@0xmaxma/claude-gateway 1.7.8 → 1.7.9

package/dist/session/compactor.js

@@ -34,6 +34,7 @@ var __importStar = (this && this.__importStar) || (function () {
 })();
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.SessionCompactor = exports.NotEnoughMessagesError = void 0;
+exports.defaultSpawnClaude = defaultSpawnClaude;
 const fs = __importStar(require("fs"));
 const path = __importStar(require("path"));
 const child_process_1 = require("child_process");
@@ -55,15 +56,83 @@ const MERGE_SUMMARIES_PROMPT = 'These are summaries of sequential parts of a con
 const SINGLE_SUMMARY_INSTRUCTION = 'Summarize this conversation concisely, preserving key facts, decisions, context the assistant should remember, and any open questions or unfinished tasks.';
 // System prompt prepended to every claude CLI summarization call
 const COMPACTOR_SYSTEM_PROMPT = 'You are a conversation archiver. Your ONLY task is to produce a concise summary of the conversation transcript below. Do NOT respond to the conversation. Do NOT ask questions. Output ONLY the summary.';
+// Max concurrent `claude --print` chunk-summary calls in flight at once. Bounded
+// (not "all N chunks at once") to cap worst-case concurrent model calls/memory,
+// while still cutting sequential wall time roughly by this factor on large sessions.
+const CHUNK_CONCURRENCY = 4;
+// Attempts per chunk (1 initial + retries) before degrading to a truncated raw
+// excerpt instead of failing the whole compact job over one bad chunk.
+const CHUNK_MAX_ATTEMPTS = 2;
+// Raw-excerpt length used when a chunk exhausts its summarization attempts.
+const DEGRADED_EXCERPT_CHARS = 2000;
+// Hard ceiling on a single `claude --print` summarization spawn — mirrors the
+// prior spawnSync timeout, but non-blocking (see defaultSpawnClaude below).
+const SUMMARY_TIMEOUT_MS = 300000;
 // Rough token estimate: ~4 chars per token
 function estimateTokens(messages) {
     return Math.round(messages.reduce((acc, m) => acc + m.content.length, 0) / 4);
 }
+/**
+ * Async `claude` CLI spawn. Replaces the prior `spawnSync` call: `spawnSync`
+ * blocks the daemon's single event loop for the full duration of the call — and
+ * every agent shares one process, so one compaction call froze ALL agents/
+ * channels until it returned (up to SUMMARY_TIMEOUT_MS, x N chunks sequentially
+ * on large sessions). `spawn` yields the event loop while the child runs.
+ * Mirrors the sync `{status, stdout, stderr, error}` contract so callers'
+ * existing error handling is unchanged.
+ */
+function defaultSpawnClaude(bin, args, input) {
+    return new Promise((resolve) => {
+        let settled = false;
+        let stdout = '';
+        let stderr = '';
+        const settle = (r) => {
+            if (settled)
+                return;
+            settled = true;
+            clearTimeout(timer);
+            resolve(r);
+        };
+        const timer = setTimeout(() => {
+            try {
+                child.kill('SIGKILL');
+            }
+            catch {
+                /* already gone */
+            }
+            settle({ status: null, stdout: '', stderr, error: new Error(`claude CLI timed out after ${SUMMARY_TIMEOUT_MS}ms`) });
+        }, SUMMARY_TIMEOUT_MS);
+        const child = (0, child_process_1.spawn)(bin, args, {
+            stdio: ['pipe', 'pipe', 'pipe'],
+            env: { ...process.env, PATH: (0, claude_bin_1.pathWithNativeBin)() },
+        });
+        child.stdout?.on('data', (d) => {
+            stdout += String(d);
+        });
+        child.stderr?.on('data', (d) => {
+            stderr += String(d);
+        });
+        child.on('error', (err) => settle({ status: null, stdout: '', stderr, error: err }));
+        child.on('close', (code) => settle({ status: code, stdout, stderr }));
+        // stdin emits its own async 'error' (e.g. EPIPE if the child exits before we
+        // finish writing) separate from the child's 'error' event — must be handled
+        // or an unhandled stream error crashes the daemon.
+        child.stdin?.on('error', () => { });
+        try {
+            child.stdin?.write(input);
+            child.stdin?.end();
+        }
+        catch (err) {
+            settle({ status: null, stdout: '', stderr, error: err });
+        }
+    });
+}
 class SessionCompactor {
-    constructor(sessionStore) {
+    constructor(sessionStore, spawnClaude = defaultSpawnClaude) {
         this.sessionStore = sessionStore;
+        this.spawnClaude = spawnClaude;
     }
-    async compact(agentId, chatId, sessionId, model, contextWindow, channel = 'telegram') {
+    async compact(agentId, chatId, sessionId, model, contextWindow, channel = 'telegram', onProgress) {
         // Load current history
         const messages = await this.sessionStore.loadTelegramSession(agentId, chatId, sessionId, channel);
         if (messages.length < 5) {
@@ -83,7 +152,7 @@ class SessionCompactor {
         const historyText = toSummarize
             .map(m => `${m.role === 'user' ? 'User' : 'Assistant'}: ${m.content}`)
             .join('\n\n');
-        const summaryText = await this.summarizeWithChunking(historyText, model);
+        const summaryText = await this.summarizeWithChunking(historyText, model, onProgress);
         const compacted = [
             { role: 'system', content: `[Conversation Summary]\n${summaryText}`, ts: Date.now() },
             ...tail,
@@ -97,21 +166,72 @@ class SessionCompactor {
         const contextPctAfter = Math.round((afterTokens / contextWindow) * 100);
         return { beforeMessages, afterMessages, beforeTokens, afterTokens, reductionPct, contextPctBefore, contextPctAfter };
