@openclaw/matrix 2026.6.33 → 2026.6.35

package/dist/api.js

@@ -1,11 +1,11 @@
 import { a as resolveMatrixDefaultOrOnlyAccountId, i as resolveMatrixChannelConfig, n as requiresExplicitMatrixDefaultAccount, r as resolveConfiguredMatrixAccountIds, t as findMatrixAccountEntry } from "./account-selection-Bv_ZuOu4.js";
 import { n as listMatrixEnvAccountIds, r as resolveMatrixEnvAccountToken, t as getMatrixScopedEnvVarNames } from "./env-vars-KzaYveuy.js";
 import { a as resolveMatrixCredentialsPath, c as resolveMatrixLegacyFlatStoreRoot, i as resolveMatrixCredentialsFilename, l as sanitizeMatrixPathSegment, n as resolveMatrixAccountStorageRoot, o as resolveMatrixHomeserverKey, r as resolveMatrixCredentialsDir, s as resolveMatrixLegacyFlatStoragePaths, t as hashMatrixAccessToken } from "./storage-paths-BWo_ZEMC.js";
-import { n as matrixSetupAdapter, t as createMatrixSetupWizardProxy } from "./setup-core-Ub_idsu1.js";
-import { t as matrixPlugin } from "./channel-QIfssnwm.js";
+import { n as matrixSetupAdapter, t as createMatrixSetupWizardProxy } from "./setup-core-CVo-64kh.js";
+import { t as matrixPlugin } from "./channel-R4ZIKMwT.js";
 import { d as setMatrixThreadBindingIdleTimeoutBySessionKey, n as getMatrixThreadBindingManager, p as setMatrixThreadBindingMaxAgeBySessionKey, s as resetMatrixThreadBindingsForTests } from "./thread-bindings-shared-CKnY4LSd.js";
-import { n as matrixOnboardingAdapter } from "./setup-surface-CXenmuMm.js";
-import { t as createMatrixThreadBindingManager } from "./thread-bindings-DuoPRata.js";
+import { n as matrixOnboardingAdapter } from "./setup-surface-Du6-iuN4.js";
+import { t as createMatrixThreadBindingManager } from "./thread-bindings-d512FOPe.js";
 //#region extensions/matrix/api.ts
 const matrixSessionBindingAdapterChannels = ["matrix"];
 //#endregion

package/dist/{approval-handler.runtime-Zq8FeqLy.js → approval-handler.runtime-BjBtbrdi.js}

@@ -1,9 +1,9 @@
-import { g as resolveMatrixAccount } from "./setup-core-Ub_idsu1.js";
-import { _ as shouldHandleMatrixApprovalRequest, g as isMatrixAnyApprovalClientEnabled } from "./channel-QIfssnwm.js";
+import { g as resolveMatrixAccount } from "./setup-core-CVo-64kh.js";
+import { _ as shouldHandleMatrixApprovalRequest, g as isMatrixAnyApprovalClientEnabled } from "./channel-R4ZIKMwT.js";
 import { a as resolveMatrixTargetIdentity } from "./target-ids-B-5aQxwn.js";
-import { a as sendMessageMatrix, i as reactMatrixMessage, p as repairMatrixDirectRooms, s as sendSingleTextMessageMatrix } from "./send-eoayPB_l.js";
+import { a as sendMessageMatrix, i as reactMatrixMessage, p as repairMatrixDirectRooms, s as sendSingleTextMessageMatrix } from "./send-BMwJ5LY2.js";
 import { a as unregisterMatrixApprovalReactionTarget, n as listMatrixApprovalReactionBindings, r as registerMatrixApprovalReactionTarget, t as buildMatrixApprovalReactionHint } from "./approval-reactions-BRGQgOu2.js";
-import { n as editMatrixMessage, t as deleteMatrixMessage } from "./messages-CMTiMecS.js";
+import { n as editMatrixMessage, t as deleteMatrixMessage } from "./messages-BFuuCO_k.js";
 import { listMessageReceiptPlatformIds, resolveMessageReceiptPrimaryId } from "openclaw/plugin-sdk/channel-outbound";
 import { normalizeUniqueStringEntries } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { buildChannelApprovalNativeTargetKey } from "openclaw/plugin-sdk/approval-native-runtime";

package/dist/{approval-ids-gM2AFaP-.js → approval-ids-D_MGByp6.js}

@@ -1,4 +1,4 @@
-import { a as normalizeMatrixUserId } from "./config-schema-o1UmRtMF.js";
+import { a as normalizeMatrixUserId } from "./config-schema-BcOo_2Py.js";
 //#region extensions/matrix/src/approval-ids.ts
 function normalizeMatrixApproverId(value) {
 	return normalizeMatrixUserId(String(value)) || void 0;

package/dist/{approval-reaction-auth--lKUos8v.js → approval-reaction-auth-DTQnRx4G.js}

@@ -1,5 +1,5 @@
-import { g as resolveMatrixAccount } from "./setup-core-Ub_idsu1.js";
-import { t as normalizeMatrixApproverId } from "./approval-ids-gM2AFaP-.js";
+import { g as resolveMatrixAccount } from "./setup-core-CVo-64kh.js";
+import { t as normalizeMatrixApproverId } from "./approval-ids-D_MGByp6.js";
 import { resolveApprovalApprovers } from "openclaw/plugin-sdk/approval-auth-runtime";
 //#region extensions/matrix/src/approval-reaction-auth.ts
 function normalizeMatrixExecApproverId(value) {

