feat(channels): add Matrix as a first-class chat channel (with E2EE)#293

Closed

anconina wants to merge 220 commits into

mainfrom

feature/matrix-channel

Commits on Jul 5, 2026

chore(deps): add exact-pinned matrix-js-sdk
comis-agent
committed
test(core): add failing test for matrix channel config schema
comis-agent
committed
feat(core): register matrix channel config schema
comis-agent
committed
test(core): add failing test for matrix secrets provider pattern
comis-agent
committed
feat(core): name matrix provider for stranded MATRIX_ACCESS_TOKEN
comis-agent
committed
test(channels): add failing test for Matrix error taxonomy
comis-agent
committed
feat(channels): implement Matrix error taxonomy classifier
comis-agent
committed
test(channels): add failing test for the Matrix invite auto-join gate
comis-agent
committed
feat(channels): implement the Matrix invite auto-join gate
comis-agent
committed
test(channels): add failing test for the initial-sync watermark guard
comis-agent
committed
feat(channels): implement the initial-sync watermark guard
comis-agent
committed
test(channels): homeserver SSRF branch + credential precondition for matrix
comis-agent
committed
feat(channels): matrix homeserver SSRF branch + credential precondition
comis-agent
committed
test(channels): matrix outbound markdown render + inbound HTML sanitize
comis-agent
committed
feat(channels): matrix markdown renderer + inbound HTML sanitizer
comis-agent
committed
test(channels): matrix event to NormalizedMessage mapping
comis-agent
committed
feat(channels): map matrix events to NormalizedMessage
comis-agent
committed
test(channels): durable matrix state store round-trip + owner-only perms
comis-agent
committed
feat(channels): durable matrix state store with 0700/0600 + safePath
comis-agent
committed
test(channels): matrix auth token/password login + persistence + secret-safe errors
comis-agent
committed
feat(channels): matrix token/password auth with whoami + persisted identity
comis-agent
committed
test(channels): add failing wiring tests for Matrix /sync lifecycle
comis-agent
committed
feat(channels): wire Matrix /sync lifecycle, watermark guard, and invite gate
comis-agent
committed
test(channels): add failing tests for Matrix token-expiry recovery
comis-agent
committed
feat(channels): recover from Matrix mid-run token expiry and stale sync token
comis-agent
committed
test(channels): cover Matrix token-recovery failure branches
comis-agent
committed
test(channels): add failing tests for the Matrix adapter + outbound builder
comis-agent
committed
feat(channels): Matrix adapter (ChannelPort) + pure outbound builder
comis-agent
committed
test(channels): add failing test for the Matrix channel plugin
comis-agent
committed
feat(channels): Matrix channel plugin with honest capability literals
comis-agent
committed
test(channels): cover the Matrix adapter failure branches
comis-agent
committed
test(channels): assert the Matrix barrel surface is exported
comis-agent
committed
feat(channels): export the Matrix channel surface from the barrel
comis-agent
committed
test(daemon): assert the Matrix wiring registers both maps as a polling channel
comis-agent
committed
feat(daemon): wire the Matrix channel into the adapter bootstrap
comis-agent
committed
feat(live): matrix ChannelCaps union member + emulator caps and payload fixtures
comis-agent
committed
test(channels): matrix ChannelPort test double
comis-agent
committed
feat(live): matrix loopback homeserver emulator
comis-agent
committed
fix(channels): drop the bot's own messages from the Matrix /sync timeline
comis-agent
committed
fix(channels): resolve Matrix DM chatType from m.direct account data
comis-agent
committed
test(live): matrix real-adapter round-trip scenario against the loopback emulator
comis-agent
committed
test(channels): cover the m.direct-present-but-room-absent DM classifier branch
comis-agent
committed
test(channels): reproduce cross-room drop + mid-run-join backlog replay
comis-agent
committed
fix(channels): track the Matrix sync watermark per room
comis-agent
committed
test(channels): assert stale-since resets the live client in-process
comis-agent
committed
fix(channels): reset the live client on a rejected sync position
comis-agent
committed
test(channels): assert atomic state write + corrupt-load recovery
comis-agent
committed
fix(channels): atomic state write + corrupt-load recovery
comis-agent
committed
test(channels): matrix auth must reuse a persisted token+deviceId across restarts
comis-agent
committed
fix(channels): matrix auth reads back the persisted token+deviceId on restart
comis-agent
committed
test(channels): matrix adapter must wire token-expiry recovery + health seams
comis-agent
committed
fix(channels): wire matrix token-expiry recovery + health seams end-to-end
