@archipelagolab/lobi 1.0.5 → 1.0.7

package/dist/chunk-7W73QCTR.js

@@ -1,244 +0,0 @@
-import {
-  resolveMatrixMigrationStatus
-} from "./chunk-RVOD3ESA.js";
-import {
-  maybeCreateMatrixMigrationSnapshot
-} from "./chunk-5LNGMBWW.js";
-import {
-  autoPrepareLegacyMatrixCrypto
-} from "./chunk-YNJYMD43.js";
-import {
-  autoMigrateLegacyMatrixState
-} from "./chunk-MEI5HTWV.js";
-import {
-  legacyConfigRules,
-  normalizeCompatibilityConfig
-} from "./chunk-4Z2N4GW6.js";
-import {
-  isRecord
-} from "./chunk-AQQGAE7N.js";
-import {
-  init_shims
-} from "./chunk-7FLQSTPG.js";
-
-// src/doctor.ts
-init_shims();
-import {
-  detectPluginInstallPathIssue,
-  formatPluginInstallPathIssue,
-  removePluginFromConfig
-} from "openclaw/plugin-sdk/runtime-doctor";
-function hasConfiguredMatrixChannel(cfg) {
-  const channels = cfg.channels;
-  return isRecord(channels?.matrix);
-}
-function hasConfiguredMatrixPluginSurface(cfg) {
-  return Boolean(
-    cfg.plugins?.installs?.matrix || cfg.plugins?.entries?.matrix || cfg.plugins?.allow?.includes("matrix") || cfg.plugins?.deny?.includes("matrix")
-  );
-}
-function hasConfiguredMatrixEnv(env) {
-  return Object.entries(env).some(
-    ([key, value]) => key.startsWith("MATRIX_") && typeof value === "string" && value.trim()
-  );
-}
-function configMayNeedMatrixDoctorSequence(cfg, env) {
-  return hasConfiguredMatrixChannel(cfg) || hasConfiguredMatrixPluginSurface(cfg) || hasConfiguredMatrixEnv(env);
-}
-function formatMatrixLegacyStatePreview(detection) {
-  return [
-    "- Matrix plugin upgraded in place.",
-    `- Legacy sync store: ${detection.legacyStoragePath} -> ${detection.targetStoragePath}`,
-    `- Legacy crypto store: ${detection.legacyCryptoPath} -> ${detection.targetCryptoPath}`,
-    ...detection.selectionNote ? [`- ${detection.selectionNote}`] : [],
-    '- Run "openclaw doctor --fix" to migrate this Matrix state now.'
-  ].join("\n");
-}
-function formatMatrixLegacyCryptoPreview(detection) {
-  const notes = [];
-  for (const warning of detection.warnings) {
-    notes.push(`- ${warning}`);
-  }
-  for (const plan of detection.plans) {
-    notes.push(
-      [
-        `- Matrix encrypted-state migration is pending for account "${plan.accountId}".`,
-        `- Legacy crypto store: ${plan.legacyCryptoPath}`,
-        `- New recovery key file: ${plan.recoveryKeyPath}`,
-        `- Migration state file: ${plan.statePath}`,
-        '- Run "openclaw doctor --fix" to extract any saved backup key now. Backed-up room keys will restore automatically on next gateway start.'
-      ].join("\n")
-    );
-  }
-  return notes;
-}
-async function collectMatrixInstallPathWarnings(cfg) {
-  const issue = await detectPluginInstallPathIssue({
-    pluginId: "matrix",
-    install: cfg.plugins?.installs?.matrix
-  });
-  if (!issue) {
-    return [];
-  }
-  return formatPluginInstallPathIssue({
-    issue,
-    pluginLabel: "Matrix",
-    defaultInstallCommand: "openclaw plugins install @openclaw/matrix"
-  }).map((entry) => `- ${entry}`);
-}
-async function cleanStaleMatrixPluginConfig(cfg) {
-  const issue = await detectPluginInstallPathIssue({
-    pluginId: "matrix",
-    install: cfg.plugins?.installs?.matrix
-  });
-  if (!issue || issue.kind !== "missing-path") {
-    return { config: cfg, changes: [] };
-  }
-  const { config, actions } = removePluginFromConfig(cfg, "matrix");
-  const removed = [];
-  if (actions.install) {
-    removed.push("install record");
-  }
-  if (actions.loadPath) {
-    removed.push("load path");
-  }
-  if (actions.entry) {
-    removed.push("plugin entry");
-  }
-  if (actions.allowlist) {
-    removed.push("allowlist entry");
-  }
-  if (removed.length === 0) {
-    return { config: cfg, changes: [] };
-  }
-  return {
-    config,
-    changes: [
-      `Removed stale Matrix plugin references (${removed.join(", ")}). The previous install path no longer exists: ${issue.path}`
-    ]
-  };
-}
-async function applyMatrixDoctorRepair(params) {
-  const changes = [];
-  const warnings = [];
-  const migrationStatus = resolveMatrixMigrationStatus({
-    cfg: params.cfg,
-    env: params.env
-  });
-  let matrixSnapshotReady = true;
-  if (migrationStatus.actionable) {
-    try {
-      const snapshot = await maybeCreateMatrixMigrationSnapshot({
-        trigger: "doctor-fix",
-        env: params.env
-      });
-      changes.push(
-        `Matrix migration snapshot ${snapshot.created ? "created" : "reused"} before applying Matrix upgrades.
-- ${snapshot.archivePath}`
-      );
-    } catch (error) {
-      matrixSnapshotReady = false;
-      warnings.push(
-        `- Failed creating a Matrix migration snapshot before repair: ${String(error)}`
-      );
-      warnings.push(
-        '- Skipping Matrix migration changes for now. Resolve the snapshot failure, then rerun "openclaw doctor --fix".'
-      );
-    }
-  } else if (migrationStatus.pending) {
-    warnings.push(
-      "- Matrix migration warnings are present, but no on-disk Matrix mutation is actionable yet. No pre-migration snapshot was needed."
-    );
-  }
-  if (!matrixSnapshotReady) {
-    return { changes, warnings };
-  }
-  const matrixStateRepair = await autoMigrateLegacyMatrixState({
-    cfg: params.cfg,
-    env: params.env
-  });
-  if (matrixStateRepair.changes.length > 0) {
-    changes.push(
-      [
-        "Matrix plugin upgraded in place.",
-        ...matrixStateRepair.changes.map((entry) => `- ${entry}`),
-        "- No user action required."
-      ].join("\n")
-    );
-  }
-  if (matrixStateRepair.warnings.length > 0) {
-    warnings.push(matrixStateRepair.warnings.map((entry) => `- ${entry}`).join("\n"));
-  }
-  const matrixCryptoRepair = await autoPrepareLegacyMatrixCrypto({
-    cfg: params.cfg,
-    env: params.env
-  });
-  if (matrixCryptoRepair.changes.length > 0) {
-    changes.push(
-      [
-        "Matrix encrypted-state migration prepared.",
-        ...matrixCryptoRepair.changes.map((entry) => `- ${entry}`)
-      ].join("\n")
-    );
-  }
-  if (matrixCryptoRepair.warnings.length > 0) {
-    warnings.push(matrixCryptoRepair.warnings.map((entry) => `- ${entry}`).join("\n"));
-  }
-  return { changes, warnings };
-}
-async function runMatrixDoctorSequence(params) {
-  const warningNotes = [];
-  const changeNotes = [];
-  const installWarnings = await collectMatrixInstallPathWarnings(params.cfg);
-  if (installWarnings.length > 0) {
-    warningNotes.push(installWarnings.join("\n"));
-  }
-  if (!configMayNeedMatrixDoctorSequence(params.cfg, params.env)) {
-    return { changeNotes, warningNotes };
-  }
-  if (params.shouldRepair) {
