@openclaw/signal 2026.10.2 → 2026.10.5-beta.2

package/dist/.setup/{api-BzvUhsz9.mjs → api-CfFaBHKY.mjs}

@@ -1,12 +1,12 @@
 import { i as resolveSignalAccount, n as listSignalAccountIds, r as resolveDefaultSignalAccountId, t as listEnabledSignalAccounts } from "./accounts-DMtj2E-4.mjs";
 import { n as normalizeSignalMessagingTarget, t as looksLikeSignalTargetId } from "./normalize-D7kSomXt.mjs";
 import { a as normalizeSignalAllowRecipient, c as resolveSignalSender, i as isSignalSenderAllowed, l as looksLikeUuid, n as formatSignalSenderDisplay, o as resolveSignalPeerId, r as formatSignalSenderId, s as resolveSignalRecipient, t as formatSignalPairingIdLine } from "./identity-B3JyPqGO.mjs";
-import { _ as resolveSignalReactionLevel, a as normalizeSignalAccountInput, b as markdownToSignalTextChunks, d as probeSignalTransport, f as writeSignalAccountTransport, g as signalMessageActions, h as resolveSignalOutboundTarget, t as signalPlugin, u as prepareSignalManagedNativeTransport, y as markdownToSignalText } from "./channel-E_23H6I6.mjs";
-import { n as sendReactionSignal, t as removeReactionSignal } from "./reaction-runtime-api-xqwxFZ2S.mjs";
-import { t as detectSignalTransport } from "./transport-detection-CQSEftdN.mjs";
-import { t as signalSetupPlugin } from "./api-BYvpXSbI.mjs";
-import { r as installSignalCli } from "./install-signal-cli-ChvjzM6X.mjs";
-import { t as monitorSignalProvider } from "./monitor-CG20ucVU.mjs";
-import { n as sendReadReceiptSignal, r as sendTypingSignal, t as sendMessageSignal } from "./send-CAlJlhsT.mjs";
-import { t as probeSignal } from "./probe-2LTiStRi.mjs";
+import { _ as resolveSignalReactionLevel, a as normalizeSignalAccountInput, b as markdownToSignalTextChunks, d as probeSignalTransport, f as writeSignalAccountTransport, g as signalMessageActions, h as resolveSignalOutboundTarget, t as signalPlugin, u as prepareSignalManagedNativeTransport, y as markdownToSignalText } from "./channel-v_OVXflu.mjs";
+import { n as sendReactionSignal, t as removeReactionSignal } from "./reaction-runtime-api-BoF_xKQe.mjs";
+import { t as detectSignalTransport } from "./transport-detection-C7tIMlYW.mjs";
+import { t as signalSetupPlugin } from "./api-oTYg1sqh.mjs";
+import { r as installSignalCli } from "./install-signal-cli-hYVLYGXe.mjs";
+import { t as monitorSignalProvider } from "./monitor-B2dIc7fW.mjs";
+import { n as sendReadReceiptSignal, r as sendTypingSignal, t as sendMessageSignal } from "./send-Da8lyyyC.mjs";
+import { t as probeSignal } from "./probe-D6n3Nkud.mjs";
 export { detectSignalTransport, formatSignalPairingIdLine, formatSignalSenderDisplay, formatSignalSenderId, installSignalCli, isSignalSenderAllowed, listEnabledSignalAccounts, listSignalAccountIds, looksLikeSignalTargetId, looksLikeUuid, markdownToSignalText, markdownToSignalTextChunks, monitorSignalProvider, normalizeSignalAccountInput, normalizeSignalAllowRecipient, normalizeSignalMessagingTarget, prepareSignalManagedNativeTransport, probeSignal, probeSignalTransport, removeReactionSignal, resolveDefaultSignalAccountId, resolveSignalAccount, resolveSignalOutboundTarget, resolveSignalPeerId, resolveSignalReactionLevel, resolveSignalRecipient, resolveSignalSender, sendMessageSignal, sendReactionSignal, sendReadReceiptSignal, sendTypingSignal, signalMessageActions, signalPlugin, signalSetupPlugin, writeSignalAccountTransport };

package/dist/.setup/{api-BYvpXSbI.mjs → api-oTYg1sqh.mjs}

@@ -1,16 +1,16 @@
 import "./accounts-DMtj2E-4.mjs";
 import "./normalize-D7kSomXt.mjs";
 import "./identity-B3JyPqGO.mjs";
-import { l as signalSetupContract, n as createSignalPluginBase, r as signalSetupWizard } from "./channel-E_23H6I6.mjs";
-import "./reaction-runtime-api-xqwxFZ2S.mjs";
-import "./install-signal-cli-ChvjzM6X.mjs";
-import "./monitor-CG20ucVU.mjs";
-import "./send-CAlJlhsT.mjs";
-import "./probe-2LTiStRi.mjs";
+import { l as signalSetupContract, n as createSignalPluginBase, r as signalSetupWizard } from "./channel-v_OVXflu.mjs";
+import "./reaction-runtime-api-BoF_xKQe.mjs";
+import "./install-signal-cli-hYVLYGXe.mjs";
+import "./monitor-B2dIc7fW.mjs";
+import "./send-Da8lyyyC.mjs";
+import "./probe-D6n3Nkud.mjs";
 //#region extensions/signal/src/channel.setup.ts
-const signalSetupPlugin = { ...createSignalPluginBase({
+const signalSetupPlugin = createSignalPluginBase({
 	setupWizard: signalSetupWizard,
 	setupContract: signalSetupContract
-}) };
+});
 //#endregion
 export { signalSetupPlugin as t };

