@qwen-code/channel-qqbot 0.26.4 → 0.26.5

package/dist/QQChannel.d.ts

@@ -62,6 +62,13 @@ export declare class QQChannel extends ChannelBase {
     /** Track the latest user messageId per chatId for proper reply (msg_id). */
     private replyMsgId;
     private replyContextByMessageId;
+    /**
+     * Recent inbound messages per chat, newest last, used by the moderation
+     * tools to resolve "that member's last message" into a message id the
+     * platform can recall. The ring is bounded by the per-chat count cap and,
+     * when `moderationRecallWindowMs` is positive, by that age.
+     */
+    private recentInbound;
     private inboundReplyContext;
     /** msg_seq counter per user messageId, for multi-block streaming. */
     private msgSeqMap;
@@ -77,6 +84,16 @@ export declare class QQChannel extends ChannelBase {
     private replyMsgIdCleanupTimer;
     /** 5-minute TTL for replyMsgId entries and seenMessages dedup. */
     private static readonly REPLY_MSG_ID_TTL_MS;
+    /**
+     * How long the ring keeps an entry, from `moderationRecallWindowMs`: a
+     * positive value is an age in ms, -1 keeps entries until the count cap
+     * evicts them, and 0 disables the ring (and member-targeted recall).
+     */
+    private moderationRecallWindowMs;
+    /** Per-chat cap for the recent-inbound ring. */
+    private static readonly MAX_RECENT_INBOUND;
+    /** Sweep idle chats out of the ring once it holds this many. */
+    private static readonly MAX_RECENT_INBOUND_CHATS;
     /** Idle-flush timeout: buffer is sent after this many ms of silence. */
     private static readonly IDLE_FLUSH_MS;
     /** Max consecutive send failures before the stream is abandoned. */
@@ -154,6 +171,14 @@ export declare class QQChannel extends ChannelBase {
      * chunks onto its own msg_id (see PR #6457 review).
      */
     private sessionReplyMsgId;
+    /**
+     * Chat the turn in progress is about, per session, recorded by
+     * onPromptStart. Under a shared `sessionScope` a session serves many chats,
+     * so the router target frozen at session creation is whichever chat created
+     * it — not the chat a tool call belongs to. The moderation tools resolve
+     * their chat from here instead. Cleared on prompt end and session teardown.
+     */
+    private sessionTurnChat;
     /**
      * Monotonic turn counter per session, bumped on every onPromptStart.
      * streamState entries carry the turn they were created in; when a new
@@ -285,7 +310,8 @@ export declare class QQChannel extends ChannelBase {
     runCronFlow(fn: () => Promise<void>): Promise<void>;
     /**
      * Override setBridge to re-attach the permanent `_cronTextHandler`
-     * after bridge crash-recovery.
+     * after bridge crash-recovery, and to re-register the moderation tools:
+     * they live on the bridge instance, so a fresh bridge starts without them.
      */
     setBridge(bridge: ChannelAgentBridge): void;
     connect(): Promise<void>;
@@ -331,7 +357,7 @@ export declare class QQChannel extends ChannelBase {
      * Proactive turns (loop/webhook/cron) have no triggering message; their
      * replies must go out as active messages, so clear any stale anchor.
      */
-    protected onPromptStart(_chatId: string, sessionId: string, messageId?: string): void;
+    protected onPromptStart(chatId: string, sessionId: string, messageId?: string): void;
     /**
      * ChannelBase invokes this unconditionally in a finally block — including
      * when the prompt was cancelled, in which case onResponseComplete is
@@ -811,6 +837,42 @@ export declare class QQChannel extends ChannelBase {
      * holder remains.
      */
     private setReplyMsgId;
+    /**
+     * Track an inbound message for the moderation tools. Kept in memory only:
+     * the ring does not survive a restart, so member-targeted recall only
+     * reaches messages received since the process started.
+     */
+    private recordRecentInbound;
+    /**
+     * Drop one recalled message from the ring so the next member-targeted recall
+     * resolves the previous message instead of re-targeting the destroyed one.
+     * Splices in place: `recentMemberMessage`'s backward scan relies on the ring
+     * staying ascending by `at`.
+     */
+    private dropRecentMessage;
+    /** Keep the ring's chat keys bounded: stale chats first, then LRU. */
+    private sweepRecentInbound;
+    /** Newest tracked message id from `senderId` in `chatId`. */
+    private recentMemberMessage;
+    /**
+     * The chat a moderation call may touch, resolved from the turn in progress.
+     * Under a shared `sessionScope` one session serves every group and DM, and
+     * the router target frozen at session creation is whichever chat happened to
+     * create it — using it would recall a message in a chat nobody asked about.
+     * ChannelBase calls `onPromptStart` for every turn with that turn's envelope
+     * chat, which is the only chat the turn is about.
+     */
+    private resolveModerationChat;
+    /**
+     * Expose the QQ group-management surface to the agent as client MCP tools.
+     * Opt-in: a no-op unless the channel sets moderationTools: true, and also a
+     * no-op when the bridge has no client MCP tool support. Tools are owned by
+     * this channel instance: one bridge can serve several channels, and the
+     * owner is what keeps each channel's sessions on their own credentials.
+     */
+    private registerModerationTools;
+    /** Single REST entry point for the moderation tools. */
+    private requestModerationApi;
     private deleteReplyContext;
     /**
      * Start periodic cleanup of expired replyMsgId entries.

