@openclaw/matrix 2026.8.1-beta.3 → 2026.8.2

package/dist/{channel.setup-aNaa3Uyn.js → channel.setup-OIEzCzSs.js}

@@ -1,6 +1,6 @@
-import { a as resolveMatrixAccountConfig } from "./account-config-BZWN9tGS.js";
-import { i as resolveMatrixAccount, r as resolveDefaultMatrixAccountId, t as listMatrixAccountIds } from "./accounts-BCzyubQt.js";
-import { r as matrixSetupContract, t as createMatrixSetupWizardProxy } from "./setup-core-DigrLebY.js";
+import { a as resolveMatrixAccountConfig } from "./account-config-CRsKoMqJ.js";
+import { i as resolveMatrixAccount, r as resolveDefaultMatrixAccountId, t as listMatrixAccountIds } from "./accounts-DR1c4xF_.js";
+import { r as matrixSetupContract, t as createMatrixSetupWizardProxy } from "./setup-core-CZM496H-.js";
 import { adaptScopedAccountAccessor, createScopedChannelConfigAdapter } from "openclaw/plugin-sdk/channel-config-helpers";
 import { createChannelConfigUiHints } from "openclaw/plugin-sdk/channel-core";
 import { normalizeLowercaseStringOrEmpty } from "openclaw/plugin-sdk/string-coerce-runtime";
@@ -50,22 +50,23 @@ function resolveMatrixAllowListMatch(params) {
 		matchSource: "wildcard"
 	};
 	const userId = normalizeMatrixUser(params.userId);
+	const candidates = [
+		{
+			value: userId,
+			source: "id"
+		},
+		{
+			value: userId ? `matrix:${userId}` : "",
+			source: "prefixed-id"
+		},
+		{
+			value: userId ? `user:${userId}` : "",
+			source: "prefixed-user"
+		}
+	];
 	return resolveAllowlistMatchByCandidates({
 		allowList,
-		candidates: [
-			{
-				value: userId,
-				source: "id"
-			},
-			{
-				value: userId ? `matrix:${userId}` : "",
-				source: "prefixed-id"
-			},
-			{
-				value: userId ? `user:${userId}` : "",
-				source: "prefixed-user"
-			}
-		]
+		candidates
 	});
 }
 //#endregion
@@ -98,6 +99,10 @@ const matrixConfigAdapter = createScopedChannelConfigAdapter({
 //#endregion
 //#region extensions/matrix/src/config-ui-hints.ts
 const matrixChannelConfigUiHints = {
+	joinIntro: {
+		label: "Matrix Group Join Introduction",
+		help: "Post one brief introduction when the bot joins an allowed group room (default: true). Account settings override the channel-wide setting."
+	},
 	...createChannelConfigUiHints({
 		channelLabel: "Matrix",
 		mentionPatterns: {
@@ -221,12 +226,13 @@ function hasCanonicalMatrixAccountStreaming(account) {
 	const streaming = account.streaming;
 	return typeof streaming === "object" && streaming !== null && !Array.isArray(streaming);
 }
-const MatrixChannelConfigSchema = buildChannelConfigSchema(z.object({
+const MatrixConfigSchema = z.object({
 	name: z.string().optional(),
 	enabled: z.boolean().optional(),
 	configWrites: z.boolean().optional(),
+	joinIntro: z.boolean().optional(),
 	defaultAccount: z.string().optional(),
-	accounts: z.record(z.string(), z.unknown().refine(hasCanonicalMatrixAccountStreaming, { message: "flat or scalar streaming values are no longer supported; use streaming.* and run \"openclaw doctor --fix\"" })).optional(),
+	accounts: z.record(z.string(), z.object({ joinIntro: z.boolean().optional() }).passthrough().refine(hasCanonicalMatrixAccountStreaming, { message: "flat or scalar streaming values are no longer supported; use streaming.* and run \"openclaw doctor --fix\"" })).optional(),
 	markdown: MarkdownConfigSchema,
 	homeserver: z.string().optional(),
 	network: matrixNetworkSchema,
@@ -294,7 +300,8 @@ const MatrixChannelConfigSchema = buildChannelConfigSchema(z.object({
 	groups: z.object({}).catchall(matrixRoomSchema).optional(),
 	rooms: z.object({}).catchall(matrixRoomSchema).optional(),
 	actions: matrixActionSchema
-}), { uiHints: matrixChannelConfigUiHints });
