@openclaw/matrix 2026.10.5-beta.4 → 2026.10.10-beta.2

package/dist/.setup/{tool-actions-DAp6_XSJ.mjs → tool-actions-DBrk6Yei.mjs}

@@ -1,16 +1,16 @@
 import { a as resolveMatrixAccountConfig, o as resolveMatrixBaseConfig } from "./account-config-CRsKoMqJ.mjs";
-import { g as resolveDefaultMatrixAccountId } from "./setup-core-CKnNTfgD.mjs";
-import { o as resolveMatrixRoomConfig } from "./channel-BcwGspPw.mjs";
+import { g as resolveDefaultMatrixAccountId } from "./setup-core-DcCk1_Tv.mjs";
+import { o as resolveMatrixRoomConfig } from "./channel-Dw4_imdd.mjs";
 import { a as normalizeMatrixResolvableTarget } from "./target-ids-HhcaKX1n.mjs";
 import { l as selectOwnMatrixReactionEventIds, s as buildMatrixReactionRelationsPath, u as summarizeMatrixReactionEvents } from "./send-currentness-C2rMVVIQ.mjs";
 import { c as isStrictDirectMembership, s as hasDirectMatrixMemberFlag, u as readJoinedMatrixMembers } from "./direct-management-B3wYhx_M.mjs";
-import { C as resolveMatrixRoomId, n as reactMatrixMessage, p as buildPollResponseContent, v as isPollStartType, y as parsePollStart } from "./send-LCOuTVc1.mjs";
+import { C as resolveMatrixRoomId, n as reactMatrixMessage, p as buildPollResponseContent, r as sendMessageMatrix, v as isPollStartType, y as parsePollStart } from "./send-BprM-Wmx.mjs";
 import { i as parseMxc } from "./event-helpers-CxNgMQqH.mjs";
-import { a as sendMatrixMessage, c as EventType, i as readMatrixMessages, l as resolveMatrixActionLimit, n as editMatrixMessage, o as fetchEventSummary, r as readMatrixMessage, s as readPinnedEvents, t as deleteMatrixMessage } from "./messages-B1CZqU8u.mjs";
-import { n as withResolvedActionClient, r as withResolvedRoomAction } from "./client-BlTvpEWC.mjs";
-import { t as applyMatrixProfileUpdate } from "./profile-update-C7bjaGR6.mjs";
-import { _ as scanMatrixVerificationQr, a as confirmMatrixVerificationSas, b as verifyMatrixRecoveryKey, c as getMatrixRoomKeyBackupStatus, d as listMatrixVerifications, f as mismatchMatrixVerificationSas, h as restoreMatrixRoomKeyBackup, i as confirmMatrixVerificationReciprocateQr, l as getMatrixVerificationSas, n as bootstrapMatrixVerification, o as generateMatrixVerificationQr, p as requestMatrixVerification, r as cancelMatrixVerification, s as getMatrixEncryptionStatus, t as acceptMatrixVerification, u as getMatrixVerificationStatus, v as startMatrixVerification } from "./verification-B3VswneT.mjs";
-import { n as getMatrixMemberInfo, r as getMatrixRoomInfo, t as createMatrixRoomInfoResolver } from "./room-info-9Uqlpt1V.mjs";
+import { a as fetchEventSummary, c as resolveMatrixActionLimit, i as readMatrixMessages, n as editMatrixMessage, o as readPinnedEvents, r as readMatrixMessage, s as EventType, t as deleteMatrixMessage } from "./messages-_XHVg3do.mjs";
+import { n as withResolvedActionClient, r as withResolvedRoomAction } from "./client-BKiiI29H.mjs";
+import { t as applyMatrixProfileUpdate } from "./profile-update--Pf3jCXD.mjs";
+import { _ as scanMatrixVerificationQr, a as confirmMatrixVerificationSas, b as verifyMatrixRecoveryKey, c as getMatrixRoomKeyBackupStatus, d as listMatrixVerifications, f as mismatchMatrixVerificationSas, h as restoreMatrixRoomKeyBackup, i as confirmMatrixVerificationReciprocateQr, l as getMatrixVerificationSas, n as bootstrapMatrixVerification, o as generateMatrixVerificationQr, p as requestMatrixVerification, r as cancelMatrixVerification, s as getMatrixEncryptionStatus, t as acceptMatrixVerification, u as getMatrixVerificationStatus, v as startMatrixVerification } from "./verification--qUbmRd-.mjs";
+import { n as getMatrixMemberInfo, r as getMatrixRoomInfo, t as createMatrixRoomInfoResolver } from "./room-info-BE7bbX_c.mjs";
 import { normalizeAccountId } from "openclaw/plugin-sdk/account-id";
 import { isRecord, normalizeLowercaseStringOrEmpty, normalizeOptionalLowercaseString, normalizeUniqueTrimmedStringList, uniqueValues } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { ToolAuthorizationError, createActionGate, jsonResult, readPositiveIntegerParam, readReactionParams, readStringArrayParam, readStringParam } from "openclaw/plugin-sdk/channel-actions";
@@ -147,9 +147,7 @@ async function removeMatrixReactions(roomId, messageId, opts = {}) {
 	return await withResolvedRoomAction(roomId, opts, async (client, resolvedRoom) => {
 		const chunk = await listMatrixReactionEvents(client, resolvedRoom, messageId, 200, { allPages: true });
 		const userId = await client.getUserId();
-		if (!userId) return { removed: 0 };
 		const toRemove = selectOwnMatrixReactionEventIds(chunk, userId, opts.emoji);
-		if (toRemove.length === 0) return { removed: 0 };
 		await Promise.all(toRemove.map((id) => client.redactEvent(resolvedRoom, id)));
 		return { removed: toRemove.length };
 	});
@@ -382,7 +380,7 @@ async function handleMatrixAction(ctx) {
 		const threadId = readStringParam(params, "threadId");
 		const audioAsVoice = typeof params.asVoice === "boolean" ? params.asVoice : typeof params.audioAsVoice === "boolean" ? params.audioAsVoice : void 0;
 		const { clientOpts } = prepareAction("messages");
-		const result = await sendMatrixMessage(to, content, {
+		const result = await sendMessageMatrix(to, content, {
 			mediaUrl: mediaUrl ?? void 0,
 			...ctx.mediaAccess ? { mediaAccess: ctx.mediaAccess } : {},
 			mediaLocalRoots: ctx.mediaLocalRoots,

package/dist/.setup/{verification-B3VswneT.mjs → verification--qUbmRd-.mjs}

@@ -1,5 +1,5 @@
 import { i as __exportAll } from "./doctor-contract-CsTNmbMa.mjs";
-import { i as withStartedActionClient, n as withResolvedActionClient } from "./client-BlTvpEWC.mjs";
+import { i as withStartedActionClient, n as withResolvedActionClient } from "./client-BKiiI29H.mjs";
 import { n as formatMatrixEncryptionUnavailableError } from "./encryption-guidance-D5_IsDIy.mjs";
 import { normalizeOptionalString } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { setTimeout } from "node:timers/promises";
@@ -270,7 +270,7 @@ async function getMatrixVerificationStatus(opts = {}) {
 		else await client.prepareForOneOff();
 		await client.refreshOwnDeviceKeys();
 		return await readMatrixVerificationStatus(client, opts);
-	}, "discard");
+	}, "persist");
 }
 async function readMatrixVerificationStatus(client, opts) {
 	const payload = {