     }
-    async summarizeWithChunking(historyText, model) {
-        // If small enough, summarize directly
+    async summarizeWithChunking(historyText, model, onProgress) {
+        // If small enough, summarize directly. No chunking → no chunk to retry/degrade
+        // against, so a failure here still fails the compact job (original behavior).
         if (historyText.length <= CHUNK_CHARS) {
             return this.callClaudeForSummary(historyText, model);
         }
-        // Split into chunks and summarize each
+        // Split into chunks and summarize with bounded concurrency; a single bad
+        // chunk degrades to a raw excerpt instead of failing the whole job.
         const chunks = this.splitIntoChunks(historyText, CHUNK_CHARS);
-        const chunkSummaries = [];
-        for (let i = 0; i < chunks.length; i++) {
-            const summary = await this.callClaudeForSummary(chunks[i], model, `This is part ${i + 1} of ${chunks.length} of a longer conversation. Summarize this segment concisely.`);
-            chunkSummaries.push(`[Part ${i + 1}/${chunks.length}]\n${summary}`);
-        }
-        // Merge chunk summaries into final summary
+        const chunkSummaries = await this.summarizeChunksConcurrently(chunks, model, onProgress);
+        // Merge chunk summaries into final summary. If the merge call itself can't
+        // be completed, fall back to the concatenated per-part summaries rather than
+        // losing the whole compaction — still far smaller than the raw history.
         const mergedText = chunkSummaries.join('\n\n');
-        return this.callClaudeForSummary(mergedText, model, MERGE_SUMMARIES_PROMPT);
+        return this.mergeChunkSummaries(mergedText, model);
+    }
+    /** Bounded worker pool (mirrors the pattern in apps/installer.ts restoreRunningApps): at
+     *  most CHUNK_CONCURRENCY `claude --print` calls in flight; results land by index so
+     *  output order matches chunk order regardless of completion order. */
+    async summarizeChunksConcurrently(chunks, model, onProgress) {
+        const results = new Array(chunks.length);
+        let completed = 0;
+        let cursor = 0;
+        const worker = async () => {
+            while (cursor < chunks.length) {
+                const i = cursor++;
+                results[i] = await this.summarizeChunkWithFallback(chunks[i], model, i, chunks.length);
+                completed++;
+                onProgress?.(completed, chunks.length);
+            }
+        };
+        const poolSize = Math.min(CHUNK_CONCURRENCY, chunks.length);
+        await Promise.all(Array.from({ length: poolSize }, () => worker()));
+        return results;
+    }
+    /** Summarize one chunk; after CHUNK_MAX_ATTEMPTS failures, degrade to a truncated raw
+     *  excerpt instead of throwing, so one bad chunk can't fail the whole compact job. */
+    async summarizeChunkWithFallback(chunk, model, index, total) {
+        const instruction = `This is part ${index + 1} of ${total} of a longer conversation. Summarize this segment concisely.`;
+        let lastErr;
+        for (let attempt = 1; attempt <= CHUNK_MAX_ATTEMPTS; attempt++) {
+            try {
+                const summary = await this.callClaudeForSummary(chunk, model, instruction);
+                return `[Part ${index + 1}/${total}]\n${summary}`;
+            }
+            catch (err) {
+                lastErr = err;
+            }
+        }
+        const excerpt = chunk.length > DEGRADED_EXCERPT_CHARS ? `${chunk.slice(0, DEGRADED_EXCERPT_CHARS)}…(truncated)` : chunk;
+        console.error(`[SessionCompactor] Chunk ${index + 1}/${total} summarization failed after ${CHUNK_MAX_ATTEMPTS} attempts (${lastErr?.message ?? 'unknown error'}); using truncated raw excerpt.`);
+        return `[Part ${index + 1}/${total} — summarization failed after ${CHUNK_MAX_ATTEMPTS} attempts (${lastErr?.message ?? 'unknown error'}); showing truncated raw excerpt]\n${excerpt}`;
+    }
+    /** Merge per-chunk summaries into one; degrade to the unmerged concatenation on repeated failure. */
+    async mergeChunkSummaries(mergedText, model) {
+        let lastErr;
+        for (let attempt = 1; attempt <= CHUNK_MAX_ATTEMPTS; attempt++) {
+            try {
+                return await this.callClaudeForSummary(mergedText, model, MERGE_SUMMARIES_PROMPT);
+            }
+            catch (err) {
+                lastErr = err;
+            }
+        }
+        console.error(`[SessionCompactor] Merge-summaries call failed after ${CHUNK_MAX_ATTEMPTS} attempts (${lastErr?.message ?? 'unknown error'}); using unmerged per-chunk summaries.`);
+        return mergedText;
     }
     splitIntoChunks(text, maxChars) {
         const chunks = [];
@@ -139,12 +259,7 @@ class SessionCompactor {
         // spawn after the native-installer migration.
         const claudeBinRaw = process.env.CLAUDE_BIN ?? (0, claude_bin_1.resolveClaudeBin)().bin;
         const [claudeBin, ...claudeBinArgs] = claudeBinRaw.split(' ');
-        const result = (0, child_process_1.spawnSync)(claudeBin, [...claudeBinArgs, '--print', '--model', model], {
-            input: prompt,
-            encoding: 'utf-8',
-            timeout: 300000,
-            env: { ...process.env, PATH: (0, claude_bin_1.pathWithNativeBin)() },
-        });
+        const result = await this.spawnClaude(claudeBin, [...claudeBinArgs, '--print', '--model', model], prompt);
         if (result.error) {
             throw new Error(`claude CLI error: ${result.error.message}`);
         }

