@openclaw/matrix 2026.8.1-beta.2 → 2026.8.1-beta.3

package/dist/api.js

@@ -1,9 +1,9 @@
 import { a as resolveMatrixDefaultOrOnlyAccountId, i as resolveMatrixChannelConfig, n as requiresExplicitMatrixDefaultAccount, r as resolveConfiguredMatrixAccountIds, t as findMatrixAccountEntry } from "./account-selection-CWuhuFn1.js";
 import { n as listMatrixEnvAccountIds, r as resolveMatrixEnvAccountToken, t as getMatrixScopedEnvVarNames } from "./env-vars-dGqak9dN.js";
 import { a as resolveMatrixCredentialsPath, i as resolveMatrixCredentialsFilename, n as resolveMatrixAccountStorageRoot, o as resolveMatrixHomeserverKey, r as resolveMatrixCredentialsDir, s as sanitizeMatrixPathSegment, t as hashMatrixAccessToken } from "./storage-paths-gUmSydsW.js";
-import { t as matrixPlugin } from "./channel-VSrHgTON.js";
-import { n as matrixSetupAdapter, t as createMatrixSetupWizardProxy } from "./setup-core-DQn6b5vi.js";
-import { d as setMatrixThreadBindingIdleTimeoutBySessionKey, n as getMatrixThreadBindingManager, p as setMatrixThreadBindingMaxAgeBySessionKey, s as resetMatrixThreadBindingsForTests } from "./thread-bindings-shared-CKnY4LSd.js";
-import { n as matrixOnboardingAdapter } from "./setup-surface-DlhJdrNI.js";
-import { t as createMatrixThreadBindingManager } from "./thread-bindings-CcHZP3w2.js";
-export { createMatrixSetupWizardProxy, createMatrixThreadBindingManager, findMatrixAccountEntry, getMatrixScopedEnvVarNames, getMatrixThreadBindingManager, hashMatrixAccessToken, listMatrixEnvAccountIds, matrixOnboardingAdapter, matrixOnboardingAdapter as matrixSetupWizard, matrixPlugin, matrixSetupAdapter, requiresExplicitMatrixDefaultAccount, resetMatrixThreadBindingsForTests, resolveConfiguredMatrixAccountIds, resolveMatrixAccountStorageRoot, resolveMatrixChannelConfig, resolveMatrixCredentialsDir, resolveMatrixCredentialsFilename, resolveMatrixCredentialsPath, resolveMatrixDefaultOrOnlyAccountId, resolveMatrixEnvAccountToken, resolveMatrixHomeserverKey, sanitizeMatrixPathSegment, setMatrixThreadBindingIdleTimeoutBySessionKey, setMatrixThreadBindingMaxAgeBySessionKey };
+import { t as matrixPlugin } from "./channel-CzQw5OZN.js";
+import { n as matrixSetupAdapter, t as createMatrixSetupWizardProxy } from "./setup-core-DigrLebY.js";
+import { f as setMatrixThreadBindingMaxAgeBySessionKey, n as getMatrixThreadBindingManager, u as setMatrixThreadBindingIdleTimeoutBySessionKey } from "./thread-bindings-shared-oNPiyMWY.js";
+import { n as matrixOnboardingAdapter } from "./setup-surface-Dtn8sAWs.js";
+import { t as createMatrixThreadBindingManager } from "./thread-bindings-BYEGfw3h.js";
+export { createMatrixSetupWizardProxy, createMatrixThreadBindingManager, findMatrixAccountEntry, getMatrixScopedEnvVarNames, getMatrixThreadBindingManager, hashMatrixAccessToken, listMatrixEnvAccountIds, matrixOnboardingAdapter, matrixOnboardingAdapter as matrixSetupWizard, matrixPlugin, matrixSetupAdapter, requiresExplicitMatrixDefaultAccount, resolveConfiguredMatrixAccountIds, resolveMatrixAccountStorageRoot, resolveMatrixChannelConfig, resolveMatrixCredentialsDir, resolveMatrixCredentialsFilename, resolveMatrixCredentialsPath, resolveMatrixDefaultOrOnlyAccountId, resolveMatrixEnvAccountToken, resolveMatrixHomeserverKey, sanitizeMatrixPathSegment, setMatrixThreadBindingIdleTimeoutBySessionKey, setMatrixThreadBindingMaxAgeBySessionKey };

package/dist/{approval-handler.runtime-CJXCUdRg.js → approval-handler.runtime-CSvueU9P.js}

@@ -1,9 +1,9 @@
 import { i as resolveMatrixAccount } from "./accounts-BCzyubQt.js";
-import { _ as shouldHandleMatrixApprovalRequest, g as isMatrixAnyApprovalClientEnabled } from "./channel-VSrHgTON.js";
-import { a as resolveMatrixTargetIdentity } from "./target-ids-B-5aQxwn.js";
-import { a as sendSingleTextMessageMatrix, n as reactMatrixMessage, r as sendMessageMatrix, w as repairMatrixDirectRooms } from "./send-ZDLU4JTk.js";
+import { C as shouldHandleMatrixApprovalRequest, S as isMatrixAnyApprovalClientEnabled } from "./channel-CzQw5OZN.js";
+import { o as resolveMatrixTargetIdentity } from "./target-ids-Nwx7cMVE.js";
+import { a as sendSingleTextMessageMatrix, n as reactMatrixMessage, r as sendMessageMatrix, w as repairMatrixDirectRooms } from "./send-ClHgDZLT.js";
 import { a as unregisterMatrixApprovalReactionTarget, n as listMatrixApprovalReactionBindings, r as registerMatrixApprovalReactionTarget, t as buildMatrixApprovalReactionHint } from "./approval-reactions-tXh9KYrW.js";
-import { n as editMatrixMessage, t as deleteMatrixMessage } from "./messages-BW0s-6Y9.js";
+import { n as editMatrixMessage, t as deleteMatrixMessage } from "./messages-DEqg7HVy.js";
 import { listMessageReceiptPlatformIds, resolveMessageReceiptPrimaryId } from "openclaw/plugin-sdk/channel-outbound";
 import { normalizeUniqueStringEntries } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { buildChannelApprovalNativeTargetKey } from "openclaw/plugin-sdk/approval-native-runtime";
@@ -128,6 +128,7 @@ function buildPendingApprovalContent(params) {
 	const allowedDecisions = params.view.actions.map((action) => action.decision);
 	const payload = params.view.approvalKind === "plugin" ? buildPluginApprovalPendingReplyPayload({
 		request: {
+			approvalKind: "plugin",
 			id: params.view.approvalId,
 			request: {
 				title: params.view.title,

