@archipelagolab/lobi 1.0.1 → 1.0.6

package/dist/chunk-AUUABFHL.js

@@ -0,0 +1,124 @@
+import {
+  chunkMatrixText,
+  sendMessageMatrix
+} from "./chunk-QAR5POXD.js";
+import {
+  getMatrixRuntime
+} from "./chunk-ZGAUVPAB.js";
+import {
+  init_shims
+} from "./chunk-G4TIS2SC.js";
+
+// src/matrix/monitor/replies.ts
+init_shims();
+import { normalizeLowercaseStringOrEmpty } from "openclaw/plugin-sdk/text-runtime";
+var THINKING_TAG_RE = /<\s*\/?\s*(?:think(?:ing)?|thought|antthinking)\b[^<>]*>/gi;
+var THINKING_BLOCK_RE = /<\s*(?:think(?:ing)?|thought|antthinking)\b[^<>]*>[\s\S]*?<\s*\/\s*(?:think(?:ing)?|thought|antthinking)\s*>/gi;
+function shouldSuppressReasoningReplyText(text) {
+  if (typeof text !== "string") {
+    return false;
+  }
+  const trimmedStart = text.trimStart();
+  if (!trimmedStart) {
+    return false;
+  }
+  if (normalizeLowercaseStringOrEmpty(trimmedStart).startsWith("reasoning:")) {
+    return true;
+  }
+  THINKING_TAG_RE.lastIndex = 0;
+  if (!THINKING_TAG_RE.test(text)) {
+    return false;
+  }
+  THINKING_BLOCK_RE.lastIndex = 0;
+  const withoutThinkingBlocks = text.replace(THINKING_BLOCK_RE, "");
+  THINKING_TAG_RE.lastIndex = 0;
+  return !withoutThinkingBlocks.replace(THINKING_TAG_RE, "").trim();
+}
+async function deliverMatrixReplies(params) {
+  const core = getMatrixRuntime();
+  const tableMode = params.tableMode ?? core.channel.text.resolveMarkdownTableMode({
+    cfg: params.cfg,
+    channel: "matrix",
+    accountId: params.accountId
+  });
+  const logVerbose = (message) => {
+    if (core.logging.shouldLogVerbose()) {
+      params.runtime.log?.(message);
+    }
+  };
+  let hasReplied = false;
+  let deliveredAny = false;
+  for (const reply of params.replies) {
+    if (reply.isReasoning === true || shouldSuppressReasoningReplyText(reply.text)) {
+      logVerbose("matrix reply suppressed as reasoning-only");
+      continue;
+    }
+    const hasMedia = Boolean(reply?.mediaUrl) || (reply?.mediaUrls?.length ?? 0) > 0;
+    if (!reply?.text && !hasMedia) {
+      if (reply?.audioAsVoice) {
+        logVerbose("matrix reply has audioAsVoice without media/text; skipping");
+        continue;
+      }
+      params.runtime.error?.("matrix reply missing text/media");
+      continue;
+    }
+    const replyToIdRaw = reply.replyToId?.trim();
+    const replyToId = params.threadId || params.replyToMode === "off" ? void 0 : replyToIdRaw;
+    const rawText = reply.text ?? "";
+    const mediaList = reply.mediaUrls?.length ? reply.mediaUrls : reply.mediaUrl ? [reply.mediaUrl] : [];
+    const shouldIncludeReply = (id) => Boolean(id) && (params.replyToMode === "all" || !hasReplied);
+    const replyToIdForReply = shouldIncludeReply(replyToId) ? replyToId : void 0;
+    if (mediaList.length === 0) {
+      let sentTextChunk = false;
+      const { chunks } = chunkMatrixText(rawText, {
+        cfg: params.cfg,
+        accountId: params.accountId,
+        tableMode
+      });
+      for (const chunk of chunks) {
+        const trimmed = chunk.trim();
+        if (!trimmed) {
+          continue;
+        }
+        await sendMessageMatrix(params.roomId, trimmed, {
+          client: params.client,
+          cfg: params.cfg,
+          replyToId: replyToIdForReply,
+          threadId: params.threadId,
+          accountId: params.accountId
+        });
+        deliveredAny = true;
+        sentTextChunk = true;
+      }
+      if (replyToIdForReply && !hasReplied && sentTextChunk) {
+        hasReplied = true;
+      }
+      continue;
+    }
+    let first = true;
+    for (const mediaUrl of mediaList) {
+      const caption = first ? rawText : "";
+      await sendMessageMatrix(params.roomId, caption, {
+        client: params.client,
+        cfg: params.cfg,
+        mediaUrl,
+        mediaLocalRoots: params.mediaLocalRoots,
+        replyToId: replyToIdForReply,
+        threadId: params.threadId,
+        audioAsVoice: reply.audioAsVoice,
+        accountId: params.accountId
+      });
+      deliveredAny = true;
+      first = false;
+    }
+    if (replyToIdForReply && !hasReplied) {
+      hasReplied = true;
+    }
+  }
+  return deliveredAny;
+}
+
+export {
+  deliverMatrixReplies
+};
+//# sourceMappingURL=chunk-AUUABFHL.js.map

package/dist/chunk-AUUABFHL.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../src/matrix/monitor/replies.ts"],
+  "sourcesContent": ["import { normalizeLowercaseStringOrEmpty } from \"openclaw/plugin-sdk/text-runtime\";\nimport { getMatrixRuntime } from \"../../runtime.js\";\nimport type { MatrixClient } from \"../sdk.js\";\nimport { chunkMatrixText, sendMessageMatrix } from \"../send.js\";\nimport type { MarkdownTableMode, OpenClawConfig, ReplyPayload, RuntimeEnv } from \"./runtime-api.js\";\n\nconst THINKING_TAG_RE = /<\\s*\\/?\\s*(?:think(?:ing)?|thought|antthinking)\\b[^<>]*>/gi;\nconst THINKING_BLOCK_RE =\n  /<\\s*(?:think(?:ing)?|thought|antthinking)\\b[^<>]*>[\\s\\S]*?<\\s*\\/\\s*(?:think(?:ing)?|thought|antthinking)\\s*>/gi;\n\nfunction shouldSuppressReasoningReplyText(text?: string): boolean {\n  if (typeof text !== \"string\") {\n    return false;\n  }\n  const trimmedStart = text.trimStart();\n  if (!trimmedStart) {\n    return false;\n  }\n  if (normalizeLowercaseStringOrEmpty(trimmedStart).startsWith(\"reasoning:\")) {\n    return true;\n  }\n  THINKING_TAG_RE.lastIndex = 0;\n  if (!THINKING_TAG_RE.test(text)) {\n    return false;\n  }\n  THINKING_BLOCK_RE.lastIndex = 0;\n  const withoutThinkingBlocks = text.replace(THINKING_BLOCK_RE, \"\");\n  THINKING_TAG_RE.lastIndex = 0;\n  return !withoutThinkingBlocks.replace(THINKING_TAG_RE, \"\").trim();\n}\n\nexport async function deliverMatrixReplies(params: {\n  cfg: OpenClawConfig;\n  replies: ReplyPayload[];\n  roomId: string;\n  client: MatrixClient;\n  runtime: RuntimeEnv;\n  textLimit: number;\n  replyToMode: \"off\" | \"first\" | \"all\" | \"batched\";\n  threadId?: string;\n  accountId?: string;\n  mediaLocalRoots?: readonly string[];\n  tableMode?: MarkdownTableMode;\n}): Promise<boolean> {\n  const core = getMatrixRuntime();\n  const tableMode =\n    params.tableMode ??\n    core.channel.text.resolveMarkdownTableMode({\n      cfg: params.cfg,\n      channel: \"matrix\",\n      accountId: params.accountId,\n    });\n  const logVerbose = (message: string) => {\n    if (core.logging.shouldLogVerbose()) {\n      params.runtime.log?.