@openclaw/line 2026.5.28 → 2026.5.31-beta.1

package/node_modules/@line/bot-sdk/lib/utils.ts

@@ -1,6 +1,10 @@
-import { Buffer } from "node:buffer";
 import { JSONParseError } from "./exceptions.js";
 
+// Mirrors retrofit's PATH_TRAVERSAL: matches when any path segment is purely
+// "." / ".." (or their percent-encoded forms), after the parameters have been
+// substituted. See square/retrofit RequestBuilder.java.
+const PATH_TRAVERSAL = /^(?:.*\/)?(?:\.|%2e|%2E){1,2}(?:\/.*)?$/;
+
 export function ensureJSON<T>(raw: T): T {
   if (typeof raw === "object") {
     return raw;
@@ -9,18 +13,6 @@ export function ensureJSON<T>(raw: T): T {
   }
 }
 
-function toArrayBuffer(input: Uint8Array | Buffer): ArrayBuffer {
-  if (input.buffer instanceof ArrayBuffer) {
-    return input.buffer.slice(
-      input.byteOffset,
-      input.byteOffset + input.byteLength,
-    );
-  }
-  const arrayBuffer = new ArrayBuffer(input.byteLength);
-  new Uint8Array(arrayBuffer).set(input);
-  return arrayBuffer;
-}
-
 export function createURLSearchParams(
   params: Record<string, unknown>,
 ): URLSearchParams {
@@ -33,23 +25,28 @@ export function createURLSearchParams(
   return searchParams;
 }
 
-export function createMultipartFormData(
-  this: FormData | void,
-  formBody: Record<string, any>,
-): FormData {
-  const formData = this instanceof FormData ? this : new FormData();
-  for (const [key, value] of Object.entries(formBody)) {
-    if (value == null) continue;
-
-    if (value instanceof Blob) {
-      formData.append(key, value);
-    } else if (Buffer.isBuffer(value) || value instanceof Uint8Array) {
-      const arrayBuffer = toArrayBuffer(value);
-      formData.append(key, new Blob([arrayBuffer]));
-    } else {
-      formData.append(key, String(value));
-    }
+function encodePathParam(value: unknown, name: string): string {
+  if (value === null || value === undefined) {
+    throw new TypeError(`${name} is required`);
+  }
+  return encodeURIComponent(String(value));
+}
+
+export function buildPath(
+  pathTemplate: string,
+  params: Record<string, unknown>,
+): string {
+  let path = pathTemplate;
+
+  for (const [name, value] of Object.entries(params)) {
+    path = path.split(`{${name}}`).join(encodePathParam(value, name));
+  }
+
+  if (PATH_TRAVERSAL.test(path)) {
+    throw new TypeError(
+      `Path parameters shouldn't perform path traversal ('.' or '..'): ${path}`,
+    );
   }
 
-  return formData;
+  return path;
 }

package/node_modules/@line/bot-sdk/lib/version.ts

@@ -1,2 +1,2 @@
-const LINE_BOT_SDK_VERSION = "11.0.0";
+const LINE_BOT_SDK_VERSION = "11.0.1";
 export const USER_AGENT = `@line/bot-sdk/${LINE_BOT_SDK_VERSION}`;

package/node_modules/@line/bot-sdk/lib/webhook/model/accountLinkEvent.ts

@@ -16,20 +16,19 @@ import { EventMode } from "./eventMode.js";
 import { LinkContent } from "./linkContent.js";
 import { Source } from "./source.js";
 
-/**
- * Event object for when a user has linked their LINE account with a provider\'s service account. You can reply to account link events.
- */
 import { EventBase } from "./models.js";
 
+/**
+ * Event object for when a user has linked their LINE account with a provider's service account. You can reply to account link events.
+ */
 export type AccountLinkEvent = EventBase & {
   type: "accountLink";
+
   /**
-   * Reply token used to send reply message to this event. This property won\'t be included if linking the account has failed.
-   */
-  replyToken?: string /**/;
-  /**
+   * Reply token used to send reply message to this event. This property won't be included if linking the account has failed.
    */
-  link: LinkContent /**/;
+  replyToken?: string;
+  link: LinkContent;
 };
 
 export namespace AccountLinkEvent {}

package/node_modules/@line/bot-sdk/lib/webhook/model/activatedEvent.ts

@@ -16,16 +16,15 @@ import { Event } from "./event.js";
 import { EventMode } from "./eventMode.js";
 import { Source } from "./source.js";
 
