@openclaw-china/qqbot 2026.3.4-2 → 2026.3.7

package/dist/index.js

@@ -1,9 +1,9 @@
-import * as fs3 from 'fs';
-import { existsSync } from 'fs';
 import * as os from 'os';
-import { homedir } from 'os';
-import * as path from 'path';
+import { homedir, tmpdir } from 'os';
+import * as path2 from 'path';
 import { join } from 'path';
+import * as fs3 from 'fs';
+import { existsSync } from 'fs';
 import { fileURLToPath } from 'url';
 import * as fsPromises from 'fs/promises';
 import { createHmac } from 'crypto';
@@ -4213,12 +4213,13 @@ var coerce = {
 var NEVER = INVALID;
 
 // src/config.ts
+function toTrimmedString(value) {
+  if (value === void 0 || value === null) return void 0;
+  const next = String(value).trim();
+  return next ? next : void 0;
+}
 var optionalCoercedString = external_exports.preprocess(
-  (value) => {
-    if (value === void 0 || value === null) return void 0;
-    const next = String(value).trim();
-    return next;
-  },
+  (value) => toTrimmedString(value),
   external_exports.string().min(1).optional()
 );
 var QQBotAccountSchema = external_exports.object({
@@ -4241,13 +4242,31 @@ var QQBotAccountSchema = external_exports.object({
   historyLimit: external_exports.number().int().min(0).optional().default(10),
   textChunkLimit: external_exports.number().int().positive().optional().default(1500),
   replyFinalOnly: external_exports.boolean().optional().default(false),
+  longTaskNoticeDelayMs: external_exports.number().int().min(0).optional().default(3e4),
   maxFileSizeMB: external_exports.number().positive().optional().default(100),
-  mediaTimeoutMs: external_exports.number().int().positive().optional().default(3e4)
+  mediaTimeoutMs: external_exports.number().int().positive().optional().default(3e4),
+  inboundMedia: external_exports.object({
+    dir: external_exports.string().optional(),
+    keepDays: external_exports.number().optional()
+  }).optional()
 });
 QQBotAccountSchema.extend({
   defaultAccount: external_exports.string().optional(),
   accounts: external_exports.record(QQBotAccountSchema).optional()
 });
+var DEFAULT_INBOUND_MEDIA_DIR = join(homedir(), ".openclaw", "media", "qqbot", "inbound");
+var DEFAULT_INBOUND_MEDIA_KEEP_DAYS = 7;
+var DEFAULT_INBOUND_MEDIA_TEMP_DIR = join(tmpdir(), "qqbot-media");
+function resolveInboundMediaDir(config) {
+  return String(config?.inboundMedia?.dir ?? "").trim() || DEFAULT_INBOUND_MEDIA_DIR;
+}
+function resolveInboundMediaKeepDays(config) {
+  const value = config?.inboundMedia?.keepDays;
+  return typeof value === "number" && Number.isFinite(value) && value >= 0 ? value : DEFAULT_INBOUND_MEDIA_KEEP_DAYS;
+}
+function resolveInboundMediaTempDir() {
+  return DEFAULT_INBOUND_MEDIA_TEMP_DIR;
+}
 var DEFAULT_ACCOUNT_ID = "default";
 function listConfiguredAccountIds(cfg) {
   const accounts = cfg.channels?.qqbot?.accounts;
@@ -4278,17 +4297,22 @@ function mergeQQBotAccountConfig(cfg, accountId) {
   return { ...baseConfig, ...account };
 }
 function resolveQQBotCredentials(config) {
-  if (!config?.appId || !config?.clientSecret) return void 0;
-  return { appId: config.appId, clientSecret: config.clientSecret };
+  const appId = toTrimmedString(config?.appId);
+  const clientSecret = toTrimmedString(config?.clientSecret);
+  if (!appId || !clientSecret) return void 0;
+  return { appId, clientSecret };
 }
 function resolveQQBotASRCredentials(config) {
   const asr = config?.asr;
   if (!asr?.enabled) return void 0;
-  if (!asr.appId || !asr.secretId || !asr.secretKey) return void 0;
+  const appId = toTrimmedString(asr.appId);
+  const secretId = toTrimmedString(asr.secretId);
+  const secretKey = toTrimmedString(asr.secretKey);
+  if (!appId || !secretId || !secretKey) return void 0;
   return {
-    appId: asr.appId,
-    secretId: asr.secretId,
-    secretKey: asr.secretKey
+    appId,
+    secretId,
+    secretKey
   };
 }
 
@@ -4633,10 +4657,10 @@ function normalizeLocalPath(raw) {
   } catch {
   }
   if (p.startsWith("~/") || p === "~") {
-    p = path.join(os.homedir(), p.slice(1));
+    p = path2.join(os.homedir(), p.slice(1));
   } else if (p.startsWith("~")) ;
-  if (!path.isAbsolute(p)) {
-    p = path.resolve(process.cwd(), p);
+  if (!path2.isAbsolute(p)) {
+    p = path2.resolve(process.cwd(), p);
   }
   return p;
 }
@@ -4646,7 +4670,7 @@ function stripTitleFromUrl(value) {
   return match ? match[1] : trimmed;
 }
 function getExtension(filePath) {
-  const ext = path.extname(filePath).toLowerCase();
+  const ext = path2.extname(filePath).toLowerCase();
   return ext.startsWith(".") ? ext.slice(1) : ext;
 }
 function isImagePath(filePath) {
@@ -4672,11 +4696,11 @@ function createExtractedMedia(source, sourceKind, options) {
   let fileName;
   if (isLocal) {
     localPath = normalizeLocalPath(cleanSource);
-    fileName = path.basename(localPath);
+    fileName = path2.basename(localPath);
   } else if (isHttp) {
     try {
       const url = new URL(cleanSource);
-      fileName = path.basename(url.pathname) || void 0;
+      fileName = path2.basename(url.pathname) || void 0;
     } catch {
     }
   }
@@ -4834,7 +4858,7 @@ function extractMediaFromText(text, options = {}) {
       if (media.type !== "image" && isNonImageFilePath(media.localPath || rawPath)) {
         if (addMedia(media)) {
           if (removeFromText && match.index !== void 0) {
-            const fileName = media.fileName || path.basename(rawPath);
+            const fileName = media.fileName || path2.basename(rawPath);
             replacements.push({
               start: match.index,
               end: match.index + fullMatch.length,
@@ -4879,7 +4903,7 @@ function extractMediaFromText(text, options = {}) {
       if (media.type !== "image") {
         if (addMedia(media)) {
           if (removeFromText && match.index !== void 0) {
-            const fileName = media.fileName || path.basename(rawPath);
+            const fileName = media.fileName || path2.basename(rawPath);
             replacements.push({
               start: match.index,
               end: match.index + fullMatch.length,
@@ -4928,13 +4952,27 @@ function sanitizeFileName(name) {
 function resolveFileNameFromUrl(url) {
   try {
     const parsed = new URL(url);
-    const base = path.basename(parsed.pathname);
+    const base = path2.basename(parsed.pathname);
     if (!base || base === "/") return void 0;
     return base;
   } catch {
     return void 0;
   }
 }
+function normalizeForCompare(value) {
+  return path2.resolve(value).replace(/\\/g, "/").toLowerCase();
+}
+function isPathUnderDir(filePath, dirPath) {
+  const f = normalizeForCompare(filePath);
+  const d2 = normalizeForCompare(dirPath).replace(/\/+$/, "");
+  return f === d2 || f.startsWith(`${d2}/`);
+}
+function formatDateDir(date = /* @__PURE__ */ new Date()) {
+  const yyyy = date.getFullYear();
+  const mm = String(date.getMonth() + 1).padStart(2, "0");
+  const dd = String(date.getDate()).padStart(2, "0");
+  return `${yyyy}-${mm}-${dd}`;
+}
 var EXT_TO_MIME = {
   // 图片
   jpg: "image/jpeg",
@@ -5029,15 +5067,15 @@ function validatePathSecurity(filePath, options = {}) {
     );
   }
   if (preventTraversal) {
-    const normalized = path.normalize(filePath);
+    const normalized = path2.normalize(filePath);
     if (normalized.includes("..")) {
       throw new PathSecurityError(filePath, "Path traversal detected");
     }
   }
   if (allowedPrefixes && allowedPrefixes.length > 0) {
-    const normalizedPath = path.normalize(filePath);
+    const normalizedPath = path2.normalize(filePath);
     const isAllowed = allowedPrefixes.some(
-      (prefix) => normalizedPath.startsWith(path.normalize(prefix))
+      (prefix) => normalizedPath.startsWith(path2.normalize(prefix))
     );
     if (!isAllowed) {
       throw new PathSecurityError(
@@ -5080,7 +5118,7 @@ async function fetchMediaFromUrl(url, options = {}) {
     let fileName = "file";
     try {
       const urlPath = new URL(url).pathname;
-      fileName = path.basename(urlPath) || "file";
+      fileName = path2.basename(urlPath) || "file";
     } catch {
     }
     const mimeType = response.headers.get("content-type")?.split(";")[0].trim() || getMimeType(fileName);
@@ -5153,7 +5191,7 @@ async function downloadToTempFile(url, options = {}) {
     const ext = resolveExtension(contentType, sourceName);
     const random = Math.random().toString(36).slice(2, 8);
     const fileName = `${safePrefix}-${Date.now()}-${random}${ext}`;
-    const fullPath = path.join(tempDir, fileName);
+    const fullPath = path2.join(tempDir, fileName);
     await fsPromises.mkdir(tempDir, { recursive: true });
     const buffer = Buffer.concat(chunks.map((chunk) => Buffer.from(chunk)));
     await fsPromises.writeFile(fullPath, buffer);
@@ -5185,7 +5223,7 @@ async function readMediaFromLocal(filePath, options = {}) {
     throw new FileSizeLimitError(stats.size, maxSize);
   }
   const buffer = await fsPromises.readFile(localPath);
-  const fileName = path.basename(localPath);
+  const fileName = path2.basename(localPath);
   const mimeType = getMimeType(localPath);
   return {
     buffer,
@@ -5200,6 +5238,63 @@ async function readMedia(source, options = {}) {
   }
   return readMediaFromLocal(source, options);
 }
+async function finalizeInboundMediaFile(options) {
+  const current = String(options.filePath ?? "").trim();
+  if (!current) return current;
+  if (!isPathUnderDir(current, options.tempDir)) {
+    return current;
+  }
+  const datedDir = path2.join(options.inboundDir, formatDateDir());
+  const target = path2.join(datedDir, path2.basename(current));
+  try {
+    await fsPromises.mkdir(datedDir, { recursive: true });
+    await fsPromises.rename(current, target);
+    return target;
+  } catch {
+    return current;
+  }
+}
+async function pruneInboundMediaDir(options) {
+  const keepDays = Number(options.keepDays);
+  if (!Number.isFinite(keepDays) || keepDays < 0) return;
+  const now = options.nowMs ?? Date.now();
+  const cutoff = now - keepDays * 24 * 60 * 60 * 1e3;
+  let entries = [];
+  try {
+    entries = await fsPromises.readdir(options.inboundDir);
+  } catch {
+    return;
+  }
+  for (const entry of entries) {
+    if (!/^\d{4}-\d{2}-\d{2}$/.test(entry)) continue;
+    const dirPath = path2.join(options.inboundDir, entry);
+    let dirStats;
+    try {
+      dirStats = await fsPromises.stat(dirPath);
+    } catch {
+      continue;
+    }
+    if (!dirStats.isDirectory()) continue;
+    const dirTime = dirStats.mtimeMs || dirStats.ctimeMs || 0;
+    if (dirTime >= cutoff) continue;
+    let files = [];
+    try {
+      files = await fsPromises.readdir(dirPath);
+    } catch {
+      continue;
+    }
+    for (const file of files) {
+      const fp = path2.join(dirPath, file);
+      try {
+        const fst = await fsPromises.stat(fp);
+        if (fst.isFile() && (fst.mtimeMs || fst.ctimeMs || 0) < cutoff) {
+          await fsPromises.unlink(fp);
+        }
+      } catch {
+      }
+    }
+  }
+}
 async function cleanupFileSafe(filePath, onError) {
   if (!filePath) return;
   try {
@@ -5213,12 +5308,27 @@ async function cleanupFileSafe(filePath, onError) {
 
 // ../../packages/shared/src/cron/index.ts
 var CRON_HIDDEN_PROMPT = `
-When creating or updating a cron task, use the main session's last route as the delivery target.