(message);\n    }\n  };\n  let hasReplied = false;\n  let deliveredAny = false;\n  for (const reply of params.replies) {\n    if (reply.isReasoning === true || shouldSuppressReasoningReplyText(reply.text)) {\n      logVerbose(\"matrix reply suppressed as reasoning-only\");\n      continue;\n    }\n    const hasMedia = Boolean(reply?.mediaUrl) || (reply?.mediaUrls?.length ?? 0) > 0;\n    if (!reply?.text && !hasMedia) {\n      if (reply?.audioAsVoice) {\n        logVerbose(\"matrix reply has audioAsVoice without media/text; skipping\");\n        continue;\n      }\n      params.runtime.error?.(\"matrix reply missing text/media\");\n      continue;\n    }\n    const replyToIdRaw = reply.replyToId?.trim();\n    const replyToId = params.threadId || params.replyToMode === \"off\" ? undefined : replyToIdRaw;\n    const rawText = reply.text ?? \"\";\n    const mediaList = reply.mediaUrls?.length\n      ? reply.mediaUrls\n      : reply.mediaUrl\n        ? [reply.mediaUrl]\n        : [];\n\n    const shouldIncludeReply = (id?: string) =>\n      Boolean(id) && (params.replyToMode === \"all\" || !hasReplied);\n    const replyToIdForReply = shouldIncludeReply(replyToId) ? replyToId : undefined;\n\n    if (mediaList.length === 0) {\n      let sentTextChunk = false;\n      const { chunks } = chunkMatrixText(rawText, {\n        cfg: params.cfg,\n        accountId: params.accountId,\n        tableMode,\n      });\n      for (const chunk of chunks) {\n        const trimmed = chunk.trim();\n        if (!trimmed) {\n          continue;\n        }\n        await sendMessageMatrix(params.roomId, trimmed, {\n          client: params.client,\n          cfg: params.cfg,\n          replyToId: replyToIdForReply,\n          threadId: params.threadId,\n          accountId: params.accountId,\n        });\n        deliveredAny = true;\n        sentTextChunk = true;\n      }\n      if (replyToIdForReply && !hasReplied && sentTextChunk) {\n        hasReplied = true;\n      }\n      continue;\n    }\n\n    let first = true;\n    for (const mediaUrl of mediaList) {\n      const caption = first ? rawText : \"\";\n      await sendMessageMatrix(params.roomId, caption, {\n        client: params.client,\n        cfg: params.cfg,\n        mediaUrl,\n        mediaLocalRoots: params.mediaLocalRoots,\n        replyToId: replyToIdForReply,\n        threadId: params.threadId,\n        audioAsVoice: reply.audioAsVoice,\n        accountId: params.accountId,\n      });\n      deliveredAny = true;\n      first = false;\n    }\n    if (replyToIdForReply && !hasReplied) {\n      hasReplied = true;\n    }\n  }\n  return deliveredAny;\n}\n"],
+  "mappings": ";;;;;;;;;;;;AAAA;AAAA,SAAS,uCAAuC;AAMhD,IAAM,kBAAkB;AACxB,IAAM,oBACJ;AAEF,SAAS,iCAAiC,MAAwB;AAChE,MAAI,OAAO,SAAS,UAAU;AAC5B,WAAO;AAAA,EACT;AACA,QAAM,eAAe,KAAK,UAAU;AACpC,MAAI,CAAC,cAAc;AACjB,WAAO;AAAA,EACT;AACA,MAAI,gCAAgC,YAAY,EAAE,WAAW,YAAY,GAAG;AAC1E,WAAO;AAAA,EACT;AACA,kBAAgB,YAAY;AAC5B,MAAI,CAAC,gBAAgB,KAAK,IAAI,GAAG;AAC/B,WAAO;AAAA,EACT;AACA,oBAAkB,YAAY;AAC9B,QAAM,wBAAwB,KAAK,QAAQ,mBAAmB,EAAE;AAChE,kBAAgB,YAAY;AAC5B,SAAO,CAAC,sBAAsB,QAAQ,iBAAiB,EAAE,EAAE,KAAK;AAClE;AAEA,eAAsB,qBAAqB,QAYtB;AACnB,QAAM,OAAO,iBAAiB;AAC9B,QAAM,YACJ,OAAO,aACP,KAAK,QAAQ,KAAK,yBAAyB;AAAA,IACzC,KAAK,OAAO;AAAA,IACZ,SAAS;AAAA,IACT,WAAW,OAAO;AAAA,EACpB,CAAC;AACH,QAAM,aAAa,CAAC,YAAoB;AACtC,QAAI,KAAK,QAAQ,iBAAiB,GAAG;AACnC,aAAO,QAAQ,MAAM,OAAO;AAAA,IAC9B;AAAA,EACF;AACA,MAAI,aAAa;AACjB,MAAI,eAAe;AACnB,aAAW,SAAS,OAAO,SAAS;AAClC,QAAI,MAAM,gBAAgB,QAAQ,iCAAiC,MAAM,IAAI,GAAG;AAC9E,iBAAW,2CAA2C;AACtD;AAAA,IACF;AACA,UAAM,WAAW,QAAQ,OAAO,QAAQ,MAAM,OAAO,WAAW,UAAU,KAAK;AAC/E,QAAI,CAAC,OAAO,QAAQ,CAAC,UAAU;AAC7B,UAAI,OAAO,cAAc;AACvB,mBAAW,4DAA4D;AACvE;AAAA,MACF;AACA,aAAO,QAAQ,QAAQ,iCAAiC;AACxD;AAAA,IACF;AACA,UAAM,eAAe,MAAM,WAAW,KAAK;AAC3C,UAAM,YAAY,OAAO,YAAY,OAAO,gBAAgB,QAAQ,SAAY;AAChF,UAAM,UAAU,MAAM,QAAQ;AAC9B,UAAM,YAAY,MAAM,WAAW,SAC/B,MAAM,YACN,MAAM,WACJ,CAAC,MAAM,QAAQ,IACf,CAAC;AAEP,UAAM,qBAAqB,CAAC,OAC1B,QAAQ,EAAE,MAAM,OAAO,gBAAgB,SAAS,CAAC;AACnD,UAAM,oBAAoB,mBAAmB,SAAS,IAAI,YAAY;AAEtE,QAAI,UAAU,WAAW,GAAG;AAC1B,UAAI,gBAAgB;AACpB,YAAM,EAAE,OAAO,IAAI,gBAAgB,SAAS;AAAA,QAC1C,KAAK,OAAO;AAAA,QACZ,WAAW,OAAO;AAAA,QAClB;AAAA,MACF,CAAC;AACD,iBAAW,SAAS,QAAQ;AAC1B,cAAM,UAAU,MAAM,KAAK;AAC3B,YAAI,CAAC,SAAS;AACZ;AAAA,QACF;AACA,cAAM,kBAAkB,OAAO,QAAQ,SAAS;AAAA,UAC9C,QAAQ,OAAO;AAAA,UACf,KAAK,OAAO;AAAA,UACZ,WAAW;AAAA,UACX,UAAU,OAAO;AAAA,UACjB,WAAW,OAAO;AAAA,QACpB,CAAC;AACD,uBAAe;AACf,wBAAgB;AAAA,MAClB;AACA,UAAI,qBAAqB,CAAC,cAAc,eAAe;AACrD,qBAAa;AAAA,MACf;AACA;AAAA,IACF;AAEA,QAAI,QAAQ;AACZ,eAAW,YAAY,WAAW;AAChC,YAAM,UAAU,QAAQ,UAAU;AAClC,YAAM,kBAAkB,OAAO,QAAQ,SAAS;AAAA,QAC9C,QAAQ,OAAO;AAAA,QACf,KAAK,OAAO;AAAA,QACZ;AAAA,QACA,iBAAiB,OAAO;AAAA,QACxB,WAAW;AAAA,QACX,UAAU,OAAO;AAAA,QACjB,cAAc,MAAM;AAAA,QACpB,WAAW,OAAO;AAAA,MACpB,CAAC;AACD,qBAAe;AACf,cAAQ;AAAA,IACV;AACA,QAAI,qBAAqB,CAAC,YAAY;AACpC,mBAAa;AAAA,IACf;AAAA,EACF;AACA,SAAO;AACT;",
+  "names": []
+}

package/dist/chunk-AWW3YUGJ.js

@@ -0,0 +1,193 @@
+import {
+  formatMatrixEncryptionUnavailableError
+} from "./chunk-BU2CTWBG.js";
+import {
+  withStartedActionClient
+} from "./chunk-REVXXWAS.js";
+import {
+  getMatrixRuntime
+} from "./chunk-FHNEN6IR.js";
+import {
+  init_shims
+} from "./chunk-7FLQSTPG.js";
+
+// src/matrix/actions/verification.ts
+init_shims();
+import { normalizeOptionalString } from "openclaw/plugin-sdk/text-runtime";
+function requireCrypto(client, opts) {
+  if (!client.crypto) {
+    const cfg = opts.cfg ?? getMatrixRuntime().config.loadConfig();
+    throw new Error(formatMatrixEncryptionUnavailableError(cfg, opts.accountId));
+  }
+  return client.crypto;
+}
+function resolveVerificationId(input) {
+  const normalized = input.trim();
+  if (!normalized) {
+    throw new Error("Matrix verification request id is required");
+  }
+  return normalized;
+}
+async function listMatrixVerifications(opts = {}) {
+  return await withStartedActionClient(opts, async (client) => {
+    const crypto = requireCrypto(client, opts);
+    return await crypto.listVerifications();
+  });
+}
+async function requestMatrixVerification(params = {}) {
+  return await withStartedActionClient(params, async (client) => {
+    const crypto = requireCrypto(client, params);
