@openclaw/matrix 2026.7.2-beta.7 → 2026.7.33

package/dist/{crypto-runtime-D9_6J5tZ.js → .setup/crypto-runtime-D-cZa8P0.mjs}

@@ -1,47 +1,54 @@
-import { t as formatMatrixErrorMessage } from "./errors-C47hvAF8.js";
-import { t as ensureMatrixCryptoRuntime } from "./deps-CcVJfvRM.js";
-import { n as LogService, r as noop } from "./logger-D0GCSDQq.js";
-import { i as restoreIdbFromDisk, n as persistIdbToDisk } from "./idb-persistence-B6x7dMsF.js";
-import { n as isRepairableSecretStorageAccessError } from "./recovery-key-store-BNnHvXdk.js";
+import { t as formatMatrixErrorMessage } from "./errors-C47hvAF8.mjs";
+import { t as ensureMatrixCryptoRuntime } from "./deps-Dy6yreL4.mjs";
+import { n as LogService, r as noop } from "./logger-DpoogOgz.mjs";
+import { i as restoreIdbFromDisk, n as persistIdbToDisk } from "./idb-persistence-_HKTXkVC.mjs";
+import { n as isRepairableSecretStorageAccessError } from "./sdk-He1quVAq.mjs";
 import { createLazyRuntimeModule } from "openclaw/plugin-sdk/lazy-runtime";
 import { resolveDateTimestampMs, resolveTimestampMsToIsoString } from "openclaw/plugin-sdk/number-runtime";
 import { MatrixEventEvent } from "matrix-js-sdk/lib/matrix.js";
-import { IDBDatabase } from "fake-indexeddb";
 import { setTimeout as setTimeout$1 } from "node:timers/promises";
 import { VerificationMethod } from "matrix-js-sdk/lib/types.js";
 import "fake-indexeddb/auto";
 import { CryptoEvent } from "matrix-js-sdk/lib/crypto-api/CryptoEvent.js";
 import { DecryptionFailureCode } from "matrix-js-sdk/lib/crypto-api/index.js";
 import { VerificationPhase, VerificationRequestEvent, VerifierEvent } from "matrix-js-sdk/lib/crypto-api/verification.js";
-import { expectDefined } from "openclaw/plugin-sdk/expect-runtime";
 //#region extensions/matrix/src/matrix/sdk/fake-indexeddb-prune.ts
 const MATRIX_CRYPTO_DATABASE_SUFFIXES = ["::matrix-sdk-crypto", "::matrix-sdk-crypto-meta"];
 const PRUNER_INSTALLED = Symbol.for("openclaw.matrix.fakeIndexedDbTransactionPruner");
+function getRawDatabase(value) {
+	if (!value || typeof value !== "object") return;
+	const rawDatabase = value["_rawDatabase"];
+	if (!rawDatabase || typeof rawDatabase !== "object") return;
+	return rawDatabase;
+}
 function isMatrixCryptoDatabase(rawDatabase) {
-	return MATRIX_CRYPTO_DATABASE_SUFFIXES.some((suffix) => rawDatabase.name.endsWith(suffix));
+	if (!rawDatabase || !Array.isArray(rawDatabase.transactions)) return false;
+	const databaseName = rawDatabase.name;
+	return typeof databaseName === "string" && MATRIX_CRYPTO_DATABASE_SUFFIXES.some((suffix) => databaseName.endsWith(suffix));
 }
 function pruneFinishedFakeIndexedDbTransactions(rawDatabase) {
-	if (!isMatrixCryptoDatabase(rawDatabase)) return 0;
-	const transactions = rawDatabase.transactions;
-	const activeTransactions = transactions.filter((transaction) => transaction["_state"] !== "finished");
+	const matrixRawDatabase = rawDatabase;
+	if (!isMatrixCryptoDatabase(matrixRawDatabase)) return 0;
+	const transactions = matrixRawDatabase.transactions;
+	const activeTransactions = transactions.filter((transaction) => transaction?.["_state"] !== "finished");
 	const removed = transactions.length - activeTransactions.length;
 	if (removed > 0) transactions.splice(0, transactions.length, ...activeTransactions);
 	return removed;
 }
 function installFakeIndexedDbTransactionPruner() {
-	const databasePrototype = IDBDatabase.prototype;
-	if (databasePrototype[PRUNER_INSTALLED]) return;
+	const databasePrototype = globalThis.IDBDatabase?.prototype;
+	const originalTransaction = databasePrototype?.transaction;
