@openclaw/matrix 2026.8.2 → 2026.9.1

package/dist/api.js

@@ -1,9 +1,9 @@
 import { a as resolveMatrixDefaultOrOnlyAccountId, i as resolveMatrixChannelConfig, n as requiresExplicitMatrixDefaultAccount, r as resolveConfiguredMatrixAccountIds, t as findMatrixAccountEntry } from "./account-selection-DA-jfx22.js";
 import { n as listMatrixEnvAccountIds, r as resolveMatrixEnvAccountToken, t as getMatrixScopedEnvVarNames } from "./env-vars-dGqak9dN.js";
 import { a as resolveMatrixCredentialsPath, i as resolveMatrixCredentialsFilename, n as resolveMatrixAccountStorageRoot, o as resolveMatrixHomeserverKey, r as resolveMatrixCredentialsDir, s as sanitizeMatrixPathSegment, t as hashMatrixAccessToken } from "./storage-paths-gUmSydsW.js";
-import { t as matrixPlugin } from "./channel-D6-ajB_u.js";
-import { n as matrixSetupAdapter, t as createMatrixSetupWizardProxy } from "./setup-core-CZM496H-.js";
+import { t as matrixPlugin } from "./channel-b-jES-oi.js";
+import { n as matrixSetupAdapter, t as createMatrixSetupWizardProxy } from "./setup-core-CEF6exLW.js";
 import { f as setMatrixThreadBindingMaxAgeBySessionKey, n as getMatrixThreadBindingManager, u as setMatrixThreadBindingIdleTimeoutBySessionKey } from "./thread-bindings-shared-oNPiyMWY.js";
-import { n as matrixOnboardingAdapter } from "./setup-surface-DSZtOsWK.js";
-import { t as createMatrixThreadBindingManager } from "./thread-bindings-2HN2AyLu.js";
+import { n as matrixOnboardingAdapter } from "./setup-surface-BSlj1vnL.js";
+import { t as createMatrixThreadBindingManager } from "./thread-bindings-DgxQEB99.js";
 export { createMatrixSetupWizardProxy, createMatrixThreadBindingManager, findMatrixAccountEntry, getMatrixScopedEnvVarNames, getMatrixThreadBindingManager, hashMatrixAccessToken, listMatrixEnvAccountIds, matrixOnboardingAdapter, matrixOnboardingAdapter as matrixSetupWizard, matrixPlugin, matrixSetupAdapter, requiresExplicitMatrixDefaultAccount, resolveConfiguredMatrixAccountIds, resolveMatrixAccountStorageRoot, resolveMatrixChannelConfig, resolveMatrixCredentialsDir, resolveMatrixCredentialsFilename, resolveMatrixCredentialsPath, resolveMatrixDefaultOrOnlyAccountId, resolveMatrixEnvAccountToken, resolveMatrixHomeserverKey, sanitizeMatrixPathSegment, setMatrixThreadBindingIdleTimeoutBySessionKey, setMatrixThreadBindingMaxAgeBySessionKey };

package/dist/{approval-handler.runtime-xcVrZw9o.js → approval-handler.runtime-B_6ytY5I.js}

