@archipelagolab/lobi 1.0.1 → 1.0.6

package/dist/chunk-ER2XTD2S.js

@@ -0,0 +1,271 @@
+import {
+  getMatrixApprovalApprovers,
+  getMatrixExecApprovalApprovers,
+  isMatrixAnyApprovalClientEnabled,
+  isMatrixApprovalClientEnabled,
+  isMatrixExecApprovalAuthorizedSender,
+  isMatrixExecApprovalClientEnabled,
+  resolveMatrixExecApprovalTarget,
+  shouldHandleMatrixApprovalRequest
+} from "./chunk-F7LNS7G3.js";
+import {
+  getMatrixApprovalAuthApprovers,
+  matrixApprovalAuth
+} from "./chunk-6EYPDJUD.js";
+import {
+  normalizeMatrixApproverId
+} from "./chunk-ZGCATLM5.js";
+import {
+  normalizeMatrixUserId
+} from "./chunk-U44IVNP2.js";
+import {
+  resolveMatrixTargetIdentity
+} from "./chunk-TFD7ZIYD.js";
+import {
+  listMatrixAccountIds
+} from "./chunk-MJ2GW6SU.js";
+import {
+  init_shims
+} from "./chunk-G4TIS2SC.js";
+
+// src/approval-native.ts
+init_shims();
+import {
+  createChannelApprovalCapability,
+  createApproverRestrictedNativeApprovalCapability,
+  splitChannelApprovalCapability
+} from "openclaw/plugin-sdk/approval-delivery-runtime";
+import { createLazyChannelApprovalNativeRuntimeAdapter } from "openclaw/plugin-sdk/approval-handler-adapter-runtime";
+import {
+  createChannelNativeOriginTargetResolver,
+  resolveApprovalRequestSessionConversation
+} from "openclaw/plugin-sdk/approval-native-runtime";
+import {
+  normalizeLowercaseStringOrEmpty,
+  normalizeOptionalStringifiedId
+} from "openclaw/plugin-sdk/text-runtime";
+function normalizeComparableTarget(value) {
+  const target = resolveMatrixTargetIdentity(value);
+  if (!target) {
+    return normalizeLowercaseStringOrEmpty(value);
+  }
+  if (target.kind === "user") {
+    return `user:${normalizeMatrixUserId(target.id)}`;
+  }
+  return `${normalizeLowercaseStringOrEmpty(target.kind)}:${target.id}`;
+}
+function resolveMatrixNativeTarget(raw) {
+  const target = resolveMatrixTargetIdentity(raw);
+  if (!target) {
+    return null;
+  }
+  return target.kind === "user" ? `user:${target.id}` : `room:${target.id}`;
+}
+function resolveTurnSourceMatrixOriginTarget(request) {
+  const turnSourceChannel = normalizeLowercaseStringOrEmpty(request.request.turnSourceChannel);
+  const turnSourceTo = request.request.turnSourceTo?.trim() || "";
+  const target = resolveMatrixNativeTarget(turnSourceTo);
+  if (turnSourceChannel !== "matrix" || !target) {
+    return null;
+  }
+  return {
+    to: target,
+    threadId: normalizeOptionalStringifiedId(request.request.turnSourceThreadId)
+  };
+}
+function resolveSessionMatrixOriginTarget(sessionTarget) {
+  const target = resolveMatrixNativeTarget(sessionTarget.to);
+  if (!target) {
+    return null;
+  }
+  return {
+    to: target,
+    threadId: normalizeOptionalStringifiedId(sessionTarget.threadId)
+  };
+}
+function matrixTargetsMatch(a, b) {
+  return normalizeComparableTarget(a.to) === normalizeComparableTarget(b.to) && (a.threadId ?? "") === (b.threadId ?? "");
+}
+function hasMatrixPluginApprovers(params) {
+  return getMatrixApprovalAuthApprovers(params).length > 0;
+}
+function availabilityState(enabled) {
+  return enabled ? { kind: "enabled" } : { kind: "disabled" };
+}
+function hasMatrixApprovalApprovers(params) {
+  return getMatrixApprovalApprovers({
+    cfg: params.cfg,
+    accountId: params.accountId,
+    approvalKind: params.approvalKind
+  }).length > 0;
+}
+function hasAnyMatrixApprovalApprovers(params) {
+  return getMatrixExecApprovalApprovers(params).length > 0 || getMatrixApprovalAuthApprovers(params).length > 0;
+}
+function isMatrixPluginAuthorizedSender(params) {
+  const normalizedSenderId = params.senderId ? normalizeMatrixApproverId(params.senderId) : void 0;
+  if (!normalizedSenderId) {
+    return false;
+  }
+  return getMatrixApprovalAuthApprovers(params).includes(normalizedSenderId);
+}
+function resolveSuppressionAccountId(params) {
+  return params.target.accountId?.trim() || params.request.request.turnSourceAccountId?.trim() || void 0;
+}
+var resolveMatrixOriginTarget = createChannelNativeOriginTargetResolver({
+  channel: "matrix",
+  shouldHandleRequest: ({ cfg, accountId, request }) => shouldHandleMatrixApprovalRequest({
+    cfg,
+    accountId,
+    request
+  }),
+  resolveTurnSourceTarget: resolveTurnSourceMatrixOriginTarget,
+  resolveSessionTarget: resolveSessionMatrixOriginTarget,
+  targetsMatch: matrixTargetsMatch,
+  resolveFallbackTarget: (request) => {
+    const sessionConversation = resolveApprovalRequestSessionConversation({
+      request,
+      channel: "matrix"
+    });
+    if (!sessionConversation) {
+      return null;
+    }
+    const target = resolveMatrixNativeTarget(sessionConversation.id);
+    if (!target) {
+      return null;
+    }
+    return {
+      to: target,
+      threadId: normalizeOptionalStringifiedId(sessionConversation.threadId)
+    };
+  }
+});
+function resolveMatrixApproverDmTargets(params) {
+  if (!shouldHandleMatrixApprovalRequest(params)) {
+    return [];
+  }
+  return getMatrixApprovalApprovers(params).map((approver) => {
+    const normalized = normalizeMatrixUserId(approver);
+    return normalized ? { to: `user:${normalized}` } : null;
+  }).filter((target) => target !== null);
+}
+var matrixNativeApprovalCapability = createApproverRestrictedNativeApprovalCapability({
+  channel: "matrix",
+  channelLabel: "Matrix",
+  describeExecApprovalSetup: ({ accountId }) => {
+    const prefix = accountId && accountId !== "default" ? `channels.lobi.accounts.${accountId}` : "channels.lobi";
+    return `Approve it from the Web UI or terminal UI for now. Matrix supports native exec approvals for this account. Configure \`${prefix}.execApprovals.approvers\` or \`${prefix}.dm.allowFrom\`; leave \`${prefix}.execApprovals.enabled\` unset/\`auto\` or set it to \`true\`.`;
+  },
+  listAccountIds: listMatrixAccountIds,
+  hasApprovers: ({ cfg, accountId }) => hasAnyMatrixApprovalApprovers({
+    cfg,
+    accountId
+  }),
+  isExecAuthorizedSender: ({ cfg, accountId, senderId }) => isMatrixExecApprovalAuthorizedSender({ cfg, accountId, senderId }),
+  isPluginAuthorizedSender: ({ cfg, accountId, senderId }) => isMatrixPluginAuthorizedSender({
+    cfg,
+    accountId,
+    senderId
+  }),
+  isNativeDeliveryEnabled: ({ cfg, accountId }) => isMatrixExecApprovalClientEnabled({ cfg, accountId }),
+  resolveNativeDeliveryMode: ({ cfg, accountId }) => resolveMatrixExecApprovalTarget({ cfg, accountId }),
+  requireMatchingTurnSourceChannel: true,
+  resolveSuppressionAccountId,
+  resolveOriginTarget: resolveMatrixOriginTarget,
+  resolveApproverDmTargets: resolveMatrixApproverDmTargets,
+  notifyOriginWhenDmOnly: true,
+  nativeRuntime: createLazyChannelApprovalNativeRuntimeAdapter({
+    eventKinds: ["exec", "plugin"],
+    isConfigured: ({ cfg, accountId }) => isMatrixAnyApprovalClientEnabled({
+      cfg,
+      accountId
+    }),
+    shouldHandle: ({ cfg, accountId, request }) => shouldHandleMatrixApprovalRequest({
+      cfg,
+      accountId,
+      request
+    }),
+    load: async () => (await import("./src/approval-handler.runtime.js")).matrixApprovalNativeRuntime
+  })
+});
+var splitMatrixApprovalCapability = splitChannelApprovalCapability(
+  matrixNativeApprovalCapability
+);
+var matrixBaseNativeApprovalAdapter = splitMatrixApprovalCapability.native;
+var matrixBaseDeliveryAdapter = splitMatrixApprovalCapability.delivery;
+var matrixDeliveryAdapter = matrixBaseDeliveryAdapter && {
+  ...matrixBaseDeliveryAdapter,
+  shouldSuppressForwardingFallback: (params) => {
+    const accountId = resolveSuppressionAccountId(params);
+    if (!hasMatrixApprovalApprovers({
+      cfg: params.cfg,
+      accountId,
+      approvalKind: params.approvalKind
+    })) {
+      return false;
+    }
+    return matrixBaseDeliveryAdapter.shouldSuppressForwardingFallback?.(params) ?? false;
+  }
+};
+var matrixNativeAdapter = matrixBaseNativeApprovalAdapter && {
+  describeDeliveryCapabilities: (params) => {
+    const capabilities = matrixBaseNativeApprovalAdapter.describeDeliveryCapabilities(params);
+    const hasApprovers = hasMatrixApprovalApprovers({
+      cfg: params.cfg,
+      accountId: params.accountId,
+      approvalKind: params.approvalKind
+    });
+    const clientEnabled = isMatrixApprovalClientEnabled({
+      cfg: params.cfg,
+      accountId: params.accountId,
+      approvalKind: params.approvalKind
+    });
+    return {
+      ...capabilities,
+      enabled: capabilities.enabled && hasApprovers && clientEnabled
+    };
+  },
+  resolveOriginTarget: matrixBaseNativeApprovalAdapter.resolveOriginTarget,
+  resolveApproverDmTargets: matrixBaseNativeApprovalAdapter.resolveApproverDmTargets
+};
+var matrixApprovalCapability = createChannelApprovalCapability({
+  authorizeActorAction: (params) => {
+    if (params.approvalKind !== "plugin") {
+      return matrixNativeApprovalCapability.authorizeActorAction?.(params) ?? { authorized: true };
+    }
+    if (!hasMatrixPluginApprovers({
+      cfg: params.cfg,
+      accountId: params.accountId
+    })) {
+      return {
+        authorized: false,
+        reason: "\u274C Matrix plugin approvals are not enabled for this bot account."
