@openclaw/matrix 2026.9.3 → 2026.9.5

package/dist/{tool-actions.runtime-D5-hTkDu.js → .setup/tool-actions.runtime-Dckttu43.mjs}

@@ -1,19 +1,20 @@
-import { a as resolveMatrixAccountConfig, o as resolveMatrixBaseConfig } from "./account-config-CRsKoMqJ.js";
-import { i as resolveMatrixAccount } from "./accounts-GwSAk9vY.js";
-import { a as resolveMatrixRoomConfig } from "./channel-BpYiqmx-.js";
-import { i as normalizeMatrixResolvableTarget } from "./target-ids-Nwx7cMVE.js";
-import { C as parsePollStart, O as resolveMatrixRoomId, S as isPollStartType, _ as buildPollResponseContent, n as reactMatrixMessage } from "./send-B9l1lKau.js";
-import { i as isStrictDirectMembership, n as hasDirectMatrixMemberFlag, o as readJoinedMatrixMembers } from "./direct-room-RinHjtqX.js";
-import { i as buildMatrixReactionRelationsPath, o as selectOwnMatrixReactionEventIds, s as summarizeMatrixReactionEvents } from "./reaction-common-DkrQdBSZ.js";
-import { i as parseMxc } from "./event-helpers-CspuhE9k.js";
-import { a as fetchEventSummary, c as resolveMatrixActionLimit, i as sendMatrixMessage, n as editMatrixMessage, o as readPinnedEvents, r as readMatrixMessages, s as EventType, t as deleteMatrixMessage } from "./messages-H4mi9Cap.js";
-import { n as withResolvedActionClient, r as withResolvedRoomAction } from "./client-BXQCQDfY.js";
-import { t as applyMatrixProfileUpdate } from "./profile-update-DWEg8Ylt.js";
-import { _ as scanMatrixVerificationQr, a as confirmMatrixVerificationSas, b as verifyMatrixRecoveryKey, c as getMatrixRoomKeyBackupStatus, d as listMatrixVerifications, f as mismatchMatrixVerificationSas, h as restoreMatrixRoomKeyBackup, i as confirmMatrixVerificationReciprocateQr, l as getMatrixVerificationSas, n as bootstrapMatrixVerification, o as generateMatrixVerificationQr, p as requestMatrixVerification, r as cancelMatrixVerification, s as getMatrixEncryptionStatus, t as acceptMatrixVerification, u as getMatrixVerificationStatus, v as startMatrixVerification } from "./verification-B_aqtbx-.js";
-import { n as getMatrixMemberInfo, r as getMatrixRoomInfo, t as createMatrixRoomInfoResolver } from "./room-info-CjnbX52D.js";
-import { isRecord, normalizeOptionalLowercaseString, uniqueStrings, uniqueValues } from "openclaw/plugin-sdk/string-coerce-runtime";
+import { a as resolveMatrixAccountConfig, o as resolveMatrixBaseConfig } from "./account-config-CRsKoMqJ.mjs";
+import { i as resolveMatrixAccount } from "./accounts-BF5hyc-1.mjs";
+import { a as resolveMatrixRoomConfig } from "./channel-q6TBKEiG.mjs";
+import { i as normalizeMatrixResolvableTarget } from "./target-ids-Nwx7cMVE.mjs";
+import { l as selectOwnMatrixReactionEventIds, s as buildMatrixReactionRelationsPath, u as summarizeMatrixReactionEvents } from "./send-currentness-BrGXL7b8.mjs";
+import { c as isStrictDirectMembership, s as hasDirectMatrixMemberFlag, u as readJoinedMatrixMembers } from "./direct-management-B2Bno2xL.mjs";
+import { E as resolveMatrixRoomId, b as isPollStartType, h as buildPollResponseContent, n as reactMatrixMessage, x as parsePollStart } from "./send-h0gZ_-qk.mjs";
+import { i as parseMxc } from "./event-helpers-CspuhE9k.mjs";
+import { a as fetchEventSummary, c as resolveMatrixActionLimit, i as sendMatrixMessage, n as editMatrixMessage, o as readPinnedEvents, r as readMatrixMessages, s as EventType, t as deleteMatrixMessage } from "./messages-SW0NPYnR.mjs";
+import { n as withResolvedActionClient, r as withResolvedRoomAction } from "./client-By2B3Wz4.mjs";
+import { t as applyMatrixProfileUpdate } from "./profile-update-DPttQz3-.mjs";
+import { _ as scanMatrixVerificationQr, a as confirmMatrixVerificationSas, b as verifyMatrixRecoveryKey, c as getMatrixRoomKeyBackupStatus, d as listMatrixVerifications, f as mismatchMatrixVerificationSas, h as restoreMatrixRoomKeyBackup, i as confirmMatrixVerificationReciprocateQr, l as getMatrixVerificationSas, n as bootstrapMatrixVerification, o as generateMatrixVerificationQr, p as requestMatrixVerification, r as cancelMatrixVerification, s as getMatrixEncryptionStatus, t as acceptMatrixVerification, u as getMatrixVerificationStatus, v as startMatrixVerification } from "./verification-CKqBZ9mI.mjs";