@@ -1,16 +1,16 @@
 import { i as resolveMatrixAccount } from "./accounts-DR1c4xF_.js";
-import { C as shouldHandleMatrixApprovalRequest, S as isMatrixAnyApprovalClientEnabled } from "./channel-D6-ajB_u.js";
+import { C as shouldHandleMatrixApprovalRequest, S as isMatrixAnyApprovalClientEnabled } from "./channel-b-jES-oi.js";
 import { o as resolveMatrixTargetIdentity } from "./target-ids-Nwx7cMVE.js";
-import { C as repairMatrixDirectRooms, a as sendSingleTextMessageMatrix, n as reactMatrixMessage, r as sendMessageMatrix } from "./send-DfS5ciUL.js";
+import { C as repairMatrixDirectRooms, a as sendSingleTextMessageMatrix, n as reactMatrixMessage, r as sendMessageMatrix } from "./send-DG7Bnj7_.js";
 import { a as unregisterMatrixApprovalReactionTarget, n as listMatrixApprovalReactionBindings, r as registerMatrixApprovalReactionTarget, t as buildMatrixApprovalReactionHint } from "./approval-reactions-1fwEhoK9.js";
-import { n as editMatrixMessage, t as deleteMatrixMessage } from "./messages-DlMQaC02.js";
+import { n as editMatrixMessage, t as deleteMatrixMessage } from "./messages-C1U3b1oN.js";
 import { listMessageReceiptPlatformIds, resolveMessageReceiptPrimaryId } from "openclaw/plugin-sdk/channel-outbound";
 import { normalizeUniqueStringEntries } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { buildChannelApprovalNativeTargetKey } from "openclaw/plugin-sdk/approval-native-runtime";
 import { normalizeAccountId } from "openclaw/plugin-sdk/routing";
 import { createChannelApprovalNativeRuntimeAdapter } from "openclaw/plugin-sdk/approval-handler-runtime";
 import { buildExecApprovalPendingReplyPayload, buildPluginApprovalPendingReplyPayload } from "openclaw/plugin-sdk/approval-reply-runtime";
-import { buildPluginApprovalResolvedReplyPayload } from "openclaw/plugin-sdk/approval-runtime";
+import { buildApprovalPendingReplyPayload, buildPluginApprovalResolvedReplyPayload } from "openclaw/plugin-sdk/approval-runtime";
 import { retryAsync } from "openclaw/plugin-sdk/retry-runtime";
 //#region extensions/matrix/src/approval-handler.runtime.ts
 const MATRIX_APPROVAL_METADATA_KEY = "com.openclaw.approval";
@@ -110,6 +110,13 @@ function buildMatrixApprovalMetadata(params) {
 		...params.view.pluginId != null ? { pluginId: params.view.pluginId } : {},
 		...params.view.toolName != null ? { toolName: params.view.toolName } : {}
 	};
+	if (params.view.approvalKind === "system-agent") return {
+		...base,
+		kind: "system-agent",
+		commandText: params.view.commandText,
+		operationSummary: params.view.operationSummary,
+		...params.view.agentId != null ? { agentId: params.view.agentId } : {}
+	};
 	return {
 		...base,
 		kind: "exec",
@@ -126,7 +133,8 @@ function buildMatrixApprovalMetadata(params) {
 }
 function buildPendingApprovalContent(params) {
 	const allowedDecisions = params.view.actions.map((action) => action.decision);
-	const payload = params.view.approvalKind === "plugin" ? buildPluginApprovalPendingReplyPayload({
+	let payload;
+	if (params.view.approvalKind === "plugin") payload = buildPluginApprovalPendingReplyPayload({
 		request: {
 			approvalKind: "plugin",
 			id: params.view.approvalId,
@@ -144,7 +152,17 @@ function buildPendingApprovalContent(params) {
 		},
 		nowMs: params.nowMs,
 		allowedDecisions
-	}) : buildExecApprovalPendingReplyPayload({
+	});
+	else if (params.view.approvalKind === "system-agent") payload = buildApprovalPendingReplyPayload({
+		approvalKind: "system-agent",
+		approvalId: params.view.approvalId,
+		approvalSlug: params.view.approvalId.slice(0, 8),
+		text: `OpenClaw change requires approval:\n${params.view.operationSummary}`,
+		agentId: params.view.agentId,
+		allowedDecisions,
+		sessionKey: params.view.sessionKey
+	});
+	else payload = buildExecApprovalPendingReplyPayload({
 		approvalId: params.view.approvalId,
 		approvalSlug: params.view.approvalId.slice(0, 8),
 		approvalCommandId: params.view.approvalId,
@@ -179,10 +197,11 @@ function buildResolvedApprovalText(view) {
 		resolvedBy: view.resolvedBy ?? void 0,
 		ts: 0
 	} }).text ?? "";
+	const decisionLabel = view.approvalKind === "system-agent" && view.terminalStatus === "cancelled" ? "Cancelled" : view.approvalKind === "system-agent" && view.applicationStatus === "applied" ? "Applied" : view.approvalKind === "system-agent" && view.applicationStatus === "not-applied" ? "Not applied" : view.decision === "allow-once" ? "Allowed once" : view.decision === "allow-always" ? "Allowed always" : "Denied";
 	return [
-		`Exec approval: ${view.decision === "allow-once" ? "Allowed once" : view.decision === "allow-always" ? "Allowed always" : "Denied"}`,
+		`${view.approvalKind === "system-agent" ? "OpenClaw change" : "Exec approval"}: ${decisionLabel}`,
 		"",
-		"Command",
+		view.approvalKind === "system-agent" ? "Change" : "Command",
 		buildMarkdownCodeBlock(view.commandText)
 	].join("\n");
 }
@@ -196,7 +215,11 @@ function buildMarkdownCodeBlock(text) {
 	].join("\n");
 }
 const matrixApprovalNativeRuntime = createChannelApprovalNativeRuntimeAdapter({
-	eventKinds: ["exec", "plugin"],
+	eventKinds: [
+		"exec",
+		"plugin",
+		"system-agent"
+	],
 	availability: {
 		isConfigured: ({ cfg, accountId, context }) => {
 			const resolved = resolveHandlerContext({

package/dist/{approval-ids-hmvhDNBj.js → approval-ids-CfHtZ9d1.js}

@@ -1,4 +1,4 @@
-import { a as normalizeMatrixUserId } from "./channel.setup-OIEzCzSs.js";
+import { a as normalizeMatrixUserId } from "./channel.setup-BY42QaL7.js";
 //#region extensions/matrix/src/approval-ids.ts
 function normalizeMatrixApproverId(value) {
 	return normalizeMatrixUserId(String(value)) || void 0;

package/dist/{approval-reaction-auth-DziFGHSk.js → approval-reaction-auth-BpDvJqfy.js}

