@openclaw/qqbot 2026.7.1-beta.1 → 2026.7.1-beta.4

package/dist/{runtime-BL0xZzWe.js → runtime-DodcT_fQ.js}

@@ -1,4 +1,4 @@
-import { v as setOpenClawVersion } from "./sender-BHWpE_yH.js";
+import { v as setOpenClawVersion } from "./sender-CjDuU-uz.js";
 import { createPluginRuntimeStore } from "openclaw/plugin-sdk/runtime-store";
 //#region extensions/qqbot/src/bridge/runtime.ts
 const { setRuntime: _setRuntime, clearRuntime: resetQQBotRuntimeForTest, getRuntime: getQQBotRuntime } = createPluginRuntimeStore({

package/dist/runtime-api.js

@@ -1,2 +1,2 @@
-import { r as setQQBotRuntime, t as getQQBotRuntime } from "./runtime-BL0xZzWe.js";
+import { r as setQQBotRuntime, t as getQQBotRuntime } from "./runtime-DodcT_fQ.js";
 export { getQQBotRuntime, setQQBotRuntime };

package/dist/{sender-BHWpE_yH.js → sender-CjDuU-uz.js}

@@ -1,16 +1,18 @@
 import { c as getPlatformAdapter, i as normalizeOptionalString, s as sanitizeFileName } from "./string-normalize-R_0cKO7Q.js";
-import { a as formatErrorMessage, n as debugLog, r as debugWarn, t as debugError } from "./log-SDfMMBWe.js";
+import { a as formatErrorMessage, n as debugLog, r as debugWarn, t as debugError } from "./log-DEtcoDWe.js";
+import { truncateUtf16Safe } from "openclaw/plugin-sdk/text-utility-runtime";
 import * as fs$1 from "node:fs";
 import os from "node:os";
 import { readProviderTextResponse, readResponseTextLimited } from "openclaw/plugin-sdk/provider-http";
 import { fetchWithSsrFGuard, isBlockedHostnameOrIp } from "openclaw/plugin-sdk/ssrf-runtime";
 import * as crypto$1 from "node:crypto";
 import crypto from "node:crypto";
+import { sleep } from "openclaw/plugin-sdk/runtime-env";
 import { FsSafeError, openLocalFileSafely, readRegularFile, statRegularFileSync } from "openclaw/plugin-sdk/security-runtime";
 import * as path$1 from "node:path";
 import { mimeTypeFromFilePath } from "openclaw/plugin-sdk/media-mime";
+import { asDateTimestampMs, formatByteSize, isFutureDateTimestampMs, parseStrictPositiveInteger, resolveExpiresAtMsFromDurationSeconds, resolveTimestampMsToIsoString } from "openclaw/plugin-sdk/number-runtime";
 import { readResponseWithLimit } from "openclaw/plugin-sdk/response-limit-runtime";
-import { asDateTimestampMs, isFutureDateTimestampMs, parseStrictPositiveInteger, resolveExpiresAtMsFromDurationSeconds, resolveTimestampMsToIsoString } from "openclaw/plugin-sdk/number-runtime";
 //#region \0rolldown/runtime.js
 var __defProp = Object.defineProperty;
 var __exportAll = (all, no_symbols) => {
@@ -175,7 +177,7 @@ var ApiClient = class {
 					throw new ApiError(`API Error [${path}]: ${error.message ?? rawBody}`, res.status, path, bizCode, error.message);
 				} catch (parseErr) {
 					if (parseErr instanceof ApiError) throw parseErr;
-					throw new ApiError(`API Error [${path}] HTTP ${res.status}: ${rawBody.slice(0, 200)}`, res.status, path);
+					throw new ApiError(`API Error [${path}] HTTP ${res.status}: ${truncateUtf16Safe(rawBody, 200)}`, res.status, path);
 				}
 			}
 			if (isHtmlResponse) throw new ApiError(`QQ 服务端返回了非 JSON 响应（${path}），可能是临时故障，请稍后重试`, res.status, path);
@@ -286,16 +288,19 @@ async function fileExistsAsync(filePath) {
 }
 /** Format a byte count into a human-readable size string. */
 function formatFileSize(bytes) {
-	if (bytes < 1024) return `${bytes}B`;
-	if (bytes < 1024 * 1024) return `${(bytes / 1024).toFixed(1)}KB`;
-	return `${(bytes / (1024 * 1024)).toFixed(1)}MB`;
+	return formatByteSize(bytes, {
+		style: "legacy-binary",
+		maxUnit: "mega",
+		separator: "",
+		fractionDigits: (_value, unit) => unit === "byte" ? null : 1
+	});
 }
 /** Infer a MIME type from the file extension. */
 function getMimeType(filePath) {
 	return mimeTypeFromFilePath(filePath) ?? "application/octet-stream";
 }
 /** Extensions accepted as image uploads by the QQ Bot media pipeline. */
-const IMAGE_EXTENSIONS = new Set([
+const IMAGE_EXTENSIONS = /* @__PURE__ */ new Set([
 	".jpg",
 	".jpeg",
 	".png",
@@ -462,6 +467,17 @@ async function normalizeSource(raw, opts = {}) {
 //#endregion
 //#region extensions/qqbot/src/engine/api/retry.ts
 /**
+* Generic retry engine for QQ Bot API requests.
+*
+* Replaces the three separate retry implementations in the old `api.ts`:
+* - `apiRequestWithRetry` (upload retry with exponential backoff)
+* - `partFinishWithRetry` (part-finish retry + persistent retry on specific biz codes)
+* - `completeUploadWithRetry` (unconditional retry for complete-upload)
+*
+* All three patterns are expressed as a single `withRetry` function
+* parameterized by `RetryPolicy` and optional `PersistentRetryPolicy`.
+*/
+/**
 * Execute an async operation with configurable retry semantics.
 *
 * @param fn - The async operation to retry.
