@openclaw/matrix 2026.7.2-beta.1 → 2026.7.2-beta.3

package/dist/credentials-read-DVmFCm7X.js

@@ -0,0 +1,77 @@
+import { t as __exportAll } from "./rolldown-runtime-8H4AJuhK.js";
+import { n as getOptionalMatrixRuntime } from "./runtime-6S3DNFNv.js";
+import "./storage-paths-gUmSydsW.js";
+import { normalizeAccountId } from "openclaw/plugin-sdk/account-id";
+import { createPluginStateSyncKeyedStore } from "openclaw/plugin-sdk/runtime-doctor";
+//#region extensions/matrix/src/matrix/credentials-read.ts
+var credentials_read_exports = /* @__PURE__ */ __exportAll({
+	MATRIX_CREDENTIALS_MAX_ENTRIES: () => 256,
+	MATRIX_CREDENTIALS_NAMESPACE: () => MATRIX_CREDENTIALS_NAMESPACE,
+	clearMatrixCredentials: () => clearMatrixCredentials,
+	credentialsMatchConfig: () => credentialsMatchConfig,
+	isMatrixCredentialRevocation: () => isMatrixCredentialRevocation,
+	loadMatrixCredentials: () => loadMatrixCredentials,
+	matrixCredentialsStoreKey: () => matrixCredentialsStoreKey,
+	normalizeMatrixStoredCredentials: () => normalizeMatrixStoredCredentials,
+	openMatrixCredentialsStore: () => openMatrixCredentialsStore
+});
+const MATRIX_CREDENTIALS_NAMESPACE = "credentials";
+function matrixCredentialsStoreKey(accountId) {
+	return `account:${normalizeAccountId(accountId)}`;
+}
+function normalizeMatrixStoredCredentials(value, accountId) {
+	if (!value || typeof value !== "object") return null;
+	const parsed = value;
+	if (typeof parsed.homeserver !== "string" || !parsed.homeserver || typeof parsed.userId !== "string" || !parsed.userId || typeof parsed.accessToken !== "string" || !parsed.accessToken || typeof parsed.createdAt !== "string" || !parsed.createdAt) return null;
+	return {
+		accountId: normalizeAccountId(accountId ?? parsed.accountId),
+		homeserver: parsed.homeserver,
+		userId: parsed.userId,
+		accessToken: parsed.accessToken,
+		...typeof parsed.deviceId === "string" ? { deviceId: parsed.deviceId } : {},
+		createdAt: parsed.createdAt,
+		...typeof parsed.lastUsedAt === "string" ? { lastUsedAt: parsed.lastUsedAt } : {}
+	};
+}
+function isMatrixCredentialRevocation(value, accountId) {
+	if (!value || typeof value !== "object") return false;
+	const parsed = value;
+	return parsed.kind === "revoked" && typeof parsed.revokedAt === "string" && parsed.revokedAt.length > 0 && normalizeAccountId(parsed.accountId) === normalizeAccountId(accountId ?? parsed.accountId);
+}
+function openMatrixCredentialsStore(env = process.env) {
+	const runtime = getOptionalMatrixRuntime();
+	const resolvedEnv = env.OPENCLAW_STATE_DIR?.trim() || !runtime ? env : {
+		...env,
+		OPENCLAW_STATE_DIR: runtime.state.resolveStateDir(env)
+	};
+	return createPluginStateSyncKeyedStore("matrix", {
+		namespace: MATRIX_CREDENTIALS_NAMESPACE,
+		maxEntries: 256,
+		overflowPolicy: "reject-new",
+		env: resolvedEnv
+	});
+}
+function loadMatrixCredentials(env = process.env, accountId) {
+	const normalizedAccountId = normalizeAccountId(accountId);
+	const parsed = normalizeMatrixStoredCredentials(openMatrixCredentialsStore(env).lookup(matrixCredentialsStoreKey(accountId)), normalizedAccountId);
+	if (!parsed || parsed.accountId !== normalizedAccountId) return null;
+	const { accountId: _accountId, ...credentials } = parsed;
+	return credentials;
+}
+function clearMatrixCredentials(env = process.env, accountId) {
+	const normalizedAccountId = normalizeAccountId(accountId);
+	openMatrixCredentialsStore(env).register(matrixCredentialsStoreKey(normalizedAccountId), {
+		accountId: normalizedAccountId,
+		kind: "revoked",
+		revokedAt: (/* @__PURE__ */ new Date()).toISOString()
+	});
+}
+function credentialsMatchConfig(stored, config) {
+	if (!config.userId) {
+		if (!config.accessToken) return false;
+		return stored.homeserver === config.homeserver && stored.accessToken === config.accessToken;
+	}
+	return stored.homeserver === config.homeserver && stored.userId === config.userId;
+}
+//#endregion
+export { isMatrixCredentialRevocation as a, normalizeMatrixStoredCredentials as c, credentials_read_exports as i, openMatrixCredentialsStore as l, clearMatrixCredentials as n, loadMatrixCredentials as o, credentialsMatchConfig as r, matrixCredentialsStoreKey as s, MATRIX_CREDENTIALS_NAMESPACE as t };

package/dist/{credentials-write.runtime-J_EUt5WP.js → credentials-write.runtime-Be9zNSUw.js}