package/dist/session/compactor.js.map

@@ -1 +1 @@
-{"version":3,"file":"compactor.js","sourceRoot":"","sources":["../../src/session/compactor.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,uCAAyB;AACzB,2CAA6B;AAC7B,iDAA0C;AAI1C,6CAAmE;AAYnE,MAAa,sBAAuB,SAAQ,KAAK;IAC/C,YAAY,KAAa;QACvB,KAAK,CAAC,mCAAmC,KAAK,gCAAgC,CAAC,CAAC;QAChF,IAAI,CAAC,IAAI,GAAG,wBAAwB,CAAC;IACvC,CAAC;CACF;AALD,wDAKC;AAED,kGAAkG;AAClG,MAAM,WAAW,GAAG,MAAO,CAAC;AAC5B,4EAA4E;AAC5E,MAAM,kBAAkB,GAAG,EAAE,CAAC;AAC9B,yDAAyD;AACzD,MAAM,sBAAsB,GAC1B,mKAAmK,CAAC;AACtK,qEAAqE;AACrE,MAAM,0BAA0B,GAC9B,4JAA4J,CAAC;AAC/J,iEAAiE;AACjE,MAAM,uBAAuB,GAC3B,0MAA0M,CAAC;AAE7M,2CAA2C;AAC3C,SAAS,cAAc,CAAC,QAAmB;IACzC,OAAO,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;AAChF,CAAC;AAED,MAAa,gBAAgB;IAC3B,YAA6B,YAA0B;QAA1B,iBAAY,GAAZ,YAAY,CAAc;IAAG,CAAC;IAE3D,KAAK,CAAC,OAAO,CACX,OAAe,EACf,MAAc,EACd,SAAiB,EACjB,KAAa,EACb,aAAqB,EACrB,UAA4B,UAAU;QAEtC,uBAAuB;QACvB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,mBAAmB,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;QAElG,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxB,MAAM,IAAI,sBAAsB,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACpD,CAAC;QAED,MAAM,cAAc,GAAG,QAAQ,CAAC,MAAM,CAAC;QACvC,MAAM,YAAY,GAAG,cAAc,CAAC,QAAQ,CAAC,CAAC;QAE9C,qCAAqC;QACrC,MAAM,aAAa,GAAG,IAAI,CAAC,YAAY,CAAC,gBAAgB,EAAE,CAAC;QAC3D,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,OAAO,EAAE,UAAU,EAAE,GAAG,OAAO,IAAI,MAAM,EAAE,CAAC,CAAC;QACzF,EAAE,CAAC,SAAS,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC9C,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,GAAG,SAAS,gBAAgB,IAAI,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QACzF,EAAE,CAAC,aAAa,CAAC,WAAW,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;QAE1E,kFAAkF;QAClF,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,kBAAkB,CAAC,CAAC;QACjD,MAAM,WAAW,GAAG,QAAQ,CAAC,MAAM,GAAG,kBAAkB,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;QAC7G,MAAM,WAAW,GAAG,WAAW;aAC5B,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC;aACrE,IAAI,CAAC,MAAM,CAAC,CAAC;QAEhB,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,qBAAqB,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;QACzE,MAAM,SAAS,GAAc;YAC3B,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,2BAA2B,WAAW,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE;YACrF,GAAG,IAAI;SACR,CAAC;QAEF,2DAA2D;QAC3D,MAAM,IAAI,CAAC,YAAY,CAAC,mBAAmB,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;QAE5F,MAAM,aAAa,GAAG,SAAS,CAAC,MAAM,CAAC;QACvC,MAAM,WAAW,GAAG,cAAc,CAAC,SAAS,CAAC,CAAC;QAC9C,MAAM,YAAY,GAAG,YAAY,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,WAAW,GAAG,YAAY,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC5G,MAAM,gBAAgB,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,YAAY,GAAG,aAAa,CAAC,GAAG,GAAG,CAAC,CAAC;QAC1E,MAAM,eAAe,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,WAAW,GAAG,aAAa,CAAC,GAAG,GAAG,CAAC,CAAC;QAExE,OAAO,EAAE,cAAc,EAAE,aAAa,EAAE,YAAY,EAAE,WAAW,EAAE,YAAY,EAAE,gBAAgB,EAAE,eAAe,EAAE,CAAC;IACvH,CAAC;IAEO,KAAK,CAAC,qBAAqB,CAAC,WAAmB,EAAE,KAAa;QACpE,sCAAsC;QACtC,IAAI,WAAW,CAAC,MAAM,IAAI,WAAW,EAAE,CAAC;YACtC,OAAO,IAAI,CAAC,oBAAoB,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;QACvD,CAAC;QAED,uCAAuC;QACvC,MAAM,MAAM,GAAG,IAAI,CAAC,eAAe,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;QAC9D,MAAM,cAAc,GAAa,EAAE,CAAC;QAEpC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACvC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,oBAAoB,CAC7C,MAAM,CAAC,CAAC,CAAC,EACT,KAAK,EACL,gBAAgB,CAAC,GAAG,CAAC,OAAO,MAAM,CAAC,MAAM,8DAA8D,CACxG,CAAC;YACF,cAAc,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC,MAAM,MAAM,OAAO,EAAE,CAAC,CAAC;QACtE,CAAC;QAED,2CAA2C;QAC3C,MAAM,UAAU,GAAG,