@openclaw/signal 2026.11.3 → 2026.11.5-beta.2

package/dist/.setup/{probe-D_93QCe0.mjs → probe-Caq5Y4kA.mjs}

@@ -1,6 +1,6 @@
-import { o as __exportAll } from "./doctor-contract-api-BIdVW0PF.mjs";
-import { n as signalRpcRequest, t as signalCheck } from "./client-adapter-Chnbch_z.mjs";
-import { t as detectSignalTransport } from "./transport-detection-CmlgOybe.mjs";
+import { o as __exportAll } from "./doctor-contract-api-CcLwIhsD.mjs";
+import { C as signalCheck, w as signalRpcRequest } from "./channel-ByJj8fSh.mjs";
+import { t as detectSignalTransport } from "./transport-detection-DvR6X_UQ.mjs";
 import { normalizeOptionalString, normalizeTrimmedStringList } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { runChannelProbe } from "openclaw/plugin-sdk/text-utility-runtime";
 import { formatErrorMessage } from "openclaw/plugin-sdk/error-runtime";

package/dist/.setup/{send-CM7-016e.mjs → send-BJuOWLky.mjs}

@@ -1,10 +1,8 @@
-import { o as __exportAll } from "./doctor-contract-api-BIdVW0PF.mjs";
-import { i as resolveSignalAccount } from "./accounts-B0Pba1-q.mjs";
-import { n as normalizeSignalMessagingTarget } from "./normalize-D7kSomXt.mjs";
-import { S as markdownToSignalText, g as registerSignalReplyContext } from "./channel-CM-rLLPN.mjs";
-import { o as isSignalQuoteMetadataRejection } from "./client-Duwqbgqi.mjs";
-import { n as signalRpcRequest } from "./client-adapter-Chnbch_z.mjs";
-import { t as resolveSignalRpcContext } from "./rpc-context-BAXcX7dI.mjs";
+import { o as __exportAll } from "./doctor-contract-api-CcLwIhsD.mjs";
+import { i as resolveSignalAccount } from "./accounts-enJKL3ci.mjs";
+import { d as normalizeSignalMessagingTarget } from "./identity-vKtR3DrM.mjs";
+import { O as markdownToSignalText, S as resolveSignalRpcContext, g as registerSignalReplyContext, w as signalRpcRequest } from "./channel-ByJj8fSh.mjs";
+import { o as isSignalQuoteMetadataRejection } from "./client-CesmEjRc.mjs";
 import { createMessageReceiptFromOutboundResults } from "openclaw/plugin-sdk/channel-outbound";
 import { resolveMarkdownTableMode } from "openclaw/plugin-sdk/markdown-table-runtime";
 import { asPositiveSafeInteger, normalizeLowercaseStringOrEmpty, normalizeOptionalString } from "openclaw/plugin-sdk/string-coerce-runtime";
@@ -61,49 +59,6 @@ function buildTargetParams(target) {
 	if (target.type === "group") return { groupId: target.groupId };
 	return { username: [target.username] };
 }
-function createSignalSendReceipt(params) {
-	const messageId = params.messageId.trim();
-	const results = messageId && messageId !== "unknown" ? [{
-		channel: "signal",
-		messageId,
-		meta: {
-			targetType: params.target.type,
-			...params.replyToId ? {
-				replyToId: params.replyToId,
-				nativeReplyStatus: params.nativeReplyStatus ?? "sent"
-			} : {}
-		}
-	}] : [];
-	if (results[0]) {
-		if (params.timestamp != null) results[0].timestamp = params.timestamp;
-		if (params.target.type === "group") results[0].chatId = params.target.groupId;
-		else if (params.target.type === "recipient") results[0].toJid = params.target.recipient;
-		else results[0].toJid = params.target.username;
-	}
-	return createMessageReceiptFromOutboundResults({
-		results,
-		kind: params.kind,
-		...params.replyToId ? { replyToId: params.replyToId } : {}
-	});
-}
-function parseSignalReplyTimestamp(raw) {
-	const value = normalizeOptionalString(raw);
-	if (!value || !/^\d+$/.test(value)) return;
-	return asPositiveSafeInteger(Number(value));
-}
-function resolveSignalQuoteParams(opts) {
-	const timestamp = parseSignalReplyTimestamp(opts.replyToId);
-	const author = normalizeOptionalString(opts.replyToAuthor);
-	if (timestamp === void 0 || !author) return;
-	return {
-		replyToId: String(timestamp),
-		params: {
-			quoteTimestamp: timestamp,
-			quoteAuthor: author,
-			quoteMessage: opts.replyToBody ?? ""
-		}
-	};
-}
 async function sendMessageSignal(to, text, opts) {
 	const cfg = requireRuntimeConfig(opts.cfg, "Signal send");
 	const accountInfo = resolveSignalAccount({
@@ -114,16 +69,11 @@ async function sendMessageSignal(to, text, opts) {
 	const target = parseTarget(to);
 	const targetAuthor = normalizeOptionalString(account);
 	const targetAuthorUuid = normalizeOptionalString(accountInfo.config.accountUuid);
-	let message = text ?? "";
+	let message = text;
 	let outboundMedia;
 	let textStyles = [];
 	const textMode = opts.textMode ?? "markdown";
-	const maxBytes = (() => {
-		if (typeof opts.maxBytes === "number") return opts.maxBytes;
-		if (typeof accountInfo.config.mediaMaxMb === "number") return accountInfo.config.mediaMaxMb * 1024 * 1024;
-		if (typeof cfg.agents?.defaults?.mediaMaxMb === "number") return cfg.agents.defaults.mediaMaxMb * 1024 * 1024;
-		return 8388608;
-	})();
+	const maxBytes = opts.maxBytes ?? (accountInfo.config.mediaMaxMb ?? cfg.agents?.defaults?.mediaMaxMb ?? 8) * 1024 * 1024;
 	let attachments;
 	if (opts.mediaUrl?.trim()) {
 		const resolved = await resolveOutboundAttachmentFromUrl(opts.mediaUrl.trim(), maxBytes, {
@@ -156,7 +106,17 @@ async function sendMessageSignal(to, text, opts) {
 	if (account) params.account = account;
 	if (attachments && attachments.length > 0) params.attachments = attachments;
 	Object.assign(params, buildTargetParams(target));
-	const quote = resolveSignalQuoteParams(opts);
+	const rawReplyToId = normalizeOptionalString(opts.replyToId);
+	const quoteTimestamp = rawReplyToId && /^\d+$/.test(rawReplyToId) ? asPositiveSafeInteger(Number(rawReplyToId)) : void 0;
+	const quoteAuthor = normalizeOptionalString(opts.replyToAuthor);
+	const quote = quoteTimestamp !== void 0 && quoteAuthor ? {
+		replyToId: String(quoteTimestamp),
+		params: {
+			quoteTimestamp,
+			quoteAuthor,
+			quoteMessage: opts.replyToBody ?? ""
+		}
+	} : void 0;
 	const sendOpts = {
 		baseUrl,
 		timeoutMs: opts.timeoutMs,
@@ -190,18 +150,26 @@ async function sendMessageSignal(to, text, opts) {
 		media: outboundMedia ? [outboundMedia] : void 0,
 		sourceTimestamp: timestamp
 	});
+	const receiptMessageId = messageId.trim();
 	return {
 		messageId,
 		timestamp,
-		receipt: createSignalSendReceipt({
-			messageId,
-			target,
+		receipt: createMessageReceiptFromOutboundResults({
+			results: receiptMessageId && receiptMessageId !== "unknown" ? [{
+				channel: "signal",
+				messageId: receiptMessageId,
+				...timestamp != null ? { timestamp } : {},
+				...target.type === "group" ? { chatId: target.groupId } : { toJid: target.type === "recipient" ? target.recipient : target.username },
+				meta: {
+					targetType: target.type,
+					...quote ? {
+						replyToId: quote.replyToId,
+						nativeReplyStatus: nativeReplyStatus ?? "sent"
+					} : {}
+				}
+			}] : [],
 			kind: attachments && attachments.length > 0 ? "media" : "text",
-			...quote ? {
-				replyToId: quote.replyToId,
-				nativeReplyStatus
-			} : {},
-			...timestamp != null ? { timestamp } : {}
+			...quote ? { replyToId: quote.replyToId } : {}
 		})
 	};
 }

