@archipelagolab/lobi 1.0.5 → 1.0.6

package/dist/chunk-IJ6Y4W7F.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../src/legacy-crypto.ts"],
+  "sourcesContent": ["import fs from \"node:fs\";\nimport os from \"node:os\";\nimport path from \"node:path\";\nimport type { OpenClawConfig } from \"openclaw/plugin-sdk/config-runtime\";\nimport { writeJsonFileAtomically as writeJsonFileAtomicallyImpl } from \"openclaw/plugin-sdk/json-store\";\nimport { resolveStateDir } from \"openclaw/plugin-sdk/state-paths\";\nimport { resolveConfiguredMatrixAccountIds } from \"./account-selection.js\";\nimport { isMatrixLegacyCryptoInspectorAvailable } from \"./legacy-crypto-inspector-availability.js\";\nimport { formatMatrixErrorMessage } from \"./matrix/errors.js\";\nimport {\n  resolveLegacyMatrixFlatStoreTarget,\n  resolveMatrixMigrationAccountTarget,\n} from \"./migration-config.js\";\nimport { resolveMatrixLegacyFlatStoragePaths } from \"./storage-paths.js\";\n\nconst MATRIX_LEGACY_CRYPTO_INSPECTOR_UNAVAILABLE_MESSAGE =\n  \"Legacy Matrix encrypted state was detected, but the Matrix crypto inspector is unavailable.\";\n\ntype MatrixLegacyCryptoCounts = {\n  total: number;\n  backedUp: number;\n};\n\ntype MatrixLegacyCryptoSummary = {\n  deviceId: string | null;\n  roomKeyCounts: MatrixLegacyCryptoCounts | null;\n  backupVersion: string | null;\n  decryptionKeyBase64: string | null;\n};\n\ntype MatrixLegacyCryptoMigrationState = {\n  version: 1;\n  source: \"matrix-bot-sdk-rust\";\n  accountId: string;\n  deviceId: string | null;\n  roomKeyCounts: MatrixLegacyCryptoCounts | null;\n  backupVersion: string | null;\n  decryptionKeyImported: boolean;\n  restoreStatus: \"pending\" | \"completed\" | \"manual-action-required\";\n  detectedAt: string;\n  restoredAt?: string;\n  importedCount?: number;\n  totalCount?: number;\n  lastError?: string | null;\n};\n\ntype MatrixLegacyCryptoPlan = {\n  accountId: string;\n  rootDir: string;\n  recoveryKeyPath: string;\n  statePath: string;\n  legacyCryptoPath: string;\n  homeserver: string;\n  userId: string;\n  accessToken: string;\n  deviceId: string | null;\n};\n\ntype MatrixLegacyCryptoDetection = {\n  inspectorAvailable: boolean;\n  plans: MatrixLegacyCryptoPlan[];\n  warnings: string[];\n};\n\ntype MatrixLegacyCryptoPreparationResult = {\n  migrated: boolean;\n  changes: string[];\n  warnings: string[];\n};\n\ntype MatrixLegacyCryptoPrepareDeps = {\n  inspectLegacyStore: MatrixLegacyCryptoInspector;\n  writeJsonFileAtomically: typeof writeJsonFileAtomicallyImpl;\n};\n\ntype MatrixLegacyCryptoInspectorParams = {\n  cryptoRootDir: string;\n  userId: string;\n  deviceId: string;\n  log?: (message: string) => void;\n};\n\ntype MatrixLegacyCryptoInspectorResult = {\n  deviceId: string | null;\n  roomKeyCounts: {\n    total: number;\n    backedUp: number;\n  } | null;\n  backupVersion: string | null;\n  decryptionKeyBase64: string | null;\n};\n\ntype MatrixLegacyCryptoInspector = (\n  params: MatrixLegacyCryptoInspectorParams,\n) => Promise<MatrixLegacyCryptoInspectorResult>;\n\ntype MatrixLegacyBotSdkMetadata = {\n  deviceId: string | null;\n};\n\ntype MatrixStoredRecoveryKey = {\n  version: 1;\n  createdAt: string;\n  keyId?: string | null;\n  encodedPrivateKey?: string;\n  privateKeyBase64: string;\n  keyInfo?: {\n    passphrase?: unknown;\n    name?: string;\n  };\n};\n\nasync function loadMatrixLegacyCryptoInspector(): Promise<MatrixLegacyCryptoInspector> {\n  const module = await import(\"./matrix/legacy-crypto-inspector.js\");\n  return module.inspectLegacyMatrixCryptoStore as MatrixLegacyCryptoInspector;\n}\n\nfunction detectLegacyBotSdkCryptoStore(cryptoRootDir: string): {\n  detected: boolean;\n  warning?: string;\n} {\n  try {\n    const stat = fs.statSync(cryptoRootDir);\n    if (!stat.isDirectory()) {\n      return {\n        detected: false,\n        warning:\n          `Legacy Matrix encrypted state path exists but is not a directory: ${cryptoRootDir}. ` +\n          \"OpenClaw skipped automatic crypto migration for that path.\",\n      };\n    }\n  } catch (err) {\n    return {\n      detected: false,\n      warning:\n        `Failed reading legacy Matrix encrypted state path (${cryptoRootDir}): ${String(err)}. ` +\n        \"OpenClaw skipped automatic crypto migration for that path.\",\n    };\n  }\n\n  try {\n    return {\n      detected:\n        fs.existsSync(path.join(cryptoRootDir, \"bot-sdk.json\")) ||\n        fs.existsSync(path.join(cryptoRootDir, \"matrix-sdk-crypto.sqlite3\")) ||\n        fs\n          .readdirSync(cryptoRootDir, { withFileTypes: true })\n          .some(\n            (entry) =>\n              entry.isDirectory() &&\n              fs.existsSync(path.join(cryptoRootDir, entry.name, \"matrix-sdk-crypto.sqlite3\")),\n          ),\n    };\n  } catch (err) {\n    return {\n      detected: false,\n      warning:\n        `Failed scanning legacy Matrix encrypted state path (${cryptoRootDir}): ${String(err)}. ` +\n        \"OpenClaw skipped automatic crypto migration for that path.\",\n    };\n  }\n}\n\nfunction resolveMatrixAccountIds(cfg: OpenClawConfig): string[] {\n  return resolveConfiguredMatrixAccountIds(cfg);\n}\n\nfunction resolveLegacyMatrixFlatStorePlan(params: {\n  cfg: OpenClawConfig;\n  env: NodeJS.ProcessEnv;\n}): MatrixLegacyCryptoPlan | { warning: string } | null {\n  const legacy = resolveMatrixLegacyFlatStoragePaths(resolveStateDir(params.env, os.homedir));\n  if (!fs.existsSync(legacy.cryptoPath)) {\n    return null;\n  }\n  const legacyStore = detectLegacyBotSdkCryptoStore(legacy.cryptoPath);\n  if (legacyStore.warning) {\n    return { warning: legacyStore.warning };\n  }\n  if (!legacyStore.detected) {\n    return null;\n  }\n\n  const target = resolveLegacyMatrixFlatStoreTarget({\n    cfg: params.cfg,\n    env: params.env,\n    detectedPath: legacy.cryptoPath,\n    detectedKind: \"encrypted state\",\n  });\n  if (\"warning\" in target) {\n    return target;\n  }\n\n  const metadata = loadLegacyBotSdkMetadata(legacy.cryptoPath);\n  return {\n    accountId: target.accountId,\n    rootDir: target.rootDir,\n    recoveryKeyPath: path.join(target.rootDir, \"recovery-key.json\"),\n    statePath: path.join(target.rootDir, \"legacy-crypto-migration.json\"),\n    legacyCryptoPath: legacy.cryptoPath,\n    homeserver: target.homeserver,\n    userId: target.userId,\n    accessToken: target.accessToken,\n    deviceId: metadata.deviceId ?? target.storedDeviceId,\n  };\n}\n\nfunction loadLegacyBotSdkMetadata(cryptoRootDir: string): MatrixLegacyBotSdkMetadata {\n  const metadataPath = path.join(cryptoRootDir, \"bot-sdk.json\");\n  const fallback: MatrixLegacyBotSdkMetadata = { deviceId: null };\n  try {\n    if (!fs.existsSync(metadataPath)) {\n      return fallback;\n    }\n    const parsed = JSON.parse(fs.readFileSync(metadataPath, \"utf8\")) as {\n      deviceId?: unknown;\n    };\n    return {\n      deviceId:\n        typeof parsed.deviceId === \"string\" && parsed.deviceId.trim() ? parsed.deviceId : null,\n    };\n  } catch {\n    return fallback;\n  }\n}\n\nfunction resolveMatrixLegacyCryptoPlans(params: {\n  cfg: OpenClawConfig;\n  env: NodeJS.ProcessEnv;\n}): Omit<MatrixLegacyCryptoDetection, \"inspectorAvailable\"> {\n  const warnings: string[] = [];\n  const plans: MatrixLegacyCryptoPlan[] = [];\n\n  const flatPlan = resolveLegacyMatrixFlatStorePlan(params);\n  if (flatPlan) {\n    if (\"warning\" in flatPlan) {\n      warnings.push(flatPlan.warning);\n    } else {\n      plans.push(flatPlan);\n    }\n  }\n\n  for (const accountId of resolveMatrixAccountIds(params.cfg)) {\n    const target = resolveMatrixMigrationAccountTarget({\n      cfg: params.cfg,\n      env: params.env,\n      accountId,\n    });\n    if (!target) {\n      continue;\n    }\n    const legacyCryptoPath = path.join(target.rootDir, \"crypto\");\n    if (!fs.existsSync(legacyCryptoPath)) {\n      continue;\n    }\n    const detectedStore = detectLegacyBotSdkCryptoStore(legacyCryptoPath);\n    if (detectedStore.warning) {\n      warnings.push(detectedStore.warning);\n      continue;\n    }\n    if (!detectedStore.detected) {\n      continue;\n    }\n    if (\n      plans.some(\n        (plan) =>\n          plan.accountId === accountId &&\n          path.resolve(plan.legacyCryptoPath) === path.resolve(legacyCryptoPath),\n      )\n    ) {\n      continue;\n    }\n    const metadata = loadLegacyBotSdkMetadata(legacyCryptoPath);\n    plans.push({\n      accountId: target.accountId,\n      rootDir: target.rootDir,\n      recoveryKeyPath: path.join(target.rootDir, \"recovery-key.json\"),\n      statePath: path.join(target.rootDir, \"legacy-crypto-migration.json\"),\n      legacyCryptoPath,\n      homeserver: target.homeserver,\n      userId: target.userId,\n      accessToken: target.accessToken,\n      deviceId: metadata.deviceId ?? target.storedDeviceId,\n    });\n  }\n\n  return { plans, warnings };\n}\n\nfunction loadStoredRecoveryKey(filePath: string): MatrixStoredRecoveryKey | null {\n  try {\n    if (!fs.existsSync(filePath)) {\n      return null;\n    }\n    return JSON.parse(fs.readFileSync(filePath, \"utf8\")) as MatrixStoredRecoveryKey;\n  } catch {\n    return null;\n  }\n}\n\nfunction loadLegacyCryptoMigrationState(filePath: string): MatrixLegacyCryptoMigrationState | null {\n  try {\n    if (!fs.existsSync(filePath)) {\n      return null;\n    }\n    return JSON.parse(fs.readFileSync(filePath, \"utf8\")) as MatrixLegacyCryptoMigrationState;\n  } catch {\n    return null;\n  }\n}\n\nasync function persistLegacyMigrationState(params: {\n  filePath: string;\n  state: MatrixLegacyCryptoMigrationState;\n  writeJsonFileAtomically: typeof writeJsonFileAtomicallyImpl;\n}): Promise<void> {\n  await params.writeJsonFileAtomically(params.filePath, params.state);\n}\n\nexport function detectLegacyMatrixCrypto(params: {\n  cfg: OpenClawConfig;\n  env?: NodeJS.ProcessEnv;\n}): MatrixLegacyCryptoDetection {\n  const detection = resolveMatrixLegacyCryptoPlans({\n    cfg: params.cfg,\n    env: params.env ?? process.env,\n  });\n  const inspectorAvailable =\n    detection.plans.length === 0 || isMatrixLegacyCryptoInspectorAvailable();\n  if (!inspectorAvailable && detection.plans.length > 0) {\n    return {\n      inspectorAvailable,\n      plans: detection.plans,\n      warnings: [...detection.warnings, MATRIX_LEGACY_CRYPTO_INSPECTOR_UNAVAILABLE_MESSAGE],\n    };\n  }\n  return {\n    inspectorAvailable,\n    plans: detection.plans,\n    warnings: detection.warnings,\n  };\n}\n\nexport async function autoPrepareLegacyMatrixCrypto(params: {\n  cfg: OpenClawConfig;\n  env?: NodeJS.ProcessEnv;\n  log?: { info?: (message: string) => void; warn?: (message: string) => void };\n  deps?: Partial<MatrixLegacyCryptoPrepareDeps>;\n}): Promise<MatrixLegacyCryptoPreparationResult> {\n  const env = params.env ?? process.env;\n  const detection = params.deps?.inspectLegacyStore\n    ? resolveMatrixLegacyCryptoPlans({ cfg: params.cfg, env })\n    : detectLegacyMatrixCrypto({ cfg: params.cfg, env });\n  const inspectorAvailable =\n    \"inspectorAvailable\" in detection ? detection.inspectorAvailable : true;\n  const warnings = [...detection.warnings];\n  const changes: string[] = [];\n  const writeJsonFileAtomically =\n    params.deps?.writeJsonFileAtomically ?? writeJsonFileAtomicallyImpl;\n  if (detection.plans.length === 0) {\n    if (warnings.length > 0) {\n      params.log?.warn?.(\n        `matrix: legacy encrypted-state warnings:\\n${warnings.map((entry) => `- ${entry}`).join(\"\\n\")}`,\n      );\n    }\n    return {\n      migrated: false,\n      changes,\n      warnings,\n    };\n  }\n  if (!params.deps?.inspectLegacyStore && !inspectorAvailable) {\n    if (warnings.length > 0) {\n      params.log?.warn?.(\n        `matrix: legacy encrypted-state warnings:\\n${warnings.map((entry) => `- ${entry}`).join(\"\\n\")}`,\n      );\n    }\n    return {\n      migrated: false,\n      changes,\n      warnings,\n    };\n  }\n\n  let inspectLegacyStore = params.deps?.inspectLegacyStore;\n  if (!inspectLegacyStore) {\n    try {\n      inspectLegacyStore = await loadMatrixLegacyCryptoInspector();\n    } catch (err) {\n      const message = formatMatrixErrorMessage(err);\n      if (!warnings.includes(message)) {\n        warnings.push(message);\n      }\n      if (warnings.length > 0) {\n        params.log?.warn?.(\n          `matrix: legacy encrypted-state warnings:\\n${warnings.map((entry) => `- ${entry}`).join(\"\\n\")}`,\n        );\n      }\n      return {\n        migrated: false,\n        changes,\n        warnings,\n      };\n    }\n  }\n  if (!inspectLegacyStore) {\n    return {\n      migrated: false,\n      changes,\n      warnings,\n    };\n  }\n\n  for (const plan of detection.plans) {\n    const existingState = loadLegacyCryptoMigrationState(plan.statePath);\n    if (existingState?.version === 1) {\n      continue;\n    }\n    if (!plan.deviceId) {\n      warnings.push(\n        `Legacy Matrix encrypted state detected at ${plan.legacyCryptoPath}, but no device ID was found for account \"${plan.accountId}\". ` +\n          `OpenClaw will continue, but old encrypted history cannot be recovered automatically.