@archipelagolab/lobi 1.0.1 → 1.0.6

package/dist/chunk-4OXPPDV6.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../src/onboarding.ts"],
+  "sourcesContent": ["import { DEFAULT_ACCOUNT_ID } from \"openclaw/plugin-sdk/account-id\";\nimport {\n  type ChannelSetupDmPolicy,\n  type ChannelSetupWizardAdapter,\n} from \"openclaw/plugin-sdk/setup\";\nimport { isPrivateNetworkOptInEnabled } from \"openclaw/plugin-sdk/ssrf-runtime\";\nimport {\n  normalizeLowercaseStringOrEmpty,\n  normalizeOptionalString,\n  normalizeStringifiedOptionalString,\n} from \"openclaw/plugin-sdk/text-runtime\";\nimport { requiresExplicitMatrixDefaultAccount } from \"./account-selection.js\";\nimport { listMatrixDirectoryGroupsLive } from \"./directory-live.js\";\nimport {\n  listMatrixAccountIds,\n  resolveDefaultMatrixAccountId,\n  resolveMatrixAccount,\n  resolveMatrixAccountConfig,\n} from \"./matrix/accounts.js\";\nimport {\n  resolveValidatedMatrixHomeserverUrl,\n  validateMatrixHomeserverUrl,\n} from \"./matrix/client.js\";\nimport { resolveMatrixEnvAuthReadiness } from \"./matrix/client/env-auth.js\";\nimport { resolveMatrixConfigFieldPath, updateMatrixAccountConfig } from \"./matrix/config-update.js\";\nimport { ensureMatrixSdkInstalled, isMatrixSdkAvailable } from \"./matrix/deps.js\";\nimport { resolveMatrixTargets } from \"./resolve-targets.js\";\nimport type { DmPolicy } from \"./runtime-api.js\";\nimport {\n  addWildcardAllowFrom,\n  formatDocsLink,\n  hasConfiguredSecretInput,\n  isPrivateOrLoopbackHost,\n  mergeAllowFromEntries,\n  normalizeAccountId,\n  promptAccountId,\n  promptChannelAccessConfig,\n  splitSetupEntries,\n  type RuntimeEnv,\n  type WizardPrompter,\n} from \"./runtime-api.js\";\nimport { moveSingleMatrixAccountConfigToNamedAccount } from \"./setup-config.js\";\nimport type { CoreConfig, MatrixConfig } from \"./types.js\";\n\nconst channel = \"matrix\" as const;\ntype MatrixInviteAutoJoinPolicy = NonNullable<MatrixConfig[\"autoJoin\"]>;\n\nconst matrixInviteAutoJoinOptions: Array<{\n  value: MatrixInviteAutoJoinPolicy;\n  label: string;\n}> = [\n  { value: \"allowlist\", label: \"Allowlist (recommended)\" },\n  { value: \"always\", label: \"Always (join every invite)\" },\n  { value: \"off\", label: \"Off (do not auto-join invites)\" },\n];\n\nfunction isMatrixInviteAutoJoinPolicy(value: string): value is MatrixInviteAutoJoinPolicy {\n  return value === \"allowlist\" || value === \"always\" || value === \"off\";\n}\n\nfunction isMatrixInviteAutoJoinTarget(entry: string): boolean {\n  return (\n    entry === \"*\" ||\n    (entry.startsWith(\"!\") && entry.includes(\":\")) ||\n    (entry.startsWith(\"#\") && entry.includes(\":\"))\n  );\n}\n\nfunction normalizeMatrixInviteAutoJoinTargets(entries: string[]): string[] {\n  return [\n    ...new Set(\n      entries\n        .map((entry) => normalizeOptionalString(entry))\n        .filter((entry): entry is string => Boolean(entry)),\n    ),\n  ];\n}\n\nfunction resolveMatrixOnboardingAccountId(cfg: CoreConfig, accountId?: string): string {\n  return normalizeAccountId(\n    normalizeOptionalString(accountId) || resolveDefaultMatrixAccountId(cfg) || DEFAULT_ACCOUNT_ID,\n  );\n}\n\nfunction setMatrixDmPolicy(cfg: CoreConfig, policy: DmPolicy, accountId?: string) {\n  const resolvedAccountId = resolveMatrixOnboardingAccountId(cfg, accountId);\n  const existing = resolveMatrixAccountConfig({\n    cfg,\n    accountId: resolvedAccountId,\n  });\n  const allowFrom = policy === \"open\" ? addWildcardAllowFrom(existing.dm?.allowFrom) : undefined;\n  return updateMatrixAccountConfig(cfg, resolvedAccountId, {\n    dm: {\n      ...existing.dm,\n      policy,\n      ...(allowFrom ? { allowFrom } : {}),\n    },\n  });\n}\n\nasync function noteMatrixAuthHelp(prompter: WizardPrompter): Promise<void> {\n  await prompter.note(\n    [\n      \"Matrix requires a homeserver URL.\",\n      \"Use an access token (recommended) or password login to an existing account.\",\n      \"With access token: user ID is fetched automatically.\",\n      \"Env vars supported: LOBI_HOMESERVER, LOBI_USER_ID, LOBI_ACCESS_TOKEN, LOBI_PASSWORD, LOBI_DEVICE_ID, LOBI_DEVICE_NAME.\",\n      \"Per-account env vars: MATRIX_<ACCOUNT_ID>_HOMESERVER, MATRIX_<ACCOUNT_ID>_USER_ID, MATRIX_<ACCOUNT_ID>_ACCESS_TOKEN, MATRIX_<ACCOUNT_ID>_PASSWORD, MATRIX_<ACCOUNT_ID>_DEVICE_ID, MATRIX_<ACCOUNT_ID>_DEVICE_NAME.\",\n      `Docs: ${formatDocsLink(\"/channels/matrix\", \"channels/matrix\")}`,\n    ].join(\"\\n\"),\n    \"Matrix setup\",\n  );\n}\n\nfunction requiresMatrixPrivateNetworkOptIn(homeserver: string): boolean {\n  try {\n    const parsed = new URL(homeserver);\n    return parsed.protocol === \"http:\" && !isPrivateOrLoopbackHost(parsed.hostname);\n  } catch {\n    return false;\n  }\n}\n\nasync function promptMatrixAllowFrom(params: {\n  cfg: CoreConfig;\n  prompter: WizardPrompter;\n  accountId?: string;\n}): Promise<CoreConfig> {\n  const { cfg, prompter } = params;\n  const accountId = resolveMatrixOnboardingAccountId(cfg, params.accountId);\n  const existingConfig = resolveMatrixAccountConfig({ cfg, accountId });\n  const existingAllowFrom = existingConfig.dm?.allowFrom ?? [];\n  const account = resolveMatrixAccount({ cfg, accountId });\n  const canResolve = account.configured;\n\n  const isFullUserId = (value: string) => value.startsWith(\"@\") && value.includes(\":\");\n\n  while (true) {\n    const entry = await prompter.text({\n      message: \"Matrix allowFrom (full @user:server; display name only if unique)\",\n      placeholder: \"@user:server\",\n      initialValue: existingAllowFrom[0] ? String(existingAllowFrom[0]) : undefined,\n      validate: (value) => (normalizeOptionalString(value) ? undefined : \"Required\"),\n    });\n    const parts = splitSetupEntries(entry);\n    const resolvedIds: string[] = [];\n    const pending: string[] = [];\n    const unresolved: string[] = [];\n    const unresolvedNotes: string[] = [];\n\n    for (const part of parts) {\n      if (isFullUserId(part)) {\n        resolvedIds.push(part);\n        continue;\n      }\n      if (!canResolve) {\n        unresolved.push(part);\n        continue;\n      }\n      pending.push(part);\n    }\n\n    if (pending.length > 0) {\n      const results = await resolveMatrixTargets({\n        cfg,\n        accountId,\n        inputs: pending,\n        kind: \"user\",\n      }).catch(() => []);\n      for (const result of results) {\n        if (result?.resolved && result.id) {\n          resolvedIds.push(result.id);\n          continue;\n        }\n        if (result?.input) {\n          unresolved.push(result.input);\n          if (result.note) {\n            unresolvedNotes.push(`${result.input}: ${result.note}`);\n          }\n        }\n      }\n    }\n\n    if (unresolved.length > 0) {\n      const details = unresolvedNotes.length > 0 ? unresolvedNotes : unresolved;\n      await prompter.note(\n        `Could not resolve:\\n${details.join(\"\\n\")}\\nUse full @user:server IDs.`,\n        \"Matrix allowlist\",\n      );\n      continue;\n    }\n\n    const unique = mergeAllowFromEntries(existingAllowFrom, resolvedIds);\n    return updateMatrixAccountConfig(cfg, accountId, {\n      dm: {\n        ...existingConfig.dm,\n        policy: \"allowlist\",\n        allowFrom: unique,\n      },\n    });\n  }\n}\n\nfunction setMatrixGroupPolicy(\n  cfg: CoreConfig,\n  groupPolicy: \"open\" | \"allowlist\" | \"disabled\",\n  accountId?: string,\n) {\n  return updateMatrixAccountConfig(cfg, resolveMatrixOnboardingAccountId(cfg, accountId), {\n    groupPolicy,\n  });\n}\n\nfunction setMatrixGroupRooms(cfg: CoreConfig, roomKeys: string[], accountId?: string) {\n  const groups = Object.fromEntries(roomKeys.map((key) => [key, { enabled: true }]));\n  return updateMatrixAccountConfig(cfg, resolveMatrixOnboardingAccountId(cfg, accountId), {\n    groups,\n    rooms: null,\n  });\n}\n\nfunction setMatrixAutoJoin(\n  cfg: CoreConfig,\n  autoJoin: MatrixInviteAutoJoinPolicy,\n  autoJoinAllowlist: string[],\n  accountId?: string,\n) {\n  return updateMatrixAccountConfig(cfg, resolveMatrixOnboardingAccountId(cfg, accountId), {\n    autoJoin,\n    autoJoinAllowlist: autoJoin === \"allowlist\" ? autoJoinAllowlist : null,\n  });\n}\n\nasync function configureMatrixInviteAutoJoin(params: {\n  cfg: CoreConfig;\n  prompter: WizardPrompter;\n  accountId?: string;\n}): Promise<CoreConfig> {\n  const accountId = resolveMatrixOnboardingAccountId(params.cfg, params.accountId);\n  const existingConfig = resolveMatrixAccountConfig({ cfg: params.cfg, accountId });\n  const currentPolicy = existingConfig.autoJoin ?? \"off\";\n  const currentAllowlist = (existingConfig.autoJoinAllowlist ?? []).map((entry) => String(entry));\n  const hasExistingConfig = existingConfig.autoJoin !== undefined || currentAllowlist.length > 0;\n\n  await params.prompter.note(\n    [\n      \"WARNING: Matrix invite auto-join defaults to off.\",\n      \"OpenClaw agents will not join invited rooms or fresh DM-style invites unless you set autoJoin.\",\n      'Choose \"allowlist\" to restrict joins or \"always\" to join every invite.',\n    ].join(\"\\n\"),\n    \"Matrix invite auto-join\",\n  );\n\n  const wants = await params.prompter.confirm({\n    message: hasExistingConfig\n      ? \"Update Matrix invite auto-join?\"\n      : \"Configure Matrix invite auto-join?\",\n    initialValue: hasExistingConfig ? currentPolicy !== \"off\" : true,\n  });\n  if (!wants) {\n    return params.cfg;\n  }\n\n  const selectedPolicy = await params.prompter.select({\n    message: \"Matrix invite auto-join\",\n    options: matrixInviteAutoJoinOptions,\n    initialValue: currentPolicy,\n  });\n  if (!isMatrixInviteAutoJoinPolicy(selectedPolicy)) {\n    throw new Error(`Unsupported Matrix invite auto-join policy: ${String(selectedPolicy)}`);\n  }\n  const policy = selectedPolicy;\n\n  if (policy === \"off\") {\n    await params.prompter.note(\n      [\n        \"Matrix invite auto-join remains off.\",\n        \"Agents will not join invited rooms or fresh DM-style invites until you change autoJoin.