node_modules/@cxyhhhhh/qqbot-nodejs/dist/protocol/utils/session-store.js
 var import_node_fs7 = __toESM(require("fs"), 1);
 var import_node_path7 = __toESM(require("path"), 1);
 var DEFAULT_EXPIRE_MS = 5 * 60 * 1e3;
 
-// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607101142/node_modules/@cxyhhhhh/qqbot-nodejs/dist/protocol/utils/text-parsing.js
+// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607101530/node_modules/@cxyhhhhh/qqbot-nodejs/dist/protocol/utils/text-parsing.js
 var MAX_FACE_EXT_BYTES = 64 * 1024;
 
-// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607101142/node_modules/@cxyhhhhh/qqbot-nodejs/dist/protocol/utils/media-source.js
+// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607101530/node_modules/@cxyhhhhh/qqbot-nodejs/dist/protocol/utils/media-source.js
 var fs14 = __toESM(require("fs"), 1);
 
-// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607101142/node_modules/@cxyhhhhh/qqbot-nodejs/dist/protocol/utils/image-size.js
+// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607101530/node_modules/@cxyhhhhh/qqbot-nodejs/dist/protocol/utils/image-size.js
 var import_node_buffer = require("buffer");
 
-// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607101142/node_modules/@cxyhhhhh/qqbot-nodejs/dist/protocol/utils/ffmpeg.js
+// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607101530/node_modules/@cxyhhhhh/qqbot-nodejs/dist/protocol/utils/ffmpeg.js
 var import_node_child_process = require("child_process");
 var fs15 = __toESM(require("fs"), 1);
 var path13 = __toESM(require("path"), 1);
 
-// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607101142/node_modules/@cxyhhhhh/qqbot-nodejs/dist/protocol/utils/audio.js
+// node_modules/.pnpm/@cxyhhhhh+qqbot-nodejs@1.0.2-dev.202607101530/node_modules/@cxyhhhhh/qqbot-nodejs/dist/protocol/utils/audio.js
 var import_node_child_process2 = require("child_process");
 var fs16 = __toESM(require("fs"), 1);
 var path14 = __toESM(require("path"), 1);
@@ -12219,7 +12230,7 @@ function isNonEmpty(x) {
 }
 function buildAgentBody(input) {
   const { userContent, base, isGroup, wasMentioned, history } = input;
-  if (userContent.startsWith("/")) {
+  if (userContent.trim().startsWith("/")) {
     return userContent;
   }
   if (isGroup && wasMentioned && history && history.length > 0) {
@@ -12386,6 +12397,25 @@ async function checkPairingMode(ctx, next, opts) {
   }
 }
 
+// src/utils/mention.ts
+function stripMentionText(text, mentions) {
+  if (!text || !mentions?.length) return text;
+  let cleaned = text;
+  for (const m3 of mentions) {
+    const openid = m3.member_openid ?? m3.id ?? m3.user_openid;
+    if (!openid) continue;
+    if (m3.is_you) {
+      cleaned = cleaned.replace(new RegExp(`<@!?${openid}>`, "g"), "").trim();
+    } else {
+      const displayName = m3.nickname ?? m3.username;
+      if (displayName) {
+        cleaned = cleaned.replace(new RegExp(`<@!?${openid}>`, "g"), `@${displayName}`);
+      }
+    }
+  }
+  return cleaned;
+}
+
 // src/gateway/middleware-setup.ts
 function setupMiddlewares(bot, account, opts) {
   bot.use(errorHandler());
@@ -12404,8 +12434,13 @@ function setupMiddlewares(bot, account, opts) {
     getRuntime: opts.getRuntime
   }));
   bot.use(mentionGate());
-  bot.use(contentSanitizer({ parseFaceTags: true }));
+  bot.use(contentSanitizer({
+    parseFaceTags: true,
+    transform: (content, ctx) => stripMentionText(content, ctx.message.mentions)
+  }));
   bot.use(rateLimiter());
+  const slash = slashCommand({ commands: buildCommandList(account, { getRuntime: opts.getRuntime }) });
+  bot.use(slash.middleware);
   bot.use(concurrencyGuard({
     strategy: "merge",
     maxQueue: 50,
@@ -12438,8 +12473,6 @@ function setupMiddlewares(bot, account, opts) {
       return assembled.agentBody;
     }
   }));
-  const slash = slashCommand({ commands: buildCommandList(account, { getRuntime: opts.getRuntime }) });
-  bot.use(slash.middleware);
 }
 
 // src/dispatch/envelope-builder.ts
@@ -14455,25 +14488,6 @@ var qqbotOnboardingAdapter = {
   }
 };
 
-// src/utils/mention.ts
-function stripMentionText(text, mentions) {
-  if (!text || !mentions?.length) return text;
-  let cleaned = text;
-  for (const m3 of mentions) {
-    const openid = m3.member_openid ?? m3.id ?? m3.user_openid;
-    if (!openid) continue;
-    if (m3.is_you) {
-      cleaned = cleaned.replace(new RegExp(`<@!?${openid}>`, "g"), "").trim();
-    } else {
-      const displayName = m3.nickname ?? m3.username;
-      if (displayName) {
-        cleaned = cleaned.replace(new RegExp(`<@!?${openid}>`, "g"), `@${displayName}`);
-      }
-    }
-  }
-  return cleaned;
-}
-
 // src/channel.ts
 var TEXT_CHUNK_LIMIT2 = 5e3;
 var GFM_TABLE_DATA_RE = /^\|.+\|.*\|/;