package/dist/api.js

@@ -1,9 +1,9 @@
 import { a as resolveConfiguredMatrixAccountIds, i as requiresExplicitMatrixDefaultAccount, n as findMatrixAccountEntry, o as resolveMatrixChannelConfig, s as resolveMatrixDefaultOrOnlyAccountId } from "./.setup/account-selection-Bs_jCAaG.mjs";
 import { n as listMatrixEnvAccountIds, r as resolveMatrixEnvAccountToken, t as getMatrixScopedEnvVarNames } from "./.setup/env-vars-aEBngJPa.mjs";
 import { a as resolveMatrixCredentialsFilename, i as resolveMatrixCredentialsDir, l as sanitizeMatrixPathSegment, o as resolveMatrixCredentialsPath, r as resolveMatrixAccountStorageRoot, s as resolveMatrixHomeserverKey, t as hashMatrixAccessToken } from "./.setup/storage-paths-B51JM-pC.mjs";
-import { r as matrixSetupAdapter, t as createMatrixSetupWizardProxy } from "./.setup/setup-core-CKnNTfgD.mjs";
-import { t as matrixPlugin } from "./.setup/channel-BcwGspPw.mjs";
-import { d as setMatrixThreadBindingMaxAgeBySessionKey, l as setMatrixThreadBindingIdleTimeoutBySessionKey, n as getMatrixThreadBindingManager } from "./.setup/thread-bindings-shared-CbsFNbAY.mjs";
-import { t as matrixOnboardingAdapter } from "./.setup/onboarding-CrSexor_.mjs";
-import { t as createMatrixThreadBindingManager } from "./.setup/thread-bindings-CT4P-OSZ.mjs";
-export { createMatrixSetupWizardProxy, createMatrixThreadBindingManager, findMatrixAccountEntry, getMatrixScopedEnvVarNames, getMatrixThreadBindingManager, hashMatrixAccessToken, listMatrixEnvAccountIds, matrixOnboardingAdapter, matrixOnboardingAdapter as matrixSetupWizard, matrixPlugin, matrixSetupAdapter, requiresExplicitMatrixDefaultAccount, resolveConfiguredMatrixAccountIds, resolveMatrixAccountStorageRoot, resolveMatrixChannelConfig, resolveMatrixCredentialsDir, resolveMatrixCredentialsFilename, resolveMatrixCredentialsPath, resolveMatrixDefaultOrOnlyAccountId, resolveMatrixEnvAccountToken, resolveMatrixHomeserverKey, sanitizeMatrixPathSegment, setMatrixThreadBindingIdleTimeoutBySessionKey, setMatrixThreadBindingMaxAgeBySessionKey };
+import { r as matrixSetupAdapter, t as createMatrixSetupWizardProxy } from "./.setup/setup-core-DcCk1_Tv.mjs";
+import { t as matrixPlugin } from "./.setup/channel-Dw4_imdd.mjs";
+import { f as setMatrixThreadBindingMaxAgeBySessionKey, l as setMatrixThreadBindingIdleTimeoutBySessionKey, n as getMatrixThreadBindingManager, p as setMatrixThreadBindingMaxAgeBySessionKeyAsync, u as setMatrixThreadBindingIdleTimeoutBySessionKeyAsync } from "./.setup/thread-bindings-shared-CPjUA0Ib.mjs";
+import { t as matrixOnboardingAdapter } from "./.setup/onboarding-CK9Ksgio.mjs";
+import { t as createMatrixThreadBindingManager } from "./.setup/thread-bindings-rrwQAS6R.mjs";
+export { createMatrixSetupWizardProxy, createMatrixThreadBindingManager, findMatrixAccountEntry, getMatrixScopedEnvVarNames, getMatrixThreadBindingManager, hashMatrixAccessToken, listMatrixEnvAccountIds, matrixOnboardingAdapter, matrixOnboardingAdapter as matrixSetupWizard, matrixPlugin, matrixSetupAdapter, requiresExplicitMatrixDefaultAccount, resolveConfiguredMatrixAccountIds, resolveMatrixAccountStorageRoot, resolveMatrixChannelConfig, resolveMatrixCredentialsDir, resolveMatrixCredentialsFilename, resolveMatrixCredentialsPath, resolveMatrixDefaultOrOnlyAccountId, resolveMatrixEnvAccountToken, resolveMatrixHomeserverKey, sanitizeMatrixPathSegment, setMatrixThreadBindingIdleTimeoutBySessionKey, setMatrixThreadBindingIdleTimeoutBySessionKeyAsync, setMatrixThreadBindingMaxAgeBySessionKey, setMatrixThreadBindingMaxAgeBySessionKeyAsync };

package/dist/auth-presence.js

@@ -1,6 +1,7 @@
 import { i as normalizeMatrixStoredCredentials, t as MATRIX_CREDENTIALS_NAMESPACE } from "./.setup/credentials-state-B3cuUFwZ.mjs";
-import { createPluginStateSyncKeyedStore } from "openclaw/plugin-sdk/plugin-state-store-runtime";
+import { createPluginStateKeyedStore, createPluginStateSyncKeyedStore } from "openclaw/plugin-sdk/plugin-state-store-runtime";
 //#region extensions/matrix/auth-presence.ts
+/** @deprecated Use hasAnyMatrixAuthAsync. Final compatibility day: 2026-12-31. */
 function hasAnyMatrixAuth(params, env = process.env) {
 	const resolvedEnv = params && typeof params === "object" && "cfg" in params ? params.env ?? env : env;
 	try {
@@ -14,5 +15,18 @@ function hasAnyMatrixAuth(params, env = process.env) {
 		return false;
 	}
 }
+async function hasAnyMatrixAuthAsync(params, env = process.env) {
+	const resolvedEnv = params && typeof params === "object" && "cfg" in params ? params.env ?? env : env;
+	try {
+		return (await createPluginStateKeyedStore("matrix", {
+			namespace: MATRIX_CREDENTIALS_NAMESPACE,
+			maxEntries: 256,
+			overflowPolicy: "reject-new",
+			env: resolvedEnv
+		}).entries()).some((entry) => normalizeMatrixStoredCredentials(entry.value) !== null);
+	} catch {
+		return false;
+	}
+}
 //#endregion
-export { hasAnyMatrixAuth };
+export { hasAnyMatrixAuth, hasAnyMatrixAuthAsync };

package/dist/channel-plugin-api.js

@@ -1,2 +1 @@
-import { t as matrixPlugin } from "./.setup/channel-BcwGspPw.mjs";
-export { matrixPlugin };
+export { t as matrixPlugin } from "./.setup/channel-Dw4_imdd.mjs";

package/dist/cli-metadata.js

@@ -1,2 +1 @@
-import { n as registerMatrixCliMetadata, t as cli_metadata_default } from "./.setup/cli-metadata-6MOGuyHq.mjs";
-export { cli_metadata_default as default, registerMatrixCliMetadata };
+export { t as default, n as registerMatrixCliMetadata } from "./.setup/cli-metadata-CBLGwJT6.mjs";

