@openclaw/mattermost 2026.7.2-beta.1 → 2026.7.2-beta.2

package/dist/{slash-state-Cr58Xd12.js → slash-state-C9bpBN40.js}

@@ -1,20 +1,22 @@
-import { a as normalizeMattermostAllowList, b as readRequestBodyWithLimit, d as createChannelMessageReplyPipeline, g as loadOutboundMediaFromUrl, l as buildModelsProviderData, m as isTrustedProxyAddress, p as isRequestBodyLimitError, t as authorizeMattermostCommandInvocation, v as logTypingFailure, w as resolveClientIp } from "./monitor-auth-BiDuyvOc.js";
-import { b as updateMattermostPost, c as createMattermostPost, d as fetchMattermostChannelByName, f as fetchMattermostMe, g as normalizeMattermostBaseUrl, h as fetchMattermostUserTeams, m as fetchMattermostUserByUsername, o as createMattermostClient, p as fetchMattermostUser, r as resolveMattermostAccount, s as createMattermostDirectChannelWithRetry, u as fetchMattermostChannel, v as resolveMattermostReplyDeliveryBarrierTimeoutMs, x as uploadMattermostFile, y as sendMattermostTyping } from "./accounts-B2NRPlqr.js";
 import { t as getMattermostRuntime } from "./runtime-CNB4YGqJ.js";
+import { _ as uploadMattermostFile, c as fetchMattermostMe, d as fetchMattermostUserTeams, f as normalizeMattermostBaseUrl, h as sendMattermostTyping, i as createMattermostPost, l as fetchMattermostUser, m as resolveMattermostReplyDeliveryBarrierTimeoutMs, n as createMattermostClient, o as fetchMattermostChannel, r as createMattermostDirectChannelWithRetry, s as fetchMattermostChannelByName, u as fetchMattermostUserByUsername } from "./client-BzLj4dyf.js";
+import { a as normalizeMattermostAllowList, b as readRequestBodyWithLimit, d as createChannelMessageReplyPipeline, g as loadOutboundMediaFromUrl, l as buildModelsProviderData, p as isRequestBodyLimitError, t as authorizeMattermostCommandInvocation, v as logTypingFailure } from "./monitor-auth-dEHa1_On.js";
+import { c as setInteractionSecret, n as buildButtonProps, o as resolveInteractionCallbackUrl } from "./interactions-DO7J-ND1.js";
+import { r as resolveMattermostAccount } from "./accounts-C4Azn6rA.js";
+import { createHash } from "node:crypto";
+import { safeEqualSecret } from "openclaw/plugin-sdk/security-runtime";
 import { normalizeLowercaseStringOrEmpty, normalizeOptionalString, normalizeStringifiedOptionalString } from "openclaw/plugin-sdk/string-coerce-runtime";
+import { asDateTimestampMs, parseStrictInteger, resolveExpiresAtMsFromDurationMs } from "openclaw/plugin-sdk/number-runtime";
+import { isPrivateNetworkOptInEnabled } from "openclaw/plugin-sdk/ssrf-runtime";
 import { createMessageReceiptFromOutboundResults } from "openclaw/plugin-sdk/channel-outbound";
 import { resolveStoredModelOverride } from "openclaw/plugin-sdk/command-auth-native";
 import { getAgentScopedMediaLocalRoots } from "openclaw/plugin-sdk/media-runtime";
-import { asDateTimestampMs, parseStrictInteger, resolveExpiresAtMsFromDurationMs } from "openclaw/plugin-sdk/number-runtime";
 import { deliverTextOrMediaReply, isReasoningReplyPayload, resolveSendableOutboundReplyParts } from "openclaw/plugin-sdk/reply-payload";
-import { isPrivateNetworkOptInEnabled } from "openclaw/plugin-sdk/ssrf-runtime";
 import { convertMarkdownTables } from "openclaw/plugin-sdk/text-chunking";
 import { getSessionEntry, resolveStorePath } from "openclaw/plugin-sdk/session-store-runtime";
