@archipelagolab/lobi 1.0.1 → 1.0.6

package/dist/chunk-GKOWCDQV.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../src/matrix/client/config.ts"],
+  "sourcesContent": ["import { formatErrorMessage, type PinnedDispatcherPolicy } from \"openclaw/plugin-sdk/infra-runtime\";\nimport { coerceSecretRef } from \"openclaw/plugin-sdk/provider-auth\";\nimport { retryAsync } from \"openclaw/plugin-sdk/retry-runtime\";\nimport { normalizeResolvedSecretInputString } from \"openclaw/plugin-sdk/secret-input\";\nimport {\n  requiresExplicitMatrixDefaultAccount,\n  resolveMatrixDefaultOrOnlyAccountId,\n} from \"../../account-selection.js\";\nimport { resolveMatrixAccountStringValues } from \"../../auth-precedence.js\";\nimport { getLobiScopedEnvVarNames as getMatrixScopedEnvVarNames } from \"../../env-vars.js\";\nimport { getMatrixRuntime } from \"../../runtime.js\";\nimport type { CoreConfig } from \"../../types.js\";\nimport {\n  findMatrixAccountConfig,\n  resolveMatrixBaseConfig,\n  listNormalizedMatrixAccountIds,\n} from \"../account-config.js\";\nimport { resolveMatrixConfigFieldPath } from \"../config-paths.js\";\nimport type { MatrixStoredCredentials } from \"../credentials-read.js\";\nimport {\n  DEFAULT_ACCOUNT_ID,\n  assertHttpUrlTargetsPrivateNetwork,\n  isPrivateOrLoopbackHost,\n  isPrivateNetworkOptInEnabled,\n  type LookupFn,\n  normalizeAccountId,\n  normalizeOptionalAccountId,\n  ssrfPolicyFromDangerouslyAllowPrivateNetwork,\n} from \"./config-runtime-api.js\";\nimport { repairCurrentTokenStorageMetaDeviceId } from \"./storage.js\";\nimport type { MatrixAuth, MatrixResolvedConfig } from \"./types.js\";\n\ntype MatrixAuthClientDeps = {\n  MatrixClient: typeof import(\"../sdk.js\").MatrixClient;\n  ensureMatrixSdkLoggingConfigured: typeof import(\"./logging.js\").ensureMatrixSdkLoggingConfigured;\n};\n\ntype MatrixCredentialsReadDeps = {\n  loadMatrixCredentials: typeof import(\"../credentials-read.js\").loadMatrixCredentials;\n  credentialsMatchConfig: typeof import(\"../credentials-read.js\").credentialsMatchConfig;\n};\n\ntype MatrixSecretInputDeps = {\n  resolveConfiguredSecretInputString: typeof import(\"./config-secret-input.runtime.js\").resolveConfiguredSecretInputString;\n};\n\nlet matrixAuthClientDepsPromise: Promise<MatrixAuthClientDeps> | undefined;\nlet matrixCredentialsReadDepsPromise: Promise<MatrixCredentialsReadDeps> | undefined;\nlet matrixSecretInputDepsPromise: Promise<MatrixSecretInputDeps> | undefined;\nlet matrixAuthClientDepsForTest: MatrixAuthClientDeps | undefined;\n\nconst MATRIX_AUTH_REQUEST_RETRY_RE =\n  /\\b(fetch failed|econnreset|econnrefused|enotfound|etimedout|ehostunreach|enetunreach|eai_again|und_err_|socket hang up|network|headers timeout|body timeout|connect timeout)\\b/i;\n\nexport function setMatrixAuthClientDepsForTest(deps?: {\n  MatrixClient: typeof import(\"../sdk.js\").MatrixClient;\n  ensureMatrixSdkLoggingConfigured: typeof import(\"./logging.js\").ensureMatrixSdkLoggingConfigured;\n}): void {\n  matrixAuthClientDepsForTest = deps;\n}\n\nasync function loadMatrixAuthClientDeps(): Promise<MatrixAuthClientDeps> {\n  if (matrixAuthClientDepsForTest) {\n    return matrixAuthClientDepsForTest;\n  }\n  matrixAuthClientDepsPromise ??= Promise.all([import(\"../sdk.js\"), import(\"./logging.js\")]).then(\n    ([sdkModule, loggingModule]) => ({\n      MatrixClient: sdkModule.MatrixClient,\n      ensureMatrixSdkLoggingConfigured: loggingModule.ensureMatrixSdkLoggingConfigured,\n    }),\n  );\n  return await matrixAuthClientDepsPromise;\n}\n\nasync function loadMatrixCredentialsReadDeps(): Promise<MatrixCredentialsReadDeps> {\n  matrixCredentialsReadDepsPromise ??= import(\"../credentials-read.js\").then(\n    (credentialsReadModule) => ({\n      loadMatrixCredentials: credentialsReadModule.loadMatrixCredentials,\n      credentialsMatchConfig: credentialsReadModule.credentialsMatchConfig,\n    }),\n  );\n  return await matrixCredentialsReadDepsPromise;\n}\n\nasync function loadMatrixSecretInputDeps(): Promise<MatrixSecretInputDeps> {\n  matrixSecretInputDepsPromise ??= import(\"./config-secret-input.runtime.js\").then((runtime) => ({\n    resolveConfiguredSecretInputString: runtime.resolveConfiguredSecretInputString,\n  }));\n  return await matrixSecretInputDepsPromise;\n}\n\nfunction shouldRetryMatrixAuthRequest(err: unknown): boolean {\n  return MATRIX_AUTH_REQUEST_RETRY_RE.test(formatErrorMessage(err));\n}\n\nfunction isAbortSignalTriggered(signal?: AbortSignal): boolean {\n  return signal?.aborted === true;\n}\n\nfunction credentialsMatchBackfillAuthLineage(params: {\n  stored: MatrixStoredCredentials | null;\n  auth: Pick<MatrixAuth, \"homeserver\" | \"userId\" | \"accessToken\">;\n}): boolean {\n  if (!params.stored) {\n    return true;\n  }\n  return (\n    params.stored.homeserver === params.auth.homeserver &&\n    params.stored.userId === params.auth.userId &&\n    params.stored.accessToken === params.auth.accessToken\n  );\n}\n\nasync function retryMatrixAuthRequest<T>(label: string, run: () => Promise<T>): Promise<T> {\n  return await retryAsync(run, {\n    attempts: 3,\n    minDelayMs: 250,\n    maxDelayMs: 1_500,\n    jitter: 0.1,\n    label,\n    shouldRetry: (err) => shouldRetryMatrixAuthRequest(err),\n  });\n}\n\nasync function fetchMatrixWhoamiIdentity(params: {\n  homeserver: string;\n  accessToken: string;\n  userId?: string;\n  ssrfPolicy?: MatrixResolvedConfig[\"ssrfPolicy\"];\n  dispatcherPolicy?: PinnedDispatcherPolicy;\n}): Promise<{\n  user_id?: string;\n  device_id?: string;\n}> {\n  const { MatrixClient, ensureMatrixSdkLoggingConfigured } = await loadMatrixAuthClientDeps();\n  ensureMatrixSdkLoggingConfigured();\n  const tempClient = new MatrixClient(params.homeserver, params.accessToken, {\n    userId: params.userId,\n    ssrfPolicy: params.ssrfPolicy,\n    dispatcherPolicy: params.dispatcherPolicy,\n  });\n  return (await retryMatrixAuthRequest(\"matrix auth whoami\", async () => {\n    return (await tempClient.doRequest(\"GET\", \"/_matrix/client/v3/account/whoami\")) as {\n      user_id?: string;\n      device_id?: string;\n    };\n  })) as {\n    user_id?: string;\n    device_id?: string;\n  };\n}\n\nfunction readEnvSecretRefFallback(params: {\n  value: unknown;\n  env?: NodeJS.ProcessEnv;\n  config?: Pick<CoreConfig, \"secrets\">;\n}): string | undefined {\n  const ref = coerceSecretRef(params.value, params.config?.secrets?.defaults);\n  if (!ref || ref.source !== \"env\" || !params.env) {\n    return undefined;\n  }\n\n  const providerConfig = params.config?.secrets?.providers?.[ref.provider];\n  if (providerConfig) {\n    if (providerConfig.source !== \"env\") {\n      throw new Error(\n        `Secret provider \"${ref.provider}\" has source \"${providerConfig.source}\" but ref requests \"env\".`,\n      );\n    }\n    if (providerConfig.allowlist && !providerConfig.allowlist.includes(ref.id)) {\n      throw new Error(\n        `Environment variable \"${ref.id}\" is not allowlisted in secrets.providers.${ref.provider}.allowlist.`,\n      );\n    }\n  } else if (ref.provider !== (params.config?.secrets?.defaults?.env?.trim() || \"default\")) {\n    throw new Error(\n      `Secret provider \"${ref.provider}\" is not configured (ref: ${ref.source}:${ref.provider}:${ref.id}).`,\n    );\n  }\n\n  const resolved = params.env[ref.id];\n  if (typeof resolved !== \"string\") {\n    return undefined;\n  }\n\n  const trimmed = resolved.trim();\n  return trimmed.length > 0 ? trimmed : undefined;\n}\n\nfunction clean(\n  value: unknown,\n  path: string,\n  opts?: {\n    env?: NodeJS.ProcessEnv;\n    config?: Pick<CoreConfig, \"secrets\">;\n    allowEnvSecretRefFallback?: boolean;\n    suppressSecretRef?: boolean;\n  },\n): string {\n  const ref = coerceSecretRef(value, opts?.config?.secrets?.defaults);\n  if (opts?.suppressSecretRef && ref) {\n    return \"\";\n  }\n  const normalizedValue = opts?.allowEnvSecretRefFallback\n    ? ref?.source === \"env\"\n      ? (readEnvSecretRefFallback({\n          value,\n          env: opts.env,\n          config: opts.config,\n        }) ?? value)\n      : ref\n        ? \"\"\n        : value\n    : value;\n  return (\n    normalizeResolvedSecretInputString({\n      value: normalizedValue,\n      path,\n      defaults: opts?.config?.secrets?.defaults,\n    }) ?? \"\"\n  );\n}\n\ntype MatrixEnvConfig = {\n  homeserver: string;\n  userId: string;\n  accessToken?: string;\n  password?: string;\n  deviceId?: string;\n  deviceName?: string;\n};\n\ntype MatrixConfigStringField =\n  | \"homeserver\"\n  | \"userId\"\n  | \"accessToken\"\n  | \"password\"\n  | \"deviceId\"\n  | \"deviceName\";\n\nfunction resolveMatrixBaseConfigFieldPath(field: MatrixConfigStringField): string {\n  return `channels.lobi.${field}`;\n}\n\nfunction shouldAllowEnvSecretRefFallback(field: MatrixConfigStringField): boolean {\n  return field === \"accessToken\" || field === \"password\";\n}\n\ntype MatrixAuthSecretField = \"accessToken\" | \"password\";\n\ntype MatrixConfiguredAuthInput = {\n  value: unknown;\n  path: string;\n};\n\nfunction hasConfiguredSecretInputValue(value: unknown, cfg: Pick<CoreConfig, \"secrets\">): boolean {\n  return (\n    (typeof value === \"string\" && value.trim().length > 0) ||\n    Boolean(coerceSecretRef(value, cfg.secrets?.defaults))\n  );\n}\n\nfunction hasConfiguredMatrixAccessTokenSource(params: {\n  cfg: CoreConfig;\n  env: NodeJS.ProcessEnv;\n  accountId: string;\n}): boolean {\n  const normalizedAccountId = normalizeAccountId(params.accountId);\n  const account = findMatrixAccountConfig(params.cfg, normalizedAccountId) ?? {};\n  const scopedAccessTokenVar = getMatrixScopedEnvVarNames(normalizedAccountId).accessToken;\n  if (\n    hasConfiguredSecretInputValue(account.accessToken, params.cfg) ||\n    clean(params.env[scopedAccessTokenVar], scopedAccessTokenVar).length > 0\n  ) {\n    return true;\n  }\n  if (normalizedAccountId !== DEFAULT_ACCOUNT_ID) {\n    return false;\n  }\n  const matrix = resolveMatrixBaseConfig(params.cfg);\n  return (\n    hasConfiguredSecretInputValue(matrix.accessToken, params.cfg) ||\n    clean(params.env.LOBI_ACCESS_TOKEN, \"LOBI_ACCESS_TOKEN\").length > 0\n  );\n}\n\nfunction resolveConfiguredMatrixAuthInput(params: {\n  cfg: CoreConfig;\n  env: NodeJS.ProcessEnv;\n  accountId: string;\n  field: MatrixAuthSecretField;\n}): MatrixConfiguredAuthInput | undefined {\n  const normalizedAccountId = normalizeAccountId(params.accountId);\n  const account = findMatrixAccountConfig(params.cfg, normalizedAccountId) ?? {};\n  const accountValue = account[params.field];\n  if (accountValue !== undefined) {\n    return {\n      value: accountValue,\n      path: resolveMatrixConfigFieldPath(params.cfg, normalizedAccountId, params.field),\n    };\n  }\n\n  const scopedKeys = getMatrixScopedEnvVarNames(normalizedAccountId);\n  const scopedEnv = resolveScopedMatrixEnvConfig(normalizedAccountId, params.env);\n  const scopedValue = scopedEnv[params.field];\n  if (scopedValue !== undefined) {\n    return {\n      value: scopedValue,\n      path: params.field === \"accessToken\" ? scopedKeys.accessToken : scopedKeys.password,\n    };\n  }\n\n  if (normalizedAccountId !== DEFAULT_ACCOUNT_ID) {\n    return undefined;\n  }\n\n  const matrix = resolveMatrixBaseConfig(params.cfg);\n  const baseValue = matrix[params.field];\n  if (baseValue !== undefined) {\n    return {\n      value: baseValue,\n      path: resolveMatrixBaseConfigFieldPath(params.field),\n    };\n  }\n\n  const globalValue =\n    params.field === \"accessToken\" ? params.env.LOBI_ACCESS_TOKEN : params.env.LOBI_PASSWORD;\n  if (globalValue !== undefined) {\n    return {\n      value: globalValue,\n      path: params.field === \"accessToken\" ? \"LOBI_ACCESS_TOKEN\" : \"LOBI_PASSWORD\",\n    };\n  }\n\n  return undefined;\n}\n\nasync function resolveConfiguredMatrixAuthSecretInput(params: {\n  cfg: CoreConfig;\n  env: NodeJS.ProcessEnv;\n  accountId: string;\n  field: MatrixAuthSecretField;\n}): Promise<string | undefined> {\n  const configured = resolveConfiguredMatrixAuthInput(params);\n  if (!configured) {\n    return undefined;\n  }\n\n  const { resolveConfiguredSecretInputString } = await loadMatrixSecretInputDeps();\n  const resolved = await resolveConfiguredSecretInputString({\n    config: params.cfg,\n    env: params.env,\n    value: configured.value,\n    path: configured.path,\n    unresolvedReasonStyle: \"detailed\",\n  });\n  if (resolved.value !