@openclaw/matrix 2026.9.8 → 2026.10.1-beta.2

package/dist/.setup/{monitor-BBg5qgov.mjs → monitor-skIntQVG.mjs}

@@ -1,22 +1,22 @@
 import { t as getMatrixRuntime } from "./runtime-1kn1P6io.mjs";
 import { a as resolveMatrixAccountConfig, i as resolveMatrixAccountAllowlistConfig } from "./account-config-CRsKoMqJ.mjs";
-import { n as resolveConfiguredMatrixBotUserIds } from "./accounts-WkgrIxMt.mjs";
-import { a as resolveMatrixThreadRouting, i as resolveMatrixInboundRoute, n as resolveMatrixStoredSessionMeta, o as resolveMatrixRoomConfig } from "./channel-DXenXmj0.mjs";
-import { a as resolveMatrixAllowListMatch, i as normalizeMatrixUserId, r as normalizeMatrixAllowList } from "./channel.setup-DWfLaXqT.mjs";
+import { n as resolveConfiguredMatrixBotUserIds } from "./accounts-C_r0UlEm.mjs";
+import { a as resolveMatrixThreadRouting, i as resolveMatrixInboundRoute, n as resolveMatrixStoredSessionMeta, o as resolveMatrixRoomConfig } from "./channel-CeRXEAEP.mjs";
+import { a as resolveMatrixAllowListMatch, i as normalizeMatrixUserId, r as normalizeMatrixAllowList } from "./channel.setup-DC2t7_PK.mjs";
 import { n as isMatrixRoomId, t as isMatrixQualifiedUserId } from "./target-ids-Nwx7cMVE.mjs";
 import { a as MATRIX_REACTION_EVENT_TYPE } from "./send-currentness-C2rMVVIQ.mjs";
-import { c as isStrictDirectMembership, f as resolveMatrixReplyToEventId, h as MATRIX_OPENCLAW_FINALIZED_PREVIEW_KEY, i as promoteMatrixDirectRoomCandidate, p as resolveMatrixThreadRootId, s as hasDirectMatrixMemberFlag, u as readJoinedMatrixMembers, v as RelationType } from "./direct-management-Cn2t8n1V.mjs";
-import { D as setBoundedMap, S as parsePollStartContent, _ as formatPollAsText, b as isPollStartType, c as formatMatrixMediaTooLargeText, d as isLikelyBareFilename, l as formatMatrixMediaUnavailableText, p as resolveMatrixReplacementContent, r as sendMessageMatrix, u as formatMatrixMessageText, y as isPollEventType } from "./send-GOF64QRc.mjs";
-import { t as createMatrixThreadBindingManager } from "./thread-bindings-jXu_9cHE.mjs";
-import { i as readMatrixMessages, u as fetchMatrixPollSnapshot } from "./messages-Buz27pi5.mjs";
-import { a as isMatrixStartupAbortError, c as getMatrixMonitorTaskSignal, d as resolveMatrixAuthContext, l as backfillMatrixAuthDeviceIdAfterStartup, n as acquireSharedMatrixClient, o as throwIfMatrixStartupAborted, s as createMatrixMonitorTaskRunner, u as resolveMatrixAuth } from "./client-Ccv77kwh.mjs";
-import { i as isMatrixMediaSizeLimitError, r as MatrixMediaSizeLimitError } from "./http-client-C1XvVD3K.mjs";
-import { n as prepareMatrixReplyPayload, r as resolveMatrixExtraContent } from "./outbound-C9vBijaH.mjs";
-import { t as resolveMatrixTargets } from "./resolve-targets-BFq3q4c9.mjs";
-import { t as formatMatrixEncryptedEventDisabledWarning } from "./encryption-guidance-B6797jNA.mjs";
-import { createMatrixInboundEventDeduper } from "./inbound-dedupe-BGrMrTTu.mjs";
-import { a as isMatrixAccessTokenInvalidatedError, d as isMatrixDisconnectedSyncState, f as isMatrixReadySyncState, p as isMatrixTerminalSyncState } from "./client-support-Bn9Bk0-H.mjs";
-import { r as getMatrixRoomInfo, t as createMatrixRoomInfoResolver } from "./room-info-BbTGRJcR.mjs";
+import { c as isStrictDirectMembership, f as resolveMatrixReplyToEventId, h as MATRIX_OPENCLAW_FINALIZED_PREVIEW_KEY, i as promoteMatrixDirectRoomCandidate, p as resolveMatrixThreadRootId, s as hasDirectMatrixMemberFlag, u as readJoinedMatrixMembers, v as RelationType } from "./direct-management-DJtQhLKH.mjs";
+import { _ as isPollEventType, c as formatMatrixMessageText, d as resolveMatrixReplacementContent, h as formatPollAsText, l as isLikelyBareFilename, r as sendMessageMatrix, v as isPollStartType, w as setBoundedMap, y as parsePollStart } from "./send-B1Y2L4wj.mjs";
+import { t as createMatrixThreadBindingManager } from "./thread-bindings-DveHVZqN.mjs";
+import { i as readMatrixMessages, u as fetchMatrixPollSnapshot } from "./messages-uCbwLRKS.mjs";
+import { a as isMatrixStartupAbortError, c as getMatrixMonitorTaskSignal, d as resolveMatrixAuthContext, l as backfillMatrixAuthDeviceIdAfterStartup, n as acquireSharedMatrixClient, o as throwIfMatrixStartupAborted, s as createMatrixMonitorTaskRunner, u as resolveMatrixAuth } from "./client-kmih04ng.mjs";
+import { i as isMatrixMediaSizeLimitError, r as MatrixMediaSizeLimitError } from "./http-client-DfJY5Ck0.mjs";