\",\n      ].join(\"\\n\"),\n      \"Matrix invite auto-join\",\n    );\n    return setMatrixAutoJoin(params.cfg, policy, [], accountId);\n  }\n\n  if (policy === \"always\") {\n    return setMatrixAutoJoin(params.cfg, policy, [], accountId);\n  }\n\n  while (true) {\n    const rawAllowlist = await params.prompter.text({\n      message: \"Matrix invite auto-join allowlist (comma-separated)\",\n      placeholder: \"!roomId:server, #alias:server, *\",\n      initialValue: currentAllowlist[0] ? currentAllowlist.join(\", \") : undefined,\n      validate: (value) => {\n        const entries = splitSetupEntries(value);\n        return entries.length > 0 ? undefined : \"Required\";\n      },\n    });\n    const allowlist = normalizeMatrixInviteAutoJoinTargets(splitSetupEntries(rawAllowlist));\n    const invalidEntries = allowlist.filter((entry) => !isMatrixInviteAutoJoinTarget(entry));\n    if (allowlist.length === 0 || invalidEntries.length > 0) {\n      await params.prompter.note(\n        [\n          \"Use only stable Matrix invite targets for auto-join: !roomId:server, #alias:server, or *.\",\n          invalidEntries.length > 0 ? `Invalid: ${invalidEntries.join(\", \")}` : undefined,\n        ]\n          .filter(Boolean)\n          .join(\"\\n\"),\n        \"Matrix invite auto-join\",\n      );\n      continue;\n    }\n    return setMatrixAutoJoin(params.cfg, \"allowlist\", allowlist, accountId);\n  }\n}\n\nasync function configureMatrixAccessPrompts(params: {\n  cfg: CoreConfig;\n  prompter: WizardPrompter;\n  forceAllowFrom: boolean;\n  accountId: string;\n}): Promise<CoreConfig> {\n  let next = params.cfg;\n\n  if (params.forceAllowFrom) {\n    next = await promptMatrixAllowFrom({\n      cfg: next,\n      prompter: params.prompter,\n      accountId: params.accountId,\n    });\n  }\n\n  const existingAccountConfig = resolveMatrixAccountConfig({\n    cfg: next,\n    accountId: params.accountId,\n  });\n  const existingGroups = existingAccountConfig.groups ?? existingAccountConfig.rooms;\n  const accessConfig = await promptChannelAccessConfig({\n    prompter: params.prompter,\n    label: \"Matrix rooms\",\n    currentPolicy: existingAccountConfig.groupPolicy ?? \"allowlist\",\n    currentEntries: Object.keys(existingGroups ?? {}),\n    placeholder: \"!roomId:server, #alias:server, Project Room\",\n    updatePrompt: Boolean(existingGroups),\n  });\n  if (accessConfig) {\n    if (accessConfig.policy !== \"allowlist\") {\n      next = setMatrixGroupPolicy(next, accessConfig.policy, params.accountId);\n    } else {\n      let roomKeys = accessConfig.entries;\n      if (accessConfig.entries.length > 0) {\n        try {\n          const resolvedIds: string[] = [];\n          const unresolved: string[] = [];\n          for (const entry of accessConfig.entries) {\n            const trimmed = normalizeOptionalString(entry) ?? \"\";\n            if (!trimmed) {\n              continue;\n            }\n            const cleaned = trimmed.replace(/^(room|channel):/i, \"\").trim();\n            if (cleaned.startsWith(\"!\") && cleaned.includes(\":\")) {\n              resolvedIds.push(cleaned);\n              continue;\n            }\n            const matches = await listMatrixDirectoryGroupsLive({\n              cfg: next,\n              accountId: params.accountId,\n              query: trimmed,\n              limit: 10,\n            });\n            const exact = matches.find(\n              (match) =>\n                normalizeLowercaseStringOrEmpty(match.name) ===\n                normalizeLowercaseStringOrEmpty(trimmed),\n            );\n            const best = exact ?? matches[0];\n            if (best?.id) {\n              resolvedIds.push(best.id);\n            } else {\n              unresolved.push(entry);\n            }\n          }\n          roomKeys = [\n            ...resolvedIds,\n            ...unresolved\n              .map((entry) => normalizeOptionalString(entry))\n              .filter((entry): entry is string => Boolean(entry)),\n          ];\n          if (resolvedIds.length > 0 || unresolved.length > 0) {\n            await params.prompter.note(\n              [\n                resolvedIds.length > 0 ? `Resolved: ${resolvedIds.join(\", \")}` : undefined,\n                unresolved.length > 0\n                  ? `Unresolved (kept as typed): ${unresolved.join(\", \")}`\n                  : undefined,\n              ]\n                .filter(Boolean)\n                .join(\"\\n\"),\n              \"Matrix rooms\",\n            );\n          }\n        } catch (err) {\n          await params.prompter.note(\n            `Room lookup failed; keeping entries as typed. ${String(err)}`,\n            \"Matrix rooms\",\n          );\n        }\n      }\n      next = setMatrixGroupPolicy(next, \"allowlist\", params.accountId);\n      next = setMatrixGroupRooms(next, roomKeys, params.accountId);\n    }\n  }\n\n  return await configureMatrixInviteAutoJoin({\n    cfg: next,\n    prompter: params.prompter,\n    accountId: params.accountId,\n  });\n}\n\nconst dmPolicy: ChannelSetupDmPolicy = {\n  label: \"Matrix\",\n  channel,\n  policyKey: \"channels.lobi.dm.policy\",\n  allowFromKey: \"channels.lobi.dm.allowFrom\",\n  resolveConfigKeys: (cfg, accountId) => {\n    const effectiveAccountId = resolveMatrixOnboardingAccountId(cfg as CoreConfig, accountId);\n    return {\n      policyKey: resolveMatrixConfigFieldPath(cfg as CoreConfig, effectiveAccountId, \"dm.policy\"),\n      allowFromKey: resolveMatrixConfigFieldPath(\n        cfg as CoreConfig,\n        effectiveAccountId,\n        \"dm.allowFrom\",\n      ),\n    };\n  },\n  getCurrent: (cfg, accountId) =>\n    resolveMatrixAccountConfig({\n      cfg: cfg as CoreConfig,\n      accountId: resolveMatrixOnboardingAccountId(cfg as CoreConfig, accountId),\n    }).dm?.policy ?? \"pairing\",\n  setPolicy: (cfg, policy, accountId) => setMatrixDmPolicy(cfg as CoreConfig, policy, accountId),\n  promptAllowFrom: promptMatrixAllowFrom,\n};\n\ntype MatrixConfigureIntent = \"update\" | \"add-account\";\n\nasync function runMatrixConfigure(params: {\n  cfg: CoreConfig;\n  runtime: RuntimeEnv;\n  prompter: WizardPrompter;\n  forceAllowFrom: boolean;\n  accountOverrides?: Partial<Record<string, string>>;\n  shouldPromptAccountIds?: boolean;\n  intent: MatrixConfigureIntent;\n}): Promise<{ cfg: CoreConfig; accountId: string }> {\n  let next = params.cfg;\n  await ensureMatrixSdkInstalled({\n    runtime: params.runtime,\n    confirm: async (message) =>\n      await params.prompter.confirm({\n        message,\n        initialValue: true,\n      }),\n  });\n  const defaultAccountId = resolveDefaultMatrixAccountId(next);\n  let accountId = defaultAccountId || DEFAULT_ACCOUNT_ID;\n  if (params.intent === \"add-account\") {\n    const enteredName =\n      normalizeStringifiedOptionalString(\n        await params.prompter.text({\n          message: \"Matrix account name\",\n          validate: (value) => (normalizeOptionalString(value) ? undefined : \"Required\"),\n        }),\n      ) ?? \"\";\n    accountId = normalizeAccountId(enteredName);\n    if (enteredName !== accountId) {\n      await params.prompter.note(`Account id will be \"${accountId}\".`, \"Matrix account\");\n    }\n    if (accountId !== DEFAULT_ACCOUNT_ID) {\n      next = moveSingleMatrixAccountConfigToNamedAccount(next);\n    }\n    next = updateMatrixAccountConfig(next, accountId, { name: enteredName, enabled: true });\n  } else {\n    const override = normalizeOptionalString(params.accountOverrides?.[channel]);\n    if (override) {\n      accountId = normalizeAccountId(override);\n    } else if (params.shouldPromptAccountIds) {\n      accountId = await promptAccountId({\n        cfg: next,\n        prompter: params.prompter,\n        label: \"Matrix\",\n        currentId: accountId,\n        listAccountIds: (inputCfg) => listMatrixAccountIds(inputCfg as CoreConfig),\n        defaultAccountId,\n      });\n    }\n  }\n\n  const existing = resolveMatrixAccountConfig({ cfg: next, accountId });\n  const account = resolveMatrixAccount({ cfg: next, accountId });\n  if (!account.configured) {\n    await noteMatrixAuthHelp(params.prompter);\n  }\n\n  const envReadiness = resolveMatrixEnvAuthReadiness(accountId, process.env);\n  const envReady = envReadiness.ready;\n  const envHomeserver = envReadiness.homeserver;\n  const envUserId = envReadiness.userId;\n\n  if (\n    envReady &&\n    !existing.homeserver &&\n    !existing.userId &&\n    !existing.accessToken &&\n    !existing.password\n  ) {\n    const useEnv = await params.prompter.confirm({\n      message: `Matrix env vars detected (${envReadiness.sourceHint}). Use env values?`,\n      initialValue: true,\n    });\n    if (useEnv) {\n      next = updateMatrixAccountConfig(next, accountId, { enabled: true });\n      next = await configureMatrixAccessPrompts({\n        cfg: next,\n        prompter: params.prompter,\n        forceAllowFrom: params.forceAllowFrom,\n        accountId,\n      });\n      return { cfg: next, accountId };\n    }\n  }\n\n  const homeserver =\n    normalizeStringifiedOptionalString(\n      await params.prompter.text({\n        message: \"Matrix homeserver URL\",\n        initialValue: existing.homeserver ?? envHomeserver,\n        validate: (value) => {\n          try {\n            validateMatrixHomeserverUrl(value, {\n              allowPrivateNetwork: true,\n            });\n            return undefined;\n          } catch (error) {\n            return error instanceof Error ? error.message : \"Invalid Matrix homeserver URL\";\n          }\n        },\n      }),\n    ) ?? \"\";\n  const requiresAllowPrivateNetwork = requiresMatrixPrivateNetworkOptIn(homeserver);\n  const shouldPromptAllowPrivateNetwork =\n    requiresAllowPrivateNetwork || isPrivateNetworkOptInEnabled(existing);\n  const allowPrivateNetwork = shouldPromptAllowPrivateNetwork\n    ? await params.prompter.confirm({\n        message: \"Allow private/internal Matrix homeserver traffic for this account?