@openclaw/mattermost 2026.7.1 → 2026.7.2-beta.1

package/dist/doctor-contract-BaUvVh8e.js

@@ -0,0 +1,19 @@
+import { createLegacyPrivateNetworkDoctorContract } from "openclaw/plugin-sdk/ssrf-runtime";
+import { defineChannelAliasMigration } from "openclaw/plugin-sdk/runtime-doctor";
+//#region extensions/mattermost/src/doctor-contract.ts
+const networkContract = createLegacyPrivateNetworkDoctorContract({ channelKey: "mattermost" });
+const streamingAliasMigration = defineChannelAliasMigration({
+	channelId: "mattermost",
+	streaming: { defaultMode: "partial" },
+	accountStreamingReplacesRoot: true
+});
+const legacyConfigRules = [...networkContract.legacyConfigRules, ...streamingAliasMigration.legacyConfigRules];
+function normalizeCompatibilityConfig({ cfg }) {
+	const network = networkContract.normalizeCompatibilityConfig({ cfg });
+	return streamingAliasMigration.normalizeChannelConfig({
+		cfg: network.config,
+		changes: network.changes
+	});
+}
+//#endregion
+export { normalizeCompatibilityConfig as n, legacyConfigRules as t };

package/dist/doctor-contract-api.js

@@ -1,2 +1,2 @@
-import { n as normalizeCompatibilityConfig, t as legacyConfigRules } from "./doctor-contract-ttH0DCuq.js";
+import { n as normalizeCompatibilityConfig, t as legacyConfigRules } from "./doctor-contract-BaUvVh8e.js";
 export { legacyConfigRules, normalizeCompatibilityConfig };

package/dist/gateway-auth-api.js

@@ -1,2 +1,2 @@
-import { t as resolveMattermostGatewayAuthBypassPaths } from "./gateway-auth-bypass-BIXLORHU.js";
+import { t as resolveMattermostGatewayAuthBypassPaths } from "./gateway-auth-bypass-CL1PxV3z.js";
 export { resolveMattermostGatewayAuthBypassPaths as resolveGatewayAuthBypassPaths };

package/dist/{gateway-auth-bypass-BIXLORHU.js → gateway-auth-bypass-CL1PxV3z.js}

@@ -23,8 +23,9 @@ function collectMattermostSlashCallbackPaths(raw) {
 	} catch {}
 	return [...paths];
 }
-function resolveMattermostGatewayAuthBypassPaths(cfg) {
-	const base = cfg.channels?.mattermost && typeof cfg.channels.mattermost === "object" ? cfg.channels.mattermost : void 0;
+function resolveMattermostGatewayAuthBypassPaths(params) {
+	const channels = params.cfg.channels;
+	const base = channels?.mattermost && typeof channels.mattermost === "object" ? channels.mattermost : void 0;
 	const callbackPaths = new Set(collectMattermostSlashCallbackPaths(readMattermostCommands(base?.commands)).filter(isMattermostBypassPath));
 	const accounts = base?.accounts ?? {};
 	for (const account of Object.values(accounts)) {

package/dist/secret-contract-B4R5Bmhv.js

@@ -0,0 +1,28 @@
+import { collectSimpleChannelFieldAssignments, createChannelSecretTargetRegistryEntries, getChannelSurface } from "openclaw/plugin-sdk/channel-secret-basic-runtime";
+//#region extensions/mattermost/src/secret-contract.ts
+const secretTargetRegistryEntries = createChannelSecretTargetRegistryEntries({
+	channelKey: "mattermost",
+	account: ["botToken"],
+	channel: ["botToken"]
+});
+function collectRuntimeConfigAssignments(params) {
+	const resolved = getChannelSurface(params.config, "mattermost");
+	if (!resolved) return;
+	const { channel: mattermost, surface } = resolved;
+	collectSimpleChannelFieldAssignments({
+		channelKey: "mattermost",
+		field: "botToken",
+		channel: mattermost,
+		surface,
+		defaults: params.defaults,
+		context: params.context,
+		topInactiveReason: "no enabled account inherits this top-level Mattermost botToken.",
+		accountInactiveReason: "Mattermost account is disabled."
+	});
+}
+const channelSecrets = {
+	secretTargetRegistryEntries,
+	collectRuntimeConfigAssignments
+};
+//#endregion
+export { collectRuntimeConfigAssignments as n, secretTargetRegistryEntries as r, channelSecrets as t };