+import { n as prepareMatrixReplyPayload, r as resolveMatrixExtraContent } from "./outbound-CqQou3ny.mjs";
+import { t as resolveMatrixTargets } from "./resolve-targets-DFeU1Ww6.mjs";
+import { t as formatMatrixEncryptedEventDisabledWarning } from "./encryption-guidance-BEjKbiMR.mjs";
+import { createMatrixInboundEventDeduper } from "./inbound-dedupe-C-EBGY0B.mjs";
+import { a as isMatrixAccessTokenInvalidatedError, d as isMatrixDisconnectedSyncState, f as isMatrixReadySyncState, p as isMatrixTerminalSyncState } from "./client-support-D7BlioUb.mjs";
+import { r as getMatrixRoomInfo, t as createMatrixRoomInfoResolver } from "./room-info-BPMbwe8I.mjs";
 import { createLazyRuntimeModule } from "openclaw/plugin-sdk/lazy-runtime";
 import { createChannelProgressDraftCompositor, createLivePreviewLifecycle, createPreviewMessageReceipt, createReplyPrefixOptions, createTypingCallbacks, logTypingFailure, resolveChannelStreamingBlockEnabled, waitUntilAbort } from "openclaw/plugin-sdk/channel-outbound";
 import { normalizeLowercaseStringOrEmpty, normalizeNullableString, normalizeOptionalString, normalizeStringifiedEntries, normalizeUniqueTrimmedStringList, readStringValue, uniqueStrings } from "openclaw/plugin-sdk/string-coerce-runtime";
@@ -147,14 +147,6 @@ function isMatrixDangerousNameMatchingEnabled(params) {
 		accountId: params.accountId
 	}));
 }
-function addUniqueMatrixAllowlistEntry(params) {
-	const trimmed = params.entry.trim();
-	if (!trimmed) return;
-	const key = normalizeMatrixUserId(trimmed);
-	if (params.seen.has(key)) return;
-	params.seen.add(key);
-	params.entries.push(trimmed);
-}
 function logMatrixAllowlistResolution(params) {
 	const { label, resolution, allowNameMatching, runtime } = params;
 	summarizeMapping(label, allowNameMatching ? resolution.mapping : [], resolution.unresolved, runtime);
@@ -248,44 +240,36 @@ async function resolveMatrixMonitorLiveUserAllowlist(params) {
 	});
 	const effective = [];
 	const seen = /* @__PURE__ */ new Set();
+	const addEntry = (entry) => {
+		const trimmed = entry.trim();
+		const key = normalizeMatrixUserId(trimmed);
+		if (trimmed && !seen.has(key)) {
+			seen.add(key);
+			effective.push(trimmed);
+		}
+	};
 	const startupByInput = new Map((params.startupResolvedEntries ?? []).map((entry) => [entry.input, entry.id]));
 	const pending = [];
 	for (const entry of liveEntries) {
 		const query = normalizeMatrixUserLookupEntry(entry);
 		if (entry === "*") {
-			addUniqueMatrixAllowlistEntry({
-				entries: effective,
-				seen,
-				entry
-			});
+			addEntry(entry);
 			continue;
 		}
 		if (isMatrixQualifiedUserId(query)) {
-			addUniqueMatrixAllowlistEntry({
-				entries: effective,
-				seen,
-				entry: normalizeMatrixUserId(query)
-			});
+			addEntry(normalizeMatrixUserId(query));
 			continue;
 		}
 		const startupId = startupByInput.get(entry);
 		if (allowNameMatching && startupId) {
-			addUniqueMatrixAllowlistEntry({
-				entries: effective,
-				seen,
-				entry: startupId
-			});
+			addEntry(startupId);
 			continue;
 		}
 		if (allowNameMatching) {
 			pending.push(entry);
 			continue;
 		}
-		if (params.failClosedOnUnresolved) addUniqueMatrixAllowlistEntry({
-			entries: effective,
-			seen,
-			entry
-		});
+		if (params.failClosedOnUnresolved) addEntry(entry);
 	}
 	if (pending.length === 0) return effective;
 	const resolution = await resolveMatrixMonitorUserEntries({
@@ -302,11 +286,7 @@ async function resolveMatrixMonitorLiveUserAllowlist(params) {
 		entryKey: normalizeMatrixUserId
 	});
 	const resolvedEntries = params.failClosedOnUnresolved ? filterFailClosedMatrixAllowlistEntries(canonicalized) : filterResolvedMatrixAllowlistEntries(canonicalized);
-	for (const entry of resolvedEntries) addUniqueMatrixAllowlistEntry({
-		entries: effective,
-		seen,
-		entry
-	});
+	for (const entry of resolvedEntries) addEntry(entry);
 	return effective;
 }
 async function resolveMatrixMonitorRoomsConfig(params) {
@@ -748,21 +728,18 @@ const VERIFICATION_NOTICE_PREFIXES = [
 	"Matrix verification cancelled by ",
 	"Matrix verification SAS with "
 ];
-function trimMaybeString(input) {
-	return normalizeOptionalString(input) ?? "";
-}
 function isMatrixVerificationEventType(type) {
-	return trimMaybeString(type).startsWith(VERIFICATION_EVENT_PREFIX);
+	return normalizeOptionalString(type)?.startsWith(VERIFICATION_EVENT_PREFIX) === true;