package/dist/contract-api.js

@@ -1,3 +1,3 @@
-import { c as resolveSingleAccountPromotionTarget, l as singleAccountKeysToMove, r as matrixSetupAdapter, s as namedAccountPromotionKeys } from "./.setup/setup-core-CKnNTfgD.mjs";
-import { t as matrixOnboardingAdapter } from "./.setup/onboarding-CrSexor_.mjs";
+import { c as resolveSingleAccountPromotionTarget, l as singleAccountKeysToMove, r as matrixSetupAdapter, s as namedAccountPromotionKeys } from "./.setup/setup-core-DcCk1_Tv.mjs";
+import { t as matrixOnboardingAdapter } from "./.setup/onboarding-CK9Ksgio.mjs";
 export { matrixSetupAdapter, matrixOnboardingAdapter as matrixSetupWizard, namedAccountPromotionKeys, resolveSingleAccountPromotionTarget, singleAccountKeysToMove };

package/dist/doctor-contract-api.js

@@ -1,37 +1,14 @@
 import { n as normalizeCompatibilityConfig, r as runtime_doctor_migrations_exports, t as legacyConfigRules } from "./.setup/doctor-contract-CsTNmbMa.mjs";
 import { i as normalizeMatrixStoredCredentials, n as isMatrixCredentialRevocation, r as matrixCredentialsStoreKey, t as MATRIX_CREDENTIALS_NAMESPACE } from "./.setup/credentials-state-B3cuUFwZ.mjs";
-import { c as resolveMatrixStateLayoutChildDepth, i as resolveMatrixCredentialsDir } from "./.setup/storage-paths-B51JM-pC.mjs";
-import { a as describeRetiredMatrixState, o as resolveMatrixSqliteStateEnv, t as RETIRED_MATRIX_STATE_FILENAMES } from "./.setup/retired-state-DW5pLH05.mjs";
-import { i as readLegacyMatrixSyncCacheState, n as hasMatrixSyncCacheStateInStore, r as openMatrixSyncCacheStoreOptions, s as writeMatrixSyncCacheStateToStore } from "./.setup/sync-cache-state-D4G-fi3t.mjs";
+import { i as resolveMatrixCredentialsDir } from "./.setup/storage-paths-B51JM-pC.mjs";
+import { a as describeRetiredMatrixState, o as resolveMatrixSqliteStateEnv, t as RETIRED_MATRIX_STATE_FILENAMES } from "./.setup/retired-state-DOCruzWd.mjs";
+import { t as walkMatrixStateFiles } from "./.setup/state-layout-walk-BQMgMykU.mjs";
+import { i as readLegacyMatrixSyncCacheState, n as hasMatrixSyncCacheStateInStore, r as openMatrixSyncCacheStoreOptions, s as writeMatrixSyncCacheStateToStore } from "./.setup/sync-cache-state-Cnm4TCEI.mjs";
 import { normalizeAccountId } from "openclaw/plugin-sdk/account-id";
 import { isRecord } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { createHash } from "node:crypto";
 import path from "node:path";
 import fs from "node:fs/promises";
-import { hasNodeErrorCode } from "@openclaw/fs-safe/path";
-import { walkDirectory } from "@openclaw/fs-safe/walk";
-//#region extensions/matrix/src/matrix/state-layout-walk.ts
-/** Traverse only shipped Matrix layouts; archives and unrelated descendants stay unopened. */
-async function walkMatrixStateFiles(stateDir, includeFile, stateRootDepths = []) {
-	const matrixRoot = path.resolve(stateDir, "matrix");
-	const depths = /* @__PURE__ */ new Map([[matrixRoot, 0]]);
-	const result = await walkDirectory(matrixRoot, {
-		symlinks: "skip",
-		include: (entry) => entry.kind === "file" && includeFile(entry.name, depths.get(path.dirname(entry.path))),
-		descend: (entry) => {
-			const parentDepth = depths.get(path.dirname(entry.path));
-			const depth = entry.name === "state" && stateRootDepths.includes(parentDepth) ? 5 : resolveMatrixStateLayoutChildDepth(parentDepth, entry.name);
-			if (depth === null) return false;
-			depths.set(entry.path, depth);
-			return true;
-		}
-	});
-	return {
-		entries: result.entries,
-		failedDirs: result.failedDirs.filter((failure) => failure.path !== matrixRoot || !hasNodeErrorCode(failure.error, "ENOENT"))
-	};
-}
-//#endregion
 //#region extensions/matrix/src/matrix/account-state-schema-doctor.ts
 const STATE_DATABASE_FILENAME = "openclaw.sqlite";
 async function collectMatrixAccountStateRoots(stateDir) {
@@ -353,6 +330,22 @@ async function* readLegacyMatrixSyncCacheSources(stateDir) {
 	}
 }
 const stateMigrations = [
+	{
+		id: "matrix-crypto-unsafe-state",
+		label: "Matrix crypto unsafe final state",
+		async detectLegacyState(params) {
+			const { listMatrixCryptoUnsafeState } = await import("./.setup/crypto-unsafe-state-doctor-C8szCYmf.mjs").then((n) => n.t);
+			const roots = await listMatrixCryptoUnsafeState(params.stateDir, { openKeyedStoreV2: params.context.openPluginStateKeyedStore });
+			return roots.length > 0 ? { preview: roots.map((root) => `Matrix crypto store is blocked after unsafe final save: ${root}. Run openclaw matrix doctor inspect; recovery is never automatic.`) } : null;
+		},
+		async migrateLegacyState(params) {
+			const { listMatrixCryptoUnsafeState } = await import("./.setup/crypto-unsafe-state-doctor-C8szCYmf.mjs").then((n) => n.t);
+			return {
+				changes: [],
+				warnings: (await listMatrixCryptoUnsafeState(params.stateDir, { openKeyedStoreV2: params.context.openPluginStateKeyedStore })).map((root) => `Matrix crypto store remains blocked: ${root}. Inspect with openclaw matrix doctor inspect; explicit recovery may roll back keys.`)
+			};
+		}
+	},
 	matrixAccountStateSchemaMigration,
 	{
 		id: "matrix-credentials-json-to-plugin-state",

