@openclaw/matrix 2026.9.8 → 2026.10.1-beta.1

package/dist/doctor-contract-api.js

@@ -1,8 +1,8 @@
-import { n as normalizeCompatibilityConfig, r as runtime_doctor_migrations_exports, t as legacyConfigRules } from "./.setup/doctor-contract-De6geW0h.mjs";
+import { n as normalizeCompatibilityConfig, r as runtime_doctor_migrations_exports, t as legacyConfigRules } from "./.setup/doctor-contract-CsTNmbMa.mjs";
 import { i as normalizeMatrixStoredCredentials, n as isMatrixCredentialRevocation, r as matrixCredentialsStoreKey, t as MATRIX_CREDENTIALS_NAMESPACE } from "./.setup/credentials-state-B3cuUFwZ.mjs";
 import { c as resolveMatrixStateLayoutChildDepth, i as resolveMatrixCredentialsDir } from "./.setup/storage-paths-B51JM-pC.mjs";
-import { D as writeMatrixRecoveryKeyStateToStore, O as resolveMatrixSqliteStateEnv, T as writeMatrixLegacyCryptoMigrationStateToStore, a as writeMatrixStorageMetaStateToStore, c as MATRIX_RECOVERY_KEY_FILENAME, g as readLegacyMatrixLegacyCryptoMigrationState, h as openMatrixRecoveryKeyStoreOptions, i as openMatrixStorageMetaStoreOptions, l as hasMatrixLegacyCryptoMigrationStateInStore, m as openMatrixLegacyCryptoMigrationStoreOptions, n as hasMatrixStorageMetaStateInStore, o as MATRIX_IDB_SNAPSHOT_FILENAME, r as normalizeMatrixStorageMetadata, s as MATRIX_LEGACY_CRYPTO_MIGRATION_FILENAME, u as hasMatrixRecoveryKeyStateInStore, v as readLegacyMatrixRecoveryKeyState } from "./.setup/storage-metadata-BDRZ7vpX.mjs";
-import { a as readLegacyMatrixSyncCacheState, c as writeMatrixSyncCacheStateToStore, i as openMatrixSyncCacheStoreOptions, r as hasMatrixSyncCacheStateInStore } from "./.setup/sync-cache-state-C6sEmvJK.mjs";
+import { a as describeRetiredMatrixState, o as resolveMatrixSqliteStateEnv, t as RETIRED_MATRIX_STATE_FILENAMES } from "./.setup/retired-state-BXUQ2I-C.mjs";
+import { i as readLegacyMatrixSyncCacheState, n as hasMatrixSyncCacheStateInStore, r as openMatrixSyncCacheStoreOptions, s as writeMatrixSyncCacheStateToStore } from "./.setup/sync-cache-state-C2z64uyk.mjs";
 import { normalizeAccountId } from "openclaw/plugin-sdk/account-id";
 import { isRecord } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { createHash } from "node:crypto";
@@ -35,8 +35,10 @@ async function walkMatrixStateFiles(stateDir, includeFile, stateRootDepths = [])
 //#region extensions/matrix/src/matrix/account-state-schema-doctor.ts
 const STATE_DATABASE_FILENAME = "openclaw.sqlite";
 async function collectMatrixAccountStateRoots(stateDir) {
-	const { entries, failedDirs } = await walkMatrixStateFiles(stateDir, (name, depth) => depth === 5 && name === STATE_DATABASE_FILENAME, [2, 4]);
+	const { entries, failedDirs } = await walkMatrixStateFiles(stateDir, (name, depth) => depth === 5 && name === STATE_DATABASE_FILENAME || (depth === 0 || depth === 2 || depth === 4) && RETIRED_MATRIX_STATE_FILENAMES.has(name), [2, 4]);
 	if (failedDirs.length > 0) throw failedDirs[0].error;
+	const retired = entries.filter((entry) => path.basename(entry.path) !== STATE_DATABASE_FILENAME);
+	if (retired.length > 0) throw new Error(retired.map((entry) => describeRetiredMatrixState(entry.path)).join("\n"));
 	return entries.map((entry) => path.dirname(path.dirname(entry.path))).toSorted();
 }
 function describeMatrixAccountStateMigration(storageRootDir, migration) {
@@ -81,12 +83,10 @@ const matrixAccountStateSchemaMigration = {
 //#region extensions/matrix/src/matrix/monitor/inbound-dedupe-migration.ts
 const LEGACY_SQLITE_NAMESPACE = "inbound-dedupe";
 const LEGACY_MARKERS_NAMESPACE = "inbound-dedupe-migrations";
-const LEGACY_JSON_VERSION = 1;
 const MATRIX_PLUGIN_ID = "matrix";
 const MIGRATION_COMPLETION_NAMESPACE = "inbound-dedupe-migration-state";
 const MIGRATION_COMPLETION_KEY = "sqlite-json-to-claimable-v1";
 const STATE_DATABASE_RELATIVE_PATH = path.join("state", "openclaw.sqlite");
-const STORAGE_META_FILENAME = "storage-meta.json";
 const MATRIX_LEGACY_INBOUND_DEDUPE_FILENAME = "inbound-dedupe.json";
 function openMatrixInboundDedupeMigrationCompletionStore(context, env) {
 	return context.openPluginStateKeyedStore({
@@ -120,20 +120,16 @@ async function reserveMatrixInboundDedupeMigrationCompletion(context, env) {
 async function collectMatrixInboundDedupeSources(stateDir) {
 	const matrixRoot = path.resolve(stateDir, "matrix");
 	const sqliteRoots = /* @__PURE__ */ new Set();
-	const jsonRoots = /* @__PURE__ */ new Set();
-	const { entries, failedDirs } = await walkMatrixStateFiles(stateDir, (name, depth) => (depth === 0 || depth === 2 || depth === 4) && name === "inbound-dedupe.json" || depth === 5 && name === "openclaw.sqlite", [
+	const { entries, failedDirs } = await walkMatrixStateFiles(stateDir, (name, depth) => (depth === 0 || depth === 2 || depth === 4) && name === MATRIX_LEGACY_INBOUND_DEDUPE_FILENAME || depth === 5 && name === "openclaw.sqlite", [
 		0,
 		2,
 		4
 	]);
-	for (const entry of entries) if (entry.name === "inbound-dedupe.json") jsonRoots.add(path.dirname(entry.path));