package/dist/{channel-QIfssnwm.js → channel-R4ZIKMwT.js}

@@ -1,14 +1,14 @@
 import { n as requiresExplicitMatrixDefaultAccount } from "./account-selection-Bv_ZuOu4.js";
 import { a as resolveMatrixAccountConfig } from "./account-config-BZWN9tGS.js";
-import { d as resolveSingleAccountPromotionTarget, f as singleAccountKeysToMove, g as resolveMatrixAccount, h as resolveDefaultMatrixAccountId, n as matrixSetupAdapter, p as listMatrixAccountIds, t as createMatrixSetupWizardProxy, u as namedAccountPromotionKeys } from "./setup-core-Ub_idsu1.js";
-import { a as normalizeMatrixUserId, n as DEFAULT_ACCOUNT_ID$2, r as matrixConfigAdapter, t as MatrixChannelConfigSchema } from "./config-schema-o1UmRtMF.js";
-import { t as normalizeMatrixApproverId } from "./approval-ids-gM2AFaP-.js";
+import { d as resolveSingleAccountPromotionTarget, f as singleAccountKeysToMove, g as resolveMatrixAccount, h as resolveDefaultMatrixAccountId, n as matrixSetupAdapter, p as listMatrixAccountIds, t as createMatrixSetupWizardProxy, u as namedAccountPromotionKeys } from "./setup-core-CVo-64kh.js";
+import { a as normalizeMatrixUserId, n as DEFAULT_ACCOUNT_ID$2, r as matrixConfigAdapter, t as MatrixChannelConfigSchema } from "./config-schema-BcOo_2Py.js";
+import { t as normalizeMatrixApproverId } from "./approval-ids-D_MGByp6.js";
 import { a as resolveMatrixTargetIdentity, i as resolveMatrixDirectUserId, n as normalizeMatrixMessagingTarget, r as normalizeMatrixResolvableTarget } from "./target-ids-B-5aQxwn.js";
 import { t as formatMatrixErrorMessage } from "./errors-C47hvAF8.js";
 import { n as normalizeCompatibilityConfig, t as legacyConfigRules } from "./doctor-contract-Dq8OZWHF.js";
 import { d as setMatrixThreadBindingIdleTimeoutBySessionKey, p as setMatrixThreadBindingMaxAgeBySessionKey } from "./thread-bindings-shared-CKnY4LSd.js";
 import { n as collectRuntimeConfigAssignments, r as secretTargetRegistryEntries } from "./secret-contract-DTgQyQxc.js";
-import { i as autoPrepareLegacyMatrixCrypto, o as autoMigrateLegacyMatrixState, r as resolveMatrixMigrationStatus } from "./matrix-migration.runtime-dvxE3e5l.js";
+import { i as autoPrepareLegacyMatrixCrypto, o as autoMigrateLegacyMatrixState, r as resolveMatrixMigrationStatus } from "./matrix-migration.runtime-BQ69V3CR.js";
 import { t as maybeCreateMatrixMigrationSnapshot } from "./migration-snapshot-backup-YcCrSjbE.js";
 import { n as resolveMatrixInboundConversation } from "./thread-binding-api-DRbBZlhS.js";
 import { describeAccountSnapshot } from "openclaw/plugin-sdk/account-helpers";
@@ -129,12 +129,15 @@ const matrixMessageActions = {
 		return extractToolSend(args, "sendMessage");
 	},
 	handleAction: async (ctx) => {
-		const { handleMatrixAction } = await import("./tool-actions.runtime-BwP9E9M0.js");
-		const { action, params, cfg, accountId, mediaLocalRoots } = ctx;
+		const { handleMatrixAction } = await import("./tool-actions.runtime-CuxC5hpa.js");
+		const { action, params, cfg, accountId, mediaAccess, mediaLocalRoots } = ctx;
 		const dispatch = async (actionParams) => await handleMatrixAction({
 			...actionParams,
 			...accountId ? { accountId } : {}
-		}, cfg, { mediaLocalRoots });
+		}, cfg, {
+			...mediaAccess ? { mediaAccess } : {},
+			mediaLocalRoots
+		});
 		const resolveRoomId = () => readStringParam(params, "roomId") ?? readStringParam(params, "channelId") ?? readStringParam(params, "to", { required: true });
 		if (action === "send") {
 			const to = readStringParam(params, "to", { required: true });
@@ -594,7 +597,7 @@ const matrixNativeApprovalCapability = createApproverRestrictedNativeApprovalCap
 			accountId,
 			request
 		}),
-		load: async () => (await import("./approval-handler.runtime-Zq8FeqLy.js")).matrixApprovalNativeRuntime
+		load: async () => (await import("./approval-handler.runtime-BjBtbrdi.js")).matrixApprovalNativeRuntime
 	})
 });
 const splitMatrixApprovalCapability = splitChannelApprovalCapability(matrixNativeApprovalCapability);
@@ -756,7 +759,7 @@ function resolveMatrixGroupToolPolicy(params) {
 }
 //#endregion
 //#region extensions/matrix/src/resolver.ts
-const loadMatrixChannelRuntime$1 = createLazyRuntimeNamedExport(() => import("./resolver.runtime-Blu9khLB.js"), "matrixResolverRuntime");
+const loadMatrixChannelRuntime$1 = createLazyRuntimeNamedExport(() => import("./resolver.runtime-C_uuPsry.js"), "matrixResolverRuntime");
 const matrixResolverAdapter = { resolveTargets: async ({ cfg, accountId, inputs, kind, runtime }) => (await loadMatrixChannelRuntime$1()).resolveMatrixTargets({
 	cfg,
 	accountId,
@@ -945,11 +948,11 @@ async function runMatrixStartupMaintenance(params) {
 //#endregion
 //#region extensions/matrix/src/channel.ts
 let matrixStartupLock = Promise.resolve();
-const loadMatrixSetupWizard = createLazyRuntimeNamedExport(() => import("./setup-surface-CXenmuMm.js").then((n) => n.t), "matrixSetupWizard");
-const loadMatrixChannelRuntime = createLazyRuntimeNamedExport(() => import("./channel.runtime-DkbZfBYE.js"), "matrixChannelRuntime");
+const loadMatrixSetupWizard = createLazyRuntimeNamedExport(() => import("./setup-surface-Du6-iuN4.js").then((n) => n.t), "matrixSetupWizard");
+const loadMatrixChannelRuntime = createLazyRuntimeNamedExport(() => import("./channel.runtime-HNV3MjVm.js"), "matrixChannelRuntime");
 let matrixDoctorModulePromise = null;
 const loadMatrixDoctorModule = async () => {
-	matrixDoctorModulePromise ??= import("./doctor-BwpkOBwr.js");
+	matrixDoctorModulePromise ??= import("./doctor-wP-H47UF.js");
 	return await matrixDoctorModulePromise;
 };
 const meta = {
@@ -1323,7 +1326,7 @@ const matrixPlugin = createChatChannelPlugin({
 			await previousLock;
 			let monitorMatrixProvider;
 			try {
-				monitorMatrixProvider = (await import("./monitor-DAHAvlEh.js")).monitorMatrixProvider;
+				monitorMatrixProvider = (await import("./monitor-BIXV9yRC.js")).monitorMatrixProvider;
 			} finally {
 				releaseLock();
 			}