+    const ownUser = params.ownUser ?? (!params.userId && !params.deviceId && !params.roomId);
+    return await crypto.requestVerification({
+      ownUser,
+      userId: normalizeOptionalString(params.userId),
+      deviceId: normalizeOptionalString(params.deviceId),
+      roomId: normalizeOptionalString(params.roomId)
+    });
+  });
+}
+async function acceptMatrixVerification(requestId, opts = {}) {
+  return await withStartedActionClient(opts, async (client) => {
+    const crypto = requireCrypto(client, opts);
+    return await crypto.acceptVerification(resolveVerificationId(requestId));
+  });
+}
+async function cancelMatrixVerification(requestId, opts = {}) {
+  return await withStartedActionClient(opts, async (client) => {
+    const crypto = requireCrypto(client, opts);
+    return await crypto.cancelVerification(resolveVerificationId(requestId), {
+      reason: normalizeOptionalString(opts.reason),
+      code: normalizeOptionalString(opts.code)
+    });
+  });
+}
+async function startMatrixVerification(requestId, opts = {}) {
+  return await withStartedActionClient(opts, async (client) => {
+    const crypto = requireCrypto(client, opts);
+    return await crypto.startVerification(resolveVerificationId(requestId), opts.method ?? "sas");
+  });
+}
+async function generateMatrixVerificationQr(requestId, opts = {}) {
+  return await withStartedActionClient(opts, async (client) => {
+    const crypto = requireCrypto(client, opts);
+    return await crypto.generateVerificationQr(resolveVerificationId(requestId));
+  });
+}
+async function scanMatrixVerificationQr(requestId, qrDataBase64, opts = {}) {
+  return await withStartedActionClient(opts, async (client) => {
+    const crypto = requireCrypto(client, opts);
+    const payload = qrDataBase64.trim();
+    if (!payload) {
+      throw new Error("Matrix QR data is required");
+    }
+    return await crypto.scanVerificationQr(resolveVerificationId(requestId), payload);
+  });
+}
+async function getMatrixVerificationSas(requestId, opts = {}) {
+  return await withStartedActionClient(opts, async (client) => {
+    const crypto = requireCrypto(client, opts);
+    return await crypto.getVerificationSas(resolveVerificationId(requestId));
+  });
+}
+async function confirmMatrixVerificationSas(requestId, opts = {}) {
+  return await withStartedActionClient(opts, async (client) => {
+    const crypto = requireCrypto(client, opts);
+    return await crypto.confirmVerificationSas(resolveVerificationId(requestId));
+  });
+}
+async function mismatchMatrixVerificationSas(requestId, opts = {}) {
+  return await withStartedActionClient(opts, async (client) => {
+    const crypto = requireCrypto(client, opts);
+    return await crypto.mismatchVerificationSas(resolveVerificationId(requestId));
+  });
+}
+async function confirmMatrixVerificationReciprocateQr(requestId, opts = {}) {
+  return await withStartedActionClient(opts, async (client) => {
+    const crypto = requireCrypto(client, opts);
+    return await crypto.confirmVerificationReciprocateQr(resolveVerificationId(requestId));
+  });
+}
+async function getMatrixEncryptionStatus(opts = {}) {
+  return await withStartedActionClient(opts, async (client) => {
+    const crypto = requireCrypto(client, opts);
+    const recoveryKey = await crypto.getRecoveryKey();
+    return {
+      encryptionEnabled: true,
+      recoveryKeyStored: Boolean(recoveryKey),
+      recoveryKeyCreatedAt: recoveryKey?.createdAt ?? null,
+      ...opts.includeRecoveryKey ? { recoveryKey: recoveryKey?.encodedPrivateKey ?? null } : {},
+      pendingVerifications: (await crypto.listVerifications()).length
+    };
+  });
+}
+async function getMatrixVerificationStatus(opts = {}) {
+  return await withStartedActionClient(opts, async (client) => {
+    const status = await client.getOwnDeviceVerificationStatus();
+    const payload = {
+      ...status,
+      pendingVerifications: client.crypto ? (await client.crypto.listVerifications()).length : 0
+    };
+    if (!opts.includeRecoveryKey) {
+      return payload;
+    }
+    const recoveryKey = client.crypto ? await client.crypto.getRecoveryKey() : null;
+    return {
+      ...payload,
+      recoveryKey: recoveryKey?.encodedPrivateKey ?? null
+    };
+  });
+}
+async function getMatrixRoomKeyBackupStatus(opts = {}) {
+  return await withStartedActionClient(
+    opts,
+    async (client) => await client.getRoomKeyBackupStatus()
+  );
+}
+async function verifyMatrixRecoveryKey(recoveryKey, opts = {}) {
+  return await withStartedActionClient(
+    opts,
+    async (client) => await client.verifyWithRecoveryKey(recoveryKey)
+  );
+}
+async function restoreMatrixRoomKeyBackup(opts = {}) {
+  return await withStartedActionClient(
+    opts,
+    async (client) => await client.restoreRoomKeyBackup({
+      recoveryKey: normalizeOptionalString(opts.recoveryKey)
+    })
+  );
+}
+async function resetMatrixRoomKeyBackup(opts = {}) {
+  return await withStartedActionClient(opts, async (client) => await client.resetRoomKeyBackup());
+}
+async function bootstrapMatrixVerification(opts = {}) {
+  return await withStartedActionClient(
+    opts,
+    async (client) => await client.bootstrapOwnDeviceVerification({
+      recoveryKey: normalizeOptionalString(opts.recoveryKey),
+      forceResetCrossSigning: opts.forceResetCrossSigning === true
+    })
+  );
+}
+
+export {
+  listMatrixVerifications,
+  requestMatrixVerification,
+  acceptMatrixVerification,
+  cancelMatrixVerification,
+  startMatrixVerification,
+  generateMatrixVerificationQr,
+  scanMatrixVerificationQr,
+  getMatrixVerificationSas,
+  confirmMatrixVerificationSas,
+  mismatchMatrixVerificationSas,
+  confirmMatrixVerificationReciprocateQr,
+  getMatrixEncryptionStatus,
+  getMatrixVerificationStatus,
+  getMatrixRoomKeyBackupStatus,
+  verifyMatrixRecoveryKey,
+  restoreMatrixRoomKeyBackup,
+  resetMatrixRoomKeyBackup,
+  bootstrapMatrixVerification
+};
+//# sourceMappingURL=chunk-AWW3YUGJ.js.map

package/dist/chunk-AWW3YUGJ.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../src/matrix/actions/verification.ts"],
