@openclaw/matrix 2026.8.1-beta.2 → 2026.8.1

package/node_modules/matrix-js-sdk/lib/client.js

@@ -33,7 +33,6 @@ import * as utils from "./utils.js";
 import { deepCompare, noUnsafeEventProps, replaceParam, safeSet, sleep } from "./utils.js";
 import { Direction, EventTimeline } from "./models/event-timeline.js";
 import { PushProcessor } from "./pushprocessor.js";
-import { AutoDiscovery } from "./autodiscovery.js";
 import { encodeUnpaddedBase64Url } from "./base64.js";
 import { TypedReEmitter } from "./ReEmitter.js";
 import { logger } from "./logger.js";
@@ -73,13 +72,14 @@ import { getRelationsThreadFilter } from "./thread-utils.js";
 import { KnownMembership } from "./@types/membership.js";
 import { ServerCapabilities } from "./serverCapabilities.js";
 import { sha256 } from "./digest.js";
-import { discoverAndValidateOIDCIssuerWellKnown, validateAuthMetadataAndKeys } from "./oidc/index.js";
+import { OAuth2Error, isValidAuthMetadata } from "./oauth/index.js";
 import { UnsupportedDelayedEventsEndpointError, UnsupportedStickyEventsEndpointError } from "./errors.js";
 import { RetentionPolicyService } from "./retentionPolicy.js";
+import { createRtcTransportsCachedValue } from "./rtcTransportsCachedValue.js";
+import { createWellKnownCachedValue } from "./wellKnownCachedValue.js";
 const SCROLLBACK_DELAY_MS = 3000;
 const TURN_CHECK_INTERVAL = 10 * 60 * 1000; // poll for turn credentials every 10 minutes
 
-export const UNSTABLE_MSC3852_LAST_SEEN_UA = new UnstableValue("last_seen_user_agent", "org.matrix.msc3852.last_seen_user_agent");
 export let PendingEventOrdering = /*#__PURE__*/function (PendingEventOrdering) {
   PendingEventOrdering["Chronological"] = "chronological";
   PendingEventOrdering["Detached"] = "detached";
@@ -103,8 +103,6 @@ export const STABLE_MSC4133_EXTENDED_PROFILES = "uk.tcpip.msc4133.stable";
  * Proposed at https://github.com/matrix-org/matrix-doc/pull/3266
  */
 
-/* eslint-enable camelcase */
-
 // We're using this constant for methods overloading and inspect whether a variable
 // contains an eventId or not. This was required to ensure backwards compatibility
 // of methods for threads
@@ -310,6 +308,7 @@ export let ClientEvent = /*#__PURE__*/function (ClientEvent) {
   ClientEvent["TurnServers"] = "turnServers";
   ClientEvent["TurnServersError"] = "turnServers.error";
   ClientEvent["UserProfileUpdate"] = "userProfileUpdate";
+  ClientEvent["RtcTransportsUpdated"] = "rtcTransportsUpdated";
   return ClientEvent;
 }({});
 const SSO_ACTION_PARAM = new UnstableValue("action", "org.matrix.msc3824.action");
@@ -403,7 +402,6 @@ export class MatrixClient extends TypedEventEmitter {
     _defineProperty(this, "syncLeftRoomsPromise", void 0);
     _defineProperty(this, "syncedLeftRooms", false);
     _defineProperty(this, "clientOpts", void 0);
-    _defineProperty(this, "clientWellKnownIntervalID", void 0);
     _defineProperty(this, "canResetTimelineCallback", void 0);
     _defineProperty(this, "canSupport", new Map());
     // The pushprocessor caches useful things, so keep one and re-use it
@@ -411,8 +409,6 @@ export class MatrixClient extends TypedEventEmitter {
     // Promise to a response of the server's /versions response
     // TODO: This should expire: https://github.com/matrix-org/matrix-js-sdk/issues/1020
     _defineProperty(this, "serverVersionsPromise", void 0);
-    _defineProperty(this, "clientWellKnown", void 0);
-    _defineProperty(this, "clientWellKnownPromise", void 0);
     _defineProperty(this, "turnServers", []);
     _defineProperty(this, "turnServersExpiry", 0);
     _defineProperty(this, "checkTurnServersIntervalID", void 0);
@@ -434,8 +430,9 @@ export class MatrixClient extends TypedEventEmitter {
     _defineProperty(this, "matrixRTC", void 0);
     _defineProperty(this, "serverCapabilitiesService", void 0);
     _defineProperty(this, "retentionPolicyService", void 0);
-    // eslint-disable-next-line
     _defineProperty(this, "_unstable_shouldApplyMessageRetention", void 0);
+    _defineProperty(this, "cachedRtcTransports", void 0);
+    _defineProperty(this, "cachedWellKnown", void 0);
     _defineProperty(this, "startCallEventHandler", () => {
       if (this.isInitialSyncComplete()) {
         if (supportsMatrixCall()) {
@@ -566,6 +563,8 @@ export class MatrixClient extends TypedEventEmitter {
 