@@ -1,5 +1,5 @@
 import { i as resolveMatrixAccount } from "./accounts-DR1c4xF_.js";
-import { t as normalizeMatrixApproverId } from "./approval-ids-hmvhDNBj.js";
+import { t as normalizeMatrixApproverId } from "./approval-ids-CfHtZ9d1.js";
 import { resolveApprovalApprovers } from "openclaw/plugin-sdk/approval-auth-runtime";
 //#region extensions/matrix/src/approval-reaction-auth.ts
 function normalizeMatrixExecApproverId(value) {

package/dist/{channel-D6-ajB_u.js → channel-b-jES-oi.js}

@@ -1,8 +1,8 @@
 import { n as requiresExplicitMatrixDefaultAccount } from "./account-selection-DA-jfx22.js";
 import { a as resolveMatrixAccountConfig } from "./account-config-CRsKoMqJ.js";
 import { i as resolveMatrixAccount, r as resolveDefaultMatrixAccountId, t as listMatrixAccountIds } from "./accounts-DR1c4xF_.js";
-import { a as normalizeMatrixUserId, r as DEFAULT_ACCOUNT_ID$2, t as matrixPluginBase } from "./channel.setup-OIEzCzSs.js";
-import { t as normalizeMatrixApproverId } from "./approval-ids-hmvhDNBj.js";
+import { a as normalizeMatrixUserId, r as DEFAULT_ACCOUNT_ID$2, t as matrixPluginBase } from "./channel.setup-BY42QaL7.js";
+import { t as normalizeMatrixApproverId } from "./approval-ids-CfHtZ9d1.js";
 import { a as resolveMatrixDirectUserId, i as normalizeMatrixResolvableTarget, n as isMatrixRoomId, o as resolveMatrixTargetIdentity, r as normalizeMatrixMessagingTarget, t as isMatrixQualifiedUserId } from "./target-ids-Nwx7cMVE.js";
 import { n as normalizeCompatibilityConfig, t as legacyConfigRules } from "./doctor-contract-HyWFZQVG.js";
 import { n as MATRIX_REACTION_EVENT_TYPE } from "./reaction-common-DkrQdBSZ.js";
@@ -149,7 +149,7 @@ const matrixMessageActions = {
 		return account && createActionGate(account.config.actions)("messages") ? payload : null;
 	},
 	handleAction: async (ctx) => {
-		const { handleMatrixAction } = await import("./tool-actions.runtime-CFZZPG5g.js");
+		const { handleMatrixAction } = await import("./tool-actions.runtime-vbkQgU7D.js");
 		const { action, params, cfg, accountId, mediaLocalRoots } = ctx;
 		const dispatch = async (actionParams) => await handleMatrixAction({
 			...actionParams,
@@ -412,7 +412,7 @@ const isMatrixExecApprovalClientEnabled = matrixExecApprovalProfile.isClientEnab
 const isMatrixExecApprovalAuthorizedSender = matrixExecApprovalProfile.isAuthorizedSender;
 const resolveMatrixExecApprovalTarget = matrixExecApprovalProfile.resolveTarget;
 function isMatrixApprovalClientEnabled(params) {
-	if (params.approvalKind === "exec") return isMatrixExecApprovalClientEnabled(params);
+	if (params.approvalKind === "exec" || params.approvalKind === "system-agent") return isMatrixExecApprovalClientEnabled(params);
 	const config = resolveMatrixExecApprovalConfig(params);
 	return isChannelExecApprovalClientEnabledFromConfig({
 		enabled: config?.enabled,
@@ -426,10 +426,13 @@ function isMatrixAnyApprovalClientEnabled(params) {
 	}) || isMatrixApprovalClientEnabled({
 		...params,
 		approvalKind: "plugin"
+	}) || isMatrixApprovalClientEnabled({
+		...params,
+		approvalKind: "system-agent"
 	});
 }
 function shouldHandleMatrixApprovalRequest(params) {
-	if (params.approvalKind !== "exec" && params.approvalKind !== "plugin") return false;
+	if (params.approvalKind !== "exec" && params.approvalKind !== "plugin" && params.approvalKind !== "system-agent") return false;
 	if (!matchesMatrixRequestAccount({
 		...params,
 		approvalKind: params.approvalKind
@@ -548,7 +551,7 @@ function resolveSuppressionAccountId(params) {
 const resolveMatrixOriginTarget = createChannelNativeOriginTargetResolver({
 	channel: "matrix",
 	shouldHandleRequest: ({ cfg, accountId, approvalKind, request }) => {
-		if (approvalKind !== "exec" && approvalKind !== "plugin") return false;
+		if (approvalKind !== "exec" && approvalKind !== "plugin" && approvalKind !== "system-agent") return false;
 		return shouldHandleMatrixApprovalRequest({
 			cfg,
 			accountId,
@@ -616,7 +619,11 @@ const matrixNativeApprovalCapability = createApproverRestrictedNativeApprovalCap
 	resolveApproverDmTargets: resolveMatrixApproverDmTargets,
 	notifyOriginWhenDmOnly: true,
 	nativeRuntime: createLazyChannelApprovalNativeRuntimeAdapter({
-		eventKinds: ["exec", "plugin"],
+		eventKinds: [
+			"exec",
+			"plugin",
+			"system-agent"
+		],
 		isConfigured: ({ cfg, accountId }) => isMatrixAnyApprovalClientEnabled({
 			cfg,
 			accountId
@@ -627,7 +634,7 @@ const matrixNativeApprovalCapability = createApproverRestrictedNativeApprovalCap
 			approvalKind,
 			request
 		}),
-		load: async () => (await import("./approval-handler.runtime-xcVrZw9o.js")).matrixApprovalNativeRuntime
+		load: async () => (await import("./approval-handler.runtime-B_6ytY5I.js")).matrixApprovalNativeRuntime
 	})
 });
 const splitMatrixApprovalCapability = splitChannelApprovalCapability(matrixNativeApprovalCapability);
@@ -1035,7 +1042,7 @@ function resolveMatrixConversationRouteOwner(params) {
 }
 //#endregion
 //#region extensions/matrix/src/resolver.ts
-const loadMatrixChannelRuntime$1 = createLazyRuntimeNamedExport(() => import("./resolver.runtime-DJQxR35r.js"), "matrixResolverRuntime");
+const loadMatrixChannelRuntime$1 = createLazyRuntimeNamedExport(() => import("./resolver.runtime-TRmePJDV.js"), "matrixResolverRuntime");
 const matrixResolverAdapter = { resolveTargets: async ({ cfg, accountId, inputs, kind, runtime }) => (await loadMatrixChannelRuntime$1()).resolveMatrixTargets({
 	cfg,
 	accountId,
@@ -1164,7 +1171,7 @@ function resolveMatrixOutboundSessionRoute(params) {
 //#endregion
 //#region extensions/matrix/src/channel.ts
 let matrixStartupLock = Promise.resolve();
-const loadMatrixChannelRuntime = createLazyRuntimeNamedExport(() => import("./channel.runtime-BMA0dG2k.js"), "matrixChannelRuntime");
+const loadMatrixChannelRuntime = createLazyRuntimeNamedExport(() => import("./channel.runtime-BkqjwEDU.js"), "matrixChannelRuntime");
 const loadMatrixDoctorModule = createLazyRuntimeModule(() => import("./doctor-CJE8wO6y.js"));
 function buildMatrixTrafficStatusSummary(snapshot) {
 	return {
@@ -1515,7 +1522,7 @@ const matrixPlugin = createChatChannelPlugin({
 			await previousLock;
 			let monitorMatrixProvider;
 			try {
-				monitorMatrixProvider = (await import("./monitor-U2LcVtHt.js")).monitorMatrixProvider;
+				monitorMatrixProvider = (await import("./monitor-SNnu-0bp.js")).monitorMatrixProvider;
 			} finally {
 				releaseLock();
 			}