+import { EventBase } from "./models.js";
+
 /**
  * This event indicates that the module channel has been switched to Active Channel by calling the Acquire Control API. Sent to the webhook URL server of the module channel.
  */
-import { EventBase } from "./models.js";
-
 export type ActivatedEvent = EventBase & {
   type: "activated";
-  /**
-   */
-  chatControl: ChatControl /**/;
+
+  chatControl: ChatControl;
 };
 
 export namespace ActivatedEvent {}

package/node_modules/@line/bot-sdk/lib/webhook/model/allMentionee.ts

@@ -12,11 +12,11 @@
 
 import { Mentionee } from "./mentionee.js";
 
+import { MentioneeBase } from "./models.js";
+
 /**
  * Mentioned target is entire group
  */
-import { MentioneeBase } from "./models.js";
-
 export type AllMentionee = MentioneeBase & {
   type: "all";
 };

package/node_modules/@line/bot-sdk/lib/webhook/model/attachedModuleContent.ts

@@ -16,12 +16,13 @@ import { ModuleContentBase } from "./models.js";
 
 export type AttachedModuleContent = ModuleContentBase & {
   type: "attached";
+
   /**
    * User ID of the bot on the attached LINE Official Account
    */
-  botId: string /**/;
+  botId: string;
   /**
    * An array of strings indicating the scope permitted by the admin of the LINE Official Account.
    */
-  scopes: Array<string> /**/;
+  scopes: Array<string>;
 };

package/node_modules/@line/bot-sdk/lib/webhook/model/audioMessageContent.ts

@@ -17,15 +17,14 @@ import { MessageContentBase } from "./models.js";
 
 export type AudioMessageContent = MessageContentBase & {
   type: "audio";
-  /**
-   */
-  contentProvider: ContentProvider /**/;
+
+  contentProvider: ContentProvider;
   /**
    * Length of audio file (milliseconds)
    */
-  duration?: number /**/;
+  duration?: number;
   /**
    * Token used to mark the message as read.
    */
-  markAsReadToken?: string /**/;
+  markAsReadToken?: string;
 };

package/node_modules/@line/bot-sdk/lib/webhook/model/beaconContent.ts

@@ -14,15 +14,15 @@ export type BeaconContent = {
   /**
    * Hardware ID of the beacon that was detected
    */
-  hwid: string /**/;
+  hwid: string;
   /**
    * Type of beacon event.
    */
-  type: BeaconContent.TypeEnum /**/;
+  type: BeaconContent.TypeEnum;
   /**
    * Device message of beacon that was detected.
    */
-  dm?: string /**/;
+  dm?: string;
 };
 
 export namespace BeaconContent {

package/node_modules/@line/bot-sdk/lib/webhook/model/beaconEvent.ts

@@ -16,20 +16,19 @@ import { Event } from "./event.js";
 import { EventMode } from "./eventMode.js";
 import { Source } from "./source.js";
 
+import { EventBase } from "./models.js";
+
 /**
  * Event object for when a user enters the range of a LINE Beacon. You can reply to beacon events.
  */
-import { EventBase } from "./models.js";
-
 export type BeaconEvent = EventBase & {
   type: "beacon";
+
   /**
    * Reply token used to send reply message to this event
    */
-  replyToken: string /**/;
-  /**
-   */
-  beacon: BeaconContent /**/;
+  replyToken: string;
+  beacon: BeaconContent;
 };
 
 export namespace BeaconEvent {}

package/node_modules/@line/bot-sdk/lib/webhook/model/botResumedEvent.ts

@@ -15,11 +15,11 @@ import { Event } from "./event.js";
 import { EventMode } from "./eventMode.js";
 import { Source } from "./source.js";
 
+import { EventBase } from "./models.js";
+
 /**
  * This event indicates that the LINE Official Account has returned from the suspended state. Sent to the webhook URL server of the module channel.
  */
-import { EventBase } from "./models.js";
-
 export type BotResumedEvent = EventBase & {
   type: "botResumed";
 };

package/node_modules/@line/bot-sdk/lib/webhook/model/botSuspendedEvent.ts

@@ -15,11 +15,11 @@ import { Event } from "./event.js";
 import { EventMode } from "./eventMode.js";
 import { Source } from "./source.js";
 