-- Do not ask the user for userId/chatId
-- sessionTarget="isolated"
+When creating or updating a cron task, always store a fixed delivery target in the job itself.
+- Use the built-in cron tool (action=add/update). Do not run shell commands.
+- Must use sessionTarget="isolated" for reminder jobs.
 - payload.kind="agentTurn"
-- payload.deliver=true
-- Do not set payload.channel/to (fall back to last route automatically)
+- payload.message must be plain user-visible reminder text only.
+- You must encode runtime guardrails directly into payload.message so the cron run can follow them without extra context.
+- Runtime guardrails to encode in payload.message:
+  - return plain text only
+  - never call any tool
+  - never call the message tool
+  - never send manually; delivery is handled by cron delivery settings
+- Do not include tool directives, "NO_REPLY", or heartbeat markers in payload.message.
+- Job name is never a message target.
+- During cron run, must return plain text only and never call the message tool.
+- Use top-level delivery with announce mode:
+  delivery.mode="announce"
+  delivery.channel=<OriginatingChannel> (example: "qqbot")
+  delivery.to=<OriginatingTo> (examples: "user:<openid>" / "group:<group_openid>")
+  delivery.accountId=<AccountId> when available
+- Never set delivery.channel="last" for multi-channel environments.
+- If OriginatingChannel/OriginatingTo are unavailable, ask a concise follow-up for channel and target.
 - Do not call the message tool to send`;
 var CRON_TRIGGER_KEYWORDS = [
   "\u5B9A\u65F6",
@@ -6378,7 +6488,7 @@ function isCommandLike(value) {
   }
   return typeof value.command === "function" && typeof value.description === "function" && typeof value.action === "function";
 }
-function toTrimmedString(value) {
+function toTrimmedString2(value) {
   if (typeof value !== "string") {
     return void 0;
   }
@@ -6411,7 +6521,7 @@ function getPreferredAccountConfig(channelCfg) {
   if (!isRecord(accounts)) {
     return void 0;
   }
-  const defaultAccountId = toTrimmedString(channelCfg.defaultAccount);
+  const defaultAccountId = toTrimmedString2(channelCfg.defaultAccount);
   if (defaultAccountId) {
     const preferred = accounts[defaultAccountId];
     if (isRecord(preferred)) {
@@ -6548,12 +6658,12 @@ async function configureDingtalk(prompter, cfg) {
   const existing = getChannelConfig(cfg, "dingtalk");
   const clientId = await prompter.askText({
     label: "DingTalk clientId\uFF08AppKey\uFF09",
-    defaultValue: toTrimmedString(existing.clientId),
+    defaultValue: toTrimmedString2(existing.clientId),
     required: true
   });
   const clientSecret = await prompter.askSecret({
     label: "DingTalk clientSecret\uFF08AppSecret\uFF09",
-    existingValue: toTrimmedString(existing.clientSecret),
+    existingValue: toTrimmedString2(existing.clientSecret),
     required: true
   });
   const enableAICard = await prompter.askConfirm(
@@ -6572,12 +6682,12 @@ async function configureFeishu(prompter, cfg) {
   const existing = getChannelConfig(cfg, "feishu-china");
   const appId = await prompter.askText({
     label: "Feishu appId",
-    defaultValue: toTrimmedString(existing.appId),
+    defaultValue: toTrimmedString2(existing.appId),
     required: true
   });
   const appSecret = await prompter.askSecret({
     label: "Feishu appSecret",
-    existingValue: toTrimmedString(existing.appSecret),
+    existingValue: toTrimmedString2(existing.appSecret),
     required: true
   });
   const sendMarkdownAsCard = await prompter.askConfirm(
@@ -6596,17 +6706,17 @@ async function configureWecom(prompter, cfg) {
   const existing = getChannelConfig(cfg, "wecom");
   const webhookPath = await prompter.askText({
     label: "Webhook \u8DEF\u5F84\uFF08\u9700\u4E0E\u4F01\u4E1A\u5FAE\u4FE1\u540E\u53F0\u914D\u7F6E\u4E00\u81F4\uFF0C\u9ED8\u8BA4 /wecom\uFF09",
-    defaultValue: toTrimmedString(existing.webhookPath) ?? "/wecom",
+    defaultValue: toTrimmedString2(existing.webhookPath) ?? "/wecom",
     required: true
   });
   const token = await prompter.askSecret({
     label: "WeCom token",
-    existingValue: toTrimmedString(existing.token),
+    existingValue: toTrimmedString2(existing.token),
     required: true
   });
   const encodingAESKey = await prompter.askSecret({
     label: "WeCom encodingAESKey",
-    existingValue: toTrimmedString(existing.encodingAESKey),
+    existingValue: toTrimmedString2(existing.encodingAESKey),
     required: true
   });
   return mergeChannelConfig(cfg, "wecom", {
@@ -6622,17 +6732,17 @@ async function configureWecomApp(prompter, cfg) {
   const existingAsr = isRecord(existing.asr) ? existing.asr : {};
   const webhookPath = await prompter.askText({
     label: "Webhook \u8DEF\u5F84\uFF08\u9700\u4E0E\u4F01\u4E1A\u5FAE\u4FE1\u540E\u53F0\u914D\u7F6E\u4E00\u81F4\uFF0C\u9ED8\u8BA4 /wecom-app\uFF09",
-    defaultValue: toTrimmedString(existing.webhookPath) ?? "/wecom-app",
+    defaultValue: toTrimmedString2(existing.webhookPath) ?? "/wecom-app",
     required: true
   });
   const token = await prompter.askSecret({
     label: "WeCom App token",
-    existingValue: toTrimmedString(existing.token),
+    existingValue: toTrimmedString2(existing.token),
     required: true
   });
   const encodingAESKey = await prompter.askSecret({
     label: "WeCom App encodingAESKey",
-    existingValue: toTrimmedString(existing.encodingAESKey),
+    existingValue: toTrimmedString2(existing.encodingAESKey),
     required: true
   });
   const patch = {
@@ -6642,12 +6752,12 @@ async function configureWecomApp(prompter, cfg) {
   };
   const corpId = await prompter.askText({
     label: "corpId",
-    defaultValue: toTrimmedString(existing.corpId),
+    defaultValue: toTrimmedString2(existing.corpId),
     required: true
   });
   const corpSecret = await prompter.askSecret({
     label: "corpSecret",
-    existingValue: toTrimmedString(existing.corpSecret),
+    existingValue: toTrimmedString2(existing.corpSecret),
     required: true
   });
   const agentId = await prompter.askNumber({
@@ -6675,17 +6785,17 @@ async function configureWecomApp(prompter, cfg) {
     );
     asr.appId = await prompter.askText({
       label: "ASR appId\uFF08\u817E\u8BAF\u4E91\uFF09",
-      defaultValue: toTrimmedString(existingAsr.appId),
+      defaultValue: toTrimmedString2(existingAsr.appId),
       required: true
     });
     asr.secretId = await prompter.askSecret({
       label: "ASR secretId\uFF08\u817E\u8BAF\u4E91\uFF09",
-      existingValue: toTrimmedString(existingAsr.secretId),
+      existingValue: toTrimmedString2(existingAsr.secretId),
       required: true
     });
     asr.secretKey = await prompter.askSecret({
       label: "ASR secretKey\uFF08\u817E\u8BAF\u4E91\uFF09",
-      existingValue: toTrimmedString(existingAsr.secretKey),
+      existingValue: toTrimmedString2(existingAsr.secretKey),
       required: true
     });
   }
@@ -6699,12 +6809,12 @@ async function configureQQBot(prompter, cfg) {
   const existingAsr = isRecord(existing.asr) ? existing.asr : {};
   const appId = await prompter.askText({
     label: "QQBot appId",
-    defaultValue: toTrimmedString(existing.appId),
+    defaultValue: toTrimmedString2(existing.appId),
     required: true
   });
   const clientSecret = await prompter.askSecret({
     label: "QQBot clientSecret",
-    existingValue: toTrimmedString(existing.clientSecret),
+    existingValue: toTrimmedString2(existing.clientSecret),
     required: true
   });
   const asrEnabled = await prompter.askConfirm(
@@ -6718,17 +6828,17 @@ async function configureQQBot(prompter, cfg) {
     Ve("ASR \u5F00\u901A\u65B9\u5F0F\u8BE6\u60C5\u8BF7\u67E5\u770B\u914D\u7F6E\u6587\u6863\u3002", "\u63D0\u793A");
     asr.appId = await prompter.askText({
       label: "ASR appId\uFF08\u817E\u8BAF\u4E91\uFF09",
-      defaultValue: toTrimmedString(existingAsr.appId),
+      defaultValue: toTrimmedString2(existingAsr.appId),
       required: true
     });
     asr.secretId = await prompter.askSecret({
       label: "ASR secretId\uFF08\u817E\u8BAF\u4E91\uFF09",
-      existingValue: toTrimmedString(existingAsr.secretId),
+      existingValue: toTrimmedString2(existingAsr.secretId),
       required: true
     });
     asr.secretKey = await prompter.askSecret({
       label: "ASR secretKey\uFF08\u817E\u8BAF\u4E91\uFF09",
-      existingValue: toTrimmedString(existingAsr.secretKey),
+      existingValue: toTrimmedString2(existingAsr.secretKey),
       required: true
     });
   }
@@ -6957,11 +7067,29 @@ var MSG_SEQ_BASE = 1e6;
 var tokenCacheMap = /* @__PURE__ */ new Map();
 var tokenPromiseMap = /* @__PURE__ */ new Map();
 var msgSeqMap = /* @__PURE__ */ new Map();
-function nextMsgSeq(messageId) {
-  if (!messageId) return MSG_SEQ_BASE + 1;
-  const current = msgSeqMap.get(messageId) ?? 0;
+function toTrimmedString3(value) {
+  if (value === void 0 || value === null) return void 0;
+  const next = String(value).trim();
+  return next ? next : void 0;
+}
+function requireTrimmedString(value, field) {
+  const normalized = toTrimmedString3(value);
+  if (!normalized) {
+    throw new Error(`QQBot ${field} is empty`);
+  }
+  return normalized;
+}
+function sanitizeUploadFileName(fileName) {
+  const trimmed = fileName.trim();
+  if (!trimmed) return "file";
+  const normalized = trimmed.replace(/[<>:"/\\|?*\x00-\x1F]/g, "_");
+  return normalized || "file";
+}
+function nextMsgSeq(sequenceKey) {
+  if (!sequenceKey) return MSG_SEQ_BASE + 1;
+  const current = msgSeqMap.get(sequenceKey) ?? 0;
   const next = current + 1;
-  msgSeqMap.set(messageId, next);
+  msgSeqMap.set(sequenceKey, next);
   if (msgSeqMap.size > 1e3) {
     const keys = Array.from(msgSeqMap.keys());
     for (let i = 0; i < 500; i += 1) {
@@ -6971,20 +7099,23 @@ function nextMsgSeq(messageId) {
   return MSG_SEQ_BASE + next;
 }
 function clearTokenCache(appId) {
-  if (appId) {
-    tokenCacheMap.delete(appId);
-    tokenPromiseMap.delete(appId);
+  const normalizedAppId = toTrimmedString3(appId);
+  if (normalizedAppId) {
+    tokenCacheMap.delete(normalizedAppId);
+    tokenPromiseMap.delete(normalizedAppId);
   } else {
     tokenCacheMap.clear();
     tokenPromiseMap.clear();
   }
 }
 async function getAccessToken(appId, clientSecret, options) {
-  const cached = tokenCacheMap.get(appId);
+  const normalizedAppId = requireTrimmedString(appId, "appId");
+  const normalizedClientSecret = requireTrimmedString(clientSecret, "clientSecret");
+  const cached = tokenCacheMap.get(normalizedAppId);
   if (cached && Date.now() < cached.expiresAt - 5 * 60 * 1e3) {
     return cached.token;
   }
-  const existingPromise = tokenPromiseMap.get(appId);
+  const existingPromise = tokenPromiseMap.get(normalizedAppId);
   if (existingPromise) {
     return existingPromise;
   }
@@ -6992,22 +7123,22 @@ async function getAccessToken(appId, clientSecret, options) {
     try {
       const data = await httpPost(
         TOKEN_URL,
-        { appId, clientSecret },
+        { appId: normalizedAppId, clientSecret: normalizedClientSecret },
         { timeout: options?.timeout ?? 15e3 }
       );
       if (!data.access_token) {
         throw new Error("access_token missing from QQ response");
