@openclaw/mattermost 2026.7.1 → 2026.7.2-beta.2

package/dist/{slash-state-BfOSlkmn.js → slash-state-C9bpBN40.js}

@@ -1,19 +1,23 @@
-import { a as normalizeMattermostAllowList, b as readRequestBodyWithLimit, d as createChannelMessageReplyPipeline, g as loadOutboundMediaFromUrl, l as buildModelsProviderData, m as isTrustedProxyAddress, p as isRequestBodyLimitError, t as authorizeMattermostCommandInvocation, v as logTypingFailure, w as resolveClientIp } from "./monitor-auth-BiDuyvOc.js";
-import { b as updateMattermostPost, c as createMattermostPost, d as fetchMattermostChannelByName, f as fetchMattermostMe, g as normalizeMattermostBaseUrl, h as fetchMattermostUserTeams, m as fetchMattermostUserByUsername, o as createMattermostClient, p as fetchMattermostUser, r as resolveMattermostAccount, s as createMattermostDirectChannelWithRetry, u as fetchMattermostChannel, v as resolveMattermostReplyDeliveryBarrierTimeoutMs, x as uploadMattermostFile, y as sendMattermostTyping } from "./accounts-ITTlduDO.js";
 import { t as getMattermostRuntime } from "./runtime-CNB4YGqJ.js";
+import { _ as uploadMattermostFile, c as fetchMattermostMe, d as fetchMattermostUserTeams, f as normalizeMattermostBaseUrl, h as sendMattermostTyping, i as createMattermostPost, l as fetchMattermostUser, m as resolveMattermostReplyDeliveryBarrierTimeoutMs, n as createMattermostClient, o as fetchMattermostChannel, r as createMattermostDirectChannelWithRetry, s as fetchMattermostChannelByName, u as fetchMattermostUserByUsername } from "./client-BzLj4dyf.js";
+import { a as normalizeMattermostAllowList, b as readRequestBodyWithLimit, d as createChannelMessageReplyPipeline, g as loadOutboundMediaFromUrl, l as buildModelsProviderData, p as isRequestBodyLimitError, t as authorizeMattermostCommandInvocation, v as logTypingFailure } from "./monitor-auth-dEHa1_On.js";
+import { c as setInteractionSecret, n as buildButtonProps, o as resolveInteractionCallbackUrl } from "./interactions-DO7J-ND1.js";
+import { r as resolveMattermostAccount } from "./accounts-C4Azn6rA.js";
+import { createHash } from "node:crypto";
+import { safeEqualSecret } from "openclaw/plugin-sdk/security-runtime";
 import { normalizeLowercaseStringOrEmpty, normalizeOptionalString, normalizeStringifiedOptionalString } from "openclaw/plugin-sdk/string-coerce-runtime";
+import { asDateTimestampMs, parseStrictInteger, resolveExpiresAtMsFromDurationMs } from "openclaw/plugin-sdk/number-runtime";
+import { isPrivateNetworkOptInEnabled } from "openclaw/plugin-sdk/ssrf-runtime";
 import { createMessageReceiptFromOutboundResults } from "openclaw/plugin-sdk/channel-outbound";
 import { resolveStoredModelOverride } from "openclaw/plugin-sdk/command-auth-native";
 import { getAgentScopedMediaLocalRoots } from "openclaw/plugin-sdk/media-runtime";
-import { asDateTimestampMs, parseStrictInteger, resolveExpiresAtMsFromDurationMs } from "openclaw/plugin-sdk/number-runtime";
 import { deliverTextOrMediaReply, isReasoningReplyPayload, resolveSendableOutboundReplyParts } from "openclaw/plugin-sdk/reply-payload";
-import { isPrivateNetworkOptInEnabled } from "openclaw/plugin-sdk/ssrf-runtime";
 import { convertMarkdownTables } from "openclaw/plugin-sdk/text-chunking";
 import { getSessionEntry, resolveStorePath } from "openclaw/plugin-sdk/session-store-runtime";
 import { normalizeProviderId } from "openclaw/plugin-sdk/provider-model-shared";
 import { Readable } from "node:stream";
-import { safeEqualSecret } from "openclaw/plugin-sdk/security-runtime";
-import { createHash, createHmac } from "node:crypto";
+import { truncateUtf16Safe } from "openclaw/plugin-sdk/text-utility-runtime";
+import { pruneMapToMaxSize } from "openclaw/plugin-sdk/collection-runtime";