package/dist/channel-plugin-api.js

@@ -1,2 +1,2 @@
-import { t as matrixPlugin } from "./channel-QIfssnwm.js";
+import { t as matrixPlugin } from "./channel-R4ZIKMwT.js";
 export { matrixPlugin };

package/dist/{channel.runtime-DkbZfBYE.js → channel.runtime-HNV3MjVm.js}

@@ -1,10 +1,10 @@
-import { a as sendMessageMatrix, c as sendTypingMatrix, o as sendPollMatrix } from "./send-eoayPB_l.js";
+import { a as sendMessageMatrix, c as sendTypingMatrix, o as sendPollMatrix } from "./send-BMwJ5LY2.js";
 import { t as isBunRuntime } from "./runtime-BefyhPWv.js";
-import { f as resolveMatrixAuth } from "./shared-CSN0TWWD.js";
-import "./client-COdtuzoa.js";
-import { n as listMatrixDirectoryGroupsLive, r as listMatrixDirectoryPeersLive } from "./directory-live-D4ibL3X0.js";
+import { f as resolveMatrixAuth } from "./shared-QI0RpVnw.js";
+import "./client-BtISa2BM.js";
+import { n as listMatrixDirectoryGroupsLive, r as listMatrixDirectoryPeersLive } from "./directory-live-CJzQ5za7.js";
 import { f as resolveOutboundSendDep, n as chunkTextForOutbound } from "./runtime-api-CsBoesCU.js";
-import { t as resolveMatrixTargets } from "./resolve-targets-Byrcsv59.js";
+import { t as resolveMatrixTargets } from "./resolve-targets-CwHoq7hn.js";
 import { createReplyToFanout } from "openclaw/plugin-sdk/channel-outbound";
 import { normalizeOptionalString } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { formatErrorMessage } from "openclaw/plugin-sdk/error-runtime";
@@ -13,7 +13,7 @@ import { resolvePayloadMediaUrls } from "openclaw/plugin-sdk/reply-payload";
 //#region extensions/matrix/src/matrix/probe.ts
 let matrixProbeRuntimeDepsPromise;
 async function loadMatrixProbeRuntimeDeps() {
-	matrixProbeRuntimeDepsPromise ??= import("./probe.runtime-DKRqRegP.js").then((runtimeModule) => ({ createMatrixClient: runtimeModule.createMatrixClient }));
+	matrixProbeRuntimeDepsPromise ??= import("./probe.runtime-HSFW4DUU.js").then((runtimeModule) => ({ createMatrixClient: runtimeModule.createMatrixClient }));
 	return await matrixProbeRuntimeDepsPromise;
 }
 async function probeMatrix(params) {

package/dist/{cli-ZiO7g1vT.js → cli-Dpi-JiMX.js}

@@ -1,14 +1,14 @@
 import { a as resolveMatrixAccountConfig } from "./account-config-BZWN9tGS.js";
 import { t as getMatrixRuntime } from "./runtime-6S3DNFNv.js";
-import { c as resolveMatrixConfigPath, g as resolveMatrixAccount, l as updateMatrixAccountConfig, n as matrixSetupAdapter } from "./setup-core-Ub_idsu1.js";
+import { c as resolveMatrixConfigPath, g as resolveMatrixAccount, l as updateMatrixAccountConfig, n as matrixSetupAdapter } from "./setup-core-CVo-64kh.js";
 import { t as formatMatrixErrorMessage } from "./errors-C47hvAF8.js";
-import { n as withResolvedActionClient } from "./client-DnNqVfCX.js";
-import { p as resolveMatrixAuthContext } from "./shared-CSN0TWWD.js";
-import "./client-COdtuzoa.js";
+import { n as withResolvedActionClient } from "./client-rYWNQvAN.js";
+import { p as resolveMatrixAuthContext } from "./shared-QI0RpVnw.js";
+import "./client-BtISa2BM.js";
 import { i as formatZonedTimestamp } from "./runtime-api-CsBoesCU.js";
 import { isOpenClawManagedMatrixDevice, summarizeMatrixDeviceHealth } from "./device-health-D4LBxuPq.js";
-import { n as updateMatrixOwnProfile, t as applyMatrixProfileUpdate } from "./profile-update-DUh6sAqK.js";
-import { a as confirmMatrixVerificationSas, b as verifyMatrixRecoveryKey, c as getMatrixRoomKeyBackupStatus, d as listMatrixVerifications, f as mismatchMatrixVerificationSas, g as runMatrixSelfVerification, h as restoreMatrixRoomKeyBackup, l as getMatrixVerificationSas, m as resetMatrixRoomKeyBackup, n as bootstrapMatrixVerification, p as requestMatrixVerification, r as cancelMatrixVerification, t as acceptMatrixVerification, u as getMatrixVerificationStatus, v as startMatrixVerification } from "./verification-BN8M6A73.js";
+import { n as updateMatrixOwnProfile, t as applyMatrixProfileUpdate } from "./profile-update-sMwJwi8I.js";
+import { a as confirmMatrixVerificationSas, b as verifyMatrixRecoveryKey, c as getMatrixRoomKeyBackupStatus, d as listMatrixVerifications, f as mismatchMatrixVerificationSas, g as runMatrixSelfVerification, h as restoreMatrixRoomKeyBackup, l as getMatrixVerificationSas, m as resetMatrixRoomKeyBackup, n as bootstrapMatrixVerification, p as requestMatrixVerification, r as cancelMatrixVerification, t as acceptMatrixVerification, u as getMatrixVerificationStatus, v as startMatrixVerification } from "./verification-DBPeo1wO.js";
 import { t as resolveMatrixRoomKeyBackupIssue } from "./backup-health-Dm_YMVFT.js";
 import { setMatrixSdkConsoleLogging, setMatrixSdkLogMode } from "./logging-QH-48Gr6.js";
 import { normalizeAccountId } from "openclaw/plugin-sdk/account-id";
@@ -38,11 +38,11 @@ let matrixCliExitScheduled = false;
 let matrixActionClientModulePromise;
 let matrixDirectManagementModulePromise;
 function loadMatrixActionClientModule() {
-	matrixActionClientModulePromise ??= import("./client-DnNqVfCX.js").then((n) => n.t);
+	matrixActionClientModulePromise ??= import("./client-rYWNQvAN.js").then((n) => n.t);
 	return matrixActionClientModulePromise;
 }
 function loadMatrixDirectManagementModule() {
-	matrixDirectManagementModulePromise ??= import("./send-eoayPB_l.js").then((n) => n.d);
+	matrixDirectManagementModulePromise ??= import("./send-BMwJ5LY2.js").then((n) => n.d);
 	return matrixDirectManagementModulePromise;
 }
 function scheduleMatrixCliExit() {
@@ -212,7 +212,7 @@ async function addMatrixAccount(params) {
 		backupVersion: null
 	};
 	if (accountConfig.encryption === true) {
-		const { maybeBootstrapNewEncryptedMatrixAccount } = await import("./setup-bootstrap-DRzRwu9E.js");
+		const { maybeBootstrapNewEncryptedMatrixAccount } = await import("./setup-bootstrap-D8DQwEcO.js");
 		verificationBootstrap = await maybeBootstrapNewEncryptedMatrixAccount({
 			previousCfg: cfg,
 			cfg: updated,

