@openclaw/line 2026.9.1-beta.1 → 2026.9.1

package/dist/{monitor-Bd9XDV1i.js → monitor-D0fHFXCi.js}

@@ -1,34 +1,36 @@
-import { i as resolveLineAccount, r as resolveDefaultLineAccountId } from "./accounts-BqEVsDoB.js";
-import { i as buildLineQuickReplyFallbackText, l as getLineRuntime, o as resolveLineGroupConfigEntry } from "./media-control-cards-CksNB8Wk.js";
-import { _ as hasLineSpecificMediaOptions, g as buildLineMediaMessage } from "./send-receipt-CCPTalf9.js";
-import { i as processLineMessage, s as buildTemplateMessageFromPayload } from "./markdown-to-line-BmZ4hhfC.js";
-import { _ as replyMessageLine, a as createQuickReplyItems, c as getUserDisplayName, i as createLocationMessage, m as pushMessagesLine, n as createFlexMessage, p as pushMessageLine, y as showLoadingAnimation } from "./send-Dce0m539.js";
+import { i as resolveLineAccount, r as resolveDefaultLineAccountId } from "./accounts-BBEFMYbY.js";
+import { f as resolveLineGroupConfigEntry, h as getLineRuntime, i as prepareLineReplyPayload, n as createLineQuickReply, u as buildLineQuickReplyFallbackText } from "./rich-messages-DY1AGKAJ.js";
+import { n as findLineHttpError, r as resolveLineNonDispatchRetryable, t as explainLineRefusal, w as buildLineMediaMessage } from "./send-retry-ChpfJ-LM.js";
+import { a as eventIdFor, n as LINE_WEBHOOK_SPOOL_INVALID_PAYLOAD_MESSAGE, o as laneKeyFor, r as LineWebhookPayloadError, t as LINE_WEBHOOK_SPOOL_INVALID_EVENT_REASON } from "./webhook-spool-contract-1rY8OJw8.js";
+import { i as processLineMessage, o as buildTemplateMessageFromPayload } from "./markdown-to-line-B-sj-7II.js";
+import { _ as showLoadingAnimation, a as getLineGroupName, d as pushMessageLine, f as pushMessagesLine, h as replyMessageLine, n as createLocationMessage, o as getUserDisplayName, s as getUserProfile, t as createFlexMessage, v as quotesLineBotMessage } from "./send-CQQxpxPp.js";
 import { createChannelPairingChallengeIssuer } from "openclaw/plugin-sdk/channel-pairing";
-import { normalizeNullableString, normalizeOptionalString, normalizeStringEntries } from "openclaw/plugin-sdk/string-coerce-runtime";
-import { DEFAULT_INGRESS_ADOPTION_STALL_MS, DEFAULT_INGRESS_RETRY_MAX_ATTEMPTS, bindIngressLifecycleToReplyOptions, createChannelIngressError, createChannelIngressMonitor } from "openclaw/plugin-sdk/channel-outbound";
-import { buildChannelInboundEventContext, buildMentionRegexes, formatInboundEnvelope, formatInboundMediaUnavailableText, formatLocationText, hasFinalInboundReplyDispatch, isChannelPartialDeliveryError, matchesMentionPatterns, resolveInboundSessionEnvelopeContext, toInboundMediaFactsWithMetadata, toLocationContext } from "openclaw/plugin-sdk/channel-inbound";
+import { normalizeOptionalString, normalizeStringEntries, readNonEmptyStringPreservingWhitespace } from "openclaw/plugin-sdk/string-coerce-runtime";
+import { DEFAULT_INGRESS_ADOPTION_STALL_MS, DEFAULT_INGRESS_RETRY_MAX_ATTEMPTS, bindIngressLifecycleToReplyOptions, createChannelIngressMonitor } from "openclaw/plugin-sdk/channel-outbound";
+import { buildChannelInboundEventContext, buildMentionRegexes, formatInboundEnvelope, formatInboundMediaUnavailableText, formatLocationText, hasFinalInboundReplyDispatch, implicitMentionKindWhen, isChannelPartialDeliveryError, matchesMentionPatterns, resolveInboundSessionEnvelopeContext, toInboundMediaFactsWithMetadata, toLocationContext } from "openclaw/plugin-sdk/channel-inbound";
+import { collectErrorGraphCandidates, extractErrorCode, formatErrorMessage, readErrorName, toErrorObject } from "openclaw/plugin-sdk/error-runtime";
 import { resolveSendableOutboundReplyParts } from "openclaw/plugin-sdk/reply-payload";
 import { sanitizeAssistantVisibleText } from "openclaw/plugin-sdk/text-chunking";
 import { truncateUtf16Safe } from "openclaw/plugin-sdk/text-utility-runtime";
+import { classifyTransientNetworkErrorCode } from "openclaw/plugin-sdk/retry-runtime";
+import { fetchWithRuntimeDispatcherOrMockedGlobal } from "openclaw/plugin-sdk/runtime-fetch";
 import { firstDefined } from "openclaw/plugin-sdk/allow-from";
 import { setTimeout as setTimeout$1 } from "node:timers/promises";
 import { MediaFetchError } from "openclaw/plugin-sdk/media-runtime";
 import { saveMediaStream } from "openclaw/plugin-sdk/media-store";
 import { createNonExitingRuntime, danger, logVerbose, shouldLogVerbose, waitForAbortSignal, warn } from "openclaw/plugin-sdk/runtime-env";
-import { fetchWithRuntimeDispatcherOrMockedGlobal } from "openclaw/plugin-sdk/runtime-fetch";
-import { HTTPFetchError } from "@line/bot-sdk";
-import { collectErrorGraphCandidates, extractErrorCode, formatErrorMessage, readErrorName, toErrorObject } from "openclaw/plugin-sdk/error-runtime";
 import crypto from "node:crypto";
 import { recordChannelActivity } from "openclaw/plugin-sdk/channel-activity-runtime";
-import { classifyTransientNetworkErrorCode } from "openclaw/plugin-sdk/retry-runtime";
+import { resolveHumanDelayConfig } from "openclaw/plugin-sdk/agent-runtime";
 import { channelReadyPatch, channelStoppedPatch } from "openclaw/plugin-sdk/gateway-runtime";
 import { chunkMarkdownText } from "openclaw/plugin-sdk/reply-runtime";
-import { canonicalizeWebhookRouteKey, isRequestBodyLimitError, normalizePluginHttpPath, normalizeWebhookPath, registerWebhookTargetWithPluginRoute, requestBodyErrorToText, resolveSingleWebhookTarget } from "openclaw/plugin-sdk/webhook-ingress";
-import { beginWebhookRequestPipelineOrReject, createWebhookInFlightLimiter, isRequestBodyLimitError as isRequestBodyLimitError$1, readRequestBodyWithLimit, requestBodyErrorToText as requestBodyErrorToText$1, runDetachedWebhookWork } from "openclaw/plugin-sdk/webhook-request-guards";
+import { canonicalizeWebhookRouteKey, normalizePluginHttpPath, normalizeWebhookPath, registerWebhookTargetWithPluginRoute, resolveSingleWebhookTarget } from "openclaw/plugin-sdk/webhook-ingress";
+import { beginWebhookRequestPipelineOrReject, createWebhookInFlightLimiter, isRequestBodyLimitError, readRequestBodyWithLimit, requestBodyErrorToText, runDetachedWebhookWork, sendHttpRequestRejection } from "openclaw/plugin-sdk/webhook-request-guards";
 import { expectDefined } from "openclaw/plugin-sdk/expect-runtime";
 import { DEFAULT_GROUP_HISTORY_LIMIT, createChannelHistoryWindow } from "openclaw/plugin-sdk/reply-history";
-import { getRuntimeConfig } from "openclaw/plugin-sdk/runtime-config-snapshot";
-import { resolveStableChannelMessageIngress } from "openclaw/plugin-sdk/channel-ingress-runtime";
+import { getRuntimeConfig, getRuntimeConfigSnapshot, getRuntimeConfigSourceSnapshot, selectApplicableRuntimeConfig } from "openclaw/plugin-sdk/runtime-config-snapshot";
+import { resolveChannelImplicitMentions, resolveStableChannelMessageIngress } from "openclaw/plugin-sdk/channel-ingress-runtime";