-    const repair = await applyMatrixDoctorRepair({
-      cfg: params.cfg,
-      env: params.env
-    });
-    changeNotes.push(...repair.changes);
-    warningNotes.push(...repair.warnings);
-  } else {
-    const migrationStatus = resolveMatrixMigrationStatus({
-      cfg: params.cfg,
-      env: params.env
-    });
-    if (migrationStatus.legacyState) {
-      if ("warning" in migrationStatus.legacyState) {
-        warningNotes.push(`- ${migrationStatus.legacyState.warning}`);
-      } else {
-        warningNotes.push(formatMatrixLegacyStatePreview(migrationStatus.legacyState));
-      }
-    }
-    if (migrationStatus.legacyCrypto.warnings.length > 0 || migrationStatus.legacyCrypto.plans.length > 0) {
-      warningNotes.push(...formatMatrixLegacyCryptoPreview(migrationStatus.legacyCrypto));
-    }
-  }
-  return { changeNotes, warningNotes };
-}
-var matrixDoctor = {
-  dmAllowFromMode: "nestedOnly",
-  groupModel: "sender",
-  groupAllowFromFallbackToAllowFrom: false,
-  warnOnEmptyGroupSenderAllowlist: true,
-  legacyConfigRules,
-  normalizeCompatibilityConfig,
-  runConfigSequence: async ({ cfg, env, shouldRepair }) => await runMatrixDoctorSequence({ cfg, env, shouldRepair }),
-  cleanStaleConfig: async ({ cfg }) => await cleanStaleMatrixPluginConfig(cfg)
-};
-
-export {
-  formatMatrixLegacyStatePreview,
-  formatMatrixLegacyCryptoPreview,
-  collectMatrixInstallPathWarnings,
-  cleanStaleMatrixPluginConfig,
-  applyMatrixDoctorRepair,
-  runMatrixDoctorSequence,
-  matrixDoctor
-};
-//# sourceMappingURL=chunk-7W73QCTR.js.map

package/dist/chunk-7W73QCTR.js.map

@@ -1,7 +0,0 @@
-{
-  "version": 3,
-  "sources": ["../src/doctor.ts"],
-  "sourcesContent": ["import { type ChannelDoctorAdapter } from \"openclaw/plugin-sdk/channel-contract\";\nimport type { OpenClawConfig } from \"openclaw/plugin-sdk/config-runtime\";\nimport {\n  detectPluginInstallPathIssue,\n  formatPluginInstallPathIssue,\n  removePluginFromConfig,\n} from \"openclaw/plugin-sdk/runtime-doctor\";\nimport {\n  legacyConfigRules as MATRIX_LEGACY_CONFIG_RULES,\n  normalizeCompatibilityConfig as normalizeMatrixCompatibilityConfig,\n} from \"./doctor-contract.js\";\nimport {\n  autoMigrateLegacyMatrixState,\n  autoPrepareLegacyMatrixCrypto,\n  detectLegacyMatrixCrypto,\n  detectLegacyMatrixState,\n  maybeCreateMatrixMigrationSnapshot,\n  resolveMatrixMigrationStatus,\n} from \"./matrix-migration.runtime.js\";\nimport { isRecord } from \"./record-shared.js\";\n\nfunction hasConfiguredMatrixChannel(cfg: OpenClawConfig): boolean {\n  const channels = cfg.channels as Record<string, unknown> | undefined;\n  return isRecord(channels?.matrix);\n}\n\nfunction hasConfiguredMatrixPluginSurface(cfg: OpenClawConfig): boolean {\n  return Boolean(\n    cfg.plugins?.installs?.matrix ||\n    cfg.plugins?.entries?.matrix ||\n    cfg.plugins?.allow?.includes(\"matrix\") ||\n    cfg.plugins?.deny?.includes(\"matrix\"),\n  );\n}\n\nfunction hasConfiguredMatrixEnv(env: NodeJS.ProcessEnv): boolean {\n  return Object.entries(env).some(\n    ([key, value]) => key.startsWith(\"MATRIX_\") && typeof value === \"string\" && value.trim(),\n  );\n}\n\nfunction configMayNeedMatrixDoctorSequence(cfg: OpenClawConfig, env: NodeJS.ProcessEnv): boolean {\n  return (\n    hasConfiguredMatrixChannel(cfg) ||\n    hasConfiguredMatrixPluginSurface(cfg) ||\n    hasConfiguredMatrixEnv(env)\n  );\n}\n\nexport function formatMatrixLegacyStatePreview(\n  detection: Exclude<ReturnType<typeof detectLegacyMatrixState>, null | { warning: string }>,\n): string {\n  return [\n    \"- Matrix plugin upgraded in place.\",\n    `- Legacy sync store: ${detection.legacyStoragePath} -> ${detection.targetStoragePath}`,\n    `- Legacy crypto store: ${detection.legacyCryptoPath} -> ${detection.targetCryptoPath}`,\n    ...(detection.selectionNote ? [`- ${detection.selectionNote}`] : []),\n    '- Run \"openclaw doctor --fix\" to migrate this Matrix state now.',\n  ].join(\"\\n\");\n}\n\nexport function formatMatrixLegacyCryptoPreview(\n  detection: ReturnType<typeof detectLegacyMatrixCrypto>,\n): string[] {\n  const notes: string[] = [];\n  for (const warning of detection.warnings) {\n    notes.push(`- ${warning}`);\n  }\n  for (const plan of detection.plans) {\n    notes.push(\n      [\n        `- Matrix encrypted-state migration is pending for account \"${plan.accountId}\".`,\n        `- Legacy crypto store: ${plan.legacyCryptoPath}`,\n        `- New recovery key file: ${plan.recoveryKeyPath}`,\n        `- Migration state file: ${plan.statePath}`,\n        '- Run \"openclaw doctor --fix\" to extract any saved backup key now. Backed-up room keys will restore automatically on next gateway start.',\n      ].join(\"\\n\"),\n    );\n  }\n  return notes;\n}\n\nexport async function collectMatrixInstallPathWarnings(cfg: OpenClawConfig): Promise<string[]> {\n  const issue = await detectPluginInstallPathIssue({\n    pluginId: \"matrix\",\n    install: cfg.plugins?.installs?.matrix,\n  });\n  if (!issue) {\n    return [];\n  }\n  return formatPluginInstallPathIssue({\n    issue,\n    pluginLabel: \"Matrix\",\n    defaultInstallCommand: \"openclaw plugins install @openclaw/matrix\",\n  }).map((entry) => `- ${entry}`);\n}\n\nexport async function cleanStaleMatrixPluginConfig(cfg: OpenClawConfig) {\n  const issue = await detectPluginInstallPathIssue({\n    pluginId: \"matrix\",\n    install: cfg.plugins?.installs?.matrix,\n  });\n  if (!issue || issue.kind !== \"missing-path\") {\n    return { config: cfg, changes: [] };\n  }\n  const { config, actions } = removePluginFromConfig(cfg, \"matrix\");\n  const removed: string[] = [];\n  if (actions.install) {\n    removed.push(\"install record\");\n  }\n  if (actions.loadPath) {\n    removed.push(\"load path\");\n  }\n  if (actions.entry) {\n    removed.push(\"plugin entry\");\n  }\n  if (actions.allowlist) {\n    removed.push(\"allowlist entry\");\n  }\n  if (removed.length === 0) {\n    return { config: cfg, changes: [] };\n  }\n  return {\n    config,\n    changes: [\n      `Removed stale Matrix plugin references (${removed.join(\", \")}). The previous install path no longer exists: ${issue.path}`,\n    ],\n  };\n}\n\nexport async function applyMatrixDoctorRepair(params: {\n  cfg: OpenClawConfig;\n  env: NodeJS.ProcessEnv;\n}): Promise<{ changes: string[]; warnings: string[] }> {\n  const changes: string[] = [];\n  const warnings: string[] = [];\n  const migrationStatus = resolveMatrixMigrationStatus({\n    cfg: params.cfg,\n    env: params.env,\n  });\n\n  let matrixSnapshotReady = true;\n  if (migrationStatus.actionable) {\n    try {\n      const snapshot = await maybeCreateMatrixMigrationSnapshot({\n        trigger: \"doctor-fix\",\n        env: params.env,\n      });\n      changes.push(\n        `Matrix migration snapshot ${snapshot.created ? \"created\" : \"reused\"} before applying Matrix upgrades.