package/dist/.setup/{setup-surface-DvKLwYrl.mjs → setup-surface-DQ1yFZmY.mjs}

@@ -1,6 +1,6 @@
-import { i as resolveSignalAccount, n as listSignalAccountIds } from "./accounts-B0Pba1-q.mjs";
-import { d as signalNumberTextInput, l as signalCompletionNote, s as createSignalCliPathTextInput, u as signalDmPolicy } from "./channel-CM-rLLPN.mjs";
-import { r as installSignalCli } from "./install-signal-cli-hYVLYGXe.mjs";
+import { i as resolveSignalAccount, n as listSignalAccountIds } from "./accounts-enJKL3ci.mjs";
+import { d as signalNumberTextInput, l as signalCompletionNote, s as createSignalCliPathTextInput, u as signalDmPolicy } from "./channel-ByJj8fSh.mjs";
+import { n as installSignalCli } from "./install-signal-cli-DvLDZfpP.mjs";
 import { createDetectedBinaryStatus, createSetupTranslator, setSetupChannelEnabled } from "openclaw/plugin-sdk/setup";
 import { detectBinary } from "openclaw/plugin-sdk/setup-tools";
 //#region extensions/signal/src/setup-surface.ts

package/dist/.setup/{transport-detection-CmlgOybe.mjs → transport-detection-DvR6X_UQ.mjs}

@@ -1,12 +1,12 @@
-import { o as __exportAll } from "./doctor-contract-api-BIdVW0PF.mjs";
-import { a as normalizeSignalTransportUrl } from "./transport-url-CAC0JcuI.mjs";
+import { o as __exportAll } from "./doctor-contract-api-CcLwIhsD.mjs";
+import { s as normalizeSignalTransportUrl } from "./legacy-transport-D_cZC3bS.mjs";
 //#region extensions/signal/src/transport-detection.ts
 var transport_detection_exports = /* @__PURE__ */ __exportAll({ detectSignalTransport: () => detectSignalTransport });
 const DEFAULT_PROBE_TIMEOUT_MS = 1e4;
 async function detectSignalTransport(params) {
 	const url = normalizeSignalTransportUrl(params.url);
 	const timeoutMs = params.timeoutMs ?? DEFAULT_PROBE_TIMEOUT_MS;
-	const probes = params.probeNative && params.probeContainer ? void 0 : await import("./transport-probes.runtime-D-xIMRcn.mjs");
+	const probes = params.probeNative && params.probeContainer ? void 0 : await import("./transport-probes.runtime-CoH6UFtc.mjs");
 	const probeNative = params.probeNative ?? probes?.nativeCheck;
 	const probeContainer = params.probeContainer ?? probes?.containerCheck;
 	if (!probeNative || !probeContainer) throw new Error("Signal transport checks are unavailable");

package/dist/.setup/{transport-policy-B6C_LogW.mjs → transport-policy-zIR3lRUj.mjs}

@@ -1,4 +1,4 @@
-import { a as normalizeSignalTransportUrl } from "./transport-url-CAC0JcuI.mjs";
+import { s as normalizeSignalTransportUrl } from "./legacy-transport-D_cZC3bS.mjs";
 //#region extensions/signal/src/transport-policy.ts
 const DEFAULT_SIGNAL_MANAGED_NATIVE_PORT = 8080;
 const DEFAULT_SIGNAL_MANAGED_NATIVE_HOST = "127.0.0.1";

package/dist/.setup/transport-probes.runtime-CoH6UFtc.mjs

@@ -0,0 +1 @@
+export { s as containerCheck, n as nativeCheck } from "./client-CesmEjRc.mjs";

package/dist/.source-module-urls/b02c526df8b90083105b63e5b51d5c8bbfe02676df72f6be8dd8f825817b32b9.json