\",\n        initialValue: isPrivateNetworkOptInEnabled(existing) || requiresAllowPrivateNetwork,\n      })\n    : false;\n  if (requiresAllowPrivateNetwork && !allowPrivateNetwork) {\n    throw new Error(\"Matrix homeserver requires explicit private-network opt-in\");\n  }\n  await resolveValidatedMatrixHomeserverUrl(homeserver, {\n    dangerouslyAllowPrivateNetwork: allowPrivateNetwork,\n  });\n\n  let accessToken = existing.accessToken;\n  let password = existing.password;\n  let userId = existing.userId ?? \"\";\n\n  if (hasConfiguredSecretInput(accessToken) || hasConfiguredSecretInput(password)) {\n    const keep = await params.prompter.confirm({\n      message: \"Matrix credentials already configured. Keep them?\",\n      initialValue: true,\n    });\n    if (!keep) {\n      accessToken = undefined;\n      password = undefined;\n      userId = \"\";\n    }\n  }\n\n  if (!hasConfiguredSecretInput(accessToken) && !hasConfiguredSecretInput(password)) {\n    const authMode = await params.prompter.select({\n      message: \"Matrix auth method\",\n      options: [\n        { value: \"token\", label: \"Access token (user ID fetched automatically)\" },\n        { value: \"password\", label: \"Password (requires user ID)\" },\n      ],\n    });\n\n    if (authMode === \"token\") {\n      accessToken =\n        normalizeStringifiedOptionalString(\n          await params.prompter.text({\n            message: \"Matrix access token\",\n            validate: (value) => (normalizeOptionalString(value) ? undefined : \"Required\"),\n          }),\n        ) ?? \"\";\n      password = undefined;\n      userId = \"\";\n    } else {\n      userId =\n        normalizeStringifiedOptionalString(\n          await params.prompter.text({\n            message: \"Matrix user ID\",\n            initialValue: existing.userId ?? envUserId,\n            validate: (value) => {\n              const raw = normalizeOptionalString(value) ?? \"\";\n              if (!raw) {\n                return \"Required\";\n              }\n              if (!raw.startsWith(\"@\")) {\n                return \"Matrix user IDs should start with @\";\n              }\n              if (!raw.includes(\":\")) {\n                return \"Matrix user IDs should include a server (:server)\";\n              }\n              return undefined;\n            },\n          }),\n        ) ?? \"\";\n      password =\n        normalizeStringifiedOptionalString(\n          await params.prompter.text({\n            message: \"Matrix password\",\n            validate: (value) => (normalizeOptionalString(value) ? undefined : \"Required\"),\n          }),\n        ) ?? \"\";\n      accessToken = undefined;\n    }\n  }\n\n  const deviceName =\n    normalizeStringifiedOptionalString(\n      await params.prompter.text({\n        message: \"Matrix device name (optional)\",\n        initialValue: existing.deviceName ?? \"OpenClaw Gateway\",\n      }),\n    ) ?? \"\";\n\n  const enableEncryption = await params.prompter.confirm({\n    message: \"Enable end-to-end encryption (E2EE)?\",\n    initialValue: existing.encryption ?? false,\n  });\n\n  next = updateMatrixAccountConfig(next, accountId, {\n    enabled: true,\n    homeserver,\n    ...(shouldPromptAllowPrivateNetwork\n      ? { allowPrivateNetwork: allowPrivateNetwork ? true : null }\n      : {}),\n    userId: userId || null,\n    accessToken: accessToken ?? null,\n    password: password ?? null,\n    deviceName: deviceName || null,\n    encryption: enableEncryption,\n  });\n\n  next = await configureMatrixAccessPrompts({\n    cfg: next,\n    prompter: params.prompter,\n    forceAllowFrom: params.forceAllowFrom,\n    accountId,\n  });\n\n  return { cfg: next, accountId };\n}\n\nexport const matrixOnboardingAdapter: ChannelSetupWizardAdapter = {\n  channel,\n  getStatus: async ({ cfg, accountOverrides }) => {\n    const resolvedCfg = cfg as CoreConfig;\n    const sdkReady = isMatrixSdkAvailable();\n    if (!accountOverrides[channel] && requiresExplicitMatrixDefaultAccount(resolvedCfg)) {\n      return {\n        channel,\n        configured: false,\n        statusLines: ['Matrix: set \"channels.lobi.defaultAccount\" to select a named account'],\n        selectionHint: !sdkReady ? \"install Matrix deps\" : \"set defaultAccount\",\n      };\n    }\n    const account = resolveMatrixAccount({\n      cfg: resolvedCfg,\n      accountId: resolveMatrixOnboardingAccountId(resolvedCfg, accountOverrides[channel]),\n    });\n    const configured = account.configured;\n    return {\n      channel,\n      configured,\n      statusLines: [\n        `Matrix: ${configured ? \"configured\" : \"needs homeserver + access token or password\"}`,\n      ],\n      selectionHint: !sdkReady ? \"install Matrix deps\" : configured ? \"configured\" : \"needs auth\",\n    };\n  },\n  configure: async ({\n    cfg,\n    runtime,\n    prompter,\n    forceAllowFrom,\n    accountOverrides,\n    shouldPromptAccountIds,\n  }) =>\n    await runMatrixConfigure({\n      cfg: cfg as CoreConfig,\n      runtime,\n      prompter,\n      forceAllowFrom,\n      accountOverrides,\n      shouldPromptAccountIds,\n      intent: \"update\",\n    }),\n  configureInteractive: async ({\n    cfg,\n    runtime,\n    prompter,\n    forceAllowFrom,\n    accountOverrides,\n    shouldPromptAccountIds,\n    configured,\n  }) => {\n    if (!configured) {\n      return await runMatrixConfigure({\n        cfg: cfg as CoreConfig,\n        runtime,\n        prompter,\n        forceAllowFrom,\n        accountOverrides,\n        shouldPromptAccountIds,\n        intent: \"update\",\n      });\n    }\n    const action = await prompter.select({\n      message: \"Matrix already configured. What do you want to do?\",\n      options: [\n        { value: \"update\", label: \"Modify settings\" },\n        { value: \"add-account\", label: \"Add account\" },\n        { value: \"skip\", label: \"Skip (leave as-is)\" },\n      ],\n      initialValue: \"update\",\n    });\n    if (action === \"skip\") {\n      return \"skip\";\n    }\n    return await runMatrixConfigure({\n      cfg: cfg as CoreConfig,\n      runtime,\n      prompter,\n      forceAllowFrom,\n      accountOverrides,\n      shouldPromptAccountIds,\n      intent: action === \"add-account\" ? \"add-account\" : \"update\",\n    });\n  },\n  afterConfigWritten: async ({ previousCfg, cfg, accountId, runtime }) => {\n    const { runMatrixSetupBootstrapAfterConfigWrite } = await import(\"./setup-bootstrap.js\");\n    await runMatrixSetupBootstrapAfterConfigWrite({\n      previousCfg: previousCfg as CoreConfig,\n      cfg: cfg as CoreConfig,\n      accountId,\n      runtime,\n    });\n  },\n  dmPolicy,\n  disable: (cfg) => ({\n    ...(cfg as CoreConfig),\n    channels: {\n      ...(cfg as CoreConfig).channels,\n      matrix: { ...(cfg as CoreConfig).channels?.[\"matrix\"], enabled: false },\n    },\n  }),\n};\n"],
+  "mappings": ";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;AAAA,SAAS,0BAA0B;AAKnC,SAAS,oCAAoC;AAC7C;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAkCP,IAAM,UAAU;AAGhB,IAAM,8BAGD;AAAA,EACH,EAAE,OAAO,aAAa,OAAO,0BAA0B;AAAA,EACvD,EAAE,OAAO,UAAU,OAAO,6BAA6B;AAAA,EACvD,EAAE,OAAO,OAAO,OAAO,iCAAiC;AAC1D;AAEA,SAAS,6BAA6B,OAAoD;AACxF,SAAO,UAAU,eAAe,UAAU,YAAY,UAAU;AAClE;AAEA,SAAS,6BAA6B,OAAwB;AAC5D,SACE,UAAU,OACT,MAAM,WAAW,GAAG,KAAK,MAAM,SAAS,GAAG,KAC3C,MAAM,WAAW,GAAG,KAAK,MAAM,SAAS,GAAG;AAEhD;AAEA,SAAS,qCAAqC,SAA6B;AACzE,SAAO;AAAA,IACL,GAAG,IAAI;AAAA,MACL,QACG,IAAI,CAAC,UAAU,wBAAwB,KAAK,CAAC,EAC7C,OAAO,CAAC,UAA2B,QAAQ,KAAK,CAAC;AAAA,IACtD;AAAA,EACF;AACF;AAEA,SAAS,iCAAiC,KAAiB,WAA4B;AACrF,SAAO;AAAA,IACL,wBAAwB,SAAS,KAAK,8BAA8B,GAAG,KAAK;AAAA,EAC9E;AACF;AAEA,SAAS,kBAAkB,KAAiB,QAAkB,WAAoB;AAChF,QAAM,oBAAoB,iCAAiC,KAAK,SAAS;AACzE,QAAM,WAAW,2BAA2B;AAAA,IAC1C;AAAA,IACA,WAAW;AAAA,EACb,CAAC;AACD,QAAM,YAAY,WAAW,SAAS,qBAAqB,SAAS,IAAI,SAAS,IAAI;AACrF,SAAO,0BAA0B,KAAK,mBAAmB;AAAA,IACvD,IAAI;AAAA,MACF,GAAG,SAAS;AAAA,MACZ;AAAA,MACA,GAAI,YAAY,EAAE,UAAU,IAAI,CAAC;AAAA,IACnC;AAAA,EACF,CAAC;AACH;AAEA,eAAe,mBAAmB,UAAyC;AACzE,QAAM,SAAS;AAAA,IACb;AAAA,MACE;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA,SAAS,eAAe,oBAAoB,iBAAiB,CAAC;AAAA,IAChE,EAAE,KAAK,IAAI;AAAA,IACX;AAAA,EACF;AACF;AAEA,SAAS,kCAAkC,YAA6B;AACtE,MAAI;AACF,UAAM,SAAS,IAAI,IAAI,UAAU;AACjC,WAAO,OAAO,aAAa,WAAW,CAAC,wBAAwB,OAAO,QAAQ;AAAA,EAChF,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,eAAe,sBAAsB,QAIb;AACtB,QAAM,EAAE,KAAK,SAAS,IAAI;AAC1B,QAAM,YAAY,iCAAiC,KAAK,OAAO,SAAS;AACxE,QAAM,iBAAiB,2BAA2B,EAAE,KAAK,UAAU,CAAC;AACpE,QAAM,oBAAoB,eAAe,IAAI,aAAa,CAAC;AAC3D,QAAM,UAAU,qBAAqB,EAAE,KAAK,UAAU,CAAC;AACvD,QAAM,aAAa,QAAQ;AAE3B,QAAM,eAAe,CAAC,UAAkB,MAAM,WAAW,GAAG,KAAK,MAAM,SAAS,GAAG;AAEnF,SAAO,MAAM;AACX,UAAM,QAAQ,MAAM,SAAS,KAAK;AAAA,MAChC,SAAS;AAAA,MACT,aAAa;AAAA,MACb,cAAc,kBAAkB,CAAC,IAAI,OAAO,kBAAkB,CAAC,CAAC,IAAI;AAAA,MACpE,UAAU,CAAC,UAAW,wBAAwB,KAAK,IAAI,SAAY;AAAA,IACrE,CAAC;AACD,UAAM,QAAQ,kBAAkB,KAAK;AACrC,UAAM,cAAwB,CAAC;AAC/B,UAAM,UAAoB,CAAC;AAC3B,UAAM,aAAuB,CAAC;AAC9B,UAAM,kBAA4B,CAAC;AAEnC,eAAW,QAAQ,OAAO;AACxB,UAAI,aAAa,IAAI,GAAG;AACtB,oBAAY,KAAK,IAAI;AACrB;AAAA,MACF;AACA,UAAI,CAAC,YAAY;AACf,mBAAW,KAAK,IAAI;AACpB;AAAA,MACF;AACA,cAAQ,KAAK,IAAI;AAAA,IACnB;AAEA,QAAI,QAAQ,SAAS,GAAG;AACtB,YAAM,UAAU,MAAM,qBAAqB;AAAA,QACzC;AAAA,QACA;AAAA,QACA,QAAQ;AAAA,QACR,MAAM;AAAA,MACR,CAAC,EAAE,MAAM,MAAM,CAAC,CAAC;AACjB,iBAAW,UAAU,SAAS;AAC5B,YAAI,QAAQ,YAAY,OAAO,IAAI;AACjC,sBAAY,KAAK,OAAO,EAAE;AAC1B;AAAA,QACF;AACA,YAAI,QAAQ,OAAO;AACjB,qBAAW,KAAK,OAAO,KAAK;AAC5B,cAAI,OAAO,MAAM;AACf,4BAAgB,KAAK,GAAG,OAAO,KAAK,KAAK,OAAO,IAAI,EAAE;AAAA,UACxD;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAEA,QAAI,WAAW,SAAS,GAAG;AACzB,YAAM,UAAU,gBAAgB,SAAS,IAAI,kBAAkB;AAC/D,YAAM,SAAS;AAAA,QACb;AAAA,EAAuB,QAAQ,KAAK,IAAI,CAAC;AAAA;AAAA,QACzC;AAAA,MACF;AACA;AAAA,IACF;AAEA,UAAM,SAAS,sBAAsB,mBAAmB,WAAW;AACnE,WAAO,0BAA0B,KAAK,WAAW;AAAA,MAC/C,IAAI;AAAA,QACF,GAAG,eAAe;AAAA,QAClB,QAAQ;AAAA,QACR,WAAW;AAAA,MACb;AAAA,IACF,CAAC;AAAA,EACH;AACF;AAEA,SAAS,qBACP,KACA,aACA,WACA;AACA,SAAO,0BAA0B,KAAK,iCAAiC,KAAK,SAAS,GAAG;AAAA,IACtF;AAAA,EACF,CAAC;AACH;AAEA,SAAS,oBAAoB,KAAiB,UAAoB,WAAoB;AACpF,QAAM,SAAS,OAAO,YAAY,SAAS,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,SAAS,KAAK,CAAC,CAAC,CAAC;AACjF,SAAO,0BAA0B,KAAK,iCAAiC,KAAK,SAAS,GAAG;AAAA,IACtF;AAAA,IACA,OAAO;AAAA,EACT,CAAC;AACH;AAEA,SAAS,kBACP,KACA,UACA,mBACA,WACA;AACA,SAAO,0BAA0B,KAAK,iCAAiC,KAAK,SAAS,GAAG;AAAA,IACtF;AAAA,IACA,mBAAmB,aAAa,cAAc,oBAAoB;AAAA,EACpE,CAAC;AACH;AAEA,eAAe,8BAA8B,QAIrB;AACtB,QAAM,YAAY,iCAAiC,OAAO,KAAK,OAAO,SAAS;AAC/E,QAAM,iBAAiB,2BAA2B,EAAE,KAAK,OAAO,KAAK,UAAU,CAAC;AAChF,QAAM,gBAAgB,eAAe,