+import { reportChannelRoomJoin } from "openclaw/plugin-sdk/channel-join-intro-runtime";
 import { hasControlCommand } from "openclaw/plugin-sdk/command-auth-native";
 import { ensureConfiguredBindingRouteReady, readChannelAllowFromStore, resolveConfiguredBindingRoute, resolvePairingIdLabel, resolvePinnedMainDmOwnerFromAllowlist, resolveRuntimeConversationBindingRoute, upsertChannelPairingRequest } from "openclaw/plugin-sdk/conversation-runtime";
 import { resolveAgentRoute, resolveInboundLastRouteSessionKey } from "openclaw/plugin-sdk/routing";
@@ -110,7 +112,7 @@ async function fetchLineContentWhenReady(messageId, channelAccessToken, signal)
 			}
 			await response.body?.cancel().catch(() => void 0);
 			if (response.status !== 202) throw new MediaFetchError("http_error", `LINE media download failed for message ${messageId} (HTTP ${response.status})`, { status: response.status });
-			if (attempt < CONTENT_READY_MAX_ATTEMPTS - 1) await setTimeout$1(contentBackoffDelayMs(attempt), void 0, { signal });
+			if (attempt < 5) await setTimeout$1(contentBackoffDelayMs(attempt), void 0, { signal });
 		}
 	} catch (err) {
 		if (signal.aborted) throw signal.reason;
@@ -125,7 +127,7 @@ function isRetryableLineInboundMediaError(err) {
 	if (err.code === "http_error") return err.status === 202 || err.status === 408 || err.status === 429 || typeof err.status === "number" && err.status >= 500;
 	return false;
 }
-async function downloadLineMedia(messageId, channelAccessToken, maxBytes = 10 * 1024 * 1024, options) {
+async function downloadLineMedia(messageId, channelAccessToken, maxBytes = 10485760, options) {
 	options?.signal?.throwIfAborted();
 	const deadlineAbort = new AbortController();
 	const signal = options?.signal ? AbortSignal.any([options.signal, deadlineAbort.signal]) : deadlineAbort.signal;
@@ -159,11 +161,8 @@ async function downloadLineMedia(messageId, channelAccessToken, maxBytes = 10 *
 function toLineDeliveryError(error) {
 	return error instanceof Error ? error : new Error("LINE message send failed", { cause: error });
 }
-function getLineHttpError(error) {
-	return collectErrorGraphCandidates(error, (candidate) => [candidate.cause, candidate.error]).find((candidate) => candidate instanceof HTTPFetchError);
-}
 function canFallbackAfterLineReplyFailure(error) {
-	const httpError = getLineHttpError(error);
+	const httpError = findLineHttpError(error);
 	if (httpError) return httpError.status >= 400 && httpError.status < 500 && httpError.status !== 408;
 	const candidates = collectErrorGraphCandidates(error, (candidate) => [candidate.cause, candidate.error]);
 	if (candidates.some((candidate) => readErrorName(candidate) === "AbortError" || classifyTransientNetworkErrorCode(extractErrorCode(candidate)) === "ambiguous")) return false;
@@ -235,7 +234,7 @@ async function deliverLineAutoReply(params) {
 			} catch (err) {
 				if (isChannelPartialDeliveryError(err) || !canFallbackAfterLineReplyFailure(err)) throw err;
 				deps.onReplyError?.(err);
-				await pushLineMessages(replyBatch, getLineHttpError(err)?.status === 400, remaining.slice(replyBatch.length));
+				await pushLineMessages(replyBatch, findLineHttpError(err)?.status === 400, remaining.slice(replyBatch.length));
 			} finally {
 				replyTokenUsed = true;
 			}
@@ -244,7 +243,15 @@ async function deliverLineAutoReply(params) {
 		if (remaining.length > 0) await pushLineMessages(remaining, true);
 	};
 	const richMessages = [];
-	const hasQuickReplies = Boolean(lineData.quickReplies?.length);
+	const quickReplyItems = lineData.quickReplyItems?.length ? lineData.quickReplyItems : (lineData.quickReplies ?? []).map((label) => ({
+		label,
+		action: {
+			type: "command",
+			command: label
+		}
+	}));
+	const quickReplyLabels = quickReplyItems.map((item) => item.label);
+	const hasQuickReplies = quickReplyItems.length > 0;
 	if (lineData.flexMessage) richMessages.push(deps.createFlexMessage(lineData.flexMessage.altText, lineData.flexMessage.contents));
 	if (lineData.templateMessage) {
 		const templateMsg = deps.buildTemplateMessageFromPayload(lineData.templateMessage);
@@ -264,7 +271,7 @@ async function deliverLineAutoReply(params) {
 	const chunks = orderedMessages ? orderedMessages.flatMap((message) => message.type === "text" ? [message.text] : []) : processed.text ? deps.chunkMarkdownText(processed.text, textLimit) : [];
 	const mediaUrls = resolveSendableOutboundReplyParts(payload).mediaUrls;
 	const mediaOpts = {
-		mediaKind: hasLineSpecificMediaOptions(lineData) ? lineData.mediaKind : "image",
+		mediaKind: lineData.mediaKind,
 		previewImageUrl: lineData.previewImageUrl,
 		durationMs: lineData.durationMs,
 		trackingId: lineData.trackingId
@@ -292,14 +299,14 @@ async function deliverLineAutoReply(params) {
 	];
 	if (hasQuickReplies && textMessages.length === 0 && richMediaMessages.length === 0) textMessages.push({
 		type: "text",
-		text: buildLineQuickReplyFallbackText(lineData.quickReplies)
+		text: buildLineQuickReplyFallbackText(quickReplyLabels)
 	});
 	if (hasQuickReplies) {
 		const targetMessages = orderedDeliveryMessages?.length ? orderedDeliveryMessages : textMessages.length > 0 ? textMessages : richMediaMessages;
 		const lastIndex = targetMessages.length - 1;
 		targetMessages[lastIndex] = {
 			...expectDefined(targetMessages[lastIndex], "last LINE auto-reply message"),
-			quickReply: deps.createQuickReplyItems(lineData.quickReplies)
+			quickReply: createLineQuickReply(quickReplyItems)
 		};
 	}
 	const messages = hasQuickReplies ? [...richMediaMessages, ...orderedDeliveryMessages ?? textMessages] : [...orderedDeliveryMessages ?? textMessages, ...richMediaMessages];
@@ -308,25 +315,33 @@ async function deliverLineAutoReply(params) {
 	} catch (err) {
 		deliveryError ??= err;
 		const failedSegment = typeof err === "object" && err !== null ? failedPushSegments.get(err) : void 0;
-		const httpError = getLineHttpError(err);
+		const httpError = findLineHttpError(err);
 		const retryCandidates = failedSegment ? [...failedSegment.allowFailedBatchTextRecovery ? failedSegment.failedBatch : [], ...failedSegment.unattemptedTail] : [];
 		const retryTextMessages = retryCandidates.filter((message) => message.type === "text");
 		const quickRepliesNeedCarrier = hasQuickReplies && retryCandidates.some((message) => "quickReply" in message);
 		const retryMessages = retryTextMessages.length > 0 ? retryTextMessages : quickRepliesNeedCarrier ? [{
 			type: "text",
-			text: buildLineQuickReplyFallbackText(lineData.quickReplies),
-			quickReply: deps.createQuickReplyItems(lineData.quickReplies)
+			text: buildLineQuickReplyFallbackText(quickReplyLabels),
+			quickReply: createLineQuickReply(quickReplyItems)
 		}] : [];
-		if (retryMessages.length > 0 && failedSegment?.failedBatch.some((message) => message.type !== "text") && httpError?.status === 400) {