@@ -0,0 +1 @@
+{"version":3,"entries":[{"output":"api.js","source":"extensions/signal/api.ts"},{"output":"channel-config-api.js","source":"extensions/signal/channel-config-api.ts"},{"output":"channel-entry.js","source":"extensions/signal/channel-entry.ts"},{"output":"channel-plugin-api.js","source":"extensions/signal/channel-plugin-api.ts"},{"output":"contract-api.js","source":"extensions/signal/contract-api.ts"},{"output":"doctor-contract-api.js","source":"extensions/signal/doctor-contract-api.ts"},{"output":"index.js","source":"extensions/signal/index.ts"},{"output":"runtime-api.js","source":"extensions/signal/runtime-api.ts"},{"output":"secret-contract-api.js","source":"extensions/signal/secret-contract-api.ts"},{"output":"setup-entry.js","source":"extensions/signal/setup-entry.ts"}],"chunks":[{"output":".setup/accounts-enJKL3ci.mjs","sha256":"88c2d065d3093e5d29cbe6bfa1fc9b7df33b5454123a7b985f8f738d1234329a","facadeSource":null,"sources":["extensions/signal/src/accounts.ts"]},{"output":".setup/api-CrasQEKI.mjs","sha256":"fd4326f73ef2e98af1369fbb05f4ab82b649b49fdd2263d9575bf731e8ac3837","facadeSource":null,"sources":["extensions/signal/src/channel.setup.ts"]},{"output":".setup/api-DljZsfUn.mjs","sha256":"81a1a748efe99832d51a600fcb1deccaa9e745adb940cd01cd94f385bf535e2e","facadeSource":"extensions/signal/api.ts","sources":[]},{"output":".setup/approval-auth-B_5Ytx8K.mjs","sha256":"d828624f211bd0a249d8ce51167e467c0f31c5c40558a96cec41f2f1b8b65e4b","facadeSource":null,"sources":["extensions/signal/src/aliases.ts","extensions/signal/src/approval-auth.ts"]},{"output":".setup/approval-handler.runtime-0RbVmTxx.mjs","sha256":"ac14e5813201b439744fe7bd77a5b74678deb7107723d9b496d35e6b406f1e8a","facadeSource":"extensions/signal/src/approval-handler.runtime.ts","sources":["extensions/signal/src/approval-handler.runtime.ts"]},{"output":".setup/approval-reactions-CvqVSSx8.mjs","sha256":"cfd63850a1634e11eebabd17d8f753852c149b44adb6b7207c85aee6a9e2160e","facadeSource":null,"sources":["extensions/signal/src/approval-reactions.ts"]},{"output":".setup/channel-ByJj8fSh.mjs","sha256":"e8155da380d4aaf94a35a5c4de00a01da17f1cdf133406b18fbe9eb85df2c462","facadeSource":null,"sources":["extensions/signal/src/approval-native.ts","extensions/signal/src/channel.ts","extensions/signal/src/client-adapter.ts","extensions/signal/src/daemon-env.ts","extensions/signal/src/doctor.ts","extensions/signal/src/format.ts","extensions/signal/src/media-text.ts","extensions/signal/src/message-actions.ts","extensions/signal/src/outbound-session.ts","extensions/signal/src/presentation-fallback.ts","extensions/signal/src/reaction-level.ts","extensions/signal/src/reply-authors-state.ts","extensions/signal/src/reply-authors.ts","extensions/signal/src/rpc-context.ts","extensions/signal/src/send-reactions.ts","extensions/signal/src/setup-core.ts","extensions/signal/src/setup-transport.ts","extensions/signal/src/shared.ts"]},{"output":".setup/client-CesmEjRc.mjs","sha256":"96373cf58fadb4210e2a0d691926e83a769baee44dc25cb384085088c6e40bd9","facadeSource":null,"sources":["extensions/signal/src/client-container.ts","extensions/signal/src/client.ts","extensions/signal/src/quote-rejection.ts","extensions/signal/src/socket-path.ts"]},{"output":".setup/config-schema-BCmW0BLB.mjs","sha256":"9d1d54aff8ea37ea11104f8ad217009d1e08c067e37b2cb86de172eb71b9d560","facadeSource":null,"sources":["extensions/signal/src/config-schema.ts"]},{"output":".setup/doctor-contract-api-CcLwIhsD.mjs","sha256":"da87e080f6148ea3f1898779834d1ebe83a6941becf1a91c0f31cf1039c7359d","facadeSource":null,"sources":["extensions/signal/config-doctor-api.ts","extensions/signal/src/account-key-repair.ts","extensions/signal/src/config-compat.ts","packages/normalization-core/src/record-coerce.ts","src/config/channel-config-normalization.ts","src/plugin-sdk/legacy-webhook-listener-migration.ts"]},{"output":".setup/identity-vKtR3DrM.mjs","sha256":"b74cb347fb1f871e99a6817ff22f5aff9aae0bbab34425fda93a0f1c902bb72d","facadeSource":null,"sources":["extensions/signal/src/identity.ts","extensions/signal/src/normalize.ts","extensions/signal/src/uuid.ts"]},{"output":".setup/install-signal-cli-DvLDZfpP.mjs","sha256":"5d313e25788a11f02405510870be3a62a91cd673844a4352aff969a806ebf79e","facadeSource":null,"sources":["extensions/signal/src/install-signal-cli.ts"]},{"output":".setup/legacy-transport-D_cZC3bS.mjs","sha256":"e76b5f3a0602975