@openclaw/line 2026.9.6 → 2026.9.7

package/dist/.setup/{monitor-morJPcPd.mjs → monitor-C01hAm3f.mjs}

@@ -1,12 +1,15 @@
-import { i as resolveLineAccount, r as resolveDefaultLineAccountId } from "./accounts-BBEFMYbY.mjs";
-import { b as normalizeAllowFrom, c as resolveLineQuestionPostback, f as buildLineQuickReplyFallbackText, g as resolveLineGroupConfigEntry, i as prepareLineReplyPayload, n as createLineQuickReply, p as getLineRuntime, s as parseLineQuestionPostbackData, x as normalizeLineAllowEntry, y as firstDefined } from "./rich-messages-d8CmBVJj.mjs";
-import { D as recordLineQuoteToken, E as readLineQuoteToken, O as reportLineQuoteCarrierMissing, T as canCarryLineQuoteToken, j as buildLineMediaMessage, k as resolveLineQuoteToken, n as findLineHttpError, r as resolveLineNonDispatchRetryable, t as explainLineRefusal, w as applyLineQuoteToken } from "./send-retry-DbfiHBPd.mjs";
+import { n as resolveDefaultLineAccountId, r as resolveLineAccount } from "./accounts-DOiM8-y3.mjs";
+import { a as resolveLineQuestionPostback, c as normalizeLineAllowEntry, i as parseLineQuestionPostbackData, n as createLineQuickReply, o as buildLineQuickReplyFallbackText, r as prepareLineReplyPayload, s as resolveLineGroupConfigEntry } from "./channel-DN6Za8Vm.mjs";
+import { t as getLineRuntime } from "./runtime-V7yh9OeC.mjs";
+import { D as recordLineQuoteToken, E as readLineQuoteToken, O as reportLineQuoteCarrierMissing, T as canCarryLineQuoteToken, j as buildLineMediaMessage, k as resolveLineQuoteToken, n as findLineHttpError, r as resolveLineNonDispatchRetryable, t as explainLineRefusal, w as applyLineQuoteToken } from "./send-retry-DV6I0muq.mjs";
 import { a as eventIdFor, n as LINE_WEBHOOK_SPOOL_INVALID_PAYLOAD_MESSAGE, o as laneKeyFor, r as LineWebhookPayloadError, t as LINE_WEBHOOK_SPOOL_INVALID_EVENT_REASON } from "./webhook-spool-contract-1rY8OJw8.mjs";
-import { a as buildTemplateMessageFromPayload, r as processLineMessage } from "./markdown-to-line-CRfEHFs0.mjs";
-import { _ as showLoadingAnimation, a as getLineGroupName, d as pushMessageLine, f as pushMessagesLine, h as replyMessageLine, n as createLocationMessage, o as getUserDisplayName, s as getUserProfile, t as createFlexMessage, v as quotesLineBotMessage } from "./send-BmsHY4WC.mjs";
+import { a as getUserDisplayName, g as quotesLineBotMessage, h as showLoadingAnimation, i as getLineGroupName, l as pushMessageLine, n as createLocationMessage, o as getUserProfile, p as replyMessageLine, t as createFlexMessage, u as pushMessagesLine } from "./send-DOY1WTxv.mjs";
+import { n as processLineMessage, t as buildTemplateMessageFromPayload } from "./template-messages-CxCnYsWN.mjs";
 import { createChannelPairingChallengeIssuer } from "openclaw/plugin-sdk/channel-pairing";
 import { resolveChannelGroupsConfigPath } from "openclaw/plugin-sdk/channel-policy";
 import { normalizeOptionalString, normalizeStringEntries, readNonEmptyStringPreservingWhitespace } from "openclaw/plugin-sdk/string-coerce-runtime";
+import { createDeferred } from "openclaw/plugin-sdk/extension-shared";
+import { firstDefined } from "openclaw/plugin-sdk/allow-from";
 import { DEFAULT_INGRESS_ADOPTION_STALL_MS, DEFAULT_INGRESS_RETRY_MAX_ATTEMPTS, bindIngressLifecycleToReplyOptions, createChannelIngressMonitor, resolveChannelStreamingBlockEnabled } from "openclaw/plugin-sdk/channel-outbound";
 import { buildChannelInboundEventContext, buildMentionRegexes, formatInboundEnvelope, formatInboundMediaUnavailableText, formatLocationText, hasFinalInboundReplyDispatch, implicitMentionKindWhen, isChannelPartialDeliveryError, logInboundDrop, matchesMentionPatterns, resolveInboundSessionEnvelopeContext, toInboundMediaFactsWithMetadata, toLocationContext } from "openclaw/plugin-sdk/channel-inbound";
 import { collectErrorGraphCandidates, extractErrorCode, formatErrorMessage, readErrorName, toErrorObject } from "openclaw/plugin-sdk/error-runtime";
@@ -16,133 +19,29 @@ import { createNonExitingRuntime, danger, logVerbose, shouldLogVerbose, waitForA
 import { truncateUtf16Safe } from "openclaw/plugin-sdk/text-utility-runtime";
 import { classifyTransientNetworkErrorCode } from "openclaw/plugin-sdk/retry-runtime";
 import { fetchWithRuntimeDispatcherOrMockedGlobal } from "openclaw/plugin-sdk/runtime-fetch";
-import { setTimeout as setTimeout$1 } from "node:timers/promises";
-import { MediaFetchError } from "openclaw/plugin-sdk/media-runtime";
-import { saveMediaStream } from "openclaw/plugin-sdk/media-store";
+import { expectDefined } from "openclaw/plugin-sdk/expect-runtime";
 import crypto from "node:crypto";
 import { recordChannelActivity } from "openclaw/plugin-sdk/channel-activity-runtime";
 import { resolveHumanDelayConfig } from "openclaw/plugin-sdk/agent-runtime";
 import { channelReadyPatch, channelStoppedPatch } from "openclaw/plugin-sdk/gateway-runtime";
 import { canonicalizeWebhookRouteKey, registerWebhookTargetWithPluginRoute, resolveSingleWebhookTarget, resolveWebhookPath } from "openclaw/plugin-sdk/webhook-ingress";
 import { beginWebhookRequestPipelineOrReject, createWebhookInFlightLimiter, isRequestBodyLimitError, readRequestBodyWithLimit, requestBodyErrorToText, runDetachedWebhookWork, sendHttpRequestRejection } from "openclaw/plugin-sdk/webhook-request-guards";
-import { expectDefined } from "openclaw/plugin-sdk/expect-runtime";
 import { chunkMarkdownText } from "openclaw/plugin-sdk/reply-runtime";