       }
-      tokenCacheMap.set(appId, {
+      tokenCacheMap.set(normalizedAppId, {
         token: data.access_token,
         expiresAt: Date.now() + (data.expires_in ?? 7200) * 1e3
       });
       return data.access_token;
     } finally {
-      tokenPromiseMap.delete(appId);
+      tokenPromiseMap.delete(normalizedAppId);
     }
   })();
-  tokenPromiseMap.set(appId, promise);
+  tokenPromiseMap.set(normalizedAppId, promise);
   return promise;
 }
 async function apiGet(accessToken, path4, options) {
@@ -7035,7 +7166,7 @@ async function getGatewayUrl(accessToken) {
   return data.url;
 }
 function buildMessageBody(params) {
-  const msgSeq = nextMsgSeq(params.messageId);
+  const msgSeq = nextMsgSeq(params.messageId ?? params.eventId);
   const body = params.markdown ? {
     markdown: { content: params.content },
     msg_type: 2,
@@ -7047,6 +7178,8 @@ function buildMessageBody(params) {
   };
   if (params.messageId) {
     body.msg_id = params.messageId;
+  } else if (params.eventId) {
+    body.event_id = params.eventId;
   }
   return body;
 }
@@ -7054,6 +7187,7 @@ async function sendC2CMessage(params) {
   const body = buildMessageBody({
     content: params.content,
     messageId: params.messageId,
+    eventId: params.eventId,
     markdown: params.markdown
   });
   return apiPost(params.accessToken, `/v2/users/${params.openid}/messages`, body, {
@@ -7064,10 +7198,10 @@ async function sendGroupMessage(params) {
   const body = buildMessageBody({
     content: params.content,
     messageId: params.messageId,
+    eventId: params.eventId,
     markdown: params.markdown
   });
-  const groupOpenidLower = params.groupOpenid.toLowerCase();
-  return apiPost(params.accessToken, `/v2/groups/${groupOpenidLower}/messages`, body, {
+  return apiPost(params.accessToken, `/v2/groups/${params.groupOpenid}/messages`, body, {
     timeout: 15e3
   });
 }
@@ -7076,13 +7210,12 @@ async function sendChannelMessage(params) {
   if (params.messageId) {
     body.msg_id = params.messageId;
   }
-  const channelIdLower = params.channelId.toLowerCase();
-  return apiPost(params.accessToken, `/channels/${channelIdLower}/messages`, body, {
+  return apiPost(params.accessToken, `/channels/${params.channelId}/messages`, body, {
     timeout: 15e3
   });
 }
 async function sendC2CInputNotify(params) {
-  const msgSeq = nextMsgSeq(params.messageId);
+  const msgSeq = nextMsgSeq(params.messageId ?? params.eventId);
   await apiPost(
     params.accessToken,
     `/v2/users/${params.openid}/messages`,
@@ -7093,14 +7226,15 @@ async function sendC2CInputNotify(params) {
         input_second: params.inputSecond ?? 60
       },
       msg_seq: msgSeq,
-      ...params.messageId ? { msg_id: params.messageId } : {}
+      ...params.messageId ? { msg_id: params.messageId } : params.eventId ? { event_id: params.eventId } : {}
     },
     { timeout: 15e3 }
   );
 }
 async function uploadC2CMedia(params) {
   const body = {
-    file_type: params.fileType
+    file_type: params.fileType,
+    srv_send_msg: params.srvSendMsg ?? false
   };
   if (params.url) {
     body.url = params.url;
@@ -7109,13 +7243,17 @@ async function uploadC2CMedia(params) {
   } else {
     throw new Error("uploadC2CMedia requires url or fileData");
   }
+  if (params.fileType === 4 /* FILE */ && params.fileName?.trim()) {
+    body.file_name = sanitizeUploadFileName(params.fileName);
+  }
   return apiPost(params.accessToken, `/v2/users/${params.openid}/files`, body, {
     timeout: 3e4
   });
 }
 async function uploadGroupMedia(params) {
   const body = {
-    file_type: params.fileType
+    file_type: params.fileType,
+    srv_send_msg: params.srvSendMsg ?? false
   };
   if (params.url) {
     body.url = params.url;
@@ -7124,12 +7262,15 @@ async function uploadGroupMedia(params) {
   } else {
     throw new Error("uploadGroupMedia requires url or fileData");
   }
+  if (params.fileType === 4 /* FILE */ && params.fileName?.trim()) {
+    body.file_name = sanitizeUploadFileName(params.fileName);
+  }
   return apiPost(params.accessToken, `/v2/groups/${params.groupOpenid}/files`, body, {
     timeout: 3e4
   });
 }
 async function sendC2CMediaMessage(params) {
-  const msgSeq = nextMsgSeq(params.messageId);
+  const msgSeq = nextMsgSeq(params.messageId ?? params.eventId);
   return apiPost(
     params.accessToken,
     `/v2/users/${params.openid}/messages`,
@@ -7138,13 +7279,13 @@ async function sendC2CMediaMessage(params) {
       media: { file_info: params.fileInfo },
       msg_seq: msgSeq,
       ...params.content ? { content: params.content } : {},
-      ...params.messageId ? { msg_id: params.messageId } : {}
+      ...params.messageId ? { msg_id: params.messageId } : params.eventId ? { event_id: params.eventId } : {}
     },
     { timeout: 15e3 }
   );
 }
 async function sendGroupMediaMessage(params) {
-  const msgSeq = nextMsgSeq(params.messageId);
+  const msgSeq = nextMsgSeq(params.messageId ?? params.eventId);
   return apiPost(
     params.accessToken,
     `/v2/groups/${params.groupOpenid}/messages`,
@@ -7153,12 +7294,11 @@ async function sendGroupMediaMessage(params) {
       media: { file_info: params.fileInfo },
       msg_seq: msgSeq,
       ...params.content ? { content: params.content } : {},
-      ...params.messageId ? { msg_id: params.messageId } : {}
+      ...params.messageId ? { msg_id: params.messageId } : params.eventId ? { event_id: params.eventId } : {}
     },
     { timeout: 15e3 }
   );
 }
-var QQBOT_UNSUPPORTED_FILE_TYPE_MESSAGE = "QQ official C2C/group media API does not support generic files (file_type=4, e.g. PDF). Images and other supported media types are unaffected.";
 var require2 = createRequire(import.meta.url);
 function resolveQQBotMediaFileType(fileName) {
   const mediaType = detectMediaType(fileName);
@@ -7174,7 +7314,7 @@ function resolveQQBotMediaFileType(fileName) {
   }
 }
 async function uploadQQBotFile(params) {
-  const { accessToken, target, fileType, url, fileData } = params;
+  const { accessToken, target, fileType, url, fileData, fileName } = params;
   if (!url && !fileData) {
     throw new Error("QQBot file upload requires url or fileData");
   }
@@ -7182,11 +7322,15 @@ async function uploadQQBotFile(params) {
     accessToken,
     groupOpenid: target.id,
     fileType,
+    srvSendMsg: false,
+    ...fileName ? { fileName } : {},
     ...url ? { url } : { fileData }
   }) : await uploadC2CMedia({
     accessToken,
     openid: target.id,
     fileType,
+    srvSendMsg: false,
+    ...fileName ? { fileName } : {},
     ...url ? { url } : { fileData }
   });
   if (!upload.file_info) {
@@ -7194,14 +7338,29 @@ async function uploadQQBotFile(params) {
   }
   return upload.file_info;
 }
+function deriveUploadFileName(source) {
+  const trimmed = source.trim();
+  if (!trimmed) return void 0;
+  if (isHttpUrl(trimmed)) {
+    try {
+      const pathname = new URL(trimmed).pathname;
+      const base2 = path2.posix.basename(pathname);
+      return base2 && base2 !== "/" ? base2 : void 0;
+    } catch {
+      return void 0;
+    }
+  }
+  const base = path2.basename(trimmed);
+  return base || void 0;
+}
 async function convertAudioToSilk(audioPath) {
   const ffmpegPath = require2("ffmpeg-static");
   if (!ffmpegPath) {
     throw new Error("ffmpeg-static not found");
   }
   const silkWasm = require2("silk-wasm");
-  const tmpDir = fs3.mkdtempSync(path.join(os.tmpdir(), "qqbot-silk-"));
-  const pcmPath = path.join(tmpDir, "audio.pcm");
+  const tmpDir = fs3.mkdtempSync(path2.join(os.tmpdir(), "qqbot-silk-"));
+  const pcmPath = path2.join(tmpDir, "audio.pcm");
   try {
     execFileSync(
       ffmpegPath,
@@ -7219,31 +7378,33 @@ async function convertAudioToSilk(audioPath) {
   }
 }
 async function sendFileQQBot(params) {
-  const { cfg, target, mediaUrl, messageId } = params;
-  if (!cfg.appId || !cfg.clientSecret) {
+  const { cfg, target, mediaUrl, text, messageId, eventId } = params;
+  const credentials = resolveQQBotCredentials(cfg);
+  if (!credentials) {
     throw new Error("QQBot not configured (missing appId/clientSecret)");
   }
   const src = stripTitleFromUrl(mediaUrl);
   const fileType = resolveQQBotMediaFileType(src);
-  if (fileType === 4 /* FILE */) {
-    throw new Error(QQBOT_UNSUPPORTED_FILE_TYPE_MESSAGE);
-  }
   const sourceIsHttp = isHttpUrl(src);
   const maxFileSizeMB = cfg.maxFileSizeMB ?? 100;
   const mediaTimeoutMs = cfg.mediaTimeoutMs ?? 3e4;
   const maxSizeBytes = Math.floor(maxFileSizeMB * 1024 * 1024);
-  const accessToken = await getAccessToken(cfg.appId, cfg.clientSecret);
+  const messageText = text?.trim() ? text.trim() : void 0;
+  const accessToken = await getAccessToken(credentials.appId, credentials.clientSecret);
   let fileInfo;
   try {
     if (sourceIsHttp) {
+      const fileName = fileType === 4 /* FILE */ ? deriveUploadFileName(src) : void 0;
       fileInfo = await uploadQQBotFile({
         accessToken,
         target,
         fileType,
-        url: src
+        url: src,
+        ...fileName ? { fileName } : {}
       });
     } else {
       let buffer;
+      let fileName = fileType === 4 /* FILE */ ? deriveUploadFileName(src) : void 0;
       if (fileType === 3 /* VOICE */) {
         try {
           const silkData = await convertAudioToSilk(src);
@@ -7261,12 +7422,16 @@ async function sendFileQQBot(params) {
           maxSize: maxSizeBytes
         });
         buffer = local.buffer;
+        if (fileType === 4 /* FILE */) {
+          fileName = local.fileName || fileName;
+        }
       }
       fileInfo = await uploadQQBotFile({
         accessToken,
         target,
         fileType,
-        fileData: buffer.toString("base64")
+        fileData: buffer.toString("base64"),
+        ...fileName ? { fileName } : {}
       });
     }
   } catch (err) {
@@ -7279,10 +7444,12 @@ async function sendFileQQBot(params) {
         accessToken,
         groupOpenid: target.id,
         fileInfo,
-        messageId
+        ...messageText ? { content: messageText } : {},
+        ...messageId ? { messageId } : {},
+        ...eventId ? { eventId } : {}
       });
     } catch (err) {
-      const message = err instanceof Error ? err.message : String(err);
+      const message = formatQQBotError(err);
       throw new Error(`QQBot group media send failed: ${message}`);
     }
   }
@@ -7291,10 +7458,12 @@ async function sendFileQQBot(params) {
       accessToken,
       openid: target.id,
       fileInfo,
-      messageId
+      ...messageText ? { content: messageText } : {},
+      ...messageId ? { messageId } : {},
+      ...eventId ? { eventId } : {}
     });
   } catch (err) {
-    const message = err instanceof Error ? err.message : String(err);
+    const message = formatQQBotError(err);
     throw new Error(`QQBot C2C media send failed: ${message}`);
   }
 }
@@ -7355,28 +7524,123 @@ function parseTarget(to) {
   }
   return { kind: "c2c", id: raw };
 }
+function shortId(value) {
+  const text = String(value ?? "").trim();
+  if (!text) return "-";
+  if (text.length <= 12) return text;
+  return `${text.slice(0, 6)}...${text.slice(-4)}`;
+}
+function summarizeError(err) {
