@openclaw/signal 2026.10.2 → 2026.10.5-beta.2

package/dist/.setup/{monitor-CG20ucVU.mjs → monitor-B2dIc7fW.mjs}

@@ -3,14 +3,14 @@ import { i as normalizeSignalTransportHost } from "./transport-url-CAC0JcuI.mjs"
 import { i as resolveSignalAccount, o as resolveSignalReplyToMode } from "./accounts-DMtj2E-4.mjs";
 import { n as normalizeSignalMessagingTarget } from "./normalize-D7kSomXt.mjs";
 import { a as normalizeSignalAllowRecipient, c as resolveSignalSender, i as isSignalSenderAllowed, l as looksLikeUuid, n as formatSignalSenderDisplay, o as resolveSignalPeerId, r as formatSignalSenderId, s as resolveSignalRecipient, t as formatSignalPairingIdLine } from "./identity-B3JyPqGO.mjs";
-import { _ as resolveSignalReactionLevel, m as materializeSignalPresentationFallback, p as registerSignalReplyContext, v as formatSignalMediaText, x as isSignalNativeApprovalHandlerConfigured } from "./channel-E_23H6I6.mjs";
-import { a as prepareSignalSocketPath, t as SignalSseRejectionError } from "./client-AXcDteBZ.mjs";
-import { n as signalRpcRequest, r as streamSignalEvents, t as signalCheck } from "./client-adapter-c_O1ouxZ.mjs";
-import { n as sendReactionSignal } from "./reaction-runtime-api-xqwxFZ2S.mjs";
+import { _ as resolveSignalReactionLevel, m as materializeSignalPresentationFallback, p as registerSignalReplyContext, v as formatSignalMediaText, x as isSignalNativeApprovalHandlerConfigured } from "./channel-v_OVXflu.mjs";
+import { a as prepareSignalSocketPath, t as SignalSseRejectionError } from "./client-DrPmUInx.mjs";
+import { n as signalRpcRequest, r as streamSignalEvents, t as signalCheck } from "./client-adapter-C25_QRp1.mjs";
+import { n as sendReactionSignal } from "./reaction-runtime-api-BoF_xKQe.mjs";
 import { n as getSignalRuntime, t as getOptionalSignalRuntime } from "./runtime-8sxUF217.mjs";
-import { i as maybeResolveSignalApprovalReaction, s as resolveSignalApprovalConversationKey, t as addSignalApprovalReactionHintToStructuredPayload } from "./approval-reactions-BHIX1jwY.mjs";
-import { n as registerSignalReactionTargetsForDeliveredPayload, r as maybeResolveSignalQuestionReaction } from "./reaction-targets-TGHqhdoa.mjs";
-import { n as sendReadReceiptSignal, r as sendTypingSignal, t as sendMessageSignal } from "./send-CAlJlhsT.mjs";
+import { i as maybeResolveSignalApprovalReaction, s as resolveSignalApprovalConversationKey, t as addSignalApprovalReactionHintToStructuredPayload } from "./approval-reactions-POBtr9RL.mjs";
+import { n as registerSignalReactionTargetsForDeliveredPayload, r as maybeResolveSignalQuestionReaction } from "./reaction-targets-Bw8pIemQ.mjs";
+import { n as sendReadReceiptSignal, r as sendTypingSignal, t as sendMessageSignal } from "./send-Da8lyyyC.mjs";
 import { bindIngressLifecycleToReplyOptions, createChannelIngressError, createChannelIngressMonitor, createChannelMessageReplyPipeline, resolveChannelStreamingBlockEnabled } from "openclaw/plugin-sdk/channel-outbound";
 import { createChannelPairingChallengeIssuer } from "openclaw/plugin-sdk/channel-pairing";
 import { resolveAgentRoute, resolveInboundLastRouteSessionKey } from "openclaw/plugin-sdk/routing";
@@ -18,7 +18,7 @@ import { asPositiveSafeInteger, isRecord, normalizeNullableString, normalizeOpti
 import path from "node:path";
 import { CHANNEL_APPROVAL_NATIVE_RUNTIME_CONTEXT_CAPABILITY } from "openclaw/plugin-sdk/approval-handler-adapter-runtime";
 import { normalizeE164, truncateUtf16Safe } from "openclaw/plugin-sdk/text-utility-runtime";
-import { buildChannelInboundEventContext, buildMentionRegexes, createChannelInboundDebouncer, filterChannelInboundQuoteContext, formatInboundEnvelope, formatInboundFromLabel, formatInboundMediaUnavailableText, hasVisibleInboundReplyDispatch, logInboundDrop, matchesMentionPatterns, readAgentRunTerminalOutcome, resolveEnvelopeFormatOptions, resolveInboundDebounceMs, resolveInboundMentionDecision, resolveInboundSupplementalSenderAllowed, runChannelInboundEvent, shouldDebounceTextInbound, toHistoryMediaEntries, toInboundMediaFactsWithMetadata } from "openclaw/plugin-sdk/channel-inbound";
+import { buildChannelInboundEventContext, buildMentionRegexes, createChannelInboundDebouncer, filterChannelInboundQuoteContext, formatInboundEnvelope, formatInboundFromLabel, formatInboundMediaUnavailableText, hasVisibleInboundReplyDispatch, logInboundDrop, matchesMentionPatterns, readAgentRunTerminalOutcome, resolveInboundDebounceMs, resolveInboundMentionDecision, resolveInboundSessionEnvelopeContextAsync, resolveInboundSupplementalSenderAllowed, runChannelInboundEvent, shouldDebounceTextInbound, toHistoryMediaEntries, toInboundMediaFactsWithMetadata } from "openclaw/plugin-sdk/channel-inbound";
 import { canonicalizeBase64, detectMime, estimateBase64DecodedBytes, kindFromMime, saveMediaBuffer } from "openclaw/plugin-sdk/media-runtime";
 import { resolvePromptHistoryLimit } from "openclaw/plugin-sdk/number-runtime";
 import { collectErrorGraphCandidates, formatErrorMessage } from "openclaw/plugin-sdk/error-runtime";
@@ -36,13 +36,12 @@ import { waitForTransportReady } from "openclaw/plugin-sdk/transport-ready-runti
 import { createInterface } from "node:readline";
 import { setTimeout as setTimeout$1 } from "node:timers/promises";
 import { resolveHumanDelayConfig } from "openclaw/plugin-sdk/agent-runtime";
-import { DEFAULT_EMOJIS, DEFAULT_TIMING, createStatusReactionController, logAckFailure, logTypingFailure, resolveAckReaction, shouldAckReaction } from "openclaw/plugin-sdk/channel-feedback";
+import { DEFAULT_EMOJIS, createStatusReactionController, logAckFailure, logTypingFailure, resolveAckReaction, shouldAckReaction } from "openclaw/plugin-sdk/channel-feedback";
 import { defineStableChannelIngressIdentity, fanInChannelIngressLifecycles } from "openclaw/plugin-sdk/channel-ingress-runtime";
 import { isControlCommandMessage } from "openclaw/plugin-sdk/command-detection";
 import { createInternalHookEvent, fireAndForgetHook, toInternalMessageReceivedContext, triggerInternalHook } from "openclaw/plugin-sdk/hook-runtime";