YAAY;AACjD,QAAM,oBAAoB,eAAe,qBAAqB,CAAC,GAAG,IAAI,CAAC,UAAU,OAAO,KAAK,CAAC;AAC9F,QAAM,oBAAoB,eAAe,aAAa,UAAa,iBAAiB,SAAS;AAE7F,QAAM,OAAO,SAAS;AAAA,IACpB;AAAA,MACE;AAAA,MACA;AAAA,MACA;AAAA,IACF,EAAE,KAAK,IAAI;AAAA,IACX;AAAA,EACF;AAEA,QAAM,QAAQ,MAAM,OAAO,SAAS,QAAQ;AAAA,IAC1C,SAAS,oBACL,oCACA;AAAA,IACJ,cAAc,oBAAoB,kBAAkB,QAAQ;AAAA,EAC9D,CAAC;AACD,MAAI,CAAC,OAAO;AACV,WAAO,OAAO;AAAA,EAChB;AAEA,QAAM,iBAAiB,MAAM,OAAO,SAAS,OAAO;AAAA,IAClD,SAAS;AAAA,IACT,SAAS;AAAA,IACT,cAAc;AAAA,EAChB,CAAC;AACD,MAAI,CAAC,6BAA6B,cAAc,GAAG;AACjD,UAAM,IAAI,MAAM,+CAA+C,OAAO,cAAc,CAAC,EAAE;AAAA,EACzF;AACA,QAAM,SAAS;AAEf,MAAI,WAAW,OAAO;AACpB,UAAM,OAAO,SAAS;AAAA,MACpB;AAAA,QACE;AAAA,QACA;AAAA,MACF,EAAE,KAAK,IAAI;AAAA,MACX;AAAA,IACF;AACA,WAAO,kBAAkB,OAAO,KAAK,QAAQ,CAAC,GAAG,SAAS;AAAA,EAC5D;AAEA,MAAI,WAAW,UAAU;AACvB,WAAO,kBAAkB,OAAO,KAAK,QAAQ,CAAC,GAAG,SAAS;AAAA,EAC5D;AAEA,SAAO,MAAM;AACX,UAAM,eAAe,MAAM,OAAO,SAAS,KAAK;AAAA,MAC9C,SAAS;AAAA,MACT,aAAa;AAAA,MACb,cAAc,iBAAiB,CAAC,IAAI,iBAAiB,KAAK,IAAI,IAAI;AAAA,MAClE,UAAU,CAAC,UAAU;AACnB,cAAM,UAAU,kBAAkB,KAAK;AACvC,eAAO,QAAQ,SAAS,IAAI,SAAY;AAAA,MAC1C;AAAA,IACF,CAAC;AACD,UAAM,YAAY,qCAAqC,kBAAkB,YAAY,CAAC;AACtF,UAAM,iBAAiB,UAAU,OAAO,CAAC,UAAU,CAAC,6BAA6B,KAAK,CAAC;AACvF,QAAI,UAAU,WAAW,KAAK,eAAe,SAAS,GAAG;AACvD,YAAM,OAAO,SAAS;AAAA,QACpB;AAAA,UACE;AAAA,UACA,eAAe,SAAS,IAAI,YAAY,eAAe,KAAK,IAAI,CAAC,KAAK;AAAA,QACxE,EACG,OAAO,OAAO,EACd,KAAK,IAAI;AAAA,QACZ;AAAA,MACF;AACA;AAAA,IACF;AACA,WAAO,kBAAkB,OAAO,KAAK,aAAa,WAAW,SAAS;AAAA,EACxE;AACF;AAEA,eAAe,6BAA6B,QAKpB;AACtB,MAAI,OAAO,OAAO;AAElB,MAAI,OAAO,gBAAgB;AACzB,WAAO,MAAM,sBAAsB;AAAA,MACjC,KAAK;AAAA,MACL,UAAU,OAAO;AAAA,MACjB,WAAW,OAAO;AAAA,IACpB,CAAC;AAAA,EACH;AAEA,QAAM,wBAAwB,2BAA2B;AAAA,IACvD,KAAK;AAAA,IACL,WAAW,OAAO;AAAA,EACpB,CAAC;AACD,QAAM,iBAAiB,sBAAsB,UAAU,sBAAsB;AAC7E,QAAM,eAAe,MAAM,0BAA0B;AAAA,IACnD,UAAU,OAAO;AAAA,IACjB,OAAO;AAAA,IACP,eAAe,sBAAsB,eAAe;AAAA,IACpD,gBAAgB,OAAO,KAAK,kBAAkB,CAAC,CAAC;AAAA,IAChD,aAAa;AAAA,IACb,cAAc,QAAQ,cAAc;AAAA,EACtC,CAAC;AACD,MAAI,cAAc;AAChB,QAAI,aAAa,WAAW,aAAa;AACvC,aAAO,qBAAqB,MAAM,aAAa,QAAQ,OAAO,SAAS;AAAA,IACzE,OAAO;AACL,UAAI,WAAW,aAAa;AAC5B,UAAI,aAAa,QAAQ,SAAS,GAAG;AACnC,YAAI;AACF,gBAAM,cAAwB,CAAC;AAC/B,gBAAM,aAAuB,CAAC;AAC9B,qBAAW,SAAS,aAAa,SAAS;AACxC,kBAAM,UAAU,wBAAwB,KAAK,KAAK;AAClD,gBAAI,CAAC,SAAS;AACZ;AAAA,YACF;AACA,kBAAM,UAAU,QAAQ,QAAQ,qBAAqB,EAAE,EAAE,KAAK;AAC9D,gBAAI,QAAQ,WAAW,GAAG,KAAK,QAAQ,SAAS,GAAG,GAAG;AACpD,0BAAY,KAAK,OAAO;AACxB;AAAA,YACF;AACA,kBAAM,UAAU,MAAM,8BAA8B;AAAA,cAClD,KAAK;AAAA,cACL,WAAW,OAAO;AAAA,cAClB,OAAO;AAAA,cACP,OAAO;AAAA,YACT,CAAC;AACD,kBAAM,QAAQ,QAAQ;AAAA,cACpB,CAAC,UACC,gCAAgC,MAAM,IAAI,MAC1C,gCAAgC,OAAO;AAAA,YAC3C;AACA,kBAAM,OAAO,SAAS,QAAQ,CAAC;AAC/B,gBAAI,MAAM,IAAI;AACZ,0BAAY,KAAK,KAAK,EAAE;AAAA,YAC1B,OAAO;AACL,yBAAW,KAAK,KAAK;AAAA,YACvB;AAAA,UACF;AACA,qBAAW;AAAA,YACT,GAAG;AAAA,YACH,GAAG,WACA,IAAI,CAAC,UAAU,wBAAwB,KAAK,CAAC,EAC7C,OAAO,CAAC,UAA2B,QAAQ,KAAK,CAAC;AAAA,UACtD;AACA,cAAI,YAAY,SAAS,KAAK,WAAW,SAAS,GAAG;AACnD,kBAAM,OAAO,SAAS;AAAA,cACpB;AAAA,gBACE,YAAY,SAAS,IAAI,aAAa,YAAY,KAAK,IAAI,CAAC,KAAK;AAAA,gBACjE,WAAW,SAAS,IAChB,+BAA+B,WAAW,KAAK,IAAI,CAAC,KACpD;AAAA,cACN,EACG,OAAO,OAAO,EACd,KAAK,IAAI;AAAA,cACZ;AAAA,YACF;AAAA,UACF;AAAA,QACF,SAAS,KAAK;AACZ,gBAAM,OAAO,SAAS;AAAA,YACpB,iDAAiD,OAAO,GAAG,CAAC;AAAA,YAC5D;AAAA,UACF;AAAA,QACF;AAAA,MACF;AACA,aAAO,qBAAqB,MAAM,aAAa,OAAO,SAAS;AAC/D,aAAO,oBAAoB,MAAM,UAAU,OAAO,SAAS;AAAA,IAC7D;AAAA,EACF;AAEA,SAAO,MAAM,8BAA8B;AAAA,IACzC,KAAK;AAAA,IACL,UAAU,OAAO;AAAA,IACjB,WAAW,OAAO;AAAA,EACpB,CAAC;AACH;AAEA,IAAM,WAAiC;AAAA,EACrC,OAAO;AAAA,EACP;AAAA,EACA,WAAW;AAAA,EACX,cAAc;AAAA,EACd,mBAAmB,CAAC,KAAK,cAAc;AACrC,UAAM,qBAAqB,iCAAiC,KAAmB,SAAS;AACxF,WAAO;AAAA,MACL,WAAW,6BAA6B,KAAmB,oBAAoB,WAAW;AAAA,MAC1F,cAAc;AAAA,QACZ;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA,EACA,YAAY,CAAC,KAAK,cAChB,2BAA2B;AAAA,IACzB;AAAA,IACA,WAAW,iCAAiC,KAAmB,SAAS;AAAA,EAC1E,CAAC,EAAE,IAAI,UAAU;AAAA,EACnB,WAAW,CAAC,KAAK,QAAQ,cAAc,kBAAkB,KAAmB,QAAQ,SAAS;AAAA,EAC7F,iBAAiB;AACnB;AAIA,eAAe,mBAAmB,QAQkB;AAClD,MAAI,OAAO,OAAO;AAClB,QAAM,yBAAyB;AAAA,IAC7B,SAAS,OAAO;AAAA,IAChB,SAAS,OAAO,YACd,MAAM,OAAO,SAAS,QAAQ;AAAA,MAC5B;AAAA,MACA,cAAc;AAAA,IAChB,CAAC;AAAA,EACL,CAAC;AACD,QAAM,mBAAmB,8BAA8B,IAAI;AAC3D,MAAI,YAAY,oBAAoB;AACpC,MAAI,OAAO,WAAW,eAAe;AACnC,UAAM,cACJ;AAAA,MACE,MAAM,OAAO,SAAS,KAAK;AAAA,QACzB,SAAS;AAAA,QACT,UAAU,CAAC,UAAW,wBAAwB,KAAK,IAAI,SAAY;AAAA,MACrE,CAAC;AAAA,IACH,KAAK;AACP,gBAAY,mBAAmB,WAAW;AAC1C,QAAI,gBAAgB,WAAW;AAC7B,YAAM,OAAO,SAAS,KAAK,uBAAuB,SAAS,MAAM,gBAAgB;AAAA,IACnF;AACA,QAAI,cAAc,oBAAoB;AACpC,aAAO,4CAA4C,IAAI;AAAA,IACzD;AACA,WAAO,0BAA0B,MAAM,WAAW,EAAE,MAAM,aAAa,SAAS,KAAK,CAAC;AAAA,EACxF,OAAO;AACL,UAAM,WAAW,wBAAwB,OAAO,mBAAmB,OAAO,CAAC;AAC3E,QAAI,UAAU;AACZ,kBAAY,mBAAmB,QAAQ;AAAA,IACzC,WAAW,OAAO,wBAAwB;AACxC,kBAAY,MAAM,gBAAgB;AAAA,QAChC,KAAK;AAAA,QACL,UAAU,OAAO;AAAA,QACjB,OAAO;AAAA,QACP,WAAW;AAAA,QACX,gBAAgB,CAAC,aAAa,qBAAqB,QAAsB;AAAA,QACzE;AAAA,MACF,CAAC;AAAA,IACH;AAAA,EACF;AAEA,QAAM,WAAW,2BAA2B,EAAE,KAAK,MAAM,UAAU,CAAC;AACpE,QAAM,UAAU,qBAAqB,EAAE,KAAK,MAAM,UAAU,CAAC;AAC7D,MAAI,CAAC,QAAQ,YAAY;AACvB,UAAM,mBAAmB,OAAO,QAAQ;AAAA,EAC1C;AAEA,QAAM,eAAe,8BAA8B,WAAW,QAAQ,GAAG;AACzE,QAAM,WAAW,aAAa;AAC9B,QAAM,gBAAgB,aAAa;AACnC,QAAM,YAAY,aAAa;AAE/B,MACE,YACA,CAAC,SAAS,cACV,CAAC,SAAS,UACV,CAAC,SAAS,eACV,CAAC,SAAS,UACV;AACA,UAAM,SAAS,MAAM,OAAO,SAAS,QAAQ;AAAA,MAC3C,SAAS,6BAA6B,aAAa,UAAU;AAAA,MAC7D,cAAc;AAAA,IAChB,CAAC;AACD,QAAI,QAAQ;AACV,aAAO,0BAA0B,MAAM,WAAW,EAAE,SAAS,KAAK,CAAC;AACnE,aAAO,MAAM,6BAA6B;AAAA,QACxC,KAAK;AAAA,QACL,UAAU,OAAO;AAAA,QACjB,gBAAgB,OAAO;AAAA,QACvB;AAAA,MACF,CAAC;AACD,aAAO,EAAE,KAAK,MAAM,UAAU;AAAA,IAChC;AAAA,EACF;AAEA,QAAM,aACJ;AAAA,IACE,MAAM,OAAO,SAAS,KAAK;AAAA,MACzB,SAAS;AAAA,MACT,cAAc,SAAS,cAAc;AAAA,MACrC,UAAU,CAAC,UAAU;AACnB,YAAI;AACF,sCAA4B,OAAO;AAAA,YACjC,qBAAqB;AAAA,UACvB,CAAC;AACD,iBAAO;AAAA,QACT,SAAS,OAAO;AACd,iBAAO,iBAAiB,QAAQ,MAAM,UAAU;AAAA,QAClD;AAAA,MACF;AAAA,IACF,CAAC;AAAA,EACH,KAAK;AACP,QAAM,8BAA8B,kCAAkC,UAAU;AAChF,QAAM,kCACJ,+BAA+B,6BAA6B,QAAQ;AACtE,QAAM,sBAAsB,kCACxB,MAAM,OAAO,SAAS,QAAQ;AAAA,IAC5B,SAAS;AAAA,IACT,cAAc,6BAA6B,QAAQ,KAAK;AAAA,EAC1D,CAAC,IACD;AACJ,MAAI,+BAA+B,CAAC,qBAAqB;AACvD,UAAM,IAAI,MAAM,4DAA4D;AAAA,EAC9E;AACA,QAAM,oCAAoC,YAAY;AAAA,IACpD,gCAAgC;AAAA,EAClC,CAAC;AAED,MAAI,cAAc,SAAS;AAC3B,MAAI,WAAW,SAAS;AACxB,MAAI,SAAS,SAAS,UAAU;AAEhC,MAAI,yBAAyB,WAAW,KAAK,yBAAyB,QAAQ,GAAG;AAC/E,UAAM,OAAO,MAAM,OAAO,SAAS,QAAQ;AAAA,MACzC,SAAS;AAAA,MACT,cAAc;AAAA,IAChB,CAAC;AACD,QAAI,CAAC,MAAM;AACT,oBAAc;AACd,iBAAW;AACX,eAAS;AAAA,IACX;AAAA,EACF;AAEA,MAAI,CAAC,yBAAyB,WAAW,KAAK,CAAC,yBAAyB,QAAQ,GAAG;AACjF,UAAM,WAAW,MAAM,OAAO,SAAS,OAAO;AAAA,MAC5C,SAAS;AAAA,MACT,SAAS;AAAA,QACP,EAAE,OAAO,SAAS,OAAO,+CAA+C;AAAA,QACxE,EAAE,OAAO,YAAY,OAAO,8BAA8B;AAAA,MAC5D;AAAA,IACF,CAAC;AAED,QAAI,aAAa,SAAS;AACxB,oBACE;AAAA,QACE,MAAM,OAAO,SAAS,KAAK;AAAA,UACzB,SAAS;AAAA,UACT,UAAU,CAAC,UAAW,wBAAwB,KAAK,IAAI,SAAY;AAAA,QACrE,CAAC;AAAA,MACH,KAAK;AACP,iBAAW;AACX,eAAS;AAAA,IACX,OAAO;AACL,eACE;AAAA,QACE,MAAM,OAAO,SAAS,KAAK;AAAA,UACzB,SAAS;AAAA,UACT,cAAc,SAAS,UAAU;AAAA,UACjC,UAAU,CAAC,UAAU;AACnB,kBAAM,MAAM,wBAAwB,KAAK,KAAK;AAC9C,gBAAI,CAAC,KAAK;AACR,qBAAO;AAAA,YACT;AACA,gBAAI,CAAC,IAAI,WAAW,GAAG,GAAG;AACxB,qBAAO;AAAA,YACT;AACA,gBAAI,CAAC,IAAI,SAAS,GAAG,GAAG;AACtB,qBAAO;AAAA,YACT;AACA,mBAAO;AAAA,UACT;AAAA,QACF,CAAC;AAAA,MACH,KAAK;AACP,iBACE;AAAA,QACE,MAAM,OAAO,SAAS,KAAK;AAAA,UACzB,SAAS;AAAA,UACT,UAAU,CAAC,UAAW,wBAAwB,KAAK,IAAI,SAAY;AAAA,QACrE,CAAC;AAAA,MACH,KAAK;AACP,oBAAc;AAAA,IAChB;AAAA,EACF;AAEA,QAAM,aACJ;AAAA,IACE,MAAM,OAAO,SAAS,KAAK;AAAA,MACzB,SAAS;AAAA,MACT,cAAc,SAAS,cAAc;AAAA,IACvC,CAAC;AAAA,EACH,KAAK;AAEP,QAAM,mBAAmB,MAAM,OAAO,SAAS,QAAQ;AAAA,IACrD,SAAS;AAAA,IACT,cAAc,SAAS,cAAc;AAAA,EACvC,CAAC;AAED,SAAO,0BAA0B,MAAM,WAAW;AAAA,IAChD,SAAS;AAAA,IACT;AAAA,IACA,GAAI,kCACA,EAAE,qBAAqB,sBAAsB,OAAO,KAAK,IACzD,CAAC;AAAA,IACL,QAAQ,UAAU;AAAA,IAClB,aAAa,eAAe;AAAA,IAC5B,UAAU,YAAY;AAAA,IACtB,YAAY,cAAc;AAAA,IAC1B,YAAY;AAAA,EACd,CAAC;AAED,SAAO,MAAM,6BAA6B;AAAA,IACxC,KAAK;AAAA,IACL,UAAU,OAAO;AAAA,IACjB,gBAAgB,OAAO;AAAA,IACvB;AAAA,EACF,CAAC;AAED,SAAO,EAAE,KAAK,MAAM,UAAU;AAChC;AAEO,IAAM,0BAAqD;AAAA,EAChE;AAAA,EACA,WAAW,OAAO,EAAE,KAAK,iBAAiB,MAAM;AAC9C,UAAM,cAAc;AACpB,UAAM,WAAW,qBAAqB;AACtC,QAAI,CAAC,iBAAiB,OAAO,KAAK,qCAAqC,WAAW,GAAG;AACnF,aAAO;AAAA,QACL;AAAA,QACA,YAAY;AAAA,QACZ,aAAa,CAAC,sEAAsE;AAAA,QACpF,eAAe,CAAC,WAAW,wBAAwB;AAAA,MACrD;AAAA,IACF;AACA,UAAM,UAAU,qBAAqB;AAAA,MACnC,KAAK;AAAA,MACL,WAAW,iCAAiC,aAAa,iBAAiB,OAAO,CAAC;AAAA,IACpF,CAAC;AACD,UAAM,aAAa,QAAQ;AAC3B,WAAO;AAAA,MACL;AAAA,MACA;AAAA,MACA,aAAa;AAAA,QACX,WAAW,aAAa,eAAe,6CAA6C;AAAA,MACtF;AAAA,MACA,eAAe,CAAC,WAAW,wBAAwB,aAAa,eAAe;AAAA,IACjF;AAAA,EACF;AAAA,EACA,WAAW,OAAO;AAAA,IAChB;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF,MACE,MAAM,mBAAmB;AAAA,IACvB;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,QAAQ;AAAA,EACV,CAAC;AAAA,EACH,sBAAsB,OAAO;AAAA,IAC3B;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF,MAAM;AACJ,QAAI,CAAC,YAAY;AACf,aAAO,MAAM,mBAAmB;AAAA,QAC9B;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA,QAAQ;AAAA,MACV,CAAC;AAAA,IACH;AACA,UAAM,SAAS,MAAM,SAAS,OAAO;AAAA,MACnC,SAAS;AAAA,MACT,SAAS;AAAA,QACP,EAAE,OAAO,UAAU,OAAO,kBAAkB;AAAA,QAC5C,EAAE,OAAO,eAAe,OAAO,cAAc;AAAA,QAC7C,EAAE,OAAO,QAAQ,OAAO,qBAAqB;AAAA,MAC/C;AAAA,MACA,cAAc;AAAA,IAChB,CAAC;AACD,QAAI,WAAW,QAAQ;AACrB,aAAO;AAAA,IACT;AACA,WAAO,MAAM,mBAAmB;AAAA,MAC9B;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA,QAAQ,WAAW,gBAAgB,gBAAgB;AAAA,IACrD,CAAC;AAAA,EACH;AAAA,EACA,oBAAoB,OAAO,EAAE,aAAa,KAAK,WAAW,QAAQ,MAAM;AACtE,UAAM,EAAE,wCAAwC,IAAI,MAAM,OAAO,0BAAsB;AACvF,UAAM,wCAAwC;AAAA,MAC5C;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF,CAAC;AAAA,EACH;AAAA,EACA;AAAA,EACA,SAAS,CAAC,SAAS;AAAA,IACjB,GAAI;AAAA,IACJ,UAAU;AAAA,MACR,GAAI,IAAmB;AAAA,MACvB,QAAQ,EAAE,GAAI,IAAmB,WAAW,QAAQ,GAAG,SAAS,MAAM;AAAA,IACxE;AAAA,EACF;AACF;",
+  "names": []
+}

package/dist/chunk-4QTZHELX.js

@@ -0,0 +1,51 @@
+import {
+  init_shims
+} from "./chunk-G4TIS2SC.js";
+
+// src/matrix/client/private-network-host.ts
+init_shims();
+import net from "node:net";
+import { normalizeLowercaseStringOrEmpty } from "openclaw/plugin-sdk/text-runtime";
+function normalizeHost(host) {
+  const normalized = normalizeLowercaseStringOrEmpty(host).replace(/\.+$/, "");
+  return normalized.startsWith("[") && normalized.endsWith("]") ? normalized.slice(1, -1) : normalized;
+}
+function isPrivateIpv4(host) {
+  const parts = host.split(".").map((part) => Number(part));