package/dist/secret-contract-api.js

@@ -1,2 +1,2 @@
-import { n as collectRuntimeConfigAssignments, r as secretTargetRegistryEntries, t as channelSecrets } from "./secret-contract-Cx0LUNXy.js";
+import { n as collectRuntimeConfigAssignments, r as secretTargetRegistryEntries, t as channelSecrets } from "./secret-contract-B4R5Bmhv.js";
 export { channelSecrets, collectRuntimeConfigAssignments, secretTargetRegistryEntries };

package/dist/slash-route-api.js

@@ -1,2 +1,2 @@
-import { i as registerSlashCommandRoute } from "./slash-state-BfOSlkmn.js";
+import { i as registerSlashCommandRoute } from "./slash-state-Cr58Xd12.js";
 export { registerSlashCommandRoute };

package/dist/{slash-state-BfOSlkmn.js → slash-state-Cr58Xd12.js}

@@ -1,5 +1,5 @@
 import { a as normalizeMattermostAllowList, b as readRequestBodyWithLimit, d as createChannelMessageReplyPipeline, g as loadOutboundMediaFromUrl, l as buildModelsProviderData, m as isTrustedProxyAddress, p as isRequestBodyLimitError, t as authorizeMattermostCommandInvocation, v as logTypingFailure, w as resolveClientIp } from "./monitor-auth-BiDuyvOc.js";
-import { b as updateMattermostPost, c as createMattermostPost, d as fetchMattermostChannelByName, f as fetchMattermostMe, g as normalizeMattermostBaseUrl, h as fetchMattermostUserTeams, m as fetchMattermostUserByUsername, o as createMattermostClient, p as fetchMattermostUser, r as resolveMattermostAccount, s as createMattermostDirectChannelWithRetry, u as fetchMattermostChannel, v as resolveMattermostReplyDeliveryBarrierTimeoutMs, x as uploadMattermostFile, y as sendMattermostTyping } from "./accounts-ITTlduDO.js";
+import { b as updateMattermostPost, c as createMattermostPost, d as fetchMattermostChannelByName, f as fetchMattermostMe, g as normalizeMattermostBaseUrl, h as fetchMattermostUserTeams, m as fetchMattermostUserByUsername, o as createMattermostClient, p as fetchMattermostUser, r as resolveMattermostAccount, s as createMattermostDirectChannelWithRetry, u as fetchMattermostChannel, v as resolveMattermostReplyDeliveryBarrierTimeoutMs, x as uploadMattermostFile, y as sendMattermostTyping } from "./accounts-B2NRPlqr.js";
 import { t as getMattermostRuntime } from "./runtime-CNB4YGqJ.js";
 import { normalizeLowercaseStringOrEmpty, normalizeOptionalString, normalizeStringifiedOptionalString } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { createMessageReceiptFromOutboundResults } from "openclaw/plugin-sdk/channel-outbound";
@@ -13,7 +13,9 @@ import { getSessionEntry, resolveStorePath } from "openclaw/plugin-sdk/session-s
 import { normalizeProviderId } from "openclaw/plugin-sdk/provider-model-shared";
 import { Readable } from "node:stream";
 import { safeEqualSecret } from "openclaw/plugin-sdk/security-runtime";
+import { truncateUtf16Safe } from "openclaw/plugin-sdk/text-utility-runtime";
 import { createHash, createHmac } from "node:crypto";
+import { pruneMapToMaxSize } from "openclaw/plugin-sdk/collection-runtime";
 import { resolveMarkdownTableMode } from "openclaw/plugin-sdk/markdown-table-runtime";
 import { requireRuntimeConfig } from "openclaw/plugin-sdk/plugin-config-runtime";
 const MATTERMOST_COMMAND_DESCRIPTION_MAX_BYTES = 128;
@@ -369,7 +371,9 @@ const ACTION_IDS = {
 function splitModelRef(modelRef) {
 	const match = normalizeOptionalString(modelRef)?.match(/^([^/]+)\/(.+)$/u);
 	if (!match) return null;
-	const provider = normalizeProviderId(match[1]);
+	const rawProvider = match[1];
+	if (!rawProvider) return null;
+	const provider = normalizeProviderId(rawProvider);
 	const model = normalizeOptionalString(match[2]);
 	if (!provider || !model) return null;
 	return {
@@ -1052,7 +1056,12 @@ function createMattermostInteractionHandler(params) {
 }
 //#endregion