 import { resolveMarkdownTableMode } from "openclaw/plugin-sdk/markdown-table-runtime";
 import { requireRuntimeConfig } from "openclaw/plugin-sdk/plugin-config-runtime";
 const MATTERMOST_COMMAND_DESCRIPTION_MAX_BYTES = 128;
@@ -369,7 +373,9 @@ const ACTION_IDS = {
 function splitModelRef(modelRef) {
 	const match = normalizeOptionalString(modelRef)?.match(/^([^/]+)\/(.+)$/u);
 	if (!match) return null;
-	const provider = normalizeProviderId(match[1]);
+	const rawProvider = match[1];
+	if (!rawProvider) return null;
+	const provider = normalizeProviderId(rawProvider);
 	const model = normalizeOptionalString(match[2]);
 	if (!provider || !model) return null;
 	return {
@@ -683,382 +689,84 @@ async function deliverMattermostReplyPayload(params) {
 	});
 }
 //#endregion
-//#region extensions/mattermost/src/mattermost/interactions.ts
-const INTERACTION_MAX_BODY_BYTES = 64 * 1024;
-const INTERACTION_BODY_TIMEOUT_MS = 1e4;
-const SIGNED_CHANNEL_ID_CONTEXT_KEY = "__openclaw_channel_id";
-const callbackUrls = /* @__PURE__ */ new Map();
-function setInteractionCallbackUrl(accountId, url) {
-	callbackUrls.set(accountId, url);
-}
-function resolveInteractionCallbackPath(accountId) {
-	return `/mattermost/interactions/${accountId}`;
-}
-function isWildcardBindHost(rawHost) {
-	const trimmed = rawHost.trim();
-	if (!trimmed) return false;
-	const host = trimmed.startsWith("[") && trimmed.endsWith("]") ? trimmed.slice(1, -1) : trimmed;
-	return host === "0.0.0.0" || host === "::" || host === "0:0:0:0:0:0:0:0" || host === "::0";
-}
-function normalizeCallbackBaseUrl(baseUrl) {
-	return baseUrl.trim().replace(/\/+$/, "");
-}
-function headerValue(value) {
-	if (Array.isArray(value)) return normalizeOptionalString(value[0]);
-	return normalizeOptionalString(value);
-}
-function isAllowedInteractionSource(params) {
-	const { allowedSourceIps } = params;
-	if (!allowedSourceIps?.length) return true;
-	return isTrustedProxyAddress(resolveClientIp({
-		remoteAddr: params.req.socket?.remoteAddress,
-		forwardedFor: headerValue(params.req.headers["x-forwarded-for"]),
-		realIp: headerValue(params.req.headers["x-real-ip"]),
-		trustedProxies: params.trustedProxies,
-		allowRealIpFallback: params.allowRealIpFallback
-	}), allowedSourceIps);
-}
-/**
-* Resolve the interaction callback URL for an account.
-* Falls back to computing it from interactions.callbackBaseUrl or gateway host config.
-*/
-function computeInteractionCallbackUrl(accountId, cfg) {
-	const path = resolveInteractionCallbackPath(accountId);
-	const callbackBaseUrl = normalizeOptionalString(cfg?.interactions?.callbackBaseUrl) ?? normalizeOptionalString(cfg?.channels?.mattermost?.interactions?.callbackBaseUrl);
-	if (callbackBaseUrl) return `${normalizeCallbackBaseUrl(callbackBaseUrl)}${path}`;
-	const port = typeof cfg?.gateway?.port === "number" ? cfg.gateway.port : 18789;
-	let host = cfg?.gateway?.customBindHost && !isWildcardBindHost(cfg.gateway.customBindHost) ? cfg.gateway.customBindHost.trim() : "localhost";
-	if (host.includes(":") && !(host.startsWith("[") && host.endsWith("]"))) host = `[${host}]`;
-	return `http://${host}:${port}${path}`;
+//#region extensions/mattermost/src/mattermost/target-resolution.ts
+const MATTERMOST_OPAQUE_TARGET_CACHE_MAX_ENTRIES = 1024;
+const mattermostOpaqueTargetCache = /* @__PURE__ */ new Map();
+function cacheMattermostOpaqueTarget(key, kind) {
+	mattermostOpaqueTargetCache.set(key, kind);
+	pruneMapToMaxSize(mattermostOpaqueTargetCache, MATTERMOST_OPAQUE_TARGET_CACHE_MAX_ENTRIES);
 }
-/**
-* Resolve the interaction callback URL for an account.
-* Prefers the in-memory registered URL (set by the gateway monitor) so callers outside the
-* monitor lifecycle can reuse the runtime-validated callback destination.