\\n- ${snapshot.archivePath}`,\n      );\n    } catch (error) {\n      matrixSnapshotReady = false;\n      warnings.push(\n        `- Failed creating a Matrix migration snapshot before repair: ${String(error)}`,\n      );\n      warnings.push(\n        '- Skipping Matrix migration changes for now. Resolve the snapshot failure, then rerun \"openclaw doctor --fix\".',\n      );\n    }\n  } else if (migrationStatus.pending) {\n    warnings.push(\n      \"- Matrix migration warnings are present, but no on-disk Matrix mutation is actionable yet. No pre-migration snapshot was needed.\",\n    );\n  }\n\n  if (!matrixSnapshotReady) {\n    return { changes, warnings };\n  }\n\n  const matrixStateRepair = await autoMigrateLegacyMatrixState({\n    cfg: params.cfg,\n    env: params.env,\n  });\n  if (matrixStateRepair.changes.length > 0) {\n    changes.push(\n      [\n        \"Matrix plugin upgraded in place.\",\n        ...matrixStateRepair.changes.map((entry) => `- ${entry}`),\n        \"- No user action required.\",\n      ].join(\"\\n\"),\n    );\n  }\n  if (matrixStateRepair.warnings.length > 0) {\n    warnings.push(matrixStateRepair.warnings.map((entry) => `- ${entry}`).join(\"\\n\"));\n  }\n\n  const matrixCryptoRepair = await autoPrepareLegacyMatrixCrypto({\n    cfg: params.cfg,\n    env: params.env,\n  });\n  if (matrixCryptoRepair.changes.length > 0) {\n    changes.push(\n      [\n        \"Matrix encrypted-state migration prepared.\",\n        ...matrixCryptoRepair.changes.map((entry) => `- ${entry}`),\n      ].join(\"\\n\"),\n    );\n  }\n  if (matrixCryptoRepair.warnings.length > 0) {\n    warnings.push(matrixCryptoRepair.warnings.map((entry) => `- ${entry}`).join(\"\\n\"));\n  }\n\n  return { changes, warnings };\n}\n\nexport async function runMatrixDoctorSequence(params: {\n  cfg: OpenClawConfig;\n  env: NodeJS.ProcessEnv;\n  shouldRepair: boolean;\n}): Promise<{ changeNotes: string[]; warningNotes: string[] }> {\n  const warningNotes: string[] = [];\n  const changeNotes: string[] = [];\n  const installWarnings = await collectMatrixInstallPathWarnings(params.cfg);\n  if (installWarnings.length > 0) {\n    warningNotes.push(installWarnings.join(\"\\n\"));\n  }\n  if (!configMayNeedMatrixDoctorSequence(params.cfg, params.env)) {\n    return { changeNotes, warningNotes };\n  }\n\n  if (params.shouldRepair) {\n    const repair = await applyMatrixDoctorRepair({\n      cfg: params.cfg,\n      env: params.env,\n    });\n    changeNotes.push(...repair.changes);\n    warningNotes.push(...repair.warnings);\n  } else {\n    const migrationStatus = resolveMatrixMigrationStatus({\n      cfg: params.cfg,\n      env: params.env,\n    });\n    if (migrationStatus.legacyState) {\n      if (\"warning\" in migrationStatus.legacyState) {\n        warningNotes.push(`- ${migrationStatus.legacyState.warning}`);\n      } else {\n        warningNotes.push(formatMatrixLegacyStatePreview(migrationStatus.legacyState));\n      }\n    }\n    if (\n      migrationStatus.legacyCrypto.warnings.length > 0 ||\n      migrationStatus.legacyCrypto.plans.length > 0\n    ) {\n      warningNotes.push(...formatMatrixLegacyCryptoPreview(migrationStatus.legacyCrypto));\n    }\n  }\n\n  return { changeNotes, warningNotes };\n}\n\nexport const matrixDoctor: ChannelDoctorAdapter = {\n  dmAllowFromMode: \"nestedOnly\",\n  groupModel: \"sender\",\n  groupAllowFromFallbackToAllowFrom: false,\n  warnOnEmptyGroupSenderAllowlist: true,\n  legacyConfigRules: MATRIX_LEGACY_CONFIG_RULES,\n  normalizeCompatibilityConfig: normalizeMatrixCompatibilityConfig,\n  runConfigSequence: async ({ cfg, env, shouldRepair }) =>\n    await runMatrixDoctorSequence({ cfg, env, shouldRepair }),\n  cleanStaleConfig: async ({ cfg }) => await cleanStaleMatrixPluginConfig(cfg),\n};\n"],
-  "mappings": ";;;;;;;;;;;;;;;;;;;;;;;;AAAA;AAEA;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAeP,SAAS,2BAA2B,KAA8B;AAChE,QAAM,WAAW,IAAI;AACrB,SAAO,SAAS,UAAU,MAAM;AAClC;AAEA,SAAS,iCAAiC,KAA8B;AACtE,SAAO;AAAA,IACL,IAAI,SAAS,UAAU,UACvB,IAAI,SAAS,SAAS,UACtB,IAAI,SAAS,OAAO,SAAS,QAAQ,KACrC,IAAI,SAAS,MAAM,SAAS,QAAQ;AAAA,EACtC;AACF;AAEA,SAAS,uBAAuB,KAAiC;AAC/D,SAAO,OAAO,QAAQ,GAAG,EAAE;AAAA,IACzB,CAAC,CAAC,KAAK,KAAK,MAAM,IAAI,WAAW,SAAS,KAAK,OAAO,UAAU,YAAY,MAAM,KAAK;AAAA,EACzF;AACF;AAEA,SAAS,kCAAkC,KAAqB,KAAiC;AAC/F,SACE,2BAA2B,GAAG,KAC9B,iCAAiC,GAAG,KACpC,uBAAuB,GAAG;AAE9B;AAEO,SAAS,+BACd,WACQ;AACR,SAAO;AAAA,IACL;AAAA,IACA,wBAAwB,UAAU,iBAAiB,OAAO,UAAU,iBAAiB;AAAA,IACrF,0BAA0B,UAAU,gBAAgB,OAAO,UAAU,gBAAgB;AAAA,IACrF,GAAI,UAAU,gBAAgB,CAAC,KAAK,UAAU,aAAa,EAAE,IAAI,CAAC;AAAA,IAClE;AAAA,EACF,EAAE,KAAK,IAAI;AACb;AAEO,SAAS,gCACd,WACU;AACV,QAAM,QAAkB,CAAC;AACzB,aAAW,WAAW,UAAU,UAAU;AACxC,UAAM,KAAK,KAAK,OAAO,EAAE;AAAA,EAC3B;AACA,aAAW,QAAQ,UAAU,OAAO;AAClC,UAAM;AAAA,MACJ;AAAA,QACE,8DAA8D,KAAK,SAAS;AAAA,QAC5E,0BAA0B,KAAK,gBAAgB;AAAA,QAC/C,4BAA4B,KAAK,eAAe;AAAA,QAChD,2BAA2B,KAAK,SAAS;AAAA,QACzC;AAAA,MACF,EAAE,KAAK,IAAI;AAAA,IACb;AAAA,EACF;AACA,SAAO;AACT;AAEA,eAAsB,iCAAiC,KAAwC;AAC7F,QAAM,QAAQ,MAAM,6BAA6B;AAAA,IAC/C,UAAU;AAAA,IACV,SAAS,IAAI,SAAS,UAAU;AAAA,EAClC,CAAC;AACD,MAAI,CAAC,OAAO;AACV,WAAO,CAAC;AAAA,EACV;AACA,SAAO,6BAA6B;AAAA,IAClC;AAAA,IACA,aAAa;AAAA,IACb,uBAAuB;AAAA,EACzB,CAAC,EAAE,IAAI,CAAC,UAAU,KAAK,KAAK,EAAE;AAChC;AAEA,eAAsB,6BAA6B,KAAqB;AACtE,QAAM,QAAQ,MAAM,6BAA6B;AAAA,IAC/C,UAAU;AAAA,IACV,SAAS,IAAI,SAAS,UAAU;AAAA,EAClC,CAAC;AACD,MAAI,CAAC,SAAS,MAAM,SAAS,gBAAgB;AAC3C,WAAO,EAAE,QAAQ,KAAK,SAAS,CAAC,EAAE;AAAA,EACpC;AACA,QAAM,EAAE,QAAQ,QAAQ,IAAI,uBAAuB,KAAK,QAAQ;AAChE,QAAM,UAAoB,CAAC;AAC3B,MAAI,QAAQ,SAAS;AACnB,YAAQ,KAAK,gBAAgB;AAAA,EAC/B;AACA,MAAI,QAAQ,UAAU;AACpB,YAAQ,KAAK,WAAW;AAAA,EAC1B;AACA,MAAI,QAAQ,OAAO;AACjB,YAAQ,KAAK,cAAc;AAAA,EAC7B;AACA,MAAI,QAAQ,WAAW;AACrB,YAAQ,KAAK,iBAAiB;AAAA,EAChC;AACA,MAAI,QAAQ,WAAW,GAAG;AACxB,WAAO,EAAE,QAAQ,KAAK,SAAS,CAAC,EAAE;AAAA,EACpC;AACA,SAAO;AAAA,IACL;AAAA,IACA,SAAS;AAAA,MACP,2CAA2C,QAAQ,KAAK,IAAI,CAAC,kDAAkD,MAAM,IAAI;AAAA,IAC3H;AAAA,EACF;AACF;AAEA,eAAsB,wBAAwB,QAGS;AACrD,QAAM,UAAoB,CAAC;AAC3B,QAAM,WAAqB,CAAC;AAC5B,QAAM,kBAAkB,6BAA6B;AAAA,IACnD,KAAK,OAAO;AAAA,IACZ,KAAK,OAAO;AAAA,EACd,CAAC;AAED,MAAI,sBAAsB;AAC1B,MAAI,gBAAgB,YAAY;AAC9B,QAAI;AACF,YAAM,WAAW,MAAM,mCAAmC;AAAA,QACxD,SAAS;AAAA,QACT,KAAK,OAAO;AAAA,MACd,CAAC;AACD,cAAQ;AAAA,QACN,6BAA6B,SAAS,UAAU,YAAY,QAAQ;AAAA,IAAwC,SAAS,WAAW;AAAA,MAClI;AAAA,IACF,SAAS,OAAO;AACd,4BAAsB;AACtB,eAAS;AAAA,QACP,gEAAgE,OAAO,KAAK,CAAC;AAAA,MAC/E;AACA,eAAS;AAAA,QACP;AAAA,MACF;AAAA,IACF;