 import { createChannelHistoryWindow } from "openclaw/plugin-sdk/reply-history";
 import { resolveBatchedReplyThreadingPolicy } from "openclaw/plugin-sdk/reply-reference";
-import { readSessionUpdatedAt, resolveStorePath } from "openclaw/plugin-sdk/session-store-runtime";
 import { enqueueSystemEvent } from "openclaw/plugin-sdk/system-event-runtime";
 import { upsertChannelPairingRequest } from "openclaw/plugin-sdk/conversation-runtime";
 import { listChatCommands, maybeResolveTextAlias, normalizeCommandBody } from "openclaw/plugin-sdk/command-auth-native";
@@ -77,8 +76,8 @@ async function waitForSignalDaemonReady(params) {
 	await (params.waitForTransportReadyFn ?? waitForTransportReady)({
 		label: "signal daemon",
 		timeoutMs: Math.max(0, params.startupDeadlineMs - Date.now()),
-		logAfterMs: params.logAfterMs,
-		logIntervalMs: params.logIntervalMs,
+		logAfterMs: 1e4,
+		logIntervalMs: 1e4,
 		pollIntervalMs: 150,
 		abortSignal: params.abortSignal,
 		runtime: params.runtime,
@@ -201,9 +200,7 @@ function spawnSignalDaemon(opts) {
 		} else error(`signal-cli process error: ${String(err)}`);
 	});
 	return {
-		pid: child.pid ?? void 0,
 		exited: exitedPromise,
-		isExited: () => exited,
 		stop: () => {
 			if (exited) return Promise.resolve();
 			if (stopPromise) return stopPromise;
@@ -328,11 +325,6 @@ function normalizeSignalUuidEntry(entry) {
 	if (lower.startsWith("uuid:")) return signalStripped.slice(5).trim() || null;
 	return looksLikeUuid(signalStripped) ? signalStripped : null;
 }
-function normalizeSignalPhoneEntry(entry) {
-	const parsed = strippedSignalEntry(entry);
-	if (!parsed) return null;
-	return normalizeSignalAllowRecipient(parsed.trimmed) ?? null;
-}
 const signalIngressIdentity = defineStableChannelIngressIdentity({
 	key: "stable",
 	normalizeEntry: () => null,
@@ -340,7 +332,7 @@ const signalIngressIdentity = defineStableChannelIngressIdentity({
 		{
 			key: "phone",
 			kind: "phone",
-			normalizeEntry: normalizeSignalPhoneEntry,
+			normalizeEntry: (entry) => normalizeSignalAllowRecipient(entry) ?? null,
 			normalizeSubject: (value) => value,
 			sensitivity: "pii"
 		},
@@ -461,7 +453,7 @@ function resolveSignalInboundConversationKey(accountId, entry) {
 }
 function isSignalActiveRunControlText(text) {
 	if (isAbortRequestText(text)) return true;
-	const normalizedBody = normalizeCommandBody(text.trim());
+	const normalizedBody = normalizeCommandBody(text);
 	const alias = maybeResolveTextAlias(normalizedBody);
 	if (!alias) return false;
 	const command = listChatCommands().find((entry) => entry.textAliases.some((candidate) => candidate.trim().toLowerCase() === alias));
@@ -699,7 +691,6 @@ function createSignalEventHandler(deps) {
 		accountId: deps.accountId,
 		groups: resolveChannelGroups(deps.cfg, "signal", deps.accountId)
 	});
-	const statusReactionTiming = deps.statusReactionTiming ?? DEFAULT_TIMING;
 	const activeEnqueueEntries = /* @__PURE__ */ new WeakSet();
 	async function handleSignalInboundMessage(entry) {
 		const { cfg } = entry;
@@ -718,10 +709,9 @@ function createSignalEventHandler(deps) {
 			groupId: entry.groupId,
 			senderPeerId: entry.senderPeerId
 		});
-		const storePath = resolveStorePath(cfg.session?.store, { agentId: route.agentId });
-		const envelopeOptions = resolveEnvelopeFormatOptions(cfg);
-		const previousTimestamp = readSessionUpdatedAt({
-			storePath,
+		const { envelopeOptions, previousTimestamp } = await resolveInboundSessionEnvelopeContextAsync({
+			cfg,
+			agentId: route.agentId,
 			sessionKey: route.sessionKey
 		});
 		const body = formatInboundEnvelope({
@@ -858,7 +848,6 @@ function createSignalEventHandler(deps) {
 			} },
 			initialEmoji: ackReaction,
 			emojis: { stallHard: DEFAULT_EMOJIS.stallSoft },
-			timing: statusReactionTiming,
 			onError: (err) => {
 				logAckFailure({
 					log: logVerbose,
@@ -1066,30 +1055,27 @@ function createSignalEventHandler(deps) {
 			await settle();
 			return;
 		}
-		if (entries.length === 1) {
-			await handleSignalInboundMessage({
+		let inbound = last;
+		if (entries.length > 1) {
+			const combinedText = entries.map((entry) => entry.bodyText).filter(Boolean).join("\n");
+			const combinedCommandBody = entries.map((entry) => entry.commandBody).filter(Boolean).join("\n");
+			if (!combinedText.trim()) {
+				await settle();
+				return;
+			}
+			inbound = {
 				...last,
-				channelIngress,
-				turnAdoptionLifecycle: lifecycle
-			});
-			await settle();
-			return;
-		}
-		const combinedText = entries.map((entry) => entry.bodyText).filter(Boolean).join("\n");
-		const combinedCommandBody = entries.map((entry) => entry.commandBody).filter(Boolean).join("\n");
-		if (!combinedText.trim()) {
-			await settle();
-			return;
+				bodyText: combinedText,
+				commandBody: combinedCommandBody,
+				isBatched: true,
+				nativeReplyBody: last.nativeReplyBody ?? last.bodyText,
+				media: entries.flatMap((entry) => entry.media ?? [])
+			};
 		}
 		await handleSignalInboundMessage({
-			...last,
-			bodyText: combinedText,
-			commandBody: combinedCommandBody,
-			turnAdoptionLifecycle: lifecycle,
-			isBatched: true,
-			nativeReplyBody: last.nativeReplyBody ?? last.bodyText,
-			media: entries.flatMap((entry) => entry.media ?? []),
-			channelIngress
+			...inbound,
+			channelIngress,
+			turnAdoptionLifecycle: lifecycle
 		});
 		await settle();
 	}
@@ -1872,7 +1858,7 @@ async function deliverReplies(params) {
 				} : {}
 			});
 			replyPlan.markSent();
-			const messageId = typeof result?.messageId === "string" && result.messageId.trim() ? result.messageId.trim() : null;
+			const messageId = result.messageId.trim();
 			if (messageId) deliveryResults.push({
 				channel: "signal",
 				messageId,
@@ -1992,8 +1978,6 @@ async function monitorSignalProvider(opts = {}) {
 				baseUrl,
 				abortSignal: daemonLifecycle.abortSignal,
 				startupDeadlineMs: startupDeadline,
-				logAfterMs: 1e4,
-				logIntervalMs: 1e4,
 				runtime,
 				waitForTransportReadyFn
 			});