@@ -483,8 +499,8 @@ async function withRetry(fn, policy, persistentPolicy, logger) {
 		if (policy.shouldRetry?.(lastError, attempt) === false) throw lastError;
 		if (attempt < policy.maxRetries) {
 			const delay = policy.backoff === "exponential" ? policy.baseDelayMs * 2 ** attempt : policy.baseDelayMs;
-			logger?.debug?.(`[qqbot:retry] Attempt ${attempt + 1} failed, retrying in ${delay}ms: ${lastError.message.slice(0, 100)}`);
-			await sleep$1(delay);
+			logger?.debug?.(`[qqbot:retry] Attempt ${attempt + 1} failed, retrying in ${delay}ms: ${truncateUtf16Safe(lastError.message, 100)}`);
+			await sleep(delay);
 		}
 	}
 	throw lastError;
@@ -514,16 +530,11 @@ async function persistentRetryLoop(fn, policy, logger) {
 		if (remaining <= 0) break;
 		const actualDelay = Math.min(policy.intervalMs, remaining);
 		(logger?.warn ?? logger?.error)?.(`[qqbot:retry] Persistent retry #${attempt}: retrying in ${actualDelay}ms (remaining=${Math.round(remaining / 1e3)}s)`);
-		await sleep$1(actualDelay);
+		await sleep(actualDelay);
 	}
 	logger?.error?.(`[qqbot:retry] Persistent retry timed out after ${policy.timeoutMs / 1e3}s (${attempt} attempts)`);
 	throw lastError ?? /* @__PURE__ */ new Error(`Persistent retry timed out (${policy.timeoutMs / 1e3}s)`);
 }
-function sleep$1(ms) {
-	return new Promise((resolve) => {
-		setTimeout(resolve, ms);
-	});
-}
 /** Standard upload retry: exponential backoff, skip 400/401/timeout errors. */
 const UPLOAD_RETRY_POLICY = {
 	maxRetries: 2,
@@ -564,7 +575,7 @@ function buildPartFinishPersistentPolicy(retryTimeoutMs, retryableCodes = PART_F
 	};
 }
 /** Business error codes that trigger persistent part-finish retry. */
-const PART_FINISH_RETRYABLE_CODES = new Set([40093001]);
+const PART_FINISH_RETRYABLE_CODES = /* @__PURE__ */ new Set([40093001]);
 /** upload_prepare error code indicating daily limit exceeded. */
 const UPLOAD_PREPARE_FALLBACK_CODE = 40093002;
 //#endregion
@@ -931,8 +942,8 @@ async function putToPresignedUrl(presignedUrl, data, partIndex, totalParts, logg
 				const etag = response.headers.get("ETag") ?? "-";
 				if (!response.ok) {
 					const body = await readResponseTextLimited(response, PART_UPLOAD_ERROR_BODY_LIMIT_BYTES).catch(() => "");
-					logger?.error?.(`${prefix} PUT part ${partIndex}/${totalParts}: HTTP ${response.status} ${response.statusText} (${elapsed}ms, requestId=${requestId}) body=${body.slice(0, 160)}`);
-					throw new Error(`COS PUT failed: ${response.status} ${response.statusText} - ${body.slice(0, 120)}`);
+					logger?.error?.(`${prefix} PUT part ${partIndex}/${totalParts}: HTTP ${response.status} ${response.statusText} (${elapsed}ms, requestId=${requestId}) body=${truncateUtf16Safe(body, 160)}`);
+					throw new Error(`COS PUT failed: ${response.status} ${response.statusText} - ${truncateUtf16Safe(body, 120)}`);
 				}
 				logger?.debug?.(`${prefix} PUT part ${partIndex}/${totalParts} OK (${elapsed}ms ETag=${etag} requestId=${requestId})`);
 				return;
@@ -944,7 +955,7 @@ async function putToPresignedUrl(presignedUrl, data, partIndex, totalParts, logg
 			if (lastError.name === "AbortError") lastError = /* @__PURE__ */ new Error(`Part ${partIndex}/${totalParts} upload timeout after ${PART_UPLOAD_TIMEOUT_MS}ms`);
 			if (attempt < PART_UPLOAD_MAX_RETRIES) {
 				const delay = 1e3 * 2 ** attempt;
-				(logger?.warn ?? logger?.error)?.(`${prefix} PUT part ${partIndex}/${totalParts} attempt ${attempt + 1} failed (${lastError.message.slice(0, 120)}), retrying in ${delay}ms`);
+				(logger?.warn ?? logger?.error)?.(`${prefix} PUT part ${partIndex}/${totalParts} attempt ${attempt + 1} failed (${truncateUtf16Safe(lastError.message, 120)}), retrying in ${delay}ms`);
 				await sleep(delay);
 			}
 		} finally {
@@ -967,11 +978,6 @@ async function runWithConcurrency(tasks, maxConcurrent) {
 		await Promise.all(batch.map((task) => task()));
 	}
 }
-function sleep(ms) {
-	return new Promise((resolve) => {
-		setTimeout(resolve, ms);
-	});
-}
 //#endregion
 //#region extensions/qqbot/src/engine/api/token.ts
 /**
@@ -1810,7 +1816,7 @@ async function withTokenRetry(creds, sendFn, log, _accountId) {
 		}
 		const errMsg = formatErrorMessage(err);
 		if (errMsg.includes("401") || errMsg.includes("token") || errMsg.includes("access_token")) {
-			log?.warn?.(`Token retry triggered by string heuristic (err is not ApiError). Consider propagating ApiError end-to-end. msg=${errMsg.slice(0, 120)}`);
+			log?.warn?.(`Token retry triggered by string heuristic (err is not ApiError). Consider propagating ApiError end-to-end. msg=${truncateUtf16Safe(errMsg, 120)}`);
 			clearTokenCache(creds.appId);
 			return await sendFn(await getAccessToken(creds.appId, creds.clientSecret));
 		}