+      };
+    }
+    return matrixApprovalAuth.authorizeActorAction(params);
+  },
+  getActionAvailabilityState: (params) => {
+    if (params.approvalKind === "plugin") {
+      return availabilityState(
+        hasMatrixPluginApprovers({
+          cfg: params.cfg,
+          accountId: params.accountId
+        })
+      );
+    }
+    return matrixNativeApprovalCapability.getActionAvailabilityState?.(params) ?? {
+      kind: "disabled"
+    };
+  },
+  getExecInitiatingSurfaceState: (params) => matrixNativeApprovalCapability.getExecInitiatingSurfaceState?.(params) ?? { kind: "disabled" },
+  describeExecApprovalSetup: matrixNativeApprovalCapability.describeExecApprovalSetup,
+  delivery: matrixDeliveryAdapter,
+  nativeRuntime: matrixNativeApprovalCapability.nativeRuntime,
+  native: matrixNativeAdapter,
+  render: matrixNativeApprovalCapability.render
+});
+
+export {
+  matrixApprovalCapability
+};
+//# sourceMappingURL=chunk-ER2XTD2S.js.map

package/dist/chunk-ER2XTD2S.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../src/approval-native.ts"],
+  "sourcesContent": ["import {\n  createChannelApprovalCapability,\n  createApproverRestrictedNativeApprovalCapability,\n  splitChannelApprovalCapability,\n} from \"openclaw/plugin-sdk/approval-delivery-runtime\";\nimport { createLazyChannelApprovalNativeRuntimeAdapter } from \"openclaw/plugin-sdk/approval-handler-adapter-runtime\";\nimport type { ChannelApprovalNativeRuntimeAdapter } from \"openclaw/plugin-sdk/approval-handler-runtime\";\nimport {\n  createChannelNativeOriginTargetResolver,\n  resolveApprovalRequestSessionConversation,\n} from \"openclaw/plugin-sdk/approval-native-runtime\";\nimport type { ExecApprovalRequest, PluginApprovalRequest } from \"openclaw/plugin-sdk/infra-runtime\";\nimport {\n  normalizeLowercaseStringOrEmpty,\n  normalizeOptionalStringifiedId,\n} from \"openclaw/plugin-sdk/text-runtime\";\nimport { getMatrixApprovalAuthApprovers, matrixApprovalAuth } from \"./approval-auth.js\";\nimport { normalizeMatrixApproverId } from \"./approval-ids.js\";\nimport {\n  getMatrixApprovalApprovers,\n  getMatrixExecApprovalApprovers,\n  isMatrixAnyApprovalClientEnabled,\n  isMatrixApprovalClientEnabled,\n  isMatrixExecApprovalClientEnabled,\n  isMatrixExecApprovalAuthorizedSender,\n  resolveMatrixExecApprovalTarget,\n  shouldHandleMatrixApprovalRequest,\n} from \"./exec-approvals.js\";\nimport { listMatrixAccountIds } from \"./matrix/accounts.js\";\nimport { normalizeMatrixUserId } from \"./matrix/monitor/allowlist.js\";\nimport { resolveMatrixTargetIdentity } from \"./matrix/target-ids.js\";\nimport type { CoreConfig } from \"./types.js\";\n\ntype ApprovalRequest = ExecApprovalRequest | PluginApprovalRequest;\ntype ApprovalKind = \"exec\" | \"plugin\";\ntype MatrixOriginTarget = { to: string; threadId?: string };\n\nfunction normalizeComparableTarget(value: string): string {\n  const target = resolveMatrixTargetIdentity(value);\n  if (!target) {\n    return normalizeLowercaseStringOrEmpty(value);\n  }\n  if (target.kind === \"user\") {\n    return `user:${normalizeMatrixUserId(target.id)}`;\n  }\n  return `${normalizeLowercaseStringOrEmpty(target.kind)}:${target.id}`;\n}\n\nfunction resolveMatrixNativeTarget(raw: string): string | null {\n  const target = resolveMatrixTargetIdentity(raw);\n  if (!target) {\n    return null;\n  }\n  return target.kind === \"user\" ? `user:${target.id}` : `room:${target.id}`;\n}\n\nfunction resolveTurnSourceMatrixOriginTarget(request: ApprovalRequest): MatrixOriginTarget | null {\n  const turnSourceChannel = normalizeLowercaseStringOrEmpty(request.request.turnSourceChannel);\n  const turnSourceTo = request.request.turnSourceTo?.trim() || \"\";\n  const target = resolveMatrixNativeTarget(turnSourceTo);\n  if (turnSourceChannel !== \"matrix\" || !target) {\n    return null;\n  }\n  return {\n    to: target,\n    threadId: normalizeOptionalStringifiedId(request.request.turnSourceThreadId),\n  };\n}\n\nfunction resolveSessionMatrixOriginTarget(sessionTarget: {\n  to: string;\n  threadId?: string | number | null;\n}): MatrixOriginTarget | null {\n  const target = resolveMatrixNativeTarget(sessionTarget.to);\n  if (!target) {\n    return null;\n  }\n  return {\n    to: target,\n    threadId: normalizeOptionalStringifiedId(sessionTarget.threadId),\n  };\n}\n\nfunction matrixTargetsMatch(a: MatrixOriginTarget, b: MatrixOriginTarget): boolean {\n  return (\n    normalizeComparableTarget(a.to) === normalizeComparableTarget(b.to) &&\n    (a.threadId ?? \"\") === (b.threadId ?? \"\")\n  );\n}\n\nfunction hasMatrixPluginApprovers(params: { cfg: CoreConfig; accountId?: string | null }): boolean {\n  return getMatrixApprovalAuthApprovers(params).length > 0;\n}\n\nfunction availabilityState(enabled: boolean) {\n  return enabled ? ({ kind: \"enabled\" } as const) : ({ kind: \"disabled\" } as const);\n}\n\nfunction hasMatrixApprovalApprovers(params: {\n  cfg: CoreConfig;\n  accountId?: string | null;\n  approvalKind: ApprovalKind;\n}): boolean {\n  return (\n    getMatrixApprovalApprovers({\n      cfg: params.cfg,\n      accountId: params.accountId,\n      approvalKind: params.approvalKind,\n    }).length > 0\n  );\n}\n\nfunction hasAnyMatrixApprovalApprovers(params: {\n  cfg: CoreConfig;\n  accountId?: string | null;\n}): boolean {\n  return (\n    getMatrixExecApprovalApprovers(params).length > 0 ||\n    getMatrixApprovalAuthApprovers(params).length > 0\n  );\n}\n\nfunction isMatrixPluginAuthorizedSender(params: {\n  cfg: CoreConfig;\n  accountId?: string | null;\n  senderId?: string | null;\n}): boolean {\n  const normalizedSenderId = params.senderId\n    ? normalizeMatrixApproverId(params.senderId)\n    : undefined;\n  if (!normalizedSenderId) {\n    return false;\n  }\n  return getMatrixApprovalAuthApprovers(params).includes(normalizedSenderId);\n}\n\nfunction resolveSuppressionAccountId(params: {\n  target: { accountId?: string | null };\n  request: { request: { turnSourceAccountId?: string | null } };\n}): string | undefined {\n  return (\n    params.target.accountId?.trim() ||\n    params.request.request.turnSourceAccountId?.trim() ||\n    undefined\n  );\n}\n\nconst resolveMatrixOriginTarget = createChannelNativeOriginTargetResolver({\n  channel: \"matrix\",\n  shouldHandleRequest: ({ cfg, accountId, request }) =>\n    shouldHandleMatrixApprovalRequest({\n      cfg,\n      accountId,\n      request,\n    }),\n  resolveTurnSourceTarget: resolveTurnSourceMatrixOriginTarget,\n  resolveSessionTarget: resolveSessionMatrixOriginTarget,\n  targetsMatch: matrixTargetsMatch,\n  resolveFallbackTarget: (request) => {\n    const sessionConversation = resolveApprovalRequestSessionConversation({\n      request,\n      channel: \"matrix\",\n    });\n    if (!sessionConversation) {\n      return null;\n    }\n    const target = resolveMatrixNativeTarget(sessionConversation.id);\n    if (!target) {\n      return null;\n    }\n    return {\n      to: target,\n      threadId: normalizeOptionalStringifiedId(sessionConversation.threadId),\n    };\n  },\n});\n\nfunction resolveMatrixApproverDmTargets(params: {\n  cfg: CoreConfig;\n  accountId?: string | null;\n  approvalKind: ApprovalKind;\n  request: ApprovalRequest;\n}): { to: string }[] {\n  if (!shouldHandleMatrixApprovalRequest(params)) {\n    return [];\n  }\n  return getMatrixApprovalApprovers(params)\n    .map((approver) => {\n      const normalized = normalizeMatrixUserId(approver);\n      return normalized ? { to: `user:${normalized}` } : null;\n    })\n    .filter((target): target is { to: string } => target !== null);\n}\n\nconst matrixNativeApprovalCapability = createApproverRestrictedNativeApprovalCapability({\n  channel: \"matrix\",\n  channelLabel: \"Matrix\",\n  describeExecApprovalSetup: ({ accountId }) => {\n    const prefix =\n      accountId && accountId !== \"default\"\n        ? `channels.lobi.accounts.${accountId}`\n        : \"channels.lobi\";\n    return `Approve it from the Web UI or terminal UI for now. Matrix supports native exec approvals for this account. Configure \\`${prefix}.execApprovals.approvers\\` or \\`${prefix}.dm.allowFrom\\`; leave \\`${prefix}.execApprovals.enabled\\` unset/\\`auto\\` or set it to \\`true\\`.`;\n  },\n  listAccountIds: listMatrixAccountIds,\n  hasApprovers: ({ cfg, accountId }) =>\n    hasAnyMatrixApprovalApprovers({\n      cfg: cfg as CoreConfig,\n      accountId,\n    }),\n  isExecAuthorizedSender: ({ cfg, accountId, senderId }) =>\n    isMatrixExecApprovalAuthorizedSender({ cfg, accountId, senderId }),\n  isPluginAuthorizedSender: ({ cfg, accountId, senderId }) =>\n    isMatrixPluginAuthorizedSender({\n      cfg: cfg as CoreConfig,\n      accountId,\n      senderId,\n    }),\n  isNativeDeliveryEnabled: ({ cfg, accountId }) =>\n    isMatrixExecApprovalClientEnabled({ cfg, accountId }),\n  resolveNativeDeliveryMode: ({ cfg, accountId }) =>\n    resolveMatrixExecApprovalTarget({ cfg, accountId }),\n  requireMatchingTurnSourceChannel: true,\n  resolveSuppressionAccountId,\n  resolveOriginTarget: resolveMatrixOriginTarget,\n  resolveApproverDmTargets: resolveMatrixApproverDmTargets,\n  notifyOriginWhenDmOnly: true,\n  nativeRuntime: createLazyChannelApprovalNativeRuntimeAdapter({\n    eventKinds: [\"exec\", \"plugin\"],\n    isConfigured: ({ cfg, accountId }) =>\n      isMatrixAnyApprovalClientEnabled({\n        cfg,\n        accountId,\n      }),\n    shouldHandle: ({ cfg, accountId, request }) =>\n      shouldHandleMatrixApprovalRequest({\n        cfg,\n        accountId,\n        request,\n      }),\n    load: async () =>\n      (await import(\"./approval-handler.runtime.js\"))\n        .matrixApprovalNativeRuntime as unknown as ChannelApprovalNativeRuntimeAdapter,\n  }),\n});\n\nconst splitMatrixApprovalCapability = splitChannelApprovalCapability(\n  matrixNativeApprovalCapability,\n);\nconst matrixBaseNativeApprovalAdapter = splitMatrixApprovalCapability.native;\nconst matrixBaseDeliveryAdapter = splitMatrixApprovalCapability.delivery;\ntype MatrixForwardingSuppressionParams = Parameters<\n  NonNullable<NonNullable<typeof matrixBaseDeliveryAdapter>[\"shouldSuppressForwardingFallback\"]>\n>[0];\nconst matrixDeliveryAdapter = matrixBaseDeliveryAdapter && {\n  ...matrixBaseDeliveryAdapter,\n  shouldSuppressForwardingFallback: (params: MatrixForwardingSuppressionParams) => {\n    const accountId = resolveSuppressionAccountId(params);\n    if (\n      !hasMatrixApprovalApprovers({\n        cfg: params.cfg as CoreConfig,\n        accountId,\n        approvalKind: params.approvalKind,\n      })\n    ) {\n      return false;\n    }\n    return matrixBaseDeliveryAdapter.shouldSuppressForwardingFallback?.(params) ?? false;\n  },\n};\nconst matrixNativeAdapter = matrixBaseNativeApprovalAdapter && {\n  describeDeliveryCapabilities: (\n    params: Parameters<typeof matrixBaseNativeApprovalAdapter.describeDeliveryCapabilities>[0],\n  ) => {\n    const capabilities = matrixBaseNativeApprovalAdapter.describeDeliveryCapabilities(params);\n    const hasApprovers = hasMatrixApprovalApprovers({\n      cfg: params.cfg as CoreConfig,\n      accountId: params.accountId,\n      approvalKind: params.approvalKind,\n    });\n    const clientEnabled = isMatrixApprovalClientEnabled({\n      cfg: params.cfg,\n      accountId: params.accountId,\n      approvalKind: params.approvalKind,\n    });\n    return {\n      ...capabilities,\n      enabled: capabilities.enabled && hasApprovers && clientEnabled,\n    };\n  },\n  resolveOriginTarget: matrixBaseNativeApprovalAdapter.resolveOriginTarget,\n  resolveApproverDmTargets: matrixBaseNativeApprovalAdapter.resolveApproverDmTargets,\n};\n\nexport const matrixApprovalCapability = createChannelApprovalCapability({\n  authorizeActorAction: (params) => {\n    if (params.approvalKind !== \"plugin\") {\n      return matrixNativeApprovalCapability.authorizeActorAction?.(params) ?? { authorized: true };\n    }\n    if (\n      !hasMatrixPluginApprovers({\n        cfg: params.cfg as CoreConfig,\n        accountId: params.accountId,\n      })\n    ) {\n      return {\n        authorized: false,\n        reason: \"\u274C Matrix plugin approvals are not enabled for this bot account.\",\n      } as const;\n    }\n    return matrixApprovalAuth.authorizeActorAction(params);\n  },\n  getActionAvailabilityState: (params) => {\n    if (params.approvalKind === \"plugin\") {\n      return availabilityState(\n        hasMatrixPluginApprovers({\n          cfg: params.cfg as CoreConfig,\n          accountId: params.accountId,\n        }),\n      );\n    }\n    return (\n      matrixNativeApprovalCapability.getActionAvailabilityState?.(params) ?? {\n        kind: \"disabled\",\n      }\n    );\n  },\n  getExecInitiatingSurfaceState: (params) =>\n    matrixNativeApprovalCapability.getExecInitiatingSurfaceState?.(params) ??\n    ({ kind: \"disabled\" } as const),\n  describeExecApprovalSetup: matrixNativeApprovalCapability.describeExecApprovalSetup,\n  delivery: matrixDeliveryAdapter,\n  nativeRuntime: matrixNativeApprovalCapability.nativeRuntime,\n  native: matrixNativeAdapter,\n  render: matrixNativeApprovalCapability.render,\n});\n"],
