@openclaw/matrix 2026.8.1 → 2026.8.33

package/dist/{cli-DRVtgrq5.js → .setup/cli-CyuDGiIr.mjs}

@@ -1,15 +1,15 @@
-import { a as resolveMatrixAccountConfig } from "./account-config-CRsKoMqJ.js";
-import { t as getMatrixRuntime } from "./runtime-6S3DNFNv.js";
-import { i as resolveMatrixAccount } from "./accounts-fC57n-Jo.js";
-import { n as resolveMatrixConfigPath, r as updateMatrixAccountConfig } from "./config-update-DC0fWBxc.js";
-import { n as matrixSetupAdapter } from "./setup-core-r6L0nno-.js";
-import { n as withResolvedActionClient } from "./client-CZ_JvrO0.js";
-import { l as resolveMatrixAuthContext } from "./client-kSi51NKp.js";
-import { t as resolveMatrixRoomKeyBackupIssue } from "./backup-health-Dm_YMVFT.js";
-import { i as setMatrixSdkLogMode, r as setMatrixSdkConsoleLogging } from "./logging-DRjvUOIh.js";
-import { n as isOpenClawManagedMatrixDevice, r as summarizeMatrixDeviceHealth } from "./device-health-B4-YXtJR.js";
-import { n as updateMatrixOwnProfile, t as applyMatrixProfileUpdate } from "./profile-update-zXVCMg7y.js";
-import { a as confirmMatrixVerificationSas, b as verifyMatrixRecoveryKey, c as getMatrixRoomKeyBackupStatus, d as listMatrixVerifications, f as mismatchMatrixVerificationSas, g as runMatrixSelfVerification, h as restoreMatrixRoomKeyBackup, l as getMatrixVerificationSas, m as resetMatrixRoomKeyBackup, n as bootstrapMatrixVerification, p as requestMatrixVerification, r as cancelMatrixVerification, t as acceptMatrixVerification, u as getMatrixVerificationStatus, v as startMatrixVerification } from "./verification-4vsW_WSn.js";
+import { a as resolveMatrixAccountConfig } from "./account-config-CRsKoMqJ.mjs";
+import { t as getMatrixRuntime } from "./runtime-6S3DNFNv.mjs";
+import { i as resolveMatrixAccount } from "./accounts-BJ6ECCac.mjs";
+import { n as resolveMatrixConfigPath, r as updateMatrixAccountConfig } from "./config-update-B_4qZ5bV.mjs";
+import { n as matrixSetupAdapter } from "./setup-core-BnqoLunq.mjs";
+import { n as withResolvedActionClient } from "./client-CpHMD-C2.mjs";
+import { u as resolveMatrixAuthContext } from "./client-DvcYcTSy.mjs";
+import { t as resolveMatrixRoomKeyBackupIssue } from "./backup-health-Dm_YMVFT.mjs";
+import { i as setMatrixSdkLogMode, r as setMatrixSdkConsoleLogging } from "./logging-CkohOZwO.mjs";
+import { n as isOpenClawManagedMatrixDevice, r as summarizeMatrixDeviceHealth } from "./device-health-CWOuIirq.mjs";
+import { n as updateMatrixOwnProfile, t as applyMatrixProfileUpdate } from "./profile-update-B9Q6Ox2O.mjs";
+import { a as confirmMatrixVerificationSas, b as verifyMatrixRecoveryKey, c as getMatrixRoomKeyBackupStatus, d as listMatrixVerifications, f as mismatchMatrixVerificationSas, g as runMatrixSelfVerification, h as restoreMatrixRoomKeyBackup, l as getMatrixVerificationSas, m as resetMatrixRoomKeyBackup, n as bootstrapMatrixVerification, p as requestMatrixVerification, r as cancelMatrixVerification, t as acceptMatrixVerification, u as getMatrixVerificationStatus, v as startMatrixVerification } from "./verification-DOT16noD.mjs";
 import { createLazyRuntimeModule } from "openclaw/plugin-sdk/lazy-runtime";
 import { normalizeAccountId } from "openclaw/plugin-sdk/account-id";
 import { formatErrorMessage } from "openclaw/plugin-sdk/error-runtime";
@@ -18,7 +18,7 @@ import { formatZonedTimestamp } from "openclaw/plugin-sdk/time-runtime";
 import { readByteStreamWithLimit } from "openclaw/plugin-sdk/response-limit-runtime";
 //#region extensions/matrix/src/cli-shared.ts
 let matrixCliExitScheduled = false;
-const MATRIX_CLI_RECOVERY_KEY_STDIN_MAX_BYTES = 1024 * 1024;
+const MATRIX_CLI_RECOVERY_KEY_STDIN_MAX_BYTES = 1048576;
 function scheduleMatrixCliExit() {
 	if (matrixCliExitScheduled || process.env.VITEST) return;
 	matrixCliExitScheduled = true;
@@ -292,10 +292,12 @@ function printBackupSummary(backup) {
 function buildVerificationGuidance(status, accountId) {
 	const backup = resolveBackupStatus(status);
 	const nextSteps = /* @__PURE__ */ new Set();
-	if (!status.verified) if (status.recoveryKeyAccepted === true && status.backupUsable === true) {
-		nextSteps.add(`Recovery key can unlock the room-key backup, but full Matrix identity trust is still incomplete. Run ${formatMatrixCliCommand("verify self", accountId)}, accept the request in another verified Matrix client, and confirm the SAS only if it matches.`);
-		nextSteps.add(`If you intend to replace the current cross-signing identity, run the shown printf pipeline with the Matrix recovery key env var for this account: ${formatMatrixCliRecoveryKeyStdinCommand("verify bootstrap --recovery-key-stdin --force-reset-cross-signing", accountId)}.`);
-	} else nextSteps.add(`Run the shown printf pipeline with the Matrix recovery key env var for this account: ${formatMatrixCliRecoveryKeyStdinCommand("verify device --recovery-key-stdin", accountId)}. If you do not have the recovery key but still have another verified Matrix client, run ${formatMatrixCliCommand("verify self", accountId)} instead.`);
+	if (!status.verified) {
+		if (status.recoveryKeyAccepted === true && status.backupUsable === true) {
+			nextSteps.add(`Recovery key can unlock the room-key backup, but full Matrix identity trust is still incomplete. Run ${formatMatrixCliCommand("verify self", accountId)}, accept the request in another verified Matrix client, and confirm the SAS only if it matches.`);
+			nextSteps.add(`If you intend to replace the current cross-signing identity, run the shown printf pipeline with the Matrix recovery key env var for this account: ${formatMatrixCliRecoveryKeyStdinCommand("verify bootstrap --recovery-key-stdin --force-reset-cross-signing", accountId)}.`);
+		} else nextSteps.add(`Run the shown printf pipeline with the Matrix recovery key env var for this account: ${formatMatrixCliRecoveryKeyStdinCommand("verify device --recovery-key-stdin", accountId)}. If you do not have the recovery key but still have another verified Matrix client, run ${formatMatrixCliCommand("verify self", accountId)} instead.`);
+	}
 	if (status.serverDeviceKnown === false) nextSteps.add(`This Matrix device is no longer listed on the homeserver. Create a new OpenClaw Matrix device with ${formatMatrixCliCommand("account add --homeserver <url> --user-id <@user:server> --password <password> --device-name OpenClaw-Gateway", accountId)}. If you use token auth, create a fresh Matrix access token in your Matrix client or admin UI, then run ${formatMatrixCliCommand("account add --homeserver <url> --access-token <token>", accountId)}.`);
 	for (const step of buildBackupGuidance(backup, accountId, { recoveryKeyStored: status.recoveryKeyStored })) nextSteps.add(step);
 	if (status.pendingVerifications > 0) nextSteps.add(`Review pending verification requests with ${formatMatrixCliCommand("verify list", accountId)}. Complete each active request with ${formatMatrixCliCommand("verify sas <id>", accountId)} and ${formatMatrixCliCommand("verify confirm-sas <id>", accountId)}, or cancel stale requests with ${formatMatrixCliCommand("verify cancel <id>", accountId)}.`);
@@ -305,9 +307,10 @@ function buildBackupGuidance(backup, accountId, options = {}) {
 	const backupIssue = resolveMatrixRoomKeyBackupIssue(backup);
 	const nextSteps = /* @__PURE__ */ new Set();
 	if (backupIssue.code === "missing-server-backup") nextSteps.add(`Run ${formatMatrixCliCommand("verify bootstrap", accountId)} to create a room key backup.`);
-	else if (backupIssue.code === "key-load-failed" || backupIssue.code === "key-not-loaded" || backupIssue.code === "inactive") if (options.recoveryKeyStored) nextSteps.add(`Backup key is not loaded on this device. Run ${formatMatrixCliCommand("verify backup restore", accountId)} to load it and restore old room keys. If restore still cannot load the key, run the shown printf pipeline with the Matrix recovery key env var for this account: ${formatMatrixCliRecoveryKeyStdinCommand("verify backup restore --recovery-key-stdin", accountId)}.`);