+  "sourcesContent": ["import { normalizeOptionalString } from \"openclaw/plugin-sdk/text-runtime\";\nimport { getMatrixRuntime } from \"../../runtime.js\";\nimport type { CoreConfig } from \"../../types.js\";\nimport { formatMatrixEncryptionUnavailableError } from \"../encryption-guidance.js\";\nimport { withStartedActionClient } from \"./client.js\";\nimport type { MatrixActionClientOpts } from \"./types.js\";\n\nfunction requireCrypto(\n  client: import(\"../sdk.js\").MatrixClient,\n  opts: MatrixActionClientOpts,\n): NonNullable<import(\"../sdk.js\").MatrixClient[\"crypto\"]> {\n  if (!client.crypto) {\n    const cfg = opts.cfg ?? (getMatrixRuntime().config.loadConfig() as CoreConfig);\n    throw new Error(formatMatrixEncryptionUnavailableError(cfg, opts.accountId));\n  }\n  return client.crypto;\n}\n\nfunction resolveVerificationId(input: string): string {\n  const normalized = input.trim();\n  if (!normalized) {\n    throw new Error(\"Matrix verification request id is required\");\n  }\n  return normalized;\n}\n\nexport async function listMatrixVerifications(opts: MatrixActionClientOpts = {}) {\n  return await withStartedActionClient(opts, async (client) => {\n    const crypto = requireCrypto(client, opts);\n    return await crypto.listVerifications();\n  });\n}\n\nexport async function requestMatrixVerification(\n  params: MatrixActionClientOpts & {\n    ownUser?: boolean;\n    userId?: string;\n    deviceId?: string;\n    roomId?: string;\n  } = {},\n) {\n  return await withStartedActionClient(params, async (client) => {\n    const crypto = requireCrypto(client, params);\n    const ownUser = params.ownUser ?? (!params.userId && !params.deviceId && !params.roomId);\n    return await crypto.requestVerification({\n      ownUser,\n      userId: normalizeOptionalString(params.userId),\n      deviceId: normalizeOptionalString(params.deviceId),\n      roomId: normalizeOptionalString(params.roomId),\n    });\n  });\n}\n\nexport async function acceptMatrixVerification(\n  requestId: string,\n  opts: MatrixActionClientOpts = {},\n) {\n  return await withStartedActionClient(opts, async (client) => {\n    const crypto = requireCrypto(client, opts);\n    return await crypto.acceptVerification(resolveVerificationId(requestId));\n  });\n}\n\nexport async function cancelMatrixVerification(\n  requestId: string,\n  opts: MatrixActionClientOpts & { reason?: string; code?: string } = {},\n) {\n  return await withStartedActionClient(opts, async (client) => {\n    const crypto = requireCrypto(client, opts);\n    return await crypto.cancelVerification(resolveVerificationId(requestId), {\n      reason: normalizeOptionalString(opts.reason),\n      code: normalizeOptionalString(opts.code),\n    });\n  });\n}\n\nexport async function startMatrixVerification(\n  requestId: string,\n  opts: MatrixActionClientOpts & { method?: \"sas\" } = {},\n) {\n  return await withStartedActionClient(opts, async (client) => {\n    const crypto = requireCrypto(client, opts);\n    return await crypto.startVerification(resolveVerificationId(requestId), opts.method ?? \"sas\");\n  });\n}\n\nexport async function generateMatrixVerificationQr(\n  requestId: string,\n  opts: MatrixActionClientOpts = {},\n) {\n  return await withStartedActionClient(opts, async (client) => {\n    const crypto = requireCrypto(client, opts);\n    return await crypto.generateVerificationQr(resolveVerificationId(requestId));\n  });\n}\n\nexport async function scanMatrixVerificationQr(\n  requestId: string,\n  qrDataBase64: string,\n  opts: MatrixActionClientOpts = {},\n) {\n  return await withStartedActionClient(opts, async (client) => {\n    const crypto = requireCrypto(client, opts);\n    const payload = qrDataBase64.trim();\n    if (!payload) {\n      throw new Error(\"Matrix QR data is required\");\n    }\n    return await crypto.scanVerificationQr(resolveVerificationId(requestId), payload);\n  });\n}\n\nexport async function getMatrixVerificationSas(\n  requestId: string,\n  opts: MatrixActionClientOpts = {},\n) {\n  return await withStartedActionClient(opts, async (client) => {\n    const crypto = requireCrypto(client, opts);\n    return await crypto.getVerificationSas(resolveVerificationId(requestId));\n  });\n}\n\nexport async function confirmMatrixVerificationSas(\n  requestId: string,\n  opts: MatrixActionClientOpts = {},\n) {\n  return await withStartedActionClient(opts, async (client) => {\n    const crypto = requireCrypto(client, opts);\n    return await crypto.confirmVerificationSas(resolveVerificationId(requestId));\n  });\n}\n\nexport async function mismatchMatrixVerificationSas(\n  requestId: string,\n  opts: MatrixActionClientOpts = {},\n) {\n  return await withStartedActionClient(opts, async (client) => {\n    const crypto = requireCrypto(client, opts);\n    return await crypto.mismatchVerificationSas(resolveVerificationId(requestId));\n  });\n}\n\nexport async function confirmMatrixVerificationReciprocateQr(\n  requestId: string,\n  opts: MatrixActionClientOpts = {},\n) {\n  return await withStartedActionClient(opts, async (client) => {\n    const crypto = requireCrypto(client, opts);\n    return await crypto.confirmVerificationReciprocateQr(resolveVerificationId(requestId));\n  });\n}\n\nexport async function getMatrixEncryptionStatus(\n  opts: MatrixActionClientOpts & { includeRecoveryKey?: boolean } = {},\n) {\n  return await withStartedActionClient(opts, async (client) => {\n    const crypto = requireCrypto(client, opts);\n    const recoveryKey = await crypto.getRecoveryKey();\n    return {\n      encryptionEnabled: true,\n      recoveryKeyStored: Boolean(recoveryKey),\n      recoveryKeyCreatedAt: recoveryKey?.createdAt ?? null,\n      ...