 }
 function isMatrixVerificationRequestMsgType(msgtype) {
-	return trimMaybeString(msgtype) === VERIFICATION_REQUEST_MSGTYPE;
+	return normalizeOptionalString(msgtype) === VERIFICATION_REQUEST_MSGTYPE;
 }
 function isMatrixVerificationNoticeBody(body) {
-	const text = trimMaybeString(body);
+	const text = normalizeOptionalString(body) ?? "";
 	return VERIFICATION_NOTICE_PREFIXES.some((prefix) => text.startsWith(prefix));
 }
 function isMatrixVerificationRoomMessage(content) {
-	return isMatrixVerificationRequestMsgType(content.msgtype) || trimMaybeString(content.msgtype) === "m.notice" && isMatrixVerificationNoticeBody(content.body);
+	return isMatrixVerificationRequestMsgType(content.msgtype) || normalizeOptionalString(content.msgtype) === "m.notice" && isMatrixVerificationNoticeBody(content.body);
 }
 const matrixVerificationConstants = {
 	eventPrefix: VERIFICATION_EVENT_PREFIX,
@@ -773,7 +750,7 @@ const matrixVerificationConstants = {
 const MAX_TRACKED_VERIFICATION_EVENTS = 1024;
 const SAS_NOTICE_RETRY_DELAY_MS = 750;
 const VERIFICATION_EVENT_STARTUP_GRACE_MS = 3e4;
-const loadMatrixDirectRoomDeps = createLazyRuntimeModule(() => Promise.all([import("./direct-management-Cn2t8n1V.mjs").then((n) => n.t), import("./direct-management-Cn2t8n1V.mjs").then((n) => n.o)]).then(([directManagementModule, directRoomModule]) => ({
+const loadMatrixDirectRoomDeps = createLazyRuntimeModule(() => Promise.all([import("./direct-management-DJtQhLKH.mjs").then((n) => n.t), import("./direct-management-DJtQhLKH.mjs").then((n) => n.o)]).then(([directManagementModule, directRoomModule]) => ({
 	inspectMatrixDirectRooms: directManagementModule.inspectMatrixDirectRooms,
 	isStrictDirectRoom: directRoomModule.isStrictDirectRoom
 })));
@@ -892,11 +869,7 @@ async function resolveVerificationSummaryForSignal(client, params) {
 		remoteUserId: params.senderId
 	})) return null;
 	const activeByUser = list.filter((entry) => entry.otherUserId === params.senderId && isActiveVerificationSummary(entry)).toSorted((a, b) => resolveSummaryRecency(b) - resolveSummaryRecency(a));
-	const activeInRoom = activeByUser.filter((entry) => {
-		return normalizeNullableString(entry.roomId) === params.roomId;
-	});
-	if (activeInRoom.length > 0) return activeInRoom[0] ?? null;
-	return activeByUser[0] ?? null;
+	return activeByUser.find((entry) => normalizeNullableString(entry.roomId) === params.roomId) ?? activeByUser[0] ?? null;
 }
 async function resolveVerificationSasNoticeForSignal(client, params) {
 	const summary = await resolveVerificationSummaryForSignal(client, params);
@@ -923,37 +896,6 @@ function trackBounded(set, value) {
 	}
 	return true;
 }
-async function sendVerificationNotice(params) {
-	const roomId = normalizeNullableString(params.roomId);
-	if (!roomId) return;
-	try {
-		await params.client.sendMessage(roomId, {
-			msgtype: "m.notice",
-			body: params.body
-		});
-	} catch (err) {
-		params.logVerboseMessage(`matrix: failed sending verification notice room=${roomId}: ${String(err)}`);
-	}
-}
-async function isVerificationNoticeAuthorized(params) {
-	if (!params.dmEnabled || params.dmPolicy === "disabled") {
-		params.logVerboseMessage(`matrix: blocked verification sender ${params.senderId} (dmPolicy=${params.dmPolicy}, dmEnabled=${String(params.dmEnabled)})`);
-		return false;
-	}
-	const storeAllowFrom = params.dmPolicy !== "allowlist" && params.dmPolicy !== "open" ? await params.readStoreAllowFrom() : [];
-	if ((await resolveMatrixMonitorAccessState({
-		allowFrom: params.allowFrom,
-		storeAllowFrom,
-		dmPolicy: params.dmPolicy,
-		groupPolicy: "open",
-		groupAllowFrom: [],
-		roomUsers: [],
-		senderId: params.senderId,
-		isRoom: false
-	})).messageIngress.senderAccess.decision === "allow") return true;
-	params.logVerboseMessage(`matrix: blocked verification sender ${params.senderId} (dmPolicy=${params.dmPolicy})`);
-	return false;
-}
 function createMatrixVerificationEventRouter(params) {
 	const routerStartedAtMs = Date.now();
 	const routedVerificationEvents = /* @__PURE__ */ new Set();
@@ -961,6 +903,37 @@ function createMatrixVerificationEventRouter(params) {
 	const routedVerificationStageNotices = /* @__PURE__ */ new Set();
 	const verificationFlowRooms = /* @__PURE__ */ new Map();
 	const verificationUserRooms = /* @__PURE__ */ new Map();
+	async function sendVerificationNotice(rawRoomId, body) {