 import { normalizeProviderId } from "openclaw/plugin-sdk/provider-model-shared";
 import { Readable } from "node:stream";
-import { safeEqualSecret } from "openclaw/plugin-sdk/security-runtime";
 import { truncateUtf16Safe } from "openclaw/plugin-sdk/text-utility-runtime";
-import { createHash, createHmac } from "node:crypto";
 import { pruneMapToMaxSize } from "openclaw/plugin-sdk/collection-runtime";
 import { resolveMarkdownTableMode } from "openclaw/plugin-sdk/markdown-table-runtime";
 import { requireRuntimeConfig } from "openclaw/plugin-sdk/plugin-config-runtime";
@@ -687,374 +689,6 @@ async function deliverMattermostReplyPayload(params) {
 	});
 }
 //#endregion
-//#region extensions/mattermost/src/mattermost/interactions.ts
-const INTERACTION_MAX_BODY_BYTES = 64 * 1024;
-const INTERACTION_BODY_TIMEOUT_MS = 1e4;
-const SIGNED_CHANNEL_ID_CONTEXT_KEY = "__openclaw_channel_id";
-const callbackUrls = /* @__PURE__ */ new Map();
-function setInteractionCallbackUrl(accountId, url) {
-	callbackUrls.set(accountId, url);
-}
-function resolveInteractionCallbackPath(accountId) {
-	return `/mattermost/interactions/${accountId}`;
-}
-function isWildcardBindHost(rawHost) {
-	const trimmed = rawHost.trim();
-	if (!trimmed) return false;
-	const host = trimmed.startsWith("[") && trimmed.endsWith("]") ? trimmed.slice(1, -1) : trimmed;
-	return host === "0.0.0.0" || host === "::" || host === "0:0:0:0:0:0:0:0" || host === "::0";
-}
-function normalizeCallbackBaseUrl(baseUrl) {
-	return baseUrl.trim().replace(/\/+$/, "");
-}
-function headerValue(value) {
-	if (Array.isArray(value)) return normalizeOptionalString(value[0]);
-	return normalizeOptionalString(value);
-}
-function isAllowedInteractionSource(params) {
-	const { allowedSourceIps } = params;
-	if (!allowedSourceIps?.length) return true;
-	return isTrustedProxyAddress(resolveClientIp({
-		remoteAddr: params.req.socket?.remoteAddress,
-		forwardedFor: headerValue(params.req.headers["x-forwarded-for"]),
-		realIp: headerValue(params.req.headers["x-real-ip"]),
-		trustedProxies: params.trustedProxies,
-		allowRealIpFallback: params.allowRealIpFallback
-	}), allowedSourceIps);
-}
-/**
-* Resolve the interaction callback URL for an account.
-* Falls back to computing it from interactions.callbackBaseUrl or gateway host config.
-*/
-function computeInteractionCallbackUrl(accountId, cfg) {
-	const path = resolveInteractionCallbackPath(accountId);
-	const callbackBaseUrl = normalizeOptionalString(cfg?.interactions?.callbackBaseUrl) ?? normalizeOptionalString(cfg?.channels?.mattermost?.interactions?.callbackBaseUrl);
-	if (callbackBaseUrl) return `${normalizeCallbackBaseUrl(callbackBaseUrl)}${path}`;
-	const port = typeof cfg?.gateway?.port === "number" ? cfg.gateway.port : 18789;
-	let host = cfg?.gateway?.customBindHost && !isWildcardBindHost(cfg.gateway.customBindHost) ? cfg.gateway.customBindHost.trim() : "localhost";
-	if (host.includes(":") && !(host.startsWith("[") && host.endsWith("]"))) host = `[${host}]`;
-	return `http://${host}:${port}${path}`;
-}
-/**
-* Resolve the interaction callback URL for an account.
-* Prefers the in-memory registered URL (set by the gateway monitor) so callers outside the
-* monitor lifecycle can reuse the runtime-validated callback destination.