package/dist/{approval-ids-7rf7etWE.js → approval-ids-CEcf-EiM.js}

@@ -1,4 +1,4 @@
-import { a as normalizeMatrixUserId } from "./channel.setup-PpxRP9Du.js";
+import { a as normalizeMatrixUserId } from "./channel.setup-aNaa3Uyn.js";
 //#region extensions/matrix/src/approval-ids.ts
 function normalizeMatrixApproverId(value) {
 	return normalizeMatrixUserId(String(value)) || void 0;

package/dist/{approval-reaction-auth-wBwbEDpZ.js → approval-reaction-auth-CziKXatm.js}

@@ -1,5 +1,5 @@
 import { i as resolveMatrixAccount } from "./accounts-BCzyubQt.js";
-import { t as normalizeMatrixApproverId } from "./approval-ids-7rf7etWE.js";
+import { t as normalizeMatrixApproverId } from "./approval-ids-CEcf-EiM.js";
 import { resolveApprovalApprovers } from "openclaw/plugin-sdk/approval-auth-runtime";
 //#region extensions/matrix/src/approval-reaction-auth.ts
 function normalizeMatrixExecApproverId(value) {

package/dist/{channel-VSrHgTON.js → channel-CzQw5OZN.js}

@@ -1,18 +1,19 @@
 import { n as requiresExplicitMatrixDefaultAccount } from "./account-selection-CWuhuFn1.js";
 import { a as resolveMatrixAccountConfig } from "./account-config-BZWN9tGS.js";
 import { i as resolveMatrixAccount, r as resolveDefaultMatrixAccountId, t as listMatrixAccountIds } from "./accounts-BCzyubQt.js";
-import { a as normalizeMatrixUserId, r as DEFAULT_ACCOUNT_ID$2, t as matrixPluginBase } from "./channel.setup-PpxRP9Du.js";
-import { t as normalizeMatrixApproverId } from "./approval-ids-7rf7etWE.js";
-import { a as resolveMatrixTargetIdentity, i as resolveMatrixDirectUserId, n as normalizeMatrixMessagingTarget, r as normalizeMatrixResolvableTarget, t as isMatrixQualifiedUserId } from "./target-ids-B-5aQxwn.js";
+import { a as normalizeMatrixUserId, r as DEFAULT_ACCOUNT_ID$2, t as matrixPluginBase } from "./channel.setup-aNaa3Uyn.js";
+import { t as normalizeMatrixApproverId } from "./approval-ids-CEcf-EiM.js";
+import { a as resolveMatrixDirectUserId, i as normalizeMatrixResolvableTarget, n as isMatrixRoomId, o as resolveMatrixTargetIdentity, r as normalizeMatrixMessagingTarget, t as isMatrixQualifiedUserId } from "./target-ids-Nwx7cMVE.js";
 import { n as normalizeCompatibilityConfig, t as legacyConfigRules } from "./doctor-contract-DEt4O4Zt.js";
-import { d as setMatrixThreadBindingIdleTimeoutBySessionKey, p as setMatrixThreadBindingMaxAgeBySessionKey } from "./thread-bindings-shared-CKnY4LSd.js";
+import { n as MATRIX_REACTION_EVENT_TYPE } from "./reaction-common-DkrQdBSZ.js";
+import { f as setMatrixThreadBindingMaxAgeBySessionKey, u as setMatrixThreadBindingIdleTimeoutBySessionKey } from "./thread-bindings-shared-oNPiyMWY.js";
 import { n as collectRuntimeConfigAssignments, r as secretTargetRegistryEntries } from "./secret-contract-CufozuyJ.js";
-import { n as resolveMatrixInboundConversation, t as defaultTopLevelPlacement } from "./thread-binding-api-DRbBZlhS.js";
+import { n as resolveMatrixInboundConversation, t as defaultTopLevelPlacement } from "./thread-binding-api-CzkeLZCU.js";
 import { createLazyRuntimeModule, createLazyRuntimeNamedExport } from "openclaw/plugin-sdk/lazy-runtime";
 import { adaptScopedAccountAccessor, createScopedDmSecurityResolver } from "openclaw/plugin-sdk/channel-config-helpers";
 import { buildChannelOutboundSessionRoute, buildThreadAwareOutboundSessionRoute, createChatChannelPlugin } from "openclaw/plugin-sdk/channel-core";
 import { createChannelMessageAdapterFromOutbound, createReplyPrefixOptions, createRuntimeOutboundDelegates, createTypingCallbacks, logTypingFailure } from "openclaw/plugin-sdk/channel-outbound";
-import { createAllowlistProviderOpenWarningCollector, projectAccountConfigWarningCollector, resolveScopeRequireMention, resolveScopeToolsPolicy } from "openclaw/plugin-sdk/channel-policy";
+import { createAllowlistProviderOpenWarningCollector, createConditionalWarningCollector, resolveScopeRequireMention, resolveScopeToolsPolicy } from "openclaw/plugin-sdk/channel-policy";
 import { createScopedAccountReplyToModeResolver } from "openclaw/plugin-sdk/conversation-runtime";
 import { createChannelDirectoryAdapter, createResolvedDirectoryEntriesLister, createRuntimeDirectoryLiveAdapter } from "openclaw/plugin-sdk/directory-runtime";
 import { buildProbeChannelStatusSummary, collectStatusIssuesFromLastError, createComputedAccountStatusAdapter, createDefaultChannelRuntimeState } from "openclaw/plugin-sdk/status-helpers";
@@ -31,10 +32,12 @@ import { createChannelExecApprovalProfile, getExecApprovalReplyMetadata, isChann
 import { createPairingPrefixStripper } from "openclaw/plugin-sdk/channel-pairing";
 import { PAIRING_APPROVED_MESSAGE } from "openclaw/plugin-sdk/channel-status";
 import { formatErrorMessage } from "openclaw/plugin-sdk/error-runtime";
-import { parseThreadSessionSuffix } from "openclaw/plugin-sdk/routing";
+import { buildAgentSessionKey, deriveLastRoutePolicy, parseAgentSessionKey, parseThreadSessionSuffix, resolveAgentIdFromSessionKey, resolveAgentRoute, resolveThreadSessionKeys } from "openclaw/plugin-sdk/routing";
 import { formatLocationText, logInboundDrop, toLocationContext } from "openclaw/plugin-sdk/channel-inbound";
 import { getAgentScopedMediaLocalRoots } from "openclaw/plugin-sdk/media-local-roots";
 import { buildChannelKeyCandidates } from "openclaw/plugin-sdk/channel-targets";
+import { resolveConfiguredAcpBindingRecord } from "openclaw/plugin-sdk/acp-binding-resolve-runtime";
+import { inspectSessionBindingByConversation } from "openclaw/plugin-sdk/session-binding-runtime";
 import { deliveryContextFromSession, getSessionEntry, resolveStorePath, sessionDeliveryOrigin } from "openclaw/plugin-sdk/session-store-runtime";