package/dist/setup-plugin-api.js

@@ -1,2 +1,2 @@
-import { t as qqbotSetupPlugin } from "./channel.setup-CldhUlTO.js";
+import { t as qqbotSetupPlugin } from "./channel.setup-2ItDYKhz.js";
 export { qqbotSetupPlugin };

package/dist/{tools-BvXe7bTq.js → tools-UJJ-tLHP.js}

@@ -1,11 +1,12 @@
 import { a as resolveQQBotAccount, r as listQQBotAccountIds } from "./config-C1qZbh0K.js";
-import { a as formatErrorMessage, n as debugLog, t as debugError } from "./log-SDfMMBWe.js";
+import { a as formatErrorMessage, n as debugLog, t as debugError } from "./log-DEtcoDWe.js";
 import { t as getRequestContext } from "./request-context-Bm7PTBD1.js";
+import { truncateUtf16Safe } from "openclaw/plugin-sdk/text-utility-runtime";
 import { readProviderTextResponse, readResponseTextLimited } from "openclaw/plugin-sdk/provider-http";
 import { fetchWithSsrFGuard } from "openclaw/plugin-sdk/ssrf-runtime";
 import { resolveExpiresAtMsFromDurationMs } from "openclaw/plugin-sdk/number-runtime";
+import { jsonResult } from "openclaw/plugin-sdk/tool-results";
 import { callGatewayTool } from "openclaw/plugin-sdk/agent-harness-runtime";
-import { truncateUtf16Safe } from "openclaw/plugin-sdk/text-utility-runtime";
 //#region extensions/qqbot/src/engine/tools/channel-api.ts
 /**
 * QQ Channel API proxy tool core logic.
@@ -118,15 +119,6 @@ function validateDeleteConfirmation(params) {
 	if (isBulkAnnouncementDeletePath(params.path) && !params.bulkConfirmed) return "Deleting all announcements requires bulkConfirmed=true after a separate bulk-delete confirmation.";
 	return null;
 }
-function json$1(data) {
-	return {
-		content: [{
-			type: "text",
-			text: JSON.stringify(data, null, 2)
-		}],
-		details: data
-	};
-}
 /**
 * Execute a channel API proxy request.
 * 执行频道 API 代理请求。
@@ -136,8 +128,8 @@ function json$1(data) {
 * response formatting suitable for AI tool output.
 */
 async function executeChannelApi(params, options) {
-	if (!params.method) return json$1({ error: "method is required" });
-	if (!params.path) return json$1({ error: "path is required" });
+	if (!params.method) return jsonResult({ error: "method is required" });
+	if (!params.path) return jsonResult({ error: "path is required" });
 	const method = params.method.toUpperCase();
 	if (![
 		"GET",
@@ -145,14 +137,14 @@ async function executeChannelApi(params, options) {
 		"PUT",
 		"PATCH",
 		"DELETE"
-	].includes(method)) return json$1({ error: `Unsupported HTTP method: ${method}. Allowed values: GET, POST, PUT, PATCH, DELETE` });
+	].includes(method)) return jsonResult({ error: `Unsupported HTTP method: ${method}. Allowed values: GET, POST, PUT, PATCH, DELETE` });
 	const pathError = validatePath(params.path);
-	if (pathError) return json$1({ error: pathError });
+	if (pathError) return jsonResult({ error: pathError });
 	const confirmationError = validateDeleteConfirmation({
 		...params,
 		method
 	});
-	if (confirmationError) return json$1({
+	if (confirmationError) return jsonResult({
 		error: confirmationError,
 		path: params.path
 	});
@@ -191,13 +183,13 @@ async function executeChannelApi(params, options) {
 			clearTimeout(timeoutId);
 			if (err instanceof Error && err.name === "AbortError") {
 				debugError(`[qqbot-channel-api] <<< Request timeout after ${DEFAULT_TIMEOUT_MS}ms`);
-				return json$1({
+				return jsonResult({
 					error: `Request timed out after ${DEFAULT_TIMEOUT_MS}ms`,
 					path: params.path
 				});
 			}
 			debugError("[qqbot-channel-api] <<< Network error:", err);
-			return json$1({
+			return jsonResult({
 				error: `Network error: ${formatErrorMessage(err)}`,
 				path: params.path
 			});
@@ -208,12 +200,12 @@ async function executeChannelApi(params, options) {