+		const roomId = normalizeNullableString(rawRoomId);
+		if (!roomId) return;
+		try {
+			await params.client.sendMessage(roomId, {
+				msgtype: "m.notice",
+				body
+			});
+		} catch (err) {
+			params.logVerboseMessage(`matrix: failed sending verification notice room=${roomId}: ${String(err)}`);
+		}
+	}
+	async function isVerificationNoticeAuthorized(senderId) {
+		if (!params.dmEnabled || params.dmPolicy === "disabled") {
+			params.logVerboseMessage(`matrix: blocked verification sender ${senderId} (dmPolicy=${params.dmPolicy}, dmEnabled=${String(params.dmEnabled)})`);
+			return false;
+		}
+		const storeAllowFrom = params.dmPolicy !== "allowlist" && params.dmPolicy !== "open" ? await params.readStoreAllowFrom() : [];
+		if ((await resolveMatrixMonitorAccessState({
+			allowFrom: params.allowFrom,
+			storeAllowFrom,
+			dmPolicy: params.dmPolicy,
+			groupPolicy: "open",
+			groupAllowFrom: [],
+			roomUsers: [],
+			senderId,
+			isRoom: false
+		})).messageIngress.senderAccess.decision === "allow") return true;
+		params.logVerboseMessage(`matrix: blocked verification sender ${senderId} (dmPolicy=${params.dmPolicy})`);
+		return false;
+	}
 	async function resolveActiveDirectRoomId(remoteUserId) {
 		const { inspectMatrixDirectRooms } = await loadMatrixDirectRoomDeps();
 		const inspection = await inspectMatrixDirectRooms({
@@ -994,7 +967,6 @@ function createMatrixVerificationEventRouter(params) {
 		if (!remoteUserId) return null;
 		const recentRoomId = normalizeNullableString(verificationUserRooms.get(remoteUserId));
 		const activeRoomId = await resolveActiveDirectRoomId(remoteUserId);
-		if (recentRoomId && activeRoomId && recentRoomId === activeRoomId) return recentRoomId;
 		if (activeRoomId) return activeRoomId;
 		if (recentRoomId && await (await loadMatrixDirectRoomDeps()).isStrictDirectRoom({
 			client: params.client,
@@ -1014,24 +986,12 @@ function createMatrixVerificationEventRouter(params) {
 			params.logVerboseMessage(`matrix: ignoring verification summary outside strict DM room=${roomId} sender=${summary.otherUserId}`);
 			return;
 		}
-		if (!await isVerificationNoticeAuthorized({
-			senderId: summary.otherUserId,
-			allowFrom: params.allowFrom,
-			dmEnabled: params.dmEnabled,
-			dmPolicy: params.dmPolicy,
-			readStoreAllowFrom: params.readStoreAllowFrom,
-			logVerboseMessage: params.logVerboseMessage
-		})) return;
+		if (!await isVerificationNoticeAuthorized(summary.otherUserId)) return;
 		const sasNotice = formatVerificationSasNotice(summary);
 		if (!sasNotice) return;
 		const sasFingerprint = `${summary.id}:${JSON.stringify(summary.sas)}`;
 		if (!trackBounded(routedVerificationSasFingerprints, sasFingerprint)) return;
-		await sendVerificationNotice({
-			client: params.client,
-			roomId,
-			body: sasNotice,
-			logVerboseMessage: params.logVerboseMessage
-		});
+		await sendVerificationNotice(roomId, sasNotice);
 	}
 	function routeVerificationEvent(roomId, event) {
 		const senderId = normalizeNullableString(event?.sender);
@@ -1054,14 +1014,7 @@ function createMatrixVerificationEventRouter(params) {
 				params.logVerboseMessage(`matrix: ignoring verification event outside strict DM room=${roomId} sender=${senderId}`);
 				return;
 			}
-			if (!await isVerificationNoticeAuthorized({
-				senderId,
-				allowFrom: params.allowFrom,
-				dmEnabled: params.dmEnabled,
-				dmPolicy: params.dmPolicy,
-				readStoreAllowFrom: params.readStoreAllowFrom,
-				logVerboseMessage: params.logVerboseMessage
-			})) return;
+			if (!await isVerificationNoticeAuthorized(senderId)) return;
 			rememberVerificationUserRoom(senderId, roomId);
 			if (!trackBounded(routedVerificationEvents, sourceFingerprint)) return;
 			const stageNotice = formatVerificationStageNotice({
@@ -1089,13 +1042,7 @@ function createMatrixVerificationEventRouter(params) {
 				const sasFingerprint = `${summary.id}:${JSON.stringify(summary.sas)}`;
 				if (trackBounded(routedVerificationSasFingerprints, sasFingerprint)) notices.push(sasNotice);
 			}
-			if (notices.length === 0) return;
-			for (const body of notices) await sendVerificationNotice({
-				client: params.client,
-				roomId,
-				body,
-				logVerboseMessage: params.logVerboseMessage
-			});
+			for (const body of notices) await sendVerificationNotice(roomId, body);
 		};