+		if (retryMessages.length > 0 && failedSegment?.failedBatch.some((message) => message.type !== "text") && httpError?.status === 400 && resolveLineNonDispatchRetryable(err) !== void 0) {
 			const lastRetryMessage = retryMessages.at(-1);
-			if (quickRepliesNeedCarrier && lastRetryMessage && !lastRetryMessage.quickReply) lastRetryMessage.quickReply = deps.createQuickReplyItems(lineData.quickReplies);
+			if (quickRepliesNeedCarrier && lastRetryMessage && !lastRetryMessage.quickReply) lastRetryMessage.quickReply = createLineQuickReply(quickReplyItems);
 			try {
 				await sendLineMessages(retryMessages, false);
 			} catch {}
 		}
 	}
 	if (deliveryError !== void 0) {
-		if (!visibleReplySent) throw toLineDeliveryError(deliveryError);
+		if (!visibleReplySent) {
+			const named = toLineDeliveryError(deliveryError);
+			const refusal = await explainLineRefusal({
+				error: named,
+				cfg: params.cfg,
+				accountId
+			});
+			throw refusal.reason !== named.message ? new Error(refusal.reason, { cause: deliveryError }) : named;
+		}
 		return {
 			status: "partial",
 			replyTokenUsed,
@@ -341,6 +356,44 @@ async function deliverLineAutoReply(params) {
 	};
 }
 //#endregion
+//#region extensions/line/src/mentions.ts
+function getLineMentionees(message) {
+	return message.type === "text" ? message.mention?.mentionees ?? [] : [];
+}
+function addressesLineBot(mentionee) {
+	return mentionee.type === "all" || mentionee.isSelf === true;
+}
+function isLineBotMentioned(message) {
+	return getLineMentionees(message).some(addressesLineBot);
+}
+function hasAnyLineMention(message) {
+	return getLineMentionees(message).length > 0;
+}
+/**
+* Text to interpret as a command, with the mention that addressed the bot removed.
+*
+* LINE writes a mention as the plain channel display name, so no pattern can
+* tell it apart from a member's name; `mentionees[].index`/`length` (UTF-16
+* code units, the unit LINE counts text in) is the only authoritative marker.
+* Leaving it in place makes a group `@<bot> /status` parse as prose, and group
+* chats require the mention to reach the bot at all.
+*/
+function resolveLineMentionStrippedText(message) {
+	const text = message.type === "text" ? message.text : "";
+	const spans = getLineMentionees(message).filter(addressesLineBot).map((mentionee) => ({
+		start: mentionee.index,
+		end: mentionee.index + mentionee.length
+	})).toSorted((left, right) => left.start - right.start);
+	let stripped = "";
+	let cursor = 0;
+	for (const span of spans) {
+		stripped += text.slice(cursor, span.start);
+		if (/\S$/u.test(stripped) && /^\S/u.test(text.slice(span.end))) stripped += " ";
+		cursor = Math.max(cursor, span.end);
+	}
+	return `${stripped}${text.slice(cursor)}`.trim();
+}
+//#endregion
 //#region extensions/line/src/bot-message-context.ts
 function getLineSourceInfo(source) {
 	if (!source) return {
@@ -425,30 +478,23 @@ async function resolveLineInboundRoute(params) {
 		route
 	};
 }
-const STICKER_PACKAGES = {
-	"1": "Moon & James",
-	"2": "Cony & Brown",
-	"3": "Brown & Friends",
-	"4": "Moon Special",
-	"789": "LINE Characters",
-	"6136": "Cony's Happy Life",
-	"6325": "Brown's Life",
-	"6359": "Choco",
-	"6362": "Sally",
-	"6370": "Edward",
-	"11537": "Cony",
-	"11538": "Brown",
-	"11539": "Moon"
-};
-function describeStickerKeywords(sticker) {
-	const keywords = sticker.keywords;
-	if (keywords && keywords.length > 0) return keywords.slice(0, 3).join(", ");
-	const stickerText = sticker.text;
-	if (stickerText) return stickerText;
-	return "";
+/**
+* Describe a sticker from what its webhook actually carries: LINE sends up to
+* 15 keywords for the sticker, and a message sticker also carries the sender's
+* own text. The package name is not among those facts and cannot be derived
+* from the package id, so it is not part of the description.
+*/
+function describeLineSticker(sticker) {
+	const description = readNonEmptyStringPreservingWhitespace(sticker.text) ?? normalizeStringEntries(sticker.keywords ?? []).slice(0, 3).join(", ");
+	return description ? `[Sent a sticker: ${description}]` : "[Sent a sticker]";
+}
+function readLineTextMessageBody(message) {
+	let text = message.text;
+	for (const { index, length } of (message.emojis ?? []).toSorted((a, b) => b.index - a.index)) if (index >= 0 && length === 2 && text.slice(index, index + length) === "()") text = `${text.slice(0, index)}[emoji]${text.slice(index + length)}`;
+	return text;
 }
 function extractMessageText(message) {
-	if (message.type === "text") return message.text;
+	if (message.type === "text") return readLineTextMessageBody(message);
 	if (message.type === "location") {
 		const loc = message;
 		return formatLocationText({
@@ -458,13 +504,7 @@ function extractMessageText(message) {
 			address: loc.address
 		}) ?? "";
 	}
-	if (message.type === "sticker") {
-		const sticker = message;
-		const packageName = STICKER_PACKAGES[sticker.packageId] ?? "sticker";
-		const keywords = describeStickerKeywords(sticker);
-		if (keywords) return `[Sent a ${packageName} sticker: ${keywords}]`;
-		return `[Sent a ${packageName} sticker]`;
-	}
+	if (message.type === "sticker") return describeLineSticker(message);
 	return "";
 }
 function extractNativeMediaKind(message) {
@@ -478,9 +518,23 @@ function extractNativeMediaKind(message) {
 }
 async function finalizeLineInboundContext(params) {
 	const senderId = params.source.userId ?? "unknown";
-	const senderLabel = params.source.userId ? `user:${params.source.userId}` : "unknown";
-	const conversationLabel = params.source.isGroup ? params.source.groupId ? `group:${params.source.groupId}` : params.source.roomId ? `room:${params.source.roomId}` : "unknown-group" : senderLabel;
+	const clientOpts = {
+		cfg: params.cfg,
+		accountId: params.account.accountId,
+		channelAccessToken: params.account.channelAccessToken
+	};
+	const [senderName, groupName] = await Promise.all([params.source.userId ? getUserProfile(params.source.userId, {
+		...clientOpts,
+		groupId: params.source.groupId,
+		roomId: params.source.roomId
+	}).then((profile) => profile?.displayName) : void 0, params.source.groupId ? getLineGroupName(params.source.groupId, clientOpts) : void 0]);
+	const senderLabel = senderName ?? (params.source.userId ? `user:${params.source.userId}` : "unknown");
+	const conversationLabel = params.source.isGroup ? groupName ?? (params.source.groupId ? `group:${params.source.groupId}` : params.source.roomId ? `room:${params.source.roomId}` : "unknown-group") : senderLabel;
 	const address = params.source.groupId ? `line:group:${params.source.groupId}` : params.source.roomId ? `line:room:${params.source.roomId}` : `line:${params.source.userId ?? params.source.peerId}`;
