@openclaw/matrix 2026.10.2 → 2026.10.5-beta.2

package/dist/.setup/{client-kmih04ng.mjs → client-vPPbaxNp.mjs}

@@ -1,26 +1,26 @@
 import { i as __exportAll } from "./doctor-contract-CsTNmbMa.mjs";
 import { n as getMatrixRuntimeLifecycle } from "./runtime-1kn1P6io.mjs";
-import { c as hasReadyMatrixEnvAuth, d as resolveScopedMatrixEnvConfig, f as resolveMatrixAccountStringValues, i as requiresExplicitMatrixDefaultAccount, l as resolveGlobalMatrixEnvConfig, s as resolveMatrixDefaultOrOnlyAccountId, u as resolveMatrixEnvAuthReadiness } from "./account-selection-BDeeqwwR.mjs";
-import { t as getMatrixScopedEnvVarNames } from "./env-vars-dGqak9dN.mjs";
+import { c as hasReadyMatrixEnvAuth, d as resolveScopedMatrixEnvConfig, f as resolveMatrixAccountStringValues, i as requiresExplicitMatrixDefaultAccount, l as resolveGlobalMatrixEnvConfig, s as resolveMatrixDefaultOrOnlyAccountId, u as resolveMatrixEnvAuthReadiness } from "./account-selection-Bs_jCAaG.mjs";
+import { t as getMatrixScopedEnvVarNames } from "./env-vars-aEBngJPa.mjs";
 import { o as resolveMatrixBaseConfig, r as listNormalizedMatrixAccountIds, t as findMatrixAccountConfig } from "./account-config-CRsKoMqJ.mjs";
 import { t as resolveMatrixConfigFieldPath } from "./config-paths-CnREYb1Y.mjs";
 import { n as validateMatrixHomeserverUrl, t as resolveValidatedMatrixHomeserverUrl } from "./url-validation-CF6pG6eE.mjs";
-import { i as repairCurrentTokenStorageMetaDeviceId } from "./storage-D7agewjH.mjs";
+import { i as repairCurrentTokenStorageMetaDeviceId } from "./storage-DkC6bHgA.mjs";
 import { createLazyRuntimeMethod, createLazyRuntimeModule } from "openclaw/plugin-sdk/lazy-runtime";
 import { DEFAULT_ACCOUNT_ID, normalizeAccountId, normalizeOptionalAccountId } from "openclaw/plugin-sdk/account-id";
+import { formatErrorMessage, toErrorObject, toStringifiedError } from "openclaw/plugin-sdk/error-runtime";
 import { isRecord } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { coerceSecretRef, isBuiltInDefaultSecretProviderRef, normalizeResolvedSecretInputString } from "openclaw/plugin-sdk/secret-input";
-import { formatErrorMessage, toErrorObject, toStringifiedError } from "openclaw/plugin-sdk/error-runtime";
 import { resolveOptionalIntegerOption } from "openclaw/plugin-sdk/number-runtime";
 import { ssrfPolicyFromDangerouslyAllowPrivateNetwork } from "openclaw/plugin-sdk/ssrf-runtime";
 import { requireRuntimeConfig } from "openclaw/plugin-sdk/plugin-config-runtime";
 import { AsyncLocalStorage } from "node:async_hooks";
-import { raceWithTimeout } from "openclaw/plugin-sdk/time-runtime";
+import { racePromiseWithAbortSignal, raceWithTimeout } from "openclaw/plugin-sdk/time-runtime";
 import { retryAsync } from "openclaw/plugin-sdk/retry-runtime";
 import { sleepWithAbort } from "openclaw/plugin-sdk/runtime-env";
 import { createDeferred } from "openclaw/plugin-sdk/extension-shared";
 //#region extensions/matrix/src/matrix/client/auth-request.ts
-const loadMatrixAuthClientDeps = createLazyRuntimeModule(() => Promise.all([import("./sdk-CgQGkCsS.mjs").then((n) => n.t), import("./logging-BKV8TYQq.mjs").then((n) => n.n)]).then(([sdkModule, loggingModule]) => ({
+const loadMatrixAuthClientDeps = createLazyRuntimeModule(() => Promise.all([import("./sdk-Cfc6m7fY.mjs").then((n) => n.t), import("./logging-BKV8TYQq.mjs").then((n) => n.n)]).then(([sdkModule, loggingModule]) => ({
 	MatrixClient: sdkModule.MatrixClient,
 	ensureMatrixSdkLoggingConfigured: loggingModule.ensureMatrixSdkLoggingConfigured
 })));
@@ -90,7 +90,7 @@ async function fetchMatrixWhoamiIdentity(params) {
 //#endregion
 //#region extensions/matrix/src/matrix/client/config.ts
 const loadMatrixCredentialsReadDeps = createLazyRuntimeModule(() => import("./credentials-read-CqRiEAQa.mjs").then((n) => n.i));
-const loadMatrixCredentialsWriteRuntime = createLazyRuntimeModule(() => import("./credentials-C2dvc_kB.mjs"));
+const loadMatrixCredentialsWriteRuntime = createLazyRuntimeModule(() => import("./credentials-Bf9PQ7xs.mjs"));
 const loadMatrixSecretInputDeps = createLazyRuntimeModule(() => import("openclaw/plugin-sdk/secret-input-runtime"));
 function credentialsMatchBackfillAuthLineage(params) {
 	if (!params.stored) return true;
@@ -509,25 +509,15 @@ function isMatrixStartupAbortError(error) {
 }
 async function awaitMatrixStartupWithAbort(promise, abortSignal) {
 	if (!abortSignal) return await promise;
-	if (abortSignal.aborted) throw createMatrixStartupAbortError();
-	return await new Promise((resolve, reject) => {
-		const onAbort = () => {
-			abortSignal.removeEventListener("abort", onAbort);
-			reject(createMatrixStartupAbortError());
-		};