(opts.includeRecoveryKey ? { recoveryKey: recoveryKey?.encodedPrivateKey ?? null } : {}),\n      pendingVerifications: (await crypto.listVerifications()).length,\n    };\n  });\n}\n\nexport async function getMatrixVerificationStatus(\n  opts: MatrixActionClientOpts & { includeRecoveryKey?: boolean } = {},\n) {\n  return await withStartedActionClient(opts, async (client) => {\n    const status = await client.getOwnDeviceVerificationStatus();\n    const payload = {\n      ...status,\n      pendingVerifications: client.crypto ? (await client.crypto.listVerifications()).length : 0,\n    };\n    if (!opts.includeRecoveryKey) {\n      return payload;\n    }\n    const recoveryKey = client.crypto ? await client.crypto.getRecoveryKey() : null;\n    return {\n      ...payload,\n      recoveryKey: recoveryKey?.encodedPrivateKey ?? null,\n    };\n  });\n}\n\nexport async function getMatrixRoomKeyBackupStatus(opts: MatrixActionClientOpts = {}) {\n  return await withStartedActionClient(\n    opts,\n    async (client) => await client.getRoomKeyBackupStatus(),\n  );\n}\n\nexport async function verifyMatrixRecoveryKey(\n  recoveryKey: string,\n  opts: MatrixActionClientOpts = {},\n) {\n  return await withStartedActionClient(\n    opts,\n    async (client) => await client.verifyWithRecoveryKey(recoveryKey),\n  );\n}\n\nexport async function restoreMatrixRoomKeyBackup(\n  opts: MatrixActionClientOpts & {\n    recoveryKey?: string;\n  } = {},\n) {\n  return await withStartedActionClient(\n    opts,\n    async (client) =>\n      await client.restoreRoomKeyBackup({\n        recoveryKey: normalizeOptionalString(opts.recoveryKey),\n      }),\n  );\n}\n\nexport async function resetMatrixRoomKeyBackup(opts: MatrixActionClientOpts = {}) {\n  return await withStartedActionClient(opts, async (client) => await client.resetRoomKeyBackup());\n}\n\nexport async function bootstrapMatrixVerification(\n  opts: MatrixActionClientOpts & {\n    recoveryKey?: string;\n    forceResetCrossSigning?: boolean;\n  } = {},\n) {\n  return await withStartedActionClient(\n    opts,\n    async (client) =>\n      await client.bootstrapOwnDeviceVerification({\n        recoveryKey: normalizeOptionalString(opts.recoveryKey),\n        forceResetCrossSigning: opts.forceResetCrossSigning === true,\n      }),\n  );\n}\n"],
+  "mappings": ";;;;;;;;;;;;;;AAAA;AAAA,SAAS,+BAA+B;AAOxC,SAAS,cACP,QACA,MACyD;AACzD,MAAI,CAAC,OAAO,QAAQ;AAClB,UAAM,MAAM,KAAK,OAAQ,iBAAiB,EAAE,OAAO,WAAW;AAC9D,UAAM,IAAI,MAAM,uCAAuC,KAAK,KAAK,SAAS,CAAC;AAAA,EAC7E;AACA,SAAO,OAAO;AAChB;AAEA,SAAS,sBAAsB,OAAuB;AACpD,QAAM,aAAa,MAAM,KAAK;AAC9B,MAAI,CAAC,YAAY;AACf,UAAM,IAAI,MAAM,4CAA4C;AAAA,EAC9D;AACA,SAAO;AACT;AAEA,eAAsB,wBAAwB,OAA+B,CAAC,GAAG;AAC/E,SAAO,MAAM,wBAAwB,MAAM,OAAO,WAAW;AAC3D,UAAM,SAAS,cAAc,QAAQ,IAAI;AACzC,WAAO,MAAM,OAAO,kBAAkB;AAAA,EACxC,CAAC;AACH;AAEA,eAAsB,0BACpB,SAKI,CAAC,GACL;AACA,SAAO,MAAM,wBAAwB,QAAQ,OAAO,WAAW;AAC7D,UAAM,SAAS,cAAc,QAAQ,MAAM;AAC3C,UAAM,UAAU,OAAO,YAAY,CAAC,OAAO,UAAU,CAAC,OAAO,YAAY,CAAC,OAAO;AACjF,WAAO,MAAM,OAAO,oBAAoB;AAAA,MACtC;AAAA,MACA,QAAQ,wBAAwB,OAAO,MAAM;AAAA,MAC7C,UAAU,wBAAwB,OAAO,QAAQ;AAAA,MACjD,QAAQ,wBAAwB,OAAO,MAAM;AAAA,IAC/C,CAAC;AAAA,EACH,CAAC;AACH;AAEA,eAAsB,yBACpB,WACA,OAA+B,CAAC,GAChC;AACA,SAAO,MAAM,wBAAwB,MAAM,OAAO,WAAW;AAC3D,UAAM,SAAS,cAAc,QAAQ,IAAI;AACzC,WAAO,MAAM,OAAO,mBAAmB,sBAAsB,SAAS,CAAC;AAAA,EACzE,CAAC;AACH;AAEA,eAAsB,yBACpB,WACA,OAAoE,CAAC,GACrE;AACA,SAAO,MAAM,wBAAwB,MAAM,OAAO,WAAW;AAC3D,UAAM,SAAS,cAAc,QAAQ,IAAI;AACzC,WAAO,MAAM,OAAO,mBAAmB,sBAAsB,SAAS,GAAG;AAAA,MACvE,QAAQ,wBAAwB,KAAK,MAAM;AAAA,MAC3C,MAAM,wBAAwB,KAAK,IAAI;AAAA,IACzC,CAAC;AAAA,EACH,CAAC;AACH;AAEA,eAAsB,wBACpB,WACA,OAAoD,CAAC,GACrD;AACA,SAAO,MAAM,wBAAwB,MAAM,OAAO,WAAW;AAC3D,UAAM,SAAS,cAAc,QAAQ,IAAI;AACzC,WAAO,MAAM,OAAO,kBAAkB,sBAAsB,SAAS,GAAG,KAAK,UAAU,KAAK;AAAA,EAC9F,CAAC;AACH;AAEA,eAAsB,6BACpB,WACA,OAA+B,CAAC,GAChC;AACA,SAAO,MAAM,wBAAwB,MAAM,OAAO,WAAW;AAC3D,UAAM,SAAS,cAAc,QAAQ,IAAI;AACzC,WAAO,MAAM,OAAO,uBAAuB,sBAAsB,SAAS,CAAC;AAAA,EAC7E,CAAC;AACH;AAEA,eAAsB,yBACpB,WACA,cACA,OAA+B,CAAC,GAChC;AACA,SAAO,MAAM,wBAAwB,MAAM,OAAO,WAAW;AAC3D,UAAM,SAAS,cAAc,QAAQ,IAAI;AACzC,UAAM,UAAU,aAAa,KAAK;AAClC,QAAI,CAAC,SAAS;AACZ,YAAM,IAAI,MAAM,4BAA4B;AAAA,IAC9C;AACA,WAAO,MAAM,OAAO,mBAAmB,sBAAsB,SAAS,GAAG,OAAO;AAAA,EAClF,CAAC;AACH;AAEA,eAAsB,yBACpB,WACA,OAA+B,CAAC,GAChC;AACA,SAAO,MAAM,wBAAwB,MAAM,OAAO,WAAW;AAC3D,UAAM,SAAS,cAAc,QAAQ,IAAI;AACzC,WAAO,MAAM,OAAO,mBAAmB,sBAAsB,SAAS,CAAC;AAAA,EACzE,CAAC;AACH;AAEA,eAAsB,6BACpB,WACA,OAA+B,CAAC,GAChC;AACA,SAAO,MAAM,wBAAwB,MAAM,OAAO,WAAW;AAC3D,UAAM,SAAS,cAAc,QAAQ,IAAI;AACzC,WAAO,MAAM,OAAO,uBAAuB,sBAAsB,SAAS,CAAC;AAAA,EAC7E,CAAC;AACH;AAEA,eAAsB,8BACpB,WACA,OAA+B,CAAC,GAChC;AACA,SAAO,MAAM,wBAAwB,MAAM,OAAO,WAAW;AAC3D,UAAM,SAAS,cAAc,QAAQ,IAAI;AACzC,WAAO,MAAM,OAAO,wBAAwB,sBAAsB,SAAS,CAAC;AAAA,EAC9E,CAAC;AACH;AAEA,eAAsB,uCACpB,WACA,OAA+B,CAAC,GAChC;AACA,SAAO,MAAM,wBAAwB,MAAM,OAAO,WAAW;AAC3D,UAAM,SAAS,cAAc,QAAQ,IAAI;AACzC,WAAO,MAAM,OAAO,iCAAiC,sBAAsB,SAAS,CAAC;AAAA,EACvF,CAAC;AACH;AAEA,eAAsB,0BACpB,OAAkE,CAAC,GACnE;AACA,SAAO,MAAM,wBAAwB,MAAM,OAAO,WAAW;AAC3D,UAAM,SAAS,cAAc,QAAQ,IAAI;AACzC,UAAM,cAAc,MAAM,OAAO,eAAe;AAChD,WAAO;AAAA,MACL,mBAAmB;AAAA,MACnB,mBAAmB,QAAQ,WAAW;AAAA,MACtC,sBAAsB,aAAa,aAAa;AAAA,MAChD,GAAI,KAAK,qBAAqB,EAAE,aAAa,aAAa,qBAAqB,KAAK,IAAI,CAAC;AAAA,MACzF,uBAAuB,MAAM,OAAO,kBAAkB,GAAG;AAAA,IAC3D;AAAA,EACF,CAAC;AACH;AAEA,eAAsB,4BACpB,OAAkE,CAAC,GACnE;AACA,SAAO,MAAM,wBAAwB,MAAM,OAAO,WAAW;AAC3D,UAAM,SAAS,MAAM,OAAO,+BAA+B;AAC3D,UAAM,UAAU;AAAA,MACd,GAAG;AAAA,MACH,sBAAsB,OAAO,UAAU,MAAM,OAAO,OAAO,kBAAkB,GAAG,SAAS;AAAA,IAC3F;AACA,QAAI,CAAC,KAAK,oBAAoB;AAC5B,aAAO;AAAA,IACT;AACA,UAAM,cAAc,OAAO,SAAS,MAAM,OAAO,OAAO,eAAe,IAAI;AAC3E,WAAO;AAAA,MACL,GAAG;AAAA,MACH,aAAa,aAAa,qBAAqB;AAAA,IACjD;AAAA,EACF,CAAC;AACH;AAEA,eAAsB,6BAA6B,OAA+B,CAAC,GAAG;AACpF,SAAO,MAAM;AAAA,IACX;AAAA,IACA,OAAO,WAAW,MAAM,OAAO,uBAAuB;AAAA,EACxD;AACF;AAEA,eAAsB,wBACpB,aACA,OAA+B,CAAC,GAChC;AACA,SAAO,MAAM;AAAA,IACX;AAAA,IACA,OAAO,WAAW,MAAM,OAAO,sBAAsB,WAAW;AAAA,EAClE;AACF;AAEA,eAAsB,2BACpB,OAEI,CAAC,GACL;AACA,SAAO,MAAM;AAAA,IACX;AAAA,IACA,OAAO,WACL,MAAM,OAAO,qBAAqB;AAAA,MAChC,aAAa,wBAAwB,KAAK,WAAW;AAAA,IACvD,CAAC;AAAA,EACL;AACF;AAEA,eAAsB,yBAAyB,OAA+B,CAAC,GAAG;AAChF,SAAO,MAAM,wBAAwB,MAAM,OAAO,WAAW,MAAM,OAAO,mBAAmB,CAAC;AAChG;AAEA,eAAsB,4BACpB,OAGI,CAAC,GACL;AACA,SAAO,MAAM;AAAA,IACX;AAAA,IACA,OAAO,WACL,MAAM,OAAO,+BAA+B;AAAA,MAC1C,aAAa,wBAAwB,KAAK,WAAW;AAAA,MACrD,wBAAwB,KAAK,2BAA2B;AAAA,IAC1D,CAAC;AAAA,EACL;AACF;",
+  "names": []
+}

package/dist/chunk-AX7VEEWJ.js

@@ -0,0 +1,158 @@
+import {
+  getLobiScopedEnvVarNames
+} from "./chunk-BWA3D22L.js";
+import {
+  init_shims
+} from "./chunk-7FLQSTPG.js";
+
+// src/secret-contract.ts
+init_shims();
+import { DEFAULT_ACCOUNT_ID, normalizeAccountId } from "openclaw/plugin-sdk/account-id";
+import {
+  collectSecretInputAssignment,
+  getChannelSurface,
+  hasConfiguredSecretInputValue,
+  hasOwnProperty,
+  normalizeSecretStringValue
+} from "openclaw/plugin-sdk/channel-secret-basic-runtime";
+var secretTargetRegistryEntries = [
+  {
+    id: "channels.lobi.accounts.*.accessToken",
+    targetType: "channels.lobi.accounts.*.accessToken",
+    configFile: "openclaw.json",
+    pathPattern: "channels.lobi.accounts.*.accessToken",