+  if (parts.length !== 4 || parts.some((part) => !Number.isInteger(part) || part < 0 || part > 255)) {
+    return false;
+  }
+  const [a, b] = parts;
+  return a === 10 || a === 127 || a === 172 && b >= 16 && b <= 31 || a === 192 && b === 168 || a === 169 && b === 254 || a === 100 && b >= 64 && b <= 127;
+}
+function isPrivateIpv6(host) {
+  if (host === "::1") {
+    return true;
+  }
+  if (host === "::" || host.startsWith("ff")) {
+    return false;
+  }
+  return host.startsWith("fc") || host.startsWith("fd") || host.startsWith("fe80:");
+}
+function isPrivateOrLoopbackHost(host) {
+  const normalized = normalizeHost(host);
+  if (!normalized) {
+    return false;
+  }
+  if (normalized === "localhost") {
+    return true;
+  }
+  const family = net.isIP(normalized);
+  if (family === 4) {
+    return isPrivateIpv4(normalized);
+  }
+  if (family === 6) {
+    return isPrivateIpv6(normalized);
+  }
+  return false;
+}
+
+export {
+  isPrivateOrLoopbackHost
+};
+//# sourceMappingURL=chunk-4QTZHELX.js.map

package/dist/chunk-4QTZHELX.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../src/matrix/client/private-network-host.ts"],
+  "sourcesContent": ["import net from \"node:net\";\nimport { normalizeLowercaseStringOrEmpty } from \"openclaw/plugin-sdk/text-runtime\";\n\nfunction normalizeHost(host: string): string {\n  const normalized = normalizeLowercaseStringOrEmpty(host).replace(/\\.+$/, \"\");\n  return normalized.startsWith(\"[\") && normalized.endsWith(\"]\")\n    ? normalized.slice(1, -1)\n    : normalized;\n}\n\nfunction isPrivateIpv4(host: string): boolean {\n  const parts = host.split(\".\").map((part) => Number(part));\n  if (\n    parts.length !== 4 ||\n    parts.some((part) => !Number.isInteger(part) || part < 0 || part > 255)\n  ) {\n    return false;\n  }\n  const [a, b] = parts;\n  return (\n    a === 10 ||\n    a === 127 ||\n    (a === 172 && b >= 16 && b <= 31) ||\n    (a === 192 && b === 168) ||\n    (a === 169 && b === 254) ||\n    (a === 100 && b >= 64 && b <= 127)\n  );\n}\n\nfunction isPrivateIpv6(host: string): boolean {\n  if (host === \"::1\") {\n    return true;\n  }\n  if (host === \"::\" || host.startsWith(\"ff\")) {\n    return false;\n  }\n  return host.startsWith(\"fc\") || host.startsWith(\"fd\") || host.startsWith(\"fe80:\");\n}\n\nexport function isPrivateOrLoopbackHost(host: string): boolean {\n  const normalized = normalizeHost(host);\n  if (!normalized) {\n    return false;\n  }\n  if (normalized === \"localhost\") {\n    return true;\n  }\n  const family = net.isIP(normalized);\n  if (family === 4) {\n    return isPrivateIpv4(normalized);\n  }\n  if (family === 6) {\n    return isPrivateIpv6(normalized);\n  }\n  return false;\n}\n"],
+  "mappings": ";;;;;AAAA;AAAA,OAAO,SAAS;AAChB,SAAS,uCAAuC;AAEhD,SAAS,cAAc,MAAsB;AAC3C,QAAM,aAAa,gCAAgC,IAAI,EAAE,QAAQ,QAAQ,EAAE;AAC3E,SAAO,WAAW,WAAW,GAAG,KAAK,WAAW,SAAS,GAAG,IACxD,WAAW,MAAM,GAAG,EAAE,IACtB;AACN;AAEA,SAAS,cAAc,MAAuB;AAC5C,QAAM,QAAQ,KAAK,MAAM,GAAG,EAAE,IAAI,CAAC,SAAS,OAAO,IAAI,CAAC;AACxD,MACE,MAAM,WAAW,KACjB,MAAM,KAAK,CAAC,SAAS,CAAC,OAAO,UAAU,IAAI,KAAK,OAAO,KAAK,OAAO,GAAG,GACtE;AACA,WAAO;AAAA,EACT;AACA,QAAM,CAAC,GAAG,CAAC,IAAI;AACf,SACE,MAAM,MACN,MAAM,OACL,MAAM,OAAO,KAAK,MAAM,KAAK,MAC7B,MAAM,OAAO,MAAM,OACnB,MAAM,OAAO,MAAM,OACnB,MAAM,OAAO,KAAK,MAAM,KAAK;AAElC;AAEA,SAAS,cAAc,MAAuB;AAC5C,MAAI,SAAS,OAAO;AAClB,WAAO;AAAA,EACT;AACA,MAAI,SAAS,QAAQ,KAAK,WAAW,IAAI,GAAG;AAC1C,WAAO;AAAA,EACT;AACA,SAAO,KAAK,WAAW,IAAI,KAAK,KAAK,WAAW,IAAI,KAAK,KAAK,WAAW,OAAO;AAClF;AAEO,SAAS,wBAAwB,MAAuB;AAC7D,QAAM,aAAa,cAAc,IAAI;AACrC,MAAI,CAAC,YAAY;AACf,WAAO;AAAA,EACT;AACA,MAAI,eAAe,aAAa;AAC9B,WAAO;AAAA,EACT;AACA,QAAM,SAAS,IAAI,KAAK,UAAU;AAClC,MAAI,WAAW,GAAG;AAChB,WAAO,cAAc,UAAU;AAAA,EACjC;AACA,MAAI,WAAW,GAAG;AAChB,WAAO,cAAc,UAAU;AAAA,EACjC;AACA,SAAO;AACT;",
+  "names": []
+}

package/dist/chunk-4U42OJMK.js

@@ -0,0 +1,217 @@
+import {
+  createAsyncLock
+} from "./chunk-UP42ACP7.js";
+import {
+  LogService
+} from "./chunk-YF5DYD3X.js";
+import {
+  resolveMatrixStateFilePath
+} from "./chunk-HKF5EBER.js";
+import {
+  init_shims
+} from "./chunk-G4TIS2SC.js";
+
+// src/matrix/monitor/inbound-dedupe.ts
+init_shims();
+import { readJsonFileWithFallback, writeJsonFileAtomically } from "openclaw/plugin-sdk/json-store";
+var INBOUND_DEDUPE_FILENAME = "inbound-dedupe.json";
+var STORE_VERSION = 1;
+var DEFAULT_MAX_ENTRIES = 2e4;
+var DEFAULT_TTL_MS = 30 * 24 * 60 * 60 * 1e3;
+var PERSIST_DEBOUNCE_MS = 250;
+function normalizeEventPart(value) {
+  return value.trim();
+}
+function buildEventKey(params) {
+  const roomId = normalizeEventPart(params.roomId);
+  const eventId = normalizeEventPart(params.eventId);
+  return roomId && eventId ? `${roomId}|${eventId}` : "";
+}
+function resolveInboundDedupeStatePath(params) {
+  return resolveMatrixStateFilePath({
+    auth: params.auth,
+    env: params.env,
+    stateDir: params.stateDir,
+    filename: INBOUND_DEDUPE_FILENAME
+  });
+}
+function normalizeTimestamp(raw) {
+  if (typeof raw !== "number" || !Number.isFinite(raw)) {
+    return null;
+  }
+  return Math.max(0, Math.floor(raw));
+}
+function pruneSeenEvents(params) {
+  const { seen, ttlMs, maxEntries, nowMs } = params;
+  if (ttlMs > 0) {
+    const cutoff = nowMs - ttlMs;
+    for (const [key, ts] of seen) {
+      if (ts < cutoff) {
+        seen.delete(key);
+      }
+    }
+  }
+  const max = Math.max(0, Math.floor(maxEntries));
+  if (max <= 0) {
+    seen.clear();
+    return;
+  }
+  while (seen.size > max) {
+    const oldestKey = seen.keys().next().value;
+    if (typeof oldestKey !== "string") {
+      break;
+    }
+    seen.delete(oldestKey);
+  }
+}
+function toStoredState(params) {
+  pruneSeenEvents(params);
+  return {
+    version: STORE_VERSION,
+    entries: Array.from(params.seen.entries()).map(([key, ts]) => ({ key, ts }))
+  };
+}
+async function readStoredState(storagePath) {
+  const { value } = await readJsonFileWithFallback(
+    storagePath,
+    null
+  );
+  if (value?.version !== STORE_VERSION || !Array.isArray(value.entries)) {
+    return null;
+  }
+  return value;
+}
+async function createMatrixInboundEventDeduper(params) {
+  const nowMs = params.nowMs ?? (() => Date.now());
+  const ttlMs = typeof params.ttlMs === "number" && Number.isFinite(params.ttlMs) ? Math.max(0, Math.floor(params.ttlMs)) : DEFAULT_TTL_MS;
+  const maxEntries = typeof params.maxEntries === "number" && Number.isFinite(params.maxEntries) ? Math.max(0, Math.floor(params.maxEntries)) : DEFAULT_MAX_ENTRIES;
+  const storagePath = params.storagePath ?? resolveInboundDedupeStatePath({
+    auth: params.auth,
+    env: params.env,
+    stateDir: params.stateDir
+  });
+  const seen = /* @__PURE__ */ new Map();
+  const pending = /* @__PURE__ */ new Set();
+  const persistLock = createAsyncLock();
+  try {
+    const stored = await readStoredState(storagePath);
+    for (const entry of stored?.entries ?? []) {
+      if (!entry || typeof entry.key !== "string") {
+        continue;
+      }
+      const key = entry.key.trim();
+      const ts = normalizeTimestamp(entry.ts);
+      if (!key || ts === null) {
+        continue;
+      }
+      seen.set(key, ts);
+    }
+    pruneSeenEvents({ seen, ttlMs, maxEntries, nowMs: nowMs() });
+  } catch (err) {
+    LogService.warn("MatrixInboundDedupe", "Failed loading Matrix inbound dedupe store:", err);
+  }
+  let dirty = false;
+  let persistTimer = null;
+  let persistPromise = null;
+  const persist = async () => {
+    dirty = false;
+    const payload = toStoredState({
+      seen,
+      ttlMs,
+      maxEntries,
+      nowMs: nowMs()
+    });
+    try {
+      await persistLock(async () => {
+        await writeJsonFileAtomically(storagePath, payload);
+      });
+    } catch (err) {
+      dirty = true;
+      throw err;
+    }
+  };
+  const flush = async () => {
+    if (persistTimer) {
+      clearTimeout(persistTimer);
+      persistTimer = null;
+    }
+    for (; ; ) {
+      if (!dirty && !persistPromise) {
+        break;
+      }
+      if (dirty && !persistPromise) {
+        persistPromise = persist().finally(() => {
+          persistPromise = null;
+        });
+      }
+      await persistPromise;
+    }
+  };
+  const schedulePersist = () => {
+    dirty = true;
+    if (persistTimer) {
+      return;
+    }
+    persistTimer = setTimeout(() => {
+      persistTimer = null;
+      void flush().catch((err) => {
+        LogService.warn(
+          "MatrixInboundDedupe",
+          "Failed persisting Matrix inbound dedupe store:",
+          err
+        );
+      });
+    }, PERSIST_DEBOUNCE_MS);
+    persistTimer.unref?.();
+  };
+  return {
+    claimEvent: ({ roomId, eventId }) => {
+      const key = buildEventKey({ roomId, eventId });
+      if (!key) {
+        return true;
+      }
+      pruneSeenEvents({ seen, ttlMs, maxEntries, nowMs: nowMs() });
+      if (seen.has(key) || pending.has(key)) {
+        return false;
+      }
+      pending.add(key);
+      return true;
+    },
+    commitEvent: async ({ roomId, eventId }) => {
+      const key = buildEventKey({ roomId, eventId });
+      if (!key) {
+        return;
+      }
+      pending.delete(key);
+      const ts = nowMs();
+      seen.delete(key);
+      seen.set(key, ts);
+      pruneSeenEvents({ seen, ttlMs, maxEntries, nowMs: nowMs() });
+      schedulePersist();
+    },
+    releaseEvent: ({ roomId, eventId }) => {
+      const key = buildEventKey({ roomId, eventId });
+      if (!key) {
+        return;
+      }
+      pending.delete(key);
+    },
+    flush,
+    stop: async () => {
+      try {
+        await flush();
+      } catch (err) {
+        LogService.warn(
+          "MatrixInboundDedupe",
+          "Failed to flush Matrix inbound dedupe store during stop():",
+          err
+        );
+      }
+    }
+  };
+}
+
+export {
+  createMatrixInboundEventDeduper
+};
+//# sourceMappingURL=chunk-4U42OJMK.js.map

package/dist/chunk-4U42OJMK.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../src/matrix/monitor/inbound-dedupe.ts"],