== undefined) {\n    return resolved.value;\n  }\n\n  if (coerceSecretRef(configured.value, params.cfg.secrets?.defaults)) {\n    throw new Error(\n      resolved.unresolvedRefReason ?? `${configured.path} SecretRef could not be resolved.`,\n    );\n  }\n\n  return undefined;\n}\n\nfunction readMatrixBaseConfigField(\n  matrix: ReturnType<typeof resolveMatrixBaseConfig>,\n  field: MatrixConfigStringField,\n  opts?: {\n    env?: NodeJS.ProcessEnv;\n    config?: Pick<CoreConfig, \"secrets\">;\n    suppressSecretRef?: boolean;\n  },\n): string {\n  return clean(matrix[field], resolveMatrixBaseConfigFieldPath(field), {\n    env: opts?.env,\n    config: opts?.config,\n    allowEnvSecretRefFallback: shouldAllowEnvSecretRefFallback(field),\n    suppressSecretRef: opts?.suppressSecretRef,\n  });\n}\n\nfunction readMatrixAccountConfigField(\n  cfg: CoreConfig,\n  accountId: string,\n  account: Partial<Record<MatrixConfigStringField, unknown>>,\n  field: MatrixConfigStringField,\n  opts?: {\n    env?: NodeJS.ProcessEnv;\n    config?: Pick<CoreConfig, \"secrets\">;\n    suppressSecretRef?: boolean;\n  },\n): string {\n  return clean(account[field], resolveMatrixConfigFieldPath(cfg, accountId, field), {\n    env: opts?.env,\n    config: opts?.config,\n    allowEnvSecretRefFallback: shouldAllowEnvSecretRefFallback(field),\n    suppressSecretRef: opts?.suppressSecretRef,\n  });\n}\n\nfunction clampMatrixInitialSyncLimit(value: unknown): number | undefined {\n  return typeof value === \"number\" ? Math.max(0, Math.floor(value)) : undefined;\n}\n\nconst MATRIX_HTTP_HOMESERVER_ERROR =\n  \"Matrix homeserver must use https:// unless it targets a private or loopback host\";\n\nfunction buildMatrixNetworkFields(params: {\n  allowPrivateNetwork: boolean | undefined;\n  proxy?: string;\n  dispatcherPolicy?: PinnedDispatcherPolicy;\n}): Pick<MatrixResolvedConfig, \"allowPrivateNetwork\" | \"ssrfPolicy\" | \"dispatcherPolicy\"> {\n  const dispatcherPolicy: PinnedDispatcherPolicy | undefined =\n    params.dispatcherPolicy ??\n    (params.proxy ? { mode: \"explicit-proxy\", proxyUrl: params.proxy } : undefined);\n  if (!params.allowPrivateNetwork && !dispatcherPolicy) {\n    return {};\n  }\n  return {\n    ...(params.allowPrivateNetwork\n      ? {\n          allowPrivateNetwork: true,\n          ssrfPolicy: ssrfPolicyFromDangerouslyAllowPrivateNetwork(true),\n        }\n      : {}),\n    ...(dispatcherPolicy ? { dispatcherPolicy } : {}),\n  };\n}\n\nconst DEFAULT_LOBI_HOMESERVER = \"https://lobi.lobisland.com/\";\n\nexport function resolveGlobalMatrixEnvConfig(env: NodeJS.ProcessEnv): MatrixEnvConfig {\n  const homeserver = clean(env.LOBI_HOMESERVER, \"LOBI_HOMESERVER\");\n  return {\n    homeserver: homeserver || DEFAULT_LOBI_HOMESERVER,\n    userId: clean(env.LOBI_USER_ID, \"LOBI_USER_ID\"),\n    accessToken: clean(env.LOBI_ACCESS_TOKEN, \"LOBI_ACCESS_TOKEN\") || undefined,\n    password: clean(env.LOBI_PASSWORD, \"LOBI_PASSWORD\") || undefined,\n    deviceId: clean(env.LOBI_DEVICE_ID, \"LOBI_DEVICE_ID\") || undefined,\n    deviceName: clean(env.LOBI_DEVICE_NAME, \"LOBI_DEVICE_NAME\") || undefined,\n  };\n}\n\nexport { getLobiScopedEnvVarNames as getMatrixScopedEnvVarNames } from \"../../env-vars.js\";\n\nexport function resolveMatrixEnvAuthReadiness(\n  accountId: string,\n  env: NodeJS.ProcessEnv = process.env,\n): {\n  ready: boolean;\n  homeserver?: string;\n  userId?: string;\n  sourceHint: string;\n  missingMessage: string;\n} {\n  const normalizedAccountId = normalizeAccountId(accountId);\n  const scoped = resolveScopedMatrixEnvConfig(normalizedAccountId, env);\n  const scopedReady = hasReadyMatrixEnvAuth(scoped);\n  if (normalizedAccountId !== DEFAULT_ACCOUNT_ID) {\n    const keys = getMatrixScopedEnvVarNames(normalizedAccountId);\n    return {\n      ready: scopedReady,\n      homeserver: scoped.homeserver || undefined,\n      userId: scoped.userId || undefined,\n      sourceHint: `${keys.homeserver} (+ auth vars)`,\n      missingMessage: `Set per-account env vars for \"${normalizedAccountId}\" (for example ${keys.homeserver} + ${keys.accessToken} or ${keys.userId} + ${keys.password}).`,\n    };\n  }\n\n  const defaultScoped = resolveScopedMatrixEnvConfig(DEFAULT_ACCOUNT_ID, env);\n  const global = resolveGlobalMatrixEnvConfig(env);\n  const defaultScopedReady = hasReadyMatrixEnvAuth(defaultScoped);\n  const globalReady = hasReadyMatrixEnvAuth(global);\n  const defaultKeys = getMatrixScopedEnvVarNames(DEFAULT_ACCOUNT_ID);\n  return {\n    ready: defaultScopedReady || globalReady,\n    homeserver: defaultScoped.homeserver || global.homeserver || undefined,\n    userId: defaultScoped.userId || global.userId || undefined,\n    sourceHint: \"LOBI_* or LOBI_DEFAULT_*\",\n    missingMessage:\n      `Set Lobi env vars for the default account ` +\n      `(for example LOBI_HOMESERVER + LOBI_ACCESS_TOKEN, LOBI_USER_ID + LOBI_PASSWORD, ` +\n      `or ${defaultKeys.homeserver} + ${defaultKeys.accessToken}).`,\n  };\n}\n\nexport function resolveScopedMatrixEnvConfig(\n  accountId: string,\n  env: NodeJS.ProcessEnv = process.env,\n): MatrixEnvConfig {\n  const keys = getMatrixScopedEnvVarNames(accountId);\n  return {\n    homeserver: clean(env[keys.homeserver], keys.homeserver),\n    userId: clean(env[keys.userId], keys.userId),\n    accessToken: clean(env[keys.accessToken], keys.accessToken) || undefined,\n    password: clean(env[keys.password], keys.password) || undefined,\n    deviceId: clean(env[keys.deviceId], keys.deviceId) || undefined,\n    deviceName: clean(env[keys.deviceName], keys.deviceName) || undefined,\n  };\n}\n\nfunction hasScopedMatrixEnvConfig(accountId: string, env: NodeJS.ProcessEnv): boolean {\n  const scoped = resolveScopedMatrixEnvConfig(accountId, env);\n  return Boolean(\n    scoped.homeserver ||\n    scoped.userId ||\n    scoped.accessToken ||\n    scoped.password ||\n    scoped.deviceId ||\n    scoped.deviceName,\n  );\n}\n\nexport function hasReadyMatrixEnvAuth(config: {\n  homeserver?: string;\n  userId?: string;\n  accessToken?: string;\n  password?: string;\n}): boolean {\n  const homeserver = clean(config.homeserver, \"matrix.env.homeserver\");\n  const userId = clean(config.userId, \"matrix.env.userId\");\n  const accessToken = clean(config.accessToken, \"matrix.env.accessToken\");\n  const password = clean(config.password, \"matrix.env.password\");\n  return Boolean(homeserver && (accessToken || (userId && password)));\n}\n\nexport function validateMatrixHomeserverUrl(\n  homeserver: string,\n  opts?: { allowPrivateNetwork?: boolean },\n): string {\n  const trimmed = clean(homeserver, \"matrix.homeserver\");\n  if (!trimmed) {\n    throw new Error(\"Matrix homeserver is required (matrix.homeserver)\");\n  }\n\n  let parsed: URL;\n  try {\n    parsed = new URL(trimmed);\n  } catch {\n    throw new Error(\"Matrix homeserver must be a valid http(s) URL\");\n  }\n\n  if (parsed.protocol !== \"https:\" && parsed.protocol !== \"http:\") {\n    throw new Error(\"Matrix homeserver must use http:// or https://\");\n  }\n  if (!parsed.hostname) {\n    throw new Error(\"Matrix homeserver must include a hostname\");\n  }\n  if (parsed.username || parsed.password) {\n    throw new Error(\"Matrix homeserver URL must not include embedded credentials\");\n  }\n  if (parsed.search || parsed.hash) {\n    throw new Error(\"Matrix homeserver URL must not include query strings or fragments\");\n  }\n  if (\n    parsed.protocol === \"http:\" &&\n    opts?.allowPrivateNetwork !== true &&\n    !isPrivateOrLoopbackHost(parsed.hostname)\n  ) {\n    throw new Error(MATRIX_HTTP_HOMESERVER_ERROR);\n  }\n\n  return trimmed;\n}\n\nexport async function resolveValidatedMatrixHomeserverUrl(\n  homeserver: string,\n  opts?: {\n    dangerouslyAllowPrivateNetwork?: boolean;\n    allowPrivateNetwork?: boolean;\n    lookupFn?: LookupFn;\n  },\n): Promise<string> {\n  const allowPrivateNetwork =\n    typeof opts?.dangerouslyAllowPrivateNetwork === \"boolean\"\n      ? opts.dangerouslyAllowPrivateNetwork\n      : opts?.allowPrivateNetwork;\n  const normalized = validateMatrixHomeserverUrl(homeserver, {\n    allowPrivateNetwork,\n  });\n  await assertHttpUrlTargetsPrivateNetwork(normalized, {\n    dangerouslyAllowPrivateNetwork: opts?.dangerouslyAllowPrivateNetwork,\n    allowPrivateNetwork,\n    lookupFn: opts?.lookupFn,\n    errorMessage: MATRIX_HTTP_HOMESERVER_ERROR,\n  });\n  return normalized;\n}\n\nexport function resolveMatrixConfigForAccount(\n  cfg: CoreConfig,\n  accountId: string,\n  env: NodeJS.ProcessEnv = process.env,\n): MatrixResolvedConfig {\n  const matrix = resolveMatrixBaseConfig(cfg);\n  const account = findMatrixAccountConfig(cfg, accountId) ?? {};\n  const normalizedAccountId = normalizeAccountId(accountId);\n  const suppressInactivePasswordSecretRef = hasConfiguredMatrixAccessTokenSource({\n    cfg,\n    env,\n    accountId: normalizedAccountId,\n  });\n  const fieldReadOptions = {\n    env,\n    config: cfg,\n  };\n  const scopedEnv = resolveScopedMatrixEnvConfig(normalizedAccountId, env);\n  const globalEnv = resolveGlobalMatrixEnvConfig(env);\n  const accountField = (field: MatrixConfigStringField) =>\n    readMatrixAccountConfigField(cfg, normalizedAccountId, account, field, {\n      ...fieldReadOptions,\n      suppressSecretRef: field === \"password\" ? suppressInactivePasswordSecretRef : undefined,\n    });\n  const resolvedStrings = resolveMatrixAccountStringValues({\n    accountId: normalizedAccountId,\n    account: {\n      homeserver: accountField(\"homeserver\"),\n      userId: accountField(\"userId\"),\n      accessToken: accountField(\"accessToken\"),\n      password: accountField(\"password\"),\n      deviceId: accountField(\"deviceId\"),\n      deviceName: accountField(\"deviceName\"),\n    },\n    scopedEnv,\n    channel: {\n      homeserver: readMatrixBaseConfigField(matrix, \"homeserver\", fieldReadOptions),\n      userId: readMatrixBaseConfigField(matrix, \"userId\", fieldReadOptions),\n      accessToken: readMatrixBaseConfigField(matrix, \"accessToken\", fieldReadOptions),\n      password: readMatrixBaseConfigField(matrix, \"password\", {\n        ...fieldReadOptions,\n        suppressSecretRef: suppressInactivePasswordSecretRef,\n      }),\n      deviceId: readMatrixBaseConfigField(matrix, \"deviceId\", fieldReadOptions),\n      deviceName: readMatrixBaseConfigField(matrix, \"deviceName\", fieldReadOptions),\n    },\n    globalEnv,\n  });\n\n  const accountInitialSyncLimit = clampMatrixInitialSyncLimit(account.initialSyncLimit);\n  const initialSyncLimit =\n    accountInitialSyncLimit ?? clampMatrixInitialSyncLimit(matrix.initialSyncLimit);\n  const encryption =\n    typeof account.encryption === \"boolean\" ? account.encryption : (matrix.encryption ?? false);\n  const allowPrivateNetwork =\n    isPrivateNetworkOptInEnabled(account) || isPrivateNetworkOptInEnabled(matrix)\n      ? true\n      : undefined;\n\n  return {\n    homeserver: resolvedStrings.homeserver,\n    userId: resolvedStrings.userId,\n    accessToken: resolvedStrings.accessToken || undefined,\n    password: resolvedStrings.password || undefined,\n    deviceId: resolvedStrings.deviceId || undefined,\n    deviceName: resolvedStrings.deviceName || undefined,\n    initialSyncLimit,\n    encryption,\n    ...buildMatrixNetworkFields({\n      allowPrivateNetwork,\n      proxy: account.proxy ?? matrix.proxy,\n    }),\n  };\n}\n\nfunction resolveImplicitMatrixAccountId(\n  cfg: CoreConfig,\n  env: NodeJS.ProcessEnv = process.env,\n): string | null {\n  if (requiresExplicitMatrixDefaultAccount(cfg, env)) {\n    return null;\n  }\n  return normalizeAccountId(resolveMatrixDefaultOrOnlyAccountId(cfg, env));\n}\n\nexport function resolveMatrixAuthContext(params?: {\n  cfg?: CoreConfig;\n  env?: NodeJS.ProcessEnv;\n  accountId?: string | null;\n}): {\n  cfg: CoreConfig;\n  env: NodeJS.ProcessEnv;\n  accountId: string;\n  resolved: MatrixResolvedConfig;\n} {\n  const cfg = params?.cfg ?? (getMatrixRuntime().config.loadConfig() as CoreConfig);\n  const env = params?.env ?? process.env;\n  const explicitAccountId = normalizeOptionalAccountId(params?.accountId);\n  const effectiveAccountId = explicitAccountId ?? resolveImplicitMatrixAccountId(cfg, env);\n  if (!effectiveAccountId) {\n    throw new Error(\n      'Multiple Lobi accounts are configured and channels.lobi.defaultAccount is not set. Set \"channels.lobi.defaultAccount\" to the intended account or pass --account <id>.',\n    );\n  }\n  if (\n    explicitAccountId &&\n    explicitAccountId !