     // having lots of event listeners is not unusual. 0 means "unlimited".
     this.setMaxListeners(0);
+    this.cachedRtcTransports = createRtcTransportsCachedValue(this, this.logger);
+    this.cachedWellKnown = createWellKnownCachedValue(this, this.logger);
   }
   set store(newStore) {
     this._store = newStore;
@@ -632,17 +631,13 @@ export class MatrixClient extends TypedEventEmitter {
       this.syncApi = new SyncApi(this, this.clientOpts, this.buildSyncApiOptions());
     }
     this.syncApi.sync().catch(e => this.logger.info("Sync startup aborted with an error:", e));
-    if (this.clientOpts.clientWellKnownPollPeriod !== undefined) {
-      this.clientWellKnownIntervalID = setInterval(() => {
-        void this.fetchClientWellKnown();
-      }, 1000 * this.clientOpts.clientWellKnownPollPeriod);
-      void this.fetchClientWellKnown();
-    }
+    this.cachedWellKnown.start(this.clientOpts.clientWellKnownPollPeriod !== undefined ? 1000 * this.clientOpts.clientWellKnownPollPeriod : undefined);
     this.toDeviceMessageQueue.start();
     this.serverCapabilitiesService.start();
     if (this._unstable_shouldApplyMessageRetention) {
       this.retentionPolicyService?.start();
     }
+    this.cachedRtcTransports.start();
   }
 
   /**
@@ -682,12 +677,11 @@ export class MatrixClient extends TypedEventEmitter {
     this.groupCallEventHandler = undefined;
     globalThis.clearInterval(this.checkTurnServersIntervalID);
     this.checkTurnServersIntervalID = undefined;
-    if (this.clientWellKnownIntervalID !== undefined) {
-      globalThis.clearInterval(this.clientWellKnownIntervalID);
-    }
     this.toDeviceMessageQueue.stop();
     this.matrixRTC.stop();
     this.serverCapabilitiesService.stop();
+    this.cachedRtcTransports.stop();
+    this.cachedWellKnown.stop();
   }
 