-*/
-function resolveInteractionCallbackUrl(accountId, cfg) {
-	const cached = callbackUrls.get(accountId);
-	if (cached) return cached;
-	return computeInteractionCallbackUrl(accountId, cfg);
-}
-const interactionSecrets = /* @__PURE__ */ new Map();
-let defaultInteractionSecret;
-function deriveInteractionSecret(botToken) {
-	return createHmac("sha256", "openclaw-mattermost-interactions").update(botToken).digest("hex");
-}
-function setInteractionSecret(accountIdOrBotToken, botToken) {
-	if (typeof botToken === "string") {
-		interactionSecrets.set(accountIdOrBotToken, deriveInteractionSecret(botToken));
-		return;
-	}
-	defaultInteractionSecret = deriveInteractionSecret(accountIdOrBotToken);
-}
-function getInteractionSecret(accountId) {
-	const scoped = accountId ? interactionSecrets.get(accountId) : void 0;
-	if (scoped) return scoped;
-	if (defaultInteractionSecret) return defaultInteractionSecret;
-	if (interactionSecrets.size === 1) {
-		const first = interactionSecrets.values().next().value;
-		if (typeof first === "string") return first;
-	}
-	throw new Error("Interaction secret not initialized — call setInteractionSecret(accountId, botToken) first");
-}
-function canonicalizeInteractionContext(value) {
-	if (Array.isArray(value)) return value.map((item) => canonicalizeInteractionContext(item));
-	if (value && typeof value === "object") {
-		const entries = Object.entries(value).filter(([, entryValue]) => entryValue !== void 0).toSorted(([left], [right]) => left.localeCompare(right)).map(([key, entryValue]) => [key, canonicalizeInteractionContext(entryValue)]);
-		return Object.fromEntries(entries);
-	}
-	return value;
-}
-function generateInteractionToken(context, accountId) {
-	const secret = getInteractionSecret(accountId);
-	const payload = JSON.stringify(canonicalizeInteractionContext(context));
-	return createHmac("sha256", secret).update(payload).digest("hex");
-}
-function verifyInteractionToken(context, token, accountId) {
-	return safeEqualSecret(generateInteractionToken(context, accountId), token);
-}
-/**
-* Build Mattermost `props.attachments` with interactive buttons.
-*
-* Each button includes an HMAC token in its integration context so the
-* callback handler can verify the request originated from a legitimate
-* button click (Mattermost's recommended security pattern).
-*/
-/**
-* Sanitize a button ID so Mattermost's action router can match it.
-* Mattermost uses the action ID in the URL path `/api/v4/posts/{id}/actions/{actionId}`
-* and IDs containing hyphens or underscores break the server-side routing.
-* See: https://github.com/mattermost/mattermost/issues/25747
-*/
-function sanitizeActionId(id) {
-	return id.replace(/[-_]/g, "");
-}
-function buildButtonAttachments(params) {
-	const actions = params.buttons.map((btn) => {
-		const safeId = sanitizeActionId(btn.id);
-		const context = {
-			action_id: safeId,
-			...btn.context
-		};
-		const token = generateInteractionToken(context, params.accountId);
-		return {
-			id: safeId,
-			type: "button",
-			name: btn.name,
-			style: btn.style,
-			integration: {
-				url: params.callbackUrl,
-				context: {
-					...context,
-					_token: token
-				}
-			}
-		};
-	});
-	return [{
-		text: params.text ?? "",
-		actions
-	}];
-}
-function buildButtonProps(params) {
-	const buttons = params.buttons.flatMap((item) => Array.isArray(item) ? item : [item]).map((btn) => ({
-		id: normalizeStringifiedOptionalString(btn.id ?? btn.callback_data) ?? "",
-		name: normalizeStringifiedOptionalString(btn.text ?? btn.name ?? btn.label) ?? "",
-		style: btn.style ?? "default",
-		context: typeof btn.context === "object" && btn.context !== null ? {
-			...btn.context,
-			[SIGNED_CHANNEL_ID_CONTEXT_KEY]: params.channelId
-		} : { [SIGNED_CHANNEL_ID_CONTEXT_KEY]: params.channelId }