 //#region extensions/mattermost/src/mattermost/target-resolution.ts
+const MATTERMOST_OPAQUE_TARGET_CACHE_MAX_ENTRIES = 1024;
 const mattermostOpaqueTargetCache = /* @__PURE__ */ new Map();
+function cacheMattermostOpaqueTarget(key, kind) {
+	mattermostOpaqueTargetCache.set(key, kind);
+	pruneMapToMaxSize(mattermostOpaqueTargetCache, MATTERMOST_OPAQUE_TARGET_CACHE_MAX_ENTRIES);
+}
 function cacheKey$1(baseUrl, token, id) {
 	return `${baseUrl}::${token}::${id}`;
 }
@@ -1060,6 +1069,71 @@ function cacheKey$1(baseUrl, token, id) {
 function isMattermostId(value) {
 	return /^[a-z0-9]{26}$/.test(value);
 }
+function parseMattermostTarget(raw) {
+	const trimmed = raw.trim();
+	if (!trimmed) throw new Error("Recipient is required for Mattermost sends");
+	const lower = normalizeLowercaseStringOrEmpty(trimmed);
+	if (lower.startsWith("channel:")) {
+		const id = trimmed.slice(8).trim();
+		if (!id) throw new Error("Channel id is required for Mattermost sends");
+		if (id.startsWith("#")) {
+			const name = id.slice(1).trim();
+			if (!name) throw new Error("Channel name is required for Mattermost sends");
+			return {
+				kind: "channel-name",
+				name
+			};
+		}
+		if (!isMattermostId(id)) return {
+			kind: "channel-name",
+			name: id
+		};
+		return {
+			kind: "channel",
+			id
+		};
+	}
+	if (lower.startsWith("user:")) {
+		const id = trimmed.slice(5).trim();
+		if (!id) throw new Error("User id is required for Mattermost sends");
+		return {
+			kind: "user",
+			id
+		};
+	}
+	if (lower.startsWith("mattermost:")) {
+		const id = trimmed.slice(11).trim();
+		if (!id) throw new Error("User id is required for Mattermost sends");
+		return {
+			kind: "user",
+			id
+		};
+	}
+	if (trimmed.startsWith("@")) {
+		const username = trimmed.slice(1).trim();
+		if (!username) throw new Error("Username is required for Mattermost sends");
+		return {
+			kind: "user",
+			username
+		};
+	}
+	if (trimmed.startsWith("#")) {
+		const name = trimmed.slice(1).trim();
+		if (!name) throw new Error("Channel name is required for Mattermost sends");
+		return {
+			kind: "channel-name",
+			name
+		};
+	}
+	if (!isMattermostId(trimmed)) return {
+		kind: "channel-name",
+		name: trimmed
+	};
+	return {
+		kind: "channel",
+		id: trimmed
+	};
+}
 function isExplicitMattermostTarget(raw) {
 	const trimmed = raw.trim();
 	if (!trimmed) return false;
@@ -1084,16 +1158,11 @@ async function resolveMattermostOpaqueTarget(params) {
 	const baseUrl = normalizeMattermostBaseUrl(params.baseUrl ?? account?.baseUrl);
 	if (!token || !baseUrl) return null;
 	const key = cacheKey$1(baseUrl, token, input);
-	const cached = mattermostOpaqueTargetCache.get(key);
-	if (cached === true) return {
-		kind: "user",
+	const cachedKind = mattermostOpaqueTargetCache.get(key);
+	if (cachedKind) return {
+		kind: cachedKind,
 		id: input,
-		to: `user:${input}`
-	};
-	if (cached === false) return {
-		kind: "channel",
-		id: input,
-		to: `channel:${input}`
+		to: `${cachedKind}:${input}`
 	};
 	const client = createMattermostClient({
 		baseUrl,
@@ -1102,14 +1171,14 @@ async function resolveMattermostOpaqueTarget(params) {
 	});
 	try {
 		await fetchMattermostUser(client, input);
-		mattermostOpaqueTargetCache.set(key, true);
+		cacheMattermostOpaqueTarget(key, "user");
 		return {
 			kind: "user",
 			id: input,
 			to: `user:${input}`
 		};
 	} catch (err) {
-		if (parseMattermostApiStatus(err) === 404) mattermostOpaqueTargetCache.set(key, false);
+		if (parseMattermostApiStatus(err) === 404) cacheMattermostOpaqueTarget(key, "channel");
 		return {
 			kind: "channel",
 			id: input,
@@ -1119,10 +1188,17 @@ async function resolveMattermostOpaqueTarget(params) {
 }
 //#endregion
 //#region extensions/mattermost/src/mattermost/send.ts
+const MATTERMOST_BOT_USER_CACHE_MAX_ENTRIES = 64;