package/dist/index.js

@@ -1,24 +1,50 @@
-import { n as registerMatrixCliMetadata } from "./.setup/cli-metadata-6MOGuyHq.mjs";
+import { n as registerMatrixCliMetadata } from "./.setup/cli-metadata-CBLGwJT6.mjs";
 import { a as setMatrixRuntimeLifecycle } from "./.setup/runtime-1kn1P6io.mjs";
 import "./runtime-setter-api.js";
 import { registerMatrixSubagentHooks } from "./subagent-hooks-api.js";
 import { defineBundledChannelEntry } from "openclaw/plugin-sdk/channel-entry-contract";
+import { runWithLocalStateMutationOwner } from "openclaw/plugin-sdk/gateway-runtime";
 import { createLazyRuntimeModule } from "openclaw/plugin-sdk/lazy-runtime";
 //#region extensions/matrix/index.ts
 const loadMatrixHandlersRuntimeModule = createLazyRuntimeModule(() => import("./plugin-entry.handlers.runtime.js"));
 function registerMatrixFullRuntime(api) {
 	setMatrixRuntimeLifecycle(api.runtime, api.lifecycle);
-	api.registerGatewayMethod("matrix.verify.recoveryKey", async (ctx) => {
-		const { handleVerifyRecoveryKey } = await loadMatrixHandlersRuntimeModule();
-		await handleVerifyRecoveryKey(ctx);
-	});
-	api.registerGatewayMethod("matrix.verify.bootstrap", async (ctx) => {
-		const { handleVerificationBootstrap } = await loadMatrixHandlersRuntimeModule();
-		await handleVerificationBootstrap(ctx);
-	});
-	api.registerGatewayMethod("matrix.verify.status", async (ctx) => {
-		const { handleVerificationStatus } = await loadMatrixHandlersRuntimeModule();
-		await handleVerificationStatus(ctx);
+	for (const [method, handler] of Object.entries({
+		"matrix.verify.recoveryKey": "handleVerifyRecoveryKey",
+		"matrix.verify.bootstrap": "handleVerificationBootstrap",
+		"matrix.verify.status": "handleVerificationStatus"
+	})) for (const ownerBound of [false, true]) api.registerGatewayMethod(ownerBound ? `${method}.owner` : method, async (ctx) => {
+		let response;
+		let assertOwnerCurrent;
+		let accepted = false;
+		const run = async (assertCurrent) => {
+			const runtime = await loadMatrixHandlersRuntimeModule();
+			assertCurrent?.();
+			assertOwnerCurrent = assertCurrent;
+			accepted = true;
+			await runtime[handler](assertCurrent ? {
+				...ctx,
+				respond: (...args) => {
+					response = args;
+				}
+			} : ctx);
+		};
+		if (!ownerBound && ctx.params.expectedOwnerId === void 0) {
+			await run();
+			return;
+		}
+		try {
+			if (typeof ctx.params.expectedOwnerId !== "string" || !ctx.params.expectedOwnerId.trim()) throw new Error("expectedOwnerId must be a non-empty string");
+			await runWithLocalStateMutationOwner(ctx.params.expectedOwnerId, ctx, run);
+			assertOwnerCurrent?.();
+			if (response) ctx.respond(...response);
+		} catch (error) {
+			ctx.respond(false, void 0, {
+				code: "UNAVAILABLE",
+				message: String(error),
+				...!accepted ? { details: { mutationAccepted: false } } : {}
+			});
+		}
 	});
 	registerMatrixSubagentHooks(api);
 }

package/dist/plugin-entry.handlers.runtime.js

@@ -1,11 +1,24 @@
+import { d as resolveMatrixAuthContext } from "./.setup/client-C4Gibhzl.mjs";
 import { createLazyRuntimeModule } from "openclaw/plugin-sdk/lazy-runtime";
 import { formatErrorMessage } from "openclaw/plugin-sdk/error-runtime";
 import { normalizeOptionalString } from "openclaw/plugin-sdk/string-coerce-runtime";
 //#region extensions/matrix/src/plugin-entry.runtime.ts
-const loadMatrixVerificationRuntime = createLazyRuntimeModule(() => import("./.setup/verification-B3VswneT.mjs").then((n) => n.y));
+const loadMatrixVerificationRuntime = createLazyRuntimeModule(() => import("./.setup/verification--qUbmRd-.mjs").then((n) => n.y));
 function sendError(respond, err) {
 	respond(false, { error: formatErrorMessage(err) });
 }
+function respondVerification(request, result, success) {
+	if (request.params.expectedOwnerId !== void 0) {
+		const accountId = resolveMatrixAuthContext({
+			cfg: request.context.getRuntimeConfig(),
+			accountId: normalizeOptionalString(request.params.accountId)
+		}).accountId;
+		request.respond(true, {
+			result,
+			accountId
+		});
+	} else request.respond(success, result);
+}
 async function handleVerifyRecoveryKey({ params, respond, context }) {
 	try {
 		const { verifyMatrixRecoveryKey } = await loadMatrixVerificationRuntime();
@@ -18,7 +31,11 @@ async function handleVerifyRecoveryKey({ params, respond, context }) {
 			accountId: normalizeOptionalString(params?.accountId),
 			cfg: context.getRuntimeConfig()
 		});
-		respond(result.success, result);
+		respondVerification({
+			params,
+			respond,
+			context
+		}, result, result.success);
 	} catch (err) {
 		sendError(respond, err);
 	}
@@ -35,7 +52,11 @@ async function handleVerificationBootstrap({ params, respond, context }) {
 			recoveryKey,
 			forceResetCrossSigning
 		});
-		respond(result.success, result);
+		respondVerification({
+			params,
+			respond,
+			context
+		}, result, result.success);
 	} catch (err) {
 		sendError(respond, err);
 	}
@@ -43,11 +64,17 @@ async function handleVerificationBootstrap({ params, respond, context }) {
 async function handleVerificationStatus({ params, respond, context }) {
 	try {
 		const { getMatrixVerificationStatus } = await loadMatrixVerificationRuntime();
-		respond(true, await getMatrixVerificationStatus({
+		const status = await getMatrixVerificationStatus({
 			accountId: normalizeOptionalString(params?.accountId),
 			includeRecoveryKey: params?.includeRecoveryKey === true,
+			...params.allowDegradedLocalState === true ? { readiness: "none" } : {},
 			cfg: context.getRuntimeConfig()
-		}));
+		});
+		respondVerification({
+			params,
+			respond,
+			context
+		}, status, true);
 	} catch (err) {
 		sendError(respond, err);
 	}