package/dist/{cli-metadata-Cn_UFU3u.js → cli-metadata-CQ0Fu1Zr.js}

@@ -2,7 +2,7 @@ import { definePluginEntry } from "openclaw/plugin-sdk/plugin-entry";
 //#region extensions/matrix/src/cli-metadata.ts
 function registerMatrixCliMetadata(api) {
 	api.registerCli(async ({ program }) => {
-		const { registerMatrixCli } = await import("./cli-ZiO7g1vT.js");
+		const { registerMatrixCli } = await import("./cli-Dpi-JiMX.js");
 		registerMatrixCli({ program });
 	}, { descriptors: [{
 		name: "matrix",

package/dist/cli-metadata.js

@@ -1,2 +1,2 @@
-import { n as registerMatrixCliMetadata, t as cli_metadata_default } from "./cli-metadata-Cn_UFU3u.js";
+import { n as registerMatrixCliMetadata, t as cli_metadata_default } from "./cli-metadata-CQ0Fu1Zr.js";
 export { cli_metadata_default as default, registerMatrixCliMetadata };

package/dist/{client-COdtuzoa.js → client-BtISa2BM.js}

@@ -3,8 +3,8 @@ import { t as getMatrixScopedEnvVarNames } from "./env-vars-KzaYveuy.js";
 import { i as resolveScopedMatrixEnvConfig, r as resolveMatrixEnvAuthReadiness, t as hasReadyMatrixEnvAuth } from "./env-auth-DIzOApj0.js";
 import { n as validateMatrixHomeserverUrl, t as resolveValidatedMatrixHomeserverUrl } from "./url-validation-GRHde6lq.js";
 import { t as isBunRuntime } from "./runtime-BefyhPWv.js";
-import { d as backfillMatrixAuthDeviceIdAfterStartup, f as resolveMatrixAuth, i as resolveSharedMatrixClient, m as resolveMatrixConfigForAccount, n as releaseSharedClientInstance, o as stopSharedClientForAccount, p as resolveMatrixAuthContext, r as removeSharedClientInstance, s as stopSharedClientInstance, t as acquireSharedMatrixClient } from "./shared-CSN0TWWD.js";
-import { t as createMatrixClient } from "./create-client-DWe5jGGk.js";
+import { d as backfillMatrixAuthDeviceIdAfterStartup, f as resolveMatrixAuth, i as resolveSharedMatrixClient, m as resolveMatrixConfigForAccount, n as releaseSharedClientInstance, o as stopSharedClientForAccount, p as resolveMatrixAuthContext, r as removeSharedClientInstance, s as stopSharedClientInstance, t as acquireSharedMatrixClient } from "./shared-QI0RpVnw.js";
+import { t as createMatrixClient } from "./create-client-Cy0BcHFg.js";
 //#region extensions/matrix/src/matrix/client.ts
 var client_exports = /* @__PURE__ */ __exportAll({
 	acquireSharedMatrixClient: () => acquireSharedMatrixClient,

package/dist/{client-bootstrap-DoOOMP52.js → client-bootstrap-Cp6Nwuoi.js}

@@ -10,7 +10,7 @@ var client_bootstrap_exports = /* @__PURE__ */ __exportAll({
 });
 let matrixSharedClientRuntimeDepsPromise;
 async function loadMatrixSharedClientRuntimeDeps() {
-	matrixSharedClientRuntimeDepsPromise ??= Promise.all([import("./client-COdtuzoa.js").then((n) => n.t), import("./shared-CSN0TWWD.js").then((n) => n.a)]).then(([clientModule, sharedModule]) => ({
+	matrixSharedClientRuntimeDepsPromise ??= Promise.all([import("./client-BtISa2BM.js").then((n) => n.t), import("./shared-QI0RpVnw.js").then((n) => n.a)]).then(([clientModule, sharedModule]) => ({
 		acquireSharedMatrixClient: clientModule.acquireSharedMatrixClient,
 		resolveMatrixAuthContext: clientModule.resolveMatrixAuthContext,
 		releaseSharedClientInstance: sharedModule.releaseSharedClientInstance