== DEFAULT_ACCOUNT_ID &&\n    !listNormalizedMatrixAccountIds(cfg).includes(explicitAccountId) &&\n    !hasScopedMatrixEnvConfig(explicitAccountId, env)\n  ) {\n    throw new Error(\n      `Lobi account \"${explicitAccountId}\" is not configured. Add channels.lobi.accounts.${explicitAccountId} or define scoped ${getMatrixScopedEnvVarNames(explicitAccountId).accessToken.replace(/_ACCESS_TOKEN$/, \"\")}_* variables.`,\n    );\n  }\n  const resolved = resolveMatrixConfigForAccount(cfg, effectiveAccountId, env);\n\n  return {\n    cfg,\n    env,\n    accountId: effectiveAccountId,\n    resolved,\n  };\n}\n\nexport async function resolveMatrixAuth(params?: {\n  cfg?: CoreConfig;\n  env?: NodeJS.ProcessEnv;\n  accountId?: string | null;\n}): Promise<MatrixAuth> {\n  const { cfg, env, accountId, resolved } = resolveMatrixAuthContext(params);\n  const accessToken =\n    (await resolveConfiguredMatrixAuthSecretInput({\n      cfg,\n      env,\n      accountId,\n      field: \"accessToken\",\n    })) ?? resolved.accessToken;\n  const tokenAuthPassword = resolved.password;\n  const homeserver = await resolveValidatedMatrixHomeserverUrl(resolved.homeserver, {\n    dangerouslyAllowPrivateNetwork: resolved.allowPrivateNetwork,\n  });\n  let credentialsWriter: typeof import(\"../credentials-write.runtime.js\") | undefined;\n  const loadCredentialsWriter = async () => {\n    credentialsWriter ??= await import(\"../credentials-write.runtime.js\");\n    return credentialsWriter;\n  };\n\n  const { loadMatrixCredentials, credentialsMatchConfig } = await loadMatrixCredentialsReadDeps();\n  const cached = loadMatrixCredentials(env, accountId);\n  const cachedCredentials =\n    cached &&\n    credentialsMatchConfig(cached, {\n      homeserver,\n      userId: resolved.userId || \"\",\n      accessToken,\n    })\n      ? cached\n      : null;\n\n  // If we have an access token, we can fetch userId via whoami if not provided\n  if (accessToken) {\n    let userId = resolved.userId;\n    const hasMatchingCachedToken = cachedCredentials?.accessToken === accessToken;\n    let knownDeviceId = hasMatchingCachedToken\n      ? cachedCredentials?.deviceId || resolved.deviceId\n      : resolved.deviceId;\n\n    if (!userId) {\n      // Only block startup on whoami when token auth still needs the user ID.\n      // A missing device ID alone is optional and should not force a network round-trip.\n      const whoami = await fetchMatrixWhoamiIdentity({\n        homeserver,\n        accessToken,\n        userId,\n        ssrfPolicy: resolved.ssrfPolicy,\n        dispatcherPolicy: resolved.dispatcherPolicy,\n      });\n      const fetchedUserId = whoami.user_id?.trim();\n      if (!fetchedUserId) {\n        throw new Error(\"Matrix whoami did not return user_id\");\n      }\n      userId = fetchedUserId;\n      knownDeviceId = knownDeviceId || whoami.device_id?.trim() || resolved.deviceId;\n    }\n\n    const shouldRefreshCachedCredentials =\n      !cachedCredentials ||\n      !hasMatchingCachedToken ||\n      cachedCredentials.userId !== userId ||\n      (cachedCredentials.deviceId || undefined) !== knownDeviceId;\n    if (shouldRefreshCachedCredentials) {\n      const { saveMatrixCredentials } = await loadCredentialsWriter();\n      await saveMatrixCredentials(\n        {\n          homeserver,\n          userId,\n          accessToken,\n          deviceId: knownDeviceId,\n        },\n        env,\n        accountId,\n      );\n    } else if (hasMatchingCachedToken) {\n      const { touchMatrixCredentials } = await loadCredentialsWriter();\n      await touchMatrixCredentials(env, accountId);\n    }\n    return {\n      accountId,\n      homeserver,\n      userId,\n      accessToken,\n      password: tokenAuthPassword,\n      deviceId: knownDeviceId,\n      deviceName: resolved.deviceName,\n      initialSyncLimit: resolved.initialSyncLimit,\n      encryption: resolved.encryption,\n      ...buildMatrixNetworkFields({\n        allowPrivateNetwork: resolved.allowPrivateNetwork,\n        dispatcherPolicy: resolved.dispatcherPolicy,\n      }),\n    };\n  }\n\n  if (cachedCredentials) {\n    const { touchMatrixCredentials } = await loadCredentialsWriter();\n    await touchMatrixCredentials(env, accountId);\n    return {\n      accountId,\n      homeserver: cachedCredentials.homeserver,\n      userId: cachedCredentials.userId,\n      accessToken: cachedCredentials.accessToken,\n      password: tokenAuthPassword,\n      deviceId: cachedCredentials.deviceId || resolved.deviceId,\n      deviceName: resolved.deviceName,\n      initialSyncLimit: resolved.initialSyncLimit,\n      encryption: resolved.encryption,\n      ...buildMatrixNetworkFields({\n        allowPrivateNetwork: resolved.allowPrivateNetwork,\n        dispatcherPolicy: resolved.dispatcherPolicy,\n      }),\n    };\n  }\n\n  if (!resolved.userId) {\n    throw new Error(\"Matrix userId is required when no access token is configured (matrix.userId)\");\n  }\n\n  const password =\n    (await resolveConfiguredMatrixAuthSecretInput({\n      cfg,\n      env,\n      accountId,\n      field: \"password\",\n    })) ?? resolved.password;\n  if (!password) {\n    throw new Error(\n      \"Matrix password is required when no access token is configured (matrix.password)\",\n    );\n  }\n\n  // Login with password using the same hardened request path as other Matrix HTTP calls.\n  const { MatrixClient, ensureMatrixSdkLoggingConfigured } = await loadMatrixAuthClientDeps();\n  ensureMatrixSdkLoggingConfigured();\n  const loginClient = new MatrixClient(homeserver, \"\", {\n    ssrfPolicy: resolved.ssrfPolicy,\n    dispatcherPolicy: resolved.dispatcherPolicy,\n  });\n  const login = (await retryMatrixAuthRequest(\"matrix auth login\", async () => {\n    return (await loginClient.doRequest(\"POST\", \"/_matrix/client/v3/login\", undefined, {\n      type: \"m.login.password\",\n      identifier: { type: \"m.id.user\", user: resolved.userId },\n      password,\n      device_id: resolved.deviceId,\n      initial_device_display_name: resolved.deviceName ?? \"OpenClaw Gateway\",\n    })) as {\n      access_token?: string;\n      user_id?: string;\n      device_id?: string;\n    };\n  })) as {\n    access_token?: string;\n    user_id?: string;\n    device_id?: string;\n  };\n\n  const loginAccessToken = login.access_token?.trim();\n  if (!loginAccessToken) {\n    throw new Error(\"Matrix login did not return an access token\");\n  }\n\n  const auth: MatrixAuth = {\n    accountId,\n    homeserver,\n    userId: login.user_id ?? resolved.userId,\n    accessToken: loginAccessToken,\n    password,\n    deviceId: login.device_id ?? resolved.deviceId,\n    deviceName: resolved.deviceName,\n    initialSyncLimit: resolved.initialSyncLimit,\n    encryption: resolved.encryption,\n    ...buildMatrixNetworkFields({\n      allowPrivateNetwork: resolved.allowPrivateNetwork,\n      dispatcherPolicy: resolved.dispatcherPolicy,\n    }),\n  };\n\n  const { saveMatrixCredentials } = await loadCredentialsWriter();\n  await saveMatrixCredentials(\n    {\n      homeserver: auth.homeserver,\n      userId: auth.userId,\n      accessToken: auth.accessToken,\n      deviceId: auth.deviceId,\n    },\n    env,\n    accountId,\n  );\n\n  return auth;\n}\n\nexport async function backfillMatrixAuthDeviceIdAfterStartup(params: {\n  auth: MatrixAuth;\n  env?: NodeJS.ProcessEnv;\n  abortSignal?: AbortSignal;\n}): Promise<string | undefined> {\n  const knownDeviceId = params.auth.deviceId?.trim();\n  if (knownDeviceId) {\n    return knownDeviceId;\n  }\n  if (isAbortSignalTriggered(params.abortSignal)) {\n    return undefined;\n  }\n\n  const whoami = await fetchMatrixWhoamiIdentity({\n    homeserver: params.auth.homeserver,\n    accessToken: params.auth.accessToken,\n    userId: params.auth.userId,\n    ssrfPolicy: params.auth.ssrfPolicy,\n    dispatcherPolicy: params.auth.dispatcherPolicy,\n  });\n  const deviceId = whoami.device_id?.trim();\n  if (!deviceId) {\n    return undefined;\n  }\n  if (isAbortSignalTriggered(params.abortSignal)) {\n    return undefined;\n  }\n\n  const env = params.env ?? process.env;\n  const { loadMatrixCredentials } = await loadMatrixCredentialsReadDeps();\n  if (\n    !credentialsMatchBackfillAuthLineage({\n      stored: loadMatrixCredentials(env, params.auth.accountId),\n      auth: params.auth,\n    })\n  ) {\n    return undefined;\n  }\n\n  const repairedStorageMeta = repairCurrentTokenStorageMetaDeviceId({\n    homeserver: params.auth.homeserver,\n    userId: params.auth.userId,\n    accessToken: params.auth.accessToken,\n    accountId: params.auth.accountId,\n    deviceId,\n    env: params.env,\n  });\n  if (!repairedStorageMeta) {\n    throw new Error(\"Matrix deviceId backfill failed to repair current-token storage metadata\");\n  }\n  if (isAbortSignalTriggered(params.abortSignal)) {\n    return undefined;\n  }\n\n  const credentialsWriter = await import(\"../credentials-write.runtime.js\");\n  const saved = await credentialsWriter.saveBackfilledMatrixDeviceId(\n    {\n      homeserver: params.auth.homeserver,\n      userId: params.auth.userId,\n      accessToken: params.auth.accessToken,\n      deviceId,\n    },\n    env,\n    params.auth.accountId,\n  );\n  return saved === \"saved\" ? deviceId : undefined;\n}\n"],
+  "mappings": ";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;AAAA,SAAS,0BAAuD;AAChE,SAAS,uBAAuB;AAChC,SAAS,kBAAkB;AAC3B,SAAS,0CAA0C;AA2CnD,IAAI;AACJ,IAAI;AACJ,IAAI;AACJ,IAAI;AAEJ,IAAM,+BACJ;AAEK,SAAS,+BAA+B,MAGtC;AACP,gCAA8B;AAChC;AAEA,eAAe,2BAA0D;AACvE,MAAI,6BAA6B;AAC/B,WAAO;AAAA,EACT;AACA,kCAAgC,QAAQ,IAAI,CAAC,OAAO,qBAAW,GAAG,OAAO,gCAAc,CAAC,CAAC,EAAE;AAAA,IACzF,CAAC,CAAC,WAAW,aAAa,OAAO;AAAA,MAC/B,cAAc,UAAU;AAAA,MACxB,kCAAkC,cAAc;AAAA,IAClD;AAAA,EACF;AACA,SAAO,MAAM;AACf;AAEA,eAAe,gCAAoE;AACjF,uCAAqC,OAAO,kCAAwB,EAAE;AAAA,IACpE,CAAC,2BAA2B;AAAA,MAC1B,uBAAuB,sBAAsB;AAAA,MAC7C,wBAAwB,sBAAsB;AAAA,IAChD;AAAA,EACF;AACA,SAAO,MAAM;AACf;AAEA,eAAe,4BAA4D;AACzE,mCAAiC,OAAO,oDAAkC,EAAE,KAAK,CAAC,aAAa;AAAA,IAC7F,oCAAoC,QAAQ;AAAA,EAC9C,EAAE;AACF,SAAO,MAAM;AACf;AAEA,SAAS,6BAA6B,KAAuB;AAC3D,SAAO,6BAA6B,KAAK,mBAAmB,GAAG,CAAC;AAClE;AAEA,SAAS,uBAAuB,QAA+B;AAC7D,SAAO,QAAQ,YAAY;AAC7B;AAEA,SAAS,oCAAoC,QAGjC;AACV,MAAI,CAAC,OAAO,QAAQ;AAClB,WAAO;AAAA,EACT;AACA,SACE,OAAO,OAAO,eAAe,OAAO,KAAK,cACzC,OAAO,OAAO,WAAW,OAAO,KAAK,UACrC,OAAO,OAAO,gBAAgB,OAAO,KAAK;AAE9C;AAEA,eAAe,uBAA0B,OAAe,KAAmC;AACzF,SAAO,MAAM,WAAW,KAAK;AAAA,IAC3B,UAAU;AAAA,IACV,YAAY;AAAA,IACZ,YAAY;AAAA,IACZ,QAAQ;AAAA,IACR;AAAA,IACA,aAAa,CAAC,QAAQ,6BAA6B,GAAG;AAAA,EACxD,CAAC;AACH;AAEA,eAAe,0BAA0B,QAStC;AACD,QAAM,EAAE,cAAc,iCAAiC,IAAI,MAAM,yBAAyB;AAC1F,mCAAiC;AACjC,QAAM,aAAa,IAAI,aAAa,OAAO,YAAY,OAAO,aAAa;AAAA,IACzE,QAAQ,OAAO;AAAA,IACf,YAAY,OAAO;AAAA,IACnB,kBAAkB,OAAO;AAAA,EAC3B,CAAC;AACD,SAAQ,MAAM,uBAAuB,sBAAsB,YAAY;AACrE,WAAQ,MAAM,WAAW,UAAU,OAAO,mCAAmC;AAAA,EAI/E,CAAC;AAIH;AAEA,SAAS,yBAAyB,QAIX;AACrB,QAAM,MAAM,gBAAgB,OAAO,OAAO,OAAO,QAAQ,SAAS,QAAQ;AAC1E,MAAI,CAAC,OAAO,IAAI,WAAW,SAAS,CAAC,OAAO,KAAK;AAC/C,WAAO;AAAA,EACT;AAEA,QAAM,iBAAiB,OAAO,QAAQ,SAAS,YAAY,IAAI,QAAQ;AACvE,MAAI,gBAAgB;AAClB,QAAI,eAAe,WAAW,OAAO;AACnC,YAAM,IAAI;AAAA,QACR,oBAAoB,IAAI,QAAQ,iBAAiB,eAAe,MAAM;AAAA,MACxE;AAAA,IACF;AACA,QAAI,eAAe,aAAa,CAAC,eAAe,UAAU,SAAS,IAAI,EAAE,GAAG;AAC1E,YAAM,IAAI;AAAA,QACR,yBAAyB,IAAI,EAAE,6CAA6C,IAAI,QAAQ;AAAA,MAC1F;AAAA,IACF;AAAA,EACF,WAAW,IAAI,cAAc,OAAO,QAAQ,SAAS,UAAU,KAAK,KAAK,KAAK,YAAY;AACxF,UAAM,IAAI;AAAA,MACR,oBAAoB,IAAI,QAAQ,6BAA6B,IAAI,MAAM,IAAI,IAAI,QAAQ,IAAI,IAAI,EAAE;AAAA,IACnG;AAAA,EACF;AAEA,QAAM,WAAW,OAAO,IAAI,IAAI,EAAE;AAClC,MAAI,OAAO,aAAa,UAAU;AAChC,WAAO;AAAA,EACT;AAEA,QAAM,UAAU,SAAS,KAAK;AAC9B,SAAO,QAAQ,SAAS,IAAI,UAAU;AACxC;AAEA,SAAS,MACP,OACA,MACA,MAMQ;AACR,QAAM,MAAM,gBAAgB,OAAO,MAAM,QAAQ,SAAS,QAAQ;AAClE,MAAI,MAAM,qBAAqB,KAAK;AAClC,WAAO;AAAA,EACT;AACA,QAAM,kBAAkB,MAAM,4BAC1B,KAAK,WAAW,QACb,yBAAyB;AAAA,IACxB;AAAA,IACA,KAAK,KAAK;AAAA,IACV,QAAQ,KAAK;AAAA,EACf,CAAC,KAAK,QACN,MACE,KACA,QACJ;AACJ,SACE