comis-agent
committed
test(channels): pin the matrix reauthenticate seam contract at the unit layer
comis-agent
committed
chore(deps): pin matrix crypto-wasm + fake-indexeddb
comis-agent
committed
test(channels): prove crypto-store snapshot round-trips real crypto-wasm
comis-agent
committed
test(channels): add failing crypto-store snapshot/restore + OOM-prune specs
comis-agent
committed
feat(channels): crypto-store snapshot serializer, restore, and OOM tx-prune
comis-agent
committed
test(channels): add failing initMatrixCrypto lazy-boundary gate + restart-decrypt proof
comis-agent
committed
feat(channels): initMatrixCrypto lazy-import boundary + debounced snapshot handle
comis-agent
committed
test(channels): add failing specs for Matrix E2EE crypto bootstrap order
comis-agent
committed
feat(channels): bootstrap Matrix E2EE crypto store before startClient
comis-agent
committed
test(channels): add failing fail-closed decrypt specs for onTimeline
comis-agent
committed
feat(channels): fail-closed decrypt branch in Matrix onTimeline
comis-agent
committed
test(channels): add failing decrypt-degrade table oracle
comis-agent
committed
feat(channels): add pure decrypt-degrade cause decider
comis-agent
committed
test(channels): add failing decrypt-degrade note wiring specs
comis-agent
committed
feat(channels): wire once-per-room decrypt-degrade note + obs
comis-agent
committed
test(channels): add failing sync-filter-includes-encrypted spec
comis-agent
committed
fix(channels): include m.room.encrypted in the e2ee /sync filter
comis-agent
committed
test(channels): expect matrix cross-signing bootstrap from the recovery key and a readable verification status
comis-agent
committed
feat(channels): bootstrap matrix cross-signing from the recovery key with a readable verification status
comis-agent
committed
test(channels): expect matrix token auth to return an error when whoami omits the user id
comis-agent
committed
fix(channels): guard the matrix whoami user id read so a malformed response returns an error instead of throwing
comis-agent
committed
style(channels): state the secret-handling constraint in a comment without an identifier token
comis-agent
committed
test(observability): add failing specs for a content-free decrypt-failure channel event
comis-agent
committed
feat(core): add a content-free decrypt-failure channel event
comis-agent
committed
feat(observability): bridge the decrypt-failure event to the trajectory
comis-agent
committed
test(daemon): add a failing spec for Matrix crypto-config threading + health wiring
comis-agent
committed
feat(daemon): thread Matrix crypto config + bridge its health signals to the bus
comis-agent
committed
fix(channels): route the matrix crypto-store through the sanctioned time helpers
comis-agent
committed
test(channels): register the matrix E2EE crypto-store exports as documented public API
comis-agent
committed
test(channels): drive a still-encrypted event through the matrix sync gate
comis-agent
committed
fix(channels): decrypt matrix timeline events before the delivery gate
comis-agent
committed
test(channels): the decrypt-degrade hint must not name the e2ee switch when it is already on
comis-agent
committed
fix(channels): point a crypto-init failure at the backend, not the e2ee switch
comis-agent
committed
test(channels): the sync controller must surface the device verification posture
comis-agent
committed
feat(channels): expose the matrix device verification posture on the channel status
comis-agent
committed
test(channels): the health monitor must forward an adapter's verification posture
comis-agent
committed
feat(channels): forward the device verification posture to the channel health surface
comis-agent
committed
test(channels): the matrix sync controller must await the final crypto flush on stop
comis-agent
committed
fix(channels): await the final matrix crypto snapshot flush on stop
comis-agent
committed
test(channels): the crypto snapshot must read all stores in one transaction
comis-agent
committed
fix(channels): snapshot all crypto stores in one consistent transaction
comis-agent
committed
test(channels): overlapping crypto snapshots must not corrupt the store
comis-agent
committed
fix(channels): give each crypto snapshot write a unique temp file
comis-agent
committed
test(channels): the matrix crypto store must be encrypted at rest with a persisted key
comis-agent
committed
feat(channels): encrypt the matrix crypto store at rest with a persisted key
comis-agent
committed
chore(channels): state constraints inline without planning-id references
comis-agent
committed
chore(web): regenerate contract artifacts for the channel health status field
comis-agent
committed
chore(channels): drop a planning reference from a crypto-store test comment
comis-agent
committed