+});
+const MatrixChannelConfigSchema = buildChannelConfigSchema(MatrixConfigSchema, { uiHints: matrixChannelConfigUiHints });
 const matrixPluginBase = {
 	id: "matrix",
 	meta: {
@@ -307,7 +314,7 @@ const matrixPluginBase = {
 		order: 70,
 		quickstartAllowFrom: true
 	},
-	setupWizard: createMatrixSetupWizardProxy(async () => ({ matrixSetupWizard: (await import("./setup-surface-Dtn8sAWs.js").then((n) => n.t)).matrixSetupWizard })),
+	setupWizard: createMatrixSetupWizardProxy(async () => ({ matrixSetupWizard: (await import("./setup-surface-DSZtOsWK.js").then((n) => n.t)).matrixSetupWizard })),
 	setupContract: matrixSetupContract,
 	capabilities: {
 		chatTypes: [

package/dist/{cli-iR6QJ5U0.js → cli-B6HF7Hmn.js}

@@ -1,24 +1,24 @@
-import { a as resolveMatrixAccountConfig } from "./account-config-BZWN9tGS.js";
+import { a as resolveMatrixAccountConfig } from "./account-config-CRsKoMqJ.js";
 import { t as getMatrixRuntime } from "./runtime-6S3DNFNv.js";
-import { i as resolveMatrixAccount } from "./accounts-BCzyubQt.js";
-import { n as resolveMatrixConfigPath, r as updateMatrixAccountConfig } from "./config-update-Bor_Pjsv.js";
-import { n as matrixSetupAdapter } from "./setup-core-DigrLebY.js";
-import { n as withResolvedActionClient } from "./client-D8XghqmX.js";
-import { l as resolveMatrixAuthContext } from "./client-BBQdBG7t.js";
-import { a as formatZonedTimestamp } from "./runtime-api-BGO16Fu8.js";
+import { i as resolveMatrixAccount } from "./accounts-DR1c4xF_.js";
+import { n as resolveMatrixConfigPath, r as updateMatrixAccountConfig } from "./config-update-BnX26jCO.js";
+import { n as matrixSetupAdapter } from "./setup-core-CZM496H-.js";
+import { n as withResolvedActionClient } from "./client-B0yMDho1.js";
+import { u as resolveMatrixAuthContext } from "./client-DFsRJEgB.js";
 import { t as resolveMatrixRoomKeyBackupIssue } from "./backup-health-Dm_YMVFT.js";
 import { i as setMatrixSdkLogMode, r as setMatrixSdkConsoleLogging } from "./logging-DRjvUOIh.js";
 import { n as isOpenClawManagedMatrixDevice, r as summarizeMatrixDeviceHealth } from "./device-health-B4-YXtJR.js";
-import { n as updateMatrixOwnProfile, t as applyMatrixProfileUpdate } from "./profile-update-BQlE5s2J.js";
-import { a as confirmMatrixVerificationSas, b as verifyMatrixRecoveryKey, c as getMatrixRoomKeyBackupStatus, d as listMatrixVerifications, f as mismatchMatrixVerificationSas, g as runMatrixSelfVerification, h as restoreMatrixRoomKeyBackup, l as getMatrixVerificationSas, m as resetMatrixRoomKeyBackup, n as bootstrapMatrixVerification, p as requestMatrixVerification, r as cancelMatrixVerification, t as acceptMatrixVerification, u as getMatrixVerificationStatus, v as startMatrixVerification } from "./verification-CabtBTtB.js";
+import { n as updateMatrixOwnProfile, t as applyMatrixProfileUpdate } from "./profile-update-CsyKA9jI.js";
+import { a as confirmMatrixVerificationSas, b as verifyMatrixRecoveryKey, c as getMatrixRoomKeyBackupStatus, d as listMatrixVerifications, f as mismatchMatrixVerificationSas, g as runMatrixSelfVerification, h as restoreMatrixRoomKeyBackup, l as getMatrixVerificationSas, m as resetMatrixRoomKeyBackup, n as bootstrapMatrixVerification, p as requestMatrixVerification, r as cancelMatrixVerification, t as acceptMatrixVerification, u as getMatrixVerificationStatus, v as startMatrixVerification } from "./verification-CD7k5vE9.js";
 import { createLazyRuntimeModule } from "openclaw/plugin-sdk/lazy-runtime";
 import { normalizeAccountId } from "openclaw/plugin-sdk/account-id";
 import { formatErrorMessage } from "openclaw/plugin-sdk/error-runtime";