package/dist/.setup/{approval-handler.runtime-DftlFeEB.mjs → approval-handler.runtime-DzZCg6An.mjs}

@@ -1,8 +1,8 @@
 import { r as resolveDefaultSignalAccountId } from "./accounts-DMtj2E-4.mjs";
 import { n as normalizeSignalMessagingTarget } from "./normalize-D7kSomXt.mjs";
 import { a as resolveSignalTarget } from "./approval-auth-BITw96pZ.mjs";
-import { a as registerSignalApprovalReactionTarget, c as resolveSignalApprovalTargetAuthorKeys, l as unregisterSignalApprovalReactionTarget, r as hasSignalApprovalReactionApprovers, s as resolveSignalApprovalConversationKey } from "./approval-reactions-BHIX1jwY.mjs";
-import { r as sendTypingSignal, t as sendMessageSignal } from "./send-CAlJlhsT.mjs";
+import { a as registerSignalApprovalReactionTarget, c as resolveSignalApprovalTargetAuthorKeys, l as unregisterSignalApprovalReactionTarget, r as hasSignalApprovalReactionApprovers, s as resolveSignalApprovalConversationKey } from "./approval-reactions-POBtr9RL.mjs";
+import { r as sendTypingSignal, t as sendMessageSignal } from "./send-Da8lyyyC.mjs";
 import { DEFAULT_ACCOUNT_ID } from "openclaw/plugin-sdk/account-id";
 import { normalizeOptionalString } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { buildChannelApprovalNativeTargetKey } from "openclaw/plugin-sdk/approval-native-runtime";
@@ -148,7 +148,6 @@ const signalApprovalNativeRuntime = createChannelApprovalNativeRuntimeAdapter({
 					...normalizeOptionalString(request.request.agentId) ? { agentId: normalizeOptionalString(request.request.agentId) } : {},
 					...normalizeOptionalString(request.request.sessionKey) ? { sessionKey: normalizeOptionalString(request.request.sessionKey) } : {}
 				},
-				routeAllowed: true,
 				ttlMs: Math.max(1, view.expiresAtMs - Date.now())
 			}) ? true : null;
 		},

package/dist/.setup/{approval-reactions-BHIX1jwY.mjs → approval-reactions-POBtr9RL.mjs}