`,\n      );\n      continue;\n    }\n\n    let summary: MatrixLegacyCryptoSummary;\n    try {\n      summary = await inspectLegacyStore({\n        cryptoRootDir: plan.legacyCryptoPath,\n        userId: plan.userId,\n        deviceId: plan.deviceId,\n        log: params.log?.info,\n      });\n    } catch (err) {\n      warnings.push(\n        `Failed inspecting legacy Matrix encrypted state for account \"${plan.accountId}\" (${plan.legacyCryptoPath}): ${String(err)}`,\n      );\n      continue;\n    }\n\n    let decryptionKeyImported = false;\n    if (summary.decryptionKeyBase64) {\n      const existingRecoveryKey = loadStoredRecoveryKey(plan.recoveryKeyPath);\n      if (\n        existingRecoveryKey?.privateKeyBase64 &&\n        existingRecoveryKey.privateKeyBase64 !== summary.decryptionKeyBase64\n      ) {\n        warnings.push(\n          `Legacy Matrix backup key was found for account \"${plan.accountId}\", but ${plan.recoveryKeyPath} already contains a different recovery key. Leaving the existing file unchanged.`,\n        );\n      } else if (!existingRecoveryKey?.privateKeyBase64) {\n        const payload: MatrixStoredRecoveryKey = {\n          version: 1,\n          createdAt: new Date().toISOString(),\n          keyId: null,\n          privateKeyBase64: summary.decryptionKeyBase64,\n        };\n        try {\n          await writeJsonFileAtomically(plan.recoveryKeyPath, payload);\n          changes.push(\n            `Imported Matrix legacy backup key for account \"${plan.accountId}\": ${plan.recoveryKeyPath}`,\n          );\n          decryptionKeyImported = true;\n        } catch (err) {\n          warnings.push(\n            `Failed writing Matrix recovery key for account \"${plan.accountId}\" (${plan.recoveryKeyPath}): ${String(err)}`,\n          );\n        }\n      } else {\n        decryptionKeyImported = true;\n      }\n    }\n\n    const localOnlyKeys =\n      summary.roomKeyCounts && summary.roomKeyCounts.total > summary.roomKeyCounts.backedUp\n        ? summary.roomKeyCounts.total - summary.roomKeyCounts.backedUp\n        : 0;\n    if (localOnlyKeys > 0) {\n      warnings.push(\n        `Legacy Matrix encrypted state for account \"${plan.accountId}\" contains ${localOnlyKeys} room key(s) that were never backed up. ` +\n          \"Backed-up keys can be restored automatically, but local-only encrypted history may remain unavailable after upgrade.\",\n      );\n    }\n    if (!summary.decryptionKeyBase64 && (summary.roomKeyCounts?.backedUp ?? 0) > 0) {\n      warnings.push(\n        `Legacy Matrix encrypted state for account \"${plan.accountId}\" has backed-up room keys, but no local backup decryption key was found. ` +\n          `Ask the operator to run \"openclaw matrix verify backup restore --recovery-key <key>\" after upgrade if they have the recovery key.`,\n      );\n    }\n    if (!summary.decryptionKeyBase64 && (summary.roomKeyCounts?.total ?? 0) > 0) {\n      warnings.push(\n        `Legacy Matrix encrypted state for account \"${plan.accountId}\" cannot be fully converted automatically because the old rust crypto store does not expose all local room keys for export.`,\n      );\n    }\n    // If recovery-key persistence failed, leave the migration state absent so the next startup can retry.\n    if (\n      summary.decryptionKeyBase64 &&\n      !decryptionKeyImported &&\n      !loadStoredRecoveryKey(plan.recoveryKeyPath)\n    ) {\n      continue;\n    }\n\n    const state: MatrixLegacyCryptoMigrationState = {\n      version: 1,\n      source: \"matrix-bot-sdk-rust\",\n      accountId: plan.accountId,\n      deviceId: summary.deviceId,\n      roomKeyCounts: summary.roomKeyCounts,\n      backupVersion: summary.backupVersion,\n      decryptionKeyImported,\n      restoreStatus: decryptionKeyImported ? \"pending\" : \"manual-action-required\",\n      detectedAt: new Date().toISOString(),\n      lastError: null,\n    };\n    try {\n      await persistLegacyMigrationState({\n        filePath: plan.statePath,\n        state,\n        writeJsonFileAtomically,\n      });\n      changes.push(\n        `Prepared Matrix legacy encrypted-state migration for account \"${plan.accountId}\": ${plan.statePath}`,\n      );\n    } catch (err) {\n      warnings.push(\n        `Failed writing Matrix legacy encrypted-state migration record for account \"${plan.accountId}\" (${plan.statePath}): ${String(err)}`,\n      );\n    }\n  }\n\n  if (changes.length > 0) {\n    params.log?.info?.(\n      `matrix: prepared encrypted-state upgrade.\\n${changes.map((entry) => `- ${entry}`).join(\"\\n\")}`,\n    );\n  }\n  if (warnings.length > 0) {\n    params.log?.warn?.(\n      `matrix: legacy encrypted-state warnings:\\n${warnings.map((entry) => `- ${entry}`).join(\"\\n\")}`,\n    );\n  }\n\n  return {\n    migrated: changes.length > 0,\n    changes,\n    warnings,\n  };\n}\n"],
+  "mappings": ";;;;;;;;;;;;;;;;;;;;;AAAA;AAAA,OAAO,QAAQ;AACf,OAAO,QAAQ;AACf,OAAO,UAAU;AAEjB,SAAS,2BAA2B,mCAAmC;AACvE,SAAS,uBAAuB;AAUhC,IAAM,qDACJ;AAgGF,eAAe,kCAAwE;AACrF,QAAM,SAAS,MAAM,OAAO,yCAAqC;AACjE,SAAO,OAAO;AAChB;AAEA,SAAS,8BAA8B,eAGrC;AACA,MAAI;AACF,UAAM,OAAO,GAAG,SAAS,aAAa;AACtC,QAAI,CAAC,KAAK,YAAY,GAAG;AACvB,aAAO;AAAA,QACL,UAAU;AAAA,QACV,SACE,qEAAqE,aAAa;AAAA,MAEtF;AAAA,IACF;AAAA,EACF,SAAS,KAAK;AACZ,WAAO;AAAA,MACL,UAAU;AAAA,MACV,SACE,sDAAsD,aAAa,MAAM,OAAO,GAAG,CAAC;AAAA,IAExF;AAAA,EACF;AAEA,MAAI;AACF,WAAO;AAAA,MACL,UACE,GAAG,WAAW,KAAK,KAAK,eAAe,cAAc,CAAC,KACtD,GAAG,WAAW,KAAK,KAAK,eAAe,2BAA2B,CAAC,KACnE,GACG,YAAY,eAAe,EAAE,eAAe,KAAK,CAAC,EAClD;AAAA,QACC,CAAC,UACC,MAAM,YAAY,KAClB,GAAG,WAAW,KAAK,KAAK,eAAe,MAAM,MAAM,2BAA2B,CAAC;AAAA,MACnF;AAAA,IACN;AAAA,EACF,SAAS,KAAK;AACZ,WAAO;AAAA,MACL,UAAU;AAAA,MACV,SACE,uDAAuD,aAAa,MAAM,OAAO,GAAG,CAAC;AAAA,IAEzF;AAAA,EACF;AACF;AAEA,SAAS,wBAAwB,KAA+B;AAC9D,SAAO,kCAAkC,GAAG;AAC9C;AAEA,SAAS,iCAAiC,QAGc;AACtD,QAAM,SAAS,oCAAoC,gBAAgB,OAAO,KAAK,GAAG,OAAO,CAAC;AAC1F,MAAI,CAAC,GAAG,WAAW,OAAO,UAAU,GAAG;AACrC,WAAO;AAAA,EACT;AACA,QAAM,cAAc,8BAA8B,OAAO,UAAU;AACnE,MAAI,YAAY,SAAS;AACvB,WAAO,EAAE,SAAS,YAAY,QAAQ;AAAA,EACxC;AACA,MAAI,CAAC,YAAY,UAAU;AACzB,WAAO;AAAA,EACT;AAEA,QAAM,SAAS,mCAAmC;AAAA,IAChD,KAAK,OAAO;AAAA,IACZ,KAAK,OAAO;AAAA,IACZ,cAAc,OAAO;AAAA,IACrB,cAAc;AAAA,EAChB,CAAC;AACD,MAAI,aAAa,QAAQ;AACvB,WAAO;AAAA,EACT;AAEA,QAAM,WAAW,yBAAyB,OAAO,UAAU;AAC3D,SAAO;AAAA,IACL,WAAW,OAAO;AAAA,IAClB,SAAS,OAAO;AAAA,IAChB,iBAAiB,KAAK,KAAK,OAAO,SAAS,mBAAmB;AAAA,IAC9D,WAAW,KAAK,KAAK,OAAO,SAAS,8BAA8B;AAAA,IACnE,kBAAkB,OAAO;AAAA,IACzB,YAAY,OAAO;AAAA,IACnB,QAAQ,OAAO;AAAA,IACf,aAAa,OAAO;AAAA,IACpB,UAAU,SAAS,YAAY,OAAO;AAAA,EACxC;AACF;AAEA,SAAS,yBAAyB,eAAmD;AACnF,QAAM,eAAe,KAAK,KAAK,eAAe,cAAc;AAC5D,QAAM,WAAuC,EAAE,UAAU,KAAK;AAC9D,MAAI;AACF,QAAI,CAAC,GAAG,WAAW,YAAY,GAAG;AAChC,aAAO;AAAA,IACT;AACA,UAAM,SAAS,KAAK,MAAM,GAAG,aAAa,cAAc,MAAM,CAAC;AAG/D,WAAO;AAAA,MACL,UACE,OAAO,OAAO,aAAa,YAAY,OAAO,SAAS,KAAK,IAAI,OAAO,WAAW;AAAA,IACtF;AAAA,EACF,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,SAAS,+BAA+B,QAGoB;AAC1D,QAAM,WAAqB,CAAC;AAC5B,QAAM,QAAkC,CAAC;AAEzC,QAAM,WAAW,iCAAiC,MAAM;AACxD,MAAI,UAAU;AACZ,QAAI,aAAa,UAAU;AACzB,eAAS,KAAK,SAAS,OAAO;AAAA,IAChC,OAAO;AACL,YAAM,KAAK,QAAQ;AAAA,IACrB;AAAA,EACF;AAEA,aAAW,aAAa,wBAAwB,OAAO,GAAG,GAAG;AAC3D,UAAM,SAAS,oCAAoC;AAAA,MACjD,KAAK,OAAO;AAAA,MACZ,KAAK,OAAO;AAAA,MACZ;AAAA,IACF,CAAC;AACD,QAAI,CAAC,QAAQ;AACX;AAAA,IACF;AACA,UAAM,mBAAmB,KAAK,KAAK,OAAO,SAAS,QAAQ;AAC3D,QAAI,CAAC,GAAG,WAAW,gBAAgB,GAAG;AACpC;AAAA,IACF;AACA,UAAM,gBAAgB,8BAA8B,gBAAgB;AACpE,QAAI,cAAc,SAAS;AACzB,eAAS,KAAK,cAAc,OAAO;AACnC;AAAA,IACF;AACA,QAAI,CAAC,cAAc,UAAU;AAC3B;AAAA,IACF;AACA,QACE,MAAM;AAAA,MACJ,CAAC,SACC,KAAK,cAAc,aACnB,KAAK,QAAQ,KAAK,gBAAgB,MAAM,KAAK,QAAQ,gBAAgB;AAAA,IACzE,GACA;AACA;AAAA,IACF;AACA,UAAM,WAAW,yBAAyB,gBAAgB;AAC1D,UAAM,KAAK;AAAA,MACT,WAAW,OAAO;AAAA,MAClB,SAAS,OAAO;AAAA,MAChB,iBAAiB,KAAK,KAAK,OAAO,SAAS,mBAAmB;AAAA,MAC9D,WAAW,KAAK,KAAK,OAAO,SAAS,8BAA8B;AAAA,MACnE;AAAA,MACA,YAAY,OAAO;AAAA,MACnB,QAAQ,OAAO;AAAA,MACf,aAAa,OAAO;AAAA,MACpB,UAAU,SAAS,YAAY,OAAO;AAAA,IACxC,CAAC;AAAA,EACH;AAEA,SAAO,EAAE,OAAO,SAAS;AAC3B;AAEA,SAAS,sBAAsB,UAAkD;AAC/E,MAAI;AACF,QAAI,CAAC,GAAG,WAAW,QAAQ,GAAG;AAC5B,aAAO;AAAA,IACT;AACA,WAAO,KAAK,MAAM,GAAG,aAAa,UAAU,MAAM,CAAC;AAAA,EACrD,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,SAAS,+BAA+B,UAA2D;AACjG,MAAI;AACF,QAAI,CAAC,GAAG,WAAW,QAAQ,GAAG;AAC5B,aAAO;AAAA,IACT;AACA,WAAO,KAAK,MAAM,GAAG,aAAa,UAAU,MAAM,CAAC;AAAA,EACrD,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,eAAe,4BAA4B,QAIzB;AAChB,QAAM,OAAO,wBAAwB,OAAO,UAAU,OAAO,KAAK;AACpE;AAEO,SAAS,yBAAyB,QAGT;AAC9B,QAAM,YAAY,+BAA+B;AAAA,IAC/C,KAAK,OAAO;AAAA,IACZ,KAAK,OAAO,OAAO,QAAQ;AAAA,EAC7B,CAAC;AACD,QAAM,qBACJ,UAAU,MAAM,WAAW,KAAK,uCAAuC;AACzE,MAAI,CAAC,sBAAsB,UAAU,MAAM,SAAS,GAAG;AACrD,WAAO;AAAA,MACL;AAAA,MACA,OAAO,UAAU;AAAA,MACjB,UAAU,CAAC,GAAG,UAAU,UAAU,kDAAkD;AAAA,IACtF;AAAA,EACF;AACA,SAAO;AAAA,IACL;AAAA,IACA,OAAO,UAAU;AAAA,IACjB,UAAU,UAAU;AAAA,EACtB;AACF;AAEA,eAAsB,8BAA8B,QAKH;AAC/C,QAAM,MAAM,OAAO,OAAO,QAAQ;AAClC,QAAM,YAAY,OAAO,MAAM,qBAC3B,+BAA+B,EAAE,KAAK,OAAO,KAAK,IAAI,CAAC,IACvD,yBAAyB,EAAE,KAAK,OAAO,KAAK,IAAI,CAAC;AACrD,QAAM,qBACJ,wBAAwB,YAAY,UAAU,qBAAqB;AACrE,QAAM,WAAW,CAAC,GAAG,UAAU,QAAQ;AACvC,QAAM,UAAoB,CAAC;AAC3B,QAAM,0BACJ,OAAO,MAAM,2BAA2B;AAC1C,MAAI,UAAU,MAAM,WAAW,GAAG;AAChC,QAAI,SAAS,SAAS,GAAG;AACvB,aAAO,KAAK;AAAA,QACV;AAAA,EAA6C,SAAS,IAAI,CAAC,UAAU,KAAK,KAAK,EAAE,EAAE,KAAK,IAAI,CAAC;AAAA,MAC/F;AAAA,IACF;AACA,WAAO;AAAA,MACL,UAAU;AAAA,MACV;AAAA,MACA;AAAA,IACF;AAAA,EACF;AACA,MAAI,CAAC,OAAO,MAAM,sBAAsB,CAAC,oBAAoB;AAC3D,QAAI,SAAS,SAAS,GAAG;AACvB,aAAO,KAAK;AAAA,QACV;AAAA,EAA6C,SAAS,IAAI,CAAC,UAAU,KAAK,KAAK,EAAE,EAAE,KAAK,IAAI,CAAC;AAAA,MAC/F;AAAA,IACF;AACA,WAAO;AAAA,MACL,UAAU;AAAA,MACV;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAEA,MAAI,qBAAqB,OAAO,MAAM;AACtC,MAAI,CAAC,oBAAoB;AACvB,QAAI;AACF,2BAAqB,MAAM,gCAAgC;AAAA,IAC7D,SAAS,KAAK;AACZ,YAAM,UAAU,yBAAyB,GAAG;AAC5C,UAAI,CAAC,SAAS,SAAS,OAAO,GAAG;AAC/B,iBAAS,KAAK,OAAO;AAAA,MACvB;AACA,UAAI,SAAS,SAAS,GAAG;AACvB,eAAO,KAAK;AAAA,UACV;AAAA,EAA6C,SAAS,IAAI,CAAC,UAAU,KAAK,KAAK,EAAE,EAAE,KAAK,IAAI,CAAC;AAAA,QAC/F;AAAA,MACF;AACA,aAAO;AAAA,QACL,UAAU;AAAA,QACV;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACA,MAAI,CAAC,oBAAoB;AACvB,WAAO;AAAA,MACL,UAAU;AAAA,MACV;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAEA,aAAW,QAAQ,UAAU,OAAO;AAClC,UAAM,gBAAgB,+BAA+B,KAAK,SAAS;AACnE,QAAI,eAAe,YAAY,GAAG;AAChC;AAAA,IACF;AACA,QAAI,CAAC,KAAK,UAAU;AAClB,eAAS;AAAA,QACP,6CAA6C,KAAK,gBAAgB,6CAA6C,KAAK,SAAS;AAAA,MAE/H;AACA;AAAA,IACF;AAEA,QAAI;AACJ,QAAI;AACF,gBAAU,MAAM,mBAAmB;AAAA,QACjC,eAAe,KAAK;AAAA,QACpB,QAAQ,KAAK;AAAA,QACb,UAAU,KAAK;AAAA,QACf,KAAK,OAAO,KAAK;AAAA,MACnB,CAAC;AAAA,IACH,SAAS,KAAK;AACZ,eAAS;AAAA,QACP,gEAAgE,KAAK,SAAS,MAAM,KAAK,gBAAgB,MAAM,OAAO,GAAG,CAAC;AAAA,MAC5H;AACA;AAAA,IACF;AAEA,QAAI,wBAAwB;AAC5B,QAAI,QAAQ,qBAAqB;AAC/B,YAAM,sBAAsB,sBAAsB,KAAK,eAAe;AACtE,UACE,qBAAqB,oBACrB,oBAAoB,qBAAqB,QAAQ,qBACjD;AACA,iBAAS;AAAA,UACP,mDAAmD,KAAK,SAAS,UAAU,KAAK,eAAe;AAAA,QACjG;AAAA,MACF,WAAW,CAAC,qBAAqB,kBAAkB;AACjD,cAAM,UAAmC;AAAA,UACvC,SAAS;AAAA,UACT,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,UAClC,OAAO;AAAA,UACP,kBAAkB,QAAQ;AAAA,QAC5B;AACA,YAAI;AACF,gBAAM,wBAAwB,KAAK,iBAAiB,OAAO;AAC3D,kBAAQ;AAAA,YACN,kDAAkD,KAAK,SAAS,MAAM,KAAK,eAAe;AAAA,UAC5F;AACA,kCAAwB;AAAA,QAC1B,SAAS,KAAK;AACZ,mBAAS;AAAA,YACP,mDAAmD,KAAK,SAAS,MAAM,KAAK,eAAe,MAAM,OAAO,GAAG,CAAC;AAAA,UAC9G;AAAA,QACF;AAAA,MACF,OAAO;AACL,gCAAwB;AAAA,MAC1B;AAAA,IACF;AAEA,UAAM,gBACJ,QAAQ,iBAAiB,QAAQ,cAAc,QAAQ,QAAQ,cAAc,WACzE,QAAQ,cAAc,QAAQ,QAAQ,cAAc,WACpD;AACN,QAAI,gBAAgB,GAAG;AACrB,eAAS;AAAA,QACP,8CAA8C,KAAK,SAAS,cAAc,aAAa;AAAA,MAEzF;AAAA,IACF;AACA,QAAI,CAAC,QAAQ,wBAAwB,QAAQ,eAAe,YAAY,KAAK,GAAG;AAC9E,eAAS;AAAA,QACP,8CAA8C,KAAK,SAAS;AAAA,MAE9D;AAAA,IACF;AACA,QAAI,CAAC,QAAQ,wBAAwB,QAAQ,eAAe,SAAS,KAAK,GAAG;AAC3E,eAAS;AAAA,QACP,8CAA8C,KAAK,SAAS;AAAA,MAC9D;AAAA,IACF;AAEA,QACE,QAAQ,uBACR,CAAC,yBACD,CAAC,sBAAsB,KAAK,eAAe,GAC3C;AACA;AAAA,IACF;AAEA,UAAM,QAA0C;AAAA,MAC9C,SAAS;AAAA,MACT,QAAQ;AAAA,MACR,WAAW,KAAK;AAAA,MAChB,UAAU,QAAQ;AAAA,MAClB,eAAe,QAAQ;AAAA,MACvB,eAAe,QAAQ;AAAA,MACvB;AAAA,MACA,eAAe,wBAAwB,YAAY;AAAA,MACnD,aAAY,oBAAI,KAAK,GAAE,YAAY;AAAA,MACnC,WAAW;AAAA,IACb;AACA,QAAI;AACF,YAAM,4BAA4B;AAAA,QAChC,UAAU,KAAK;AAAA,QACf;AAAA,QACA;AAAA,MACF,CAAC;AACD,cAAQ;AAAA,QACN,iEAAiE,KAAK,SAAS,MAAM,KAAK,SAAS;AAAA,MACrG;AAAA,IACF,SAAS,KAAK;AACZ,eAAS;AAAA,QACP,8EAA8E,KAAK,SAAS,MAAM,KAAK,SAAS,MAAM,OAAO,GAAG,CAAC;AAAA,MACnI;AAAA,IACF;AAAA,EACF;AAEA,MAAI,QAAQ,SAAS,GAAG;AACtB,WAAO,KAAK;AAAA,MACV;AAAA,EAA8C,QAAQ,IAAI,CAAC,UAAU,KAAK,KAAK,EAAE,EAAE,KAAK,IAAI,CAAC;AAAA,IAC/F;AAAA,EACF;AACA,MAAI,SAAS,SAAS,GAAG;AACvB,WAAO,KAAK;AAAA,MACV;AAAA,EAA6C,SAAS,IAAI,CAAC,UAAU,KAAK,KAAK,EAAE,EAAE,KAAK,IAAI,CAAC;AAAA,IAC/F;AAAA,EACF;AAEA,SAAO;AAAA,IACL,UAAU,QAAQ,SAAS;AAAA,IAC3B;AAAA,IACA;AAAA,EACF;AACF;",
+  "names": []
+}

package/dist/chunk-IJH4NOQ4.js

@@ -0,0 +1,18 @@
+import {
+  init_shims
+} from "./chunk-G4TIS2SC.js";
+
+// src/matrix/sdk/read-response-with-limit.ts
+init_shims();
+import { readResponseWithLimit as readSharedResponseWithLimit } from "openclaw/plugin-sdk/media-runtime";