-	else nextSteps.add(`Run the shown printf pipeline with the Matrix recovery key env var for this account: ${formatMatrixCliRecoveryKeyStdinCommand("verify backup restore --recovery-key-stdin", accountId)} to load the server backup and store the key for future restores.`);
-	else if (backupIssue.code === "key-mismatch") {
+	else if (backupIssue.code === "key-load-failed" || backupIssue.code === "key-not-loaded" || backupIssue.code === "inactive") {
+		if (options.recoveryKeyStored) nextSteps.add(`Backup key is not loaded on this device. Run ${formatMatrixCliCommand("verify backup restore", accountId)} to load it and restore old room keys. If restore still cannot load the key, run the shown printf pipeline with the Matrix recovery key env var for this account: ${formatMatrixCliRecoveryKeyStdinCommand("verify backup restore --recovery-key-stdin", accountId)}.`);
+		else nextSteps.add(`Run the shown printf pipeline with the Matrix recovery key env var for this account: ${formatMatrixCliRecoveryKeyStdinCommand("verify backup restore --recovery-key-stdin", accountId)} to load the server backup and store the key for future restores.`);
+	} else if (backupIssue.code === "key-mismatch") {
 		nextSteps.add(`Backup key mismatch on this device. Run the shown printf pipeline with the active server backup recovery key env var for this account: ${formatMatrixCliRecoveryKeyStdinCommand("verify backup restore --recovery-key-stdin", accountId)}.`);
 		nextSteps.add(`If you want a fresh backup baseline and accept losing unrecoverable history, run ${formatMatrixCliCommand("verify backup reset --yes", accountId)}. Add --rotate-recovery-key only when the old recovery key should stop unlocking the fresh backup.`);
 	} else if (backupIssue.code === "untrusted-signature") {
@@ -325,7 +328,8 @@ function printGuidance(lines) {
 function printVerificationStatus(status, verbose = false, accountId) {
 	console.log(`Verified by owner: ${status.verified ? "yes" : "no"}`);
 	if (status.serverDeviceKnown === false) console.log("Device issue: current Matrix device is missing from the homeserver device list");
-	const backupIssue = resolveMatrixRoomKeyBackupIssue(resolveBackupStatus(status));
+	const backup = resolveBackupStatus(status);
+	const backupIssue = resolveMatrixRoomKeyBackupIssue(backup);
 	printVerificationBackupSummary(status);
 	if (backupIssue.message) console.log(`Backup issue: ${backupIssue.message}`);
 	console.log(`Recovery key stored: ${status.recoveryKeyStored ? "yes" : "no"}`);
@@ -413,7 +417,7 @@ async function addMatrixAccount(params) {
 		backupVersion: null
 	};
 	if (accountConfig.encryption === true) {
-		const { maybeBootstrapNewEncryptedMatrixAccount } = await import("./setup-bootstrap-D8M7FmcO.js");
+		const { maybeBootstrapNewEncryptedMatrixAccount } = await import("./setup-bootstrap-CUKhebeX.mjs");
 		verificationBootstrap = await maybeBootstrapNewEncryptedMatrixAccount({
 			previousCfg: cfg,
 			cfg: updated,
@@ -438,7 +442,8 @@ async function addMatrixAccount(params) {
 		});
 		let resolvedAvatarUrl = synced.resolvedAvatarUrl;
 		if (synced.convertedAvatarFromHttp && synced.resolvedAvatarUrl) {
-			const withAvatar = updateMatrixAccountConfig(runtime.config.current(), accountId, { avatarUrl: synced.resolvedAvatarUrl });
+			const latestCfg = runtime.config.current();
+			const withAvatar = updateMatrixAccountConfig(latestCfg, accountId, { avatarUrl: synced.resolvedAvatarUrl });
 			await runtime.config.replaceConfigFile({
 				nextConfig: withAvatar,
 				afterWrite: { mode: "auto" }
@@ -514,20 +519,24 @@ function registerMatrixAccountCommands(root) {
 				console.log(`Config path: ${formatMatrixCliText(result.configPath)}`);
 				console.log(`Credentials source: ${result.useEnv ? "MATRIX_* / MATRIX_<ACCOUNT_ID>_* env vars" : "inline config"}`);
 				console.log(`Encryption: ${result.encryptionEnabled ? "enabled" : "disabled"}`);
-				if (result.verificationBootstrap.attempted) if (result.verificationBootstrap.success) {
-					console.log("Matrix verification bootstrap: complete");
-					printTimestamp("Recovery key created at", result.verificationBootstrap.recoveryKeyCreatedAt);
-					if (result.verificationBootstrap.backupVersion) console.log(`Backup version: ${formatMatrixCliText(result.verificationBootstrap.backupVersion)}`);
-				} else console.error(`Matrix verification bootstrap warning: ${formatMatrixCliText(result.verificationBootstrap.error)}`);
+				if (result.verificationBootstrap.attempted) {
+					if (result.verificationBootstrap.success) {
+						console.log("Matrix verification bootstrap: complete");
+						printTimestamp("Recovery key created at", result.verificationBootstrap.recoveryKeyCreatedAt);
+						if (result.verificationBootstrap.backupVersion) console.log(`Backup version: ${formatMatrixCliText(result.verificationBootstrap.backupVersion)}`);
+					} else console.error(`Matrix verification bootstrap warning: ${formatMatrixCliText(result.verificationBootstrap.error)}`);
+				}
 				if (result.deviceHealth.error) console.error(`Matrix device health warning: ${formatMatrixCliText(result.deviceHealth.error)}`);
 				else if (result.deviceHealth.staleOpenClawDeviceIds.length > 0) {
 					const staleDeviceIds = result.deviceHealth.staleOpenClawDeviceIds.map((deviceId) => formatMatrixCliText(deviceId)).join(", ");
 					console.log(`Matrix device hygiene warning: stale OpenClaw devices detected (${staleDeviceIds}). Run ${formatMatrixCliCommand("devices prune-stale", result.accountId)}.`);
 				}
-				if (result.profile.attempted) if (result.profile.error) console.error(`Profile sync warning: ${formatMatrixCliText(result.profile.error)}`);
-				else {
-					console.log(`Profile sync: name ${result.profile.displayNameUpdated ? "updated" : "unchanged"}, avatar ${result.profile.avatarUpdated ? "updated" : "unchanged"}`);
-					if (result.profile.convertedAvatarFromHttp && result.profile.resolvedAvatarUrl) console.log(`Avatar converted and saved as: ${formatMatrixCliText(result.profile.resolvedAvatarUrl)}`);
+				if (result.profile.attempted) {
+					if (result.profile.error) console.error(`Profile sync warning: ${formatMatrixCliText(result.profile.error)}`);
+					else {
+						console.log(`Profile sync: name ${result.profile.displayNameUpdated ? "updated" : "unchanged"}, avatar ${result.profile.avatarUpdated ? "updated" : "unchanged"}`);
+						if (result.profile.convertedAvatarFromHttp && result.profile.resolvedAvatarUrl) console.log(`Avatar converted and saved as: ${formatMatrixCliText(result.profile.resolvedAvatarUrl)}`);
+					}
 				}
 				const bindHint = `openclaw agents bind --agent <id> --bind matrix:${result.accountId}`;
 				console.log(`Bind this account to an agent: ${bindHint}`);
@@ -596,8 +605,8 @@ function registerMatrixDeviceCommands(root) {
 }
 //#endregion
 //#region extensions/matrix/src/cli-direct.ts
-const loadMatrixActionClientModule = createLazyRuntimeModule(() => import("./client-CZ_JvrO0.js").then((n) => n.t));
-const loadMatrixDirectManagementModule = createLazyRuntimeModule(() => import("./send-BL_iH5Ox.js").then((n) => n.x));
+const loadMatrixActionClientModule = createLazyRuntimeModule(() => import("./client-CpHMD-C2.mjs").then((n) => n.t));
+const loadMatrixDirectManagementModule = createLazyRuntimeModule(() => import("./send-SmBzUhD-.mjs").then((n) => n.x));
 function printDirectRoomCandidate(room) {
 	const members = room.joinedMembers === null ? "unavailable" : room.joinedMembers.map((member) => formatMatrixCliText(member)).join(", ") || "none";
 	console.log(`- ${formatMatrixCliText(room.roomId)} [${room.source}] strict=${room.strict ? "yes" : "no"} joined=${members}`);