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC/C,OAAO,IAAI,CAAC,oBAAoB,CAC9B,UAAU,EACV,KAAK,EACL,sBAAsB,CACvB,CAAC;IACJ,CAAC;IAEO,eAAe,CAAC,IAAY,EAAE,QAAgB;QACpD,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,IAAI,KAAK,GAAG,CAAC,CAAC;QAEd,OAAO,KAAK,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;YAC3B,IAAI,GAAG,GAAG,KAAK,GAAG,QAAQ,CAAC;YAC3B,IAAI,GAAG,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;gBACtB,6DAA6D;gBAC7D,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;gBAC/C,IAAI,QAAQ,GAAG,KAAK;oBAAE,GAAG,GAAG,QAAQ,CAAC;YACvC,CAAC;YACD,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC;YACpC,KAAK,GAAG,GAAG,CAAC;QACd,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;IAEO,KAAK,CAAC,oBAAoB,CAChC,IAAY,EACZ,KAAa,EACb,WAAW,GAAG,0BAA0B;QAExC,8FAA8F;QAC9F,MAAM,MAAM,GAAG,GAAG,uBAAuB,OAAO,WAAW,qBAAqB,IAAI,yEAAyE,CAAC;QAE9J,4EAA4E;QAC5E,wEAAwE;QACxE,wEAAwE;QACxE,0EAA0E;QAC1E,8CAA8C;QAC9C,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,IAAA,6BAAgB,GAAE,CAAC,GAAG,CAAC;QACtE,MAAM,CAAC,SAAS,EAAE,GAAG,aAAa,CAAC,GAAG,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAE9D,MAAM,MAAM,GAAG,IAAA,yBAAS,EAAC,SAAS,EAAE,CAAC,GAAG,aAAa,EAAE,SAAS,EAAE,SAAS,EAAE,KAAK,CAAC,EAAE;YACnF,KAAK,EAAE,MAAM;YACb,QAAQ,EAAE,OAAO;YACjB,OAAO,EAAE,MAAO;YAChB,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,IAAI,EAAE,IAAA,8BAAiB,GAAE,EAAE;SACnD,CAAC,CAAC;QAEH,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CAAC,qBAAqB,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QAC/D,CAAC;QACD,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACxB,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;YAC3C,MAAM,IAAI,KAAK,CAAC,iCAAiC,MAAM,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC,CAAC;QAC/E,CAAC;QAED,OAAO,MAAM,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IACrC,CAAC;CACF;AApID,4CAoIC"}
+{"version":3,"file":"compactor.js","sourceRoot":"","sources":["../../src/session/compactor.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA+EA,gDA2CC;AA1HD,uCAAyB;AACzB,2CAA6B;AAC7B,iDAAsC;AAItC,6CAAmE;AAYnE,MAAa,sBAAuB,SAAQ,KAAK;IAC/C,YAAY,KAAa;QACvB,KAAK,CAAC,mCAAmC,KAAK,gCAAgC,CAAC,CAAC;QAChF,IAAI,CAAC,IAAI,GAAG,wBAAwB,CAAC;IACvC,CAAC;CACF;AALD,wDAKC;AAED,kGAAkG;AAClG,MAAM,WAAW,GAAG,MAAO,CAAC;AAC5B,4EAA4E;AAC5E,MAAM,kBAAkB,GAAG,EAAE,CAAC;AAC9B,yDAAyD;AACzD,MAAM,sBAAsB,GAC1B,mKAAmK,CAAC;AACtK,qEAAqE;AACrE,MAAM,0BAA0B,GAC9B,4JAA4J,CAAC;AAC/J,iEAAiE;AACjE,MAAM,uBAAuB,GAC3B,0MAA0M,CAAC;AAE7M,iFAAiF;AACjF,gFAAgF;AAChF,qFAAqF;AACrF,MAAM,iBAAiB,GAAG,CAAC,CAAC;AAC5B,+EAA+E;AAC/E,uEAAuE;AACvE,MAAM,kBAAkB,GAAG,CAAC,CAAC;AAC7B,4EAA4E;AAC5E,MAAM,sBAAsB,GAAG,IAAK,CAAC;AACrC,8EAA8E;AAC9E,4EAA4E;AAC5E,MAAM,kBAAkB,GAAG,MAAO,CAAC;AAEnC,2CAA2C;AAC3C,SAAS,cAAc,CAAC,QAAmB;IACzC,OAAO,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;AAChF,CAAC;AAeD;;;;;;;;GAQG;AACH,SAAgB,kBAAkB,CAAC,GAAW,EAAE,IAAc,EAAE,KAAa;IAC3E,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,MAAM,MAAM,GAAG,CAAC,CAAkB,EAAQ,EAAE;YAC1C,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,OAAO,CAAC,CAAC,CAAC,CAAC;QACb,CAAC,CAAC;QACF,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YAC5B,IAAI,CAAC;gBACH,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACxB,CAAC;YAAC,MAAM,CAAC;gBACP,kBAAkB;YACpB,CAAC;YACD,MAAM,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,KAAK,CAAC,8BAA8B,kBAAkB,IAAI,CAAC,EAAE,CAAC,CAAC;QACvH,CAAC,EAAE,kBAAkB,CAAC,CAAC;QAEvB,MAAM,KAAK,GAAG,IAAA,qBAAK,EAAC,GAAG,EAAE,IAAI,EAAE;YAC7B,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC;YAC/B,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,IAAI,EAAE,IAAA,8BAAiB,GAAE,EAAE;SACnD,CAAC,CAAC;QACH,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE;YAC7B,MAAM,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC;QACtB,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE;YAC7B,MAAM,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC;QACtB,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,GAAY,EAAE,CAAC,CAAC,CAAC;QAC9F,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;QACtE,6EAA6E;QAC7E,4EAA4E;QAC5E,mDAAmD;QACnD,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QACnC,IAAI,CAAC;YACH,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;YAC1B,KAAK,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC;QACrB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,GAAY,EAAE,CAAC,CAAC;QACpE,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAa,gBAAgB;IAC3B,YACmB,YAA0B,EAC1B,cAAgC,kBAAkB;QADlD,iBAAY,GAAZ,YAAY,CAAc;QAC1B,gBAAW,GAAX,WAAW,CAAuC;IAClE,CAAC;IAEJ,KAAK,CAAC,OAAO,CACX,OAAe,EACf,MAAc,EACd,SAAiB,EACjB,KAAa,EACb,aAAqB,EACrB,UAA4B,UAAU,EACtC,UAA4B;QAE5B,uBAAuB;QACvB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,mBAAmB,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;QAElG,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxB,MAAM,IAAI,sBAAsB,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACpD,CAAC;QAED,MAAM,cAAc,GAAG,QAAQ,CAAC,MAAM,CAAC;QACvC,MAAM,YAAY,GAAG,cAAc,CAAC,QAAQ,CAAC,CAAC;QAE9C,qCAAqC;QACrC,MAAM,aAAa,GAAG,IAAI,CAAC,YAAY,CAAC,gBAAgB,EAAE,CAAC;QAC3D,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,OAAO,EAAE,UAAU,EAAE,GAAG,OAAO,IAAI,MAAM,EAAE,CAAC,CAAC;QACzF,EAAE,CAAC,SAAS,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC9C,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,GAAG,SAAS,gBAAgB,IAAI,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QACzF,EAAE,CAAC,aAAa,CAAC,WAAW,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;QAE1E,kFAAkF;QAClF,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,kBAAkB,CAAC,CAAC;QACjD,MAAM,WAAW,GAAG,QAAQ,CAAC,MAAM,GAAG,kBAAkB,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;QAC7G,MAAM,WAAW,GAAG,WAAW;aAC5B,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC;aACrE,IAAI,CAAC,MAAM,CAAC,CAAC;QAEhB,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,qBAAqB,CAAC,WAAW,EAAE,KAAK,EAAE,UAAU,CAAC,CAAC;QACrF,MAAM,SAAS,GAAc;YAC3B,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,2BAA2B,WAAW,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE;YACrF,GAAG,IAAI;SACR,CAAC;QAEF,2DAA2D;QAC3D,MAAM,IAAI,CAAC,YAAY,CAAC,mBAAmB,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;QAE5F,MAAM,aAAa,GAAG,SAAS,CAAC,MAAM,CAAC;QACvC,MAAM,WAAW,GAAG,cAAc,CAAC,SAAS,CAAC,CAAC;QAC9C,MAAM,YAAY,GAAG,YAAY,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,WAAW,GAAG,YAAY,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC5G,MAAM,gBAAgB,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,YAAY,GAAG,aAAa,CAAC,GAAG,GAAG,CAAC,CAAC;QAC1E,MAAM,eAAe,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,WAAW,GAAG,aAAa,CAAC,GAAG,GAAG,CAAC,CAAC;QAExE,OAAO,EAAE,cAAc,EAAE,aAAa,EAAE,YAAY,EAAE,WAAW,EAAE,YAAY,EAAE,gBAAgB,EAAE,eAAe,EAAE,CAAC;IACvH,CAAC;IAEO,KAAK,CAAC,qBAAqB,CAAC,WAAmB,EAAE,KAAa,EAAE,UAA4B;QAClG,+EAA+E;QAC/E,8EAA8E;QAC9E,IAAI,WAAW,CAAC,MAAM,IAAI,WAAW,EAAE,CAAC;YACtC,OAAO,IAAI,CAAC,oBAAoB,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;QACvD,CAAC;QAED,yEAAyE;QACzE,oEAAoE;QACpE,MAAM,MAAM,GAAG,IAAI,CAAC,eAAe,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;QAC9D,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,2BAA2B,CAAC,MAAM,EAAE,KAAK,EAAE,UAAU,CAAC,CAAC;QAEzF,2EAA2E;QAC3E,6EAA6E;QAC7E,wEAAwE;QACxE,MAAM,UAAU,GAAG,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC/C,OAAO,IAAI,CAAC,mBAAmB,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;IACrD,CAAC;IAED;;2EAEuE;IAC/D,KAAK,CAAC,2BAA2B,CACvC,MAAgB,EAChB,KAAa,EACb,UAA4B;QAE5B,MAAM,OAAO,GAAa,IAAI,