+	for (const entry of entries) if (entry.name === MATRIX_LEGACY_INBOUND_DEDUPE_FILENAME) throw new Error(describeRetiredMatrixState(entry.path));
 	else sqliteRoots.add(path.dirname(path.dirname(entry.path)));
 	const warnings = failedDirs.map(({ path: directory, error }) => `Failed scanning Matrix inbound dedupe sources under ${directory}: ${String(error)}`);
 	const isAccountRoot = (root) => root !== matrixRoot;
-	const roots = {
-		sqliteRoots: [...sqliteRoots].filter(isAccountRoot).toSorted(),
-		jsonRoots: [...jsonRoots].filter(isAccountRoot).toSorted()
-	};
+	const roots = { sqliteRoots: [...sqliteRoots].filter(isAccountRoot).toSorted() };
 	return warnings.length === 0 ? {
 		status: "complete",
 		...roots
@@ -232,50 +228,8 @@ async function verifyMatrixInboundDedupeSourcesRetired(stateDir) {
 	} catch (err) {
 		warnings.push(`Failed verifying retired Matrix inbound dedupe rows for ${storageRootDir}: ${String(err)}`);
 	}
-	for (const storageRootDir of remaining.jsonRoots) warnings.push(`Matrix inbound dedupe JSON remains after retirement for ${storageRootDir}`);
 	return warnings;
 }
-async function resolveJsonRootAccountId(storageRootDir) {
-	for (const filename of [STORAGE_META_FILENAME, `${STORAGE_META_FILENAME}.migrated`]) try {
-		const metadata = normalizeMatrixStorageMetadata(JSON.parse(await fs.readFile(path.join(storageRootDir, filename), "utf8")));
-		if (metadata?.accountId) return metadata.accountId;
-	} catch {}
-	return "default";
-}
-/**
-* Reads one storage root's legacy inbound-dedupe.json markers. Throws on file
-* read errors so a transiently unreadable file is never retired unread, and
-* returns null for malformed content so the caller can archive it explicitly.
-*/
-async function readLegacyInboundDedupeJsonSource(storageRootDir) {
-	const jsonPath = path.join(storageRootDir, MATRIX_LEGACY_INBOUND_DEDUPE_FILENAME);
-	const raw = await fs.readFile(jsonPath, "utf8");
-	let parsed;
-	try {
-		parsed = JSON.parse(raw);
-	} catch {
-		return null;
-	}
-	if (!isRecord(parsed) || parsed.version !== LEGACY_JSON_VERSION || !Array.isArray(parsed.entries)) return null;
-	const accountId = await resolveJsonRootAccountId(storageRootDir);
-	const markers = [];
-	for (const entry of parsed.entries) {
-		if (!isRecord(entry) || typeof entry.key !== "string") continue;
-		const separator = entry.key.indexOf("|");
-		if (separator <= 0) continue;
-		const roomId = entry.key.slice(0, separator).trim();
-		const eventId = entry.key.slice(separator + 1).trim();
-		const ts = normalizeLegacyTimestamp(entry.ts);
-		if (!roomId || !eventId || ts === null) continue;
-		markers.push({
-			accountId,
-			roomId,
-			eventId,
-			ts
-		});
-	}
-	return markers;
-}
 /**
 * Imports the globally newest legacy markers into the claimable-dedupe store.
 * Never exceeds capacity, never replaces a post-upgrade destination row, and
@@ -285,7 +239,7 @@ async function readLegacyInboundDedupeJsonSource(storageRootDir) {
 */
 async function importNewestInboundDedupeMarkers(params) {
 	const { createPersistentDedupeImportEntry } = await import("openclaw/plugin-sdk/persistent-dedupe");
-	const { buildMatrixInboundDedupeEventKey, MATRIX_INBOUND_DEDUPE_STATE_MAX_ENTRIES, MATRIX_INBOUND_DEDUPE_TTL_MS, resolveMatrixInboundDedupeStateNamespace } = await import("./.setup/inbound-dedupe-BGrMrTTu.mjs");
+	const { buildMatrixInboundDedupeEventKey, MATRIX_INBOUND_DEDUPE_STATE_MAX_ENTRIES, MATRIX_INBOUND_DEDUPE_TTL_MS, resolveMatrixInboundDedupeStateNamespace } = await import("./.setup/inbound-dedupe-C-EBGY0B.mjs");
 	const now = params.now ?? Date.now();
 	const stateMaxEntries = params.stateMaxEntries ?? MATRIX_INBOUND_DEDUPE_STATE_MAX_ENTRIES;
 	const newestByKey = /* @__PURE__ */ new Map();
@@ -352,7 +306,6 @@ async function importNewestInboundDedupeMarkers(params) {
 //#endregion
 //#region extensions/matrix/doctor-contract-api.ts
 const MATRIX_SYNC_CACHE_FILENAME = "bot-storage.json";
-const MATRIX_STORAGE_META_FILENAME = "storage-meta.json";
 async function collectLegacyMatrixCredentialSources(params) {
 	const credentialsDir = resolveMatrixCredentialsDir(params.stateDir);
 	let entries;
@@ -367,7 +320,7 @@ async function collectLegacyMatrixCredentialSources(params) {
 		return left.name.localeCompare(right.name);
 	});
 	if (files.length === 0) return [];
-	const { requiresExplicitMatrixDefaultAccount, resolveMatrixDefaultOrOnlyAccountId } = await import("./.setup/account-selection-B7axQ80R.mjs").then((n) => n.t);
+	const { requiresExplicitMatrixDefaultAccount, resolveMatrixDefaultOrOnlyAccountId } = await import("./.setup/account-selection-BDeeqwwR.mjs").then((n) => n.t);
 	return files.map((entry) => {
 		const namedAccount = /^credentials(?:-([a-z0-9._-]+))?\.json$/iu.exec(entry.name)?.[1];
 		return {
@@ -389,94 +342,16 @@ async function readLegacyMatrixCredentials(source) {
 		return null;
 	}
 }
-async function collectLegacyMatrixStateRoots(stateDir, filename, options) {
-	const { entries } = await walkMatrixStateFiles(stateDir, (name, depth) => name === filename && (depth === 2 || depth === 4 || depth === 0 && options?.includeMatrixRoot === true));