+	const groupConfig = params.source.isGroup ? resolveLineGroupConfigEntry(params.account.config.groups, {
+		groupId: params.source.groupId,
+		roomId: params.source.roomId
+	}) : void 0;
 	const { storePath, envelopeOptions, previousTimestamp } = resolveInboundSessionEnvelopeContext({
 		cfg: params.cfg,
 		agentId: params.route.agentId,
@@ -494,7 +548,10 @@ async function finalizeLineInboundContext(params) {
 		timestamp: params.timestamp,
 		body: agentBody,
 		chatType: params.source.isGroup ? "group" : "direct",
-		sender: { id: senderId },
+		sender: {
+			id: senderId,
+			name: senderName
+		},
 		previousTimestamp,
 		envelope: envelopeOptions
 	});
@@ -505,7 +562,10 @@ async function finalizeLineInboundContext(params) {
 		messageId: params.messageSid,
 		timestamp: params.timestamp,
 		from: address,
-		sender: { id: senderId },
+		sender: {
+			id: senderId,
+			name: senderName
+		},
 		conversation: {
 			kind: params.source.isGroup ? "group" : "direct",
 			id: params.source.peerId,
@@ -525,18 +585,18 @@ async function finalizeLineInboundContext(params) {
 			body,
 			bodyForAgent: agentBody,
 			rawBody: params.rawBody,
-			commandBody: params.rawBody,
+			commandBody: params.commandBody ?? params.rawBody,
 			inboundHistory: params.inboundHistory
 		},
-		access: { commands: { authorized: params.commandAuthorized } },
+		access: {
+			commands: { authorized: params.commandAuthorized },
+			mentions: params.mentions
+		},
 		media,
 		extra: {
 			...params.locationContext,
-			GroupSubject: params.source.isGroup ? params.source.groupId ?? params.source.roomId : void 0,
-			GroupSystemPrompt: params.source.isGroup ? normalizeOptionalString(resolveLineGroupConfigEntry(params.account.config.groups, {
-				groupId: params.source.groupId,
-				roomId: params.source.roomId
-			})?.systemPrompt) : void 0
+			GroupSubject: params.source.isGroup ? groupName ?? params.source.groupId ?? params.source.roomId : void 0,
+			GroupSystemPrompt: normalizeOptionalString(groupConfig?.systemPrompt)
 		}
 	});
 	const pinnedMainDmOwner = !params.source.isGroup ? resolvePinnedMainDmOwnerFromAllowlist({
@@ -551,11 +611,13 @@ async function finalizeLineInboundContext(params) {
 	if (shouldLogVerbose()) {
 		const preview = truncateUtf16Safe(body, 200).replace(/\n/g, "\\n");
 		const mediaInfo = params.verboseLog.kind === "inbound" && (params.verboseLog.mediaCount ?? 0) > 1 ? ` mediaCount=${params.verboseLog.mediaCount}` : "";
-		logVerbose(`${params.verboseLog.kind === "inbound" ? "line inbound" : "line postback"}: from=${ctxPayload.From} len=${body.length}${mediaInfo} preview="${preview}"`);
+		const label = params.verboseLog.kind === "inbound" ? "line inbound" : "line postback";
+		logVerbose(`${label}: from=${ctxPayload.From} len=${body.length}${mediaInfo} preview="${preview}"`);
 	}
 	return {
 		ctxPayload,
 		replyToken: params.event.replyToken,
+		skillFilter: groupConfig?.skills,
 		turn: {
 			storePath,
 			record: {
@@ -626,15 +688,17 @@ async function buildLineMessageContext(params) {
 		},
 		rawBody,
 		agentBody,
+		commandBody: resolveLineMentionStrippedText(message) || rawBody,
+		mentions: params.mentions,
 		timestamp,
 		messageSid: messageId,
 		commandAuthorized,
-		channelIngress: params.resolveChannelIngress ? await params.resolveChannelIngress({
+		channelIngress: await params.resolveChannelIngress?.({
 			agentId: route.agentId,
 			sessionKey: route.sessionKey,
 			messageId,
 			inboundEventKind: "user_request"
-		}) : params.channelIngress,
+		}),
 		buildContext: params.buildContext,
 		media: mediaFacts,
 		locationContext,
@@ -647,6 +711,7 @@ async function buildLineMessageContext(params) {
 	return {
 		ctxPayload: finalized.ctxPayload,
 		turn: finalized.turn,
+		skillFilter: finalized.skillFilter,
 		event,
 		userId,
 		groupId,
@@ -666,14 +731,18 @@ async function buildLinePostbackContext(params) {
 		account
 	});
 	const timestamp = event.timestamp;
-	const rawData = event.postback?.data?.trim() ?? "";
-	if (!rawData) return null;
-	let rawBody = rawData;
-	if (rawData.includes("line.action=")) {
-		const searchParams = new URLSearchParams(rawData);
+	const rawBody = event.postback?.data?.trim() ?? "";
+	if (!rawBody) return null;
+	let agentBody = rawBody;
+	if (rawBody.includes("line.action=")) {
+		const searchParams = new URLSearchParams(rawBody);
 		const action = searchParams.get("line.action") ?? "";
 		const device = searchParams.get("line.device");
-		rawBody = device ? `line action ${action} device ${device}` : `line action ${action}`;
+		agentBody = device ? `line action ${action} device ${device}` : `line action ${action}`;
+	}
+	for (const [key, value] of Object.entries(event.postback.params ?? {}).toSorted(([left], [right]) => left < right ? -1 : left > right ? 1 : 0)) {
+		const picked = normalizeOptionalString(value);
+		if (picked) agentBody += ` ${key}=${picked}`;
 	}
 	const messageSid = event.replyToken ? `postback:${event.replyToken}` : `postback:${timestamp}`;
 	const finalized = await finalizeLineInboundContext({
@@ -689,15 +758,16 @@ async function buildLinePostbackContext(params) {
 			peerId
 		},
 		rawBody,
+		agentBody,
 		timestamp,
 		messageSid,
 		commandAuthorized,
-		channelIngress: params.resolveChannelIngress ? await params.resolveChannelIngress({
+		channelIngress: await params.resolveChannelIngress?.({
 			agentId: route.agentId,
 			sessionKey: route.sessionKey,
 			messageId: messageSid,
 			inboundEventKind: "user_request"
-		}) : params.channelIngress,
+		}),
 		buildContext: params.buildContext,
 		media: [],
 		verboseLog: { kind: "postback" }
@@ -705,6 +775,7 @@ async function buildLinePostbackContext(params) {
 	return {
 		ctxPayload: finalized.ctxPayload,
 		turn: finalized.turn,
+		skillFilter: finalized.skillFilter,
 		event,
 		userId,
 		groupId,
@@ -764,12 +835,6 @@ function isDownloadableLineMessageType(messageType) {
 function normalizeLineIngressEntry(value) {
 	return normalizeLineAllowEntry(value) || null;
 }
-function resolveLineGroupConfig(params) {
-	return resolveLineGroupConfigEntry(params.config.groups, {
-		groupId: params.groupId,
-		roomId: params.roomId
-	});
-}
 async function sendLinePairingReply(params) {
 	const { senderId, replyToken, context } = params;
 	const idLabel = (() => {
@@ -821,12 +886,11 @@ async function sendLinePairingReply(params) {
 		}
 	});
 }
-async function shouldProcessLineEvent(event, context) {
+async function resolveLineEventAdmission(event, context) {
 	const { cfg, account } = context;
 	const { userId, groupId, roomId, isGroup } = getLineSourceInfo(event.source);
 	const senderId = userId ?? "";
-	const groupConfig = resolveLineGroupConfig({
-		config: account.config,
+	const groupConfig = resolveLineGroupConfigEntry(account.config.groups, {
 		groupId,
 		roomId