+  "mappings": ";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,qDAAqD;AAE9D;AAAA,EACE;AAAA,EACA;AAAA,OACK;AAEP;AAAA,EACE;AAAA,EACA;AAAA,OACK;AAsBP,SAAS,0BAA0B,OAAuB;AACxD,QAAM,SAAS,4BAA4B,KAAK;AAChD,MAAI,CAAC,QAAQ;AACX,WAAO,gCAAgC,KAAK;AAAA,EAC9C;AACA,MAAI,OAAO,SAAS,QAAQ;AAC1B,WAAO,QAAQ,sBAAsB,OAAO,EAAE,CAAC;AAAA,EACjD;AACA,SAAO,GAAG,gCAAgC,OAAO,IAAI,CAAC,IAAI,OAAO,EAAE;AACrE;AAEA,SAAS,0BAA0B,KAA4B;AAC7D,QAAM,SAAS,4BAA4B,GAAG;AAC9C,MAAI,CAAC,QAAQ;AACX,WAAO;AAAA,EACT;AACA,SAAO,OAAO,SAAS,SAAS,QAAQ,OAAO,EAAE,KAAK,QAAQ,OAAO,EAAE;AACzE;AAEA,SAAS,oCAAoC,SAAqD;AAChG,QAAM,oBAAoB,gCAAgC,QAAQ,QAAQ,iBAAiB;AAC3F,QAAM,eAAe,QAAQ,QAAQ,cAAc,KAAK,KAAK;AAC7D,QAAM,SAAS,0BAA0B,YAAY;AACrD,MAAI,sBAAsB,YAAY,CAAC,QAAQ;AAC7C,WAAO;AAAA,EACT;AACA,SAAO;AAAA,IACL,IAAI;AAAA,IACJ,UAAU,+BAA+B,QAAQ,QAAQ,kBAAkB;AAAA,EAC7E;AACF;AAEA,SAAS,iCAAiC,eAGZ;AAC5B,QAAM,SAAS,0BAA0B,cAAc,EAAE;AACzD,MAAI,CAAC,QAAQ;AACX,WAAO;AAAA,EACT;AACA,SAAO;AAAA,IACL,IAAI;AAAA,IACJ,UAAU,+BAA+B,cAAc,QAAQ;AAAA,EACjE;AACF;AAEA,SAAS,mBAAmB,GAAuB,GAAgC;AACjF,SACE,0BAA0B,EAAE,EAAE,MAAM,0BAA0B,EAAE,EAAE,MACjE,EAAE,YAAY,SAAS,EAAE,YAAY;AAE1C;AAEA,SAAS,yBAAyB,QAAiE;AACjG,SAAO,+BAA+B,MAAM,EAAE,SAAS;AACzD;AAEA,SAAS,kBAAkB,SAAkB;AAC3C,SAAO,UAAW,EAAE,MAAM,UAAU,IAAe,EAAE,MAAM,WAAW;AACxE;AAEA,SAAS,2BAA2B,QAIxB;AACV,SACE,2BAA2B;AAAA,IACzB,KAAK,OAAO;AAAA,IACZ,WAAW,OAAO;AAAA,IAClB,cAAc,OAAO;AAAA,EACvB,CAAC,EAAE,SAAS;AAEhB;AAEA,SAAS,8BAA8B,QAG3B;AACV,SACE,+BAA+B,MAAM,EAAE,SAAS,KAChD,+BAA+B,MAAM,EAAE,SAAS;AAEpD;AAEA,SAAS,+BAA+B,QAI5B;AACV,QAAM,qBAAqB,OAAO,WAC9B,0BAA0B,OAAO,QAAQ,IACzC;AACJ,MAAI,CAAC,oBAAoB;AACvB,WAAO;AAAA,EACT;AACA,SAAO,+BAA+B,MAAM,EAAE,SAAS,kBAAkB;AAC3E;AAEA,SAAS,4BAA4B,QAGd;AACrB,SACE,OAAO,OAAO,WAAW,KAAK,KAC9B,OAAO,QAAQ,QAAQ,qBAAqB,KAAK,KACjD;AAEJ;AAEA,IAAM,4BAA4B,wCAAwC;AAAA,EACxE,SAAS;AAAA,EACT,qBAAqB,CAAC,EAAE,KAAK,WAAW,QAAQ,MAC9C,kCAAkC;AAAA,IAChC;AAAA,IACA;AAAA,IACA;AAAA,EACF,CAAC;AAAA,EACH,yBAAyB;AAAA,EACzB,sBAAsB;AAAA,EACtB,cAAc;AAAA,EACd,uBAAuB,CAAC,YAAY;AAClC,UAAM,sBAAsB,0CAA0C;AAAA,MACpE;AAAA,MACA,SAAS;AAAA,IACX,CAAC;AACD,QAAI,CAAC,qBAAqB;AACxB,aAAO;AAAA,IACT;AACA,UAAM,SAAS,0BAA0B,oBAAoB,EAAE;AAC/D,QAAI,CAAC,QAAQ;AACX,aAAO;AAAA,IACT;AACA,WAAO;AAAA,MACL,IAAI;AAAA,MACJ,UAAU,+BAA+B,oBAAoB,QAAQ;AAAA,IACvE;AAAA,EACF;AACF,CAAC;AAED,SAAS,+BAA+B,QAKnB;AACnB,MAAI,CAAC,kCAAkC,MAAM,GAAG;AAC9C,WAAO,CAAC;AAAA,EACV;AACA,SAAO,2BAA2B,MAAM,EACrC,IAAI,CAAC,aAAa;AACjB,UAAM,aAAa,sBAAsB,QAAQ;AACjD,WAAO,aAAa,EAAE,IAAI,QAAQ,UAAU,GAAG,IAAI;AAAA,EACrD,CAAC,EACA,OAAO,CAAC,WAAqC,WAAW,IAAI;AACjE;AAEA,IAAM,iCAAiC,iDAAiD;AAAA,EACtF,SAAS;AAAA,EACT,cAAc;AAAA,EACd,2BAA2B,CAAC,EAAE,UAAU,MAAM;AAC5C,UAAM,SACJ,aAAa,cAAc,YACvB,0BAA0B,SAAS,KACnC;AACN,WAAO,0HAA0H,MAAM,mCAAmC,MAAM,4BAA4B,MAAM;AAAA,EACpN;AAAA,EACA,gBAAgB;AAAA,EAChB,cAAc,CAAC,EAAE,KAAK,UAAU,MAC9B,8BAA8B;AAAA,IAC5B;AAAA,IACA;AAAA,EACF,CAAC;AAAA,EACH,wBAAwB,CAAC,EAAE,KAAK,WAAW,SAAS,MAClD,qCAAqC,EAAE,KAAK,WAAW,SAAS,CAAC;AAAA,EACnE,0BAA0B,CAAC,EAAE,KAAK,WAAW,SAAS,MACpD,+BAA+B;AAAA,IAC7B;AAAA,IACA;AAAA,IACA;AAAA,EACF,CAAC;AAAA,EACH,yBAAyB,CAAC,EAAE,KAAK,UAAU,MACzC,kCAAkC,EAAE,KAAK,UAAU,CAAC;AAAA,EACtD,2BAA2B,CAAC,EAAE,KAAK,UAAU,MAC3C,gCAAgC,EAAE,KAAK,UAAU,CAAC;AAAA,EACpD,kCAAkC;AAAA,EAClC;AAAA,EACA,qBAAqB;AAAA,EACrB,0BAA0B;AAAA,EAC1B,wBAAwB;AAAA,EACxB,eAAe,8CAA8C;AAAA,IAC3D,YAAY,CAAC,QAAQ,QAAQ;AAAA,IAC7B,cAAc,CAAC,EAAE,KAAK,UAAU,MAC9B,iCAAiC;AAAA,MAC/B;AAAA,MACA;AAAA,IACF,CAAC;AAAA,IACH,cAAc,CAAC,EAAE,KAAK,WAAW,QAAQ,MACvC,kCAAkC;AAAA,MAChC;AAAA,MACA;AAAA,MACA;AAAA,IACF,CAAC;AAAA,IACH,MAAM,aACH,MAAM,OAAO,mCAA+B,GAC1C;AAAA,EACP,CAAC;AACH,CAAC;AAED,IAAM,gCAAgC;AAAA,EACpC;AACF;AACA,IAAM,kCAAkC,8BAA8B;AACtE,IAAM,4BAA4B,8BAA8B;AAIhE,IAAM,wBAAwB,6BAA6B;AAAA,EACzD,GAAG;AAAA,EACH,kCAAkC,CAAC,WAA8C;AAC/E,UAAM,YAAY,4BAA4B,MAAM;AACpD,QACE,CAAC,2BAA2B;AAAA,MAC1B,KAAK,OAAO;AAAA,MACZ;AAAA,MACA,cAAc,OAAO;AAAA,IACvB,CAAC,GACD;AACA,aAAO;AAAA,IACT;AACA,WAAO,0BAA0B,mCAAmC,MAAM,KAAK;AAAA,EACjF;AACF;AACA,IAAM,sBAAsB,mCAAmC;AAAA,EAC7D,8BAA8B,CAC5B,WACG;AACH,UAAM,eAAe,gCAAgC,6BAA6B,MAAM;AACxF,UAAM,eAAe,2BAA2B;AAAA,MAC9C,KAAK,OAAO;AAAA,MACZ,WAAW,OAAO;AAAA,MAClB,cAAc,OAAO;AAAA,IACvB,CAAC;AACD,UAAM,gBAAgB,8BAA8B;AAAA,MAClD,KAAK,OAAO;AAAA,MACZ,WAAW,OAAO;AAAA,MAClB,cAAc,OAAO;AAAA,IACvB,CAAC;AACD,WAAO;AAAA,MACL,GAAG;AAAA,MACH,SAAS,aAAa,WAAW,gBAAgB;AAAA,IACnD;AAAA,EACF;AAAA,EACA,qBAAqB,gCAAgC;AAAA,EACrD,0BAA0B,gCAAgC;AAC5D;AAEO,IAAM,2BAA2B,gCAAgC;AAAA,EACtE,sBAAsB,CAAC,WAAW;AAChC,QAAI,OAAO,iBAAiB,UAAU;AACpC,aAAO,+BAA+B,uBAAuB,MAAM,KAAK,EAAE,YAAY,KAAK;AAAA,IAC7F;AACA,QACE,CAAC,yBAAyB;AAAA,MACxB,KAAK,OAAO;AAAA,MACZ,WAAW,OAAO;AAAA,IACpB,CAAC,GACD;AACA,aAAO;AAAA,QACL,YAAY;AAAA,QACZ,QAAQ;AAAA,MACV;AAAA,IACF;AACA,WAAO,mBAAmB,qBAAqB,MAAM;AAAA,EACvD;AAAA,EACA,4BAA4B,CAAC,WAAW;AACtC,QAAI,OAAO,iBAAiB,UAAU;AACpC,aAAO;AAAA,QACL,yBAAyB;AAAA,UACvB,KAAK,OAAO;AAAA,UACZ,WAAW,OAAO;AAAA,QACpB,CAAC;AAAA,MACH;AAAA,IACF;AACA,WACE,+BAA+B,6BAA6B,MAAM,KAAK;AAAA,MACrE,MAAM;AAAA,IACR;AAAA,EAEJ;AAAA,EACA,+BAA+B,CAAC,WAC9B,+BAA+B,gCAAgC,MAAM,KACpE,EAAE,MAAM,WAAW;AAAA,EACtB,2BAA2B,+BAA+B;AAAA,EAC1D,UAAU;AAAA,EACV,eAAe,+BAA+B;AAAA,EAC9C,QAAQ;AAAA,EACR,QAAQ,+BAA+B;AACzC,CAAC;",
+  "names": []
+}

package/dist/chunk-ERCH75SH.js

@@ -0,0 +1,292 @@
+import {
+  CryptoEvent
+} from "./chunk-FQ4R7IOX.js";
+import {
+  LogService,
+  noop
+} from "./chunk-BMFZL2P4.js";
+import {
+  init_shims
+} from "./chunk-7FLQSTPG.js";
+
+// src/matrix/sdk/decrypt-bridge.ts
+init_shims();
+var MATRIX_DECRYPT_RETRY_BASE_DELAY_MS = 1500;
+var MATRIX_DECRYPT_RETRY_MAX_DELAY_MS = 3e4;
+var MATRIX_DECRYPT_RETRY_MAX_ATTEMPTS = 8;
+function resolveDecryptRetryKey(roomId, eventId) {
+  if (!roomId || !eventId) {
+    return null;
+  }
+  return `${roomId}|${eventId}`;
+}
+function isDecryptionFailure(event) {