-	return entries.map((entry) => path.dirname(entry.path)).toSorted();
-}
-async function readLegacyMatrixStorageMetadata(storageRootDir) {
-	try {
-		return normalizeMatrixStorageMetadata(JSON.parse(await fs.readFile(path.join(storageRootDir, MATRIX_STORAGE_META_FILENAME), "utf8")));
-	} catch {
-		return null;
+async function* readLegacyMatrixSyncCacheSources(stateDir) {
+	const { entries } = await walkMatrixStateFiles(stateDir, (name, depth) => name === MATRIX_SYNC_CACHE_FILENAME && (depth === 2 || depth === 4));
+	for (const storageRootDir of entries.map((entry) => path.dirname(entry.path)).toSorted()) {
+		const payload = await readLegacyMatrixSyncCacheState(storageRootDir);
+		if (payload) yield {
+			storageRootDir,
+			payload
+		};
 	}
 }
-async function archiveLegacyMatrixStateFile(params) {
-	const warningCount = params.warnings.length;
-	await (0, runtime_doctor_migrations_exports.archiveLegacyStateSource)({
-		filePath: path.join(params.storageRootDir, params.filename),
-		label: params.label,
-		changes: params.changes,
-		warnings: params.warnings
-	});
-	if (params.notice && params.warnings.length === warningCount) params.notices?.push(params.notice);
-}
-function defineMatrixLegacyFileMigration(spec) {
-	const jsonLabel = spec.jsonLabel ?? spec.label;
-	const readSources = async function* (stateDir) {
-		for (const storageRootDir of await collectLegacyMatrixStateRoots(stateDir, spec.filename, spec)) {
-			const payload = await spec.read(storageRootDir);
-			if (payload) yield {
-				storageRootDir,
-				payload
-			};
-		}
-	};
-	return {
-		id: spec.id,
-		label: spec.label,
-		async detectLegacyState(params) {
-			const previews = [];
-			for await (const { storageRootDir } of readSources(params.stateDir)) previews.push(`${jsonLabel} JSON can migrate to SQLite: ${storageRootDir}`);
-			return previews.length > 0 ? { preview: previews } : null;
-		},
-		async migrateLegacyState(params) {
-			const changes = [];
-			const warnings = [];
-			const notices = [];
-			for await (const source of readSources(params.stateDir)) {
-				const store = params.context.openPluginStateKeyedStore(spec.storeOptions(source.storageRootDir));
-				const existing = await spec.hasState({
-					...source,
-					store
-				});
-				if (!existing) {
-					await spec.write({
-						...source,
-						store
-					});
-					changes.push(`Migrated ${jsonLabel} JSON to SQLite for ${source.storageRootDir}`);
-				}
-				await archiveLegacyMatrixStateFile({
-					storageRootDir: source.storageRootDir,
-					filename: spec.filename,
-					label: spec.label,
-					changes,
-					warnings,
-					notices,
-					notice: existing ? `Kept existing ${spec.label} in SQLite and archived the legacy source for ${source.storageRootDir}` : void 0
-				});
-			}
-			return {
-				changes,
-				warnings,
-				...notices.length > 0 ? { notices } : {}
-			};
-		}
-	};
-}
-const legacyCryptoMigration = defineMatrixLegacyFileMigration({
-	id: "matrix-legacy-crypto-migration-json-to-plugin-state",
-	label: "Matrix legacy crypto migration",
-	filename: MATRIX_LEGACY_CRYPTO_MIGRATION_FILENAME,
-	includeMatrixRoot: true,
-	read: readLegacyMatrixLegacyCryptoMigrationState,
-	storeOptions: openMatrixLegacyCryptoMigrationStoreOptions,
-	hasState: hasMatrixLegacyCryptoMigrationStateInStore,
-	write: ({ payload, store }) => writeMatrixLegacyCryptoMigrationStateToStore({
-		state: payload,
-		store
-	})
-});
 const stateMigrations = [
 	matrixAccountStateSchemaMigration,
 	{
@@ -557,9 +432,11 @@ const stateMigrations = [
 		id: "matrix-inbound-dedupe-to-claimable-dedupe",
 		label: "Matrix inbound dedupe markers",
 		async detectLegacyState(params) {
+			await collectMatrixInboundDedupeSources(params.stateDir);
 			return await hasCompletedMatrixInboundDedupeMigration(params.context, params.env) ? null : { preview: ["Matrix inbound dedupe legacy sources need a one-time migration scan"] };
 		},
 		async migrateLegacyState(params) {
+			const sources = await collectMatrixInboundDedupeSources(params.stateDir);
 			const io = {
 				context: params.context,
 				env: params.env
@@ -579,7 +456,6 @@ const stateMigrations = [
 					warnings
 				};
 			}
-			const sources = await collectMatrixInboundDedupeSources(params.stateDir);
 			if (sources.status === "incomplete") warnings.push(...sources.warnings);
 			const recordCompletionIfClean = async (verifyRetirement = false) => {
 				if (warnings.length > 0) return;
@@ -589,7 +465,7 @@ const stateMigrations = [
 				}
 				try {
 					await recordMatrixInboundDedupeMigrationCompletion(params.context, params.env);
-					if (sources.sqliteRoots.length + sources.jsonRoots.length > 0) changes.push(`Recorded Matrix inbound dedupe migration completion (${sources.sqliteRoots.length} SQLite roots, ${sources.jsonRoots.length} JSON roots scanned)`);
+					if (sources.sqliteRoots.length > 0) changes.push(`Recorded Matrix inbound dedupe migration completion (${sources.sqliteRoots.length} SQLite roots scanned)`);