 	});
@@ -841,11 +905,7 @@ async function shouldProcessLineEvent(event, context) {
 	const groupPolicy = runtimeGroupPolicy === "disabled" ? "disabled" : groupConfig?.allowFrom !== void 0 ? "allowlist" : runtimeGroupPolicy;
 	const groupAllowFrom = normalizeStringEntries(firstDefined(groupConfig?.allowFrom, account.config.groupAllowFrom));
 	const mentionFacts = (() => {
-		if (!isGroup || event.type !== "message") return {
-			canDetectMention: false,
-			wasMentioned: false,
-			hasAnyMention: false
-		};
+		if (!isGroup || event.type !== "message") return;
 		const peerId = groupId ?? roomId ?? userId ?? "unknown";
 		const { agentId } = resolveAgentRoute({
 			cfg,
@@ -862,7 +922,9 @@ async function shouldProcessLineEvent(event, context) {
 		return {
 			canDetectMention: event.message.type === "text",
 			wasMentioned: wasMentionedByNative || wasMentionedByPattern,
-			hasAnyMention: hasAnyLineMention(event.message)
+			explicitlyMentionedBot: wasMentionedByNative,
+			hasAnyMention: hasAnyLineMention(event.message),
+			implicitMentionKinds: implicitMentionKindWhen("quoted_bot", quotesLineBotMessage(account.accountId, resolveLineQuotedMessageId(event.message)))
 		};
 	})();
 	const resolveAccess = async (contextBinding) => await resolveStableChannelMessageIngress({
@@ -876,7 +938,7 @@ async function shouldProcessLineEvent(event, context) {
 		},
 		cfg,
 		readStoreAllowFrom: async () => await readChannelAllowFromStore("line", void 0, account.accountId),
-		subject: { stableId: senderId },
+		subject: event.type === "join" ? {} : { stableId: senderId },
 		conversation: {
 			kind: isGroup ? "group" : "direct",
 			id: (groupId ?? roomId ?? senderId) || "unknown"
@@ -886,20 +948,20 @@ async function shouldProcessLineEvent(event, context) {
 			id: "line:group-config",
 			enabled: false
 		} } : {},
-		mentionFacts: isGroup && event.type === "message" ? {
-			canDetectMention: mentionFacts.canDetectMention,
-			wasMentioned: mentionFacts.wasMentioned,
-			hasAnyMention: mentionFacts.hasAnyMention,
-			implicitMentionKinds: []
-		} : void 0,
-		event: { kind: event.type === "postback" ? "postback" : "message" },
+		mentionFacts,
+		event: { kind: event.type === "join" ? "system" : event.type },
 		dmPolicy,
 		groupPolicy,
 		policy: {
 			groupAllowFromFallbackToAllowFrom: false,
 			activation: {
 				requireMention: isGroup && event.type === "message" && requireMention,
-				allowTextCommands: true
+				allowTextCommands: true,
+				implicitMentions: resolveChannelImplicitMentions({
+					cfg,
+					channel: "line",
+					accountId: account.accountId
+				})
 			}
 		},
 		allowFrom: normalizeStringEntries(account.config.allowFrom),
@@ -916,9 +978,18 @@ async function shouldProcessLineEvent(event, context) {
 		accountId: account.accountId,
 		log: (message) => logVerbose(message)
 	});
-	if (access.senderAccess.decision === "allow" && (access.ingress.admission === "dispatch" || access.ingress.admission === "observe" || access.ingress.admission === "skip")) return {
+	if (event.type === "join") return groupConfig?.enabled !== false && groupPolicy !== "disabled" && (groupPolicy !== "allowlist" || access.state.allowlists.group.hasMatchableEntries) ? {
 		access,
 		resolveBoundAccess: resolveAccess
+	} : null;
+	if (access.senderAccess.decision === "allow" && (access.ingress.admission === "dispatch" || access.ingress.admission === "observe" || access.ingress.admission === "skip")) return {
+		access,
+		resolveBoundAccess: resolveAccess,
+		mentions: mentionFacts ? {
+			...mentionFacts,
+			wasMentioned: access.activationAccess.effectiveWasMentioned ?? mentionFacts.wasMentioned,
+			requireMention
+		} : void 0
 	};
 	if (access.senderAccess.decision === "allow") {
 		logVerbose(`Blocked line event (${access.ingress.reasonCode})`);
@@ -964,21 +1035,13 @@ async function shouldProcessLineEvent(event, context) {
 	logVerbose(`Blocked line sender ${senderId || "unknown"} (dmPolicy: ${account.config.dmPolicy ?? "pairing"})`);
 	return null;
 }
-function getLineMentionees(message) {
-	if (message.type !== "text") return [];
-	const mentionees = message.mention?.mentionees;
-	return Array.isArray(mentionees) ? mentionees : [];
-}
-function isLineBotMentioned(message) {
-	return getLineMentionees(message).some((m) => m.isSelf === true || m.type === "all");
-}
-function hasAnyLineMention(message) {
-	return getLineMentionees(message).length > 0;
+function resolveLineQuotedMessageId(message) {
+	return message.type === "text" || message.type === "sticker" ? message.quotedMessageId : void 0;
 }
 function resolveEventRawText(event) {
 	if (event.type === "message") {
 		const msg = event.message;
-		if (msg.type === "text") return msg.text;
+		if (msg.type === "text") return readLineTextMessageBody(msg);
 		return "";
 	}
 	if (event.type === "postback") return event.postback?.data?.trim() ?? "";
@@ -987,24 +1050,34 @@ function resolveEventRawText(event) {
 async function handleMessageEvent(event, context) {
 	const { cfg, account, runtime, mediaMaxBytes, processMessage } = context;
 	const message = event.message;
-	const decision = await shouldProcessLineEvent(event, context);
+	const decision = await resolveLineEventAdmission(event, context);
 	if (!decision) return;
 	const { isGroup, groupId, roomId } = getLineSourceInfo(event.source);
 	if (isGroup && decision.access.activationAccess.shouldSkip) {
-		const rawText = message.type === "text" ? message.text : "";
+		const rawText = message.type === "text" ? readLineTextMessageBody(message) : "";
 		const sourceInfo = getLineSourceInfo(event.source);
 		logVerbose(`line: skipping group message (requireMention, not mentioned)`);
 		const historyKey = groupId ?? roomId;
 		const senderId = sourceInfo.userId ?? "unknown";
-		if (historyKey && context.groupHistories) createChannelHistoryWindow({ historyMap: context.groupHistories }).record({
-			historyKey,
-			limit: context.historyLimit ?? DEFAULT_GROUP_HISTORY_LIMIT,
-			entry: {
-				sender: `user:${senderId}`,
-				body: rawText || `<${message.type}>`,
-				timestamp: event.timestamp
-			}
-		});
+		if (historyKey && context.groupHistories) {
+			const displayName = sourceInfo.userId ? await getUserDisplayName(sourceInfo.userId, {
+				cfg,
+				accountId: account.accountId,
+				channelAccessToken: account.channelAccessToken,
+				groupId,
+				roomId
+			}) : senderId;
+			const sender = displayName === senderId ? senderId : `${displayName} (${senderId})`;
+			createChannelHistoryWindow({ historyMap: context.groupHistories }).record({
+				historyKey,
+				limit: context.historyLimit ?? DEFAULT_GROUP_HISTORY_LIMIT,
+				entry: {
+					sender,
+					body: rawText || `<${message.type}>`,
+					timestamp: event.timestamp
+				}
+			});
+		}
 		return;
 	}