package/dist/runtime-api.js

@@ -2,12 +2,12 @@ import { i as setMatrixRuntime } from "./.setup/runtime-1kn1P6io.mjs";
 import { a as resolveConfiguredMatrixAccountIds, f as resolveMatrixAccountStringValues, i as requiresExplicitMatrixDefaultAccount, n as findMatrixAccountEntry, o as resolveMatrixChannelConfig, s as resolveMatrixDefaultOrOnlyAccountId } from "./.setup/account-selection-Bs_jCAaG.mjs";
 import { n as listMatrixEnvAccountIds, r as resolveMatrixEnvAccountToken, t as getMatrixScopedEnvVarNames } from "./.setup/env-vars-aEBngJPa.mjs";
 import { a as resolveMatrixCredentialsFilename, i as resolveMatrixCredentialsDir, l as sanitizeMatrixPathSegment, o as resolveMatrixCredentialsPath, r as resolveMatrixAccountStorageRoot, s as resolveMatrixHomeserverKey, t as hashMatrixAccessToken } from "./.setup/storage-paths-B51JM-pC.mjs";
-import { d as setMatrixThreadBindingMaxAgeBySessionKey, l as setMatrixThreadBindingIdleTimeoutBySessionKey } from "./.setup/thread-bindings-shared-CbsFNbAY.mjs";
+import { f as setMatrixThreadBindingMaxAgeBySessionKey, l as setMatrixThreadBindingIdleTimeoutBySessionKey, p as setMatrixThreadBindingMaxAgeBySessionKeyAsync, u as setMatrixThreadBindingIdleTimeoutBySessionKeyAsync } from "./.setup/thread-bindings-shared-CPjUA0Ib.mjs";
 import { n as ensureMatrixSdkInstalled, r as isMatrixSdkAvailable } from "./.setup/deps-L_1bUAGL.mjs";
 import { chunkTextForOutbound as chunkTextForOutbound$1 } from "openclaw/plugin-sdk/text-chunking";
 import { assertHttpUrlTargetsPrivateNetwork, closeDispatcher, createPinnedDispatcher, resolvePinnedHostnameWithPolicy, ssrfPolicyFromDangerouslyAllowPrivateNetwork } from "openclaw/plugin-sdk/ssrf-runtime";
-import { writeJsonFileAtomically } from "openclaw/plugin-sdk/json-store";
 import { formatZonedTimestamp } from "openclaw/plugin-sdk/time-runtime";
+import { writeJsonFileAtomically } from "openclaw/plugin-sdk/json-store";
 //#region extensions/matrix/runtime-api.ts
 function chunkTextForOutbound(text, limit) {
 	if (text.length === 0 || limit <= 0) return [text];
@@ -25,4 +25,4 @@ function chunkTextForOutbound(text, limit) {
 	return chunks;
 }
 //#endregion
-export { assertHttpUrlTargetsPrivateNetwork, chunkTextForOutbound, closeDispatcher, createPinnedDispatcher, ensureMatrixSdkInstalled, findMatrixAccountEntry, formatZonedTimestamp, getMatrixScopedEnvVarNames, hashMatrixAccessToken, isMatrixSdkAvailable, listMatrixEnvAccountIds, requiresExplicitMatrixDefaultAccount, resolveConfiguredMatrixAccountIds, resolveMatrixAccountStorageRoot, resolveMatrixAccountStringValues, resolveMatrixChannelConfig, resolveMatrixCredentialsDir, resolveMatrixCredentialsFilename, resolveMatrixCredentialsPath, resolveMatrixDefaultOrOnlyAccountId, resolveMatrixEnvAccountToken, resolveMatrixHomeserverKey, resolvePinnedHostnameWithPolicy, sanitizeMatrixPathSegment, setMatrixRuntime, setMatrixThreadBindingIdleTimeoutBySessionKey, setMatrixThreadBindingMaxAgeBySessionKey, ssrfPolicyFromDangerouslyAllowPrivateNetwork, writeJsonFileAtomically };
+export { assertHttpUrlTargetsPrivateNetwork, chunkTextForOutbound, closeDispatcher, createPinnedDispatcher, ensureMatrixSdkInstalled, findMatrixAccountEntry, formatZonedTimestamp, getMatrixScopedEnvVarNames, hashMatrixAccessToken, isMatrixSdkAvailable, listMatrixEnvAccountIds, requiresExplicitMatrixDefaultAccount, resolveConfiguredMatrixAccountIds, resolveMatrixAccountStorageRoot, resolveMatrixAccountStringValues, resolveMatrixChannelConfig, resolveMatrixCredentialsDir, resolveMatrixCredentialsFilename, resolveMatrixCredentialsPath, resolveMatrixDefaultOrOnlyAccountId, resolveMatrixEnvAccountToken, resolveMatrixHomeserverKey, resolvePinnedHostnameWithPolicy, sanitizeMatrixPathSegment, setMatrixRuntime, setMatrixThreadBindingIdleTimeoutBySessionKey, setMatrixThreadBindingIdleTimeoutBySessionKeyAsync, setMatrixThreadBindingMaxAgeBySessionKey, setMatrixThreadBindingMaxAgeBySessionKeyAsync, ssrfPolicyFromDangerouslyAllowPrivateNetwork, writeJsonFileAtomically };

package/dist/runtime-setter-api.js

@@ -1,2 +1 @@
-import { a as setMatrixRuntimeLifecycle, i as setMatrixRuntime } from "./.setup/runtime-1kn1P6io.mjs";
-export { setMatrixRuntime, setMatrixRuntimeLifecycle };
+export { i as setMatrixRuntime, a as setMatrixRuntimeLifecycle } from "./.setup/runtime-1kn1P6io.mjs";

package/dist/secret-contract-api.js

@@ -1,2 +1 @@
-import { n as collectRuntimeConfigAssignments, r as secretTargetRegistryEntries, t as channelSecrets } from "./.setup/secret-contract-DSBRvhdZ.mjs";
-export { channelSecrets, collectRuntimeConfigAssignments, secretTargetRegistryEntries };
+export { t as channelSecrets, n as collectRuntimeConfigAssignments, r as secretTargetRegistryEntries } from "./.setup/secret-contract-DxyzKSzf.mjs";

package/dist/session-binding-contract-api.js

@@ -1,3 +1,3 @@
 import { i as setMatrixRuntime } from "./.setup/runtime-1kn1P6io.mjs";
-import { t as createMatrixThreadBindingManager } from "./.setup/thread-bindings-CT4P-OSZ.mjs";
+import { t as createMatrixThreadBindingManager } from "./.setup/thread-bindings-rrwQAS6R.mjs";
 export { createMatrixThreadBindingManager, setMatrixRuntime };

package/dist/setup-entry.js

@@ -4,15 +4,15 @@ import { fileURLToPath } from "node:url";
 var setup_entry_default = defineBundledChannelSetupEntry({
 	importMetaUrl: import.meta.url,
 	plugin: {
-		specifier: fileURLToPath(new URL(".setup/setup-plugin-api-BDAYk1a5.mjs", import.meta.url).href),
+		specifier: fileURLToPath(new URL(".setup/setup-plugin-api-BU6UGksW.mjs", import.meta.url).href),
 		exportName: "matrixSetupPlugin"
 	},
 	secrets: {
-		specifier: fileURLToPath(new URL(".setup/secret-contract-api-DzEJ-X7n.mjs", import.meta.url).href),
+		specifier: fileURLToPath(new URL(".setup/secret-contract-api-Dukgvike.mjs", import.meta.url).href),
 		exportName: "channelSecrets"
 	},
 	runtime: {
-		specifier: fileURLToPath(new URL(".setup/runtime-setter-api-DtxDAM-x.mjs", import.meta.url).href),
+		specifier: fileURLToPath(new URL(".setup/runtime-setter-api-i2MOXoT3.mjs", import.meta.url).href),
 		exportName: "setMatrixRuntime"
 	}
 });

package/dist/setup-plugin-api.js

@@ -1,2 +1 @@
-import { n as matrixSetupPlugin } from "./.setup/channel.setup-CwuYD_CT.mjs";
-export { matrixSetupPlugin };
+export { n as matrixSetupPlugin } from "./.setup/channel.setup-Be8TYKMA.mjs";

package/dist/subagent-hooks-api.js

@@ -1,6 +1,6 @@
 import { createLazyRuntimeModule } from "openclaw/plugin-sdk/lazy-runtime";
 //#region extensions/matrix/subagent-hooks-api.ts
-const loadMatrixSubagentHooksModule = createLazyRuntimeModule(() => import("./.setup/subagent-hooks-D8jyeQsO.mjs"));
+const loadMatrixSubagentHooksModule = createLazyRuntimeModule(() => import("./.setup/subagent-hooks-CSY4iwa_.mjs"));
 function registerMatrixSubagentHooks(api) {
 	api.on("subagent_ended", async (event) => {
 		const { handleMatrixSubagentEnded } = await loadMatrixSubagentHooksModule();