-*/
-function resolveInteractionCallbackUrl(accountId, cfg) {
-	const cached = callbackUrls.get(accountId);
-	if (cached) return cached;
-	return computeInteractionCallbackUrl(accountId, cfg);
+function cacheKey$1(baseUrl, token, id) {
+	return `${baseUrl}::${token}::${id}`;
 }
-const interactionSecrets = /* @__PURE__ */ new Map();
-let defaultInteractionSecret;
-function deriveInteractionSecret(botToken) {
-	return createHmac("sha256", "openclaw-mattermost-interactions").update(botToken).digest("hex");
+/** Mattermost IDs are 26-character lowercase alphanumeric strings. */
+function isMattermostId(value) {
+	return /^[a-z0-9]{26}$/.test(value);
 }
-function setInteractionSecret(accountIdOrBotToken, botToken) {
-	if (typeof botToken === "string") {
-		interactionSecrets.set(accountIdOrBotToken, deriveInteractionSecret(botToken));
-		return;
+function parseMattermostTarget(raw) {
+	const trimmed = raw.trim();
+	if (!trimmed) throw new Error("Recipient is required for Mattermost sends");
+	const lower = normalizeLowercaseStringOrEmpty(trimmed);
+	if (lower.startsWith("channel:")) {
+		const id = trimmed.slice(8).trim();
+		if (!id) throw new Error("Channel id is required for Mattermost sends");
+		if (id.startsWith("#")) {
+			const name = id.slice(1).trim();
+			if (!name) throw new Error("Channel name is required for Mattermost sends");
+			return {
+				kind: "channel-name",
+				name
+			};
+		}
+		if (!isMattermostId(id)) return {
+			kind: "channel-name",
+			name: id
+		};
+		return {
+			kind: "channel",
+			id
+		};
 	}
-	defaultInteractionSecret = deriveInteractionSecret(accountIdOrBotToken);
-}
-function getInteractionSecret(accountId) {
-	const scoped = accountId ? interactionSecrets.get(accountId) : void 0;
-	if (scoped) return scoped;
-	if (defaultInteractionSecret) return defaultInteractionSecret;
-	if (interactionSecrets.size === 1) {
-		const first = interactionSecrets.values().next().value;
-		if (typeof first === "string") return first;
+	if (lower.startsWith("user:")) {
+		const id = trimmed.slice(5).trim();
+		if (!id) throw new Error("User id is required for Mattermost sends");
+		return {
+			kind: "user",
+			id
+		};
 	}
-	throw new Error("Interaction secret not initialized — call setInteractionSecret(accountId, botToken) first");
-}
-function canonicalizeInteractionContext(value) {
-	if (Array.isArray(value)) return value.map((item) => canonicalizeInteractionContext(item));
-	if (value && typeof value === "object") {
-		const entries = Object.entries(value).filter(([, entryValue]) => entryValue !== void 0).toSorted(([left], [right]) => left.localeCompare(right)).map(([key, entryValue]) => [key, canonicalizeInteractionContext(entryValue)]);
-		return Object.fromEntries(entries);
+	if (lower.startsWith("mattermost:")) {
+		const id = trimmed.slice(11).trim();
+		if (!id) throw new Error("User id is required for Mattermost sends");
+		return {
+			kind: "user",
+			id
+		};
 	}
-	return value;
-}
-function generateInteractionToken(context, accountId) {
-	const secret = getInteractionSecret(accountId);
-	const payload = JSON.stringify(canonicalizeInteractionContext(context));
-	return createHmac("sha256", secret).update(payload).digest("hex");
-}
-function verifyInteractionToken(context, token, accountId) {
-	return safeEqualSecret(generateInteractionToken(context, accountId), token);
-}
-/**
-* Build Mattermost `props.attachments` with interactive buttons.
-*
-* Each button includes an HMAC token in its integration context so the
-* callback handler can verify the request originated from a legitimate
-* button click (Mattermost's recommended security pattern).
-*/
-/**
-* Sanitize a button ID so Mattermost's action router can match it.
-* Mattermost uses the action ID in the URL path `/api/v4/posts/{id}/actions/{actionId}`
-* and IDs containing hyphens or underscores break the server-side routing.
