重构主控编排与运行时预热链路，统一工作区提示词/专家调度协议并补齐 wiki 记忆注入与写回闭环。

同时收敛启动与运维脚本默认行为（含 wiki worker）、更新 Admin 可观测性与相关测试，降低首轮时延并提高运行稳定性。

Made-with: Cursor

openclaw/extensions/line/src/signature.ts

@@ -0,0 +1,24 @@
+import crypto from "node:crypto";
+
+export function validateLineSignature(
+  body: string,
+  signature: string,
+  channelSecret: string,
+): boolean {
+  const hash = crypto.createHmac("SHA256", channelSecret).update(body).digest("base64");
+  const hashBuffer = Buffer.from(hash);
+  const signatureBuffer = Buffer.from(signature);
+
+  // Pad to equal length before constant-time comparison to prevent
+  // leaking length information via early-return timing.
+  const maxLen = Math.max(hashBuffer.length, signatureBuffer.length);
+  const paddedHash = Buffer.alloc(maxLen);
+  const paddedSig = Buffer.alloc(maxLen);
+  hashBuffer.copy(paddedHash);
+  signatureBuffer.copy(paddedSig);
+
+  // Call timingSafeEqual unconditionally to ensure constant-time execution
+  // regardless of length mismatch (avoids && short-circuit timing leak).
+  const timingResult = crypto.timingSafeEqual(paddedHash, paddedSig);
+  return hashBuffer.length === signatureBuffer.length && timingResult;
+}