package/dist/thread-binding-api.js

@@ -1,2 +1 @@
-import { n as resolveMatrixInboundConversation, t as defaultTopLevelPlacement } from "./.setup/thread-binding-api-BvuaKpd0.mjs";
-export { defaultTopLevelPlacement, resolveMatrixInboundConversation as resolveInboundConversation };
+export { t as defaultTopLevelPlacement, n as resolveInboundConversation } from "./.setup/thread-binding-api-BvuaKpd0.mjs";

package/dist/thread-bindings-runtime.js

@@ -1,2 +1 @@
-import { d as setMatrixThreadBindingMaxAgeBySessionKey, l as setMatrixThreadBindingIdleTimeoutBySessionKey } from "./.setup/thread-bindings-shared-CbsFNbAY.mjs";
-export { setMatrixThreadBindingIdleTimeoutBySessionKey, setMatrixThreadBindingMaxAgeBySessionKey };
+export { l as setMatrixThreadBindingIdleTimeoutBySessionKey, u as setMatrixThreadBindingIdleTimeoutBySessionKeyAsync, f as setMatrixThreadBindingMaxAgeBySessionKey, p as setMatrixThreadBindingMaxAgeBySessionKeyAsync } from "./.setup/thread-bindings-shared-CPjUA0Ib.mjs";