+const MATTERMOST_TARGET_CACHE_MAX_ENTRIES = 1024;
 const botUserCache = /* @__PURE__ */ new Map();
 const userByNameCache = /* @__PURE__ */ new Map();
 const channelByNameCache = /* @__PURE__ */ new Map();
 const dmChannelCache = /* @__PURE__ */ new Map();
+function cacheOutboundEntry(cache, key, value, maxEntries) {
+	cache.delete(key);
+	cache.set(key, value);
+	pruneMapToMaxSize(cache, maxEntries);
+}
 const getCore = () => getMattermostRuntime();
 function createMattermostSendReceipt(params) {
 	const messageIds = params.messageId.trim() && params.messageId !== "unknown" ? [params.messageId] : [];
@@ -1161,71 +1237,6 @@ function normalizeMessage(text, mediaUrl) {
 function isHttpUrl(value) {
 	return /^https?:\/\//i.test(value);
 }
-function parseMattermostTarget(raw) {
-	const trimmed = raw.trim();
-	if (!trimmed) throw new Error("Recipient is required for Mattermost sends");
-	const lower = normalizeLowercaseStringOrEmpty(trimmed);
-	if (lower.startsWith("channel:")) {
-		const id = trimmed.slice(8).trim();
-		if (!id) throw new Error("Channel id is required for Mattermost sends");
-		if (id.startsWith("#")) {
-			const name = id.slice(1).trim();
-			if (!name) throw new Error("Channel name is required for Mattermost sends");
-			return {
-				kind: "channel-name",
-				name
-			};
-		}
-		if (!isMattermostId(id)) return {
-			kind: "channel-name",
-			name: id
-		};
-		return {
-			kind: "channel",
-			id
-		};
-	}
-	if (lower.startsWith("user:")) {
-		const id = trimmed.slice(5).trim();
-		if (!id) throw new Error("User id is required for Mattermost sends");
-		return {
-			kind: "user",
-			id
-		};
-	}
-	if (lower.startsWith("mattermost:")) {
-		const id = trimmed.slice(11).trim();
-		if (!id) throw new Error("User id is required for Mattermost sends");
-		return {
-			kind: "user",
-			id
-		};
-	}
-	if (trimmed.startsWith("@")) {
-		const username = trimmed.slice(1).trim();
-		if (!username) throw new Error("Username is required for Mattermost sends");
-		return {
-			kind: "user",
-			username
-		};
-	}
-	if (trimmed.startsWith("#")) {
-		const name = trimmed.slice(1).trim();
-		if (!name) throw new Error("Channel name is required for Mattermost sends");
-		return {
-			kind: "channel-name",
-			name
-		};
-	}
-	if (!isMattermostId(trimmed)) return {
-		kind: "channel-name",
-		name: trimmed
-	};
-	return {
-		kind: "channel",
-		id: trimmed
-	};
-}
 async function resolveBotUser(baseUrl, token, allowPrivateNetwork) {
 	const key = cacheKey(baseUrl, token);
 	const cached = botUserCache.get(key);
@@ -1235,7 +1246,7 @@ async function resolveBotUser(baseUrl, token, allowPrivateNetwork) {
 		botToken: token,
 		allowPrivateNetwork
 	}));
-	botUserCache.set(key, user);
+	cacheOutboundEntry(botUserCache, key, user, MATTERMOST_BOT_USER_CACHE_MAX_ENTRIES);
 	return user;
 }
 async function resolveUserIdByUsername(params) {
@@ -1248,7 +1259,7 @@ async function resolveUserIdByUsername(params) {
 		botToken: token,
 		allowPrivateNetwork: params.allowPrivateNetwork
 	}), username);
-	userByNameCache.set(key, user);
+	cacheOutboundEntry(userByNameCache, key, user, MATTERMOST_TARGET_CACHE_MAX_ENTRIES);
 	return user.id;
 }
 async function resolveChannelIdByName(params) {
@@ -1265,7 +1276,7 @@ async function resolveChannelIdByName(params) {
 	for (const team of teams) try {
 		const channel = await fetchMattermostChannelByName(client, team.id, name);
 		if (channel?.id) {
-			channelByNameCache.set(key, channel.id);
+			cacheOutboundEntry(channelByNameCache, key, channel.id, MATTERMOST_TARGET_CACHE_MAX_ENTRIES);
 			return channel.id;
 		}
 	} catch {}
@@ -1313,7 +1324,7 @@ async function resolveTargetChannelId(params) {
 	});
 	params.onDmChannelResolution?.(resolution);
 	const channel = await resolution;