-	})).filter((btn) => btn.id && btn.name);
-	if (buttons.length === 0) return;
-	return { attachments: buildButtonAttachments({
-		callbackUrl: params.callbackUrl,
-		accountId: params.accountId,
-		buttons,
-		text: params.text
-	}) };
-}
-function readInteractionBody(req) {
-	return readRequestBodyWithLimit(req, {
-		maxBytes: INTERACTION_MAX_BODY_BYTES,
-		timeoutMs: INTERACTION_BODY_TIMEOUT_MS
-	});
-}
-function createMattermostInteractionHandler(params) {
-	const { client, accountId, log } = params;
-	const core = getMattermostRuntime();
-	function parseInteractionPayload(raw) {
-		try {
-			return JSON.parse(raw);
-		} catch {
-			throw new Error("Mattermost interaction body was malformed JSON");
-		}
-	}
-	return async (req, res) => {
-		if (req.method !== "POST") {
-			res.statusCode = 405;
-			res.setHeader("Allow", "POST");
-			res.setHeader("Content-Type", "application/json");
-			res.end(JSON.stringify({ error: "Method Not Allowed" }));
-			return;
-		}
-		if (!isAllowedInteractionSource({
-			req,
-			allowedSourceIps: params.allowedSourceIps,
-			trustedProxies: params.trustedProxies,
-			allowRealIpFallback: params.allowRealIpFallback
-		})) {
-			log?.(`mattermost interaction: rejected callback source remote=${req.socket?.remoteAddress ?? "?"}`);
-			res.statusCode = 403;
-			res.setHeader("Content-Type", "application/json");
-			res.end(JSON.stringify({ error: "Forbidden origin" }));
-			return;
-		}
-		let payload;
-		try {
-			payload = parseInteractionPayload(await readInteractionBody(req));
-		} catch (err) {
-			log?.(`mattermost interaction: failed to parse body: ${String(err)}`);
-			res.statusCode = 400;
-			res.setHeader("Content-Type", "application/json");
-			res.end(JSON.stringify({ error: "Invalid request body" }));
-			return;
-		}
-		const context = payload.context;
-		if (!context) {
-			res.statusCode = 400;
-			res.setHeader("Content-Type", "application/json");
-			res.end(JSON.stringify({ error: "Missing context" }));
-			return;
-		}
-		const token = context["_token"];
-		if (typeof token !== "string") {
-			log?.("mattermost interaction: missing _token in context");
-			res.statusCode = 403;
-			res.setHeader("Content-Type", "application/json");
-			res.end(JSON.stringify({ error: "Missing token" }));
-			return;
-		}
-		const { _token, ...contextWithoutToken } = context;
-		if (!verifyInteractionToken(contextWithoutToken, token, accountId)) {
-			log?.("mattermost interaction: invalid _token");
-			res.statusCode = 403;
-			res.setHeader("Content-Type", "application/json");
-			res.end(JSON.stringify({ error: "Invalid token" }));
-			return;
-		}
-		const actionId = context.action_id;
-		if (typeof actionId !== "string") {
-			res.statusCode = 400;
-			res.setHeader("Content-Type", "application/json");
-			res.end(JSON.stringify({ error: "Missing action_id in context" }));
-			return;
-		}
-		const signedChannelId = typeof contextWithoutToken[SIGNED_CHANNEL_ID_CONTEXT_KEY] === "string" ? contextWithoutToken[SIGNED_CHANNEL_ID_CONTEXT_KEY].trim() : "";
-		if (signedChannelId && signedChannelId !== payload.channel_id) {
-			log?.(`mattermost interaction: signed channel mismatch payload=${payload.channel_id} signed=${signedChannelId}`);
-			res.statusCode = 403;
-			res.setHeader("Content-Type", "application/json");
-			res.end(JSON.stringify({ error: "Channel mismatch" }));
-			return;
-		}
-		const userName = payload.user_name ?? payload.user_id;
-		let originalMessage;
-		let originalPost;
-		let clickedButtonName = null;
-		try {
-			originalPost = await client.request(`/posts/${payload.post_id}`);
-			const postChannelId = originalPost.channel_id?.trim();
-			if (!postChannelId || postChannelId !== payload.channel_id) {