+import { n as getMatrixMemberInfo, r as getMatrixRoomInfo, t as createMatrixRoomInfoResolver } from "./room-info-DHd1j3qM.mjs";
+import { isRecord, normalizeLowercaseStringOrEmpty, normalizeOptionalLowercaseString, uniqueStrings, uniqueValues } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { ToolAuthorizationError, createActionGate, jsonResult, readPositiveIntegerParam, readReactionParams, readStringArrayParam, readStringParam } from "openclaw/plugin-sdk/channel-actions";
 import { normalizeAccountId } from "openclaw/plugin-sdk/account-id";
+import { captureChannelReadAuthority } from "openclaw/plugin-sdk/fetch-runtime";
 import { resolveAllowlistProviderRuntimeGroupPolicy, resolveDefaultGroupPolicy } from "openclaw/plugin-sdk/runtime-group-policy";
 //#region extensions/matrix/src/matrix/actions/polls.ts
 function normalizeOptionIndexes(indexes) {
@@ -223,6 +224,8 @@ async function classifyMatrixReadRoom(params) {
 	return memberStateFlag === false ? { kind: "group" } : { kind: "unknown" };
 }
 async function withAuthorizedMatrixReadTarget(params) {
+	const assertCurrent = captureChannelReadAuthority();
+	assertCurrent?.();
 	const account = resolveMatrixAccount({
 		cfg: params.cfg,
 		accountId: params.accountId
@@ -235,10 +238,13 @@ async function withAuthorizedMatrixReadTarget(params) {
 		aliases: []
 	}).blockedBeforeProviderAccess) throw new ToolAuthorizationError("Matrix read target is not allowed.");
 	return await withResolvedActionClient(params.opts, async (client) => {
-		const roomId = await resolveMatrixRoomId(client, params.roomId);
+		assertCurrent?.();
+		const roomId = await resolveMatrixRoomId(client, params.roomId, { persistDirectMapping: false });
+		assertCurrent?.();
 		const inputAlias = params.roomId.trim().startsWith("#") ? params.roomId.trim() : void 0;
 		const { getRoomInfo } = createMatrixRoomInfoResolver(client);
 		const roomInfo = await getRoomInfo(roomId, { includeAliases: true });
+		assertCurrent?.();
 		const mutableRoomName = account.config.dangerouslyAllowNameMatching === true ? roomInfo.name : void 0;
 		const aliases = [
 			inputAlias,
@@ -267,6 +273,7 @@ async function withAuthorizedMatrixReadTarget(params) {
 			client,
 			roomId
 		});
+		assertCurrent?.();
 		const resolvedGroupPolicy = resolveAllowlistProviderRuntimeGroupPolicy({
 			providerConfigPresent: params.cfg.channels?.matrix !== void 0,
 			groupPolicy: account.config.groupPolicy,
@@ -284,43 +291,6 @@ async function withAuthorizedMatrixReadTarget(params) {
 }
 //#endregion
 //#region extensions/matrix/src/tool-actions.ts
-const messageActions = /* @__PURE__ */ new Set([
-	"sendMessage",
-	"editMessage",
-	"deleteMessage",
-	"readMessages"
-]);
-const reactionActions = /* @__PURE__ */ new Set([
-	"react",
-	"reactions",
-	"emoji-list"
-]);
-const pinActions = /* @__PURE__ */ new Set([
-	"pinMessage",
-	"unpinMessage",
-	"listPins"
-]);
-const pollActions = /* @__PURE__ */ new Set(["pollVote"]);
-const profileActions = /* @__PURE__ */ new Set(["setProfile"]);
-const verificationActions = /* @__PURE__ */ new Set([
-	"encryptionStatus",
-	"verificationList",
-	"verificationRequest",
-	"verificationAccept",
-	"verificationCancel",
-	"verificationStart",
-	"verificationGenerateQr",
-	"verificationScanQr",
-	"verificationSas",
-	"verificationConfirm",
-	"verificationMismatch",
-	"verificationConfirmQr",
-	"verificationStatus",
-	"verificationBootstrap",
-	"verificationRecoveryKey",
-	"verificationBackupStatus",
-	"verificationBackupRestore"
-]);
 function projectMatrixMessagesForDisplay(messages) {
 	return messages.map((message) => ({
 		...message,
@@ -330,10 +300,9 @@ function projectMatrixMessagesForDisplay(messages) {
 		...typeof message.timestamp === "number" && Number.isFinite(message.timestamp) && Math.abs(message.timestamp) <= 864e13 ? { ts: new Date(message.timestamp).toISOString() } : {}
 	}));
 }
-function readRoomId(params, required = true) {
+function readRoomId(params) {
 	const direct = readStringParam(params, "roomId") ?? readStringParam(params, "channelId");