-	dmChannelCache.set(dmKey, channel.id);
+	cacheOutboundEntry(dmChannelCache, dmKey, channel.id, MATTERMOST_TARGET_CACHE_MAX_ENTRIES);
 	return channel.id;
 }
 async function resolveMattermostSendContext(to, opts) {
@@ -1495,7 +1506,7 @@ function isDeletedMattermostCommand(command) {
 	return typeof command.delete_at === "number" && command.delete_at > 0;
 }
 function sanitizeCommandLookupError(error) {
-	return (error instanceof Error ? error.message : String(error)).replace(/[\r\n\t]/gu, " ").replace(/https?:\/\/[^\s)\]}]+/giu, (urlText) => {
+	return truncateUtf16Safe((error instanceof Error ? error.message : String(error)).replace(/[\r\n\t]/gu, " ").replace(/https?:\/\/[^\s)\]}]+/giu, (urlText) => {
 		try {
 			const url = new URL(urlText);
 			if (url.username || url.password) {
@@ -1507,10 +1518,10 @@ function sanitizeCommandLookupError(error) {
 		} catch {
 			return urlText;
 		}
-	}).replace(/(^|[^\w-])(Bearer|Token)\s+[A-Za-z0-9._~+/=-]+/giu, "$1$2 [redacted]").replace(/\b(token|authorization|access_token|refresh_token|client_secret|botToken)\b(\s*["']?\s*(?:=|:)\s*["']?)[^"',\s;}]+/giu, "$1$2[redacted]").slice(0, 300);
+	}).replace(/(^|[^\w-])(Bearer|Token)\s+[A-Za-z0-9._~+/=-]+/giu, "$1$2 [redacted]").replace(/\b(token|authorization|access_token|refresh_token|client_secret|botToken)\b(\s*["']?\s*(?:=|:)\s*["']?)[^"',\s;}]+/giu, "$1$2[redacted]"), 300);
 }
 function sanitizeMattermostLogValue(value) {
-	return value.replace(/[\r\n\t]/gu, " ").slice(0, 200);
+	return truncateUtf16Safe(value.replace(/[\r\n\t]/gu, " "), 200);
 }
 async function withCommandLookupTimeout(task) {
 	const controller = new AbortController();
@@ -2065,12 +2076,16 @@ function resolveSlashHandlerForToken(token) {
 		handler: state.handler
 	});
 	if (matches.length === 0) return { kind: "none" };
-	if (matches.length === 1) return {
-		kind: "single",
-		source: "token",
-		handler: matches[0].handler,
-		accountIds: [matches[0].accountId]
-	};
+	if (matches.length === 1) {
+		const match = matches[0];
+		if (!match) return { kind: "none" };
+		return {
+			kind: "single",
+			source: "token",
+			handler: match.handler,
+			accountIds: [match.accountId]
+		};
+	}
 	return {
 		kind: "ambiguous",
 		source: "token",
@@ -2086,12 +2101,16 @@ function resolveSlashHandlerForCommand(params) {
 		handler: state.handler
 	});
 	if (matches.length === 0) return { kind: "none" };
-	if (matches.length === 1) return {
-		kind: "single",
-		source: "command",
-		handler: matches[0].handler,
-		accountIds: [matches[0].accountId]
-	};
+	if (matches.length === 1) {
+		const match = matches[0];
+		if (!match) return { kind: "none" };
+		return {
+			kind: "single",
+			source: "command",
+			handler: match.handler,
+			accountIds: [match.accountId]
+		};
+	}
 	return {
 		kind: "ambiguous",
 		source: "command",
@@ -2190,8 +2209,8 @@ function registerSlashCommandRoute(api) {
 			return;
 		}
 		if (accountStates.size === 1) {
-			const [, state] = [...accountStates.entries()][0];
-			if (!state.handler) {
+			const state = accountStates.values().next().value;
+			if (!state?.handler) {
 				res.statusCode = 503;
 				res.setHeader("Content-Type", "application/json; charset=utf-8");
 				res.end(JSON.stringify({

package/npm-shrinkwrap.json

@@ -1,18 +1,18 @@
 {
   "name": "@openclaw/mattermost",
-  "version": "2026.7.1",
+  "version": "2026.7.2-beta.1",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@openclaw/mattermost",
-      "version": "2026.7.1",
+      "version": "2026.7.2-beta.1",
       "dependencies": {
         "ws": "8.21.0",
         "zod": "4.4.3"
       },
       "peerDependencies": {
-        "openclaw": ">=2026.7.1"
+        "openclaw": ">=2026.7.2-beta.1"
       },
       "peerDependenciesMeta": {
         "openclaw": {