+  if (err instanceof HttpError) {
+    const body = err.body?.trim();
+    return body ? `${err.message} - ${body}` : err.message;
+  }
+  return err instanceof Error ? err.message : String(err);
+}
+function logEventIdFallback(params) {
+  const accountLabel = params.accountId?.trim() || DEFAULT_ACCOUNT_ID;
+  const detail = `[qqbot] event_id-fallback phase=${params.phase} action=${params.action} accountId=${accountLabel} target=${params.targetKind}:${shortId(params.targetId)} msg_id=${shortId(params.messageId)} event_id=${shortId(params.eventId)}` + (params.reason ? ` reason=${params.reason}` : "");
+  if (params.phase === "failed") {
+    console.error(detail);
+    return;
+  }
+  if (params.phase === "start") {
+    console.warn(detail);
+    return;
+  }
+  console.info(detail);
+}
+function shouldRetryWithEventId(err) {
+  const status = err instanceof HttpError ? err.status : void 0;
+  let body = "";
+  if (err instanceof HttpError) {
+    body = err.body ?? "";
+  } else if (err instanceof Error) {
+    body = err.message;
+  } else {
+    body = String(err);
+  }
+  const text = body.toLowerCase();
+  const mentionsPassiveReply = text.includes("msg_id") || text.includes("\u88AB\u52A8") || text.includes("passive") || text.includes("reply");
+  if (!mentionsPassiveReply && !(typeof status === "number" && status >= 400 && status < 500)) {
+    return false;
+  }
+  return text.includes("expire") || text.includes("invalid") || text.includes("not found") || text.includes("\u8D85\u8FC7") || text.includes("\u8D85\u65F6") || text.includes("\u8FC7\u671F") || text.includes("\u5931\u6548") || text.includes("\u65E0\u6548");
+}
+function shouldSendTextAsFollowupForMedia(mediaUrl) {
+  return detectMediaType(stripTitleFromUrl(mediaUrl)) === "file";
+}
 var qqbotOutbound = {
   deliveryMode: "direct",
   textChunkLimit: 1500,
   chunkerMode: "markdown",
   sendText: async (params) => {
-    const { cfg, to, text, replyToId, accountId } = params;
+    const { cfg, to, text, replyToId, replyEventId, accountId } = params;
     const qqCfg = mergeQQBotAccountConfig(cfg, accountId ?? DEFAULT_ACCOUNT_ID);
-    if (!qqCfg.appId || !qqCfg.clientSecret) {
+    const credentials = resolveQQBotCredentials(qqCfg);
+    if (!credentials) {
       return { channel: "qqbot", error: "QQBot not configured (missing appId/clientSecret)" };
     }
     const target = parseTarget(to);
-    const accessToken = await getAccessToken(qqCfg.appId, qqCfg.clientSecret);
+    const accessToken = await getAccessToken(credentials.appId, credentials.clientSecret);
     const markdown = qqCfg.markdownSupport ?? true;
+    const groupMarkdown = false;
     try {
       if (target.kind === "group") {
-        const result2 = await sendGroupMessage({
-          accessToken,
-          groupOpenid: target.id,
-          content: text,
-          messageId: replyToId,
-          markdown
-        });
+        let result2;
+        try {
+          result2 = await sendGroupMessage({
+            accessToken,
+            groupOpenid: target.id,
+            content: text,
+            messageId: replyToId,
+            markdown: groupMarkdown
+          });
+        } catch (err) {
+          if (!replyToId || !replyEventId || !shouldRetryWithEventId(err)) {
+            throw err;
+          }
+          logEventIdFallback({
+            phase: "start",
+            action: "text",
+            accountId,
+            targetKind: target.kind,
+            targetId: target.id,
+            messageId: replyToId,
+            eventId: replyEventId,
+            reason: summarizeError(err)
+          });
+          try {
+            result2 = await sendGroupMessage({
+              accessToken,
+              groupOpenid: target.id,
+              content: text,
+              eventId: replyEventId,
+              markdown: groupMarkdown
+            });
+            logEventIdFallback({
+              phase: "success",
+              action: "text",
+              accountId,
+              targetKind: target.kind,
+              targetId: target.id,
+              messageId: replyToId,
+              eventId: replyEventId
+            });
+          } catch (retryErr) {
+            logEventIdFallback({
+              phase: "failed",
+              action: "text",
+              accountId,
+              targetKind: target.kind,
+              targetId: target.id,
+              messageId: replyToId,
+              eventId: replyEventId,
+              reason: summarizeError(retryErr)
+            });
+            throw retryErr;
+          }
+        }
         return { channel: "qqbot", messageId: result2.id, timestamp: result2.timestamp };
       }
       if (target.kind === "channel") {
@@ -7388,55 +7652,169 @@ var qqbotOutbound = {
         });
         return { channel: "qqbot", messageId: result2.id, timestamp: result2.timestamp };
       }
-      const result = await sendC2CMessage({
-        accessToken,
-        openid: target.id,
-        content: text,
-        messageId: replyToId,
-        markdown
-      });
+      let result;
+      try {
+        result = await sendC2CMessage({
+          accessToken,
+          openid: target.id,
+          content: text,
+          messageId: replyToId,
+          markdown
+        });
+      } catch (err) {
+        if (!replyToId || !replyEventId || !shouldRetryWithEventId(err)) {
+          throw err;
+        }
+        logEventIdFallback({
+          phase: "start",
+          action: "text",
+          accountId,
+          targetKind: target.kind,
+          targetId: target.id,
+          messageId: replyToId,
+          eventId: replyEventId,
+          reason: summarizeError(err)
+        });
+        try {
+          result = await sendC2CMessage({
+            accessToken,
+            openid: target.id,
+            content: text,
+            eventId: replyEventId,
+            markdown
+          });
+          logEventIdFallback({
+            phase: "success",
+            action: "text",
+            accountId,
+            targetKind: target.kind,
+            targetId: target.id,
+            messageId: replyToId,
+            eventId: replyEventId
+          });
+        } catch (retryErr) {
+          logEventIdFallback({
+            phase: "failed",
+            action: "text",
+            accountId,
+            targetKind: target.kind,
+            targetId: target.id,
+            messageId: replyToId,
+            eventId: replyEventId,
+            reason: summarizeError(retryErr)
+          });
+          throw retryErr;
+        }
+      }
       return { channel: "qqbot", messageId: result.id, timestamp: result.timestamp };
     } catch (err) {
-      const message = err instanceof Error ? err.message : String(err);
+      const message = summarizeError(err);
       return { channel: "qqbot", error: message };
     }
   },
   sendMedia: async (params) => {
-    const { cfg, to, mediaUrl, text, replyToId, accountId } = params;
+    const { cfg, to, mediaUrl, text, replyToId, replyEventId, accountId } = params;
     if (!mediaUrl) {
       const fallbackText = text?.trim() ?? "";
       if (!fallbackText) {
         return { channel: "qqbot", error: "mediaUrl is required for sendMedia" };
       }
-      return qqbotOutbound.sendText({ cfg, to, text: fallbackText, replyToId, accountId });
+      return qqbotOutbound.sendText({ cfg, to, text: fallbackText, replyToId, replyEventId, accountId });
     }
     const qqCfg = mergeQQBotAccountConfig(cfg, accountId ?? DEFAULT_ACCOUNT_ID);
-    if (!qqCfg.appId || !qqCfg.clientSecret) {
+    if (!resolveQQBotCredentials(qqCfg)) {
       return { channel: "qqbot", error: "QQBot not configured (missing appId/clientSecret)" };
     }
     const target = parseTarget(to);
+    const trimmedText = text?.trim() ? text.trim() : void 0;
+    const sendTextAsFollowup = trimmedText ? shouldSendTextAsFollowupForMedia(mediaUrl) : false;
     if (target.kind === "channel") {
-      const fallbackText = text?.trim() ? `${text}
+      const fallbackText = trimmedText ? `${trimmedText}
 ${mediaUrl}` : mediaUrl;
-      return qqbotOutbound.sendText({ cfg, to, text: fallbackText, replyToId });
+      return qqbotOutbound.sendText({ cfg, to, text: fallbackText, replyToId, replyEventId, accountId });
     }
     try {
-      const result = await sendFileQQBot({
-        cfg: qqCfg,
-        target: { kind: target.kind, id: target.id },
-        mediaUrl,
-        messageId: replyToId
-      });
+      let result;
+      try {
+        result = await sendFileQQBot({
+          cfg: qqCfg,
+          target: { kind: target.kind, id: target.id },
+          mediaUrl,
+          text: sendTextAsFollowup ? void 0 : trimmedText,
+          messageId: replyToId
+        });
+      } catch (err) {
+        if (!replyToId || !replyEventId || !shouldRetryWithEventId(err)) {
+          throw err;
+        }
+        logEventIdFallback({
+          phase: "start",
+          action: "media",
+          accountId,
+          targetKind: target.kind,
+          targetId: target.id,
+          messageId: replyToId,
+          eventId: replyEventId,
+          reason: summarizeError(err)
+        });
+        try {
+          result = await sendFileQQBot({
+            cfg: qqCfg,
+            target: { kind: target.kind, id: target.id },
+            mediaUrl,
+            text: sendTextAsFollowup ? void 0 : trimmedText,
+            eventId: replyEventId
+          });
+          logEventIdFallback({
+            phase: "success",
+            action: "media",
+            accountId,
+            targetKind: target.kind,
+            targetId: target.id,
+            messageId: replyToId,
+            eventId: replyEventId
+          });
+        } catch (retryErr) {
+          logEventIdFallback({
+            phase: "failed",
+            action: "media",
+            accountId,
+            targetKind: target.kind,
+            targetId: target.id,
+            messageId: replyToId,
+            eventId: replyEventId,
+            reason: summarizeError(retryErr)
+          });
+          throw retryErr;
+        }
+      }
+      if (sendTextAsFollowup && trimmedText) {
+        const textResult = await qqbotOutbound.sendText({
+          cfg,
+          to,
+          text: trimmedText,
+          replyToId,
+          replyEventId,
+          accountId
+        });
+        if (textResult.error) {
+          return {
+            channel: "qqbot",
+            error: `QQBot follow-up text send failed after media delivery: ${textResult.error}`
+          };
+        }
+      }
       return { channel: "qqbot", messageId: result.id, timestamp: result.timestamp };
     } catch (err) {
-      const message = err instanceof Error ? err.message : String(err);
+      const message = summarizeError(err);
       return { channel: "qqbot", error: message };
     }
   },
   sendTyping: async (params) => {
-    const { cfg, to, replyToId, inputSecond, accountId } = params;
+    const { cfg, to, replyToId, replyEventId, inputSecond, accountId } = params;
     const qqCfg = mergeQQBotAccountConfig(cfg, accountId ?? DEFAULT_ACCOUNT_ID);