AAAA,EACF,WAAW,gBAAgB,SAAS;AAClC,aAAS;AAAA,MACP;AAAA,IACF;AAAA,EACF;AAEA,MAAI,CAAC,qBAAqB;AACxB,WAAO,EAAE,SAAS,SAAS;AAAA,EAC7B;AAEA,QAAM,oBAAoB,MAAM,6BAA6B;AAAA,IAC3D,KAAK,OAAO;AAAA,IACZ,KAAK,OAAO;AAAA,EACd,CAAC;AACD,MAAI,kBAAkB,QAAQ,SAAS,GAAG;AACxC,YAAQ;AAAA,MACN;AAAA,QACE;AAAA,QACA,GAAG,kBAAkB,QAAQ,IAAI,CAAC,UAAU,KAAK,KAAK,EAAE;AAAA,QACxD;AAAA,MACF,EAAE,KAAK,IAAI;AAAA,IACb;AAAA,EACF;AACA,MAAI,kBAAkB,SAAS,SAAS,GAAG;AACzC,aAAS,KAAK,kBAAkB,SAAS,IAAI,CAAC,UAAU,KAAK,KAAK,EAAE,EAAE,KAAK,IAAI,CAAC;AAAA,EAClF;AAEA,QAAM,qBAAqB,MAAM,8BAA8B;AAAA,IAC7D,KAAK,OAAO;AAAA,IACZ,KAAK,OAAO;AAAA,EACd,CAAC;AACD,MAAI,mBAAmB,QAAQ,SAAS,GAAG;AACzC,YAAQ;AAAA,MACN;AAAA,QACE;AAAA,QACA,GAAG,mBAAmB,QAAQ,IAAI,CAAC,UAAU,KAAK,KAAK,EAAE;AAAA,MAC3D,EAAE,KAAK,IAAI;AAAA,IACb;AAAA,EACF;AACA,MAAI,mBAAmB,SAAS,SAAS,GAAG;AAC1C,aAAS,KAAK,mBAAmB,SAAS,IAAI,CAAC,UAAU,KAAK,KAAK,EAAE,EAAE,KAAK,IAAI,CAAC;AAAA,EACnF;AAEA,SAAO,EAAE,SAAS,SAAS;AAC7B;AAEA,eAAsB,wBAAwB,QAIiB;AAC7D,QAAM,eAAyB,CAAC;AAChC,QAAM,cAAwB,CAAC;AAC/B,QAAM,kBAAkB,MAAM,iCAAiC,OAAO,GAAG;AACzE,MAAI,gBAAgB,SAAS,GAAG;AAC9B,iBAAa,KAAK,gBAAgB,KAAK,IAAI,CAAC;AAAA,EAC9C;AACA,MAAI,CAAC,kCAAkC,OAAO,KAAK,OAAO,GAAG,GAAG;AAC9D,WAAO,EAAE,aAAa,aAAa;AAAA,EACrC;AAEA,MAAI,OAAO,cAAc;AACvB,UAAM,SAAS,MAAM,wBAAwB;AAAA,MAC3C,KAAK,OAAO;AAAA,MACZ,KAAK,OAAO;AAAA,IACd,CAAC;AACD,gBAAY,KAAK,GAAG,OAAO,OAAO;AAClC,iBAAa,KAAK,GAAG,OAAO,QAAQ;AAAA,EACtC,OAAO;AACL,UAAM,kBAAkB,6BAA6B;AAAA,MACnD,KAAK,OAAO;AAAA,MACZ,KAAK,OAAO;AAAA,IACd,CAAC;AACD,QAAI,gBAAgB,aAAa;AAC/B,UAAI,aAAa,gBAAgB,aAAa;AAC5C,qBAAa,KAAK,KAAK,gBAAgB,YAAY,OAAO,EAAE;AAAA,MAC9D,OAAO;AACL,qBAAa,KAAK,+BAA+B,gBAAgB,WAAW,CAAC;AAAA,MAC/E;AAAA,IACF;AACA,QACE,gBAAgB,aAAa,SAAS,SAAS,KAC/C,gBAAgB,aAAa,MAAM,SAAS,GAC5C;AACA,mBAAa,KAAK,GAAG,gCAAgC,gBAAgB,YAAY,CAAC;AAAA,IACpF;AAAA,EACF;AAEA,SAAO,EAAE,aAAa,aAAa;AACrC;AAEO,IAAM,eAAqC;AAAA,EAChD,iBAAiB;AAAA,EACjB,YAAY;AAAA,EACZ,mCAAmC;AAAA,EACnC,iCAAiC;AAAA,EACjC;AAAA,EACA;AAAA,EACA,mBAAmB,OAAO,EAAE,KAAK,KAAK,aAAa,MACjD,MAAM,wBAAwB,EAAE,KAAK,KAAK,aAAa,CAAC;AAAA,EAC1D,kBAAkB,OAAO,EAAE,IAAI,MAAM,MAAM,6BAA6B,GAAG;AAC7E;",
-  "names": []
-}

package/dist/chunk-7XXLU33Y.js

@@ -1,76 +0,0 @@
-import {
-  formatMatrixErrorMessage
-} from "./chunk-UWPHOAOC.js";
-import {
-  init_shims
-} from "./chunk-7FLQSTPG.js";
-
-// src/plugin-entry.runtime.ts
-init_shims();
-import { normalizeOptionalString } from "openclaw/plugin-sdk/text-runtime";
-function sendError(respond, err) {
-  respond(false, { error: formatMatrixErrorMessage(err) });
-}
-async function ensureMatrixCryptoRuntime(...args) {
-  const { ensureMatrixCryptoRuntime: ensureRuntime } = await import("./src/matrix/deps.js");
-  await ensureRuntime(...args);
-}
-async function handleVerifyRecoveryKey({
-  params,
-  respond
-}) {
-  try {
-    const { verifyMatrixRecoveryKey } = await import("./src/matrix/actions/verification.js");
-    const key = normalizeOptionalString(params?.key);
-    if (!key) {
-      respond(false, { error: "key required" });
-      return;
-    }
-    const accountId = normalizeOptionalString(params?.accountId);
-    const result = await verifyMatrixRecoveryKey(key, { accountId });
-    respond(result.success, result);
-  } catch (err) {
-    sendError(respond, err);
-  }
-}
-async function handleVerificationBootstrap({
-  params,
-  respond
-}) {
-  try {
-    const { bootstrapMatrixVerification } = await import("./src/matrix/actions/verification.js");
-    const accountId = normalizeOptionalString(params?.accountId);
-    const recoveryKey = typeof params?.recoveryKey === "string" ? params.recoveryKey : void 0;
-    const forceResetCrossSigning = params?.forceResetCrossSigning === true;
-    const result = await bootstrapMatrixVerification({
-      accountId,
-      recoveryKey,
-      forceResetCrossSigning
-    });
-    respond(result.success, result);
-  } catch (err) {
-    sendError(respond, err);
-  }
-}
-async function handleVerificationStatus({
-  params,
-  respond
-}) {
-  try {
-    const { getMatrixVerificationStatus } = await import("./src/matrix/actions/verification.js");
-    const accountId = normalizeOptionalString(params?.accountId);
-    const includeRecoveryKey = params?.includeRecoveryKey === true;
-    const status = await getMatrixVerificationStatus({ accountId, includeRecoveryKey });
-    respond(true, status);
-  } catch (err) {
-    sendError(respond, err);
-  }
-}
-
-export {
-  ensureMatrixCryptoRuntime,
-  handleVerifyRecoveryKey,
-  handleVerificationBootstrap,
-  handleVerificationStatus
-};
-//# sourceMappingURL=chunk-7XXLU33Y.js.map

package/dist/chunk-7XXLU33Y.js.map

@@ -1,7 +0,0 @@
-{
-  "version": 3,
-  "sources": ["../src/plugin-entry.runtime.ts"],
-  "sourcesContent": ["import type { GatewayRequestHandlerOptions } from \"openclaw/plugin-sdk/gateway-runtime\";\nimport { normalizeOptionalString } from \"openclaw/plugin-sdk/text-runtime\";\nimport { formatMatrixErrorMessage } from \"./matrix/errors.js\";\n\nfunction sendError(respond: (ok: boolean, payload?: unknown) => void, err: unknown) {\n  respond(false, { error: formatMatrixErrorMessage(err) });\n}\n\nexport async function ensureMatrixCryptoRuntime(\n  ...args: Parameters<typeof import(\"./matrix/deps.js\").ensureMatrixCryptoRuntime>\n): Promise<void> {\n  const { ensureMatrixCryptoRuntime: ensureRuntime } = await import(\"./matrix/deps.js\");\n  await ensureRuntime(...args);\n}\n\nexport async function handleVerifyRecoveryKey({\n  params,\n  respond,\n}: GatewayRequestHandlerOptions): Promise<void> {\n  try {\n    const { verifyMatrixRecoveryKey } = await import(\"./matrix/actions/verification.js\");\n    const key = normalizeOptionalString(params?.key);\n    if (!key) {\n      respond(false, { error: \"key required\" });\n      return;\n    }\n    const accountId = normalizeOptionalString(params?.accountId);\n    const result = await verifyMatrixRecoveryKey(key, { accountId });\n    respond(result.success, result);\n  } catch (err) {\n    sendError(respond, err);\n  }\n}\n\nexport async function handleVerificationBootstrap({\n  params,\n  respond,\n}: GatewayRequestHandlerOptions): Promise<void> {\n  try {\n    const { bootstrapMatrixVerification } = await import(\"./matrix/actions/verification.js\");\n    const accountId = normalizeOptionalString(params?.accountId);\n    const recoveryKey = typeof params?.recoveryKey === \"string\" ? params.recoveryKey : undefined;\n    const forceResetCrossSigning = params?.forceResetCrossSigning === true;\n    const result = await bootstrapMatrixVerification({\n      accountId,\n      recoveryKey,\n      forceResetCrossSigning,\n    });\n    respond(result.success, result);\n  } catch (err) {\n    sendError(respond, err);\n  }\n}\n\nexport async function handleVerificationStatus({\n  params,\n  respond,\n}: GatewayRequestHandlerOptions): Promise<void> {\n  try {\n    const { getMatrixVerificationStatus } = await import(\"./matrix/actions/verification.js\");\n    const accountId = normalizeOptionalString(params?.accountId);\n    const includeRecoveryKey = params?.includeRecoveryKey === true;\n    const status = await getMatrixVerificationStatus({ accountId, includeRecoveryKey });\n    respond(true, status);\n  } catch (err) {\n    sendError(respond, err);\n  }\n}\n"],