+async function readResponseWithLimit(res, maxBytes, opts) {
+  return await readSharedResponseWithLimit(res, maxBytes, {
+    ...opts,
+    onIdleTimeout: opts?.onIdleTimeout ?? (({ chunkTimeoutMs }) => new Error(`Matrix media download stalled: no data received for ${chunkTimeoutMs}ms`))
+  });
+}
+
+export {
+  readResponseWithLimit
+};
+//# sourceMappingURL=chunk-IJH4NOQ4.js.map

package/dist/chunk-IJH4NOQ4.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../src/matrix/sdk/read-response-with-limit.ts"],
+  "sourcesContent": ["import { readResponseWithLimit as readSharedResponseWithLimit } from \"openclaw/plugin-sdk/media-runtime\";\n\nexport async function readResponseWithLimit(\n  res: Response,\n  maxBytes: number,\n  opts?: {\n    onOverflow?: (params: { size: number; maxBytes: number; res: Response }) => Error;\n    chunkTimeoutMs?: number;\n    onIdleTimeout?: (params: { chunkTimeoutMs: number }) => Error;\n  },\n): Promise<Buffer> {\n  return await readSharedResponseWithLimit(res, maxBytes, {\n    ...opts,\n    onIdleTimeout:\n      opts?.onIdleTimeout ??\n      (({ chunkTimeoutMs }) =>\n        new Error(`Matrix media download stalled: no data received for ${chunkTimeoutMs}ms`)),\n  });\n}\n"],
+  "mappings": ";;;;;AAAA;AAAA,SAAS,yBAAyB,mCAAmC;AAErE,eAAsB,sBACpB,KACA,UACA,MAKiB;AACjB,SAAO,MAAM,4BAA4B,KAAK,UAAU;AAAA,IACtD,GAAG;AAAA,IACH,eACE,MAAM,kBACL,CAAC,EAAE,eAAe,MACjB,IAAI,MAAM,uDAAuD,cAAc,IAAI;AAAA,EACzF,CAAC;AACH;",
+  "names": []
+}

package/dist/chunk-IMHRZQRH.js

@@ -0,0 +1,76 @@
+import {
+  formatMatrixErrorMessage
+} from "./chunk-H5MLA6PA.js";
+import {
+  init_shims
+} from "./chunk-G4TIS2SC.js";
+
+// src/plugin-entry.runtime.ts
+init_shims();
+import { normalizeOptionalString } from "openclaw/plugin-sdk/text-runtime";
+function sendError(respond, err) {
+  respond(false, { error: formatMatrixErrorMessage(err) });
+}
+async function ensureMatrixCryptoRuntime(...args) {
+  const { ensureMatrixCryptoRuntime: ensureRuntime } = await import("./src/matrix/deps.js");
+  await ensureRuntime(...args);
+}
+async function handleVerifyRecoveryKey({
+  params,
+  respond
+}) {
+  try {
+    const { verifyMatrixRecoveryKey } = await import("./src/matrix/actions/verification.js");
+    const key = normalizeOptionalString(params?.key);
+    if (!key) {
+      respond(false, { error: "key required" });
+      return;
+    }
+    const accountId = normalizeOptionalString(params?.accountId);
+    const result = await verifyMatrixRecoveryKey(key, { accountId });
+    respond(result.success, result);
+  } catch (err) {
+    sendError(respond, err);
+  }
+}
+async function handleVerificationBootstrap({
+  params,
+  respond
+}) {
+  try {
+    const { bootstrapMatrixVerification } = await import("./src/matrix/actions/verification.js");
+    const accountId = normalizeOptionalString(params?.accountId);
+    const recoveryKey = typeof params?.recoveryKey === "string" ? params.recoveryKey : void 0;
+    const forceResetCrossSigning = params?.forceResetCrossSigning === true;
+    const result = await bootstrapMatrixVerification({
+      accountId,
+      recoveryKey,
+      forceResetCrossSigning
+    });
+    respond(result.success, result);
+  } catch (err) {
+    sendError(respond, err);
+  }
+}
+async function handleVerificationStatus({
+  params,
+  respond
+}) {
+  try {
+    const { getMatrixVerificationStatus } = await import("./src/matrix/actions/verification.js");
+    const accountId = normalizeOptionalString(params?.accountId);
+    const includeRecoveryKey = params?.includeRecoveryKey === true;
+    const status = await getMatrixVerificationStatus({ accountId, includeRecoveryKey });
+    respond(true, status);
+  } catch (err) {
+    sendError(respond, err);
+  }
+}
+
+export {
+  ensureMatrixCryptoRuntime,
+  handleVerifyRecoveryKey,
+  handleVerificationBootstrap,
+  handleVerificationStatus
+};
+//# sourceMappingURL=chunk-IMHRZQRH.js.map

package/dist/chunk-IMHRZQRH.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../src/plugin-entry.runtime.ts"],
+  "sourcesContent": ["import type { GatewayRequestHandlerOptions } from \"openclaw/plugin-sdk/gateway-runtime\";\nimport { normalizeOptionalString } from \"openclaw/plugin-sdk/text-runtime\";\nimport { formatMatrixErrorMessage } from \"./matrix/errors.js\";\n\nfunction sendError(respond: (ok: boolean, payload?: unknown) => void, err: unknown) {\n  respond(false, { error: formatMatrixErrorMessage(err) });\n}\n\nexport async function ensureMatrixCryptoRuntime(\n  ...args: Parameters<typeof import(\"./matrix/deps.js\").ensureMatrixCryptoRuntime>\n): Promise<void> {\n  const { ensureMatrixCryptoRuntime: ensureRuntime } = await import(\"./matrix/deps.js\");\n  await ensureRuntime(...args);\n}\n\nexport async function handleVerifyRecoveryKey({\n  params,\n  respond,\n}: GatewayRequestHandlerOptions): Promise<void> {\n  try {\n    const { verifyMatrixRecoveryKey } = await import(\"./matrix/actions/verification.js\");\n    const key = normalizeOptionalString(params?.key);\n    if (!key) {\n      respond(false, { error: \"key required\" });\n      return;\n    }\n    const accountId = normalizeOptionalString(params?.accountId);\n    const result = await verifyMatrixRecoveryKey(key, { accountId });\n    respond(result.success, result);\n  } catch (err) {\n    sendError(respond, err);\n  }\n}\n\nexport async function handleVerificationBootstrap({\n  params,\n  respond,\n}: GatewayRequestHandlerOptions): Promise<void> {\n  try {\n    const { bootstrapMatrixVerification } = await import(\"./matrix/actions/verification.js\");\n    const accountId = normalizeOptionalString(params?.accountId);\n    const recoveryKey = typeof params?.recoveryKey === \"string\" ? params.recoveryKey : undefined;\n    const forceResetCrossSigning = params?.forceResetCrossSigning === true;\n    const result = await bootstrapMatrixVerification({\n      accountId,\n      recoveryKey,\n      forceResetCrossSigning,\n    });\n    respond(result.success, result);\n  } catch (err) {\n    sendError(respond, err);\n  }\n}\n\nexport async function handleVerificationStatus({\n  params,\n  respond,\n}: GatewayRequestHandlerOptions): Promise<void> {\n  try {\n    const { getMatrixVerificationStatus } = await import(\"./matrix/actions/verification.js\");\n    const accountId = normalizeOptionalString(params?.accountId);\n    const includeRecoveryKey = params?.includeRecoveryKey === true;\n    const status = await getMatrixVerificationStatus({ accountId, includeRecoveryKey });\n    respond(true, status);\n  } catch (err) {\n    sendError(respond, err);\n  }\n}\n"],