 import { resolvePromptHistoryLimit } from "openclaw/plugin-sdk/number-runtime";
 import { getRuntimeConfig, getRuntimeConfigSnapshot, getRuntimeConfigSourceSnapshot, selectApplicableRuntimeConfig } from "openclaw/plugin-sdk/runtime-config-snapshot";
 import { fanInChannelIngressLifecycles, resolveChannelImplicitMentions } from "openclaw/plugin-sdk/channel-ingress-runtime";
 import { reportChannelRoomJoin } from "openclaw/plugin-sdk/channel-join-intro-runtime";
 import { hasControlCommand } from "openclaw/plugin-sdk/command-auth-native";
-import { ensureConfiguredBindingRouteReady, readChannelAllowFromStore, resolveConfiguredBindingRoute, resolvePairingIdLabel, resolvePinnedMainDmOwnerFromAllowlist, resolveRuntimeConversationBindingRoute, upsertChannelPairingRequest } from "openclaw/plugin-sdk/conversation-runtime";
+import { ensureConfiguredBindingRouteReady, readChannelAllowFromStore, resolveConfiguredBindingRoute, resolvePairingIdLabel, resolvePinnedMainDmOwnerFromAllowlist, upsertChannelPairingRequest } from "openclaw/plugin-sdk/conversation-runtime";
 import { DEFAULT_GROUP_HISTORY_LIMIT, createChannelHistoryWindow } from "openclaw/plugin-sdk/reply-history";
-import { resolveAgentRoute, resolveInboundLastRouteSessionKey } from "openclaw/plugin-sdk/routing";
+import { parseAgentSessionKey, resolveAgentRoute, resolveInboundLastRouteSessionKey } from "openclaw/plugin-sdk/routing";
 import { resolveAllowlistProviderRuntimeGroupPolicy, resolveDefaultGroupPolicy, warnMissingProviderGroupPolicyFallbackOnce } from "openclaw/plugin-sdk/runtime-group-policy";
+import { getSessionBindingService, inspectRuntimeConversationBindingRoute } from "openclaw/plugin-sdk/conversation-binding-runtime";
+import { setTimeout as setTimeout$1 } from "node:timers/promises";
+import { MediaFetchError } from "openclaw/plugin-sdk/media-runtime";
+import { saveMediaStream } from "openclaw/plugin-sdk/media-store";
 import { enqueueKeyedTask } from "openclaw/plugin-sdk/keyed-async-queue";
 import { safeEqualSecret } from "openclaw/plugin-sdk/security-runtime";
-//#region extensions/line/src/download.ts
-const CONTENT_READY_MAX_ATTEMPTS = 6;
-const CONTENT_READY_BASE_DELAY_MS = 500;
-const CONTENT_READY_MAX_DELAY_MS = 4e3;
-const CONTENT_DOWNLOAD_TIMEOUT_MS = 15e3;
-const LINE_CONTENT_BASE_URL = "https://api-data.line.me/v2/bot/message";
-var RetryableLineMediaFetchError = class extends MediaFetchError {
-	constructor(message, options) {
-		super("fetch_failed", message, options);
-		this.name = "RetryableLineMediaFetchError";
-	}
-};
-function contentBackoffDelayMs(attempt) {
-	return Math.min(CONTENT_READY_BASE_DELAY_MS * 2 ** attempt, CONTENT_READY_MAX_DELAY_MS);
-}
-function lineContentUrl(messageId) {
-	return `${LINE_CONTENT_BASE_URL}/${encodeURIComponent(messageId)}/content`;
-}
-async function* lineResponseBodyChunks(response, messageId, signal, onComplete) {
-	const body = response.body;
-	if (!body) throw new RetryableLineMediaFetchError(`LINE media response for message ${messageId} had no body`);
-	const reader = body.getReader();
-	let completed = false;
-	try {
-		while (true) {
-			let chunk;
-			try {
-				chunk = await reader.read();
-			} catch (err) {
-				if (signal.aborted) throw signal.reason;
-				throw new RetryableLineMediaFetchError(`LINE media response stream failed for message ${messageId}`, { cause: err });
-			}
-			if (chunk.done) {
-				completed = true;
-				onComplete();
-				return;
-			}
-			if (chunk.value.byteLength > 0) yield chunk.value;
-		}
-	} finally {
-		if (!completed) await reader.cancel(signal.aborted ? signal.reason : void 0).catch(() => void 0);
-		try {
-			reader.releaseLock();
-		} catch {}
-	}
-}
-async function fetchLineContentWhenReady(messageId, channelAccessToken, signal) {
-	try {
-		for (let attempt = 0; attempt < CONTENT_READY_MAX_ATTEMPTS; attempt++) {
-			const response = await fetchWithRuntimeDispatcherOrMockedGlobal(lineContentUrl(messageId), {
-				headers: { Authorization: `Bearer ${channelAccessToken}` },
-				redirect: "error",
-				signal
-			});
-			if (response.status === 200) {
-				if (!response.body) throw new RetryableLineMediaFetchError(`LINE media response for message ${messageId} had no body`);
-				return response;
-			}
-			await response.body?.cancel().catch(() => void 0);
-			if (response.status !== 202) throw new MediaFetchError("http_error", `LINE media download failed for message ${messageId} (HTTP ${response.status})`, { status: response.status });
-			if (attempt < 5) await setTimeout$1(contentBackoffDelayMs(attempt), void 0, { signal });
-		}
-	} catch (err) {
-		if (signal.aborted) throw signal.reason;
-		if (err instanceof MediaFetchError) throw err;
-		throw new RetryableLineMediaFetchError(`LINE media download failed for message ${messageId}`, { cause: err });
-	}
-	throw new MediaFetchError("http_error", `LINE media for message ${messageId} was still preparing (HTTP 202) after ${CONTENT_READY_MAX_ATTEMPTS} attempts`, { status: 202 });
-}
-function isRetryableLineInboundMediaError(err) {
-	if (err instanceof RetryableLineMediaFetchError) return true;
-	if (!(err instanceof MediaFetchError)) return false;
-	if (err.code === "http_error") return err.status === 202 || err.status === 408 || err.status === 429 || typeof err.status === "number" && err.status >= 500;
-	return false;
-}