-		abortSignal.addEventListener("abort", onAbort, { once: true });
-		promise.then((value) => {
-			abortSignal.removeEventListener("abort", onAbort);
-			resolve(value);
-		}, (error) => {
-			abortSignal.removeEventListener("abort", onAbort);
-			reject(toErrorObject(error, "Non-Error rejection"));
-		});
-	});
+	try {
+		return await racePromiseWithAbortSignal(promise, abortSignal, createMatrixStartupAbortError);
+	} catch (error) {
+		throw toErrorObject(error, "Non-Error rejection");
+	}
 }
 //#endregion
 //#region extensions/matrix/src/matrix/client/shared.ts
-const loadMatrixCreateClientDeps = createLazyRuntimeModule(() => import("./create-client-CbJVyFDy.mjs"));
+const loadMatrixCreateClientDeps = createLazyRuntimeModule(() => import("./create-client-CroC4BVc.mjs"));
 const MATRIX_RETIREMENT_DRAIN_TIMEOUT_MS = 5e3;
 const sharedClientStates = /* @__PURE__ */ new Map();
 const sharedClientPromises = /* @__PURE__ */ new Map();
@@ -891,7 +881,7 @@ var client_exports = /* @__PURE__ */ __exportAll({
 	stopSharedClientForAccount: () => stopSharedClientForAccount,
 	validateMatrixHomeserverUrl: () => validateMatrixHomeserverUrl
 });
-const loadMatrixClientRuntime = createLazyRuntimeModule(() => import("./create-client-CbJVyFDy.mjs"));
+const loadMatrixClientRuntime = createLazyRuntimeModule(() => import("./create-client-CroC4BVc.mjs"));
 const createMatrixClient = createLazyRuntimeMethod(loadMatrixClientRuntime, (runtime) => runtime.createMatrixClient);
 //#endregion
 export { isMatrixStartupAbortError as a, getMatrixMonitorTaskSignal as c, resolveMatrixAuthContext as d, createMatrixStartupAbortError as i, backfillMatrixAuthDeviceIdAfterStartup as l, acquireSharedMatrixClient as n, throwIfMatrixStartupAborted as o, awaitMatrixStartupWithAbort as r, createMatrixMonitorTaskRunner as s, client_exports as t, resolveMatrixAuth as u };

package/dist/.setup/{create-client-CbJVyFDy.mjs → create-client-CroC4BVc.mjs}

@@ -1,16 +1,16 @@
 import { t as getMatrixRuntime } from "./runtime-1kn1P6io.mjs";
 import { t as resolveValidatedMatrixHomeserverUrl } from "./url-validation-CF6pG6eE.mjs";
-import { n as maybeMigrateLegacyStorage, o as resolveMatrixStoragePaths, s as writeStorageMeta } from "./storage-D7agewjH.mjs";
-import "./client-kmih04ng.mjs";
+import { n as maybeMigrateLegacyStorage, o as resolveMatrixStoragePaths, s as writeStorageMeta } from "./storage-DkC6bHgA.mjs";
+import "./client-vPPbaxNp.mjs";
 import { createLazyRuntimeModule } from "openclaw/plugin-sdk/lazy-runtime";
 import { normalizeOptionalString } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { ssrfPolicyFromDangerouslyAllowPrivateNetwork } from "openclaw/plugin-sdk/ssrf-runtime";
 import fs from "node:fs";
 //#region extensions/matrix/src/matrix/client/create-client.ts
 const loadMatrixCreateClientRuntimeDeps = createLazyRuntimeModule(() => Promise.all([
-	import("./sdk-CgQGkCsS.mjs").then((n) => n.t),
+	import("./sdk-Cfc6m7fY.mjs").then((n) => n.t),
 	import("./logging-BKV8TYQq.mjs").then((n) => n.n),
-	import("./file-sync-store-Clc9iEdn.mjs")
+	import("./file-sync-store-BdKx_gMi.mjs")
 ]).then(([sdkModule, loggingModule, syncStoreModule]) => ({
 	MatrixClient: sdkModule.MatrixClient,
 	SqliteBackedMatrixSyncStore: syncStoreModule.SqliteBackedMatrixSyncStore,

package/dist/.setup/{credentials-C2dvc_kB.mjs → credentials-Bf9PQ7xs.mjs}

@@ -1,6 +1,7 @@
 import { i as normalizeMatrixStoredCredentials, n as isMatrixCredentialRevocation, r as matrixCredentialsStoreKey } from "./credentials-state-B3cuUFwZ.mjs";
 import { i as resolveMatrixCredentialsDir, o as resolveMatrixCredentialsPath } from "./storage-paths-B51JM-pC.mjs";
 import { a as loadMatrixCredentials, c as openMatrixCredentialsStore, n as clearMatrixCredentials, r as credentialsMatchConfig, s as openMatrixCredentialsAsyncStore } from "./credentials-read-CqRiEAQa.mjs";
+import { c as updateMatrixKeyedState } from "./retired-state-DW5pLH05.mjs";
 import { normalizeAccountId } from "openclaw/plugin-sdk/account-id";
 //#region extensions/matrix/src/matrix/credentials.ts
 async function saveMatrixCredentials(credentials, env = process.env, accountId) {
@@ -51,24 +52,9 @@ async function touchMatrixCredentials(env = process.env, accountId) {
 async function updateMatrixCredentials(env, accountId, update) {
 	const store = openMatrixCredentialsAsyncStore(env);
 	const key = matrixCredentialsStoreKey(accountId);
-	if (!store.observe || !store.compareAndApply) {
-		openMatrixCredentialsStore(env).update(key, update);
-		return;
-	}
-	let observation = await store.observe(key);
-	for (;;) {
-		const value = update(observation.value);
-		const result = await store.compareAndApply(key, observation.comparison, value === void 0 ? {