package/node_modules/@openclaw/fs-safe/CHANGELOG.md

@@ -2,6 +2,154 @@
 
 ## Unreleased
 
+## 0.26.5 - 2026-10-14
+
+### Highlights
+
+- **Android/Termux and WSL compatibility:** create temporary workspaces under Android system-owned ancestors and complete short nonblocking reads on WSL/9p filesystems. ([#982](https://github.com/openclaw/fs-safe/pull/982), [#983](https://github.com/openclaw/fs-safe/pull/983))
+- **Windows synchronous read batches:** add `createRootFileOpenBatchSync()` to reuse native root handles while retaining per-file safety checks. ([#984](https://github.com/openclaw/fs-safe/pull/984))
+
+### Features
+
+- **Windows synchronous read batches:** reuse native root handles with `createRootFileOpenBatchSync()` while retaining fresh file identity, reparse, hardlink, byte-limit, and confinement checks. ([#984](https://github.com/openclaw/fs-safe/pull/984))
+
+### Fixes
+
+- **WSL/9p reads:** finish short nonblocking reads instead of truncating uncapped files, atomic copy fallbacks, or content verification. Thanks @Hawk5150 for [openclaw/openclaw#145589](https://github.com/openclaw/openclaw/issues/145589). ([#983](https://github.com/openclaw/fs-safe/pull/983))
+- **Android/Termux temp workspaces:** admit system-owned ancestors and Android-private writable groups while preserving private roots and full ancestry checks. Thanks @kukirin-ui for [openclaw/openclaw#171406](https://github.com/openclaw/openclaw/issues/171406). ([#982](https://github.com/openclaw/fs-safe/pull/982))
+
+## 0.26.4 - 2026-10-13
+
+### Fixes
+
+- **Windows AppContainers:** private files and directories now work inside a Windows AppContainer: the creating container can reopen them and other containers stay denied. Requires the native addon; folder-mounted volumes fail closed. Behavior outside a container is unchanged. Thanks @jonathanlindsay. Reported in [openclaw/openclaw#160287](https://github.com/openclaw/openclaw/issues/160287); limits are in the [permissions guide](docs/permissions.md#advanced-windows-acl-helpers). ([#980](https://github.com/openclaw/fs-safe/pull/980))
+
+### Docs and Tooling
+
+- **Windows durability costs:** explain what non-durable writes cost and save on Windows. ([#973](https://github.com/openclaw/fs-safe/pull/973))
+
+## 0.26.3 - 2026-10-13
+
+### Highlights
+
+- **Native health and signed Windows binaries:** inspect runtime native support with `getFsSafeNativeStatus()`; Windows addons and the security helper now carry timestamped OpenClaw Foundation signatures. ([#965](https://github.com/openclaw/fs-safe/pull/965), [#960](https://github.com/openclaw/fs-safe/pull/960))
+- **Linux copy compatibility:** recover from refused reflink I/O, including ZFS block cloning, through a guarded byte copy. ([#972](https://github.com/openclaw/fs-safe/pull/972))
+- **Less native filesystem overhead:** retain directory parents, reuse writable-file admission, batch Root verification, and avoid unrelated macOS watch wakeups. ([#971](https://github.com/openclaw/fs-safe/pull/971), [#959](https://github.com/openclaw/fs-safe/pull/959), [#966](https://github.com/openclaw/fs-safe/pull/966), [#955](https://github.com/openclaw/fs-safe/pull/955), [#968](https://github.com/openclaw/fs-safe/pull/968))
+
+### Features
+
+- **Native runtime health:** add async `getFsSafeNativeStatus()` with optional probing, path-free load reasons, and actionable guidance, exported from the root and `config` entry points. ([#965](https://github.com/openclaw/fs-safe/pull/965))
+- **Signed Windows binaries:** Authenticode-sign both Windows native addons and the security helper with timestamped OpenClaw Foundation signatures, and verify the signed bytes before publication. ([#960](https://github.com/openclaw/fs-safe/pull/960))
+
+### Fixes
+
+- **High-bit filesystem identities:** preserve Node's signed bigint stat identities across native directory checks, allowing guarded writes and build locks on filesystems with high-bit inode numbers. ([#979](https://github.com/openclaw/fs-safe/pull/979))
+- **Linux reflink fallback:** fall back to a guarded byte copy when FICLONE refuses I/O with `EIO` or `EAGAIN`, including ZFS block cloning; real copy and cleanup errors remain fatal. Reported in [openclaw/openclaw#169071](https://github.com/openclaw/openclaw/issues/169071). ([#972](https://github.com/openclaw/fs-safe/pull/972))
+- **Native fallback warnings:** explain why native support is unavailable, name the expected package version, and give cause-specific recovery guidance for Windows security and private-creation fallbacks. ([#961](https://github.com/openclaw/fs-safe/pull/961))
+
+### Performance
+
+- **Native directory creation:** retain parent handles during recursive mkdir, reducing the measured case from 160 to 5 promises and 381 to 74 Linux syscalls; nested mkdir also reuses existing parents. ([#971](https://github.com/openclaw/fs-safe/pull/971), [#959](https://github.com/openclaw/fs-safe/pull/959))
+- **Native writable-file creation:** reuse parent admission, reducing measured direct-root append syscalls from 117 to 36 and `openWritable` syscalls from 115 to 34 while retaining identity and cleanup checks. ([#966](https://github.com/openclaw/fs-safe/pull/966))
+- **Native Root verification:** batch verification and checked close to reduce dispatch overhead while retaining identity checks and close-error handling. ([#955](https://github.com/openclaw/fs-safe/pull/955))
+- **macOS file watching:** avoid JavaScript reconciliation for unrelated sibling writes and child-only changes to directory entry scopes while preserving missing-entry discovery and replacement notifications. ([#968](https://github.com/openclaw/fs-safe/pull/968))
+
+### Docs and Tooling
+
+- **Durable queue design:** document a link-free ownership protocol and mixed-version boundaries. ([#969](https://github.com/openclaw/fs-safe/pull/969))
+- **Benchmark comparisons:** balance independent build comparisons and restore benchmark setup in relocated checkouts. ([#976](https://github.com/openclaw/fs-safe/pull/976), [#970](https://github.com/openclaw/fs-safe/pull/970))
+
+## 0.26.2 - 2026-10-11
+
+### Highlights
+
+- **Windows receipt round trips:** use exact bigint identities from fs-safe receipts with the fail-closed identity checks introduced in 0.26.1. ([#962](https://github.com/openclaw/fs-safe/pull/962))
+
+### Fixes
+
+- **Windows file identity:** publication, reads, opens, directory and temporary-workspace receipts, typed listings, and clone metadata now expose bigint `exactIdentity`; publication failures expose `exactTargetIdentity`. Pass the exact form back to identity-checking APIs, including publication and copy expectations, to avoid rejecting rounded legacy Number identities on volumes with large file IDs. Existing exact copy and staged-file receipts remain supported. ([#962](https://github.com/openclaw/fs-safe/pull/962))
+
+### Performance
+
+- **Windows permission inspection:** avoid PowerShell startup for portable owner and ACL queries, about 8× faster in a Windows x64 probe, while preserving injected executors and .NET ACL semantics; requires .NET Framework 4.6.2+. ([#958](https://github.com/openclaw/fs-safe/pull/958))
+
+## 0.26.1 - 2026-10-11
+
+### Highlights
+
+- **Windows identity checks:** reject rounded file IDs; callers supplying identity stats must use bigint values. ([#949](https://github.com/openclaw/fs-safe/pull/949))
+- **Listings and copies:** measured listings are 38–54% faster on Linux and Windows; direct synchronous file copies are 11–31% faster, with Windows batches up to 48% faster. ([#934](https://github.com/openclaw/fs-safe/pull/934), [#932](https://github.com/openclaw/fs-safe/pull/932))
+- **Windows private creation:** the portable helper is about 5× faster, and private creation works beyond MAX_PATH. ([#930](https://github.com/openclaw/fs-safe/pull/930), [#924](https://github.com/openclaw/fs-safe/pull/924))
+- **Native overhead:** reduce dispatch and repeated admission for direct-child mkdir, removal, moves, existing-file opens, buffered publication, and async temp creation; measured eligible cases reach or improve on fallback performance while retaining native checks. ([#927](https://github.com/openclaw/fs-safe/pull/927), [#928](https://github.com/openclaw/fs-safe/pull/928), [#929](https://github.com/openclaw/fs-safe/pull/929), [#948](https://github.com/openclaw/fs-safe/pull/948), [#953](https://github.com/openclaw/fs-safe/pull/953))
+
+### Fixes
+
+- **Windows file identity:** stop accepting rounded Number file IDs as matches. Callers supplying identity stats must now pass bigint stats; unsafe Number identities fail with `path-mismatch`. ([#949](https://github.com/openclaw/fs-safe/pull/949))
+- **Windows long paths:** support private directory and file creation beyond MAX_PATH, including internal staging and pathname verification, while preserving ACL, alias, identity, and cleanup checks. ([#924](https://github.com/openclaw/fs-safe/pull/924))
+
+### Performance
+
+- **Listings and traversal:** avoid per-entry filename buffers for losslessly decoded names, making measured Linux and Windows listings 38–54% faster; halve per-entry promise allocation in complete sorted `Root.walk()` scans, improving measured 50,000-entry Linux walks by 3–4%. ([#934](https://github.com/openclaw/fs-safe/pull/934), [#937](https://github.com/openclaw/fs-safe/pull/937))
+- **File copies and moves:** reuse canonical admission in `copyRootFileSync`, improving measured direct copies by 11–31% on Linux and Windows and batches by up to 47–48% on Windows; reduce ordinary `Root.copyIn()` and same-parent move promise allocation without claiming a reproduced latency gain. ([#932](https://github.com/openclaw/fs-safe/pull/932), [#941](https://github.com/openclaw/fs-safe/pull/941), [#936](https://github.com/openclaw/fs-safe/pull/936))
+- **Reads and hashing:** trim file-admission and bounded-read metadata work for 2–9% faster measured Linux reads; reuse privately owned Windows handles for 42% faster native async SHA-256 on small pathname inputs, retaining borrowed-handle positions. ([#931](https://github.com/openclaw/fs-safe/pull/931), [#938](https://github.com/openclaw/fs-safe/pull/938))