 	const groupHistoryKey = isGroup ? groupId ?? roomId : void 0;
@@ -1023,7 +1096,8 @@ async function handleMessageEvent(event, context) {
 				abortSignal?.throwIfAborted();
 				allMedia.push({
 					path: media.path,
-					contentType: media.contentType
+					contentType: media.contentType,
+					...originalFilename ? { fileName: originalFilename } : {}
 				});
 			} catch (err) {
 				if (abortSignal?.aborted) throw abortSignal.reason;
@@ -1043,13 +1117,17 @@ async function handleMessageEvent(event, context) {
 			commandAuthorized: decision.access.commandAccess.authorized,
 			resolveChannelIngress: decision.resolveBoundAccess,
 			inboundHistory: historyReservation.inboundHistory,
+			mentions: decision.mentions,
 			buildContext: context.buildContext
 		});
 		if (!messageContext) {
 			logVerbose("line: skipping empty message");
 			return;
 		}
-		await processMessage(messageContext, context.turnAdoptionLifecycle ? { turnAdoptionLifecycle: context.turnAdoptionLifecycle } : {});
+		await processMessage(messageContext, {
+			cfg,
+			...context.turnAdoptionLifecycle ? { turnAdoptionLifecycle: context.turnAdoptionLifecycle } : {}
+		});
 		historyReservation.commit();
 	} finally {
 		historyReservation.release();
@@ -1063,9 +1141,42 @@ async function handleUnfollowEvent(event, _context) {
 	const { userId } = getLineSourceInfo(event.source);
 	logVerbose(`line: user ${userId ?? "unknown"} unfollowed`);
 }
-async function handleJoinEvent(event, _context) {
-	const { groupId, roomId } = getLineSourceInfo(event.source);
+async function handleJoinEvent(event, context) {
+	const { groupId, roomId, isGroup } = getLineSourceInfo(event.source);
+	const conversationId = groupId ?? roomId;
+	if (!isGroup || !conversationId) return;
 	logVerbose(`line: bot joined ${groupId ? `group ${groupId}` : `room ${roomId}`}`);
+	const { cfg, account } = context;
+	const roomAllowed = Boolean(await resolveLineEventAdmission(event, context));
+	await reportChannelRoomJoin({
+		cfg,
+		channel: "line",
+		accountId: account.accountId,
+		conversationId,
+		deliverTo: conversationId,
+		route: resolveAgentRoute({
+			cfg,
+			channel: "line",
+			accountId: account.accountId,
+			peer: {
+				kind: "group",
+				id: conversationId
+			}
+		}),
+		roomAllowed,
+		resolveRoomContext: async () => {
+			const roomContext = { historyUnavailable: true };
+			const title = groupId ? await getLineGroupName(groupId, {
+				cfg,
+				accountId: account.accountId,
+				channelAccessToken: account.channelAccessToken
+			}) : void 0;
+			return title ? {
+				...roomContext,
+				title
+			} : roomContext;
+		}
+	});
 }
 async function handleLeaveEvent(event, _context) {
 	const { groupId, roomId } = getLineSourceInfo(event.source);
@@ -1074,7 +1185,7 @@ async function handleLeaveEvent(event, _context) {
 async function handlePostbackEvent(event, context) {
 	const data = event.postback.data;
 	logVerbose(`line: received postback: ${data}`);
-	const decision = await shouldProcessLineEvent(event, context);
+	const decision = await resolveLineEventAdmission(event, context);
 	if (!decision) return;
 	const postbackContext = await buildLinePostbackContext({
 		event,
@@ -1085,7 +1196,10 @@ async function handlePostbackEvent(event, context) {
 		buildContext: context.buildContext
 	});
 	if (!postbackContext) return;
-	await context.processMessage(postbackContext, context.turnAdoptionLifecycle ? { turnAdoptionLifecycle: context.turnAdoptionLifecycle } : {});
+	await context.processMessage(postbackContext, {
+		cfg: context.cfg,
+		...context.turnAdoptionLifecycle ? { turnAdoptionLifecycle: context.turnAdoptionLifecycle } : {}
+	});
 }
 async function handleLineWebhookEvents(events, context) {
 	let firstError;
@@ -1122,12 +1236,10 @@ async function handleLineWebhookEvent(event, context) {
 }
 //#endregion
 //#region extensions/line/src/webhook-spool.ts
-const LINE_WEBHOOK_SPOOL_VERSION = 1;
 const LINE_WEBHOOK_DRAIN_INTERVAL_MS = 500;
 const LINE_WEBHOOK_MAX_CONCURRENT_DELIVERIES = 8;
 const LINE_WEBHOOK_DRAIN_SCAN_LIMIT = 100;
 const LINE_WEBHOOK_ACTIVE_DELIVERY_STOP_GRACE_MS = 5e3;
-const LineWebhookPayloadError = createChannelIngressError("LineWebhookPayloadError");
 var LineWebhookTerminalDeliveryError = class extends Error {
 	constructor(message, options) {
 		super(message, options);
@@ -1135,35 +1247,6 @@ var LineWebhookTerminalDeliveryError = class extends Error {
 		this.name = "LineWebhookTerminalDeliveryError";
 	}
 };
-/** Message ids preserve the shipped replay-guard keyspace; other events use LINE's delivery id. */
-function eventIdFor(event) {
-	if (!event || typeof event !== "object") throw new LineWebhookPayloadError("LINE webhook event must be an object.");
-	const candidate = event;
-	if (candidate.type === "message") {
-		const messageId = normalizeNullableString(candidate.message?.id);
-		if (messageId) return `message:${messageId}`;
-	}
-	const webhookEventId = normalizeNullableString(candidate.webhookEventId);
-	if (webhookEventId) return `event:${webhookEventId}`;
-	throw new LineWebhookPayloadError("LINE webhook event is missing a stable delivery id.");
-}
-function laneKeyFor(event, eventId) {
-	if (!event || typeof event !== "object") return eventId;
-	const source = event.source;
-	if (source?.type === "group") {
-		const groupId = normalizeNullableString(source.groupId);
-		if (groupId) return `group:${groupId}`;
-	}
-	if (source?.type === "room") {
-		const roomId = normalizeNullableString(source.roomId);
-		if (roomId) return `room:${roomId}`;
-	}
-	if (source?.type === "user") {
-		const userId = normalizeNullableString(source.userId);
-		if (userId) return `user:${userId}`;
-	}
-	return eventId;
-}
 function parseStoredEvent(rawEvent) {
 	let event;
 	try {
@@ -1203,7 +1286,7 @@ function createLineWebhookSpool(options) {
 			};
 		},
 		payload: {
-			version: LINE_WEBHOOK_SPOOL_VERSION,
+			version: 1,
 			serialize: ({ event, destination }) => ({
 				rawEvent: JSON.stringify(event),
 				destination
@@ -1218,7 +1301,7 @@ function createLineWebhookSpool(options) {
 				destination: body.destination
 			}),
 			decode: (payload) => {
-				if (typeof payload.rawEvent !== "string" || typeof payload.destination !== "string") throw new LineWebhookPayloadError("LINE webhook spool payload is invalid.");
+				if (typeof payload.rawEvent !== "string" || typeof payload.destination !== "string") throw new LineWebhookPayloadError(LINE_WEBHOOK_SPOOL_INVALID_PAYLOAD_MESSAGE);
 				return {
 					version: payload.version,
 					body: {
@@ -1227,7 +1310,7 @@ function createLineWebhookSpool(options) {
 					}
 				};
 			},
-			createClaimError: (kind) => new LineWebhookPayloadError(kind === "invalid-version" ? "LINE webhook spool payload is invalid." : "LINE webhook event identity changed after durable admission.")