-async function downloadLineMedia(messageId, channelAccessToken, maxBytes = 10485760, options) {
-	options?.signal?.throwIfAborted();
-	const deadlineAbort = new AbortController();
-	const signal = options?.signal ? AbortSignal.any([options.signal, deadlineAbort.signal]) : deadlineAbort.signal;
-	const deadline = setTimeout(() => {
-		deadlineAbort.abort(new RetryableLineMediaFetchError(`LINE media for message ${messageId} did not download within ${CONTENT_DOWNLOAD_TIMEOUT_MS / 1e3} seconds`));
-	}, CONTENT_DOWNLOAD_TIMEOUT_MS);
-	deadline.unref();
-	try {
-		const response = await fetchLineContentWhenReady(messageId, channelAccessToken, signal);
-		let saved;
-		try {
-			saved = await saveMediaStream(lineResponseBodyChunks(response, messageId, signal, () => clearTimeout(deadline)), response.headers.get("content-type") ?? void 0, "inbound", maxBytes, options?.originalFilename);
-		} catch (err) {
-			await response.body?.cancel(signal.aborted ? signal.reason : err).catch(() => void 0);
-			if (signal.aborted) throw signal.reason;
-			throw err;
-		}
-		options?.signal?.throwIfAborted();
-		logVerbose(`line: persisted media ${messageId} to ${saved.path} (${saved.size} bytes)`);
-		return {
-			path: saved.path,
-			contentType: saved.contentType,
-			size: saved.size
-		};
-	} finally {
-		clearTimeout(deadline);
-	}
-}
-//#endregion
 //#region extensions/line/src/auto-reply-delivery.ts
 function toLineDeliveryError(error) {
 	return error instanceof Error ? error : new Error("LINE message send failed", { cause: error });
@@ -410,46 +309,73 @@ function buildPeerId(source) {
 	if (source.type === "user" && source.userId) return source.userId;
 	return "unknown";
 }
-async function resolveLineInboundRoute(params) {
-	recordChannelActivity({
-		channel: "line",
-		accountId: params.account.accountId,
-		direction: "inbound"
-	});
+async function prepareLineInboundRoute(params) {
 	const { userId, groupId, roomId, isGroup } = getLineSourceInfo(params.source);
 	const peerId = buildPeerId(params.source);
-	let route = resolveAgentRoute({
-		cfg: params.cfg,
+	const routeInput = {
 		channel: "line",
 		accountId: params.account.accountId,
 		peer: {
 			kind: isGroup ? "group" : "direct",
 			id: peerId
 		}
+	};
+	const conversation = {
+		channel: "line",
+		accountId: params.account.accountId,
+		conversationId: peerId
+	};
+	const inspection = await getSessionBindingService().inspectByConversationAsync(conversation);
+	if (inspection.status === "unavailable") throw new Error("LINE conversation binding owner is temporarily unavailable; retry the message.");
+	const resolveScopeRoute = (agentId) => resolveAgentRoute({
+		...routeInput,
+		cfg: { session: params.cfg.session },
+		defaultAgentId: agentId
 	});
-	const configuredRoute = resolveConfiguredBindingRoute({
+	const selection = inspectRuntimeConversationBindingRoute({
+		route: resolveScopeRoute(),
+		inspection
+	});
+	const metadataAgentId = selection.bindingRecord?.metadata?.agentId;
+	const hasBoundAgent = selection.boundSessionKey && (parseAgentSessionKey(selection.boundSessionKey) || typeof metadataAgentId === "string" && metadataAgentId.trim());
+	const baseRoute = hasBoundAgent ? resolveScopeRoute(selection.boundAgentId) : resolveAgentRoute({
+		...routeInput,
+		cfg: params.cfg
+	});
+	const configuredRoute = hasBoundAgent ? {
+		route: baseRoute,
+		bindingResolution: null
+	} : resolveConfiguredBindingRoute({
 		cfg: params.cfg,
-		route,
-		conversation: {
-			channel: "line",
-			accountId: params.account.accountId,
-			conversationId: peerId
-		}
+		route: baseRoute,
+		conversation
 	});
-	let configuredBinding = configuredRoute.bindingResolution;
-	const configuredBindingSessionKey = configuredRoute.boundSessionKey ?? "";
-	route = configuredRoute.route;
-	const runtimeRoute = resolveRuntimeConversationBindingRoute({
-		route,
-		conversation: {
-			channel: "line",
-			accountId: params.account.accountId,
-			conversationId: peerId
-		}
+	const runtimeRoute = inspectRuntimeConversationBindingRoute({
+		route: configuredRoute.route,
+		inspection
+	});
+	return {
+		userId,
+		groupId,
+		roomId,
+		isGroup,
+		peerId,
+		route: runtimeRoute.route,
+		mentionAgentId: baseRoute.agentId,
+		runtimeRoute,
+		configuredBinding: runtimeRoute.bindingRecord ? null : configuredRoute.bindingResolution,
+		configuredBindingSessionKey: configuredRoute.boundSessionKey ?? ""
+	};
+}
+async function resolveLineInboundRoute(params) {
+	recordChannelActivity({
+		channel: "line",
+		accountId: params.account.accountId,
+		direction: "inbound"
 	});
-	route = runtimeRoute.route;
+	const { userId, groupId, roomId, isGroup, peerId, route, runtimeRoute, configuredBinding, configuredBindingSessionKey } = params.preparedRoute ?? await prepareLineInboundRoute(params);
 	if (runtimeRoute.bindingRecord) {
-		configuredBinding = null;
+		await getSessionBindingService().touchAsync(runtimeRoute.bindingRecord.bindingId, void 0, runtimeRoute.bindingRecord.conversation);
 		logVerbose(runtimeRoute.boundSessionKey ? `line: routed via bound conversation ${peerId} -> ${runtimeRoute.boundSessionKey}` : `line: plugin-bound conversation ${peerId}`);
 	}
 	if (configuredBinding) {
@@ -539,7 +465,7 @@ async function finalizeLineInboundContext(params) {
 	const body = formatInboundEnvelope({
 		channel: "LINE",
 		from: conversationLabel,
-		timestamp: params.timestamp,
+		timestamp: params.event.timestamp,