+	if (!databasePrototype || typeof originalTransaction !== "function" || databasePrototype[PRUNER_INSTALLED]) return;
 	Object.defineProperty(databasePrototype, PRUNER_INSTALLED, {
 		configurable: false,
 		enumerable: false,
 		value: true
 	});
-	const originalTransaction = Object.getOwnPropertyDescriptor(databasePrototype, "transaction")?.value;
 	databasePrototype.transaction = function patchedMatrixFakeIndexedDbTransaction(...args) {
-		const rawDatabase = this["_rawDatabase"];
-		pruneFinishedFakeIndexedDbTransactions(rawDatabase);
+		pruneFinishedFakeIndexedDbTransactions(getRawDatabase(this));
 		const transaction = originalTransaction.apply(this, args);
-		if (isMatrixCryptoDatabase(rawDatabase)) {
+		const rawDatabase = getRawDatabase(transaction?.db) ?? getRawDatabase(this);
+		if (isMatrixCryptoDatabase(rawDatabase) && typeof transaction?.addEventListener === "function") {
 			const prune = () => {
 				pruneFinishedFakeIndexedDbTransactions(rawDatabase);
 			};
@@ -331,7 +338,7 @@ var MatrixCryptoBootstrapper = class {
 };
 //#endregion
 //#region extensions/matrix/src/matrix/sdk/crypto-facade.ts
-const matrixCryptoNodeRuntimeLoader = createLazyRuntimeModule(() => import("./crypto-node.runtime-6Aj_ltHQ.js"));
+const matrixCryptoNodeRuntimeLoader = createLazyRuntimeModule(() => import("./crypto-node.runtime-6Aj_ltHQ.mjs"));
 async function loadMatrixCryptoNodeRuntime() {
 	try {
 		return await matrixCryptoNodeRuntimeLoader();
@@ -457,21 +464,31 @@ function createMatrixCryptoFacade(deps) {
 const MATRIX_DECRYPT_RETRY_BASE_DELAY_MS = 1500;
 const MATRIX_DECRYPT_RETRY_MAX_DELAY_MS = 3e4;
 const MATRIX_DECRYPT_RETRY_MAX_ATTEMPTS = 8;
-const MATRIX_DECRYPT_EXHAUSTED_RETRY_TTL_MS = 60 * 6e4;
+const MATRIX_DECRYPT_DRAIN_TIMEOUT_MS = 5e3;
+const MATRIX_DECRYPT_EXHAUSTED_RETRY_TTL_MS = 36e5;
 const MATRIX_DECRYPT_EXHAUSTED_RETRY_MAX_ENTRIES = 512;
 function resolveDecryptRetryKey(roomId, eventId) {
 	if (!roomId || !eventId) return null;
 	return `${roomId}|${eventId}`;
 }
-function shouldRetryDecryptionFailure(event) {
-	if (!event.isDecryptionFailure()) return false;
+function isDecryptionFailure(event) {
+	return typeof event.isDecryptionFailure === "function" && event.isDecryptionFailure();
+}
+function getDecryptionFailureReason(event) {
 	const reason = event.decryptionFailureReason;
+	return typeof reason === "string" && reason in DecryptionFailureCode ? reason : null;
+}
+function shouldRetryDecryptionFailure(event) {
+	if (!isDecryptionFailure(event)) return false;
+	const reason = getDecryptionFailureReason(event);
+	if (!reason) return true;
 	return reason === DecryptionFailureCode.MEGOLM_UNKNOWN_INBOUND_SESSION_ID || reason === DecryptionFailureCode.OLM_UNKNOWN_MESSAGE_INDEX || reason === DecryptionFailureCode.UNKNOWN_ERROR;
 }
 var MatrixDecryptBridge = class {
 	constructor(deps) {
 		this.deps = deps;
 		this.trackedEncryptedEvents = /* @__PURE__ */ new WeakSet();
+		this.pendingSdkDecryptions = /* @__PURE__ */ new Set();
 		this.decryptedMessageDedupe = /* @__PURE__ */ new Map();
 		this.decryptRetries = /* @__PURE__ */ new Map();
 		this.failedDecryptionsNotified = /* @__PURE__ */ new Set();
@@ -479,6 +496,7 @@ var MatrixDecryptBridge = class {
 		this.activeRetryRuns = 0;
 		this.retryIdleResolvers = /* @__PURE__ */ new Set();
 		this.cryptoRetrySignalsBound = false;
+		this.quiescing = false;
 		this.stopped = false;
 	}
 	shouldEmitUnencryptedMessage(roomId, eventId) {
@@ -489,9 +507,17 @@ var MatrixDecryptBridge = class {
 		return false;
 	}
 	attachEncryptedEvent(event, roomId) {
-		if (this.stopped) return;
+		if (this.quiescing || this.stopped) return;