 	if (direct) return direct;
-	if (!required) return readStringParam(params, "to") ?? "";
 	return readStringParam(params, "to", { required: true });
 }
 function toSnakeCaseKey(key) {
@@ -367,202 +336,221 @@ function readPositiveIntegerArrayParam(params, key) {
 		return index === void 0 ? [] : [index];
 	});
 }
-async function handleMatrixAction(params, cfg, opts = {}) {
-	const action = readStringParam(params, "action", { required: true });
-	const accountId = readStringParam(params, "accountId") ?? void 0;
-	const isActionEnabled = createActionGate(resolveMatrixAccountConfig({
-		cfg,
-		accountId
-	}).actions);
-	const clientOpts = {
-		cfg,
-		...accountId ? { accountId } : {}
+async function handleMatrixAction(ctx) {
+	const { action, params } = ctx;
+	const cfg = ctx.cfg;
+	const prepareAction = (gate) => {
+		const accountParams = action === "poll-vote" || action === "permissions" ? {
+			...params,
+			...ctx.accountId ? { accountId: ctx.accountId } : {}
+		} : { accountId: ctx.accountId };
+		const accountId = readStringParam(accountParams, "accountId");
+		const isActionEnabled = createActionGate(resolveMatrixAccountConfig({
+			cfg,
+			accountId
+		}).actions);
+		if (gate && !isActionEnabled(gate.name)) throw new Error(gate.disabledMessage);
+		const clientOpts = {
+			cfg,
+			...accountId ? { accountId } : {}
+		};
+		const withReadTarget = async (roomId, run) => await withAuthorizedMatrixReadTarget({
+			cfg,
+			accountId,
+			roomId,
+			context: {
+				accountId: ctx.accountId,
+				requesterAccountId: ctx.requesterAccountId,
+				currentChannelId: ctx.toolContext?.currentChannelId,
+				currentChannelProvider: ctx.toolContext?.currentChannelProvider,
+				currentChatType: ctx.toolContext?.currentChatType,
+				conversationReadOrigin: ctx.conversationReadOrigin
+			},
+			opts: clientOpts,
+			run
+		});
+		return {
+			accountId,
+			clientOpts,
+			withReadTarget
+		};
 	};
-	const withReadTarget = async (roomId, run) => await withAuthorizedMatrixReadTarget({
-		cfg,
-		accountId,
-		roomId,
-		context: opts.readContext,
-		opts: clientOpts,
-		run
-	});
-	if (reactionActions.has(action)) {
-		if (!isActionEnabled("reactions")) throw new Error("Matrix reactions are disabled.");
+	if (action === "send") {
+		const to = readStringParam(params, "to", { required: true });
+		const mediaUrl = readStringParam(params, "media", { trim: false }) ?? readStringParam(params, "mediaUrl", { trim: false }) ?? readStringParam(params, "filePath", { trim: false }) ?? readStringParam(params, "path", { trim: false });
+		const content = readStringParam(params, "message", {
+			required: !mediaUrl,
+			allowEmpty: true,
+			trim: false
+		});
+		const replyToId = readStringParam(params, "replyTo");
+		const threadId = readStringParam(params, "threadId");
+		const audioAsVoice = typeof params.asVoice === "boolean" ? params.asVoice : typeof params.audioAsVoice === "boolean" ? params.audioAsVoice : void 0;
+		const { clientOpts } = prepareAction({
+			name: "messages",
+			disabledMessage: "Matrix messages are disabled."
+		});
+		const result = await sendMatrixMessage(to, content, {
+			mediaUrl: mediaUrl ?? void 0,
+			...ctx.mediaAccess ? { mediaAccess: ctx.mediaAccess } : {},
+			mediaLocalRoots: ctx.mediaLocalRoots,
+			replyToId: replyToId ?? void 0,
+			threadId: threadId ?? void 0,
+			audioAsVoice,
+			...clientOpts
+		});
+		return jsonResult({
+			ok: true,
+			result
+		});
+	}
+	if (action === "react") {
+		const messageId = readStringParam(params, "messageId", { required: true });
+		const emojiValue = readStringParam(params, "emoji", { allowEmpty: true });
+		const removeValue = typeof params.remove === "boolean" ? params.remove : void 0;
 		const roomId = readRoomId(params);
-		if (action === "emoji-list") {
-			const limit = readPositiveIntegerParam(params, "limit", { message: "limit must be a positive integer." });
-			const emojis = await withReadTarget(roomId, async (target) => listMatrixEmojis(target.roomId, {
+		const { clientOpts, withReadTarget } = prepareAction({
+			name: "reactions",
+			disabledMessage: "Matrix reactions are disabled."
