@openclaw/matrix 2026.9.2 → 2026.9.4

package/dist/types-DzSc7Sqm.js

@@ -0,0 +1,32 @@
+import { n as MATRIX_REACTION_EVENT_TYPE, t as MATRIX_ANNOTATION_RELATION_TYPE } from "./reaction-common-DkrQdBSZ.js";
+//#region extensions/matrix/src/matrix/send/types.ts
+const MsgType = {
+	Text: "m.text",
+	Image: "m.image",
+	Audio: "m.audio",
+	Video: "m.video",
+	File: "m.file",
+	Notice: "m.notice"
+};
+const RelationType = {
+	Annotation: MATRIX_ANNOTATION_RELATION_TYPE,
+	Replace: "m.replace",
+	Thread: "m.thread"
+};
+const EventType = {
+	Direct: "m.direct",
+	Reaction: MATRIX_REACTION_EVENT_TYPE,
+	RoomMessage: "m.room.message"
+};
+const MATRIX_OPENCLAW_FINALIZED_PREVIEW_KEY = "com.openclaw.finalized_preview";
+/**
+* MSC4357 live marker key.
+* When present on event content, signals that the message is still being
+* streamed (e.g. an LLM generating a response). Supporting clients render
+* the message with a streaming animation until an edit without this marker
+* arrives, indicating the stream is complete.
+* @see https://github.com/matrix-org/matrix-spec-proposals/pull/4357
+*/
+const MSC4357_LIVE_KEY = "org.matrix.msc4357.live";
+//#endregion
+export { RelationType as a, MsgType as i, MATRIX_OPENCLAW_FINALIZED_PREVIEW_KEY as n, MSC4357_LIVE_KEY as r, EventType as t };

package/dist/{verification-XJtTc5DI.js → verification-BbG-VC9S.js}

@@ -1,6 +1,6 @@
 import { t as __exportAll } from "./rolldown-runtime-8H4AJuhK.js";
-import { i as withStartedActionClient, n as withResolvedActionClient } from "./client-oNOlldJI.js";
-import { n as formatMatrixEncryptionUnavailableError } from "./encryption-guidance-BNcZNQZI.js";
+import { i as withStartedActionClient, n as withResolvedActionClient } from "./client-C0nZFCTj.js";
+import { n as formatMatrixEncryptionUnavailableError } from "./encryption-guidance-mDyxJV9U.js";
 import { normalizeOptionalString } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { requireRuntimeConfig } from "openclaw/plugin-sdk/plugin-config-runtime";
 import { setTimeout } from "node:timers/promises";

package/node_modules/@matrix-org/matrix-sdk-crypto-wasm/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@matrix-org/matrix-sdk-crypto-wasm",
-    "version": "18.5.0",
+    "version": "18.7.0",
     "homepage": "https://github.com/matrix-org/matrix-sdk-crypto-wasm",
     "description": "WebAssembly bindings of the matrix-sdk-crypto encryption library",
     "license": "Apache-2.0",

package/node_modules/@matrix-org/matrix-sdk-crypto-wasm/pkg/matrix_sdk_crypto_wasm.d.ts