package/dist/.setup/{probe-2LTiStRi.mjs → probe-D6n3Nkud.mjs}

@@ -1,6 +1,6 @@
 import { o as __exportAll } from "./doctor-contract-api-CGS80vmV.mjs";
-import { n as signalRpcRequest, t as signalCheck } from "./client-adapter-c_O1ouxZ.mjs";
-import { t as detectSignalTransport } from "./transport-detection-CQSEftdN.mjs";
+import { n as signalRpcRequest, t as signalCheck } from "./client-adapter-C25_QRp1.mjs";
+import { t as detectSignalTransport } from "./transport-detection-C7tIMlYW.mjs";
 import { normalizeOptionalString, normalizeTrimmedStringList } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { runChannelProbe } from "openclaw/plugin-sdk/text-utility-runtime";
 import { formatErrorMessage } from "openclaw/plugin-sdk/error-runtime";

package/dist/.setup/{reaction-runtime-api-xqwxFZ2S.mjs → reaction-runtime-api-BoF_xKQe.mjs}

@@ -1,6 +1,6 @@
 import { i as resolveSignalAccount } from "./accounts-DMtj2E-4.mjs";
 import { r as normalizeSignalReactionRecipient } from "./normalize-D7kSomXt.mjs";
-import { n as signalRpcRequest } from "./client-adapter-c_O1ouxZ.mjs";
+import { n as signalRpcRequest } from "./client-adapter-C25_QRp1.mjs";
 import { t as resolveSignalRpcContext } from "./rpc-context-BAXcX7dI.mjs";
 import { requireRuntimeConfig } from "openclaw/plugin-sdk/plugin-config-runtime";
 //#region extensions/signal/src/send-reactions.ts

package/dist/.setup/{reaction-targets-TGHqhdoa.mjs → reaction-targets-Bw8pIemQ.mjs}

@@ -1,6 +1,6 @@
 import { o as __exportAll } from "./doctor-contract-api-CGS80vmV.mjs";
 import { i as resolveSignalDeliveredConversationKey } from "./approval-auth-BITw96pZ.mjs";
-import { c as resolveSignalApprovalTargetAuthorKeys, o as registerSignalApprovalReactionTargetForDeliveredPayload } from "./approval-reactions-BHIX1jwY.mjs";
+import { c as resolveSignalApprovalTargetAuthorKeys, o as registerSignalApprovalReactionTargetForDeliveredPayload } from "./approval-reactions-POBtr9RL.mjs";
 import { createQuestionReactionTargetStore, questionGatewayRuntime } from "openclaw/plugin-sdk/question-gateway-runtime";
 import { normalizeAccountId } from "openclaw/plugin-sdk/routing";
 //#region extensions/signal/src/question-reactions.ts