+		});
+		const { emoji, remove, isEmpty } = readReactionParams({
+			emoji: emojiValue,
+			remove: removeValue
+		}, { removeErrorMessage: "Emoji is required to remove a Matrix reaction." });
+		if (remove || isEmpty) {
+			const result = await withReadTarget(roomId, async (target) => removeMatrixReactions(target.roomId, messageId, {
 				...clientOpts,
 				client: target.client,
-				limit
+				emoji: remove ? emoji : void 0
 			}));
 			return jsonResult({
 				ok: true,
-				emojis
+				removed: result.removed
 			});
 		}
+		await withReadTarget(roomId, async (target) => reactMatrixMessage(target.roomId, messageId, emoji, {
+			...clientOpts,
+			client: target.client
+		}));
+		return jsonResult({
+			ok: true,
+			added: emoji
+		});
+	}
+	if (action === "reactions") {
 		const messageId = readStringParam(params, "messageId", { required: true });
-		if (action === "react") {
-			const { emoji, remove, isEmpty } = readReactionParams(params, { removeErrorMessage: "Emoji is required to remove a Matrix reaction." });
-			if (remove || isEmpty) {
-				const result = await withReadTarget(roomId, async (target) => {
-					return await removeMatrixReactions(target.roomId, messageId, {
-						...clientOpts,
-						client: target.client,
-						emoji: remove ? emoji : void 0
-					});
-				});
-				return jsonResult({
-					ok: true,
-					removed: result.removed
-				});
-			}
-			await withReadTarget(roomId, async (target) => {
-				await reactMatrixMessage(target.roomId, messageId, emoji, {
-					...clientOpts,
-					client: target.client
-				});
-			});
-			return jsonResult({
-				ok: true,
-				added: emoji
-			});
-		}
 		const limit = readPositiveIntegerParam(params, "limit", { message: "limit must be a positive integer." });
-		const reactions = await withReadTarget(roomId, async (target) => {
-			return await listMatrixReactions(target.roomId, messageId, {
-				...clientOpts,
-				client: target.client,
-				limit: limit ?? void 0
-			});
+		const roomId = readRoomId(params);
+		const { clientOpts, withReadTarget } = prepareAction({
+			name: "reactions",
+			disabledMessage: "Matrix reactions are disabled."
 		});
+		const reactions = await withReadTarget(roomId, async (target) => listMatrixReactions(target.roomId, messageId, {
+			...clientOpts,
+			client: target.client,
+			limit: limit ?? void 0
+		}));
 		return jsonResult({
 			ok: true,
 			reactions
 		});
 	}
-	if (pollActions.has(action)) {
+	if (action === "emoji-list") {
+		const roomId = readStringParam(params, "roomId") ?? readStringParam(params, "channelId") ?? readStringParam(params, "to") ?? (ctx.toolContext?.currentChannelProvider === "matrix" ? ctx.toolContext.currentChannelId : void 0);
+		if (!roomId) throw new Error("Matrix emoji-list requires a roomId or current Matrix conversation.");
+		const limit = readPositiveIntegerParam(params, "limit", { message: "limit must be a positive integer." });
+		const { clientOpts, withReadTarget } = prepareAction({
+			name: "reactions",
+			disabledMessage: "Matrix reactions are disabled."
+		});
+		const emojis = await withReadTarget(readRoomId({ roomId }), async (target) => listMatrixEmojis(target.roomId, {
+			...clientOpts,
+			client: target.client,
+			limit
+		}));
+		return jsonResult({
+			ok: true,
+			emojis
+		});
+	}
+	if (action === "read") {
+		const limit = readPositiveIntegerParam(params, "limit", { message: "limit must be a positive integer." });
 		const roomId = readRoomId(params);
-		const pollId = readStringAliasParam(params, ["pollId", "messageId"], { required: true });
-		if (!pollId) throw new Error("pollId required");
-		const optionId = readStringParam(params, "pollOptionId");
-		const optionIndex = readPositiveIntegerParam(params, "pollOptionIndex", { message: "pollOptionIndex must be a positive integer." });
-		const optionIds = [...readStringArrayParam(params, "pollOptionIds") ?? [], ...optionId ? [optionId] : []];
-		const optionIndexes = [...readPositiveIntegerArrayParam(params, "pollOptionIndexes"), ...optionIndex !== void 0 ? [optionIndex] : []];
+		const before = readStringParam(params, "before");
+		const after = readStringParam(params, "after");
+		const threadId = readStringParam(params, "threadId");
+		const { clientOpts, withReadTarget } = prepareAction({
+			name: "messages",
+			disabledMessage: "Matrix messages are disabled."