package/dist/QQChannel.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"QQChannel.d.ts","sourceRoot":"","sources":["../src/QQChannel.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EACL,WAAW,EAUZ,MAAM,yBAAyB,CAAC;AACjC,OAAO,KAAK,EAEV,aAAa,EACb,kBAAkB,EAClB,kBAAkB,EAClB,2BAA2B,EAC3B,QAAQ,EACR,aAAa,EAEd,MAAM,yBAAyB,CAAC;AAkDjC,MAAM,MAAM,iBAAiB,GACzB,cAAc,GACd,iBAAiB,GACjB,iBAAiB,GACjB,qBAAqB,CAAC;AAE1B,qBAAa,aAAc,SAAQ,KAAK;IAEpC,QAAQ,CAAC,IAAI,EAAE,iBAAiB;gBAAvB,IAAI,EAAE,iBAAiB,EAChC,OAAO,EAAE,MAAM;CAKlB;AAqJD,8DAA8D;AAC9D,wBAAgB,aAAa,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAEjD;AAuFD,qBAAa,SAAU,SAAQ,WAAW;IACxC,OAAO,CAAC,EAAE,CAA0B;IACpC,OAAO,CAAC,WAAW,CAAc;IACjC,OAAO,CAAC,cAAc,CAAa;IACnC,OAAO,CAAC,iBAAiB,CAA8C;IACvE,OAAO,CAAC,cAAc,CAA+C;IACrE,OAAO,CAAC,iBAAiB,CAAiB;IAC1C,OAAO,CAAC,GAAG,CAAa;IACxB,OAAO,CAAC,iBAAiB,CAAa;IACtC,OAAO,CAAC,oBAAoB,CAAS;IACrC,kEAAkE;IAClE,OAAO,CAAC,SAAS,CAAc;IAC/B,+DAA+D;IAC/D,OAAO,CAAC,SAAS,CAAkB;IACnC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAkB;IAC3C,2FAA2F;IAC3F,OAAO,CAAC,wBAAwB,CAAkB;IAClD,kFAAkF;IAClF,OAAO,CAAC,aAAa,CAAuC;IAC5D,gFAAgF;IAChF,OAAO,CAAC,QAAQ,CAAkB;IAClC,gFAAgF;IAChF,OAAO,CAAC,YAAY,CAAkC;IACtD,mDAAmD;IACnD,OAAO,CAAC,gBAAgB,CAA+C;IACvE,iFAAiF;IACjF,OAAO,CAAC,gBAAgB,CAAa;IACrC,mEAAmE;IACnE,OAAO,CAAC,SAAS,CAA8C;IAC/D,uIAAuI;IACvI,OAAO,CAAC,cAAc,CAA6B;IACnD,gFAAgF;IAChF,OAAO,CAAC,cAAc,CAA8C;IACpE,wEAAwE;IACxE,OAAO,CAAC,YAAY,CAA8C;IAClE,gFAAgF;IAChF,OAAO,CAAC,cAAc,CAAkB;IAExC,wEAAwE;IACxE,OAAO,CAAC,WAAW,CAA2C;IAC9D,4EAA4E;IAC5E,OAAO,CAAC,UAAU,CACN;IACZ,OAAO,CAAC,uBAAuB,CAAqC;IACpE,OAAO,CAAC,mBAAmB,CAA2C;IACtE,qEAAqE;IACrE,OAAO,CAAC,SAAS,CAAkC;IACnD;;;;;;OAMG;IACH,OAAO,CAAC,mBAAmB,CAAkC;IAC7D,6DAA6D;IAC7D,OAAO,CAAC,sBAAsB,CAA+C;IAC7E,kEAAkE;IAClE,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,mBAAmB,CAAW;IACtD,wEAAwE;IACxE,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,aAAa,CAAQ;IAC7C,oEAAoE;IACpE,OAAO,CAAC,eAAe,CAAS;IAChC,wEAAwE;IACxE,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,qBAAqB,CAAQ;IACrD;;;;;;OAMG;IACH,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,4BAA4B,CAAK;IACzD,2DAA2D;IAC3D,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,iBAAiB,CAAQ;IACjD,mEAAmE;IACnE,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,iBAAiB,CAAM;IAI/C,wDAAwD;IACxD,OAAO,CAAC,gBAAgB,CAAkC;IAC1D,gGAAgG;IAChG,OAAO,CAAC,mBAAmB,CAA0B;IACrD,wEAAwE;IACxE,OAAO,CAAC,MAAM,CAAkB;IAChC,kEAAkE;IAClE,OAAO,CAAC,SAAS,CAAiB;IAClC,iDAAiD;IACjD,OAAO,CAAC,qBAAqB,CAAmC;IAChE;uGACmG;IACnG,OAAO,CAAC,oBAAoB,CAAyB;IACrD,sFAAsF;IACtF,OAAO,CAAC,sBAAsB,CAAkC;IAEhE,gEAAgE;IAChE,OAAO,CAAC,UAAU,CAA2C;IAE7D,wEAAwE;IACxE,OAAO,CAAC,gBAAgB,CACjB;IACP;;;+EAG2E;IAC3E,OAAO,CAAC,WAAW,CAAa;IAChC,OAAO,CAAC,uBAAuB,CAAkB;IACjD,8EAA8E;IAE9E;;;;;;;;;;;;;;;;;OAiBG;IAEH,OAAO,CAAC,WAAW,CAAoC;IACvD;;;;;;;;;;;;OAYG;IACH,OAAO,CAAC,iBAAiB,CACb;IACZ;;;;;;;OAOG;IACH,OAAO,CAAC,WAAW,CAAkC;IACrD,OAAO,CAAC,gBAAgB,CAAyC;IACjE,OAAO,CAAC,mBAAmB,CAA0B;IACrD,OAAO,CAAC,YAAY,CAAa;IACjC,OAAO,CAAC,eAAe,CAA0B;IACjD;;;;;;;;;;;OAWG;IACH,OAAO,CAAC,oBAAoB,CAA0B;IACtD;;;;;;;;;;;;;;;;;;;;;;;OAuBG;IACH,OAAO,CAAC,kBAAkB,CAAyC;IACnE;;;;;;;;;;;;;OAaG;IACH,OAAO,CAAC,cAAc,CAAkC;IACxD;;;;;;;OAOG;IACH,OAAO,CAAC,mBAAmB,CAMzB;IACF,OAAO,CAAC,0BAA0B,CAAS;IAC3C,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAS;IACrC;;;OAGG;IACH,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAS;IAC5C,wEAAwE;IACxE,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAS;IAC5C;;;;OAIG;IACH,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAS;gBAG1C,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,aAAa,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC/C,MAAM,EAAE,kBAAkB,EAC1B,OAAO,CAAC,EAAE,kBAAkB;IAoH9B,OAAO,CAAC,mBAAmB;IAwC3B;;;;;OAKG;IACH,OAAO,CAAC,cAAc;IA0LtB;;;;;;;OAOG;IACH,OAAO,CAAC,oBAAoB;IAY5B;;;;OAIG;IACH,OAAO,CAAC,sBAAsB;IAY9B;;;;OAIG;IACH,OAAO,CAAC,YAAY;IAYpB;;;;;;;OAOG;IACG,WAAW,CAAC,EAAE,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;IAQzD;;;OAGG;IACM,SAAS,CAAC,MAAM,EAAE,kBAAkB,GAAG,IAAI;IAU9C,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;IAmGf,aAAa,CAAC,QAAQ,EAAE,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC;IAazD,WAAW,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;cAYrC,iBAAiB,CACxC,MAAM,EAAE,MAAM,EACd,SAAS,EAAE,MAAM,GAAG,SAAS,EAC7B,IAAI,EAAE,MAAM,EACZ,WAAW,CAAC,EAAE,MAAM,GACnB,OAAO,CAAC,IAAI,CAAC;IAiBhB;;;;;;OAMG;IACH,OAAO,CAAC,2BAA2B;cAOV,mBAAmB,CAC1C,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,MAAM,EACZ,SAAS,EAAE,MAAM,EACjB,WAAW,CAAC,EAAE,MAAM,GACnB,OAAO,CAAC,IAAI,CAAC;YASF,2BAA2B;IAkTzC;;;;OAIG;YACW,YAAY;IAkD1B,oEAAoE;IACpE,OAAO,CAAC,WAAW;IAInB,UAAU,IAAI,IAAI;IAiGlB;;;;;;;;;;;;;;;;;;;OAmBG;cACgB,aAAa,CAC9B,OAAO,EAAE,MAAM,EACf,SAAS,EAAE,MAAM,EACjB,SAAS,CAAC,EAAE,MAAM,GACjB,IAAI;IAuCP;;;;;;;;;;;;;;OAcG;cACgB,WAAW,CAC5B,MAAM,EAAE,MAAM,EACd,SAAS,EAAE,MAAM,EACjB,UAAU,CAAC,EAAE,MAAM,GAClB,IAAI;IAkKP;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA6BG;YACW,qBAAqB;cA6IhB,eAAe,CAChC,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,MAAM,EACb,SAAS,EAAE,MAAM,EACjB,OAAO,CAAC,EAAE,2BAA2B,GACpC,IAAI;IA8OP,OAAO,CAAC,SAAS;IAmDjB;;;;OAIG;IACH,OAAO,CAAC,aAAa;IAuoBrB;;;;;;;;;;;;;;;;;;;;;OAqBG;IACH,OAAO,CAAC,2BAA2B;IAY1B,UAAU,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,aAAa,GAAG,IAAI;cAa7C,kBAAkB,CACnC,OAAO,EAAE,MAAM,EACf,SAAS,EAAE,MAAM,GAChB,IAAI;cAyEkB,kBAAkB,CACzC,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,MAAM,EAChB,SAAS,EAAE,MAAM,EACjB,OAAO,CAAC,EAAE,2BAA2B,GACpC,OAAO,CAAC,IAAI,CAAC;IAuOhB;;;;;;OAMG;IACH,OAAO,CAAC,iBAAiB;IAWzB;;;;;;;;;;;;;;;OAeG;YACW,uBAAuB;IAoCrC,OAAO,CAAC,iBAAiB;IAWzB;;;;;OAKG;IACH,OAAO,CAAC,iBAAiB;IAoDzB;;;;;;;OAOG;IACH,OAAO,CAAC,oBAAoB;IAS5B;;;;OAIG;IACH,OAAO,CAAC,eAAe;IAUvB;;;;;;;;OAQG;IACH,OAAO,CAAC,kBAAkB;IAI1B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAiCG;IACH,OAAO,CAAC,uBAAuB;IAiB/B;;;;;;;;;OASG;IACH,OAAO,CAAC,oBAAoB;IAU5B;;;;;;;;;;;;;;;OAeG;IACH,OAAO,CAAC,gBAAgB;IAkCxB;;;;;;;;;;;;;;;;;;;;;;;OAuBG;IACH,OAAO,CAAC,0BAA0B;IAOlC;;;;;;;OAOG;IACH,OAAO,CAAC,WAAW;IAOnB;;;;OAIG;IACH,OAAO,CAAC,YAAY;IAIpB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAsCG;IACH,OAAO,CAAC,gBAAgB;IAsHf,aAAa,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI;IA0C/C,OAAO,CAAC,gBAAgB;IAUxB,qDAAqD;IACrD,OAAO,CAAC,WAAW;IA0BnB;;;OAGG;IACH,OAAO,CAAC,iBAAiB;IAWzB,OAAO,CAAC,kCAAkC;IAa1C;;;OAGG;IACH,OAAO,CAAC,iBAAiB;IAWzB;;;OAGG;IACH,OAAO,CAAC,wBAAwB;IAMhC,2DAA2D;IAC3D,OAAO,CAAC,wBAAwB;IAMhC;;;;;;OAMG;IACH,OAAO,CAAC,eAAe;IAKvB;;;;;;;;;;;OAWG;IACH,OAAO,CAAC,oBAAoB;IA4B5B;;;;;OAKG;IACH,OAAO,CAAC,gBAAgB;IAMxB,qEAAqE;IACrE,OAAO,CAAC,YAAY;IAsBpB;;;;;;OAMG;IACH,OAAO,CAAC,cAAc;IAwJtB;;;OAGG;IACH,OAAO,CAAC,oBAAoB;IAe5B,OAAO,CAAC,qBAAqB;IAoB7B;;;;;;;;;;;OAWG;IACH,OAAO,CAAC,mBAAmB;IAkC3B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAwCG;IACH,OAAO,CAAC,uBAAuB;IAwT/B;;;;;;;OAOG;IACH,OAAO,CAAC,yBAAyB;IAWjC;;;;;;;;;;;;;;;;;OAiBG;IACH,OAAO,CAAC,yBAAyB;IA6BjC;;;;;;;;;;;;OAYG;IACH,OAAO,CAAC,kBAAkB;IA2B1B;;;;;;;OAOG;IACH,OAAO,CAAC,aAAa;IAOrB;;;;;;;;;;OAUG;IACH,OAAO,CAAC,2BAA2B;IAQnC,yEAAyE;IACzE,OAAO,CAAC,eAAe;IAOvB,oEAAoE;IACpE,OAAO,CAAC,aAAa;IAMrB,gEAAgE;IAChE,OAAO,CAAC,wBAAwB;IAUhC;;;;;OAKG;IACH,OAAO,CAAC,aAAa;IAYrB,OAAO,CAAC,kBAAkB;IAiB1B;;;;OAIG;IACH,OAAO,CAAC,sBAAsB;IA0D9B,OAAO,CAAC,qBAAqB;YASf,UAAU;IAmCxB,OAAO,CAAC,oBAAoB;IAiE5B,OAAO,CAAC,gBAAgB;YASV,cAAc;IAa5B,OAAO,CAAC,WAAW;IAmHnB;;;OAGG;IACH,OAAO,CAAC,aAAa;IAUrB,OAAO,CAAC,oBAAoB;IAwL5B,OAAO,CAAC,YAAY;IAuCpB;;;;OAIG;YACW,kBAAkB;IA+DhC,OAAO,CAAC,KAAK;IAOb,OAAO,CAAC,cAAc;IAkBtB,OAAO,CAAC,aAAa;IASrB,OAAO,CAAC,gBAAgB;IAsBxB,4EAA4E;IAC5E,OAAO,CAAC,WAAW;IAkBnB;;;OAGG;IACH,OAAO,CAAC,mBAAmB;IAiJ3B,8DAA8D;IAC9D,OAAO,CAAC,YAAY;IASpB,OAAO,CAAC,eAAe;YAUT,kBAAkB;IA2FhC,OAAO,CAAC,SAAS;IAoEjB,OAAO,CAAC,WAAW;IAgGnB,OAAO,CAAC,cAAc;IAuKtB,OAAO,CAAC,mBAAmB;IAqB3B,OAAO,CAAC,mBAAmB;IAyF3B,OAAO,CAAC,oBAAoB;CAsB7B"}