ef5d7cd3d07ba1e823289078ca5ad1949331c2a4afe72f078","facadeSource":null,"sources":["extensions/signal/src/account-selection.ts","extensions/signal/src/legacy-transport.ts","extensions/signal/src/transport-url.ts"]},{"output":".setup/monitor-Cf5sihwl.mjs","sha256":"22f42112c9852edf4c2fe81ee5d2f1ff81d672976871faa5e592f217942511f1","facadeSource":null,"sources":["extensions/signal/src/daemon.ts","extensions/signal/src/monitor.ts","extensions/signal/src/monitor/access-policy.ts","extensions/signal/src/monitor/event-handler.control-lane.ts","extensions/signal/src/monitor/event-handler.ts","extensions/signal/src/monitor/inbound-context.ts","extensions/signal/src/monitor/mentions.ts","extensions/signal/src/monitor/reactions.ts","extensions/signal/src/native-reply.ts","extensions/signal/src/signal-ingress.ts","extensions/signal/src/sse-reconnect.ts"]},{"output":".setup/probe-Caq5Y4kA.mjs","sha256":"90af76a48bc8cf40b740910fd59b6754db5877f6f55efb3d198b5d95f5ea7988","facadeSource":null,"sources":["extensions/signal/src/probe.ts"]},{"output":".setup/runtime-8sxUF217.mjs","sha256":"b9d6d598e4dad4e9bc044e65bd855e67a07a283d543e9169a82e4d6ab2c03794","facadeSource":null,"sources":["extensions/signal/src/runtime.ts"]},{"output":".setup/send-BJuOWLky.mjs","sha256":"e6bc0863f63bacb446d5a49c55fb60e61972c2966f6ccbf3429d359c33e4e62c","facadeSource":null,"sources":["extensions/signal/src/send.ts"]},{"output":".setup/setup-surface-DQ1yFZmY.mjs","sha256":"3fc0930fc3c45d64a630cbba99c1ec4623c4799d42a9b872b04654a2117e1f04","facadeSource":"extensions/signal/src/setup-surface.ts","sources":["extensions/signal/src/setup-surface.ts"]},{"output":".setup/transport-detection-DvR6X_UQ.mjs","sha256":"284b97e5e7a78eaf14c258602dd47de205bc8138ca684e0df3a7da1d351c901f","facadeSource":null,"sources":["extensions/signal/src/transport-detection.ts"]},{"output":".setup/transport-policy-zIR3lRUj.mjs","sha256":"47e1ee186bb8a91dab5488df97c885fff2579b0ea74b0effcdfbf916869b9276","facadeSource":null,"sources":["extensions/signal/src/transport-policy.ts"]},{"output":".setup/transport-probes.runtime-CoH6UFtc.mjs","sha256":"aaa1a60900f23c50d3d5e6bb21c335fb0457e595fcde2f413949c1fa407af05a","facadeSource":"extensions/signal/src/transport-probes.runtime.ts","sources":[]},{"output":"api.js","sha256":"f3ca8fcfb69b75622a13bf326be478b12e0130195b0bb742a143bd7fa562328a","facadeSource":"extensions/signal/api.ts","sources":[]},{"output":"channel-config-api.js","sha256":"f981b812c6c39af1bfc2ca678f6486fa057ba4cb9a34c0e037e01ba96e37a122","facadeSource":"extensions/signal/channel-config-api.ts","sources":[]},{"output":"channel-entry.js","sha256":"0168747ca73aed666ba88aeaf867be2fa571aa581f39c8727e4e2a0daf6fcc55","facadeSource":"extensions/signal/channel-entry.ts","sources":["extensions/signal/channel-entry.ts"]},{"output":"channel-plugin-api.js","sha256":"e9e84b93622e7d320557395ac8a2dc28bb30c699f84e6353f5a53938a18a98ea","facadeSource":"extensions/signal/channel-plugin-api.ts","sources":[]},{"output":"contract-api.js","sha256":"a53a963b4828486edcf4256526740135245cd09bebd327fe2ed25f5044b2db61","facadeSource":"extensions/signal/contract-api.ts","sources":[]},{"output":"doctor-contract-api.js","sha256":"17a19c6b72174724617b0c5eb0a7204ac20cf68d644d3839bac835cdb70c2987","facadeSource":"extensions/signal/doctor-contract-api.ts","sources":[]},{"output":"index.js","sha256":"6bec25c4f06a6812637b9e63581877359f06595e39c683fe8447b8c2aa4cab42","facadeSource":"extensions/signal/index.ts","sources":["extensions/signal/index.ts"]},{"output":"runtime-api.js","sha256":"4165bbc9560754c2fb7980b535e9e4c5efa4ab169715242f27d492993074a82d","facadeSource":"extensions/signal/runtime-api.ts","sources":[]},{"output":"secret-contract-api.js","sha256":"4dbe6f638c54b4b19bc7e251990d9fed2e7c4c98e054402defe157405159569b","facadeSource":"extensions/signal/secret-contract-api.ts","sources":["extensions/signal/secret-contract-api.ts"]},{"output":"setup-entry.js","sha256":"f7ee4a2d55bed198fec605c72753a94f0e11ad5caf0d7e13b8cd67fe422b518b","facadeSource":"extensions/signal/setup-entry.ts","sources":["extensions/signal/setup-entry.ts"]}],"unrenderedSources":["extensions/signal/api.ts","extensions/signal/channel-config-api.ts","extensions/signal/channel-plugin-api.ts","extensions/signal/contract-api.ts","extensions/signal/doctor-contract-api.ts","extensions/signal/runtime-api.ts","extensions/signal/src/transport-probes.runtime.ts"]}

