@0xmaxma/claude-gateway 1.3.16 → 1.3.18

package/dist/api/line-access.d.ts

@@ -0,0 +1,60 @@
+/**
+ * LINE DM access control (Tier 1) — pure, stateless sender gate.
+ *
+ * Mirrors the simple DM branches of `mcp/tools/discord/access.ts` (minus the
+ * pairing/state machine) and the closed-by-default posture of hermes-agent's
+ * three-list gate (`plugins/platforms/line/adapter.py:_allowed_for_source`) and
+ * openclaw's LINE `dmPolicy`. The webhook router reads `line` config directly
+ * and calls this once per inbound event — no env plumbing, no state files.
+ *
+ * Default (policy absent) is CLOSED: only userIds in the allowlist pass. Set
+ * `dmPolicy: 'open'` to restore "reply to anyone" behavior.
+ */
+export declare function isLineSenderAllowed(policy: 'open' | 'allowlist' | 'disabled' | undefined, allowlist: string[] | undefined, userId: string): boolean;
+/**
+ * Structural view of a LINE event `source` block — the only fields the gate
+ * needs. Kept local (not the SDK type) so this module stays pure and trivially
+ * testable. LINE sources are one of:
+ *   user  → { type: 'user',  userId }
+ *   group → { type: 'group', groupId, userId? }   (userId present if the sender
+ *   room  → { type: 'room',  roomId,  userId? }     consented to profile access)
+ */
+export interface LineSourceLike {
+    type?: string;
+    userId?: string;
+    groupId?: string;
+    roomId?: string;
+}
+export type LineSourceKind = 'user' | 'group' | 'room' | 'other';
+export interface ResolvedLineSource {
+    /** Conversation key — the reply/push target: userId (DM) / groupId / roomId. */
+    conversationId: string;
+    /** The human who sent the event (may be '' in groups w/o profile consent). */
+    senderId: string;
+    kind: LineSourceKind;
+}
+/** Map a raw LINE source to {conversationId, senderId, kind}. */
+export declare function resolveLineSource(source: LineSourceLike | undefined | null): ResolvedLineSource;
+/** The subset of `line` config the conversation gate reads. */
+export interface LineAccessConfig {
+    dmPolicy?: 'open' | 'allowlist' | 'disabled';
+    dmAllowlist?: string[];
+    groupPolicy?: 'open' | 'allowlist' | 'disabled';
+    groupAllowlist?: string[];
+}
+/**
+ * Gate an already-resolved LINE source (the hermes three-list model). DMs keep
+ * the exact `isLineSenderAllowed` behavior; group/room are gated on the
+ * conversation id (groupId/roomId) against `groupPolicy` + `groupAllowlist`,
+ * closed by default — same posture as DMs. Unknown source kinds are denied.
+ *
+ * The webhook resolves the source once per event and reuses that result here (and
+ * for `normalizeLineEvent`) rather than re-parsing the raw source three times.
+ */
+export declare function isResolvedSourceAllowed(cfg: LineAccessConfig | undefined, resolved: ResolvedLineSource): boolean;
+/**
+ * Convenience wrapper that resolves a raw source and gates it in one call.
+ * Equivalent to `isResolvedSourceAllowed(cfg, resolveLineSource(source))`.
+ */
+export declare function isLineConversationAllowed(cfg: LineAccessConfig | undefined, source: LineSourceLike | undefined | null): boolean;
+//# sourceMappingURL=line-access.d.ts.map