 //#region extensions/matrix/src/actions.ts
 const MATRIX_PLUGIN_HANDLED_ACTIONS = /* @__PURE__ */ new Set([
@@ -102,6 +105,7 @@ function resolveMatrixActionAccount(params) {
 	return account.enabled && account.configured ? account : null;
 }
 const matrixMessageActions = {
+	providerOwnedReadGates: true,
 	describeMessageTool: ({ cfg, accountId, senderIsOwner }) => {
 		const account = resolveMatrixActionAccount({
 			cfg,
@@ -137,7 +141,7 @@ const matrixMessageActions = {
 		return account && createActionGate(account.config.actions)("messages") ? payload : null;
 	},
 	handleAction: async (ctx) => {
-		const { handleMatrixAction } = await import("./tool-actions.runtime-DmdRL0bN.js");
+		const { handleMatrixAction } = await import("./tool-actions.runtime-ck6IJyP0.js");
 		const { action, params, cfg, accountId, mediaLocalRoots } = ctx;
 		const dispatch = async (actionParams) => await handleMatrixAction({
 			...actionParams,
@@ -428,6 +432,7 @@ function shouldHandleMatrixApprovalRequest(params) {
 }
 function buildFilterCheckRequest(params) {
 	if (params.metadata.approvalKind === "plugin") return {
+		approvalKind: "plugin",
 		id: params.metadata.approvalId,
 		request: {
 			title: "Plugin Approval Required",
@@ -439,6 +444,7 @@ function buildFilterCheckRequest(params) {
 		expiresAtMs: 0
 	};
 	return {
+		approvalKind: "exec",
 		id: params.metadata.approvalId,
 		request: {
 			command: "",
@@ -603,7 +609,7 @@ const matrixNativeApprovalCapability = createApproverRestrictedNativeApprovalCap
 			approvalKind,
 			request
 		}),
-		load: async () => (await import("./approval-handler.runtime-CJXCUdRg.js")).matrixApprovalNativeRuntime
+		load: async () => (await import("./approval-handler.runtime-CSvueU9P.js")).matrixApprovalNativeRuntime
 	})
 });
 const splitMatrixApprovalCapability = splitChannelApprovalCapability(matrixNativeApprovalCapability);
@@ -828,8 +834,195 @@ function resolveMatrixGroupToolPolicy(params) {
 	return resolveScopeToolsPolicy(resolveMatrixGroupScope(params));
 }
 //#endregion
+//#region extensions/matrix/src/matrix/monitor/types.ts
+const EventType = {
+	RoomMessage: "m.room.message",
+	RoomMessageEncrypted: "m.room.encrypted",
+	RoomMember: "m.room.member",
+	Location: "m.location",
+	Reaction: MATRIX_REACTION_EVENT_TYPE
+};
+const RelationType = {
+	Replace: "m.replace",
+	Thread: "m.thread"
+};
+//#endregion
+//#region extensions/matrix/src/matrix/monitor/threads.ts
+function resolveMatrixThreadSessionKeys(params) {
+	return resolveThreadSessionKeys({
+		...params,
+		normalizeThreadId: (threadId) => threadId
+	});
+}
+function resolveMatrixRelatedReplyToEventId(relates) {
+	if (!relates || typeof relates !== "object") return;
+	if ("m.in_reply_to" in relates && typeof relates["m.in_reply_to"] === "object" && relates["m.in_reply_to"] && "event_id" in relates["m.in_reply_to"] && typeof relates["m.in_reply_to"].event_id === "string") return relates["m.in_reply_to"].event_id;
+}
+function resolveMatrixThreadRouting(params) {
+	const effectiveThreadReplies = params.isDirectMessage && params.dmThreadReplies !== void 0 ? params.dmThreadReplies : params.threadReplies;
+	const messageId = params.messageId.trim();
+	const threadRootId = params.threadRootId?.trim();
+	const inboundThreadId = threadRootId && threadRootId !== messageId ? threadRootId : void 0;
+	return { threadId: effectiveThreadReplies === "off" ? void 0 : effectiveThreadReplies === "inbound" ? inboundThreadId : inboundThreadId ?? (messageId || void 0) };
+}
+function resolveMatrixThreadRootId(params) {
+	const relates = params.content["m.relates_to"];
+	if (!relates || typeof relates !== "object") return;
+	if ("rel_type" in relates && relates.rel_type === RelationType.Thread) {
+		if ("event_id" in relates && typeof relates.event_id === "string") return relates.event_id;
+		return resolveMatrixRelatedReplyToEventId(relates);
+	}
+}
+function resolveMatrixReplyToEventId(content) {
+	return resolveMatrixRelatedReplyToEventId(content["m.relates_to"]);
+}
+//#endregion
+//#region extensions/matrix/src/matrix/monitor/route.ts
+function resolveMatrixDmSessionKey(params) {
+	if (params.dmSessionScope !== "per-room") return params.fallbackSessionKey;
+	return buildAgentSessionKey({
+		agentId: params.agentId,
+		channel: "matrix",
+		accountId: params.accountId,
+		peer: {
+			kind: "channel",
+			id: params.roomId
+		}
+	});
+}
+function shouldApplyMatrixPerRoomDmSessionScope(params) {
+	return params.isDirectMessage && !params.configuredSessionKey;
+}
+function resolveMatrixInboundRoute(params) {
+	const baseRoute = params.resolveAgentRoute({
+		cfg: params.cfg,
+		channel: "matrix",
+		accountId: params.accountId,
+		peer: {
+			kind: params.isDirectMessage ? "direct" : "channel",
+			id: params.isDirectMessage ? params.senderId : params.roomId
+		},
+		parentPeer: params.isDirectMessage ? {
+			kind: "channel",
+			id: params.roomId
+		} : void 0
+	});
+	const bindingConversationId = params.threadId ?? params.roomId;
+	const bindingParentConversationId = params.threadId ? params.roomId : void 0;
+	const bindingInspection = inspectSessionBindingByConversation({
+		channel: "matrix",
+		accountId: params.accountId,
+		conversationId: bindingConversationId,
+		parentConversationId: bindingParentConversationId
+	});
+	const runtimeBinding = bindingInspection.status === "available" ? bindingInspection.binding : null;
+	const boundSessionKey = runtimeBinding?.targetSessionKey?.trim();
+	if (runtimeBinding && boundSessionKey) return {
+		route: {
+			...baseRoute,
+			sessionKey: boundSessionKey,
+			agentId: resolveAgentIdFromSessionKey(boundSessionKey) || baseRoute.agentId,