+- **Locks and directories:** reduce uncontended sidecar-lock acquisition overhead by up to 34% with native; remove ordinary mkdir dispatch hops for 37% faster native direct-child creation, 17–22% faster existing-directory admission, and 81% faster native `ensureRoot` in the combined Linux benchmark. ([#939](https://github.com/openclaw/fs-safe/pull/939), [#944](https://github.com/openclaw/fs-safe/pull/944), [#927](https://github.com/openclaw/fs-safe/pull/927))
+- **Temporary workspaces and removal:** make measured empty-workspace cleanup 13–32% faster on Linux, create async workspaces through retained parents, and reduce recursive-removal stat allocation for 2–6% faster measured Linux recursive removal; retain identity-bound cleanup. ([#942](https://github.com/openclaw/fs-safe/pull/942), [#953](https://github.com/openclaw/fs-safe/pull/953), [#933](https://github.com/openclaw/fs-safe/pull/933))
+- **Private and exclusive creation:** run portable Windows security checks in a prebuilt helper for about 5× faster private creation; streamline exclusive-creation metadata and skip redundant Windows write-mode changes without removing flushes or permission checks. ([#930](https://github.com/openclaw/fs-safe/pull/930), [#935](https://github.com/openclaw/fs-safe/pull/935), [#940](https://github.com/openclaw/fs-safe/pull/940))
+- **Native operations:** reuse retained roots for removal and moves, defer parent creation until an opened file is missing, and streamline buffered creation and replacement-write publication; preserve descriptor-relative mutation and exact identity checks. Native non-durable publication reaches fallback parity in the measured cases; durable creation remains slower. ([#928](https://github.com/openclaw/fs-safe/pull/928), [#929](https://github.com/openclaw/fs-safe/pull/929), [#948](https://github.com/openclaw/fs-safe/pull/948))
+
+### Docs and Tooling
+
+- **Raw Node baseline:** add `pnpm benchmark:node` with alternating raw/safe/control samples and documented operation semantics; raw Node is a performance reference, not a security-equivalent implementation. ([#925](https://github.com/openclaw/fs-safe/pull/925))
+- **Native API reference:** enumerate APIs that require native bindings and their fallback availability. ([#926](https://github.com/openclaw/fs-safe/pull/926))
+
+## 0.26.0 - 2026-10-10
+
+### Highlights
+
+- **New platforms:** native packages for FreeBSD x64/arm64 and Windows ARM64. ([#905](https://github.com/openclaw/fs-safe/pull/905), [#893](https://github.com/openclaw/fs-safe/pull/893))
+- **Native capabilities:** anonymous pipes, Linux write leases, Darwin ACL inspection, ReFS block cloning, and metadata- and link-preserving `Root.copyIn`. ([#892](https://github.com/openclaw/fs-safe/pull/892), [#896](https://github.com/openclaw/fs-safe/pull/896), [#920](https://github.com/openclaw/fs-safe/pull/920), [#921](https://github.com/openclaw/fs-safe/pull/921))
+- **Android/Termux publication:** staged no-replace copies and writes work when the OS refuses hard links. ([#888](https://github.com/openclaw/fs-safe/pull/888))
+- **Performance:** faster deep archive extraction, borrowed-handle copies and overwrites, sidecar locks, and Linux descriptor verification, with identity checks retained. ([#912](https://github.com/openclaw/fs-safe/pull/912), [#906](https://github.com/openclaw/fs-safe/pull/906), [#902](https://github.com/openclaw/fs-safe/pull/902), [#901](https://github.com/openclaw/fs-safe/pull/901), [#899](https://github.com/openclaw/fs-safe/pull/899))
+
+### Features
+
+- **ReFS file copies:** support guarded `Root.copyIn` block cloning on Windows ReFS and Dev Drive, with exclusive publication, cancellation cleanup, and automatic byte-copy fallback for unavailable clone capabilities. ([#920](https://github.com/openclaw/fs-safe/pull/920))
+- **Guarded file copying:** add `Root.copyIn` metadata preservation and exclusive literal-link copying, including dangling Windows file and directory links; keep permission selection separate from timestamps and attributes. ([#921](https://github.com/openclaw/fs-safe/pull/921))
+
+- **Native filesystem capabilities:** add Linux write leases on caller-owned descriptors, no-follow Darwin ACL inspection with separate file and directory inheritance facts, and Windows sharing-lock, attribute, and physical-extent test fixtures. ([#896](https://github.com/openclaw/fs-safe/pull/896))
+- **Anonymous pipes:** add `@openclaw/fs-safe/pipe` with native-owned, reopenable close-on-exec pipe ends for one-shot child input on POSIX, including safe stream closure in Workers. ([#892](https://github.com/openclaw/fs-safe/pull/892))
+
+### Fixes
+
+- **Windows creation diagnostics:** retain native Win32 error numbers through private directory and file creation failures, including the command fallback, without changing semantic error codes. ([#919](https://github.com/openclaw/fs-safe/pull/919))
+- **FreeBSD native packages:** add x64 and arm64 packages for FreeBSD 14.4+, with native anonymous pipes and canonicalization, and explicit capability absence for unported operations. ([#905](https://github.com/openclaw/fs-safe/pull/905))
+- **Partial native bindings:** select guarded fallbacks when an operation's native capabilities are absent, and report typed capability errors in required mode before mutation. ([#905](https://github.com/openclaw/fs-safe/pull/905))
+- **Android/Termux publication:** publish staged no-replace copies and writes when hardlinks are refused, using a verified empty placeholder before atomic replacement; include `EACCES` in the public hardlink-to-copy fallback classifier. Reported in [openclaw/openclaw#167791](https://github.com/openclaw/openclaw/issues/167791). ([#888](https://github.com/openclaw/fs-safe/pull/888))
+- **Native ZIP names:** preserve CP437 decoding for unflagged legacy filenames after the ZIP 9 upgrade, including collision rejection and bounded entry selection; continue rejecting invalid Unicode Path checksums and encodings before decoder normalization. ([#885](https://github.com/openclaw/fs-safe/pull/885))
+- **Native ZIP Unicode fields:** retain rejection of invalid Unicode Comment CRCs and UTF-8 before callbacks or bounded reads, and validate sequential Unicode fields in decoder order without repeated hashing of the original name. ([#887](https://github.com/openclaw/fs-safe/pull/887))
+- **Portable ZIP extraction:** accept safe relative root-directory markers such as `./` from libarchive and other producers without turning them into absolute paths; root markers remain skipped before callbacks and publication. ([#886](https://github.com/openclaw/fs-safe/pull/886))
+- **Durable JSON queues on Android/Termux:** claim, failed-entry quarantine, and retirement recovery report typed `helper-unavailable` errors when hardlinks are refused, preserving pending, claimed, and retirement evidence for retry. ([#889](https://github.com/openclaw/fs-safe/pull/889))
+- **Windows exclusive publication:** preserve dangling destination symlinks when a refused hard link falls back to placeholder publication. ([#894](https://github.com/openclaw/fs-safe/pull/894))
+- **Native mkdir collisions:** `Root.mkdir` consistently reports `not-file` for an existing regular-file destination in native require mode. ([#895](https://github.com/openclaw/fs-safe/pull/895))
+- **Guest directory publication:** report a changed source identity instead of a false destination collision when a Linux fallback rename refuses a substituted source. ([#898](https://github.com/openclaw/fs-safe/pull/898))
+- **Native recursive removal:** honor a zero entry budget before ignoring a missing target, including with `force`. ([#904](https://github.com/openclaw/fs-safe/pull/904))
+
+### Performance
+
+- **Linux opened-file verification:** read ordinary procfs descriptor paths directly instead of walking realpath, keeping identity checks and deleted-path canonicalization; `readLocalFileSafely` is 25–28% faster on deep paths. ([#899](https://github.com/openclaw/fs-safe/pull/899))
+- **Borrowed handles and locks:** keep descriptor metadata inspection off the asynchronous I/O queue for small overwrites (26–28% faster) and copies (31–34% faster), and skip a redundant parent `mkdir` when acquiring sidecar locks (15–18% faster). ([#901](https://github.com/openclaw/fs-safe/pull/901), [#902](https://github.com/openclaw/fs-safe/pull/902), [#906](https://github.com/openclaw/fs-safe/pull/906))
+- **Deep archive extraction:** native extraction verifies every retained ancestor through its open descriptor instead of repeated realpath walks: about 16% faster at depth 8 and 5–6% at depth 4, with every ancestor substitution check retained. ([#912](https://github.com/openclaw/fs-safe/pull/912))
+
+### Docs and Tooling
+
+- **Docs accuracy:** correct native-mode migration guidance for removed Python settings and bundled TAR fallbacks, clarify Root streaming ownership, create-only visibility, and Linux no-clobber move fallback limits, and fix the JSON-store and stale-lock examples so denied process probes keep live locks; README and docs examples are now type-checked in CI. ([#897](https://github.com/openclaw/fs-safe/pull/897), [#900](https://github.com/openclaw/fs-safe/pull/900), [#903](https://github.com/openclaw/fs-safe/pull/903))
+
+### Compatibility
+
+- **Windows ARM64:** add a native ARM64 package with real Windows 11 ARM64 and x64-emulation validation, including private ACL creation and Worker descriptor ownership. ([#893](https://github.com/openclaw/fs-safe/pull/893))
+
+- **Native ZIP metadata:** invalid UTF-8-flagged names now reject instead of decoding lossily or falling back to CP437. Public ZIP extraction, preflight, and reads already reject these names during physical admission. ([#885](https://github.com/openclaw/fs-safe/pull/885))
+
 ## 0.25.0 - 2026-10-08
 
 ### Highlights