-			operation: "update",
-			action: "keep"
-		} : {
-			operation: "update",
-			action: "set",
-			value
-		});
-		if (result.status !== "conflict") return;
-		observation = result.current;
-	}
+	await updateMatrixKeyedState(store, key, update, () => {
+		return openMatrixCredentialsStore(env).update(key, update);
+	});
 }
 //#endregion
 export { clearMatrixCredentials, credentialsMatchConfig, loadMatrixCredentials, resolveMatrixCredentialsDir, resolveMatrixCredentialsPath, saveBackfilledMatrixDeviceId, saveMatrixCredentials, touchMatrixCredentials };

package/dist/.setup/{crypto-runtime-B2AjWo-i.mjs → crypto-runtime-CpJ0b7vY.mjs}

@@ -1,13 +1,13 @@
 import { t as getMatrixRuntime } from "./runtime-1kn1P6io.mjs";
-import { t as ensureMatrixCryptoRuntime } from "./deps-CFNl7tQo.mjs";
-import { n as RETIRED_MATRIX_STATE_REMEDIATION } from "./retired-state-BXUQ2I-C.mjs";
-import { c as readMatrixIdbSnapshotJson, u as writeMatrixIdbSnapshotJson } from "./storage-D7agewjH.mjs";
+import { t as ensureMatrixCryptoRuntime } from "./deps-L_1bUAGL.mjs";
+import { n as RETIRED_MATRIX_STATE_REMEDIATION } from "./retired-state-DW5pLH05.mjs";
+import { c as readMatrixIdbSnapshotJson, u as writeMatrixIdbSnapshotJson } from "./storage-DkC6bHgA.mjs";
 import { r as noop, t as LogService } from "./logger-CXQnpXCt.mjs";
-import { a as isRepairableSecretStorageAccessError, i as trustMatrixOwnIdentity, n as isMatrixDeviceOwnerVerified, o as MATRIX_IDB_SNAPSHOT_LOCK_OPTIONS, r as isMatrixDeviceVerifiedInCurrentClient } from "./sdk-CgQGkCsS.mjs";
+import { a as isRepairableSecretStorageAccessError, i as trustMatrixOwnIdentity, n as isMatrixDeviceOwnerVerified, o as MATRIX_IDB_SNAPSHOT_LOCK_OPTIONS, r as isMatrixDeviceVerifiedInCurrentClient } from "./sdk-Cfc6m7fY.mjs";
 import { createLazyRuntimeModule } from "openclaw/plugin-sdk/lazy-runtime";
-import { filterStringEntries } from "openclaw/plugin-sdk/string-coerce-runtime";
-import path from "node:path";
 import { formatErrorMessage, toErrorObject, toStringifiedError } from "openclaw/plugin-sdk/error-runtime";
+import { asOptionalObjectRecord } from "openclaw/plugin-sdk/string-coerce-runtime";
+import path from "node:path";
 import { resolveDateTimestampMs, resolveTimestampMsToIsoString } from "openclaw/plugin-sdk/number-runtime";
 import fs from "node:fs";
 import { raceWithTimeout } from "openclaw/plugin-sdk/time-runtime";
@@ -125,22 +125,8 @@ var MatrixCryptoBootstrapper = class {
 			userId,
 			password: this.deps.getPassword?.()
 		});
-		const hasPublishedCrossSigningKeys = async () => {
-			if (typeof crypto.userHasCrossSigningKeys !== "function") return true;
-			try {
-				return await crypto.userHasCrossSigningKeys(userId, true);
-			} catch {
-				return false;
-			}
-		};
-		const isCrossSigningReady = async () => {
-			if (typeof crypto.isCrossSigningReady !== "function") return true;
-			try {
-				return await crypto.isCrossSigningReady();
-			} catch {
-				return false;
-			}
-		};
+		const hasPublishedCrossSigningKeys = () => crypto.userHasCrossSigningKeys(userId, true).catch(() => false);
+		const isCrossSigningReady = () => crypto.isCrossSigningReady().catch(() => false);
 		const finalize = async () => {
 			const ready = await isCrossSigningReady();
 			const published = ready ? await waitForPublishedCrossSigningKeys() : await hasPublishedCrossSigningKeys();
@@ -277,13 +263,11 @@ var MatrixCryptoBootstrapper = class {
 		const deviceId = this.deps.getDeviceId()?.trim();
 		if (!deviceId) return null;
 		const userId = await this.deps.getUserId();
-		const deviceStatus = typeof crypto.getDeviceVerificationStatus === "function" ? await crypto.getDeviceVerificationStatus(userId, deviceId).catch(() => null) : null;
+		const deviceStatus = await crypto.getDeviceVerificationStatus(userId, deviceId).catch(() => null);
 		if (isMatrixDeviceOwnerVerified(deviceStatus)) return true;
-		if (typeof crypto.setDeviceVerified === "function") await crypto.setDeviceVerified(userId, deviceId, true);
-		if (typeof crypto.crossSignDevice === "function") {
-			if (typeof crypto.isCrossSigningReady === "function" ? await crypto.isCrossSigningReady() : true) await crypto.crossSignDevice(deviceId);
-		}
-		const refreshedStatus = typeof crypto.getDeviceVerificationStatus === "function" ? await crypto.getDeviceVerificationStatus(userId, deviceId).catch(() => null) : null;
+		await crypto.setDeviceVerified(userId, deviceId, true);
+		if (await crypto.isCrossSigningReady()) await crypto.crossSignDevice(deviceId);
+		const refreshedStatus = await crypto.getDeviceVerificationStatus(userId, deviceId).catch(() => null);