-				log?.(`mattermost interaction: post channel mismatch payload=${payload.channel_id} post=${postChannelId ?? "<missing>"}`);
-				res.statusCode = 403;
-				res.setHeader("Content-Type", "application/json");
-				res.end(JSON.stringify({ error: "Post/channel mismatch" }));
-				return;
-			}
-			originalMessage = originalPost.message ?? "";
-			const postAttachments = Array.isArray(originalPost?.props?.attachments) ? originalPost.props.attachments : [];
-			for (const att of postAttachments) {
-				const match = att.actions?.find((a) => a.id === actionId);
-				if (match?.name) {
-					clickedButtonName = match.name;
-					break;
-				}
-			}
-			if (clickedButtonName === null) {
-				log?.(`mattermost interaction: action ${actionId} not found in post ${payload.post_id}`);
-				res.statusCode = 403;
-				res.setHeader("Content-Type", "application/json");
-				res.end(JSON.stringify({ error: "Unknown action" }));
-				return;
-			}
-		} catch (err) {
-			log?.(`mattermost interaction: failed to validate post ${payload.post_id}: ${String(err)}`);
-			res.statusCode = 500;
-			res.setHeader("Content-Type", "application/json");
-			res.end(JSON.stringify({ error: "Failed to validate interaction" }));
-			return;
-		}
-		if (!originalPost) {
-			log?.(`mattermost interaction: missing fetched post ${payload.post_id}`);
-			res.statusCode = 500;
-			res.setHeader("Content-Type", "application/json");
-			res.end(JSON.stringify({ error: "Failed to load interaction post" }));
-			return;
-		}
-		log?.(`mattermost interaction: action=${actionId} user=${payload.user_name ?? payload.user_id} post=${payload.post_id} channel=${payload.channel_id}`);
-		if (params.authorizeButtonClick) try {
-			const authorization = await params.authorizeButtonClick({
-				payload,
-				post: originalPost
-			});
-			if (!authorization.ok) {
-				res.statusCode = authorization.statusCode ?? 200;
-				res.setHeader("Content-Type", "application/json");
-				res.end(JSON.stringify(authorization.response ?? { ephemeral_text: "You are not allowed to use this action here." }));
-				return;
-			}
-		} catch (err) {
-			log?.(`mattermost interaction: authorization failed: ${String(err)}`);
-			res.statusCode = 500;
-			res.setHeader("Content-Type", "application/json");
-			res.end(JSON.stringify({ error: "Interaction authorization failed" }));
-			return;
-		}
-		if (params.handleInteraction) try {
-			const response = await params.handleInteraction({
-				payload,
-				userName,
-				actionId,
-				actionName: clickedButtonName,
-				originalMessage,
-				context: contextWithoutToken,
-				post: originalPost
-			});
-			if (response !== null) {
-				res.statusCode = 200;
-				res.setHeader("Content-Type", "application/json");
-				res.end(JSON.stringify(response));
-				return;
-			}
-		} catch (err) {
-			log?.(`mattermost interaction: custom handler failed: ${String(err)}`);
-			res.statusCode = 500;
-			res.setHeader("Content-Type", "application/json");
-			res.end(JSON.stringify({ error: "Interaction handler failed" }));
-			return;
-		}
-		try {
-			const eventLabel = `Mattermost button click: action="${actionId}" by ${payload.user_name ?? payload.user_id} in channel ${payload.channel_id}`;
-			const sessionKey = params.resolveSessionKey ? await params.resolveSessionKey({
-				channelId: payload.channel_id,
-				userId: payload.user_id,
-				post: originalPost
-			}) : `agent:main:mattermost:${accountId}:${payload.channel_id}`;
-			core.system.enqueueSystemEvent(eventLabel, {
-				sessionKey,
-				contextKey: `mattermost:interaction:${payload.post_id}:${actionId}`
-			});
-		} catch (err) {
-			log?.(`mattermost interaction: system event dispatch failed: ${String(err)}`);
-		}
-		try {
-			await updateMattermostPost(client, payload.post_id, {
-				message: originalMessage,