package/dist/api.js

@@ -1,12 +1,10 @@
-import { i as resolveSignalAccount, n as listSignalAccountIds, r as resolveDefaultSignalAccountId, t as listEnabledSignalAccounts } from "./.setup/accounts-B0Pba1-q.mjs";
-import { n as normalizeSignalMessagingTarget, t as looksLikeSignalTargetId } from "./.setup/normalize-D7kSomXt.mjs";
-import { a as normalizeSignalAllowRecipient, c as resolveSignalSender, i as isSignalSenderAllowed, l as looksLikeUuid, n as formatSignalSenderDisplay, o as resolveSignalPeerId, r as formatSignalSenderId, s as resolveSignalRecipient, t as formatSignalPairingIdLine } from "./.setup/identity-B3JyPqGO.mjs";
-import { C as markdownToSignalTextChunks, S as markdownToSignalText, b as resolveSignalReactionLevel, c as normalizeSignalAccountInput, h as writeSignalAccountTransport, m as probeSignalTransport, p as prepareSignalManagedNativeTransport, t as signalPlugin, v as resolveSignalOutboundTarget, y as signalMessageActions } from "./.setup/channel-CM-rLLPN.mjs";
-import { n as sendReactionSignal, t as removeReactionSignal } from "./.setup/reaction-runtime-api-mdO4k0yv.mjs";
-import { t as detectSignalTransport } from "./.setup/transport-detection-CmlgOybe.mjs";
-import { t as signalSetupPlugin } from "./.setup/api-CJBtD3lT.mjs";
-import { r as installSignalCli } from "./.setup/install-signal-cli-hYVLYGXe.mjs";
-import { t as monitorSignalProvider } from "./.setup/monitor-C6u1JV2C.mjs";
-import { n as sendReadReceiptSignal, r as sendTypingSignal, t as sendMessageSignal } from "./.setup/send-CM7-016e.mjs";
-import { t as probeSignal } from "./.setup/probe-D_93QCe0.mjs";
+import { i as resolveSignalAccount, n as listSignalAccountIds, r as resolveDefaultSignalAccountId, t as listEnabledSignalAccounts } from "./.setup/accounts-enJKL3ci.mjs";
+import { a as normalizeSignalAllowRecipient, c as resolveSignalSender, d as normalizeSignalMessagingTarget, i as isSignalSenderAllowed, l as looksLikeUuid, n as formatSignalSenderDisplay, o as resolveSignalPeerId, r as formatSignalSenderId, s as resolveSignalRecipient, t as formatSignalPairingIdLine, u as looksLikeSignalTargetId } from "./.setup/identity-vKtR3DrM.mjs";
+import { E as resolveSignalReactionLevel, O as markdownToSignalText, b as removeReactionSignal, c as normalizeSignalAccountInput, h as writeSignalAccountTransport, k as markdownToSignalTextChunks, m as probeSignalTransport, p as prepareSignalManagedNativeTransport, t as signalPlugin, v as resolveSignalOutboundTarget, x as sendReactionSignal, y as signalMessageActions } from "./.setup/channel-ByJj8fSh.mjs";
+import { t as detectSignalTransport } from "./.setup/transport-detection-DvR6X_UQ.mjs";
+import { t as signalSetupPlugin } from "./.setup/api-CrasQEKI.mjs";
+import { n as installSignalCli } from "./.setup/install-signal-cli-DvLDZfpP.mjs";
+import { t as monitorSignalProvider } from "./.setup/monitor-Cf5sihwl.mjs";
+import { n as sendReadReceiptSignal, r as sendTypingSignal, t as sendMessageSignal } from "./.setup/send-BJuOWLky.mjs";
+import { t as probeSignal } from "./.setup/probe-Caq5Y4kA.mjs";
 export { detectSignalTransport, formatSignalPairingIdLine, formatSignalSenderDisplay, formatSignalSenderId, installSignalCli, isSignalSenderAllowed, listEnabledSignalAccounts, listSignalAccountIds, looksLikeSignalTargetId, looksLikeUuid, markdownToSignalText, markdownToSignalTextChunks, monitorSignalProvider, normalizeSignalAccountInput, normalizeSignalAllowRecipient, normalizeSignalMessagingTarget, prepareSignalManagedNativeTransport, probeSignal, probeSignalTransport, removeReactionSignal, resolveDefaultSignalAccountId, resolveSignalAccount, resolveSignalOutboundTarget, resolveSignalPeerId, resolveSignalReactionLevel, resolveSignalRecipient, resolveSignalSender, sendMessageSignal, sendReactionSignal, sendReadReceiptSignal, sendTypingSignal, signalMessageActions, signalPlugin, signalSetupPlugin, writeSignalAccountTransport };

package/dist/channel-config-api.js

@@ -1,2 +1 @@
-import { t as SignalChannelConfigSchema } from "./.setup/config-schema-DvxZ18SD.mjs";
-export { SignalChannelConfigSchema };
+export { t as SignalChannelConfigSchema } from "./.setup/config-schema-BCmW0BLB.mjs";

package/dist/channel-plugin-api.js

@@ -1,2 +1 @@
-import { t as signalPlugin } from "./.setup/channel-CM-rLLPN.mjs";
-export { signalPlugin };
+export { t as signalPlugin } from "./.setup/channel-ByJj8fSh.mjs";

package/dist/contract-api.js

@@ -1,4 +1,3 @@
-import { n as normalizeSignalMessagingTarget, r as normalizeSignalReactionRecipient, t as looksLikeSignalTargetId } from "./.setup/normalize-D7kSomXt.mjs";
-import { i as isSignalSenderAllowed } from "./.setup/identity-B3JyPqGO.mjs";
-import { i as installSignalCliFromRelease, n as extractSignalCliArchive, r as installSignalCli, t as downloadToFile } from "./.setup/install-signal-cli-hYVLYGXe.mjs";
-export { downloadToFile, extractSignalCliArchive, installSignalCli, installSignalCliFromRelease, isSignalSenderAllowed, looksLikeSignalTargetId, normalizeSignalMessagingTarget, normalizeSignalReactionRecipient };
+import { d as normalizeSignalMessagingTarget, f as normalizeSignalReactionRecipient, i as isSignalSenderAllowed, u as looksLikeSignalTargetId } from "./.setup/identity-vKtR3DrM.mjs";
+import { n as installSignalCli, t as downloadToFile } from "./.setup/install-signal-cli-DvLDZfpP.mjs";
+export { downloadToFile, installSignalCli, isSignalSenderAllowed, looksLikeSignalTargetId, normalizeSignalMessagingTarget, normalizeSignalReactionRecipient };

package/dist/doctor-contract-api.js

@@ -1,2 +1 @@
-import { n as normalizeCompatibilityConfig, t as legacyConfigRules } from "./.setup/doctor-contract-api-BIdVW0PF.mjs";
-export { legacyConfigRules, normalizeCompatibilityConfig };
+export { t as legacyConfigRules, n as normalizeCompatibilityConfig } from "./.setup/doctor-contract-api-CcLwIhsD.mjs";

package/dist/runtime-api.js

@@ -1,2 +1 @@
-import { r as setSignalRuntime } from "./.setup/runtime-8sxUF217.mjs";
-export { setSignalRuntime };
+export { r as setSignalRuntime } from "./.setup/runtime-8sxUF217.mjs";

package/dist/setup-entry.js

@@ -4,7 +4,7 @@ import { fileURLToPath } from "node:url";
 var setup_entry_default = defineBundledChannelSetupEntry({
 	importMetaUrl: import.meta.url,
 	plugin: {
-		specifier: fileURLToPath(new URL(".setup/api-CbN3mye4.mjs", import.meta.url).href),
+		specifier: fileURLToPath(new URL(".setup/api-DljZsfUn.mjs", import.meta.url).href),
 		exportName: "signalSetupPlugin"
 	}
 });