+  return typeof event.isDecryptionFailure === "function" && event.isDecryptionFailure();
+}
+var MatrixDecryptBridge = class {
+  constructor(deps) {
+    this.deps = deps;
+    this.trackedEncryptedEvents = /* @__PURE__ */ new WeakSet();
+    this.decryptedMessageDedupe = /* @__PURE__ */ new Map();
+    this.decryptRetries = /* @__PURE__ */ new Map();
+    this.failedDecryptionsNotified = /* @__PURE__ */ new Set();
+    this.activeRetryRuns = 0;
+    this.retryIdleResolvers = /* @__PURE__ */ new Set();
+    this.cryptoRetrySignalsBound = false;
+  }
+  shouldEmitUnencryptedMessage(roomId, eventId) {
+    if (!eventId) {
+      return true;
+    }
+    const key = `${roomId}|${eventId}`;
+    const createdAt = this.decryptedMessageDedupe.get(key);
+    if (createdAt === void 0) {
+      return true;
+    }
+    this.decryptedMessageDedupe.delete(key);
+    return false;
+  }
+  attachEncryptedEvent(event, roomId) {
+    if (this.trackedEncryptedEvents.has(event)) {
+      return;
+    }
+    this.trackedEncryptedEvents.add(event);
+    event.on("decrypted", (decryptedEvent, err) => {
+      this.handleEncryptedEventDecrypted({
+        roomId,
+        encryptedEvent: event,
+        decryptedEvent,
+        err
+      });
+    });
+  }
+  retryPendingNow(reason) {
+    const pending = Array.from(this.decryptRetries.entries());
+    if (pending.length === 0) {
+      return;
+    }
+    LogService.debug("MatrixClientLite", `Retrying pending decryptions due to ${reason}`);
+    for (const [retryKey, state] of pending) {
+      if (state.timer) {
+        clearTimeout(state.timer);
+        state.timer = null;
+      }
+      if (state.inFlight) {
+        continue;
+      }
+      this.runDecryptRetry(retryKey).catch(noop);
+    }
+  }
+  bindCryptoRetrySignals(crypto) {
+    if (!crypto || this.cryptoRetrySignalsBound) {
+      return;
+    }
+    this.cryptoRetrySignalsBound = true;
+    const trigger = (reason) => {
+      this.retryPendingNow(reason);
+    };
+    crypto.on(CryptoEvent.KeyBackupDecryptionKeyCached, () => {
+      trigger("crypto.keyBackupDecryptionKeyCached");
+    });
+    crypto.on(CryptoEvent.RehydrationCompleted, () => {
+      trigger("dehydration.RehydrationCompleted");
+    });
+    crypto.on(CryptoEvent.DevicesUpdated, () => {
+      trigger("crypto.devicesUpdated");
+    });
+    crypto.on(CryptoEvent.KeysChanged, () => {
+      trigger("crossSigning.keysChanged");
+    });
+  }
+  stop() {
+    for (const retryKey of this.decryptRetries.keys()) {
+      this.clearDecryptRetry(retryKey);
+    }
+  }
+  async drainPendingDecryptions(reason) {
+    for (let attempts = 0; attempts < MATRIX_DECRYPT_RETRY_MAX_ATTEMPTS; attempts += 1) {
+      if (this.decryptRetries.size === 0) {
+        return;
+      }
+      this.retryPendingNow(reason);
+      await this.waitForActiveRetryRunsToFinish();
+      const hasPendingRetryTimers = Array.from(this.decryptRetries.values()).some(
+        (state) => state.timer || state.inFlight
+      );
+      if (!hasPendingRetryTimers) {
+        return;
+      }
+    }
+  }
+  handleEncryptedEventDecrypted(params) {
+    const decryptedRoomId = params.decryptedEvent.getRoomId() || params.roomId;
+    const decryptedRaw = this.deps.toRaw(params.decryptedEvent);
+    const retryEventId = decryptedRaw.event_id || params.encryptedEvent.getId() || "";
+    const retryKey = resolveDecryptRetryKey(decryptedRoomId, retryEventId);
+    if (params.err) {
+      this.emitFailedDecryptionOnce(retryKey, decryptedRoomId, decryptedRaw, params.err);
+      this.scheduleDecryptRetry({
+        event: params.encryptedEvent,
+        roomId: decryptedRoomId,
+        eventId: retryEventId
+      });
+      return;
+    }
+    if (isDecryptionFailure(params.decryptedEvent)) {
+      this.emitFailedDecryptionOnce(
+        retryKey,
+        decryptedRoomId,
+        decryptedRaw,
+        new Error("Matrix event failed to decrypt")
+      );
+      this.scheduleDecryptRetry({
+        event: params.encryptedEvent,
+        roomId: decryptedRoomId,
+        eventId: retryEventId
+      });
+      return;
+    }
+    if (retryKey) {
+      this.clearDecryptRetry(retryKey);
+    }
+    this.rememberDecryptedMessage(decryptedRoomId, decryptedRaw.event_id);
+    this.deps.emitDecryptedEvent(decryptedRoomId, decryptedRaw);
+    this.deps.emitMessage(decryptedRoomId, decryptedRaw);
+  }
+  emitFailedDecryptionOnce(retryKey, roomId, event, error) {
+    if (retryKey) {
+      if (this.failedDecryptionsNotified.has(retryKey)) {
+        return;
+      }
+      this.failedDecryptionsNotified.add(retryKey);
+    }
+    this.deps.emitFailedDecryption(roomId, event, error);
+  }
+  scheduleDecryptRetry(params) {
+    const retryKey = resolveDecryptRetryKey(params.roomId, params.eventId);
+    if (!retryKey) {
+      return;
+    }
+    const existing = this.decryptRetries.get(retryKey);
+    if (existing?.timer || existing?.inFlight) {
+      return;
+    }
+    const attempts = (existing?.attempts ?? 0) + 1;
+    if (attempts > MATRIX_DECRYPT_RETRY_MAX_ATTEMPTS) {
+      this.clearDecryptRetry(retryKey);
+      LogService.debug(
+        "MatrixClientLite",
+        `Giving up decryption retry for ${params.eventId} in ${params.roomId} after ${attempts - 1} attempts`
+      );
+      return;
+    }
+    const delayMs = Math.min(
+      MATRIX_DECRYPT_RETRY_BASE_DELAY_MS * 2 ** (attempts - 1),
+      MATRIX_DECRYPT_RETRY_MAX_DELAY_MS
+    );
+    const next = {
+      event: params.event,
+      roomId: params.roomId,
+      eventId: params.eventId,
+      attempts,
+      inFlight: false,
+      timer: null
+    };
+    next.timer = setTimeout(() => {
+      this.runDecryptRetry(retryKey).catch(noop);
+    }, delayMs);
+    this.decryptRetries.set(retryKey, next);
+  }
+  async runDecryptRetry(retryKey) {
+    const state = this.decryptRetries.get(retryKey);
+    if (!state || state.inFlight) {
+      return;
+    }
+    state.inFlight = true;
+    state.timer = null;
+    this.activeRetryRuns += 1;
+    const canDecrypt = typeof this.deps.client.decryptEventIfNeeded === "function";
+    if (!canDecrypt) {
+      this.clearDecryptRetry(retryKey);
+      this.activeRetryRuns = Math.max(0, this.activeRetryRuns - 1);
+      this.resolveRetryIdleIfNeeded();