@@ -2445,9 +2445,19 @@ export class OlmMachine {
      *   certificates. These will be used to check X.509 signatures on user
      *   identities. Any user identity that has a valid signature according to
      *   the supplied CAs will be considered verified, without any manual
-     *   verification taking place. A PEM-formatted string.
+     *
+     * * `raw_x509_signer` - Optional async function for signing some data with
+     *   an X.509 certificate. Used to sign the user's identity so compatible
+     *   clients will recognise this user as verified without manual
+     *   verification taking place. If you supply this you must also supply
+     *   raw_x509_validity.
+     *
+     * * `raw_x509_validity` - Optional function returning the validity period
+     *   of the X.509 certificate used for signing, as the number of
+     *   milliseconds since the Unix epoch. If you supply this you must also
+     *   supply raw_x509_signer.
      */
-    static initFromStore(user_id: UserId, device_id: DeviceId, store_handle: StoreHandle, logger?: JsLogger, ca_certs_pem?: String): Promise<OlmMachine>;
+    static initFromStore(user_id: UserId, device_id: DeviceId, store_handle: StoreHandle, logger?: JsLogger, ca_certs_pem?: String, raw_x509_signer?: (item: Uint8Array) => Promise<{ signature_bytes: Uint8Array, certificate_chain: string }>, raw_x509_validity?: () => number): Promise<OlmMachine>;
     /**
      * Create a new `OlmMachine`.
      *
@@ -2479,8 +2489,19 @@ export class OlmMachine {
      *   identities. Any user identity that has a valid signature according to
      *   the supplied CAs will be considered verified, without any manual
      *   verification taking place. A PEM-formatted string.
+     *
+     * * `raw_x509_signer` - Optional async function for signing some data with
+     *   an X.509 certificate. Used to sign the user's identity so compatible
+     *   clients will recognise this user as verified without manual
+     *   verification taking place. If you supply this you must also supply
+     *   raw_x509_validity.
+     *
+     * * `raw_x509_validity` - Optional function returning the validity period
+     *   of the X.509 certificate used for signing, as the number of
+     *   milliseconds since the Unix epoch. If you supply this you must also
+     *   supply raw_x509_signer.
      */
-    static initialize(user_id: UserId, device_id: DeviceId, store_name?: string, store_passphrase?: string, logger?: JsLogger, ca_certs_pem?: String): Promise<OlmMachine>;
+    static initialize(user_id: UserId, device_id: DeviceId, store_name?: string, store_passphrase?: string, logger?: JsLogger, ca_certs_pem?: String, raw_x509_signer?: (item: Uint8Array) => Promise<{ signature_bytes: Uint8Array, certificate_chain: string }>, raw_x509_validity?: () => number): Promise<OlmMachine>;
     /**
      * Invalidate the currently active outbound group session for the
      * given room.
@@ -2597,7 +2618,11 @@ export class OlmMachine {
      *   `/sync` response
      * * `one_time_keys_counts`: The number of one-time keys on the server,
      *   from the `/sync` response. A `Map` from string (encryption algorithm)
-     *   to number (number of keys).
+     *   to number (number of keys). Following the sync v2 semantics, a missing
+     *   entry for an algorithm means that there are *zero* keys of that type
+     *   on the server. If the caller has no information about the key counts
+     *   (for example, because it is processing only part of a sync response),
+     *   it should use {@link receiveSyncChangesMsc4186} instead.
      * * `unused_fallback_keys`: Optionally, a `Set` of unused fallback keys on
      *   the server, from the `/sync` response. If this is set, it is used to
      *   determine if new fallback keys should be uploaded.
@@ -2614,6 +2639,46 @@ export class OlmMachine {
      *   * {@link InvalidToDeviceEvent}
      */
     receiveSyncChanges(to_device_events: string, changed_devices: DeviceLists, one_time_keys_counts: Map<string, number>, unused_fallback_keys?: Set<string>, decryption_settings?: DecryptionSettings): Promise<ProcessedToDeviceEvent[]>;
+    /**
+     * Handle the changes to the end-to-end encryption state we received from
+     * a [MSC4186](https://github.com/matrix-org/matrix-spec-proposals/pull/4186)
+     * (simplified sliding sync) response.
+     *
+     * This behaves exactly like {@link receiveSyncChanges}, except for the
+     * handling of `one_time_keys_counts`: under MSC4186 semantics, a missing
+     * entry for an algorithm means that the number of keys on the server is
+     * *unchanged*, rather than zero.
+     *
+     * This is therefore also the method to use when the caller has no
+     * information about the one-time key counts, for example because it is
+     * processing only the to-device events or the device list changes from a
+     * sync response.
+     *
+     * # Arguments
+     *
+     * * `to_device_events`: the JSON-encoded to-device events from the sync
+     *   response
+     * * `changed_devices`: the mapping of changed and left devices, from the
+     *   sync response
+     * * `one_time_keys_counts`: The number of one-time keys on the server,
+     *   from the sync response. A `Map` from string (encryption algorithm) to
+     *   number (number of keys). A missing entry means "unchanged".
+     * * `unused_fallback_keys`: Optionally, a `Set` of unused fallback keys on
+     *   the server, from the sync response. If this is set, it is used to
+     *   determine if new fallback keys should be uploaded.
+     * * `decryption_settings`: Optionally, the settings to use when decrypting
+     *   to-device events. If not set, to-device events will be decrypted with
+     *   a {@link TrustRequirement} of `Untrusted`.
+     *
+     * # Returns
+     *
+     * A list of values, each of which can be any of:
+     *   * {@link DecryptedToDeviceEvent}
+     *   * {@link PlainTextToDeviceEvent}
+     *   * {@link UTDToDeviceEvent}
+     *   * {@link InvalidToDeviceEvent}
+     */
+    receiveSyncChangesMsc4186(to_device_events: string, changed_devices: DeviceLists, one_time_keys_counts: Map<string, number>, unused_fallback_keys?: Set<string>, decryption_settings?: DecryptionSettings): Promise<ProcessedToDeviceEvent[]>;
     /**
      * Receive a verification event.
      *