package/dist/api/line-access.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"line-access.d.ts","sourceRoot":"","sources":["../../src/api/line-access.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,wBAAgB,mBAAmB,CACjC,MAAM,EAAE,MAAM,GAAG,WAAW,GAAG,UAAU,GAAG,SAAS,EACrD,SAAS,EAAE,MAAM,EAAE,GAAG,SAAS,EAC/B,MAAM,EAAE,MAAM,GACb,OAAO,CAKT;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,cAAc;IAC7B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,MAAM,cAAc,GAAG,MAAM,GAAG,OAAO,GAAG,MAAM,GAAG,OAAO,CAAC;AAEjE,MAAM,WAAW,kBAAkB;IACjC,gFAAgF;IAChF,cAAc,EAAE,MAAM,CAAC;IACvB,8EAA8E;IAC9E,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,cAAc,CAAC;CACtB;AAED,iEAAiE;AACjE,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,cAAc,GAAG,SAAS,GAAG,IAAI,GAAG,kBAAkB,CAa/F;AAED,+DAA+D;AAC/D,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,EAAE,MAAM,GAAG,WAAW,GAAG,UAAU,CAAC;IAC7C,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;IACvB,WAAW,CAAC,EAAE,MAAM,GAAG,WAAW,GAAG,UAAU,CAAC;IAChD,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;CAC3B;AAED;;;;;;;;GAQG;AACH,wBAAgB,uBAAuB,CACrC,GAAG,EAAE,gBAAgB,GAAG,SAAS,EACjC,QAAQ,EAAE,kBAAkB,GAC3B,OAAO,CAUT;AAED;;;GAGG;AACH,wBAAgB,yBAAyB,CACvC,GAAG,EAAE,gBAAgB,GAAG,SAAS,EACjC,MAAM,EAAE,cAAc,GAAG,SAAS,GAAG,IAAI,GACxC,OAAO,CAET"}

package/dist/api/line-access.js

@@ -0,0 +1,69 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.isLineSenderAllowed = isLineSenderAllowed;
+exports.resolveLineSource = resolveLineSource;
+exports.isResolvedSourceAllowed = isResolvedSourceAllowed;
+exports.isLineConversationAllowed = isLineConversationAllowed;
+/**
+ * LINE DM access control (Tier 1) — pure, stateless sender gate.
+ *
+ * Mirrors the simple DM branches of `mcp/tools/discord/access.ts` (minus the
+ * pairing/state machine) and the closed-by-default posture of hermes-agent's
+ * three-list gate (`plugins/platforms/line/adapter.py:_allowed_for_source`) and
+ * openclaw's LINE `dmPolicy`. The webhook router reads `line` config directly
+ * and calls this once per inbound event — no env plumbing, no state files.
+ *
+ * Default (policy absent) is CLOSED: only userIds in the allowlist pass. Set
+ * `dmPolicy: 'open'` to restore "reply to anyone" behavior.
+ */
+function isLineSenderAllowed(policy, allowlist, userId) {
+    if (policy === 'open')
+        return true;
+    if (policy === 'disabled')
+        return false;
+    // 'allowlist' OR undefined (closed default) → only listed senders pass.
+    return !!userId && (allowlist ?? []).includes(userId);
+}
+/** Map a raw LINE source to {conversationId, senderId, kind}. */
+function resolveLineSource(source) {
+    const type = source?.type;
+    if (type === 'user') {
+        const userId = source?.userId ?? '';
+        return { conversationId: userId, senderId: userId, kind: 'user' };
+    }
+    if (type === 'group') {
+        return { conversationId: source?.groupId ?? '', senderId: source?.userId ?? '', kind: 'group' };
+    }
+    if (type === 'room') {
+        return { conversationId: source?.roomId ?? '', senderId: source?.userId ?? '', kind: 'room' };
+    }
+    return { conversationId: '', senderId: '', kind: 'other' };
+}
+/**
+ * Gate an already-resolved LINE source (the hermes three-list model). DMs keep
+ * the exact `isLineSenderAllowed` behavior; group/room are gated on the
+ * conversation id (groupId/roomId) against `groupPolicy` + `groupAllowlist`,
+ * closed by default — same posture as DMs. Unknown source kinds are denied.
+ *
+ * The webhook resolves the source once per event and reuses that result here (and
+ * for `normalizeLineEvent`) rather than re-parsing the raw source three times.
+ */
+function isResolvedSourceAllowed(cfg, resolved) {
+    const { conversationId, kind } = resolved;
+    if (kind === 'user') {
+        return isLineSenderAllowed(cfg?.dmPolicy, cfg?.dmAllowlist, conversationId);
+    }
+    if (kind === 'group' || kind === 'room') {
+        // Reuse the same closed-by-default semantics, keyed on the group/room id.
+        return isLineSenderAllowed(cfg?.groupPolicy, cfg?.groupAllowlist, conversationId);
+    }
+    return false;
+}
+/**
+ * Convenience wrapper that resolves a raw source and gates it in one call.
+ * Equivalent to `isResolvedSourceAllowed(cfg, resolveLineSource(source))`.
+ */
+function isLineConversationAllowed(cfg, source) {
+    return isResolvedSourceAllowed(cfg, resolveLineSource(source));
+}
+//# sourceMappingURL=line-access.js.map