   /**
@@ -1048,6 +1042,11 @@ export class MatrixClient extends TypedEventEmitter {
    * @param args.storagePassword - An alternative to `storageKey`. A password which will be used to derive a key to
    *    encrypt the store with. Deriving a key from a password is (deliberately) a slow operation, so prefer
    *    to pass a `storageKey` directly where possible.
+   * @param args.caCertsPem - Optional PEM-formatted string that provides CA certificates. These will be used to check
+   *    X.509 signatures on user identities. Any user identity that has a valid signature according to the supplied
+   *    CAs will be considered verified, without any manual verification taking place.
+   *
+   *    NOTE: this is an unspecified extension to Matrix. Applications should exercise caution when using it.
    *
    * @returns a Promise which will resolve when the crypto layer has been
    *    successfully initialised.
@@ -1085,7 +1084,8 @@ export class MatrixClient extends TypedEventEmitter {
       legacyMigrationProgressListener: (progress, total) => {
         this.emit(CryptoEvent.LegacyCryptoStoreMigrationProgress, progress, total);
       },
-      enableEncryptedStateEvents: this.enableEncryptedStateEvents
+      enableEncryptedStateEvents: this.enableEncryptedStateEvents,
+      caCertsPem: args.caCertsPem
     });
     rustCrypto.setSupportedVerificationMethods(this.verificationMethods);
     this.cryptoBackend = rustCrypto;
@@ -1367,20 +1367,7 @@ export class MatrixClient extends TypedEventEmitter {
     }
   }
   async deleteAccountData(eventType) {
-    const msc3391DeleteAccountDataServerSupport = this.canSupport.get(Feature.AccountDataDeletion);
-    // if deletion is not supported overwrite with empty content
-    if (msc3391DeleteAccountDataServerSupport === ServerSupport.Unsupported) {
-      await this.setAccountData(eventType, {});
-      return;
-    }
-    const path = utils.encodeUri("/user/$userId/account_data/$type", {
-      $userId: this.getSafeUserId(),
-      $type: eventType
-    });
-    const options = msc3391DeleteAccountDataServerSupport === ServerSupport.Unstable ? {
-      prefix: "/_matrix/client/unstable/org.matrix.msc3391"
-    } : undefined;
-    return await this.http.authedRequest(Method.Delete, path, undefined, undefined, options);
+    await this.setAccountData(eventType, {});
   }
 