@@ -1,6 +1,6 @@
 import { createLazyRuntimeModule } from "openclaw/plugin-sdk/lazy-runtime";
 //#region extensions/matrix/src/matrix/credentials-write.runtime.ts
-const loadMatrixCredentialsRuntime = createLazyRuntimeModule(() => import("./credentials-DnhsLAuR.js"));
+const loadMatrixCredentialsRuntime = createLazyRuntimeModule(() => import("./credentials-W2EmwRhu.js"));
 async function saveMatrixCredentials(...args) {
 	return (await loadMatrixCredentialsRuntime()).saveMatrixCredentials(...args);
 }

package/dist/{crypto-runtime-BHcxauC4.js → crypto-runtime-CAff-n15.js}

@@ -1,8 +1,8 @@
 import { t as formatMatrixErrorMessage } from "./errors-C47hvAF8.js";
-import { t as ensureMatrixCryptoRuntime } from "./deps-DDbghaZH.js";
-import { n as LogService, r as noop } from "./logger-BMClpI5b.js";
-import { i as restoreIdbFromDisk, n as persistIdbToDisk } from "./idb-persistence-iUZoHZkp.js";
-import { n as isRepairableSecretStorageAccessError } from "./recovery-key-store-Bx0zTJcB.js";
+import { t as ensureMatrixCryptoRuntime } from "./deps-CcVJfvRM.js";
+import { n as LogService, r as noop } from "./logger-D0GCSDQq.js";
+import { i as restoreIdbFromDisk, n as persistIdbToDisk } from "./idb-persistence-Dyy6ipgU.js";
+import { n as isRepairableSecretStorageAccessError } from "./recovery-key-store-CW6eePfp.js";
 import { createLazyRuntimeModule } from "openclaw/plugin-sdk/lazy-runtime";
 import { resolveDateTimestampMs, resolveTimestampMsToIsoString } from "openclaw/plugin-sdk/number-runtime";
 import { MatrixEventEvent } from "matrix-js-sdk/lib/matrix.js";

package/dist/{directory-live-DPy2aaPF.js → directory-live-DiC-0XBC.js}

@@ -1,8 +1,8 @@
 import { t as __exportAll } from "./rolldown-runtime-8H4AJuhK.js";
 import { n as normalizeMatrixMessagingTarget, t as isMatrixQualifiedUserId } from "./target-ids-B-5aQxwn.js";
-import { f as resolveMatrixAuth } from "./shared-DgvN5rBx.js";
-import "./client-DP0nmFxK.js";
-import { t as MatrixAuthedHttpClient } from "./http-client-W4TJQM6r.js";
+import { f as resolveMatrixAuth } from "./shared-DquM1oz6.js";
+import "./client-CA0PULls.js";
+import { t as MatrixAuthedHttpClient } from "./http-client-BmrgOZTL.js";
 import { normalizeLowercaseStringOrEmpty, normalizeOptionalString } from "openclaw/plugin-sdk/string-coerce-runtime";
 //#region extensions/matrix/src/directory-live.ts
 var directory_live_exports = /* @__PURE__ */ __exportAll({

package/dist/{doctor-BGTs609f.js → doctor-DwUVm5Lw.js}

@@ -1,4 +1,4 @@
-import { n as normalizeCompatibilityConfig, t as legacyConfigRules } from "./doctor-contract-D2qTLe-C.js";
+import { n as normalizeCompatibilityConfig, t as legacyConfigRules } from "./doctor-contract-BA2Y6Crx.js";
 import { detectPluginInstallPathIssue, formatPluginInstallPathIssue, removePluginFromConfig } from "openclaw/plugin-sdk/runtime-doctor";
 //#region extensions/matrix/src/doctor.ts
 async function collectMatrixInstallPathWarnings(cfg) {

package/dist/{doctor-contract-D2qTLe-C.js → doctor-contract-BA2Y6Crx.js}

@@ -1,4 +1,4 @@
-import { t as isRecord } from "./record-shared-CvzjvHRn.js";
+import { t as isRecord } from "./record-shared-CWWx6fvI.js";
 import { defineChannelAliasMigration } from "openclaw/plugin-sdk/runtime-doctor";
 import { hasLegacyFlatAllowPrivateNetworkAlias, migrateLegacyFlatAllowPrivateNetworkAlias } from "openclaw/plugin-sdk/ssrf-runtime";
 //#region extensions/matrix/src/doctor-contract.ts