package/dist/api/line-access.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"line-access.js","sourceRoot":"","sources":["../../src/api/line-access.ts"],"names":[],"mappings":";;AAYA,kDASC;AA4BD,8CAaC;AAmBD,0DAaC;AAMD,8DAKC;AAzGD;;;;;;;;;;;GAWG;AACH,SAAgB,mBAAmB,CACjC,MAAqD,EACrD,SAA+B,EAC/B,MAAc;IAEd,IAAI,MAAM,KAAK,MAAM;QAAE,OAAO,IAAI,CAAC;IACnC,IAAI,MAAM,KAAK,UAAU;QAAE,OAAO,KAAK,CAAC;IACxC,wEAAwE;IACxE,OAAO,CAAC,CAAC,MAAM,IAAI,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;AACxD,CAAC;AA2BD,iEAAiE;AACjE,SAAgB,iBAAiB,CAAC,MAAyC;IACzE,MAAM,IAAI,GAAG,MAAM,EAAE,IAAI,CAAC;IAC1B,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;QACpB,MAAM,MAAM,GAAG,MAAM,EAAE,MAAM,IAAI,EAAE,CAAC;QACpC,OAAO,EAAE,cAAc,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IACpE,CAAC;IACD,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;QACrB,OAAO,EAAE,cAAc,EAAE,MAAM,EAAE,OAAO,IAAI,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,IAAI,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;IAClG,CAAC;IACD,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;QACpB,OAAO,EAAE,cAAc,EAAE,MAAM,EAAE,MAAM,IAAI,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,IAAI,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IAChG,CAAC;IACD,OAAO,EAAE,cAAc,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;AAC7D,CAAC;AAUD;;;;;;;;GAQG;AACH,SAAgB,uBAAuB,CACrC,GAAiC,EACjC,QAA4B;IAE5B,MAAM,EAAE,cAAc,EAAE,IAAI,EAAE,GAAG,QAAQ,CAAC;IAC1C,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;QACpB,OAAO,mBAAmB,CAAC,GAAG,EAAE,QAAQ,EAAE,GAAG,EAAE,WAAW,EAAE,cAAc,CAAC,CAAC;IAC9E,CAAC;IACD,IAAI,IAAI,KAAK,OAAO,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;QACxC,0EAA0E;QAC1E,OAAO,mBAAmB,CAAC,GAAG,EAAE,WAAW,EAAE,GAAG,EAAE,cAAc,EAAE,cAAc,CAAC,CAAC;IACpF,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;GAGG;AACH,SAAgB,yBAAyB,CACvC,GAAiC,EACjC,MAAyC;IAEzC,OAAO,uBAAuB,CAAC,GAAG,EAAE,iBAAiB,CAAC,MAAM,CAAC,CAAC,CAAC;AACjE,CAAC"}

package/dist/api/line-mention.d.ts

@@ -0,0 +1,35 @@
+/**
+ * LINE bot-mention detection — pure helper for the group/room activation gate.
+ *
+ * In groups/rooms the bot answers only when it is @mentioned (see
+ * `line.requireMention`), and only via LINE's NATIVE mention:
+ * `message.mention.mentionees[]`, each carrying `isSelf` — true when that
+ * mentionee IS the bot receiving the webhook. This is the reliable signal and
+ * needs no knowledge of the bot's own userId.
+ *
+ * A user who merely TYPES the bot's name as plain text (no native mention) is
+ * intentionally NOT treated as calling the bot — that message is let through
+ * silently. `@All` (mentionee `type: 'all'`) is likewise NOT a bot mention —
+ * otherwise the bot would wake on every group-wide announcement.
+ */
+interface MentioneeLike {
+    type?: string;
+    isSelf?: boolean;
+}
+interface MentionLike {
+    mentionees?: MentioneeLike[];
+}
+export interface LineMessageLike {
+    type?: string;
+    text?: string;
+    mention?: MentionLike;
+}
+/** True if the bot itself is a named mentionee (excludes @All). */
+export declare function hasNativeBotMention(message: LineMessageLike | undefined | null): boolean;
+/**
+ * Whether the bot was mentioned in this message. Native `isSelf` only — a typed
+ * `@name` in plain text does not count, and `@All` never counts.
+ */
+export declare function wasBotMentioned(message: LineMessageLike | undefined | null): boolean;
+export {};
+//# sourceMappingURL=line-mention.d.ts.map

