@openclaw/matrix 2026.10.5-beta.3 → 2026.10.10-beta.1

package/node_modules/@openclaw/fs-safe-freebsd-arm64/package.json

@@ -0,0 +1,29 @@
+{
+  "name": "@openclaw/fs-safe-freebsd-arm64",
+  "version": "0.26.5",
+  "description": "FreeBSD 14.4+ arm64 native binding for @openclaw/fs-safe.",
+  "license": "MIT",
+  "author": "OpenClaw Team <dev@openclaw.ai>",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/openclaw/fs-safe.git",
+    "directory": "packages/freebsd-arm64"
+  },
+  "publishConfig": {
+    "access": "public",
+    "provenance": true
+  },
+  "os": [
+    "freebsd"
+  ],
+  "cpu": [
+    "arm64"
+  ],
+  "main": "fs-safe-native.node",
+  "files": [
+    "fs-safe-native.node"
+  ],
+  "engines": {
+    "node": ">=22"
+  }
+}

package/node_modules/@openclaw/fs-safe-freebsd-x64/package.json

@@ -0,0 +1,29 @@
+{
+  "name": "@openclaw/fs-safe-freebsd-x64",
+  "version": "0.26.5",
+  "description": "FreeBSD 14.4+ x64 native binding for @openclaw/fs-safe.",
+  "license": "MIT",
+  "author": "OpenClaw Team <dev@openclaw.ai>",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/openclaw/fs-safe.git",
+    "directory": "packages/freebsd-x64"
+  },
+  "publishConfig": {
+    "access": "public",
+    "provenance": true
+  },
+  "os": [
+    "freebsd"
+  ],
+  "cpu": [
+    "x64"
+  ],
+  "main": "fs-safe-native.node",
+  "files": [
+    "fs-safe-native.node"
+  ],
+  "engines": {
+    "node": ">=22"
+  }
+}

package/node_modules/@openclaw/fs-safe-linux-arm64-gnu/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@openclaw/fs-safe-linux-arm64-gnu",
-  "version": "0.25.0",
+  "version": "0.26.5",
   "description": "Linux arm64 glibc native binding for @openclaw/fs-safe.",
   "license": "MIT",
   "author": "OpenClaw Team <dev@openclaw.ai>",

package/node_modules/@openclaw/fs-safe-linux-arm64-musl/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@openclaw/fs-safe-linux-arm64-musl",
-  "version": "0.25.0",
+  "version": "0.26.5",
   "description": "Linux arm64 musl native binding for @openclaw/fs-safe.",
   "license": "MIT",
   "author": "OpenClaw Team <dev@openclaw.ai>",

package/node_modules/@openclaw/fs-safe-linux-x64-gnu/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@openclaw/fs-safe-linux-x64-gnu",
-  "version": "0.25.0",
+  "version": "0.26.5",
   "description": "Linux x64 glibc native binding for @openclaw/fs-safe.",
   "license": "MIT",
   "author": "OpenClaw Team <dev@openclaw.ai>",

package/node_modules/@openclaw/fs-safe-linux-x64-musl/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@openclaw/fs-safe-linux-x64-musl",
-  "version": "0.25.0",
+  "version": "0.26.5",
   "description": "Linux x64 musl native binding for @openclaw/fs-safe.",
   "license": "MIT",
   "author": "OpenClaw Team <dev@openclaw.ai>",

package/node_modules/@openclaw/fs-safe-win32-arm64-msvc/package.json

@@ -0,0 +1,29 @@
+{
+  "name": "@openclaw/fs-safe-win32-arm64-msvc",
+  "version": "0.26.5",
+  "description": "Windows ARM64 MSVC native binding for @openclaw/fs-safe.",
+  "license": "MIT",
+  "author": "OpenClaw Team <dev@openclaw.ai>",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/openclaw/fs-safe.git",
+    "directory": "packages/win32-arm64-msvc"
+  },
+  "publishConfig": {
+    "access": "public",
+    "provenance": true
+  },
+  "os": [
+    "win32"
+  ],
+  "cpu": [
+    "arm64"
+  ],
+  "main": "fs-safe-native.node",
+  "files": [
+    "fs-safe-native.node"
+  ],
+  "engines": {
+    "node": ">=22"
+  }
+}

package/node_modules/@openclaw/fs-safe-win32-x64-msvc/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@openclaw/fs-safe-win32-x64-msvc",
-  "version": "0.25.0",
+  "version": "0.26.5",
   "description": "Windows x64 MSVC native binding for @openclaw/fs-safe.",
   "license": "MIT",
   "author": "OpenClaw Team <dev@openclaw.ai>",