+			lastRoutePolicy: deriveLastRoutePolicy({
+				sessionKey: boundSessionKey,
+				mainSessionKey: baseRoute.mainSessionKey
+			}),
+			matchedBy: "binding.channel"
+		},
+		configuredBinding: null,
+		bindingOwnerAvailable: true,
+		runtimeBindingId: runtimeBinding.bindingId
+	};
+	const configuredBinding = runtimeBinding == null ? resolveConfiguredAcpBindingRecord({
+		cfg: params.cfg,
+		channel: "matrix",
+		accountId: params.accountId,
+		conversationId: bindingConversationId,
+		parentConversationId: bindingParentConversationId
+	}) : null;
+	const configuredSessionKey = configuredBinding?.record.targetSessionKey?.trim();
+	const effectiveRoute = configuredBinding && configuredSessionKey ? {
+		...baseRoute,
+		sessionKey: configuredSessionKey,
+		agentId: resolveAgentIdFromSessionKey(configuredSessionKey) || configuredBinding.spec.agentId || baseRoute.agentId,
+		lastRoutePolicy: deriveLastRoutePolicy({
+			sessionKey: configuredSessionKey,
+			mainSessionKey: baseRoute.mainSessionKey
+		}),
+		matchedBy: "binding.channel"
+	} : baseRoute;
+	const dmSessionKey = shouldApplyMatrixPerRoomDmSessionScope({
+		isDirectMessage: params.isDirectMessage,
+		configuredSessionKey
+	}) ? resolveMatrixDmSessionKey({
+		accountId: params.accountId,
+		agentId: effectiveRoute.agentId,
+		roomId: params.roomId,
+		dmSessionScope: params.dmSessionScope,
+		fallbackSessionKey: effectiveRoute.sessionKey
+	}) : effectiveRoute.sessionKey;
+	const routeWithDmScope = dmSessionKey === effectiveRoute.sessionKey ? effectiveRoute : {
+		...effectiveRoute,
+		sessionKey: dmSessionKey,
+		lastRoutePolicy: "session"
+	};
+	if (!configuredBinding && !configuredSessionKey && params.threadId) {
+		const threadKeys = resolveMatrixThreadSessionKeys({
+			baseSessionKey: routeWithDmScope.sessionKey,
+			threadId: params.threadId,
+			parentSessionKey: routeWithDmScope.sessionKey
+		});
+		return {
+			route: {
+				...routeWithDmScope,
+				sessionKey: threadKeys.sessionKey,
+				mainSessionKey: threadKeys.parentSessionKey ?? routeWithDmScope.sessionKey,
+				lastRoutePolicy: deriveLastRoutePolicy({
+					sessionKey: threadKeys.sessionKey,
+					mainSessionKey: threadKeys.parentSessionKey ?? routeWithDmScope.sessionKey
+				})
+			},
+			configuredBinding,
+			bindingOwnerAvailable: bindingInspection.status === "available",
+			runtimeBindingId: runtimeBinding?.bindingId ?? null
+		};
+	}
+	return {
+		route: routeWithDmScope,
+		configuredBinding,
+		bindingOwnerAvailable: bindingInspection.status === "available",
+		runtimeBindingId: runtimeBinding?.bindingId ?? null
+	};
+}
+//#endregion
+//#region extensions/matrix/src/matrix/conversation-route-owner.ts
+function resolveMatrixConversationRouteOwner(params) {
+	const { cfg, accountId, conversation } = params;
+	const roomId = conversation.nativeChannelId?.trim() || (conversation.kind === "direct" ? "" : conversation.peerId.trim());
+	if (!roomId) return null;
+	const isDirectMessage = conversation.kind === "direct";
+	const result = resolveMatrixInboundRoute({
+		cfg,
+		accountId,
+		roomId,
+		senderId: conversation.peerId,
+		isDirectMessage,
+		dmSessionScope: resolveMatrixAccount({
+			cfg,
+			accountId
+		}).config.dm?.sessionScope,
+		threadId: conversation.threadId,
+		resolveAgentRoute
+	});
+	if (!result.bindingOwnerAvailable) return { kind: "unavailable" };
+	if (result.runtimeBindingId && !parseAgentSessionKey(result.route.sessionKey)?.agentId) return null;
+	return {
+		kind: "agent",
+		agentId: result.route.agentId
+	};
+}
+//#endregion
 //#region extensions/matrix/src/resolver.ts
-const loadMatrixChannelRuntime$1 = createLazyRuntimeNamedExport(() => import("./resolver.runtime-LWJELYq5.js"), "matrixResolverRuntime");
+const loadMatrixChannelRuntime$1 = createLazyRuntimeNamedExport(() => import("./resolver.runtime-V8u0pHEb.js"), "matrixResolverRuntime");
 const matrixResolverAdapter = { resolveTargets: async ({ cfg, accountId, inputs, kind, runtime }) => (await loadMatrixChannelRuntime$1()).resolveMatrixTargets({
 	cfg,
 	accountId,
@@ -935,7 +1128,7 @@ function resolveMatrixOutboundSessionRoute(params) {
 			agentId: params.agentId,
 			channel: "matrix",
 			accountId: effectiveAccountId,
-			recipientSessionExact: target.kind === "room" ? dmSessionScope === "per-room" && target.id.startsWith("!") && target.id.includes(":") : dmSessionScope === "per-user" ? isMatrixQualifiedUserId(target.id) : roomScopedDmId !== void 0,
+			recipientSessionExact: target.kind === "room" ? dmSessionScope === "per-room" && isMatrixRoomId(target.id) : dmSessionScope === "per-user" ? isMatrixQualifiedUserId(target.id) : roomScopedDmId !== void 0,
 			peer,
 			chatType,
 			from,
@@ -956,7 +1149,7 @@ function resolveMatrixOutboundSessionRoute(params) {
 //#endregion
 //#region extensions/matrix/src/channel.ts
 let matrixStartupLock = Promise.resolve();
-const loadMatrixChannelRuntime = createLazyRuntimeNamedExport(() => import("./channel.runtime-pOOL0uT_.js"), "matrixChannelRuntime");
+const loadMatrixChannelRuntime = createLazyRuntimeNamedExport(() => import("./channel.runtime-I9pBRQb3.js"), "matrixChannelRuntime");
 const loadMatrixDoctorModule = createLazyRuntimeModule(() => import("./doctor-EWf9CDso.js"));
 function buildMatrixTrafficStatusSummary(snapshot) {
 	return {
@@ -1020,7 +1213,7 @@ const resolveMatrixDmPolicy = createScopedDmSecurityResolver({
 	allowFromPathSuffix: "dm.",
 	normalizeEntry: (raw) => normalizeMatrixUserId(raw)
 });
-const collectMatrixSecurityWarnings = createAllowlistProviderOpenWarningCollector({
+const collectMatrixGroupPolicyWarnings = createAllowlistProviderOpenWarningCollector({