 import { parseStrictInteger, timestampMsToIsoString } from "openclaw/plugin-sdk/number-runtime";
+import { formatZonedTimestamp } from "openclaw/plugin-sdk/time-runtime";
 import { readByteStreamWithLimit } from "openclaw/plugin-sdk/response-limit-runtime";
 //#region extensions/matrix/src/cli-shared.ts
 let matrixCliExitScheduled = false;
-const MATRIX_CLI_RECOVERY_KEY_STDIN_MAX_BYTES = 1024 * 1024;
+const MATRIX_CLI_RECOVERY_KEY_STDIN_MAX_BYTES = 1048576;
 function scheduleMatrixCliExit() {
 	if (matrixCliExitScheduled || process.env.VITEST) return;
 	matrixCliExitScheduled = true;
@@ -292,10 +292,12 @@ function printBackupSummary(backup) {
 function buildVerificationGuidance(status, accountId) {
 	const backup = resolveBackupStatus(status);
 	const nextSteps = /* @__PURE__ */ new Set();
-	if (!status.verified) if (status.recoveryKeyAccepted === true && status.backupUsable === true) {
-		nextSteps.add(`Recovery key can unlock the room-key backup, but full Matrix identity trust is still incomplete. Run ${formatMatrixCliCommand("verify self", accountId)}, accept the request in another verified Matrix client, and confirm the SAS only if it matches.`);
-		nextSteps.add(`If you intend to replace the current cross-signing identity, run the shown printf pipeline with the Matrix recovery key env var for this account: ${formatMatrixCliRecoveryKeyStdinCommand("verify bootstrap --recovery-key-stdin --force-reset-cross-signing", accountId)}.`);
-	} else nextSteps.add(`Run the shown printf pipeline with the Matrix recovery key env var for this account: ${formatMatrixCliRecoveryKeyStdinCommand("verify device --recovery-key-stdin", accountId)}. If you do not have the recovery key but still have another verified Matrix client, run ${formatMatrixCliCommand("verify self", accountId)} instead.`);
+	if (!status.verified) {
+		if (status.recoveryKeyAccepted === true && status.backupUsable === true) {
+			nextSteps.add(`Recovery key can unlock the room-key backup, but full Matrix identity trust is still incomplete. Run ${formatMatrixCliCommand("verify self", accountId)}, accept the request in another verified Matrix client, and confirm the SAS only if it matches.`);
+			nextSteps.add(`If you intend to replace the current cross-signing identity, run the shown printf pipeline with the Matrix recovery key env var for this account: ${formatMatrixCliRecoveryKeyStdinCommand("verify bootstrap --recovery-key-stdin --force-reset-cross-signing", accountId)}.`);
+		} else nextSteps.add(`Run the shown printf pipeline with the Matrix recovery key env var for this account: ${formatMatrixCliRecoveryKeyStdinCommand("verify device --recovery-key-stdin", accountId)}. If you do not have the recovery key but still have another verified Matrix client, run ${formatMatrixCliCommand("verify self", accountId)} instead.`);
+	}
 	if (status.serverDeviceKnown === false) nextSteps.add(`This Matrix device is no longer listed on the homeserver. Create a new OpenClaw Matrix device with ${formatMatrixCliCommand("account add --homeserver <url> --user-id <@user:server> --password <password> --device-name OpenClaw-Gateway", accountId)}. If you use token auth, create a fresh Matrix access token in your Matrix client or admin UI, then run ${formatMatrixCliCommand("account add --homeserver <url> --access-token <token>", accountId)}.`);
 	for (const step of buildBackupGuidance(backup, accountId, { recoveryKeyStored: status.recoveryKeyStored })) nextSteps.add(step);
 	if (status.pendingVerifications > 0) nextSteps.add(`Review pending verification requests with ${formatMatrixCliCommand("verify list", accountId)}. Complete each active request with ${formatMatrixCliCommand("verify sas <id>", accountId)} and ${formatMatrixCliCommand("verify confirm-sas <id>", accountId)}, or cancel stale requests with ${formatMatrixCliCommand("verify cancel <id>", accountId)}.`);