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACnD,IAAI,SAAS,GAAG,CAAC,CAAC;QAClB,IAAI,MAAM,GAAG,CAAC,CAAC;QACf,MAAM,MAAM,GAAG,KAAK,IAAmB,EAAE;YACvC,OAAO,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC;gBAC9B,MAAM,CAAC,GAAG,MAAM,EAAE,CAAC;gBACnB,OAAO,CAAC,CAAC,CAAC,GAAG,MAAM,IAAI,CAAC,0BAA0B,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;gBACvF,SAAS,EAAE,CAAC;gBACZ,UAAU,EAAE,CAAC,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;YACzC,CAAC;QACH,CAAC,CAAC;QACF,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,iBAAiB,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;QAC5D,MAAM,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE,GAAG,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QACpE,OAAO,OAAO,CAAC;IACjB,CAAC;IAED;0FACsF;IAC9E,KAAK,CAAC,0BAA0B,CAAC,KAAa,EAAE,KAAa,EAAE,KAAa,EAAE,KAAa;QACjG,MAAM,WAAW,GAAG,gBAAgB,KAAK,GAAG,CAAC,OAAO,KAAK,8DAA8D,CAAC;QACxH,IAAI,OAA0B,CAAC;QAC/B,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,IAAI,kBAAkB,EAAE,OAAO,EAAE,EAAE,CAAC;YAC/D,IAAI,CAAC;gBACH,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,oBAAoB,CAAC,KAAK,EAAE,KAAK,EAAE,WAAW,CAAC,CAAC;gBAC3E,OAAO,SAAS,KAAK,GAAG,CAAC,IAAI,KAAK,MAAM,OAAO,EAAE,CAAC;YACpD,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO,GAAG,GAAY,CAAC;YACzB,CAAC;QACH,CAAC;QACD,MAAM,OAAO,GAAG,KAAK,CAAC,MAAM,GAAG,sBAAsB,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,sBAAsB,CAAC,cAAc,CAAC,CAAC,CAAC,KAAK,CAAC;QACxH,OAAO,CAAC,KAAK,CACX,4BAA4B,KAAK,GAAG,CAAC,IAAI,KAAK,+BAA+B,kBAAkB,cAAc,OAAO,EAAE,OAAO,IAAI,eAAe,iCAAiC,CAClL,CAAC;QACF,OAAO,SAAS,KAAK,GAAG,CAAC,IAAI,KAAK,iCAAiC,kBAAkB,cAAc,OAAO,EAAE,OAAO,IAAI,eAAe,sCAAsC,OAAO,EAAE,CAAC;IACxL,CAAC;IAED,qGAAqG;IAC7F,KAAK,CAAC,mBAAmB,CAAC,UAAkB,EAAE,KAAa;QACjE,IAAI,OAA0B,CAAC;QAC/B,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,IAAI,kBAAkB,EAAE,OAAO,EAAE,EAAE,CAAC;YAC/D,IAAI,CAAC;gBACH,OAAO,MAAM,IAAI,CAAC,oBAAoB,CAAC,UAAU,EAAE,KAAK,EAAE,sBAAsB,CAAC,CAAC;YACpF,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO,GAAG,GAAY,CAAC;YACzB,CAAC;QACH,CAAC;QACD,OAAO,CAAC,KAAK,CACX,wDAAwD,kBAAkB,cAAc,OAAO,EAAE,OAAO,IAAI,eAAe,wCAAwC,CACpK,CAAC;QACF,OAAO,UAAU,CAAC;IACpB,CAAC;IAEO,eAAe,CAAC,IAAY,EAAE,QAAgB;QACpD,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,IAAI,KAAK,GAAG,CAAC,CAAC;QAEd,OAAO,KAAK,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;YAC3B,IAAI,GAAG,GAAG,KAAK,GAAG,QAAQ,CAAC;YAC3B,IAAI,GAAG,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;gBACtB,6DAA6D;gBAC7D,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;gBAC/C,IAAI,QAAQ,GAAG,KAAK;oBAAE,GAAG,GAAG,QAAQ,CAAC;YACvC,CAAC;YACD,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC;YACpC,KAAK,GAAG,GAAG,CAAC;QACd,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;IAEO,KAAK,CAAC,oBAAoB,CAChC,IAAY,EACZ,KAAa,EACb,WAAW,GAAG,0BAA0B;QAExC,8FAA8F;QAC9F,MAAM,MAAM,GAAG,GAAG,uBAAuB,OAAO,WAAW,qBAAqB,IAAI,yEAAyE,CAAC;QAE9J,4EAA4E;QAC5E,wEAAwE;QACxE,wEAAwE;QACxE,0EAA0E;QAC1E,8CAA8C;QAC9C,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,IAAA,6BAAgB,GAAE,CAAC,GAAG,CAAC;QACtE,MAAM,CAAC,SAAS,EAAE,GAAG,aAAa,CAAC,GAAG,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAE9D,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,SAAS,EAAE,CAAC,GAAG,aAAa,EAAE,SAAS,EAAE,SAAS,EAAE,KAAK,CAAC,EAAE,MAAM,CAAC,CAAC;QAE1G,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CAAC,qBAAqB,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QAC/D,CAAC;QACD,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACxB,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;YAC3C,MAAM,IAAI,KAAK,CAAC,iCAAiC,MAAM,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC,CAAC;QAC/E,CAAC;QAED,OAAO,MAAM,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IACrC,CAAC;CACF;AAtLD,4CAsLC"}