package/node_modules/@openclaw/fs-safe/CHANGELOG.md

@@ -2,6 +2,100 @@
 
 ## Unreleased
 
+## 0.26.13 - 2026-10-24
+
+**Highlights:** Reliable file publication on NFS mounts.
+
+### Fixes
+
+- **Guest creation on NFS:** close the synced payload before publication so deferred unlink cannot report `ESTALE` after creating the destination. Thanks @bsteiner98 for [openclaw/fs-safe#1024](https://github.com/openclaw/fs-safe/issues/1024). ([#1033](https://github.com/openclaw/fs-safe/pull/1033))
+- **NFS publication:** retain the destination descriptor while settling staged creates, copies, and no-replace file publication, preventing open temporary names from causing false post-publication failures while retaining exact identity and link-count checks. Thanks @bsteiner98 for [openclaw/fs-safe#1024](https://github.com/openclaw/fs-safe/issues/1024). ([#1034](https://github.com/openclaw/fs-safe/pull/1034))
+
+## 0.26.12 - 2026-10-23
+
+**Highlights:** Keep durable native writes responsive by synchronizing staged files and publication directories asynchronously.
+
+### Fixes
+
+- **Async native writes:** synchronize staged files and publication directories asynchronously, retaining durability and descriptor ownership without blocking the JavaScript thread.
+
+## 0.26.11 - 2026-10-23
+
+### Highlights
+
+- **macOS root paths:** accept differently cased root paths on case-insensitive filesystems and return consistent on-disk spelling. ([#1022](https://github.com/openclaw/fs-safe/pull/1022), [#1025](https://github.com/openclaw/fs-safe/pull/1025))
+- **Windows volume-root ACLs:** expose verified local volume-root facts so consumers can distinguish ineffective DELETE-self grants from replaceable directory permissions. ([#1023](https://github.com/openclaw/fs-safe/pull/1023))
+
+### Fixes
+
+- **macOS guarded reads:** accept differently cased root paths on case-insensitive filesystems by binding native root spelling to the same directory identity. Thanks @0xtc23 for [openclaw#181107](https://github.com/openclaw/openclaw/issues/181107). ([#1022](https://github.com/openclaw/fs-safe/pull/1022))
+- **macOS realpath spelling:** `safeRealpathSync` returns the on-disk spelling on POSIX, so differently cased paths resolve to the same identity that guarded opens use instead of looking like root escapes. Thanks @obviyus. ([#1025](https://github.com/openclaw/fs-safe/pull/1025))
+- **Windows ACL facts:** identify OS-verified local volume roots so consumers can distinguish ineffective DELETE-self grants from replaceable directory permissions, while retaining all ACL rights and fail-closed unknown/remote results. Thanks @WG-Mojo for [openclaw#180892](https://github.com/openclaw/openclaw/issues/180892). ([#1023](https://github.com/openclaw/fs-safe/pull/1023))
+
+## 0.26.10 - 2026-10-21
+
+### Fixes
+
+- **Read-only filesystems:** include the failed path in native file, stage, and sidecar creation `EROFS` diagnostics, with operation and flags for beneath opens, while preserving existing error codes. Thanks @eliasbogordos for [openclaw#178322](https://github.com/openclaw/openclaw/issues/178322).
+
+### Packaging
+
+- **macOS addons:** Developer ID sign both architectures with the OpenClaw Foundation identity and hardened runtime, and require Apple notarization before packaging.
+
+## 0.26.9 - 2026-10-20
+
+**Highlights:** Recover macOS watchers when FSEvents streams are exhausted, improve watcher error handling, and verify published package completeness.
+
+### Fixes
+
+- **macOS watch:** fall back to guarded polling when FSEvents cannot create or start a stream during initial `auto` admission, including system-wide stream exhaustion. Explicit event and required-native modes still fail. Thanks @LGx0. ([#1005](https://github.com/openclaw/fs-safe/issues/1005))
+
+- **Watch errors:** consistently report `path-mismatch` if a Root disappears during identity revalidation, without adopting a replacement directory.
+
+- **Windows watch:** avoid spurious overflow notifications when an unrelated directory disappears during path validation, while retaining failures for persistent access errors and selected-path changes.
+
+### Packaging
+
+- **macOS addons:** ad-hoc sign both native architectures and verify their signatures before packaging, so x64 and ARM64 addons consistently pass strict code-signature checks.
+
+- **Package completeness:** verify literal relative runtime imports, module-relative worker URLs, and assets against the actual npm tarball during package checks and release collection, catching files omitted by the package allowlist. Thanks @vincentkoc. ([#1008](https://github.com/openclaw/fs-safe/pull/1008))
+
+## 0.26.8 - 2026-10-18
+
+### Highlights
+
+- **Watcher reconciliation:** measured Linux polling on a 20,313-directory tree uses about 10× less idle CPU and 29× fewer filesystem syscalls, with worst event-loop stall reduced from 151 ms to about 6 ms. ([#1002](https://github.com/openclaw/fs-safe/pull/1002))
+
+### Performance
+
+- **Watcher reconciliation:** reuse unchanged guarded watcher listings between full safety-net reconciliations, with guarded filesystem work in a shared Node worker thread, cheap per-entry metadata checks and full rescans on uncertainty. Ticks reconcile incrementally; full guarded reconciliation runs every five minutes by default, configurable with `fullReconcileIntervalMs`. Thanks @martinderm for [openclaw#174341](https://github.com/openclaw/openclaw/issues/174341). ([#1002](https://github.com/openclaw/fs-safe/pull/1002))
+
+## 0.26.7 - 2026-10-17
+
+### Highlights
+
+- **Windows idle watch CPU:** share native identity and physical-path queries while retaining directory checks. ([#1000](https://github.com/openclaw/fs-safe/pull/1000))
+- **Root containment:** preserve kernel parent semantics through nested and dangling symlink chains, and reject redirected sibling-output parents. ([#993](https://github.com/openclaw/fs-safe/pull/993))
+- **Legacy native policy migration:** removed Python-mode settings now fail with an actionable migration error when no explicit native policy is selected. ([#995](https://github.com/openclaw/fs-safe/pull/995))
+
+### Fixes
+
+- **Windows watch scan CPU:** share native identity and physical-path queries while retaining every listed entry's directory checks. Thanks @martinderm for reporting the idle Gateway CPU regression in [openclaw#174341](https://github.com/openclaw/openclaw/issues/174341). ([#1000](https://github.com/openclaw/fs-safe/pull/1000))
+- **ZIP integrity:** update the native ZIP decoder while preserving format-error and byte-limit classifications for entries that exceed their declared size. ([#997](https://github.com/openclaw/fs-safe/pull/997))
+- **Release dry runs:** keep generated unsigned package artifacts outside source-provenance checks so the final package smoke test can complete without signing or publishing. ([#996](https://github.com/openclaw/fs-safe/pull/996))
+- **Root containment:** resolve nested and dangling symlink chains with kernel parent semantics, and reject redirected sibling-output parents before invoking external writers. Thanks @yetval for [#987](https://github.com/openclaw/fs-safe/issues/987) and [#986](https://github.com/openclaw/fs-safe/issues/986). ([#993](https://github.com/openclaw/fs-safe/pull/993))
+- **Watch invalidations:** refresh the admitted parent after transient create/delete activity so consumer caches cannot retain a file absent from both watcher scans. ([#993](https://github.com/openclaw/fs-safe/pull/993))
+
+### Compatibility
+
+- **Legacy native policy migration:** reject removed `FS_SAFE_PYTHON_MODE` and `OPENCLAW_FS_SAFE_PYTHON_MODE` settings with an actionable migration error when no explicit native policy is selected, instead of silently changing `require` or `off` to `auto`. Set the corresponding native-mode variable to the same value before upgrading. ([#995](https://github.com/openclaw/fs-safe/pull/995))
+
+## 0.26.6 - 2026-10-15
+
+### Fixes
+
+- **Btrfs file cloning:** explicit `clone: "auto"` and `"always"` copies match NOCOW on their new empty destination so different source and destination-directory policies do not force a full byte copy. Sources and unrelated destination flags are preserved; automatic fallback recreates the destination with its ordinary inherited policy.
+
 ## 0.26.5 - 2026-10-14
 