package/dist/.setup/{send-CAlJlhsT.mjs → send-Da8lyyyC.mjs}

@@ -1,9 +1,9 @@
 import { o as __exportAll } from "./doctor-contract-api-CGS80vmV.mjs";
 import { i as resolveSignalAccount } from "./accounts-DMtj2E-4.mjs";
 import { n as normalizeSignalMessagingTarget } from "./normalize-D7kSomXt.mjs";
-import { p as registerSignalReplyContext, y as markdownToSignalText } from "./channel-E_23H6I6.mjs";
-import { o as isSignalQuoteMetadataRejection } from "./client-AXcDteBZ.mjs";
-import { n as signalRpcRequest } from "./client-adapter-c_O1ouxZ.mjs";
+import { p as registerSignalReplyContext, y as markdownToSignalText } from "./channel-v_OVXflu.mjs";
+import { o as isSignalQuoteMetadataRejection } from "./client-DrPmUInx.mjs";
+import { n as signalRpcRequest } from "./client-adapter-C25_QRp1.mjs";
 import { t as resolveSignalRpcContext } from "./rpc-context-BAXcX7dI.mjs";
 import { createMessageReceiptFromOutboundResults } from "openclaw/plugin-sdk/channel-outbound";
 import { resolveMarkdownTableMode } from "openclaw/plugin-sdk/markdown-table-runtime";
@@ -33,7 +33,7 @@ function assertSignalRecipientDelivery(result, target) {
 	if (failures.length === 0 || target.type === "group" && hasSuccessfulRecipient) return;
 	throw new Error(`Signal send failed for ${failures.length} recipient${failures.length === 1 ? "" : "s"}: ${[...new Set(failures)].join(", ")}`);
 }
-async function resolveSignalRpcAccountInfo(opts) {
+function resolveSignalRpcAccountInfo(opts) {
 	const cfg = requireRuntimeConfig(opts.cfg, "Signal RPC account resolution");
 	return resolveSignalAccount({
 		cfg,
@@ -43,14 +43,13 @@ async function resolveSignalRpcAccountInfo(opts) {
 function parseTarget(raw) {
 	const value = normalizeSignalMessagingTarget(raw);
 	if (!value) throw new Error("Signal recipient is required");
-	const normalized = normalizeLowercaseStringOrEmpty(value);
-	if (normalized.startsWith("group:")) return {
+	if (value.startsWith("group:")) return {
 		type: "group",
-		groupId: value.slice(6).trim()
+		groupId: value.slice(6)
 	};
-	if (normalized.startsWith("username:")) return {
+	if (value.startsWith("username:")) return {
 		type: "username",
-		username: value.slice(9).trim()
+		username: value.slice(9)
 	};
 	return {
 		type: "recipient",
@@ -208,7 +207,7 @@ async function sendMessageSignal(to, text, opts) {
 	};
 }
 async function sendTypingSignal(to, opts) {
-	const accountInfo = await resolveSignalRpcAccountInfo(opts);
+	const accountInfo = resolveSignalRpcAccountInfo(opts);
 	const { baseUrl, account } = resolveSignalRpcContext(opts, accountInfo);
 	const target = parseTarget(to);
 	if (target.type === "username") return false;
@@ -224,7 +223,7 @@ async function sendTypingSignal(to, opts) {
 }
 async function sendReadReceiptSignal(to, targetTimestamp, opts) {
 	if (!Number.isFinite(targetTimestamp) || targetTimestamp <= 0) return false;
-	const accountInfo = await resolveSignalRpcAccountInfo(opts);
+	const accountInfo = resolveSignalRpcAccountInfo(opts);
 	const { baseUrl, account } = resolveSignalRpcContext(opts, accountInfo);
 	const target = parseTarget(to);
 	if (target.type !== "recipient") return false;

package/dist/.setup/{setup-surface-BpW9dJZY.mjs → setup-surface-D1IPnECU.mjs}

@@ -1,6 +1,6 @@
 import { i as resolveSignalAccount, n as listSignalAccountIds } from "./accounts-DMtj2E-4.mjs";
-import { c as signalNumberTextInput, i as createSignalCliPathTextInput, o as signalCompletionNote, s as signalDmPolicy } from "./channel-E_23H6I6.mjs";
-import { r as installSignalCli } from "./install-signal-cli-ChvjzM6X.mjs";
+import { c as signalNumberTextInput, i as createSignalCliPathTextInput, o as signalCompletionNote, s as signalDmPolicy } from "./channel-v_OVXflu.mjs";
+import { r as installSignalCli } from "./install-signal-cli-hYVLYGXe.mjs";
 import { createDetectedBinaryStatus, createSetupTranslator, setSetupChannelEnabled } from "openclaw/plugin-sdk/setup";
 import { detectBinary } from "openclaw/plugin-sdk/setup-tools";
 //#region extensions/signal/src/setup-surface.ts

package/dist/.setup/{transport-detection-CQSEftdN.mjs → transport-detection-C7tIMlYW.mjs}

@@ -6,10 +6,10 @@ const DEFAULT_PROBE_TIMEOUT_MS = 1e4;
 async function detectSignalTransport(params) {
 	const url = normalizeSignalTransportUrl(params.url);
 	const timeoutMs = params.timeoutMs ?? DEFAULT_PROBE_TIMEOUT_MS;
-	const probes = params.probeNative && params.probeContainer ? void 0 : await import("./transport-probes.runtime-DwXEHnXr.mjs");
+	const probes = params.probeNative && params.probeContainer ? void 0 : await import("./transport-probes.runtime-CE-YN8v-.mjs");
 	const probeNative = params.probeNative ?? probes?.nativeCheck;
 	const probeContainer = params.probeContainer ?? probes?.containerCheck;
-	if (!probeNative || !probeContainer) throw new Error("Signal transport probes are unavailable");
+	if (!probeNative || !probeContainer) throw new Error("Signal transport checks are unavailable");
 	const [native, container] = await Promise.all([probeNative(url, timeoutMs).catch(() => ({ ok: false })), probeContainer(url, timeoutMs, params.account).catch(() => ({ ok: false }))]);
 	if (native.ok) return {
 		kind: "external-native",

package/dist/.setup/{transport-probes.runtime-DwXEHnXr.mjs → transport-probes.runtime-CE-YN8v-.mjs}