+{"version":3,"file":"QQChannel.d.ts","sourceRoot":"","sources":["../src/QQChannel.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EACL,WAAW,EAUZ,MAAM,yBAAyB,CAAC;AACjC,OAAO,KAAK,EAEV,aAAa,EACb,kBAAkB,EAClB,kBAAkB,EAClB,2BAA2B,EAC3B,QAAQ,EACR,aAAa,EAEd,MAAM,yBAAyB,CAAC;AAwDjC,MAAM,MAAM,iBAAiB,GACzB,cAAc,GACd,iBAAiB,GACjB,iBAAiB,GACjB,qBAAqB,CAAC;AAE1B,qBAAa,aAAc,SAAQ,KAAK;IAEpC,QAAQ,CAAC,IAAI,EAAE,iBAAiB;gBAAvB,IAAI,EAAE,iBAAiB,EAChC,OAAO,EAAE,MAAM;CAKlB;AAqJD,8DAA8D;AAC9D,wBAAgB,aAAa,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAEjD;AAuFD,qBAAa,SAAU,SAAQ,WAAW;IACxC,OAAO,CAAC,EAAE,CAA0B;IACpC,OAAO,CAAC,WAAW,CAAc;IACjC,OAAO,CAAC,cAAc,CAAa;IACnC,OAAO,CAAC,iBAAiB,CAA8C;IACvE,OAAO,CAAC,cAAc,CAA+C;IACrE,OAAO,CAAC,iBAAiB,CAAiB;IAC1C,OAAO,CAAC,GAAG,CAAa;IACxB,OAAO,CAAC,iBAAiB,CAAa;IACtC,OAAO,CAAC,oBAAoB,CAAS;IACrC,kEAAkE;IAClE,OAAO,CAAC,SAAS,CAAc;IAC/B,+DAA+D;IAC/D,OAAO,CAAC,SAAS,CAAkB;IACnC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAkB;IAC3C,2FAA2F;IAC3F,OAAO,CAAC,wBAAwB,CAAkB;IAClD,kFAAkF;IAClF,OAAO,CAAC,aAAa,CAAuC;IAC5D,gFAAgF;IAChF,OAAO,CAAC,QAAQ,CAAkB;IAClC,gFAAgF;IAChF,OAAO,CAAC,YAAY,CAAkC;IACtD,mDAAmD;IACnD,OAAO,CAAC,gBAAgB,CAA+C;IACvE,iFAAiF;IACjF,OAAO,CAAC,gBAAgB,CAAa;IACrC,mEAAmE;IACnE,OAAO,CAAC,SAAS,CAA8C;IAC/D,uIAAuI;IACvI,OAAO,CAAC,cAAc,CAA6B;IACnD,gFAAgF;IAChF,OAAO,CAAC,cAAc,CAA8C;IACpE,wEAAwE;IACxE,OAAO,CAAC,YAAY,CAA8C;IAClE,gFAAgF;IAChF,OAAO,CAAC,cAAc,CAAkB;IAExC,wEAAwE;IACxE,OAAO,CAAC,WAAW,CAA2C;IAC9D,4EAA4E;IAC5E,OAAO,CAAC,UAAU,CACN;IACZ,OAAO,CAAC,uBAAuB,CAAqC;IACpE;;;;;OAKG;IACH,OAAO,CAAC,aAAa,CAGjB;IACJ,OAAO,CAAC,mBAAmB,CAA2C;IACtE,qEAAqE;IACrE,OAAO,CAAC,SAAS,CAAkC;IACnD;;;;;;OAMG;IACH,OAAO,CAAC,mBAAmB,CAAkC;IAC7D,6DAA6D;IAC7D,OAAO,CAAC,sBAAsB,CAA+C;IAC7E,kEAAkE;IAClE,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,mBAAmB,CAAW;IACtD;;;;OAIG;IACH,OAAO,CAAC,wBAAwB,CAAS;IACzC,gDAAgD;IAChD,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,kBAAkB,CAAM;IAChD,gEAAgE;IAChE,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,wBAAwB,CAAO;IACvD,wEAAwE;IACxE,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,aAAa,CAAQ;IAC7C,oEAAoE;IACpE,OAAO,CAAC,eAAe,CAAS;IAChC,wEAAwE;IACxE,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,qBAAqB,CAAQ;IACrD;;;;;;OAMG;IACH,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,4BAA4B,CAAK;IACzD,2DAA2D;IAC3D,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,iBAAiB,CAAQ;IACjD,mEAAmE;IACnE,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,iBAAiB,CAAM;IAI/C,wDAAwD;IACxD,OAAO,CAAC,gBAAgB,CAAkC;IAC1D,gGAAgG;IAChG,OAAO,CAAC,mBAAmB,CAA0B;IACrD,wEAAwE;IACxE,OAAO,CAAC,MAAM,CAAkB;IAChC,kEAAkE;IAClE,OAAO,CAAC,SAAS,CAAiB;IAClC,iDAAiD;IACjD,OAAO,CAAC,qBAAqB,CAAmC;IAChE;uGACmG;IACnG,OAAO,CAAC,oBAAoB,CAAyB;IACrD,sFAAsF;IACtF,OAAO,CAAC,sBAAsB,CAAkC;IAEhE,gEAAgE;IAChE,OAAO,CAAC,UAAU,CAA2C;IAE7D,wEAAwE;IACxE,OAAO,CAAC,gBAAgB,CACjB;IACP;;;+EAG2E;IAC3E,OAAO,CAAC,WAAW,CAAa;IAChC,OAAO,CAAC,uBAAuB,CAAkB;IACjD,8EAA8E;IAE9E;;;;;;;;;;;;;;;;;OAiBG;IAEH,OAAO,CAAC,WAAW,CAAoC;IACvD;;;;;;;;;;;;OAYG;IACH,OAAO,CAAC,iBAAiB,CACb;IACZ;;;;;;OAMG;IACH,OAAO,CAAC,eAAe,CACX;IACZ;;;;;;;OAOG;IACH,OAAO,CAAC,WAAW,CAAkC;IACrD,OAAO,CAAC,gBAAgB,CAAyC;IACjE,OAAO,CAAC,mBAAmB,CAA0B;IACrD,OAAO,CAAC,YAAY,CAAa;IACjC,OAAO,CAAC,eAAe,CAA0B;IACjD;;;;;;;;;;;OAWG;IACH,OAAO,CAAC,oBAAoB,CAA0B;IACtD;;;;;;;;;;;;;;;;;;;;;;;OAuBG;IACH,OAAO,CAAC,kBAAkB,CAAyC;IACnE;;;;;;;;;;;;;OAaG;IACH,OAAO,CAAC,cAAc,CAAkC;IACxD;;;;;;;OAOG;IACH,OAAO,CAAC,mBAAmB,CAMzB;IACF,OAAO,CAAC,0BAA0B,CAAS;IAC3C,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAS;IACrC;;;OAGG;IACH,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAS;IAC5C,wEAAwE;IACxE,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAS;IAC5C;;;;OAIG;IACH,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAS;gBAG1C,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,aAAa,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC/C,MAAM,EAAE,kBAAkB,EAC1B,OAAO,CAAC,EAAE,kBAAkB;IAiI9B,OAAO,CAAC,mBAAmB;IAwC3B;;;;;OAKG;IACH,OAAO,CAAC,cAAc;IA0LtB;;;;;;;OAOG;IACH,OAAO,CAAC,oBAAoB;IAY5B;;;;OAIG;IACH,OAAO,CAAC,sBAAsB;IAY9B;;;;OAIG;IACH,OAAO,CAAC,YAAY;IAYpB;;;;;;;OAOG;IACG,WAAW,CAAC,EAAE,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;IAQzD;;;;OAIG;IACM,SAAS,CAAC,MAAM,EAAE,kBAAkB,GAAG,IAAI;IAW9C,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;IAmGf,aAAa,CAAC,QAAQ,EAAE,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC;IAazD,WAAW,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;cAYrC,iBAAiB,CACxC,MAAM,EAAE,MAAM,EACd,SAAS,EAAE,MAAM,GAAG,SAAS,EAC7B,IAAI,EAAE,MAAM,EACZ,WAAW,CAAC,EAAE,MAAM,GACnB,OAAO,CAAC,IAAI,CAAC;IAiBhB;;;;;;OAMG;IACH,OAAO,CAAC,2BAA2B;cAOV,mBAAmB,CAC1C,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,MAAM,EACZ,SAAS,EAAE,MAAM,EACjB,WAAW,CAAC,EAAE,MAAM,GACnB,OAAO,CAAC,IAAI,CAAC;YASF,2BAA2B;IAkTzC;;;;OAIG;YACW,YAAY;IAkD1B,oEAAoE;IACpE,OAAO,CAAC,WAAW;IAInB,UAAU,IAAI,IAAI;IAkGlB;;;;;;;;;;;;;;;;;;;OAmBG;cACgB,aAAa,CAC9B,MAAM,EAAE,MAAM,EACd,SAAS,EAAE,MAAM,EACjB,SAAS,CAAC,EAAE,MAAM,GACjB,IAAI;IA6CP;;;;;;;;;;;;;;OAcG;cACgB,WAAW,CAC5B,MAAM,EAAE,MAAM,EACd,SAAS,EAAE,MAAM,EACjB,UAAU,CAAC,EAAE,MAAM,GAClB,IAAI;IAmKP;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA6BG;YACW,qBAAqB;cA6IhB,eAAe,CAChC,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,MAAM,EACb,SAAS,EAAE,MAAM,EACjB,OAAO,CAAC,EAAE,2BAA2B,GACpC,IAAI;IA8OP,OAAO,CAAC,SAAS;IAmDjB;;;;OAIG;IACH,OAAO,CAAC,aAAa;IAuoBrB;;;;;;;;;;;;;;;;;;;;;OAqBG;IACH,OAAO,CAAC,2BAA2B;IAY1B,UAAU,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,aAAa,GAAG,IAAI;cAa7C,kBAAkB,CACnC,OAAO,EAAE,MAAM,EACf,SAAS,EAAE,MAAM,GAChB,IAAI;cAyEkB,kBAAkB,CACzC,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,MAAM,EAChB,SAAS,EAAE,MAAM,EACjB,OAAO,CAAC,EAAE,2BAA2B,GACpC,OAAO,CAAC,IAAI,CAAC;IAuOhB;;;;;;OAMG;IACH,OAAO,CAAC,iBAAiB;IAWzB;;;;;;;;;;;;;;;OAeG;YACW,uBAAuB;IAoCrC,OAAO,CAAC,iBAAiB;IAWzB;;;;;OAKG;IACH,OAAO,CAAC,iBAAiB;IAoDzB;;;;;;;OAOG;IACH,OAAO,CAAC,oBAAoB;IAS5B;;;;OAIG;IACH,OAAO,CAAC,eAAe;IAUvB;;;;;;;;OAQG;IACH,OAAO,CAAC,kBAAkB;IAI1B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAiCG;IACH,OAAO,CAAC,uBAAuB;IAiB/B;;;;;;;;;OASG;IACH,OAAO,CAAC,oBAAoB;IAU5B;;;;;;;;;;;;;;;OAeG;IACH,OAAO,CAAC,gBAAgB;IAkCxB;;;;;;;;;;;;;;;;;;;;;;;OAuBG;IACH,OAAO,CAAC,0BAA0B;IAOlC;;;;;;;OAOG;IACH,OAAO,CAAC,WAAW;IAOnB;;;;OAIG;IACH,OAAO,CAAC,YAAY;IAIpB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAsCG;IACH,OAAO,CAAC,gBAAgB;IAsHf,aAAa,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI;IA2C/C,OAAO,CAAC,gBAAgB;IAUxB,qDAAqD;IACrD,OAAO,CAAC,WAAW;IA0BnB;;;OAGG;IACH,OAAO,CAAC,iBAAiB;IAWzB,OAAO,CAAC,kCAAkC;IAa1C;;;OAGG;IACH,OAAO,CAAC,iBAAiB;IAWzB;;;OAGG;IACH,OAAO,CAAC,wBAAwB;IAMhC,2DAA2D;IAC3D,OAAO,CAAC,wBAAwB;IAMhC;;;;;;OAMG;IACH,OAAO,CAAC,eAAe;IAKvB;;;;;;;;;;;OAWG;IACH,OAAO,CAAC,oBAAoB;IA4B5B;;;;;OAKG;IACH,OAAO,CAAC,gBAAgB;IAMxB,qEAAqE;IACrE,OAAO,CAAC,YAAY;IAsBpB;;;;;;OAMG;IACH,OAAO,CAAC,cAAc;IAwJtB;;;OAGG;IACH,OAAO,CAAC,oBAAoB;IAe5B,OAAO,CAAC,qBAAqB;IAoB7B;;;;;;;;;;;OAWG;IACH,OAAO,CAAC,mBAAmB;IAkC3B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAwCG;IACH,OAAO,CAAC,uBAAuB;IAwT/B;;;;;;;OAOG;IACH,OAAO,CAAC,yBAAyB;IAWjC;;;;;;;;;;;;;;;;;OAiBG;IACH,OAAO,CAAC,yBAAyB;IA6BjC;;;;;;;;;;;;OAYG;IACH,OAAO,CAAC,kBAAkB;IA2B1B;;;;;;;OAOG;IACH,OAAO,CAAC,aAAa;IAOrB;;;;;;;;;;OAUG;IACH,OAAO,CAAC,2BAA2B;IAQnC,yEAAyE;IACzE,OAAO,CAAC,eAAe;IAOvB,oEAAoE;IACpE,OAAO,CAAC,aAAa;IAMrB,gEAAgE;IAChE,OAAO,CAAC,wBAAwB;IAUhC;;;;;OAKG;IACH,OAAO,CAAC,aAAa;IAYrB;;;;OAIG;IACH,OAAO,CAAC,mBAAmB;IA6B3B;;;;;OAKG;IACH,OAAO,CAAC,iBAAiB;IASzB,sEAAsE;IACtE,OAAO,CAAC,kBAAkB;IAwB1B,6DAA6D;IAC7D,OAAO,CAAC,mBAAmB;IAe3B;;;;;;;OAOG;IACH,OAAO,CAAC,qBAAqB;IAgB7B;;;;;;OAMG;