-    if (!qqCfg.appId || !qqCfg.clientSecret) {
+    const credentials = resolveQQBotCredentials(qqCfg);
+    if (!credentials) {
       return { channel: "qqbot", error: "QQBot not configured (missing appId/clientSecret)" };
     }
     const target = parseTarget(to);
@@ -7444,16 +7822,62 @@ ${mediaUrl}` : mediaUrl;
       return { channel: "qqbot" };
     }
     try {
-      const accessToken = await getAccessToken(qqCfg.appId, qqCfg.clientSecret);
-      await sendC2CInputNotify({
-        accessToken,
-        openid: target.id,
-        messageId: replyToId,
-        inputSecond
-      });
+      const accessToken = await getAccessToken(credentials.appId, credentials.clientSecret);
+      try {
+        await sendC2CInputNotify({
+          accessToken,
+          openid: target.id,
+          messageId: replyToId,
+          eventId: !replyToId ? replyEventId : void 0,
+          inputSecond
+        });
+      } catch (err) {
+        if (!replyToId || !replyEventId || !shouldRetryWithEventId(err)) {
+          throw err;
+        }
+        logEventIdFallback({
+          phase: "start",
+          action: "typing",
+          accountId,
+          targetKind: target.kind,
+          targetId: target.id,
+          messageId: replyToId,
+          eventId: replyEventId,
+          reason: summarizeError(err)
+        });
+        try {
+          await sendC2CInputNotify({
+            accessToken,
+            openid: target.id,
+            eventId: replyEventId,
+            inputSecond
+          });
+          logEventIdFallback({
+            phase: "success",
+            action: "typing",
+            accountId,
+            targetKind: target.kind,
+            targetId: target.id,
+            messageId: replyToId,
+            eventId: replyEventId
+          });
+        } catch (retryErr) {
+          logEventIdFallback({
+            phase: "failed",
+            action: "typing",
+            accountId,
+            targetKind: target.kind,
+            targetId: target.id,
+            messageId: replyToId,
+            eventId: replyEventId,
+            reason: summarizeError(retryErr)
+          });
+          throw retryErr;
+        }
+      }
       return { channel: "qqbot" };
     } catch (err) {
-      const message = err instanceof Error ? err.message : String(err);
+      const message = summarizeError(err);
       return { channel: "qqbot", error: message };
     }
   }
@@ -7523,9 +7947,49 @@ function parseTextWithAttachments(payload) {
     attachments
   };
 }
+function resolveEventId(payload, fallbackEventId) {
+  return toString(payload.event_id) ?? toString(payload.eventId) ?? toString(fallbackEventId);
+}
 var VOICE_ASR_FALLBACK_TEXT = "\u5F53\u524D\u8BED\u97F3\u529F\u80FD\u672A\u542F\u52A8\u6216\u8BC6\u522B\u5931\u8D25\uFF0C\u8BF7\u7A0D\u540E\u91CD\u8BD5\u3002";
 var VOICE_EXTENSIONS = [".silk", ".amr", ".mp3", ".wav", ".ogg", ".m4a", ".aac", ".speex"];
 var VOICE_ASR_ERROR_MAX_LENGTH = 500;
+var LONG_TASK_NOTICE_TEXT = "\u4EFB\u52A1\u5904\u7406\u65F6\u95F4\u8F83\u957F\uFF0C\u8BF7\u7A0D\u7B49\uFF0C\u6211\u8FD8\u5728\u7EE7\u7EED\u5904\u7406\u3002";
+var DEFAULT_LONG_TASK_NOTICE_DELAY_MS = 3e4;
+var QQ_GROUP_NO_REPLY_FALLBACK_TEXT = "\u6211\u5728\u3002\u4F60\u53EF\u4EE5\u76F4\u63A5\u8BF4\u5177\u4F53\u4E00\u70B9\u3002";
+function startLongTaskNoticeTimer(params) {
+  const { delayMs, logger, sendNotice } = params;
+  let completed = false;
+  let timer = null;
+  const clear = () => {
+    if (!timer) return;
+    clearTimeout(timer);
+    timer = null;
+  };
+  if (delayMs > 0) {
+    timer = setTimeout(() => {
+      if (completed) return;
+      completed = true;
+      timer = null;
+      void sendNotice().catch((err) => {
+        logger.warn(`send long-task notice failed: ${String(err)}`);
+      });
+    }, delayMs);
+    timer.unref?.();
+  } else {
+    completed = true;
+  }
+  return {
+    markReplyDelivered: () => {
+      if (completed) return;
+      completed = true;
+      clear();
+    },
+    dispose: () => {
+      completed = true;
+      clear();
+    }
+  };
+}
 function isHttpUrl2(value) {
   return /^https?:\/\//i.test(value);
 }
@@ -7591,6 +8055,8 @@ async function resolveInboundAttachmentsForAgent(params) {
   const maxFileSizeMB = qqCfg.maxFileSizeMB ?? 100;
   const maxSize = Math.floor(maxFileSizeMB * 1024 * 1024);
   const asrCredentials = resolveQQBotASRCredentials(qqCfg);
+  const inboundMediaDir = resolveInboundMediaDir(qqCfg);
+  const inboundMediaTempDir = resolveInboundMediaTempDir();
   const resolved = [];
   let hasVoiceAttachment = false;
   let hasVoiceTranscript = false;
@@ -7603,11 +8069,19 @@ async function resolveInboundAttachmentsForAgent(params) {
           timeout,
           maxSize,
           sourceFileName: att.filename,
-          tempPrefix: "qqbot-inbound"
+          tempPrefix: "qqbot-inbound",
+          tempDir: inboundMediaTempDir
+        });
+        const finalPath = await finalizeInboundMediaFile({
+          filePath: downloaded.path,
+          tempDir: inboundMediaTempDir,
+          inboundDir: inboundMediaDir
         });
-        next.localImagePath = downloaded.path;
-        logger.info(`inbound image cached: ${downloaded.path}`);
-        scheduleTempCleanup(downloaded.path);
+        next.localImagePath = finalPath;
+        logger.info(`inbound image cached: ${finalPath}`);
+        if (finalPath === downloaded.path) {
+          scheduleTempCleanup(downloaded.path);
+        }
       } catch (err) {
         logger.warn(`failed to download inbound attachment: ${String(err)}`);
       }
@@ -7707,10 +8181,11 @@ function resolveInboundLogContent(params) {
 function sanitizeInboundLogText(text) {
   return text.replace(/\r?\n/g, "\\n");
 }
-function parseC2CMessage(data) {
+function parseC2CMessage(data, fallbackEventId) {
   const payload = data;
   const { text, attachments } = parseTextWithAttachments(payload);
   const id = toString(payload.id);
+  const eventId = resolveEventId(payload, fallbackEventId);
   const timestamp = toNumber2(payload.timestamp) ?? Date.now();
   const author = payload.author ?? {};
   const senderId = toString(author.user_openid);
@@ -7723,14 +8198,16 @@ function parseC2CMessage(data) {
     content: text,
     attachments: attachments.length > 0 ? attachments : void 0,
     messageId: id,
+    eventId,
     timestamp,
     mentionedBot: false
   };
 }
-function parseGroupMessage(data) {
+function parseGroupMessage(data, fallbackEventId) {
   const payload = data;
   const { text, attachments } = parseTextWithAttachments(payload);
   const id = toString(payload.id);
+  const eventId = resolveEventId(payload, fallbackEventId);
   const timestamp = toNumber2(payload.timestamp) ?? Date.now();
   const groupOpenid = toString(payload.group_openid);
   const author = payload.author ?? {};
@@ -7743,15 +8220,17 @@ function parseGroupMessage(data) {
     content: text,
     attachments: attachments.length > 0 ? attachments : void 0,
     messageId: id,
+    eventId,
     timestamp,
     groupOpenid,
     mentionedBot: true
   };
 }
-function parseChannelMessage(data) {
+function parseChannelMessage(data, fallbackEventId) {
   const payload = data;
   const { text, attachments } = parseTextWithAttachments(payload);
   const id = toString(payload.id);
+  const eventId = resolveEventId(payload, fallbackEventId);
   const timestamp = toNumber2(payload.timestamp) ?? Date.now();
   const channelId = toString(payload.channel_id);
   const guildId = toString(payload.guild_id);
@@ -7765,16 +8244,18 @@ function parseChannelMessage(data) {
     content: text,
     attachments: attachments.length > 0 ? attachments : void 0,
     messageId: id,
+    eventId,
     timestamp,
     channelId,
     guildId,
     mentionedBot: true
   };
 }
-function parseDirectMessage(data) {
+function parseDirectMessage(data, fallbackEventId) {
   const payload = data;
   const { text, attachments } = parseTextWithAttachments(payload);
   const id = toString(payload.id);
+  const eventId = resolveEventId(payload, fallbackEventId);
   const timestamp = toNumber2(payload.timestamp) ?? Date.now();
   const guildId = toString(payload.guild_id);
   const author = payload.author ?? {};
@@ -7787,39 +8268,42 @@ function parseDirectMessage(data) {
     content: text,
     attachments: attachments.length > 0 ? attachments : void 0,
     messageId: id,
+    eventId,
     timestamp,
     guildId,
     mentionedBot: false
   };
 }
-function resolveInbound(eventType, data) {
+function resolveInbound(eventType, data, fallbackEventId) {
   switch (eventType) {
     case "C2C_MESSAGE_CREATE":
-      return parseC2CMessage(data);
+      return parseC2CMessage(data, fallbackEventId);
     case "GROUP_AT_MESSAGE_CREATE":
-      return parseGroupMessage(data);
+      return parseGroupMessage(data, fallbackEventId);
     case "AT_MESSAGE_CREATE":
-      return parseChannelMessage(data);
+      return parseChannelMessage(data, fallbackEventId);
     case "DIRECT_MESSAGE_CREATE":
-      return parseDirectMessage(data);
+      return parseDirectMessage(data, fallbackEventId);
     default:
       return null;
   }
 }
 function resolveChatTarget(event) {
   if (event.type === "group") {
-    const group = (event.groupOpenid ?? "").toLowerCase();
+    const group = event.groupOpenid ?? "";
+    const normalizedGroup = group.toLowerCase();
     return {
       to: `group:${group}`,
-      peerId: `group:${group}`,
+      peerId: `group:${normalizedGroup}`,
       peerKind: "group"
     };
   }
   if (event.type === "channel") {
-    const channel = (event.channelId ?? "").toLowerCase();
+    const channel = event.channelId ?? "";
+    const normalizedChannel = channel.toLowerCase();
     return {
       to: `channel:${channel}`,
-      peerId: `channel:${channel}`,
+      peerId: `channel:${normalizedChannel}`,
       peerKind: "group"
     };
   }
@@ -7856,7 +8340,7 @@ function extractLocalMediaFromText(params) {
     parseBarePaths: true,
     parseMarkdownLinks: true
   });
-  const mediaUrls = result.all.filter((m) => m.isLocal && m.localPath).map((m) => m.localPath);
+  const mediaUrls = result.all.filter((m) => m.isLocal && typeof m.localPath === "string").filter((m) => m.type !== "file").map((m) => m.localPath);
   return { text: result.text, mediaUrls };
 }
 function extractMediaLinesFromText(params) {
@@ -7880,24 +8364,16 @@ function extractMediaLinesFromText(params) {
   const mediaUrls = result.all.map((m) => m.isLocal ? m.localPath ?? m.source : m.source).filter((m) => typeof m === "string" && m.trim().length > 0);
   return { text: result.text, mediaUrls };
 }
-function isOfficialQQFileSendLimit(errorMessage) {
-  const text = (errorMessage ?? "").toLowerCase();
-  if (!text) return false;
-  return text.includes("file_type=4") || text.includes("generic files") || text.includes("not support generic files") || text.includes("\u6682\u4E0D\u652F\u6301\u901A\u7528\u6587\u4EF6");
-}
-function buildMediaFallbackText(mediaUrl, errorMessage) {
-  if (isOfficialQQFileSendLimit(errorMessage)) {
-    return [