,mCAAmC;AAAA,IACjC,OAAO;AAAA,IACP;AAAA,IACA,UAAU,MAAM,QAAQ,SAAS;AAAA,EACnC,CAAC,KAAK;AAEV;AAmBA,SAAS,iCAAiC,OAAwC;AAChF,SAAO,iBAAiB,KAAK;AAC/B;AAEA,SAAS,gCAAgC,OAAyC;AAChF,SAAO,UAAU,iBAAiB,UAAU;AAC9C;AASA,SAAS,8BAA8B,OAAgB,KAA2C;AAChG,SACG,OAAO,UAAU,YAAY,MAAM,KAAK,EAAE,SAAS,KACpD,QAAQ,gBAAgB,OAAO,IAAI,SAAS,QAAQ,CAAC;AAEzD;AAEA,SAAS,qCAAqC,QAIlC;AACV,QAAM,sBAAsB,mBAAmB,OAAO,SAAS;AAC/D,QAAM,UAAU,wBAAwB,OAAO,KAAK,mBAAmB,KAAK,CAAC;AAC7E,QAAM,uBAAuB,yBAA2B,mBAAmB,EAAE;AAC7E,MACE,8BAA8B,QAAQ,aAAa,OAAO,GAAG,KAC7D,MAAM,OAAO,IAAI,oBAAoB,GAAG,oBAAoB,EAAE,SAAS,GACvE;AACA,WAAO;AAAA,EACT;AACA,MAAI,wBAAwB,oBAAoB;AAC9C,WAAO;AAAA,EACT;AACA,QAAM,SAAS,wBAAwB,OAAO,GAAG;AACjD,SACE,8BAA8B,OAAO,aAAa,OAAO,GAAG,KAC5D,MAAM,OAAO,IAAI,mBAAmB,mBAAmB,EAAE,SAAS;AAEtE;AAEA,SAAS,iCAAiC,QAKA;AACxC,QAAM,sBAAsB,mBAAmB,OAAO,SAAS;AAC/D,QAAM,UAAU,wBAAwB,OAAO,KAAK,mBAAmB,KAAK,CAAC;AAC7E,QAAM,eAAe,QAAQ,OAAO,KAAK;AACzC,MAAI,iBAAiB,QAAW;AAC9B,WAAO;AAAA,MACL,OAAO;AAAA,MACP,MAAM,6BAA6B,OAAO,KAAK,qBAAqB,OAAO,KAAK;AAAA,IAClF;AAAA,EACF;AAEA,QAAM,aAAa,yBAA2B,mBAAmB;AACjE,QAAM,YAAY,6BAA6B,qBAAqB,OAAO,GAAG;AAC9E,QAAM,cAAc,UAAU,OAAO,KAAK;AAC1C,MAAI,gBAAgB,QAAW;AAC7B,WAAO;AAAA,MACL,OAAO;AAAA,MACP,MAAM,OAAO,UAAU,gBAAgB,WAAW,cAAc,WAAW;AAAA,IAC7E;AAAA,EACF;AAEA,MAAI,wBAAwB,oBAAoB;AAC9C,WAAO;AAAA,EACT;AAEA,QAAM,SAAS,wBAAwB,OAAO,GAAG;AACjD,QAAM,YAAY,OAAO,OAAO,KAAK;AACrC,MAAI,cAAc,QAAW;AAC3B,WAAO;AAAA,MACL,OAAO;AAAA,MACP,MAAM,iCAAiC,OAAO,KAAK;AAAA,IACrD;AAAA,EACF;AAEA,QAAM,cACJ,OAAO,UAAU,gBAAgB,OAAO,IAAI,oBAAoB,OAAO,IAAI;AAC7E,MAAI,gBAAgB,QAAW;AAC7B,WAAO;AAAA,MACL,OAAO;AAAA,MACP,MAAM,OAAO,UAAU,gBAAgB,sBAAsB;AAAA,IAC/D;AAAA,EACF;AAEA,SAAO;AACT;AAEA,eAAe,uCAAuC,QAKtB;AAC9B,QAAM,aAAa,iCAAiC,MAAM;AAC1D,MAAI,CAAC,YAAY;AACf,WAAO;AAAA,EACT;AAEA,QAAM,EAAE,mCAAmC,IAAI,MAAM,0BAA0B;AAC/E,QAAM,WAAW,MAAM,mCAAmC;AAAA,IACxD,QAAQ,OAAO;AAAA,IACf,KAAK,OAAO;AAAA,IACZ,OAAO,WAAW;AAAA,IAClB,MAAM,WAAW;AAAA,IACjB,uBAAuB;AAAA,EACzB,CAAC;AACD,MAAI,SAAS,UAAU,QAAW;AAChC,WAAO,SAAS;AAAA,EAClB;AAEA,MAAI,gBAAgB,WAAW,OAAO,OAAO,IAAI,SAAS,QAAQ,GAAG;AACnE,UAAM,IAAI;AAAA,MACR,SAAS,uBAAuB,GAAG,WAAW,IAAI;AAAA,IACpD;AAAA,EACF;AAEA,SAAO;AACT;AAEA,SAAS,0BACP,QACA,OACA,MAKQ;AACR,SAAO,MAAM,OAAO,KAAK,GAAG,iCAAiC,KAAK,GAAG;AAAA,IACnE,KAAK,MAAM;AAAA,IACX,QAAQ,MAAM;AAAA,IACd,2BAA2B,gCAAgC,KAAK;AAAA,IAChE,mBAAmB,MAAM;AAAA,EAC3B,CAAC;AACH;AAEA,SAAS,6BACP,KACA,WACA,SACA,OACA,MAKQ;AACR,SAAO,MAAM,QAAQ,KAAK,GAAG,6BAA6B,KAAK,WAAW,KAAK,GAAG;AAAA,IAChF,KAAK,MAAM;AAAA,IACX,QAAQ,MAAM;AAAA,IACd,2BAA2B,gCAAgC,KAAK;AAAA,IAChE,mBAAmB,MAAM;AAAA,EAC3B,CAAC;AACH;AAEA,SAAS,4BAA4B,OAAoC;AACvE,SAAO,OAAO,UAAU,WAAW,KAAK,IAAI,GAAG,KAAK,MAAM,KAAK,CAAC,IAAI;AACtE;AAEA,IAAM,+BACJ;AAEF,SAAS,yBAAyB,QAIwD;AACxF,QAAM,mBACJ,OAAO,qBACN,OAAO,QAAQ,EAAE,MAAM,kBAAkB,UAAU,OAAO,MAAM,IAAI;AACvE,MAAI,CAAC,OAAO,uBAAuB,CAAC,kBAAkB;AACpD,WAAO,CAAC;AAAA,EACV;AACA,SAAO;AAAA,IACL,GAAI,OAAO,sBACP;AAAA,MACE,qBAAqB;AAAA,MACrB,YAAY,6CAA6C,IAAI;AAAA,IAC/D,IACA,CAAC;AAAA,IACL,GAAI,mBAAmB,EAAE,iBAAiB,IAAI,CAAC;AAAA,EACjD;AACF;AAEA,IAAM,0BAA0B;AAEzB,SAAS,6BAA6B,KAAyC;AACpF,QAAM,aAAa,MAAM,IAAI,iBAAiB,iBAAiB;AAC/D,SAAO;AAAA,IACL,YAAY,cAAc;AAAA,IAC1B,QAAQ,MAAM,IAAI,cAAc,cAAc;AAAA,IAC9C,aAAa,MAAM,IAAI,mBAAmB,mBAAmB,KAAK;AAAA,IAClE,UAAU,MAAM,IAAI,eAAe,eAAe,KAAK;AAAA,IACvD,UAAU,MAAM,IAAI,gBAAgB,gBAAgB,KAAK;AAAA,IACzD,YAAY,MAAM,IAAI,kBAAkB,kBAAkB,KAAK;AAAA,EACjE;AACF;AAIO,SAAS,8BACd,WACA,MAAyB,QAAQ,KAOjC;AACA,QAAM,sBAAsB,mBAAmB,SAAS;AACxD,QAAM,SAAS,6BAA6B,qBAAqB,GAAG;AACpE,QAAM,cAAc,sBAAsB,MAAM;AAChD,MAAI,wBAAwB,oBAAoB;AAC9C,UAAM,OAAO,yBAA2B,mBAAmB;AAC3D,WAAO;AAAA,MACL,OAAO;AAAA,MACP,YAAY,OAAO,cAAc;AAAA,MACjC,QAAQ,OAAO,UAAU;AAAA,MACzB,YAAY,GAAG,KAAK,UAAU;AAAA,MAC9B,gBAAgB,iCAAiC,mBAAmB,kBAAkB,KAAK,UAAU,MAAM,KAAK,WAAW,OAAO,KAAK,MAAM,MAAM,KAAK,QAAQ;AAAA,IAClK;AAAA,EACF;AAEA,QAAM,gBAAgB,6BAA6B,oBAAoB,GAAG;AAC1E,QAAM,SAAS,6BAA6B,GAAG;AAC/C,QAAM,qBAAqB,sBAAsB,aAAa;AAC9D,QAAM,cAAc,sBAAsB,MAAM;AAChD,QAAM,cAAc,yBAA2B,kBAAkB;AACjE,SAAO;AAAA,IACL,OAAO,sBAAsB;AAAA,IAC7B,YAAY,cAAc,cAAc,OAAO,cAAc;AAAA,IAC7D,QAAQ,cAAc,UAAU,OAAO,UAAU;AAAA,IACjD,YAAY;AAAA,IACZ,gBACE,gIAEM,YAAY,UAAU,MAAM,YAAY,WAAW;AAAA,EAC7D;AACF;AAEO,SAAS,6BACd,WACA,MAAyB,QAAQ,KAChB;AACjB,QAAM,OAAO,yBAA2B,SAAS;AACjD,SAAO;AAAA,IACL,YAAY,MAAM,IAAI,KAAK,UAAU,GAAG,KAAK,UAAU;AAAA,IACvD,QAAQ,MAAM,IAAI,KAAK,MAAM,GAAG,KAAK,MAAM;AAAA,IAC3C,aAAa,MAAM,IAAI,KAAK,WAAW,GAAG,KAAK,WAAW,KAAK;AAAA,IAC/D,UAAU,MAAM,IAAI,KAAK,QAAQ,GAAG,KAAK,QAAQ,KAAK;AAAA,IACtD,UAAU,MAAM,IAAI,KAAK,QAAQ,GAAG,KAAK,QAAQ,KAAK;AAAA,IACtD,YAAY,MAAM,IAAI,KAAK,UAAU,GAAG,KAAK,UAAU,KAAK;AAAA,EAC9D;AACF;AAEA,SAAS,yBAAyB,WAAmB,KAAiC;AACpF,QAAM,SAAS,6BAA6B,WAAW,GAAG;AAC1D,SAAO;AAAA,IACL,OAAO,cACP,OAAO,UACP,OAAO,eACP,OAAO,YACP,OAAO,YACP,OAAO;AAAA,EACT;AACF;AAEO,SAAS,sBAAsB,QAK1B;AACV,QAAM,aAAa,MAAM,OAAO,YAAY,uBAAuB;AACnE,QAAM,SAAS,MAAM,OAAO,QAAQ,mBAAmB;AACvD,QAAM,cAAc,MAAM,OAAO,aAAa,wBAAwB;AACtE,QAAM,WAAW,MAAM,OAAO,UAAU,qBAAqB;AAC7D,SAAO,QAAQ,eAAe,eAAgB,UAAU,SAAU;AACpE;AAEO,SAAS,4BACd,YACA,MACQ;AACR,QAAM,UAAU,MAAM,YAAY,mBAAmB;AACrD,MAAI,CAAC,SAAS;AACZ,UAAM,IAAI,MAAM,mDAAmD;AAAA,EACrE;AAEA,MAAI;AACJ,MAAI;AACF,aAAS,IAAI,IAAI,OAAO;AAAA,EAC1B,QAAQ;AACN,UAAM,IAAI,MAAM,+CAA+C;AAAA,EACjE;AAEA,MAAI,OAAO,aAAa,YAAY,OAAO,aAAa,SAAS;AAC/D,UAAM,IAAI,MAAM,gDAAgD;AAAA,EAClE;AACA,MAAI,CAAC,OAAO,UAAU;AACpB,UAAM,IAAI,MAAM,2CAA2C;AAAA,EAC7D;AACA,MAAI,OAAO,YAAY,OAAO,UAAU;AACtC,UAAM,IAAI,MAAM,6DAA6D;AAAA,EAC/E;AACA,MAAI,OAAO,UAAU,OAAO,MAAM;AAChC,UAAM,IAAI,MAAM,mEAAmE;AAAA,EACrF;AACA,MACE,OAAO,aAAa,WACpB,MAAM,wBAAwB,QAC9B,CAAC,wBAAwB,OAAO,QAAQ,GACxC;AACA,UAAM,IAAI,MAAM,4BAA4B;AAAA,EAC9C;AAEA,SAAO;AACT;AAEA,eAAsB,oCACpB,YACA,MAKiB;AACjB,QAAM,sBACJ,OAAO,MAAM,mCAAmC,YAC5C,KAAK,iCACL,MAAM;AACZ,QAAM,aAAa,4BAA4B,YAAY;AAAA,IACzD;AAAA,EACF,CAAC;AACD,QAAM,mCAAmC,YAAY;AAAA,IACnD,gCAAgC,MAAM;AAAA,IACtC;AAAA,IACA,UAAU,MAAM;AAAA,IAChB,cAAc;AAAA,EAChB,CAAC;AACD,SAAO;AACT;AAEO,SAAS,8BACd,KACA,WACA,MAAyB,QAAQ,KACX;AACtB,QAAM,SAAS,wBAAwB,GAAG;AAC1C,QAAM,UAAU,wBAAwB,KAAK,SAAS,KAAK,CAAC;AAC5D,QAAM,sBAAsB,mBAAmB,SAAS;AACxD,QAAM,oCAAoC,qCAAqC;AAAA,IAC7E;AAAA,IACA;AAAA,IACA,WAAW;AAAA,EACb,CAAC;AACD,QAAM,mBAAmB;AAAA,IACvB;AAAA,IACA,QAAQ;AAAA,EACV;AACA,QAAM,YAAY,6BAA6B,qBAAqB,GAAG;AACvE,QAAM,YAAY,6BAA6B,GAAG;AAClD,QAAM,eAAe,CAAC,UACpB,6BAA6B,KAAK,qBAAqB,SAAS,OAAO;AAAA,IACrE,GAAG;AAAA,IACH,mBAAmB,UAAU,aAAa,oCAAoC;AAAA,EAChF,CAAC;AACH,QAAM,kBAAkB,iCAAiC;AAAA,IACvD,WAAW;AAAA,IACX,SAAS;AAAA,MACP,YAAY,aAAa,YAAY;AAAA,MACrC,QAAQ,aAAa,QAAQ;AAAA,MAC7B,aAAa,aAAa,aAAa;AAAA,MACvC,UAAU,aAAa,UAAU;AAAA,MACjC,UAAU,aAAa,UAAU;AAAA,MACjC,YAAY,aAAa,YAAY;AAAA,IACvC;AAAA,IACA;AAAA,IACA,SAAS;AAAA,MACP,YAAY,0BAA0B,QAAQ,cAAc,gBAAgB;AAAA,MAC5E,QAAQ,0BAA0B,QAAQ,UAAU,gBAAgB;AAAA,MACpE,aAAa,0BAA0B,QAAQ,eAAe,gBAAgB;AAAA,MAC9E,UAAU,0BAA0B,QAAQ,YAAY;AAAA,QACtD,GAAG;AAAA,QACH,mBAAmB;AAAA,MACrB,CAAC;AAAA,MACD,UAAU,0BAA0B,QAAQ,YAAY,gBAAgB;AAAA,MACxE,YAAY,0BAA0B,QAAQ,cAAc,gBAAgB;AAAA,IAC9E;AAAA,IACA;AAAA,EACF,CAAC;AAED,QAAM,0BAA0B,4BAA4B,QAAQ,gBAAgB;AACpF,QAAM,mBACJ,2BAA2B,4BAA4B,OAAO,gBAAgB;AAChF,QAAM,aACJ,OAAO,QAAQ,eAAe,YAAY,QAAQ,aAAc,OAAO,cAAc;AACvF,QAAM,sBACJ,6BAA6B,OAAO,KAAK,6BAA6B,MAAM,IACxE,OACA;AAEN,SAAO;AAAA,IACL,YAAY,gBAAgB;AAAA,IAC5B,QAAQ,gBAAgB;AAAA,IACxB,aAAa,gBAAgB,eAAe;AAAA,IAC5C,UAAU,gBAAgB,YAAY;AAAA,IACtC,UAAU,gBAAgB,YAAY;AAAA,IACtC,YAAY,gBAAgB,cAAc;AAAA,IAC1C;AAAA,IACA;AAAA,IACA,GAAG,yBAAyB;AAAA,MAC1B;AAAA,MACA,OAAO,QAAQ,SAAS,OAAO;AAAA,IACjC,CAAC;AAAA,EACH;AACF;AAEA,SAAS,+BACP,KACA,MAAyB,QAAQ,KAClB;AACf,MAAI,qCAAqC,KAAK,GAAG,GAAG;AAClD,WAAO;AAAA,EACT;AACA,SAAO,mBAAmB,oCAAoC,KAAK,GAAG,CAAC;AACzE;AAEO,SAAS,yBAAyB,QASvC;AACA,QAAM,MAAM,QAAQ,OAAQ,iBAAiB,EAAE,OAAO,WAAW;AACjE,QAAM,MAAM,QAAQ,OAAO,QAAQ;AACnC,QAAM,oBAAoB,2BAA2B,QAAQ,SAAS;AACtE,QAAM,qBAAqB,qBAAqB,+BAA+B,KAAK,GAAG;AACvF,MAAI,CAAC,oBAAoB;AACvB,UAAM,IAAI;AAAA,MACR;AAAA,IACF;AAAA,EACF;AACA,MACE,qBACA,sBAAsB,sBACtB,CAAC,+BAA+B,GAAG,EAAE,SAAS,iBAAiB,KAC/D,CAAC,yBAAyB,mBAAmB,GAAG,GAChD;AACA,UAAM,IAAI;AAAA,MACR,iBAAiB,iBAAiB,mDAAmD,iBAAiB,qBAAqB,yBAA2B,iBAAiB,EAAE,YAAY,QAAQ,kBAAkB,EAAE,CAAC;AAAA,IACpN;AAAA,EACF;AACA,QAAM,WAAW,8BAA8B,KAAK,oBAAoB,GAAG;AAE3E,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA,WAAW;AAAA,IACX;AAAA,EACF;AACF;AAEA,eAAsB,kBAAkB,QAIhB;AACtB,QAAM,EAAE,KAAK,KAAK,WAAW,SAAS,IAAI,yBAAyB,MAAM;AACzE,QAAM,cACH,MAAM,uCAAuC;AAAA,IAC5C;AAAA,IACA;AAAA,IACA;AAAA,IACA,OAAO;AAAA,EACT,CAAC,KAAM,SAAS;AAClB,QAAM,oBAAoB,SAAS;AACnC,QAAM,aAAa,MAAM,oCAAoC,SAAS,YAAY;AAAA,IAChF,gCAAgC,SAAS;AAAA,EAC3C,CAAC;AACD,MAAI;AACJ,QAAM,wBAAwB,YAAY;AACxC,0BAAsB,MAAM,OAAO,2CAAiC;AACpE,WAAO;AAAA,EACT;AAEA,QAAM,EAAE,uBAAuB,uBAAuB,IAAI,MAAM,8BAA8B;AAC9F,QAAM,SAAS,sBAAsB,KAAK,SAAS;AACnD,QAAM,oBACJ,UACA,uBAAuB,QAAQ;AAAA,IAC7B;AAAA,IACA,QAAQ,SAAS,UAAU;AAAA,IAC3B;AAAA,EACF,CAAC,IACG,SACA;AAGN,MAAI,aAAa;AACf,QAAI,SAAS,SAAS;AACtB,UAAM,yBAAyB,mBAAmB,gBAAgB;AAClE,QAAI,gBAAgB,yBAChB,mBAAmB,YAAY,SAAS,WACxC,SAAS;AAEb,QAAI,CAAC,QAAQ;AAGX,YAAM,SAAS,MAAM,0BAA0B;AAAA,QAC7C;AAAA,QACA;AAAA,QACA;AAAA,QACA,YAAY,SAAS;AAAA,QACrB,kBAAkB,SAAS;AAAA,MAC7B,CAAC;AACD,YAAM,gBAAgB,OAAO,SAAS,KAAK;AAC3C,UAAI,CAAC,eAAe;AAClB,cAAM,IAAI,MAAM,sCAAsC;AAAA,MACxD;AACA,eAAS;AACT,sBAAgB,iBAAiB,OAAO,WAAW,KAAK,KAAK,SAAS;AAAA,IACxE;AAEA,UAAM,iCACJ,CAAC,qBACD,CAAC,0BACD,kBAAkB,WAAW,WAC5B,kBAAkB,YAAY,YAAe;AAChD,QAAI,gCAAgC;AAClC,YAAM,EAAE,uBAAAA,uBAAsB,IAAI,MAAM,sBAAsB;AAC9D,YAAMA;AAAA,QACJ;AAAA,UACE;AAAA,UACA;AAAA,UACA;AAAA,UACA,UAAU;AAAA,QACZ;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,IACF,WAAW,wBAAwB;AACjC,YAAM,EAAE,uBAAuB,IAAI,MAAM,sBAAsB;AAC/D,YAAM,uBAAuB,KAAK,SAAS;AAAA,IAC7C;AACA,WAAO;AAAA,MACL;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA,UAAU;AAAA,MACV,UAAU;AAAA,MACV,YAAY,SAAS;AAAA,MACrB,kBAAkB,SAAS;AAAA,MAC3B,YAAY,SAAS;AAAA,MACrB,GAAG,yBAAyB;AAAA,QAC1B,qBAAqB,SAAS;AAAA,QAC9B,kBAAkB,SAAS;AAAA,MAC7B,CAAC;AAAA,IACH;AAAA,EACF;AAEA,MAAI,mBAAmB;AACrB,UAAM,EAAE,uBAAuB,IAAI,MAAM,sBAAsB;AAC/D,UAAM,uBAAuB,KAAK,SAAS;AAC3C,WAAO;AAAA,MACL;AAAA,MACA,YAAY,kBAAkB;AAAA,MAC9B,QAAQ,kBAAkB;AAAA,MAC1B,aAAa,kBAAkB;AAAA,MAC/B,UAAU;AAAA,MACV,UAAU,kBAAkB,YAAY,SAAS;AAAA,MACjD,YAAY,SAAS;AAAA,MACrB,kBAAkB,SAAS;AAAA,MAC3B,YAAY,SAAS;AAAA,MACrB,GAAG,yBAAyB;AAAA,QAC1B,qBAAqB,SAAS;AAAA,QAC9B,kBAAkB,SAAS;AAAA,MAC7B,CAAC;AAAA,IACH;AAAA,EACF;AAEA,MAAI,CAAC,SAAS,QAAQ;AACpB,UAAM,IAAI,MAAM,8EAA8E;AAAA,EAChG;AAEA,QAAM,WACH,MAAM,uCAAuC;AAAA,IAC5C;AAAA,IACA;AAAA,IACA;AAAA,IACA,OAAO;AAAA,EACT,CAAC,KAAM,SAAS;AAClB,MAAI,CAAC,UAAU;AACb,UAAM,IAAI;AAAA,MACR;AAAA,IACF;AAAA,EACF;AAGA,QAAM,EAAE,cAAc,iCAAiC,IAAI,MAAM,yBAAyB;AAC1F,mCAAiC;AACjC,QAAM,cAAc,IAAI,aAAa,YAAY,IAAI;AAAA,IACnD,YAAY,SAAS;AAAA,IACrB,kBAAkB,SAAS;AAAA,EAC7B,CAAC;AACD,QAAM,QAAS,MAAM,uBAAuB,qBAAqB,YAAY;AAC3E,WAAQ,MAAM,YAAY,UAAU,QAAQ,4BAA4B,QAAW;AAAA,MACjF,MAAM;AAAA,MACN,YAAY,EAAE,MAAM,aAAa,MAAM,SAAS,OAAO;AAAA,MACvD;AAAA,MACA,WAAW,SAAS;AAAA,MACpB,6BAA6B,SAAS,cAAc;AAAA,IACtD,CAAC;AAAA,EAKH,CAAC;AAMD,QAAM,mBAAmB,MAAM,cAAc,KAAK;AAClD,MAAI,CAAC,kBAAkB;AACrB,UAAM,IAAI,MAAM,6CAA6C;AAAA,EAC/D;AAEA,QAAM,OAAmB;AAAA,IACvB;AAAA,IACA;AAAA,IACA,QAAQ,MAAM,WAAW,SAAS;AAAA,IAClC,aAAa;AAAA,IACb;AAAA,IACA,UAAU,MAAM,aAAa,SAAS;AAAA,IACtC,YAAY,SAAS;AAAA,IACrB,kBAAkB,SAAS;AAAA,IAC3B,YAAY,SAAS;AAAA,IACrB,GAAG,yBAAyB;AAAA,MAC1B,qBAAqB,SAAS;AAAA,MAC9B,kBAAkB,SAAS;AAAA,IAC7B,CAAC;AAAA,EACH;AAEA,QAAM,EAAE,sBAAsB,IAAI,MAAM,sBAAsB;AAC9D,QAAM;AAAA,IACJ;AAAA,MACE,YAAY,KAAK;AAAA,MACjB,QAAQ,KAAK;AAAA,MACb,aAAa,KAAK;AAAA,MAClB,UAAU,KAAK;AAAA,IACjB;AAAA,IACA;AAAA,IACA;AAAA,EACF;AAEA,SAAO;AACT;AAEA,eAAsB,uCAAuC,QAI7B;AAC9B,QAAM,gBAAgB,OAAO,KAAK,UAAU,KAAK;AACjD,MAAI,eAAe;AACjB,WAAO;AAAA,EACT;AACA,MAAI,uBAAuB,OAAO,WAAW,GAAG;AAC9C,WAAO;AAAA,EACT;AAEA,QAAM,SAAS,MAAM,0BAA0B;AAAA,IAC7C,YAAY,OAAO,KAAK;AAAA,IACxB,aAAa,OAAO,KAAK;AAAA,IACzB,QAAQ,OAAO,KAAK;AAAA,IACpB,YAAY,OAAO,KAAK;AAAA,IACxB,kBAAkB,OAAO,KAAK;AAAA,EAChC,CAAC;AACD,QAAM,WAAW,OAAO,WAAW,KAAK;AACxC,MAAI,CAAC,UAAU;AACb,WAAO;AAAA,EACT;AACA,MAAI,uBAAuB,OAAO,WAAW,GAAG;AAC9C,WAAO;AAAA,EACT;AAEA,QAAM,MAAM,OAAO,OAAO,QAAQ;AAClC,QAAM,EAAE,sBAAsB,IAAI,MAAM,8BAA8B;AACtE,MACE,CAAC,oCAAoC;AAAA,IACnC,QAAQ,sBAAsB,KAAK,OAAO,KAAK,SAAS;AAAA,IACxD,MAAM,OAAO;AAAA,EACf,CAAC,GACD;AACA,WAAO;AAAA,EACT;AAEA,QAAM,sBAAsB,sCAAsC;AAAA,IAChE,YAAY,OAAO,KAAK;AAAA,IACxB,QAAQ,OAAO,KAAK;AAAA,IACpB,aAAa,OAAO,KAAK;AAAA,IACzB,WAAW,OAAO,KAAK;AAAA,IACvB;AAAA,IACA,KAAK,OAAO;AAAA,EACd,CAAC;AACD,MAAI,CAAC,qBAAqB;AACxB,UAAM,IAAI,MAAM,0EAA0E;AAAA,EAC5F;AACA,MAAI,uBAAuB,OAAO,WAAW,GAAG;AAC9C,WAAO;AAAA,EACT;AAEA,QAAM,oBAAoB,MAAM,OAAO,2CAAiC;AACxE,QAAM,QAAQ,MAAM,kBAAkB;AAAA,IACpC;AAAA,MACE,YAAY,OAAO,KAAK;AAAA,MACxB,QAAQ,OAAO,KAAK;AAAA,MACpB,aAAa,OAAO,KAAK;AAAA,MACzB;AAAA,IACF;AAAA,IACA;AAAA,IACA,OAAO,KAAK;AAAA,EACd;AACA,SAAO,UAAU,UAAU,WAAW;AACxC;",
+  "names": ["saveMatrixCredentials"]
+}