package/dist/channel-plugin-api.js

@@ -1,2 +1,2 @@
-import { t as matrixPlugin } from "./channel-D6-ajB_u.js";
+import { t as matrixPlugin } from "./channel-b-jES-oi.js";
 export { matrixPlugin };

package/dist/channel.runtime-BkqjwEDU.js

@@ -0,0 +1,76 @@
+import { o as sendTypingMatrix, r as sendMessageMatrix, v as cleanupMatrixDeliveryPlans, y as reconcileMatrixUnknownSend } from "./send-DG7Bnj7_.js";
+import { t as isBunRuntime } from "./runtime-BefyhPWv.js";
+import { l as resolveMatrixAuth } from "./client-Dj4mcf-s.js";
+import { n as listMatrixDirectoryGroupsLive, r as listMatrixDirectoryPeersLive } from "./directory-live-DLUgWBhA.js";
+import { t as matrixOutbound } from "./outbound-CeCEtF_q.js";
+import { t as resolveMatrixTargets } from "./resolve-targets-B64O69Nd.js";
+import { createLazyRuntimeModule } from "openclaw/plugin-sdk/lazy-runtime";
+import { normalizeOptionalString } from "openclaw/plugin-sdk/string-coerce-runtime";
+import { formatErrorMessage } from "openclaw/plugin-sdk/error-runtime";
+import { runChannelProbe } from "openclaw/plugin-sdk/text-utility-runtime";
+//#region extensions/matrix/src/matrix/probe.ts
+const loadMatrixProbeRuntimeDeps = createLazyRuntimeModule(() => import("./probe.runtime-B1YPxG9x.js").then((runtimeModule) => ({ createMatrixClient: runtimeModule.createMatrixClient })));
+async function probeMatrix(params) {
+	return await runChannelProbe(void 0, async () => {
+		const result = {
+			ok: false,
+			status: null,
+			error: null
+		};
+		if (isBunRuntime()) return {
+			...result,
+			error: "Matrix probe requires Node (bun runtime not supported)"
+		};
+		if (!params.homeserver?.trim()) return {
+			...result,
+			error: "missing homeserver"
+		};
+		if (!params.accessToken?.trim()) return {
+			...result,
+			error: "missing access token"
+		};
+		const { createMatrixClient } = await loadMatrixProbeRuntimeDeps();
+		const inputUserId = normalizeOptionalString(params.userId);
+		const userId = await (await createMatrixClient({
+			homeserver: params.homeserver,
+			userId: void 0,
+			accessToken: params.accessToken,
+			deviceId: params.deviceId,
+			persistStorage: false,
+			localTimeoutMs: params.timeoutMs,
+			accountId: params.accountId,
+			allowPrivateNetwork: params.allowPrivateNetwork,
+			ssrfPolicy: params.ssrfPolicy,
+			dispatcherPolicy: params.dispatcherPolicy
+		})).getUserId();
+		if (inputUserId && inputUserId !== userId) return {
+			...result,
+			error: "Matrix access token user does not match configured userId"
+		};
+		return {
+			...result,
+			ok: true,
+			userId
+		};
+	}, (error) => ({
+		ok: false,
+		status: typeof error === "object" && error && "statusCode" in error ? Number(error.statusCode) : null,
+		error: formatErrorMessage(error)
+	}));
+}
+//#endregion
+//#region extensions/matrix/src/channel.runtime.ts
+const matrixChannelRuntime = {
+	cleanupMatrixDeliveryPlans,
+	listMatrixDirectoryGroupsLive,
+	listMatrixDirectoryPeersLive,
+	matrixOutbound,
+	probeMatrix,
+	resolveMatrixAuth,
+	resolveMatrixTargets,
+	reconcileMatrixUnknownSend,
+	sendMessageMatrix,
+	sendTypingMatrix
+};
+//#endregion
+export { matrixChannelRuntime };