Commits on Jul 6, 2026

test(channels): failing spec for the Matrix inbound reaction mapper
comis-agent
committed
feat(channels): pure Matrix inbound reaction mapper
comis-agent
committed
test(channels): failing spec for inbound Matrix reaction routing
comis-agent
committed
feat(channels): route inbound Matrix reactions to a speaker-gated seam
comis-agent
committed
test(channels): drive a real inbound Matrix reaction through the emulator
comis-agent
committed
test(channels): matrix outbound reaction send and redact
comis-agent
committed
feat(channels): matrix outbound reaction send and redact
comis-agent
committed
test(channels): matrix history fetch pagination
comis-agent
committed
feat(channels): matrix history fetch pagination
comis-agent
committed
feat(channels): declare matrix reactions and history capabilities
comis-agent
committed
test(channels): matrix thread relation and byte-bounded chunker
comis-agent
committed
feat(channels): matrix thread relation and byte-bounded chunker
comis-agent
committed
test(channels): matrix threaded chunked send and inbound thread mapping
comis-agent
committed
feat(channels): matrix threaded chunked send and inbound thread mapping
comis-agent
committed
feat(channels): declare the matrix threads capability
comis-agent
committed
test(channels): add failing tests for matrix edits and deletes
comis-agent
committed
feat(channels): matrix edits and deletes
comis-agent
committed
test(channels): add failing tests for honest inbound edits and redactions
comis-agent
committed
feat(channels): honest inbound matrix edits and redactions
comis-agent
committed
test(channels): matrix emulator proves honest inbound edit and redaction
comis-agent
committed
docs(channels): note matrix edits/deletes ship but stay undeclared
comis-agent
committed
test(channels): cover matrix mentions and the inbound bot-mention gate key
comis-agent
committed
feat(channels): matrix mentions with pill rendering and the inbound gate key
comis-agent
committed
test(channels): cover matrix platform actions decode and adapter routing
comis-agent
committed
feat(channels): matrix platform actions for typing, join, leave, topic, read receipt
comis-agent
committed
test(orchestrator): expect a matrix typing refresh default below the typing timeout
comis-agent
committed
feat(orchestrator): matrix typing refresh default
comis-agent
committed
feat(channels): declare matrix typing capability
comis-agent
committed
test(channels): add failing test for matrix edit-in-place activity renderer
comis-agent
committed
feat(channels): matrix edit-in-place activity renderer
comis-agent
committed
feat(channels): export the matrix activity renderer from the barrel
comis-agent
committed
feat(daemon): route matrix to the edit-in-place renderer
comis-agent
committed
refactor(channels): extract matrix adapter helpers to keep the controller within the size cap
comis-agent
committed
feat(channels): declare matrix edit and delete capabilities
comis-agent
committed
refactor(channels): unify Matrix inbound fan-out into one helper
comis-agent
committed
test(channels): a reaction or redaction must not gate a later message
comis-agent
committed
fix(channels): keep reactions and redactions off the message watermark
comis-agent
committed
test(channels): a failed verification read must not escape start()/getStatus()
comis-agent
committed
fix(channels): guard the best-effort verification refresh
comis-agent
committed
test(channels): the first chunk must fit the budget with many mentions
comis-agent
committed
fix(channels): reserve mention bytes for the first chunk
comis-agent
committed
test(channels): history fetch must not silently ignore a cursor
comis-agent
committed
fix(channels): reject an unsupported history-fetch cursor honestly
comis-agent
committed
test(channels): a plain-text bot URL must not count as a mention
comis-agent
committed
fix(channels): require a mention link inside an anchor href
comis-agent
committed
test(channels): collision-proof reaction key + uniform outbound 429 retry
comis-agent
committed
fix(channels): collision-proof reaction key + route actions through 429 retry
comis-agent
committed
test(channels): a mid-send chunk failure must surface partial delivery
comis-agent
committed
fix(channels): surface partial delivery on a mid-send chunk failure
comis-agent
committed
fix(channels): match the mention href by attribute prefix, not a regexp
comis-agent
committed
test(channels): prove the encrypted-attachment codec round-trips and fails closed
comis-agent
committed
feat(channels): add the encrypted-attachment codec and encrypted-file cache
comis-agent
committed
test(channels): cover inbound media mapping and the encrypted-file cache callback
comis-agent
committed
feat(channels): surface inbound media attachments and cache encrypted-file keys off-band
comis-agent
committed
test(channels): add failing tests for the authenticated Matrix media resolver
comis-agent
committed
feat(channels): resolve authenticated Matrix media through the guarded fetcher
comis-agent
committed
test(channels): specify the matrix attachment content builder
comis-agent
committed
feat(channels): add the matrix attachment content builder and send helper