package/dist/{client-DnNqVfCX.js → client-rYWNQvAN.js}

@@ -1,6 +1,6 @@
 import { t as __exportAll } from "./rolldown-runtime-8H4AJuhK.js";
-import { u as resolveMatrixRoomId } from "./send-eoayPB_l.js";
-import { n as withResolvedRuntimeMatrixClient } from "./client-bootstrap-DoOOMP52.js";
+import { u as resolveMatrixRoomId } from "./send-BMwJ5LY2.js";
+import { n as withResolvedRuntimeMatrixClient } from "./client-bootstrap-Cp6Nwuoi.js";
 //#region extensions/matrix/src/matrix/actions/client.ts
 var client_exports = /* @__PURE__ */ __exportAll({
 	withResolvedActionClient: () => withResolvedActionClient,

package/dist/{config-schema-o1UmRtMF.js → config-schema-BcOo_2Py.js}

@@ -1,5 +1,5 @@
 import { a as resolveMatrixAccountConfig } from "./account-config-BZWN9tGS.js";
-import { g as resolveMatrixAccount, h as resolveDefaultMatrixAccountId, p as listMatrixAccountIds } from "./setup-core-Ub_idsu1.js";
+import { g as resolveMatrixAccount, h as resolveDefaultMatrixAccountId, p as listMatrixAccountIds } from "./setup-core-CVo-64kh.js";
 import { adaptScopedAccountAccessor, createScopedChannelConfigAdapter } from "openclaw/plugin-sdk/channel-config-helpers";
 import { normalizeLowercaseStringOrEmpty } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { DEFAULT_ACCOUNT_ID as DEFAULT_ACCOUNT_ID$1 } from "openclaw/plugin-sdk/account-id";

package/dist/contract-api.js

@@ -1,3 +1,3 @@
-import { d as resolveSingleAccountPromotionTarget, f as singleAccountKeysToMove, n as matrixSetupAdapter, u as namedAccountPromotionKeys } from "./setup-core-Ub_idsu1.js";
-import { n as matrixOnboardingAdapter } from "./setup-surface-CXenmuMm.js";
+import { d as resolveSingleAccountPromotionTarget, f as singleAccountKeysToMove, n as matrixSetupAdapter, u as namedAccountPromotionKeys } from "./setup-core-CVo-64kh.js";
+import { n as matrixOnboardingAdapter } from "./setup-surface-Du6-iuN4.js";
 export { matrixSetupAdapter, matrixOnboardingAdapter as matrixSetupWizard, namedAccountPromotionKeys, resolveSingleAccountPromotionTarget, singleAccountKeysToMove };

package/dist/{create-client-DWe5jGGk.js → create-client-Cy0BcHFg.js}

@@ -1,7 +1,7 @@
 import { t as __exportAll } from "./rolldown-runtime-8H4AJuhK.js";
 import { t as resolveValidatedMatrixHomeserverUrl } from "./url-validation-GRHde6lq.js";
 import { d as writeStorageMeta, l as resolveMatrixStoragePaths, r as maybeMigrateLegacyStorage } from "./storage-BSLHjdgS.js";
-import "./shared-CSN0TWWD.js";
+import "./shared-QI0RpVnw.js";
 import { normalizeOptionalString } from "openclaw/plugin-sdk/string-coerce-runtime";
 import fs from "node:fs";
 import { ssrfPolicyFromDangerouslyAllowPrivateNetwork } from "openclaw/plugin-sdk/ssrf-runtime";
@@ -9,7 +9,7 @@ import { ssrfPolicyFromDangerouslyAllowPrivateNetwork } from "openclaw/plugin-sd
 var create_client_exports = /* @__PURE__ */ __exportAll({ createMatrixClient: () => createMatrixClient });
 let matrixCreateClientRuntimeDepsPromise;
 async function loadMatrixCreateClientRuntimeDeps() {
-	matrixCreateClientRuntimeDepsPromise ??= Promise.all([import("./sdk-CpYofZkF.js"), import("./logging-QH-48Gr6.js")]).then(([sdkModule, loggingModule]) => ({
+	matrixCreateClientRuntimeDepsPromise ??= Promise.all([import("./sdk-DaHsa7DR.js"), import("./logging-QH-48Gr6.js")]).then(([sdkModule, loggingModule]) => ({
 		MatrixClient: sdkModule.MatrixClient,
 		ensureMatrixSdkLoggingConfigured: loggingModule.ensureMatrixSdkLoggingConfigured
 	}));