IACH,OAAO,CAAC,uBAAuB;IAsB/B,wDAAwD;YAC1C,oBAAoB;IAkElC,OAAO,CAAC,kBAAkB;IAiB1B;;;;OAIG;IACH,OAAO,CAAC,sBAAsB;IA0D9B,OAAO,CAAC,qBAAqB;YASf,UAAU;IAmCxB,OAAO,CAAC,oBAAoB;IAiE5B,OAAO,CAAC,gBAAgB;YASV,cAAc;IAa5B,OAAO,CAAC,WAAW;IAmHnB;;;OAGG;IACH,OAAO,CAAC,aAAa;IAUrB,OAAO,CAAC,oBAAoB;IAwL5B,OAAO,CAAC,YAAY;IAuCpB;;;;OAIG;YACW,kBAAkB;IA+DhC,OAAO,CAAC,KAAK;IAOb,OAAO,CAAC,cAAc;IAkBtB,OAAO,CAAC,aAAa;IASrB,OAAO,CAAC,gBAAgB;IAsBxB,4EAA4E;IAC5E,OAAO,CAAC,WAAW;IAkBnB;;;OAGG;IACH,OAAO,CAAC,mBAAmB;IAiJ3B,8DAA8D;IAC9D,OAAO,CAAC,YAAY;IASpB,OAAO,CAAC,eAAe;YAUT,kBAAkB;IA2FhC,OAAO,CAAC,SAAS;IAuEjB,OAAO,CAAC,WAAW;IAiGnB,OAAO,CAAC,cAAc;IA+KtB,OAAO,CAAC,mBAAmB;IAqB3B,OAAO,CAAC,mBAAmB;IA0F3B,OAAO,CAAC,oBAAoB;CAsB7B"}

package/dist/QQChannel.js

@@ -23,7 +23,8 @@ import { OpCode, Intent } from './types.js';
 import { QQ_FILE_MAX_BYTES, QQ_IMAGE_MAX_BYTES, QQ_MAX_ATTACHMENTS, QQ_VIDEO_MAX_BYTES, QQ_VOICE_MAX_BYTES, classifyQQAttachment, downloadQQAttachment, } from './media.js';
 import { getCredsFilePath, loadCredentials, saveCredentials, } from './accounts.js';
 import { qrCodeLogin } from './login.js';
-import { fetchAccessToken, fetchGatewayUrl, getApiBase, sendQQMessage, } from './api.js';
+import { fetchAccessToken, fetchGatewayUrl, getApiBase, requestQQApi, sendQQMessage, } from './api.js';
+import { buildModerationTools, } from './moderation-tools.js';
 /** QQ Bot OPENID format: exactly 32 uppercase hex chars (bot and sender OPENIDs). */
 const QQ_OPENID_RE = /^[A-F0-9]{32}$/i;
 export class DeliveryError extends Error {
@@ -152,6 +153,13 @@ export class QQChannel extends ChannelBase {
     /** Track the latest user messageId per chatId for proper reply (msg_id). */
     replyMsgId = new Map();
     replyContextByMessageId = new Map();
+    /**
+     * Recent inbound messages per chat, newest last, used by the moderation
+     * tools to resolve "that member's last message" into a message id the
+     * platform can recall. The ring is bounded by the per-chat count cap and,
+     * when `moderationRecallWindowMs` is positive, by that age.
+     */
+    recentInbound = new Map();
     inboundReplyContext = new AsyncLocalStorage();
     /** msg_seq counter per user messageId, for multi-block streaming. */
     msgSeqMap = new Map();
@@ -167,6 +175,16 @@ export class QQChannel extends ChannelBase {
     replyMsgIdCleanupTimer = null;
     /** 5-minute TTL for replyMsgId entries and seenMessages dedup. */
     static REPLY_MSG_ID_TTL_MS = 300_000;
+    /**
+     * How long the ring keeps an entry, from `moderationRecallWindowMs`: a
+     * positive value is an age in ms, -1 keeps entries until the count cap
+     * evicts them, and 0 disables the ring (and member-targeted recall).
+     */
+    moderationRecallWindowMs;
+    /** Per-chat cap for the recent-inbound ring. */
+    static MAX_RECENT_INBOUND = 50;
+    /** Sweep idle chats out of the ring once it holds this many. */
+    static MAX_RECENT_INBOUND_CHATS = 256;
     /** Idle-flush timeout: buffer is sent after this many ms of silence. */
     static IDLE_FLUSH_MS = 2000;
     /** Max consecutive send failures before the stream is abandoned. */
@@ -246,6 +264,14 @@ export class QQChannel extends ChannelBase {
      * chunks onto its own msg_id (see PR #6457 review).
      */
     sessionReplyMsgId = new Map();
+    /**
+     * Chat the turn in progress is about, per session, recorded by
+     * onPromptStart. Under a shared `sessionScope` a session serves many chats,
+     * so the router target frozen at session creation is whichever chat created
+     * it — not the chat a tool call belongs to. The moderation tools resolve
+     * their chat from here instead. Cleared on prompt end and session teardown.
+     */
+    sessionTurnChat = new Map();
     /**
      * Monotonic turn counter per session, bumped on every onPromptStart.