+			createClaimError: (kind) => new LineWebhookPayloadError(kind === "invalid-version" ? LINE_WEBHOOK_SPOOL_INVALID_PAYLOAD_MESSAGE : "LINE webhook event identity changed after durable admission.")
 		},
 		deliver: async ({ event, destination }, lifecycle) => {
 			const boundLifecycle = bindIngressLifecycleToReplyOptions(lifecycle).turnAdoptionLifecycle;
@@ -1287,7 +1370,7 @@ function createLineWebhookSpool(options) {
 			},
 			resolveNonRetryableFailure: (error) => {
 				if (error instanceof LineWebhookPayloadError) return {
-					reason: "invalid-event",
+					reason: LINE_WEBHOOK_SPOOL_INVALID_EVENT_REASON,
 					message: error.message
 				};
 				if (error instanceof LineWebhookTerminalDeliveryError) return {
@@ -1308,12 +1391,12 @@ function createLineWebhookSpool(options) {
 	let stopTask;
 	return {
 		accept: async (body) => {
-			const events = body.events ?? [];
-			if (events.length === 0) return;
-			await monitor.admitBatch(events.map((event) => ({
+			const events = (body.events ?? []).filter((event) => event.mode !== "standby");
+			if (events.length === 0) return "ignored";
+			return (await monitor.admitBatch(events.map((event) => ({
 				event,
 				destination: body.destination ?? ""
-			})), { receivedAt: Date.now() });
+			})), { receivedAt: Date.now() })).some((admission) => admission.kind === "durable") ? "durable" : "ignored";
 		},
 		start: () => {
 			if (!stopTask) monitor.start();
@@ -1340,9 +1423,17 @@ function createLineWebhookSpool(options) {
 const DEFAULT_MEDIA_MAX_MB = 10;
 function createLineBot(opts) {
 	const runtime = opts.runtime ?? createNonExitingRuntime();
-	const cfg = opts.config ?? getRuntimeConfig();
+	const startupConfig = opts.config ?? getRuntimeConfig();
+	const startupRuntimeConfig = getRuntimeConfigSnapshot();
+	const startupRuntimeSourceConfig = getRuntimeConfigSourceSnapshot();
+	const followsRuntimeConfig = opts.config === void 0 || startupRuntimeConfig === startupConfig || startupRuntimeSourceConfig !== null && selectApplicableRuntimeConfig({
+		inputConfig: startupConfig,
+		runtimeConfig: startupRuntimeConfig,
+		runtimeSourceConfig: startupRuntimeSourceConfig
+	}) === startupRuntimeConfig;
+	const resolveTurnConfig = () => (followsRuntimeConfig ? getRuntimeConfigSnapshot() : void 0) ?? startupConfig;
 	const account = resolveLineAccount({
-		cfg,
+		cfg: startupConfig,
 		accountId: opts.accountId
 	});
 	const mediaMaxBytes = ([opts.mediaMaxMb, account.config.mediaMaxMb].find((value) => typeof value === "number" && value > 0) ?? DEFAULT_MEDIA_MAX_MB) * 1024 * 1024;
@@ -1353,17 +1444,20 @@ function createLineBot(opts) {
 	const spool = createLineWebhookSpool({
 		accountId: account.accountId,
 		runtime,
-		deliver: async (event, _destination, control) => await handleLineWebhookEvents([event], {
-			cfg,
-			account,
-			runtime,
-			buildContext: opts.buildContext,
-			mediaMaxBytes,
-			processMessage,
-			...control.turnAdoptionLifecycle ? { turnAdoptionLifecycle: control.turnAdoptionLifecycle } : {},
-			groupHistories,
-			historyLimit: account.config.historyLimit ?? cfg.messages?.groupChat?.historyLimit ?? DEFAULT_GROUP_HISTORY_LIMIT
-		})
+		deliver: async (event, _destination, control) => {
+			const cfg = resolveTurnConfig();
+			await handleLineWebhookEvents([event], {
+				cfg,
+				account,
+				runtime,
+				buildContext: opts.buildContext,
+				mediaMaxBytes,
+				processMessage,
+				...control.turnAdoptionLifecycle ? { turnAdoptionLifecycle: control.turnAdoptionLifecycle } : {},
+				groupHistories,
+				historyLimit: account.config.historyLimit ?? cfg.messages?.groupChat?.historyLimit ?? DEFAULT_GROUP_HISTORY_LIMIT
+			});
+		}
 	});
 	spool.start();
 	return {
@@ -1389,7 +1483,8 @@ function resolveLineDurableReplyOptions(params) {
 //#endregion
 //#region extensions/line/src/signature.ts
 function validateLineSignature(body, signature, channelSecret) {
-	return safeEqualSecret(signature, crypto.createHmac("SHA256", channelSecret).update(body).digest("base64"));
+	const hash = crypto.createHmac("SHA256", channelSecret).update(body).digest("base64");
+	return safeEqualSecret(signature, hash);
 }
 //#endregion
 //#region extensions/line/src/webhook-utils.ts
@@ -1402,15 +1497,28 @@ function parseLineWebhookBody(rawBody) {
 }
 //#endregion
 //#region extensions/line/src/webhook-node.ts
-const LINE_WEBHOOK_MAX_BODY_BYTES = 1024 * 1024;
-const LINE_WEBHOOK_PREAUTH_MAX_BODY_BYTES$1 = 64 * 1024;
+const LINE_WEBHOOK_MAX_BODY_BYTES = 1048576;
+const LINE_WEBHOOK_PREAUTH_MAX_BODY_BYTES$1 = 65536;
 const LINE_WEBHOOK_PREAUTH_BODY_TIMEOUT_MS$1 = 5e3;
 async function readLineWebhookRequestBody(req, maxBytes = LINE_WEBHOOK_MAX_BODY_BYTES, timeoutMs = LINE_WEBHOOK_PREAUTH_BODY_TIMEOUT_MS$1) {
 	return await readRequestBodyWithLimit(req, {
 		maxBytes,
-		timeoutMs
+		timeoutMs,
+		destroyOnLimit: false
 	});
 }
+/**
+* Answer a body-limit failure through the connection owner.
+*
+* The reader defers destruction for these two codes, so the connection is already fenced
+* and only the owner can still write: responding directly would race the teardown and LINE
+* would see a reset instead of the status.