 		if (this.trackedEncryptedEvents.has(event)) return;
 		this.trackedEncryptedEvents.add(event);
+		const sdkDecryption = event.getDecryptionPromise();
+		if (sdkDecryption) {
+			this.pendingSdkDecryptions.add(sdkDecryption);
+			const forgetSdkDecryption = () => {
+				this.pendingSdkDecryptions.delete(sdkDecryption);
+			};
+			sdkDecryption.then(forgetSdkDecryption, forgetSdkDecryption);
+		}
 		event.on(MatrixEventEvent.Decrypted, (decryptedEvent, err) => {
 			this.handleEncryptedEventDecrypted({
 				roomId,
@@ -510,7 +536,7 @@ var MatrixDecryptBridge = class {
 		}
 	}
 	retryPendingNow(reason, options) {
-		if (this.stopped) return;
+		if (this.quiescing || this.stopped) return;
 		if (options?.includeExhausted) {
 			this.pruneExhaustedDecryptRetries(Date.now());
 			for (const [retryKey, state] of this.exhaustedDecryptRetries) {
@@ -556,16 +582,33 @@ var MatrixDecryptBridge = class {
 		});
 	}
 	stop() {
+		this.quiescing = true;
 		this.stopped = true;
 		for (const retryKey of this.decryptRetries.keys()) this.clearDecryptRetry(retryKey);
+		this.pendingSdkDecryptions.clear();
 		this.exhaustedDecryptRetries.clear();
 	}
-	async drainPendingDecryptions(reason) {
-		for (let attempts = 0; attempts < MATRIX_DECRYPT_RETRY_MAX_ATTEMPTS; attempts += 1) {
-			if (this.decryptRetries.size === 0) return;
-			this.retryPendingNow(reason);
-			await this.waitForActiveRetryRunsToFinish();
-			if (!Array.from(this.decryptRetries.values()).some((state) => state.timer || state.inFlight)) return;
+	async drainPendingDecryptions(_reason) {
+		this.quiescing = true;
+		const pendingSdkDecryptions = Array.from(this.pendingSdkDecryptions);
+		const pending = Array.from(this.decryptRetries.entries());
+		for (const [retryKey, state] of pending) {
+			if (state.timer) {
+				clearTimeout(state.timer);
+				state.timer = null;
+			}
+			if (!state.inFlight) this.runDecryptRetry(retryKey).catch(noop);
+		}
+		let timeout;
+		try {
+			await Promise.race([Promise.all([Promise.allSettled(pendingSdkDecryptions), this.waitForActiveRetryRunsToFinish()]), new Promise((_, reject) => {
+				timeout = setTimeout(() => {
+					reject(/* @__PURE__ */ new Error(`Matrix decryption drain did not finish within ${MATRIX_DECRYPT_DRAIN_TIMEOUT_MS}ms`));
+				}, MATRIX_DECRYPT_DRAIN_TIMEOUT_MS);
+				timeout.unref?.();
+			})]);
+		} finally {
+			if (timeout !== void 0) clearTimeout(timeout);
 		}
 	}
 	handleEncryptedEventDecrypted(params) {
@@ -584,7 +627,7 @@ var MatrixDecryptBridge = class {
 			else if (retryKey) this.clearDecryptRetry(retryKey);
 			return;
 		}
-		if (params.decryptedEvent.isDecryptionFailure()) {
+		if (isDecryptionFailure(params.decryptedEvent)) {
 			this.emitFailedDecryptionOnce(retryKey, decryptedRoomId, decryptedRaw, /* @__PURE__ */ new Error("Matrix event failed to decrypt"));
 			if (shouldRetryDecryptionFailure(params.decryptedEvent)) this.scheduleDecryptRetry({
 				event: params.encryptedEvent,
@@ -607,7 +650,7 @@ var MatrixDecryptBridge = class {
 		this.deps.emitFailedDecryption(roomId, event, error);
 	}
 	scheduleDecryptRetry(params) {
-		if (this.stopped) return;
+		if (this.quiescing || this.stopped) return;
 		const retryKey = resolveDecryptRetryKey(params.roomId, params.eventId);
 		if (!retryKey) return;
 		const existing = this.decryptRetries.get(retryKey);
@@ -670,8 +713,11 @@ var MatrixDecryptBridge = class {
 			this.resolveRetryIdleIfNeeded();
 		}
 		if (this.decryptRetries.get(retryKey) !== state) return;
-		if (this.stopped) return;
-		if (state.event.isDecryptionFailure()) {
+		if (this.stopped || this.quiescing && state.event.isDecryptionFailure()) {