+  "mappings": ";;;;;;;;AAAA;AACA,SAAS,+BAA+B;AAGxC,SAAS,UAAU,SAAmD,KAAc;AAClF,UAAQ,OAAO,EAAE,OAAO,yBAAyB,GAAG,EAAE,CAAC;AACzD;AAEA,eAAsB,6BACjB,MACY;AACf,QAAM,EAAE,2BAA2B,cAAc,IAAI,MAAM,OAAO,sBAAkB;AACpF,QAAM,cAAc,GAAG,IAAI;AAC7B;AAEA,eAAsB,wBAAwB;AAAA,EAC5C;AAAA,EACA;AACF,GAAgD;AAC9C,MAAI;AACF,UAAM,EAAE,wBAAwB,IAAI,MAAM,OAAO,sCAAkC;AACnF,UAAM,MAAM,wBAAwB,QAAQ,GAAG;AAC/C,QAAI,CAAC,KAAK;AACR,cAAQ,OAAO,EAAE,OAAO,eAAe,CAAC;AACxC;AAAA,IACF;AACA,UAAM,YAAY,wBAAwB,QAAQ,SAAS;AAC3D,UAAM,SAAS,MAAM,wBAAwB,KAAK,EAAE,UAAU,CAAC;AAC/D,YAAQ,OAAO,SAAS,MAAM;AAAA,EAChC,SAAS,KAAK;AACZ,cAAU,SAAS,GAAG;AAAA,EACxB;AACF;AAEA,eAAsB,4BAA4B;AAAA,EAChD;AAAA,EACA;AACF,GAAgD;AAC9C,MAAI;AACF,UAAM,EAAE,4BAA4B,IAAI,MAAM,OAAO,sCAAkC;AACvF,UAAM,YAAY,wBAAwB,QAAQ,SAAS;AAC3D,UAAM,cAAc,OAAO,QAAQ,gBAAgB,WAAW,OAAO,cAAc;AACnF,UAAM,yBAAyB,QAAQ,2BAA2B;AAClE,UAAM,SAAS,MAAM,4BAA4B;AAAA,MAC/C;AAAA,MACA;AAAA,MACA;AAAA,IACF,CAAC;AACD,YAAQ,OAAO,SAAS,MAAM;AAAA,EAChC,SAAS,KAAK;AACZ,cAAU,SAAS,GAAG;AAAA,EACxB;AACF;AAEA,eAAsB,yBAAyB;AAAA,EAC7C;AAAA,EACA;AACF,GAAgD;AAC9C,MAAI;AACF,UAAM,EAAE,4BAA4B,IAAI,MAAM,OAAO,sCAAkC;AACvF,UAAM,YAAY,wBAAwB,QAAQ,SAAS;AAC3D,UAAM,qBAAqB,QAAQ,uBAAuB;AAC1D,UAAM,SAAS,MAAM,4BAA4B,EAAE,WAAW,mBAAmB,CAAC;AAClF,YAAQ,MAAM,MAAM;AAAA,EACtB,SAAS,KAAK;AACZ,cAAU,SAAS,GAAG;AAAA,EACxB;AACF;",
+  "names": []
+}

package/dist/chunk-JB6ZQEVR.js

@@ -0,0 +1,465 @@
+import {
+  listMatrixPins,
+  pinMatrixMessage,
+  unpinMatrixMessage
+} from "./chunk-OVU43GJK.js";
+import {
+  voteMatrixPoll
+} from "./chunk-4XXERLFH.js";
+import {
+  listMatrixReactions,
+  removeMatrixReactions
+} from "./chunk-63QTHDJL.js";
+import {
+  getMatrixMemberInfo,
+  getMatrixRoomInfo
+} from "./chunk-RTSINQ4T.js";
+import {
+  applyMatrixProfileUpdate
+} from "./chunk-JVLRI4RU.js";
+import {
+  acceptMatrixVerification,
+  bootstrapMatrixVerification,
+  cancelMatrixVerification,
+  confirmMatrixVerificationReciprocateQr,
+  confirmMatrixVerificationSas,
+  generateMatrixVerificationQr,
+  getMatrixEncryptionStatus,
+  getMatrixRoomKeyBackupStatus,
+  getMatrixVerificationSas,
+  getMatrixVerificationStatus,
+  listMatrixVerifications,
+  mismatchMatrixVerificationSas,
+  requestMatrixVerification,
+  restoreMatrixRoomKeyBackup,
+  scanMatrixVerificationQr,
+  startMatrixVerification,
+  verifyMatrixRecoveryKey
+} from "./chunk-4WCKVGQ5.js";
+import {
+  deleteMatrixMessage,
+  editMatrixMessage,
+  readMatrixMessages,
+  sendMatrixMessage
+} from "./chunk-VRBJNFPL.js";
+import {
+  reactMatrixMessage
+} from "./chunk-QAR5POXD.js";
+import {
+  createActionGate,
+  jsonResult,
+  readNumberParam,
+  readReactionParams,
+  readStringArrayParam,
+  readStringParam
+} from "./chunk-HGHU3TVL.js";
+import {
+  resolveMatrixAccountConfig
+} from "./chunk-3OXOEMBS.js";
+import {
+  init_shims
+} from "./chunk-G4TIS2SC.js";
+
+// src/tool-actions.ts
+init_shims();
+import { normalizeOptionalLowercaseString } from "openclaw/plugin-sdk/text-runtime";
+var messageActions = /* @__PURE__ */ new Set(["sendMessage", "editMessage", "deleteMessage", "readMessages"]);
+var reactionActions = /* @__PURE__ */ new Set(["react", "reactions"]);
+var pinActions = /* @__PURE__ */ new Set(["pinMessage", "unpinMessage", "listPins"]);
+var pollActions = /* @__PURE__ */ new Set(["pollVote"]);
+var profileActions = /* @__PURE__ */ new Set(["setProfile"]);
+var verificationActions = /* @__PURE__ */ new Set([
+  "encryptionStatus",
+  "verificationList",
+  "verificationRequest",
+  "verificationAccept",
+  "verificationCancel",
+  "verificationStart",
+  "verificationGenerateQr",
+  "verificationScanQr",
+  "verificationSas",
+  "verificationConfirm",
+  "verificationMismatch",
+  "verificationConfirmQr",
+  "verificationStatus",
+  "verificationBootstrap",
+  "verificationRecoveryKey",
+  "verificationBackupStatus",
+  "verificationBackupRestore"
+]);
+function readRoomId(params, required = true) {
+  const direct = readStringParam(params, "roomId") ?? readStringParam(params, "channelId");
+  if (direct) {
+    return direct;
+  }
+  if (!required) {
+    return readStringParam(params, "to") ?? "";
+  }
+  return readStringParam(params, "to", { required: true });
+}
+function toSnakeCaseKey(key) {
+  return normalizeOptionalLowercaseString(
+    key.replace(/([A-Z]+)([A-Z][a-z])/g, "$1_$2").replace(/([a-z0-9])([A-Z])/g, "$1_$2")
+  );
+}
+function readRawParam(params, key) {
+  if (Object.hasOwn(params, key)) {
+    return params[key];
+  }
+  const snakeKey = toSnakeCaseKey(key);
+  if (snakeKey !== key && Object.hasOwn(params, snakeKey)) {
+    return params[snakeKey];
+  }
+  return void 0;
+}
+function readStringAliasParam(params, keys, options = {}) {
+  for (const key of keys) {
+    const raw = readRawParam(params, key);
+    if (typeof raw !== "string") {
+      continue;
+    }
+    const trimmed = raw.trim();
+    if (trimmed) {
+      return trimmed;
+    }
+  }
+  if (options.required) {
+    throw new Error(`${keys[0]} required`);
+  }
+  return void 0;
+}
+function readNumericArrayParam(params, key, options = {}) {
+  const { integer = false } = options;
+  const raw = readRawParam(params, key);
+  if (raw === void 0) {
+    return [];
+  }
+  return (Array.isArray(raw) ? raw : [raw]).map((value) => {
+    if (typeof value === "number" && Number.isFinite(value)) {
+      return value;
+    }
+    if (typeof value === "string") {
+      const trimmed = value.trim();
+      if (!trimmed) {
+        return null;
+      }
+      const parsed = Number(trimmed);
+      return Number.isFinite(parsed) ? parsed : null;
+    }
+    return null;
+  }).filter((value) => value !== null).map((value) => integer ? Math.trunc(value) : value);
+}
+async function handleMatrixAction(params, cfg, opts = {}) {
+  const action = readStringParam(params, "action", { required: true });
+  const accountId = readStringParam(params, "accountId") ?? void 0;
+  const isActionEnabled = createActionGate(resolveMatrixAccountConfig({ cfg, accountId }).actions);
+  const clientOpts = {
+    cfg,
+    ...accountId ? { accountId } : {}
+  };
+  if (reactionActions.has(action)) {
+    if (!isActionEnabled("reactions")) {
+      throw new Error("Matrix reactions are disabled.");
+    }
+    const roomId = readRoomId(params);
+    const messageId = readStringParam(params, "messageId", { required: true });
+    if (action === "react") {
+      const { emoji, remove, isEmpty } = readReactionParams(params, {
+        removeErrorMessage: "Emoji is required to remove a Matrix reaction."