@@ -1,2 +1,2 @@
-import { n as signalCheck, s as containerCheck } from "./client-AXcDteBZ.mjs";
+import { n as signalCheck, s as containerCheck } from "./client-DrPmUInx.mjs";
 export { containerCheck, signalCheck as nativeCheck };

package/dist/api.js

@@ -1,12 +1,12 @@
 import { i as resolveSignalAccount, n as listSignalAccountIds, r as resolveDefaultSignalAccountId, t as listEnabledSignalAccounts } from "./.setup/accounts-DMtj2E-4.mjs";
 import { n as normalizeSignalMessagingTarget, t as looksLikeSignalTargetId } from "./.setup/normalize-D7kSomXt.mjs";
 import { a as normalizeSignalAllowRecipient, c as resolveSignalSender, i as isSignalSenderAllowed, l as looksLikeUuid, n as formatSignalSenderDisplay, o as resolveSignalPeerId, r as formatSignalSenderId, s as resolveSignalRecipient, t as formatSignalPairingIdLine } from "./.setup/identity-B3JyPqGO.mjs";
-import { _ as resolveSignalReactionLevel, a as normalizeSignalAccountInput, b as markdownToSignalTextChunks, d as probeSignalTransport, f as writeSignalAccountTransport, g as signalMessageActions, h as resolveSignalOutboundTarget, t as signalPlugin, u as prepareSignalManagedNativeTransport, y as markdownToSignalText } from "./.setup/channel-E_23H6I6.mjs";
-import { n as sendReactionSignal, t as removeReactionSignal } from "./.setup/reaction-runtime-api-xqwxFZ2S.mjs";
-import { t as detectSignalTransport } from "./.setup/transport-detection-CQSEftdN.mjs";
-import { t as signalSetupPlugin } from "./.setup/api-BYvpXSbI.mjs";
-import { r as installSignalCli } from "./.setup/install-signal-cli-ChvjzM6X.mjs";
-import { t as monitorSignalProvider } from "./.setup/monitor-CG20ucVU.mjs";
-import { n as sendReadReceiptSignal, r as sendTypingSignal, t as sendMessageSignal } from "./.setup/send-CAlJlhsT.mjs";
-import { t as probeSignal } from "./.setup/probe-2LTiStRi.mjs";
+import { _ as resolveSignalReactionLevel, a as normalizeSignalAccountInput, b as markdownToSignalTextChunks, d as probeSignalTransport, f as writeSignalAccountTransport, g as signalMessageActions, h as resolveSignalOutboundTarget, t as signalPlugin, u as prepareSignalManagedNativeTransport, y as markdownToSignalText } from "./.setup/channel-v_OVXflu.mjs";
+import { n as sendReactionSignal, t as removeReactionSignal } from "./.setup/reaction-runtime-api-BoF_xKQe.mjs";
+import { t as detectSignalTransport } from "./.setup/transport-detection-C7tIMlYW.mjs";
+import { t as signalSetupPlugin } from "./.setup/api-oTYg1sqh.mjs";
+import { r as installSignalCli } from "./.setup/install-signal-cli-hYVLYGXe.mjs";
+import { t as monitorSignalProvider } from "./.setup/monitor-B2dIc7fW.mjs";
+import { n as sendReadReceiptSignal, r as sendTypingSignal, t as sendMessageSignal } from "./.setup/send-Da8lyyyC.mjs";
+import { t as probeSignal } from "./.setup/probe-D6n3Nkud.mjs";
 export { detectSignalTransport, formatSignalPairingIdLine, formatSignalSenderDisplay, formatSignalSenderId, installSignalCli, isSignalSenderAllowed, listEnabledSignalAccounts, listSignalAccountIds, looksLikeSignalTargetId, looksLikeUuid, markdownToSignalText, markdownToSignalTextChunks, monitorSignalProvider, normalizeSignalAccountInput, normalizeSignalAllowRecipient, normalizeSignalMessagingTarget, prepareSignalManagedNativeTransport, probeSignal, probeSignalTransport, removeReactionSignal, resolveDefaultSignalAccountId, resolveSignalAccount, resolveSignalOutboundTarget, resolveSignalPeerId, resolveSignalReactionLevel, resolveSignalRecipient, resolveSignalSender, sendMessageSignal, sendReactionSignal, sendReadReceiptSignal, sendTypingSignal, signalMessageActions, signalPlugin, signalSetupPlugin, writeSignalAccountTransport };

package/dist/channel-plugin-api.js

@@ -1,2 +1,2 @@
-import { t as signalPlugin } from "./.setup/channel-E_23H6I6.mjs";
+import { t as signalPlugin } from "./.setup/channel-v_OVXflu.mjs";
 export { signalPlugin };

package/dist/contract-api.js

@@ -1,4 +1,4 @@
 import { n as normalizeSignalMessagingTarget, r as normalizeSignalReactionRecipient, t as looksLikeSignalTargetId } from "./.setup/normalize-D7kSomXt.mjs";
 import { i as isSignalSenderAllowed } from "./.setup/identity-B3JyPqGO.mjs";
-import { a as looksLikeArchive, i as installSignalCliFromRelease, n as extractSignalCliArchive, o as pickAsset, r as installSignalCli, t as downloadToFile } from "./.setup/install-signal-cli-ChvjzM6X.mjs";
-export { downloadToFile, extractSignalCliArchive, installSignalCli, installSignalCliFromRelease, isSignalSenderAllowed, looksLikeArchive, looksLikeSignalTargetId, normalizeSignalMessagingTarget, normalizeSignalReactionRecipient, pickAsset };
+import { i as installSignalCliFromRelease, n as extractSignalCliArchive, r as installSignalCli, t as downloadToFile } from "./.setup/install-signal-cli-hYVLYGXe.mjs";
+export { downloadToFile, extractSignalCliArchive, installSignalCli, installSignalCliFromRelease, isSignalSenderAllowed, looksLikeSignalTargetId, normalizeSignalMessagingTarget, normalizeSignalReactionRecipient };