package/dist/api/line-mention.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"line-mention.d.ts","sourceRoot":"","sources":["../../src/api/line-mention.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,UAAU,aAAa;IACrB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAED,UAAU,WAAW;IACnB,UAAU,CAAC,EAAE,aAAa,EAAE,CAAC;CAC9B;AAED,MAAM,WAAW,eAAe;IAC9B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,WAAW,CAAC;CACvB;AAED,mEAAmE;AACnE,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,eAAe,GAAG,SAAS,GAAG,IAAI,GAAG,OAAO,CAIxF;AAED;;;GAGG;AACH,wBAAgB,eAAe,CAAC,OAAO,EAAE,eAAe,GAAG,SAAS,GAAG,IAAI,GAAG,OAAO,CAEpF"}

package/dist/api/line-mention.js

@@ -0,0 +1,33 @@
+"use strict";
+/**
+ * LINE bot-mention detection — pure helper for the group/room activation gate.
+ *
+ * In groups/rooms the bot answers only when it is @mentioned (see
+ * `line.requireMention`), and only via LINE's NATIVE mention:
+ * `message.mention.mentionees[]`, each carrying `isSelf` — true when that
+ * mentionee IS the bot receiving the webhook. This is the reliable signal and
+ * needs no knowledge of the bot's own userId.
+ *
+ * A user who merely TYPES the bot's name as plain text (no native mention) is
+ * intentionally NOT treated as calling the bot — that message is let through
+ * silently. `@All` (mentionee `type: 'all'`) is likewise NOT a bot mention —
+ * otherwise the bot would wake on every group-wide announcement.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.hasNativeBotMention = hasNativeBotMention;
+exports.wasBotMentioned = wasBotMentioned;
+/** True if the bot itself is a named mentionee (excludes @All). */
+function hasNativeBotMention(message) {
+    const mentionees = message?.mention?.mentionees;
+    if (!Array.isArray(mentionees))
+        return false;
+    return mentionees.some((m) => m?.type === 'user' && m?.isSelf === true);
+}
+/**
+ * Whether the bot was mentioned in this message. Native `isSelf` only — a typed
+ * `@name` in plain text does not count, and `@All` never counts.
+ */
+function wasBotMentioned(message) {
+    return hasNativeBotMention(message);
+}
+//# sourceMappingURL=line-mention.js.map

package/dist/api/line-mention.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"line-mention.js","sourceRoot":"","sources":["../../src/api/line-mention.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;GAaG;;AAkBH,kDAIC;AAMD,0CAEC;AAbD,mEAAmE;AACnE,SAAgB,mBAAmB,CAAC,OAA2C;IAC7E,MAAM,UAAU,GAAG,OAAO,EAAE,OAAO,EAAE,UAAU,CAAC;IAChD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC;QAAE,OAAO,KAAK,CAAC;IAC7C,OAAO,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,KAAK,MAAM,IAAI,CAAC,EAAE,MAAM,KAAK,IAAI,CAAC,CAAC;AAC1E,CAAC;AAED;;;GAGG;AACH,SAAgB,eAAe,CAAC,OAA2C;IACzE,OAAO,mBAAmB,CAAC,OAAO,CAAC,CAAC;AACtC,CAAC"}