-* See: https://github.com/mattermost/mattermost/issues/25747
-*/
-function sanitizeActionId(id) {
-	return id.replace(/[-_]/g, "");
-}
-function buildButtonAttachments(params) {
-	const actions = params.buttons.map((btn) => {
-		const safeId = sanitizeActionId(btn.id);
-		const context = {
-			action_id: safeId,
-			...btn.context
+	if (trimmed.startsWith("@")) {
+		const username = trimmed.slice(1).trim();
+		if (!username) throw new Error("Username is required for Mattermost sends");
+		return {
+			kind: "user",
+			username
 		};
-		const token = generateInteractionToken(context, params.accountId);
+	}
+	if (trimmed.startsWith("#")) {
+		const name = trimmed.slice(1).trim();
+		if (!name) throw new Error("Channel name is required for Mattermost sends");
 		return {
-			id: safeId,
-			type: "button",
-			name: btn.name,
-			style: btn.style,
-			integration: {
-				url: params.callbackUrl,
-				context: {
-					...context,
-					_token: token
-				}
-			}
+			kind: "channel-name",
+			name
 		};
-	});
-	return [{
-		text: params.text ?? "",
-		actions
-	}];
-}
-function buildButtonProps(params) {
-	const buttons = params.buttons.flatMap((item) => Array.isArray(item) ? item : [item]).map((btn) => ({
-		id: normalizeStringifiedOptionalString(btn.id ?? btn.callback_data) ?? "",
-		name: normalizeStringifiedOptionalString(btn.text ?? btn.name ?? btn.label) ?? "",
-		style: btn.style ?? "default",
-		context: typeof btn.context === "object" && btn.context !== null ? {
-			...btn.context,
-			[SIGNED_CHANNEL_ID_CONTEXT_KEY]: params.channelId
-		} : { [SIGNED_CHANNEL_ID_CONTEXT_KEY]: params.channelId }
-	})).filter((btn) => btn.id && btn.name);
-	if (buttons.length === 0) return;
-	return { attachments: buildButtonAttachments({
-		callbackUrl: params.callbackUrl,
-		accountId: params.accountId,
-		buttons,
-		text: params.text
-	}) };
-}
-function readInteractionBody(req) {
-	return readRequestBodyWithLimit(req, {
-		maxBytes: INTERACTION_MAX_BODY_BYTES,
-		timeoutMs: INTERACTION_BODY_TIMEOUT_MS
-	});
-}
-function createMattermostInteractionHandler(params) {
-	const { client, accountId, log } = params;
-	const core = getMattermostRuntime();
-	function parseInteractionPayload(raw) {
-		try {
-			return JSON.parse(raw);
-		} catch {
-			throw new Error("Mattermost interaction body was malformed JSON");
-		}
 	}
-	return async (req, res) => {
-		if (req.method !== "POST") {
-			res.statusCode = 405;
-			res.setHeader("Allow", "POST");
-			res.setHeader("Content-Type", "application/json");
-			res.end(JSON.stringify({ error: "Method Not Allowed" }));
-			return;
-		}
-		if (!isAllowedInteractionSource({
-			req,
-			allowedSourceIps: params.allowedSourceIps,
-			trustedProxies: params.trustedProxies,
-			allowRealIpFallback: params.allowRealIpFallback
-		})) {
-			log?.(`mattermost interaction: rejected callback source remote=${req.socket?.remoteAddress ?? "?"}`);
-			res.statusCode = 403;
-			res.setHeader("Content-Type", "application/json");
-			res.end(JSON.stringify({ error: "Forbidden origin" }));
-			return;
-		}
-		let payload;
-		try {
-			payload = parseInteractionPayload(await readInteractionBody(req));
-		} catch (err) {
-			log?.(`mattermost interaction: failed to parse body: ${String(err)}`);
-			res.statusCode = 400;
-			res.setHeader("Content-Type", "application/json");
-			res.end(JSON.stringify({ error: "Invalid request body" }));
-			return;
-		}
-		const context = payload.context;
-		if (!context) {
-			res.statusCode = 400;
-			res.setHeader("Content-Type", "application/json");
-			res.end(JSON.stringify({ error: "Missing context" }));
-			return;
-		}
-		const token = context["_token"];
-		if (typeof token !== "string") {
-			log?.("mattermost interaction: missing _token in context");
-			res.statusCode = 403;
-			res.setHeader("Content-Type", "application/json");
-			res.end(JSON.stringify({ error: "Missing token" }));
-			return;
-		}
-		const { _token, ...contextWithoutToken } = context;
-		if (!verifyInteractionToken(contextWithoutToken, token, accountId)) {
-			log?.("mattermost interaction: invalid _token");
-			res.statusCode = 403;