 ### Highlights

package/node_modules/@openclaw/fs-safe/dist/copy-file-input.d.ts

@@ -19,5 +19,5 @@ export declare function assertCopySourceCurrent(source: {
     realPath: string;
 }, identity: BigIntStats): void;
 export declare function writeCopyFileToFd(fd: number, input: CopyFileInput, maxBytes?: number, assertBeforeMutation?: () => void): Promise<void>;
-export declare function createNativeCopyFile(native: NativeBinding, input: CopyFileInput, parentFd: number, basename: string, maxBytes: number | undefined): Promise<NativeFileCopyResult | undefined>;
+export declare function createNativeCopyFile(native: NativeBinding, input: CopyFileInput, parentFd: number, basename: string, maxBytes: number | undefined, targetPath: string): Promise<NativeFileCopyResult | undefined>;
 export declare function assertNativeCopyCompleted(input: CopyFileInput, copied?: NativeFileCopyResult): void;

package/node_modules/@openclaw/fs-safe/dist/copy-file-input.js

@@ -5,6 +5,7 @@ import { getNativeBinding, selectNativeBinding } from "./native.js";
 import { captureNativeFdClose } from "./native-binding.js";
 import { inspectFileIdentitySync } from "./strict-file-identity.js";
 import { transferFileHandle } from "./file-handle-transfer.js";
+import { annotateReadOnlyOpenError } from "./file-open-error.js";
 export function resolveFileCopyCloneMode(mode) {
     const clone = resolveCopyCloneMode(mode, "never");
     if (clone === "always" && !getNativeBinding()?.copyFileExclusive) {
@@ -27,7 +28,7 @@ export async function writeCopyFileToFd(fd, input, maxBytes, assertBeforeMutatio
         maxBytes, sizeHint: input.size, signal: input.signal, assertBeforeMutation,
     });
 }
-export async function createNativeCopyFile(native, input, parentFd, basename, maxBytes) {
+export async function createNativeCopyFile(native, input, parentFd, basename, maxBytes, targetPath) {
     input.signal?.throwIfAborted();
     const copier = selectNativeBinding(native, "copyFileExclusive");
     if (!copier) {
@@ -43,6 +44,7 @@ export async function createNativeCopyFile(native, input, parentFd, basename, ma
         return await copier.copyFileExclusive(input.handle.fd, parentFd, basename, input.clone, maxBytes !== undefined && Number.isFinite(maxBytes) ? maxBytes : undefined, nativeSignal);
     }
     catch (error) {
+        annotateReadOnlyOpenError(error, targetPath);
         const code = error?.code;
         if (code === "Cancelled" || code === "ABORT_ERR")
             input.signal?.throwIfAborted();

package/node_modules/@openclaw/fs-safe/dist/copy-path-admission.js

@@ -10,7 +10,7 @@ function admitUncachedCopyPath(input, create = false, admittedRoot) {
     if (!path.isAbsolute(input.rootPath) || !path.isAbsolute(input.absolutePath)) {
         throw new FsSafeError("invalid-path", "copy roots and paths must be absolute");
     }
-    const root = admittedRoot ?? captureDirectoryGuard(realpathSync(input.rootPath), "native", { bigint: true });
+    const root = admittedRoot ?? captureDirectoryGuard(realpathSync.native(input.rootPath), "native", { bigint: true });
     // Canonical POSIX callers already own a freshly checked root. Keep the
     // resolver's lexical/symlink walk, but do not rediscover that root each time.
     const rootCanonicalPath = admittedRoot?.realPath;
@@ -75,7 +75,7 @@ export function createCopyPathAdmissionCache() {
         }
         let root = roots.get(input.rootPath);
         if (!root) {
-            const canonical = realpathSync(input.rootPath);
+            const canonical = realpathSync.native(input.rootPath);
             if (canonical !== input.rootPath)
                 return admitUncachedCopyPath(input, create);
             root = captureDirectoryGuard(canonical, "native", { bigint: true });

package/node_modules/@openclaw/fs-safe/dist/copy-root-file-sync.js

@@ -10,6 +10,7 @@ import { creationAdmissionFromParent, removeRecordedCreationFileSync } from "./c
 import { FsSafeError } from "./errors.js";
 import { assertExclusiveCreateLeaf } from "./exclusive-create.js";
 import { copyFileDescriptorSync } from "./file-handle-transfer.js";
+import { annotateReadOnlyOpenError } from "./file-open-error.js";
 import { captureNativeFdClose } from "./native-binding.js";
 import { getNativeBinding } from "./native.js";
 import { openRootFileSync } from "./root-file.js";
@@ -114,7 +115,13 @@ function copyRootFileWithAdmissionSync(options, cache) {
             parentOpen = true;
             inspectFileIdentitySync(() => fs.fstatSync(parent.fd, { bigint: true }), { dev: BigInt(target.parent.stat.dev), ino: BigInt(target.parent.stat.ino) });
             target.assertCurrent();
-            copied = nativeCopy(opened.fd, parent.fd, path.basename(target.path), clone, maxBytes !== undefined && Number.isFinite(maxBytes) ? maxBytes : undefined);
+            try {
+                copied = nativeCopy(opened.fd, parent.fd, path.basename(target.path), clone, maxBytes !== undefined && Number.isFinite(maxBytes) ? maxBytes : undefined);
+            }
+            catch (error) {
+                annotateReadOnlyOpenError(error, target.path);
+                throw error;
+            }
             targetOwner = ownFileDescriptorSync(copied.fd, closeNative);
         }
         else {