 		if (params.runDetachedTask) params.runDetachedTask(`verification event handler room=${roomId} id=${event.event_id ?? "unknown"}`, routeTask);
 		else routeTask().catch((err) => {
@@ -1423,7 +1370,7 @@ function truncateMatrixContextBody(value) {
 }
 function summarizeMatrixMessageContextEvent(event) {
 	if (isPollStartType(event.type)) {
-		const pollSummary = parsePollStartContent(event.content);
+		const pollSummary = parsePollStart(event.content);
 		if (pollSummary) return formatPollAsText(pollSummary);
 	}
 	const content = resolveMatrixReplacementContent(event) ?? event.content;
@@ -1538,7 +1485,7 @@ function resolveMatrixMentionPrecheckText(params) {
 	if (params.locationText?.trim()) return params.locationText.trim();
 	if (typeof params.content.body === "string" && params.content.body.trim()) return params.content.body.trim();
 	if (isPollStartType(params.eventType)) {
-		const parsed = parsePollStartContent(params.content);
+		const parsed = parsePollStart(params.content);
 		if (parsed) return formatPollAsText(parsed);
 	}
 	return "";
@@ -1551,16 +1498,13 @@ function hasBundledMatrixReplacementRelation(event) {
 function resolveMatrixInboundBodyText(params) {
 	if (params.mediaPlaceholder) return params.rawBody || params.mediaPlaceholder;
 	if (!params.mediaDownloadFailed || !params.hadMediaUrl) return params.rawBody;
-	if (params.mediaSizeLimitExceeded) return formatMatrixMediaTooLargeText({
-		body: params.rawBody,
-		filename: params.filename,
-		msgtype: params.msgtype
-	});
-	return formatMatrixMediaUnavailableText({
+	return formatMatrixMessageText({
 		body: params.rawBody,
 		filename: params.filename,
-		msgtype: params.msgtype
-	});
+		msgtype: params.msgtype,
+		tooLarge: params.mediaSizeLimitExceeded,
+		unavailable: true
+	}) ?? "";
 }
 function markTrackedRoomIfFirst(set, roomId) {
 	if (set.has(roomId)) return false;
@@ -1635,11 +1579,11 @@ function formatMatrixToolProgressMarkdownCode(text) {
 }
 //#endregion
 //#region extensions/matrix/src/matrix/monitor/handler-runtime.ts
-const loadMatrixSendModule = createLazyRuntimeModule(() => import("./send-GOF64QRc.mjs").then((n) => n.s));
+const loadMatrixSendModule = createLazyRuntimeModule(() => import("./send-B1Y2L4wj.mjs").then((n) => n.s));
 const loadAcpBindingRuntime = createLazyRuntimeModule(() => import("openclaw/plugin-sdk/acp-binding-runtime"));
 const loadSessionBindingRuntime = createLazyRuntimeModule(() => import("openclaw/plugin-sdk/session-binding-runtime"));
-const loadMatrixReactionEvents = createLazyRuntimeModule(() => import("./reaction-events-mnzc_JvP.mjs"));
-const loadMatrixDraftStream = createLazyRuntimeModule(() => import("./draft-stream-CdVMstpR.mjs"));
+const loadMatrixReactionEvents = createLazyRuntimeModule(() => import("./reaction-events-Cqq46xsG.mjs"));
+const loadMatrixDraftStream = createLazyRuntimeModule(() => import("./draft-stream-B87DfA6a.mjs"));
 async function matrixTextWouldActivateMentions(client, text) {
 	const { resolveMatrixMentionsForBody } = await loadMatrixSendModule();
 	const mentions = await resolveMatrixMentionsForBody({
@@ -2308,6 +2252,11 @@ async function resolveMatrixIngressAccess(config) {
 					accountId,
 					meta: { name: senderName }
 				});
+				if (!code) {
+					logVerboseMessage(`matrix pairing request ignored sender=${senderId} (pending limit reached)`);
+					await commitInboundEventIfClaimedAndDiscardReserved();
+					return;
+				}
 				if (shouldSendPairingReply(senderId, created)) {
 					const pairingReply = core.channel.pairing.buildPairingReply({
 						channel: "matrix",
@@ -2441,11 +2390,8 @@ function decodeVisibleHtmlEntities(value) {
 		return decoded === "\xA0" ? " " : decoded;
 	});
 }
-function normalizeVisibleMentionText(value) {
-	return normalizeLowercaseStringOrEmpty(decodeVisibleHtmlEntities(value.replace(/<[^>]+>/g, " ").replace(/[\u200b-\u200f\u202a-\u202e\u2060-\u206f]/g, "")).replace(/\s+/g, " "));
-}
 function extractVisibleMentionText(value) {
-	return normalizeVisibleMentionText(value ?? "");
+	return normalizeLowercaseStringOrEmpty(decodeVisibleHtmlEntities((value ?? "").replace(/<[^>]+>/g, " ").replace(/[\u200b-\u200f\u202a-\u202e\u2060-\u206f]/g, "")).replace(/\s+/g, " "));
 }
 function resolveMatrixUserLocalpart(userId) {
 	const trimmed = userId.trim();
@@ -2462,43 +2408,36 @@ function hasVisibleNativeMatrixUserMention(text, userId) {
 function resolveMatrixMentionPrefixCandidates(params) {