+*/
+async function rejectLineWebhookRequest(req, res, error) {
+	if (!isRequestBodyLimitError(error, "PAYLOAD_TOO_LARGE") && !isRequestBodyLimitError(error, "REQUEST_BODY_TIMEOUT")) return false;
+	await sendHttpRequestRejection(req, res, error.statusCode, JSON.stringify({ error: requestBodyErrorToText(error.code) }), "application/json");
+	return true;
+}
 function createLineNodeWebhookHandler(params) {
 	const maxBodyBytes = params.maxBodyBytes ?? LINE_WEBHOOK_MAX_BODY_BYTES;
 	const readBody = params.readBody ?? readLineWebhookRequestBody;
@@ -1467,18 +1575,7 @@ function createLineNodeWebhookHandler(params) {
 			res.setHeader("Content-Type", "application/json");
 			res.end(JSON.stringify({ status: "ok" }));
 		} catch (err) {
-			if (isRequestBodyLimitError$1(err, "PAYLOAD_TOO_LARGE")) {
-				res.statusCode = 413;
-				res.setHeader("Content-Type", "application/json");
-				res.end(JSON.stringify({ error: "Payload too large" }));
-				return;
-			}
-			if (isRequestBodyLimitError$1(err, "REQUEST_BODY_TIMEOUT")) {
-				res.statusCode = 408;
-				res.setHeader("Content-Type", "application/json");
-				res.end(JSON.stringify({ error: requestBodyErrorToText$1("REQUEST_BODY_TIMEOUT") }));
-				return;
-			}
+			if (await rejectLineWebhookRequest(req, res, err)) return;
 			params.runtime.error?.(danger(`line webhook error: ${formatErrorMessage(err)}`));
 			if (!res.headersSent) {
 				res.statusCode = 500;
@@ -1491,7 +1588,7 @@ function createLineNodeWebhookHandler(params) {
 //#endregion
 //#region extensions/line/src/monitor.ts
 const lineWebhookInFlightLimiter = createWebhookInFlightLimiter();
-const LINE_WEBHOOK_PREAUTH_MAX_BODY_BYTES = 64 * 1024;
+const LINE_WEBHOOK_PREAUTH_MAX_BODY_BYTES = 65536;
 const LINE_WEBHOOK_PREAUTH_BODY_TIMEOUT_MS = 5e3;
 async function registerLineWebhookTarget(params, bot) {
 	try {
@@ -1539,20 +1636,22 @@ async function monitorLineProvider(opts) {
 		onMessage: async (ctx, deliveryControl) => {
 			if (!ctx) return;
 			const { ctxPayload, replyToken, route } = ctx;
-			const shouldShowLoading = Boolean(ctx.userId && !ctx.isGroup);
-			const displayNamePromise = ctx.userId ? getUserDisplayName(ctx.userId, {
-				cfg: config,
-				accountId: ctx.accountId
-			}) : Promise.resolve(ctxPayload.From);
-			const stopLoading = shouldShowLoading ? startLineLoadingKeepalive({
-				cfg: config,
+			const turnConfig = deliveryControl.cfg;
+			const stopLoading = Boolean(ctx.userId && !ctx.isGroup) ? startLineLoadingKeepalive({
+				cfg: turnConfig,
 				userId: ctx.userId,
 				accountId: ctx.accountId
 			}) : null;
-			logVerbose(`line: received message from ${await displayNamePromise} (${ctxPayload.From})`);
+			logVerbose(`line: received message from ${ctxPayload.SenderName ?? ctx.userId ?? ctxPayload.From} (${ctxPayload.From})`);
 			let replyTokenUsed = false;
 			let turnAdopted = false;
 			const ingressLifecycle = deliveryControl.turnAdoptionLifecycle;
+			const turnAbortSignal = ingressLifecycle?.abortSignal;
+			const skillFilter = ctx.skillFilter;
+			const replyOptions = turnAbortSignal || skillFilter ? {
+				...turnAbortSignal ? { abortSignal: turnAbortSignal } : {},
+				...skillFilter ? { skillFilter } : {}
+			} : void 0;
 			try {
 				const textLimit = 5e3;
 				const turnResult = await getLineRuntime().channel.inbound.run({
@@ -1573,7 +1672,7 @@ async function monitorLineProvider(opts) {
 							rawText: ctxPayload.RawBody ?? ctxPayload.BodyForAgent ?? ""
 						}),
 						resolveTurn: () => ({
-							cfg: config,
+							cfg: turnConfig,
 							channel: "line",
 							accountId: route.accountId,
 							route: {
@@ -1583,8 +1682,10 @@ async function monitorLineProvider(opts) {
 							ctxPayload,
 							record: ctx.turn.record,
 							replyPipeline: {},
-							...ingressLifecycle?.abortSignal ? { replyOptions: { abortSignal: ingressLifecycle.abortSignal } } : {},
+							dispatcherOptions: { humanDelay: resolveHumanDelayConfig(turnConfig, route.agentId) },
+							...replyOptions ? { replyOptions } : {},
 							delivery: {
+								preparePayload: prepareLineReplyPayload,
 								durable: (payload, info) => resolveLineDurableReplyOptions({
 									payload,
 									infoKind: info.kind,
@@ -1595,7 +1696,7 @@ async function monitorLineProvider(opts) {
 								deliver: async (payload) => {
 									const lineData = payload.channelData?.line ?? {};
 									if (ctx.userId && !ctx.isGroup) showLoadingAnimation(ctx.userId, {
-										cfg: config,
+										cfg: turnConfig,
 										accountId: ctx.accountId
 									}).catch(() => {});
 									const deliveryResult = await deliverLineAutoReply({
@@ -1605,14 +1706,13 @@ async function monitorLineProvider(opts) {
 										replyToken,
 										replyTokenUsed,
 										accountId: ctx.accountId,
-										cfg: config,
+										cfg: turnConfig,
 										textLimit,
 										deps: {
 											buildTemplateMessageFromPayload,
 											processLineMessage,
 											chunkMarkdownText,
 											replyMessageLine,
-											createQuickReplyItems,
 											pushMessagesLine,
 											createFlexMessage,
 											buildMediaMessage: buildLineMediaMessage,
@@ -1633,7 +1733,8 @@ async function monitorLineProvider(opts) {
 						})
 					}
 				});
-				if (!hasFinalInboundReplyDispatch(turnResult.dispatched ? turnResult.dispatchResult : void 0)) logVerbose(`line: no response generated for message from ${ctxPayload.From}`);
+				const dispatchResult = turnResult.dispatched ? turnResult.dispatchResult : void 0;
+				if (!hasFinalInboundReplyDispatch(dispatchResult)) logVerbose(`line: no response generated for message from ${ctxPayload.From}`);
 			} catch (err) {
 				runtime.error?.(danger(`line: auto-reply failed: ${String(err)}`));
 				if (turnAdopted || replyTokenUsed) throw new LineWebhookTerminalDeliveryError("LINE delivery failed after consuming the event reply token.", { cause: err });
@@ -1720,25 +1821,13 @@ async function monitorLineProvider(opts) {
 					}
 					if (body.events && body.events.length > 0) {
 						logVerbose(`line: received ${body.events.length} webhook events`);
-						await match.target.bot.handleWebhook(body);
-						res.setHeader("x-openclaw-delivery-accepted", "durable");
+						if (await match.target.bot.handleWebhook(body) === "durable") res.setHeader("x-openclaw-delivery-accepted", "durable");
 					}
 					res.statusCode = 200;
 					res.setHeader("Content-Type", "application/json");
 					res.end(JSON.stringify({ status: "ok" }));
 				} catch (err) {
-					if (isRequestBodyLimitError(err, "PAYLOAD_TOO_LARGE")) {
-						res.statusCode = 413;
-						res.setHeader("Content-Type", "application/json");
-						res.end(JSON.stringify({ error: "Payload too large" }));
-						return;
-					}
-					if (isRequestBodyLimitError(err, "REQUEST_BODY_TIMEOUT")) {
-						res.statusCode = 408;
-						res.setHeader("Content-Type", "application/json");
-						res.end(JSON.stringify({ error: requestBodyErrorToText("REQUEST_BODY_TIMEOUT") }));
-						return;
-					}
+					if (await rejectLineWebhookRequest(req, res, err)) return;
 					runtime.error?.(danger(`line webhook error: ${formatErrorMessage(err)}`));
 					if (!res.headersSent) {
 						res.statusCode = 500;