-      "\u8BF4\u660E\uFF1A\u6839\u636E QQ \u5B98\u65B9\u63A5\u53E3\u89C4\u8303\uFF0C\u5F53\u524D C2C/\u7FA4\u804A\u6682\u4E0D\u652F\u6301\u76F4\u63A5\u53D1\u9001 PDF/\u6587\u6863\u7B49\u901A\u7528\u6587\u4EF6\uFF08file_type=4\uFF09\u3002",
-      "\u8FD9\u5C5E\u4E8E\u5E73\u53F0\u9650\u5236\uFF0C\u4E0D\u662F\u63D2\u4EF6\u7F3A\u9677\uFF1B\u56FE\u7247\u7B49\u5A92\u4F53\u4ECD\u53EF\u6B63\u5E38\u53D1\u9001\u3002",
-      `\u5DF2\u4E3A\u4F60\u9644\u4E0A\u6587\u4EF6\u94FE\u63A5\uFF1A${mediaUrl}`
-    ].join("\n");
+function buildMediaFallbackText(mediaUrl) {
+  if (!/^https?:\/\//i.test(mediaUrl)) {
+    return void 0;
   }
   return `\u{1F4CE} ${mediaUrl}`;
 }
 var THINK_BLOCK_RE = /<think\b[^>]*>[\s\S]*?<\/think>/gi;
 var FINAL_BLOCK_RE = /<final\b[^>]*>([\s\S]*?)<\/final>/gi;
 var RAW_THINK_OR_FINAL_TAG_RE = /<\/?(?:think|final)\b[^>]*>/gi;
+var FILE_PLACEHOLDER_RE = /\[文件:\s*[^\]\n]+\]/g;
 var DIRECTIVE_TAG_RE = /\[\[\s*(?:reply_to_current|reply_to\s*:[^\]]+|audio_as_voice|tts(?::text)?|\/tts(?::text)?)\s*\]\]/gi;
 var VOICE_EMOTION_TAG_RE = /\[(?:happy|excited|calm|sad|angry|frustrated|softly|whispers|loudly|cheerfully|deadpan|sarcastically|laughs|sighs|chuckles|gasps|pause|slowly|rushed|hesitates|playfully|warmly|gently)\]/gi;
 var TTS_LIKE_RAW_TEXT_RE = /\[\[\s*(?:tts(?::text)?|\/tts(?::text)?|audio_as_voice|reply_to_current|reply_to\s*:)/i;
@@ -7915,6 +8391,7 @@ function sanitizeQQBotOutboundText(rawText) {
   }
   next = next.replace(THINK_BLOCK_RE, "");
   next = next.replace(RAW_THINK_OR_FINAL_TAG_RE, "");
+  next = next.replace(FILE_PLACEHOLDER_RE, " ");
   next = next.replace(DIRECTIVE_TAG_RE, " ");
   next = next.replace(VOICE_EMOTION_TAG_RE, " ");
   next = next.replace(/[ \t]+\n/g, "\n");
@@ -7932,6 +8409,20 @@ function shouldSuppressQQBotTextWhenMediaPresent(rawText, sanitizedText) {
   if (!sanitizedText) return true;
   return !/[A-Za-z0-9\u4e00-\u9fff]/.test(sanitizedText);
 }
+function resolveQQBotNoReplyFallback(params) {
+  const { inbound, replyDelivered } = params;
+  if (replyDelivered) return void 0;
+  if (!inbound.mentionedBot) return void 0;
+  if (inbound.type !== "group" && inbound.type !== "channel") return void 0;
+  const hasVisibleInput = inbound.content.trim().length > 0 || (inbound.attachments?.length ?? 0) > 0;
+  if (!hasVisibleInput) return void 0;
+  return QQ_GROUP_NO_REPLY_FALLBACK_TEXT;
+}
+function isQQBotGroupMessageInterfaceBlocked(errorMessage) {
+  const text = (errorMessage ?? "").toLowerCase();
+  if (!text) return false;
+  return text.includes("304103") || text.includes("\u7FA4\u5185\u6D88\u606F\u63A5\u53E3\u88AB\u4E34\u65F6\u5C01\u7981") || text.includes("\u673A\u5668\u4EBA\u5B58\u5728\u5B89\u5168\u98CE\u9669");
+}
 function evaluateReplyFinalOnlyDelivery(params) {
   const { replyFinalOnly, kind, hasMedia } = params;
   if (!replyFinalOnly || !kind || kind === "final") {
@@ -7943,27 +8434,38 @@ function evaluateReplyFinalOnlyDelivery(params) {
   return { skipDelivery: true, suppressText: false };
 }
 async function sendQQBotMediaWithFallback(params) {
-  const { qqCfg, to, mediaQueue, replyToId, logger } = params;
+  const { qqCfg, to, mediaQueue, replyToId, replyEventId, logger, onDelivered, onError } = params;
   const outbound = params.outbound ?? qqbotOutbound;
   for (const mediaUrl of mediaQueue) {
     const result = await outbound.sendMedia({
       cfg: { channels: { qqbot: qqCfg } },
       to,
       mediaUrl,
-      replyToId
+      replyToId,
+      replyEventId
     });
     if (result.error) {
       logger.error(`sendMedia failed: ${result.error}`);
-      const fallback = buildMediaFallbackText(mediaUrl, result.error);
+      onError?.(result.error);
+      const fallback = buildMediaFallbackText(mediaUrl);
+      if (!fallback) {
+        continue;
+      }
       const fallbackResult = await outbound.sendText({
         cfg: { channels: { qqbot: qqCfg } },
         to,
         text: fallback,
-        replyToId
+        replyToId,
+        replyEventId
       });
       if (fallbackResult.error) {
         logger.error(`sendText fallback failed: ${fallbackResult.error}`);
+        onError?.(fallbackResult.error);
+      } else {
+        onDelivered?.();
       }
+    } else {
+      onDelivered?.();
     }
   }
 }
@@ -8010,6 +8512,7 @@ async function dispatchToAgent(params) {
       cfg: { channels: { qqbot: qqCfg } },
       to: `user:${inbound.c2cOpenid}`,
       replyToId: inbound.messageId,
+      replyEventId: inbound.eventId,
       inputSecond: 60
     });
     if (typing.error) {
@@ -8027,234 +8530,319 @@ async function dispatchToAgent(params) {
     logger.warn("reply API not available");
     return;
   }
-  const sessionApi = runtime2.channel?.session;
-  const storePath = sessionApi?.resolveStorePath?.(
-    cfg?.session?.store,
-    { agentId: route.agentId }
-  );
-  const envelopeOptions = replyApi.resolveEnvelopeFormatOptions?.(cfg);
-  const previousTimestamp = storePath && sessionApi?.readSessionUpdatedAt ? sessionApi.readSessionUpdatedAt({ storePath, sessionKey: route.sessionKey }) : null;
-  const resolvedAttachmentResult = await resolveInboundAttachmentsForAgent({
-    attachments: inbound.attachments,
-    qqCfg,
-    logger
-  });
-  if (qqCfg.asr?.enabled && resolvedAttachmentResult.hasVoiceAttachment && !resolvedAttachmentResult.hasVoiceTranscript) {
-    const fallback = await qqbotOutbound.sendText({
-      cfg: { channels: { qqbot: qqCfg } },
-      to: target.to,
-      text: buildVoiceASRFallbackReply(resolvedAttachmentResult.asrErrorMessage),
-      replyToId: inbound.messageId
-    });
-    if (fallback.error) {
-      logger.error(`sendText ASR fallback failed: ${fallback.error}`);
+  let replyDelivered = false;
+  let groupMessageInterfaceBlocked = false;
+  const markReplyDelivered = () => {
+    replyDelivered = true;
+    longTaskNotice.markReplyDelivered();
+  };
+  const markGroupMessageInterfaceBlocked = (error) => {
+    if (!isQQBotGroupMessageInterfaceBlocked(error)) return;
+    if (!groupMessageInterfaceBlocked) {
+      logger.warn("QQ group message interface is temporarily blocked by platform; suppressing extra sends");
     }
-    return;
-  }
-  const resolvedAttachments = resolvedAttachmentResult.attachments;
-  const localImageCount = resolvedAttachments.filter((item) => Boolean(item.localImagePath)).length;
-  if (localImageCount > 0) {
-    logger.info(`prepared ${localImageCount} local image attachment(s) for agent`);
-  }
-  const rawBody = buildInboundContentWithAttachments({
-    content: inbound.content,
-    attachments: resolvedAttachments
-  });
-  const envelopeFrom = resolveEnvelopeFrom(inbound);
-  const inboundBody = replyApi.formatInboundEnvelope ? replyApi.formatInboundEnvelope({
-    channel: "QQ",
-    from: envelopeFrom,
-    body: rawBody,
-    timestamp: inbound.timestamp,
-    previousTimestamp: previousTimestamp ?? void 0,
-    chatType: inbound.type === "direct" ? "direct" : "group",
-    senderLabel: inbound.senderName ?? inbound.senderId,
-    sender: { id: inbound.senderId, name: inbound.senderName ?? void 0 },
-    envelope: envelopeOptions
-  }) : replyApi.formatAgentEnvelope ? replyApi.formatAgentEnvelope({
-    channel: "QQ",
-    from: envelopeFrom,
-    timestamp: inbound.timestamp,
-    previousTimestamp: previousTimestamp ?? void 0,
-    envelope: envelopeOptions,
-    body: rawBody
-  }) : rawBody;
-  const inboundCtx = buildInboundContext({
-    event: inbound,
-    sessionKey: route.sessionKey,
-    accountId: route.accountId ?? accountId,
-    body: inboundBody,
-    rawBody,
-    commandBody: rawBody
-  });
-  const finalizeInboundContext = replyApi?.finalizeInboundContext;
-  const finalCtx = finalizeInboundContext ? finalizeInboundContext(inboundCtx) : inboundCtx;
-  let cronBase = "";
-  if (typeof finalCtx.RawBody === "string" && finalCtx.RawBody) {
-    cronBase = finalCtx.RawBody;
-  } else if (typeof finalCtx.Body === "string" && finalCtx.Body) {
-    cronBase = finalCtx.Body;
-  } else if (typeof finalCtx.CommandBody === "string" && finalCtx.CommandBody) {
-    cronBase = finalCtx.CommandBody;
-  }
-  if (cronBase) {
-    const nextCron = appendCronHiddenPrompt(cronBase);
-    if (nextCron !== cronBase) {
-      finalCtx.BodyForAgent = nextCron;
-    }
-  }
-  if (storePath && sessionApi?.recordInboundSession) {
-    try {
-      const mainSessionKeyRaw = route?.mainSessionKey;
-      const mainSessionKey = typeof mainSessionKeyRaw === "string" && mainSessionKeyRaw.trim() ? mainSessionKeyRaw : void 0;
-      const isGroup = inbound.type === "group" || inbound.type === "channel";
-      const updateLastRoute = !isGroup ? {
-        sessionKey: mainSessionKey ?? route.sessionKey,
-        channel: "qqbot",
-        to: finalCtx.OriginatingTo ?? finalCtx.To ?? `user:${inbound.senderId}`,
-        accountId: route.accountId ?? accountId
-      } : void 0;
-      const recordSessionKey = typeof finalCtx.SessionKey === "string" && finalCtx.SessionKey.trim() ? finalCtx.SessionKey : route.sessionKey;
-      await sessionApi.recordInboundSession({
-        storePath,
-        sessionKey: recordSessionKey,
-        ctx: finalCtx,
-        updateLastRoute,
-        onRecordError: (err) => {
-          logger.warn(`failed to record inbound session: ${String(err)}`);
-        }
+    groupMessageInterfaceBlocked = true;
+  };
+  const longTaskNotice = startLongTaskNoticeTimer({
+    delayMs: qqCfg.longTaskNoticeDelayMs ?? DEFAULT_LONG_TASK_NOTICE_DELAY_MS,
+    logger,
+    sendNotice: async () => {
+      if (groupMessageInterfaceBlocked) return;
+      const result = await qqbotOutbound.sendText({
+        cfg: { channels: { qqbot: qqCfg } },
+        to: target.to,
+        text: LONG_TASK_NOTICE_TEXT,
+        replyToId: inbound.messageId,
+        replyEventId: inbound.eventId
       });
-    } catch (err) {
-      logger.warn(`failed to record inbound session: ${String(err)}`);
+      if (result.error) {
+        logger.warn(`send long-task notice failed: ${result.error}`);
+        markGroupMessageInterfaceBlocked(result.error);
+      } else {
+        replyDelivered = true;
+      }
     }
-  }
-  const textApi = runtime2.channel?.text;
-  const limit = textApi?.resolveTextChunkLimit?.({
-    cfg,
-    channel: "qqbot",
-    defaultLimit: qqCfg.textChunkLimit ?? 1500
-  }) ?? (qqCfg.textChunkLimit ?? 1500);
-  const chunkMode = textApi?.resolveChunkMode?.(cfg, "qqbot");
-  const tableMode = textApi?.resolveMarkdownTableMode?.({
-    cfg,
-    channel: "qqbot",
-    accountId: route.accountId ?? accountId
   });
-  const resolvedTableMode = tableMode ?? "bullets";
-  const chunkText = (text) => {
-    if (textApi?.chunkMarkdownText && limit > 0) {
-      return textApi.chunkMarkdownText(text, limit);
+  const inboundMediaDir = resolveInboundMediaDir(qqCfg);
+  const inboundMediaKeepDays = resolveInboundMediaKeepDays(qqCfg);
+  try {
+    const sessionApi = runtime2.channel?.session;
+    const sessionConfig = cfg?.session;
+    const storePath = sessionApi?.resolveStorePath?.(
+      sessionConfig?.store,
+      { agentId: route.agentId }
+    );
+    const envelopeOptions = replyApi.resolveEnvelopeFormatOptions?.(cfg);