package/dist/{cli-metadata-Ddx_y4Os.js → .setup/cli-metadata-B_y2Z5Np.mjs}

@@ -2,7 +2,7 @@ import { definePluginEntry } from "openclaw/plugin-sdk/plugin-entry";
 //#region extensions/matrix/src/cli-metadata.ts
 function registerMatrixCliMetadata(api) {
 	api.registerCli(async ({ program }) => {
-		const { registerMatrixCli } = await import("./cli-DRVtgrq5.js");
+		const { registerMatrixCli } = await import("./cli-CyuDGiIr.mjs");
 		registerMatrixCli({ program });
 	}, { descriptors: [{
 		name: "matrix",

package/dist/{client-CZ_JvrO0.js → .setup/client-CpHMD-C2.mjs}

@@ -1,6 +1,6 @@
-import { t as __exportAll } from "./rolldown-runtime-8H4AJuhK.js";
-import { b as resolveMatrixRoomId } from "./send-BL_iH5Ox.js";
-import { n as withResolvedRuntimeMatrixClient } from "./client-bootstrap-D8irSL2i.js";
+import { t as __exportAll } from "./rolldown-runtime-8H4AJuhK.mjs";
+import { b as resolveMatrixRoomId } from "./send-SmBzUhD-.mjs";
+import { n as withResolvedRuntimeMatrixClient } from "./client-bootstrap-Cb1tHsT4.mjs";
 //#region extensions/matrix/src/matrix/actions/client.ts
 var client_exports = /* @__PURE__ */ __exportAll({
 	withResolvedActionClient: () => withResolvedActionClient,