      * streamState entries carry the turn they were created in; when a new
@@ -409,6 +435,15 @@ export class QQChannel extends ChannelBase {
             process.stderr.write(`[QQ:${this.name}] WARNING: invalid bufferFlushLength=${raw}, using default ${QQChannel.MAX_BUFFER_LENGTH}\n`);
             this.qqConfig.bufferFlushLength = QQChannel.MAX_BUFFER_LENGTH;
         }
+        const recallWindow = this.qqConfig.moderationRecallWindowMs;
+        if (recallWindow !== undefined &&
+            (!Number.isInteger(recallWindow) || recallWindow < -1)) {
+            process.stderr.write(`[QQ:${this.name}] WARNING: invalid moderationRecallWindowMs=${recallWindow}, using -1 (no time limit)\n`);
+            this.moderationRecallWindowMs = -1;
+        }
+        else {
+            this.moderationRecallWindowMs = recallWindow ?? -1;
+        }
         this.qqStatePath = join(stateDir, `${safeName}-state.json`);
         // In standalone mode (no external router), use the per-channel
         // sessions path so the channel owns its own session file.
@@ -425,6 +460,7 @@ export class QQChannel extends ChannelBase {
             this._cronTextHandler = (sid, t) => this.handleCronTextChunk(sid, t);
             this.attachCronHandler();
         }
+        this.registerModerationTools();
         // Seal a stashed head on every bridge boundary, including the ones
         // ChannelBase suppresses while a cancel is pending.
         this.attachBridgeBoundarySeal();
@@ -688,13 +724,15 @@ export class QQChannel extends ChannelBase {
     }
     /**
      * Override setBridge to re-attach the permanent `_cronTextHandler`
-     * after bridge crash-recovery.
+     * after bridge crash-recovery, and to re-register the moderation tools:
+     * they live on the bridge instance, so a fresh bridge starts without them.
      */
     setBridge(bridge) {
         this.detachCronHandler();
         this.detachBridgeBoundarySeal();
         super.setBridge(bridge);
         this.attachCronHandler();
+        this.registerModerationTools();
         this.attachBridgeBoundarySeal();
     }
     // ── ChannelBase interface ──────────────────────────────────────
@@ -1141,6 +1179,7 @@ export class QQChannel extends ChannelBase {
         }
         this.streamState.clear();
         this.sessionReplyMsgId.clear();
+        this.sessionTurnChat.clear();
         this.turnCounter.clear();
         this.flushingSessions.clear();
         this.pendingStreamDelete.clear();
@@ -1181,7 +1220,13 @@ export class QQChannel extends ChannelBase {
      * Proactive turns (loop/webhook/cron) have no triggering message; their
      * replies must go out as active messages, so clear any stale anchor.
      */
-    onPromptStart(_chatId, sessionId, messageId) {
+    onPromptStart(chatId, sessionId, messageId) {
+        // A shared sessionScope maps many chats onto one session, so the chat a
+        // tool call belongs to is this turn's, not the session's routed target.
+        this.sessionTurnChat.set(sessionId, {
+            chatId,
+            isGroup: this.chatTypeFor(chatId) === 'group',
+        });
         this.activePromptSessions.add(sessionId);
         // Bump the turn generation: streamState entries created by a previous
         // turn on this session (e.g. one left behind by a deferred send) are now
@@ -1235,6 +1280,7 @@ export class QQChannel extends ChannelBase {
      * trip the .then() identity guard and silently drop the residual buffer.
      */
     onPromptEnd(chatId, sessionId, _messageId) {
+        this.sessionTurnChat.delete(sessionId);
         // Always clear the prompt-in-flight marker first: the PR #8241 teardown
         // below has early returns (deferred flush chains) that must not leave
         // this session marked as an active prompt for the cron discriminator.
@@ -3140,6 +3186,7 @@ export class QQChannel extends ChannelBase {
         this.streamOrphanBuffer.set(sessionId, merged);
     }
     onSessionDied(sessionId) {
+        this.sessionTurnChat.delete(sessionId);
         const state = this.streamState.get(sessionId);
         if (state?.timer) {
             clearTimeout(state.timer);
@@ -4021,6 +4068,198 @@ export class QQChannel extends ChannelBase {
         this.replyContextByMessageId.set(msgId, { chatId, msgId, timestamp });
         this.saveQQState();
     }
+    /**
+     * Track an inbound message for the moderation tools. Kept in memory only:
+     * the ring does not survive a restart, so member-targeted recall only
+     * reaches messages received since the process started.
+     */
+    recordRecentInbound(chatId, senderId, messageId) {
+        // Nothing can resolve a member's message when the tools are off or the
+        // window is 0, so do not spend memory recording one.
+        const window = this.moderationRecallWindowMs;
+        if (this.qqConfig.moderationTools !== true || window === 0)
+            return;
+        if (!senderId || !messageId)
+            return;
+        const prior = this.recentInbound.get(chatId) ?? [];
+        // First write wins for one message id. The same platform id is redelivered
+        // on reconnect replay and arrives twice when a message is both
+        // GROUP_AT_MESSAGE_CREATE and GROUP_MESSAGE_CREATE; re-stamping it would
+        // make an older message outrank a newer one and extend its lifetime.
+        if (prior.some((entry) => entry.messageId === messageId))
+            return;
+        const now = Date.now();
+        const entries = window > 0 ? prior.filter((entry) => now - entry.at < window) : prior;
+        entries.push({ messageId, senderId, at: now });
+        if (entries.length > QQChannel.MAX_RECENT_INBOUND) {
+            entries.splice(0, entries.length - QQChannel.MAX_RECENT_INBOUND);
+        }
+        this.recentInbound.set(chatId, entries);
+        if (this.recentInbound.size > QQChannel.MAX_RECENT_INBOUND_CHATS) {
+            this.sweepRecentInbound(now);
+        }
+    }
+    /**
+     * Drop one recalled message from the ring so the next member-targeted recall
+     * resolves the previous message instead of re-targeting the destroyed one.
+     * Splices in place: `recentMemberMessage`'s backward scan relies on the ring
+     * staying ascending by `at`.
+     */
+    dropRecentMessage(chatId, messageId) {
+        const entries = this.recentInbound.get(chatId);
+        if (!entries)
+            return;
+        const index = entries.findIndex((entry) => entry.messageId === messageId);
+        if (index === -1)
+            return;
+        entries.splice(index, 1);
+        if (entries.length === 0)
+            this.recentInbound.delete(chatId);
+    }
+    /** Keep the ring's chat keys bounded: stale chats first, then LRU. */
+    sweepRecentInbound(now) {
+        const window = this.moderationRecallWindowMs;
+        if (window > 0) {
+            for (const [chatId, entries] of this.recentInbound) {
+                if (entries.every((entry) => now - entry.at >= window)) {
+                    this.recentInbound.delete(chatId);
+                }
+            }
+        }
+        while (this.recentInbound.size > QQChannel.MAX_RECENT_INBOUND_CHATS) {
+            let oldestChat;
+            let oldestAt = Infinity;
+            for (const [chatId, entries] of this.recentInbound) {
+                const last = entries[entries.length - 1]?.at ?? 0;
+                if (last < oldestAt) {
+                    oldestAt = last;
+                    oldestChat = chatId;
+                }
+            }
+            if (oldestChat === undefined)
+                return;
+            this.recentInbound.delete(oldestChat);
+        }
+    }
+    /** Newest tracked message id from `senderId` in `chatId`. */
+    recentMemberMessage(chatId, senderId) {
+        const now = Date.now();
+        const window = this.moderationRecallWindowMs;
+        const entries = this.recentInbound.get(chatId) ?? [];
+        for (let i = entries.length - 1; i >= 0; i--) {
+            const entry = entries[i];
+            if (window > 0 && now - entry.at >= window)
+                break;
+            if (entry.senderId === senderId)
+                return entry.messageId;
+        }
+        return undefined;
+    }
+    /**
+     * The chat a moderation call may touch, resolved from the turn in progress.