   /**
@@ -1681,7 +1668,6 @@ export class MatrixClient extends TypedEventEmitter {
    * @throws May throw a `MatrixSafetyError` if content is deemed unsafe.
    * @see MatrixSafetyError
    */
-  // eslint-disable-next-line @typescript-eslint/naming-convention
   async unstable_createLiveBeacon(roomId, beaconInfoContent) {
     return this.unstable_setLiveBeacon(roomId, beaconInfoContent);
   }
@@ -1694,7 +1680,6 @@ export class MatrixClient extends TypedEventEmitter {
    * @throws May throw a `MatrixSafetyError` if content is deemed unsafe.
    * @see MatrixSafetyError
    */
-  // eslint-disable-next-line @typescript-eslint/naming-convention
   async unstable_setLiveBeacon(roomId, beaconInfoContent) {
     return this.sendStateEvent(roomId, M_BEACON_INFO.name, beaconInfoContent, this.getUserId());
   }
@@ -2247,7 +2232,6 @@ export class MatrixClient extends TypedEventEmitter {
    * @throws May throw a `MatrixSafetyError` if content is deemed unsafe.
    * @see MatrixSafetyError
    */
-  // eslint-disable-next-line
   async _unstable_sendDelayedEvent(roomId, delayOpts, threadId, eventType, content, txnId) {
     if (!(await this.doesServerSupportUnstableFeature(UNSTABLE_MSC4140_DELAYED_EVENTS))) {
       throw new UnsupportedDelayedEventsEndpointError("Server does not support the delayed events API", "sendDelayedEvent");
@@ -2274,7 +2258,6 @@ export class MatrixClient extends TypedEventEmitter {
    * @throws May throw a `MatrixSafetyError` if content is deemed unsafe.
    * @see MatrixSafetyError
    */
-  // eslint-disable-next-line
   async _unstable_sendStickyDelayedEvent(roomId, stickDuration, delayOpts, threadId, eventType, content, txnId) {
     if (!(await this.doesServerSupportUnstableFeature(UNSTABLE_MSC4140_DELAYED_EVENTS))) {
       throw new UnsupportedDelayedEventsEndpointError("Server does not support the delayed events API", "getDelayedEvents");
@@ -2306,7 +2289,6 @@ export class MatrixClient extends TypedEventEmitter {
    * @throws May throw a `MatrixSafetyError` if content is deemed unsafe.
    * @see MatrixSafetyError
    */
-  // eslint-disable-next-line
   async _unstable_sendDelayedStateEvent(roomId, delayOpts, eventType, content, stateKey = "", opts = {}) {
     if (!(await this.doesServerSupportUnstableFeature(UNSTABLE_MSC4140_DELAYED_EVENTS))) {
       throw new UnsupportedDelayedEventsEndpointError("Server does not support the delayed events API", "sendDelayedStateEvent");
@@ -2331,7 +2313,6 @@ export class MatrixClient extends TypedEventEmitter {
    * @throws May throw a `MatrixSafetyError` if content is deemed unsafe.
    * @see MatrixSafetyError
    */
-  // eslint-disable-next-line
   async _unstable_sendStickyEvent(roomId, stickDuration, threadId, eventType, content, txnId) {
     if (!(await this.doesServerSupportUnstableFeature(UNSTABLE_MSC4354_STICKY_EVENTS))) {
       throw new UnsupportedStickyEventsEndpointError("Server does not support the sticky events", "sendStickyEvent");
@@ -2357,7 +2338,6 @@ export class MatrixClient extends TypedEventEmitter {
    * Note: This endpoint is unstable, and can throw an `Error`.
    *   Check progress on [MSC4140](https://github.com/matrix-org/matrix-spec-proposals/pull/4140) for more details.
    */
-  // eslint-disable-next-line
   async _unstable_getDelayedEvents(status, delayId, fromToken) {
     if (!(await this.doesServerSupportUnstableFeature(UNSTABLE_MSC4140_DELAYED_EVENTS))) {
       throw new UnsupportedDelayedEventsEndpointError("Server does not support the delayed events API", "getDelayedEvents");
@@ -2383,7 +2363,6 @@ export class MatrixClient extends TypedEventEmitter {
    * - {@link _unstable_restartScheduledDelayedEvent}
    * - {@link _unstable_sendScheduledDelayedEvent}
    */
-  // eslint-disable-next-line @typescript-eslint/naming-convention
   async _unstable_updateDelayedEvent(delayId, action, requestOptions = {}) {
     if (!(await this.doesServerSupportUnstableFeature(UNSTABLE_MSC4140_DELAYED_EVENTS))) {
       throw new UnsupportedDelayedEventsEndpointError("Server does not support the delayed events API", "updateDelayedEvent");
@@ -2399,7 +2378,6 @@ export class MatrixClient extends TypedEventEmitter {
    *
    * @throws A M_NOT_FOUND error if no matching delayed event could be found.
    */
-  // eslint-disable-next-line @typescript-eslint/naming-convention
   async _unstable_cancelScheduledDelayedEvent(delayId, requestOptions = {}) {
     return await this.updateScheduledDelayedEvent(delayId, UpdateDelayedEventAction.Cancel, requestOptions);
   }
@@ -2412,7 +2390,6 @@ export class MatrixClient extends TypedEventEmitter {
    *
    * @throws A M_NOT_FOUND error if no matching delayed event could be found.
    */
-  // eslint-disable-next-line @typescript-eslint/naming-convention
   async _unstable_restartScheduledDelayedEvent(delayId, requestOptions = {}) {
     return await this.updateScheduledDelayedEvent(delayId, UpdateDelayedEventAction.Restart, requestOptions);
   }
@@ -2428,7 +2405,6 @@ export class MatrixClient extends TypedEventEmitter {
    * @throws May throw a `MatrixSafetyError` if content is deemed unsafe.
    * @see MatrixSafetyError
    */
-  // eslint-disable-next-line @typescript-eslint/naming-convention
   async _unstable_sendScheduledDelayedEvent(delayId, requestOptions = {}) {
     return await this.updateScheduledDelayedEvent(delayId, UpdateDelayedEventAction.Send, requestOptions);
   }
@@ -2987,7 +2963,6 @@ export class MatrixClient extends TypedEventEmitter {
    * @throws May throw a `MatrixSafetyError` if content is deemed unsafe.
    * @see MatrixSafetyError
    */
-  // eslint-disable-next-line camelcase
 