 	providerConfigPresent: (cfg) => cfg.channels?.matrix !== void 0,
 	resolveGroupPolicy: (account) => account.config.groupPolicy,
 	buildOpenWarning: {
@@ -1032,18 +1225,28 @@ const collectMatrixSecurityWarnings = createAllowlistProviderOpenWarningCollecto
 function resolveMatrixAccountConfigPath(accountId, field) {
 	return accountId === DEFAULT_ACCOUNT_ID$2 ? `channels.matrix.${field}` : `channels.matrix.accounts.${accountId}.${field}`;
 }
-function collectMatrixSecurityWarningsForAccount(params) {
-	const warnings = collectMatrixSecurityWarnings(params);
+function collectMatrixGroupPolicyWarningsForAccount(params) {
+	const warnings = collectMatrixGroupPolicyWarnings(params);
 	if (params.account.accountId !== DEFAULT_ACCOUNT_ID$2) {
 		const groupPolicyPath = resolveMatrixAccountConfigPath(params.account.accountId, "groupPolicy");
 		const groupsPath = resolveMatrixAccountConfigPath(params.account.accountId, "groups");
 		const groupAllowFromPath = resolveMatrixAccountConfigPath(params.account.accountId, "groupAllowFrom");
 		return warnings.map((warning) => warning.replace("channels.matrix.groupPolicy", groupPolicyPath).replace("channels.matrix.groups", groupsPath).replace("channels.matrix.groupAllowFrom", groupAllowFromPath));
 	}
-	if (params.account.config.autoJoin !== "always") return warnings;
+	return warnings;
+}
+const collectMatrixOpenGroupFindings = createConditionalWarningCollector.findings({
+	collectWarnings: collectMatrixGroupPolicyWarningsForAccount,
+	checkId: "channels.matrix.groups.open",
+	severity: "critical",
+	title: "Matrix security warning"
+});
+function collectMatrixSecurityWarningsForAccount(params) {
+	const findings = collectMatrixOpenGroupFindings(params);
+	if (params.account.accountId !== DEFAULT_ACCOUNT_ID$2 || params.account.config.autoJoin !== "always") return findings;
 	const autoJoinPath = resolveMatrixAccountConfigPath(params.account.accountId, "autoJoin");
 	const autoJoinAllowlistPath = resolveMatrixAccountConfigPath(params.account.accountId, "autoJoinAllowlist");
-	return [...warnings, `- Matrix invites: autoJoin="always" joins any invited room before message policy applies. Set ${autoJoinPath}="allowlist" + ${autoJoinAllowlistPath} (or ${autoJoinPath}="off") to restrict joins.`];
+	return [...findings, `- Matrix invites: autoJoin="always" joins any invited room before message policy applies. Set ${autoJoinPath}="allowlist" + ${autoJoinAllowlistPath} (or ${autoJoinPath}="off") to restrict joins.`];
 }
 function normalizeMatrixAcpConversationId(conversationId) {
 	const target = resolveMatrixTargetIdentity(conversationId);
@@ -1177,6 +1380,7 @@ const matrixPlugin = createChatChannelPlugin({
 		},
 		conversationBindings: {
 			supportsCurrentConversationBinding: true,
+			bindingStore: "adapter",
 			defaultTopLevelPlacement,
 			setIdleTimeoutBySessionKey: ({ targetSessionKey, accountId, idleTimeoutMs }) => setMatrixThreadBindingIdleTimeoutBySessionKey({
 				targetSessionKey,
@@ -1208,6 +1412,7 @@ const matrixPlugin = createChatChannelPlugin({
 				parentConversationId
 			}),
 			resolveOutboundSessionRoute: (params) => resolveMatrixOutboundSessionRoute(params),
+			resolveConversationRouteOwner: resolveMatrixConversationRouteOwner,
 			targetResolver: {
 				looksLikeId: (raw) => {
 					const trimmed = raw.trim();
@@ -1295,7 +1500,7 @@ const matrixPlugin = createChatChannelPlugin({
 			await previousLock;
 			let monitorMatrixProvider;
 			try {
-				monitorMatrixProvider = (await import("./monitor-Ddfc-vjX.js")).monitorMatrixProvider;
+				monitorMatrixProvider = (await import("./monitor-FNrfkuWL.js")).monitorMatrixProvider;
 			} finally {
 				releaseLock();
 			}
@@ -1328,7 +1533,10 @@ const matrixPlugin = createChatChannelPlugin({
 	},
 	security: {
 		resolveDmPolicy: resolveMatrixDmPolicy,
-		collectWarnings: projectAccountConfigWarningCollector((cfg) => cfg, collectMatrixSecurityWarningsForAccount)
+		collectWarnings: ({ account, cfg }) => collectMatrixSecurityWarningsForAccount({
+			account,
+			cfg
+		})
 	},
 	pairing: { text: createMatrixPairingText(async (to, message, options) => await (await loadMatrixChannelRuntime()).sendMessageMatrix(to, message, options)) },
 	threading: {
@@ -1362,4 +1570,4 @@ const matrixPlugin = createChatChannelPlugin({
 	outbound: matrixChannelOutbound
 });
 //#endregion
-export { shouldHandleMatrixApprovalRequest as _, buildAllowlistResolutionSummary as a, createTypingCallbacks as c, logInboundDrop as d, logTypingFailure as f, isMatrixAnyApprovalClientEnabled as g, toLocationContext as h, addAllowlistUserEntriesFromConfigEntry as i, formatLocationText as l, summarizeMapping as m, resolveMatrixStoredSessionMeta as n, canonicalizeAllowlistWithResolvedIds as o, patchAllowlistUsersInConfigEntries as p, resolveMatrixRoomConfig as r, createReplyPrefixOptions as s, matrixPlugin as t, getAgentScopedMediaLocalRoots as u };
+export { shouldHandleMatrixApprovalRequest as C, isMatrixAnyApprovalClientEnabled as S, logInboundDrop as _, resolveMatrixThreadRootId as a, summarizeMapping as b, RelationType as c, buildAllowlistResolutionSummary as d, canonicalizeAllowlistWithResolvedIds as f, getAgentScopedMediaLocalRoots as g, formatLocationText as h, resolveMatrixReplyToEventId as i, resolveMatrixRoomConfig as l, createTypingCallbacks as m, resolveMatrixStoredSessionMeta as n, resolveMatrixThreadRouting as o, createReplyPrefixOptions as p, resolveMatrixInboundRoute as r, EventType as s, matrixPlugin as t, addAllowlistUserEntriesFromConfigEntry as u, logTypingFailure as v, toLocationContext as x, patchAllowlistUsersInConfigEntries as y };