-  "mappings": ";;;;;;;;AAAA;AACA,SAAS,+BAA+B;AAGxC,SAAS,UAAU,SAAmD,KAAc;AAClF,UAAQ,OAAO,EAAE,OAAO,yBAAyB,GAAG,EAAE,CAAC;AACzD;AAEA,eAAsB,6BACjB,MACY;AACf,QAAM,EAAE,2BAA2B,cAAc,IAAI,MAAM,OAAO,sBAAkB;AACpF,QAAM,cAAc,GAAG,IAAI;AAC7B;AAEA,eAAsB,wBAAwB;AAAA,EAC5C;AAAA,EACA;AACF,GAAgD;AAC9C,MAAI;AACF,UAAM,EAAE,wBAAwB,IAAI,MAAM,OAAO,sCAAkC;AACnF,UAAM,MAAM,wBAAwB,QAAQ,GAAG;AAC/C,QAAI,CAAC,KAAK;AACR,cAAQ,OAAO,EAAE,OAAO,eAAe,CAAC;AACxC;AAAA,IACF;AACA,UAAM,YAAY,wBAAwB,QAAQ,SAAS;AAC3D,UAAM,SAAS,MAAM,wBAAwB,KAAK,EAAE,UAAU,CAAC;AAC/D,YAAQ,OAAO,SAAS,MAAM;AAAA,EAChC,SAAS,KAAK;AACZ,cAAU,SAAS,GAAG;AAAA,EACxB;AACF;AAEA,eAAsB,4BAA4B;AAAA,EAChD;AAAA,EACA;AACF,GAAgD;AAC9C,MAAI;AACF,UAAM,EAAE,4BAA4B,IAAI,MAAM,OAAO,sCAAkC;AACvF,UAAM,YAAY,wBAAwB,QAAQ,SAAS;AAC3D,UAAM,cAAc,OAAO,QAAQ,gBAAgB,WAAW,OAAO,cAAc;AACnF,UAAM,yBAAyB,QAAQ,2BAA2B;AAClE,UAAM,SAAS,MAAM,4BAA4B;AAAA,MAC/C;AAAA,MACA;AAAA,MACA;AAAA,IACF,CAAC;AACD,YAAQ,OAAO,SAAS,MAAM;AAAA,EAChC,SAAS,KAAK;AACZ,cAAU,SAAS,GAAG;AAAA,EACxB;AACF;AAEA,eAAsB,yBAAyB;AAAA,EAC7C;AAAA,EACA;AACF,GAAgD;AAC9C,MAAI;AACF,UAAM,EAAE,4BAA4B,IAAI,MAAM,OAAO,sCAAkC;AACvF,UAAM,YAAY,wBAAwB,QAAQ,SAAS;AAC3D,UAAM,qBAAqB,QAAQ,uBAAuB;AAC1D,UAAM,SAAS,MAAM,4BAA4B,EAAE,WAAW,mBAAmB,CAAC;AAClF,YAAQ,MAAM,MAAM;AAAA,EACtB,SAAS,KAAK;AACZ,cAAU,SAAS,GAAG;AAAA,EACxB;AACF;",
-  "names": []
-}

package/dist/chunk-AAO7BQEV.js

@@ -1,258 +0,0 @@
-import {
-  isMatrixDeviceOwnerVerified
-} from "./chunk-H6YVV7GE.js";
-import {
-  isRepairableSecretStorageAccessError
-} from "./chunk-FQTLJO4W.js";
-import {
-  CryptoEvent
-} from "./chunk-FQ4R7IOX.js";
-import {
-  LogService
-} from "./chunk-BMFZL2P4.js";
-import {
-  init_shims
-} from "./chunk-7FLQSTPG.js";
-
-// src/matrix/sdk/crypto-bootstrap.ts
-init_shims();
-var MatrixCryptoBootstrapper = class {
-  constructor(deps) {
-    this.deps = deps;
-    this.verificationHandlerRegistered = false;
-  }
-  async bootstrap(crypto, options = {}) {
-    const strict = options.strict === true;
-    this.registerVerificationRequestHandler(crypto);
-    await this.bootstrapSecretStorage(crypto, {
-      strict,
-      allowSecretStorageRecreateWithoutRecoveryKey: options.allowSecretStorageRecreateWithoutRecoveryKey === true
-    });
-    const crossSigning = await this.bootstrapCrossSigning(crypto, {
-      forceResetCrossSigning: options.forceResetCrossSigning === true,
-      allowAutomaticCrossSigningReset: options.allowAutomaticCrossSigningReset !== false,
-      allowSecretStorageRecreateWithoutRecoveryKey: options.allowSecretStorageRecreateWithoutRecoveryKey === true,
-      strict
-    });
-    await this.bootstrapSecretStorage(crypto, {
-      strict,
-      allowSecretStorageRecreateWithoutRecoveryKey: options.allowSecretStorageRecreateWithoutRecoveryKey === true
-    });
-    const ownDeviceVerified = await this.ensureOwnDeviceTrust(crypto, strict);
-    return {
-      crossSigningReady: crossSigning.ready,
-      crossSigningPublished: crossSigning.published,
-      ownDeviceVerified
-    };
-  }
-  createSigningKeysUiAuthCallback(params) {
-    return async (makeRequest) => {
-      try {
-        return await makeRequest(null);
-      } catch {
-        try {
-          return await makeRequest({ type: "m.login.dummy" });
-        } catch {
-          if (!params.password?.trim()) {
-            throw new Error(
-              "Matrix cross-signing key upload requires UIA; provide matrix.password for m.login.password fallback"
-            );
-          }
-          return await makeRequest({
-            type: "m.login.password",
-            identifier: { type: "m.id.user", user: params.userId },
-            password: params.password
-          });
-        }
-      }
-    };
-  }
-  async bootstrapCrossSigning(crypto, options) {
-    const userId = await this.deps.getUserId();
-    const authUploadDeviceSigningKeys = this.createSigningKeysUiAuthCallback({
-      userId,
-      password: this.deps.getPassword?.()
-    });
-    const hasPublishedCrossSigningKeys = async () => {
-      if (typeof crypto.userHasCrossSigningKeys !== "function") {
-        return true;
-      }
-      try {
-        return await crypto.userHasCrossSigningKeys(userId, true);
-      } catch {
-        return false;
-      }
-    };
-    const isCrossSigningReady = async () => {
-      if (typeof crypto.isCrossSigningReady !== "function") {
-        return true;
-      }
-      try {
-        return await crypto.isCrossSigningReady();
-      } catch {
-        return false;
-      }
-    };
-    const finalize = async () => {
-      const ready = await isCrossSigningReady();
-      const published = await hasPublishedCrossSigningKeys();
-      if (ready && published) {
-        LogService.info("MatrixClientLite", "Cross-signing bootstrap complete");
-        return { ready, published };
-      }
-      const message = "Cross-signing bootstrap finished but server keys are still not published";
-      LogService.warn("MatrixClientLite", message);
-      if (options.strict) {
-        throw new Error(message);
-      }
-      return { ready, published };
-    };
-    if (options.forceResetCrossSigning) {
-      try {
-        await crypto.bootstrapCrossSigning({
-          setupNewCrossSigning: true,
-          authUploadDeviceSigningKeys
-        });
-      } catch (err) {
-        LogService.warn("MatrixClientLite", "Forced cross-signing reset failed:", err);
-        if (options.strict) {
-          throw err instanceof Error ? err : new Error(String(err));
-        }
-        return { ready: false, published: false };
-      }
-      return await finalize();
-    }
-    try {
-      await crypto.bootstrapCrossSigning({
-        authUploadDeviceSigningKeys
-      });
-    } catch (err) {
-      const shouldRepairSecretStorage = options.allowSecretStorageRecreateWithoutRecoveryKey && isRepairableSecretStorageAccessError(err);
-      if (shouldRepairSecretStorage) {
-        LogService.warn(
-          "MatrixClientLite",
-          "Cross-signing bootstrap could not unlock secret storage; recreating secret storage during explicit bootstrap and retrying."