package/dist/{client-kSi51NKp.js → .setup/client-DvcYcTSy.mjs}

@@ -1,11 +1,11 @@
-import { t as __exportAll } from "./rolldown-runtime-8H4AJuhK.js";
-import { a as resolveMatrixDefaultOrOnlyAccountId, c as resolveScopedMatrixEnvConfig, l as resolveMatrixAccountStringValues, n as requiresExplicitMatrixDefaultAccount, o as resolveGlobalMatrixEnvConfig } from "./account-selection-C8nnBTxi.js";
-import { t as getMatrixScopedEnvVarNames } from "./env-vars-dGqak9dN.js";
-import { o as resolveMatrixBaseConfig, r as listNormalizedMatrixAccountIds, t as findMatrixAccountConfig } from "./account-config-CRsKoMqJ.js";
-import { t as resolveMatrixConfigFieldPath } from "./config-paths-CnREYb1Y.js";
-import { t as resolveValidatedMatrixHomeserverUrl } from "./url-validation-GRHde6lq.js";
-import { d as writeStorageMeta, l as resolveMatrixStoragePaths, r as maybeMigrateLegacyStorage, s as repairCurrentTokenStorageMetaDeviceId } from "./storage-BsGuHngK.js";
-import { n as LogService } from "./logger-B_71hN6W.js";
+import { t as __exportAll } from "./rolldown-runtime-8H4AJuhK.mjs";
+import { a as resolveMatrixDefaultOrOnlyAccountId, c as resolveScopedMatrixEnvConfig, l as resolveMatrixAccountStringValues, n as requiresExplicitMatrixDefaultAccount, o as resolveGlobalMatrixEnvConfig } from "./account-selection-DZMazUgX.mjs";
+import { t as getMatrixScopedEnvVarNames } from "./env-vars-dGqak9dN.mjs";
+import { o as resolveMatrixBaseConfig, r as listNormalizedMatrixAccountIds, t as findMatrixAccountConfig } from "./account-config-CRsKoMqJ.mjs";
+import { t as resolveMatrixConfigFieldPath } from "./config-paths-CnREYb1Y.mjs";
+import { t as resolveValidatedMatrixHomeserverUrl } from "./url-validation-GRHde6lq.mjs";
+import { d as writeStorageMeta, l as resolveMatrixStoragePaths, r as maybeMigrateLegacyStorage, s as repairCurrentTokenStorageMetaDeviceId } from "./storage-B-nf2ReN.mjs";
+import { n as LogService } from "./logger-B3tfcB-m.mjs";
 import { createLazyRuntimeModule } from "openclaw/plugin-sdk/lazy-runtime";
 import { normalizeOptionalString } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { DEFAULT_ACCOUNT_ID, normalizeAccountId, normalizeOptionalAccountId } from "openclaw/plugin-sdk/account-id";
@@ -18,15 +18,16 @@ import { requireRuntimeConfig } from "openclaw/plugin-sdk/plugin-config-runtime"
 import { retryAsync } from "openclaw/plugin-sdk/retry-runtime";
 import { sleepWithAbort } from "openclaw/plugin-sdk/runtime-env";
 import { createDeferred } from "openclaw/plugin-sdk/extension-shared";
+import { AsyncLocalStorage } from "node:async_hooks";
 //#region extensions/matrix/src/matrix/client/config.ts
-const loadMatrixAuthClientDeps = createLazyRuntimeModule(() => Promise.all([import("./sdk-TZYyo0XQ.js"), import("./logging-DRjvUOIh.js").then((n) => n.n)]).then(([sdkModule, loggingModule]) => ({
+const loadMatrixAuthClientDeps = createLazyRuntimeModule(() => Promise.all([import("./sdk-DoObvds0.mjs").then((n) => n.t), import("./logging-CkohOZwO.mjs").then((n) => n.n)]).then(([sdkModule, loggingModule]) => ({
 	MatrixClient: sdkModule.MatrixClient,
 	ensureMatrixSdkLoggingConfigured: loggingModule.ensureMatrixSdkLoggingConfigured
 })));
 const MATRIX_AUTH_REQUEST_RETRY_RE = /\b(fetch failed|econnreset|econnrefused|enotfound|etimedout|ehostunreach|enetunreach|eai_again|und_err_|socket hang up|network|headers timeout|body timeout|connect timeout)\b/i;
-const loadMatrixCredentialsReadDeps = createLazyRuntimeModule(() => import("./credentials-read-B37cQknZ.js").then((n) => n.r));
-const loadMatrixCredentialsWriteRuntime = createLazyRuntimeModule(() => import("./credentials-write.runtime-nAV2-5uR.js"));
-const loadMatrixSecretInputDeps = createLazyRuntimeModule(() => import("./config-secret-input.runtime-CwsP3--c.js"));
+const loadMatrixCredentialsReadDeps = createLazyRuntimeModule(() => import("./credentials-read-DaemdXHy.mjs").then((n) => n.r));
+const loadMatrixCredentialsWriteRuntime = createLazyRuntimeModule(() => import("./credentials-write.runtime-D83HEGcL.mjs"));
+const loadMatrixSecretInputDeps = createLazyRuntimeModule(() => import("./config-secret-input.runtime-CwsP3--c.mjs"));
 function shouldRetryMatrixAuthRequest(err) {
 	return MATRIX_AUTH_REQUEST_RETRY_RE.test(formatErrorMessage(err));
 }
@@ -77,12 +78,13 @@ function readMatrixEnvSecretRef(params) {
 function readMatrixConfigString(params) {
 	const ref = coerceSecretRef(params.value, params.cfg.secrets?.defaults);
 	if (params.suppressSecretRef && ref) return "";
+	const value = params.allowEnvSecretRef ? ref?.source === "env" ? readMatrixEnvSecretRef({
+		ref,
+		cfg: params.cfg,
+		env: params.env
+	}) ?? params.value : ref ? "" : params.value : params.value;
 	return normalizeResolvedSecretInputString({
-		value: params.allowEnvSecretRef ? ref?.source === "env" ? readMatrixEnvSecretRef({
-			ref,
-			cfg: params.cfg,
-			env: params.env
-		}) ?? params.value : ref ? "" : params.value : params.value,
+		value,
 		path: params.path,
 		defaults: params.cfg.secrets?.defaults
 	}) ?? "";
@@ -414,7 +416,7 @@ async function backfillMatrixAuthDeviceIdAfterStartup(params) {
 //#endregion
 //#region extensions/matrix/src/matrix/client/create-client.ts
 var create_client_exports = /* @__PURE__ */ __exportAll({ createMatrixClient: () => createMatrixClient });
-const loadMatrixCreateClientRuntimeDeps = createLazyRuntimeModule(() => Promise.all([import("./sdk-TZYyo0XQ.js"), import("./logging-DRjvUOIh.js").then((n) => n.n)]).then(([sdkModule, loggingModule]) => ({
+const loadMatrixCreateClientRuntimeDeps = createLazyRuntimeModule(() => Promise.all([import("./sdk-DoObvds0.mjs").then((n) => n.t), import("./logging-CkohOZwO.mjs").then((n) => n.n)]).then(([sdkModule, loggingModule]) => ({
 	MatrixClient: sdkModule.MatrixClient,
 	ensureMatrixSdkLoggingConfigured: loggingModule.ensureMatrixSdkLoggingConfigured
 })));
@@ -464,6 +466,44 @@ async function createMatrixClient(params) {
 	});
 }
 //#endregion
+//#region extensions/matrix/src/matrix/monitor/task-runner.ts
+const monitorTaskSignal = new AsyncLocalStorage();
+function getMatrixMonitorTaskSignal() {
+	return monitorTaskSignal.getStore();
+}
+function createMatrixMonitorTaskRunner(params) {
+	const inFlight = /* @__PURE__ */ new Map();
+	let closed = false;
+	const runDetachedTask = (label, task) => {
+		if (closed) return Promise.resolve();
+		const controller = new AbortController();
+		const trackedTask = monitorTaskSignal.run(controller.signal, () => Promise.resolve().then(task)).catch((error) => {
+			const message = String(error);
+			params.logVerboseMessage(`matrix: ${label} failed (${message})`);
+			params.logger.warn("matrix background task failed", {
+				task: label,
+				error: message
+			});
+		}).finally(() => {
+			controller.abort();
+			inFlight.delete(trackedTask);
+		});
+		inFlight.set(trackedTask, controller);
+		return trackedTask;
+	};
+	const waitForIdle = async () => {
+		while (inFlight.size > 0) await Promise.allSettled(Array.from(inFlight.keys()));
+	};
+	return {
+		close: () => {
+			closed = true;
+			for (const controller of inFlight.values()) controller.abort();
+		},
+		runDetachedTask,
+		waitForIdle
+	};
+}
+//#endregion
 //#region extensions/matrix/src/matrix/startup-abort.ts
 function createMatrixStartupAbortError() {
 	const error = /* @__PURE__ */ new Error("Matrix startup aborted");
@@ -590,6 +630,7 @@ async function resolveSharedMatrixAuth(params) {
 }
 async function resolveOpenSharedMatrixClientState(params) {
 	const auth = await resolveSharedMatrixAuth(params);
+	throwIfMatrixStartupAborted(params.abortSignal);
 	const key = buildSharedClientKey(auth);
 	while (true) {
 		const existing = sharedClientStates.get(key);
@@ -773,8 +814,8 @@ function createSharedMatrixClientLease(state, role) {
 				leaseState.releasePromise = retireMonitorLease(state, leaseState);
 				return leaseState.releasePromise;
 			}
-			if (!(finalMonitor || state.leases.size === 0)) {
-				leaseState.releasePromise = Promise.resolve();
+			if (!(state.phase === "open" && (finalMonitor || state.leases.size === 0))) {
+				leaseState.releasePromise = state.poisonError ? Promise.reject(state.poisonError) : Promise.resolve();
 				return leaseState.releasePromise;
 			}
 			leaseState.releasePromise = beginGenerationRetirement({
@@ -786,11 +827,23 @@ function createSharedMatrixClientLease(state, role) {
 	};
 }
 async function acquireSharedMatrixClient(params = {}) {
+	const taskSignal = getMatrixMonitorTaskSignal();
+	const abortSignal = taskSignal && params.abortSignal ? AbortSignal.any([taskSignal, params.abortSignal]) : taskSignal ?? params.abortSignal;
+	const acquisition = {
+		...params,
+		abortSignal
+	};
 	while (true) {
-		const lease = createSharedMatrixClientLease(await resolveOpenSharedMatrixClientState(params), params.role ?? "transient");
+		throwIfMatrixStartupAborted(abortSignal);
+		const state = await resolveOpenSharedMatrixClientState(acquisition);
+		if (abortSignal?.aborted) {
+			if (state.phase === "open" && state.leases.size === 0) await beginGenerationRetirement({ state });
+			throwIfMatrixStartupAborted(abortSignal);
+		}
+		const lease = createSharedMatrixClientLease(state, params.role ?? "transient");
 		if (!lease) continue;
 		if (params.startClient !== false) try {
-			await lease.start(params.abortSignal);
+			await lease.start(abortSignal);
 		} catch (error) {
 			await lease.release({ mode: "stop" }).catch(() => void 0);
 			throw error;
@@ -805,4 +858,4 @@ var client_exports = /* @__PURE__ */ __exportAll({
 	resolveMatrixAuthContext: () => resolveMatrixAuthContext
 });
 //#endregion
-export { throwIfMatrixStartupAborted as a, resolveMatrixAuth as c, isMatrixStartupAbortError as i, resolveMatrixAuthContext as l, acquireSharedMatrixClient as n, createMatrixClient as o, createMatrixStartupAbortError as r, backfillMatrixAuthDeviceIdAfterStartup as s, client_exports as t };
+export { throwIfMatrixStartupAborted as a, backfillMatrixAuthDeviceIdAfterStartup as c, isMatrixStartupAbortError as i, resolveMatrixAuth as l, acquireSharedMatrixClient as n, createMatrixMonitorTaskRunner as o, createMatrixStartupAbortError as r, createMatrixClient as s, client_exports as t, resolveMatrixAuthContext as u };