 		const verified = isMatrixDeviceOwnerVerified(refreshedStatus);
 		if (!verified && options.strict) throw new Error(`Matrix own device ${deviceId} does not have full Matrix identity trust after bootstrap`);
 		return verified;
@@ -310,7 +294,7 @@ function createMatrixCryptoFacade(deps) {
 		return async (...args) => {
 			const crypto = deps.client.getCrypto();
 			const userId = deps.client.getUserId();
-			if (userId && typeof crypto?.getVerificationRequestsToDeviceInProgress === "function") for (const request of crypto.getVerificationRequestsToDeviceInProgress(userId)) manager.trackVerificationRequest(request);
+			if (userId && crypto) for (const request of crypto.getVerificationRequestsToDeviceInProgress(userId)) manager.trackVerificationRequest(request);
 			return await run(...args);
 		};
 	}
@@ -351,14 +335,12 @@ function createMatrixCryptoFacade(deps) {
 		},
 		listVerifications: withTrackedVerifications(manager.listVerifications.bind(manager)),
 		ensureVerificationDmTracked: async ({ roomId, userId }) => {
-			const crypto = deps.client.getCrypto();
-			const request = typeof crypto?.findVerificationRequestDMInProgress === "function" ? crypto.findVerificationRequestDMInProgress(roomId, userId) : void 0;
+			const request = deps.client.getCrypto()?.findVerificationRequestDMInProgress(roomId, userId);
 			if (!request) return null;
 			return deps.verificationManager.trackVerificationRequest(request);
 		},
 		requestVerification: async (params) => {
-			const crypto = deps.client.getCrypto();
-			return await deps.verificationManager.requestVerification(crypto, params);
+			return await deps.verificationManager.requestVerification(deps.client.getCrypto(), params);
 		},
 		acceptVerification: withTrackedVerifications(manager.acceptVerification.bind(manager)),
 		cancelVerification: withTrackedVerifications(manager.cancelVerification.bind(manager)),
@@ -457,33 +439,33 @@ var MatrixDecryptBridge = class {
 		const pending = Array.from(this.decryptRetries.entries());
 		if (pending.length === 0) return;
 		LogService.debug("MatrixClientLite", `Retrying pending decryptions due to ${reason}`);
-		for (const [retryKey, state] of pending) {
-			if (state.timer) {
-				clearTimeout(state.timer);
-				state.timer = null;
-			}
-			if (state.inFlight) continue;
-			this.runDecryptRetry(retryKey).catch(noop);
-		}
+		this.startPendingRetries(pending);
 	}
 	bindCryptoRetrySignals(crypto) {
 		if (!crypto || this.cryptoRetrySignalsBound) return;
 		this.cryptoRetrySignalsBound = true;
-		const trigger = (reason, options) => {
-			this.retryPendingNow(reason, options);
-		};
-		crypto.on(CryptoEvent.KeyBackupDecryptionKeyCached, () => {
-			trigger("crypto.keyBackupDecryptionKeyCached", { includeExhausted: true });
-		});
-		crypto.on(CryptoEvent.RehydrationCompleted, () => {
-			trigger("dehydration.RehydrationCompleted", { includeExhausted: true });
-		});
-		crypto.on(CryptoEvent.DevicesUpdated, () => {
-			trigger("crypto.devicesUpdated");
-		});
-		crypto.on(CryptoEvent.KeysChanged, () => {
-			trigger("crossSigning.keysChanged");
-		});
+		for (const [eventName, reason, includeExhausted] of [
+			[
+				CryptoEvent.KeyBackupDecryptionKeyCached,
+				"crypto.keyBackupDecryptionKeyCached",
+				true
+			],
+			[
+				CryptoEvent.RehydrationCompleted,
+				"dehydration.RehydrationCompleted",
+				true
+			],
+			[
+				CryptoEvent.DevicesUpdated,
+				"crypto.devicesUpdated",
+				false
+			],
+			[
+				CryptoEvent.KeysChanged,
+				"crossSigning.keysChanged",
+				false
+			]
+		]) crypto.on(eventName, () => this.retryPendingNow(reason, { includeExhausted }));
 	}
 	stop() {
 		this.quiescing = true;
@@ -495,7 +477,12 @@ var MatrixDecryptBridge = class {
 	async drainPendingDecryptions(_reason) {
 		this.quiescing = true;
 		const pendingSdkDecryptions = Array.from(this.pendingSdkDecryptions);
-		const pending = Array.from(this.decryptRetries.entries());
+		this.startPendingRetries(Array.from(this.decryptRetries.entries()));
+		await raceWithTimeout(Promise.all([Promise.allSettled(pendingSdkDecryptions), this.waitForActiveRetryRunsToFinish()]), MATRIX_DECRYPT_DRAIN_TIMEOUT_MS, () => {
+			throw new Error(`Matrix decryption drain did not finish within ${MATRIX_DECRYPT_DRAIN_TIMEOUT_MS}ms`);
+		}, { ref: false });
+	}
+	startPendingRetries(pending) {
 		for (const [retryKey, state] of pending) {
 			if (state.timer) {
 				clearTimeout(state.timer);
@@ -503,9 +490,6 @@ var MatrixDecryptBridge = class {
 			}
 			if (!state.inFlight) this.runDecryptRetry(retryKey).catch(noop);
 		}
-		await raceWithTimeout(Promise.all([Promise.allSettled(pendingSdkDecryptions), this.waitForActiveRetryRunsToFinish()]), MATRIX_DECRYPT_DRAIN_TIMEOUT_MS, () => {