+			this.clearDecryptRetry(retryKey);
+			return;
+		}
+		if (isDecryptionFailure(state.event)) {
 			if (!shouldRetryDecryptionFailure(state.event)) {
 				this.clearDecryptRetry(retryKey);
 				return;
@@ -747,7 +793,7 @@ function isMatrixVerificationPhase(value) {
 	return typeof value === "number" && MATRIX_VERIFICATION_PHASES.has(value);
 }
 const MAX_TRACKED_VERIFICATION_SESSIONS = 256;
-const TERMINAL_SESSION_RETENTION_MS = 1440 * 60 * 1e3;
+const TERMINAL_SESSION_RETENTION_MS = 864e5;
 const SAS_AUTO_CONFIRM_DELAY_MS = 3e4;
 var MatrixVerificationManager = class {
 	constructor(opts = {}) {
@@ -867,7 +913,7 @@ var MatrixVerificationManager = class {
 		const transactionMatches = Array.from(this.verificationSessions.values()).filter((session) => {
 			return this.readRequestValue(session.request, () => session.request.transactionId?.trim(), "") === id;
 		});
-		if (transactionMatches.length === 1) return expectDefined(transactionMatches[0], "single Matrix verification session");
+		if (transactionMatches.length === 1) return transactionMatches[0];
 		if (transactionMatches.length > 1) throw new Error(`Matrix verification request id is ambiguous for transaction ${id}; use the verification id instead`);
 		throw new Error(`Matrix verification request not found: ${id}`);
 	}

package/dist/.setup/crypto-state-store-B43k3z3W.mjs

@@ -0,0 +1,352 @@
+import { o as isRecord } from "./account-selection-BOQeTqax.mjs";
+import { t as getMatrixRuntime } from "./runtime-6S3DNFNv.mjs";
+import fs from "node:fs";
+import os from "node:os";
+import path from "node:path";
+import { createHash, randomUUID } from "node:crypto";
+//#region extensions/matrix/src/matrix/sqlite-state.ts
+function resolveStateDirOverride(options) {
+	if (!options) return;
+	if (options.stateDir) return options.stateDir;
+	if (options.stateRootDir) return options.stateRootDir;
+	return getMatrixRuntime().state.resolveStateDir(options.env ?? process.env, os.homedir);
+}
+function resolveMatrixSqliteStateKey(options) {
+	return resolveStateDirOverride(options) ?? "";
+}
+function resolveMatrixSqliteStateEnv(options) {
+	const stateDir = resolveStateDirOverride(options);
+	if (!stateDir) return options?.env;
+	return {
+		...options?.env ?? process.env,
+		OPENCLAW_STATE_DIR: stateDir
+	};
+}
+//#endregion
+//#region extensions/matrix/src/matrix/crypto-state-store.ts
+const STATE_KEY = "current";
+const RECOVERY_KEY_NAMESPACE = "recovery-key";
+const LEGACY_CRYPTO_MIGRATION_NAMESPACE = "legacy-crypto-migration";
+const IDB_SNAPSHOT_NAMESPACE = "idb-snapshot";
+const SMALL_STATE_MAX_ENTRIES = 10;
+const IDB_SNAPSHOT_MAX_ENTRIES = 2e4;
+const IDB_SNAPSHOT_MAX_CHUNKS = Math.floor(19999 / 2);
+const IDB_SNAPSHOT_CHUNK_BYTES = 24e3;
+const MATRIX_RECOVERY_KEY_FILENAME = "recovery-key.json";
+const MATRIX_LEGACY_CRYPTO_MIGRATION_FILENAME = "legacy-crypto-migration.json";
+const MATRIX_IDB_SNAPSHOT_FILENAME = "crypto-idb-snapshot.json";
+function openMatrixRecoveryKeyStoreOptions(storageRootDir) {
+	return {
+		namespace: RECOVERY_KEY_NAMESPACE,
+		maxEntries: SMALL_STATE_MAX_ENTRIES,
+		env: resolveMatrixSqliteStateEnv({ stateDir: storageRootDir })
+	};
+}
+function openMatrixLegacyCryptoMigrationStoreOptions(storageRootDir) {
+	return {
+		namespace: LEGACY_CRYPTO_MIGRATION_NAMESPACE,
+		maxEntries: SMALL_STATE_MAX_ENTRIES,
+		env: resolveMatrixSqliteStateEnv({ stateDir: storageRootDir })
+	};
+}
+function openMatrixIdbSnapshotStoreOptions(storageRootDir) {
+	return {
+		namespace: IDB_SNAPSHOT_NAMESPACE,
+		maxEntries: IDB_SNAPSHOT_MAX_ENTRIES,
+		env: resolveMatrixSqliteStateEnv({ stateDir: storageRootDir })