@@ -305,9 +307,10 @@ function buildBackupGuidance(backup, accountId, options = {}) {
 	const backupIssue = resolveMatrixRoomKeyBackupIssue(backup);
 	const nextSteps = /* @__PURE__ */ new Set();
 	if (backupIssue.code === "missing-server-backup") nextSteps.add(`Run ${formatMatrixCliCommand("verify bootstrap", accountId)} to create a room key backup.`);
-	else if (backupIssue.code === "key-load-failed" || backupIssue.code === "key-not-loaded" || backupIssue.code === "inactive") if (options.recoveryKeyStored) nextSteps.add(`Backup key is not loaded on this device. Run ${formatMatrixCliCommand("verify backup restore", accountId)} to load it and restore old room keys. If restore still cannot load the key, run the shown printf pipeline with the Matrix recovery key env var for this account: ${formatMatrixCliRecoveryKeyStdinCommand("verify backup restore --recovery-key-stdin", accountId)}.`);
-	else nextSteps.add(`Run the shown printf pipeline with the Matrix recovery key env var for this account: ${formatMatrixCliRecoveryKeyStdinCommand("verify backup restore --recovery-key-stdin", accountId)} to load the server backup and store the key for future restores.`);
-	else if (backupIssue.code === "key-mismatch") {
+	else if (backupIssue.code === "key-load-failed" || backupIssue.code === "key-not-loaded" || backupIssue.code === "inactive") {
+		if (options.recoveryKeyStored) nextSteps.add(`Backup key is not loaded on this device. Run ${formatMatrixCliCommand("verify backup restore", accountId)} to load it and restore old room keys. If restore still cannot load the key, run the shown printf pipeline with the Matrix recovery key env var for this account: ${formatMatrixCliRecoveryKeyStdinCommand("verify backup restore --recovery-key-stdin", accountId)}.`);
+		else nextSteps.add(`Run the shown printf pipeline with the Matrix recovery key env var for this account: ${formatMatrixCliRecoveryKeyStdinCommand("verify backup restore --recovery-key-stdin", accountId)} to load the server backup and store the key for future restores.`);
+	} else if (backupIssue.code === "key-mismatch") {
 		nextSteps.add(`Backup key mismatch on this device. Run the shown printf pipeline with the active server backup recovery key env var for this account: ${formatMatrixCliRecoveryKeyStdinCommand("verify backup restore --recovery-key-stdin", accountId)}.`);
 		nextSteps.add(`If you want a fresh backup baseline and accept losing unrecoverable history, run ${formatMatrixCliCommand("verify backup reset --yes", accountId)}. Add --rotate-recovery-key only when the old recovery key should stop unlocking the fresh backup.`);
 	} else if (backupIssue.code === "untrusted-signature") {
@@ -325,19 +328,21 @@ function printGuidance(lines) {
 function printVerificationStatus(status, verbose = false, accountId) {
 	console.log(`Verified by owner: ${status.verified ? "yes" : "no"}`);
 	if (status.serverDeviceKnown === false) console.log("Device issue: current Matrix device is missing from the homeserver device list");
-	const backupIssue = resolveMatrixRoomKeyBackupIssue(resolveBackupStatus(status));
+	const backup = resolveBackupStatus(status);
+	const backupIssue = resolveMatrixRoomKeyBackupIssue(backup);
 	printVerificationBackupSummary(status);
 	if (backupIssue.message) console.log(`Backup issue: ${backupIssue.message}`);
+	console.log(`Recovery key stored: ${status.recoveryKeyStored ? "yes" : "no"}`);
+	if (status.recoveryKey) console.log("Recovery key: available (re-run with --json to include the raw key value in output)");