package/dist/chunk-GLLRCKKE.js

@@ -0,0 +1,26 @@
+import {
+  MATRIX_REACTION_EVENT_TYPE
+} from "./chunk-3JD6JSJD.js";
+import {
+  init_shims
+} from "./chunk-7FLQSTPG.js";
+
+// src/matrix/monitor/types.ts
+init_shims();
+var EventType = {
+  RoomMessage: "m.room.message",
+  RoomMessageEncrypted: "m.room.encrypted",
+  RoomMember: "m.room.member",
+  Location: "m.location",
+  Reaction: MATRIX_REACTION_EVENT_TYPE
+};
+var RelationType = {
+  Replace: "m.replace",
+  Thread: "m.thread"
+};
+
+export {
+  EventType,
+  RelationType
+};
+//# sourceMappingURL=chunk-GLLRCKKE.js.map

package/dist/chunk-GLLRCKKE.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../src/matrix/monitor/types.ts"],
+  "sourcesContent": ["import { MATRIX_REACTION_EVENT_TYPE } from \"../reaction-common.js\";\nimport type { EncryptedFile, MessageEventContent } from \"../sdk.js\";\nexport type { MatrixRawEvent } from \"../sdk.js\";\n\nexport const EventType = {\n  RoomMessage: \"m.room.message\",\n  RoomMessageEncrypted: \"m.room.encrypted\",\n  RoomMember: \"m.room.member\",\n  Location: \"m.location\",\n  Reaction: MATRIX_REACTION_EVENT_TYPE,\n} as const;\n\nexport const RelationType = {\n  Replace: \"m.replace\",\n  Thread: \"m.thread\",\n} as const;\n\nexport type RoomMessageEventContent = MessageEventContent & {\n  url?: string;\n  file?: EncryptedFile;\n  info?: {\n    mimetype?: string;\n    size?: number;\n  };\n  \"m.relates_to\"?: {\n    rel_type?: string;\n    event_id?: string;\n    \"m.in_reply_to\"?: { event_id?: string };\n  };\n};\n"],
+  "mappings": ";;;;;;;;AAAA;AAIO,IAAM,YAAY;AAAA,EACvB,aAAa;AAAA,EACb,sBAAsB;AAAA,EACtB,YAAY;AAAA,EACZ,UAAU;AAAA,EACV,UAAU;AACZ;AAEO,IAAM,eAAe;AAAA,EAC1B,SAAS;AAAA,EACT,QAAQ;AACV;",
+  "names": []
+}