-			res.setHeader("Content-Type", "application/json");
-			res.end(JSON.stringify({ error: "Invalid token" }));
-			return;
-		}
-		const actionId = context.action_id;
-		if (typeof actionId !== "string") {
-			res.statusCode = 400;
-			res.setHeader("Content-Type", "application/json");
-			res.end(JSON.stringify({ error: "Missing action_id in context" }));
-			return;
-		}
-		const signedChannelId = typeof contextWithoutToken[SIGNED_CHANNEL_ID_CONTEXT_KEY] === "string" ? contextWithoutToken[SIGNED_CHANNEL_ID_CONTEXT_KEY].trim() : "";
-		if (signedChannelId && signedChannelId !== payload.channel_id) {
-			log?.(`mattermost interaction: signed channel mismatch payload=${payload.channel_id} signed=${signedChannelId}`);
-			res.statusCode = 403;
-			res.setHeader("Content-Type", "application/json");
-			res.end(JSON.stringify({ error: "Channel mismatch" }));
-			return;
-		}
-		const userName = payload.user_name ?? payload.user_id;
-		let originalMessage;
-		let originalPost;
-		let clickedButtonName = null;
-		try {
-			originalPost = await client.request(`/posts/${payload.post_id}`);
-			const postChannelId = originalPost.channel_id?.trim();
-			if (!postChannelId || postChannelId !== payload.channel_id) {
-				log?.(`mattermost interaction: post channel mismatch payload=${payload.channel_id} post=${postChannelId ?? "<missing>"}`);
-				res.statusCode = 403;
-				res.setHeader("Content-Type", "application/json");
-				res.end(JSON.stringify({ error: "Post/channel mismatch" }));
-				return;
-			}
-			originalMessage = originalPost.message ?? "";
-			const postAttachments = Array.isArray(originalPost?.props?.attachments) ? originalPost.props.attachments : [];
-			for (const att of postAttachments) {
-				const match = att.actions?.find((a) => a.id === actionId);
-				if (match?.name) {
-					clickedButtonName = match.name;
-					break;
-				}
-			}
-			if (clickedButtonName === null) {
-				log?.(`mattermost interaction: action ${actionId} not found in post ${payload.post_id}`);
-				res.statusCode = 403;
-				res.setHeader("Content-Type", "application/json");
-				res.end(JSON.stringify({ error: "Unknown action" }));
-				return;
-			}
-		} catch (err) {
-			log?.(`mattermost interaction: failed to validate post ${payload.post_id}: ${String(err)}`);
-			res.statusCode = 500;
-			res.setHeader("Content-Type", "application/json");
-			res.end(JSON.stringify({ error: "Failed to validate interaction" }));
-			return;
-		}
-		if (!originalPost) {
-			log?.(`mattermost interaction: missing fetched post ${payload.post_id}`);
-			res.statusCode = 500;
-			res.setHeader("Content-Type", "application/json");
-			res.end(JSON.stringify({ error: "Failed to load interaction post" }));
-			return;
-		}
-		log?.(`mattermost interaction: action=${actionId} user=${payload.user_name ?? payload.user_id} post=${payload.post_id} channel=${payload.channel_id}`);
-		if (params.authorizeButtonClick) try {
-			const authorization = await params.authorizeButtonClick({
-				payload,
-				post: originalPost
-			});
-			if (!authorization.ok) {
-				res.statusCode = authorization.statusCode ?? 200;
-				res.setHeader("Content-Type", "application/json");
-				res.end(JSON.stringify(authorization.response ?? { ephemeral_text: "You are not allowed to use this action here." }));
-				return;
-			}
-		} catch (err) {
-			log?.(`mattermost interaction: authorization failed: ${String(err)}`);
-			res.statusCode = 500;
-			res.setHeader("Content-Type", "application/json");
-			res.end(JSON.stringify({ error: "Interaction authorization failed" }));
-			return;
-		}
-		if (params.handleInteraction) try {
-			const response = await params.handleInteraction({
-				payload,
-				userName,
-				actionId,
-				actionName: clickedButtonName,
-				originalMessage,
-				context: contextWithoutToken,
-				post: originalPost
-			});
-			if (response !== null) {
-				res.statusCode = 200;
-				res.setHeader("Content-Type", "application/json");
-				res.end(JSON.stringify(response));
-				return;
-			}
-		} catch (err) {
-			log?.(`mattermost interaction: custom handler failed: ${String(err)}`);
-			res.statusCode = 500;
-			res.setHeader("Content-Type", "application/json");