 	if (verbose) {
 		console.log("Diagnostics:");
 		printVerificationIdentity(status);
 		if (status.serverDeviceKnown !== void 0) console.log(`Device present on server: ${yesNoUnknown(status.serverDeviceKnown ?? null)}`);
 		printVerificationTrustDiagnostics(status);
 		printVerificationBackupStatus(status);
-		console.log(`Recovery key stored: ${status.recoveryKeyStored ? "yes" : "no"}`);
 		printTimestamp("Recovery key created at", status.recoveryKeyCreatedAt);
 		console.log(`Pending verifications: ${status.pendingVerifications}`);
-	} else console.log(`Recovery key stored: ${status.recoveryKeyStored ? "yes" : "no"}`);
+	}
 	printVerificationGuidance(status, accountId);
 }
 //#endregion
@@ -412,7 +417,7 @@ async function addMatrixAccount(params) {
 		backupVersion: null
 	};
 	if (accountConfig.encryption === true) {
-		const { maybeBootstrapNewEncryptedMatrixAccount } = await import("./setup-bootstrap-BGPjbA5N.js");
+		const { maybeBootstrapNewEncryptedMatrixAccount } = await import("./setup-bootstrap-CWoIWudw.js");
 		verificationBootstrap = await maybeBootstrapNewEncryptedMatrixAccount({
 			previousCfg: cfg,
 			cfg: updated,
@@ -437,7 +442,8 @@ async function addMatrixAccount(params) {
 		});
 		let resolvedAvatarUrl = synced.resolvedAvatarUrl;
 		if (synced.convertedAvatarFromHttp && synced.resolvedAvatarUrl) {
-			const withAvatar = updateMatrixAccountConfig(runtime.config.current(), accountId, { avatarUrl: synced.resolvedAvatarUrl });
+			const latestCfg = runtime.config.current();
+			const withAvatar = updateMatrixAccountConfig(latestCfg, accountId, { avatarUrl: synced.resolvedAvatarUrl });
 			await runtime.config.replaceConfigFile({
 				nextConfig: withAvatar,
 				afterWrite: { mode: "auto" }
@@ -513,20 +519,24 @@ function registerMatrixAccountCommands(root) {
 				console.log(`Config path: ${formatMatrixCliText(result.configPath)}`);
 				console.log(`Credentials source: ${result.useEnv ? "MATRIX_* / MATRIX_<ACCOUNT_ID>_* env vars" : "inline config"}`);
 				console.log(`Encryption: ${result.encryptionEnabled ? "enabled" : "disabled"}`);
-				if (result.verificationBootstrap.attempted) if (result.verificationBootstrap.success) {
-					console.log("Matrix verification bootstrap: complete");
-					printTimestamp("Recovery key created at", result.verificationBootstrap.recoveryKeyCreatedAt);
-					if (result.verificationBootstrap.backupVersion) console.log(`Backup version: ${formatMatrixCliText(result.verificationBootstrap.backupVersion)}`);
-				} else console.error(`Matrix verification bootstrap warning: ${formatMatrixCliText(result.verificationBootstrap.error)}`);
+				if (result.verificationBootstrap.attempted) {
+					if (result.verificationBootstrap.success) {
+						console.log("Matrix verification bootstrap: complete");
+						printTimestamp("Recovery key created at", result.verificationBootstrap.recoveryKeyCreatedAt);
+						if (result.verificationBootstrap.backupVersion) console.log(`Backup version: ${formatMatrixCliText(result.verificationBootstrap.backupVersion)}`);
+					} else console.error(`Matrix verification bootstrap warning: ${formatMatrixCliText(result.verificationBootstrap.error)}`);
+				}
 				if (result.deviceHealth.error) console.error(`Matrix device health warning: ${formatMatrixCliText(result.deviceHealth.error)}`);
 				else if (result.deviceHealth.staleOpenClawDeviceIds.length > 0) {
 					const staleDeviceIds = result.deviceHealth.staleOpenClawDeviceIds.map((deviceId) => formatMatrixCliText(deviceId)).join(", ");
 					console.log(`Matrix device hygiene warning: stale OpenClaw devices detected (${staleDeviceIds}). Run ${formatMatrixCliCommand("devices prune-stale", result.accountId)}.`);