 			debugLog(`[qqbot-channel-api] <<< Status: ${res.status} ${res.statusText}`);
 			const rawBody = res.ok ? await readProviderTextResponse(res, "QQ channel API response") : await readResponseTextLimited(res, CHANNEL_API_ERROR_BODY_LIMIT_BYTES);
 			if (!rawBody || rawBody.trim() === "") {
-				if (res.ok) return json$1({
+				if (res.ok) return jsonResult({
 					success: true,
 					status: res.status,
 					path: params.path
 				});
-				return json$1({
+				return jsonResult({
 					error: `API returned ${res.status} ${res.statusText}`,
 					status: res.status,
 					path: params.path
@@ -228,14 +220,14 @@ async function executeChannelApi(params, options) {
 			if (!res.ok) {
 				const errMsg = typeof parsed === "object" && parsed && "message" in parsed ? String(parsed.message) : `${res.status} ${res.statusText}`;
 				debugError(`[qqbot-channel-api] Error [${method} ${params.path}]: ${errMsg}`);
-				return json$1({
+				return jsonResult({
 					error: errMsg,
 					status: res.status,
 					path: params.path,
 					details: parsed
 				});
 			}
-			return json$1({
+			return jsonResult({
 				success: true,
 				status: res.status,
 				path: params.path,
@@ -245,7 +237,7 @@ async function executeChannelApi(params, options) {
 			await release?.();
 		}
 	} catch (err) {
-		return json$1({
+		return jsonResult({
 			error: formatErrorMessage(err),
 			path: params.path
 		});
@@ -274,7 +266,7 @@ function registerChannelTool(api) {
 		description: "Authenticated HTTP proxy for QQ Open Platform channel APIs. Use write and delete endpoints only after explicit user intent; DELETE requires confirmed=true, and bulk deletes require bulkConfirmed=true after confirming the exact target. Common endpoints: list guilds GET /users/@me/guilds | list channels GET /guilds/{guild_id}/channels | get channel GET /channels/{channel_id} | create channel POST /guilds/{guild_id}/channels | list members GET /guilds/{guild_id}/members?after=0&limit=100 | get member GET /guilds/{guild_id}/members/{user_id} | list threads GET /channels/{channel_id}/threads | create thread PUT /channels/{channel_id}/threads | create announce POST /guilds/{guild_id}/announces | create schedule POST /channels/{channel_id}/schedules. See the qqbot-channel skill for full endpoint details.",
 		parameters: ChannelApiSchema,
 		async execute(_toolCallId, params) {
-			const { getAccessToken } = await import("./sender-BHWpE_yH.js").then((n) => n._);
+			const { getAccessToken } = await import("./sender-CjDuU-uz.js").then((n) => n._);
 			return executeChannelApi(params, { accessToken: await getAccessToken(account.appId, account.clientSecret) });
 		}
 	}, { name: "qqbot_channel_api" });
@@ -451,15 +443,6 @@ function formatDelay(ms) {
 	if (minutes === 0) return `${hours}h`;
 	return `${hours}h${minutes}m`;
 }
-function json(data) {
-	return {
-		content: [{
-			type: "text",
-			text: JSON.stringify(data, null, 2)
-		}],
-		details: data
-	};
-}
 function formatSchedulerError(error) {
 	return error instanceof Error ? error.message : String(error);
 }
@@ -526,17 +509,17 @@ function prepareRemindCronAction(params, ctx = {}) {
 }
 async function executeScheduledRemind(params, ctx, scheduler) {
 	const plan = prepareRemindCronAction(params, ctx);
-	if (!plan.ok) return json({ error: plan.error });
+	if (!plan.ok) return jsonResult({ error: plan.error });
 	try {
 		const cronResult = await scheduler(plan.cronAction);
-		return json({
+		return jsonResult({
 			ok: true,
 			action: plan.action,
 			summary: plan.summary,
 			cronResult
 		});
 	} catch (error) {
-		return json({
+		return jsonResult({
 			error: `Failed to run Gateway cron action: ${formatSchedulerError(error)}`,
 			action: plan.action
 		});