package/dist/{crypto-runtime-DaHFPR8x.js → crypto-runtime-e0bRP6dB.js}

@@ -1,5 +1,5 @@
 import { t as formatMatrixErrorMessage } from "./errors-C47hvAF8.js";
-import { t as ensureMatrixCryptoRuntime } from "./deps-BVWGd2XS.js";
+import { t as ensureMatrixCryptoRuntime } from "./deps-DoQ5mpwP.js";
 import { n as LogService, r as noop } from "./logger-D0GCSDQq.js";
 import { i as restoreIdbFromDisk, n as persistIdbToDisk } from "./idb-persistence-BGY1CJ7J.js";
 import { n as isRepairableSecretStorageAccessError } from "./recovery-key-store-BGk8c_gf.js";
@@ -462,6 +462,8 @@ function createMatrixCryptoFacade(deps) {
 const MATRIX_DECRYPT_RETRY_BASE_DELAY_MS = 1500;
 const MATRIX_DECRYPT_RETRY_MAX_DELAY_MS = 3e4;
 const MATRIX_DECRYPT_RETRY_MAX_ATTEMPTS = 8;
+const MATRIX_DECRYPT_EXHAUSTED_RETRY_TTL_MS = 60 * 6e4;
+const MATRIX_DECRYPT_EXHAUSTED_RETRY_MAX_ENTRIES = 512;
 function resolveDecryptRetryKey(roomId, eventId) {
 	if (!roomId || !eventId) return null;
 	return `${roomId}|${eventId}`;
@@ -486,10 +488,11 @@ var MatrixDecryptBridge = class {
 		this.decryptedMessageDedupe = /* @__PURE__ */ new Map();
 		this.decryptRetries = /* @__PURE__ */ new Map();
 		this.failedDecryptionsNotified = /* @__PURE__ */ new Set();
-		this.exhaustedDecryptRetries = /* @__PURE__ */ new Set();
+		this.exhaustedDecryptRetries = /* @__PURE__ */ new Map();
 		this.activeRetryRuns = 0;
 		this.retryIdleResolvers = /* @__PURE__ */ new Set();
 		this.cryptoRetrySignalsBound = false;
+		this.stopped = false;
 	}
 	shouldEmitUnencryptedMessage(roomId, eventId) {
 		if (!eventId) return true;
@@ -499,6 +502,7 @@ var MatrixDecryptBridge = class {
 		return false;
 	}
 	attachEncryptedEvent(event, roomId) {
+		if (this.stopped) return;
 		if (this.trackedEncryptedEvents.has(event)) return;
 		this.trackedEncryptedEvents.add(event);
 		event.on(MatrixEventEvent.Decrypted, (decryptedEvent, err) => {
@@ -518,7 +522,21 @@ var MatrixDecryptBridge = class {
 			});
 		}
 	}
-	retryPendingNow(reason) {
+	retryPendingNow(reason, options) {
+		if (this.stopped) return;
+		if (options?.includeExhausted) {
+			this.pruneExhaustedDecryptRetries(Date.now());
+			for (const [retryKey, state] of this.exhaustedDecryptRetries) {
+				if (this.decryptRetries.has(retryKey)) continue;
+				this.exhaustedDecryptRetries.delete(retryKey);
+				this.decryptRetries.set(retryKey, {
+					...state,
+					attempts: 0,
+					inFlight: false,
+					timer: null
+				});
+			}
+		}
 		const pending = Array.from(this.decryptRetries.entries());
 		if (pending.length === 0) return;
 		LogService.debug("MatrixClientLite", `Retrying pending decryptions due to ${reason}`);
@@ -534,14 +552,14 @@ var MatrixDecryptBridge = class {
 	bindCryptoRetrySignals(crypto) {
 		if (!crypto || this.cryptoRetrySignalsBound) return;
 		this.cryptoRetrySignalsBound = true;
-		const trigger = (reason) => {
-			this.retryPendingNow(reason);
+		const trigger = (reason, options) => {
+			this.retryPendingNow(reason, options);
 		};
 		crypto.on(CryptoEvent.KeyBackupDecryptionKeyCached, () => {
-			trigger("crypto.keyBackupDecryptionKeyCached");
+			trigger("crypto.keyBackupDecryptionKeyCached", { includeExhausted: true });
 		});
 		crypto.on(CryptoEvent.RehydrationCompleted, () => {
-			trigger("dehydration.RehydrationCompleted");
+			trigger("dehydration.RehydrationCompleted", { includeExhausted: true });
 		});
 		crypto.on(CryptoEvent.DevicesUpdated, () => {
 			trigger("crypto.devicesUpdated");
@@ -551,7 +569,9 @@ var MatrixDecryptBridge = class {
 		});
 	}
 	stop() {
+		this.stopped = true;
 		for (const retryKey of this.decryptRetries.keys()) this.clearDecryptRetry(retryKey);
+		this.exhaustedDecryptRetries.clear();
 	}
 	async drainPendingDecryptions(reason) {
 		for (let attempts = 0; attempts < MATRIX_DECRYPT_RETRY_MAX_ATTEMPTS; attempts += 1) {
@@ -562,6 +582,7 @@ var MatrixDecryptBridge = class {
 		}
 	}
 	handleEncryptedEventDecrypted(params) {
+		if (this.stopped) return;
 		const decryptedRoomId = params.decryptedEvent.getRoomId() || params.roomId;
 		const decryptedRaw = this.deps.toRaw(params.decryptedEvent);
 		const retryEventId = decryptedRaw.event_id || params.encryptedEvent.getId() || "";
@@ -599,6 +620,7 @@ var MatrixDecryptBridge = class {
 		this.deps.emitFailedDecryption(roomId, event, error);
 	}
 	scheduleDecryptRetry(params) {
+		if (this.stopped) return;
 		const retryKey = resolveDecryptRetryKey(params.roomId, params.eventId);
 		if (!retryKey) return;
 		const existing = this.decryptRetries.get(retryKey);
@@ -609,7 +631,17 @@ var MatrixDecryptBridge = class {
 			const retry = this.decryptRetries.get(retryKey);
 			if (retry?.timer) clearTimeout(retry.timer);
 			this.decryptRetries.delete(retryKey);
-			this.exhaustedDecryptRetries.add(retryKey);
+			const exhaustedAt = Date.now();
+			this.exhaustedDecryptRetries.set(retryKey, {
+				event: params.event,
+				roomId: params.roomId,
+				eventId: params.eventId,
+				attempts: attempts - 1,
+				inFlight: false,
+				timer: null,
+				exhaustedAt
+			});
+			this.pruneExhaustedDecryptRetries(exhaustedAt);
 			LogService.debug("MatrixClientLite", `Giving up decryption retry for ${params.eventId} in ${params.roomId} after ${attempts - 1} attempts`);
 			return;
 		}
@@ -633,20 +665,25 @@ var MatrixDecryptBridge = class {
 		state.inFlight = true;
 		state.timer = null;
 		this.activeRetryRuns += 1;
-		if (!(typeof this.deps.client.decryptEventIfNeeded === "function")) {
+		const retryEvent = state.event;
+		const retryCrypto = this.deps.client.getCrypto?.();
+		const canAttemptDecryption = retryCrypto !== void 0 && retryCrypto !== null && typeof retryEvent.attemptDecryption === "function";
+		if (!(canAttemptDecryption || typeof this.deps.client.decryptEventIfNeeded === "function")) {
 			this.clearDecryptRetry(retryKey);
 			this.activeRetryRuns = Math.max(0, this.activeRetryRuns - 1);
 			this.resolveRetryIdleIfNeeded();
 			return;
 		}
 		try {
-			await this.deps.client.decryptEventIfNeeded?.(state.event, { isRetry: true });
+			if (canAttemptDecryption) await retryEvent.attemptDecryption?.(retryCrypto, { isRetry: true });
+			else await this.deps.client.decryptEventIfNeeded?.(state.event, { isRetry: true });
 		} catch {} finally {
 			state.inFlight = false;
 			this.activeRetryRuns = Math.max(0, this.activeRetryRuns - 1);
 			this.resolveRetryIdleIfNeeded();
 		}
 		if (this.decryptRetries.get(retryKey) !== state) return;
+		if (this.stopped) return;
 		if (isDecryptionFailure(state.event)) {
 			if (!shouldRetryDecryptionFailure(state.event)) {
 				this.clearDecryptRetry(retryKey);
@@ -668,6 +705,14 @@ var MatrixDecryptBridge = class {
 		this.exhaustedDecryptRetries.delete(retryKey);
 		this.failedDecryptionsNotified.delete(retryKey);
 	}
+	pruneExhaustedDecryptRetries(now) {
+		for (const [retryKey, state] of this.exhaustedDecryptRetries) if (now - state.exhaustedAt > MATRIX_DECRYPT_EXHAUSTED_RETRY_TTL_MS) this.exhaustedDecryptRetries.delete(retryKey);
+		while (this.exhaustedDecryptRetries.size > MATRIX_DECRYPT_EXHAUSTED_RETRY_MAX_ENTRIES) {
+			const oldest = this.exhaustedDecryptRetries.keys().next().value;
+			if (oldest === void 0) break;
+			this.exhaustedDecryptRetries.delete(oldest);
+		}
+	}
 	rememberDecryptedMessage(roomId, eventId) {
 		if (!eventId) return;
 		const now = Date.now();