-				props: { attachments: [{ text: `✓ **${clickedButtonName}** selected by @${userName}` }] }
-			});
-		} catch (err) {
-			log?.(`mattermost interaction: failed to update post ${payload.post_id}: ${String(err)}`);
-		}
-		res.statusCode = 200;
-		res.setHeader("Content-Type", "application/json");
-		res.end("{}");
-		if (params.dispatchButtonClick) try {
-			await params.dispatchButtonClick({
-				channelId: payload.channel_id,
-				userId: payload.user_id,
-				userName,
-				actionId,
-				actionName: clickedButtonName,
-				postId: payload.post_id,
-				post: originalPost
-			});
-		} catch (err) {
-			log?.(`mattermost interaction: dispatchButtonClick failed: ${String(err)}`);
-		}
-	};
-}
-//#endregion
 //#region extensions/mattermost/src/mattermost/target-resolution.ts
 const MATTERMOST_OPAQUE_TARGET_CACHE_MAX_ENTRIES = 1024;
 const mattermostOpaqueTargetCache = /* @__PURE__ */ new Map();
@@ -1154,6 +788,7 @@ async function resolveMattermostOpaqueTarget(params) {
 		cfg: params.cfg,
 		accountId: params.accountId
 	}) : null;
+	if (account && !account.enabled) throw new Error(`Mattermost account "${account.accountId}" is disabled`);
 	const token = normalizeOptionalString(params.token) ?? normalizeOptionalString(account?.botToken);
 	const baseUrl = normalizeMattermostBaseUrl(params.baseUrl ?? account?.baseUrl);
 	if (!token || !baseUrl) return null;
@@ -2289,4 +1924,4 @@ function registerSlashCommandRoute(api) {
 	});
 }
 //#endregion
-export { registerSlashCommands as C, isSlashCommandsEnabled as S, resolveSlashCommandConfig as T, renderMattermostModelsPickerView as _, sendMessageMattermost as a, DEFAULT_COMMAND_SPECS as b, computeInteractionCallbackUrl as c, setInteractionCallbackUrl as d, setInteractionSecret as f, parseMattermostModelPickerContext as g, buildMattermostAllowedModelRefs as h, registerSlashCommandRoute as i, createMattermostInteractionHandler as l, deliverMattermostReplyPayload as m, deactivateSlashCommands as n, resolveMattermostOpaqueTarget as o, createMattermostReplyDeliveryBarrier as p, getSlashCommandState as r, buildButtonProps as s, activateSlashCommands as t, resolveInteractionCallbackPath as u, renderMattermostProviderPickerView as v, resolveCallbackUrl as w, cleanupSlashCommands as x, resolveMattermostModelPickerCurrentModel as y };
+export { registerSlashCommands as _, sendMessageMattermost as a, deliverMattermostReplyPayload as c, renderMattermostModelsPickerView as d, renderMattermostProviderPickerView as f, isSlashCommandsEnabled as g, cleanupSlashCommands as h, registerSlashCommandRoute as i, buildMattermostAllowedModelRefs as l, DEFAULT_COMMAND_SPECS as m, deactivateSlashCommands as n, resolveMattermostOpaqueTarget as o, resolveMattermostModelPickerCurrentModel as p, getSlashCommandState as r, createMattermostReplyDeliveryBarrier as s, activateSlashCommands as t, parseMattermostModelPickerContext as u, resolveCallbackUrl as v, resolveSlashCommandConfig as y };

package/npm-shrinkwrap.json

@@ -1,18 +1,18 @@
 {
   "name": "@openclaw/mattermost",
-  "version": "2026.7.2-beta.1",
+  "version": "2026.7.2-beta.2",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@openclaw/mattermost",
-      "version": "2026.7.2-beta.1",
+      "version": "2026.7.2-beta.2",
       "dependencies": {
         "ws": "8.21.0",
         "zod": "4.4.3"
       },
       "peerDependencies": {
-        "openclaw": ">=2026.7.2-beta.1"
+        "openclaw": ">=2026.7.2-beta.2"
       },
       "peerDependenciesMeta": {
         "openclaw": {

package/openclaw.plugin.json

@@ -229,6 +229,13 @@
                 "properties": {
                   "toolProgress": {
                     "type": "boolean"
+                  },
+                  "commandText": {
+                    "type": "string",
+                    "enum": [