+      });
+      if (remove || isEmpty) {
+        const result = await removeMatrixReactions(roomId, messageId, {
+          ...clientOpts,
+          emoji: remove ? emoji : void 0
+        });
+        return jsonResult({ ok: true, removed: result.removed });
+      }
+      await reactMatrixMessage(roomId, messageId, emoji, clientOpts);
+      return jsonResult({ ok: true, added: emoji });
+    }
+    const limit = readNumberParam(params, "limit", { integer: true });
+    const reactions = await listMatrixReactions(roomId, messageId, {
+      ...clientOpts,
+      limit: limit ?? void 0
+    });
+    return jsonResult({ ok: true, reactions });
+  }
+  if (pollActions.has(action)) {
+    const roomId = readRoomId(params);
+    const pollId = readStringAliasParam(params, ["pollId", "messageId"], { required: true });
+    if (!pollId) {
+      throw new Error("pollId required");
+    }
+    const optionId = readStringParam(params, "pollOptionId");
+    const optionIndex = readNumberParam(params, "pollOptionIndex", { integer: true });
+    const optionIds = [
+      ...readStringArrayParam(params, "pollOptionIds") ?? [],
+      ...optionId ? [optionId] : []
+    ];
+    const optionIndexes = [
+      ...readNumericArrayParam(params, "pollOptionIndexes", { integer: true }),
+      ...optionIndex !== void 0 ? [optionIndex] : []
+    ];
+    const result = await voteMatrixPoll(roomId, pollId, {
+      ...clientOpts,
+      optionIds,
+      optionIndexes
+    });
+    return jsonResult({ ok: true, result });
+  }
+  if (messageActions.has(action)) {
+    if (!isActionEnabled("messages")) {
+      throw new Error("Matrix messages are disabled.");
+    }
+    switch (action) {
+      case "sendMessage": {
+        const to = readStringParam(params, "to", { required: true });
+        const mediaUrl = readStringParam(params, "mediaUrl", { trim: false }) ?? readStringParam(params, "media", { trim: false }) ?? readStringParam(params, "filePath", { trim: false }) ?? readStringParam(params, "path", { trim: false });
+        const content = readStringParam(params, "content", {
+          required: !mediaUrl,
+          allowEmpty: true
+        });
+        const replyToId = readStringParam(params, "replyToId") ?? readStringParam(params, "replyTo");
+        const threadId = readStringParam(params, "threadId");
+        const audioAsVoice = typeof readRawParam(params, "audioAsVoice") === "boolean" ? readRawParam(params, "audioAsVoice") : typeof readRawParam(params, "asVoice") === "boolean" ? readRawParam(params, "asVoice") : void 0;
+        const result = await sendMatrixMessage(to, content, {
+          mediaUrl: mediaUrl ?? void 0,
+          mediaLocalRoots: opts.mediaLocalRoots,
+          replyToId: replyToId ?? void 0,
+          threadId: threadId ?? void 0,
+          audioAsVoice,
+          ...clientOpts
+        });
+        return jsonResult({ ok: true, result });
+      }
+      case "editMessage": {
+        const roomId = readRoomId(params);
+        const messageId = readStringParam(params, "messageId", { required: true });
+        const content = readStringParam(params, "content", { required: true });
+        const result = await editMatrixMessage(roomId, messageId, content, clientOpts);
+        return jsonResult({ ok: true, result });
+      }
+      case "deleteMessage": {
+        const roomId = readRoomId(params);
+        const messageId = readStringParam(params, "messageId", { required: true });
+        const reason = readStringParam(params, "reason");
+        await deleteMatrixMessage(roomId, messageId, {
+          reason: reason ?? void 0,
+          ...clientOpts
+        });
+        return jsonResult({ ok: true, deleted: true });
+      }
+      case "readMessages": {
+        const roomId = readRoomId(params);
+        const limit = readNumberParam(params, "limit", { integer: true });
+        const before = readStringParam(params, "before");
+        const after = readStringParam(params, "after");
+        const result = await readMatrixMessages(roomId, {
+          limit: limit ?? void 0,
+          before: before ?? void 0,
+          after: after ?? void 0,
+          ...clientOpts
+        });
+        return jsonResult({ ok: true, ...result });
+      }
+      default:
+        break;
+    }
+  }
+  if (pinActions.has(action)) {
+    if (!isActionEnabled("pins")) {
+      throw new Error("Matrix pins are disabled.");
+    }
+    const roomId = readRoomId(params);
+    if (action === "pinMessage") {
+      const messageId = readStringParam(params, "messageId", { required: true });
+      const result2 = await pinMatrixMessage(roomId, messageId, clientOpts);
+      return jsonResult({ ok: true, pinned: result2.pinned });
+    }
+    if (action === "unpinMessage") {
+      const messageId = readStringParam(params, "messageId", { required: true });
+      const result2 = await unpinMatrixMessage(roomId, messageId, clientOpts);
+      return jsonResult({ ok: true, pinned: result2.pinned });
+    }
+    const result = await listMatrixPins(roomId, clientOpts);
+    return jsonResult({ ok: true, pinned: result.pinned, events: result.events });
+  }
+  if (profileActions.has(action)) {
+    if (!isActionEnabled("profile")) {
+      throw new Error("Matrix profile updates are disabled.");
+    }
+    const avatarPath = readStringParam(params, "avatarPath") ?? readStringParam(params, "path") ?? readStringParam(params, "filePath");
+    const result = await applyMatrixProfileUpdate({
+      cfg,
+      account: accountId,
+      displayName: readStringParam(params, "displayName") ?? readStringParam(params, "name"),
+      avatarUrl: readStringParam(params, "avatarUrl"),
+      avatarPath,
+      mediaLocalRoots: opts.mediaLocalRoots
+    });
+    return jsonResult({ ok: true, ...result });
+  }
+  if (action === "memberInfo") {
+    if (!isActionEnabled("memberInfo")) {
+      throw new Error("Matrix member info is disabled.");
+    }
+    const userId = readStringParam(params, "userId", { required: true });
+    const roomId = readStringParam(params, "roomId") ?? readStringParam(params, "channelId");
+    const result = await getMatrixMemberInfo(userId, {
+      roomId: roomId ?? void 0,
+      ...clientOpts
+    });
+    return jsonResult({ ok: true, member: result });
+  }
+  if (action === "channelInfo") {
+    if (!isActionEnabled("channelInfo")) {
+      throw new Error("Matrix room info is disabled.");
+    }
+    const roomId = readRoomId(params);