package/dist/tools-api.js

@@ -1,2 +1,2 @@
-import { t as registerQQBotTools } from "./tools-BvXe7bTq.js";
+import { t as registerQQBotTools } from "./tools-UJJ-tLHP.js";
 export { registerQQBotTools };

package/npm-shrinkwrap.json

@@ -1,12 +1,12 @@
 {
   "name": "@openclaw/qqbot",
-  "version": "2026.7.1-beta.1",
+  "version": "2026.7.1-beta.4",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@openclaw/qqbot",
-      "version": "2026.7.1-beta.1",
+      "version": "2026.7.1-beta.4",
       "dependencies": {
         "@tencent-connect/qqbot-connector": "1.1.0",
         "mpg123-decoder": "1.0.3",
@@ -15,7 +15,7 @@
         "zod": "4.4.3"
       },
       "peerDependencies": {
-        "openclaw": ">=2026.7.1-beta.1"
+        "openclaw": ">=2026.7.1-beta.4"
       },
       "peerDependenciesMeta": {
         "openclaw": {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@openclaw/qqbot",
-  "version": "2026.7.1-beta.1",
+  "version": "2026.7.1-beta.4",
   "private": false,
   "description": "OpenClaw QQ Bot channel plugin for group and direct-message workflows.",
   "repository": {
@@ -16,7 +16,7 @@
     "zod": "4.4.3"
   },
   "peerDependencies": {
-    "openclaw": ">=2026.7.1-beta.1"
+    "openclaw": ">=2026.7.1-beta.4"
   },
   "peerDependenciesMeta": {
     "openclaw": {
@@ -45,10 +45,10 @@
       "minHostVersion": ">=2026.4.10"
     },
     "compat": {
-      "pluginApi": ">=2026.7.1-beta.1"
+      "pluginApi": ">=2026.7.1-beta.4"
     },
     "build": {
-      "openclawVersion": "2026.7.1-beta.1"
+      "openclawVersion": "2026.7.1-beta.4"
     },
     "release": {
       "publishToClawHub": true,