 				} catch (err) {
 					warnings.push(`Failed recording Matrix inbound dedupe migration completion: ${String(err)}`);
 				}
@@ -604,16 +480,7 @@ const stateMigrations = [
 			} catch (err) {
 				warnings.push(`Failed reading Matrix inbound dedupe rows for ${storageRootDir}: ${String(err)}; left legacy rows in place`);
 			}
-			const jsonRootsToRetire = [];
-			for (const storageRootDir of sources.jsonRoots) try {
-				const markers = await readLegacyInboundDedupeJsonSource(storageRootDir);
-				if (markers === null) warnings.push(`Matrix inbound dedupe JSON for ${storageRootDir} is malformed; archived without import`);
-				else gathered.push(...markers);
-				jsonRootsToRetire.push(storageRootDir);
-			} catch (err) {
-				warnings.push(`Failed reading Matrix inbound dedupe JSON for ${storageRootDir}: ${String(err)}; left legacy file in place`);
-			}
-			if (sqliteRootsToRetire.length + jsonRootsToRetire.length === 0) {
+			if (sqliteRootsToRetire.length === 0) {
 				await recordCompletionIfClean();
 				return {
 					changes,
@@ -639,13 +506,6 @@ const stateMigrations = [
 			} catch (err) {
 				warnings.push(`Failed retiring Matrix inbound dedupe rows for ${storageRootDir}: ${String(err)}`);
 			}
-			for (const storageRootDir of jsonRootsToRetire) await archiveLegacyMatrixStateFile({
-				storageRootDir,
-				filename: MATRIX_LEGACY_INBOUND_DEDUPE_FILENAME,
-				label: "Matrix inbound dedupe",
-				changes,
-				warnings
-			});
 			await recordCompletionIfClean(true);
 			return {
 				changes,
@@ -653,53 +513,39 @@ const stateMigrations = [
 			};
 		}
 	},
-	defineMatrixLegacyFileMigration({
-		id: "matrix-storage-meta-json-to-plugin-state",
-		label: "Matrix storage metadata",
-		filename: MATRIX_STORAGE_META_FILENAME,
-		read: readLegacyMatrixStorageMetadata,
-		storeOptions: openMatrixStorageMetaStoreOptions,
-		hasState: hasMatrixStorageMetaStateInStore,
-		write: writeMatrixStorageMetaStateToStore
-	}),
-	defineMatrixLegacyFileMigration({
+	{
 		id: "matrix-sync-cache-json-to-plugin-state",
 		label: "Matrix sync cache",
-		filename: MATRIX_SYNC_CACHE_FILENAME,
-		read: readLegacyMatrixSyncCacheState,
-		storeOptions: openMatrixSyncCacheStoreOptions,
-		hasState: hasMatrixSyncCacheStateInStore,
-		write: writeMatrixSyncCacheStateToStore
-	}),
-	defineMatrixLegacyFileMigration({
-		id: "matrix-recovery-key-json-to-plugin-state",
-		label: "Matrix recovery key",
-		jsonLabel: "Matrix recovery-key",
-		filename: MATRIX_RECOVERY_KEY_FILENAME,
-		read: readLegacyMatrixRecoveryKeyState,
-		storeOptions: openMatrixRecoveryKeyStoreOptions,
-		hasState: hasMatrixRecoveryKeyStateInStore,
-		write: writeMatrixRecoveryKeyStateToStore
-	}),
-	{
-		id: "matrix-legacy-crypto-migration-json-to-plugin-state",
-		label: "Matrix legacy crypto state",
 		async detectLegacyState(params) {
-			const previews = (await legacyCryptoMigration.detectLegacyState(params))?.preview ?? [];
-			for (const storageRootDir of await collectLegacyMatrixStateRoots(params.stateDir, MATRIX_IDB_SNAPSHOT_FILENAME, { includeMatrixRoot: true })) previews.push(`Matrix IndexedDB snapshot JSON can migrate to SQLite: ${storageRootDir}`);
+			const previews = [];
+			for await (const { storageRootDir } of readLegacyMatrixSyncCacheSources(params.stateDir)) previews.push(`Matrix sync cache JSON can migrate to SQLite: ${storageRootDir}`);
 			return previews.length > 0 ? { preview: previews } : null;
 		},
 		async migrateLegacyState(params) {
-			const { changes, warnings, notices = [] } = await legacyCryptoMigration.migrateLegacyState(params);
-			for (const storageRootDir of await collectLegacyMatrixStateRoots(params.stateDir, MATRIX_IDB_SNAPSHOT_FILENAME, { includeMatrixRoot: true })) {
-				const { migrateLegacyMatrixIdbSnapshot } = await import("./.setup/crypto-snapshot-doctor.runtime-44FrCPR7.mjs");
-				await migrateLegacyMatrixIdbSnapshot({
-					storageRootDir,
-					context: params.context,
+			const changes = [];
+			const warnings = [];
+			const notices = [];
+			for await (const source of readLegacyMatrixSyncCacheSources(params.stateDir)) {
+				const store = params.context.openPluginStateKeyedStore(openMatrixSyncCacheStoreOptions(source.storageRootDir));
+				const existing = await hasMatrixSyncCacheStateInStore({
+					...source,
+					store
+				});
+				if (!existing) {
+					await writeMatrixSyncCacheStateToStore({
+						...source,
+						store
+					});
+					changes.push(`Migrated Matrix sync cache JSON to SQLite for ${source.storageRootDir}`);
+				}
+				const warningCount = warnings.length;
+				await (0, runtime_doctor_migrations_exports.archiveLegacyStateSource)({
+					filePath: path.join(source.storageRootDir, MATRIX_SYNC_CACHE_FILENAME),
+					label: "Matrix sync cache",
 					changes,
-					notices,
 					warnings
 				});
+				if (existing && warnings.length === warningCount) notices.push(`Kept existing Matrix sync cache in SQLite and archived the legacy source for ${source.storageRootDir}`);
 			}
 			return {
 				changes,