package/dist/{client-bootstrap-D8irSL2i.js → .setup/client-bootstrap-Cb1tHsT4.mjs}

@@ -1,5 +1,5 @@
-import { t as __exportAll } from "./rolldown-runtime-8H4AJuhK.js";
-import { t as isBunRuntime } from "./runtime-BefyhPWv.js";
+import { t as __exportAll } from "./rolldown-runtime-8H4AJuhK.mjs";
+import { t as isBunRuntime } from "./runtime-BefyhPWv.mjs";
 import { createLazyRuntimeModule } from "openclaw/plugin-sdk/lazy-runtime";
 import { requireRuntimeConfig } from "openclaw/plugin-sdk/plugin-config-runtime";
 //#region extensions/matrix/src/matrix/client-bootstrap.ts
@@ -7,7 +7,7 @@ var client_bootstrap_exports = /* @__PURE__ */ __exportAll({
 	resolveRuntimeMatrixClientWithReadiness: () => resolveRuntimeMatrixClientWithReadiness,
 	withResolvedRuntimeMatrixClient: () => withResolvedRuntimeMatrixClient
 });
-const loadMatrixSharedClientRuntimeDeps = createLazyRuntimeModule(() => import("./client-kSi51NKp.js").then((n) => n.t).then((clientModule) => ({
+const loadMatrixSharedClientRuntimeDeps = createLazyRuntimeModule(() => import("./client-DvcYcTSy.mjs").then((n) => n.t).then((clientModule) => ({
 	acquireSharedMatrixClient: clientModule.acquireSharedMatrixClient,
 	resolveMatrixAuthContext: clientModule.resolveMatrixAuthContext
 })));