package/dist/api/line-pending-senders.d.ts

@@ -0,0 +1,40 @@
+export interface PendingSender {
+    /** The conversation/sender id: a userId (DM), groupId, or roomId. */
+    userId: string;
+    /** Best-effort display name: LINE profile name (user) or group name (group). */
+    displayName?: string;
+    /** Source kind, so the UI can label rooms and filter against the right list. */
+    kind?: 'user' | 'group' | 'room';
+    /**
+     * One-time pairing code (pairing mode). Minted once when the entry is created
+     * and never overwritten on dedup, so it stays stable for the admin to match
+     * against what the sender reports. Absent when pairing is off.
+     */
+    code?: string;
+    firstSeen: number;
+    lastSeen: number;
+    count: number;
+}
+/** Mint a short visual-match pairing code (6 uppercase hex). */
+export declare function generatePairingCode(): string;
+/** Max distinct senders retained per agent (oldest evicted first). */
+export declare const MAX_PENDING_PER_AGENT = 20;
+/**
+ * Record a denied 1:1 DM sender (Tier 1 discovery). Returns true on first
+ * contact (entry newly created).
+ */
+export declare function recordDeniedSender(agentId: string, userId: string, displayName?: string, now?: number, code?: string): boolean;
+/**
+ * Record a denied group/room conversation (Tier 3 discovery). Returns true on
+ * first contact (entry newly created).
+ */
+export declare function recordDeniedConversation(agentId: string, conversationId: string, kind: 'group' | 'room', name?: string, now?: number, code?: string): boolean;
+/** Pending senders for an agent, most-recent first. */
+export declare function getPendingSenders(agentId: string): PendingSender[];
+/** One pending-sender entry by id (used to reuse an already-minted pairing code). */
+export declare function getPendingSender(agentId: string, id: string): PendingSender | undefined;
+/** Drop an entry from the pending list (e.g. once added to an allowlist). */
+export declare function clearPendingSender(agentId: string, id: string): void;
+/** Test/maintenance helper — wipe all retained senders. */
+export declare function _resetPendingSenders(): void;
+//# sourceMappingURL=line-pending-senders.d.ts.map

package/dist/api/line-pending-senders.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"line-pending-senders.d.ts","sourceRoot":"","sources":["../../src/api/line-pending-senders.ts"],"names":[],"mappings":"AAaA,MAAM,WAAW,aAAa;IAC5B,qEAAqE;IACrE,MAAM,EAAE,MAAM,CAAC;IACf,gFAAgF;IAChF,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,gFAAgF;IAChF,IAAI,CAAC,EAAE,MAAM,GAAG,OAAO,GAAG,MAAM,CAAC;IACjC;;;;OAIG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;CACf;AAED,gEAAgE;AAChE,wBAAgB,mBAAmB,IAAI,MAAM,CAE5C;AAED,sEAAsE;AACtE,eAAO,MAAM,qBAAqB,KAAK,CAAC;AAuDxC;;;GAGG;AACH,wBAAgB,kBAAkB,CAChC,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,MAAM,EACd,WAAW,CAAC,EAAE,MAAM,EACpB,GAAG,GAAE,MAAmB,EACxB,IAAI,CAAC,EAAE,MAAM,GACZ,OAAO,CAET;AAED;;;GAGG;AACH,wBAAgB,wBAAwB,CACtC,OAAO,EAAE,MAAM,EACf,cAAc,EAAE,MAAM,EACtB,IAAI,EAAE,OAAO,GAAG,MAAM,EACtB,IAAI,CAAC,EAAE,MAAM,EACb,GAAG,GAAE,MAAmB,EACxB,IAAI,CAAC,EAAE,MAAM,GACZ,OAAO,CAET;AAED,uDAAuD;AACvD,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,MAAM,GAAG,aAAa,EAAE,CAIlE;AAED,qFAAqF;AACrF,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,aAAa,GAAG,SAAS,CAEvF;AAED,6EAA6E;AAC7E,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,IAAI,CAEpE;AAED,2DAA2D;AAC3D,wBAAgB,oBAAoB,IAAI,IAAI,CAE3C"}