 		body: agentBody,
 		chatType: params.source.isGroup ? "group" : "direct",
 		sender: {
@@ -554,7 +480,7 @@ async function finalizeLineInboundContext(params) {
 		channel: "line",
 		accountId: params.route.accountId,
 		messageId: params.messageSid,
-		timestamp: params.timestamp,
+		timestamp: params.event.timestamp,
 		from: address,
 		sender: {
 			id: senderId,
@@ -594,7 +520,7 @@ async function finalizeLineInboundContext(params) {
 	const pinnedMainDmOwner = !params.source.isGroup ? resolvePinnedMainDmOwnerFromAllowlist({
 		dmScope: params.cfg.session?.dmScope,
 		allowFrom: params.account.config.allowFrom,
-		normalizeEntry: (entry) => normalizeAllowFrom([entry]).entries[0]
+		normalizeEntry: (entry) => normalizeLineAllowEntry(entry) || void 0
 	}) : null;
 	const inboundLastRouteSessionKey = resolveInboundLastRouteSessionKey({
 		route: params.route,
@@ -608,7 +534,14 @@ async function finalizeLineInboundContext(params) {
 	}
 	return {
 		ctxPayload,
+		event: params.event,
+		userId: params.source.userId,
+		groupId: params.source.groupId,
+		roomId: params.source.roomId,
+		isGroup: params.source.isGroup,
+		route: params.route,
 		replyToken: params.event.replyToken,
+		accountId: params.account.accountId,
 		skillFilter: groupConfig?.skills,
 		turn: {
 			storePath,
@@ -639,11 +572,11 @@ async function buildLineMessageContext(params) {
 	const { userId, groupId, roomId, isGroup, peerId, route } = await resolveLineInboundRoute({
 		source,
 		cfg,
-		account
+		account,
+		preparedRoute: params.preparedRoute
 	});
 	const message = event.message;
 	const messageId = message.id;
-	const timestamp = event.timestamp;
 	const textContent = extractMessageText(message);
 	const nativeMediaKind = extractNativeMediaKind(message);
 	const mediaFacts = allMedia.length > 0 ? allMedia.map((media) => ({
@@ -677,7 +610,7 @@ async function buildLineMessageContext(params) {
 			address: loc.address
 		});
 	}
-	const finalized = await finalizeLineInboundContext({
+	return finalizeLineInboundContext({
 		cfg,
 		account,
 		event,
@@ -693,7 +626,6 @@ async function buildLineMessageContext(params) {
 		agentBody,
 		commandBody: resolveLineMentionStrippedText(message) || rawBody,
 		mentions: params.mentions,
-		timestamp,
 		messageSid: messageId,
 		commandAuthorized,
 		channelIngress: await params.resolveChannelIngress?.({
@@ -711,19 +643,6 @@ async function buildLineMessageContext(params) {
 		},
 		inboundHistory
 	});
-	return {
-		ctxPayload: finalized.ctxPayload,
-		turn: finalized.turn,
-		skillFilter: finalized.skillFilter,
-		event,
-		userId,
-		groupId,
-		roomId,
-		isGroup,
-		route,
-		replyToken: event.replyToken,
-		accountId: account.accountId
-	};
 }
 async function buildLinePostbackContext(params) {
 	const { event, cfg, account, commandAuthorized } = params;
@@ -748,7 +667,7 @@ async function buildLinePostbackContext(params) {
 		if (picked) agentBody += ` ${key}=${picked}`;
 	}
 	const messageSid = event.replyToken ? `postback:${event.replyToken}` : `postback:${timestamp}`;
-	const finalized = await finalizeLineInboundContext({
+	return finalizeLineInboundContext({
 		cfg,
 		account,
 		event,
@@ -762,7 +681,6 @@ async function buildLinePostbackContext(params) {
 		},
 		rawBody,
 		agentBody,
-		timestamp,
 		messageSid,
 		commandAuthorized,
 		channelIngress: await params.resolveChannelIngress?.({
@@ -775,19 +693,111 @@ async function buildLinePostbackContext(params) {
 		media: [],
 		verboseLog: { kind: "postback" }
 	});
-	return {
-		ctxPayload: finalized.ctxPayload,
-		turn: finalized.turn,
-		skillFilter: finalized.skillFilter,
-		event,
-		userId,
-		groupId,
-		roomId,
-		isGroup,
-		route,
-		replyToken: event.replyToken,
-		accountId: account.accountId
-	};
+}
+//#endregion
+//#region extensions/line/src/download.ts
+const CONTENT_READY_MAX_ATTEMPTS = 6;
+const CONTENT_READY_BASE_DELAY_MS = 500;
+const CONTENT_READY_MAX_DELAY_MS = 4e3;
+const CONTENT_DOWNLOAD_TIMEOUT_MS = 15e3;
+const LINE_CONTENT_BASE_URL = "https://api-data.line.me/v2/bot/message";
+var RetryableLineMediaFetchError = class extends MediaFetchError {
+	constructor(message, options) {
+		super("fetch_failed", message, options);
+		this.name = "RetryableLineMediaFetchError";
+	}
+};
+function contentBackoffDelayMs(attempt) {
+	return Math.min(CONTENT_READY_BASE_DELAY_MS * 2 ** attempt, CONTENT_READY_MAX_DELAY_MS);
+}
+function lineContentUrl(messageId) {
+	return `${LINE_CONTENT_BASE_URL}/${encodeURIComponent(messageId)}/content`;
+}
+async function* lineResponseBodyChunks(response, messageId, signal, onComplete) {
+	const body = response.body;
+	if (!body) throw new RetryableLineMediaFetchError(`LINE media response for message ${messageId} had no body`);
+	const reader = body.getReader();
+	let completed = false;
+	try {
+		while (true) {
+			let chunk;
+			try {
+				chunk = await reader.read();
+			} catch (err) {
+				if (signal.aborted) throw signal.reason;
+				throw new RetryableLineMediaFetchError(`LINE media response stream failed for message ${messageId}`, { cause: err });
+			}
+			if (chunk.done) {
+				completed = true;
+				onComplete();
+				return;
+			}
+			if (chunk.value.byteLength > 0) yield chunk.value;
+		}
+	} finally {
+		if (!completed) await reader.cancel(signal.aborted ? signal.reason : void 0).catch(() => void 0);
+		try {
+			reader.releaseLock();