-			res.end(JSON.stringify({ error: "Interaction handler failed" }));
-			return;
-		}
-		try {
-			const eventLabel = `Mattermost button click: action="${actionId}" by ${payload.user_name ?? payload.user_id} in channel ${payload.channel_id}`;
-			const sessionKey = params.resolveSessionKey ? await params.resolveSessionKey({
-				channelId: payload.channel_id,
-				userId: payload.user_id,
-				post: originalPost
-			}) : `agent:main:mattermost:${accountId}:${payload.channel_id}`;
-			core.system.enqueueSystemEvent(eventLabel, {
-				sessionKey,
-				contextKey: `mattermost:interaction:${payload.post_id}:${actionId}`
-			});
-		} catch (err) {
-			log?.(`mattermost interaction: system event dispatch failed: ${String(err)}`);
-		}
-		try {
-			await updateMattermostPost(client, payload.post_id, {
-				message: originalMessage,
-				props: { attachments: [{ text: `✓ **${clickedButtonName}** selected by @${userName}` }] }
-			});
-		} catch (err) {
-			log?.(`mattermost interaction: failed to update post ${payload.post_id}: ${String(err)}`);
-		}
-		res.statusCode = 200;
-		res.setHeader("Content-Type", "application/json");
-		res.end("{}");
-		if (params.dispatchButtonClick) try {
-			await params.dispatchButtonClick({
-				channelId: payload.channel_id,
-				userId: payload.user_id,
-				userName,
-				actionId,
-				actionName: clickedButtonName,
-				postId: payload.post_id,
-				post: originalPost
-			});
-		} catch (err) {
-			log?.(`mattermost interaction: dispatchButtonClick failed: ${String(err)}`);
-		}
+	if (!isMattermostId(trimmed)) return {
+		kind: "channel-name",
+		name: trimmed
+	};
+	return {
+		kind: "channel",
+		id: trimmed
 	};
-}
-//#endregion
-//#region extensions/mattermost/src/mattermost/target-resolution.ts
-const mattermostOpaqueTargetCache = /* @__PURE__ */ new Map();
-function cacheKey$1(baseUrl, token, id) {
-	return `${baseUrl}::${token}::${id}`;
-}
-/** Mattermost IDs are 26-character lowercase alphanumeric strings. */
-function isMattermostId(value) {
-	return /^[a-z0-9]{26}$/.test(value);
 }
 function isExplicitMattermostTarget(raw) {
 	const trimmed = raw.trim();
@@ -1080,20 +788,16 @@ async function resolveMattermostOpaqueTarget(params) {
 		cfg: params.cfg,
 		accountId: params.accountId
 	}) : null;
+	if (account && !account.enabled) throw new Error(`Mattermost account "${account.accountId}" is disabled`);
 	const token = normalizeOptionalString(params.token) ?? normalizeOptionalString(account?.botToken);
 	const baseUrl = normalizeMattermostBaseUrl(params.baseUrl ?? account?.baseUrl);
 	if (!token || !baseUrl) return null;
 	const key = cacheKey$1(baseUrl, token, input);
-	const cached = mattermostOpaqueTargetCache.get(key);
-	if (cached === true) return {
-		kind: "user",
+	const cachedKind = mattermostOpaqueTargetCache.get(key);
+	if (cachedKind) return {
+		kind: cachedKind,
 		id: input,
-		to: `user:${input}`
-	};
-	if (cached === false) return {
-		kind: "channel",
-		id: input,
-		to: `channel:${input}`
+		to: `${cachedKind}:${input}`
 	};
 	const client = createMattermostClient({
 		baseUrl,
@@ -1102,14 +806,14 @@ async function resolveMattermostOpaqueTarget(params) {
 	});
 	try {
 		await fetchMattermostUser(client, input);
-		mattermostOpaqueTargetCache.set(key, true);
+		cacheMattermostOpaqueTarget(key, "user");
 		return {
 			kind: "user",
 			id: input,
 			to: `user:${input}`
 		};
 	} catch (err) {
-		if (parseMattermostApiStatus(err) === 404) mattermostOpaqueTargetCache.set(key, false);
+		if (parseMattermostApiStatus(err) === 404) cacheMattermostOpaqueTarget(key, "channel");
 		return {
 			kind: "channel",
 			id: input,
@@ -1119,10 +823,17 @@ async function resolveMattermostOpaqueTarget(params) {
 }
 //#endregion
 //#region extensions/mattermost/src/mattermost/send.ts
+const MATTERMOST_BOT_USER_CACHE_MAX_ENTRIES = 64;
+const MATTERMOST_TARGET_CACHE_MAX_ENTRIES = 1024;
 const botUserCache = /* @__PURE__ */ new Map();
 const userByNameCache = /* @__PURE__ */ new Map();
 const channelByNameCache = /* @__PURE__ */ new Map();
 const dmChannelCache = /* @__PURE__ */ new Map();