+  "sourcesContent": ["import { readJsonFileWithFallback, writeJsonFileAtomically } from \"openclaw/plugin-sdk/json-store\";\nimport { createAsyncLock } from \"../async-lock.js\";\nimport { resolveMatrixStateFilePath } from \"../client/storage.js\";\nimport type { MatrixAuth } from \"../client/types.js\";\nimport { LogService } from \"../sdk/logger.js\";\n\nconst INBOUND_DEDUPE_FILENAME = \"inbound-dedupe.json\";\nconst STORE_VERSION = 1;\nconst DEFAULT_MAX_ENTRIES = 20_000;\nconst DEFAULT_TTL_MS = 30 * 24 * 60 * 60 * 1000;\nconst PERSIST_DEBOUNCE_MS = 250;\n\ntype StoredMatrixInboundDedupeEntry = {\n  key: string;\n  ts: number;\n};\n\ntype StoredMatrixInboundDedupeState = {\n  version: number;\n  entries: StoredMatrixInboundDedupeEntry[];\n};\n\nexport type MatrixInboundEventDeduper = {\n  claimEvent: (params: { roomId: string; eventId: string }) => boolean;\n  commitEvent: (params: { roomId: string; eventId: string }) => Promise<void>;\n  releaseEvent: (params: { roomId: string; eventId: string }) => void;\n  flush: () => Promise<void>;\n  stop: () => Promise<void>;\n};\n\nfunction normalizeEventPart(value: string): string {\n  return value.trim();\n}\n\nfunction buildEventKey(params: { roomId: string; eventId: string }): string {\n  const roomId = normalizeEventPart(params.roomId);\n  const eventId = normalizeEventPart(params.eventId);\n  return roomId && eventId ? `${roomId}|${eventId}` : \"\";\n}\n\nfunction resolveInboundDedupeStatePath(params: {\n  auth: MatrixAuth;\n  env?: NodeJS.ProcessEnv;\n  stateDir?: string;\n}): string {\n  return resolveMatrixStateFilePath({\n    auth: params.auth,\n    env: params.env,\n    stateDir: params.stateDir,\n    filename: INBOUND_DEDUPE_FILENAME,\n  });\n}\n\nfunction normalizeTimestamp(raw: unknown): number | null {\n  if (typeof raw !== \"number\" || !Number.isFinite(raw)) {\n    return null;\n  }\n  return Math.max(0, Math.floor(raw));\n}\n\nfunction pruneSeenEvents(params: {\n  seen: Map<string, number>;\n  ttlMs: number;\n  maxEntries: number;\n  nowMs: number;\n}) {\n  const { seen, ttlMs, maxEntries, nowMs } = params;\n  if (ttlMs > 0) {\n    const cutoff = nowMs - ttlMs;\n    for (const [key, ts] of seen) {\n      if (ts < cutoff) {\n        seen.delete(key);\n      }\n    }\n  }\n  const max = Math.max(0, Math.floor(maxEntries));\n  if (max <= 0) {\n    seen.clear();\n    return;\n  }\n  while (seen.size > max) {\n    const oldestKey = seen.keys().next().value;\n    if (typeof oldestKey !== \"string\") {\n      break;\n    }\n    seen.delete(oldestKey);\n  }\n}\n\nfunction toStoredState(params: {\n  seen: Map<string, number>;\n  ttlMs: number;\n  maxEntries: number;\n  nowMs: number;\n}): StoredMatrixInboundDedupeState {\n  pruneSeenEvents(params);\n  return {\n    version: STORE_VERSION,\n    entries: Array.from(params.seen.entries()).map(([key, ts]) => ({ key, ts })),\n  };\n}\n\nasync function readStoredState(\n  storagePath: string,\n): Promise<StoredMatrixInboundDedupeState | null> {\n  const { value } = await readJsonFileWithFallback<StoredMatrixInboundDedupeState | null>(\n    storagePath,\n    null,\n  );\n  if (value?.version !== STORE_VERSION || !Array.isArray(value.entries)) {\n    return null;\n  }\n  return value;\n}\n\nexport async function createMatrixInboundEventDeduper(params: {\n  auth: MatrixAuth;\n  env?: NodeJS.ProcessEnv;\n  stateDir?: string;\n  storagePath?: string;\n  ttlMs?: number;\n  maxEntries?: number;\n  nowMs?: () => number;\n}): Promise<MatrixInboundEventDeduper> {\n  const nowMs = params.nowMs ?? (() => Date.now());\n  const ttlMs =\n    typeof params.ttlMs === \"number\" && Number.isFinite(params.ttlMs)\n      ? Math.max(0, Math.floor(params.ttlMs))\n      : DEFAULT_TTL_MS;\n  const maxEntries =\n    typeof params.maxEntries === \"number\" && Number.isFinite(params.maxEntries)\n      ? Math.max(0, Math.floor(params.maxEntries))\n      : DEFAULT_MAX_ENTRIES;\n  const storagePath =\n    params.storagePath ??\n    resolveInboundDedupeStatePath({\n      auth: params.auth,\n      env: params.env,\n      stateDir: params.stateDir,\n    });\n\n  const seen = new Map<string, number>();\n  const pending = new Set<string>();\n  const persistLock = createAsyncLock();\n\n  try {\n    const stored = await readStoredState(storagePath);\n    for (const entry of stored?.entries ?? []) {\n      if (!entry || typeof entry.key !== \"string\") {\n        continue;\n      }\n      const key = entry.key.trim();\n      const ts = normalizeTimestamp(entry.ts);\n      if (!key || ts === null) {\n        continue;\n      }\n      seen.set(key, ts);\n    }\n    pruneSeenEvents({ seen, ttlMs, maxEntries, nowMs: nowMs() });\n  } catch (err) {\n    LogService.warn(\"MatrixInboundDedupe\", \"Failed loading Matrix inbound dedupe store:\", err);\n  }\n\n  let dirty = false;\n  let persistTimer: NodeJS.Timeout | null = null;\n  let persistPromise: Promise<void> | null = null;\n\n  const persist = async () => {\n    dirty = false;\n    const payload = toStoredState({\n      seen,\n      ttlMs,\n      maxEntries,\n      nowMs: nowMs(),\n    });\n    try {\n      await persistLock(async () => {\n        await writeJsonFileAtomically(storagePath, payload);\n      });\n    } catch (err) {\n      dirty = true;\n      throw err;\n    }\n  };\n\n  const flush = async (): Promise<void> => {\n    if (persistTimer) {\n      clearTimeout(persistTimer);\n      persistTimer = null;\n    }\n    for (;;) {\n      if (!dirty && !persistPromise) {\n        break;\n      }\n      if (dirty && !persistPromise) {\n        persistPromise = persist().finally(() => {\n          persistPromise = null;\n        });\n      }\n      await persistPromise;\n    }\n  };\n\n  const schedulePersist = () => {\n    dirty = true;\n    if (persistTimer) {\n      return;\n    }\n    persistTimer = setTimeout(() => {\n      persistTimer = null;\n      void flush().catch((err) => {\n        LogService.warn(\n          \"MatrixInboundDedupe\",\n          \"Failed persisting Matrix inbound dedupe store:\",\n          err,\n        );\n      });\n    }, PERSIST_DEBOUNCE_MS);\n    persistTimer.unref?.();\n  };\n\n  return {\n    claimEvent: ({ roomId, eventId }) => {\n      const key = buildEventKey({ roomId, eventId });\n      if (!key) {\n        return true;\n      }\n      pruneSeenEvents({ seen, ttlMs, maxEntries, nowMs: nowMs() });\n      if (seen.has(key) || pending.has(key)) {\n        return false;\n      }\n      pending.add(key);\n      return true;\n    },\n    commitEvent: async ({ roomId, eventId }) => {\n      const key = buildEventKey({ roomId, eventId });\n      if (!key) {\n        return;\n      }\n      pending.delete(key);\n      const ts = nowMs();\n      seen.delete(key);\n      seen.set(key, ts);\n      pruneSeenEvents({ seen, ttlMs, maxEntries, nowMs: nowMs() });\n      schedulePersist();\n    },\n    releaseEvent: ({ roomId, eventId }) => {\n      const key = buildEventKey({ roomId, eventId });\n      if (!key) {\n        return;\n      }\n      pending.delete(key);\n    },\n    flush,\n    stop: async () => {\n      try {\n        await flush();\n      } catch (err) {\n        LogService.warn(\n          \"MatrixInboundDedupe\",\n          \"Failed to flush Matrix inbound dedupe store during stop():\",\n          err,\n        );\n      }\n    },\n  };\n}\n"],
+  "mappings": ";;;;;;;;;;;;;;AAAA;AAAA,SAAS,0BAA0B,+BAA+B;AAMlE,IAAM,0BAA0B;AAChC,IAAM,gBAAgB;AACtB,IAAM,sBAAsB;AAC5B,IAAM,iBAAiB,KAAK,KAAK,KAAK,KAAK;AAC3C,IAAM,sBAAsB;AAoB5B,SAAS,mBAAmB,OAAuB;AACjD,SAAO,MAAM,KAAK;AACpB;AAEA,SAAS,cAAc,QAAqD;AAC1E,QAAM,SAAS,mBAAmB,OAAO,MAAM;AAC/C,QAAM,UAAU,mBAAmB,OAAO,OAAO;AACjD,SAAO,UAAU,UAAU,GAAG,MAAM,IAAI,OAAO,KAAK;AACtD;AAEA,SAAS,8BAA8B,QAI5B;AACT,SAAO,2BAA2B;AAAA,IAChC,MAAM,OAAO;AAAA,IACb,KAAK,OAAO;AAAA,IACZ,UAAU,OAAO;AAAA,IACjB,UAAU;AAAA,EACZ,CAAC;AACH;AAEA,SAAS,mBAAmB,KAA6B;AACvD,MAAI,OAAO,QAAQ,YAAY,CAAC,OAAO,SAAS,GAAG,GAAG;AACpD,WAAO;AAAA,EACT;AACA,SAAO,KAAK,IAAI,GAAG,KAAK,MAAM,GAAG,CAAC;AACpC;AAEA,SAAS,gBAAgB,QAKtB;AACD,QAAM,EAAE,MAAM,OAAO,YAAY,MAAM,IAAI;AAC3C,MAAI,QAAQ,GAAG;AACb,UAAM,SAAS,QAAQ;AACvB,eAAW,CAAC,KAAK,EAAE,KAAK,MAAM;AAC5B,UAAI,KAAK,QAAQ;AACf,aAAK,OAAO,GAAG;AAAA,MACjB;AAAA,IACF;AAAA,EACF;AACA,QAAM,MAAM,KAAK,IAAI,GAAG,KAAK,MAAM,UAAU,CAAC;AAC9C,MAAI,OAAO,GAAG;AACZ,SAAK,MAAM;AACX;AAAA,EACF;AACA,SAAO,KAAK,OAAO,KAAK;AACtB,UAAM,YAAY,KAAK,KAAK,EAAE,KAAK,EAAE;AACrC,QAAI,OAAO,cAAc,UAAU;AACjC;AAAA,IACF;AACA,SAAK,OAAO,SAAS;AAAA,EACvB;AACF;AAEA,SAAS,cAAc,QAKY;AACjC,kBAAgB,MAAM;AACtB,SAAO;AAAA,IACL,SAAS;AAAA,IACT,SAAS,MAAM,KAAK,OAAO,KAAK,QAAQ,CAAC,EAAE,IAAI,CAAC,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,GAAG,EAAE;AAAA,EAC7E;AACF;AAEA,eAAe,gBACb,aACgD;AAChD,QAAM,EAAE,MAAM,IAAI,MAAM;AAAA,IACtB;AAAA,IACA;AAAA,EACF;AACA,MAAI,OAAO,YAAY,iBAAiB,CAAC,MAAM,QAAQ,MAAM,OAAO,GAAG;AACrE,WAAO;AAAA,EACT;AACA,SAAO;AACT;AAEA,eAAsB,gCAAgC,QAQf;AACrC,QAAM,QAAQ,OAAO,UAAU,MAAM,KAAK,IAAI;AAC9C,QAAM,QACJ,OAAO,OAAO,UAAU,YAAY,OAAO,SAAS,OAAO,KAAK,IAC5D,KAAK,IAAI,GAAG,KAAK,MAAM,OAAO,KAAK,CAAC,IACpC;AACN,QAAM,aACJ,OAAO,OAAO,eAAe,YAAY,OAAO,SAAS,OAAO,UAAU,IACtE,KAAK,IAAI,GAAG,KAAK,MAAM,OAAO,UAAU,CAAC,IACzC;AACN,QAAM,cACJ,OAAO,eACP,8BAA8B;AAAA,IAC5B,MAAM,OAAO;AAAA,IACb,KAAK,OAAO;AAAA,IACZ,UAAU,OAAO;AAAA,EACnB,CAAC;AAEH,QAAM,OAAO,oBAAI,IAAoB;AACrC,QAAM,UAAU,oBAAI,IAAY;AAChC,QAAM,cAAc,gBAAgB;AAEpC,MAAI;AACF,UAAM,SAAS,MAAM,gBAAgB,WAAW;AAChD,eAAW,SAAS,QAAQ,WAAW,CAAC,GAAG;AACzC,UAAI,CAAC,SAAS,OAAO,MAAM,QAAQ,UAAU;AAC3C;AAAA,MACF;AACA,YAAM,MAAM,MAAM,IAAI,KAAK;AAC3B,YAAM,KAAK,mBAAmB,MAAM,EAAE;AACtC,UAAI,CAAC,OAAO,OAAO,MAAM;AACvB;AAAA,MACF;AACA,WAAK,IAAI,KAAK,EAAE;AAAA,IAClB;AACA,oBAAgB,EAAE,MAAM,OAAO,YAAY,OAAO,MAAM,EAAE,CAAC;AAAA,EAC7D,SAAS,KAAK;AACZ,eAAW,KAAK,uBAAuB,+CAA+C,GAAG;AAAA,EAC3F;AAEA,MAAI,QAAQ;AACZ,MAAI,eAAsC;AAC1C,MAAI,iBAAuC;AAE3C,QAAM,UAAU,YAAY;AAC1B,YAAQ;AACR,UAAM,UAAU,cAAc;AAAA,MAC5B;AAAA,MACA;AAAA,MACA;AAAA,MACA,OAAO,MAAM;AAAA,IACf,CAAC;AACD,QAAI;AACF,YAAM,YAAY,YAAY;AAC5B,cAAM,wBAAwB,aAAa,OAAO;AAAA,MACpD,CAAC;AAAA,IACH,SAAS,KAAK;AACZ,cAAQ;AACR,YAAM;AAAA,IACR;AAAA,EACF;AAEA,QAAM,QAAQ,YAA2B;AACvC,QAAI,cAAc;AAChB,mBAAa,YAAY;AACzB,qBAAe;AAAA,IACjB;AACA,eAAS;AACP,UAAI,CAAC,SAAS,CAAC,gBAAgB;AAC7B;AAAA,MACF;AACA,UAAI,SAAS,CAAC,gBAAgB;AAC5B,yBAAiB,QAAQ,EAAE,QAAQ,MAAM;AACvC,2BAAiB;AAAA,QACnB,CAAC;AAAA,MACH;AACA,YAAM;AAAA,IACR;AAAA,EACF;AAEA,QAAM,kBAAkB,MAAM;AAC5B,YAAQ;AACR,QAAI,cAAc;AAChB;AAAA,IACF;AACA,mBAAe,WAAW,MAAM;AAC9B,qBAAe;AACf,WAAK,MAAM,EAAE,MAAM,CAAC,QAAQ;AAC1B,mBAAW;AAAA,UACT;AAAA,UACA;AAAA,UACA;AAAA,QACF;AAAA,MACF,CAAC;AAAA,IACH,GAAG,mBAAmB;AACtB,iBAAa,QAAQ;AAAA,EACvB;AAEA,SAAO;AAAA,IACL,YAAY,CAAC,EAAE,QAAQ,QAAQ,MAAM;AACnC,YAAM,MAAM,cAAc,EAAE,QAAQ,QAAQ,CAAC;AAC7C,UAAI,CAAC,KAAK;AACR,eAAO;AAAA,MACT;AACA,sBAAgB,EAAE,MAAM,OAAO,YAAY,OAAO,MAAM,EAAE,CAAC;AAC3D,UAAI,KAAK,IAAI,GAAG,KAAK,QAAQ,IAAI,GAAG,GAAG;AACrC,eAAO;AAAA,MACT;AACA,cAAQ,IAAI,GAAG;AACf,aAAO;AAAA,IACT;AAAA,IACA,aAAa,OAAO,EAAE,QAAQ,QAAQ,MAAM;AAC1C,YAAM,MAAM,cAAc,EAAE,QAAQ,QAAQ,CAAC;AAC7C,UAAI,CAAC,KAAK;AACR;AAAA,MACF;AACA,cAAQ,OAAO,GAAG;AAClB,YAAM,KAAK,MAAM;AACjB,WAAK,OAAO,GAAG;AACf,WAAK,IAAI,KAAK,EAAE;AAChB,sBAAgB,EAAE,MAAM,OAAO,YAAY,OAAO,MAAM,EAAE,CAAC;AAC3D,sBAAgB;AAAA,IAClB;AAAA,IACA,cAAc,CAAC,EAAE,QAAQ,QAAQ,MAAM;AACrC,YAAM,MAAM,cAAc,EAAE,QAAQ,QAAQ,CAAC;AAC7C,UAAI,CAAC,KAAK;AACR;AAAA,MACF;AACA,cAAQ,OAAO,GAAG;AAAA,IACpB;AAAA,IACA;AAAA,IACA,MAAM,YAAY;AAChB,UAAI;AACF,cAAM,MAAM;AAAA,MACd,SAAS,KAAK;AACZ,mBAAW;AAAA,UACT;AAAA,UACA;AAAA,UACA;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;",