+     * Under a shared `sessionScope` one session serves every group and DM, and
+     * the router target frozen at session creation is whichever chat happened to
+     * create it — using it would recall a message in a chat nobody asked about.
+     * ChannelBase calls `onPromptStart` for every turn with that turn's envelope
+     * chat, which is the only chat the turn is about.
+     */
+    resolveModerationChat(sessionId) {
+        const turn = this.sessionTurnChat.get(sessionId);
+        if (turn)
+            return turn;
+        // No turn in progress. A per-chat scope still maps the session to one
+        // chat, so its routed target is that chat — keep the channel-name guard so
+        // this instance's token cannot act on another channel's chat when several
+        // channels share one router. 'single' maps every chat onto one session, so
+        // its frozen target cannot say which chat this is: fail closed.
+        if (this.config.sessionScope === 'single')
+            return undefined;
+        const target = this.router.getTarget(sessionId);
+        if (!target || target.channelName !== this.name)
+            return undefined;
+        return { chatId: target.chatId, isGroup: target.isGroup === true };
+    }
+    /**
+     * Expose the QQ group-management surface to the agent as client MCP tools.
+     * Opt-in: a no-op unless the channel sets moderationTools: true, and also a
+     * no-op when the bridge has no client MCP tool support. Tools are owned by
+     * this channel instance: one bridge can serve several channels, and the
+     * owner is what keeps each channel's sessions on their own credentials.
+     */
+    registerModerationTools() {
+        if (this.qqConfig.moderationTools !== true)
+            return;
+        const register = this.bridge.registerChannelTool?.bind(this.bridge);
+        if (!register)
+            return;
+        for (const tool of buildModerationTools({
+            resolveChat: (sessionId) => this.resolveModerationChat(sessionId),
+            memberRecallDisabled: this.moderationRecallWindowMs === 0,
+            currentSenderId: (sessionId) => this.getResponseSenderId(sessionId),
+            recentMemberMessage: (chatId, senderId) => this.recentMemberMessage(chatId, senderId),
+            dropRecentMessage: (chatId, messageId) => this.dropRecentMessage(chatId, messageId),
+            request: (input) => this.requestModerationApi(input),
+            log: (message) => process.stderr.write(`[QQ:${this.name}] ${sanitizeLogText(message, 200)}\n`),
+        })) {
+            register({ ...tool, owner: this.name });
+        }
+    }
+    /** Single REST entry point for the moderation tools. */
+    async requestModerationApi(input) {
+        if (this.disposed) {
+            return { ok: false, status: 0, message: 'channel disposed' };
+        }
+        if (!this.accessToken || Date.now() >= this.tokenExpiresAt) {
+            try {
+                await this.fetchToken();
+            }
+            catch (error) {
+                return {
+                    ok: false,
+                    status: 0,
+                    message: `token refresh failed: ${error instanceof Error ? error.message : String(error)}`,
+                };
+            }
+        }
+        if (!this.accessToken) {
+            return { ok: false, status: 0, message: 'no QQ access token' };
+        }
+        try {
+            const response = await requestQQApi(getApiBase(Boolean(this.qqConfig.sandbox)), input.method, input.path, this.accessToken, input.body);
+            const text = await response.text().catch(() => '');
+            let data;
+            if (text) {
+                try {
+                    data = JSON.parse(text);
+                }
+                catch {
+                    data = text;
+                }
+            }
+            if (!response.ok) {
+                const record = (typeof data === 'object' && data !== null ? data : {});
+                const rawCode = record['code'] ?? record['err_code'];
+                const code = typeof rawCode === 'number' ? rawCode : undefined;
+                const message = typeof record['message'] === 'string' && record['message']
+                    ? record['message']
+                    : text || `HTTP ${response.status}`;
+                return {
+                    ok: false,
+                    status: response.status,
+                    ...(code === undefined ? {} : { code }),
+                    message,
+                };
+            }
+            return { ok: true, status: response.status, data };
+        }
+        catch (error) {
+            return {
+                ok: false,
+                status: 0,
+                message: error instanceof Error ? error.message : String(error),
+            };
+        }
+    }
     deleteReplyContext(context) {
         this.replyContextByMessageId.delete(context.msgId);
         // Drop the chat-level naming entry BEFORE the reclaim: while it is still
@@ -4845,6 +5084,9 @@ export class QQChannel extends ChannelBase {
         }
         this.chatTypeMap.set(chatId, 'c2c');
         this.setReplyMsgId(chatId, event.id);
+        // Not recorded in the recent-inbound ring: it is read only by the
+        // group-only member-targeted recall, so a DM entry could never be
+        // resolved and would consume the ring's shared 256-chat budget.
         const senderName = event.author.username || event.author.id || 'QQ User';
         const safeName = sanitizeSenderName(senderName);
         const cleanText = rawContent.trim();
@@ -4931,6 +5173,7 @@ export class QQChannel extends ChannelBase {
             return;
         }
         this.setReplyMsgId(chatId, event.id);
+        this.recordRecentInbound(chatId, senderId, event.id);
         const envelope = {
             channelName: this.name,
             senderId,
@@ -4974,6 +5217,9 @@ export class QQChannel extends ChannelBase {
         this.chatTypeMap.set(chatId, 'group');
         if (isNewGroup)
             this.saveQQState();
+        // Track before the policy gates below: a 'log'-policy message is still a
+        // message the bot received, and its id is what a later recall needs.
+        this.recordRecentInbound(chatId, event.author.user_openid || event.author.id || event.author.member_openid, event.id);
         const result = this.prepareGroupMessage(event, chatId);
         if (!result)
             return;
@@ -5119,6 +5365,7 @@ export class QQChannel extends ChannelBase {
         }
         this.botOpenIdByGroup.delete(groupId);
         this._lastKeywordNoMatchLog.delete(groupId);
+        this.recentInbound.delete(groupId);
         // Clean up cron buffers targeting this group (always, regardless of config flag)
         let cleanedCron = 0;
         for (const [sid, entry] of this.cronBuffer) {