   setProfileInfo(info, data) {
     const path = utils.encodeUri("/profile/$userId/$info", {
@@ -4427,21 +4402,15 @@ export class MatrixClient extends TypedEventEmitter {
       prefix: ""
     });
   }
-  async fetchClientWellKnown() {
-    // `getRawClientConfig` does not throw or reject on network errors, instead
-    // it absorbs errors and returns `{}`.
-    this.clientWellKnownPromise = AutoDiscovery.getRawClientConfig(this.getDomain() ?? undefined);
-    this.clientWellKnown = await this.clientWellKnownPromise;
-    this.emit(ClientEvent.ClientWellKnown, this.clientWellKnown);
-  }
   getClientWellKnown() {
-    return this.clientWellKnown;
+    return this.cachedWellKnown.get();
   }
-  waitForClientWellKnown() {
+  async waitForClientWellKnown() {
     if (!this.clientRunning) {
       throw new Error("Client is not running");
     }
-    return this.clientWellKnownPromise;
+    const wellKnown = await this.cachedWellKnown.wait();
+    return wellKnown;
   }
 
   /**
@@ -4473,7 +4442,6 @@ export class MatrixClient extends TypedEventEmitter {
    * @returns Rejects: with an error response.
    */
   // TODO: on spec release, rename this to getMutualRooms
-  // eslint-disable-next-line
   async _unstable_getSharedRooms(userId) {
     // Initial variant of the MSC
     const sharedRoomsSupport = await this.doesServerSupportUnstableFeature(UNSTABLE_MSC2666_SHARED_ROOMS);
@@ -4528,7 +4496,6 @@ export class MatrixClient extends TypedEventEmitter {
    * Requires homeserver support for MSC4143.
    * @throws A M_NOT_FOUND error if not supported by the homeserver.
    */
-  // eslint-disable-next-line @typescript-eslint/naming-convention
   async _unstable_getRTCTransports() {
     // There is no /versions endpoint to check for support, so we just have to attempt a request.
     return (await this.http.authedRequest(Method.Get, "/rtc/transports", undefined, undefined, {
@@ -5110,7 +5077,6 @@ export class MatrixClient extends TypedEventEmitter {
    * @returns Rejects: with an error response.
    */
   async createRoom(options) {
-    // eslint-disable-line camelcase
     // some valid options include: room_alias_name, visibility, invite
 
     // inject the id_access_token if inviting 3rd party addresses
@@ -5228,7 +5194,6 @@ export class MatrixClient extends TypedEventEmitter {
    * @returns Rejects: with an error response.
    */
   upgradeRoom(roomId, newVersion, additionalCreators) {
-    // eslint-disable-line camelcase
     const path = utils.encodeUri("/rooms/$roomId/upgrade", {
       $roomId: roomId
     });
@@ -5272,8 +5237,7 @@ export class MatrixClient extends TypedEventEmitter {
       room_id: roomId,
       type: eventType,
       state_key: stateKey,
-      // Cast safety: StateEvents[K] is a stronger bound than IContent, which has [key: string]: any
-      content: content
+      content
     });
     await this.encryptStateEventIfNeeded(event, room ?? undefined);
     const pathParams = {
@@ -5475,7 +5439,6 @@ export class MatrixClient extends TypedEventEmitter {
    * @returns Rejects: with an error response.
    */
   getRoomIdForAlias(alias) {
-    // eslint-disable-line camelcase
     const path = utils.encodeUri("/directory/room/$alias", {
       $alias: alias
     });
@@ -5573,9 +5536,7 @@ export class MatrixClient extends TypedEventEmitter {
    * @returns Promise which resolves: TODO
    * @returns Rejects: with an error response.
    */
-  getProfileInfo(userId, info
-  // eslint-disable-next-line camelcase
-  ) {
+  getProfileInfo(userId, info) {
     const path = info ? utils.encodeUri("/profile/$userId/$info", {
       $userId: userId,
       $info: info
@@ -5663,7 +5624,7 @@ export class MatrixClient extends TypedEventEmitter {
     });
 