comis-agent
committed
test(channels): specify the matrix adapter media surface
comis-agent
committed
refactor(channels): extract the shared pre-start guard and classified failure warn
comis-agent
committed
feat(channels): expose the matrix media surface and outbound attachment send
comis-agent
committed
test(channels): matrix plugin exposes an mxc media resolver factory
comis-agent
committed
feat(channels): expose the matrix media resolver factory on the plugin handle
comis-agent
committed
test(daemon): the matrix media resolver registers from the plugin handle
comis-agent
committed
feat(daemon): register the matrix media resolver in the channel media pipeline
comis-agent
committed
test(channels): expect the matrix attachments capability advertised true
comis-agent
committed
feat(channels): advertise matrix attachments now that inbound resolves and outbound uploads
comis-agent
committed
test(skills): cover the authenticated fetch path honoring a trusted local origin
comis-agent
committed
fix(skills): honor trusted local origins on the authenticated fetch path
comis-agent
committed
test(channels): prove the Matrix media path end-to-end against the loopback emulator
comis-agent
committed
test(skills): prove the image sanitizer rejects a decompression bomb beyond the decode pixel limit
comis-agent
committed
docs(channels): note the client-transport DNS-pinning residual on the media resolver
comis-agent
committed
chore(channels): audit-stamp the media deps interfaces for the optional-field invariant
comis-agent
committed
test(channels): cover encrypted-attachment upload metadata scrub
comis-agent
committed
fix(channels): scrub encrypted-attachment upload metadata
comis-agent
committed
test(channels): cover fail-closed resolve for an encrypted attachment key miss
comis-agent
committed
fix(channels): fail closed when an encrypted attachment key is unavailable
comis-agent
committed
test(channels): guard media-encryption-info parse against empty codec output
comis-agent
committed
fix(channels): guard media-encryption-info parse
comis-agent
committed
test(channels): redact resolved internal IPs from resolver errors
comis-agent
committed
fix(channels): redact resolved IPs from resolver errors and parse homeserver host once
comis-agent
committed
test(channels): cover the Matrix send-reconcile history-scan oracle
comis-agent
committed
feat(channels): reconcile a crash-interrupted Matrix send against /messages history
comis-agent
committed
test(cli): add failing matrix doctor health-check probes
comis-agent
committed
feat(cli): add a Matrix health check to comis doctor
comis-agent
committed
test(cli): add failing Matrix wizard enumeration + credential-format tests
comis-agent
committed
feat(cli): add Matrix to the init wizard channel enumeration and credential format checks
comis-agent
committed
test(cli): add failing tests for matrix init prompts, config write, and flags
comis-agent
committed
feat(cli): configure matrix channels in init interactively and via flags
comis-agent
committed
test(live): add e2ee-enabled Matrix startup + honest decrypt-degrade scenario
comis-agent
committed
test(live): serve the e2ee crypto-startup key endpoints from the loopback Matrix emulator
comis-agent
committed
test(live): add the Matrix homeserver-emulator PULL launcher for the live-fire rig
comis-agent
committed
docs(channels): add the Matrix channel guide
comis-agent
committed
docs(channels): list Matrix in the channels overview and nav
comis-agent
committed
docs(reference): document Matrix config keys, env token, media, and state dir
comis-agent
committed
docs(channels): count supported chat platforms as eleven
comis-agent
committed
test(architecture): gate channel count across facts, homepage tiles, and docs nav
comis-agent
committed
feat(web): show eleven channels with Matrix and Microsoft Teams tiles
comis-agent
committed
chore(cli): stamp the per-channel credential accumulator optional-field count
comis-agent
committed
chore(channels): annotate the matrix media codec throw boundary
comis-agent
committed
test(channels): cover encrypted-room send reconcile
comis-agent
committed
fix(channels): return unresolved for an encrypted-room send reconcile
comis-agent
committed
test(channels): cover mention-rewritten and chunked send reconcile
comis-agent
committed
fix(channels): return unresolved when a send reconcile cannot reconstruct the sent body
comis-agent
committed
test(cli): cover unresolved password and recovery-key references in matrix doctor creds check
comis-agent
committed
fix(cli): flag unresolved matrix password and recovery-key references in the doctor creds check
comis-agent
committed
fix(cli): let --matrix-e2ee express false for headless installs
comis-agent
committed
fix(web): make the Matrix homepage tile icon visible on the dark theme
comis-agent
committed
test(channels): cover the reconcile encryption guard's plaintext and probe-failure branches
comis-agent
committed

Commits on Jul 7, 2026

Commits on Jul 13, 2026

Merge origin/main (1.0.52) into feature/matrix-channel
comis-agent
committed

Commits on Jul 14, 2026

Merge remote-tracking branch 'origin/main' into feature/matrix-channel
comis-agent
committed