+	};
+}
+function readMatrixRecoveryKeyState(storageRootDir) {
+	return readMatrixRecoveryKeyStateWithKey({
+		storageRootDir,
+		stateKey: STATE_KEY
+	});
+}
+function readMatrixRecoveryKeyStateForPath(recoveryKeyPath) {
+	return readMatrixRecoveryKeyStateWithKey({
+		storageRootDir: path.dirname(recoveryKeyPath),
+		stateKey: resolveRecoveryKeyStateKeyForPath(recoveryKeyPath)
+	});
+}
+function readMatrixRecoveryKeyStateWithKey(params) {
+	return normalizeMatrixStoredRecoveryKey(openSyncStore(openMatrixRecoveryKeyStoreOptions(params.storageRootDir)).lookup(params.stateKey));
+}
+function writeMatrixRecoveryKeyState(params) {
+	writeMatrixRecoveryKeyStateWithKey({
+		storageRootDir: params.storageRootDir,
+		stateKey: STATE_KEY,
+		payload: params.payload
+	});
+}
+function writeMatrixRecoveryKeyStateForPath(params) {
+	writeMatrixRecoveryKeyStateWithKey({
+		storageRootDir: path.dirname(params.recoveryKeyPath),
+		stateKey: resolveRecoveryKeyStateKeyForPath(params.recoveryKeyPath),
+		payload: params.payload
+	});
+}
+function writeMatrixRecoveryKeyStateWithKey(params) {
+	const payload = normalizeMatrixStoredRecoveryKey(params.payload);
+	if (!payload) throw new Error("Invalid Matrix recovery key state");
+	openSyncStore(openMatrixRecoveryKeyStoreOptions(params.storageRootDir)).register(params.stateKey, payload);
+}
+async function hasMatrixRecoveryKeyStateInStore(params) {
+	return normalizeMatrixStoredRecoveryKey(await params.store.lookup(STATE_KEY)) !== null;
+}
+async function writeMatrixRecoveryKeyStateToStore(params) {
+	const payload = normalizeMatrixStoredRecoveryKey(params.payload);
+	if (!payload) throw new Error("Invalid Matrix recovery key state");
+	await params.store.register(STATE_KEY, payload);
+}
+function readMatrixLegacyCryptoMigrationState(storageRootDir) {
+	return normalizeMatrixLegacyCryptoMigrationState(openSyncStore(openMatrixLegacyCryptoMigrationStoreOptions(storageRootDir)).lookup(STATE_KEY));
+}
+function writeMatrixLegacyCryptoMigrationState(params) {
+	const state = normalizeMatrixLegacyCryptoMigrationState(params.state);
+	if (!state) throw new Error("Invalid Matrix legacy crypto migration state");
+	openSyncStore(openMatrixLegacyCryptoMigrationStoreOptions(params.storageRootDir)).register(STATE_KEY, state);
+}
+async function hasMatrixLegacyCryptoMigrationStateInStore(params) {
+	return normalizeMatrixLegacyCryptoMigrationState(await params.store.lookup(STATE_KEY)) !== null;
+}
+async function writeMatrixLegacyCryptoMigrationStateToStore(params) {
+	const state = normalizeMatrixLegacyCryptoMigrationState(params.state);
+	if (!state) throw new Error("Invalid Matrix legacy crypto migration state");
+	await params.store.register(STATE_KEY, state);
+}
+function readMatrixIdbSnapshotJson(storageRootDir) {
+	return readIdbSnapshotJsonFromStore(openSyncStore(openMatrixIdbSnapshotStoreOptions(storageRootDir)));
+}
+function hasMatrixIdbSnapshotState(storageRootDir) {
+	return isIdbSnapshotMeta(openSyncStore(openMatrixIdbSnapshotStoreOptions(storageRootDir)).lookup(idbMetaKey()));
+}
+function writeMatrixIdbSnapshotJson(params) {
+	writeIdbSnapshotJsonToStore({
+		snapshotJson: params.snapshotJson,
+		databaseCount: params.databaseCount,
+		store: openSyncStore(openMatrixIdbSnapshotStoreOptions(params.storageRootDir))
+	});
+}
+async function hasMatrixIdbSnapshotStateInStore(params) {
+	return await readIdbSnapshotJsonFromAsyncStore(params.store) !== null;
+}
+async function writeMatrixIdbSnapshotJsonToStore(params) {
+	const rows = buildIdbSnapshotRows(params.snapshotJson, params.databaseCount);