package/node_modules/typebox/build/value/clean/from_object.mjs

@@ -12,7 +12,7 @@ export function FromObject(context, type, value) {
         return value;
     const additionalProperties = GetAdditionalProperties(type);
     for (const key of Guard.Keys(value)) {
-        if (Guard.HasPropertyKey(type.properties, key)) {
+        if (Guard.HasPropertyKey(type.properties, key) && IsSchema(type.properties[key])) {
             value[key] = FromType(context, type.properties[key], value[key]);
             continue;
         }

package/node_modules/typebox/package.json

@@ -1,7 +1,7 @@
 {
   "name": "typebox",
   "description": "Json Schema Type Builder with Static Type Resolution for TypeScript",
-  "version": "1.3.34",
+  "version": "1.3.35",
   "keywords": [
     "typescript",
     "jsonschema"

package/openclaw.plugin.json

@@ -6,6 +6,9 @@
   "doctorContract": {
     "configRepair": true,
     "stateMigrations": [
+      {
+        "id": "matrix-crypto-unsafe-state"
+      },
       {
         "id": "matrix-account-sqlite-schema"
       },

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@openclaw/matrix",
-  "version": "2026.10.5-beta.3",
+  "version": "2026.10.10-beta.1",
   "description": "OpenClaw Matrix channel plugin for rooms and direct messages.",
   "repository": {
     "type": "git",
@@ -10,16 +10,16 @@
   "dependencies": {
     "@matrix-org/matrix-sdk-crypto-nodejs": "0.6.6",
     "@matrix-org/matrix-sdk-crypto-wasm": "18.9.0",
-    "@openclaw/fs-safe": "0.25.0",
+    "@openclaw/fs-safe": "0.26.5",
     "fake-indexeddb": "6.2.5",
     "markdown-it": "15.0.2",
     "matrix-js-sdk": "42.4.0",
     "music-metadata": "11.16.1",
-    "typebox": "1.3.34",
+    "typebox": "1.3.35",
     "zod": "4.6.5"
   },
   "peerDependencies": {
-    "openclaw": ">=2026.10.5-beta.3"
+    "openclaw": ">=2026.10.10-beta.1"
   },
   "peerDependenciesMeta": {
     "openclaw": {
@@ -158,6 +158,7 @@
       "persistedAuthState": {
         "specifier": "./dist/auth-presence.js",
         "exportName": "hasAnyMatrixAuth",
+        "exportNameAsync": "hasAnyMatrixAuthAsync",
         "backingStore": "plugin-state"
       }
     },
@@ -169,11 +170,11 @@
       "allowInvalidConfigRecovery": true
     },
     "compat": {
-      "pluginApi": ">=2026.10.5-beta.3"
+      "pluginApi": ">=2026.10.10-beta.1"
     },
     "build": {
       "bundledDist": false,
-      "openclawVersion": "2026.10.5-beta.3"
+      "openclawVersion": "2026.10.10-beta.1"
     },
     "release": {
       "publishToClawHub": true,

package/dist/.setup/runtime-setter-api-DtxDAM-x.mjs

@@ -1,3 +0,0 @@
-import { a as setMatrixRuntimeLifecycle, i as setMatrixRuntime } from "./runtime-1kn1P6io.mjs";
-import "../runtime-setter-api.js";
-export { setMatrixRuntime, setMatrixRuntimeLifecycle };