+		} catch {}
+	}
+}
+async function fetchLineContentWhenReady(messageId, channelAccessToken, signal) {
+	try {
+		for (let attempt = 0; attempt < CONTENT_READY_MAX_ATTEMPTS; attempt++) {
+			const response = await fetchWithRuntimeDispatcherOrMockedGlobal(lineContentUrl(messageId), {
+				headers: { Authorization: `Bearer ${channelAccessToken}` },
+				redirect: "error",
+				signal
+			});
+			if (response.status === 200) {
+				if (!response.body) throw new RetryableLineMediaFetchError(`LINE media response for message ${messageId} had no body`);
+				return response;
+			}
+			await response.body?.cancel().catch(() => void 0);
+			if (response.status !== 202) throw new MediaFetchError("http_error", `LINE media download failed for message ${messageId} (HTTP ${response.status})`, { status: response.status });
+			if (attempt < 5) await setTimeout$1(contentBackoffDelayMs(attempt), void 0, { signal });
+		}
+	} catch (err) {
+		if (signal.aborted) throw signal.reason;
+		if (err instanceof MediaFetchError) throw err;
+		throw new RetryableLineMediaFetchError(`LINE media download failed for message ${messageId}`, { cause: err });
+	}
+	throw new MediaFetchError("http_error", `LINE media for message ${messageId} was still preparing (HTTP 202) after ${CONTENT_READY_MAX_ATTEMPTS} attempts`, { status: 202 });
+}
+function isRetryableLineInboundMediaError(err) {
+	if (err instanceof RetryableLineMediaFetchError) return true;
+	if (!(err instanceof MediaFetchError)) return false;
+	if (err.code === "http_error") return err.status === 202 || err.status === 408 || err.status === 429 || typeof err.status === "number" && err.status >= 500;
+	return false;
+}
+async function downloadLineMedia(messageId, channelAccessToken, maxBytes = 10485760, options) {
+	options?.signal?.throwIfAborted();
+	const deadlineAbort = new AbortController();
+	const signal = options?.signal ? AbortSignal.any([options.signal, deadlineAbort.signal]) : deadlineAbort.signal;
+	const deadline = setTimeout(() => {
+		deadlineAbort.abort(new RetryableLineMediaFetchError(`LINE media for message ${messageId} did not download within ${CONTENT_DOWNLOAD_TIMEOUT_MS / 1e3} seconds`));
+	}, CONTENT_DOWNLOAD_TIMEOUT_MS);
+	deadline.unref();
+	try {
+		const response = await fetchLineContentWhenReady(messageId, channelAccessToken, signal);
+		let saved;
+		try {
+			saved = await saveMediaStream(lineResponseBodyChunks(response, messageId, signal, () => clearTimeout(deadline)), response.headers.get("content-type") ?? void 0, "inbound", maxBytes, options?.originalFilename);
+		} catch (err) {
+			await response.body?.cancel(signal.aborted ? signal.reason : err).catch(() => void 0);
+			if (signal.aborted) throw signal.reason;
+			throw err;
+		}
+		options?.signal?.throwIfAborted();
+		logVerbose(`line: persisted media ${messageId} to ${saved.path} (${saved.size} bytes)`);
+		return {
+			path: saved.path,
+			contentType: saved.contentType,
+			size: saved.size
+		};
+	} finally {
+		clearTimeout(deadline);
+	}
 }
 //#endregion
 //#region extensions/line/src/group-history.ts
@@ -915,6 +925,10 @@ async function resolveLineEventAdmission(event, context) {
 		groupId,
 		roomId
 	});
+	if (isGroup && groupConfig?.enabled === false) {
+		logVerbose(`Blocked line group ${groupId ?? roomId ?? "unknown"} (group disabled)`);
+		return null;
+	}
 	const rawText = resolveEventRawText(event);
 	const requireMention = isGroup ? groupConfig?.requireMention !== false : false;
 	const dmPolicy = account.config.dmPolicy ?? "pairing";
@@ -925,29 +939,8 @@ async function resolveLineEventAdmission(event, context) {
 	});
 	const groupPolicy = runtimeGroupPolicy === "disabled" ? "disabled" : groupConfig?.allowFrom !== void 0 ? "allowlist" : runtimeGroupPolicy;
 	const groupAllowFrom = normalizeStringEntries(firstDefined(groupConfig?.allowFrom, account.config.groupAllowFrom));
-	const mentionFacts = (() => {
-		if (!isGroup || event.type !== "message") return;
-		const peerId = groupId ?? roomId ?? userId ?? "unknown";
-		const { agentId } = resolveAgentRoute({
-			cfg,
-			channel: "line",
-			accountId: account.accountId,
-			peer: {
-				kind: "group",
-				id: peerId
-			}
-		});
-		const mentionRegexes = buildMentionRegexes(cfg, agentId);
-		const wasMentionedByNative = isLineBotMentioned(event.message);
-		const wasMentionedByPattern = event.message.type === "text" ? matchesMentionPatterns(rawText, mentionRegexes) : false;
-		return {
-			canDetectMention: event.message.type === "text",
-			wasMentioned: wasMentionedByNative || wasMentionedByPattern,
-			explicitlyMentionedBot: wasMentionedByNative,
-			hasAnyMention: hasAnyLineMention(event.message),
-			implicitMentionKinds: implicitMentionKindWhen("quoted_bot", quotesLineBotMessage(account.accountId, resolveLineQuotedMessageId(event.message)))
-		};
-	})();
+	let preparedRoute;
+	let mentionFacts;
 	const resolveAccess = async (contextBinding) => await getLineRuntime().channel.inbound.ingress.resolveStable({
 		channelId: "line",
 		accountId: account.accountId,
@@ -965,10 +958,6 @@ async function resolveLineEventAdmission(event, context) {
 			id: (groupId ?? roomId ?? senderId) || "unknown"
 		},
 		...contextBinding ? { contextBinding } : {},
-		...isGroup && groupConfig?.enabled === false ? { route: {
-			id: "line:group-config",
-			enabled: false
-		} } : {},
 		mentionFacts,