+                      "raw",
+                      "status"
+                    ]
                   }
                 },
                 "additionalProperties": false
@@ -265,6 +272,13 @@
                   },
                   "toolProgress": {
                     "type": "boolean"
+                  },
+                  "commandText": {
+                    "type": "string",
+                    "enum": [
+                      "raw",
+                      "status"
+                    ]
                   }
                 },
                 "additionalProperties": false
@@ -668,6 +682,13 @@
                       "properties": {
                         "toolProgress": {
                           "type": "boolean"
+                        },
+                        "commandText": {
+                          "type": "string",
+                          "enum": [
+                            "raw",
+                            "status"
+                          ]
                         }
                       },
                       "additionalProperties": false
@@ -704,6 +725,13 @@
                         },
                         "toolProgress": {
                           "type": "boolean"
+                        },
+                        "commandText": {
+                          "type": "string",
+                          "enum": [
+                            "raw",
+                            "status"
+                          ]
                         }
                       },
                       "additionalProperties": false

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@openclaw/mattermost",
-  "version": "2026.7.2-beta.1",
+  "version": "2026.7.2-beta.2",
   "description": "OpenClaw Mattermost channel plugin",
   "repository": {
     "type": "git",
@@ -12,7 +12,7 @@
     "zod": "4.4.3"
   },
   "peerDependencies": {
-    "openclaw": ">=2026.7.2-beta.1"
+    "openclaw": ">=2026.7.2-beta.2"
   },
   "peerDependenciesMeta": {
     "openclaw": {
@@ -41,10 +41,10 @@
       "allowInvalidConfigRecovery": true
     },
     "compat": {
-      "pluginApi": ">=2026.7.2-beta.1"
+      "pluginApi": ">=2026.7.2-beta.2"
     },
     "build": {
-      "openclawVersion": "2026.7.2-beta.1",
+      "openclawVersion": "2026.7.2-beta.2",
       "bundledDist": false
     },
     "release": {

package/dist/{monitor-auth-BiDuyvOc.js → monitor-auth-dEHa1_On.js}

@@ -1,6 +1,5 @@
-import { parseAccessGroupAllowFromEntry } from "openclaw/plugin-sdk/access-groups";
-import { resolveStableChannelMessageIngress } from "openclaw/plugin-sdk/channel-ingress-runtime";
 import { normalizeLowercaseStringOrEmpty, uniqueStrings } from "openclaw/plugin-sdk/string-coerce-runtime";
+import { parseTcpPort } from "openclaw/plugin-sdk/number-runtime";
 import { buildAgentMediaPayload } from "openclaw/plugin-sdk/agent-media-payload";
 import { resolveAllowlistMatchSimple } from "openclaw/plugin-sdk/allow-from";
 import { logInboundDrop } from "openclaw/plugin-sdk/channel-inbound";
@@ -17,7 +16,8 @@ import { DEFAULT_GROUP_HISTORY_LIMIT, createChannelHistoryWindow } from "opencla
 import { registerPluginHttpRoute } from "openclaw/plugin-sdk/webhook-targets";
 import { isRequestBodyLimitError, readRequestBodyWithLimit } from "openclaw/plugin-sdk/webhook-ingress";
 import { isTrustedProxyAddress, resolveClientIp } from "openclaw/plugin-sdk/core";
-import { parseTcpPort } from "openclaw/plugin-sdk/number-runtime";
+import { parseAccessGroupAllowFromEntry } from "openclaw/plugin-sdk/access-groups";
+import { resolveStableChannelMessageIngress } from "openclaw/plugin-sdk/channel-ingress-runtime";
 //#region extensions/mattermost/src/mattermost/monitor-auth.ts
 const mattermostIngressIdentity = {
 	key: "sender-id",