package/dist/doctor-contract-api.js

@@ -1,12 +1,17 @@
-import { t as isRecord } from "./record-shared-CvzjvHRn.js";
-import { n as normalizeCompatibilityConfig, t as legacyConfigRules } from "./doctor-contract-D2qTLe-C.js";
-import { O as writeMatrixIdbSnapshotJsonToStore, S as readLegacyMatrixLegacyCryptoMigrationState, _ as hasMatrixRecoveryKeyStateInStore, a as openMatrixStorageMetaStoreOptions, b as openMatrixLegacyCryptoMigrationStoreOptions, f as MATRIX_IDB_SNAPSHOT_FILENAME, g as hasMatrixLegacyCryptoMigrationStateInStore, h as hasMatrixIdbSnapshotStateInStore, i as normalizeMatrixStorageMetadata, j as writeMatrixRecoveryKeyStateToStore, k as writeMatrixLegacyCryptoMigrationStateToStore, m as MATRIX_RECOVERY_KEY_FILENAME, n as hasMatrixStorageMetaStateInStore, p as MATRIX_LEGACY_CRYPTO_MIGRATION_FILENAME, u as writeMatrixStorageMetaStateToStore, w as readLegacyMatrixRecoveryKeyState, x as openMatrixRecoveryKeyStoreOptions, y as openMatrixIdbSnapshotStoreOptions } from "./storage-BtSOar8T.js";
-import { a as readLegacyMatrixSyncCacheState, i as openMatrixSyncCacheStoreOptions, o as writeMatrixSyncCacheStateToStore, r as hasMatrixSyncCacheStateInStore } from "./file-sync-store-Cxb0ckyX.js";
-import { a as resolveMatrixInboundDedupeStateNamespace, n as MATRIX_INBOUND_DEDUPE_TTL_MS, r as buildMatrixInboundDedupeEventKey } from "./inbound-dedupe-DcMs0YXL.js";
-import { r as readLegacyMatrixIdbSnapshotState } from "./idb-persistence-iUZoHZkp.js";
-import path from "node:path";
-import { createHash } from "node:crypto";
+import { a as resolveMatrixDefaultOrOnlyAccountId, n as requiresExplicitMatrixDefaultAccount } from "./account-selection-kqquRzCf.js";
+import { t as isRecord$1 } from "./record-shared-CWWx6fvI.js";
+import { r as resolveMatrixCredentialsDir } from "./storage-paths-gUmSydsW.js";
+import { a as isMatrixCredentialRevocation, c as normalizeMatrixStoredCredentials, s as matrixCredentialsStoreKey, t as MATRIX_CREDENTIALS_NAMESPACE } from "./credentials-read-DVmFCm7X.js";
+import { n as normalizeCompatibilityConfig, t as legacyConfigRules } from "./doctor-contract-BA2Y6Crx.js";
+import { O as writeMatrixIdbSnapshotJsonToStore, S as readLegacyMatrixLegacyCryptoMigrationState, _ as hasMatrixRecoveryKeyStateInStore, a as openMatrixStorageMetaStoreOptions, b as openMatrixLegacyCryptoMigrationStoreOptions, f as MATRIX_IDB_SNAPSHOT_FILENAME, g as hasMatrixLegacyCryptoMigrationStateInStore, h as hasMatrixIdbSnapshotStateInStore, i as normalizeMatrixStorageMetadata, j as writeMatrixRecoveryKeyStateToStore, k as writeMatrixLegacyCryptoMigrationStateToStore, m as MATRIX_RECOVERY_KEY_FILENAME, n as hasMatrixStorageMetaStateInStore, p as MATRIX_LEGACY_CRYPTO_MIGRATION_FILENAME, u as writeMatrixStorageMetaStateToStore, w as readLegacyMatrixRecoveryKeyState, x as openMatrixRecoveryKeyStoreOptions, y as openMatrixIdbSnapshotStoreOptions } from "./storage-CzHxeF5E.js";
+import { a as readLegacyMatrixSyncCacheState, i as openMatrixSyncCacheStoreOptions, o as writeMatrixSyncCacheStateToStore, r as hasMatrixSyncCacheStateInStore } from "./file-sync-store-CPkgnSXp.js";
+import { a as resolveMatrixInboundDedupeStateNamespace, n as MATRIX_INBOUND_DEDUPE_TTL_MS, r as buildMatrixInboundDedupeEventKey } from "./inbound-dedupe-CaBLblef.js";
+import { r as readLegacyMatrixIdbSnapshotState } from "./idb-persistence-Dyy6ipgU.js";
+import { isRecord } from "openclaw/plugin-sdk/string-coerce-runtime";
+import { normalizeAccountId } from "openclaw/plugin-sdk/account-id";
 import { archiveLegacyStateSource } from "openclaw/plugin-sdk/runtime-doctor";
+import { createHash } from "node:crypto";
+import path from "node:path";
 import fs from "node:fs/promises";
 import { createPersistentDedupeImportEntry } from "openclaw/plugin-sdk/persistent-dedupe";
 //#region extensions/matrix/src/matrix/monitor/inbound-dedupe-migration.ts
@@ -71,7 +76,7 @@ function normalizeLegacyTimestamp(raw) {
 	return Math.max(0, Math.floor(raw));
 }
 function parseLegacySqliteRow(row) {
-	const value = isRecord(row.value) ? row.value : {};
+	const value = isRecord$1(row.value) ? row.value : {};
 	const roomId = typeof value.roomId === "string" ? value.roomId.trim() : "";
 	const eventId = typeof value.eventId === "string" ? value.eventId.trim() : "";
 	const ts = normalizeLegacyTimestamp(value.ts);
@@ -127,11 +132,11 @@ async function readLegacyInboundDedupeJsonSource(storageRootDir) {
 	} catch {
 		return null;
 	}
-	if (!isRecord(parsed) || parsed.version !== LEGACY_JSON_VERSION || !Array.isArray(parsed.entries)) return null;
+	if (!isRecord$1(parsed) || parsed.version !== LEGACY_JSON_VERSION || !Array.isArray(parsed.entries)) return null;
 	const accountId = await resolveJsonRootAccountId(storageRootDir);
 	const markers = [];
 	for (const entry of parsed.entries) {
-		if (!isRecord(entry) || typeof entry.key !== "string") continue;
+		if (!isRecord$1(entry) || typeof entry.key !== "string") continue;
 		const separator = entry.key.indexOf("|");
 		if (separator <= 0) continue;