+import { EventBase } from "./models.js";
+
 /**
  * This event indicates that the LINE Official Account has been suspended (Suspend). Sent to the webhook URL server of the module channel.
  */
-import { EventBase } from "./models.js";
-
 export type BotSuspendedEvent = EventBase & {
   type: "botSuspended";
 };

package/node_modules/@line/bot-sdk/lib/webhook/model/callbackRequest.ts

@@ -14,18 +14,18 @@ import { Event } from "./event.js";
 
 /**
  * The request body contains a JSON object with the user ID of a bot that should receive webhook events and an array of webhook event objects.
+ * @see <a href="https://developers.line.biz/en/reference/messaging-api/#request-body">https://developers.line.biz/en/reference/messaging-api/#request-body</a>
  */
 export type CallbackRequest = {
   /**
    * User ID of a bot that should receive webhook events. The user ID value is a string that matches the regular expression, `U[0-9a-f]{32}`.
-   *
-   * @see <a href="https://developers.line.biz/en/reference/messaging-api/#request-body">destination Documentation</a>
+   * @minLength 33
+   * @maxLength 33
+   * @pattern /^U[0-9a-f]{32}$/
    */
-  destination: string /**/;
+  destination: string;
   /**
-   * Array of webhook event objects. The LINE Platform may send an empty array that doesn\'t include a webhook event object to confirm communication.
-   *
-   * @see <a href="https://developers.line.biz/en/reference/messaging-api/#request-body">events Documentation</a>
+   * Array of webhook event objects. The LINE Platform may send an empty array that doesn't include a webhook event object to confirm communication.
    */
-  events: Array<Event> /**/;
+  events: Array<Event>;
 };

package/node_modules/@line/bot-sdk/lib/webhook/model/chatControl.ts

@@ -11,7 +11,5 @@
  */
 
 export type ChatControl = {
-  /**
-   */
-  expireAt: number /**/;
+  expireAt: number;
 };

package/node_modules/@line/bot-sdk/lib/webhook/model/contentProvider.ts

@@ -17,15 +17,15 @@ export type ContentProvider = {
   /**
    * Provider of the image file.
    */
-  type: ContentProvider.TypeEnum /**/;
+  type: ContentProvider.TypeEnum;
   /**
    * URL of the image file. Only included when contentProvider.type is external.
    */
-  originalContentUrl?: string /**/;
+  originalContentUrl?: string;
   /**
    * URL of the preview image. Only included when contentProvider.type is external.
    */
-  previewImageUrl?: string /**/;
+  previewImageUrl?: string;
 };
 
 export namespace ContentProvider {

package/node_modules/@line/bot-sdk/lib/webhook/model/deactivatedEvent.ts

@@ -15,11 +15,11 @@ import { Event } from "./event.js";
 import { EventMode } from "./eventMode.js";
 import { Source } from "./source.js";
 
+import { EventBase } from "./models.js";
+
 /**
  * This event indicates that the module channel has been switched to Standby Channel by calling Acquire Control API or Release Control API. Sent to the webhook URL server of the module channel.
  */
-import { EventBase } from "./models.js";
-
 export type DeactivatedEvent = EventBase & {
   type: "deactivated";
 };

package/node_modules/@line/bot-sdk/lib/webhook/model/deliveryContext.ts

@@ -11,11 +11,11 @@
  */
 
 /**
- * webhook\'s delivery context information
+ * webhook's delivery context information
  */
 export type DeliveryContext = {
   /**
    * Whether the webhook event is a redelivered one or not.
    */
-  isRedelivery: boolean /**/;
+  isRedelivery: boolean;
 };

package/node_modules/@line/bot-sdk/lib/webhook/model/detachedModuleContent.ts

@@ -16,14 +16,15 @@ import { ModuleContentBase } from "./models.js";
 
 export type DetachedModuleContent = ModuleContentBase & {
   type: "detached";
+
   /**
    * Detached LINE Official Account bot user ID
    */
-  botId: string /**/;
+  botId: string;
   /**
    * Reason for detaching
    */
-  reason: DetachedModuleContent.ReasonEnum /**/;
+  reason: DetachedModuleContent.ReasonEnum;
 };
 
 export namespace DetachedModuleContent {

package/node_modules/@line/bot-sdk/lib/webhook/model/emoji.ts

@@ -14,17 +14,17 @@ export type Emoji = {
   /**
    * Index position for a character in text, with the first character being at position 0.
    */
-  index: number /**/;
+  index: number;
   /**
    * The length of the LINE emoji string. For LINE emoji (hello), 7 is the length.
    */
-  length: number /**/;
+  length: number;
   /**
    * Product ID for a LINE emoji set.
    */
-  productId: string /**/;
+  productId: string;
   /**
    * ID for a LINE emoji inside a set.
    */
-  emojiId: string /**/;
+  emojiId: string;
 };

package/node_modules/@line/bot-sdk/lib/webhook/model/event.ts

@@ -34,6 +34,9 @@ import { UnfollowEvent } from "./models.js";
 import { UnsendEvent } from "./models.js";
 import { VideoPlayCompleteEvent } from "./models.js";
 