package/dist/chunk-GNYG6I36.js

@@ -0,0 +1,175 @@
+import {
+  resolveGlobalMatrixEnvConfig,
+  resolveScopedMatrixEnvConfig
+} from "./chunk-GKOWCDQV.js";
+import {
+  findMatrixAccountEntry,
+  requiresExplicitMatrixDefaultAccount,
+  resolveConfiguredMatrixAccountIds,
+  resolveMatrixChannelConfig,
+  resolveMatrixDefaultOrOnlyAccountId
+} from "./chunk-UU5PSBSI.js";
+import {
+  resolveMatrixAccountStringValues
+} from "./chunk-SSEX66OL.js";
+import {
+  resolveMatrixAccountStorageRoot,
+  resolveMatrixCredentialsPath
+} from "./chunk-MH74AJ3A.js";
+import {
+  init_shims
+} from "./chunk-7FLQSTPG.js";
+
+// src/migration-config.ts
+init_shims();
+import fs from "node:fs";
+import os from "node:os";
+import { DEFAULT_ACCOUNT_ID, normalizeAccountId } from "openclaw/plugin-sdk/account-id";
+import { resolveStateDir } from "openclaw/plugin-sdk/state-paths";
+import { normalizeOptionalString } from "openclaw/plugin-sdk/text-runtime";
+function clean(value) {
+  return normalizeOptionalString(value) ?? "";
+}
+function resolveMatrixAccountConfigEntry(cfg, accountId) {
+  return findMatrixAccountEntry(cfg, accountId);
+}
+function resolveMatrixFlatStoreSelectionNote(cfg, accountId) {
+  if (resolveConfiguredMatrixAccountIds(cfg).length <= 1) {
+    return void 0;
+  }
+  return `Legacy Matrix flat store uses one shared on-disk state, so it will be migrated into account "${accountId}".`;
+}
+function resolveMatrixMigrationConfigFields(params) {
+  const channel = resolveMatrixChannelConfig(params.cfg);
+  const account = resolveMatrixAccountConfigEntry(params.cfg, params.accountId);
+  const scopedEnv = resolveScopedMatrixEnvConfig(params.accountId, params.env);
+  const globalEnv = resolveGlobalMatrixEnvConfig(params.env);
+  const normalizedAccountId = normalizeAccountId(params.accountId);
+  const resolvedStrings = resolveMatrixAccountStringValues({
+    accountId: normalizedAccountId,
+    account: {
+      homeserver: clean(account?.homeserver),
+      userId: clean(account?.userId),
+      accessToken: clean(account?.accessToken)
+    },
+    scopedEnv,
+    channel: {
+      homeserver: clean(channel?.homeserver),
+      userId: clean(channel?.userId),
+      accessToken: clean(channel?.accessToken)
+    },
+    globalEnv
+  });
+  return {
+    homeserver: resolvedStrings.homeserver,
+    userId: resolvedStrings.userId,
+    accessToken: resolvedStrings.accessToken
+  };
+}
+function loadStoredMatrixCredentials(env, accountId) {
+  const stateDir = resolveStateDir(env, os.homedir);
+  const credentialsPath = resolveMatrixCredentialsPath({
+    stateDir,
+    accountId: normalizeAccountId(accountId)
+  });
+  try {
+    if (!fs.existsSync(credentialsPath)) {
+      return null;
+    }
+    const parsed = JSON.parse(
+      fs.readFileSync(credentialsPath, "utf8")
+    );
+    if (typeof parsed.homeserver !== "string" || typeof parsed.userId !== "string" || typeof parsed.accessToken !== "string") {
+      return null;
+    }
+    return {
+      homeserver: parsed.homeserver,
+      userId: parsed.userId,
+      accessToken: parsed.accessToken,
+      deviceId: typeof parsed.deviceId === "string" ? parsed.deviceId : void 0
+    };
+  } catch {
+    return null;
+  }
+}
+function credentialsMatchResolvedIdentity(stored, identity) {
+  if (!stored || !identity.homeserver) {
+    return false;
+  }
+  if (!identity.userId) {
+    if (!identity.accessToken) {
+      return false;
+    }
+    return stored.homeserver === identity.homeserver && stored.accessToken === identity.accessToken;
+  }
+  return stored.homeserver === identity.homeserver && stored.userId === identity.userId;
+}
+function resolveMatrixMigrationAccountTarget(params) {
+  const stored = loadStoredMatrixCredentials(params.env, params.accountId);
+  const resolved = resolveMatrixMigrationConfigFields(params);
+  const matchingStored = credentialsMatchResolvedIdentity(stored, {
+    homeserver: resolved.homeserver,
+    userId: resolved.userId,
+    accessToken: resolved.accessToken
+  }) ? stored : null;
+  const homeserver = resolved.homeserver;
+  const userId = resolved.userId || matchingStored?.userId || "";
+  const accessToken = resolved.accessToken || matchingStored?.accessToken || "";
+  if (!homeserver || !userId || !accessToken) {
+    return null;
+  }
+  const stateDir = resolveStateDir(params.env, os.homedir);
+  const { rootDir } = resolveMatrixAccountStorageRoot({
+    stateDir,
+    homeserver,
+    userId,
+    accessToken,
+    accountId: params.accountId
+  });
+  return {
+    accountId: params.accountId,
+    homeserver,
+    userId,
+    accessToken,
+    rootDir,
+    storedDeviceId: matchingStored?.deviceId ?? null
+  };
+}
+function resolveLegacyMatrixFlatStoreTarget(params) {
+  const channel = resolveMatrixChannelConfig(params.cfg);
+  if (!channel) {
+    return {
+      warning: `Legacy Matrix ${params.detectedKind} detected at ${params.detectedPath}, but channels.lobi is not configured yet. Configure Matrix, then rerun "openclaw doctor --fix" or restart the gateway.`
+    };
+  }
+  if (requiresExplicitMatrixDefaultAccount(params.cfg)) {
+    return {
+      warning: `Legacy Matrix ${params.detectedKind} detected at ${params.detectedPath}, but multiple Matrix accounts are configured and channels.lobi.defaultAccount is not set. Set "channels.lobi.defaultAccount" to the intended target account before rerunning "openclaw doctor --fix" or restarting the gateway.`
+    };
+  }
+  const accountId = resolveMatrixDefaultOrOnlyAccountId(params.cfg);
+  const target = resolveMatrixMigrationAccountTarget({
+    cfg: params.cfg,
+    env: params.env,
+    accountId
+  });
+  if (!target) {
+    const targetDescription = params.detectedKind === "state" ? "the new account-scoped target" : "the account-scoped target";
+    return {
+      warning: `Legacy Matrix ${params.detectedKind} detected at ${params.detectedPath}, but ${targetDescription} could not be resolved yet (need homeserver, userId, and access token for channels.lobi${accountId === DEFAULT_ACCOUNT_ID ? "" : `.accounts.${accountId}`}). Start the gateway once with a working Matrix login, or rerun "openclaw doctor --fix" after cached credentials are available.`
+    };
+  }
+  return {
+    ...target,
+    selectionNote: resolveMatrixFlatStoreSelectionNote(params.cfg, accountId)
+  };
+}
+
+export {
+  resolveMatrixMigrationConfigFields,
+  loadStoredMatrixCredentials,
+  credentialsMatchResolvedIdentity,
+  resolveMatrixMigrationAccountTarget,
+  resolveLegacyMatrixFlatStoreTarget
+};
+//# sourceMappingURL=chunk-GNYG6I36.js.map

package/dist/chunk-GNYG6I36.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../src/migration-config.ts"],
+  "sourcesContent": ["import fs from \"node:fs\";\nimport os from \"node:os\";\nimport { DEFAULT_ACCOUNT_ID, normalizeAccountId } from \"openclaw/plugin-sdk/account-id\";\nimport type { OpenClawConfig } from \"openclaw/plugin-sdk/config-runtime\";\nimport { resolveStateDir } from \"openclaw/plugin-sdk/state-paths\";\nimport { normalizeOptionalString } from \"openclaw/plugin-sdk/text-runtime\";\nimport {\n  findMatrixAccountEntry,\n  requiresExplicitMatrixDefaultAccount,\n  resolveConfiguredMatrixAccountIds,\n  resolveMatrixChannelConfig,\n  resolveMatrixDefaultOrOnlyAccountId,\n} from \"./account-selection.js\";\nimport { resolveMatrixAccountStringValues } from \"./auth-precedence.js\";\nimport {\n  resolveGlobalMatrixEnvConfig,\n  resolveScopedMatrixEnvConfig,\n} from \"./matrix/client/env-auth.js\";\nimport { resolveMatrixAccountStorageRoot, resolveMatrixCredentialsPath } from \"./storage-paths.js\";\n\nexport type MatrixStoredCredentials = {\n  homeserver: string;\n  userId: string;\n  accessToken: string;\n  deviceId?: string;\n};\n\nexport type MatrixMigrationAccountTarget = {\n  accountId: string;\n  homeserver: string;\n  userId: string;\n  accessToken: string;\n  rootDir: string;\n  storedDeviceId: string | null;\n};\n\nexport type MatrixLegacyFlatStoreTarget = MatrixMigrationAccountTarget & {\n  selectionNote?: string;\n};\n\ntype MatrixLegacyFlatStoreKind = \"state\" | \"encrypted state\";\n\nfunction clean(value: unknown): string {\n  return normalizeOptionalString(value) ?? \"\";\n}\n\nfunction resolveMatrixAccountConfigEntry(\n  cfg: OpenClawConfig,\n  accountId: string,\n): Record<string, unknown> | null {\n  return findMatrixAccountEntry(cfg, accountId);\n}\n\nfunction resolveMatrixFlatStoreSelectionNote(\n  cfg: OpenClawConfig,\n  accountId: string,\n): string | undefined {\n  if (resolveConfiguredMatrixAccountIds(cfg).length <= 1) {\n    return undefined;\n  }\n  return (\n    `Legacy Matrix flat store uses one shared on-disk state, so it will be migrated into ` +\n    `account \"${accountId}\".`\n  );\n}\n\nexport function resolveMatrixMigrationConfigFields(params: {\n  cfg: OpenClawConfig;\n  env: NodeJS.ProcessEnv;\n  accountId: string;\n}): {\n  homeserver: string;\n  userId: string;\n  accessToken: string;\n} {\n  const channel = resolveMatrixChannelConfig(params.cfg);\n  const account = resolveMatrixAccountConfigEntry(params.cfg, params.accountId);\n  const scopedEnv = resolveScopedMatrixEnvConfig(params.accountId, params.env);\n  const globalEnv = resolveGlobalMatrixEnvConfig(params.env);\n  const normalizedAccountId = normalizeAccountId(params.accountId);\n  const resolvedStrings = resolveMatrixAccountStringValues({\n    accountId: normalizedAccountId,\n    account: {\n      homeserver: clean(account?.homeserver),\n      userId: clean(account?.userId),\n      accessToken: clean(account?.accessToken),\n    },\n    scopedEnv,\n    channel: {\n      homeserver: clean(channel?.homeserver),\n      userId: clean(channel?.userId),\n      accessToken: clean(channel?.accessToken),\n    },\n    globalEnv,\n  });\n\n  return {\n    homeserver: resolvedStrings.homeserver,\n    userId: resolvedStrings.userId,\n    accessToken: resolvedStrings.accessToken,\n  };\n}\n\nexport function loadStoredMatrixCredentials(\n  env: NodeJS.ProcessEnv,\n  accountId: string,\n): MatrixStoredCredentials | null {\n  const stateDir = resolveStateDir(env, os.homedir);\n  const credentialsPath = resolveMatrixCredentialsPath({\n    stateDir,\n    accountId: normalizeAccountId(accountId),\n  });\n  try {\n    if (!fs.existsSync(credentialsPath)) {\n      return null;\n    }\n    const parsed = JSON.parse(\n      fs.readFileSync(credentialsPath, \"utf8\"),\n    ) as Partial<MatrixStoredCredentials>;\n    if (\n      typeof parsed.homeserver !== \"string\" ||\n      typeof parsed.userId !== \"string\" ||\n      typeof parsed.accessToken !== \"string\"\n    ) {\n      return null;\n    }\n    return {\n      homeserver: parsed.homeserver,\n      userId: parsed.userId,\n      accessToken: parsed.accessToken,\n      deviceId: typeof parsed.deviceId === \"string\" ? parsed.deviceId : undefined,\n    };\n  } catch {\n    return null;\n  }\n}\n\nexport function credentialsMatchResolvedIdentity(\n  stored: MatrixStoredCredentials | null,\n  identity: {\n    homeserver: string;\n    userId: string;\n    accessToken: string;\n  },\n): stored is MatrixStoredCredentials {\n  if (!stored || !identity.homeserver) {\n    return false;\n  }\n  if (!identity.userId) {\n    if (!identity.accessToken) {\n      return false;\n    }\n    return stored.homeserver === identity.homeserver && stored.accessToken === identity.accessToken;\n  }\n  return stored.homeserver === identity.homeserver && stored.userId === identity.userId;\n}\n\nexport function resolveMatrixMigrationAccountTarget(params: {\n  cfg: OpenClawConfig;\n  env: NodeJS.ProcessEnv;\n  accountId: string;\n}): MatrixMigrationAccountTarget | null {\n  const stored = loadStoredMatrixCredentials(params.env, params.accountId);\n  const resolved = resolveMatrixMigrationConfigFields(params);\n  const matchingStored = credentialsMatchResolvedIdentity(stored, {\n    homeserver: resolved.homeserver,\n    userId: resolved.userId,\n    accessToken: resolved.accessToken,\n  })\n    ? stored\n    : null;\n  const homeserver = resolved.homeserver;\n  const userId = resolved.userId || matchingStored?.userId || \"\";\n  const accessToken = resolved.accessToken || matchingStored?.accessToken || \"\";\n  if (!homeserver || !userId || !accessToken) {\n    return null;\n  }\n\n  const stateDir = resolveStateDir(params.env, os.homedir);\n  const { rootDir } = resolveMatrixAccountStorageRoot({\n    stateDir,\n    homeserver,\n    userId,\n    accessToken,\n    accountId: params.accountId,\n  });\n\n  return {\n    accountId: params.accountId,\n    homeserver,\n    userId,\n    accessToken,\n    rootDir,\n    storedDeviceId: matchingStored?.deviceId ?? null,\n  };\n}\n\nexport function resolveLegacyMatrixFlatStoreTarget(params: {\n  cfg: OpenClawConfig;\n  env: NodeJS.ProcessEnv;\n  detectedPath: string;\n  detectedKind: MatrixLegacyFlatStoreKind;\n}): MatrixLegacyFlatStoreTarget | { warning: string } {\n  const channel = resolveMatrixChannelConfig(params.cfg);\n  if (!channel) {\n    return {\n      warning:\n        `Legacy Matrix ${params.detectedKind} detected at ${params.detectedPath}, but channels.lobi is not configured yet. ` +\n        'Configure Matrix, then rerun \"openclaw doctor --fix\" or restart the gateway.',\n    };\n  }\n  if (requiresExplicitMatrixDefaultAccount(params.cfg)) {\n    return {\n      warning:\n        `Legacy Matrix ${params.detectedKind} detected at ${params.detectedPath}, but multiple Matrix accounts are configured and channels.lobi.defaultAccount is not set. ` +\n        'Set \"channels.lobi.defaultAccount\" to the intended target account before rerunning \"openclaw doctor --fix\" or restarting the gateway.',\n    };\n  }\n\n  const accountId = resolveMatrixDefaultOrOnlyAccountId(params.cfg);\n  const target = resolveMatrixMigrationAccountTarget({\n    cfg: params.cfg,\n    env: params.env,\n    accountId,\n  });\n  if (!target) {\n    const targetDescription =\n      params.detectedKind === \"state\"\n        ? \"the new account-scoped target\"\n        : \"the account-scoped target\";\n    return {\n      warning:\n        `Legacy Matrix ${params.detectedKind} detected at ${params.detectedPath}, but ${targetDescription} could not be resolved yet ` +\n        `(need homeserver, userId, and access token for channels.lobi${accountId === DEFAULT_ACCOUNT_ID ? \"\" : `.accounts.${accountId}`}). ` +\n        'Start the gateway once with a working Matrix login, or rerun \"openclaw doctor --fix\" after cached credentials are available.',\n    };\n  }\n\n  return {\n    ...target,\n    selectionNote: resolveMatrixFlatStoreSelectionNote(params.cfg, accountId),\n  };\n}\n"],
+  "mappings": ";;;;;;;;;;;;;;;;;;;;;;;AAAA;AAAA,OAAO,QAAQ;AACf,OAAO,QAAQ;AACf,SAAS,oBAAoB,0BAA0B;AAEvD,SAAS,uBAAuB;AAChC,SAAS,+BAA+B;AAqCxC,SAAS,MAAM,OAAwB;AACrC,SAAO,wBAAwB,KAAK,KAAK;AAC3C;AAEA,SAAS,gCACP,KACA,WACgC;AAChC,SAAO,uBAAuB,KAAK,SAAS;AAC9C;AAEA,SAAS,oCACP,KACA,WACoB;AACpB,MAAI,kCAAkC,GAAG,EAAE,UAAU,GAAG;AACtD,WAAO;AAAA,EACT;AACA,SACE,gGACY,SAAS;AAEzB;AAEO,SAAS,mCAAmC,QAQjD;AACA,QAAM,UAAU,2BAA2B,OAAO,GAAG;AACrD,QAAM,UAAU,gCAAgC,OAAO,KAAK,OAAO,SAAS;AAC5E,QAAM,YAAY,6BAA6B,OAAO,WAAW,OAAO,GAAG;AAC3E,QAAM,YAAY,6BAA6B,OAAO,GAAG;AACzD,QAAM,sBAAsB,mBAAmB,OAAO,SAAS;AAC/D,QAAM,kBAAkB,iCAAiC;AAAA,IACvD,WAAW;AAAA,IACX,SAAS;AAAA,MACP,YAAY,MAAM,SAAS,UAAU;AAAA,MACrC,QAAQ,MAAM,SAAS,MAAM;AAAA,MAC7B,aAAa,MAAM,SAAS,WAAW;AAAA,IACzC;AAAA,IACA;AAAA,IACA,SAAS;AAAA,MACP,YAAY,MAAM,SAAS,UAAU;AAAA,MACrC,QAAQ,MAAM,SAAS,MAAM;AAAA,MAC7B,aAAa,MAAM,SAAS,WAAW;AAAA,IACzC;AAAA,IACA;AAAA,EACF,CAAC;AAED,SAAO;AAAA,IACL,YAAY,gBAAgB;AAAA,IAC5B,QAAQ,gBAAgB;AAAA,IACxB,aAAa,gBAAgB;AAAA,EAC/B;AACF;AAEO,SAAS,4BACd,KACA,WACgC;AAChC,QAAM,WAAW,gBAAgB,KAAK,GAAG,OAAO;AAChD,QAAM,kBAAkB,6BAA6B;AAAA,IACnD;AAAA,IACA,WAAW,mBAAmB,SAAS;AAAA,EACzC,CAAC;AACD,MAAI;AACF,QAAI,CAAC,GAAG,WAAW,eAAe,GAAG;AACnC,aAAO;AAAA,IACT;AACA,UAAM,SAAS,KAAK;AAAA,MAClB,GAAG,aAAa,iBAAiB,MAAM;AAAA,IACzC;AACA,QACE,OAAO,OAAO,eAAe,YAC7B,OAAO,OAAO,WAAW,YACzB,OAAO,OAAO,gBAAgB,UAC9B;AACA,aAAO;AAAA,IACT;AACA,WAAO;AAAA,MACL,YAAY,OAAO;AAAA,MACnB,QAAQ,OAAO;AAAA,MACf,aAAa,OAAO;AAAA,MACpB,UAAU,OAAO,OAAO,aAAa,WAAW,OAAO,WAAW;AAAA,IACpE;AAAA,EACF,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEO,SAAS,iCACd,QACA,UAKmC;AACnC,MAAI,CAAC,UAAU,CAAC,SAAS,YAAY;AACnC,WAAO;AAAA,EACT;AACA,MAAI,CAAC,SAAS,QAAQ;AACpB,QAAI,CAAC,SAAS,aAAa;AACzB,aAAO;AAAA,IACT;AACA,WAAO,OAAO,eAAe,SAAS,cAAc,OAAO,gBAAgB,SAAS;AAAA,EACtF;AACA,SAAO,OAAO,eAAe,SAAS,cAAc,OAAO,WAAW,SAAS;AACjF;AAEO,SAAS,oCAAoC,QAIZ;AACtC,QAAM,SAAS,4BAA4B,OAAO,KAAK,OAAO,SAAS;AACvE,QAAM,WAAW,mCAAmC,MAAM;AAC1D,QAAM,iBAAiB,iCAAiC,QAAQ;AAAA,IAC9D,YAAY,SAAS;AAAA,IACrB,QAAQ,SAAS;AAAA,IACjB,aAAa,SAAS;AAAA,EACxB,CAAC,IACG,SACA;AACJ,QAAM,aAAa,SAAS;AAC5B,QAAM,SAAS,SAAS,UAAU,gBAAgB,UAAU;AAC5D,QAAM,cAAc,SAAS,eAAe,gBAAgB,eAAe;AAC3E,MAAI,CAAC,cAAc,CAAC,UAAU,CAAC,aAAa;AAC1C,WAAO;AAAA,EACT;AAEA,QAAM,WAAW,gBAAgB,OAAO,KAAK,GAAG,OAAO;AACvD,QAAM,EAAE,QAAQ,IAAI,gCAAgC;AAAA,IAClD;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,WAAW,OAAO;AAAA,EACpB,CAAC;AAED,SAAO;AAAA,IACL,WAAW,OAAO;AAAA,IAClB;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,gBAAgB,gBAAgB,YAAY;AAAA,EAC9C;AACF;AAEO,SAAS,mCAAmC,QAKG;AACpD,QAAM,UAAU,2BAA2B,OAAO,GAAG;AACrD,MAAI,CAAC,SAAS;AACZ,WAAO;AAAA,MACL,SACE,iBAAiB,OAAO,YAAY,gBAAgB,OAAO,YAAY;AAAA,IAE3E;AAAA,EACF;AACA,MAAI,qCAAqC,OAAO,GAAG,GAAG;AACpD,WAAO;AAAA,MACL,SACE,iBAAiB,OAAO,YAAY,gBAAgB,OAAO,YAAY;AAAA,IAE3E;AAAA,EACF;AAEA,QAAM,YAAY,oCAAoC,OAAO,GAAG;AAChE,QAAM,SAAS,oCAAoC;AAAA,IACjD,KAAK,OAAO;AAAA,IACZ,KAAK,OAAO;AAAA,IACZ;AAAA,EACF,CAAC;AACD,MAAI,CAAC,QAAQ;AACX,UAAM,oBACJ,OAAO,iBAAiB,UACpB,kCACA;AACN,WAAO;AAAA,MACL,SACE,iBAAiB,OAAO,YAAY,gBAAgB,OAAO,YAAY,SAAS,iBAAiB,0FAClC,cAAc,qBAAqB,KAAK,aAAa,SAAS,EAAE;AAAA,IAEnI;AAAA,EACF;AAEA,SAAO;AAAA,IACL,GAAG;AAAA,IACH,eAAe,oCAAoC,OAAO,KAAK,SAAS;AAAA,EAC1E;AACF;",
+  "names": []
+}