+function cacheOutboundEntry(cache, key, value, maxEntries) {
+	cache.delete(key);
+	cache.set(key, value);
+	pruneMapToMaxSize(cache, maxEntries);
+}
 const getCore = () => getMattermostRuntime();
 function createMattermostSendReceipt(params) {
 	const messageIds = params.messageId.trim() && params.messageId !== "unknown" ? [params.messageId] : [];
@@ -1161,71 +872,6 @@ function normalizeMessage(text, mediaUrl) {
 function isHttpUrl(value) {
 	return /^https?:\/\//i.test(value);
 }
-function parseMattermostTarget(raw) {
-	const trimmed = raw.trim();
-	if (!trimmed) throw new Error("Recipient is required for Mattermost sends");
-	const lower = normalizeLowercaseStringOrEmpty(trimmed);
-	if (lower.startsWith("channel:")) {
-		const id = trimmed.slice(8).trim();
-		if (!id) throw new Error("Channel id is required for Mattermost sends");
-		if (id.startsWith("#")) {
-			const name = id.slice(1).trim();
-			if (!name) throw new Error("Channel name is required for Mattermost sends");
-			return {
-				kind: "channel-name",
-				name
-			};
-		}
-		if (!isMattermostId(id)) return {
-			kind: "channel-name",
-			name: id
-		};
-		return {
-			kind: "channel",
-			id
-		};
-	}
-	if (lower.startsWith("user:")) {
-		const id = trimmed.slice(5).trim();
-		if (!id) throw new Error("User id is required for Mattermost sends");
-		return {
-			kind: "user",
-			id
-		};
-	}
-	if (lower.startsWith("mattermost:")) {
-		const id = trimmed.slice(11).trim();
-		if (!id) throw new Error("User id is required for Mattermost sends");
-		return {
-			kind: "user",
-			id
-		};
-	}
-	if (trimmed.startsWith("@")) {
-		const username = trimmed.slice(1).trim();
-		if (!username) throw new Error("Username is required for Mattermost sends");
-		return {
-			kind: "user",
-			username
-		};
-	}
-	if (trimmed.startsWith("#")) {
-		const name = trimmed.slice(1).trim();
-		if (!name) throw new Error("Channel name is required for Mattermost sends");
-		return {
-			kind: "channel-name",
-			name
-		};
-	}
-	if (!isMattermostId(trimmed)) return {
-		kind: "channel-name",
-		name: trimmed
-	};
-	return {
-		kind: "channel",
-		id: trimmed
-	};
-}
 async function resolveBotUser(baseUrl, token, allowPrivateNetwork) {
 	const key = cacheKey(baseUrl, token);
 	const cached = botUserCache.get(key);
@@ -1235,7 +881,7 @@ async function resolveBotUser(baseUrl, token, allowPrivateNetwork) {
 		botToken: token,
 		allowPrivateNetwork
 	}));
-	botUserCache.set(key, user);
+	cacheOutboundEntry(botUserCache, key, user, MATTERMOST_BOT_USER_CACHE_MAX_ENTRIES);
 	return user;
 }
 async function resolveUserIdByUsername(params) {
@@ -1248,7 +894,7 @@ async function resolveUserIdByUsername(params) {
 		botToken: token,
 		allowPrivateNetwork: params.allowPrivateNetwork
 	}), username);
-	userByNameCache.set(key, user);
+	cacheOutboundEntry(userByNameCache, key, user, MATTERMOST_TARGET_CACHE_MAX_ENTRIES);
 	return user.id;
 }
 async function resolveChannelIdByName(params) {
@@ -1265,7 +911,7 @@ async function resolveChannelIdByName(params) {
 	for (const team of teams) try {
 		const channel = await fetchMattermostChannelByName(client, team.id, name);
 		if (channel?.id) {
-			channelByNameCache.set(key, channel.id);
+			cacheOutboundEntry(channelByNameCache, key, channel.id, MATTERMOST_TARGET_CACHE_MAX_ENTRIES);
 			return channel.id;
 		}
 	} catch {}
@@ -1313,7 +959,7 @@ async function resolveTargetChannelId(params) {
 	});
 	params.onDmChannelResolution?.(resolution);
 	const channel = await resolution;
-	dmChannelCache.set(dmKey, channel.id);
+	cacheOutboundEntry(dmChannelCache, dmKey, channel.id, MATTERMOST_TARGET_CACHE_MAX_ENTRIES);
 	return channel.id;
 }
 async function resolveMattermostSendContext(to, opts) {
@@ -1495,7 +1141,7 @@ function isDeletedMattermostCommand(command) {
 	return typeof command.delete_at === "number" && command.delete_at > 0;
 }
 function sanitizeCommandLookupError(error) {
-	return (error instanceof Error ? error.message : String(error)).replace(/[\r\n\t]/gu, " ").replace(/https?:\/\/[^\s)\]}]+/giu, (urlText) => {
+	return truncateUtf16Safe((error instanceof Error ? error.message : String(error)).replace(/[\r\n\t]/gu, " ").replace(/https?:\/\/[^\s)\]}]+/giu, (urlText) => {