package/dist/{deps-BVWGd2XS.js → deps-DoQ5mpwP.js}

@@ -11,6 +11,7 @@ const REQUIRED_MATRIX_PACKAGES = [
 ];
 const MIN_MATRIX_CRYPTO_NATIVE_BINDING_BYTES = 1e6;
 const MATRIX_COMMAND_OUTPUT_TAIL_BYTES = 64 * 1024;
+const MATRIX_STREAM_ERROR_KILL_GRACE_MS = 1e3;
 function resolveMissingMatrixPackages(resolveFn) {
 	const resolve = resolveFn ?? defaultResolveFn;
 	return REQUIRED_MATRIX_PACKAGES.filter((pkg) => {
@@ -65,6 +66,8 @@ async function runFixedCommandWithTimeout(params) {
 		let stderr = "";
 		let settled = false;
 		let timer = null;
+		let streamKillTimer = null;
+		let streamErrorMessage = null;
 		const killChildOnExit = () => {
 			if (!settled && proc.exitCode === null) proc.kill("SIGTERM");
 		};
@@ -72,6 +75,7 @@ async function runFixedCommandWithTimeout(params) {
 			if (settled) return;
 			settled = true;
 			if (timer) clearTimeout(timer);
+			if (streamKillTimer) clearTimeout(streamKillTimer);
 			process.off("exit", killChildOnExit);
 			resolve(result);
 		};
@@ -82,8 +86,20 @@ async function runFixedCommandWithTimeout(params) {
 		proc.stderr?.on("data", (chunk) => {
 			stderr = appendBoundedOutputTail(stderr, chunk);
 		});
+		const failReadableStream = (streamName) => (error) => {
+			if (settled || streamErrorMessage) return;
+			streamErrorMessage = `${streamName} stream failed: ${formatErrorMessage(error)}`;
+			if (proc.exitCode === null) proc.kill("SIGTERM");
+			streamKillTimer = setTimeout(() => {
+				if (!settled && proc.exitCode === null) proc.kill("SIGKILL");
+			}, MATRIX_STREAM_ERROR_KILL_GRACE_MS);
+			streamKillTimer.unref?.();
+		};
+		proc.stdout?.on("error", failReadableStream("stdout"));
+		proc.stderr?.on("error", failReadableStream("stderr"));
 		timer = setTimeout(() => {
 			proc.kill("SIGKILL");
+			if (streamErrorMessage) return;
 			finalize({
 				code: 124,
 				stdout,
@@ -91,6 +107,7 @@ async function runFixedCommandWithTimeout(params) {
 			});
 		}, params.timeoutMs);
 		proc.on("error", (err) => {
+			if (streamErrorMessage) return;
 			finalize({
 				code: 1,
 				stdout,
@@ -98,10 +115,11 @@ async function runFixedCommandWithTimeout(params) {
 			});
 		});
 		proc.on("close", (code) => {
+			const streamErrorStderr = streamErrorMessage ? stderr ? appendBoundedOutputTail(stderr, `\n${streamErrorMessage}`) : streamErrorMessage : stderr;
 			finalize({
-				code: code ?? 1,
+				code: streamErrorMessage ? 1 : code ?? 1,
 				stdout,
-				stderr
+				stderr: streamErrorStderr
 			});
 		});
 	});

package/dist/{directory-live-D4ibL3X0.js → directory-live-CJzQ5za7.js}

@@ -1,7 +1,7 @@
 import { t as __exportAll } from "./rolldown-runtime-8H4AJuhK.js";
 import { n as normalizeMatrixMessagingTarget, t as isMatrixQualifiedUserId } from "./target-ids-B-5aQxwn.js";
-import { f as resolveMatrixAuth } from "./shared-CSN0TWWD.js";
-import "./client-COdtuzoa.js";
+import { f as resolveMatrixAuth } from "./shared-QI0RpVnw.js";
+import "./client-BtISa2BM.js";
 import { t as MatrixAuthedHttpClient } from "./http-client-BBfH0FfA.js";
 import { normalizeLowercaseStringOrEmpty, normalizeOptionalString } from "openclaw/plugin-sdk/string-coerce-runtime";
 //#region extensions/matrix/src/directory-live.ts