package/dist/{client-support-DLj4vDeu.js → .setup/client-support-Bn9Bk0-H.mjs}

@@ -1,4 +1,4 @@
-import { t as formatMatrixErrorReason } from "./errors-DKVS3_DO.js";
+import { t as formatMatrixErrorReason } from "./errors-DKVS3_DO.mjs";
 //#region extensions/matrix/src/matrix/sync-state.ts
 function isMatrixReadySyncState(state) {
 	return state === "PREPARED" || state === "SYNCING" || state === "CATCHUP";

package/dist/{config-update-DC0fWBxc.js → .setup/config-update-B_4qZ5bV.mjs}

@@ -1,6 +1,6 @@
-import { t as __exportAll } from "./rolldown-runtime-8H4AJuhK.js";
-import { t as findMatrixAccountConfig } from "./account-config-CRsKoMqJ.js";
-import { n as resolveMatrixConfigPath$1, r as shouldStoreMatrixAccountAtTopLevel, t as resolveMatrixConfigFieldPath } from "./config-paths-CnREYb1Y.js";
+import { t as __exportAll } from "./rolldown-runtime-8H4AJuhK.mjs";
+import { t as findMatrixAccountConfig } from "./account-config-CRsKoMqJ.mjs";
+import { n as resolveMatrixConfigPath$1, r as shouldStoreMatrixAccountAtTopLevel, t as resolveMatrixConfigFieldPath } from "./config-paths-CnREYb1Y.mjs";
 import { DEFAULT_ACCOUNT_ID, normalizeAccountId } from "openclaw/plugin-sdk/account-id";
 import { coerceSecretRef, normalizeSecretInputString } from "openclaw/plugin-sdk/secret-input";
 import { resolveOptionalIntegerOption } from "openclaw/plugin-sdk/number-runtime";
@@ -66,11 +66,13 @@ function updateMatrixAccountConfig(cfg, accountId, patch) {
 	const matrix = cfg.channels?.matrix ?? {};
 	const normalizedAccountId = normalizeAccountId(accountId);
 	const nextAccount = { ...findMatrixAccountConfig(cfg, normalizedAccountId) ?? (normalizedAccountId === DEFAULT_ACCOUNT_ID ? matrix : {}) };
-	if (patch.name !== void 0) if (patch.name === null) delete nextAccount.name;
-	else {
-		const trimmed = patch.name.trim();
-		if (trimmed) nextAccount.name = trimmed;
-		else delete nextAccount.name;
+	if (patch.name !== void 0) {
+		if (patch.name === null) delete nextAccount.name;
+		else {
+			const trimmed = patch.name.trim();
+			if (trimmed) nextAccount.name = trimmed;
+			else delete nextAccount.name;
+		}
 	}
 	if (typeof patch.enabled === "boolean") nextAccount.enabled = patch.enabled;
 	else if (typeof nextAccount.enabled !== "boolean") nextAccount.enabled = true;
@@ -89,31 +91,47 @@ function updateMatrixAccountConfig(cfg, accountId, patch) {
 		if (Object.keys(nextNetwork).length > 0) nextAccount.network = nextNetwork;
 		else delete nextAccount.network;
 	}
-	if (patch.initialSyncLimit !== void 0) if (patch.initialSyncLimit === null) delete nextAccount.initialSyncLimit;
-	else {
-		const initialSyncLimit = resolveOptionalIntegerOption(patch.initialSyncLimit, { min: 0 });
-		if (initialSyncLimit === void 0) delete nextAccount.initialSyncLimit;
-		else nextAccount.initialSyncLimit = initialSyncLimit;
-	}
-	if (patch.encryption !== void 0) if (patch.encryption === null) delete nextAccount.encryption;
-	else nextAccount.encryption = patch.encryption;
-	if (patch.allowBots !== void 0) if (patch.allowBots === null) delete nextAccount.allowBots;
-	else nextAccount.allowBots = patch.allowBots;
-	if (patch.autoJoin !== void 0) if (patch.autoJoin === null) delete nextAccount.autoJoin;
-	else nextAccount.autoJoin = patch.autoJoin;
+	if (patch.initialSyncLimit !== void 0) {
+		if (patch.initialSyncLimit === null) delete nextAccount.initialSyncLimit;
+		else {
+			const initialSyncLimit = resolveOptionalIntegerOption(patch.initialSyncLimit, { min: 0 });
+			if (initialSyncLimit === void 0) delete nextAccount.initialSyncLimit;
+			else nextAccount.initialSyncLimit = initialSyncLimit;
+		}
+	}
+	if (patch.encryption !== void 0) {
+		if (patch.encryption === null) delete nextAccount.encryption;
+		else nextAccount.encryption = patch.encryption;
+	}
+	if (patch.allowBots !== void 0) {
+		if (patch.allowBots === null) delete nextAccount.allowBots;
+		else nextAccount.allowBots = patch.allowBots;
+	}
+	if (patch.autoJoin !== void 0) {
+		if (patch.autoJoin === null) delete nextAccount.autoJoin;
+		else nextAccount.autoJoin = patch.autoJoin;
+	}
 	applyNullableArrayField(nextAccount, "autoJoinAllowlist", patch.autoJoinAllowlist);
-	if (patch.dm !== void 0) if (patch.dm === null) delete nextAccount.dm;
-	else nextAccount.dm = cloneMatrixDmConfig({
-		...nextAccount.dm,
-		...patch.dm
-	});
-	if (patch.groupPolicy !== void 0) if (patch.groupPolicy === null) delete nextAccount.groupPolicy;
-	else nextAccount.groupPolicy = patch.groupPolicy;
+	if (patch.dm !== void 0) {
+		if (patch.dm === null) delete nextAccount.dm;
+		else nextAccount.dm = cloneMatrixDmConfig({
+			...nextAccount.dm,
+			...patch.dm
+		});
+	}
+	if (patch.groupPolicy !== void 0) {
+		if (patch.groupPolicy === null) delete nextAccount.groupPolicy;
+		else nextAccount.groupPolicy = patch.groupPolicy;
+	}
 	applyNullableArrayField(nextAccount, "groupAllowFrom", patch.groupAllowFrom);
-	if (patch.groups !== void 0) if (patch.groups === null) delete nextAccount.groups;
-	else nextAccount.groups = cloneMatrixRoomMap(patch.groups);
-	if (patch.rooms !== void 0) if (patch.rooms === null) delete nextAccount.rooms;
-	else nextAccount.rooms = cloneMatrixRoomMap(patch.rooms);
+	if (patch.groups !== void 0) {
+		if (patch.groups === null) delete nextAccount.groups;
+		else nextAccount.groups = cloneMatrixRoomMap(patch.groups);
+	}
+	if (patch.rooms !== void 0) {
+		if (patch.rooms === null) delete nextAccount.rooms;
+		else nextAccount.rooms = cloneMatrixRoomMap(patch.rooms);
+	}
 	const nextAccounts = Object.fromEntries(Object.entries(matrix.accounts ?? {}).filter(([rawAccountId]) => rawAccountId === normalizedAccountId || normalizeAccountId(rawAccountId) !== normalizedAccountId));
 	if (shouldStoreMatrixAccountAtTopLevel(cfg, normalizedAccountId)) {
 		const { accounts: _ignoredAccounts, defaultAccount } = matrix;