package/dist/chunk-GRBJYAYF.js

@@ -0,0 +1,129 @@
+import {
+  init_shims
+} from "./chunk-G4TIS2SC.js";
+
+// src/matrix/thread-bindings-shared.ts
+init_shims();
+import { resolveThreadBindingLifecycle } from "openclaw/plugin-sdk/thread-bindings-runtime";
+var MANAGERS_BY_ACCOUNT_ID = /* @__PURE__ */ new Map();
+var BINDINGS_BY_ACCOUNT_CONVERSATION = /* @__PURE__ */ new Map();
+function resolveBindingKey(params) {
+  return `${params.accountId}:${params.parentConversationId?.trim() || "-"}:${params.conversationId}`;
+}
+function toSessionBindingTargetKind(raw) {
+  return raw === "subagent" ? "subagent" : "session";
+}
+function toMatrixBindingTargetKind(raw) {
+  return raw === "subagent" ? "subagent" : "acp";
+}
+function resolveEffectiveBindingExpiry(params) {
+  return resolveThreadBindingLifecycle(params);
+}
+function toSessionBindingRecord(record, defaults) {
+  const lifecycle = resolveEffectiveBindingExpiry({
+    record,
+    defaultIdleTimeoutMs: defaults.idleTimeoutMs,
+    defaultMaxAgeMs: defaults.maxAgeMs
+  });
+  const idleTimeoutMs = typeof record.idleTimeoutMs === "number" ? record.idleTimeoutMs : defaults.idleTimeoutMs;
+  const maxAgeMs = typeof record.maxAgeMs === "number" ? record.maxAgeMs : defaults.maxAgeMs;
+  return {
+    bindingId: resolveBindingKey(record),
+    targetSessionKey: record.targetSessionKey,
+    targetKind: toSessionBindingTargetKind(record.targetKind),
+    conversation: {
+      channel: "matrix",
+      accountId: record.accountId,
+      conversationId: record.conversationId,
+      parentConversationId: record.parentConversationId
+    },
+    status: "active",
+    boundAt: record.boundAt,
+    expiresAt: lifecycle.expiresAt,
+    metadata: {
+      agentId: record.agentId,
+      label: record.label,
+      boundBy: record.boundBy,
+      lastActivityAt: record.lastActivityAt,
+      idleTimeoutMs,
+      maxAgeMs
+    }
+  };
+}
+function setBindingRecord(record) {
+  BINDINGS_BY_ACCOUNT_CONVERSATION.set(resolveBindingKey(record), record);
+}
+function removeBindingRecord(record) {
+  const key = resolveBindingKey(record);
+  const removed = BINDINGS_BY_ACCOUNT_CONVERSATION.get(key) ?? null;
+  if (removed) {
+    BINDINGS_BY_ACCOUNT_CONVERSATION.delete(key);
+  }
+  return removed;
+}
+function listBindingsForAccount(accountId) {
+  return [...BINDINGS_BY_ACCOUNT_CONVERSATION.values()].filter(
+    (entry) => entry.accountId === accountId
+  );
+}
+function getMatrixThreadBindingManagerEntry(accountId) {
+  return MANAGERS_BY_ACCOUNT_ID.get(accountId) ?? null;
+}
+function setMatrixThreadBindingManagerEntry(accountId, entry) {
+  MANAGERS_BY_ACCOUNT_ID.set(accountId, entry);
+}
+function deleteMatrixThreadBindingManagerEntry(accountId) {
+  MANAGERS_BY_ACCOUNT_ID.delete(accountId);
+}
+function getMatrixThreadBindingManager(accountId) {
+  return MANAGERS_BY_ACCOUNT_ID.get(accountId)?.manager ?? null;
+}
+function setMatrixThreadBindingIdleTimeoutBySessionKey(params) {
+  const manager = MANAGERS_BY_ACCOUNT_ID.get(params.accountId)?.manager;
+  if (!manager) {
+    return [];
+  }
+  return manager.setIdleTimeoutBySessionKey(params).map(
+    (record) => toSessionBindingRecord(record, {
+      idleTimeoutMs: manager.getIdleTimeoutMs(),
+      maxAgeMs: manager.getMaxAgeMs()
+    })
+  );
+}
+function setMatrixThreadBindingMaxAgeBySessionKey(params) {
+  const manager = MANAGERS_BY_ACCOUNT_ID.get(params.accountId)?.manager;
+  if (!manager) {
+    return [];
+  }
+  return manager.setMaxAgeBySessionKey(params).map(
+    (record) => toSessionBindingRecord(record, {
+      idleTimeoutMs: manager.getIdleTimeoutMs(),
+      maxAgeMs: manager.getMaxAgeMs()
+    })
+  );
+}
+function resetMatrixThreadBindingsForTests() {
+  for (const { manager } of MANAGERS_BY_ACCOUNT_ID.values()) {
+    manager.stop();
+  }
+  MANAGERS_BY_ACCOUNT_ID.clear();
+  BINDINGS_BY_ACCOUNT_CONVERSATION.clear();
+}
+
+export {
+  resolveBindingKey,
+  toMatrixBindingTargetKind,
+  resolveEffectiveBindingExpiry,
+  toSessionBindingRecord,
+  setBindingRecord,
+  removeBindingRecord,
+  listBindingsForAccount,
+  getMatrixThreadBindingManagerEntry,
+  setMatrixThreadBindingManagerEntry,
+  deleteMatrixThreadBindingManagerEntry,
+  getMatrixThreadBindingManager,
+  setMatrixThreadBindingIdleTimeoutBySessionKey,
+  setMatrixThreadBindingMaxAgeBySessionKey,
+  resetMatrixThreadBindingsForTests
+};
+//# sourceMappingURL=chunk-GRBJYAYF.js.map