@@ -12,26 +12,6 @@ import { getExecApprovalReplyMetadata } from "openclaw/plugin-sdk/approval-reply
 import { createPluginStateErrorReporter } from "openclaw/plugin-sdk/plugin-state-runtime";
 import { matchesApprovalRequestFilters } from "openclaw/plugin-sdk/approval-client-runtime";
 //#region extensions/signal/src/approval-reaction-routes.ts
-function resolveApprovalForwardingConfig(params) {
-	return params.approvalKind === "plugin" ? params.cfg.approvals?.plugin : params.cfg.approvals?.exec;
-}
-function matchesSignalApprovalReactionFilters(params) {
-	return matchesApprovalRequestFilters({
-		request: {
-			agentId: params.route.agentId,
-			sessionKey: params.route.sessionKey
-		},
-		agentFilter: params.config.agentFilter,
-		sessionFilter: params.config.sessionFilter,
-		fallbackAgentIdFromSessionKey: true
-	});
-}
-function targetAccountMatches(params) {
-	const configuredAccountId = normalizeOptionalString(params.configuredAccountId);
-	if (!configuredAccountId) return true;
-	const routeAccountId = normalizeOptionalString(params.routeAccountId);
-	return Boolean(routeAccountId && normalizeAccountId(routeAccountId) === normalizeAccountId(configuredAccountId));
-}
 function resolveSignalApprovalRouteTarget(params) {
 	try {
 		return resolveSignalTarget({
@@ -43,39 +23,33 @@ function resolveSignalApprovalRouteTarget(params) {
 		return null;
 	}
 }
-function hasMatchingSignalApprovalReactionTarget(params) {
-	return (params.config.targets ?? []).some((target) => {
+function isSignalApprovalReactionRouteStillEnabled(params) {
+	const { approvalKind, route } = params.target;
+	const config = approvalKind === "plugin" ? params.cfg.approvals?.plugin : params.cfg.approvals?.exec;
+	if (!config?.enabled) return false;
+	const mode = config.mode ?? "session";
+	if (mode !== "both" && mode !== (route.deliveryMode === "target" ? "targets" : "session")) return false;
+	if (!matchesApprovalRequestFilters({
+		request: {
+			agentId: route.agentId,
+			sessionKey: route.sessionKey
+		},
+		agentFilter: config.agentFilter,
+		sessionFilter: config.sessionFilter,
+		fallbackAgentIdFromSessionKey: true
+	})) return false;
+	if (route.deliveryMode === "session") return true;
+	return (config.targets ?? []).some((target) => {
 		if (normalizeLowercaseStringOrEmpty(target.channel) !== "signal") return false;
 		const configuredTo = resolveSignalApprovalRouteTarget({
 			cfg: params.cfg,
-			accountId: target.accountId ?? params.route.accountId,
+			accountId: target.accountId ?? route.accountId,
 			to: target.to
 		});
-		if (!configuredTo || configuredTo !== params.route.to) return false;
-		return targetAccountMatches({
-			routeAccountId: params.route.accountId,
-			configuredAccountId: target.accountId
-		});
-	});
-}
-function isSignalApprovalReactionRouteStillEnabled(params) {
-	const config = resolveApprovalForwardingConfig({
-		cfg: params.cfg,
-		approvalKind: params.target.approvalKind
-	});
-	if (!config?.enabled) return false;
-	const mode = config.mode ?? "session";
-	if (params.target.route.deliveryMode === "target") return (mode === "targets" || mode === "both") && matchesSignalApprovalReactionFilters({
-		config,
-		route: params.target.route
-	}) && hasMatchingSignalApprovalReactionTarget({
-		cfg: params.cfg,
-		config,
-		route: params.target.route
-	});
-	return (mode === "session" || mode === "both") && matchesSignalApprovalReactionFilters({
-		config,
-		route: params.target.route
+		if (!configuredTo || configuredTo !== route.to) return false;
+		const configuredAccountId = normalizeOptionalString(target.accountId);
+		const routeAccountId = normalizeOptionalString(route.accountId);
+		return !configuredAccountId || Boolean(routeAccountId && normalizeAccountId(routeAccountId) === normalizeAccountId(configuredAccountId));
 	});
 }
 function buildTargetRoute(params) {
@@ -85,12 +59,15 @@ function buildTargetRoute(params) {
 		to: params.to
 	});
 	if (!to) return null;
+	const accountId = normalizeOptionalString(params.accountId);
+	const agentId = normalizeOptionalString(params.agentId);
+	const sessionKey = normalizeOptionalString(params.sessionKey);
 	const route = {
 		deliveryMode: "target",
 		to,
-		...normalizeOptionalString(params.accountId) ? { accountId: normalizeOptionalString(params.accountId) } : {},
-		...normalizeOptionalString(params.agentId) ? { agentId: normalizeOptionalString(params.agentId) } : {},
-		...normalizeOptionalString(params.sessionKey) ? { sessionKey: normalizeOptionalString(params.sessionKey) } : {}
+		...accountId ? { accountId } : {},
+		...agentId ? { agentId } : {},
+		...sessionKey ? { sessionKey } : {}
 	};
 	return isSignalApprovalReactionRouteStillEnabled({
 		cfg: params.cfg,
@@ -182,7 +159,7 @@ async function registerSignalApprovalReactionTarget(params) {
 	const approvalId = params.approvalId.trim();
 	const targetAuthorKeys = Array.from(new Set(params.targetAuthorKeys.map((entry) => normalizeSignalApprovalTargetAuthorKey(entry)).filter((entry) => Boolean(entry))));
 	const allowedDecisions = listApprovalReactionBindings({ allowedDecisions: params.allowedDecisions }).map((binding) => binding.decision);
-	if (!params.routeAllowed || params.approvalKind !== "exec" && params.approvalKind !== "plugin" && params.approvalKind !== "system-agent" || !key || !approvalId || allowedDecisions.length === 0) return null;
+	if (params.approvalKind !== "exec" && params.approvalKind !== "plugin" && params.approvalKind !== "system-agent" || !key || !approvalId || allowedDecisions.length === 0) return null;
 	if (targetAuthorKeys.length === 0) return null;
 	const agentId = normalizeOptionalString(params.route.agentId);
 	const sessionKey = normalizeOptionalString(params.route.sessionKey);
@@ -284,9 +261,7 @@ async function registerSignalApprovalReactionTargetForDeliveredPayload(params) {
 		approvalKind: metadata.approvalKind,
 		allowedDecisions: metadata.allowedDecisions,
 		targetAuthorKeys,
-		route,
-		routeAllowed: true,
-		ttlMs: params.ttlMs
+		route
 	}));
 	return (await Promise.all(registrations)).some(Boolean);
 }
@@ -352,8 +327,7 @@ async function maybeResolveSignalApprovalReaction(params) {
 			decision: target.decision,
 			channel: "signal",
 			accountId: params.accountId,
-			senderId: actorId,
-			gatewayUrl: params.gatewayUrl
+			senderId: actorId
 		},
 		approvers: getSignalApprovalApprovers({
 			cfg: params.cfg,