package/dist/{channel.setup-OIEzCzSs.js → channel.setup-BY42QaL7.js}

@@ -1,6 +1,6 @@
 import { a as resolveMatrixAccountConfig } from "./account-config-CRsKoMqJ.js";
 import { i as resolveMatrixAccount, r as resolveDefaultMatrixAccountId, t as listMatrixAccountIds } from "./accounts-DR1c4xF_.js";
-import { r as matrixSetupContract, t as createMatrixSetupWizardProxy } from "./setup-core-CZM496H-.js";
+import { r as matrixSetupContract, t as createMatrixSetupWizardProxy } from "./setup-core-CEF6exLW.js";
 import { adaptScopedAccountAccessor, createScopedChannelConfigAdapter } from "openclaw/plugin-sdk/channel-config-helpers";
 import { createChannelConfigUiHints } from "openclaw/plugin-sdk/channel-core";
 import { normalizeLowercaseStringOrEmpty } from "openclaw/plugin-sdk/string-coerce-runtime";
@@ -314,7 +314,7 @@ const matrixPluginBase = {
 		order: 70,
 		quickstartAllowFrom: true
 	},
-	setupWizard: createMatrixSetupWizardProxy(async () => ({ matrixSetupWizard: (await import("./setup-surface-DSZtOsWK.js").then((n) => n.t)).matrixSetupWizard })),
+	setupWizard: createMatrixSetupWizardProxy(async () => ({ matrixSetupWizard: (await import("./setup-surface-BSlj1vnL.js").then((n) => n.t)).matrixSetupWizard })),
 	setupContract: matrixSetupContract,
 	capabilities: {
 		chatTypes: [

package/dist/{cli-B6HF7Hmn.js → cli-CtYeU7ol.js}

@@ -2,14 +2,14 @@ import { a as resolveMatrixAccountConfig } from "./account-config-CRsKoMqJ.js";
 import { t as getMatrixRuntime } from "./runtime-6S3DNFNv.js";
 import { i as resolveMatrixAccount } from "./accounts-DR1c4xF_.js";
 import { n as resolveMatrixConfigPath, r as updateMatrixAccountConfig } from "./config-update-BnX26jCO.js";
-import { n as matrixSetupAdapter } from "./setup-core-CZM496H-.js";
-import { n as withResolvedActionClient } from "./client-B0yMDho1.js";
-import { u as resolveMatrixAuthContext } from "./client-DFsRJEgB.js";
+import { n as matrixSetupAdapter } from "./setup-core-CEF6exLW.js";
+import { n as withResolvedActionClient } from "./client-D2utPQ1E.js";
+import { u as resolveMatrixAuthContext } from "./client-Dj4mcf-s.js";
 import { t as resolveMatrixRoomKeyBackupIssue } from "./backup-health-Dm_YMVFT.js";
 import { i as setMatrixSdkLogMode, r as setMatrixSdkConsoleLogging } from "./logging-DRjvUOIh.js";
 import { n as isOpenClawManagedMatrixDevice, r as summarizeMatrixDeviceHealth } from "./device-health-B4-YXtJR.js";
-import { n as updateMatrixOwnProfile, t as applyMatrixProfileUpdate } from "./profile-update-CsyKA9jI.js";
-import { a as confirmMatrixVerificationSas, b as verifyMatrixRecoveryKey, c as getMatrixRoomKeyBackupStatus, d as listMatrixVerifications, f as mismatchMatrixVerificationSas, g as runMatrixSelfVerification, h as restoreMatrixRoomKeyBackup, l as getMatrixVerificationSas, m as resetMatrixRoomKeyBackup, n as bootstrapMatrixVerification, p as requestMatrixVerification, r as cancelMatrixVerification, t as acceptMatrixVerification, u as getMatrixVerificationStatus, v as startMatrixVerification } from "./verification-CD7k5vE9.js";
+import { n as updateMatrixOwnProfile, t as applyMatrixProfileUpdate } from "./profile-update-Cd1p8ABr.js";
+import { a as confirmMatrixVerificationSas, b as verifyMatrixRecoveryKey, c as getMatrixRoomKeyBackupStatus, d as listMatrixVerifications, f as mismatchMatrixVerificationSas, g as runMatrixSelfVerification, h as restoreMatrixRoomKeyBackup, l as getMatrixVerificationSas, m as resetMatrixRoomKeyBackup, n as bootstrapMatrixVerification, p as requestMatrixVerification, r as cancelMatrixVerification, t as acceptMatrixVerification, u as getMatrixVerificationStatus, v as startMatrixVerification } from "./verification-D-iOebn4.js";
 import { createLazyRuntimeModule } from "openclaw/plugin-sdk/lazy-runtime";
 import { normalizeAccountId } from "openclaw/plugin-sdk/account-id";
 import { formatErrorMessage } from "openclaw/plugin-sdk/error-runtime";
@@ -417,7 +417,7 @@ async function addMatrixAccount(params) {
 		backupVersion: null
 	};
 	if (accountConfig.encryption === true) {
-		const { maybeBootstrapNewEncryptedMatrixAccount } = await import("./setup-bootstrap-CWoIWudw.js");
+		const { maybeBootstrapNewEncryptedMatrixAccount } = await import("./setup-bootstrap-Co985F63.js");
 		verificationBootstrap = await maybeBootstrapNewEncryptedMatrixAccount({
 			previousCfg: cfg,
 			cfg: updated,
@@ -605,8 +605,8 @@ function registerMatrixDeviceCommands(root) {
 }
 //#endregion
 //#region extensions/matrix/src/cli-direct.ts
-const loadMatrixActionClientModule = createLazyRuntimeModule(() => import("./client-B0yMDho1.js").then((n) => n.t));
-const loadMatrixDirectManagementModule = createLazyRuntimeModule(() => import("./send-DfS5ciUL.js").then((n) => n.x));
+const loadMatrixActionClientModule = createLazyRuntimeModule(() => import("./client-D2utPQ1E.js").then((n) => n.t));
+const loadMatrixDirectManagementModule = createLazyRuntimeModule(() => import("./send-DG7Bnj7_.js").then((n) => n.x));
 function printDirectRoomCandidate(room) {
 	const members = room.joinedMembers === null ? "unavailable" : room.joinedMembers.map((member) => formatMatrixCliText(member)).join(", ") || "none";
 	console.log(`- ${formatMatrixCliText(room.roomId)} [${room.source}] strict=${room.strict ? "yes" : "no"} joined=${members}`);