package/dist/chunk-GRBJYAYF.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../src/matrix/thread-bindings-shared.ts"],
+  "sourcesContent": ["import type {\n  BindingTargetKind,\n  SessionBindingRecord,\n} from \"openclaw/plugin-sdk/thread-bindings-runtime\";\nimport { resolveThreadBindingLifecycle } from \"openclaw/plugin-sdk/thread-bindings-runtime\";\n\nexport type MatrixThreadBindingTargetKind = \"subagent\" | \"acp\";\n\nexport type MatrixThreadBindingRecord = {\n  accountId: string;\n  conversationId: string;\n  parentConversationId?: string;\n  targetKind: MatrixThreadBindingTargetKind;\n  targetSessionKey: string;\n  agentId?: string;\n  label?: string;\n  boundBy?: string;\n  boundAt: number;\n  lastActivityAt: number;\n  idleTimeoutMs?: number;\n  maxAgeMs?: number;\n};\n\nexport type MatrixThreadBindingManager = {\n  accountId: string;\n  getIdleTimeoutMs: () => number;\n  getMaxAgeMs: () => number;\n  getByConversation: (params: {\n    conversationId: string;\n    parentConversationId?: string;\n  }) => MatrixThreadBindingRecord | undefined;\n  listBySessionKey: (targetSessionKey: string) => MatrixThreadBindingRecord[];\n  listBindings: () => MatrixThreadBindingRecord[];\n  touchBinding: (bindingId: string, at?: number) => MatrixThreadBindingRecord | null;\n  setIdleTimeoutBySessionKey: (params: {\n    targetSessionKey: string;\n    idleTimeoutMs: number;\n  }) => MatrixThreadBindingRecord[];\n  setMaxAgeBySessionKey: (params: {\n    targetSessionKey: string;\n    maxAgeMs: number;\n  }) => MatrixThreadBindingRecord[];\n  stop: () => void;\n};\n\nexport type MatrixThreadBindingManagerCacheEntry = {\n  filePath: string;\n  manager: MatrixThreadBindingManager;\n};\n\nconst MANAGERS_BY_ACCOUNT_ID = new Map<string, MatrixThreadBindingManagerCacheEntry>();\nconst BINDINGS_BY_ACCOUNT_CONVERSATION = new Map<string, MatrixThreadBindingRecord>();\n\nexport function resolveBindingKey(params: {\n  accountId: string;\n  conversationId: string;\n  parentConversationId?: string;\n}): string {\n  return `${params.accountId}:${params.parentConversationId?.trim() || \"-\"}:${params.conversationId}`;\n}\n\nfunction toSessionBindingTargetKind(raw: MatrixThreadBindingTargetKind): BindingTargetKind {\n  return raw === \"subagent\" ? \"subagent\" : \"session\";\n}\n\nexport function toMatrixBindingTargetKind(raw: BindingTargetKind): MatrixThreadBindingTargetKind {\n  return raw === \"subagent\" ? \"subagent\" : \"acp\";\n}\n\nexport function resolveEffectiveBindingExpiry(params: {\n  record: MatrixThreadBindingRecord;\n  defaultIdleTimeoutMs: number;\n  defaultMaxAgeMs: number;\n}): {\n  expiresAt?: number;\n  reason?: \"idle-expired\" | \"max-age-expired\";\n} {\n  return resolveThreadBindingLifecycle(params);\n}\n\nexport function toSessionBindingRecord(\n  record: MatrixThreadBindingRecord,\n  defaults: { idleTimeoutMs: number; maxAgeMs: number },\n): SessionBindingRecord {\n  const lifecycle = resolveEffectiveBindingExpiry({\n    record,\n    defaultIdleTimeoutMs: defaults.idleTimeoutMs,\n    defaultMaxAgeMs: defaults.maxAgeMs,\n  });\n  const idleTimeoutMs =\n    typeof record.idleTimeoutMs === \"number\" ? record.idleTimeoutMs : defaults.idleTimeoutMs;\n  const maxAgeMs = typeof record.maxAgeMs === \"number\" ? record.maxAgeMs : defaults.maxAgeMs;\n  return {\n    bindingId: resolveBindingKey(record),\n    targetSessionKey: record.targetSessionKey,\n    targetKind: toSessionBindingTargetKind(record.targetKind),\n    conversation: {\n      channel: \"matrix\",\n      accountId: record.accountId,\n      conversationId: record.conversationId,\n      parentConversationId: record.parentConversationId,\n    },\n    status: \"active\",\n    boundAt: record.boundAt,\n    expiresAt: lifecycle.expiresAt,\n    metadata: {\n      agentId: record.agentId,\n      label: record.label,\n      boundBy: record.boundBy,\n      lastActivityAt: record.lastActivityAt,\n      idleTimeoutMs,\n      maxAgeMs,\n    },\n  };\n}\n\nexport function setBindingRecord(record: MatrixThreadBindingRecord): void {\n  BINDINGS_BY_ACCOUNT_CONVERSATION.set(resolveBindingKey(record), record);\n}\n\nexport function removeBindingRecord(\n  record: MatrixThreadBindingRecord,\n): MatrixThreadBindingRecord | null {\n  const key = resolveBindingKey(record);\n  const removed = BINDINGS_BY_ACCOUNT_CONVERSATION.get(key) ?? null;\n  if (removed) {\n    BINDINGS_BY_ACCOUNT_CONVERSATION.delete(key);\n  }\n  return removed;\n}\n\nexport function listBindingsForAccount(accountId: string): MatrixThreadBindingRecord[] {\n  return [...BINDINGS_BY_ACCOUNT_CONVERSATION.values()].filter(\n    (entry) => entry.accountId === accountId,\n  );\n}\n\nexport function getMatrixThreadBindingManagerEntry(\n  accountId: string,\n): MatrixThreadBindingManagerCacheEntry | null {\n  return MANAGERS_BY_ACCOUNT_ID.get(accountId) ?? null;\n}\n\nexport function setMatrixThreadBindingManagerEntry(\n  accountId: string,\n  entry: MatrixThreadBindingManagerCacheEntry,\n): void {\n  MANAGERS_BY_ACCOUNT_ID.set(accountId, entry);\n}\n\nexport function deleteMatrixThreadBindingManagerEntry(accountId: string): void {\n  MANAGERS_BY_ACCOUNT_ID.delete(accountId);\n}\n\nexport function getMatrixThreadBindingManager(\n  accountId: string,\n): MatrixThreadBindingManager | null {\n  return MANAGERS_BY_ACCOUNT_ID.get(accountId)?.manager ?? null;\n}\n\nexport function setMatrixThreadBindingIdleTimeoutBySessionKey(params: {\n  accountId: string;\n  targetSessionKey: string;\n  idleTimeoutMs: number;\n}): SessionBindingRecord[] {\n  const manager = MANAGERS_BY_ACCOUNT_ID.get(params.accountId)?.manager;\n  if (!manager) {\n    return [];\n  }\n  return manager.setIdleTimeoutBySessionKey(params).map((record) =>\n    toSessionBindingRecord(record, {\n      idleTimeoutMs: manager.getIdleTimeoutMs(),\n      maxAgeMs: manager.getMaxAgeMs(),\n    }),\n  );\n}\n\nexport function setMatrixThreadBindingMaxAgeBySessionKey(params: {\n  accountId: string;\n  targetSessionKey: string;\n  maxAgeMs: number;\n}): SessionBindingRecord[] {\n  const manager = MANAGERS_BY_ACCOUNT_ID.get(params.accountId)?.manager;\n  if (!manager) {\n    return [];\n  }\n  return manager.setMaxAgeBySessionKey(params).map((record) =>\n    toSessionBindingRecord(record, {\n      idleTimeoutMs: manager.getIdleTimeoutMs(),\n      maxAgeMs: manager.getMaxAgeMs(),\n    }),\n  );\n}\n\nexport function resetMatrixThreadBindingsForTests(): void {\n  for (const { manager } of MANAGERS_BY_ACCOUNT_ID.values()) {\n    manager.stop();\n  }\n  MANAGERS_BY_ACCOUNT_ID.clear();\n  BINDINGS_BY_ACCOUNT_CONVERSATION.clear();\n}\n"],
+  "mappings": ";;;;;AAAA;AAIA,SAAS,qCAAqC;AA8C9C,IAAM,yBAAyB,oBAAI,IAAkD;AACrF,IAAM,mCAAmC,oBAAI,IAAuC;AAE7E,SAAS,kBAAkB,QAIvB;AACT,SAAO,GAAG,OAAO,SAAS,IAAI,OAAO,sBAAsB,KAAK,KAAK,GAAG,IAAI,OAAO,cAAc;AACnG;AAEA,SAAS,2BAA2B,KAAuD;AACzF,SAAO,QAAQ,aAAa,aAAa;AAC3C;AAEO,SAAS,0BAA0B,KAAuD;AAC/F,SAAO,QAAQ,aAAa,aAAa;AAC3C;AAEO,SAAS,8BAA8B,QAO5C;AACA,SAAO,8BAA8B,MAAM;AAC7C;AAEO,SAAS,uBACd,QACA,UACsB;AACtB,QAAM,YAAY,8BAA8B;AAAA,IAC9C;AAAA,IACA,sBAAsB,SAAS;AAAA,IAC/B,iBAAiB,SAAS;AAAA,EAC5B,CAAC;AACD,QAAM,gBACJ,OAAO,OAAO,kBAAkB,WAAW,OAAO,gBAAgB,SAAS;AAC7E,QAAM,WAAW,OAAO,OAAO,aAAa,WAAW,OAAO,WAAW,SAAS;AAClF,SAAO;AAAA,IACL,WAAW,kBAAkB,MAAM;AAAA,IACnC,kBAAkB,OAAO;AAAA,IACzB,YAAY,2BAA2B,OAAO,UAAU;AAAA,IACxD,cAAc;AAAA,MACZ,SAAS;AAAA,MACT,WAAW,OAAO;AAAA,MAClB,gBAAgB,OAAO;AAAA,MACvB,sBAAsB,OAAO;AAAA,IAC/B;AAAA,IACA,QAAQ;AAAA,IACR,SAAS,OAAO;AAAA,IAChB,WAAW,UAAU;AAAA,IACrB,UAAU;AAAA,MACR,SAAS,OAAO;AAAA,MAChB,OAAO,OAAO;AAAA,MACd,SAAS,OAAO;AAAA,MAChB,gBAAgB,OAAO;AAAA,MACvB;AAAA,MACA;AAAA,IACF;AAAA,EACF;AACF;AAEO,SAAS,iBAAiB,QAAyC;AACxE,mCAAiC,IAAI,kBAAkB,MAAM,GAAG,MAAM;AACxE;AAEO,SAAS,oBACd,QACkC;AAClC,QAAM,MAAM,kBAAkB,MAAM;AACpC,QAAM,UAAU,iCAAiC,IAAI,GAAG,KAAK;AAC7D,MAAI,SAAS;AACX,qCAAiC,OAAO,GAAG;AAAA,EAC7C;AACA,SAAO;AACT;AAEO,SAAS,uBAAuB,WAAgD;AACrF,SAAO,CAAC,GAAG,iCAAiC,OAAO,CAAC,EAAE;AAAA,IACpD,CAAC,UAAU,MAAM,cAAc;AAAA,EACjC;AACF;AAEO,SAAS,mCACd,WAC6C;AAC7C,SAAO,uBAAuB,IAAI,SAAS,KAAK;AAClD;AAEO,SAAS,mCACd,WACA,OACM;AACN,yBAAuB,IAAI,WAAW,KAAK;AAC7C;AAEO,SAAS,sCAAsC,WAAyB;AAC7E,yBAAuB,OAAO,SAAS;AACzC;AAEO,SAAS,8BACd,WACmC;AACnC,SAAO,uBAAuB,IAAI,SAAS,GAAG,WAAW;AAC3D;AAEO,SAAS,8CAA8C,QAInC;AACzB,QAAM,UAAU,uBAAuB,IAAI,OAAO,SAAS,GAAG;AAC9D,MAAI,CAAC,SAAS;AACZ,WAAO,CAAC;AAAA,EACV;AACA,SAAO,QAAQ,2BAA2B,MAAM,EAAE;AAAA,IAAI,CAAC,WACrD,uBAAuB,QAAQ;AAAA,MAC7B,eAAe,QAAQ,iBAAiB;AAAA,MACxC,UAAU,QAAQ,YAAY;AAAA,IAChC,CAAC;AAAA,EACH;AACF;AAEO,SAAS,yCAAyC,QAI9B;AACzB,QAAM,UAAU,uBAAuB,IAAI,OAAO,SAAS,GAAG;AAC9D,MAAI,CAAC,SAAS;AACZ,WAAO,CAAC;AAAA,EACV;AACA,SAAO,QAAQ,sBAAsB,MAAM,EAAE;AAAA,IAAI,CAAC,WAChD,uBAAuB,QAAQ;AAAA,MAC7B,eAAe,QAAQ,iBAAiB;AAAA,MACxC,UAAU,QAAQ,YAAY;AAAA,IAChC,CAAC;AAAA,EACH;AACF;AAEO,SAAS,oCAA0C;AACxD,aAAW,EAAE,QAAQ,KAAK,uBAAuB,OAAO,GAAG;AACzD,YAAQ,KAAK;AAAA,EACf;AACA,yBAAuB,MAAM;AAC7B,mCAAiC,MAAM;AACzC;",
+  "names": []
+}

package/dist/chunk-GVYGUH2V.js

@@ -0,0 +1,7 @@
+import {
+  init_shims
+} from "./chunk-7FLQSTPG.js";
+
+// src/matrix/actions.ts
+init_shims();
+//# sourceMappingURL=chunk-GVYGUH2V.js.map

package/dist/chunk-GVYGUH2V.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../src/matrix/actions.ts"],
+  "sourcesContent": ["export type {\n  MatrixActionClientOpts,\n  MatrixMessageSummary,\n  MatrixReactionSummary,\n} from \"./actions/types.js\";\nexport {\n  sendMatrixMessage,\n  editMatrixMessage,\n  deleteMatrixMessage,\n  readMatrixMessages,\n} from \"./actions/messages.js\";\nexport { voteMatrixPoll } from \"./actions/polls.js\";\nexport { listMatrixReactions, removeMatrixReactions } from \"./actions/reactions.js\";\nexport { pinMatrixMessage, unpinMatrixMessage, listMatrixPins } from \"./actions/pins.js\";\nexport { getMatrixMemberInfo, getMatrixRoomInfo } from \"./actions/room.js\";\nexport { updateMatrixOwnProfile } from \"./actions/profile.js\";\nexport {\n  bootstrapMatrixVerification,\n  acceptMatrixVerification,\n  cancelMatrixVerification,\n  confirmMatrixVerificationReciprocateQr,\n  confirmMatrixVerificationSas,\n  generateMatrixVerificationQr,\n  getMatrixEncryptionStatus,\n  getMatrixRoomKeyBackupStatus,\n  getMatrixVerificationStatus,\n  getMatrixVerificationSas,\n  listMatrixVerifications,\n  mismatchMatrixVerificationSas,\n  requestMatrixVerification,\n  resetMatrixRoomKeyBackup,\n  restoreMatrixRoomKeyBackup,\n  scanMatrixVerificationQr,\n  startMatrixVerification,\n  verifyMatrixRecoveryKey,\n} from \"./actions/verification.js\";\nexport { reactMatrixMessage } from \"./send.js\";\n"],
+  "mappings": ";;;;;AAAA;",
+  "names": []
+}

package/dist/chunk-GXDQGBA2.js

@@ -0,0 +1,106 @@
+import {
+  init_shims
+} from "./chunk-G4TIS2SC.js";
+
+// src/config-schema.ts
+init_shims();
+import {
+  AllowFromListSchema,
+  buildNestedDmConfigSchema,
+  ContextVisibilityModeSchema,
+  GroupPolicySchema,
+  MarkdownConfigSchema,
+  ToolPolicySchema
+} from "openclaw/plugin-sdk/channel-config-schema";
+import { buildSecretInputSchema } from "openclaw/plugin-sdk/secret-input";
+import { z } from "openclaw/plugin-sdk/zod";
+var matrixActionSchema = z.object({
+  reactions: z.boolean().optional(),
+  messages: z.boolean().optional(),
+  pins: z.boolean().optional(),
+  profile: z.boolean().optional(),
+  memberInfo: z.boolean().optional(),
+  channelInfo: z.boolean().optional(),
+  verification: z.boolean().optional()
+}).optional();
+var matrixThreadBindingsSchema = z.object({
+  enabled: z.boolean().optional(),
+  idleHours: z.number().nonnegative().optional(),
+  maxAgeHours: z.number().nonnegative().optional(),
+  spawnSubagentSessions: z.boolean().optional(),
+  spawnAcpSessions: z.boolean().optional()
+}).optional();
+var matrixExecApprovalsSchema = z.object({
+  enabled: z.boolean().optional(),
+  approvers: AllowFromListSchema,
+  agentFilter: z.array(z.string()).optional(),
+  sessionFilter: z.array(z.string()).optional(),
+  target: z.enum(["dm", "channel", "both"]).optional()
+}).optional();
+var matrixRoomSchema = z.object({
+  account: z.string().optional(),
+  enabled: z.boolean().optional(),
+  requireMention: z.boolean().optional(),
+  allowBots: z.union([z.boolean(), z.literal("mentions")]).optional(),
+  tools: ToolPolicySchema,
+  autoReply: z.boolean().optional(),
+  users: AllowFromListSchema,
+  skills: z.array(z.string()).optional(),
+  systemPrompt: z.string().optional()
+}).optional();
+var matrixNetworkSchema = z.object({
+  dangerouslyAllowPrivateNetwork: z.boolean().optional()
+}).strict().optional();
+var MatrixConfigSchema = z.object({
+  name: z.string().optional(),
+  enabled: z.boolean().optional(),
+  defaultAccount: z.string().optional(),
+  accounts: z.record(z.string(), z.unknown()).optional(),
+  markdown: MarkdownConfigSchema,
+  homeserver: z.string().optional(),
+  network: matrixNetworkSchema,
+  proxy: z.string().optional(),
+  userId: z.string().optional(),
+  accessToken: buildSecretInputSchema().optional(),
+  password: buildSecretInputSchema().optional(),
+  deviceId: z.string().optional(),
+  deviceName: z.string().optional(),
+  avatarUrl: z.string().optional(),
+  initialSyncLimit: z.number().optional(),
+  encryption: z.boolean().optional(),
+  allowlistOnly: z.boolean().optional(),
+  allowBots: z.union([z.boolean(), z.literal("mentions")]).optional(),
+  groupPolicy: GroupPolicySchema.optional(),
+  contextVisibility: ContextVisibilityModeSchema.optional(),
+  blockStreaming: z.boolean().optional(),
+  streaming: z.union([z.enum(["partial", "quiet", "off"]), z.boolean()]).optional(),
+  replyToMode: z.enum(["off", "first", "all", "batched"]).optional(),
+  threadReplies: z.enum(["off", "inbound", "always"]).optional(),
+  textChunkLimit: z.number().optional(),
+  chunkMode: z.enum(["length", "newline"]).optional(),
+  responsePrefix: z.string().optional(),
+  ackReaction: z.string().optional(),
+  ackReactionScope: z.enum(["group-mentions", "group-all", "direct", "all", "none", "off"]).optional(),
+  reactionNotifications: z.enum(["off", "own"]).optional(),
+  threadBindings: matrixThreadBindingsSchema,
+  startupVerification: z.enum(["off", "if-unverified"]).optional(),
+  startupVerificationCooldownHours: z.number().optional(),
+  mediaMaxMb: z.number().optional(),
+  historyLimit: z.number().int().min(0).optional(),
+  autoJoin: z.enum(["always", "allowlist", "off"]).optional(),
+  autoJoinAllowlist: AllowFromListSchema,
+  groupAllowFrom: AllowFromListSchema,
+  dm: buildNestedDmConfigSchema({
+    sessionScope: z.enum(["per-user", "per-room"]).optional(),
+    threadReplies: z.enum(["off", "inbound", "always"]).optional()
+  }),
+  execApprovals: matrixExecApprovalsSchema,
+  groups: z.object({}).catchall(matrixRoomSchema).optional(),
+  rooms: z.object({}).catchall(matrixRoomSchema).optional(),
+  actions: matrixActionSchema
+});
+
+export {
+  MatrixConfigSchema
+};
+//# sourceMappingURL=chunk-GXDQGBA2.js.map