package/dist/helper-api.js

@@ -1,4 +1,4 @@
-import { a as resolveConfiguredMatrixAccountIds, i as requiresExplicitMatrixDefaultAccount, n as findMatrixAccountEntry, o as resolveMatrixChannelConfig, r as hasImplicitMatrixAccountConfig, s as resolveMatrixDefaultOrOnlyAccountId } from "./.setup/account-selection-B7axQ80R.mjs";
+import { a as resolveConfiguredMatrixAccountIds, i as requiresExplicitMatrixDefaultAccount, n as findMatrixAccountEntry, o as resolveMatrixChannelConfig, r as hasImplicitMatrixAccountConfig, s as resolveMatrixDefaultOrOnlyAccountId } from "./.setup/account-selection-BDeeqwwR.mjs";
 import { n as listMatrixEnvAccountIds, r as resolveMatrixEnvAccountToken, t as getMatrixScopedEnvVarNames } from "./.setup/env-vars-dGqak9dN.mjs";
 import { a as resolveMatrixCredentialsFilename, c as resolveMatrixStateLayoutChildDepth, i as resolveMatrixCredentialsDir, l as sanitizeMatrixPathSegment, n as isMatrixActiveTokenRootDirectory, o as resolveMatrixCredentialsPath, r as resolveMatrixAccountStorageRoot, s as resolveMatrixHomeserverKey, t as hashMatrixAccessToken } from "./.setup/storage-paths-B51JM-pC.mjs";
 export { findMatrixAccountEntry, getMatrixScopedEnvVarNames, hasImplicitMatrixAccountConfig, hashMatrixAccessToken, isMatrixActiveTokenRootDirectory, listMatrixEnvAccountIds, requiresExplicitMatrixDefaultAccount, resolveConfiguredMatrixAccountIds, resolveMatrixAccountStorageRoot, resolveMatrixChannelConfig, resolveMatrixCredentialsDir, resolveMatrixCredentialsFilename, resolveMatrixCredentialsPath, resolveMatrixDefaultOrOnlyAccountId, resolveMatrixEnvAccountToken, resolveMatrixHomeserverKey, resolveMatrixStateLayoutChildDepth, sanitizeMatrixPathSegment };

package/dist/index.js

@@ -1,4 +1,4 @@
-import { n as registerMatrixCliMetadata } from "./.setup/cli-metadata-nowEgdY0.mjs";
+import { n as registerMatrixCliMetadata } from "./.setup/cli-metadata-CtcjBFhc.mjs";
 import { a as setMatrixRuntimeLifecycle } from "./.setup/runtime-1kn1P6io.mjs";
 import "./runtime-setter-api.js";
 import { registerMatrixSubagentHooks } from "./subagent-hooks-api.js";

package/dist/plugin-entry.handlers.runtime.js

@@ -2,7 +2,7 @@ import { createLazyRuntimeModule } from "openclaw/plugin-sdk/lazy-runtime";
 import { normalizeOptionalString } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { formatErrorMessage } from "openclaw/plugin-sdk/error-runtime";
 //#region extensions/matrix/src/plugin-entry.runtime.ts
-const loadMatrixVerificationRuntime = createLazyRuntimeModule(() => import("./.setup/verification-C45rOZkM.mjs").then((n) => n.y));
+const loadMatrixVerificationRuntime = createLazyRuntimeModule(() => import("./.setup/verification-kMlFYUn0.mjs").then((n) => n.y));
 function sendError(respond, err) {
 	respond(false, { error: formatErrorMessage(err) });
 }