package/dist/reaction-runtime-api.js

@@ -1,2 +1,2 @@
-import { n as sendReactionSignal, t as removeReactionSignal } from "./.setup/reaction-runtime-api-xqwxFZ2S.mjs";
+import { n as sendReactionSignal, t as removeReactionSignal } from "./.setup/reaction-runtime-api-BoF_xKQe.mjs";
 export { removeReactionSignal, sendReactionSignal };

package/dist/setup-entry.js

@@ -4,7 +4,7 @@ import { fileURLToPath } from "node:url";
 var setup_entry_default = defineBundledChannelSetupEntry({
 	importMetaUrl: import.meta.url,
 	plugin: {
-		specifier: fileURLToPath(new URL(".setup/api-BzvUhsz9.mjs", import.meta.url).href),
+		specifier: fileURLToPath(new URL(".setup/api-CfFaBHKY.mjs", import.meta.url).href),
 		exportName: "signalSetupPlugin"
 	}
 });

package/node_modules/@openclaw/fs-safe/CHANGELOG.md

@@ -2,6 +2,41 @@
 
 ## Unreleased
 
+## 0.25.0 - 2026-10-08
+
+### Highlights
+
+- **Faster synchronous plugin captures:** 16% faster than pre-change main on a measured 6,000-file tree; the new `createRootFileCopyBatchSync` API on `advanced` also reuses directory admissions across copies. ([#878](https://github.com/openclaw/fs-safe/pull/878), [#849](https://github.com/openclaw/fs-safe/pull/849))
+- **Guest workspace publication:** works on gVisor and other Linux filesystems that reject `RENAME_NOREPLACE`. ([#876](https://github.com/openclaw/fs-safe/pull/876))
+- **Root-backed sidecar locks:** native asynchronous release and exit cleanup no longer strand locks after their Root moves. ([#879](https://github.com/openclaw/fs-safe/pull/879))
+- **Guest cross-device moves:** preserve the admitted file permissions. ([#869](https://github.com/openclaw/fs-safe/pull/869))
+
+### Features
+
+- **Guarded copy batches:** `createRootFileCopyBatchSync` on `advanced` reuses directory admissions across synchronous copies on canonical POSIX paths while rechecking ancestor and file identities for every copy; single-file copies also reuse admission within the operation. ([#849](https://github.com/openclaw/fs-safe/pull/849))
+
+### Fixes
+
+- **Root-backed file locks:** native asynchronous release and exit cleanup follow the created lock's retained identity after its Root moves, preserving replacement files and reporting ownership mismatches. ([#879](https://github.com/openclaw/fs-safe/pull/879)) Thanks @axiom-ncis.
+- **Temp directory diagnostics:** name rejected roots and ancestors, explain ownership, mode, or symlink failures, and provide safe recovery guidance, including for root-run appliances. Thanks @joequant. ([#877](https://github.com/openclaw/fs-safe/pull/877))
+- **Guest directory publication:** publish staged workspaces when Linux filesystems reject `RENAME_NOREPLACE`, with checked file link/unlink fallback and directory rename that can only replace a concurrently created empty directory. ([#876](https://github.com/openclaw/fs-safe/pull/876)) Thanks @valkyriweb.
+- **Guest cross-device moves:** preserve the admitted source file's permissions instead of leaving the destination with a broader default mode. ([#869](https://github.com/openclaw/fs-safe/pull/869))
+- **Move receipts:** publication receipts capture the source identity after synchronous authorization callbacks return, so a source replaced during authorization is reported accurately. ([#868](https://github.com/openclaw/fs-safe/pull/868))
+- **Atomic copy fallback:** report a failed restoration as a failure even when the underlying error carries a restored receipt. ([#851](https://github.com/openclaw/fs-safe/pull/851))
+- **Archive read limits:** keep the validated entry-read byte limit fixed when callers mutate the options during a read. ([#852](https://github.com/openclaw/fs-safe/pull/852))
+- **Watch on macOS:** reconcile notifications for changes to the watched Root itself immediately instead of waiting for the periodic scan. ([#858](https://github.com/openclaw/fs-safe/pull/858))
+- **`pathScope` tilde names:** keep literal `~` directory names inside scoped file and existing-path lookups instead of expanding them. ([#856](https://github.com/openclaw/fs-safe/pull/856))
+
+### Performance
+
+- **Guarded file copies:** reuse checked canonical POSIX roots during initial path admission, reducing repeated path-resolution work in synchronous plugin source captures without changing per-file identity or race checks.
+- **Root walks:** reuse normalized directory prefixes, cutting a 50k-file walk by 5.6% and its sampled allocation by about 9% while keeping every filesystem and identity check. ([#870](https://github.com/openclaw/fs-safe/pull/870))
+- **Atomic writes:** non-durable async POSIX writes skip a redundant mode change when the staged file already has the requested permissions. ([#871](https://github.com/openclaw/fs-safe/pull/871))
+- **Guarded mutations:** fewer promise allocations around synchronous guard checks, with directory identity checks unchanged. ([#857](https://github.com/openclaw/fs-safe/pull/857))
+- **Archive publication:** fewer promise allocations in archive guard checks, without removing identity or containment checks. ([#864](https://github.com/openclaw/fs-safe/pull/864))
+- **Watch:** Linux and Windows watch passes skip macOS stream-path preparation. ([#860](https://github.com/openclaw/fs-safe/pull/860))
+- **Permission diagnostics:** bound escaping work for large error messages without changing the displayed excerpts. ([#859](https://github.com/openclaw/fs-safe/pull/859))
+
 ## 0.24.2 - 2026-10-07
 
 ### Fixes

package/node_modules/@openclaw/fs-safe/README.md

@@ -22,7 +22,7 @@ await fs.write("../escape.txt", "x");            // throws FsSafeError("outside-
 
 That's the whole pitch. `root()` is the product; the rest of the package — JSON stores, atomic writes, secret files, archive extraction, temp workspaces — is supporting cast for the same boundary.
 