+/**
+ * Webhook event
+ */
 export type Event =
   | AccountLinkEvent // accountLink
   | ActivatedEvent // activated
@@ -55,31 +58,22 @@ export type Event =
   | UnsendEvent // unsend
   | VideoPlayCompleteEvent; // videoPlayComplete
 
-/**
- * Webhook event
- */
 export type EventBase = {
   /**
    * Type of the event
    */
-  type: string /**/;
-  /**
-   */
-  source?: Source /**/;
+  type: string;
+  source?: Source;
   /**
    * Time of the event in milliseconds.
    */
-  timestamp: number /**/;
-  /**
-   */
-  mode: EventMode /**/;
+  timestamp: number;
+  mode: EventMode;
   /**
    * Webhook Event ID. An ID that uniquely identifies a webhook event. This is a string in ULID format.
    */
-  webhookEventId: string /**/;
-  /**
-   */
-  deliveryContext: DeliveryContext /**/;
+  webhookEventId: string;
+  deliveryContext: DeliveryContext;
 };
 
 export namespace Event {}

package/node_modules/@line/bot-sdk/lib/webhook/model/eventMode.ts

@@ -13,5 +13,4 @@
 /**
  * Channel state.
  */
-
 export type EventMode = "active" | "standby";

package/node_modules/@line/bot-sdk/lib/webhook/model/fileMessageContent.ts

@@ -16,16 +16,17 @@ import { MessageContentBase } from "./models.js";
 
 export type FileMessageContent = MessageContentBase & {
   type: "file";
+
   /**
    * File name
    */
-  fileName: string /**/;
+  fileName: string;
   /**
    * File size in bytes
    */
-  fileSize: number /**/;
+  fileSize: number;
   /**
    * Token used to mark the message as read.
    */
-  markAsReadToken?: string /**/;
+  markAsReadToken?: string;
 };

package/node_modules/@line/bot-sdk/lib/webhook/model/followDetail.ts

@@ -14,5 +14,5 @@ export type FollowDetail = {
   /**
    * Whether a user has added your LINE Official Account as a friend or unblocked.
    */
-  isUnblocked: boolean /**/;
+  isUnblocked: boolean;
 };

package/node_modules/@line/bot-sdk/lib/webhook/model/followEvent.ts

@@ -16,20 +16,19 @@ import { EventMode } from "./eventMode.js";
 import { FollowDetail } from "./followDetail.js";
 import { Source } from "./source.js";
 
+import { EventBase } from "./models.js";
+
 /**
  * Event object for when your LINE Official Account is added as a friend (or unblocked). You can reply to follow events.
  */
-import { EventBase } from "./models.js";
-
 export type FollowEvent = EventBase & {
   type: "follow";
+
   /**
    * Reply token used to send reply message to this event
    */
-  replyToken: string /**/;
-  /**
-   */
-  follow: FollowDetail /**/;
+  replyToken: string;
+  follow: FollowDetail;
 };
 
 export namespace FollowEvent {}

package/node_modules/@line/bot-sdk/lib/webhook/model/groupSource.ts

@@ -16,12 +16,13 @@ import { SourceBase } from "./models.js";
 
 export type GroupSource = SourceBase & {
   type: "group";
+
   /**
    * Group ID of the source group chat
    */
-  groupId: string /**/;
+  groupId: string;
   /**
    * ID of the source user. Only included in message events. Only users of LINE for iOS and LINE for Android are included in userId.
    */
-  userId?: string /**/;
+  userId?: string;
 };

package/node_modules/@line/bot-sdk/lib/webhook/model/imageMessageContent.ts

@@ -18,18 +18,15 @@ import { MessageContentBase } from "./models.js";
 