 	const candidates = [];
 	const seen = /* @__PURE__ */ new Set();
-	const append = (candidate) => {
+	const localpart = params.userId ? resolveMatrixUserLocalpart(params.userId) : null;
+	for (const candidate of [
+		params.userId,
+		localpart ? `@${localpart}` : null,
+		params.displayName,
+		params.displayName ? `@${params.displayName}` : null,
+		params.displayName ? `@[${params.displayName}]` : null
+	]) {
 		const trimmed = candidate?.trim();
-		if (!trimmed) return;
+		if (!trimmed) continue;
 		const normalized = normalizeLowercaseStringOrEmpty(trimmed);
-		if (seen.has(normalized)) return;
+		if (seen.has(normalized)) continue;
 		seen.add(normalized);
 		candidates.push(trimmed);
-	};
-	append(params.userId);
-	const localpart = params.userId ? resolveMatrixUserLocalpart(params.userId) : null;
-	append(localpart ? `@${localpart}` : null);
-	append(params.displayName);
-	append(params.displayName ? `@${params.displayName}` : null);
-	append(params.displayName ? `@[${params.displayName}]` : null);
+	}
 	return candidates;
 }
-function stripMatchedMatrixMentionPrefix(text, pattern) {
-	const match = text.match(pattern);
-	if (!match) return null;
-	return text.slice(match[0].length).trimStart();
-}
-function stripNativeMatrixMentionPrefix(text, candidate) {
-	return stripMatchedMatrixMentionPrefix(text, new RegExp(`^\\s*${escapeRegExp(candidate)}(?:\\s*[:,])?(?:\\s+|$)`, "i"));
-}
-function stripRegexMatrixMentionPrefix(text, pattern) {
-	const flags = pattern.flags.replace(/[gy]/g, "");
-	return stripMatchedMatrixMentionPrefix(text, new RegExp(`^\\s*(?:${pattern.source})(?:\\s*[:,])?(?:\\s+|$)`, flags));
+function stripMatchedMatrixMentionPrefix(text, source, flags) {
+	const match = text.match(new RegExp(`^\\s*${source}(?:\\s*[:,])?(?:\\s+|$)`, flags));
+	return match ? text.slice(match[0].length).trimStart() : null;
 }
 function stripMatrixMentionPrefix(params) {
 	const text = params.text;
 	if (!text) return text;
 	for (const candidate of resolveMatrixMentionPrefixCandidates(params)) {
-		const stripped = stripNativeMatrixMentionPrefix(text, candidate);
+		const stripped = stripMatchedMatrixMentionPrefix(text, escapeRegExp(candidate), "i");
 		if (stripped !== null) return stripped;
 	}
 	for (const pattern of params.mentionRegexes ?? []) {
-		const stripped = stripRegexMatrixMentionPrefix(text, pattern);
+		const stripped = stripMatchedMatrixMentionPrefix(text, `(?:${pattern.source})`, pattern.flags.replace(/[gy]/g, ""));
 		if (stripped !== null) return stripped;
 	}
 	return text;
@@ -3293,17 +3232,9 @@ function createMatrixHandlerState(config) {
 	};
 	const shouldSendPairingReply = (senderId, created) => {
 		const now = Date.now();
-		if (created) {
-			pairingReplySentAtMsBySender.set(senderId, now);
-			return true;
-		}
 		const lastSentAtMs = pairingReplySentAtMsBySender.get(senderId);
-		if (typeof lastSentAtMs === "number" && now - lastSentAtMs < PAIRING_REPLY_COOLDOWN_MS) return false;
-		pairingReplySentAtMsBySender.set(senderId, now);
-		if (pairingReplySentAtMsBySender.size > MAX_TRACKED_PAIRING_REPLY_SENDERS) {
-			const oldestSender = pairingReplySentAtMsBySender.keys().next().value;
-			if (typeof oldestSender === "string") pairingReplySentAtMsBySender.delete(oldestSender);
-		}
+		if (!created && typeof lastSentAtMs === "number" && now - lastSentAtMs < PAIRING_REPLY_COOLDOWN_MS) return false;
+		setBoundedMap(pairingReplySentAtMsBySender, senderId, now, MAX_TRACKED_PAIRING_REPLY_SENDERS);
 		return true;
 	};
 	return {
@@ -3721,10 +3652,10 @@ function shouldPromoteRecentInviteRoom(params) {
 //#endregion
 //#region extensions/matrix/src/matrix/monitor/startup.ts
 const loadMatrixStartupMaintenanceDeps = createLazyRuntimeModule(() => Promise.all([
-	import("./config-update-5m1Un5gJ.mjs").then((n) => n.t),
-	import("./device-health-U-yoVjPw.mjs").then((n) => n.t),
-	import("./profile-B3DD2jYa.mjs").then((n) => n.n),
-	import("./startup-verification-Aiy_xVdI.mjs")
+	import("./config-update-CZndPxNd.mjs").then((n) => n.t),
+	import("./device-health-Be60VF1w.mjs").then((n) => n.t),
+	import("./profile-DS0xdJAi.mjs").then((n) => n.n),
+	import("./startup-verification-D00eUt74.mjs")
 ]).then(([configUpdateModule, deviceHealthModule, profileModule, startupVerificationModule]) => ({
 	updateMatrixAccountConfig: configUpdateModule.updateMatrixAccountConfig,