+    secretShape: "secret_input",
+    expectedResolvedValue: "string",
+    includeInPlan: true,
+    includeInConfigure: true,
+    includeInAudit: true
+  },
+  {
+    id: "channels.lobi.accounts.*.password",
+    targetType: "channels.lobi.accounts.*.password",
+    configFile: "openclaw.json",
+    pathPattern: "channels.lobi.accounts.*.password",
+    secretShape: "secret_input",
+    expectedResolvedValue: "string",
+    includeInPlan: true,
+    includeInConfigure: true,
+    includeInAudit: true
+  },
+  {
+    id: "channels.lobi.accessToken",
+    targetType: "channels.lobi.accessToken",
+    configFile: "openclaw.json",
+    pathPattern: "channels.lobi.accessToken",
+    secretShape: "secret_input",
+    expectedResolvedValue: "string",
+    includeInPlan: true,
+    includeInConfigure: true,
+    includeInAudit: true
+  },
+  {
+    id: "channels.lobi.password",
+    targetType: "channels.lobi.password",
+    configFile: "openclaw.json",
+    pathPattern: "channels.lobi.password",
+    secretShape: "secret_input",
+    expectedResolvedValue: "string",
+    includeInPlan: true,
+    includeInConfigure: true,
+    includeInAudit: true
+  }
+];
+function collectRuntimeConfigAssignments(params) {
+  const resolved = getChannelSurface(params.config, "matrix");
+  if (!resolved) {
+    return;
+  }
+  const { channel: matrix, surface } = resolved;
+  const envAccessTokenConfigured = normalizeSecretStringValue(params.context.env.LOBI_ACCESS_TOKEN).length > 0;
+  const defaultScopedAccessTokenConfigured = normalizeSecretStringValue(
+    params.context.env[getLobiScopedEnvVarNames("default").accessToken]
+  ).length > 0;
+  const defaultAccountAccessTokenConfigured = surface.accounts.some(
+    ({ accountId, account }) => normalizeAccountId(accountId) === DEFAULT_ACCOUNT_ID && hasConfiguredSecretInputValue(account.accessToken, params.defaults)
+  );
+  const baseAccessTokenConfigured = hasConfiguredSecretInputValue(
+    matrix.accessToken,
+    params.defaults
+  );
+  collectSecretInputAssignment({
+    value: matrix.accessToken,
+    path: "channels.lobi.accessToken",
+    expected: "string",
+    defaults: params.defaults,
+    context: params.context,
+    active: surface.channelEnabled,
+    inactiveReason: "Matrix channel is disabled.",
+    apply: (value) => {
+      matrix.accessToken = value;
+    }
+  });
+  collectSecretInputAssignment({
+    value: matrix.password,
+    path: "channels.lobi.password",
+    expected: "string",
+    defaults: params.defaults,
+    context: params.context,
+    active: surface.channelEnabled && !(baseAccessTokenConfigured || envAccessTokenConfigured || defaultScopedAccessTokenConfigured || defaultAccountAccessTokenConfigured),
+    inactiveReason: "Matrix channel is disabled or access-token auth is configured for the default Matrix account.",
+    apply: (value) => {
+      matrix.password = value;
+    }
+  });
+  if (!surface.hasExplicitAccounts) {
+    return;
+  }
+  for (const { accountId, account, enabled } of surface.accounts) {
+    if (hasOwnProperty(account, "accessToken")) {
+      collectSecretInputAssignment({
+        value: account.accessToken,
+        path: `channels.lobi.accounts.${accountId}.accessToken`,
+        expected: "string",
+        defaults: params.defaults,
+        context: params.context,
+        active: enabled,
+        inactiveReason: "Matrix account is disabled.",
+        apply: (value) => {
+          account.accessToken = value;
+        }
+      });
+    }
+    if (!hasOwnProperty(account, "password")) {
+      continue;
+    }
+    const accountAccessTokenConfigured = hasConfiguredSecretInputValue(
+      account.accessToken,
+      params.defaults
+    );
+    const scopedEnvAccessTokenConfigured = normalizeSecretStringValue(
+      params.context.env[getLobiScopedEnvVarNames(accountId).accessToken]
+    ).length > 0;
+    const inheritedDefaultAccountAccessTokenConfigured = normalizeAccountId(accountId) === DEFAULT_ACCOUNT_ID && (baseAccessTokenConfigured || envAccessTokenConfigured);
+    collectSecretInputAssignment({
+      value: account.password,
+      path: `channels.lobi.accounts.${accountId}.password`,
+      expected: "string",
+      defaults: params.defaults,
+      context: params.context,
+      active: enabled && !(accountAccessTokenConfigured || scopedEnvAccessTokenConfigured || inheritedDefaultAccountAccessTokenConfigured),
+      inactiveReason: "Matrix account is disabled or this account has an accessToken configured.",
+      apply: (value) => {
+        account.password = value;
+      }
+    });
+  }
+}
+var channelSecrets = {
+  secretTargetRegistryEntries,
+  collectRuntimeConfigAssignments
+};
+
+export {
+  secretTargetRegistryEntries,
+  collectRuntimeConfigAssignments,
+  channelSecrets
+};
+//# sourceMappingURL=chunk-AX7VEEWJ.js.map

package/dist/chunk-AX7VEEWJ.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../src/secret-contract.ts"],
+  "sourcesContent": ["import { DEFAULT_ACCOUNT_ID, normalizeAccountId } from \"openclaw/plugin-sdk/account-id\";\nimport {\n  collectSecretInputAssignment,\n  getChannelSurface,\n  hasConfiguredSecretInputValue,\n  hasOwnProperty,\n  normalizeSecretStringValue,\n  type ResolverContext,\n  type SecretDefaults,\n  type SecretTargetRegistryEntry,\n} from \"openclaw/plugin-sdk/channel-secret-basic-runtime\";\nimport { getLobiScopedEnvVarNames as getMatrixScopedEnvVarNames } from \"./env-vars.js\";\n\nexport const secretTargetRegistryEntries = [\n  {\n    id: \"channels.lobi.accounts.*.accessToken\",\n    targetType: \"channels.lobi.accounts.*.accessToken\",\n    configFile: \"openclaw.json\",\n    pathPattern: \"channels.lobi.accounts.*.accessToken\",\n    secretShape: \"secret_input\",\n    expectedResolvedValue: \"string\",\n    includeInPlan: true,\n    includeInConfigure: true,\n    includeInAudit: true,\n  },\n  {\n    id: \"channels.lobi.accounts.*.password\",\n    targetType: \"channels.lobi.accounts.*.password\",\n    configFile: \"openclaw.json\",\n    pathPattern: \"channels.lobi.accounts.