+		});
 		const result = await withReadTarget(roomId, async (target) => {
-			return await voteMatrixPoll(target.roomId, pollId, {
+			const messages = await readMatrixMessages(target.roomId, {
+				limit: limit ?? void 0,
+				before: before ?? void 0,
+				after: after ?? void 0,
+				threadId: threadId ?? void 0,
 				...clientOpts,
-				client: target.client,
-				optionIds,
-				optionIndexes
+				client: target.client
 			});
+			return {
+				...messages,
+				messages: projectMatrixMessagesForDisplay(messages.messages),
+				roomId: target.roomId,
+				...threadId ? { threadId } : {}
+			};
 		});
 		return jsonResult({
 			ok: true,
-			result
+			...result
 		});
 	}
-	if (messageActions.has(action)) {
-		if (!isActionEnabled("messages")) throw new Error("Matrix messages are disabled.");
-		switch (action) {
-			case "sendMessage": {
-				const to = readStringParam(params, "to", { required: true });
-				const mediaUrl = readStringParam(params, "mediaUrl", { trim: false }) ?? readStringParam(params, "media", { trim: false }) ?? readStringParam(params, "filePath", { trim: false }) ?? readStringParam(params, "path", { trim: false });
-				const content = readStringParam(params, "content", {
-					required: !mediaUrl,
-					allowEmpty: true,
-					trim: false
-				});
-				const replyToId = readStringParam(params, "replyToId") ?? readStringParam(params, "replyTo");
-				const threadId = readStringParam(params, "threadId");
-				const audioAsVoice = typeof readRawParam(params, "audioAsVoice") === "boolean" ? readRawParam(params, "audioAsVoice") : typeof readRawParam(params, "asVoice") === "boolean" ? readRawParam(params, "asVoice") : void 0;
-				const result = await sendMatrixMessage(to, content, {
-					mediaUrl: mediaUrl ?? void 0,
-					...opts.mediaAccess ? { mediaAccess: opts.mediaAccess } : {},
-					mediaLocalRoots: opts.mediaLocalRoots,
-					replyToId: replyToId ?? void 0,
-					threadId: threadId ?? void 0,
-					audioAsVoice,
-					...clientOpts
-				});
-				return jsonResult({
-					ok: true,
-					result
-				});
-			}
-			case "editMessage": {
-				const roomId = readRoomId(params);
-				const messageId = readStringParam(params, "messageId", { required: true });
-				const content = readStringParam(params, "content", {
-					required: true,
-					trim: false
-				});
-				const result = await withReadTarget(roomId, async (target) => {
-					return await editMatrixMessage(target.roomId, messageId, content, {
-						...clientOpts,
-						client: target.client
-					});
-				});
-				return jsonResult({
-					ok: true,
-					result
-				});
-			}
-			case "deleteMessage": {
-				const roomId = readRoomId(params);
-				const messageId = readStringParam(params, "messageId", { required: true });
-				const reason = readStringParam(params, "reason");
-				await withReadTarget(roomId, async (target) => {
-					await deleteMatrixMessage(target.roomId, messageId, {
-						reason: reason ?? void 0,
-						...clientOpts,
-						client: target.client
-					});
-				});
-				return jsonResult({
-					ok: true,
-					deleted: true
-				});
-			}
-			case "readMessages": {
-				const roomId = readRoomId(params);
-				const limit = readPositiveIntegerParam(params, "limit", { message: "limit must be a positive integer." });
-				const before = readStringParam(params, "before");
-				const after = readStringParam(params, "after");
-				const threadId = readStringParam(params, "threadId");
-				const result = await withReadTarget(roomId, async (target) => {
-					const messages = await readMatrixMessages(target.roomId, {
-						limit: limit ?? void 0,
-						before: before ?? void 0,
-						after: after ?? void 0,
-						threadId: threadId ?? void 0,
-						...clientOpts,
-						client: target.client
-					});
-					return {
-						...messages,
-						messages: projectMatrixMessagesForDisplay(messages.messages),
-						roomId: target.roomId,
-						...threadId ? { threadId } : {}
-					};
-				});
-				return jsonResult({
-					ok: true,
-					...result
-				});
-			}
-		}
+	if (action === "edit") {
+		const messageId = readStringParam(params, "messageId", { required: true });
+		const content = readStringParam(params, "message", {
+			required: true,
+			trim: false
+		});
+		const roomId = readRoomId(params);
+		const { clientOpts, withReadTarget } = prepareAction({
+			name: "messages",
+			disabledMessage: "Matrix messages are disabled."