+    const previousTimestamp = storePath && sessionApi?.readSessionUpdatedAt ? sessionApi.readSessionUpdatedAt({ storePath, sessionKey: route.sessionKey }) : null;
+    const resolvedAttachmentResult = await resolveInboundAttachmentsForAgent({
+      attachments: inbound.attachments,
+      qqCfg,
+      logger
+    });
+    if (qqCfg.asr?.enabled && resolvedAttachmentResult.hasVoiceAttachment && !resolvedAttachmentResult.hasVoiceTranscript) {
+      const fallback = await qqbotOutbound.sendText({
+        cfg: { channels: { qqbot: qqCfg } },
+        to: target.to,
+        text: buildVoiceASRFallbackReply(resolvedAttachmentResult.asrErrorMessage),
+        replyToId: inbound.messageId,
+        replyEventId: inbound.eventId
+      });
+      if (fallback.error) {
+        logger.error(`sendText ASR fallback failed: ${fallback.error}`);
+        markGroupMessageInterfaceBlocked(fallback.error);
+      } else {
+        replyDelivered = true;
+      }
+      return;
     }
-    if (textApi?.chunkTextWithMode && limit > 0) {
-      return textApi.chunkTextWithMode(text, limit, chunkMode);
+    const resolvedAttachments = resolvedAttachmentResult.attachments;
+    const localImageCount = resolvedAttachments.filter((item) => Boolean(item.localImagePath)).length;
+    if (localImageCount > 0) {
+      logger.info(`prepared ${localImageCount} local image attachment(s) for agent`);
     }
-    return [text];
-  };
-  const replyFinalOnly = qqCfg.replyFinalOnly ?? false;
-  const deliver = async (payload, info) => {
-    const typed = payload;
-    const mediaLineResult = extractMediaLinesFromText({
-      text: typed?.text ?? "",
-      logger
+    const rawBody = buildInboundContentWithAttachments({
+      content: inbound.content,
+      attachments: resolvedAttachments
     });
-    const localMediaResult = extractLocalMediaFromText({
-      text: mediaLineResult.text,
-      logger
+    const envelopeFrom = resolveEnvelopeFrom(inbound);
+    const inboundBody = replyApi.formatInboundEnvelope ? replyApi.formatInboundEnvelope({
+      channel: "QQ",
+      from: envelopeFrom,
+      body: rawBody,
+      timestamp: inbound.timestamp,
+      previousTimestamp: previousTimestamp ?? void 0,
+      chatType: inbound.type === "direct" ? "direct" : "group",
+      senderLabel: inbound.senderName ?? inbound.senderId,
+      sender: { id: inbound.senderId, name: inbound.senderName ?? void 0 },
+      envelope: envelopeOptions
+    }) : replyApi.formatAgentEnvelope ? replyApi.formatAgentEnvelope({
+      channel: "QQ",
+      from: envelopeFrom,
+      timestamp: inbound.timestamp,
+      previousTimestamp: previousTimestamp ?? void 0,
+      envelope: envelopeOptions,
+      body: rawBody
+    }) : rawBody;
+    const inboundCtx = buildInboundContext({
+      event: inbound,
+      sessionKey: route.sessionKey,
+      accountId: route.accountId ?? accountId,
+      body: inboundBody,
+      rawBody,
+      commandBody: rawBody
     });
-    const cleanedText = sanitizeQQBotOutboundText(localMediaResult.text);
-    const payloadMediaUrls = Array.isArray(typed?.mediaUrls) ? typed?.mediaUrls : typed?.mediaUrl ? [typed.mediaUrl] : [];
-    const mediaQueue = [];
-    const seenMedia = /* @__PURE__ */ new Set();
-    const addMedia = (value) => {
-      const next = value?.trim();
-      if (!next) return;
-      if (seenMedia.has(next)) return;
-      seenMedia.add(next);
-      mediaQueue.push(next);
-    };
-    for (const url of payloadMediaUrls) addMedia(url);
-    for (const url of mediaLineResult.mediaUrls) addMedia(url);
-    for (const url of localMediaResult.mediaUrls) addMedia(url);
-    const deliveryDecision = evaluateReplyFinalOnlyDelivery({
-      replyFinalOnly,
-      kind: info?.kind,
-      hasMedia: mediaQueue.length > 0});
-    if (deliveryDecision.skipDelivery) return;
-    const suppressEchoText = mediaQueue.length > 0 && shouldSuppressQQBotTextWhenMediaPresent(localMediaResult.text, cleanedText);
-    const suppressText = deliveryDecision.suppressText || suppressEchoText;
-    const textToSend = suppressText ? "" : cleanedText;
-    if (textToSend) {
-      const converted = textApi?.convertMarkdownTables ? textApi.convertMarkdownTables(textToSend, resolvedTableMode) : textToSend;
-      const chunks = chunkText(converted);
-      for (const chunk of chunks) {
-        const result = await qqbotOutbound.sendText({
-          cfg: { channels: { qqbot: qqCfg } },
-          to: target.to,
-          text: chunk,
-          replyToId: inbound.messageId
+    const finalizeInboundContext = replyApi?.finalizeInboundContext;
+    const finalCtx = finalizeInboundContext ? finalizeInboundContext(inboundCtx) : inboundCtx;
+    let cronBase = "";
+    if (typeof finalCtx.RawBody === "string" && finalCtx.RawBody) {
+      cronBase = finalCtx.RawBody;
+    } else if (typeof finalCtx.Body === "string" && finalCtx.Body) {
+      cronBase = finalCtx.Body;
+    } else if (typeof finalCtx.CommandBody === "string" && finalCtx.CommandBody) {
+      cronBase = finalCtx.CommandBody;
+    }
+    if (cronBase) {
+      const nextCron = appendCronHiddenPrompt(cronBase);
+      if (nextCron !== cronBase) {
+        finalCtx.BodyForAgent = nextCron;
+      }
+    }
+    if (storePath && sessionApi?.recordInboundSession) {
+      try {
+        const mainSessionKeyRaw = route?.mainSessionKey;
+        const mainSessionKey = typeof mainSessionKeyRaw === "string" && mainSessionKeyRaw.trim() ? mainSessionKeyRaw : void 0;
+        const isGroup = inbound.type === "group" || inbound.type === "channel";
+        const updateLastRoute = !isGroup ? {
+          sessionKey: mainSessionKey ?? route.sessionKey,
+          channel: "qqbot",
+          to: finalCtx.OriginatingTo ?? finalCtx.To ?? `user:${inbound.senderId}`,
+          accountId: route.accountId ?? accountId
+        } : void 0;
+        const recordSessionKey = typeof finalCtx.SessionKey === "string" && finalCtx.SessionKey.trim() ? finalCtx.SessionKey : route.sessionKey;
+        await sessionApi.recordInboundSession({
+          storePath,
+          sessionKey: recordSessionKey,
+          ctx: finalCtx,
+          updateLastRoute,
+          onRecordError: (err) => {
+            logger.warn(`failed to record inbound session: ${String(err)}`);
+          }
         });
-        if (result.error) {
-          logger.error(`sendText failed: ${result.error}`);
-        }
+      } catch (err) {
+        logger.warn(`failed to record inbound session: ${String(err)}`);
       }
     }
-    await sendQQBotMediaWithFallback({
-      qqCfg,
-      to: target.to,
-      mediaQueue,
-      replyToId: inbound.messageId,
-      logger
-    });
-  };
-  const humanDelay = replyApi.resolveHumanDelayConfig?.(cfg, route.agentId);
-  const dispatchBuffered = replyApi.dispatchReplyWithBufferedBlockDispatcher;
-  if (dispatchBuffered) {
-    await dispatchBuffered({
-      ctx: finalCtx,
+    const textApi = runtime2.channel?.text;
+    const limit = textApi?.resolveTextChunkLimit?.({
+      cfg,
+      channel: "qqbot",
+      defaultLimit: qqCfg.textChunkLimit ?? 1500
+    }) ?? (qqCfg.textChunkLimit ?? 1500);
+    const chunkMode = textApi?.resolveChunkMode?.(cfg, "qqbot");
+    const tableMode = textApi?.resolveMarkdownTableMode?.({
       cfg,
-      dispatcherOptions: {
+      channel: "qqbot",
+      accountId: route.accountId ?? accountId
+    });
+    const resolvedTableMode = tableMode ?? "bullets";
+    const chunkText = (text) => {
+      if (textApi?.chunkMarkdownText && limit > 0) {
+        return textApi.chunkMarkdownText(text, limit);
+      }
+      if (textApi?.chunkTextWithMode && limit > 0) {
+        return textApi.chunkTextWithMode(text, limit, chunkMode);
+      }
+      return [text];
+    };
+    const replyFinalOnly = qqCfg.replyFinalOnly ?? false;
+    const deliver = async (payload, info) => {
+      const typed = payload;
+      const mediaLineResult = extractMediaLinesFromText({
+        text: typed?.text ?? "",
+        logger
+      });
+      const localMediaResult = extractLocalMediaFromText({
+        text: mediaLineResult.text,
+        logger
+      });
+      const cleanedText = sanitizeQQBotOutboundText(localMediaResult.text);
+      const payloadMediaUrls = Array.isArray(typed?.mediaUrls) ? typed?.mediaUrls : typed?.mediaUrl ? [typed.mediaUrl] : [];
+      const mediaQueue = [];
+      const seenMedia = /* @__PURE__ */ new Set();
+      const addMedia = (value) => {
+        const next = value?.trim();
+        if (!next) return;
+        if (seenMedia.has(next)) return;
+        seenMedia.add(next);
+        mediaQueue.push(next);
+      };
+      for (const url of payloadMediaUrls) addMedia(url);
+      for (const url of mediaLineResult.mediaUrls) addMedia(url);
+      for (const url of localMediaResult.mediaUrls) addMedia(url);
+      const deliveryDecision = evaluateReplyFinalOnlyDelivery({
+        replyFinalOnly,
+        kind: info?.kind,
+        hasMedia: mediaQueue.length > 0,
+        sanitizedText: cleanedText
+      });
+      if (deliveryDecision.skipDelivery) return;
+      const suppressEchoText = mediaQueue.length > 0 && shouldSuppressQQBotTextWhenMediaPresent(localMediaResult.text, cleanedText);
+      const suppressText = deliveryDecision.suppressText || suppressEchoText;
+      const textToSend = suppressText ? "" : cleanedText;
+      if (textToSend) {
+        const converted = textApi?.convertMarkdownTables ? textApi.convertMarkdownTables(textToSend, resolvedTableMode) : textToSend;
+        const chunks = chunkText(converted);
+        for (const chunk of chunks) {
+          const result = await qqbotOutbound.sendText({
+            cfg: { channels: { qqbot: qqCfg } },
+            to: target.to,
+            text: chunk,
+            replyToId: inbound.messageId,
+            replyEventId: inbound.eventId
+          });
+          if (result.error) {
+            logger.error(`sendText failed: ${result.error}`);
+            markGroupMessageInterfaceBlocked(result.error);
+          } else {
+            markReplyDelivered();
+          }
+        }
+      }
+      await sendQQBotMediaWithFallback({
+        qqCfg,
+        to: target.to,
+        mediaQueue,
+        replyToId: inbound.messageId,
+        replyEventId: inbound.eventId,
+        logger,
+        onDelivered: () => {
+          markReplyDelivered();
+        },
+        onError: (error) => {
+          markGroupMessageInterfaceBlocked(error);
+        }
+      });
+    };
+    const humanDelay = replyApi.resolveHumanDelayConfig?.(cfg, route.agentId);
+    const dispatchBuffered = replyApi.dispatchReplyWithBufferedBlockDispatcher;
+    if (dispatchBuffered) {
+      await dispatchBuffered({
+        ctx: finalCtx,
+        cfg,
+        dispatcherOptions: {
+          deliver,
+          humanDelay,
+          onError: (err, info) => {
+            logger.error(`${info.kind} reply failed: ${String(err)}`);
+          },
+          onSkip: (_payload, info) => {
+            if (info.reason !== "silent") {
+              logger.info(`reply skipped: ${info.reason}`);
+            }
+          }
+        }
+      });
+    } else {