 		const roomId = entry.key.slice(0, separator).trim();
@@ -199,6 +204,39 @@ async function importNewestInboundDedupeMarkers(params) {
 //#region extensions/matrix/doctor-contract-api.ts
 const MATRIX_SYNC_CACHE_FILENAME = "bot-storage.json";
 const MATRIX_STORAGE_META_FILENAME = "storage-meta.json";
+async function collectLegacyMatrixCredentialSources(params) {
+	const credentialsDir = resolveMatrixCredentialsDir(params.stateDir);
+	let entries;
+	try {
+		entries = await fs.readdir(credentialsDir, { withFileTypes: true });
+	} catch {
+		return [];
+	}
+	return entries.filter((entry) => entry.isFile() && /^credentials(?:-[a-z0-9._-]+)?\.json$/iu.test(entry.name)).toSorted((left, right) => {
+		if (left.name === "credentials.json") return 1;
+		if (right.name === "credentials.json") return -1;
+		return left.name.localeCompare(right.name);
+	}).map((entry) => {
+		const namedAccount = /^credentials(?:-([a-z0-9._-]+))?\.json$/iu.exec(entry.name)?.[1];
+		return {
+			accountId: namedAccount ? normalizeAccountId(namedAccount) : requiresExplicitMatrixDefaultAccount(params.config, params.env) ? null : normalizeAccountId(resolveMatrixDefaultOrOnlyAccountId(params.config, params.env)),
+			filePath: path.join(credentialsDir, entry.name)
+		};
+	});
+}
+async function readLegacyMatrixCredentials(source) {
+	if (!source.accountId) return null;
+	try {
+		const raw = JSON.parse(await fs.readFile(source.filePath, "utf8"));
+		const createdAt = isRecord(raw) && typeof raw.createdAt === "string" && raw.createdAt ? raw.createdAt : (await fs.stat(source.filePath)).mtime.toISOString();
+		return normalizeMatrixStoredCredentials(isRecord(raw) ? {
+			...raw,
+			createdAt
+		} : raw, source.accountId);
+	} catch {
+		return null;
+	}
+}
 async function collectLegacyMatrixStateRoots(stateDir, filename) {
 	const matrixRoot = path.join(stateDir, "matrix");
 	const roots = [];
@@ -249,6 +287,74 @@ async function archiveLegacyMatrixStateFile(params) {
 	if (params.notice && params.warnings.length === warningCount) params.notices?.push(params.notice);
 }
 const stateMigrations = [
+	{
+		id: "matrix-credentials-json-to-plugin-state",
+		label: "Matrix credentials",
+		async detectLegacyState(params) {
+			const sources = await collectLegacyMatrixCredentialSources(params);
+			return sources.length > 0 ? { preview: [`Matrix credential JSON can migrate to SQLite (${sources.length} ${sources.length === 1 ? "file" : "files"})`] } : null;
+		},
+		async migrateLegacyState(params) {
+			const changes = [];
+			const warnings = [];
+			const sources = await collectLegacyMatrixCredentialSources(params);
+			const store = params.context.openPluginStateKeyedStore({
+				namespace: MATRIX_CREDENTIALS_NAMESPACE,
+				maxEntries: 256,
+				overflowPolicy: "reject-new"
+			});
+			for (const source of sources) {
+				if (!source.accountId) {
+					warnings.push(`Left ambiguous Matrix credential legacy source in place because no default account is selected: ${source.filePath}`);
+					continue;
+				}
+				const credentials = await readLegacyMatrixCredentials(source);
+				if (!credentials) {
+					warnings.push(`Left invalid Matrix credential legacy source in place: ${source.filePath}`);
+					continue;
+				}
+				const key = matrixCredentialsStoreKey(source.accountId);
+				const stored = await store.lookup(key);
+				if (isMatrixCredentialRevocation(stored, source.accountId)) {
+					changes.push(`Archived revoked Matrix credential legacy source for account ${source.accountId}`);
+					await archiveLegacyStateSource({
+						filePath: source.filePath,
+						label: "Matrix credentials",
+						changes,
+						warnings
+					});
+					continue;
+				}
+				const existing = normalizeMatrixStoredCredentials(stored, source.accountId);
+				if (existing && JSON.stringify(existing) !== JSON.stringify(credentials)) {
+					warnings.push(`Kept existing Matrix credentials for account ${source.accountId}; left differing legacy source in place`);
+					continue;
+				}
+				if (!existing) try {
+					await store.registerIfAbsent(key, credentials);
+				} catch (error) {
+					warnings.push(`Failed importing Matrix credentials for account ${source.accountId}: ${String(error)}; left legacy source in place`);
+					continue;
+				}
+				const persisted = normalizeMatrixStoredCredentials(await store.lookup(key), source.accountId);
+				if (!persisted || JSON.stringify(persisted) !== JSON.stringify(credentials)) {
+					warnings.push(`Failed verifying Matrix credentials for account ${source.accountId}; left legacy source in place`);
+					continue;
+				}
+				changes.push(`Migrated Matrix credentials for account ${source.accountId} to SQLite`);
+				await archiveLegacyStateSource({
+					filePath: source.filePath,
+					label: "Matrix credentials",
+					changes,
+					warnings
+				});
+			}
+			return {
+				changes,
+				warnings
+			};
+		}
+	},
 	{
 		id: "matrix-inbound-dedupe-to-claimable-dedupe",
 		label: "Matrix inbound dedupe markers",