package/dist/api/line-pending-senders.js

@@ -0,0 +1,107 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.MAX_PENDING_PER_AGENT = void 0;
+exports.generatePairingCode = generatePairingCode;
+exports.recordDeniedSender = recordDeniedSender;
+exports.recordDeniedConversation = recordDeniedConversation;
+exports.getPendingSenders = getPendingSenders;
+exports.getPendingSender = getPendingSender;
+exports.clearPendingSender = clearPendingSender;
+exports._resetPendingSenders = _resetPendingSenders;
+/**
+ * LINE "pending senders" — in-memory discovery aid for the Tier 1 allowlist.
+ * When the webhook access gate drops a sender that is not on the allowlist, we
+ * remember them here (with their LINE display name, best-effort) so the admin
+ * can see who is pending and one-click-add them from the UI instead of grepping
+ * `line-webhook.log`.
+ *
+ * Intentionally ephemeral: a process-lifetime Map, no persistence. Adding to the
+ * allowlist is the durable action (config.json via the agent PATCH API); this is
+ * just a transient "pending list". Bounded per agent so a flood can't grow it.
+ */
+const crypto_1 = require("crypto");
+/** Mint a short visual-match pairing code (6 uppercase hex). */
+function generatePairingCode() {
+    return (0, crypto_1.randomBytes)(3).toString('hex').toUpperCase();
+}
+/** Max distinct senders retained per agent (oldest evicted first). */
+exports.MAX_PENDING_PER_AGENT = 20;
+// agentId -> (id -> entry)  (id = userId | groupId | roomId)
+const store = new Map();
+/**
+ * Record a denied knock (DM sender or group/room conversation). Dedups by id
+ * (bumps count + lastSeen, fills in a name/kind if newly resolved). Evicts the
+ * least-recently-seen entry when the per-agent cap is exceeded.
+ *
+ * `code` is set only when the entry is newly created (never overwritten on
+ * dedup), so a pairing code stays stable. Returns `true` when this call created
+ * a new entry (first contact) — the webhook uses this to send the pairing code
+ * exactly once.
+ */
+function recordDenied(agentId, id, kind, displayName, now, code) {
+    if (!agentId || !id)
+        return false;
+    let byId = store.get(agentId);
+    if (!byId) {
+        byId = new Map();
+        store.set(agentId, byId);
+    }
+    const existing = byId.get(id);
+    if (existing) {
+        existing.lastSeen = now;
+        existing.count += 1;
+        if (displayName && !existing.displayName)
+            existing.displayName = displayName;
+        if (!existing.kind)
+            existing.kind = kind;
+        return false;
+    }
+    byId.set(id, { userId: id, displayName, kind, code, firstSeen: now, lastSeen: now, count: 1 });
+    if (byId.size > exports.MAX_PENDING_PER_AGENT) {
+        let oldestId = null;
+        let oldestTs = Infinity;
+        for (const [eid, entry] of byId) {
+            if (entry.lastSeen < oldestTs) {
+                oldestTs = entry.lastSeen;
+                oldestId = eid;
+            }
+        }
+        if (oldestId)
+            byId.delete(oldestId);
+    }
+    return true;
+}
+/**
+ * Record a denied 1:1 DM sender (Tier 1 discovery). Returns true on first
+ * contact (entry newly created).
+ */
+function recordDeniedSender(agentId, userId, displayName, now = Date.now(), code) {
+    return recordDenied(agentId, userId, 'user', displayName, now, code);
+}
+/**
+ * Record a denied group/room conversation (Tier 3 discovery). Returns true on
+ * first contact (entry newly created).
+ */
+function recordDeniedConversation(agentId, conversationId, kind, name, now = Date.now(), code) {
+    return recordDenied(agentId, conversationId, kind, name, now, code);
+}
+/** Pending senders for an agent, most-recent first. */
+function getPendingSenders(agentId) {
+    const byId = store.get(agentId);
+    if (!byId)
+        return [];
+    return [...byId.values()].sort((a, b) => b.lastSeen - a.lastSeen);
+}
+/** One pending-sender entry by id (used to reuse an already-minted pairing code). */
+function getPendingSender(agentId, id) {
+    return store.get(agentId)?.get(id);
+}
+/** Drop an entry from the pending list (e.g. once added to an allowlist). */
+function clearPendingSender(agentId, id) {
+    store.get(agentId)?.delete(id);
+}
+/** Test/maintenance helper — wipe all retained senders. */
+function _resetPendingSenders() {
+    store.clear();
+}
+//# sourceMappingURL=line-pending-senders.js.map