*.password\",\n    secretShape: \"secret_input\",\n    expectedResolvedValue: \"string\",\n    includeInPlan: true,\n    includeInConfigure: true,\n    includeInAudit: true,\n  },\n  {\n    id: \"channels.lobi.accessToken\",\n    targetType: \"channels.lobi.accessToken\",\n    configFile: \"openclaw.json\",\n    pathPattern: \"channels.lobi.accessToken\",\n    secretShape: \"secret_input\",\n    expectedResolvedValue: \"string\",\n    includeInPlan: true,\n    includeInConfigure: true,\n    includeInAudit: true,\n  },\n  {\n    id: \"channels.lobi.password\",\n    targetType: \"channels.lobi.password\",\n    configFile: \"openclaw.json\",\n    pathPattern: \"channels.lobi.password\",\n    secretShape: \"secret_input\",\n    expectedResolvedValue: \"string\",\n    includeInPlan: true,\n    includeInConfigure: true,\n    includeInAudit: true,\n  },\n] satisfies SecretTargetRegistryEntry[];\n\nexport function collectRuntimeConfigAssignments(params: {\n  config: { channels?: Record<string, unknown> };\n  defaults?: SecretDefaults;\n  context: ResolverContext;\n}): void {\n  const resolved = getChannelSurface(params.config, \"matrix\");\n  if (!resolved) {\n    return;\n  }\n  const { channel: matrix, surface } = resolved;\n  const envAccessTokenConfigured =\n    normalizeSecretStringValue(params.context.env.LOBI_ACCESS_TOKEN).length > 0;\n  const defaultScopedAccessTokenConfigured =\n    normalizeSecretStringValue(\n      params.context.env[getMatrixScopedEnvVarNames(\"default\").accessToken],\n    ).length > 0;\n  const defaultAccountAccessTokenConfigured = surface.accounts.some(\n    ({ accountId, account }) =>\n      normalizeAccountId(accountId) === DEFAULT_ACCOUNT_ID &&\n      hasConfiguredSecretInputValue(account.accessToken, params.defaults),\n  );\n  const baseAccessTokenConfigured = hasConfiguredSecretInputValue(\n    matrix.accessToken,\n    params.defaults,\n  );\n  collectSecretInputAssignment({\n    value: matrix.accessToken,\n    path: \"channels.lobi.accessToken\",\n    expected: \"string\",\n    defaults: params.defaults,\n    context: params.context,\n    active: surface.channelEnabled,\n    inactiveReason: \"Matrix channel is disabled.\",\n    apply: (value) => {\n      matrix.accessToken = value;\n    },\n  });\n  collectSecretInputAssignment({\n    value: matrix.password,\n    path: \"channels.lobi.password\",\n    expected: \"string\",\n    defaults: params.defaults,\n    context: params.context,\n    active:\n      surface.channelEnabled &&\n      !(\n        baseAccessTokenConfigured ||\n        envAccessTokenConfigured ||\n        defaultScopedAccessTokenConfigured ||\n        defaultAccountAccessTokenConfigured\n      ),\n    inactiveReason:\n      \"Matrix channel is disabled or access-token auth is configured for the default Matrix account.\",\n    apply: (value) => {\n      matrix.password = value;\n    },\n  });\n  if (!surface.hasExplicitAccounts) {\n    return;\n  }\n  for (const { accountId, account, enabled } of surface.accounts) {\n    if (hasOwnProperty(account, \"accessToken\")) {\n      collectSecretInputAssignment({\n        value: account.accessToken,\n        path: `channels.lobi.accounts.${accountId}.accessToken`,\n        expected: \"string\",\n        defaults: params.defaults,\n        context: params.context,\n        active: enabled,\n        inactiveReason: \"Matrix account is disabled.\",\n        apply: (value) => {\n          account.accessToken = value;\n        },\n      });\n    }\n    if (!hasOwnProperty(account, \"password\")) {\n      continue;\n    }\n    const accountAccessTokenConfigured = hasConfiguredSecretInputValue(\n      account.accessToken,\n      params.defaults,\n    );\n    const scopedEnvAccessTokenConfigured =\n      normalizeSecretStringValue(\n        params.context.env[getMatrixScopedEnvVarNames(accountId).accessToken],\n      ).length > 0;\n    const inheritedDefaultAccountAccessTokenConfigured =\n      normalizeAccountId(accountId) === DEFAULT_ACCOUNT_ID &&\n      (baseAccessTokenConfigured || envAccessTokenConfigured);\n    collectSecretInputAssignment({\n      value: account.password,\n      path: `channels.lobi.accounts.${accountId}.password`,\n      expected: \"string\",\n      defaults: params.defaults,\n      context: params.context,\n      active:\n        enabled &&\n        !(\n          accountAccessTokenConfigured ||\n          scopedEnvAccessTokenConfigured ||\n          inheritedDefaultAccountAccessTokenConfigured\n        ),\n      inactiveReason: \"Matrix account is disabled or this account has an accessToken configured.\",\n      apply: (value) => {\n        account.password = value;\n      },\n    });\n  }\n}\n\nexport const channelSecrets = {\n  secretTargetRegistryEntries,\n  collectRuntimeConfigAssignments,\n};\n"],
+  "mappings": ";;;;;;;;AAAA;AAAA,SAAS,oBAAoB,0BAA0B;AACvD;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OAIK;AAGA,IAAM,8BAA8B;AAAA,EACzC;AAAA,IACE,IAAI;AAAA,IACJ,YAAY;AAAA,IACZ,YAAY;AAAA,IACZ,aAAa;AAAA,IACb,aAAa;AAAA,IACb,uBAAuB;AAAA,IACvB,eAAe;AAAA,IACf,oBAAoB;AAAA,IACpB,gBAAgB;AAAA,EAClB;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,YAAY;AAAA,IACZ,YAAY;AAAA,IACZ,aAAa;AAAA,IACb,aAAa;AAAA,IACb,uBAAuB;AAAA,IACvB,eAAe;AAAA,IACf,oBAAoB;AAAA,IACpB,gBAAgB;AAAA,EAClB;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,YAAY;AAAA,IACZ,YAAY;AAAA,IACZ,aAAa;AAAA,IACb,aAAa;AAAA,IACb,uBAAuB;AAAA,IACvB,eAAe;AAAA,IACf,oBAAoB;AAAA,IACpB,gBAAgB;AAAA,EAClB;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,YAAY;AAAA,IACZ,YAAY;AAAA,IACZ,aAAa;AAAA,IACb,aAAa;AAAA,IACb,uBAAuB;AAAA,IACvB,eAAe;AAAA,IACf,oBAAoB;AAAA,IACpB,gBAAgB;AAAA,EAClB;AACF;AAEO,SAAS,gCAAgC,QAIvC;AACP,QAAM,WAAW,kBAAkB,OAAO,QAAQ,QAAQ;AAC1D,MAAI,CAAC,UAAU;AACb;AAAA,EACF;AACA,QAAM,EAAE,SAAS,QAAQ,QAAQ,IAAI;AACrC,QAAM,2BACJ,2BAA2B,OAAO,QAAQ,IAAI,iBAAiB,EAAE,SAAS;AAC5E,QAAM,qCACJ;AAAA,IACE,OAAO,QAAQ,IAAI,yBAA2B,SAAS,EAAE,WAAW;AAAA,EACtE,EAAE,SAAS;AACb,QAAM,sCAAsC,QAAQ,SAAS;AAAA,IAC3D,CAAC,EAAE,WAAW,QAAQ,MACpB,mBAAmB,SAAS,MAAM,sBAClC,8BAA8B,QAAQ,aAAa,OAAO,QAAQ;AAAA,EACtE;AACA,QAAM,4BAA4B;AAAA,IAChC,OAAO;AAAA,IACP,OAAO;AAAA,EACT;AACA,+BAA6B;AAAA,IAC3B,OAAO,OAAO;AAAA,IACd,MAAM;AAAA,IACN,UAAU;AAAA,IACV,UAAU,OAAO;AAAA,IACjB,SAAS,OAAO;AAAA,IAChB,QAAQ,QAAQ;AAAA,IAChB,gBAAgB;AAAA,IAChB,OAAO,CAAC,UAAU;AAChB,aAAO,cAAc;AAAA,IACvB;AAAA,EACF,CAAC;AACD,+BAA6B;AAAA,IAC3B,OAAO,OAAO;AAAA,IACd,MAAM;AAAA,IACN,UAAU;AAAA,IACV,UAAU,OAAO;AAAA,IACjB,SAAS,OAAO;AAAA,IAChB,QACE,QAAQ,kBACR,EACE,6BACA,4BACA,sCACA;AAAA,IAEJ,gBACE;AAAA,IACF,OAAO,CAAC,UAAU;AAChB,aAAO,WAAW;AAAA,IACpB;AAAA,EACF,CAAC;AACD,MAAI,CAAC,QAAQ,qBAAqB;AAChC;AAAA,EACF;AACA,aAAW,EAAE,WAAW,SAAS,QAAQ,KAAK,QAAQ,UAAU;AAC9D,QAAI,eAAe,SAAS,aAAa,GAAG;AAC1C,mCAA6B;AAAA,QAC3B,OAAO,QAAQ;AAAA,QACf,MAAM,0BAA0B,SAAS;AAAA,QACzC,UAAU;AAAA,QACV,UAAU,OAAO;AAAA,QACjB,SAAS,OAAO;AAAA,QAChB,QAAQ;AAAA,QACR,gBAAgB;AAAA,QAChB,OAAO,CAAC,UAAU;AAChB,kBAAQ,cAAc;AAAA,QACxB;AAAA,MACF,CAAC;AAAA,IACH;AACA,QAAI,CAAC,eAAe,SAAS,UAAU,GAAG;AACxC;AAAA,IACF;AACA,UAAM,+BAA+B;AAAA,MACnC,QAAQ;AAAA,MACR,OAAO;AAAA,IACT;AACA,UAAM,iCACJ;AAAA,MACE,OAAO,QAAQ,IAAI,yBAA2B,SAAS,EAAE,WAAW;AAAA,IACtE,EAAE,SAAS;AACb,UAAM,+CACJ,mBAAmB,SAAS,MAAM,uBACjC,6BAA6B;AAChC,iCAA6B;AAAA,MAC3B,OAAO,QAAQ;AAAA,MACf,MAAM,0BAA0B,SAAS;AAAA,MACzC,UAAU;AAAA,MACV,UAAU,OAAO;AAAA,MACjB,SAAS,OAAO;AAAA,MAChB,QACE,WACA,EACE,gCACA,kCACA;AAAA,MAEJ,gBAAgB;AAAA,MAChB,OAAO,CAAC,UAAU;AAChB,gBAAQ,WAAW;AAAA,MACrB;AAAA,IACF,CAAC;AAAA,EACH;AACF;AAEO,IAAM,iBAAiB;AAAA,EAC5B;AAAA,EACA;AACF;",