package/dist/{draft-stream-De7uikGn.js → draft-stream-CTLKtJJ0.js}

@@ -1,4 +1,4 @@
-import { n as editMessageMatrix, r as prepareMatrixSingleText, s as sendSingleTextMessageMatrix, y as MsgType } from "./send-C7xuGWpv.js";
+import { n as editMessageMatrix, r as prepareMatrixSingleText, s as sendSingleTextMessageMatrix, y as MsgType } from "./send-BJbrdmNm.js";
 import { createDraftStreamLoop } from "openclaw/plugin-sdk/channel-outbound";
 //#region extensions/matrix/src/matrix/draft-stream.ts
 const DEFAULT_THROTTLE_MS = 1e3;

package/dist/{encryption-guidance-BFfgq7c7.js → encryption-guidance-CbEFe38F.js}

@@ -1,4 +1,4 @@
-import { a as resolveMatrixDefaultOrOnlyAccountId } from "./account-selection-Bz00QTmQ.js";
+import { a as resolveMatrixDefaultOrOnlyAccountId } from "./account-selection-kqquRzCf.js";
 import { t as resolveMatrixConfigFieldPath } from "./config-paths-CnREYb1Y.js";
 import { normalizeOptionalAccountId } from "openclaw/plugin-sdk/account-id";
 //#region extensions/matrix/src/matrix/encryption-guidance.ts