 		event: { kind: event.type === "join" ? "system" : event.type },
 		dmPolicy,
@@ -992,35 +981,53 @@ async function resolveLineEventAdmission(event, context) {
 			groupOwnerAllowFrom: "none"
 		}
 	});
-	const access = await resolveAccess();
+	let access = await resolveAccess();
+	if (isGroup && event.type === "message" && isLineEventAdmitted(access)) {
+		preparedRoute = await prepareLineInboundRoute({
+			source: event.source,
+			cfg,
+			account
+		});
+		const mentionRegexes = buildMentionRegexes(cfg, preparedRoute.mentionAgentId);
+		const wasMentionedByNative = isLineBotMentioned(event.message);
+		const wasMentionedByPattern = event.message.type === "text" ? matchesMentionPatterns(rawText, mentionRegexes) : false;
+		mentionFacts = {
+			canDetectMention: event.message.type === "text",
+			wasMentioned: wasMentionedByNative || wasMentionedByPattern,
+			explicitlyMentionedBot: wasMentionedByNative,
+			hasAnyMention: hasAnyLineMention(event.message),
+			implicitMentionKinds: implicitMentionKindWhen("quoted_bot", quotesLineBotMessage(account.accountId, resolveLineQuotedMessageId(event.message)))
+		};
+		access = await resolveAccess();
+	}
 	warnMissingProviderGroupPolicyFallbackOnce({
 		providerMissingFallbackApplied,
 		providerKey: "line",
 		accountId: account.accountId,
 		log: (message) => logVerbose(message)
 	});
-	if (event.type === "join") return groupConfig?.enabled !== false && groupPolicy !== "disabled" && (groupPolicy !== "allowlist" || access.state.allowlists.group.hasMatchableEntries) ? {
+	if (event.type === "join") return groupPolicy !== "disabled" && (groupPolicy !== "allowlist" || access.state.allowlists.group.hasMatchableEntries) ? {
 		access,
 		resolveBoundAccess: resolveAccess
 	} : null;
-	if (isLineEventAdmitted(access)) return {
-		access,
-		resolveBoundAccess: resolveAccess,
-		mentions: mentionFacts ? {
+	if (isLineEventAdmitted(access)) {
+		const mentions = mentionFacts ? {
 			...mentionFacts,
 			wasMentioned: access.activationAccess.effectiveWasMentioned ?? mentionFacts.wasMentioned,
 			requireMention
-		} : void 0
-	};
+		} : void 0;
+		return {
+			access,
+			resolveBoundAccess: resolveAccess,
+			mentions,
+			preparedRoute
+		};
+	}
 	if (access.senderAccess.decision === "allow") {
 		logVerbose(`Blocked line event (${access.ingress.reasonCode})`);
 		return null;
 	}
 	if (isGroup) {
-		if (groupConfig?.enabled === false) {
-			logVerbose(`Blocked line group ${groupId ?? roomId ?? "unknown"} (group disabled)`);
-			return null;
-		}
 		if (groupConfig?.allowFrom !== void 0) {
 			if (!senderId) {
 				logVerbose("Blocked line group message (group allowFrom override, no sender ID)");
@@ -1149,6 +1156,7 @@ async function handleMessageEvent(event, context, setParts) {
 			...context.missingParts === void 0 ? {} : { missingParts: context.missingParts },
 			cfg,
 			account,
+			preparedRoute: decision.preparedRoute,
 			commandAuthorized: decision.access.commandAccess.authorized,
 			resolveChannelIngress: decision.resolveBoundAccess,
 			inboundHistory: historyReservation.inboundHistory,
@@ -1167,14 +1175,6 @@ async function handleMessageEvent(event, context, setParts) {
 		historyReservation.release();
 	}
 }
-async function handleFollowEvent(event, _context) {
-	const { userId } = getLineSourceInfo(event.source);
-	logVerbose(`line: user ${userId ?? "unknown"} followed`);
-}
-async function handleUnfollowEvent(event, _context) {
-	const { userId } = getLineSourceInfo(event.source);
-	logVerbose(`line: user ${userId ?? "unknown"} unfollowed`);
-}
 async function handleJoinEvent(event, context) {
 	const { groupId, roomId, isGroup } = getLineSourceInfo(event.source);
 	const conversationId = groupId ?? roomId;
@@ -1212,10 +1212,6 @@ async function handleJoinEvent(event, context) {
 		}
 	});
 }
-async function handleLeaveEvent(event, _context) {
-	const { groupId, roomId } = getLineSourceInfo(event.source);
-	logVerbose(`line: bot left ${groupId ? `group ${groupId}` : `room ${roomId}`}`);
-}
 /** What a tap that did not answer the question has to tell the person who tapped. */
 function lineQuestionOutcomeNotice(status) {
 	if (status === "already-terminal") return "That question is no longer waiting for an answer.";
@@ -1290,17 +1286,19 @@ async function handleLineWebhookEvent(event, context, setParts = []) {
 			await handleMessageEvent(event, context, setParts.filter((part) => part.type === "message"));
 			break;
 		case "follow":
-			await handleFollowEvent(event, context);
-			break;
-		case "unfollow":
-			await handleUnfollowEvent(event, context);
+		case "unfollow": {
+			const { userId } = getLineSourceInfo(event.source);
+			logVerbose(`line: user ${userId ?? "unknown"} ${event.type}ed`);
 			break;
+		}
 		case "join":
 			await handleJoinEvent(event, context);
 			break;
-		case "leave":
-			await handleLeaveEvent(event, context);
+		case "leave": {
+			const { groupId, roomId } = getLineSourceInfo(event.source);
+			logVerbose(`line: bot left ${groupId ? `group ${groupId}` : `room ${roomId}`}`);
 			break;
+		}
 		case "postback":
 			await handlePostbackEvent(event, context);
 			break;
@@ -1310,40 +1308,17 @@ async function handleLineWebhookEvent(event, context, setParts = []) {
 //#endregion
 //#region extensions/line/src/inbound-image-set.ts
 const IMAGE_SET_FLUSH_DELAY_MS = 4e3;
-/**
-* Ordered by the index the sender picked, falling back to arrival.