-Full docs and reference at **[fs-safe.io](https://fs-safe.io)**.
+Full docs and reference at **[fs-safe.io](https://fs-safe.io)**. For synchronous plugin captures, [guarded file copies and batches](docs/copy.md#synchronous-guarded-file-copies) return owned destination descriptors while preserving per-file checks.
 
 ## Contents
 

package/node_modules/@openclaw/fs-safe/dist/advanced.d.ts

@@ -1,4 +1,4 @@
-export { copyRootFileSync, type CopyRootFileSyncOptions, type CopiedRootFileSync } from "./copy-root-file-sync.js";
+export { copyRootFileSync, createRootFileCopyBatchSync, type RootFileCopyBatchSync, type CopyRootFileSyncOptions, type CopiedRootFileSync } from "./copy-root-file-sync.js";
 export { createAsyncLock } from "./async-lock.js";
 export { createDirectory, createDirectorySync, createFileSync, type CreateDirectoryOptions, type CreateFileOptions, type OwnedFileDescriptorSync, } from "./create.js";
 export { copyFileHandle, copyFileDescriptorSync, type CopyFileHandleOptions } from "./file-handle-transfer.js";

package/node_modules/@openclaw/fs-safe/dist/advanced.js

@@ -1,4 +1,4 @@
-export { copyRootFileSync } from "./copy-root-file-sync.js";
+export { copyRootFileSync, createRootFileCopyBatchSync } from "./copy-root-file-sync.js";
 // Advanced composition surface. These exports are less stable than the focused
 // public subpaths; prefer root/json/store/temp/archive unless you are building a
 // higher-level primitive.

package/node_modules/@openclaw/fs-safe/dist/archive-durability.js

@@ -65,7 +65,7 @@ export async function finalizeArchivePublication(params) {
     const check = () => params.deadline?.check();
     const assertGuards = async (guards) => {
         for (const guard of [params.destinationGuard, ...guards, params.sourceGuard]) {
-            await assertDirectoryIdentityGuard(guard);
+            assertDirectoryIdentityGuard(guard);
             check();
         }
     };

package/node_modules/@openclaw/fs-safe/dist/archive-merge.js

@@ -98,15 +98,15 @@ async function mergeTree(params, publication, durable = true, entryUmask = 0) {
             assertSourceDirectory(ancestor);
     };
     const assertGuards = async () => {
-        await assertDirectoryIdentityGuard(destinationGuard);
+        assertDirectoryIdentityGuard(destinationGuard);
         check();
         for (const ancestor of ancestors) {
-            await assertDirectoryIdentityGuard(ancestor.guard);
+            assertDirectoryIdentityGuard(ancestor.guard);
             check();
             await ancestor.owner.verify(check);
             check();
         }
-        await assertDirectoryIdentityGuard(sourceGuard);
+        assertDirectoryIdentityGuard(sourceGuard);
         check();
     };
     const walk = async (sourceDir) => {
@@ -184,7 +184,7 @@ async function mergeTree(params, publication, durable = true, entryUmask = 0) {
                                 await owner.apply(mode, { check, beforeChmod: async () => {
                                         await assertGuards();
                                         assertSourceAncestors();
-                                        await assertDirectoryIdentityGuard(guard);
+                                        assertDirectoryIdentityGuard(guard);
                                         check();
                                         await assertResolvedInsideDestination({
                                             destinationRealDir, targetPath: destinationPath, originalPath,

package/node_modules/@openclaw/fs-safe/dist/archive-read.js

@@ -213,7 +213,8 @@ async function readNativeBufferEntry(native, buffer, kind, requested, displayPat
     }
 }
 export async function readArchiveEntry(archivePath, entryPath, options) {
-    if (!Number.isSafeInteger(options.maxBytes) || options.maxBytes < 0) {
+    const maxBytes = options.maxBytes;
+    if (!Number.isSafeInteger(maxBytes) || maxBytes < 0) {
         throw new RangeError("maxBytes must be a non-negative safe integer");
     }
     const kind = options.kind ?? resolveArchiveKind(archivePath);
@@ -228,7 +229,7 @@ export async function readArchiveEntry(archivePath, entryPath, options) {
         admitZipBuffer(buffer, resolveExtractLimits(), entry => { zipEntries.push(entry); });
     const native = getNativeBinding();
     if (native)
-        return await readNativeBufferEntry(native, buffer, kind, requestedEntry, entryPath, options.maxBytes, zipEntries);
-    return kind === "zip" ? await readZipEntry(buffer, requestedEntry, options.maxBytes, zipEntries)
-        : await readTarEntry(buffer, requestedEntry, options.maxBytes, kind);
+        return await readNativeBufferEntry(native, buffer, kind, requestedEntry, entryPath, maxBytes, zipEntries);
+    return kind === "zip" ? await readZipEntry(buffer, requestedEntry, maxBytes, zipEntries)
+        : await readTarEntry(buffer, requestedEntry, maxBytes, kind);
 }