package/dist/{file-sync-store-Cxb0ckyX.js → file-sync-store-CPkgnSXp.js}

@@ -1,13 +1,30 @@
 import { t as __exportAll } from "./rolldown-runtime-8H4AJuhK.js";
-import { t as isRecord } from "./record-shared-CvzjvHRn.js";
-import { t as getMatrixRuntime } from "./runtime-CveSqMOP.js";
-import { M as resolveMatrixSqliteStateEnv, t as claimCurrentTokenStorageState } from "./storage-BtSOar8T.js";
-import { t as createAsyncLock } from "./async-lock-BcLS4KOc.js";
-import { n as LogService } from "./logger-BMClpI5b.js";
-import path from "node:path";
+import { t as isRecord } from "./record-shared-CWWx6fvI.js";
+import { t as getMatrixRuntime } from "./runtime-6S3DNFNv.js";
+import { M as resolveMatrixSqliteStateEnv, t as claimCurrentTokenStorageState } from "./storage-CzHxeF5E.js";
+import { n as LogService } from "./logger-D0GCSDQq.js";
 import { createHash, randomUUID } from "node:crypto";
+import path from "node:path";
 import fs from "node:fs/promises";
 import { Category, MemoryStore, SyncAccumulator } from "matrix-js-sdk/lib/matrix.js";
+//#region extensions/matrix/src/matrix/async-lock.ts
+function createAsyncLock() {
+	let lock = Promise.resolve();
+	return async function withLock(fn) {
+		const previous = lock;
+		let release;
+		lock = new Promise((resolve) => {
+			release = resolve;
+		});
+		await previous;
+		try {
+			return await fn();
+		} finally {
+			release?.();
+		}
+	};
+}
+//#endregion
 //#region extensions/matrix/src/matrix/client/file-sync-store.ts
 var file_sync_store_exports = /* @__PURE__ */ __exportAll({
 	SqliteBackedMatrixSyncStore: () => SqliteBackedMatrixSyncStore,

package/dist/helper-api.js

@@ -1,4 +1,4 @@
-import { a as resolveMatrixDefaultOrOnlyAccountId, i as resolveMatrixChannelConfig, n as requiresExplicitMatrixDefaultAccount, r as resolveConfiguredMatrixAccountIds, t as findMatrixAccountEntry } from "./account-selection-Bz00QTmQ.js";
+import { a as resolveMatrixDefaultOrOnlyAccountId, i as resolveMatrixChannelConfig, n as requiresExplicitMatrixDefaultAccount, r as resolveConfiguredMatrixAccountIds, t as findMatrixAccountEntry } from "./account-selection-kqquRzCf.js";
 import { n as listMatrixEnvAccountIds, r as resolveMatrixEnvAccountToken, t as getMatrixScopedEnvVarNames } from "./env-vars-B0NxQnPk.js";
-import { a as resolveMatrixCredentialsPath, i as resolveMatrixCredentialsFilename, n as resolveMatrixAccountStorageRoot, o as resolveMatrixHomeserverKey, r as resolveMatrixCredentialsDir, s as sanitizeMatrixPathSegment, t as hashMatrixAccessToken } from "./storage-paths-B4_I9iqO.js";
+import { a as resolveMatrixCredentialsPath, i as resolveMatrixCredentialsFilename, n as resolveMatrixAccountStorageRoot, o as resolveMatrixHomeserverKey, r as resolveMatrixCredentialsDir, s as sanitizeMatrixPathSegment, t as hashMatrixAccessToken } from "./storage-paths-gUmSydsW.js";
 export { findMatrixAccountEntry, getMatrixScopedEnvVarNames, hashMatrixAccessToken, listMatrixEnvAccountIds, requiresExplicitMatrixDefaultAccount, resolveConfiguredMatrixAccountIds, resolveMatrixAccountStorageRoot, resolveMatrixChannelConfig, resolveMatrixCredentialsDir, resolveMatrixCredentialsFilename, resolveMatrixCredentialsPath, resolveMatrixDefaultOrOnlyAccountId, resolveMatrixEnvAccountToken, resolveMatrixHomeserverKey, sanitizeMatrixPathSegment };

package/dist/{http-client-W4TJQM6r.js → http-client-BmrgOZTL.js}

@@ -1,6 +1,6 @@
 import { t as buildTimeoutAbortSignal } from "./timeout-abort-signal-DMrgRFIy.js";
-import { truncateUtf16Safe } from "openclaw/plugin-sdk/text-utility-runtime";
 import { parseMediaContentLength } from "openclaw/plugin-sdk/media-runtime";
+import { truncateUtf16Safe } from "openclaw/plugin-sdk/text-utility-runtime";
 import { readResponseWithLimit } from "openclaw/plugin-sdk/response-limit-runtime";
 import { fetchWithRuntimeDispatcherOrMockedGlobal } from "openclaw/plugin-sdk/runtime-fetch";
 import { closeDispatcher, createPinnedDispatcher, resolvePinnedHostnameWithPolicy } from "openclaw/plugin-sdk/ssrf-dispatcher";
@@ -337,7 +337,7 @@ var MatrixAuthedHttpClient = class {
 			allowAbsoluteEndpoint: params.allowAbsoluteEndpoint
 		});
 		if (!response.ok) throw buildHttpError(response.status, text);
-		if ((response.headers.get("content-type") ?? "").includes("application/json")) {
+		if ((response.headers.get("content-type") ?? "").split(";", 1)[0]?.trim().toLowerCase() === "application/json") {
 			if (!text.trim()) return {};
 			try {
 				return JSON.parse(text);