+	for (const row of rows.chunks) await params.store.register(row.key, row.value);
+	await params.store.register(rows.meta.key, rows.meta.value);
+	for (const row of await params.store.entries()) if (row.key.startsWith(idbChunkKeyPrefix()) && !rows.nextChunkKeys.has(row.key)) await params.store.delete(row.key);
+}
+function migrateLegacyMatrixRecoveryKeyFileToStore(storageRootDir) {
+	return migrateLegacyMatrixRecoveryKeyFilePathToStore(path.join(storageRootDir, MATRIX_RECOVERY_KEY_FILENAME));
+}
+function migrateLegacyMatrixRecoveryKeyFilePathToStore(recoveryKeyPath) {
+	const existing = readMatrixRecoveryKeyStateForPath(recoveryKeyPath);
+	const legacy = readLegacyMatrixRecoveryKeyFile(recoveryKeyPath);
+	if (!existing && legacy) writeMatrixRecoveryKeyStateForPath({
+		recoveryKeyPath,
+		payload: legacy
+	});
+	return archiveLegacyStateFileIfPossible(recoveryKeyPath);
+}
+function migrateLegacyMatrixLegacyCryptoMigrationFileToStore(storageRootDir) {
+	const existing = readMatrixLegacyCryptoMigrationState(storageRootDir);
+	const legacy = readLegacyMatrixLegacyCryptoMigrationState(storageRootDir);
+	if (!existing && legacy) writeMatrixLegacyCryptoMigrationState({
+		storageRootDir,
+		state: legacy
+	});
+	return archiveLegacyStateFileIfPossible(path.join(storageRootDir, MATRIX_LEGACY_CRYPTO_MIGRATION_FILENAME));
+}
+function readLegacyMatrixRecoveryKeyState(storageRootDir) {
+	return readLegacyMatrixRecoveryKeyFile(path.join(storageRootDir, MATRIX_RECOVERY_KEY_FILENAME));
+}
+function readLegacyMatrixRecoveryKeyFile(filePath) {
+	return readJsonFileSync(filePath, normalizeMatrixStoredRecoveryKey);
+}
+function readLegacyMatrixLegacyCryptoMigrationState(storageRootDir) {
+	return readJsonFileSync(path.join(storageRootDir, MATRIX_LEGACY_CRYPTO_MIGRATION_FILENAME), normalizeMatrixLegacyCryptoMigrationState);
+}
+function scoreMatrixCryptoStateInStore(storageRootDir) {
+	if (!matrixCryptoStateDatabaseExists(storageRootDir)) return 0;
+	let score = 0;
+	try {
+		if (readMatrixLegacyCryptoMigrationState(storageRootDir)) score += 3;
+	} catch {}
+	try {
+		if (readMatrixRecoveryKeyState(storageRootDir)) score += 2;
+	} catch {}
+	try {
+		if (hasMatrixIdbSnapshotState(storageRootDir)) score += 2;
+	} catch {}
+	return score;
+}
+function matrixCryptoStateDatabaseExists(storageRootDir) {
+	return fs.existsSync(path.join(storageRootDir, "state", "openclaw.sqlite"));
+}
+function resolveRecoveryKeyStateKeyForPath(recoveryKeyPath) {
+	const basename = path.basename(recoveryKeyPath);
+	if (basename === "recovery-key.json") return STATE_KEY;
+	return `file:${createHash("sha256").update(basename, "utf8").digest("hex").slice(0, 32)}`;
+}
+function normalizeMatrixStoredRecoveryKey(value) {
+	if (!isRecord(value) || value.version !== 1 || typeof value.createdAt !== "string" || typeof value.privateKeyBase64 !== "string" || !value.privateKeyBase64.trim()) return null;
+	return {
+		version: 1,
+		createdAt: value.createdAt,
+		keyId: typeof value.keyId === "string" ? value.keyId : null,
+		...typeof value.encodedPrivateKey === "string" ? { encodedPrivateKey: value.encodedPrivateKey } : {},
+		privateKeyBase64: value.privateKeyBase64,
+		...isRecord(value.keyInfo) ? { keyInfo: {
+			...value.keyInfo.passphrase !== void 0 ? { passphrase: value.keyInfo.passphrase } : {},
+			...typeof value.keyInfo.name === "string" ? { name: value.keyInfo.name } : {}
+		} } : {}
+	};
+}
+function normalizeMatrixLegacyCryptoMigrationState(value) {
+	if (!isRecord(value) || value.version !== 1 || typeof value.accountId !== "string") return null;