package/dist/.setup/{channel-E_23H6I6.mjs → channel-v_OVXflu.mjs}

@@ -5,9 +5,9 @@ import { a as resolveSignalAccountConfig, i as resolveSignalAccount, n as listSi
 import { n as normalizeSignalMessagingTarget, r as normalizeSignalReactionRecipient, t as looksLikeSignalTargetId } from "./normalize-D7kSomXt.mjs";
 import { a as resolveSignalTarget, n as signalApprovalAuth, r as listSignalAliasDirectoryEntries, t as getSignalApprovalApprovers } from "./approval-auth-BITw96pZ.mjs";
 import { c as resolveSignalSender, l as looksLikeUuid, o as resolveSignalPeerId, s as resolveSignalRecipient } from "./identity-B3JyPqGO.mjs";
-import { n as sendReactionSignal, t as removeReactionSignal } from "./reaction-runtime-api-xqwxFZ2S.mjs";
+import { n as sendReactionSignal, t as removeReactionSignal } from "./reaction-runtime-api-BoF_xKQe.mjs";
 import { t as getOptionalSignalRuntime } from "./runtime-8sxUF217.mjs";
-import { t as detectSignalTransport } from "./transport-detection-CQSEftdN.mjs";
+import { t as detectSignalTransport } from "./transport-detection-C7tIMlYW.mjs";
 import { t as SignalChannelConfigSchema } from "./config-schema-DvxZ18SD.mjs";
 import { describeAccountSnapshot, resolveChannelMediaMaxBytes } from "openclaw/plugin-sdk/account-helpers";
 import { DEFAULT_ACCOUNT_ID } from "openclaw/plugin-sdk/account-id";
@@ -101,7 +101,7 @@ const signalApproval = createApproverRestrictedNativeApprovalCapabilityFromForwa
 			approvalKind,
 			request
 		}),
-		load: async () => (await import("./approval-handler.runtime-DftlFeEB.mjs")).signalApprovalNativeRuntime
+		load: async () => (await import("./approval-handler.runtime-DzZCg6An.mjs")).signalApprovalNativeRuntime
 	})
 });
 const signalApprovalRouting = signalApproval.routing;
@@ -706,8 +706,8 @@ async function probeSignalTransport(params) {
 		overrides: managedTransportOptions(params.transport)
 	}) : params.transport;
 	const resolved = resolveSignalTransport(transport);
-	if (resolved.kind === "container") return (params.probeContainer ?? (await import("./transport-probes.runtime-DwXEHnXr.mjs")).containerCheck)(resolved.baseUrl, timeoutMs, params.account);
-	return (params.probeNative ?? (await import("./transport-probes.runtime-DwXEHnXr.mjs")).nativeCheck)(resolved.baseUrl, timeoutMs);
+	if (resolved.kind === "container") return (params.probeContainer ?? (await import("./transport-probes.runtime-CE-YN8v-.mjs")).containerCheck)(resolved.baseUrl, timeoutMs, params.account);
+	return (params.probeNative ?? (await import("./transport-probes.runtime-CE-YN8v-.mjs")).nativeCheck)(resolved.baseUrl, timeoutMs);
 }
 function writeSignalAccountTransport(params) {
 	const transport = normalizeTransport(params.transport);
@@ -864,8 +864,15 @@ function resolveSignalSetupAccount(params) {
 	const signal = params.cfg.channels?.signal;
 	return resolveSignalAccountEntry(signal?.accounts, accountId)?.account ?? signal?.account;
 }
-async function promptSignalAllowFrom(params) {
-	return promptParsedAllowFromForAccount({
+const signalDmPolicy = createChannelDmPolicy({
+	label: "Signal",
+	channel,
+	resolveAccount: (cfg, accountId) => resolveSignalAccount({
+		cfg,
+		accountId: accountId ?? resolveDefaultSignalAccountId(cfg)
+	}),
+	setupSurface: () => signalSetupAdapter,
+	promptAllowFrom: async (params) => promptParsedAllowFromForAccount({
 		cfg: params.cfg,
 		accountId: params.accountId,
 		defaultAccountId: resolveDefaultSignalAccountId(params.cfg),