package/dist/{cli-metadata-Mtzu5-AY.js → cli-metadata-B7MQjR5S.js}

@@ -2,7 +2,7 @@ import { definePluginEntry } from "openclaw/plugin-sdk/plugin-entry";
 //#region extensions/matrix/src/cli-metadata.ts
 function registerMatrixCliMetadata(api) {
 	api.registerCli(async ({ program }) => {
-		const { registerMatrixCli } = await import("./cli-B6HF7Hmn.js");
+		const { registerMatrixCli } = await import("./cli-CtYeU7ol.js");
 		registerMatrixCli({ program });
 	}, { descriptors: [{
 		name: "matrix",

package/dist/cli-metadata.js

@@ -1,2 +1,2 @@
-import { n as registerMatrixCliMetadata, t as cli_metadata_default } from "./cli-metadata-Mtzu5-AY.js";
+import { n as registerMatrixCliMetadata, t as cli_metadata_default } from "./cli-metadata-B7MQjR5S.js";
 export { cli_metadata_default as default, registerMatrixCliMetadata };

package/dist/{client-B0yMDho1.js → client-D2utPQ1E.js}

@@ -1,6 +1,6 @@
 import { t as __exportAll } from "./rolldown-runtime-8H4AJuhK.js";
-import { b as resolveMatrixRoomId } from "./send-DfS5ciUL.js";
-import { n as withResolvedRuntimeMatrixClient } from "./client-bootstrap-DjXCKEtg.js";
+import { b as resolveMatrixRoomId } from "./send-DG7Bnj7_.js";
+import { n as withResolvedRuntimeMatrixClient } from "./client-bootstrap-n1Rqc8Go.js";
 //#region extensions/matrix/src/matrix/actions/client.ts
 var client_exports = /* @__PURE__ */ __exportAll({
 	withResolvedActionClient: () => withResolvedActionClient,

package/dist/{client-DFsRJEgB.js → client-Dj4mcf-s.js}

@@ -20,7 +20,7 @@ import { sleepWithAbort } from "openclaw/plugin-sdk/runtime-env";
 import { createDeferred } from "openclaw/plugin-sdk/extension-shared";
 import { AsyncLocalStorage } from "node:async_hooks";
 //#region extensions/matrix/src/matrix/client/config.ts
-const loadMatrixAuthClientDeps = createLazyRuntimeModule(() => Promise.all([import("./sdk-Jl2CgAbJ.js").then((n) => n.t), import("./logging-DRjvUOIh.js").then((n) => n.n)]).then(([sdkModule, loggingModule]) => ({
+const loadMatrixAuthClientDeps = createLazyRuntimeModule(() => Promise.all([import("./sdk-C1yfda1L.js").then((n) => n.t), import("./logging-DRjvUOIh.js").then((n) => n.n)]).then(([sdkModule, loggingModule]) => ({
 	MatrixClient: sdkModule.MatrixClient,
 	ensureMatrixSdkLoggingConfigured: loggingModule.ensureMatrixSdkLoggingConfigured
 })));
@@ -416,7 +416,7 @@ async function backfillMatrixAuthDeviceIdAfterStartup(params) {
 //#endregion
 //#region extensions/matrix/src/matrix/client/create-client.ts
 var create_client_exports = /* @__PURE__ */ __exportAll({ createMatrixClient: () => createMatrixClient });
-const loadMatrixCreateClientRuntimeDeps = createLazyRuntimeModule(() => Promise.all([import("./sdk-Jl2CgAbJ.js").then((n) => n.t), import("./logging-DRjvUOIh.js").then((n) => n.n)]).then(([sdkModule, loggingModule]) => ({
+const loadMatrixCreateClientRuntimeDeps = createLazyRuntimeModule(() => Promise.all([import("./sdk-C1yfda1L.js").then((n) => n.t), import("./logging-DRjvUOIh.js").then((n) => n.n)]).then(([sdkModule, loggingModule]) => ({
 	MatrixClient: sdkModule.MatrixClient,
 	ensureMatrixSdkLoggingConfigured: loggingModule.ensureMatrixSdkLoggingConfigured
 })));