-        );
-        await this.deps.recoveryKeyStore.bootstrapSecretStorageWithRecoveryKey(crypto, {
-          allowSecretStorageRecreateWithoutRecoveryKey: true,
-          forceNewSecretStorage: true
-        });
-        await crypto.bootstrapCrossSigning({
-          authUploadDeviceSigningKeys
-        });
-      } else if (!options.allowAutomaticCrossSigningReset) {
-        LogService.warn(
-          "MatrixClientLite",
-          "Initial cross-signing bootstrap failed and automatic reset is disabled:",
-          err
-        );
-        return { ready: false, published: false };
-      } else {
-        LogService.warn(
-          "MatrixClientLite",
-          "Initial cross-signing bootstrap failed, trying reset:",
-          err
-        );
-        try {
-          await crypto.bootstrapCrossSigning({
-            setupNewCrossSigning: true,
-            authUploadDeviceSigningKeys
-          });
-        } catch (resetErr) {
-          LogService.warn("MatrixClientLite", "Failed to bootstrap cross-signing:", resetErr);
-          if (options.strict) {
-            throw resetErr instanceof Error ? resetErr : new Error(String(resetErr));
-          }
-          return { ready: false, published: false };
-        }
-      }
-    }
-    const firstPassReady = await isCrossSigningReady();
-    const firstPassPublished = await hasPublishedCrossSigningKeys();
-    if (firstPassReady && firstPassPublished) {
-      LogService.info("MatrixClientLite", "Cross-signing bootstrap complete");
-      return { ready: true, published: true };
-    }
-    if (!options.allowAutomaticCrossSigningReset) {
-      return { ready: firstPassReady, published: firstPassPublished };
-    }
-    try {
-      await crypto.bootstrapCrossSigning({
-        setupNewCrossSigning: true,
-        authUploadDeviceSigningKeys
-      });
-    } catch (err) {
-      LogService.warn("MatrixClientLite", "Fallback cross-signing bootstrap failed:", err);
-      if (options.strict) {
-        throw err instanceof Error ? err : new Error(String(err));
-      }
-      return { ready: false, published: false };
-    }
-    return await finalize();
-  }
-  async bootstrapSecretStorage(crypto, options) {
-    try {
-      await this.deps.recoveryKeyStore.bootstrapSecretStorageWithRecoveryKey(crypto, {
-        allowSecretStorageRecreateWithoutRecoveryKey: options.allowSecretStorageRecreateWithoutRecoveryKey
-      });
-      LogService.info("MatrixClientLite", "Secret storage bootstrap complete");
-    } catch (err) {
-      LogService.warn("MatrixClientLite", "Failed to bootstrap secret storage:", err);
-      if (options.strict) {
-        throw err instanceof Error ? err : new Error(String(err));
-      }
-    }
-  }
-  registerVerificationRequestHandler(crypto) {
-    if (this.verificationHandlerRegistered) {
-      return;
-    }
-    this.verificationHandlerRegistered = true;
-    crypto.on(CryptoEvent.VerificationRequestReceived, async (request) => {
-      const verificationRequest = request;
-      try {
-        this.deps.verificationManager.trackVerificationRequest(verificationRequest);
-      } catch (err) {
-        LogService.warn(
-          "MatrixClientLite",
-          `Failed to track verification request from ${verificationRequest.otherUserId}:`,
-          err
-        );
-      }
-    });
-    this.deps.decryptBridge.bindCryptoRetrySignals(crypto);
-    LogService.info("MatrixClientLite", "Verification request handler registered");
-  }
-  async ensureOwnDeviceTrust(crypto, strict = false) {
-    const deviceId = this.deps.getDeviceId()?.trim();
-    if (!deviceId) {
-      return null;
-    }
-    const userId = await this.deps.getUserId();
-    const deviceStatus = typeof crypto.getDeviceVerificationStatus === "function" ? await crypto.getDeviceVerificationStatus(userId, deviceId).catch(() => null) : null;
-    const alreadyVerified = isMatrixDeviceOwnerVerified(deviceStatus);
-    if (alreadyVerified) {
-      return true;
-    }
-    if (typeof crypto.setDeviceVerified === "function") {
-      await crypto.setDeviceVerified(userId, deviceId, true);
-    }
-    if (typeof crypto.crossSignDevice === "function") {
-      const crossSigningReady = typeof crypto.isCrossSigningReady === "function" ? await crypto.isCrossSigningReady() : true;
-      if (crossSigningReady) {
-        await crypto.crossSignDevice(deviceId);
-      }
-    }
-    const refreshedStatus = typeof crypto.getDeviceVerificationStatus === "function" ? await crypto.getDeviceVerificationStatus(userId, deviceId).catch(() => null) : null;
-    const verified = isMatrixDeviceOwnerVerified(refreshedStatus);
-    if (!verified && strict) {
-      throw new Error(`Matrix own device ${deviceId} is not verified by its owner after bootstrap`);
-    }
-    return verified;
-  }
-};
-
-export {
-  MatrixCryptoBootstrapper
-};
-//# sourceMappingURL=chunk-AAO7BQEV.js.map

package/dist/chunk-AAO7BQEV.js.map

@@ -1,7 +0,0 @@
-{
-  "version": 3,
-  "sources": ["../src/matrix/sdk/crypto-bootstrap.ts"],
-  "sourcesContent": ["import { CryptoEvent } from \"@archipelagolab/lobi-js-sdk/lib/crypto-api/CryptoEvent.js\";\nimport type { MatrixDecryptBridge } from \"./decrypt-bridge.js\";\nimport { LogService } from \"./logger.js\";\nimport type { MatrixRecoveryKeyStore } from \"./recovery-key-store.js\";\nimport { isRepairableSecretStorageAccessError } from \"./recovery-key-store.js\";\nimport type {\n  MatrixAuthDict,\n  MatrixCryptoBootstrapApi,\n  MatrixRawEvent,\n  MatrixUiAuthCallback,\n} from \"./types.js\";\nimport type {\n  MatrixVerificationManager,\n  MatrixVerificationRequestLike,\n} from \"./verification-manager.js\";\nimport { isMatrixDeviceOwnerVerified } from \"./verification-status.js\";\n\nexport type MatrixCryptoBootstrapperDeps<TRawEvent extends MatrixRawEvent> = {\n  getUserId: () => Promise<string>;\n  getPassword?: () => string | undefined;\n  getDeviceId: () => string | null | undefined;\n  verificationManager: MatrixVerificationManager;\n  recoveryKeyStore: MatrixRecoveryKeyStore;\n  decryptBridge: Pick<MatrixDecryptBridge<TRawEvent>, \"bindCryptoRetrySignals\">;\n};\n\nexport type MatrixCryptoBootstrapOptions = {\n  forceResetCrossSigning?: boolean;\n  allowAutomaticCrossSigningReset?: boolean;\n  allowSecretStorageRecreateWithoutRecoveryKey?: boolean;\n  strict?: boolean;\n};\n\nexport type MatrixCryptoBootstrapResult = {\n  crossSigningReady: boolean;\n  crossSigningPublished: boolean;\n  ownDeviceVerified: boolean | null;\n};\n\nexport class MatrixCryptoBootstrapper<TRawEvent extends MatrixRawEvent> {\n  private verificationHandlerRegistered = false;\n\n  constructor(private readonly deps: MatrixCryptoBootstrapperDeps<TRawEvent>) {}\n\n  async bootstrap(\n    crypto: MatrixCryptoBootstrapApi,\n    options: MatrixCryptoBootstrapOptions = {},\n  ): Promise<MatrixCryptoBootstrapResult> {\n    const strict = options.strict === true;\n    // Register verification listeners before expensive bootstrap work so incoming requests\n    // are not missed during startup.\n    this.registerVerificationRequestHandler(crypto);\n    await this.bootstrapSecretStorage(crypto, {\n      strict,\n      allowSecretStorageRecreateWithoutRecoveryKey:\n        options.allowSecretStorageRecreateWithoutRecoveryKey === true,\n    });\n    const crossSigning = await this.bootstrapCrossSigning(crypto, {\n      forceResetCrossSigning: options.forceResetCrossSigning === true,\n      allowAutomaticCrossSigningReset: options.allowAutomaticCrossSigningReset !