package/dist/runtime-api.js

@@ -1,16 +1,16 @@
 import { i as setMatrixRuntime } from "./.setup/runtime-1kn1P6io.mjs";
-import { a as resolveConfiguredMatrixAccountIds, f as resolveMatrixAccountStringValues, i as requiresExplicitMatrixDefaultAccount, n as findMatrixAccountEntry, o as resolveMatrixChannelConfig, s as resolveMatrixDefaultOrOnlyAccountId } from "./.setup/account-selection-B7axQ80R.mjs";
+import { a as resolveConfiguredMatrixAccountIds, f as resolveMatrixAccountStringValues, i as requiresExplicitMatrixDefaultAccount, n as findMatrixAccountEntry, o as resolveMatrixChannelConfig, s as resolveMatrixDefaultOrOnlyAccountId } from "./.setup/account-selection-BDeeqwwR.mjs";
 import { n as listMatrixEnvAccountIds, r as resolveMatrixEnvAccountToken, t as getMatrixScopedEnvVarNames } from "./.setup/env-vars-dGqak9dN.mjs";
 import { a as resolveMatrixCredentialsFilename, i as resolveMatrixCredentialsDir, l as sanitizeMatrixPathSegment, o as resolveMatrixCredentialsPath, r as resolveMatrixAccountStorageRoot, s as resolveMatrixHomeserverKey, t as hashMatrixAccessToken } from "./.setup/storage-paths-B51JM-pC.mjs";
 import { d as setMatrixThreadBindingMaxAgeBySessionKey, l as setMatrixThreadBindingIdleTimeoutBySessionKey } from "./.setup/thread-bindings-shared-hxKkYC1W.mjs";
-import { n as ensureMatrixSdkInstalled, r as isMatrixSdkAvailable } from "./.setup/deps-CLQ4EOq7.mjs";
+import { n as ensureMatrixSdkInstalled, r as isMatrixSdkAvailable } from "./.setup/deps-CFNl7tQo.mjs";
 import { chunkTextForOutbound as chunkTextForOutbound$1 } from "openclaw/plugin-sdk/text-chunking";
 import { assertHttpUrlTargetsPrivateNetwork, closeDispatcher, createPinnedDispatcher, resolvePinnedHostnameWithPolicy, ssrfPolicyFromDangerouslyAllowPrivateNetwork } from "openclaw/plugin-sdk/ssrf-runtime";
 import { writeJsonFileAtomically } from "openclaw/plugin-sdk/json-store";
 import { formatZonedTimestamp } from "openclaw/plugin-sdk/time-runtime";
 //#region extensions/matrix/runtime-api.ts
 function chunkTextForOutbound(text, limit) {
-	if (text.length === 0) return [""];
+	if (text.length === 0 || limit <= 0) return [text];
 	if (Number.isFinite(limit) && limit > 0 && !Number.isInteger(limit)) return chunkTextForOutbound$1(text, limit);
 	const chunks = [];
 	let remaining = text;

package/dist/session-binding-contract-api.js

@@ -1,3 +1,3 @@
 import { i as setMatrixRuntime } from "./.setup/runtime-1kn1P6io.mjs";
-import { t as createMatrixThreadBindingManager } from "./.setup/thread-bindings-jXu_9cHE.mjs";
+import { t as createMatrixThreadBindingManager } from "./.setup/thread-bindings-DveHVZqN.mjs";
 export { createMatrixThreadBindingManager, setMatrixRuntime };

package/dist/setup-entry.js

@@ -4,7 +4,7 @@ import { fileURLToPath } from "node:url";
 var setup_entry_default = defineBundledChannelSetupEntry({
 	importMetaUrl: import.meta.url,
 	plugin: {
-		specifier: fileURLToPath(new URL(".setup/setup-plugin-api-Bsbdw41x.mjs", import.meta.url).href),
+		specifier: fileURLToPath(new URL(".setup/setup-plugin-api-BRs9bcp4.mjs", import.meta.url).href),
 		exportName: "matrixSetupPlugin"
 	},
 	secrets: {

package/dist/setup-plugin-api.js

@@ -1,2 +1,2 @@
-import { n as matrixSetupPlugin } from "./.setup/channel.setup-DWfLaXqT.mjs";
+import { n as matrixSetupPlugin } from "./.setup/channel.setup-DC2t7_PK.mjs";
 export { matrixSetupPlugin };