package/dist/{idb-persistence-iUZoHZkp.js → idb-persistence-Dyy6ipgU.js}

@@ -1,9 +1,9 @@
 import { t as __exportAll } from "./rolldown-runtime-8H4AJuhK.js";
-import { D as writeMatrixIdbSnapshotJson, T as readMatrixIdbSnapshotJson, f as MATRIX_IDB_SNAPSHOT_FILENAME } from "./storage-BtSOar8T.js";
-import { n as LogService } from "./logger-BMClpI5b.js";
+import { D as writeMatrixIdbSnapshotJson, T as readMatrixIdbSnapshotJson, f as MATRIX_IDB_SNAPSHOT_FILENAME } from "./storage-CzHxeF5E.js";
+import { n as LogService } from "./logger-D0GCSDQq.js";
 import { n as MATRIX_IDB_SNAPSHOT_LOCK_OPTIONS } from "./idb-persistence-lock-DAJ49nZX.js";
-import fs from "node:fs";
 import path from "node:path";
+import fs from "node:fs";
 import { indexedDB } from "fake-indexeddb";
 import { withFileLock } from "openclaw/plugin-sdk/file-lock";
 //#region extensions/matrix/src/matrix/sdk/idb-persistence.ts

package/dist/{inbound-dedupe-DcMs0YXL.js → inbound-dedupe-CaBLblef.js}

@@ -1,5 +1,5 @@
-import { n as LogService } from "./logger-BMClpI5b.js";
-import { createClaimableDedupe, resolvePersistentDedupePluginStateNamespace } from "openclaw/plugin-sdk/persistent-dedupe";
+import { n as LogService } from "./logger-D0GCSDQq.js";
+import { createChannelReplayGuard, resolvePersistentDedupePluginStateNamespace } from "openclaw/plugin-sdk/persistent-dedupe";
 //#region extensions/matrix/src/matrix/monitor/inbound-dedupe.ts
 const MATRIX_INBOUND_DEDUPE_PLUGIN_ID = "matrix";
 const MATRIX_INBOUND_DEDUPE_NAMESPACE_PREFIX = "matrix.inbound-dedupe";
@@ -24,44 +24,25 @@ function resolveMatrixInboundDedupeStateNamespace() {
 	});
 }
 function createMatrixInboundEventDeduper(params) {
-	const guard = createClaimableDedupe({
-		pluginId: MATRIX_INBOUND_DEDUPE_PLUGIN_ID,
-		namespacePrefix: MATRIX_INBOUND_DEDUPE_NAMESPACE_PREFIX,
-		ttlMs: MATRIX_INBOUND_DEDUPE_TTL_MS,
-		memoryMaxSize: MATRIX_INBOUND_DEDUPE_MEMORY_MAX,
-		stateMaxEntries: MATRIX_INBOUND_DEDUPE_STATE_MAX_ENTRIES,
-		...params.env ? { env: params.env } : {},
-		onDiskError: (err) => {
-			LogService.warn("MatrixInboundDedupe", "Matrix inbound dedupe persistence failed:", err);
-		}
-	});
 	const accountId = params.auth.accountId;
-	const namespace = MATRIX_INBOUND_DEDUPE_NAMESPACE;
-	return {
-		claimEvent: async (ids) => {
-			const key = buildMatrixInboundDedupeEventKey({
-				accountId,
-				...ids
-			});
-			if (!key) return true;
-			return (await guard.claim(key, { namespace })).kind === "claimed";
-		},
-		commitEvent: async (ids) => {
-			const key = buildMatrixInboundDedupeEventKey({
-				accountId,
-				...ids
-			});
-			if (!key) return;
-			await guard.commit(key, { namespace });
+	return createChannelReplayGuard({
+		dedupe: {
+			pluginId: MATRIX_INBOUND_DEDUPE_PLUGIN_ID,
+			namespacePrefix: MATRIX_INBOUND_DEDUPE_NAMESPACE_PREFIX,
+			ttlMs: MATRIX_INBOUND_DEDUPE_TTL_MS,
+			memoryMaxSize: MATRIX_INBOUND_DEDUPE_MEMORY_MAX,
+			stateMaxEntries: MATRIX_INBOUND_DEDUPE_STATE_MAX_ENTRIES,
+			...params.env ? { env: params.env } : {},
+			onDiskError: (err) => {
+				LogService.warn("MatrixInboundDedupe", "Matrix inbound dedupe persistence failed:", err);
+			}
 		},
-		releaseEvent: (ids) => {
-			const key = buildMatrixInboundDedupeEventKey({
-				accountId,
-				...ids
-			});
-			if (key) guard.release(key, { namespace });
-		}
-	};
+		buildReplayKey: (event) => buildMatrixInboundDedupeEventKey({
+			accountId,
+			...event
+		}),
+		namespace: () => MATRIX_INBOUND_DEDUPE_NAMESPACE
+	});
 }
 //#endregion
 export { resolveMatrixInboundDedupeStateNamespace as a, createMatrixInboundEventDeduper as i, MATRIX_INBOUND_DEDUPE_TTL_MS as n, buildMatrixInboundDedupeEventKey as r, MATRIX_INBOUND_DEDUPE_STATE_MAX_ENTRIES as t };