package/dist/.setup/secret-contract-DSBRvhdZ.mjs

@@ -1,95 +0,0 @@
-import { t as getMatrixScopedEnvVarNames } from "./env-vars-aEBngJPa.mjs";
-import { DEFAULT_ACCOUNT_ID, normalizeAccountId } from "openclaw/plugin-sdk/account-id";
-import { collectSecretInputAssignment, createChannelSecretTargetRegistryEntries, getChannelSurface, hasConfiguredSecretInputValue, hasOwnProperty, normalizeSecretStringValue } from "openclaw/plugin-sdk/channel-secret-basic-runtime";
-//#region extensions/matrix/src/secret-contract.ts
-function accountSecretOwner(accountId) {
-	return {
-		ownerKind: "account",
-		ownerId: `matrix:${normalizeAccountId(accountId)}`,
-		requiredForGateway: false,
-		disposition: "isolate"
-	};
-}
-const secretTargetRegistryEntries = createChannelSecretTargetRegistryEntries({
-	channelKey: "matrix",
-	account: ["accessToken", "password"],
-	channel: ["accessToken", "password"]
-});
-function collectRuntimeConfigAssignments(params) {
-	const resolved = getChannelSurface(params.config, "matrix");
-	if (!resolved) return;
-	const { channel: matrix, surface } = resolved;
-	const envAccessTokenConfigured = normalizeSecretStringValue(params.context.env.MATRIX_ACCESS_TOKEN).length > 0;
-	const defaultScopedAccessTokenConfigured = normalizeSecretStringValue(params.context.env[getMatrixScopedEnvVarNames("default").accessToken]).length > 0;
-	const defaultScopedPasswordConfigured = normalizeSecretStringValue(params.context.env[getMatrixScopedEnvVarNames("default").password]).length > 0;
-	const defaultAccount = surface.hasExplicitAccounts ? surface.accounts.find(({ accountId }) => normalizeAccountId(accountId) === DEFAULT_ACCOUNT_ID) : void 0;
-	const defaultAccountEnabled = surface.channelEnabled && (defaultAccount?.enabled ?? true);
-	const defaultAccountAccessTokenConfigured = hasConfiguredSecretInputValue(defaultAccount?.account.accessToken, params.defaults);
-	const defaultAccountPasswordConfigured = hasConfiguredSecretInputValue(defaultAccount?.account.password, params.defaults);
-	const baseAccessTokenConfigured = hasConfiguredSecretInputValue(matrix.accessToken, params.defaults);
-	collectSecretInputAssignment({
-		value: matrix.accessToken,
-		path: "channels.matrix.accessToken",
-		expected: "string",
-		defaults: params.defaults,
-		context: params.context,
-		active: defaultAccountEnabled && !defaultAccountAccessTokenConfigured && !defaultScopedAccessTokenConfigured,
-		inactiveReason: "Matrix channel or default account is disabled, or default-account access-token auth overrides the top-level accessToken.",
-		owner: accountSecretOwner(DEFAULT_ACCOUNT_ID),
-		apply: (value) => {
-			matrix.accessToken = value;
-		}
-	});
-	collectSecretInputAssignment({
-		value: matrix.password,
-		path: "channels.matrix.password",
-		expected: "string",
-		defaults: params.defaults,
-		context: params.context,
-		active: defaultAccountEnabled && !(baseAccessTokenConfigured || envAccessTokenConfigured || defaultScopedAccessTokenConfigured || defaultAccountAccessTokenConfigured || defaultAccountPasswordConfigured || defaultScopedPasswordConfigured),
-		inactiveReason: "Matrix channel or default account is disabled, or higher-precedence default-account auth is configured.",
-		owner: accountSecretOwner(DEFAULT_ACCOUNT_ID),
-		apply: (value) => {
-			matrix.password = value;
-		}
-	});
-	if (!surface.hasExplicitAccounts) return;
-	for (const { accountId, account, enabled } of surface.accounts) {
-		if (hasOwnProperty(account, "accessToken")) collectSecretInputAssignment({
-			value: account.accessToken,
-			path: `channels.matrix.accounts.${accountId}.accessToken`,
-			expected: "string",
-			defaults: params.defaults,
-			context: params.context,
-			active: enabled,
-			inactiveReason: "Matrix account is disabled.",
-			owner: accountSecretOwner(accountId),
-			apply: (value) => {
-				account.accessToken = value;
-			}
-		});
-		if (!hasOwnProperty(account, "password")) continue;
-		const accountAccessTokenConfigured = hasConfiguredSecretInputValue(account.accessToken, params.defaults);
-		const scopedEnvAccessTokenConfigured = normalizeSecretStringValue(params.context.env[getMatrixScopedEnvVarNames(accountId).accessToken]).length > 0;
-		const inheritedDefaultAccountAccessTokenConfigured = normalizeAccountId(accountId) === DEFAULT_ACCOUNT_ID && (baseAccessTokenConfigured || envAccessTokenConfigured);
-		collectSecretInputAssignment({
-			value: account.password,
-			path: `channels.matrix.accounts.${accountId}.password`,
-			expected: "string",
-			defaults: params.defaults,
-			context: params.context,
-			active: enabled && !(accountAccessTokenConfigured || scopedEnvAccessTokenConfigured || inheritedDefaultAccountAccessTokenConfigured),
-			inactiveReason: "Matrix account is disabled or this account has an accessToken configured.",
-			owner: accountSecretOwner(accountId),
-			apply: (value) => {
-				account.password = value;
-			}
-		});
-	}
-}
-const channelSecrets = {
-	secretTargetRegistryEntries,
-	collectRuntimeConfigAssignments
-};
-//#endregion
-export { collectRuntimeConfigAssignments as n, secretTargetRegistryEntries as r, channelSecrets as t };

package/dist/.setup/secret-contract-api-DzEJ-X7n.mjs

@@ -1,3 +0,0 @@
-import { n as collectRuntimeConfigAssignments, r as secretTargetRegistryEntries, t as channelSecrets } from "./secret-contract-DSBRvhdZ.mjs";
-import "../secret-contract-api.js";
-export { channelSecrets, collectRuntimeConfigAssignments, secretTargetRegistryEntries };

package/dist/.setup/setup-plugin-api-BDAYk1a5.mjs

@@ -1,3 +0,0 @@
-import { n as matrixSetupPlugin } from "./channel.setup-CwuYD_CT.mjs";
-import "../setup-plugin-api.js";
-export { matrixSetupPlugin };