+	if (value.restoreStatus !== "pending" && value.restoreStatus !== "completed" && value.restoreStatus !== "manual-action-required") return null;
+	const roomKeyCounts = isRecord(value.roomKeyCounts) && typeof value.roomKeyCounts.total === "number" && typeof value.roomKeyCounts.backedUp === "number" ? {
+		total: value.roomKeyCounts.total,
+		backedUp: value.roomKeyCounts.backedUp
+	} : null;
+	return {
+		version: 1,
+		...value.source === "matrix-bot-sdk-rust" ? { source: value.source } : {},
+		accountId: value.accountId,
+		...typeof value.deviceId === "string" || value.deviceId === null ? { deviceId: value.deviceId } : {},
+		roomKeyCounts,
+		...typeof value.backupVersion === "string" || value.backupVersion === null ? { backupVersion: value.backupVersion } : {},
+		...typeof value.decryptionKeyImported === "boolean" ? { decryptionKeyImported: value.decryptionKeyImported } : {},
+		restoreStatus: value.restoreStatus,
+		...typeof value.detectedAt === "string" ? { detectedAt: value.detectedAt } : {},
+		...typeof value.restoredAt === "string" ? { restoredAt: value.restoredAt } : {},
+		...typeof value.importedCount === "number" ? { importedCount: value.importedCount } : {},
+		...typeof value.totalCount === "number" ? { totalCount: value.totalCount } : {},
+		...typeof value.lastError === "string" || value.lastError === null ? { lastError: value.lastError } : {}
+	};
+}
+function openSyncStore(options) {
+	return getMatrixRuntime().state.openSyncKeyedStore(options);
+}
+function readJsonFileSync(filePath, normalize) {
+	try {
+		return normalize(JSON.parse(fs.readFileSync(filePath, "utf8")));
+	} catch {
+		return null;
+	}
+}
+function archiveLegacyStateFileIfPossible(filePath) {
+	if (!fs.existsSync(filePath)) return false;
+	const archivedPath = `${filePath}.migrated`;
+	if (fs.existsSync(archivedPath)) return false;
+	fs.renameSync(filePath, archivedPath);
+	return true;
+}
+function readIdbSnapshotJsonFromStore(store) {
+	const meta = store.lookup(idbMetaKey());
+	if (!isIdbSnapshotMeta(meta)) return null;
+	const chunks = readIdbSnapshotChunks(meta, (key) => store.lookup(key));
+	return chunks ? chunks.join("") : null;
+}
+async function readIdbSnapshotJsonFromAsyncStore(store) {
+	const meta = await store.lookup(idbMetaKey());
+	if (!isIdbSnapshotMeta(meta)) return null;
+	const chunks = await readIdbSnapshotChunksAsync(meta, (key) => store.lookup(key));
+	return chunks ? chunks.join("") : null;
+}
+function readIdbSnapshotChunks(meta, lookup) {
+	const chunks = [];
+	for (let index = 0; index < meta.chunkCount; index += 1) {
+		const chunk = lookup(idbChunkKey(meta.generation, index));
+		if (!isIdbSnapshotChunk(chunk) || chunk.index !== index) return null;
+		chunks.push(chunk.data);
+	}
+	const snapshotJson = chunks.join("");
+	if (meta.digest !== digestText(snapshotJson)) return null;
+	return chunks;
+}
+async function readIdbSnapshotChunksAsync(meta, lookup) {
+	const chunks = [];
+	for (let index = 0; index < meta.chunkCount; index += 1) {
+		const chunk = await lookup(idbChunkKey(meta.generation, index));
+		if (!isIdbSnapshotChunk(chunk) || chunk.index !== index) return null;
+		chunks.push(chunk.data);
+	}
+	const snapshotJson = chunks.join("");
+	if (meta.digest !== digestText(snapshotJson)) return null;
+	return chunks;
+}
+function writeIdbSnapshotJsonToStore(params) {
+	const rows = buildIdbSnapshotRows(params.snapshotJson, params.databaseCount);
+	for (const row of rows.chunks) params.store.register(row.key, row.value);
+	params.store.register(rows.meta.key, rows.meta.value);
+	for (const row of params.store.entries()) if (row.key.startsWith(idbChunkKeyPrefix()) && !rows.nextChunkKeys.has(row.key)) params.store.delete(row.key);