@@ -893,17 +900,7 @@ async function promptSignalAllowFrom(params) {
 			allowFrom,
 			setupSurface: signalSetupAdapter
 		})
-	});
-}
-const signalDmPolicy = createChannelDmPolicy({
-	label: "Signal",
-	channel,
-	resolveAccount: (cfg, accountId) => resolveSignalAccount({
-		cfg,
-		accountId: accountId ?? resolveDefaultSignalAccountId(cfg)
-	}),
-	setupSurface: () => signalSetupAdapter,
-	promptAllowFrom: promptSignalAllowFrom
+	})
 });
 function resolveSignalCliPath(params) {
 	const transport = resolveSignalAccount({
@@ -1053,7 +1050,7 @@ function createSignalSetupWizardProxy(loadWizard) {
 const signalDoctor = {
 	normalizeCompatibilityConfig,
 	cleanStaleConfig: async ({ cfg }) => {
-		const { detectSignalTransport } = await import("./transport-detection-CQSEftdN.mjs").then((n) => n.n);
+		const { detectSignalTransport } = await import("./transport-detection-C7tIMlYW.mjs").then((n) => n.n);
 		const transport = await migrateLegacySignalTransportConfig({
 			cfg,
 			detect: detectSignalTransport
@@ -1067,7 +1064,7 @@ const signalDoctor = {
 //#endregion
 //#region extensions/signal/src/shared.ts
 const SIGNAL_CHANNEL = "signal";
-const signalSetupWizard = createSignalSetupWizardProxy(async () => (await import("./setup-surface-BpW9dJZY.mjs")).signalSetupWizard);
+const signalSetupWizard = createSignalSetupWizardProxy(async () => (await import("./setup-surface-D1IPnECU.mjs")).signalSetupWizard);
 const signalConfigAdapter = {
 	...createScopedChannelConfigAdapter({
 		sectionKey: SIGNAL_CHANNEL,
@@ -1152,10 +1149,10 @@ function createSignalPluginBase(params) {
 }
 //#endregion
 //#region extensions/signal/src/channel.ts
-const loadSignalMonitorModule = createLazyRuntimeModule(() => import("./monitor-CG20ucVU.mjs").then((n) => n.n));
-const loadSignalProbeModule = createLazyRuntimeModule(() => import("./probe-2LTiStRi.mjs").then((n) => n.n));
-const loadSignalSendRuntime = createLazyRuntimeModule(() => import("./send-CAlJlhsT.mjs").then((n) => n.i));
-const loadSignalApprovalReactionsModule = createLazyRuntimeModule(() => import("./approval-reactions-BHIX1jwY.mjs").then((n) => n.n));
+const loadSignalMonitorModule = createLazyRuntimeModule(() => import("./monitor-B2dIc7fW.mjs").then((n) => n.n));
+const loadSignalProbeModule = createLazyRuntimeModule(() => import("./probe-D6n3Nkud.mjs").then((n) => n.n));
+const loadSignalSendRuntime = createLazyRuntimeModule(() => import("./send-Da8lyyyC.mjs").then((n) => n.i));
+const loadSignalApprovalReactionsModule = createLazyRuntimeModule(() => import("./approval-reactions-POBtr9RL.mjs").then((n) => n.n));
 async function resolveSignalSendContext(params) {
 	return {
 		send: resolveOutboundSendDep(params.deps, "signal") ?? (await loadSignalSendRuntime()).sendMessageSignal,
@@ -1356,7 +1353,7 @@ async function registerDeliveredSignalApprovalPayloadForReactions(params) {
 	const targetAuthor = normalizeOptionalString(account.config.account);
 	const targetAuthorUuid = normalizeOptionalString(account.config.accountUuid);
 	if (!targetAuthor && !targetAuthorUuid) return;
-	const { registerSignalReactionTargetsForDeliveredPayload } = await import("./reaction-targets-TGHqhdoa.mjs").then((n) => n.t);
+	const { registerSignalReactionTargetsForDeliveredPayload } = await import("./reaction-targets-Bw8pIemQ.mjs").then((n) => n.t);
 	await registerSignalReactionTargetsForDeliveredPayload({
 		cfg: params.cfg,
 		target: {