 	summarizeMatrixDeviceHealth: deviceHealthModule.summarizeMatrixDeviceHealth,
@@ -4108,16 +4039,14 @@ async function monitorMatrixProvider(opts = {}) {
 	const warnedEncryptedRooms = /* @__PURE__ */ new Set();
 	const warnedCryptoMissingRooms = /* @__PURE__ */ new Set();
 	let healthySyncSinceMs;
-	const noteSyncHealthState = (state, at = Date.now()) => {
+	const onSyncState = (state) => {
+		const at = Date.now();
 		if (isMatrixReadySyncState(state)) {
 			healthySyncSinceMs ??= at;
 			return;
 		}
 		if (isMatrixDisconnectedSyncState(state)) healthySyncSinceMs = void 0;
 	};
-	const onSyncState = (state) => {
-		noteSyncHealthState(state);
-	};
 	const monitorRetirement = {
 		closeTaskAdmission: () => {
 			monitorSetupClosed = true;

package/dist/.setup/{onboarding-hJaieQj5.mjs → onboarding-Cm_tOJxs.mjs}

@@ -1,16 +1,15 @@
-import { i as __exportAll } from "./doctor-contract-De6geW0h.mjs";
-import { i as requiresExplicitMatrixDefaultAccount, u as resolveMatrixEnvAuthReadiness } from "./account-selection-B7axQ80R.mjs";
+import { i as __exportAll } from "./doctor-contract-CsTNmbMa.mjs";
+import { i as requiresExplicitMatrixDefaultAccount, u as resolveMatrixEnvAuthReadiness } from "./account-selection-BDeeqwwR.mjs";
 import { a as resolveMatrixAccountConfig } from "./account-config-CRsKoMqJ.mjs";
-import { a as resolveMatrixAccountAsync, r as resolveDefaultMatrixAccountId, t as listMatrixAccountIds } from "./accounts-WkgrIxMt.mjs";
+import { a as resolveMatrixAccountAsync, r as resolveDefaultMatrixAccountId, t as listMatrixAccountIds } from "./accounts-C_r0UlEm.mjs";
 import { n as isMatrixRoomId } from "./target-ids-Nwx7cMVE.mjs";
-import { n as updateMatrixAccountConfig } from "./config-update-5m1Un5gJ.mjs";
-import { a as moveSingleMatrixAccountConfigToNamedAccount, i as createMatrixSetupDmPolicy } from "./setup-core-BeifoeL4.mjs";
+import { n as updateMatrixAccountConfig } from "./config-update-CZndPxNd.mjs";
+import { a as moveSingleMatrixAccountConfigToNamedAccount, i as createMatrixSetupDmPolicy } from "./setup-core-6DppLENo.mjs";
 import { n as validateMatrixHomeserverUrl, t as resolveValidatedMatrixHomeserverUrl } from "./url-validation-CF6pG6eE.mjs";
-import { n as ensureMatrixSdkInstalled, r as isMatrixSdkAvailable } from "./deps-CLQ4EOq7.mjs";
+import { n as ensureMatrixSdkInstalled, r as isMatrixSdkAvailable } from "./deps-CFNl7tQo.mjs";
 import { DEFAULT_ACCOUNT_ID } from "openclaw/plugin-sdk/account-id";
 import { normalizeLowercaseStringOrEmpty, normalizeOptionalString, normalizeStringifiedOptionalString, normalizeUniqueStringEntries } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { formatDocsLink, hasConfiguredSecretInput, mergeAllowFromEntries, normalizeAccountId as normalizeAccountId$1, promptAccountId, promptChannelAccessConfig, setSetupChannelEnabled, splitSetupEntries } from "openclaw/plugin-sdk/setup";
-import { isPrivateNetworkOptInEnabled } from "openclaw/plugin-sdk/ssrf-policy";
 import { isPrivateOrLoopbackHost } from "openclaw/plugin-sdk/ssrf-runtime";
 //#region extensions/matrix/src/onboarding.ts
 var onboarding_exports = /* @__PURE__ */ __exportAll({ matrixOnboardingAdapter: () => matrixOnboardingAdapter });
@@ -93,7 +92,7 @@ async function promptMatrixAllowFrom(params) {
 			pending.push(part);
 		}
 		if (pending.length > 0) {
-			const { resolveMatrixTargets } = await import("./resolve-targets-BFq3q4c9.mjs").then((n) => n.n);
+			const { resolveMatrixTargets } = await import("./resolve-targets-DFeU1Ww6.mjs").then((n) => n.n);
 			const results = await resolveMatrixTargets({
 				cfg,
 				accountId,
@@ -213,7 +212,7 @@ async function configureMatrixAccessPrompts(params) {
 						resolvedIds.push(cleaned);
 						continue;
 					}
-					const { listMatrixDirectoryGroupsLive } = await import("./directory-live-_sw-Q7KO.mjs").then((n) => n.t);
+					const { listMatrixDirectoryGroupsLive } = await import("./directory-live-DW5UykLL.mjs").then((n) => n.t);
 					const matches = await listMatrixDirectoryGroupsLive({
 						cfg: next,
 						accountId: params.accountId,
@@ -246,13 +245,7 @@ const dmPolicy = createMatrixSetupDmPolicy(promptMatrixAllowFrom);
 async function runMatrixConfigure(params) {
 	let next = params.cfg;
 	const promptText = async (options) => normalizeStringifiedOptionalString(await params.prompter.text(options)) ?? "";
-	await ensureMatrixSdkInstalled({
-		runtime: params.runtime,