+  "names": []
+}

package/dist/chunk-4WCKVGQ5.js

@@ -0,0 +1,193 @@
+import {
+  formatMatrixEncryptionUnavailableError
+} from "./chunk-K3HEWOHN.js";
+import {
+  withStartedActionClient
+} from "./chunk-4COI4L2Y.js";
+import {
+  getMatrixRuntime
+} from "./chunk-ZGAUVPAB.js";
+import {
+  init_shims
+} from "./chunk-G4TIS2SC.js";
+
+// src/matrix/actions/verification.ts
+init_shims();
+import { normalizeOptionalString } from "openclaw/plugin-sdk/text-runtime";
+function requireCrypto(client, opts) {
+  if (!client.crypto) {
+    const cfg = opts.cfg ?? getMatrixRuntime().config.loadConfig();
+    throw new Error(formatMatrixEncryptionUnavailableError(cfg, opts.accountId));
+  }
+  return client.crypto;
+}
+function resolveVerificationId(input) {
+  const normalized = input.trim();
+  if (!normalized) {
+    throw new Error("Matrix verification request id is required");
+  }
+  return normalized;
+}
+async function listMatrixVerifications(opts = {}) {
+  return await withStartedActionClient(opts, async (client) => {
+    const crypto = requireCrypto(client, opts);
+    return await crypto.listVerifications();
+  });
+}
+async function requestMatrixVerification(params = {}) {
+  return await withStartedActionClient(params, async (client) => {
+    const crypto = requireCrypto(client, params);
+    const ownUser = params.ownUser ?? (!params.userId && !params.deviceId && !params.roomId);
+    return await crypto.requestVerification({
+      ownUser,
+      userId: normalizeOptionalString(params.userId),
+      deviceId: normalizeOptionalString(params.deviceId),
+      roomId: normalizeOptionalString(params.roomId)
+    });
+  });
+}
+async function acceptMatrixVerification(requestId, opts = {}) {
+  return await withStartedActionClient(opts, async (client) => {
+    const crypto = requireCrypto(client, opts);
+    return await crypto.acceptVerification(resolveVerificationId(requestId));
+  });
+}
+async function cancelMatrixVerification(requestId, opts = {}) {
+  return await withStartedActionClient(opts, async (client) => {
+    const crypto = requireCrypto(client, opts);
+    return await crypto.cancelVerification(resolveVerificationId(requestId), {
+      reason: normalizeOptionalString(opts.reason),
+      code: normalizeOptionalString(opts.code)
+    });
+  });
+}
+async function startMatrixVerification(requestId, opts = {}) {
+  return await withStartedActionClient(opts, async (client) => {
+    const crypto = requireCrypto(client, opts);
+    return await crypto.startVerification(resolveVerificationId(requestId), opts.method ?? "sas");
+  });
+}
+async function generateMatrixVerificationQr(requestId, opts = {}) {
+  return await withStartedActionClient(opts, async (client) => {
+    const crypto = requireCrypto(client, opts);
+    return await crypto.generateVerificationQr(resolveVerificationId(requestId));
+  });
+}
+async function scanMatrixVerificationQr(requestId, qrDataBase64, opts = {}) {
+  return await withStartedActionClient(opts, async (client) => {
+    const crypto = requireCrypto(client, opts);
+    const payload = qrDataBase64.trim();
+    if (!payload) {
+      throw new Error("Matrix QR data is required");
+    }
+    return await crypto.scanVerificationQr(resolveVerificationId(requestId), payload);
+  });
+}
+async function getMatrixVerificationSas(requestId, opts = {}) {
+  return await withStartedActionClient(opts, async (client) => {
+    const crypto = requireCrypto(client, opts);
+    return await crypto.getVerificationSas(resolveVerificationId(requestId));
+  });
+}
+async function confirmMatrixVerificationSas(requestId, opts = {}) {
+  return await withStartedActionClient(opts, async (client) => {
+    const crypto = requireCrypto(client, opts);
+    return await crypto.confirmVerificationSas(resolveVerificationId(requestId));
+  });
+}
+async function mismatchMatrixVerificationSas(requestId, opts = {}) {
+  return await withStartedActionClient(opts, async (client) => {
+    const crypto = requireCrypto(client, opts);
+    return await crypto.mismatchVerificationSas(resolveVerificationId(requestId));
+  });
+}
+async function confirmMatrixVerificationReciprocateQr(requestId, opts = {}) {
+  return await withStartedActionClient(opts, async (client) => {
+    const crypto = requireCrypto(client, opts);
+    return await crypto.confirmVerificationReciprocateQr(resolveVerificationId(requestId));
+  });
+}
+async function getMatrixEncryptionStatus(opts = {}) {
+  return await withStartedActionClient(opts, async (client) => {
+    const crypto = requireCrypto(client, opts);
+    const recoveryKey = await crypto.getRecoveryKey();
+    return {
+      encryptionEnabled: true,
+      recoveryKeyStored: Boolean(recoveryKey),
+      recoveryKeyCreatedAt: recoveryKey?.createdAt ?? null,
+      ...opts.includeRecoveryKey ? { recoveryKey: recoveryKey?.encodedPrivateKey ?? null } : {},
+      pendingVerifications: (await crypto.listVerifications()).length
+    };
+  });
+}
+async function getMatrixVerificationStatus(opts = {}) {
+  return await withStartedActionClient(opts, async (client) => {
+    const status = await client.getOwnDeviceVerificationStatus();
+    const payload = {
+      ...status,
+      pendingVerifications: client.crypto ? (await client.crypto.listVerifications()).length : 0
+    };
+    if (!opts.includeRecoveryKey) {
+      return payload;
+    }
+    const recoveryKey = client.crypto ? await client.crypto.getRecoveryKey() : null;
+    return {
+      ...payload,
+      recoveryKey: recoveryKey?.encodedPrivateKey ?? null
+    };
+  });
+}
+async function getMatrixRoomKeyBackupStatus(opts = {}) {
+  return await withStartedActionClient(
+    opts,
+    async (client) => await client.getRoomKeyBackupStatus()
+  );
+}
+async function verifyMatrixRecoveryKey(recoveryKey, opts = {}) {
+  return await withStartedActionClient(
+    opts,
+    async (client) => await client.verifyWithRecoveryKey(recoveryKey)
+  );
+}
+async function restoreMatrixRoomKeyBackup(opts = {}) {
+  return await withStartedActionClient(
+    opts,
+    async (client) => await client.restoreRoomKeyBackup({
+      recoveryKey: normalizeOptionalString(opts.recoveryKey)
+    })
+  );
+}
+async function resetMatrixRoomKeyBackup(opts = {}) {
+  return await withStartedActionClient(opts, async (client) => await client.resetRoomKeyBackup());
+}
+async function bootstrapMatrixVerification(opts = {}) {
+  return await withStartedActionClient(
+    opts,
+    async (client) => await client.bootstrapOwnDeviceVerification({
+      recoveryKey: normalizeOptionalString(opts.recoveryKey),
+      forceResetCrossSigning: opts.forceResetCrossSigning === true
+    })
+  );
+}
+
+export {
+  listMatrixVerifications,
+  requestMatrixVerification,
+  acceptMatrixVerification,
+  cancelMatrixVerification,
+  startMatrixVerification,
+  generateMatrixVerificationQr,
+  scanMatrixVerificationQr,
+  getMatrixVerificationSas,
+  confirmMatrixVerificationSas,
+  mismatchMatrixVerificationSas,
+  confirmMatrixVerificationReciprocateQr,
+  getMatrixEncryptionStatus,
+  getMatrixVerificationStatus,
+  getMatrixRoomKeyBackupStatus,
+  verifyMatrixRecoveryKey,
+  restoreMatrixRoomKeyBackup,
+  resetMatrixRoomKeyBackup,
+  bootstrapMatrixVerification
+};
+//# sourceMappingURL=chunk-4WCKVGQ5.js.map

package/dist/chunk-4WCKVGQ5.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../src/matrix/actions/verification.ts"],
+  "sourcesContent": ["import { normalizeOptionalString } from \"openclaw/plugin-sdk/text-runtime\";\nimport { getMatrixRuntime } from \"../../runtime.js\";\nimport type { CoreConfig } from \"../../types.js\";\nimport { formatMatrixEncryptionUnavailableError } from \"../encryption-guidance.js\";\nimport { withStartedActionClient } from \"./client.js\";\nimport type { MatrixActionClientOpts } from \"./types.js\";\n\nfunction requireCrypto(\n  client: import(\"../sdk.js\").MatrixClient,\n  opts: MatrixActionClientOpts,\n): NonNullable<import(\"../sdk.js\").MatrixClient[\"crypto\"]> {\n  if (!client.crypto) {\n    const cfg = opts.cfg ?? (getMatrixRuntime().config.loadConfig() as CoreConfig);\n    throw new Error(formatMatrixEncryptionUnavailableError(cfg, opts.accountId));\n  }\n  return client.crypto;\n}\n\nfunction resolveVerificationId(input: string): string {\n  const normalized = input.trim();\n  if (!normalized) {\n    throw new Error(\"Matrix verification request id is required\");\n  }\n  return normalized;\n}\n\nexport async function listMatrixVerifications(opts: MatrixActionClientOpts = {}) {\n  return await withStartedActionClient(opts, async (client) => {\n    const crypto = requireCrypto(client, opts);\n    return await crypto.listVerifications();\n  });\n}\n\nexport async function requestMatrixVerification(\n  params: MatrixActionClientOpts & {\n    ownUser?: boolean;\n    userId?: string;\n    deviceId?: string;\n    roomId?: string;\n  } = {},\n) {\n  return await withStartedActionClient(params, async (client) => {\n    const crypto = requireCrypto(client, params);\n    const ownUser = params.ownUser ?? (!params.userId && !params.deviceId && !params.roomId);\n    return await crypto.requestVerification({\n      ownUser,\n      userId: normalizeOptionalString(params.userId),\n      deviceId: normalizeOptionalString(params.deviceId),\n      roomId: normalizeOptionalString(params.roomId),\n    });\n  });\n}\n\nexport async function acceptMatrixVerification(\n  requestId: string,\n  opts: MatrixActionClientOpts = {},\n) {\n  return await withStartedActionClient(opts, async (client) => {\n    const crypto = requireCrypto(client, opts);\n    return await crypto.acceptVerification(resolveVerificationId(requestId));\n  });\n}\n\nexport async function cancelMatrixVerification(\n  requestId: string,\n  opts: MatrixActionClientOpts & { reason?: string; code?: string } = {},\n) {\n  return await withStartedActionClient(opts, async (client) => {\n    const crypto = requireCrypto(client, opts);\n    return await crypto.cancelVerification(resolveVerificationId(requestId), {\n      reason: normalizeOptionalString(opts.reason),\n      code: normalizeOptionalString(opts.code),\n    });\n  });\n}\n\nexport async function startMatrixVerification(\n  requestId: string,\n  opts: MatrixActionClientOpts & { method?: \"sas\" } = {},\n) {\n  return await withStartedActionClient(opts, async (client) => {\n    const crypto = requireCrypto(client, opts);\n    return await crypto.startVerification(resolveVerificationId(requestId), opts.method ?? \"sas\");\n  });\n}\n\nexport async function generateMatrixVerificationQr(\n  requestId: string,\n  opts: MatrixActionClientOpts = {},\n) {\n  return await withStartedActionClient(opts, async (client) => {\n    const crypto = requireCrypto(client, opts);\n    return await crypto.generateVerificationQr(resolveVerificationId(requestId));\n  });\n}\n\nexport async function scanMatrixVerificationQr(\n  requestId: string,\n  qrDataBase64: string,\n  opts: MatrixActionClientOpts = {},\n) {\n  return await withStartedActionClient(opts, async (client) => {\n    const crypto = requireCrypto(client, opts);\n    const payload = qrDataBase64.trim();\n    if (!payload) {\n      throw new Error(\"Matrix QR data is required\");\n    }\n    return await crypto.scanVerificationQr(resolveVerificationId(requestId), payload);\n  });\n}\n\nexport async function getMatrixVerificationSas(\n  requestId: string,\n  opts: MatrixActionClientOpts = {},\n) {\n  return await withStartedActionClient(opts, async (client) => {\n    const crypto = requireCrypto(client, opts);\n    return await crypto.getVerificationSas(resolveVerificationId(requestId));\n  });\n}\n\nexport async function confirmMatrixVerificationSas(\n  requestId: string,\n  opts: MatrixActionClientOpts = {},\n) {\n  return await withStartedActionClient(opts, async (client) => {\n    const crypto = requireCrypto(client, opts);\n    return await crypto.confirmVerificationSas(resolveVerificationId(requestId));\n  });\n}\n\nexport async function mismatchMatrixVerificationSas(\n  requestId: string,\n  opts: MatrixActionClientOpts = {},\n) {\n  return await withStartedActionClient(opts, async (client) => {\n    const crypto = requireCrypto(client, opts);\n    return await crypto.mismatchVerificationSas(resolveVerificationId(requestId));\n  });\n}\n\nexport async function confirmMatrixVerificationReciprocateQr(\n  requestId: string,\n  opts: MatrixActionClientOpts = {},\n) {\n  return await withStartedActionClient(opts, async (client) => {\n    const crypto = requireCrypto(client, opts);\n    return await crypto.confirmVerificationReciprocateQr(resolveVerificationId(requestId));\n  });\n}\n\nexport async function getMatrixEncryptionStatus(\n  opts: MatrixActionClientOpts & { includeRecoveryKey?: boolean } = {},\n) {\n  return await withStartedActionClient(opts, async (client) => {\n    const crypto = requireCrypto(client, opts);\n    const recoveryKey = await crypto.getRecoveryKey();\n    return {\n      encryptionEnabled: true,\n      recoveryKeyStored: Boolean(recoveryKey),\n      recoveryKeyCreatedAt: recoveryKey?.createdAt ?? null,\n      ...(opts.includeRecoveryKey ? { recoveryKey: recoveryKey?.encodedPrivateKey ?? null } : {}),\n      pendingVerifications: (await crypto.listVerifications()).length,\n    };\n  });\n}\n\nexport async function getMatrixVerificationStatus(\n  opts: MatrixActionClientOpts & { includeRecoveryKey?: boolean } = {},\n) {\n  return await withStartedActionClient(opts, async (client) => {\n    const status = await client.getOwnDeviceVerificationStatus();\n    const payload = {\n      ...status,\n      pendingVerifications: client.crypto ? (await client.crypto.listVerifications()).length : 0,\n    };\n    if (!opts.includeRecoveryKey) {\n      return payload;\n    }\n    const recoveryKey = client.crypto ? await client.crypto.getRecoveryKey() : null;\n    return {\n      ...payload,\n      recoveryKey: recoveryKey?.encodedPrivateKey ?? null,\n    };\n  });\n}\n\nexport async function getMatrixRoomKeyBackupStatus(opts: MatrixActionClientOpts = {}) {\n  return await withStartedActionClient(\n    opts,\n    async (client) => await client.getRoomKeyBackupStatus(),\n  );\n}\n\nexport async function verifyMatrixRecoveryKey(\n  recoveryKey: string,\n  opts: MatrixActionClientOpts = {},\n) {\n  return await withStartedActionClient(\n    opts,\n    async (client) => await client.verifyWithRecoveryKey(recoveryKey),\n  );\n}\n\nexport async function restoreMatrixRoomKeyBackup(\n  opts: MatrixActionClientOpts & {\n    recoveryKey?: string;\n  } = {},\n) {\n  return await withStartedActionClient(\n    opts,\n    async (client) =>\n      await client.restoreRoomKeyBackup({\n        recoveryKey: normalizeOptionalString(opts.recoveryKey),\n      }),\n  );\n}\n\nexport async function resetMatrixRoomKeyBackup(opts: MatrixActionClientOpts = {}) {\n  return await withStartedActionClient(opts, async (client) => await client.resetRoomKeyBackup());\n}\n\nexport async function bootstrapMatrixVerification(\n  opts: MatrixActionClientOpts & {\n    recoveryKey?: string;\n    forceResetCrossSigning?: boolean;\n  } = {},\n) {\n  return await withStartedActionClient(\n    opts,\n    async (client) =>\n      await client.bootstrapOwnDeviceVerification({\n        recoveryKey: normalizeOptionalString(opts.recoveryKey),\n        forceResetCrossSigning: opts.forceResetCrossSigning === true,\n      }),\n  );\n}\n"],
+  "mappings": ";;;;;;;;;;;;;;AAAA;AAAA,SAAS,+BAA+B;AAOxC,SAAS,cACP,QACA,MACyD;AACzD,MAAI,CAAC,OAAO,QAAQ;AAClB,UAAM,MAAM,KAAK,OAAQ,iBAAiB,EAAE,OAAO,WAAW;AAC9D,UAAM,IAAI,MAAM,uCAAuC,KAAK,KAAK,SAAS,CAAC;AAAA,EAC7E;AACA,SAAO,OAAO;AAChB;AAEA,SAAS,sBAAsB,OAAuB;AACpD,QAAM,aAAa,MAAM,KAAK;AAC9B,MAAI,CAAC,YAAY;AACf,UAAM,IAAI,MAAM,4CAA4C;AAAA,EAC9D;AACA,SAAO;AACT;AAEA,eAAsB,wBAAwB,OAA+B,CAAC,GAAG;AAC/E,SAAO,MAAM,wBAAwB,MAAM,OAAO,WAAW;AAC3D,UAAM,SAAS,cAAc,QAAQ,IAAI;AACzC,WAAO,MAAM,OAAO,kBAAkB;AAAA,EACxC,CAAC;AACH;AAEA,eAAsB,0BACpB,SAKI,CAAC,GACL;AACA,SAAO,MAAM,wBAAwB,QAAQ,OAAO,WAAW;AAC7D,UAAM,SAAS,cAAc,QAAQ,MAAM;AAC3C,UAAM,UAAU,OAAO,YAAY,CAAC,OAAO,UAAU,CAAC,OAAO,YAAY,CAAC,OAAO;AACjF,WAAO,MAAM,OAAO,oBAAoB;AAAA,MACtC;AAAA,MACA,QAAQ,wBAAwB,OAAO,MAAM;AAAA,MAC7C,UAAU,wBAAwB,OAAO,QAAQ;AAAA,MACjD,QAAQ,wBAAwB,OAAO,MAAM;AAAA,IAC/C,CAAC;AAAA,EACH,CAAC;AACH;AAEA,eAAsB,yBACpB,WACA,OAA+B,CAAC,GAChC;AACA,SAAO,MAAM,wBAAwB,MAAM,OAAO,WAAW;AAC3D,UAAM,SAAS,cAAc,QAAQ,IAAI;AACzC,WAAO,MAAM,OAAO,mBAAmB,sBAAsB,SAAS,CAAC;AAAA,EACzE,CAAC;AACH;AAEA,eAAsB,yBACpB,WACA,OAAoE,CAAC,GACrE;AACA,SAAO,MAAM,wBAAwB,MAAM,OAAO,WAAW;AAC3D,UAAM,SAAS,cAAc,QAAQ,IAAI;AACzC,WAAO,MAAM,OAAO,mBAAmB,sBAAsB,SAAS,GAAG;AAAA,MACvE,QAAQ,wBAAwB,KAAK,MAAM;AAAA,MAC3C,MAAM,wBAAwB,KAAK,IAAI;AAAA,IACzC,CAAC;AAAA,EACH,CAAC;AACH;AAEA,eAAsB,wBACpB,WACA,OAAoD,CAAC,GACrD;AACA,SAAO,MAAM,wBAAwB,MAAM,OAAO,WAAW;AAC3D,UAAM,SAAS,cAAc,QAAQ,IAAI;AACzC,WAAO,MAAM,OAAO,kBAAkB,sBAAsB,SAAS,GAAG,KAAK,UAAU,KAAK;AAAA,EAC9F,CAAC;AACH;AAEA,eAAsB,6BACpB,WACA,OAA+B,CAAC,GAChC;AACA,SAAO,MAAM,wBAAwB,MAAM,OAAO,WAAW;AAC3D,UAAM,SAAS,cAAc,QAAQ,IAAI;AACzC,WAAO,MAAM,OAAO,uBAAuB,sBAAsB,SAAS,CAAC;AAAA,EAC7E,CAAC;AACH;AAEA,eAAsB,yBACpB,WACA,cACA,OAA+B,CAAC,GAChC;AACA,SAAO,MAAM,wBAAwB,MAAM,OAAO,WAAW;AAC3D,UAAM,SAAS,cAAc,QAAQ,IAAI;AACzC,UAAM,UAAU,aAAa,KAAK;AAClC,QAAI,CAAC,SAAS;AACZ,YAAM,IAAI,MAAM,4BAA4B;AAAA,IAC9C;AACA,WAAO,MAAM,OAAO,mBAAmB,sBAAsB,SAAS,GAAG,OAAO;AAAA,EAClF,CAAC;AACH;AAEA,eAAsB,yBACpB,WACA,OAA+B,CAAC,GAChC;AACA,SAAO,MAAM,wBAAwB,MAAM,OAAO,WAAW;AAC3D,UAAM,SAAS,cAAc,QAAQ,IAAI;AACzC,WAAO,MAAM,OAAO,mBAAmB,sBAAsB,SAAS,CAAC;AAAA,EACzE,CAAC;AACH;AAEA,eAAsB,6BACpB,WACA,OAA+B,CAAC,GAChC;AACA,SAAO,MAAM,wBAAwB,MAAM,OAAO,WAAW;AAC3D,UAAM,SAAS,cAAc,QAAQ,IAAI;AACzC,WAAO,MAAM,OAAO,uBAAuB,sBAAsB,SAAS,CAAC;AAAA,EAC7E,CAAC;AACH;AAEA,eAAsB,8BACpB,WACA,OAA+B,CAAC,GAChC;AACA,SAAO,MAAM,wBAAwB,MAAM,OAAO,WAAW;AAC3D,UAAM,SAAS,cAAc,QAAQ,IAAI;AACzC,WAAO,MAAM,OAAO,wBAAwB,sBAAsB,SAAS,CAAC;AAAA,EAC9E,CAAC;AACH;AAEA,eAAsB,uCACpB,WACA,OAA+B,CAAC,GAChC;AACA,SAAO,MAAM,wBAAwB,MAAM,OAAO,WAAW;AAC3D,UAAM,SAAS,cAAc,QAAQ,IAAI;AACzC,WAAO,MAAM,OAAO,iCAAiC,sBAAsB,SAAS,CAAC;AAAA,EACvF,CAAC;AACH;AAEA,eAAsB,0BACpB,OAAkE,CAAC,GACnE;AACA,SAAO,MAAM,wBAAwB,MAAM,OAAO,WAAW;AAC3D,UAAM,SAAS,cAAc,QAAQ,IAAI;AACzC,UAAM,cAAc,MAAM,OAAO,eAAe;AAChD,WAAO;AAAA,MACL,mBAAmB;AAAA,MACnB,mBAAmB,QAAQ,WAAW;AAAA,MACtC,sBAAsB,aAAa,aAAa;AAAA,MAChD,GAAI,KAAK,qBAAqB,EAAE,aAAa,aAAa,qBAAqB,KAAK,IAAI,CAAC;AAAA,MACzF,uBAAuB,MAAM,OAAO,kBAAkB,GAAG;AAAA,IAC3D;AAAA,EACF,CAAC;AACH;AAEA,eAAsB,4BACpB,OAAkE,CAAC,GACnE;AACA,SAAO,MAAM,wBAAwB,MAAM,OAAO,WAAW;AAC3D,UAAM,SAAS,MAAM,OAAO,+BAA+B;AAC3D,UAAM,UAAU;AAAA,MACd,GAAG;AAAA,MACH,sBAAsB,OAAO,UAAU,MAAM,OAAO,OAAO,kBAAkB,GAAG,SAAS;AAAA,IAC3F;AACA,QAAI,CAAC,KAAK,oBAAoB;AAC5B,aAAO;AAAA,IACT;AACA,UAAM,cAAc,OAAO,SAAS,MAAM,OAAO,OAAO,eAAe,IAAI;AAC3E,WAAO;AAAA,MACL,GAAG;AAAA,MACH,aAAa,aAAa,qBAAqB;AAAA,IACjD;AAAA,EACF,CAAC;AACH;AAEA,eAAsB,6BAA6B,OAA+B,CAAC,GAAG;AACpF,SAAO,MAAM;AAAA,IACX;AAAA,IACA,OAAO,WAAW,MAAM,OAAO,uBAAuB;AAAA,EACxD;AACF;AAEA,eAAsB,wBACpB,aACA,OAA+B,CAAC,GAChC;AACA,SAAO,MAAM;AAAA,IACX;AAAA,IACA,OAAO,WAAW,MAAM,OAAO,sBAAsB,WAAW;AAAA,EAClE;AACF;AAEA,eAAsB,2BACpB,OAEI,CAAC,GACL;AACA,SAAO,MAAM;AAAA,IACX;AAAA,IACA,OAAO,WACL,MAAM,OAAO,qBAAqB;AAAA,MAChC,aAAa,wBAAwB,KAAK,WAAW;AAAA,IACvD,CAAC;AAAA,EACL;AACF;AAEA,eAAsB,yBAAyB,OAA+B,CAAC,GAAG;AAChF,SAAO,MAAM,wBAAwB,MAAM,OAAO,WAAW,MAAM,OAAO,mBAAmB,CAAC;AAChG;AAEA,eAAsB,4BACpB,OAGI,CAAC,GACL;AACA,SAAO,MAAM;AAAA,IACX;AAAA,IACA,OAAO,WACL,MAAM,OAAO,+BAA+B;AAAA,MAC1C,aAAa,wBAAwB,KAAK,WAAW;AAAA,MACrD,wBAAwB,KAAK,2BAA2B;AAAA,IAC1D,CAAC;AAAA,EACL;AACF;",
+  "names": []
+}