+    const result = await getMatrixRoomInfo(roomId, clientOpts);
+    return jsonResult({ ok: true, room: result });
+  }
+  if (verificationActions.has(action)) {
+    if (!isActionEnabled("verification")) {
+      throw new Error("Matrix verification actions are disabled.");
+    }
+    const requestId = readStringParam(params, "requestId") ?? readStringParam(params, "verificationId") ?? readStringParam(params, "id");
+    if (action === "encryptionStatus") {
+      const includeRecoveryKey = params.includeRecoveryKey === true;
+      const status = await getMatrixEncryptionStatus({ includeRecoveryKey, ...clientOpts });
+      return jsonResult({ ok: true, status });
+    }
+    if (action === "verificationStatus") {
+      const includeRecoveryKey = params.includeRecoveryKey === true;
+      const status = await getMatrixVerificationStatus({ includeRecoveryKey, ...clientOpts });
+      return jsonResult({ ok: true, status });
+    }
+    if (action === "verificationBootstrap") {
+      const recoveryKey = readStringParam(params, "recoveryKey", { trim: false }) ?? readStringParam(params, "key", { trim: false });
+      const result = await bootstrapMatrixVerification({
+        recoveryKey: recoveryKey ?? void 0,
+        forceResetCrossSigning: params.forceResetCrossSigning === true,
+        ...clientOpts
+      });
+      return jsonResult({ ok: result.success, result });
+    }
+    if (action === "verificationRecoveryKey") {
+      const recoveryKey = readStringParam(params, "recoveryKey", { trim: false }) ?? readStringParam(params, "key", { trim: false });
+      const result = await verifyMatrixRecoveryKey(
+        readStringParam({ recoveryKey }, "recoveryKey", { required: true, trim: false }),
+        clientOpts
+      );
+      return jsonResult({ ok: result.success, result });
+    }
+    if (action === "verificationBackupStatus") {
+      const status = await getMatrixRoomKeyBackupStatus(clientOpts);
+      return jsonResult({ ok: true, status });
+    }
+    if (action === "verificationBackupRestore") {
+      const recoveryKey = readStringParam(params, "recoveryKey", { trim: false }) ?? readStringParam(params, "key", { trim: false });
+      const result = await restoreMatrixRoomKeyBackup({
+        recoveryKey: recoveryKey ?? void 0,
+        ...clientOpts
+      });
+      return jsonResult({ ok: result.success, result });
+    }
+    if (action === "verificationList") {
+      const verifications = await listMatrixVerifications(clientOpts);
+      return jsonResult({ ok: true, verifications });
+    }
+    if (action === "verificationRequest") {
+      const userId = readStringParam(params, "userId");
+      const deviceId = readStringParam(params, "deviceId");
+      const roomId = readStringParam(params, "roomId") ?? readStringParam(params, "channelId");
+      const ownUser = typeof params.ownUser === "boolean" ? params.ownUser : void 0;
+      const verification = await requestMatrixVerification({
+        ownUser,
+        userId: userId ?? void 0,
+        deviceId: deviceId ?? void 0,
+        roomId: roomId ?? void 0,
+        ...clientOpts
+      });
+      return jsonResult({ ok: true, verification });
+    }
+    if (action === "verificationAccept") {
+      const verification = await acceptMatrixVerification(
+        readStringParam({ requestId }, "requestId", { required: true }),
+        clientOpts
+      );
+      return jsonResult({ ok: true, verification });
+    }
+    if (action === "verificationCancel") {
+      const reason = readStringParam(params, "reason");
+      const code = readStringParam(params, "code");
+      const verification = await cancelMatrixVerification(
+        readStringParam({ requestId }, "requestId", { required: true }),
+        { reason: reason ?? void 0, code: code ?? void 0, ...clientOpts }
+      );
+      return jsonResult({ ok: true, verification });
+    }
+    if (action === "verificationStart") {
+      const methodRaw = readStringParam(params, "method");
+      const method = normalizeOptionalLowercaseString(methodRaw);
+      if (method && method !== "sas") {
+        throw new Error(
+          "Matrix verificationStart only supports method=sas; use verificationGenerateQr/verificationScanQr for QR flows."
+        );
+      }
+      const verification = await startMatrixVerification(
+        readStringParam({ requestId }, "requestId", { required: true }),
+        { method: "sas", ...clientOpts }
+      );
+      return jsonResult({ ok: true, verification });
+    }
+    if (action === "verificationGenerateQr") {
+      const qr = await generateMatrixVerificationQr(
+        readStringParam({ requestId }, "requestId", { required: true }),
+        clientOpts
+      );
+      return jsonResult({ ok: true, ...qr });
+    }
+    if (action === "verificationScanQr") {
+      const qrDataBase64 = readStringParam(params, "qrDataBase64") ?? readStringParam(params, "qrData") ?? readStringParam(params, "qr");
+      const verification = await scanMatrixVerificationQr(
+        readStringParam({ requestId }, "requestId", { required: true }),
+        readStringParam({ qrDataBase64 }, "qrDataBase64", { required: true }),
+        clientOpts
+      );
+      return jsonResult({ ok: true, verification });
+    }
+    if (action === "verificationSas") {
+      const sas = await getMatrixVerificationSas(
+        readStringParam({ requestId }, "requestId", { required: true }),
+        clientOpts
+      );
+      return jsonResult({ ok: true, sas });
+    }
+    if (action === "verificationConfirm") {
+      const verification = await confirmMatrixVerificationSas(
+        readStringParam({ requestId }, "requestId", { required: true }),
+        clientOpts
+      );
+      return jsonResult({ ok: true, verification });
+    }
+    if (action === "verificationMismatch") {
+      const verification = await mismatchMatrixVerificationSas(
+        readStringParam({ requestId }, "requestId", { required: true }),
+        clientOpts
+      );
+      return jsonResult({ ok: true, verification });
+    }
+    if (action === "verificationConfirmQr") {
+      const verification = await confirmMatrixVerificationReciprocateQr(
+        readStringParam({ requestId }, "requestId", { required: true }),
+        clientOpts
+      );
+      return jsonResult({ ok: true, verification });
+    }
+  }
+  throw new Error(`Unsupported Matrix action: ${action}`);
+}
+
+export {
+  handleMatrixAction
+};
+//# sourceMappingURL=chunk-JB6ZQEVR.js.map