package/dist/{client-bootstrap-DjXCKEtg.js → client-bootstrap-n1Rqc8Go.js}

@@ -7,7 +7,7 @@ var client_bootstrap_exports = /* @__PURE__ */ __exportAll({
 	resolveRuntimeMatrixClientWithReadiness: () => resolveRuntimeMatrixClientWithReadiness,
 	withResolvedRuntimeMatrixClient: () => withResolvedRuntimeMatrixClient
 });
-const loadMatrixSharedClientRuntimeDeps = createLazyRuntimeModule(() => import("./client-DFsRJEgB.js").then((n) => n.t).then((clientModule) => ({
+const loadMatrixSharedClientRuntimeDeps = createLazyRuntimeModule(() => import("./client-Dj4mcf-s.js").then((n) => n.t).then((clientModule) => ({
 	acquireSharedMatrixClient: clientModule.acquireSharedMatrixClient,
 	resolveMatrixAuthContext: clientModule.resolveMatrixAuthContext
 })));

package/dist/contract-api.js

@@ -1,3 +1,3 @@
-import { c as singleAccountKeysToMove, n as matrixSetupAdapter, o as namedAccountPromotionKeys, s as resolveSingleAccountPromotionTarget } from "./setup-core-CZM496H-.js";
-import { n as matrixOnboardingAdapter } from "./setup-surface-DSZtOsWK.js";
+import { c as singleAccountKeysToMove, n as matrixSetupAdapter, o as namedAccountPromotionKeys, s as resolveSingleAccountPromotionTarget } from "./setup-core-CEF6exLW.js";
+import { n as matrixOnboardingAdapter } from "./setup-surface-BSlj1vnL.js";
 export { matrixSetupAdapter, matrixOnboardingAdapter as matrixSetupWizard, namedAccountPromotionKeys, resolveSingleAccountPromotionTarget, singleAccountKeysToMove };

package/dist/{crypto-runtime-QvlgyCkj.js → crypto-runtime-m1eplj3b.js}

@@ -1,12 +1,12 @@
 import { t as ensureMatrixCryptoRuntime } from "./deps-mtxF2mHI.js";
 import { n as LogService, r as noop } from "./logger-B_71hN6W.js";
-import { i as restoreIdbFromDisk, n as persistIdbToDisk } from "./idb-persistence-D4NGNQxt.js";
-import { n as isRepairableSecretStorageAccessError } from "./sdk-Jl2CgAbJ.js";
+import { i as restoreIdbFromDisk, n as persistIdbToDisk } from "./idb-persistence-CU7CNLlX.js";
+import { n as isRepairableSecretStorageAccessError } from "./sdk-C1yfda1L.js";
 import { createLazyRuntimeModule } from "openclaw/plugin-sdk/lazy-runtime";
 import { formatErrorMessage, toStringifiedError } from "openclaw/plugin-sdk/error-runtime";
 import { resolveDateTimestampMs, resolveTimestampMsToIsoString } from "openclaw/plugin-sdk/number-runtime";
-import { IDBDatabase } from "fake-indexeddb";
 import { setTimeout as setTimeout$1 } from "node:timers/promises";
+import { IDBDatabase } from "fake-indexeddb";
 import { MatrixEventEvent } from "matrix-js-sdk/lib/matrix.js";
 import { VerificationMethod } from "matrix-js-sdk/lib/types.js";
 import "fake-indexeddb/auto";