package/node_modules/@openclaw/fs-safe/CHANGELOG.md

@@ -2,6 +2,101 @@
 
 ## Unreleased
 
+## 0.23.0 - 2026-10-02
+
+### Highlights
+
+- **BREAKING: Python bridge removed:** remove the Python bridge and its compatibility options; migrate to `configureFsSafeNative` / `FS_SAFE_NATIVE_MODE`. ([#815](https://github.com/openclaw/fs-safe/pull/815))
+- **Watch overflow:** fold busy hints so unselected sibling churn beside a missing tree no longer overflows the watch. ([#813](https://github.com/openclaw/fs-safe/pull/813))
+- **Windows exclusive creation:** no longer follows unchanged dangling file symlinks, including standalone creators, unrooted locks and cross-volume copy publication. ([#823](https://github.com/openclaw/fs-safe/pull/823), [#824](https://github.com/openclaw/fs-safe/pull/824))
+- **Faster metadata listings:** reduce path normalization and per-entry allocation when listing Root directory metadata. ([#818](https://github.com/openclaw/fs-safe/pull/818), [#819](https://github.com/openclaw/fs-safe/pull/819))
+
+### Fixes
+
+- **Windows directory preparation:** retain exact file identities in `ensureAbsoluteDirectory()` so a replaced directory cannot compare equal after large Windows file IDs are rounded to JavaScript numbers. ([#825](https://github.com/openclaw/fs-safe/pull/825))
+- **Windows writable creation:** in native `auto`/`off` mode, `openWritable()`, `append()`, and create-only writes could create a dangling file symlink's missing in-Root target before rejecting the link. Check final leaves before fallback creation; outside-Root targets were already rejected. ([#823](https://github.com/openclaw/fs-safe/pull/823))
+- **Windows symlink creation escape:** unchanged dangling file symlinks could redirect standalone exclusive creation outside the caller-selected directory, including source contents during cross-volume copy publication and records from unrooted fallback locks. Check final leaves before creation, including internal staging files; concurrent replacement remains best-effort. ([#824](https://github.com/openclaw/fs-safe/pull/824))
+- **Atomic writes:** preserve both parent-directory preparation and descriptor-close failures, in operation-first order, for synchronous and asynchronous replacements. ([#820](https://github.com/openclaw/fs-safe/pull/820))
+- **Watch overflow:** fold busy pending hints into guarded subtree reconciliation so unselected sibling churn beside a missing tree no longer exhausts the hint budget. ([#813](https://github.com/openclaw/fs-safe/pull/813))
+- **Native initialization:** lazily load the addon in fs-safe's import context so its housekeeping does not retain the first operation's `AsyncLocalStorage` stores when fs-safe is imported outside caller scopes. ([#797](https://github.com/openclaw/fs-safe/pull/797))
+
+### Performance
+
+- **Root metadata path assembly:** avoid renormalizing each literal child beneath its canonical directory, cutting 1,000-entry listing time by a further 19–23% and sampled allocations by 33–34% on Linux x64. ([#819](https://github.com/openclaw/fs-safe/pull/819))
+- **Root metadata listings:** construct named metadata once per entry, reducing 1,000-entry listing time by 16% and sampled allocations by 27–28% on Linux x64, with all filesystem and identity checks retained. ([#818](https://github.com/openclaw/fs-safe/pull/818))
+
+### Compatibility
+
+- **Removed compatibility options:** remove `configureFsSafePython`, `FsSafePythonConfig`, `pythonPath`, and the six Python environment variables; use `configureFsSafeNative`, `FsSafeNativeConfig`, and `FS_SAFE_NATIVE_MODE` (or `OPENCLAW_FS_SAFE_NATIVE_MODE`). The Python variables are now ignored, so a deployment that still sets `FS_SAFE_PYTHON_MODE=require` or `off` runs in `auto` until it sets `FS_SAFE_NATIVE_MODE`. Remove secure-temp `chmodSync`, atomic adapter `chmod`/`chmodSync`, Root `nonBlockingRead`, and ACL `principalSids`; use descriptor-bound permission adapters (`descriptor` for secure-temp, `FileHandle.chmod` / `fchmodSync` for atomic writes), automatic nonblocking read admission, and direct SID classification. Callers passing removed options get TypeScript errors. ([#815](https://github.com/openclaw/fs-safe/pull/815))
+
+## 0.22.0 - 2026-10-01
+
+### Highlights
+
+- **One-way publication:** `retainEntryForPublication` on `advanced` provides no-replace export for POSIX directories, regular files and direct symlinks, plus Windows NTFS files, directories, symbolic links and junctions. ([#776](https://github.com/openclaw/fs-safe/pull/776), [#778](https://github.com/openclaw/fs-safe/pull/778), [#779](https://github.com/openclaw/fs-safe/pull/779))
+- **Windows path hardening:** reject foreign UNC shares and device namespaces before filesystem probes, blocking attacker-chosen SMB lookups, NTLM exposure and stalls. ([#781](https://github.com/openclaw/fs-safe/pull/781), [#784](https://github.com/openclaw/fs-safe/pull/784))
+- **Watch overflow fixes:** Linux watch-retirement echoes no longer overflow unrelated subscriptions; Linux and macOS classify undecodable names, Linux preserves nameless lifecycle events, and macOS cleans up failed startup correctly. ([#782](https://github.com/openclaw/fs-safe/pull/782), [#783](https://github.com/openclaw/fs-safe/pull/783), [#769](https://github.com/openclaw/fs-safe/pull/769))
+
+### Features
+
+- **One-way publication:** `retainEntryForPublication` retains source and parent identities for native no-replace export on supported local POSIX filesystems and Windows NTFS. It supports directories, regular files and direct symbolic links, plus NTFS junctions; link targets stay opaque, and POSIX relative and dangling targets retain their exact bytes. Commit, indeterminate and close failures remain distinct. Requires caller-exclusive source namespaces, with no source-CAS or automatic rollback guarantee; disposal only closes retained resources and never deletes either location. ([#776](https://github.com/openclaw/fs-safe/pull/776), [#778](https://github.com/openclaw/fs-safe/pull/778), [#779](https://github.com/openclaw/fs-safe/pull/779))
+
+### Fixes
+
+- **Watch name handling:** ignore undecodable unselected siblings, fail closed for selected tree names on Linux and macOS, and preserve Linux directory lifecycle detail without spurious overflow. ([#783](https://github.com/openclaw/fs-safe/pull/783))
+- **Windows UNC admission:** Root, root-file readers, `pathScope`, `isPathInside`, secret-file writers, sibling-temp output, trash admission, and archive output preparation reject foreign UNC shares and device namespaces before probing them, comparing hosts without Unicode case folding, preventing attacker-chosen SMB lookups, NTLM exposure, and stalls. Existing containment errors are preserved; absolute paths on another share no longer resolve through aliases back into the boundary. ([#781](https://github.com/openclaw/fs-safe/pull/781), [#784](https://github.com/openclaw/fs-safe/pull/784))