== false,\n      allowSecretStorageRecreateWithoutRecoveryKey:\n        options.allowSecretStorageRecreateWithoutRecoveryKey === true,\n      strict,\n    });\n    await this.bootstrapSecretStorage(crypto, {\n      strict,\n      allowSecretStorageRecreateWithoutRecoveryKey:\n        options.allowSecretStorageRecreateWithoutRecoveryKey === true,\n    });\n    const ownDeviceVerified = await this.ensureOwnDeviceTrust(crypto, strict);\n    return {\n      crossSigningReady: crossSigning.ready,\n      crossSigningPublished: crossSigning.published,\n      ownDeviceVerified,\n    };\n  }\n\n  private createSigningKeysUiAuthCallback(params: {\n    userId: string;\n    password?: string;\n  }): MatrixUiAuthCallback {\n    return async <T>(makeRequest: (authData: MatrixAuthDict | null) => Promise<T>): Promise<T> => {\n      try {\n        return await makeRequest(null);\n      } catch {\n        // Some homeservers require an explicit dummy UIA stage even when no user interaction is needed.\n        try {\n          return await makeRequest({ type: \"m.login.dummy\" });\n        } catch {\n          if (!params.password?.trim()) {\n            throw new Error(\n              \"Matrix cross-signing key upload requires UIA; provide matrix.password for m.login.password fallback\",\n            );\n          }\n          return await makeRequest({\n            type: \"m.login.password\",\n            identifier: { type: \"m.id.user\", user: params.userId },\n            password: params.password,\n          });\n        }\n      }\n    };\n  }\n\n  private async bootstrapCrossSigning(\n    crypto: MatrixCryptoBootstrapApi,\n    options: {\n      forceResetCrossSigning: boolean;\n      allowAutomaticCrossSigningReset: boolean;\n      allowSecretStorageRecreateWithoutRecoveryKey: boolean;\n      strict: boolean;\n    },\n  ): Promise<{ ready: boolean; published: boolean }> {\n    const userId = await this.deps.getUserId();\n    const authUploadDeviceSigningKeys = this.createSigningKeysUiAuthCallback({\n      userId,\n      password: this.deps.getPassword?.(),\n    });\n    const hasPublishedCrossSigningKeys = async (): Promise<boolean> => {\n      if (typeof crypto.userHasCrossSigningKeys !== \"function\") {\n        return true;\n      }\n      try {\n        return await crypto.userHasCrossSigningKeys(userId, true);\n      } catch {\n        return false;\n      }\n    };\n    const isCrossSigningReady = async (): Promise<boolean> => {\n      if (typeof crypto.isCrossSigningReady !== \"function\") {\n        return true;\n      }\n      try {\n        return await crypto.isCrossSigningReady();\n      } catch {\n        return false;\n      }\n    };\n\n    const finalize = async (): Promise<{ ready: boolean; published: boolean }> => {\n      const ready = await isCrossSigningReady();\n      const published = await hasPublishedCrossSigningKeys();\n      if (ready && published) {\n        LogService.info(\"MatrixClientLite\", \"Cross-signing bootstrap complete\");\n        return { ready, published };\n      }\n      const message = \"Cross-signing bootstrap finished but server keys are still not published\";\n      LogService.warn(\"MatrixClientLite\", message);\n      if (options.strict) {\n        throw new Error(message);\n      }\n      return { ready, published };\n    };\n\n    if (options.forceResetCrossSigning) {\n      try {\n        await crypto.bootstrapCrossSigning({\n          setupNewCrossSigning: true,\n          authUploadDeviceSigningKeys,\n        });\n      } catch (err) {\n        LogService.warn(\"MatrixClientLite\", \"Forced cross-signing reset failed:\", err);\n        if (options.strict) {\n          throw err instanceof Error ? err : new Error(String(err));\n        }\n        return { ready: false, published: false };\n      }\n      return await finalize();\n    }\n\n    // First pass: preserve existing cross-signing identity and ensure public keys are uploaded.\n    try {\n      await crypto.bootstrapCrossSigning({\n        authUploadDeviceSigningKeys,\n      });\n    } catch (err) {\n      const shouldRepairSecretStorage =\n        options.allowSecretStorageRecreateWithoutRecoveryKey &&\n        isRepairableSecretStorageAccessError(err);\n      if (shouldRepairSecretStorage) {\n        LogService.warn(\n          \"MatrixClientLite\",\n          \"Cross-signing bootstrap could not unlock secret storage; recreating secret storage during explicit bootstrap and retrying.\",\n        );\n        await this.deps.recoveryKeyStore.bootstrapSecretStorageWithRecoveryKey(crypto, {\n          allowSecretStorageRecreateWithoutRecoveryKey: true,\n          forceNewSecretStorage: true,\n        });\n        await crypto.bootstrapCrossSigning({\n          authUploadDeviceSigningKeys,\n        });\n      } else if (!options.allowAutomaticCrossSigningReset) {\n        LogService.warn(\n          \"MatrixClientLite\",\n          \"Initial cross-signing bootstrap failed and automatic reset is disabled:\",\n          err,\n        );\n        return { ready: false, published: false };\n      } else {\n        LogService.warn(\n          \"MatrixClientLite\",\n          \"Initial cross-signing bootstrap failed, trying reset:\",\n          err,\n        );\n        try {\n          await crypto.bootstrapCrossSigning({\n            setupNewCrossSigning: true,\n            authUploadDeviceSigningKeys,\n          });\n        } catch (resetErr) {\n          LogService.warn(\"MatrixClientLite\", \"Failed to bootstrap cross-signing:\", resetErr);\n          if (options.strict) {\n            throw resetErr instanceof Error ? resetErr : new Error(String(resetErr));\n          }\n          return { ready: false, published: false };\n        }\n      }\n    }\n\n    const firstPassReady = await isCrossSigningReady();\n    const firstPassPublished = await hasPublishedCrossSigningKeys();\n    if (firstPassReady && firstPassPublished) {\n      LogService.info(\"MatrixClientLite\", \"Cross-signing bootstrap complete\");\n      return { ready: true, published: true };\n    }\n\n    if (!options.allowAutomaticCrossSigningReset) {\n      return { ready: firstPassReady, published: firstPassPublished };\n    }\n\n    // Fallback: recover from broken local/server state by creating a fresh identity.\n    try {\n      await crypto.bootstrapCrossSigning({\n        setupNewCrossSigning: true,\n        authUploadDeviceSigningKeys,\n      });\n    } catch (err) {\n      LogService.warn(\"MatrixClientLite\", \"Fallback cross-signing bootstrap failed:\", err);\n      if (options.strict) {\n        throw err instanceof Error ? err : new Error(String(err));\n      }\n      return { ready: false, published: false };\n    }\n\n    return await finalize();\n  }\n\n  private async bootstrapSecretStorage(\n    crypto: MatrixCryptoBootstrapApi,\n    options: {\n      strict: boolean;\n      allowSecretStorageRecreateWithoutRecoveryKey: boolean;\n    },\n  ): Promise<void> {\n    try {\n      await this.deps.recoveryKeyStore.bootstrapSecretStorageWithRecoveryKey(crypto, {\n        allowSecretStorageRecreateWithoutRecoveryKey:\n          options.allowSecretStorageRecreateWithoutRecoveryKey,\n      });\n      LogService.info(\"MatrixClientLite\", \"Secret storage bootstrap complete\");\n    } catch (err) {\n      LogService.warn(\"MatrixClientLite\", \"Failed to bootstrap secret storage:\", err);\n      if (options.strict) {\n        throw err instanceof Error ? err : new Error(String(err));\n      }\n    }\n  }\n\n  private registerVerificationRequestHandler(crypto: MatrixCryptoBootstrapApi): void {\n    if (this.verificationHandlerRegistered) {\n      return;\n    }\n    this.verificationHandlerRegistered = true;\n\n    // Track incoming requests; verification lifecycle decisions live in the\n    // verification manager so acceptance/start/dedupe share one code path.