package/dist/.setup/{client-AXcDteBZ.mjs → client-DrPmUInx.mjs}

@@ -6,7 +6,7 @@ import path from "node:path";
 import { detectMime, extractOriginalFilename, parseMediaContentLength } from "openclaw/plugin-sdk/media-runtime";
 import { asNonNegativeFiniteNumber, asPositiveFiniteNumber, parseStrictNonNegativeInteger, resolvePositiveTimerTimeoutMs, resolveTimerTimeoutMs } from "openclaw/plugin-sdk/number-runtime";
 import { coerceErrorMessage, formatErrorMessage, toErrorObject } from "openclaw/plugin-sdk/error-runtime";
-import { resolveFetch } from "openclaw/plugin-sdk/fetch-runtime";
+import { captureEffectAuthority, resolveFetch } from "openclaw/plugin-sdk/fetch-runtime";
 import { readResponseTextPrefix, readResponseWithLimit } from "openclaw/plugin-sdk/response-limit-runtime";
 import { readRegularFile } from "openclaw/plugin-sdk/security-runtime";
 import { Buffer as Buffer$1 } from "node:buffer";
@@ -77,57 +77,22 @@ async function withSignalRestDeadline(timeoutMs, run) {
 		clearTimeout(timer);
 	}
 }
-async function fetchWithTimeout(url, init, timeoutMs) {
-	const fetchImpl = resolveFetch();
-	if (!fetchImpl) throw new Error("fetch is not available");
-	return await withSignalRestDeadline(timeoutMs, async ({ signal }) => fetchImpl(url, {
-		...init,
-		signal
-	}));
-}
 function signalRestIdleTimeoutError({ chunkTimeoutMs }) {
 	return /* @__PURE__ */ new Error(`Signal REST response body stalled after ${chunkTimeoutMs}ms`);
 }
-function signalAttachmentIdleTimeoutError({ chunkTimeoutMs }) {
-	return /* @__PURE__ */ new Error(`Signal REST attachment response body stalled after ${chunkTimeoutMs}ms`);
-}
-async function readSignalRestText(res, bodyIdleTimeoutMs, bodyTimeoutMs) {
-	const bytes = await readResponseWithLimit(res, SIGNAL_REST_SUCCESS_RESPONSE_MAX_BYTES, {
-		chunkTimeoutMs: bodyIdleTimeoutMs,
-		onIdleTimeout: signalRestIdleTimeoutError,
-		timeoutMs: bodyTimeoutMs,
-		onTimeout: signalRestRequestTimeoutError,
-		onOverflow: ({ maxBytes }) => /* @__PURE__ */ new Error(`Signal REST: text response exceeds ${maxBytes} bytes`)
-	});
-	return new TextDecoder("utf-8", { fatal: true }).decode(bytes);
-}
-async function readSignalRestErrorText(res, bodyIdleTimeoutMs, bodyTimeoutMs) {
-	return (await readResponseTextPrefix(res, SIGNAL_REST_ERROR_RESPONSE_MAX_BYTES, {
-		chunkTimeoutMs: bodyIdleTimeoutMs,
-		onIdleTimeout: signalRestIdleTimeoutError,
-		timeoutMs: bodyTimeoutMs,
-		onTimeout: signalRestRequestTimeoutError
-	})).text;
-}
-async function readCappedResponseBuffer(res, maxResponseBytes, bodyIdleTimeoutMs, bodyTimeoutMs) {
-	const contentLength = parseMediaContentLength(res.headers?.get("content-length") ?? null);
-	if (contentLength !== null && contentLength > maxResponseBytes) throw new Error("Signal REST attachment exceeded size limit");
-	return await readResponseWithLimit(res, maxResponseBytes, {
-		chunkTimeoutMs: bodyIdleTimeoutMs,
-		onIdleTimeout: signalAttachmentIdleTimeoutError,
-		timeoutMs: bodyTimeoutMs,
-		onTimeout: signalRestRequestTimeoutError,
-		onOverflow: () => /* @__PURE__ */ new Error("Signal REST attachment exceeded size limit")
-	});
-}
-async function releaseUnreadResponseBody(res) {
-	if (res?.bodyUsed !== true) await res?.body?.cancel().catch(() => void 0);
+function releaseUnreadResponseBody(res) {
+	if (res?.bodyUsed !== true) res?.body?.cancel().catch(() => void 0);
 }
 async function containerCheck(baseUrl, timeoutMs = DEFAULT_TIMEOUT_MS$2, account) {
 	const normalized = normalizeBaseUrl$1(baseUrl);
 	let res;
 	try {
-		res = await fetchWithTimeout(`${normalized}/v1/about`, { method: "GET" }, timeoutMs);
+		const fetchImpl = resolveFetch();
+		if (!fetchImpl) throw new Error("fetch is not available");
+		res = await withSignalRestDeadline(timeoutMs, ({ signal }) => fetchImpl(`${normalized}/v1/about`, {
+			method: "GET",
+			signal
+		}));
 		if (!res.ok) return {
 			ok: false,
 			status: res.status,
@@ -147,7 +112,7 @@ async function containerCheck(baseUrl, timeoutMs = DEFAULT_TIMEOUT_MS$2, account
 			error: coerceErrorMessage(err)
 		};
 	} finally {
-		await releaseUnreadResponseBody(res);
+		releaseUnreadResponseBody(res);
 	}
 }
 function containerReceiveCheck(normalizedBaseUrl, account, timeoutMs) {
@@ -215,6 +180,7 @@ function containerReceiveCheck(normalizedBaseUrl, account, timeoutMs) {
 	});
 }
 async function containerRestRequest(endpoint, opts, method = "GET", body) {
+	const effect = captureEffectAuthority();
 	const url = `${normalizeBaseUrl$1(opts.baseUrl)}${endpoint}`;
 	const init = {
 		method,
@@ -226,22 +192,36 @@ async function containerRestRequest(endpoint, opts, method = "GET", body) {
 	const fetchImpl = resolveFetch();
 	if (!fetchImpl) throw new Error("fetch is not available");
 	return await withSignalRestDeadline(timeoutMs, async ({ signal, timeoutMs: bodyTimeoutMs }) => {
-		opts.assertDirectAdapterHandoff?.();
-		const res = await fetchImpl(url, {
-			...init,
-			signal
+		const res = await effect.initiate(() => {
+			opts.assertDirectAdapterHandoff?.();
+			return fetchImpl(url, {
+				...init,
+				signal
+			});
 		});
 		if (res.status === 204) return;