-*
-* `index` is optional per part in LINE's contract, so a set can arrive partly
-* indexed. Choosing the key per pair would make the comparator intransitive and
-* the resulting order depend on insertion; ranking unindexed parts last keeps
-* one total order for every mix.
-*/
 function orderedParts(pending) {
 	return [...pending.parts.values()].toSorted((left, right) => (left.index ?? Number.MAX_SAFE_INTEGER) - (right.index ?? Number.MAX_SAFE_INTEGER) || left.arrivedAt - right.arrivedAt);
 }
-/**
-* Buffers the parts of a LINE image set until the set is whole.
-*
-* The first part becomes the set's holder: its call does not resolve until the
-* set completes or its wait expires, and it is the one that delivers. Keeping
-* that call open is what keeps the combined turn inside a live ingress
-* adoption - a turn dispatched after every part had returned is refused by
-* admission, so a set that never completes would never be delivered at all.
-*/
 function createLineImageSetIngressBuffer() {
 	const pendingBySet = /* @__PURE__ */ new Map();
 	const deliveredBySet = /* @__PURE__ */ new Map();
 	const pendingKey = (laneKey, senderKey, setId) => `${laneKey}\u0000${senderKey}\u0000${setId}`;
 	const laneChain = /* @__PURE__ */ new Map();
 	const enterLane = async (laneKey) => {
-		let release = () => {};
-		const held = new Promise((resolve) => {
-			release = resolve;
-		});
-		let entered = () => {};
-		const turn = new Promise((resolve) => {
-			entered = resolve;
-		});
+		const { promise: held, resolve: release } = createDeferred();
+		const { promise: turn, resolve: entered } = createDeferred();
 		enqueueKeyedTask({
 			tails: laneChain,
 			key: laneKey,
@@ -1378,10 +1353,7 @@ function createLineImageSetIngressBuffer() {
 			}
 			return null;
 		}
-		let release = () => {};
-		const whole = new Promise((resolve) => {
-			release = resolve;
-		});
+		const { promise: whole, resolve: release } = createDeferred();
 		const pending = {
 			parts: /* @__PURE__ */ new Map([[input.messageId, part]]),
 			total: input.total,
@@ -1772,9 +1744,9 @@ function parseLineWebhookBody(rawBody) {
 //#endregion
 //#region extensions/line/src/webhook-node.ts
 const LINE_WEBHOOK_MAX_BODY_BYTES = 1048576;
-const LINE_WEBHOOK_PREAUTH_MAX_BODY_BYTES$1 = 65536;
-const LINE_WEBHOOK_PREAUTH_BODY_TIMEOUT_MS$1 = 5e3;
-async function readLineWebhookRequestBody(req, maxBytes = LINE_WEBHOOK_MAX_BODY_BYTES, timeoutMs = LINE_WEBHOOK_PREAUTH_BODY_TIMEOUT_MS$1) {
+const LINE_WEBHOOK_PREAUTH_MAX_BODY_BYTES = 65536;
+const LINE_WEBHOOK_PREAUTH_BODY_TIMEOUT_MS = 5e3;
+async function readLineWebhookRequestBody(req, maxBytes = LINE_WEBHOOK_MAX_BODY_BYTES, timeoutMs = LINE_WEBHOOK_PREAUTH_BODY_TIMEOUT_MS) {
 	return await readRequestBodyWithLimit(req, {
 		maxBytes,
 		timeoutMs,
@@ -1797,6 +1769,12 @@ function createLineNodeWebhookHandler(params) {
 	const maxBodyBytes = params.maxBodyBytes ?? LINE_WEBHOOK_MAX_BODY_BYTES;
 	const readBody = params.readBody ?? readLineWebhookRequestBody;
 	return async (req, res) => {
+		const targets = params.getTargets();
+		if (req.method !== "POST" && targets.length === 0) {
+			res.statusCode = 404;
+			res.end("Not Found");
+			return;
+		}
 		if (req.method === "GET" || req.method === "HEAD") {
 			if (req.method === "HEAD") {
 				res.statusCode = 204;
@@ -1825,14 +1803,22 @@ function createLineNodeWebhookHandler(params) {
 				res.end(JSON.stringify({ error: "Missing X-Line-Signature header" }));
 				return;
 			}
-			const rawBody = await readBody(req, Math.min(maxBodyBytes, LINE_WEBHOOK_PREAUTH_MAX_BODY_BYTES$1), LINE_WEBHOOK_PREAUTH_BODY_TIMEOUT_MS$1);
-			if (!validateLineSignature(rawBody, signature, params.channelSecret)) {
+			const rawBody = await readBody(req, Math.min(maxBodyBytes, LINE_WEBHOOK_PREAUTH_MAX_BODY_BYTES), LINE_WEBHOOK_PREAUTH_BODY_TIMEOUT_MS);
+			const match = resolveSingleWebhookTarget(targets, (target) => validateLineSignature(rawBody, signature, target.channelSecret));
+			if (match.kind === "none") {
 				logVerbose("line: webhook signature validation failed");
 				res.statusCode = 401;
 				res.setHeader("Content-Type", "application/json");
 				res.end(JSON.stringify({ error: "Invalid signature" }));
 				return;
 			}
+			if (match.kind === "ambiguous") {
+				logVerbose("line: webhook signature matched multiple accounts");
+				res.statusCode = 401;
+				res.setHeader("Content-Type", "application/json");
+				res.end(JSON.stringify({ error: "Ambiguous webhook target" }));
+				return;
+			}
 			const body = parseLineWebhookBody(rawBody);
 			if (!body) {
 				res.statusCode = 400;
@@ -1840,10 +1826,9 @@ function createLineNodeWebhookHandler(params) {
 				res.end(JSON.stringify({ error: "Invalid webhook payload" }));
 				return;
 			}
-			params.onRequestAuthenticated?.();
 			if (body.events && body.events.length > 0) {