-			throw new Error(`Matrix decryption drain did not finish within ${MATRIX_DECRYPT_DRAIN_TIMEOUT_MS}ms`);
-		}, { ref: false });
 	}
 	handleEncryptedEventDecrypted(params) {
 		if (this.stopped) return;
@@ -667,24 +651,22 @@ var MatrixIdbSnapshotMigrationRequiredError = class extends Error {
 	}
 };
 function isValidIdbIndexSnapshot(value) {
-	if (!value || typeof value !== "object") return false;
-	const candidate = value;
-	return typeof candidate.name === "string" && (typeof candidate.keyPath === "string" || Array.isArray(candidate.keyPath) && candidate.keyPath.every((entry) => typeof entry === "string")) && typeof candidate.multiEntry === "boolean" && typeof candidate.unique === "boolean";
+	const candidate = asOptionalObjectRecord(value);
+	return typeof candidate?.name === "string" && (typeof candidate.keyPath === "string" || Array.isArray(candidate.keyPath) && candidate.keyPath.every((entry) => typeof entry === "string")) && typeof candidate.multiEntry === "boolean" && typeof candidate.unique === "boolean";
 }
 function isValidIdbRecordSnapshot(value) {
-	if (!value || typeof value !== "object") return false;
-	return "key" in value && "value" in value;
+	const candidate = asOptionalObjectRecord(value);
+	return Boolean(candidate && "key" in candidate && "value" in candidate);
 }
 function isValidIdbStoreSnapshot(value) {
-	if (!value || typeof value !== "object") return false;
-	const candidate = value;
-	const validKeyPath = candidate.keyPath === null || typeof candidate.keyPath === "string" || Array.isArray(candidate.keyPath) && candidate.keyPath.every((entry) => typeof entry === "string");
-	return typeof candidate.name === "string" && validKeyPath && typeof candidate.autoIncrement === "boolean" && Array.isArray(candidate.indexes) && candidate.indexes.every((entry) => isValidIdbIndexSnapshot(entry)) && Array.isArray(candidate.records) && candidate.records.every((entry) => isValidIdbRecordSnapshot(entry));
+	const candidate = asOptionalObjectRecord(value);
+	const keyPath = candidate?.keyPath;
+	const validKeyPath = keyPath === null || typeof keyPath === "string" || Array.isArray(keyPath) && keyPath.every((entry) => typeof entry === "string");
+	return typeof candidate?.name === "string" && validKeyPath && typeof candidate.autoIncrement === "boolean" && Array.isArray(candidate.indexes) && candidate.indexes.every((entry) => isValidIdbIndexSnapshot(entry)) && Array.isArray(candidate.records) && candidate.records.every((entry) => isValidIdbRecordSnapshot(entry));
 }
 function isValidIdbDatabaseSnapshot(value) {
-	if (!value || typeof value !== "object") return false;
-	const candidate = value;
-	return typeof candidate.name === "string" && typeof candidate.version === "number" && Number.isFinite(candidate.version) && candidate.version > 0 && Array.isArray(candidate.stores) && candidate.stores.every((entry) => isValidIdbStoreSnapshot(entry));
+	const candidate = asOptionalObjectRecord(value);
+	return typeof candidate?.name === "string" && typeof candidate.version === "number" && Number.isFinite(candidate.version) && candidate.version > 0 && Array.isArray(candidate.stores) && candidate.stores.every((entry) => isValidIdbStoreSnapshot(entry));
 }
 function parseSnapshotPayload(data) {
 	const parsed = JSON.parse(data);
@@ -846,18 +828,6 @@ function throwLegacySnapshotMigrationRequired() {
 }
 //#endregion
 //#region extensions/matrix/src/matrix/sdk/verification-manager.ts
-const MATRIX_VERIFICATION_PHASES = /* @__PURE__ */ new Set([
-	-1,
-	VerificationPhase.Unsent,
-	VerificationPhase.Requested,
-	VerificationPhase.Ready,
-	VerificationPhase.Started,
-	VerificationPhase.Cancelled,
-	VerificationPhase.Done
-]);
-function isMatrixVerificationPhase(value) {
-	return typeof value === "number" && MATRIX_VERIFICATION_PHASES.has(value);
-}
 const MAX_TRACKED_VERIFICATION_SESSIONS = 256;
 const TERMINAL_SESSION_RETENTION_MS = 864e5;
 const SAS_AUTO_CONFIRM_DELAY_MS = 3e4;
@@ -876,10 +846,6 @@ var MatrixVerificationManager = class {
 			return fallback;
 		}
 	}
-	readVerificationPhase(request, fallback) {
-		const phase = this.readRequestValue(() => request.phase, fallback);
-		return isMatrixVerificationPhase(phase) ? phase : fallback;
-	}
 	readVerificationRequestIdentity(request) {
 		return {
 			transactionId: this.readRequestValue(() => request.transactionId?.trim() ?? "", ""),
@@ -900,7 +866,7 @@ var MatrixVerificationManager = class {
 	}
 	pruneVerificationSessions(nowMs) {
 		for (const [id, session] of this.verificationSessions) {
-			const phase = this.readVerificationPhase(session.request, -1);
+			const phase = this.readRequestValue(() => session.request.phase, -1);