+      const dispatcherResult = replyApi.createReplyDispatcherWithTyping ? replyApi.createReplyDispatcherWithTyping({
         deliver,
         humanDelay,
         onError: (err, info) => {
           logger.error(`${info.kind} reply failed: ${String(err)}`);
-        },
-        onSkip: (_payload, info) => {
-          if (info.reason !== "silent") {
-            logger.info(`reply skipped: ${info.reason}`);
-          }
         }
+      }) : {
+        dispatcher: replyApi.createReplyDispatcher?.({
+          deliver,
+          humanDelay,
+          onError: (err, info) => {
+            logger.error(`${info.kind} reply failed: ${String(err)}`);
+          }
+        }),
+        replyOptions: {},
+        markDispatchIdle: () => void 0
+      };
+      if (!dispatcherResult.dispatcher || !replyApi.dispatchReplyFromConfig) {
+        logger.warn("dispatcher not available, skipping reply");
+        return;
       }
-    });
-    return;
-  }
-  const dispatcherResult = replyApi.createReplyDispatcherWithTyping ? replyApi.createReplyDispatcherWithTyping({
-    deliver,
-    humanDelay,
-    onError: (err, info) => {
-      logger.error(`${info.kind} reply failed: ${String(err)}`);
+      await replyApi.dispatchReplyFromConfig({
+        ctx: finalCtx,
+        cfg,
+        dispatcher: dispatcherResult.dispatcher,
+        replyOptions: dispatcherResult.replyOptions
+      });
+      dispatcherResult.markDispatchIdle?.();
     }
-  }) : {
-    dispatcher: replyApi.createReplyDispatcher?.({
-      deliver,
-      humanDelay,
-      onError: (err, info) => {
-        logger.error(`${info.kind} reply failed: ${String(err)}`);
+    const noReplyFallback = resolveQQBotNoReplyFallback({
+      inbound,
+      replyDelivered
+    });
+    if (noReplyFallback && !groupMessageInterfaceBlocked) {
+      logger.info("no visible reply generated for group mention; sending fallback text");
+      const fallbackResult = await qqbotOutbound.sendText({
+        cfg: { channels: { qqbot: qqCfg } },
+        to: target.to,
+        text: noReplyFallback,
+        replyToId: inbound.messageId,
+        replyEventId: inbound.eventId
+      });
+      if (fallbackResult.error) {
+        logger.error(`sendText no-reply fallback failed: ${fallbackResult.error}`);
+        markGroupMessageInterfaceBlocked(fallbackResult.error);
+      } else {
+        markReplyDelivered();
       }
-    }),
-    replyOptions: {},
-    markDispatchIdle: () => void 0
-  };
-  if (!dispatcherResult.dispatcher || !replyApi.dispatchReplyFromConfig) {
-    logger.warn("dispatcher not available, skipping reply");
-    return;
+    }
+  } finally {
+    longTaskNotice.dispose();
+    try {
+      await pruneInboundMediaDir({
+        inboundDir: inboundMediaDir,
+        keepDays: inboundMediaKeepDays
+      });
+    } catch (err) {
+      logger.warn(`failed to prune qqbot inbound media dir: ${String(err)}`);
+    }
   }
-  await replyApi.dispatchReplyFromConfig({
-    ctx: finalCtx,
-    cfg,
-    dispatcher: dispatcherResult.dispatcher,
-    replyOptions: dispatcherResult.replyOptions
-  });
-  dispatcherResult.markDispatchIdle?.();
 }
 function shouldHandleMessage(event, qqCfg, logger) {
   if (event.type === "direct") {
@@ -8287,7 +8875,7 @@ function shouldHandleMessage(event, qqCfg, logger) {
 }
 async function handleQQBotDispatch(params) {
   const logger = params.logger ?? createLogger("qqbot");
-  const inbound = resolveInbound(params.eventType, params.eventData);
+  const inbound = resolveInbound(params.eventType, params.eventData, params.eventId);
   if (!inbound) {
     return;
   }
@@ -8336,6 +8924,16 @@ var INTENTS = {
 };
 var DEFAULT_INTENTS = INTENTS.GUILD_MESSAGES | INTENTS.DIRECT_MESSAGE | INTENTS.GROUP_AND_C2C;
 var RECONNECT_DELAYS_MS = [1e3, 2e3, 5e3, 1e4, 2e4, 3e4];
+function formatGatewayConnectError(err) {
+  if (err instanceof HttpError) {
+    const body = err.body?.trim();
+    if (body) {
+      return `${err.message}; body=${body}`;
+    }
+    return err.message;
+  }
+  return String(err);
+}
 var activeConnections = /* @__PURE__ */ new Map();
 function getOrCreateConnection(accountId) {
   let conn = activeConnections.get(accountId);
@@ -8378,7 +8976,7 @@ function cleanupSocket(conn) {
   }
 }
 async function monitorQQBotProvider(opts = {}) {
-  const { config, runtime: runtime2, abortSignal, accountId = DEFAULT_ACCOUNT_ID } = opts;
+  const { config, runtime: runtime2, abortSignal, accountId = DEFAULT_ACCOUNT_ID, setStatus } = opts;
   const logger = createLogger("qqbot", {
     log: runtime2?.log,
     error: runtime2?.error
@@ -8485,6 +9083,7 @@ async function monitorQQBotProvider(opts = {}) {
           return;
         }
         case 11:
+          setStatus?.({ lastEventAt: Date.now() });
           return;
         case 7:
           cleanupSocket(conn);
@@ -8517,6 +9116,7 @@ async function monitorQQBotProvider(opts = {}) {
             await handleQQBotDispatch({
               eventType,
               eventData: payload.d,
+              eventId: payload.id,
               cfg: opts.config,
               accountId,
               logger
@@ -8563,7 +9163,7 @@ async function monitorQQBotProvider(opts = {}) {
           logger.error(`gateway socket error: ${String(err)}`);
         });
       } catch (err) {
-        logger.error(`gateway connect failed: ${String(err)}`);
+        logger.error(`gateway connect failed: ${formatGatewayConnectError(err)}`);
         cleanupSocket(conn);
         scheduleReconnect("connect failed");
       } finally {
@@ -8688,14 +9288,14 @@ var qqbotPlugin = {
         enabled: { type: "boolean" },
         name: { type: "string" },
         defaultAccount: { type: "string" },
-        appId: { type: "string" },
+        appId: { type: ["string", "number"] },
         clientSecret: { type: "string" },
         asr: {
           type: "object",
           additionalProperties: false,
           properties: {
             enabled: { type: "boolean" },
-            appId: { type: "string" },
+            appId: { type: ["string", "number"] },
             secretId: { type: "string" },
             secretKey: { type: "string" }
           }
@@ -8709,8 +9309,17 @@ var qqbotPlugin = {
         historyLimit: { type: "integer", minimum: 0 },
         textChunkLimit: { type: "integer", minimum: 1 },
         replyFinalOnly: { type: "boolean" },
+        longTaskNoticeDelayMs: { type: "integer", minimum: 0 },
         maxFileSizeMB: { type: "number" },
         mediaTimeoutMs: { type: "number" },
+        inboundMedia: {
+          type: "object",
+          additionalProperties: false,
+          properties: {
+            dir: { type: "string" },
+            keepDays: { type: "number", minimum: 0 }
+          }
+        },
         accounts: {
           type: "object",
           additionalProperties: {
@@ -8719,14 +9328,14 @@ var qqbotPlugin = {
             properties: {
               name: { type: "string" },
               enabled: { type: "boolean" },
-              appId: { type: "string" },
+              appId: { type: ["string", "number"] },
               clientSecret: { type: "string" },
               asr: {
                 type: "object",
                 additionalProperties: false,
                 properties: {
                   enabled: { type: "boolean" },
-                  appId: { type: "string" },
+                  appId: { type: ["string", "number"] },
                   secretId: { type: "string" },
                   secretKey: { type: "string" }
                 }
@@ -8740,8 +9349,17 @@ var qqbotPlugin = {
               historyLimit: { type: "integer", minimum: 0 },
               textChunkLimit: { type: "integer", minimum: 1 },
               replyFinalOnly: { type: "boolean" },
+              longTaskNoticeDelayMs: { type: "integer", minimum: 0 },
               maxFileSizeMB: { type: "number" },
-              mediaTimeoutMs: { type: "number" }
+              mediaTimeoutMs: { type: "number" },
+              inboundMedia: {
+                type: "object",
+                additionalProperties: false,
+                properties: {
+                  dir: { type: "string" },
+                  keepDays: { type: "number", minimum: 0 }
+                }
+              }
             }
           }
         }
@@ -8883,7 +9501,8 @@ var qqbotPlugin = {
           error: ctx.log?.error ?? console.error
         },
         abortSignal: ctx.abortSignal,
-        accountId: ctx.accountId
+        accountId: ctx.accountId,
+        setStatus: ctx.setStatus
       });
     },
     stopAccount: async (ctx) => {
@@ -8905,14 +9524,14 @@ var plugin = {
       enabled: { type: "boolean" },
       name: { type: "string" },
       defaultAccount: { type: "string" },
-      appId: { type: "string" },
+      appId: { type: ["string", "number"] },
       clientSecret: { type: "string" },
       asr: {
         type: "object",
         additionalProperties: false,
         properties: {
           enabled: { type: "boolean" },
-          appId: { type: "string" },
+          appId: { type: ["string", "number"] },
           secretId: { type: "string" },
           secretKey: { type: "string" }
         }
@@ -8926,8 +9545,17 @@ var plugin = {
       historyLimit: { type: "integer", minimum: 0 },
       textChunkLimit: { type: "integer", minimum: 1 },
       replyFinalOnly: { type: "boolean" },
+      longTaskNoticeDelayMs: { type: "integer", minimum: 0 },
       maxFileSizeMB: { type: "number" },
       mediaTimeoutMs: { type: "number" },
+      inboundMedia: {
+        type: "object",
+        additionalProperties: false,
+        properties: {
+          dir: { type: "string" },
+          keepDays: { type: "number", minimum: 0 }
+        }
+      },
       accounts: {
         type: "object",
         additionalProperties: {
@@ -8936,14 +9564,14 @@ var plugin = {
           properties: {
             name: { type: "string" },
             enabled: { type: "boolean" },
-            appId: { type: "string" },
+            appId: { type: ["string", "number"] },
             clientSecret: { type: "string" },
             asr: {
               type: "object",
               additionalProperties: false,
               properties: {
                 enabled: { type: "boolean" },
-                appId: { type: "string" },
+                appId: { type: ["string", "number"] },
                 secretId: { type: "string" },
                 secretKey: { type: "string" }
               }
@@ -8957,8 +9585,17 @@ var plugin = {
             historyLimit: { type: "integer", minimum: 0 },
             textChunkLimit: { type: "integer", minimum: 1 },
             replyFinalOnly: { type: "boolean" },
+            longTaskNoticeDelayMs: { type: "integer", minimum: 0 },
             maxFileSizeMB: { type: "number" },
-            mediaTimeoutMs: { type: "number" }
+            mediaTimeoutMs: { type: "number" },
+            inboundMedia: {
+              type: "object",
+              additionalProperties: false,
+              properties: {
+                dir: { type: "string" },
+                keepDays: { type: "number", minimum: 0 }
+              }
+            }
           }
         }
       }