-		confirm: async (message) => await params.prompter.confirm({
-			message,
-			initialValue: true
-		})
-	});
+	await ensureMatrixSdkInstalled();
 	const defaultAccountId = resolveDefaultMatrixAccountId(next);
 	let accountId = defaultAccountId || DEFAULT_ACCOUNT_ID;
 	if (params.intent === "add-account") {
@@ -322,10 +315,10 @@ async function runMatrixConfigure(params) {
 		}
 	});
 	const requiresAllowPrivateNetwork = requiresMatrixPrivateNetworkOptIn(homeserver);
-	const shouldPromptAllowPrivateNetwork = requiresAllowPrivateNetwork || isPrivateNetworkOptInEnabled(existing);
+	const shouldPromptAllowPrivateNetwork = requiresAllowPrivateNetwork || existing.network?.dangerouslyAllowPrivateNetwork === true;
 	const allowPrivateNetwork = shouldPromptAllowPrivateNetwork ? await params.prompter.confirm({
 		message: "Allow private/internal Matrix homeserver traffic for this account?",
-		initialValue: isPrivateNetworkOptInEnabled(existing) || requiresAllowPrivateNetwork
+		initialValue: existing.network?.dangerouslyAllowPrivateNetwork === true || requiresAllowPrivateNetwork
 	}) : false;
 	if (requiresAllowPrivateNetwork && !allowPrivateNetwork) throw new Error("Matrix homeserver requires explicit private-network opt-in");
 	await resolveValidatedMatrixHomeserverUrl(homeserver, { dangerouslyAllowPrivateNetwork: allowPrivateNetwork });
@@ -467,7 +460,7 @@ const matrixOnboardingAdapter = {
 		});
 	},
 	afterConfigWritten: async ({ previousCfg, cfg, accountId, runtime }) => {
-		const { runMatrixSetupBootstrapAfterConfigWrite } = await import("./setup-bootstrap-AzalcuCW.mjs");
+		const { runMatrixSetupBootstrapAfterConfigWrite } = await import("./setup-bootstrap-UNIGyKnk.mjs");
 		await runMatrixSetupBootstrapAfterConfigWrite({
 			previousCfg,
 			cfg,

package/dist/.setup/{outbound-C9vBijaH.mjs → outbound-CqQou3ny.mjs}

@@ -1,5 +1,5 @@
-import { r as matrixPresentationCapabilities } from "./channel-DXenXmj0.mjs";
-import { i as sendPollMatrix, r as sendMessageMatrix } from "./send-GOF64QRc.mjs";
+import { r as matrixPresentationCapabilities } from "./channel-CeRXEAEP.mjs";
+import { i as sendPollMatrix, r as sendMessageMatrix } from "./send-B1Y2L4wj.mjs";
 import { createMessageReceiptFromOutboundResults, createReplyToFanout, resolveOutboundSendDep } from "openclaw/plugin-sdk/channel-outbound";
 import { asOptionalRecord } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { chunkTextForOutbound } from "openclaw/plugin-sdk/text-chunking";
@@ -112,27 +112,30 @@ const matrixOutbound = {
 		});
 		const urls = resolveSendableOutboundReplyParts(payload).mediaUrls;
 		const payloadText = resolveMatrixPayloadText(payload);
+		const sendOptions = {
+			cfg,
+			mediaAccess,
+			mediaLocalRoots,
+			mediaReadFile,
+			threadId: resolvedThreadId,
+			accountId: accountId ?? void 0,
+			deliveryQueueId,
+			signal,
+			assertDirectAdapterHandoff,
+			onPlatformSendDispatch
+		};
 		if (urls.length > 0) {
 			const sentResults = [];
 			const lastResult = await sendPayloadMediaSequence({
 				text: payloadText,
 				mediaUrls: urls,
 				send: async ({ text, mediaUrl, index, isFirst }) => await send(to, text, {
-					cfg,
+					...sendOptions,
 					mediaUrl,
-					mediaAccess,
-					mediaLocalRoots,
-					mediaReadFile,
 					replyToId: resolveReplyToId(),
-					threadId: resolvedThreadId,
-					accountId: accountId ?? void 0,
 					audioAsVoice: payload.audioAsVoice ?? audioAsVoice,
-					deliveryQueueId,
 					deliveryPartIndex: index,
 					deliveryPartCount: urls.length,
-					signal,
-					assertDirectAdapterHandoff,
-					onPlatformSendDispatch,
 					extraContent: isFirst ? resolveMatrixExtraContent(payload) : void 0,
 					onDeliveryResult: resolveMatrixDeliveryProgress(onDeliveryResult)
 				}),
@@ -155,20 +158,11 @@ const matrixOutbound = {
 			}
 		}
 		const result = await send(to, payloadText, {
-			cfg,
-			mediaAccess,
-			mediaLocalRoots,
-			mediaReadFile,
+			...sendOptions,
 			replyToId: resolveReplyToId(),
-			threadId: resolvedThreadId,
-			accountId: accountId ?? void 0,
 			audioAsVoice: payload.audioAsVoice ?? audioAsVoice,
-			deliveryQueueId,
 			deliveryPartIndex: 0,
 			deliveryPartCount: 1,
-			signal,
-			assertDirectAdapterHandoff,
-			onPlatformSendDispatch,
 			extraContent: resolveMatrixExtraContent(payload),
 			onDeliveryResult: resolveMatrixDeliveryProgress(onDeliveryResult)
 		});