+      return;
+    }
+    try {
+      await this.deps.client.decryptEventIfNeeded?.(state.event, {
+        isRetry: true
+      });
+    } catch {
+    } finally {
+      state.inFlight = false;
+      this.activeRetryRuns = Math.max(0, this.activeRetryRuns - 1);
+      this.resolveRetryIdleIfNeeded();
+    }
+    if (this.decryptRetries.get(retryKey) !== state) {
+      return;
+    }
+    if (isDecryptionFailure(state.event)) {
+      this.scheduleDecryptRetry(state);
+      return;
+    }
+    this.clearDecryptRetry(retryKey);
+  }
+  clearDecryptRetry(retryKey) {
+    const state = this.decryptRetries.get(retryKey);
+    if (state?.timer) {
+      clearTimeout(state.timer);
+    }
+    this.decryptRetries.delete(retryKey);
+    this.failedDecryptionsNotified.delete(retryKey);
+  }
+  rememberDecryptedMessage(roomId, eventId) {
+    if (!eventId) {
+      return;
+    }
+    const now = Date.now();
+    this.pruneDecryptedMessageDedupe(now);
+    this.decryptedMessageDedupe.set(`${roomId}|${eventId}`, now);
+  }
+  pruneDecryptedMessageDedupe(now) {
+    const ttlMs = 3e4;
+    for (const [key, createdAt] of this.decryptedMessageDedupe) {
+      if (now - createdAt > ttlMs) {
+        this.decryptedMessageDedupe.delete(key);
+      }
+    }
+    const maxEntries = 2048;
+    while (this.decryptedMessageDedupe.size > maxEntries) {
+      const oldest = this.decryptedMessageDedupe.keys().next().value;
+      if (oldest === void 0) {
+        break;
+      }
+      this.decryptedMessageDedupe.delete(oldest);
+    }
+  }
+  async waitForActiveRetryRunsToFinish() {
+    if (this.activeRetryRuns === 0) {
+      return;
+    }
+    await new Promise((resolve) => {
+      this.retryIdleResolvers.add(resolve);
+      if (this.activeRetryRuns === 0) {
+        this.retryIdleResolvers.delete(resolve);
+        resolve();
+      }
+    });
+  }
+  resolveRetryIdleIfNeeded() {
+    if (this.activeRetryRuns !== 0) {
+      return;
+    }
+    for (const resolve of this.retryIdleResolvers) {
+      resolve();
+    }
+    this.retryIdleResolvers.clear();
+  }
+};
+
+export {
+  MatrixDecryptBridge
+};
+//# sourceMappingURL=chunk-ERCH75SH.js.map

package/dist/chunk-ERCH75SH.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../src/matrix/sdk/decrypt-bridge.ts"],
+  "sourcesContent": ["import { CryptoEvent } from \"@archipelagolab/lobi-js-sdk/lib/crypto-api/CryptoEvent.js\";\nimport {  type MatrixEvent } from \"@archipelagolab/lobi-js-sdk/lib/lobi.js\";\nimport { LogService, noop } from \"./logger.js\";\n\ntype MatrixDecryptIfNeededClient = {\n  decryptEventIfNeeded?: (\n    event: MatrixEvent,\n    opts?: {\n      isRetry?: boolean;\n    },\n  ) => Promise<void>;\n};\n\ntype MatrixDecryptRetryState = {\n  event: MatrixEvent;\n  roomId: string;\n  eventId: string;\n  attempts: number;\n  inFlight: boolean;\n  timer: ReturnType<typeof setTimeout> | null;\n};\n\ntype DecryptBridgeRawEvent = {\n  event_id: string;\n};\n\ntype MatrixCryptoRetrySignalSource = {\n  on: (eventName: string, listener: (...args: unknown[]) => void) => void;\n};\n\nconst MATRIX_DECRYPT_RETRY_BASE_DELAY_MS = 1_500;\nconst MATRIX_DECRYPT_RETRY_MAX_DELAY_MS = 30_000;\nconst MATRIX_DECRYPT_RETRY_MAX_ATTEMPTS = 8;\n\nfunction resolveDecryptRetryKey(roomId: string, eventId: string): string | null {\n  if (!roomId || !eventId) {\n    return null;\n  }\n  return `${roomId}|${eventId}`;\n}\n\nfunction isDecryptionFailure(event: MatrixEvent): boolean {\n  return (\n    typeof (event as { isDecryptionFailure?: () => boolean }).isDecryptionFailure === \"function\" &&\n    (event as { isDecryptionFailure: () => boolean }).isDecryptionFailure()\n  );\n}\n\nexport class MatrixDecryptBridge<TRawEvent extends DecryptBridgeRawEvent> {\n  private readonly trackedEncryptedEvents = new WeakSet<object>();\n  private readonly decryptedMessageDedupe = new Map<string, number>();\n  private readonly decryptRetries = new Map<string, MatrixDecryptRetryState>();\n  private readonly failedDecryptionsNotified = new Set<string>();\n  private activeRetryRuns = 0;\n  private readonly retryIdleResolvers = new Set<() => void>();\n  private cryptoRetrySignalsBound = false;\n\n  constructor(\n    private readonly deps: {\n      client: MatrixDecryptIfNeededClient;\n      toRaw: (event: MatrixEvent) => TRawEvent;\n      emitDecryptedEvent: (roomId: string, event: TRawEvent) => void;\n      emitMessage: (roomId: string, event: TRawEvent) => void;\n      emitFailedDecryption: (roomId: string, event: TRawEvent, error: Error) => void;\n    },\n  ) {}\n\n  shouldEmitUnencryptedMessage(roomId: string, eventId: string): boolean {\n    if (!eventId) {\n      return true;\n    }\n    const key = `${roomId}|${eventId}`;\n    const createdAt = this.decryptedMessageDedupe.get(key);\n    if (createdAt === undefined) {\n      return true;\n    }\n    this.decryptedMessageDedupe.delete(key);\n    return false;\n  }\n\n  attachEncryptedEvent(event: MatrixEvent, roomId: string): void {\n    if (this.trackedEncryptedEvents.has(event)) {\n      return;\n    }\n    this.trackedEncryptedEvents.add(event);\n    event.on(\"decrypted\", (decryptedEvent: MatrixEvent, err?: Error) => {\n      this.handleEncryptedEventDecrypted({\n        roomId,\n        encryptedEvent: event,\n        decryptedEvent,\n        err,\n      });\n    });\n  }\n\n  retryPendingNow(reason: string): void {\n    const pending = Array.from(this.decryptRetries.entries());\n    if (pending.length === 0) {\n      return;\n    }\n    LogService.debug(\"MatrixClientLite\", `Retrying pending decryptions due to ${reason}`);\n    for (const [retryKey, state] of pending) {\n      if (state.timer) {\n        clearTimeout(state.timer);\n        state.timer = null;\n      }\n      if (state.inFlight) {\n        continue;\n      }\n      this.runDecryptRetry(retryKey).catch(noop);\n    }\n  }\n\n  bindCryptoRetrySignals(crypto: MatrixCryptoRetrySignalSource | undefined): void {\n    if (!crypto || this.cryptoRetrySignalsBound) {\n      return;\n    }\n    this.cryptoRetrySignalsBound = true;\n\n    const trigger = (reason: string): void => {\n      this.retryPendingNow(reason);\n    };\n\n    crypto.on(CryptoEvent.KeyBackupDecryptionKeyCached, () => {\n      trigger(\"crypto.keyBackupDecryptionKeyCached\");\n    });\n    crypto.on(CryptoEvent.RehydrationCompleted, () => {\n      trigger(\"dehydration.RehydrationCompleted\");\n    });\n    crypto.on(CryptoEvent.DevicesUpdated, () => {\n      trigger(\"crypto.devicesUpdated\");\n    });\n    crypto.on(CryptoEvent.KeysChanged, () => {\n      trigger(\"crossSigning.keysChanged\");\n    });\n  }\n\n  stop(): void {\n    for (const retryKey of this.decryptRetries.keys()) {\n      this.clearDecryptRetry(retryKey);\n    }\n  }\n\n  async drainPendingDecryptions(reason: string): Promise<void> {\n    for (let attempts = 0; attempts < MATRIX_DECRYPT_RETRY_MAX_ATTEMPTS; attempts += 1) {\n      if (this.decryptRetries.size === 0) {\n        return;\n      }\n      this.retryPendingNow(reason);\n      await this.waitForActiveRetryRunsToFinish();\n      const hasPendingRetryTimers = Array.from(this.decryptRetries.values()).some(\n        (state) => state.timer || state.inFlight,\n      );\n      if (!hasPendingRetryTimers) {\n        return;\n      }\n    }\n  }\n\n  private handleEncryptedEventDecrypted(params: {\n    roomId: string;\n    encryptedEvent: MatrixEvent;\n    decryptedEvent: MatrixEvent;\n    err?: Error;\n  }): void {\n    const decryptedRoomId = params.decryptedEvent.getRoomId() || params.roomId;\n    const decryptedRaw = this.deps.toRaw(params.decryptedEvent);\n    const retryEventId = decryptedRaw.event_id || params.encryptedEvent.getId() || \"\";\n    const retryKey = resolveDecryptRetryKey(decryptedRoomId, retryEventId);\n\n    if (params.err) {\n      this.emitFailedDecryptionOnce(retryKey, decryptedRoomId, decryptedRaw, params.err);\n      this.scheduleDecryptRetry({\n        event: params.encryptedEvent,\n        roomId: decryptedRoomId,\n        eventId: retryEventId,\n      });\n      return;\n    }\n\n    if (isDecryptionFailure(params.decryptedEvent)) {\n      this.emitFailedDecryptionOnce(\n        retryKey,\n        decryptedRoomId,\n        decryptedRaw,\n        new Error(\"Matrix event failed to decrypt\"),\n      );\n      this.scheduleDecryptRetry({\n        event: params.encryptedEvent,\n        roomId: decryptedRoomId,\n        eventId: retryEventId,\n      });\n      return;\n    }\n\n    if (retryKey) {\n      this.clearDecryptRetry(retryKey);\n    }\n    this.rememberDecryptedMessage(decryptedRoomId, decryptedRaw.event_id);\n    this.deps.emitDecryptedEvent(decryptedRoomId, decryptedRaw);\n    this.deps.emitMessage(decryptedRoomId, decryptedRaw);\n  }\n\n  private emitFailedDecryptionOnce(\n    retryKey: string | null,\n    roomId: string,\n    event: TRawEvent,\n    error: Error,\n  ): void {\n    if (retryKey) {\n      if (this.failedDecryptionsNotified.has(retryKey)) {\n        return;\n      }\n      this.failedDecryptionsNotified.add(retryKey);\n    }\n    this.deps.emitFailedDecryption(roomId, event, error);\n  }\n\n  private scheduleDecryptRetry(params: {\n    event: MatrixEvent;\n    roomId: string;\n    eventId: string;\n  }): void {\n    const retryKey = resolveDecryptRetryKey(params.roomId, params.eventId);\n    if (!retryKey) {\n      return;\n    }\n    const existing = this.decryptRetries.get(retryKey);\n    if (existing?.timer || existing?.inFlight) {\n      return;\n    }\n    const attempts = (existing?.attempts ?? 0) + 1;\n    if (attempts > MATRIX_DECRYPT_RETRY_MAX_ATTEMPTS) {\n      this.clearDecryptRetry(retryKey);\n      LogService.debug(\n        \"MatrixClientLite\",\n        `Giving up decryption retry for ${params.eventId} in ${params.roomId} after ${attempts - 1} attempts`,\n      );\n      return;\n    }\n    const delayMs = Math.min(\n      MATRIX_DECRYPT_RETRY_BASE_DELAY_MS * 2 ** (attempts - 1),\n      MATRIX_DECRYPT_RETRY_MAX_DELAY_MS,\n    );\n    const next: MatrixDecryptRetryState = {\n      event: params.event,\n      roomId: params.roomId,\n      eventId: params.eventId,\n      attempts,\n      inFlight: false,\n      timer: null,\n    };\n    next.timer = setTimeout(() => {\n      this.runDecryptRetry(retryKey).catch(noop);\n    }, delayMs);\n    this.decryptRetries.set(retryKey, next);\n  }\n\n  private async runDecryptRetry(retryKey: string): Promise<void> {\n    const state = this.decryptRetries.get(retryKey);\n    if (!state || state.inFlight) {\n      return;\n    }\n\n    state.inFlight = true;\n    state.timer = null;\n    this.activeRetryRuns += 1;\n    const canDecrypt = typeof this.deps.client.decryptEventIfNeeded === \"function\";\n    if (!canDecrypt) {\n      this.clearDecryptRetry(retryKey);\n      this.activeRetryRuns = Math.max(0, this.activeRetryRuns - 1);\n      this.resolveRetryIdleIfNeeded();\n      return;\n    }\n\n    try {\n      await this.deps.client.decryptEventIfNeeded?.(state.event, {\n        isRetry: true,\n      });\n    } catch {\n      // Retry with backoff until we hit the configured retry cap.\n    } finally {\n      state.inFlight = false;\n      this.activeRetryRuns = Math.max(0, this.activeRetryRuns - 1);\n      this.resolveRetryIdleIfNeeded();\n    }\n\n    if (this.decryptRetries.get(retryKey) !== state) {\n      return;\n    }\n    if (isDecryptionFailure(state.event)) {\n      this.scheduleDecryptRetry(state);\n      return;\n    }\n\n    this.clearDecryptRetry(retryKey);\n  }\n\n  private clearDecryptRetry(retryKey: string): void {\n    const state = this.decryptRetries.get(retryKey);\n    if (state?.timer) {\n      clearTimeout(state.timer);\n    }\n    this.decryptRetries.delete(retryKey);\n    this.failedDecryptionsNotified.delete(retryKey);\n  }\n\n  private rememberDecryptedMessage(roomId: string, eventId: string): void {\n    if (!eventId) {\n      return;\n    }\n    const now = Date.now();\n    this.pruneDecryptedMessageDedupe(now);\n    this.decryptedMessageDedupe.set(`${roomId}|${eventId}`, now);\n  }\n\n  private pruneDecryptedMessageDedupe(now: number): void {\n    const ttlMs = 30_000;\n    for (const [key, createdAt] of this.decryptedMessageDedupe) {\n      if (now - createdAt > ttlMs) {\n        this.decryptedMessageDedupe.delete(key);\n      }\n    }\n    const maxEntries = 2048;\n    while (this.decryptedMessageDedupe.size > maxEntries) {\n      const oldest = this.decryptedMessageDedupe.keys().next().value;\n      if (oldest === undefined) {\n        break;\n      }\n      this.decryptedMessageDedupe.delete(oldest);\n    }\n  }\n\n  private async waitForActiveRetryRunsToFinish(): Promise<void> {\n    if (this.activeRetryRuns === 0) {\n      return;\n    }\n    await new Promise<void>((resolve) => {\n      this.retryIdleResolvers.add(resolve);\n      if (this.activeRetryRuns === 0) {\n        this.retryIdleResolvers.delete(resolve);\n        resolve();\n      }\n    });\n  }\n\n  private resolveRetryIdleIfNeeded(): void {\n    if (this.activeRetryRuns !== 0) {\n      return;\n    }\n    for (const resolve of this.retryIdleResolvers) {\n      resolve();\n    }\n    this.retryIdleResolvers.clear();\n  }\n}\n"],