package/dist/api/line-pending-senders.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"line-pending-senders.js","sourceRoot":"","sources":["../../src/api/line-pending-senders.ts"],"names":[],"mappings":";;;AAgCA,kDAEC;AA8DD,gDAQC;AAMD,4DASC;AAGD,8CAIC;AAGD,4CAEC;AAGD,gDAEC;AAGD,oDAEC;AA7ID;;;;;;;;;;GAUG;AACH,mCAAqC;AAoBrC,gEAAgE;AAChE,SAAgB,mBAAmB;IACjC,OAAO,IAAA,oBAAW,EAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;AACtD,CAAC;AAED,sEAAsE;AACzD,QAAA,qBAAqB,GAAG,EAAE,CAAC;AAExC,6DAA6D;AAC7D,MAAM,KAAK,GAAG,IAAI,GAAG,EAAsC,CAAC;AAE5D;;;;;;;;;GASG;AACH,SAAS,YAAY,CACnB,OAAe,EACf,EAAU,EACV,IAA+B,EAC/B,WAA+B,EAC/B,GAAW,EACX,IAAa;IAEb,IAAI,CAAC,OAAO,IAAI,CAAC,EAAE;QAAE,OAAO,KAAK,CAAC;IAClC,IAAI,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAC9B,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,IAAI,GAAG,IAAI,GAAG,EAAyB,CAAC;QACxC,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IAC3B,CAAC;IAED,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAC9B,IAAI,QAAQ,EAAE,CAAC;QACb,QAAQ,CAAC,QAAQ,GAAG,GAAG,CAAC;QACxB,QAAQ,CAAC,KAAK,IAAI,CAAC,CAAC;QACpB,IAAI,WAAW,IAAI,CAAC,QAAQ,CAAC,WAAW;YAAE,QAAQ,CAAC,WAAW,GAAG,WAAW,CAAC;QAC7E,IAAI,CAAC,QAAQ,CAAC,IAAI;YAAE,QAAQ,CAAC,IAAI,GAAG,IAAI,CAAC;QACzC,OAAO,KAAK,CAAC;IACf,CAAC;IAED,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE,QAAQ,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC;IAE/F,IAAI,IAAI,CAAC,IAAI,GAAG,6BAAqB,EAAE,CAAC;QACtC,IAAI,QAAQ,GAAkB,IAAI,CAAC;QACnC,IAAI,QAAQ,GAAG,QAAQ,CAAC;QACxB,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC;YAChC,IAAI,KAAK,CAAC,QAAQ,GAAG,QAAQ,EAAE,CAAC;gBAC9B,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC;gBAC1B,QAAQ,GAAG,GAAG,CAAC;YACjB,CAAC;QACH,CAAC;QACD,IAAI,QAAQ;YAAE,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IACtC,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;GAGG;AACH,SAAgB,kBAAkB,CAChC,OAAe,EACf,MAAc,EACd,WAAoB,EACpB,MAAc,IAAI,CAAC,GAAG,EAAE,EACxB,IAAa;IAEb,OAAO,YAAY,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;AACvE,CAAC;AAED;;;GAGG;AACH,SAAgB,wBAAwB,CACtC,OAAe,EACf,cAAsB,EACtB,IAAsB,EACtB,IAAa,EACb,MAAc,IAAI,CAAC,GAAG,EAAE,EACxB,IAAa;IAEb,OAAO,YAAY,CAAC,OAAO,EAAE,cAAc,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;AACtE,CAAC;AAED,uDAAuD;AACvD,SAAgB,iBAAiB,CAAC,OAAe;IAC/C,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAChC,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,CAAC;IACrB,OAAO,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC;AACpE,CAAC;AAED,qFAAqF;AACrF,SAAgB,gBAAgB,CAAC,OAAe,EAAE,EAAU;IAC1D,OAAO,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;AACrC,CAAC;AAED,6EAA6E;AAC7E,SAAgB,kBAAkB,CAAC,OAAe,EAAE,EAAU;IAC5D,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;AACjC,CAAC;AAED,2DAA2D;AAC3D,SAAgB,oBAAoB;IAClC,KAAK,CAAC,KAAK,EAAE,CAAC;AAChB,CAAC"}