package/node_modules/@openclaw/fs-safe/dist/file-open-error.d.ts

@@ -0,0 +1,2 @@
+/** Enrich only an attempted open whose absolute pathname is known by its owner. */
+export declare function annotateReadOnlyOpenError(error: unknown, filePath: string): void;

package/node_modules/@openclaw/fs-safe/dist/file-open-error.js

@@ -0,0 +1,14 @@
+import { formatErrorDetail } from "./error-detail.js";
+/** Enrich only an attempted open whose absolute pathname is known by its owner. */
+export function annotateReadOnlyOpenError(error, filePath) {
+    if (!(error instanceof Error) || error.code !== "EROFS")
+        return;
+    // Keep the original error, code and errno, even if a caller froze its diagnostics.
+    try {
+        const failure = error;
+        failure.path = filePath;
+        failure.syscall = "open";
+        failure.message = `EROFS: read-only filesystem, open '${formatErrorDetail(filePath)}'`;
+    }
+    catch { /* Diagnostics must not replace the I/O failure. */ }
+}

package/node_modules/@openclaw/fs-safe/dist/file-sync.d.ts

@@ -1,4 +1,5 @@
 import fs from "node:fs";
 import type { FileHandle } from "node:fs/promises";
-export declare function syncFileBestEffort(handle: Pick<FileHandle, "sync">): Promise<void>;
+export declare function syncFile(handle: Pick<FileHandle, "sync"> | number): Promise<void>;
+export declare function syncFileBestEffort(handle: Pick<FileHandle, "sync"> | number): Promise<void>;
 export declare function syncFileBestEffortSync(fd: number, fsModule?: Pick<typeof fs, "fsyncSync">): void;

package/node_modules/@openclaw/fs-safe/dist/file-sync.js

@@ -1,7 +1,12 @@
 import fs from "node:fs";
+export function syncFile(handle) {
+    return typeof handle === "number"
+        ? new Promise((resolve, reject) => fs.fsync(handle, error => error ? reject(error) : resolve()))
+        : handle.sync();
+}
 export async function syncFileBestEffort(handle) {
     try {
-        await handle.sync();
+        await syncFile(handle);
     }
     catch (error) {
         if (error?.code !== "EPERM")

package/node_modules/@openclaw/fs-safe/dist/guest-native-python.js

@@ -138,6 +138,9 @@ export const GUEST_FILESYSTEM_CREATE_EXCLUSIVE_PYTHON = [
     "            write_all(temp_fd, chunk)",
     "        # exclusive create payload is durable before publication",
     "        os.fsync(temp_fd)",
+    "        # NFS defers unlink of an open payload, retaining a second link.",
+    "        closing_fd, temp_fd = temp_fd, None",
+    "        os.close(closing_fd)",
     "        # Publish with no-replace rename or the checked file fallback.",
     "        rename_no_replace(staging_fd, temp_name, parent_fd, basename)",
     "        target_stat = os.lstat(basename, dir_fd=parent_fd)",

package/node_modules/@openclaw/fs-safe/dist/native-binding.d.ts

@@ -113,6 +113,7 @@ export interface NativeWindowsSecurityFacts {
     fallbackRequired: boolean;
     daclPresent: boolean;
     isLocal: boolean;
+    isVolumeRoot?: boolean;
     aceListComplete: boolean;
     unsupportedAceTypes: number[];
     aces: NativeWindowsAccessControlEntry[];

package/node_modules/@openclaw/fs-safe/dist/native-config.js

@@ -18,12 +18,23 @@ function parseMode(value) {
 export function configureFsSafeNative(config) {
     overrideConfig = { ...overrideConfig, ...config };
 }
+function rejectLegacyMode() {
+    for (const source of ["FS_SAFE_PYTHON_MODE", "OPENCLAW_FS_SAFE_PYTHON_MODE"]) {
+        if (process.env[source] === undefined)
+            continue;
+        const mode = parseMode(process.env[source]) ?? "auto";
+        throw new Error(`${source} has been removed. Set FS_SAFE_NATIVE_MODE=${mode} or ` +
+            `configureFsSafeNative({ mode: "${mode}" }) before using fs-safe, then remove ${source}. ` +
+            "Legacy mode settings no longer select native policy.");
+    }
+    return "auto";
+}
 export function getFsSafeNativeConfig() {
     return {
         mode: overrideConfig.mode ??
             parseMode(process.env.FS_SAFE_NATIVE_MODE) ??
             parseMode(process.env.OPENCLAW_FS_SAFE_NATIVE_MODE) ??
-            "auto",
+            rejectLegacyMode(),
     };
 }
 /** Internal provenance; keep the public configuration shape unchanged. */
@@ -35,13 +46,13 @@ export function getNativeModeSetting() {
         if (mode !== undefined)
             return { mode, source };
     }
-    return { mode: "auto", source: "default" };
+    return { mode: rejectLegacyMode(), source: "default" };
 }
 export function isFsSafeNativeRequired() {
     return (overrideConfig.mode ??
         parseMode(process.env.FS_SAFE_NATIVE_MODE) ??
         parseMode(process.env.OPENCLAW_FS_SAFE_NATIVE_MODE) ??
-        "auto") === "require";
+        rejectLegacyMode()) === "require";
 }
 export function __resetFsSafeNativeConfigForTest() {
     overrideConfig = {};

package/node_modules/@openclaw/fs-safe/dist/native-operations.js

@@ -3,6 +3,7 @@ import path from "node:path";
 import { sameFileIdentityForCleanup } from "./file-identity.js";
 import { getNativeBinding } from "./native.js";
 import { captureNativeFdClose } from "./native-binding.js";
+import { annotateReadOnlyOpenError } from "./file-open-error.js";
 export function nativeOpenFlags(flags) {
     const closeOnExec = fsSync.constants.O_CLOEXEC;
     return (flags |
@@ -55,6 +56,7 @@ export async function createNativeExclusiveFile(targetPath, mode) {
             if (process.platform === "win32" && openError.code === "EPERM") {
                 openError.path = targetPath;
             }
+            annotateReadOnlyOpenError(error, targetPath);
             throw error;
         }
         fd = opened.fd;