+  "mappings": ";;;;;;;;;;;;AAAA;AA8BA,IAAM,qCAAqC;AAC3C,IAAM,oCAAoC;AAC1C,IAAM,oCAAoC;AAE1C,SAAS,uBAAuB,QAAgB,SAAgC;AAC9E,MAAI,CAAC,UAAU,CAAC,SAAS;AACvB,WAAO;AAAA,EACT;AACA,SAAO,GAAG,MAAM,IAAI,OAAO;AAC7B;AAEA,SAAS,oBAAoB,OAA6B;AACxD,SACE,OAAQ,MAAkD,wBAAwB,cACjF,MAAiD,oBAAoB;AAE1E;AAEO,IAAM,sBAAN,MAAmE;AAAA,EASxE,YACmB,MAOjB;AAPiB;AATnB,SAAiB,yBAAyB,oBAAI,QAAgB;AAC9D,SAAiB,yBAAyB,oBAAI,IAAoB;AAClE,SAAiB,iBAAiB,oBAAI,IAAqC;AAC3E,SAAiB,4BAA4B,oBAAI,IAAY;AAC7D,SAAQ,kBAAkB;AAC1B,SAAiB,qBAAqB,oBAAI,IAAgB;AAC1D,SAAQ,0BAA0B;AAAA,EAU/B;AAAA,EAEH,6BAA6B,QAAgB,SAA0B;AACrE,QAAI,CAAC,SAAS;AACZ,aAAO;AAAA,IACT;AACA,UAAM,MAAM,GAAG,MAAM,IAAI,OAAO;AAChC,UAAM,YAAY,KAAK,uBAAuB,IAAI,GAAG;AACrD,QAAI,cAAc,QAAW;AAC3B,aAAO;AAAA,IACT;AACA,SAAK,uBAAuB,OAAO,GAAG;AACtC,WAAO;AAAA,EACT;AAAA,EAEA,qBAAqB,OAAoB,QAAsB;AAC7D,QAAI,KAAK,uBAAuB,IAAI,KAAK,GAAG;AAC1C;AAAA,IACF;AACA,SAAK,uBAAuB,IAAI,KAAK;AACrC,UAAM,GAAG,aAAa,CAAC,gBAA6B,QAAgB;AAClE,WAAK,8BAA8B;AAAA,QACjC;AAAA,QACA,gBAAgB;AAAA,QAChB;AAAA,QACA;AAAA,MACF,CAAC;AAAA,IACH,CAAC;AAAA,EACH;AAAA,EAEA,gBAAgB,QAAsB;AACpC,UAAM,UAAU,MAAM,KAAK,KAAK,eAAe,QAAQ,CAAC;AACxD,QAAI,QAAQ,WAAW,GAAG;AACxB;AAAA,IACF;AACA,eAAW,MAAM,oBAAoB,uCAAuC,MAAM,EAAE;AACpF,eAAW,CAAC,UAAU,KAAK,KAAK,SAAS;AACvC,UAAI,MAAM,OAAO;AACf,qBAAa,MAAM,KAAK;AACxB,cAAM,QAAQ;AAAA,MAChB;AACA,UAAI,MAAM,UAAU;AAClB;AAAA,MACF;AACA,WAAK,gBAAgB,QAAQ,EAAE,MAAM,IAAI;AAAA,IAC3C;AAAA,EACF;AAAA,EAEA,uBAAuB,QAAyD;AAC9E,QAAI,CAAC,UAAU,KAAK,yBAAyB;AAC3C;AAAA,IACF;AACA,SAAK,0BAA0B;AAE/B,UAAM,UAAU,CAAC,WAAyB;AACxC,WAAK,gBAAgB,MAAM;AAAA,IAC7B;AAEA,WAAO,GAAG,YAAY,8BAA8B,MAAM;AACxD,cAAQ,qCAAqC;AAAA,IAC/C,CAAC;AACD,WAAO,GAAG,YAAY,sBAAsB,MAAM;AAChD,cAAQ,kCAAkC;AAAA,IAC5C,CAAC;AACD,WAAO,GAAG,YAAY,gBAAgB,MAAM;AAC1C,cAAQ,uBAAuB;AAAA,IACjC,CAAC;AACD,WAAO,GAAG,YAAY,aAAa,MAAM;AACvC,cAAQ,0BAA0B;AAAA,IACpC,CAAC;AAAA,EACH;AAAA,EAEA,OAAa;AACX,eAAW,YAAY,KAAK,eAAe,KAAK,GAAG;AACjD,WAAK,kBAAkB,QAAQ;AAAA,IACjC;AAAA,EACF;AAAA,EAEA,MAAM,wBAAwB,QAA+B;AAC3D,aAAS,WAAW,GAAG,WAAW,mCAAmC,YAAY,GAAG;AAClF,UAAI,KAAK,eAAe,SAAS,GAAG;AAClC;AAAA,MACF;AACA,WAAK,gBAAgB,MAAM;AAC3B,YAAM,KAAK,+BAA+B;AAC1C,YAAM,wBAAwB,MAAM,KAAK,KAAK,eAAe,OAAO,CAAC,EAAE;AAAA,QACrE,CAAC,UAAU,MAAM,SAAS,MAAM;AAAA,MAClC;AACA,UAAI,CAAC,uBAAuB;AAC1B;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA,EAEQ,8BAA8B,QAK7B;AACP,UAAM,kBAAkB,OAAO,eAAe,UAAU,KAAK,OAAO;AACpE,UAAM,eAAe,KAAK,KAAK,MAAM,OAAO,cAAc;AAC1D,UAAM,eAAe,aAAa,YAAY,OAAO,eAAe,MAAM,KAAK;AAC/E,UAAM,WAAW,uBAAuB,iBAAiB,YAAY;AAErE,QAAI,OAAO,KAAK;AACd,WAAK,yBAAyB,UAAU,iBAAiB,cAAc,OAAO,GAAG;AACjF,WAAK,qBAAqB;AAAA,QACxB,OAAO,OAAO;AAAA,QACd,QAAQ;AAAA,QACR,SAAS;AAAA,MACX,CAAC;AACD;AAAA,IACF;AAEA,QAAI,oBAAoB,OAAO,cAAc,GAAG;AAC9C,WAAK;AAAA,QACH;AAAA,QACA;AAAA,QACA;AAAA,QACA,IAAI,MAAM,gCAAgC;AAAA,MAC5C;AACA,WAAK,qBAAqB;AAAA,QACxB,OAAO,OAAO;AAAA,QACd,QAAQ;AAAA,QACR,SAAS;AAAA,MACX,CAAC;AACD;AAAA,IACF;AAEA,QAAI,UAAU;AACZ,WAAK,kBAAkB,QAAQ;AAAA,IACjC;AACA,SAAK,yBAAyB,iBAAiB,aAAa,QAAQ;AACpE,SAAK,KAAK,mBAAmB,iBAAiB,YAAY;AAC1D,SAAK,KAAK,YAAY,iBAAiB,YAAY;AAAA,EACrD;AAAA,EAEQ,yBACN,UACA,QACA,OACA,OACM;AACN,QAAI,UAAU;AACZ,UAAI,KAAK,0BAA0B,IAAI,QAAQ,GAAG;AAChD;AAAA,MACF;AACA,WAAK,0BAA0B,IAAI,QAAQ;AAAA,IAC7C;AACA,SAAK,KAAK,qBAAqB,QAAQ,OAAO,KAAK;AAAA,EACrD;AAAA,EAEQ,qBAAqB,QAIpB;AACP,UAAM,WAAW,uBAAuB,OAAO,QAAQ,OAAO,OAAO;AACrE,QAAI,CAAC,UAAU;AACb;AAAA,IACF;AACA,UAAM,WAAW,KAAK,eAAe,IAAI,QAAQ;AACjD,QAAI,UAAU,SAAS,UAAU,UAAU;AACzC;AAAA,IACF;AACA,UAAM,YAAY,UAAU,YAAY,KAAK;AAC7C,QAAI,WAAW,mCAAmC;AAChD,WAAK,kBAAkB,QAAQ;AAC/B,iBAAW;AAAA,QACT;AAAA,QACA,kCAAkC,OAAO,OAAO,OAAO,OAAO,MAAM,UAAU,WAAW,CAAC;AAAA,MAC5F;AACA;AAAA,IACF;AACA,UAAM,UAAU,KAAK;AAAA,MACnB,qCAAqC,MAAM,WAAW;AAAA,MACtD;AAAA,IACF;AACA,UAAM,OAAgC;AAAA,MACpC,OAAO,OAAO;AAAA,MACd,QAAQ,OAAO;AAAA,MACf,SAAS,OAAO;AAAA,MAChB;AAAA,MACA,UAAU;AAAA,MACV,OAAO;AAAA,IACT;AACA,SAAK,QAAQ,WAAW,MAAM;AAC5B,WAAK,gBAAgB,QAAQ,EAAE,MAAM,IAAI;AAAA,IAC3C,GAAG,OAAO;AACV,SAAK,eAAe,IAAI,UAAU,IAAI;AAAA,EACxC;AAAA,EAEA,MAAc,gBAAgB,UAAiC;AAC7D,UAAM,QAAQ,KAAK,eAAe,IAAI,QAAQ;AAC9C,QAAI,CAAC,SAAS,MAAM,UAAU;AAC5B;AAAA,IACF;AAEA,UAAM,WAAW;AACjB,UAAM,QAAQ;AACd,SAAK,mBAAmB;AACxB,UAAM,aAAa,OAAO,KAAK,KAAK,OAAO,yBAAyB;AACpE,QAAI,CAAC,YAAY;AACf,WAAK,kBAAkB,QAAQ;AAC/B,WAAK,kBAAkB,KAAK,IAAI,GAAG,KAAK,kBAAkB,CAAC;AAC3D,WAAK,yBAAyB;AAC9B;AAAA,IACF;AAEA,QAAI;AACF,YAAM,KAAK,KAAK,OAAO,uBAAuB,MAAM,OAAO;AAAA,QACzD,SAAS;AAAA,MACX,CAAC;AAAA,IACH,QAAQ;AAAA,IAER,UAAE;AACA,YAAM,WAAW;AACjB,WAAK,kBAAkB,KAAK,IAAI,GAAG,KAAK,kBAAkB,CAAC;AAC3D,WAAK,yBAAyB;AAAA,IAChC;AAEA,QAAI,KAAK,eAAe,IAAI,QAAQ,MAAM,OAAO;AAC/C;AAAA,IACF;AACA,QAAI,oBAAoB,MAAM,KAAK,GAAG;AACpC,WAAK,qBAAqB,KAAK;AAC/B;AAAA,IACF;AAEA,SAAK,kBAAkB,QAAQ;AAAA,EACjC;AAAA,EAEQ,kBAAkB,UAAwB;AAChD,UAAM,QAAQ,KAAK,eAAe,IAAI,QAAQ;AAC9C,QAAI,OAAO,OAAO;AAChB,mBAAa,MAAM,KAAK;AAAA,IAC1B;AACA,SAAK,eAAe,OAAO,QAAQ;AACnC,SAAK,0BAA0B,OAAO,QAAQ;AAAA,EAChD;AAAA,EAEQ,yBAAyB,QAAgB,SAAuB;AACtE,QAAI,CAAC,SAAS;AACZ;AAAA,IACF;AACA,UAAM,MAAM,KAAK,IAAI;AACrB,SAAK,4BAA4B,GAAG;AACpC,SAAK,uBAAuB,IAAI,GAAG,MAAM,IAAI,OAAO,IAAI,GAAG;AAAA,EAC7D;AAAA,EAEQ,4BAA4B,KAAmB;AACrD,UAAM,QAAQ;AACd,eAAW,CAAC,KAAK,SAAS,KAAK,KAAK,wBAAwB;AAC1D,UAAI,MAAM,YAAY,OAAO;AAC3B,aAAK,uBAAuB,OAAO,GAAG;AAAA,MACxC;AAAA,IACF;AACA,UAAM,aAAa;AACnB,WAAO,KAAK,uBAAuB,OAAO,YAAY;AACpD,YAAM,SAAS,KAAK,uBAAuB,KAAK,EAAE,KAAK,EAAE;AACzD,UAAI,WAAW,QAAW;AACxB;AAAA,MACF;AACA,WAAK,uBAAuB,OAAO,MAAM;AAAA,IAC3C;AAAA,EACF;AAAA,EAEA,MAAc,iCAAgD;AAC5D,QAAI,KAAK,oBAAoB,GAAG;AAC9B;AAAA,IACF;AACA,UAAM,IAAI,QAAc,CAAC,YAAY;AACnC,WAAK,mBAAmB,IAAI,OAAO;AACnC,UAAI,KAAK,oBAAoB,GAAG;AAC9B,aAAK,mBAAmB,OAAO,OAAO;AACtC,gBAAQ;AAAA,MACV;AAAA,IACF,CAAC;AAAA,EACH;AAAA,EAEQ,2BAAiC;AACvC,QAAI,KAAK,oBAAoB,GAAG;AAC9B;AAAA,IACF;AACA,eAAW,WAAW,KAAK,oBAAoB;AAC7C,cAAQ;AAAA,IACV;AACA,SAAK,mBAAmB,MAAM;AAAA,EAChC;AACF;",
+  "names": []
+}