package/skills/qqbot-media/SKILL.md

@@ -9,7 +9,7 @@ metadata: { "openclaw": { "emoji": "📸", "requires": { "config": ["channels.qq
 ## 用法
 
 ```
-<qqmedia>路径或URL</qqmedia>
+<qqmedia>{实际路径或URL}</qqmedia>
 ```
 
 系统根据文件扩展名自动识别类型并路由：
@@ -18,7 +18,8 @@ metadata: { "openclaw": { "emoji": "📸", "requires": { "config": ["channels.qq
 - `.silk/.wav/.mp3/.ogg/.aac/.flac` 等 → 语音
 - `.mp4/.mov/.avi/.mkv/.webm` 等 → 视频
 - 其他扩展名 → 文件
-- 无扩展名的 URL → 默认按图片处理
+- 无扩展名的当前会话本地/host-read 媒体 → 按加载出的实际媒体类型路由
+- 无扩展名的远程 URL → 可能按文件发送；如需图片/语音/视频，请提供能识别类型的 URL/路径或使用明确媒体标签
 
 ## 接收媒体
 
@@ -29,12 +30,14 @@ metadata: { "openclaw": { "emoji": "📸", "requires": { "config": ["channels.qq
 
 ## 规则
 
-1. **路径必须是绝对路径**（以 `/` 或 `http` 开头）
-2. **标签必须用开闭标签包裹路径**：`<qqmedia>路径</qqmedia>`
-3. **待发送的本地文件须落在 OpenClaw 媒体目录下**：生成、下载或复制出的文件应写入 **`~/.openclaw/media/qqbot/`**（或其子目录），再写进 `<qqmedia>`。不要只放在 `~/.openclaw/workspace/` 等工作区根目录——平台安全策略只允许从 `~/.openclaw/media/`（含 `media/qqbot`）等受信根路径上传，否则会拦截、发不出去。
-4. **文件大小上限**：图片 30MB / 视频 100MB / 文件 100MB / 语音 20MB
-5. **你有能力发送本地图片/文件**，直接用标签包裹路径即可，**不要说"无法发送"**
-6. 发送语音时不要重复语音中已朗读的文字
-7. 多个媒体用多个标签
-8. 以会话上下文中的能力说明为准（如未启用语音则不要发语音）
-9. 不要扫描或发送上下文之外的本地文件；只使用用户提供、工具生成，或明确位于受信 media 目录中的路径
+1. **标签必须用开闭标签包裹实际路径或 URL**：`<qqmedia>{实际路径或URL}</qqmedia>`
+2. **使用你实际看到的文件路径**：刚创建文件时，用创建结果显示的路径；只有当沙箱 workspace-write 创建结果实际显示 `/workspace/...` 时，才按原样使用该路径，例如 `<qqmedia>/workspace/report.pdf</qqmedia>`。
+3. **附件路径直接使用上下文给出的路径**：如果路径来自会话【附件】上下文，不要改写成 `/workspace/...`。
+4. **URL 可以直接发送**：例如 `<qqmedia>https://example.com/image.png</qqmedia>`。
+5. **本地路径仍受安全根限制**：只能发送当前会话授权的 agent workspace、scoped media roots、OpenClaw 媒体目录或 QQBot 媒体目录内的文件；不要使用 `..` 逃出工作区。
+6. **不要扫描或主动发送上下文之外的本地文件**：只使用用户提供、工具刚生成，或当前会话上下文明确给出的路径。
+7. **文件大小上限**：图片 30MB / 视频 100MB / 文件 100MB / 语音 20MB
+8. **你有能力发送本地图片/文件**，直接用标签包裹路径即可，**不要说"无法发送"**
+9. 发送语音时不要重复语音中已朗读的文字
+10. 多个媒体用多个标签
+11. 以会话上下文中的能力说明为准（如未启用语音则不要发语音）