\n    // Remote-user verifications are only auto-accepted. The human-operated\n    // client must explicitly choose \"Verify by emoji\" so we do not race a\n    // second SAS start from the bot side and end up with mismatched keys.\n    crypto.on(CryptoEvent.VerificationRequestReceived, async (request) => {\n      const verificationRequest = request as MatrixVerificationRequestLike;\n      try {\n        this.deps.verificationManager.trackVerificationRequest(verificationRequest);\n      } catch (err) {\n        LogService.warn(\n          \"MatrixClientLite\",\n          `Failed to track verification request from ${verificationRequest.otherUserId}:`,\n          err,\n        );\n      }\n    });\n\n    this.deps.decryptBridge.bindCryptoRetrySignals(crypto);\n    LogService.info(\"MatrixClientLite\", \"Verification request handler registered\");\n  }\n\n  private async ensureOwnDeviceTrust(\n    crypto: MatrixCryptoBootstrapApi,\n    strict = false,\n  ): Promise<boolean | null> {\n    const deviceId = this.deps.getDeviceId()?.trim();\n    if (!deviceId) {\n      return null;\n    }\n    const userId = await this.deps.getUserId();\n\n    const deviceStatus =\n      typeof crypto.getDeviceVerificationStatus === \"function\"\n        ? await crypto.getDeviceVerificationStatus(userId, deviceId).catch(() => null)\n        : null;\n    const alreadyVerified = isMatrixDeviceOwnerVerified(deviceStatus);\n\n    if (alreadyVerified) {\n      return true;\n    }\n\n    if (typeof crypto.setDeviceVerified === \"function\") {\n      await crypto.setDeviceVerified(userId, deviceId, true);\n    }\n\n    if (typeof crypto.crossSignDevice === \"function\") {\n      const crossSigningReady =\n        typeof crypto.isCrossSigningReady === \"function\"\n          ? await crypto.isCrossSigningReady()\n          : true;\n      if (crossSigningReady) {\n        await crypto.crossSignDevice(deviceId);\n      }\n    }\n\n    const refreshedStatus =\n      typeof crypto.getDeviceVerificationStatus === \"function\"\n        ? await crypto.getDeviceVerificationStatus(userId, deviceId).catch(() => null)\n        : null;\n    const verified = isMatrixDeviceOwnerVerified(refreshedStatus);\n    if (!verified && strict) {\n      throw new Error(`Matrix own device ${deviceId} is not verified by its owner after bootstrap`);\n    }\n    return verified;\n  }\n}\n"],
-  "mappings": ";;;;;;;;;;;;;;;;;AAAA;AAuCO,IAAM,2BAAN,MAAiE;AAAA,EAGtE,YAA6B,MAA+C;AAA/C;AAF7B,SAAQ,gCAAgC;AAAA,EAEqC;AAAA,EAE7E,MAAM,UACJ,QACA,UAAwC,CAAC,GACH;AACtC,UAAM,SAAS,QAAQ,WAAW;AAGlC,SAAK,mCAAmC,MAAM;AAC9C,UAAM,KAAK,uBAAuB,QAAQ;AAAA,MACxC;AAAA,MACA,8CACE,QAAQ,iDAAiD;AAAA,IAC7D,CAAC;AACD,UAAM,eAAe,MAAM,KAAK,sBAAsB,QAAQ;AAAA,MAC5D,wBAAwB,QAAQ,2BAA2B;AAAA,MAC3D,iCAAiC,QAAQ,oCAAoC;AAAA,MAC7E,8CACE,QAAQ,iDAAiD;AAAA,MAC3D;AAAA,IACF,CAAC;AACD,UAAM,KAAK,uBAAuB,QAAQ;AAAA,MACxC;AAAA,MACA,8CACE,QAAQ,iDAAiD;AAAA,IAC7D,CAAC;AACD,UAAM,oBAAoB,MAAM,KAAK,qBAAqB,QAAQ,MAAM;AACxE,WAAO;AAAA,MACL,mBAAmB,aAAa;AAAA,MAChC,uBAAuB,aAAa;AAAA,MACpC;AAAA,IACF;AAAA,EACF;AAAA,EAEQ,gCAAgC,QAGf;AACvB,WAAO,OAAU,gBAA6E;AAC5F,UAAI;AACF,eAAO,MAAM,YAAY,IAAI;AAAA,MAC/B,QAAQ;AAEN,YAAI;AACF,iBAAO,MAAM,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAAA,QACpD,QAAQ;AACN,cAAI,CAAC,OAAO,UAAU,KAAK,GAAG;AAC5B,kBAAM,IAAI;AAAA,cACR;AAAA,YACF;AAAA,UACF;AACA,iBAAO,MAAM,YAAY;AAAA,YACvB,MAAM;AAAA,YACN,YAAY,EAAE,MAAM,aAAa,MAAM,OAAO,OAAO;AAAA,YACrD,UAAU,OAAO;AAAA,UACnB,CAAC;AAAA,QACH;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAc,sBACZ,QACA,SAMiD;AACjD,UAAM,SAAS,MAAM,KAAK,KAAK,UAAU;AACzC,UAAM,8BAA8B,KAAK,gCAAgC;AAAA,MACvE;AAAA,MACA,UAAU,KAAK,KAAK,cAAc;AAAA,IACpC,CAAC;AACD,UAAM,+BAA+B,YAA8B;AACjE,UAAI,OAAO,OAAO,4BAA4B,YAAY;AACxD,eAAO;AAAA,MACT;AACA,UAAI;AACF,eAAO,MAAM,OAAO,wBAAwB,QAAQ,IAAI;AAAA,MAC1D,QAAQ;AACN,eAAO;AAAA,MACT;AAAA,IACF;AACA,UAAM,sBAAsB,YAA8B;AACxD,UAAI,OAAO,OAAO,wBAAwB,YAAY;AACpD,eAAO;AAAA,MACT;AACA,UAAI;AACF,eAAO,MAAM,OAAO,oBAAoB;AAAA,MAC1C,QAAQ;AACN,eAAO;AAAA,MACT;AAAA,IACF;AAEA,UAAM,WAAW,YAA6D;AAC5E,YAAM,QAAQ,MAAM,oBAAoB;AACxC,YAAM,YAAY,MAAM,6BAA6B;AACrD,UAAI,SAAS,WAAW;AACtB,mBAAW,KAAK,oBAAoB,kCAAkC;AACtE,eAAO,EAAE,OAAO,UAAU;AAAA,MAC5B;AACA,YAAM,UAAU;AAChB,iBAAW,KAAK,oBAAoB,OAAO;AAC3C,UAAI,QAAQ,QAAQ;AAClB,cAAM,IAAI,MAAM,OAAO;AAAA,MACzB;AACA,aAAO,EAAE,OAAO,UAAU;AAAA,IAC5B;AAEA,QAAI,QAAQ,wBAAwB;AAClC,UAAI;AACF,cAAM,OAAO,sBAAsB;AAAA,UACjC,sBAAsB;AAAA,UACtB;AAAA,QACF,CAAC;AAAA,MACH,SAAS,KAAK;AACZ,mBAAW,KAAK,oBAAoB,sCAAsC,GAAG;AAC7E,YAAI,QAAQ,QAAQ;AAClB,gBAAM,eAAe,QAAQ,MAAM,IAAI,MAAM,OAAO,GAAG,CAAC;AAAA,QAC1D;AACA,eAAO,EAAE,OAAO,OAAO,WAAW,MAAM;AAAA,MAC1C;AACA,aAAO,MAAM,SAAS;AAAA,IACxB;AAGA,QAAI;AACF,YAAM,OAAO,sBAAsB;AAAA,QACjC;AAAA,MACF,CAAC;AAAA,IACH,SAAS,KAAK;AACZ,YAAM,4BACJ,QAAQ,gDACR,qCAAqC,GAAG;AAC1C,UAAI,2BAA2B;AAC7B,mBAAW;AAAA,UACT;AAAA,UACA;AAAA,QACF;AACA,cAAM,KAAK,KAAK,iBAAiB,sCAAsC,QAAQ;AAAA,UAC7E,8CAA8C;AAAA,UAC9C,uBAAuB;AAAA,QACzB,CAAC;AACD,cAAM,OAAO,sBAAsB;AAAA,UACjC;AAAA,QACF,CAAC;AAAA,MACH,WAAW,CAAC,QAAQ,iCAAiC;AACnD,mBAAW;AAAA,UACT;AAAA,UACA;AAAA,UACA;AAAA,QACF;AACA,eAAO,EAAE,OAAO,OAAO,WAAW,MAAM;AAAA,MAC1C,OAAO;AACL,mBAAW;AAAA,UACT;AAAA,UACA;AAAA,UACA;AAAA,QACF;AACA,YAAI;AACF,gBAAM,OAAO,sBAAsB;AAAA,YACjC,sBAAsB;AAAA,YACtB;AAAA,UACF,CAAC;AAAA,QACH,SAAS,UAAU;AACjB,qBAAW,KAAK,oBAAoB,sCAAsC,QAAQ;AAClF,cAAI,QAAQ,QAAQ;AAClB,kBAAM,oBAAoB,QAAQ,WAAW,IAAI,MAAM,OAAO,QAAQ,CAAC;AAAA,UACzE;AACA,iBAAO,EAAE,OAAO,OAAO,WAAW,MAAM;AAAA,QAC1C;AAAA,MACF;AAAA,IACF;AAEA,UAAM,iBAAiB,MAAM,oBAAoB;AACjD,UAAM,qBAAqB,MAAM,6BAA6B;AAC9D,QAAI,kBAAkB,oBAAoB;AACxC,iBAAW,KAAK,oBAAoB,kCAAkC;AACtE,aAAO,EAAE,OAAO,MAAM,WAAW,KAAK;AAAA,IACxC;AAEA,QAAI,CAAC,QAAQ,iCAAiC;AAC5C,aAAO,EAAE,OAAO,gBAAgB,WAAW,mBAAmB;AAAA,IAChE;AAGA,QAAI;AACF,YAAM,OAAO,sBAAsB;AAAA,QACjC,sBAAsB;AAAA,QACtB;AAAA,MACF,CAAC;AAAA,IACH,SAAS,KAAK;AACZ,iBAAW,KAAK,oBAAoB,4CAA4C,GAAG;AACnF,UAAI,QAAQ,QAAQ;AAClB,cAAM,eAAe,QAAQ,MAAM,IAAI,MAAM,OAAO,GAAG,CAAC;AAAA,MAC1D;AACA,aAAO,EAAE,OAAO,OAAO,WAAW,MAAM;AAAA,IAC1C;AAEA,WAAO,MAAM,SAAS;AAAA,EACxB;AAAA,EAEA,MAAc,uBACZ,QACA,SAIe;AACf,QAAI;AACF,YAAM,KAAK,KAAK,iBAAiB,sCAAsC,QAAQ;AAAA,QAC7E,8CACE,QAAQ;AAAA,MACZ,CAAC;AACD,iBAAW,KAAK,oBAAoB,mCAAmC;AAAA,IACzE,SAAS,KAAK;AACZ,iBAAW,KAAK,oBAAoB,uCAAuC,GAAG;AAC9E,UAAI,QAAQ,QAAQ;AAClB,cAAM,eAAe,QAAQ,MAAM,IAAI,MAAM,OAAO,GAAG,CAAC;AAAA,MAC1D;AAAA,IACF;AAAA,EACF;AAAA,EAEQ,mCAAmC,QAAwC;AACjF,QAAI,KAAK,+BAA+B;AACtC;AAAA,IACF;AACA,SAAK,gCAAgC;AAOrC,WAAO,GAAG,YAAY,6BAA6B,OAAO,YAAY;AACpE,YAAM,sBAAsB;AAC5B,UAAI;AACF,aAAK,KAAK,oBAAoB,yBAAyB,mBAAmB;AAAA,MAC5E,SAAS,KAAK;AACZ,mBAAW;AAAA,UACT;AAAA,UACA,6CAA6C,oBAAoB,WAAW;AAAA,UAC5E;AAAA,QACF;AAAA,MACF;AAAA,IACF,CAAC;AAED,SAAK,KAAK,cAAc,uBAAuB,MAAM;AACrD,eAAW,KAAK,oBAAoB,yCAAyC;AAAA,EAC/E;AAAA,EAEA,MAAc,qBACZ,QACA,SAAS,OACgB;AACzB,UAAM,WAAW,KAAK,KAAK,YAAY,GAAG,KAAK;AAC/C,QAAI,CAAC,UAAU;AACb,aAAO;AAAA,IACT;AACA,UAAM,SAAS,MAAM,KAAK,KAAK,UAAU;AAEzC,UAAM,eACJ,OAAO,OAAO,gCAAgC,aAC1C,MAAM,OAAO,4BAA4B,QAAQ,QAAQ,EAAE,MAAM,MAAM,IAAI,IAC3E;AACN,UAAM,kBAAkB,4BAA4B,YAAY;AAEhE,QAAI,iBAAiB;AACnB,aAAO;AAAA,IACT;AAEA,QAAI,OAAO,OAAO,sBAAsB,YAAY;AAClD,YAAM,OAAO,kBAAkB,QAAQ,UAAU,IAAI;AAAA,IACvD;AAEA,QAAI,OAAO,OAAO,oBAAoB,YAAY;AAChD,YAAM,oBACJ,OAAO,OAAO,wBAAwB,aAClC,MAAM,OAAO,oBAAoB,IACjC;AACN,UAAI,mBAAmB;AACrB,cAAM,OAAO,gBAAgB,QAAQ;AAAA,MACvC;AAAA,IACF;AAEA,UAAM,kBACJ,OAAO,OAAO,gCAAgC,aAC1C,MAAM,OAAO,4BAA4B,QAAQ,QAAQ,EAAE,MAAM,MAAM,IAAI,IAC3E;AACN,UAAM,WAAW,4BAA4B,eAAe;AAC5D,QAAI,CAAC,YAAY,QAAQ;AACvB,YAAM,IAAI,MAAM,qBAAqB,QAAQ,+CAA+C;AAAA,IAC9F;AACA,WAAO;AAAA,EACT;AACF;",
-  "names": []
-}