+		});
+		const result = await withReadTarget(roomId, async (target) => editMatrixMessage(target.roomId, messageId, content, {
+			...clientOpts,
+			client: target.client
+		}));
+		return jsonResult({
+			ok: true,
+			result
+		});
 	}
-	if (pinActions.has(action)) {
-		if (!isActionEnabled("pins")) throw new Error("Matrix pins are disabled.");
+	if (action === "delete") {
+		const messageId = readStringParam(params, "messageId", { required: true });
 		const roomId = readRoomId(params);
-		const request = action === "pinMessage" ? {
-			kind: "pin",
-			messageId: readStringParam(params, "messageId", { required: true })
-		} : action === "unpinMessage" ? {
-			kind: "unpin",
+		const { clientOpts, withReadTarget } = prepareAction({
+			name: "messages",
+			disabledMessage: "Matrix messages are disabled."
+		});
+		await withReadTarget(roomId, async (target) => deleteMatrixMessage(target.roomId, messageId, {
+			reason: void 0,
+			...clientOpts,
+			client: target.client
+		}));
+		return jsonResult({
+			ok: true,
+			deleted: true
+		});
+	}
+	if (action === "pin" || action === "unpin" || action === "list-pins") {
+		const request = action === "list-pins" ? { kind: "list" } : {
+			kind: action,
 			messageId: readStringParam(params, "messageId", { required: true })
-		} : { kind: "list" };
+		};
+		const roomId = readRoomId(params);
+		const { clientOpts, withReadTarget } = prepareAction({
+			name: "pins",
+			disabledMessage: "Matrix pins are disabled."
+		});
 		return await withReadTarget(roomId, async (target) => {
 			const actionOpts = {
 				...clientOpts,
@@ -591,54 +579,112 @@ async function handleMatrixAction(params, cfg, opts = {}) {
 			});
 		});
 	}
-	if (profileActions.has(action)) {
-		if (!isActionEnabled("profile")) throw new Error("Matrix profile updates are disabled.");
+	if (action === "set-profile") {
+		if (ctx.senderIsOwner !== true) throw new ToolAuthorizationError("Matrix profile updates require owner access.");
 		const avatarPath = readStringParam(params, "avatarPath") ?? readStringParam(params, "path") ?? readStringParam(params, "filePath");
+		const displayName = readStringParam(params, "displayName") ?? readStringParam(params, "name");
+		const avatarUrl = readStringParam(params, "avatarUrl");
+		const { accountId } = prepareAction({
+			name: "profile",
+			disabledMessage: "Matrix profile updates are disabled."
+		});
 		const result = await applyMatrixProfileUpdate({
 			cfg,
 			account: accountId,
-			displayName: readStringParam(params, "displayName") ?? readStringParam(params, "name"),
-			avatarUrl: readStringParam(params, "avatarUrl"),
+			displayName,
+			avatarUrl,
 			avatarPath,
-			mediaLocalRoots: opts.mediaLocalRoots
+			mediaLocalRoots: ctx.mediaLocalRoots
 		});
 		return jsonResult({
 			ok: true,
 			...result
 		});
 	}
-	if (action === "memberInfo") {
-		if (!isActionEnabled("memberInfo")) throw new Error("Matrix member info is disabled.");
+	if (action === "member-info") {
 		const userId = readStringParam(params, "userId", { required: true });
-		const result = await withReadTarget(readRoomId(params), async (target) => {
-			return await getMatrixMemberInfo(userId, {
-				roomId: target.roomId,
-				...clientOpts,
-				client: target.client
-			});
+		const roomId = readRoomId(params);
+		const { clientOpts, withReadTarget } = prepareAction({
+			name: "memberInfo",
+			disabledMessage: "Matrix member info is disabled."
 		});
+		const result = await withReadTarget(roomId, async (target) => getMatrixMemberInfo(userId, {
+			roomId: target.roomId,
+			...clientOpts,
+			client: target.client
+		}));
 		return jsonResult({
 			ok: true,
 			member: result
 		});
 	}
-	if (action === "channelInfo") {
-		if (!isActionEnabled("channelInfo")) throw new Error("Matrix room info is disabled.");
-		const result = await withReadTarget(readRoomId(params), async (target) => {
-			return await getMatrixRoomInfo(target.roomId, {
+	if (action === "channel-info") {
+		const roomId = readRoomId(params);
+		const { clientOpts, withReadTarget } = prepareAction({
+			name: "channelInfo",
+			disabledMessage: "Matrix room info is disabled."