package/dist/channel-plugin-api.js

@@ -1,2 +1,2 @@
-import { t as matrixPlugin } from "./channel-VSrHgTON.js";
+import { t as matrixPlugin } from "./channel-CzQw5OZN.js";
 export { matrixPlugin };

package/dist/{channel.runtime-pOOL0uT_.js → channel.runtime-I9pBRQb3.js}

@@ -1,9 +1,9 @@
-import { b as reconcileMatrixUnknownSend, i as sendPollMatrix, o as sendTypingMatrix, r as sendMessageMatrix, y as cleanupMatrixDeliveryPlans } from "./send-ZDLU4JTk.js";
+import { b as reconcileMatrixUnknownSend, i as sendPollMatrix, o as sendTypingMatrix, r as sendMessageMatrix, y as cleanupMatrixDeliveryPlans } from "./send-ClHgDZLT.js";
 import { t as isBunRuntime } from "./runtime-BefyhPWv.js";
-import { c as resolveMatrixAuth } from "./client-CeGw0G5S.js";
-import { n as listMatrixDirectoryGroupsLive, r as listMatrixDirectoryPeersLive } from "./directory-live-Bvg2wAnR.js";
+import { c as resolveMatrixAuth } from "./client-BBQdBG7t.js";
+import { n as listMatrixDirectoryGroupsLive, r as listMatrixDirectoryPeersLive } from "./directory-live-DLQzel12.js";
 import { p as resolveOutboundSendDep, r as chunkTextForOutbound } from "./runtime-api-BGO16Fu8.js";
-import { t as resolveMatrixTargets } from "./resolve-targets-BJAPY4Vb.js";
+import { t as resolveMatrixTargets } from "./resolve-targets-e7AI0P75.js";
 import { createLazyRuntimeModule } from "openclaw/plugin-sdk/lazy-runtime";
 import { createMessageReceiptFromOutboundResults, createReplyToFanout } from "openclaw/plugin-sdk/channel-outbound";
 import { asOptionalRecord, normalizeOptionalString } from "openclaw/plugin-sdk/string-coerce-runtime";
@@ -13,7 +13,7 @@ import { attachChannelToResult } from "openclaw/plugin-sdk/channel-send-result";
 import { renderMessagePresentationFallbackText } from "openclaw/plugin-sdk/interactive-runtime";
 import { resolveSendableOutboundReplyParts, sendPayloadMediaSequence } from "openclaw/plugin-sdk/reply-payload";
 //#region extensions/matrix/src/matrix/probe.ts
-const loadMatrixProbeRuntimeDeps = createLazyRuntimeModule(() => import("./probe.runtime-Dr91B_X3.js").then((runtimeModule) => ({ createMatrixClient: runtimeModule.createMatrixClient })));
+const loadMatrixProbeRuntimeDeps = createLazyRuntimeModule(() => import("./probe.runtime-NIJZYqc2.js").then((runtimeModule) => ({ createMatrixClient: runtimeModule.createMatrixClient })));
 async function probeMatrix(params) {
 	return await runChannelProbe(void 0, async () => {
 		const result = {
@@ -67,6 +67,16 @@ async function probeMatrix(params) {
 const MATRIX_OPENCLAW_PRESENTATION_KEY = "com.openclaw.presentation";
 const MATRIX_OPENCLAW_PRESENTATION_TYPE = "message.presentation";
 const MATRIX_EMPTY_PRESENTATION_FALLBACK_TEXT = "---";
+function toMatrixOutboundResult(result) {
+	const { roomId, ...delivery } = result;
+	return {
+		...delivery,
+		target: {
+			kind: "room",
+			id: roomId
+		}
+	};
+}
 function resolveMatrixChannelData(payload) {
 	const raw = asOptionalRecord(payload.channelData)?.matrix;
 	return asOptionalRecord(raw) ?? {};
@@ -113,7 +123,7 @@ function resolveMatrixExtraContent(payload) {
 }
 function resolveMatrixDeliveryProgress(onDeliveryResult) {
 	return onDeliveryResult ? async (result) => {
-		await onDeliveryResult(attachChannelToResult("matrix", result));
+		await onDeliveryResult(attachChannelToResult("matrix", toMatrixOutboundResult(result)));
 	} : void 0;
 }
 //#endregion
@@ -184,15 +194,15 @@ const matrixChannelRuntime = {
 						...part,
 						index
 					}));
-					return attachChannelToResult("matrix", {
+					return attachChannelToResult("matrix", toMatrixOutboundResult({
 						...lastResult,
 						primaryMessageId: receipt.primaryPlatformMessageId,
 						receipt,
 						content: sentResults.map((result) => result.content).join("\n")
-					});
+					}));
 				}
 			}
-			return attachChannelToResult("matrix", await send(to, payloadText, {
+			return attachChannelToResult("matrix", toMatrixOutboundResult(await send(to, payloadText, {
 				cfg,
 				mediaAccess,
 				mediaLocalRoots,