package/dist/index.js

@@ -1,4 +1,4 @@
-import { n as registerMatrixCliMetadata } from "./cli-metadata-Gf3HSJ2c.js";
+import { n as registerMatrixCliMetadata } from "./cli-metadata-Xq1Xb15R.js";
 import { registerMatrixSubagentHooks } from "./subagent-hooks-api.js";
 import { defineBundledChannelEntry } from "openclaw/plugin-sdk/channel-entry-contract";
 import { createLazyRuntimeModule } from "openclaw/plugin-sdk/lazy-runtime";

package/dist/{logger-BMClpI5b.js → logger-D0GCSDQq.js}

@@ -1,4 +1,4 @@
-import { t as getMatrixRuntime } from "./runtime-CveSqMOP.js";
+import { t as getMatrixRuntime } from "./runtime-6S3DNFNv.js";
 import { format } from "node:util";
 import { redactSensitiveText } from "openclaw/plugin-sdk/logging-core";
 //#region extensions/matrix/src/matrix/sdk/logger.ts

package/dist/{logging-CFJrbDAN.js → logging-QH-48Gr6.js}

@@ -1,4 +1,4 @@
-import { i as setMatrixConsoleLogging, n as LogService, t as ConsoleLogger } from "./logger-BMClpI5b.js";
+import { i as setMatrixConsoleLogging, n as LogService, t as ConsoleLogger } from "./logger-D0GCSDQq.js";
 import { logger } from "matrix-js-sdk/lib/logger.js";
 //#region extensions/matrix/src/matrix/client/logging.ts
 let matrixSdkLoggingConfigured = false;

package/dist/{media-text-DWaotsZB.js → media-text-BMXEXb1j.js}

@@ -1,4 +1,4 @@
-import { C as formatPollResultsAsText, D as parsePollStartContent, O as resolvePollReferenceEventId, S as formatPollAsText, T as isPollStartType, w as isPollEventType, x as buildPollResultsSummary } from "./send-C7xuGWpv.js";
+import { C as formatPollResultsAsText, D as parsePollStartContent, O as resolvePollReferenceEventId, S as formatPollAsText, T as isPollStartType, w as isPollEventType, x as buildPollResultsSummary } from "./send-BJbrdmNm.js";
 import path from "node:path";
 //#region extensions/matrix/src/matrix/poll-summary.ts
 function resolveMatrixPollRootEventId(event) {

package/dist/{messages-Dm3K4ZvM.js → messages-3UBHfZrN.js}

@@ -1,8 +1,8 @@
 import { r as isMatrixNotFoundError } from "./errors-C47hvAF8.js";
-import { T as isPollStartType, a as sendMessageMatrix, n as editMessageMatrix, w as isPollEventType } from "./send-C7xuGWpv.js";
+import { T as isPollStartType, a as sendMessageMatrix, n as editMessageMatrix, w as isPollEventType } from "./send-BJbrdmNm.js";
 import { n as MATRIX_REACTION_EVENT_TYPE } from "./reaction-common-DkrQdBSZ.js";
-import { a as resolveMatrixMessageAttachment, l as resolveMatrixPollRootEventId, o as resolveMatrixMessageBody, s as fetchMatrixPollMessageSummary } from "./media-text-DWaotsZB.js";
-import { r as withResolvedRoomAction } from "./client-ClHisZbf.js";
+import { a as resolveMatrixMessageAttachment, l as resolveMatrixPollRootEventId, o as resolveMatrixMessageBody, s as fetchMatrixPollMessageSummary } from "./media-text-BMXEXb1j.js";
+import { r as withResolvedRoomAction } from "./client-BtG4quUl.js";
 import { normalizeOptionalString } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { resolveIntegerOption } from "openclaw/plugin-sdk/number-runtime";
 //#region extensions/matrix/src/matrix/actions/limits.ts