+		});
+		const result = await withReadTarget(roomId, async (target) => getMatrixRoomInfo(target.roomId, {
+			...clientOpts,
+			client: target.client
+		}));
+		return jsonResult({
+			ok: true,
+			room: result
+		});
+	}
+	if (action === "poll-vote") {
+		const { clientOpts, withReadTarget } = prepareAction();
+		const roomId = readRoomId(params);
+		const pollId = readStringAliasParam(params, ["pollId", "messageId"], { required: true });
+		if (!pollId) throw new Error("pollId required");
+		const optionId = readStringParam(params, "pollOptionId");
+		const optionIndex = readPositiveIntegerParam(params, "pollOptionIndex", { message: "pollOptionIndex must be a positive integer." });
+		const optionIds = [...readStringArrayParam(params, "pollOptionIds") ?? [], ...optionId ? [optionId] : []];
+		const optionIndexes = [...readPositiveIntegerArrayParam(params, "pollOptionIndexes"), ...optionIndex !== void 0 ? [optionIndex] : []];
+		const result = await withReadTarget(roomId, async (target) => {
+			return await voteMatrixPoll(target.roomId, pollId, {
 				...clientOpts,
-				client: target.client
+				client: target.client,
+				optionIds,
+				optionIndexes
 			});
 		});
 		return jsonResult({
 			ok: true,
-			room: result
+			result
 		});
 	}
-	if (verificationActions.has(action)) {
-		if (!isActionEnabled("verification")) throw new Error("Matrix verification actions are disabled.");
+	if (action === "permissions") {
+		if (ctx.senderIsOwner !== true) throw new ToolAuthorizationError("Matrix verification actions require owner access.");
+		const operation = normalizeLowercaseStringOrEmpty(readStringParam(params, "operation") ?? readStringParam(params, "mode") ?? "verification-list");
+		const operationToAction = {
+			"encryption-status": "encryptionStatus",
+			"verification-status": "verificationStatus",
+			"verification-bootstrap": "verificationBootstrap",
+			"verification-recovery-key": "verificationRecoveryKey",
+			"verification-backup-status": "verificationBackupStatus",
+			"verification-backup-restore": "verificationBackupRestore",
+			"verification-list": "verificationList",
+			"verification-request": "verificationRequest",
+			"verification-accept": "verificationAccept",
+			"verification-cancel": "verificationCancel",
+			"verification-start": "verificationStart",
+			"verification-generate-qr": "verificationGenerateQr",
+			"verification-scan-qr": "verificationScanQr",
+			"verification-sas": "verificationSas",
+			"verification-confirm": "verificationConfirm",
+			"verification-mismatch": "verificationMismatch",
+			"verification-confirm-qr": "verificationConfirmQr"
+		};
+		if (!Object.hasOwn(operationToAction, operation)) throw new Error(`Unsupported Matrix permissions operation: ${operation}. Supported values: ${Object.keys(operationToAction).join(", ")}`);
+		const resolvedAction = operationToAction[operation];
+		const { clientOpts } = prepareAction({
+			name: "verification",
+			disabledMessage: "Matrix verification actions are disabled."
+		});
 		const requestId = readStringParam(params, "requestId") ?? readStringParam(params, "verificationId") ?? readStringParam(params, "id");
-		if (action === "encryptionStatus") {
+		if (resolvedAction === "encryptionStatus") {
 			const includeRecoveryKey = params.includeRecoveryKey === true;
 			const status = await getMatrixEncryptionStatus({
 				includeRecoveryKey,
@@ -649,7 +695,7 @@ async function handleMatrixAction(params, cfg, opts = {}) {
 				status
 			});
 		}
-		if (action === "verificationStatus") {
+		if (resolvedAction === "verificationStatus") {
 			const includeRecoveryKey = params.includeRecoveryKey === true;
 			const status = await getMatrixVerificationStatus({
 				includeRecoveryKey,
@@ -660,7 +706,7 @@ async function handleMatrixAction(params, cfg, opts = {}) {
 				status
 			});
 		}
-		if (action === "verificationBootstrap") {
+		if (resolvedAction === "verificationBootstrap") {
 			const recoveryKey = readStringParam(params, "recoveryKey", { trim: false }) ?? readStringParam(params, "key", { trim: false });
 			const result = await bootstrapMatrixVerification({
 				recoveryKey: recoveryKey ?? void 0,
@@ -672,7 +718,7 @@ async function handleMatrixAction(params, cfg, opts = {}) {
 				result
 			});
 		}
-		if (action === "verificationRecoveryKey") {
+		if (resolvedAction === "verificationRecoveryKey") {
 			const recoveryKey = readStringParam(params, "recoveryKey", { trim: false }) ?? readStringParam(params, "key", { trim: false });
 			const result = await verifyMatrixRecoveryKey(readStringParam({ recoveryKey }, "recoveryKey", {
 				required: true,
@@ -683,14 +729,14 @@ async function handleMatrixAction(params, cfg, opts = {}) {
 				result
 			});
 		}
-		if (action === "verificationBackupStatus") {