package/dist/{credentials-BdAaWuiR.js → .setup/credentials-B2roKThT.mjs}

@@ -1,17 +1,13 @@
-import { i as normalizeMatrixStoredCredentials, n as isMatrixCredentialRevocation, r as matrixCredentialsStoreKey } from "./credentials-state-B3cuUFwZ.js";
-import { a as resolveMatrixCredentialsPath, r as resolveMatrixCredentialsDir } from "./storage-paths-gUmSydsW.js";
-import { a as openMatrixCredentialsStore, i as loadMatrixCredentials, n as credentialsMatchConfig, t as clearMatrixCredentials } from "./credentials-read-B37cQknZ.js";
+import { i as normalizeMatrixStoredCredentials, n as isMatrixCredentialRevocation, r as matrixCredentialsStoreKey } from "./credentials-state-B3cuUFwZ.mjs";
+import { a as resolveMatrixCredentialsPath, r as resolveMatrixCredentialsDir } from "./storage-paths-gUmSydsW.mjs";
+import { a as openMatrixCredentialsStore, i as loadMatrixCredentials, n as credentialsMatchConfig, t as clearMatrixCredentials } from "./credentials-read-DaemdXHy.mjs";
 import { normalizeAccountId } from "openclaw/plugin-sdk/account-id";
 //#region extensions/matrix/src/matrix/credentials.ts
-function requireCredentialStoreUpdate(store) {
-	if (!store.update) throw new Error("Matrix credentials require atomic plugin-state updates");
-	return store.update;
-}
 async function saveMatrixCredentials(credentials, env = process.env, accountId) {
 	const normalizedAccountId = normalizeAccountId(accountId);
 	const store = openMatrixCredentialsStore(env);
 	const now = (/* @__PURE__ */ new Date()).toISOString();
-	requireCredentialStoreUpdate(store)(matrixCredentialsStoreKey(normalizedAccountId), (current) => {
+	store.update(matrixCredentialsStoreKey(normalizedAccountId), (current) => {
 		const existing = normalizeMatrixStoredCredentials(current, normalizedAccountId);
 		return {
 			accountId: normalizedAccountId,
@@ -29,7 +25,7 @@ async function saveBackfilledMatrixDeviceId(credentials, env = process.env, acco
 	const store = openMatrixCredentialsStore(env);
 	const now = (/* @__PURE__ */ new Date()).toISOString();
 	let result = "saved";
-	requireCredentialStoreUpdate(store)(matrixCredentialsStoreKey(normalizedAccountId), (current) => {
+	store.update(matrixCredentialsStoreKey(normalizedAccountId), (current) => {
 		if (isMatrixCredentialRevocation(current, normalizedAccountId)) {
 			result = "skipped";
 			return current;
@@ -53,7 +49,7 @@ async function saveBackfilledMatrixDeviceId(credentials, env = process.env, acco
 }
 async function touchMatrixCredentials(env = process.env, accountId) {
 	const normalizedAccountId = normalizeAccountId(accountId);
-	requireCredentialStoreUpdate(openMatrixCredentialsStore(env))(matrixCredentialsStoreKey(normalizedAccountId), (current) => {
+	openMatrixCredentialsStore(env).update(matrixCredentialsStoreKey(normalizedAccountId), (current) => {
 		if (isMatrixCredentialRevocation(current, normalizedAccountId)) return current;
 		const existing = normalizeMatrixStoredCredentials(current, normalizedAccountId);
 		return existing ? {

package/dist/{credentials-read-B37cQknZ.js → .setup/credentials-read-DaemdXHy.mjs}

@@ -1,7 +1,7 @@
-import { t as __exportAll } from "./rolldown-runtime-8H4AJuhK.js";
-import { n as getOptionalMatrixRuntime } from "./runtime-6S3DNFNv.js";
-import { i as normalizeMatrixStoredCredentials, r as matrixCredentialsStoreKey, t as MATRIX_CREDENTIALS_NAMESPACE } from "./credentials-state-B3cuUFwZ.js";
-import { a as resolveMatrixCredentialsPath, r as resolveMatrixCredentialsDir } from "./storage-paths-gUmSydsW.js";
+import { t as __exportAll } from "./rolldown-runtime-8H4AJuhK.mjs";
+import { n as getOptionalMatrixRuntime } from "./runtime-6S3DNFNv.mjs";
+import { i as normalizeMatrixStoredCredentials, r as matrixCredentialsStoreKey, t as MATRIX_CREDENTIALS_NAMESPACE } from "./credentials-state-B3cuUFwZ.mjs";
+import { a as resolveMatrixCredentialsPath, r as resolveMatrixCredentialsDir } from "./storage-paths-gUmSydsW.mjs";
 import { normalizeAccountId } from "openclaw/plugin-sdk/account-id";
 import { createPluginStateSyncKeyedStore } from "openclaw/plugin-sdk/plugin-state-store-runtime";
 //#region extensions/matrix/src/matrix/credentials-read.ts
@@ -15,19 +15,21 @@ var credentials_read_exports = /* @__PURE__ */ __exportAll({
 });
 function openMatrixCredentialsStore(env = process.env) {
 	const runtime = getOptionalMatrixRuntime();
+	const resolvedEnv = env.OPENCLAW_STATE_DIR?.trim() || !runtime ? env : {
+		...env,
+		OPENCLAW_STATE_DIR: runtime.state.resolveStateDir(env)
+	};
 	return createPluginStateSyncKeyedStore("matrix", {
 		namespace: MATRIX_CREDENTIALS_NAMESPACE,
 		maxEntries: 256,
 		overflowPolicy: "reject-new",
-		env: env.OPENCLAW_STATE_DIR?.trim() || !runtime ? env : {
-			...env,
-			OPENCLAW_STATE_DIR: runtime.state.resolveStateDir(env)
-		}
+		env: resolvedEnv
 	});
 }
 function loadMatrixCredentials(env = process.env, accountId) {
 	const normalizedAccountId = normalizeAccountId(accountId);
-	const parsed = normalizeMatrixStoredCredentials(openMatrixCredentialsStore(env).lookup(matrixCredentialsStoreKey(accountId)), normalizedAccountId);
+	const stored = openMatrixCredentialsStore(env).lookup(matrixCredentialsStoreKey(accountId));
+	const parsed = normalizeMatrixStoredCredentials(stored, normalizedAccountId);
 	if (!parsed || parsed.accountId !== normalizedAccountId) return null;
 	const { accountId: _accountId, ...credentials } = parsed;
 	return credentials;

package/dist/{credentials-write.runtime-nAV2-5uR.js → .setup/credentials-write.runtime-D83HEGcL.mjs}