@@ -207,10 +217,10 @@ const matrixChannelRuntime = {
 				onPlatformSendDispatch,
 				extraContent: resolveMatrixExtraContent(payload),
 				onDeliveryResult: resolveMatrixDeliveryProgress(onDeliveryResult)
-			}));
+			})));
 		},
 		sendText: async ({ cfg, to, text, deps, replyToId, threadId, accountId, audioAsVoice, deliveryQueueId, deliveryPartIndex, deliveryPartCount, onPlatformSendDispatch, onDeliveryResult }) => {
-			return attachChannelToResult("matrix", await (resolveOutboundSendDep(deps, "matrix") ?? sendMessageMatrix)(to, text, {
+			return attachChannelToResult("matrix", toMatrixOutboundResult(await (resolveOutboundSendDep(deps, "matrix") ?? sendMessageMatrix)(to, text, {
 				cfg,
 				replyToId: replyToId ?? void 0,
 				threadId: threadId !== void 0 && threadId !== null ? String(threadId) : void 0,
@@ -221,10 +231,10 @@ const matrixChannelRuntime = {
 				...deliveryQueueId !== void 0 ? { deliveryPartCount } : {},
 				onPlatformSendDispatch,
 				onDeliveryResult: resolveMatrixDeliveryProgress(onDeliveryResult)
-			}));
+			})));
 		},
 		sendMedia: async ({ cfg, to, text, mediaUrl, mediaLocalRoots, mediaReadFile, mediaAccess, deps, replyToId, threadId, accountId, audioAsVoice, deliveryQueueId, deliveryPartIndex, deliveryPartCount, onPlatformSendDispatch, onDeliveryResult }) => {
-			return attachChannelToResult("matrix", await (resolveOutboundSendDep(deps, "matrix") ?? sendMessageMatrix)(to, text, {
+			return attachChannelToResult("matrix", toMatrixOutboundResult(await (resolveOutboundSendDep(deps, "matrix") ?? sendMessageMatrix)(to, text, {
 				cfg,
 				mediaUrl,
 				mediaLocalRoots,
@@ -239,7 +249,7 @@ const matrixChannelRuntime = {
 				...deliveryQueueId !== void 0 ? { deliveryPartCount } : {},
 				onPlatformSendDispatch,
 				onDeliveryResult: resolveMatrixDeliveryProgress(onDeliveryResult)
-			}));
+			})));
 		},
 		sendPoll: async ({ cfg, to, poll, threadId, accountId }) => {
 			const result = await sendPollMatrix(to, poll, {

package/dist/{channel.setup-PpxRP9Du.js → channel.setup-aNaa3Uyn.js}

@@ -1,6 +1,6 @@
 import { a as resolveMatrixAccountConfig } from "./account-config-BZWN9tGS.js";
 import { i as resolveMatrixAccount, r as resolveDefaultMatrixAccountId, t as listMatrixAccountIds } from "./accounts-BCzyubQt.js";
-import { r as matrixSetupContract, t as createMatrixSetupWizardProxy } from "./setup-core-DQn6b5vi.js";
+import { r as matrixSetupContract, t as createMatrixSetupWizardProxy } from "./setup-core-DigrLebY.js";
 import { adaptScopedAccountAccessor, createScopedChannelConfigAdapter } from "openclaw/plugin-sdk/channel-config-helpers";
 import { createChannelConfigUiHints } from "openclaw/plugin-sdk/channel-core";
 import { normalizeLowercaseStringOrEmpty } from "openclaw/plugin-sdk/string-coerce-runtime";
@@ -19,13 +19,7 @@ function normalizeMatrixUser(raw) {
 	const value = (raw ?? "").trim();
 	if (!value) return "";
 	if (!value.startsWith("@") || !value.includes(":")) return normalizeLowercaseStringOrEmpty(value);
-	const withoutAt = value.slice(1);
-	const splitIndex = withoutAt.indexOf(":");
-	if (splitIndex === -1) return normalizeLowercaseStringOrEmpty(value);
-	const localpart = normalizeLowercaseStringOrEmpty(withoutAt.slice(0, splitIndex));
-	const server = normalizeLowercaseStringOrEmpty(withoutAt.slice(splitIndex + 1));
-	if (!server) return normalizeLowercaseStringOrEmpty(value);
-	return `@${localpart}:${server}`;
+	return value;
 }
 function normalizeMatrixUserId(raw) {
 	const trimmed = (raw ?? "").trim();
@@ -313,7 +307,7 @@ const matrixPluginBase = {
 		order: 70,
 		quickstartAllowFrom: true
 	},
-	setupWizard: createMatrixSetupWizardProxy(async () => ({ matrixSetupWizard: (await import("./setup-surface-DlhJdrNI.js").then((n) => n.t)).matrixSetupWizard })),
+	setupWizard: createMatrixSetupWizardProxy(async () => ({ matrixSetupWizard: (await import("./setup-surface-Dtn8sAWs.js").then((n) => n.t)).matrixSetupWizard })),
 	setupContract: matrixSetupContract,
 	capabilities: {
 		chatTypes: [