 		try {
 			const url = new URL(urlText);
 			if (url.username || url.password) {
@@ -1507,10 +1153,10 @@ function sanitizeCommandLookupError(error) {
 		} catch {
 			return urlText;
 		}
-	}).replace(/(^|[^\w-])(Bearer|Token)\s+[A-Za-z0-9._~+/=-]+/giu, "$1$2 [redacted]").replace(/\b(token|authorization|access_token|refresh_token|client_secret|botToken)\b(\s*["']?\s*(?:=|:)\s*["']?)[^"',\s;}]+/giu, "$1$2[redacted]").slice(0, 300);
+	}).replace(/(^|[^\w-])(Bearer|Token)\s+[A-Za-z0-9._~+/=-]+/giu, "$1$2 [redacted]").replace(/\b(token|authorization|access_token|refresh_token|client_secret|botToken)\b(\s*["']?\s*(?:=|:)\s*["']?)[^"',\s;}]+/giu, "$1$2[redacted]"), 300);
 }
 function sanitizeMattermostLogValue(value) {
-	return value.replace(/[\r\n\t]/gu, " ").slice(0, 200);
+	return truncateUtf16Safe(value.replace(/[\r\n\t]/gu, " "), 200);
 }
 async function withCommandLookupTimeout(task) {
 	const controller = new AbortController();
@@ -2065,12 +1711,16 @@ function resolveSlashHandlerForToken(token) {
 		handler: state.handler
 	});
 	if (matches.length === 0) return { kind: "none" };
-	if (matches.length === 1) return {
-		kind: "single",
-		source: "token",
-		handler: matches[0].handler,
-		accountIds: [matches[0].accountId]
-	};
+	if (matches.length === 1) {
+		const match = matches[0];
+		if (!match) return { kind: "none" };
+		return {
+			kind: "single",
+			source: "token",
+			handler: match.handler,
+			accountIds: [match.accountId]
+		};
+	}
 	return {
 		kind: "ambiguous",
 		source: "token",
@@ -2086,12 +1736,16 @@ function resolveSlashHandlerForCommand(params) {
 		handler: state.handler
 	});
 	if (matches.length === 0) return { kind: "none" };
-	if (matches.length === 1) return {
-		kind: "single",
-		source: "command",
-		handler: matches[0].handler,
-		accountIds: [matches[0].accountId]
-	};
+	if (matches.length === 1) {
+		const match = matches[0];
+		if (!match) return { kind: "none" };
+		return {
+			kind: "single",
+			source: "command",
+			handler: match.handler,
+			accountIds: [match.accountId]
+		};
+	}
 	return {
 		kind: "ambiguous",
 		source: "command",
@@ -2190,8 +1844,8 @@ function registerSlashCommandRoute(api) {
 			return;
 		}
 		if (accountStates.size === 1) {
-			const [, state] = [...accountStates.entries()][0];
-			if (!state.handler) {
+			const state = accountStates.values().next().value;
+			if (!state?.handler) {
 				res.statusCode = 503;
 				res.setHeader("Content-Type", "application/json; charset=utf-8");
 				res.end(JSON.stringify({
@@ -2270,4 +1924,4 @@ function registerSlashCommandRoute(api) {
 	});
 }
 //#endregion
-export { registerSlashCommands as C, isSlashCommandsEnabled as S, resolveSlashCommandConfig as T, renderMattermostModelsPickerView as _, sendMessageMattermost as a, DEFAULT_COMMAND_SPECS as b, computeInteractionCallbackUrl as c, setInteractionCallbackUrl as d, setInteractionSecret as f, parseMattermostModelPickerContext as g, buildMattermostAllowedModelRefs as h, registerSlashCommandRoute as i, createMattermostInteractionHandler as l, deliverMattermostReplyPayload as m, deactivateSlashCommands as n, resolveMattermostOpaqueTarget as o, createMattermostReplyDeliveryBarrier as p, getSlashCommandState as r, buildButtonProps as s, activateSlashCommands as t, resolveInteractionCallbackPath as u, renderMattermostProviderPickerView as v, resolveCallbackUrl as w, cleanupSlashCommands as x, resolveMattermostModelPickerCurrentModel as y };
+export { registerSlashCommands as _, sendMessageMattermost as a, deliverMattermostReplyPayload as c, renderMattermostModelsPickerView as d, renderMattermostProviderPickerView as f, isSlashCommandsEnabled as g, cleanupSlashCommands as h, registerSlashCommandRoute as i, buildMattermostAllowedModelRefs as l, DEFAULT_COMMAND_SPECS as m, deactivateSlashCommands as n, resolveMattermostOpaqueTarget as o, resolveMattermostModelPickerCurrentModel as p, getSlashCommandState as r, createMattermostReplyDeliveryBarrier as s, activateSlashCommands as t, parseMattermostModelPickerContext as u, resolveCallbackUrl as v, resolveSlashCommandConfig as y };