 				logVerbose(`line: received ${body.events.length} webhook events`);
-				await params.bot.handleWebhook(body);
+				if (await match.target.bot.handleWebhook(body) === "durable") res.setHeader("x-openclaw-delivery-accepted", "durable");
 			}
 			res.statusCode = 200;
 			res.setHeader("Content-Type", "application/json");
@@ -1862,8 +1847,6 @@ function createLineNodeWebhookHandler(params) {
 //#endregion
 //#region extensions/line/src/monitor.ts
 const lineWebhookInFlightLimiter = createWebhookInFlightLimiter();
-const LINE_WEBHOOK_PREAUTH_MAX_BODY_BYTES = 65536;
-const LINE_WEBHOOK_PREAUTH_BODY_TIMEOUT_MS = 5e3;
 async function registerLineWebhookTarget(params, bot) {
 	try {
 		return registerWebhookTargetWithPluginRoute(params);
@@ -2016,10 +1999,9 @@ async function monitorLineProvider(opts) {
 	});
 	const normalizedPath = resolveLineWebhookPath(webhookPath);
 	const webhookRouteKey = canonicalizeWebhookRouteKey(normalizedPath);
-	const createScopedLineWebhookHandler = (target) => createLineNodeWebhookHandler({
-		channelSecret: target.channelSecret,
-		bot: target.bot,
-		runtime: target.runtime
+	const handleWebhook = createLineNodeWebhookHandler({
+		getTargets: () => lineWebhookTargets.get(webhookRouteKey) ?? [],
+		runtime
 	});
 	const { unregister: unregisterHttp } = await registerLineWebhookTarget({
 		targetsByPath: lineWebhookTargets,
@@ -2038,15 +2020,8 @@ async function monitorLineProvider(opts) {
 			log: (msg) => logVerbose(msg),
 			throwOnFailure: true,
 			handler: async (req, res) => {
-				const targets = lineWebhookTargets.get(webhookRouteKey) ?? [];
-				const firstTarget = targets[0];
 				if (req.method !== "POST") {
-					if (!firstTarget) {
-						res.statusCode = 404;
-						res.end("Not Found");
-						return;
-					}
-					await createScopedLineWebhookHandler(firstTarget)(req, res);
+					await handleWebhook(req, res);
 					return;
 				}
 				const requestLifecycle = beginWebhookRequestPipelineOrReject({
@@ -2057,53 +2032,7 @@ async function monitorLineProvider(opts) {
 				});
 				if (!requestLifecycle.ok) return;
 				try {
-					const signatureHeader = req.headers["x-line-signature"];
-					const signature = typeof signatureHeader === "string" ? signatureHeader.trim() : Array.isArray(signatureHeader) ? (signatureHeader[0] ?? "").trim() : "";
-					if (!signature) {
-						logVerbose("line: webhook missing X-Line-Signature header");
-						res.statusCode = 400;
-						res.setHeader("Content-Type", "application/json");
-						res.end(JSON.stringify({ error: "Missing X-Line-Signature header" }));
-						return;
-					}
-					const rawBody = await readLineWebhookRequestBody(req, LINE_WEBHOOK_PREAUTH_MAX_BODY_BYTES, LINE_WEBHOOK_PREAUTH_BODY_TIMEOUT_MS);
-					const match = resolveSingleWebhookTarget(targets, (target) => validateLineSignature(rawBody, signature, target.channelSecret));
-					if (match.kind === "none") {
-						logVerbose("line: webhook signature validation failed");
-						res.statusCode = 401;
-						res.setHeader("Content-Type", "application/json");
-						res.end(JSON.stringify({ error: "Invalid signature" }));
-						return;
-					}
-					if (match.kind === "ambiguous") {
-						logVerbose("line: webhook signature matched multiple accounts");
-						res.statusCode = 401;
-						res.setHeader("Content-Type", "application/json");
-						res.end(JSON.stringify({ error: "Ambiguous webhook target" }));
-						return;
-					}
-					const body = parseLineWebhookBody(rawBody);
-					if (!body) {
-						res.statusCode = 400;
-						res.setHeader("Content-Type", "application/json");
-						res.end(JSON.stringify({ error: "Invalid webhook payload" }));
-						return;
-					}
-					if (body.events && body.events.length > 0) {
-						logVerbose(`line: received ${body.events.length} webhook events`);
-						if (await match.target.bot.handleWebhook(body) === "durable") res.setHeader("x-openclaw-delivery-accepted", "durable");
-					}
-					res.statusCode = 200;
-					res.setHeader("Content-Type", "application/json");
-					res.end(JSON.stringify({ status: "ok" }));
-				} catch (err) {
-					if (await rejectLineWebhookRequest(req, res, err)) return;
-					runtime.error?.(danger(`line webhook error: ${formatErrorMessage(err)}`));
-					if (!res.headersSent) {
-						res.statusCode = 500;
-						res.setHeader("Content-Type", "application/json");
-						res.end(JSON.stringify({ error: "Internal server error" }));
-					}
+					await handleWebhook(req, res);
 				} finally {
 					requestLifecycle.release();
 				}
@@ -2142,4 +2071,4 @@ async function monitorLineProvider(opts) {
 	};
 }
 //#endregion
-export { resolveLineWebhookPath as a, parseLineWebhookBody as i, createLineNodeWebhookHandler as n, validateLineSignature as o, readLineWebhookRequestBody as r, downloadLineMedia as s, monitorLineProvider as t };
+export { monitorLineProvider as t };