package/dist/api/line-webhook-router.d.ts

@@ -0,0 +1,51 @@
+/**
+ * LINE inbound webhook route (openclaw-style: LINE is webhook-only, no polling).
+ *
+ * Mounted on the gateway's Express app BEFORE express.json() so the raw request
+ * bytes are available for signature validation (LINE signs the raw body; a
+ * re-serialized parsed body would not match).
+ *
+ * Flow: verify x-line-signature → 200 → for each text message from a 1:1 user,
+ * show a loading animation and forward a normalized {content, meta} to the
+ * target agent's existing /channel callback (the same intake Telegram uses).
+ */
+import { Router } from 'express';
+import { type webhook } from '@line/bot-sdk';
+import type { AgentRunner } from '../agent/runner';
+import { type ResolvedLineSource } from './line-access';
+export type NormalizedLineMessage = {
+    content: string;
+    meta: Record<string, string>;
+};
+/**
+ * Normalize a LINE webhook event into the gateway's {content, meta} intake shape.
+ * Returns null for anything we don't handle in the POC (non-text, non-user source).
+ *
+ * `resolved` lets the caller pass the source it already resolved for the access
+ * gate, so a single event isn't re-parsed; omitted, it resolves here.
+ */
+export declare function normalizeLineEvent(event: webhook.Event, resolved?: ResolvedLineSource): NormalizedLineMessage | null;
+export type NormalizedLinePostback = {
+    chatId: string;
+    replyToken: string;
+    data: string;
+};
+/**
+ * Normalize a LINE postback event (the slow-LLM "Get answer" button tap) into
+ * {chatId, replyToken, data}. Returns null for non-postback / non-user / tokenless
+ * events. `normalizeLineEvent` still drops postbacks; this is handled separately.
+ */
+export declare function normalizeLinePostback(event: webhook.Event): NormalizedLinePostback | null;
+/**
+ * Optional outbound base-URL overrides — only used to point the LINE SDK at a
+ * mock server in tests. Production passes nothing, so the SDK uses its real
+ * defaults (api.line.me / api-data.line.me). Replaces the former
+ * LINE_API_BASE / LINE_DATA_API_BASE env reads so there's no test-only env seam
+ * leaking into production code.
+ */
+export interface LineWebhookOptions {
+    apiBase?: string;
+    dataApiBase?: string;
+}
+export declare function createLineWebhookRouter(agents: Map<string, AgentRunner>, logDir: string, opts?: LineWebhookOptions): Router;
+//# sourceMappingURL=line-webhook-router.d.ts.map

package/dist/api/line-webhook-router.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"line-webhook-router.d.ts","sourceRoot":"","sources":["../../src/api/line-webhook-router.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAgB,EAAE,MAAM,EAA+B,MAAM,SAAS,CAAC;AAIvE,OAAO,EAAmC,KAAK,OAAO,EAAE,MAAM,eAAe,CAAC;AAC9E,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAEnD,OAAO,EAGL,KAAK,kBAAkB,EACxB,MAAM,eAAe,CAAC;AA+EvB,MAAM,MAAM,qBAAqB,GAAG;IAClC,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC9B,CAAC;AAEF;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAChC,KAAK,EAAE,OAAO,CAAC,KAAK,EACpB,QAAQ,CAAC,EAAE,kBAAkB,GAC5B,qBAAqB,GAAG,IAAI,CA4B9B;AAED,MAAM,MAAM,sBAAsB,GAAG;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC;AAE1F;;;;GAIG;AACH,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,OAAO,CAAC,KAAK,GAAG,sBAAsB,GAAG,IAAI,CAwBzF;AAiBD;;;;;;GAMG;AACH,MAAM,WAAW,kBAAkB;IACjC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,wBAAgB,uBAAuB,CACrC,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,WAAW,CAAC,EAChC,MAAM,EAAE,MAAM,EACd,IAAI,GAAE,kBAAuB,GAC5B,MAAM,CAmNR"}