package/dist/shared/image-sniff.d.ts

@@ -0,0 +1,15 @@
+/**
+ * Cross-channel inbound media helpers.
+ *
+ * Shared by the channel webhook routers (LINE, Slack) so each one does not
+ * carry its own copy of the same magic-byte table.
+ */
+/**
+ * Pick a file extension from an image's magic bytes; default jpg.
+ *
+ * Sniffing (rather than trusting a platform-supplied `mimetype`/filename) is
+ * deliberate: the field is attacker-controlled on every channel, and LINE does
+ * not send one at all.
+ */
+export declare function sniffImageExt(buf: Buffer): string;
+//# sourceMappingURL=image-sniff.d.ts.map

package/dist/shared/image-sniff.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"image-sniff.d.ts","sourceRoot":"","sources":["../../src/shared/image-sniff.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH;;;;;;GAMG;AACH,wBAAgB,aAAa,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CASjD"}

package/dist/shared/image-sniff.js

@@ -0,0 +1,29 @@
+"use strict";
+/**
+ * Cross-channel inbound media helpers.
+ *
+ * Shared by the channel webhook routers (LINE, Slack) so each one does not
+ * carry its own copy of the same magic-byte table.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.sniffImageExt = sniffImageExt;
+/**
+ * Pick a file extension from an image's magic bytes; default jpg.
+ *
+ * Sniffing (rather than trusting a platform-supplied `mimetype`/filename) is
+ * deliberate: the field is attacker-controlled on every channel, and LINE does
+ * not send one at all.
+ */
+function sniffImageExt(buf) {
+    if (buf.length >= 3 && buf[0] === 0xff && buf[1] === 0xd8 && buf[2] === 0xff)
+        return 'jpg';
+    if (buf.length >= 4 && buf[0] === 0x89 && buf[1] === 0x50 && buf[2] === 0x4e && buf[3] === 0x47)
+        return 'png';
+    if (buf.length >= 3 && buf[0] === 0x47 && buf[1] === 0x49 && buf[2] === 0x46)
+        return 'gif';
+    if (buf.length >= 12 &&
+        buf[8] === 0x57 && buf[9] === 0x45 && buf[10] === 0x42 && buf[11] === 0x50)
+        return 'webp';
+    return 'jpg';
+}
+//# sourceMappingURL=image-sniff.js.map

package/dist/shared/image-sniff.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"image-sniff.js","sourceRoot":"","sources":["../../src/shared/image-sniff.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;AASH,sCASC;AAhBD;;;;;;GAMG;AACH,SAAgB,aAAa,CAAC,GAAW;IACvC,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IAC3F,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IAC9G,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IAC3F,IACE,GAAG,CAAC,MAAM,IAAI,EAAE;QAChB,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,GAAG,CAAC,EAAE,CAAC,KAAK,IAAI,IAAI,GAAG,CAAC,EAAE,CAAC,KAAK,IAAI;QAC1E,OAAO,MAAM,CAAC;IAChB,OAAO,KAAK,CAAC;AACf,CAAC"}

package/mcp/tools/discord/module.ts

@@ -30,8 +30,7 @@ import { createMessageHandler } from './inbound';
 // the others see the O_EXCL marker and drop, so a stranger's DM is handled once.
 import { initDedupDir, isDuplicate, pruneDedup } from '../telegram/dedup';
 import type { DiscordMessageContext } from './types';
-
-const MAX_ATTACHMENT_BYTES = 50 * 1024 * 1024;
+import { MAX_ATTACHMENT_BYTES } from '../shared/limits';
 
 /** AgentRunner callback base (origin of CLAUDE_CHANNEL_CALLBACK, "" when unset).
  *  Used to mint/approve `/cli` pairings via the runner, the same bridge the

package/mcp/tools/shared/limits.ts

@@ -0,0 +1,14 @@
+/**
+ * Shared limits for the channel reply tools (Discord / Telegram / Slack).
+ *
+ * Self-contained on purpose, like share-client.ts: mcp/** ships as source
+ * without src/**, so this module must not import from src/ (see
+ * tests/unit/mcp-no-src-imports.test.ts).
+ */
+
+/**
+ * Cap on a single outbound attachment. 50 MB is the smallest of the three
+ * platforms' own upload ceilings, so one value keeps the tools' behaviour
+ * identical instead of each re-declaring the same literal.
+ */
+export const MAX_ATTACHMENT_BYTES = 50 * 1024 * 1024;

package/mcp/tools/slack/module.ts

@@ -11,6 +11,7 @@
  * bot token at any time, so this module always sends directly from the
  * subprocess.
  */
+import * as fs from 'fs';
 import type { ToolModule, McpToolDefinition, McpToolResult, ToolVisibility } from '../../types';
 // mcp/ ships as source (package.json `files` lists "mcp/", not "src/") and
 // runs directly under bun — it may only import a compiled dist/ artifact,
@@ -20,11 +21,17 @@ import type { ToolModule, McpToolDefinition, McpToolResult, ToolVisibility } fro
 // "Cannot find module" from an installed package). `npm run build` must have
 // run at least once for this import to resolve locally.
 import { SlackClient } from '../../../dist/api/slack-client.js';
+import { MAX_ATTACHMENT_BYTES } from '../shared/limits';
 
 export class SlackModule implements ToolModule {
   id = 'slack';
   toolVisibility: ToolVisibility = 'current-channel';
 
+  // Files already delivered this session. Small models sometimes retry
+  // slack_reply after a transient send hiccup even though the upload
+  // succeeded, which spams duplicate images. We never re-send the same file.
+  private readonly sentFiles = new Set<string>();
+
   isEnabled(): boolean {
     return process.env.GATEWAY_ORIGIN_CHANNEL === 'slack';
   }
@@ -36,6 +43,7 @@ export class SlackModule implements ToolModule {
         description:
           'Send a reply to the current Slack conversation. ' +
           'Pass chat_id (the Slack channel/DM id shown in the <channel> tag) and text. ' +
+          'Optionally pass files (absolute paths) to attach images or documents. ' +
           'Also pass message_id from the <channel> tag when present — it clears the ' +
           '⏳ "seen" reaction the gateway left on the inbound message. ' +
           'Pass thread_id to reply inside the same thread instead of top-level.',
@@ -50,6 +58,14 @@ export class SlackModule implements ToolModule {
               type: 'string',
               description: 'Message text.',
             },
+            files: {
+              type: 'array',
+              items: { type: 'string' },
+              description:
+                'Absolute file paths to attach (e.g. a generate_image result path). ' +
+                'Optional — text can be sent alone, files can be sent alone, or both ' +
+                'together as one message with the text as caption.',
+            },
             message_id: {
               type: 'string',
               description:
@@ -63,7 +79,9 @@ export class SlackModule implements ToolModule {
                 'to a threaded message stays in-thread.',
             },
           },
-          required: ['chat_id', 'text'],
+          // `text` is NOT required: a files-only reply (an image with no caption)
+          // is a legitimate send.
+          required: ['chat_id'],
         },
       },
     ];
@@ -79,12 +97,26 @@ export class SlackModule implements ToolModule {
     const text = typeof args.text === 'string' ? args.text : '';
     const messageId = typeof args.message_id === 'string' ? args.message_id : '';
     const threadId = typeof args.thread_id === 'string' ? args.thread_id : '';
+    const requested = Array.isArray(args.files) ? (args.files as unknown[]) : [];
     const token = process.env.SLACK_BOT_TOKEN ?? '';
 