+  "names": []
+}

package/dist/chunk-B3NTODO7.js

@@ -0,0 +1,57 @@
+import {
+  init_shims
+} from "./chunk-G4TIS2SC.js";
+
+// src/legacy-crypto-inspector-availability.ts
+init_shims();
+import fs from "node:fs";
+import path from "node:path";
+import { fileURLToPath } from "node:url";
+var LEGACY_CRYPTO_INSPECTOR_FILE = "legacy-crypto-inspector.js";
+var LEGACY_CRYPTO_INSPECTOR_CHUNK_PREFIX = "legacy-crypto-inspector-";
+var LEGACY_CRYPTO_INSPECTOR_HELPER_CHUNK_PREFIX = "availability-";
+var JAVASCRIPT_MODULE_SUFFIX = ".js";
+function isLegacyCryptoInspectorArtifactName(name) {
+  if (name === LEGACY_CRYPTO_INSPECTOR_FILE) {
+    return true;
+  }
+  if (!name.startsWith(LEGACY_CRYPTO_INSPECTOR_CHUNK_PREFIX) || !name.endsWith(JAVASCRIPT_MODULE_SUFFIX)) {
+    return false;
+  }
+  const chunkSuffix = name.slice(
+    LEGACY_CRYPTO_INSPECTOR_CHUNK_PREFIX.length,
+    -JAVASCRIPT_MODULE_SUFFIX.length
+  );
+  return chunkSuffix.length > 0 && chunkSuffix !== "availability" && !chunkSuffix.startsWith(LEGACY_CRYPTO_INSPECTOR_HELPER_CHUNK_PREFIX);
+}
+function hasSourceInspectorArtifact(currentDir) {
+  return [
+    path.resolve(currentDir, "matrix", "legacy-crypto-inspector.ts"),
+    path.resolve(currentDir, "matrix", "legacy-crypto-inspector.js")
+  ].some((candidate) => fs.existsSync(candidate));
+}
+function hasBuiltInspectorArtifact(currentDir) {
+  if (fs.existsSync(path.join(currentDir, "legacy-crypto-inspector.js"))) {
+    return true;
+  }
+  if (fs.existsSync(path.join(currentDir, "extensions", "matrix", "legacy-crypto-inspector.js"))) {
+    return true;
+  }
+  return fs.readdirSync(currentDir, { withFileTypes: true }).some((entry) => entry.isFile() && isLegacyCryptoInspectorArtifactName(entry.name));
+}
+function isMatrixLegacyCryptoInspectorAvailable() {
+  const currentDir = path.dirname(fileURLToPath(import.meta.url));
+  if (hasSourceInspectorArtifact(currentDir)) {
+    return true;
+  }
+  try {
+    return hasBuiltInspectorArtifact(currentDir);
+  } catch {
+    return false;
+  }
+}
+
+export {
+  isMatrixLegacyCryptoInspectorAvailable
+};
+//# sourceMappingURL=chunk-B3NTODO7.js.map

package/dist/chunk-B3NTODO7.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../src/legacy-crypto-inspector-availability.ts"],
+  "sourcesContent": ["import fs from \"node:fs\";\nimport path from \"node:path\";\nimport { fileURLToPath } from \"node:url\";\n\nconst LEGACY_CRYPTO_INSPECTOR_FILE = \"legacy-crypto-inspector.js\";\nconst LEGACY_CRYPTO_INSPECTOR_CHUNK_PREFIX = \"legacy-crypto-inspector-\";\nconst LEGACY_CRYPTO_INSPECTOR_HELPER_CHUNK_PREFIX = \"availability-\";\nconst JAVASCRIPT_MODULE_SUFFIX = \".js\";\n\nfunction isLegacyCryptoInspectorArtifactName(name: string): boolean {\n  if (name === LEGACY_CRYPTO_INSPECTOR_FILE) {\n    return true;\n  }\n  if (\n    !name.startsWith(LEGACY_CRYPTO_INSPECTOR_CHUNK_PREFIX) ||\n    !name.endsWith(JAVASCRIPT_MODULE_SUFFIX)\n  ) {\n    return false;\n  }\n  const chunkSuffix = name.slice(\n    LEGACY_CRYPTO_INSPECTOR_CHUNK_PREFIX.length,\n    -JAVASCRIPT_MODULE_SUFFIX.length,\n  );\n  return (\n    chunkSuffix.length > 0 &&\n    chunkSuffix !== \"availability\" &&\n    !chunkSuffix.startsWith(LEGACY_CRYPTO_INSPECTOR_HELPER_CHUNK_PREFIX)\n  );\n}\n\nfunction hasSourceInspectorArtifact(currentDir: string): boolean {\n  return [\n    path.resolve(currentDir, \"matrix\", \"legacy-crypto-inspector.ts\"),\n    path.resolve(currentDir, \"matrix\", \"legacy-crypto-inspector.js\"),\n  ].some((candidate) => fs.existsSync(candidate));\n}\n\nfunction hasBuiltInspectorArtifact(currentDir: string): boolean {\n  if (fs.existsSync(path.join(currentDir, \"legacy-crypto-inspector.js\"))) {\n    return true;\n  }\n  if (fs.existsSync(path.join(currentDir, \"extensions\", \"matrix\", \"legacy-crypto-inspector.js\"))) {\n    return true;\n  }\n  return fs\n    .readdirSync(currentDir, { withFileTypes: true })\n    .some((entry) => entry.isFile() && isLegacyCryptoInspectorArtifactName(entry.name));\n}\n\nexport function isMatrixLegacyCryptoInspectorAvailable(): boolean {\n  const currentDir = path.dirname(fileURLToPath(import.meta.url));\n  if (hasSourceInspectorArtifact(currentDir)) {\n    return true;\n  }\n  try {\n    return hasBuiltInspectorArtifact(currentDir);\n  } catch {\n    return false;\n  }\n}\n"],
+  "mappings": ";;;;;AAAA;AAAA,OAAO,QAAQ;AACf,OAAO,UAAU;AACjB,SAAS,qBAAqB;AAE9B,IAAM,+BAA+B;AACrC,IAAM,uCAAuC;AAC7C,IAAM,8CAA8C;AACpD,IAAM,2BAA2B;AAEjC,SAAS,oCAAoC,MAAuB;AAClE,MAAI,SAAS,8BAA8B;AACzC,WAAO;AAAA,EACT;AACA,MACE,CAAC,KAAK,WAAW,oCAAoC,KACrD,CAAC,KAAK,SAAS,wBAAwB,GACvC;AACA,WAAO;AAAA,EACT;AACA,QAAM,cAAc,KAAK;AAAA,IACvB,qCAAqC;AAAA,IACrC,CAAC,yBAAyB;AAAA,EAC5B;AACA,SACE,YAAY,SAAS,KACrB,gBAAgB,kBAChB,CAAC,YAAY,WAAW,2CAA2C;AAEvE;AAEA,SAAS,2BAA2B,YAA6B;AAC/D,SAAO;AAAA,IACL,KAAK,QAAQ,YAAY,UAAU,4BAA4B;AAAA,IAC/D,KAAK,QAAQ,YAAY,UAAU,4BAA4B;AAAA,EACjE,EAAE,KAAK,CAAC,cAAc,GAAG,WAAW,SAAS,CAAC;AAChD;AAEA,SAAS,0BAA0B,YAA6B;AAC9D,MAAI,GAAG,WAAW,KAAK,KAAK,YAAY,4BAA4B,CAAC,GAAG;AACtE,WAAO;AAAA,EACT;AACA,MAAI,GAAG,WAAW,KAAK,KAAK,YAAY,cAAc,UAAU,4BAA4B,CAAC,GAAG;AAC9F,WAAO;AAAA,EACT;AACA,SAAO,GACJ,YAAY,YAAY,EAAE,eAAe,KAAK,CAAC,EAC/C,KAAK,CAAC,UAAU,MAAM,OAAO,KAAK,oCAAoC,MAAM,IAAI,CAAC;AACtF;AAEO,SAAS,yCAAkD;AAChE,QAAM,aAAa,KAAK,QAAQ,cAAc,YAAY,GAAG,CAAC;AAC9D,MAAI,2BAA2B,UAAU,GAAG;AAC1C,WAAO;AAAA,EACT;AACA,MAAI;AACF,WAAO,0BAA0B,UAAU;AAAA,EAC7C,QAAQ;AACN,WAAO;AAAA,EACT;AACF;",
+  "names": []
+}