 			if ((phase === VerificationPhase.Done || phase === VerificationPhase.Cancelled) && nowMs - session.updatedAtMs > TERMINAL_SESSION_RETENTION_MS) this.verificationSessions.delete(id);
 		}
 		if (this.verificationSessions.size <= MAX_TRACKED_VERIFICATION_SESSIONS) return;
@@ -916,6 +882,13 @@ var MatrixVerificationManager = class {
 		session.updatedAtMs = resolveDateTimestampMs(Date.now());
 		this.emitVerificationSummary(session);
 	}
+	observeVerificationOperation(session, operation, onError) {
+		return operation.then(() => this.touchVerificationSession(session)).catch((err) => {
+			onError?.();
+			session.error = formatErrorMessage(err);
+			this.touchVerificationSession(session);
+		});
+	}
 	clearSasAutoConfirmTimer(session) {
 		if (!session.sasAutoConfirmTimer) return;
 		clearTimeout(session.sasAutoConfirmTimer);
@@ -923,12 +896,11 @@ var MatrixVerificationManager = class {
 	}
 	buildVerificationSummary(session) {
 		const request = session.request;
-		const phase = this.readVerificationPhase(request, VerificationPhase.Requested);
+		const phase = this.readRequestValue(() => request.phase, VerificationPhase.Requested);
 		const accepting = this.readRequestValue(() => request.accepting, false);
 		const declining = this.readRequestValue(() => request.declining, false);
 		const pending = this.readRequestValue(() => request.pending, false);
-		const methodsRaw = this.readRequestValue(() => request.methods, []);
-		const methods = filterStringEntries(methodsRaw);
+		const methods = this.readRequestValue(() => request.methods, []).slice();
 		const sasCallbacks = session.sasCallbacks ?? session.activeVerifier?.getShowSasCallbacks();
 		if (sasCallbacks) session.sasCallbacks = sasCallbacks;
 		const canAccept = phase < VerificationPhase.Ready && !accepting && !declining;
@@ -975,8 +947,7 @@ var MatrixVerificationManager = class {
 		session.request.on(VerificationRequestEvent.Change, () => {
 			this.touchVerificationSession(session);
 			this.maybeAutoAcceptInboundRequest(session);
-			const verifier = this.readRequestValue(() => session.request.verifier, null);
-			if (verifier) this.attachVerifierToVerificationSession(session, verifier);
+			this.attachRequestVerifier(session);
 			this.maybeAutoStartInboundSas(session);
 		});
 	}
@@ -985,28 +956,23 @@ var MatrixVerificationManager = class {
 		const request = session.request;
 		const isSelfVerification = this.readRequestValue(() => request.isSelfVerification, false);
 		const initiatedByMe = this.readRequestValue(() => request.initiatedByMe, false);
-		const phase = this.readVerificationPhase(request, VerificationPhase.Requested);
+		const phase = this.readRequestValue(() => request.phase, VerificationPhase.Requested);
 		const accepting = this.readRequestValue(() => request.accepting, false);
 		const declining = this.readRequestValue(() => request.declining, false);
 		if (isSelfVerification || initiatedByMe) return;
 		if (phase !== VerificationPhase.Requested || accepting || declining) return;
 		session.acceptRequested = true;
-		request.accept().then(() => {
-			this.touchVerificationSession(session);
-		}).catch((err) => {
+		this.observeVerificationOperation(session, request.accept(), () => {
 			session.acceptRequested = false;
-			session.error = formatErrorMessage(err);
-			this.touchVerificationSession(session);
 		});
 	}
 	maybeAutoStartInboundSas(session) {
 		if (session.activeVerifier || session.verifyStarted || session.startRequested) return;
 		if (this.readRequestValue(() => session.request.initiatedByMe, true)) return;
 		if (!this.readRequestValue(() => session.request.isSelfVerification, false)) return;
-		const phase = this.readVerificationPhase(session.request, VerificationPhase.Requested);
+		const phase = this.readRequestValue(() => session.request.phase, VerificationPhase.Requested);
 		if (phase < VerificationPhase.Ready || phase >= VerificationPhase.Cancelled) return;
-		const methodsRaw = this.readRequestValue(() => session.request.methods, []);
-		const methods = filterStringEntries(methodsRaw);
+		const methods = this.readRequestValue(() => session.request.methods, []);
 		const chosenMethod = this.readRequestValue(() => session.request.chosenMethod, null);
 		if (!(methods.includes(VerificationMethod.Sas) || chosenMethod === VerificationMethod.Sas)) return;
 		session.startRequested = true;
@@ -1017,6 +983,10 @@ var MatrixVerificationManager = class {
 			session.startRequested = false;
 		});
 	}
+	attachRequestVerifier(session, request = session.request) {
+		const verifier = this.readRequestValue(() => request.verifier, null);