 export type ImageMessageContent = MessageContentBase & {
   type: "image";
-  /**
-   */
-  contentProvider: ContentProvider /**/;
-  /**
-   */
-  imageSet?: ImageSet /**/;
+
+  contentProvider: ContentProvider;
+  imageSet?: ImageSet;
   /**
    * Quote token to quote this message.
    */
-  quoteToken: string /**/;
+  quoteToken: string;
   /**
    * Token used to mark the message as read.
    */
-  markAsReadToken?: string /**/;
+  markAsReadToken?: string;
 };

package/node_modules/@line/bot-sdk/lib/webhook/model/imageSet.ts

@@ -14,13 +14,13 @@ export type ImageSet = {
   /**
    * Image set ID. Only included when multiple images are sent simultaneously.
    */
-  id: string /**/;
+  id: string;
   /**
-   * An index starting from 1, indicating the image number in a set of images sent simultaneously. Only included when multiple images are sent simultaneously. However, it won\'t be included if the sender is using LINE 11.15 or earlier for Android.
+   * An index starting from 1, indicating the image number in a set of images sent simultaneously. Only included when multiple images are sent simultaneously. However, it won't be included if the sender is using LINE 11.15 or earlier for Android.
    */
-  index?: number /**/;
+  index?: number;
   /**
    * The total number of images sent simultaneously.
    */
-  total?: number /**/;
+  total?: number;
 };

package/node_modules/@line/bot-sdk/lib/webhook/model/joinEvent.ts

@@ -15,17 +15,18 @@ import { Event } from "./event.js";
 import { EventMode } from "./eventMode.js";
 import { Source } from "./source.js";
 
+import { EventBase } from "./models.js";
+
 /**
  * Event object for when your LINE Official Account joins a group chat or multi-person chat. You can reply to join events.
  */
-import { EventBase } from "./models.js";
-
 export type JoinEvent = EventBase & {
   type: "join";
+
   /**
    * Reply token used to send reply message to this event
    */
-  replyToken: string /**/;
+  replyToken: string;
 };
 
 export namespace JoinEvent {}

package/node_modules/@line/bot-sdk/lib/webhook/model/joinedMembers.ts

@@ -16,5 +16,5 @@ export type JoinedMembers = {
   /**
    * Users who joined. Array of source user objects.
    */
-  members: Array<UserSource> /**/;
+  members: Array<UserSource>;
 };

package/node_modules/@line/bot-sdk/lib/webhook/model/joinedMembershipContent.ts

@@ -16,8 +16,9 @@ import { MembershipContentBase } from "./models.js";
 
 export type JoinedMembershipContent = MembershipContentBase & {
   type: "joined";
+
   /**
    * The ID of the membership that the user joined. This is defined for each membership.
    */
-  membershipId: number /**/;
+  membershipId: number;
 };

package/node_modules/@line/bot-sdk/lib/webhook/model/leaveEvent.ts

@@ -15,11 +15,11 @@ import { Event } from "./event.js";
 import { EventMode } from "./eventMode.js";
 import { Source } from "./source.js";
 
+import { EventBase } from "./models.js";
+
 /**
  * Event object for when a user removes your LINE Official Account from a group chat or when your LINE Official Account leaves a group chat or multi-person chat.
  */
-import { EventBase } from "./models.js";
-
 export type LeaveEvent = EventBase & {
   type: "leave";
 };

package/node_modules/@line/bot-sdk/lib/webhook/model/leftMembers.ts

@@ -16,5 +16,5 @@ export type LeftMembers = {
   /**
    * Users who left. Array of source user objects.
    */
-  members: Array<UserSource> /**/;
+  members: Array<UserSource>;
 };

package/node_modules/@line/bot-sdk/lib/webhook/model/leftMembershipContent.ts

@@ -16,8 +16,9 @@ import { MembershipContentBase } from "./models.js";
 
 export type LeftMembershipContent = MembershipContentBase & {
   type: "left";
+
   /**
    * The ID of the membership that the user left. This is defined for each membership.
    */
-  membershipId: number /**/;
+  membershipId: number;
 };

package/node_modules/@line/bot-sdk/lib/webhook/model/linkContent.ts

@@ -17,11 +17,11 @@ export type LinkContent = {
   /**
    * One of the following values to indicate whether linking the account was successful or not
    */
-  result: LinkContent.ResultEnum /**/;
+  result: LinkContent.ResultEnum;
   /**
    * Specified nonce (number used once) when verifying the user ID.
    */
-  nonce: string /**/;
+  nonce: string;
 };
 
 export namespace LinkContent {