package/dist/crypto-snapshot-doctor.runtime-D0v841D_.js

@@ -0,0 +1,91 @@
+import { O as writeMatrixIdbSnapshotJsonToStore, T as readMatrixIdbSnapshotJsonFromStore, f as MATRIX_IDB_SNAPSHOT_FILENAME, v as openMatrixIdbSnapshotStoreOptions } from "./storage-BVf4uucD.js";
+import { n as MATRIX_IDB_SNAPSHOT_LOCK_OPTIONS } from "./idb-persistence-lock-B3fZXyF_.js";
+import { r as readLegacyMatrixIdbSnapshotStateUnlocked, t as isValidMatrixIdbSnapshotJson } from "./idb-persistence-CU7CNLlX.js";
+import { randomUUID } from "node:crypto";
+import path from "node:path";
+import fs from "node:fs";
+import fs$1 from "node:fs/promises";
+import { isDeepStrictEqual } from "node:util";
+import { withFileLock } from "openclaw/plugin-sdk/file-lock";
+//#region extensions/matrix/src/matrix/crypto-snapshot-doctor.runtime.ts
+async function migrateLegacyMatrixIdbSnapshot(params) {
+	const snapshotPath = path.join(params.storageRootDir, MATRIX_IDB_SNAPSHOT_FILENAME);
+	try {
+		await withFileLock(snapshotPath, MATRIX_IDB_SNAPSHOT_LOCK_OPTIONS, () => migrateLegacyMatrixIdbSnapshotLocked(params));
+	} catch (err) {
+		params.warnings.push(`Failed locking Matrix IndexedDB snapshot for ${params.storageRootDir}: ${String(err)}; left legacy source in place`);
+	}
+}
+async function migrateLegacyMatrixIdbSnapshotLocked(params) {
+	const sourcePath = path.join(params.storageRootDir, MATRIX_IDB_SNAPSHOT_FILENAME);
+	let snapshot;
+	try {
+		snapshot = readLegacyMatrixIdbSnapshotStateUnlocked(params.storageRootDir);
+	} catch (err) {
+		params.warnings.push(`Failed reading Matrix IndexedDB snapshot legacy source for ${params.storageRootDir}: ${String(err)}; left source in place`);
+		return;
+	}
+	if (!snapshot) {
+		if (!fs.existsSync(sourcePath)) return;
+		const archived = await archiveLegacyMatrixIdbSnapshot(params);
+		params.warnings.push(archived ? `Matrix IndexedDB snapshot legacy source is invalid for ${params.storageRootDir}; archived without import` : `Matrix IndexedDB snapshot legacy source is invalid for ${params.storageRootDir}; left active because archival failed`);
+		return;
+	}
+	const snapshotJson = JSON.stringify(snapshot);
+	const store = params.context.openPluginStateKeyedStore(openMatrixIdbSnapshotStoreOptions(params.storageRootDir));
+	let persisted;
+	let hadPartialState;
+	try {
+		persisted = await readMatrixIdbSnapshotJsonFromStore({ store });
+		const persistedIsValid = persisted ? isValidMatrixIdbSnapshotJson(persisted) : false;
+		hadPartialState = !persistedIsValid && (await store.entries()).length > 0;
+		if (!persistedIsValid) persisted = null;
+	} catch (err) {
+		params.warnings.push(`Failed inspecting Matrix IndexedDB snapshot SQLite state for ${params.storageRootDir}: ${String(err)}; left legacy source in place`);
+		return;
+	}
+	if (persisted && !snapshotContentMatches(persisted, snapshot)) {
+		if (await archiveLegacyMatrixIdbSnapshot(params)) params.notices.push(`Kept the canonical Matrix IndexedDB snapshot in SQLite and archived a differing legacy source for ${params.storageRootDir}`);
+		return;
+	}
+	if (!persisted) {
+		try {
+			await writeMatrixIdbSnapshotJsonToStore({
+				snapshotJson,
+				databaseCount: snapshot.length,
+				store
+			});
+			persisted = await readMatrixIdbSnapshotJsonFromStore({ store });
+		} catch (err) {
+			params.warnings.push(`Failed importing Matrix IndexedDB snapshot for ${params.storageRootDir}: ${String(err)}; left legacy source in place`);
+			return;
+		}
+		if (!persisted || !snapshotContentMatches(persisted, snapshot)) {
+			params.warnings.push(`Failed verifying Matrix IndexedDB snapshot for ${params.storageRootDir}; left legacy source in place`);
+			return;
+		}
+		params.changes.push(hadPartialState ? `Repaired partial or invalid Matrix IndexedDB snapshot SQLite state for ${params.storageRootDir}` : `Migrated Matrix IndexedDB snapshot JSON to SQLite for ${params.storageRootDir}`);
+	}
+	await archiveLegacyMatrixIdbSnapshot(params);
+}
+function snapshotContentMatches(persistedJson, snapshot) {
+	try {
+		return isDeepStrictEqual(JSON.parse(persistedJson), snapshot);
+	} catch {
+		return false;
+	}
+}
+async function archiveLegacyMatrixIdbSnapshot(params) {
+	const sourcePath = path.join(params.storageRootDir, MATRIX_IDB_SNAPSHOT_FILENAME);
+	const archivePath = `${sourcePath}.migrated-${(/* @__PURE__ */ new Date()).toISOString().replaceAll(":", "-")}-${randomUUID()}`;
+	try {
+		await fs$1.rename(sourcePath, archivePath);
+		params.changes.push(`Archived Matrix IndexedDB snapshot legacy source -> ${archivePath}`);
+		return true;
+	} catch (err) {
+		params.warnings.push(`Failed archiving Matrix IndexedDB snapshot legacy source: ${String(err)}`);
+		return false;
+	}
+}
+//#endregion
+export { migrateLegacyMatrixIdbSnapshot };

package/dist/{directory-live-Drh343TW.js → directory-live-DLUgWBhA.js}

@@ -1,6 +1,6 @@
 import { t as __exportAll } from "./rolldown-runtime-8H4AJuhK.js";
 import { r as normalizeMatrixMessagingTarget, t as isMatrixQualifiedUserId } from "./target-ids-Nwx7cMVE.js";
-import { l as resolveMatrixAuth } from "./client-DFsRJEgB.js";
+import { l as resolveMatrixAuth } from "./client-Dj4mcf-s.js";
 import { t as MatrixAuthedHttpClient } from "./http-client-DOmFvKvB.js";
 import { normalizeLowercaseStringOrEmpty, normalizeOptionalString } from "openclaw/plugin-sdk/string-coerce-runtime";
 //#region extensions/matrix/src/directory-live.ts