+		if (verifier) this.attachVerifierToVerificationSession(session, verifier);
+	}
 	attachVerifierToVerificationSession(session, verifier) {
 		session.activeVerifier = verifier;
 		this.touchVerificationSession(session);
@@ -1057,14 +1027,9 @@ var MatrixVerificationManager = class {
 		session.sasCallbacks = callbacks;
 		session.sasAutoConfirmTimer = setTimeout(() => {
 			session.sasAutoConfirmTimer = void 0;
-			if (this.readVerificationPhase(session.request, VerificationPhase.Requested) >= VerificationPhase.Cancelled) return;
+			if (this.readRequestValue(() => session.request.phase, VerificationPhase.Requested) >= VerificationPhase.Cancelled) return;
 			session.sasAutoConfirmStarted = true;
-			this.confirmSasForSession(session, callbacks).then(() => {
-				this.touchVerificationSession(session);
-			}).catch((err) => {
-				session.error = formatErrorMessage(err);
-				this.touchVerificationSession(session);
-			});
+			this.observeVerificationOperation(session, this.confirmSasForSession(session, callbacks));
 		}, SAS_AUTO_CONFIRM_DELAY_MS);
 	}
 	async confirmSasForSession(session, callbacks) {
@@ -1074,12 +1039,7 @@ var MatrixVerificationManager = class {
 	ensureVerificationStarted(session) {
 		if (!session.activeVerifier || session.verifyStarted) return;
 		session.verifyStarted = true;
-		session.verifyPromise = session.activeVerifier.verify().then(() => {
-			this.touchVerificationSession(session);
-		}).catch((err) => {
-			session.error = formatErrorMessage(err);
-			this.touchVerificationSession(session);
-		});
+		session.verifyPromise = this.observeVerificationOperation(session, session.activeVerifier.verify());
 	}
 	async trustOwnDeviceAfterConfirmedSas(session) {
 		if (!this.readRequestValue(() => session.request.isSelfVerification, false)) return;
@@ -1098,8 +1058,7 @@ var MatrixVerificationManager = class {
 			for (const existing of this.verificationSessions.values()) if (this.isSameLogicalVerificationRequest(existing.request, request)) {
 				existing.request = request;
 				this.ensureVerificationRequestTracked(existing);
-				const verifier = this.readRequestValue(() => request.verifier, null);
-				if (verifier) this.attachVerifierToVerificationSession(existing, verifier);
+				this.attachRequestVerifier(existing, request);
 				this.touchVerificationSession(existing);
 				return this.buildVerificationSummary(existing);
 			}
@@ -1118,8 +1077,7 @@ var MatrixVerificationManager = class {
 		this.verificationSessions.set(session.id, session);
 		this.ensureVerificationRequestTracked(session);
 		this.maybeAutoAcceptInboundRequest(session);
-		const verifier = this.readRequestValue(() => request.verifier, null);
-		if (verifier) this.attachVerifierToVerificationSession(session, verifier);
+		this.attachRequestVerifier(session, request);
 		this.maybeAutoStartInboundSas(session);
 		this.emitVerificationSummary(session);
 		return this.buildVerificationSummary(session);
@@ -1132,10 +1090,9 @@ var MatrixVerificationManager = class {
 		if (!crypto) throw new Error("Matrix crypto is not available");
 		let request;
 		if (params.ownUser) request = await crypto.requestOwnUserVerification();
-		else if (params.userId && params.deviceId && crypto.requestDeviceVerification) request = await crypto.requestDeviceVerification(params.userId, params.deviceId);
-		else if (params.userId && params.roomId && crypto.requestVerificationDM) request = await crypto.requestVerificationDM(params.userId, params.roomId);
+		else if (params.userId && params.deviceId) request = await crypto.requestDeviceVerification(params.userId, params.deviceId);
+		else if (params.userId && params.roomId) request = await crypto.requestVerificationDM(params.userId, params.roomId);
 		else throw new Error("Matrix verification request requires one of: ownUser, userId+deviceId, or userId+roomId");
-		if (!request) throw new Error("Matrix verification request could not be created");
 		return this.trackVerificationRequest(request);
 	}
 	async acceptVerification(id) {

package/dist/.setup/{deps-CFNl7tQo.mjs → deps-L_1bUAGL.mjs}

@@ -1,6 +1,6 @@
 import { createRequire } from "node:module";
-import path from "node:path";
 import { formatErrorMessage } from "openclaw/plugin-sdk/error-runtime";
+import path from "node:path";
 import fs from "node:fs";
 import { runCommandWithTimeout } from "openclaw/plugin-sdk/process-runtime";
 //#region extensions/matrix/src/matrix/deps.ts
@@ -41,71 +41,57 @@ function isMuslRuntime() {
 }
 function resolveMatrixCryptoNativeBindingFilename() {
 	switch (process.platform) {
-		case "darwin": return process.arch === "arm64" ? "matrix-sdk-crypto.darwin-arm64.node" : process.arch === "x64" ? "matrix-sdk-crypto.darwin-x64.node" : null;