 		if (!res.ok) {
 			let errorText = "";
 			try {
-				errorText = await readSignalRestErrorText(res, bodyIdleTimeoutMs, bodyTimeoutMs);
+				errorText = (await readResponseTextPrefix(res, SIGNAL_REST_ERROR_RESPONSE_MAX_BYTES, {
+					chunkTimeoutMs: bodyIdleTimeoutMs,
+					onIdleTimeout: signalRestIdleTimeoutError,
+					timeoutMs: bodyTimeoutMs,
+					onTimeout: signalRestRequestTimeoutError
+				})).text;
 			} catch (error) {
 				if (error instanceof SignalRestTimeoutError) throw error;
 			}
 			throw new Error(`Signal REST ${res.status}: ${errorText || res.statusText}`);
 		}
-		const text = await readSignalRestText(res, bodyIdleTimeoutMs, bodyTimeoutMs);
+		const bytes = await readResponseWithLimit(res, SIGNAL_REST_SUCCESS_RESPONSE_MAX_BYTES, {
+			chunkTimeoutMs: bodyIdleTimeoutMs,
+			onIdleTimeout: signalRestIdleTimeoutError,
+			timeoutMs: bodyTimeoutMs,
+			onTimeout: signalRestRequestTimeoutError,
+			onOverflow: ({ maxBytes }) => /* @__PURE__ */ new Error(`Signal REST: text response exceeds ${maxBytes} bytes`)
+		});
+		const text = new TextDecoder("utf-8", { fatal: true }).decode(bytes);
 		if (!text) return;
 		try {
 			return JSON.parse(text);
@@ -265,9 +245,18 @@ async function containerFetchAttachment(attachmentId, opts) {
 			});
 			res = fetched;
 			if (!fetched.ok) return null;
-			return await readCappedResponseBuffer(fetched, Math.floor(asPositiveFiniteNumber(opts.maxResponseBytes) ?? DEFAULT_ATTACHMENT_RESPONSE_MAX_BYTES), bodyIdleTimeoutMs, bodyTimeoutMs);
+			const maxResponseBytes = Math.floor(asPositiveFiniteNumber(opts.maxResponseBytes) ?? DEFAULT_ATTACHMENT_RESPONSE_MAX_BYTES);
+			const contentLength = parseMediaContentLength(fetched.headers?.get("content-length") ?? null);
+			if (contentLength !== null && contentLength > maxResponseBytes) throw new Error("Signal REST attachment exceeded size limit");
+			return await readResponseWithLimit(fetched, maxResponseBytes, {
+				chunkTimeoutMs: bodyIdleTimeoutMs,
+				onIdleTimeout: ({ chunkTimeoutMs }) => /* @__PURE__ */ new Error(`Signal REST attachment response body stalled after ${chunkTimeoutMs}ms`),
+				timeoutMs: bodyTimeoutMs,
+				onTimeout: signalRestRequestTimeoutError,
+				onOverflow: () => /* @__PURE__ */ new Error("Signal REST attachment exceeded size limit")
+			});
 		} finally {
-			await releaseUnreadResponseBody(res);
+			releaseUnreadResponseBody(res);
 		}
 	});
 }
@@ -612,8 +601,8 @@ async function isStaleSocket(socketPath, abortSignal) {
 	abortSignal?.throwIfAborted();
 	return new Promise((resolve, reject) => {
 		const socket = createConnection(socketPath);
-		const timer = setTimeout(() => finish(/* @__PURE__ */ new Error("Signal socket ownership probe timed out")), 1e3);
-		const onAbort = () => finish(/* @__PURE__ */ new Error("Signal socket ownership probe aborted"));
+		const timer = setTimeout(() => finish(/* @__PURE__ */ new Error("Signal socket ownership check timed out")), 1e3);
+		const onAbort = () => finish(/* @__PURE__ */ new Error("Signal socket ownership check aborted"));
 		function finish(error, stale = false) {
 			clearTimeout(timer);
 			abortSignal?.removeEventListener("abort", onAbort);
@@ -659,7 +648,7 @@ async function prepareSignalSocketPath(socketPath, abortSignal) {
 				await unlink(socketPath);
 				return;
 			}
-			throw new Error("Signal socketPath changed during its ownership probe; retry startup");
+			throw new Error("Signal socketPath changed during its ownership check; retry startup");
 		}
 		throw new Error("Signal socketPath already exists; stop its owner or choose a different socket path before starting");
 	} catch (error) {
@@ -744,6 +733,7 @@ function result(message) {
 	return message.result;
 }
 async function signalUnixRpcRequest(method, params, options) {
+	const effect = captureEffectAuthority();
 	const connection = await openSocket(options);
 	const id = randomUUID();
 	const maxBytes = typeof options.maxResponseBytes === "number" && Number.isFinite(options.maxResponseBytes) && options.maxResponseBytes >= 1 ? Math.floor(options.maxResponseBytes) : MAX_FRAME_BYTES;
@@ -754,8 +744,10 @@ async function signalUnixRpcRequest(method, params, options) {
 			method,
 			params
 		})}\n`;
-		options.assertDirectAdapterHandoff?.();
-		connection.socket.write(frame);
+		await effect.initiate(() => {
+			options.assertDirectAdapterHandoff?.();
+			connection.socket.write(frame);
+		});
 		for await (const message of messages(connection.socket, maxBytes)) if (message.id === id) return result(message);
 		throw new Error("Signal UNIX RPC closed before response");
 	} finally {
@@ -862,6 +854,9 @@ function normalizeSignalSseTimeoutMs(timeoutMs) {
 	return resolveTimerTimeoutMs(timeoutMs, DEFAULT_TIMEOUT_MS);
 }
 function requestSignalHttp(url, options) {
+	return captureEffectAuthority().initiate(() => initiateSignalHttp(url, options));
+}
+function initiateSignalHttp(url, options) {
 	assertSignalHttpProtocol(url, "HTTP");
 	const timeoutMs = resolveTimerTimeoutMs(options.timeoutMs, DEFAULT_TIMEOUT_MS);
 	const client = url.protocol === "https:" ? https : http;