package/dist/{doctor-BwpkOBwr.js → doctor-wP-H47UF.js}

@@ -1,6 +1,6 @@
 import { o as isRecord } from "./account-selection-Bv_ZuOu4.js";
 import { n as normalizeCompatibilityConfig, t as legacyConfigRules } from "./doctor-contract-Dq8OZWHF.js";
-import { i as autoPrepareLegacyMatrixCrypto, o as autoMigrateLegacyMatrixState, r as resolveMatrixMigrationStatus } from "./matrix-migration.runtime-dvxE3e5l.js";
+import { i as autoPrepareLegacyMatrixCrypto, o as autoMigrateLegacyMatrixState, r as resolveMatrixMigrationStatus } from "./matrix-migration.runtime-BQ69V3CR.js";
 import { t as maybeCreateMatrixMigrationSnapshot } from "./migration-snapshot-backup-YcCrSjbE.js";
 import { detectPluginInstallPathIssue, formatPluginInstallPathIssue, removePluginFromConfig } from "openclaw/plugin-sdk/runtime-doctor";
 //#region extensions/matrix/src/doctor.ts

package/dist/{draft-stream-aZa1gWNI.js → draft-stream-C4X8Txw_.js}

@@ -1,4 +1,4 @@
-import { n as editMessageMatrix, r as prepareMatrixSingleText, s as sendSingleTextMessageMatrix, y as MsgType } from "./send-eoayPB_l.js";
+import { n as editMessageMatrix, r as prepareMatrixSingleText, s as sendSingleTextMessageMatrix, y as MsgType } from "./send-BMwJ5LY2.js";
 import { createDraftStreamLoop } from "openclaw/plugin-sdk/channel-outbound";
 //#region extensions/matrix/src/matrix/draft-stream.ts
 const DEFAULT_THROTTLE_MS = 1e3;

package/dist/index.js

@@ -1,4 +1,4 @@
-import { n as registerMatrixCliMetadata } from "./cli-metadata-Cn_UFU3u.js";
+import { n as registerMatrixCliMetadata } from "./cli-metadata-CQ0Fu1Zr.js";
 import { registerMatrixSubagentHooks } from "./subagent-hooks-api.js";
 import { defineBundledChannelEntry } from "openclaw/plugin-sdk/channel-entry-contract";
 //#region extensions/matrix/index.ts

package/dist/{legacy-crypto-inspector-tJOj25VL.js → legacy-crypto-inspector-Dl4lMAei.js}

@@ -1,4 +1,4 @@
-import { t as ensureMatrixCryptoRuntime } from "./deps-BVWGd2XS.js";
+import { t as ensureMatrixCryptoRuntime } from "./deps-DoQ5mpwP.js";
 import { createRequire } from "node:module";
 import fs from "node:fs";
 import path from "node:path";

package/dist/{matrix-migration.runtime-dvxE3e5l.js → matrix-migration.runtime-BQ69V3CR.js}

@@ -250,7 +250,7 @@ function isMatrixLegacyCryptoInspectorAvailable() {
 //#region extensions/matrix/src/legacy-crypto.ts
 const MATRIX_LEGACY_CRYPTO_INSPECTOR_UNAVAILABLE_MESSAGE = "Legacy Matrix encrypted state was detected, but the Matrix crypto inspector is unavailable.";
 async function loadMatrixLegacyCryptoInspector() {
-	return (await import("./legacy-crypto-inspector-tJOj25VL.js")).inspectLegacyMatrixCryptoStore;
+	return (await import("./legacy-crypto-inspector-Dl4lMAei.js")).inspectLegacyMatrixCryptoStore;
 }
 function detectLegacyBotSdkCryptoStore(cryptoRootDir) {
 	try {

package/dist/{media-text-DS2lvlA2.js → media-text-BkdnLpBE.js}

@@ -1,4 +1,4 @@
-import { C as formatPollResultsAsText, D as parsePollStartContent, O as resolvePollReferenceEventId, S as formatPollAsText, T as isPollStartType, w as isPollEventType, x as buildPollResultsSummary } from "./send-eoayPB_l.js";
+import { C as formatPollResultsAsText, D as parsePollStartContent, O as resolvePollReferenceEventId, S as formatPollAsText, T as isPollStartType, w as isPollEventType, x as buildPollResultsSummary } from "./send-BMwJ5LY2.js";
 import path from "node:path";
 //#region extensions/matrix/src/matrix/poll-summary.ts
 function resolveMatrixPollRootEventId(event) {

package/dist/{messages-CMTiMecS.js → messages-BFuuCO_k.js}

@@ -1,8 +1,8 @@
 import { r as isMatrixNotFoundError } from "./errors-C47hvAF8.js";
-import { T as isPollStartType, a as sendMessageMatrix, n as editMessageMatrix, w as isPollEventType } from "./send-eoayPB_l.js";
+import { T as isPollStartType, a as sendMessageMatrix, n as editMessageMatrix, w as isPollEventType } from "./send-BMwJ5LY2.js";
 import { n as MATRIX_REACTION_EVENT_TYPE } from "./reaction-common-DkrQdBSZ.js";
-import { a as resolveMatrixMessageAttachment, l as resolveMatrixPollRootEventId, o as resolveMatrixMessageBody, s as fetchMatrixPollMessageSummary } from "./media-text-DS2lvlA2.js";
-import { r as withResolvedRoomAction } from "./client-DnNqVfCX.js";
+import { a as resolveMatrixMessageAttachment, l as resolveMatrixPollRootEventId, o as resolveMatrixMessageBody, s as fetchMatrixPollMessageSummary } from "./media-text-BkdnLpBE.js";
+import { r as withResolvedRoomAction } from "./client-rYWNQvAN.js";
 import { normalizeOptionalString } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { resolveIntegerOption } from "openclaw/plugin-sdk/number-runtime";
 //#region extensions/matrix/src/matrix/actions/limits.ts
@@ -79,6 +79,7 @@ async function sendMatrixMessage(to, content, opts = {}) {
 	return await sendMessageMatrix(to, content, {
 		cfg: opts.cfg,
 		mediaUrl: opts.mediaUrl,
+		mediaAccess: opts.mediaAccess,
 		mediaLocalRoots: opts.mediaLocalRoots,
 		replyToId: opts.replyToId,
 		threadId: opts.threadId,