+		case "darwin": return ["arm64", "x64"].includes(process.arch) ? `matrix-sdk-crypto.darwin-${process.arch}.node` : null;
 		case "linux":
-			if (process.arch === "x64") return isMuslRuntime() ? "matrix-sdk-crypto.linux-x64-musl.node" : "matrix-sdk-crypto.linux-x64-gnu.node";
+			if (process.arch === "x64") return `matrix-sdk-crypto.linux-x64-${isMuslRuntime() ? "musl" : "gnu"}.node`;
 			if (process.arch === "arm64" && !isMuslRuntime()) return "matrix-sdk-crypto.linux-arm64-gnu.node";
 			if (process.arch === "arm") return "matrix-sdk-crypto.linux-arm-gnueabihf.node";
 			if (process.arch === "s390x") return "matrix-sdk-crypto.linux-s390x-gnu.node";
 			return null;
-		case "win32": return process.arch === "x64" ? "matrix-sdk-crypto.win32-x64-msvc.node" : process.arch === "ia32" ? "matrix-sdk-crypto.win32-ia32-msvc.node" : process.arch === "arm64" ? "matrix-sdk-crypto.win32-arm64-msvc.node" : null;
+		case "win32": return [
+			"x64",
+			"ia32",
+			"arm64"
+		].includes(process.arch) ? `matrix-sdk-crypto.win32-${process.arch}-msvc.node` : null;
 		default: return null;
 	}
 }
-function resolveMatrixCryptoNativeBindingPath(resolveFn) {
+function resolveMatrixCryptoNativeBindingPath() {
 	const filename = resolveMatrixCryptoNativeBindingFilename();
 	if (!filename) return null;
 	try {
-		return path.join(path.dirname(resolveFn("@matrix-org/matrix-sdk-crypto-nodejs/download-lib.js")), filename);
+		return path.join(path.dirname(defaultResolveFn("@matrix-org/matrix-sdk-crypto-nodejs/download-lib.js")), filename);
 	} catch {
 		return null;
 	}
 }
-function removeIncompleteMatrixCryptoNativeBinding(params) {
-	const bindingPath = params.bindingPath;
+function removeIncompleteMatrixCryptoNativeBinding(bindingPath) {
 	if (!bindingPath) return;
 	try {
 		const stat = fs.statSync(bindingPath);
 		if (!stat.isFile() || stat.size >= MIN_MATRIX_CRYPTO_NATIVE_BINDING_BYTES) return;
 		fs.unlinkSync(bindingPath);
-		params.log?.(`matrix: removed incomplete native crypto runtime (${stat.size} bytes); it will be downloaded again`);
 	} catch (error) {
 		if (error.code !== "ENOENT") throw error;
 	}
 }
-async function ensureMatrixCryptoRuntime(params = {}) {
-	const usesDefaultRuntime = !params.requireFn && !params.resolveFn;
-	if (usesDefaultRuntime && defaultMatrixCryptoRuntimeEnsurePromise) {
-		await defaultMatrixCryptoRuntimeEnsurePromise;
-		return;
-	}
-	const ensurePromise = ensureMatrixCryptoRuntimeOnce(params);
-	if (!usesDefaultRuntime) {
-		await ensurePromise;
-		return;
-	}
-	defaultMatrixCryptoRuntimeEnsurePromise = ensurePromise.catch((error) => {
+async function ensureMatrixCryptoRuntime() {
+	defaultMatrixCryptoRuntimeEnsurePromise ??= ensureMatrixCryptoRuntimeOnce().catch((error) => {
 		defaultMatrixCryptoRuntimeEnsurePromise = null;
 		throw error;
 	});
 	await defaultMatrixCryptoRuntimeEnsurePromise;
 }
-async function ensureMatrixCryptoRuntimeOnce(params) {
-	const resolveFn = params.resolveFn ?? defaultResolveFn;
-	const nativeBindingPath = resolveMatrixCryptoNativeBindingPath(resolveFn);
-	removeIncompleteMatrixCryptoNativeBinding({
-		bindingPath: nativeBindingPath,
-		log: params.log
-	});
-	const requireFn = params.requireFn ?? defaultRequireFn;
+async function ensureMatrixCryptoRuntimeOnce() {
+	const nativeBindingPath = resolveMatrixCryptoNativeBindingPath();
+	removeIncompleteMatrixCryptoNativeBinding(nativeBindingPath);
 	try {
-		requireFn("@matrix-org/matrix-sdk-crypto-nodejs");
+		defaultRequireFn("@matrix-org/matrix-sdk-crypto-nodejs");
 		return;
 	} catch (err) {
 		if (!isMissingMatrixCryptoRuntimeError(err)) throw err;
 	}
-	const scriptPath = resolveFn("@matrix-org/matrix-sdk-crypto-nodejs/download-lib.js");
-	params.log?.("matrix: bootstrapping native crypto runtime");
+	const scriptPath = defaultResolveFn("@matrix-org/matrix-sdk-crypto-nodejs/download-lib.js");
 	let failure;
 	try {
 		const result = await runCommandWithTimeout([process.execPath, scriptPath], {
@@ -121,12 +107,9 @@ async function ensureMatrixCryptoRuntimeOnce(params) {
 	} catch (error) {
 		failure = (error instanceof Error ? error.message : String(error)).trim();
 	}
-	removeIncompleteMatrixCryptoNativeBinding({
-		bindingPath: nativeBindingPath,
-		log: params.log
-	});
+	removeIncompleteMatrixCryptoNativeBinding(nativeBindingPath);
 	if (failure !== void 0) throw new Error(failure || "Matrix crypto runtime bootstrap failed.");
-	requireFn("@matrix-org/matrix-sdk-crypto-nodejs");
+	defaultRequireFn("@matrix-org/matrix-sdk-crypto-nodejs");
 }
 async function ensureMatrixSdkInstalled(params) {
 	const missing = resolveMissingMatrixPackages(params?.resolveFn);