package/node_modules/@openclaw/fs-safe/dist/archive-staging.d.ts

@@ -5,7 +5,7 @@ import { ArchiveSecurityError } from "./archive-errors.js";
 export type ArchiveDirectoryGuard = AsyncDirectoryGuard<BigIntStats>;
 export declare function createArchiveSymlinkTraversalError(originalPath: string): ArchiveSecurityError;
 export declare function createDirectoryIdentityGuard(dir: string): Promise<ArchiveDirectoryGuard>;
-export declare function assertDirectoryIdentityGuard(guard: ArchiveDirectoryGuard): Promise<void>;
+export declare function assertDirectoryIdentityGuard(guard: ArchiveDirectoryGuard): void;
 export declare function prepareArchiveDestinationGuard(destDir: string): Promise<ArchiveDirectoryGuard>;
 export declare function prepareArchiveDestinationDir(destDir: string): Promise<string>;
 export declare function assertResolvedInsideDestination(params: {

package/node_modules/@openclaw/fs-safe/dist/archive-staging.js

@@ -1,7 +1,7 @@
 import fsSync, {} from "node:fs";
 import fs from "node:fs/promises";
 import path from "node:path";
-import { assertAsyncDirectoryGuard, createAsyncDirectoryGuard, } from "./directory-guard.js";
+import { assertDirectoryGuard, createAsyncDirectoryGuard, } from "./directory-guard.js";
 import { ownExtractionDestinationMutation, } from "./archive-deadline.js";
 import { ArchiveSecurityError, } from "./archive-errors.js";
 import { FsSafeError } from "./errors.js";
@@ -38,9 +38,9 @@ export async function createDirectoryIdentityGuard(dir) {
         throw err;
     }
 }
-export async function assertDirectoryIdentityGuard(guard) {
+export function assertDirectoryIdentityGuard(guard) {
     try {
-        await assertAsyncDirectoryGuard(guard);
+        assertDirectoryGuard(guard, "native");
     }
     catch (err) {
         if (err instanceof FsSafeError || isNotFoundPathError(err)) {
@@ -200,7 +200,7 @@ async function prepareOutputPath(params, assertGuards, privateWorkingMode = fals
         if (existingDestinationGuard && assertGuards)
             await assertGuards();
         else {
-            await assertDirectoryIdentityGuard(destinationGuard);
+            assertDirectoryIdentityGuard(destinationGuard);
             checkExtractionDeadline(params.deadline);
             await assertGuards?.();
         }
@@ -213,46 +213,30 @@ async function prepareOutputPath(params, assertGuards, privateWorkingMode = fals
         originalPath: params.originalPath,
     });
     checkExtractionDeadline(params.deadline);
-    if (params.isDirectory) {
-        await getFsSafeTestHooks()?.beforeArchiveOutputMutation?.("mkdir", params.outPath);
+    const relativePath = params.isDirectory ? relPath : path.posix.dirname(relPath);
+    if (params.isDirectory || relativePath !== ".") {
+        const directoryPath = params.isDirectory ? params.outPath : path.dirname(params.outPath);
+        await getFsSafeTestHooks()?.beforeArchiveOutputMutation?.("mkdir", directoryPath);
         checkExtractionDeadline(params.deadline);
         await ownExtractionDestinationMutation(params.deadline, async () => {
             await assertOutputGuards();
             checkExtractionDeadline(params.deadline);
-            await mkdirArchiveOutput({
-                targetRoot,
-                relativePath: relPath,
-                originalPath: params.originalPath,
-            });
-            checkExtractionDeadline(params.deadline);
-            await assertDirectoryIdentityGuard(destinationGuard);
+            await mkdirArchiveOutput({ targetRoot, relativePath, originalPath: params.originalPath });
             checkExtractionDeadline(params.deadline);
-            await assertResolvedInsideDestination({
-                destinationRealDir: params.destinationRealDir,
-                targetPath: params.outPath,
-                originalPath: params.originalPath,
-            });
-            checkExtractionDeadline(params.deadline);
-        });
-        return;
-    }
-    const parentRel = path.posix.dirname(relPath);
-    if (parentRel !== ".") {
-        await getFsSafeTestHooks()?.beforeArchiveOutputMutation?.("mkdir", path.dirname(params.outPath));
-        checkExtractionDeadline(params.deadline);
-        await ownExtractionDestinationMutation(params.deadline, async () => {
-            await assertOutputGuards();
-            checkExtractionDeadline(params.deadline);
-            await mkdirArchiveOutput({
-                targetRoot,
-                relativePath: parentRel,
-                originalPath: params.originalPath,
-            });
-            checkExtractionDeadline(params.deadline);
-            await assertDirectoryIdentityGuard(destinationGuard);
+            assertDirectoryIdentityGuard(destinationGuard);
             checkExtractionDeadline(params.deadline);
+            if (params.isDirectory) {
+                await assertResolvedInsideDestination({
+                    destinationRealDir: params.destinationRealDir,
+                    targetPath: params.outPath,
+                    originalPath: params.originalPath,
+                });
+                checkExtractionDeadline(params.deadline);
+            }
         });
     }
+    if (params.isDirectory)
+        return;
     await assertResolvedInsideDestination({
         destinationRealDir: params.destinationRealDir,
         targetPath: path.dirname(params.outPath),
@@ -292,12 +276,12 @@ export async function withStagedArchiveDestination(params) {
     const stagingGuard = await createDirectoryIdentityGuard(stagingDir);
     try {
         await fs.chmod(stagingDir, ARCHIVE_STAGING_MODE).catch(() => undefined);
-        await assertDirectoryIdentityGuard(stagingGuard);
+        assertDirectoryIdentityGuard(stagingGuard);
         return await params.run(stagingDir);
     }
     finally {
         try {
-            await assertDirectoryIdentityGuard(stagingGuard);
+            assertDirectoryIdentityGuard(stagingGuard);
             await fs.rm(stagingDir, { recursive: true, force: true }).catch(() => undefined);
         }
         catch {