package/dist/{cli-CkTfKC_c.js → cli-iR6QJ5U0.js}

@@ -2,15 +2,15 @@ import { a as resolveMatrixAccountConfig } from "./account-config-BZWN9tGS.js";
 import { t as getMatrixRuntime } from "./runtime-6S3DNFNv.js";
 import { i as resolveMatrixAccount } from "./accounts-BCzyubQt.js";
 import { n as resolveMatrixConfigPath, r as updateMatrixAccountConfig } from "./config-update-Bor_Pjsv.js";
-import { n as matrixSetupAdapter } from "./setup-core-DQn6b5vi.js";
-import { n as withResolvedActionClient } from "./client-sJesKQmp.js";
-import { l as resolveMatrixAuthContext } from "./client-CeGw0G5S.js";
+import { n as matrixSetupAdapter } from "./setup-core-DigrLebY.js";
+import { n as withResolvedActionClient } from "./client-D8XghqmX.js";
+import { l as resolveMatrixAuthContext } from "./client-BBQdBG7t.js";
 import { a as formatZonedTimestamp } from "./runtime-api-BGO16Fu8.js";
 import { t as resolveMatrixRoomKeyBackupIssue } from "./backup-health-Dm_YMVFT.js";
 import { i as setMatrixSdkLogMode, r as setMatrixSdkConsoleLogging } from "./logging-DRjvUOIh.js";
 import { n as isOpenClawManagedMatrixDevice, r as summarizeMatrixDeviceHealth } from "./device-health-B4-YXtJR.js";
-import { n as updateMatrixOwnProfile, t as applyMatrixProfileUpdate } from "./profile-update-BkgWYDIp.js";
-import { a as confirmMatrixVerificationSas, b as verifyMatrixRecoveryKey, c as getMatrixRoomKeyBackupStatus, d as listMatrixVerifications, f as mismatchMatrixVerificationSas, g as runMatrixSelfVerification, h as restoreMatrixRoomKeyBackup, l as getMatrixVerificationSas, m as resetMatrixRoomKeyBackup, n as bootstrapMatrixVerification, p as requestMatrixVerification, r as cancelMatrixVerification, t as acceptMatrixVerification, u as getMatrixVerificationStatus, v as startMatrixVerification } from "./verification-C7ig-bQE.js";
+import { n as updateMatrixOwnProfile, t as applyMatrixProfileUpdate } from "./profile-update-BQlE5s2J.js";
+import { a as confirmMatrixVerificationSas, b as verifyMatrixRecoveryKey, c as getMatrixRoomKeyBackupStatus, d as listMatrixVerifications, f as mismatchMatrixVerificationSas, g as runMatrixSelfVerification, h as restoreMatrixRoomKeyBackup, l as getMatrixVerificationSas, m as resetMatrixRoomKeyBackup, n as bootstrapMatrixVerification, p as requestMatrixVerification, r as cancelMatrixVerification, t as acceptMatrixVerification, u as getMatrixVerificationStatus, v as startMatrixVerification } from "./verification-CabtBTtB.js";
 import { createLazyRuntimeModule } from "openclaw/plugin-sdk/lazy-runtime";
 import { normalizeAccountId } from "openclaw/plugin-sdk/account-id";
 import { formatErrorMessage } from "openclaw/plugin-sdk/error-runtime";
@@ -412,7 +412,7 @@ async function addMatrixAccount(params) {
 		backupVersion: null
 	};
 	if (accountConfig.encryption === true) {
-		const { maybeBootstrapNewEncryptedMatrixAccount } = await import("./setup-bootstrap-BaXkhgJg.js");
+		const { maybeBootstrapNewEncryptedMatrixAccount } = await import("./setup-bootstrap-BGPjbA5N.js");
 		verificationBootstrap = await maybeBootstrapNewEncryptedMatrixAccount({
 			previousCfg: cfg,
 			cfg: updated,
@@ -595,8 +595,8 @@ function registerMatrixDeviceCommands(root) {
 }
 //#endregion
 //#region extensions/matrix/src/cli-direct.ts
-const loadMatrixActionClientModule = createLazyRuntimeModule(() => import("./client-sJesKQmp.js").then((n) => n.t));
-const loadMatrixDirectManagementModule = createLazyRuntimeModule(() => import("./send-ZDLU4JTk.js").then((n) => n.S));
+const loadMatrixActionClientModule = createLazyRuntimeModule(() => import("./client-D8XghqmX.js").then((n) => n.t));
+const loadMatrixDirectManagementModule = createLazyRuntimeModule(() => import("./send-ClHgDZLT.js").then((n) => n.S));
 function printDirectRoomCandidate(room) {
 	const members = room.joinedMembers === null ? "unavailable" : room.joinedMembers.map((member) => formatMatrixCliText(member)).join(", ") || "none";
 	console.log(`- ${formatMatrixCliText(room.roomId)} [${room.source}] strict=${room.strict ? "yes" : "no"} joined=${members}`);

package/dist/{cli-metadata-B1d1aGM5.js → cli-metadata-BmUYWjuM.js}

@@ -2,7 +2,7 @@ import { definePluginEntry } from "openclaw/plugin-sdk/plugin-entry";
 //#region extensions/matrix/src/cli-metadata.ts
 function registerMatrixCliMetadata(api) {
 	api.registerCli(async ({ program }) => {
-		const { registerMatrixCli } = await import("./cli-CkTfKC_c.js");
+		const { registerMatrixCli } = await import("./cli-iR6QJ5U0.js");
 		registerMatrixCli({ program });
 	}, { descriptors: [{
 		name: "matrix",

package/dist/cli-metadata.js

@@ -1,2 +1,2 @@
-import { n as registerMatrixCliMetadata, t as cli_metadata_default } from "./cli-metadata-B1d1aGM5.js";
+import { n as registerMatrixCliMetadata, t as cli_metadata_default } from "./cli-metadata-BmUYWjuM.js";
 export { cli_metadata_default as default, registerMatrixCliMetadata };