+- **Linux watch isolation:** closing or replacing a watch, including after a scan failure, no longer overflows unrelated subscriptions. ([#782](https://github.com/openclaw/fs-safe/pull/782))
+- **macOS watch startup:** clean up rejected FSEvents configuration and failed stream startup with the correct lifecycle calls, keeping the registration available for retry. ([#769](https://github.com/openclaw/fs-safe/pull/769))
+
+### Performance
+
+- **Bounded temporary-directory cleanup:** avoid a redundant descriptor metadata read for each descendant directory on Linux and macOS, while retaining fresh name identity checks before removal. ([#760](https://github.com/openclaw/fs-safe/pull/760))
+- **Atomic temp cleanup:** use the file identity captured after creation, avoiding an unnecessary metadata lookup and preserving preexisting temporary paths. ([#772](https://github.com/openclaw/fs-safe/pull/772))
+
+### Compatibility
+
+- Windows now rejects foreign UNC shares and device namespaces before probing them. Absolute paths on another share no longer resolve through aliases back into the boundary; callers that relied on that behavior must pass in-boundary paths. ([#781](https://github.com/openclaw/fs-safe/pull/781), [#784](https://github.com/openclaw/fs-safe/pull/784))
+
+## 0.21.3 - 2026-09-30
+
+### Highlights
+
+- **Watch transient files:** excluded files and atomic-save temp files no longer cause spurious overflow when they disappear between guarded passes. ([#773](https://github.com/openclaw/fs-safe/pull/773))
+- **Faster watch rescans:** unrelated native hints skip rescans, and relevant hints reconcile affected directories, reducing scan work and allocation. ([#774](https://github.com/openclaw/fs-safe/pull/774))
+
+### Fixes
+
+- **Watch:** no longer reports overflow when an excluded or atomic-save temp file appears and disappears between guarded passes under the same observed parent directory. ([#773](https://github.com/openclaw/fs-safe/pull/773))
+- **Windows removal:** nonrecursive `Root.remove()` reports `not-empty` for a nonempty directory in required native mode, including with `force: true`, instead of `not-removable`. ([#771](https://github.com/openclaw/fs-safe/pull/771))
+- **Copy and staging failures:** preserve publication callback errors with unreadable metadata, retain uncertain native rename outcomes, and prevent repeated or reentrant cleanup from reusing consumed descriptors. ([#763](https://github.com/openclaw/fs-safe/pull/763))
+
+### Performance
+
+- **Watch:** skip guarded unrelated native hints and reconcile affected directories, reducing a 502-file memory-watch fixture from 513 to 55 visits and 8.16 MB to 1.33 MB sampled allocation per relevant event pass; unrelated detailed hints at two edits/second no longer trigger 120 full scans/minute, while periodic and uncertain-event reconciliation remain full. ([#774](https://github.com/openclaw/fs-safe/pull/774))
+- **Linux fallback resolution:** reuse the file type from each component's checked descriptor observation, avoiding a duplicate metadata read while retaining fresh identity, symlink-target, and mount-policy checks. ([#757](https://github.com/openclaw/fs-safe/pull/757))
+- **Native parent validation:** reuse the retained descriptor's captured identity during ordinary POSIX policy checks, avoiding a duplicate metadata read while keeping the final pathname inspection fresh. ([#735](https://github.com/openclaw/fs-safe/pull/735))
+
+## 0.21.2 - 2026-09-28
+
+### Highlights
+
+- **`require` mode confines mutations under hostile concurrency:** with `FS_SAFE_NATIVE_MODE=require` (or `configureFsSafeNative({ mode: "require" })`), remove, recursive remove, `mkdir`, writable-open creation and overwrite `move` now run through retained, identity-checked native parents: descriptor-relative `unlinkat`, `mkdirat` and `renameat2` on POSIX, and handle-relative operations on Windows. An adversarial race fuzzer observed no outside or denied-path effects across about 2.8 million racing calls on Linux (with and without `openat2`), macOS and Windows. `auto` keeps its documented best-effort paths and performance. See the [operation/platform matrix](docs/security-model.md#native-root-mutation-capabilities). ([#744](https://github.com/openclaw/fs-safe/pull/744), [#751](https://github.com/openclaw/fs-safe/pull/751), [#750](https://github.com/openclaw/fs-safe/pull/750), [#752](https://github.com/openclaw/fs-safe/pull/752))
+- **Watch on macOS:** entry scopes use identity-checked kqueue descriptors instead of recursive FSEvents streams, ending overflow storms for shallow ancestor scopes above busy trees. ([#753](https://github.com/openclaw/fs-safe/pull/753))
+- **Faster watch scans:** watch readiness and reconciliation are 27–34% faster on large trees. ([#747](https://github.com/openclaw/fs-safe/pull/747))
+
+### Fixes
+
+- **Watch cancellation:** a subscription's `signal` closes it even when another abort listener stops event propagation. ([#738](https://github.com/openclaw/fs-safe/pull/738))
+- **Walk cancellation:** walks stop without yielding the current entry when a synchronous filter aborts the signal. ([#739](https://github.com/openclaw/fs-safe/pull/739))
+- **Writes with `mkdir: false`:** the JavaScript fallback writes through existing in-root parent aliases using the same guarded walk, instead of rejecting them. ([#740](https://github.com/openclaw/fs-safe/pull/740))
+- **Descriptor exhaustion:** native writes that fail with `EMFILE`/`ENFILE` report `helper-failed` with the exhaustion code, the indeterminate publication outcome and the preserved stage, instead of a misleading path error. ([#742](https://github.com/openclaw/fs-safe/pull/742))
+- **Walk memory:** `walkDirectory()` and `walkDirectorySync()` stop reading a directory once `maxEntries` is reached instead of enumerating it completely first. `Root.walk()` sorted mode stays deterministic. ([#743](https://github.com/openclaw/fs-safe/pull/743))
+
+### Compatibility
+
+- In `require` mode, the operations above now reject with `helper-unavailable` where no confining native primitive exists, instead of silently falling back to JavaScript. Examples are recursive removal on Linux without `openat2` and recursive directory removal on Windows. Use `auto` for the best-effort fallback. These `require`-mode mutations also do more identity-checked work and are slower than before, while `auto` is unchanged. ([#744](https://github.com/openclaw/fs-safe/pull/744), [#751](https://github.com/openclaw/fs-safe/pull/751), [#750](https://github.com/openclaw/fs-safe/pull/750))
+- Create-only writes to an existing directory report `already-exists` in every implementation (previously `not-file` on some Windows paths). With `mutationSymlinks` omitted, Windows native and legacy JavaScript writes still differ for final links and parent junctions; set `mutationSymlinks: "reject"` for uniform behavior. ([#745](https://github.com/openclaw/fs-safe/pull/745))
+
 ## 0.21.1 - 2026-09-27
 
 ### Fixes