+		if (resolvedAction === "verificationBackupStatus") {
 			const status = await getMatrixRoomKeyBackupStatus(clientOpts);
 			return jsonResult({
 				ok: true,
 				status
 			});
 		}
-		if (action === "verificationBackupRestore") {
+		if (resolvedAction === "verificationBackupRestore") {
 			const recoveryKey = readStringParam(params, "recoveryKey", { trim: false }) ?? readStringParam(params, "key", { trim: false });
 			const result = await restoreMatrixRoomKeyBackup({
 				recoveryKey: recoveryKey ?? void 0,
@@ -701,14 +747,14 @@ async function handleMatrixAction(params, cfg, opts = {}) {
 				result
 			});
 		}
-		if (action === "verificationList") {
+		if (resolvedAction === "verificationList") {
 			const verifications = await listMatrixVerifications(clientOpts);
 			return jsonResult({
 				ok: true,
 				verifications
 			});
 		}
-		if (action === "verificationRequest") {
+		if (resolvedAction === "verificationRequest") {
 			const userId = readStringParam(params, "userId");
 			const deviceId = readStringParam(params, "deviceId");
 			const roomId = readStringParam(params, "roomId") ?? readStringParam(params, "channelId");
@@ -725,14 +771,14 @@ async function handleMatrixAction(params, cfg, opts = {}) {
 				verification
 			});
 		}
-		if (action === "verificationAccept") {
+		if (resolvedAction === "verificationAccept") {
 			const verification = await acceptMatrixVerification(readStringParam({ requestId }, "requestId", { required: true }), clientOpts);
 			return jsonResult({
 				ok: true,
 				verification
 			});
 		}
-		if (action === "verificationCancel") {
+		if (resolvedAction === "verificationCancel") {
 			const reason = readStringParam(params, "reason");
 			const code = readStringParam(params, "code");
 			const verification = await cancelMatrixVerification(readStringParam({ requestId }, "requestId", { required: true }), {
@@ -745,7 +791,7 @@ async function handleMatrixAction(params, cfg, opts = {}) {
 				verification
 			});
 		}
-		if (action === "verificationStart") {
+		if (resolvedAction === "verificationStart") {
 			const methodRaw = readStringParam(params, "method");
 			const method = normalizeOptionalLowercaseString(methodRaw);
 			if (method && method !== "sas") throw new Error("Matrix verificationStart only supports method=sas; use verificationGenerateQr/verificationScanQr for QR flows.");
@@ -758,14 +804,14 @@ async function handleMatrixAction(params, cfg, opts = {}) {
 				verification
 			});
 		}
-		if (action === "verificationGenerateQr") {
+		if (resolvedAction === "verificationGenerateQr") {
 			const qr = await generateMatrixVerificationQr(readStringParam({ requestId }, "requestId", { required: true }), clientOpts);
 			return jsonResult({
 				ok: true,
 				...qr
 			});
 		}
-		if (action === "verificationScanQr") {
+		if (resolvedAction === "verificationScanQr") {
 			const qrDataBase64 = readStringParam(params, "qrDataBase64") ?? readStringParam(params, "qrData") ?? readStringParam(params, "qr");
 			const verification = await scanMatrixVerificationQr(readStringParam({ requestId }, "requestId", { required: true }), readStringParam({ qrDataBase64 }, "qrDataBase64", { required: true }), clientOpts);
 			return jsonResult({
@@ -773,28 +819,28 @@ async function handleMatrixAction(params, cfg, opts = {}) {
 				verification
 			});
 		}
-		if (action === "verificationSas") {
+		if (resolvedAction === "verificationSas") {
 			const sas = await getMatrixVerificationSas(readStringParam({ requestId }, "requestId", { required: true }), clientOpts);
 			return jsonResult({
 				ok: true,
 				sas
 			});
 		}
-		if (action === "verificationConfirm") {
+		if (resolvedAction === "verificationConfirm") {
 			const verification = await confirmMatrixVerificationSas(readStringParam({ requestId }, "requestId", { required: true }), clientOpts);
 			return jsonResult({
 				ok: true,
 				verification
 			});
 		}
-		if (action === "verificationMismatch") {
+		if (resolvedAction === "verificationMismatch") {
 			const verification = await mismatchMatrixVerificationSas(readStringParam({ requestId }, "requestId", { required: true }), clientOpts);
 			return jsonResult({
 				ok: true,
 				verification
 			});
 		}
-		if (action === "verificationConfirmQr") {
+		if (resolvedAction === "verificationConfirmQr") {
 			const verification = await confirmMatrixVerificationReciprocateQr(readStringParam({ requestId }, "requestId", { required: true }), clientOpts);
 			return jsonResult({
 				ok: true,
@@ -802,7 +848,7 @@ async function handleMatrixAction(params, cfg, opts = {}) {
 			});
 		}
 	}
-	throw new Error(`Unsupported Matrix action: ${action}`);
+	throw new Error(`Action ${action} is not supported for provider matrix.`);
 }
 //#endregion
 export { handleMatrixAction };