     // write through to the cache
-    await this.store.storeUserProfiles(new Map([[userId, profile]]));
+    await this.store.storeUserProfiles(new Map([[userId, _objectSpread(_objectSpread({}, storedProfile), profile)]]));
     return profile[key];
   }
 
@@ -5804,9 +5765,7 @@ export class MatrixClient extends TypedEventEmitter {
    * @returns Promise which resolves: on success
    * @returns Rejects: with an error response.
    */
-  async unbindThreePid(medium, address
-  // eslint-disable-next-line camelcase
-  ) {
+  async unbindThreePid(medium, address) {
     const path = "/account/3pid/unbind";
     const data = {
       medium,
@@ -5824,9 +5783,7 @@ export class MatrixClient extends TypedEventEmitter {
    *     (generally the empty JSON object)
    * @returns Rejects: with an error response.
    */
-  deleteThreePid(medium, address
-  // eslint-disable-next-line camelcase
-  ) {
+  deleteThreePid(medium, address) {
     const path = "/account/3pid/delete";
     return this.http.authedRequest(Method.Post, path, undefined, {
       medium,
@@ -5881,7 +5838,6 @@ export class MatrixClient extends TypedEventEmitter {
    * @returns Promise which resolves: to an empty object `{}`
    * @returns Rejects: with an error response.
    */
-  // eslint-disable-next-line camelcase
   setDeviceDetails(deviceId, body) {
     const path = utils.encodeUri("/devices/$device_id", {
       $device_id: deviceId
@@ -6921,33 +6877,21 @@ export class MatrixClient extends TypedEventEmitter {
   /**
    * Discover and validate the auth metadata for the OAuth 2.0 API.
    *
-   * Fetches /auth_metadata falling back to legacy implementation using /auth_issuer followed by
-   * https://oidc-issuer.example.com/.well-known/openid-configuration and other files linked therein.
    * When successful, validated metadata is returned.
    *
-   * @returns validated authentication metadata and optionally signing keys
+   * @returns validated authentication metadata
    * @throws when delegated auth config is invalid or unreachable
    */
   async getAuthMetadata() {
-    let authMetadata;
-    try {
-      const useStable = await this.isVersionSupported("v1.15");
-      authMetadata = await this.http.request(Method.Get, "/auth_metadata", undefined, undefined, {
-        prefix: useStable ? ClientPrefix.V1 : ClientPrefix.Unstable + "/org.matrix.msc2965"
-      });
-    } catch (e) {
-      if (e instanceof MatrixError && e.errcode === "M_UNRECOGNIZED") {
-        // Fall back to older variant of MSC2965
-        const {
-          issuer
-        } = await this.http.request(Method.Get, "/auth_issuer", undefined, undefined, {
-          prefix: ClientPrefix.Unstable + "/org.matrix.msc2965"
-        });
-        return discoverAndValidateOIDCIssuerWellKnown(issuer);
-      }
-      throw e;
+    const useStable = await this.isVersionSupported("v1.15");
+    const authMetadata = await this.http.request(Method.Get, "/auth_metadata", undefined, undefined, {
+      prefix: useStable ? ClientPrefix.V1 : ClientPrefix.Unstable + "/org.matrix.msc2965"
+    });
+    if (isValidAuthMetadata(authMetadata)) {
+      return authMetadata;
     }
-    return validateAuthMetadataAndKeys(authMetadata);
+    logger.error("Issuer configuration not valid");
+    throw new Error(OAuth2Error.OpSupport);
   }
 }
 _defineProperty(MatrixClient, "RESTORE_BACKUP_ERROR_BAD_KEY", "RESTORE_BACKUP_ERROR_BAD_KEY");