 				}
-				if (result.profile.attempted) if (result.profile.error) console.error(`Profile sync warning: ${formatMatrixCliText(result.profile.error)}`);
-				else {
-					console.log(`Profile sync: name ${result.profile.displayNameUpdated ? "updated" : "unchanged"}, avatar ${result.profile.avatarUpdated ? "updated" : "unchanged"}`);
-					if (result.profile.convertedAvatarFromHttp && result.profile.resolvedAvatarUrl) console.log(`Avatar converted and saved as: ${formatMatrixCliText(result.profile.resolvedAvatarUrl)}`);
+				if (result.profile.attempted) {
+					if (result.profile.error) console.error(`Profile sync warning: ${formatMatrixCliText(result.profile.error)}`);
+					else {
+						console.log(`Profile sync: name ${result.profile.displayNameUpdated ? "updated" : "unchanged"}, avatar ${result.profile.avatarUpdated ? "updated" : "unchanged"}`);
+						if (result.profile.convertedAvatarFromHttp && result.profile.resolvedAvatarUrl) console.log(`Avatar converted and saved as: ${formatMatrixCliText(result.profile.resolvedAvatarUrl)}`);
+					}
 				}
 				const bindHint = `openclaw agents bind --agent <id> --bind matrix:${result.accountId}`;
 				console.log(`Bind this account to an agent: ${bindHint}`);
@@ -595,8 +605,8 @@ function registerMatrixDeviceCommands(root) {
 }
 //#endregion
 //#region extensions/matrix/src/cli-direct.ts
-const loadMatrixActionClientModule = createLazyRuntimeModule(() => import("./client-D8XghqmX.js").then((n) => n.t));
-const loadMatrixDirectManagementModule = createLazyRuntimeModule(() => import("./send-ClHgDZLT.js").then((n) => n.S));
+const loadMatrixActionClientModule = createLazyRuntimeModule(() => import("./client-B0yMDho1.js").then((n) => n.t));
+const loadMatrixDirectManagementModule = createLazyRuntimeModule(() => import("./send-DfS5ciUL.js").then((n) => n.x));
 function printDirectRoomCandidate(room) {
 	const members = room.joinedMembers === null ? "unavailable" : room.joinedMembers.map((member) => formatMatrixCliText(member)).join(", ") || "none";
 	console.log(`- ${formatMatrixCliText(room.roomId)} [${room.source}] strict=${room.strict ? "yes" : "no"} joined=${members}`);

package/dist/{cli-metadata-BmUYWjuM.js → cli-metadata-Mtzu5-AY.js}

@@ -2,7 +2,7 @@ import { definePluginEntry } from "openclaw/plugin-sdk/plugin-entry";
 //#region extensions/matrix/src/cli-metadata.ts
 function registerMatrixCliMetadata(api) {
 	api.registerCli(async ({ program }) => {
-		const { registerMatrixCli } = await import("./cli-iR6QJ5U0.js");
+		const { registerMatrixCli } = await import("./cli-B6HF7Hmn.js");
 		registerMatrixCli({ program });
 	}, { descriptors: [{
 		name: "matrix",

package/dist/cli-metadata.js

@@ -1,2 +1,2 @@
-import { n as registerMatrixCliMetadata, t as cli_metadata_default } from "./cli-metadata-BmUYWjuM.js";
+import { n as registerMatrixCliMetadata, t as cli_metadata_default } from "./cli-metadata-Mtzu5-AY.js";
 export { cli_metadata_default as default, registerMatrixCliMetadata };

package/dist/{client-D8XghqmX.js → client-B0yMDho1.js}

@@ -1,6 +1,6 @@
 import { t as __exportAll } from "./rolldown-runtime-8H4AJuhK.js";
-import { x as resolveMatrixRoomId } from "./send-ClHgDZLT.js";
-import { n as withResolvedRuntimeMatrixClient } from "./client-bootstrap-Co3RlItb.js";
+import { b as resolveMatrixRoomId } from "./send-DfS5ciUL.js";
+import { n as withResolvedRuntimeMatrixClient } from "./client-bootstrap-DjXCKEtg.js";
 //#region extensions/matrix/src/matrix/actions/client.ts
 var client_exports = /* @__PURE__ */ __exportAll({
 	withResolvedActionClient: () => withResolvedActionClient,