+}
+function buildIdbSnapshotRows(snapshotJson, databaseCount) {
+	const generation = randomUUID().replaceAll("-", "");
+	const chunks = chunkText(snapshotJson).map((data, index) => ({
+		key: idbChunkKey(generation, index),
+		value: {
+			kind: "snapshot-chunk",
+			index,
+			data
+		}
+	}));
+	return {
+		chunks,
+		nextChunkKeys: new Set(chunks.map((chunk) => chunk.key)),
+		meta: {
+			key: idbMetaKey(),
+			value: {
+				kind: "meta",
+				version: 1,
+				generation,
+				chunkCount: chunks.length,
+				digest: digestText(snapshotJson),
+				databaseCount,
+				persistedAt: (/* @__PURE__ */ new Date()).toISOString()
+			}
+		}
+	};
+}
+function idbMetaKey() {
+	return `${STATE_KEY}:meta`;
+}
+function idbChunkKeyPrefix() {
+	return `${STATE_KEY}:snapshot:`;
+}
+function idbChunkKey(generation, index) {
+	return `${idbChunkKeyPrefix()}${generation}:${index}`;
+}
+function chunkText(value) {
+	const chunks = [];
+	let current = "";
+	let currentBytes = 0;
+	for (const char of value) {
+		const charBytes = Buffer.byteLength(char, "utf8");
+		if (current && currentBytes + charBytes > IDB_SNAPSHOT_CHUNK_BYTES) {
+			pushChunk(chunks, current);
+			current = "";
+			currentBytes = 0;
+		}
+		current += char;
+		currentBytes += charBytes;
+	}
+	if (current) pushChunk(chunks, current);
+	return chunks;
+}
+function pushChunk(chunks, chunk) {
+	if (chunks.length >= IDB_SNAPSHOT_MAX_CHUNKS) throw new Error("Matrix IndexedDB snapshot exceeds SQLite chunk limit");
+	chunks.push(chunk);
+}
+function digestText(value) {
+	return createHash("sha256").update(value, "utf8").digest("hex");
+}
+function isIdbSnapshotMeta(value) {
+	return isRecord(value) && value.kind === "meta" && value.version === 1 && typeof value.generation === "string" && value.generation.trim() !== "" && typeof value.chunkCount === "number" && Number.isSafeInteger(value.chunkCount) && value.chunkCount >= 0 && value.chunkCount <= IDB_SNAPSHOT_MAX_CHUNKS && typeof value.digest === "string" && typeof value.databaseCount === "number" && Number.isSafeInteger(value.databaseCount) && value.databaseCount >= 0 && typeof value.persistedAt === "string";
+}
+function isIdbSnapshotChunk(value) {
+	return isRecord(value) && value.kind === "snapshot-chunk" && typeof value.index === "number" && Number.isSafeInteger(value.index) && value.index >= 0 && typeof value.data === "string";
+}
+//#endregion
+export { writeMatrixLegacyCryptoMigrationState as C, writeMatrixRecoveryKeyStateToStore as D, writeMatrixRecoveryKeyStateForPath as E, resolveMatrixSqliteStateEnv as O, writeMatrixIdbSnapshotJsonToStore as S, writeMatrixRecoveryKeyState as T, readMatrixLegacyCryptoMigrationState as _, hasMatrixLegacyCryptoMigrationStateInStore as a, scoreMatrixCryptoStateInStore as b, migrateLegacyMatrixRecoveryKeyFilePathToStore as c, openMatrixLegacyCryptoMigrationStoreOptions as d, openMatrixRecoveryKeyStoreOptions as f, readMatrixIdbSnapshotJson as g, readLegacyMatrixRecoveryKeyState as h, hasMatrixIdbSnapshotStateInStore as i, resolveMatrixSqliteStateKey as k, migrateLegacyMatrixRecoveryKeyFileToStore as l, readLegacyMatrixRecoveryKeyFile as m, MATRIX_LEGACY_CRYPTO_MIGRATION_FILENAME as n, hasMatrixRecoveryKeyStateInStore as o, readLegacyMatrixLegacyCryptoMigrationState as p, MATRIX_RECOVERY_KEY_FILENAME as r, migrateLegacyMatrixLegacyCryptoMigrationFileToStore as s, MATRIX_IDB_SNAPSHOT_FILENAME as t, openMatrixIdbSnapshotStoreOptions as u, readMatrixRecoveryKeyState as v, writeMatrixLegacyCryptoMigrationStateToStore as w, writeMatrixIdbSnapshotJson as x, readMatrixRecoveryKeyStateForPath as y };