package/dist/.setup/{client-adapter-c_O1ouxZ.mjs → client-adapter-C25_QRp1.mjs}

@@ -1,4 +1,4 @@
-import { c as containerRpcRequest, i as streamSignalEvents$1, l as streamContainerEvents, n as signalCheck$1, r as signalRpcRequest$1, s as containerCheck } from "./client-AXcDteBZ.mjs";
+import { c as containerRpcRequest, i as streamSignalEvents$1, l as streamContainerEvents, n as signalCheck$1, r as signalRpcRequest$1, s as containerCheck } from "./client-DrPmUInx.mjs";
 import { formatErrorMessage } from "openclaw/plugin-sdk/error-runtime";
 //#region extensions/signal/src/client-adapter.ts
 const DEFAULT_TIMEOUT_MS = 1e4;

package/dist/.setup/{install-signal-cli-ChvjzM6X.mjs → install-signal-cli-hYVLYGXe.mjs}

@@ -30,10 +30,6 @@ async function extractSignalCliArchive(archivePath, installRoot, timeoutMs) {
 		}
 	});
 }
-/** @internal Exported for testing. */
-function looksLikeArchive(name) {
-	return name.endsWith(".tar.gz") || name.endsWith(".tgz") || name.endsWith(".zip");
-}
 function normalizeReleaseAsset(value) {
 	if (!isRecord(value)) return;
 	const name = normalizeOptionalString(value.name);
@@ -55,26 +51,6 @@ function normalizeSignalCliRelease(value) {
 		})
 	};
 }
-/**
-* Pick a native release asset from the official GitHub releases.
-*
-* The official signal-cli releases only publish native (GraalVM) binaries for
-* x86-64 Linux.  On architectures where no native asset is available this
-* returns `undefined` so the caller can fall back to a different install
-* strategy (e.g. Homebrew).
-*/
-/** @internal Exported for testing. */
-function pickAsset(assets, platform, arch) {
-	const archives = assets.filter((asset) => Boolean(asset.name && asset.browser_download_url)).filter((a) => looksLikeArchive(normalizeLowercaseStringOrEmpty(a.name)));
-	const byName = (pattern) => archives.find((asset) => pattern.test(normalizeLowercaseStringOrEmpty(asset.name)));
-	if (platform === "linux") {
-		if (arch === "x64") return byName(/linux-native/) || byName(/linux/) || archives[0];
-		return;
-	}
-	if (platform === "darwin") return byName(/macos|osx|darwin/);
-	if (platform === "win32") return byName(/windows|win/) || archives[0];
-	return archives[0];
-}
 /** @internal Exported for testing. */
 async function downloadToFile(url, dest, maxRedirects = 5, maxBytes = MAX_SIGNAL_CLI_ARCHIVE_BYTES) {
 	const { response, release } = await fetchWithSsrFGuard({
@@ -211,7 +187,9 @@ async function installSignalCliFromRelease(runtime) {
 	} finally {
 		await release();
 	}
-	const asset = pickAsset(releaseInfo.assets, process.platform, process.arch);
+	const archives = releaseInfo.assets.filter((asset) => /\.(?:tar\.gz|tgz|zip)$/.test(normalizeLowercaseStringOrEmpty(asset.name)));
+	const byName = (pattern) => archives.find((asset) => pattern.test(normalizeLowercaseStringOrEmpty(asset.name)));
+	const asset = byName(/linux-native/) || byName(/linux/) || archives[0];
 	if (!asset) return {
 		ok: false,
 		error: "No compatible release asset found for this platform."
@@ -255,4 +233,4 @@ async function installSignalCli(runtime) {
 	return installSignalCliViaBrew(runtime);
 }
 //#endregion
-export { looksLikeArchive as a, installSignalCliFromRelease as i, extractSignalCliArchive as n, pickAsset as o, installSignalCli as r, downloadToFile as t };
+export { installSignalCliFromRelease as i, extractSignalCliArchive as n, installSignalCli as r, downloadToFile as t };