@@ -1,6 +1,6 @@
 import { createLazyRuntimeModule } from "openclaw/plugin-sdk/lazy-runtime";
 //#region extensions/matrix/src/matrix/credentials-write.runtime.ts
-const loadMatrixCredentialsRuntime = createLazyRuntimeModule(() => import("./credentials-BdAaWuiR.js"));
+const loadMatrixCredentialsRuntime = createLazyRuntimeModule(() => import("./credentials-B2roKThT.mjs"));
 async function saveMatrixCredentials(...args) {
 	return (await loadMatrixCredentialsRuntime()).saveMatrixCredentials(...args);
 }

package/dist/{crypto-runtime-C4WDYxlP.js → .setup/crypto-runtime-Ch4WOG1y.mjs}

@@ -1,13 +1,13 @@
-import { t as ensureMatrixCryptoRuntime } from "./deps-CcVJfvRM.js";
-import { n as LogService, r as noop } from "./logger-B_71hN6W.js";
-import { i as restoreIdbFromDisk, n as persistIdbToDisk } from "./idb-persistence-DfgW720p.js";
-import { n as isRepairableSecretStorageAccessError } from "./recovery-key-store-CognuDys.js";
+import { t as ensureMatrixCryptoRuntime } from "./deps-mtxF2mHI.mjs";
+import { n as LogService, r as noop } from "./logger-B3tfcB-m.mjs";
+import { i as restoreIdbFromDisk, n as persistIdbToDisk } from "./idb-persistence-BiscLSq4.mjs";
+import { n as isRepairableSecretStorageAccessError } from "./sdk-DoObvds0.mjs";
 import { createLazyRuntimeModule } from "openclaw/plugin-sdk/lazy-runtime";
 import { formatErrorMessage, toStringifiedError } from "openclaw/plugin-sdk/error-runtime";
 import { resolveDateTimestampMs, resolveTimestampMsToIsoString } from "openclaw/plugin-sdk/number-runtime";
-import { MatrixEventEvent } from "matrix-js-sdk/lib/matrix.js";
 import { IDBDatabase } from "fake-indexeddb";
 import { setTimeout as setTimeout$1 } from "node:timers/promises";
+import { MatrixEventEvent } from "matrix-js-sdk/lib/matrix.js";
 import { VerificationMethod } from "matrix-js-sdk/lib/types.js";
 import "fake-indexeddb/auto";
 import { CryptoEvent } from "matrix-js-sdk/lib/crypto-api/CryptoEvent.js";
@@ -331,7 +331,7 @@ var MatrixCryptoBootstrapper = class {
 };
 //#endregion
 //#region extensions/matrix/src/matrix/sdk/crypto-facade.ts
-const matrixCryptoNodeRuntimeLoader = createLazyRuntimeModule(() => import("./crypto-node.runtime-6Aj_ltHQ.js"));
+const matrixCryptoNodeRuntimeLoader = createLazyRuntimeModule(() => import("./crypto-node.runtime-6Aj_ltHQ.mjs"));
 async function loadMatrixCryptoNodeRuntime() {
 	try {
 		return await matrixCryptoNodeRuntimeLoader();
@@ -450,7 +450,7 @@ const MATRIX_DECRYPT_RETRY_BASE_DELAY_MS = 1500;
 const MATRIX_DECRYPT_RETRY_MAX_DELAY_MS = 3e4;
 const MATRIX_DECRYPT_RETRY_MAX_ATTEMPTS = 8;
 const MATRIX_DECRYPT_DRAIN_TIMEOUT_MS = 5e3;
-const MATRIX_DECRYPT_EXHAUSTED_RETRY_TTL_MS = 60 * 6e4;
+const MATRIX_DECRYPT_EXHAUSTED_RETRY_TTL_MS = 36e5;
 const MATRIX_DECRYPT_EXHAUSTED_RETRY_MAX_ENTRIES = 512;
 function resolveDecryptRetryKey(roomId, eventId) {
 	if (!roomId || !eventId) return null;
@@ -770,7 +770,7 @@ function isMatrixVerificationPhase(value) {
 	return typeof value === "number" && MATRIX_VERIFICATION_PHASES.has(value);
 }
 const MAX_TRACKED_VERIFICATION_SESSIONS = 256;
-const TERMINAL_SESSION_RETENTION_MS = 1440 * 60 * 1e3;
+const TERMINAL_SESSION_RETENTION_MS = 864e5;
 const SAS_AUTO_CONFIRM_DELAY_MS = 3e4;
 var MatrixVerificationManager = class {
 	constructor(opts = {}) {

package/dist/{deps-CcVJfvRM.js → .setup/deps-mtxF2mHI.mjs}

@@ -10,7 +10,7 @@ const REQUIRED_MATRIX_PACKAGES = [
 	"@matrix-org/matrix-sdk-crypto-wasm"
 ];
 const MIN_MATRIX_CRYPTO_NATIVE_BINDING_BYTES = 1e6;
-const MATRIX_COMMAND_OUTPUT_TAIL_BYTES = 64 * 1024;
+const MATRIX_COMMAND_OUTPUT_TAIL_BYTES = 65536;
 function resolveMissingMatrixPackages(resolveFn) {
 	const resolve = resolveFn ?? defaultResolveFn;
 	return REQUIRED_MATRIX_PACKAGES.filter((pkg) => {

package/dist/{device-health-B4-YXtJR.js → .setup/device-health-CWOuIirq.mjs}

@@ -1,4 +1,4 @@
-import { t as __exportAll } from "./rolldown-runtime-8H4AJuhK.js";
+import { t as __exportAll } from "./rolldown-runtime-8H4AJuhK.mjs";
 //#region extensions/matrix/src/matrix/device-health.ts
 var device_health_exports = /* @__PURE__ */ __exportAll({
 	isOpenClawManagedMatrixDevice: () => isOpenClawManagedMatrixDevice,