     if (!chatId) {
       return { content: [{ type: 'text', text: 'slack_reply: missing chat_id' }], isError: true };
     }
-    if (!text) {
+
+    // Drop files already delivered successfully this session (retry-dedup): a
+    // small model sometimes retries slack_reply after a transient hiccup even
+    // though the upload landed, which would spam duplicate images.
+    const files = requested.filter(
+      (f): f is string => typeof f === 'string' && !this.sentFiles.has(f),
+    );
+
+    // Nothing new to say or send — the whole reply is a duplicate retry. No-op
+    // success so the agent treats it as delivered and stops retrying.
+    if (!text && files.length === 0 && requested.length > 0) {
+      return { content: [{ type: 'text', text: 'already sent (duplicate suppressed)' }] };
+    }
+    if (!text && files.length === 0) {
       return { content: [{ type: 'text', text: 'slack_reply: text cannot be empty' }], isError: true };
     }
     if (!token) {
@@ -93,16 +125,46 @@ export class SlackModule implements ToolModule {
 
     const client = new SlackClient({ botToken: token, logDir: process.env.GATEWAY_WORKSPACE_DIR ?? '/tmp' });
     try {
-      const sent = await client.postMessage(chatId, text, threadId || undefined);
+      // Size-check before any upload starts, so an oversized file fails fast
+      // instead of half-way through a multi-file batch.
+      for (const f of files) {
+        const st = fs.statSync(f);
+        if (st.size > MAX_ATTACHMENT_BYTES) {
+          throw new Error(`file too large: ${f} (${(st.size / 1024 / 1024).toFixed(1)}MB, max 50MB)`);
+        }
+      }
+
+      // With files, ONE uploadFiles call carries both the attachments and the
+      // text (as Slack's initial_comment) — never also postMessage, which would
+      // split one reply into two Slack messages.
+      const sent =
+        files.length > 0
+          ? await client.uploadFiles(chatId, files, {
+              threadTs: threadId || undefined,
+              initialComment: text || undefined,
+            })
+          : await client.postMessage(chatId, text, threadId || undefined);
       if (!sent.ok) {
         return { content: [{ type: 'text', text: `slack_reply failed: ${sent.error}` }], isError: true };
       }
+      // Mark as sent only AFTER the send succeeds — a genuine failure leaves
+      // them eligible for a retry rather than silently dropped.
+      for (const f of files) this.sentFiles.add(f);
       // Best-effort: clear the ack-reaction the webhook left on the inbound
       // message. Never blocks or fails the reply itself on a reaction error.
       if (messageId) {
         void client.removeReaction(chatId, messageId).catch(() => {});
       }
-      return { content: [{ type: 'text', text: 'Sent message to Slack.' }] };
+      return {
+        content: [
+          {
+            type: 'text',
+            text: files.length > 0
+              ? `Sent message to Slack (${files.length} file(s)).`
+              : 'Sent message to Slack.',
+          },
+        ],
+      };
     } catch (err) {
       return {
         content: [{ type: 'text', text: `slack_reply failed: ${(err as Error).message}` }],

package/mcp/tools/telegram/module.ts

@@ -8,6 +8,7 @@ import * as fs from 'fs';
 import * as os from 'os';
 import { migrateAccess, defaultAccess } from './pure';
 import { chunkText, htmlToPlain } from './typing';
+import { MAX_ATTACHMENT_BYTES } from '../shared/limits';
 import type {
   ChannelModule,
   ChannelCapabilities,
@@ -20,7 +21,6 @@ import type {
 } from '../../types';
 
 const PHOTO_EXTS = new Set(['.jpg', '.jpeg', '.png', '.gif', '.webp']);
-const MAX_ATTACHMENT_BYTES = 50 * 1024 * 1024;
 const MAX_CHUNK_LIMIT = 4096;
 
 export class TelegramModule implements ChannelModule {

package/mcp/tools/telegram/receiver-server.ts

@@ -39,6 +39,7 @@ import { createIncidentStore } from '../../../dist/agent/incident-store.js'
 import type { RecoveryOutcome } from '../../../dist/agent/incident.js'
 import { initDedupDir, isDuplicate as _isDuplicate, pruneDedup as _pruneDedup } from './dedup'
 import { normalizeTelegramLineBreaks, resolveTelegramReplyFormat, migrateAccess, telegramDisplayName } from './pure'
+import { MAX_ATTACHMENT_BYTES } from '../shared/limits'
 
 // Standalone fallback: default state dir to ~/.claude/channels/telegram
 const STATE_DIR = process.env.TELEGRAM_STATE_DIR ?? join(homedir(), '.claude', 'channels', 'telegram')
@@ -336,7 +337,6 @@ function defaultAccess(): Access {
 }
 
 const MAX_CHUNK_LIMIT = 4096
-const MAX_ATTACHMENT_BYTES = 50 * 1024 * 1024
 
 // reply's files param takes any path. Claude can already Read+paste file
 // contents, so this isn't a new exfil channel for arbitrary paths — but the

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@0xmaxma/claude-gateway",
-  "version": "1.7.8",
+  "version": "1.7.9",
   "description": "Multi-agent gateway for Claude",
   "repository": {
     "type": "git",